Re: Cyrus + LDAP + SASLauth problem. Rewrite login?

From: Georg Gell (no email)
Date: Thu Oct 06 2005 - 06:30:39 EDT

  • Next message: (no name): "Can I use hashed password for ldap_bind_pw in saslauthd.conf?"

    David Manchado schrieb:
    > Hello Georg,
    >
    > what I've found regarding this issue is:
    >
    >> dn: cn=defaultrecipient, dc=fake, dc=dom
    >> objectclass: top
    >> objectclass: virtualaccount
    >> cn: defaultrecipient
    >> owner: uid=root, dc=someserver, dc=isp, dc=dom
    >>1 -> mailacceptinggeneralid: fake.dom
    >>2 -> mailacceptinggeneralid: @fake.dom
    >>3 -> maildrop:
    >
    > But you must associate the address to one from a domain listed in my domain
    > (in the example real.dom).
    >
    > As I thought it seems cyrus only delegates in saslauthd the auth (logical
    > anyway) and not the way to change the user login.
    >
    > Let's try to solve the problem in postfix.
    >
    > Regards,
    >
    > El Jueves 6 Octubre 2005 08:54, Georg Gell escribió:
    >
    >>David schrieb:
    >>
    >>>Hello,
    >>>
    >>>I would like to 'rewrite' or associate the mailbox with
    >>>user dot domain dot com at localhost dot
    >>>
    >>>Due to postfix limitations, it can only accept mail for domain listed in
    >>>mydomains (localhost for example). The problem is adding a domain to
    >>>mydomains list implies a reload of postfix and the decrease of
    >>>performance, besides the procedure is not as simple as creating the
    >>>accounts in LDAP, I need to access to smtp servers.
    >>>
    >>>With a maildrop configuration like ->
    >>>user dot domain dot com at localhost I would workaround this problem in
    >>>postfix-side, but then I have the problem with the user login of the
    >>>customers that should be user.domain.com (with virtdomains adding
    >>>@localhost) but should be desiderable to use login due to
    >>>current configuration in qmail/qpopper server that we need to integrate.
    >>>
    >>>Thanks in advance, regards
    >>
    >>postfix can use ldap lookups for virtual domains,
    >>http://www.postfix.org/LDAP_README.html. No need to restart postfix.
    >

    Hello David,

    I spent some time with this problem, because I needed to integrate
    open-xchange on my sql lookup table driven mail server - and ox uses ldap.

    first read this:
    http://www.postfix.org/VIRTUAL_README.html#in_virtual_other
    AFAIK that's what you want to do

    use virtual_mailbox_domains for ldap domain lookup, not mydomains. I
    don't know how to do that because I have no real clue how to get the
    domains out of your ldap server.

    for virtual_mailbox_maps the ldap lookup has to return any value for all
    existing email addresses, so postfix excepts mail for this address.

    virtual_alias_maps let's you create alias addresses

    IIRC I had to change the cyrus line in /etc/postfix/master.cf to
    cyrus unix - n n - - pipe
      user=cyrus argv=/usr/lib/cyrus/deliver -e -r ${sender} ${recipient}

    and I use
    virtual_transport = cyrus

    regards
    Georg

    ----
    Cyrus Home Page: http://asg.web.cmu.edu/cyrus
    Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
    List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
    

  • Next message: (no name): "Can I use hashed password for ldap_bind_pw in saslauthd.conf?"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD