LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 08-15-2003, 02:18 AM   #1
Sutekh
Member
 
Registered: Apr 2002
Location: Melbourne, Australia
Distribution: Gentoo
Posts: 273

Rep: Reputation: 30
courier-imap + ldap + samba


G'day,

I am having some trouble or at least I am about to have some trouble and I am really looking for some advice rather than an answer as such.

I run a Gentoo box as our PDC with samba authenticating against LDAP. This works like a treat.

I have another box, soon to be decommissioned that is running qmail with courier-imap.

I have installed courier imap on the Gentoo box and it is all set to go authenticating against LDAP, but I have not managed to get the LDAP part working yet.

Ideally I want courier only to do authentification against the details already stored in LDAP (so that there NT password becomes there imap password)

I have no interest at this stage in virtual mailboxes or anything like that every user has a real username, home directory, etc. so all I want to do is authenticate.

I have tried to follow the postfix-courier-ldap howto but can't seem to get this to work with the existing auth data already in LDAP.

If anyone out there has a similar setup (the MTA is not important it is only imap and samba I need to get working together at this stage) I would love to hear how you did it.

ALternatively if there is some other better way of having common passwords then let me know, that is after all wahat I am trying to achieve.

Thanks in advance....
 
Old 08-15-2003, 01:30 PM   #2
david_ross
Moderator
 
Registered: Mar 2003
Location: Scotland
Distribution: Slackware, RedHat, Debian
Posts: 12,047

Rep: Reputation: 79
I got this working too except they pulled the plug on the e-mail side

You need to use the userPassword field for courier and also setup the account as a courier imap account objectClass. I even got it going with qmail authenticating and verifying users from ldap.

I have some links at work I'll post them on Monday if you are still having problems.
 
Old 08-18-2003, 01:10 AM   #3
Sutekh
Member
 
Registered: Apr 2002
Location: Melbourne, Australia
Distribution: Gentoo
Posts: 273

Original Poster
Rep: Reputation: 30
thanks for the reply,

so I don't have a userPassword attribute but I can easily add that, however I assume that the courier imap account abjectClass you are refering to is in a custom schema, it is not in any schema that I have.

I am new to ldap so maybe I am mis-understanding but as I understand it the objectClass's are defined in the schema's and presently I have the samba schema along with the the standard set that are included with openldap.

I noted on the ldap+postfix+courier-imap howto that their setup included a qmail.schema which I don't have but looking at references to this it does not possess a userPassword attribute and the only objectClass it specifies is qmailUser.

So I assume you have a schema that I don't and I would love to get my hands on that :-)

The other part of the equation that you can probably help me with is the actual management of these passwords. How do I use the existing lmpassword or ntpassword that lives in the ldap directory currently. Do I need to use a password tool that builds on the smbpasswd prog that I currently use to fill in a new userPassword field?

Most of the docs I have seen so far seem to refer to having a seperate set of leaves for the courier info but does that mean that the same password cannot be used for in each case. Or am I missing the point.

This is my first foray into ldap so any help you can provide is much appreciated.

Thanks again

Rich
 
Old 08-18-2003, 12:27 PM   #4
david_ross
Moderator
 
Registered: Mar 2003
Location: Scotland
Distribution: Slackware, RedHat, Debian
Posts: 12,047

Rep: Reputation: 79
Sorry I forgot the links but will post them tomorrow. You will need the courier schema and the qmail schema if you intend to use both bits of software.
 
Old 08-18-2003, 07:20 PM   #5
Sutekh
Member
 
Registered: Apr 2002
Location: Melbourne, Australia
Distribution: Gentoo
Posts: 273

Original Poster
Rep: Reputation: 30
no probs, thanks for the help

not fussed about the qmail part at this stage (no auth on smtp anyway so not an issue presently)

I had looked for a courier schema in the courier souce (stupidly by looking for courier rather than schema) which I have now found and copied a file called authldap.schema but am at a bit of a loss when it comes to populating these new fields.

Do i need to modify smbpasswd?

or am i better using a different method altogether, the ultimate aim is to provide the ability for the user to manage there own password. Haven't got that far.
 
Old 11-30-2004, 11:17 PM   #6
naiknb
LQ Newbie
 
Registered: Nov 2004
Posts: 1

Rep: Reputation: 0
a simple solution to this is instead of using NT password change your samba settings to authenticate unix users. convert all accounts to posixaccounts.

change your sysauth file to authenticate to ldap by this any services on your that linux box can authenticate to ldap
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
posfix with courier maildrop and courier-imap Anuragn Linux - Enterprise 4 01-17-2007 04:33 AM
qmail-ldap + courier-imap woes (imap capability) syahid Linux - General 1 10-12-2005 12:03 AM
LDAP and Courier-IMAP issues coolamit78 Linux - Networking 1 03-16-2005 01:48 PM
Using Perdition 1.13-2 with Postfix/LDAP/Courier IMAP topcat Linux - General 1 07-05-2004 02:44 AM
LDAP courier IMAP SquirrelMail Exim adamfowler Linux - Software 0 04-28-2004 07:31 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 01:45 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration