Re: Qmail-ldap + dovecot

Hi, I am running dovecot2 under FreeBSD, I had some issues with users
that create imap mailboxes with dots, at the end I solve this with a
namespace and plugging listescape, here my final configuration, hoping
it can help

file /usr/local/etc/dovecot/dovecot.conf
--
base_dir = /var/run/dovecot/

first_valid_uid = 200
last_valid_uid = 200
first_valid_gid = 200
last_valid_gid = 200
mail_uid = 200
mail_gid = 200

syslog_facility = local1
log_path = /var/log/maillog
log_timestamp = %Y-%m-%d %H:%M:%S
debug_log_path = /var/log/dovecot.debug
mail_debug = no
#auth_verbose = yes
#auth_debug = yes
#mail_debug = yes

login_greeting = INBOX.IM

mail_location = maildir:~/Maildir
maildir_very_dirty_syncs = yes
maildir_copy_with_hardlinks = yes
maildir_stat_dirs = no

userdb {
  args = /usr/local/etc/dovecot/dovecot-ldap.conf
  driver = ldap
}

passdb {
  args = /usr/local/etc/dovecot/dovecot-ldap.conf
  driver = ldap
}

protocols = imap pop3

service imap-login {
  service_count = 1
  chroot = login
  inet_listener imap {
    address = *
    port = 143
  }
  inet_listener imaps {
    address = *
    port = 993
    ssl = yes
  }
}

service pop3-login {
  service_count = 1
  chroot = login
  inet_listener pop3 {
    address = *
    port = 110
  }
  inet_listener pop3s {
    address = *
    port = 995
    ssl = yes
  }
}

ssl_cert = </usr/local/etc/dovecot/mail_inbox_im.pem
ssl_key = </usr/local/etc/dovecot/mail_inbox_im.key

disable_plaintext_auth = no
#auth_verbose = yes

plugin {
  quota = maildir:User quota
}

protocol imap {
  mail_plugins = quota imap_quota listescape
}

protocol pop3 {
  mail_plugins = quota
}

namespace {
  inbox = yes
  list = yes
  prefix =
  separator = /
  hidden = no
  subscriptions = yes
  type = private
}
--

file /usr/local/etc/dovecot/dovecot-ldap.conf

--
hosts = 192.168.1.2:389

auth_bind = no
dn = cn=dovecot,dc=inbox,dc=im
dnpass = xxxxxxx

base = ou=vusers,dc=inbox,dc=im

ldap_version = 3

deref = never

# mailMessageStore = domain/user
# storate : Quota limit in kilobytes
# bytes : Quota limit in bytes
user_attrs = mailMessageStore=home=/home/qmail/maildirs/%$,qmailUID=uid,qmailGID=gid,mailQuotaSize=quota=maildir:bytes
user_filter = (&(objectClass=qmailUser)(uid=%u)(accountStatus=active))

pass_attrs = mail=user,userPassword=password
pass_filter = (&(objectClass=qmailUser)(uid=%u))
--

Now if you want to give an extra to qmail-ldap (nothing related to
dovecot) but you can help to test, consider also installing this
patch: (smtpauthuser + SRS)

http://code.google.com/p/qmail-ldap-smtpauthuser/wiki/SETUP?tm=6

regards.



2011/8/30 Nickitas <[email protected]>:
> Hi ,
>
>  This configuration seems to work for me .
>
>  Thanx a lot :)
>
>
> On 08/26/2011 04:54 PM, [email protected] wrote:
>>
>> Hi
>>
>> here is my working config.
>> The key part is passdb.
>>
>> # 2.0.13: /usr/local/etc/dovecot/dovecot.conf
>> # OS: Linux 2.6.32-71.el6.x86_64 x86_64 CentOS Linux release 6.0 (Final)
>> auth_debug = yes
>> auth_verbose = yes
>> base_dir = /var/run/dovecot
>> disable_plaintext_auth = no
>> first_valid_gid = 500
>> last_valid_gid = 65000
>> last_valid_uid = 65000
>> listen = *
>> log_path = /var/log/dovecot
>> mail_debug = yes
>> mail_location = maildir:~/Maildir
>> passdb {
>>    args = /var/qmail/bin/auth_dovecot ./Maildir/
>>    driver = checkpassword
>> }
>> plugin {
>>    mail_log_events = delete undelete expunge copy mailbox_delete
>> mailbox_rename
>>    mail_log_fields = uid box msgid from subject
>>    mail_log_group_events =
>>    mechanisms = plain login
>>    quota = maildir
>>    quota_rule = *:storage=10240000
>>    quota_rule2 = Trash:storage=1024000
>>    quota_rule3 = SPAM:ignore
>>    trash = /usr/local/etc/dovecot/dovecot-trash.conf
>> }
>> protocols = imap pop3
>> service imap-login {
>>    inet_listener imaps {
>>      port = 993
>>      ssl = yes
>>    }
>>    process_min_avail = 1
>> }
>> service pop3-login {
>>    inet_listener pop3s {
>>      port = 995
>>      ssl = yes
>>    }
>>    process_min_avail = 1
>> }
>> ssl_cert =</etc/ssl/certs/mailcertificate.pem
>> ssl_cipher_list = ALL
>> ssl_key =</etc/ssl/private/mailcertificate.pem
>> userdb {
>>    driver = prefetch
>> }
>> verbose_proctitle = yes
>> verbose_ssl = yes
>> protocol imap {
>>    mail_plugins = quota mail_log notify imap_quota
>>    ssl_cert =</etc/ssl/certs/mailcertificate.pem
>>    ssl_key =</etc/ssl/private/mailcertificate.pem
>> }
>> protocol pop3 {
>>    mail_plugins = quota mail_log notify
>>    ssl_cert =</etc/ssl/certs/mailcertificate.pem
>>    ssl_key =</etc/ssl/private/mailcertificate.pem
>> }
>>
>> -sent via mobile device
>>
>> -- orijinal mesaj --
>> Konu: Re: Qmail-ldap + dovecot
>> Kimden: Nickitas<[email protected]>
>> Tarih: 26.08.2011 15:19
>>
>> Thank you Russel , I am definitely  gonna try it when I get the chance
>> cause your setup is almost identical to ours :)
>>
>> On 08/26/2011 02:47 PM, Russell Simpkins wrote:
>>>
>>> On 8/26/11 7:12 AM, Nickitas wrote:
>>>>
>>>> Thanx all for the answers :)
>>>>
>>>>  I added strsalloc.o at both sections in Makefile and it worked ok
>>>> (for the compilation) . I keep getting an error 111 though using this
>>>> method (test pop connection) ..
>>>>
>>>>  I ve also tried the Felipe's implementation , but I can't pass the
>>>> authentication , think there is something that has to do with ldap
>>>> config , will look more in this later ..
>>>>
>>>> Thank you again :)
>>>
>>> I too use dovecot for imap and simply configure dovecot to auth
>>> against the ldap server. I do not use the patch you listed, I use
>>> stock qmail-1.0.3 with qmail-ldap-1.03-20060201.patch. I use a similar
>>> method to Felipe, configuring dovecot to auth directly against LDAP
>>> and configuring qmail to use auth_smtp. If you can login using qmail,
>>> then there's no reason you shouldn't be able to log in with dovecot,
>>> it may just be a case of making sure you have the correct password
>>> scheme configured for dovecot.
>>>
>>> ## dovecot.conf
>>> protocols = imap imaps
>>> syslog_facility = mail
>>> ssl_cert_file = /etc/httpd/conf/certs/mail.crt
>>> ssl_key_file = /etc/httpd/conf/keys/mail.key
>>> mail_location = maildir:%h
>>> namespace private {
>>>   prefix = INBOX.
>>>   inbox = yes
>>> }
>>> mail_debug = yes
>>> maildir_copy_with_hardlinks = yes
>>> protocol imap {
>>> }
>>> protocol pop3 {
>>> }
>>> protocol lda {
>>>   postmaster_address = [email protected]
>>> }
>>> auth_verbose = yes
>>> auth default {
>>>   mechanisms = plain
>>>   passdb ldap {
>>>     args = /etc/dovecot-ldap.conf
>>>   }
>>>   userdb ldap {
>>>     args = /etc/dovecot-ldap.conf
>>>   }
>>> }
>>> dict {
>>> }
>>> plugin {
>>> }
>>>
>>> ## dovecot-ldap conf
>>>
>>> hosts =YOUR_LDAP_SERVER_IP:389
>>> dn=cn=Manager,dc=cttechhosting,dc=net
>>> auth_bind = yes
>>> # this should match up to how you did your ldap accounts
>>> auth_bind_userdn = uid=%u,ou=accounts,dc=cttechhosting,dc=net
>>> ldap_version=3
>>> base = ou=accounts,dc=cttechhosting,dc=net
>>> # tell dovecot what fields to use
>>> user_attrs =
>>> mailMessageStore=home,qmailUID=uid,qmailGID=gid,mailMessageStore=mail
>>> user_filter = (&(objectClass=qmailUser)(uid=%u))
>>> pass_attrs = mail=user,userPassword=password
>>> pass_filter = (&(objectClass=qmailUser)(uid=%u))
>>> default_pass_scheme = LDAP-SHA
>>>
>>>
>>>
>>
>>
>>
>
>