<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
p
{mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:1042556407;
mso-list-type:hybrid;
mso-list-template-ids:1053973914 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-text:"%1\)";
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=blue>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Hello,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>First of all a couple of questions:<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:36.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1'><![if !supportLists]><font
size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:navy'><span style='mso-list:Ignore'>1)<font size=1 face="Times New Roman"><span
style='font:7.0pt "Times New Roman"'> </span></font></span></span></font><![endif]><font
size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:navy'>Are you planning to manage multiple domains’ mail, or just
the domain.com mail?<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:36.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1'><![if !supportLists]><font
size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:navy'><span style='mso-list:Ignore'>2)<font size=1 face="Times New Roman"><span
style='font:7.0pt "Times New Roman"'> </span></font></span></span></font><![endif]><font
size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:navy'>Can you post the contents of the canonical.cf file that postfix
uses for canonical mapping?<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:36.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1'><![if !supportLists]><font
size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:navy'><span style='mso-list:Ignore'>3)<font size=1 face="Times New Roman"><span
style='font:7.0pt "Times New Roman"'> </span></font></span></span></font><![endif]><font
size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:navy'>Why would you want SASL to talk to PAM for PAM to talk to LDAP? Why
not do the whole thing in 1 go?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>I belief, you told imapd to use the PLAIN
mechanism… AFAIK PLAIN is not equal to PAM in terms of mechanism… OK,
PAM method, I could understand, but then again, that raises question 3.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Can you bind to the LDAP server with the
uid 12345? Can you bind to LDAP with user.12345@domain.com?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Without answers, it would be difficult to
help (for me).<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Regards,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Guus<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
info-cyrus-bounces@lists.andrew.cmu.edu
[mailto:info-cyrus-bounces@lists.andrew.cmu.edu] <b><span style='font-weight:
bold'>On Behalf Of </span></b>Jose Morelli Neto<br>
<b><span style='font-weight:bold'>Sent:</span></b> 08 January 2007 12:07<br>
<b><span style='font-weight:bold'>To:</span></b>
info-cyrus@lists.andrew.cmu.edu<br>
<b><span style='font-weight:bold'>Subject:</span></b> Authentication in LDAP
with different UID</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Hello,<br>
<br>
I am updating the mail server at my work and in this process I decided to
change the Courier-IMAP for the Cyrus-IMAP, however I still came across myself
with a problem without solution (at least for me). Here, all users have an
personal ID who is used to effect the authentication in some systems (also in
the mail). For example, an user with the personal ID 12345 possess the mail <a
href="mailto:user@domain.com">user@domain.com</a><br>
<br>
<br>
If I create the mailbox in cyrus with the personal ID (</span></font><font
face="Courier New"><span style='font-family:"Courier New"'>cm user.12345</span></font>),
I can connect through imap/pop3 and cyrus get access to the mailbox without
problems (using as user 12345), however when sending a message for this user,
postfix delivery saw LMTP for cyrus, that does not locate mailbox (with the
error: <font face="Courier New"><span style='font-family:"Courier New"'>lmtpunix
[5514]: to verify_user (user.12345) failed: Mailbox you donate not exist</span></font>).
Then if I create mailbox with the user's mail (<font face="Courier New"><span
style='font-family:"Courier New"'> cm <a href="mailto:user.user@domain.com">user.user@domain.com</a></span></font>),
the message is delivery without problems from postfix to cyrus (that it finds
mailbox), however I can't have access to mailbox saw IMAP/POP using as login
the person code (12345) and only the email ( <a href="mailto:user@domain.com">user@domain.com</a>).
<br>
<br>
The authentication of cyrus is made by SASL using the mechanism PAM (that it
validates through LDAP). <br>
<br>
<br>
It follows some configurations to facilitate the understanding: <br>
/etc/imapd.conf --------------------------------------<br>
<font face="Courier New"><span style='font-family:"Courier New"'>configdirectory:
/var/lib/imap<br>
partition-default: /var/spool/imap<br>
admins: cyrus<br>
sievedir: /var/lib/imap/sieve<br>
sendmail: /usr/sbin/sendmail<br>
hashimapspool: true<br>
sasl_pwcheck_method: saslauthd<br>
sasl_mech_list: PLAIN<br>
tls_cert_file: /usr/share/ssl/certs/cyrus-imapd.pem<br>
tls_key_file: /usr/share/ssl/certs/cyrus-imapd.pem<br>
tls_ca_file: /usr/share/ssl/certs/ca- bundle.crt<br>
virtdomains: userid<br>
defaultdomain: <a href="http://domain.com">domain.com</a></span></font><br>
/etc/imapd.conf --------------------------------------<br>
<br>
/etc/postfix/main.cf --------------------------------<br>
<font face="Courier New"><span style='font-family:"Courier New"'>virtual_transport
= lmtp:unix:/var/lib/imap/socket/lmtp<br>
canonical_maps = proxy:ldap:/etc/postfix/ldap/canonical.cf</span></font> <br>
/etc/postfix/main.cf --------------------------------<br>
<br>
usuário.ldif -------------------------<br>
<font face="Courier New"><span style='font-family:"Courier New"'>dn:
uid=12345,ou=users,dc=domain,dc=com<br>
uid: 12345<br>
cn: Test User<br>
sn: test<br>
loginShell: /bin/false<br>
uidNumber: 90001<br>
mail: <a href="mailto:user@domain.com">user@domain.com </a><br>
quota: 20971520<br>
gidNumber: 513<br>
homeDirectory: /home/user<br>
mailbox: /home/user/Maildir/<br>
mailHost: <a href="http://siaimail10.domain.com">siaimail10.domain.com</a><br>
description: description<br>
enableMail: S<br>
objectClass: top<br>
objectClass: person<br>
objectClass: posixAccount<br>
objectClass: shadowAccount<br>
objectClass: CourierMailAccount<br>
objectClass: inetLocalMailRecipient </span></font><br>
usuário.ldif -------------------------<br>
<br>
<br>
I tried through postfix, modify/create/use some macro (those used in <a
href="http://master.cf">master.cf</a>: <font face="Courier New"><span
style='font-family:"Courier New"'>${user} ${extension}</span></font>) that it
passed to cyrus the personal ID (in the place of the address) but I did not
have success. <br>
<br>
I made with the SASL authenticate in LDAP using the UID, but did not give
very certain, therefore cyrus uses proper login to locate mailbox, and thus I
don't deliver the message saw lmtp (therefore mailbox was with the name of the
user). <br>
<br>
<br>
The only thing next than I found of what necessary patch of the Kolab was
one that allows (theoretically, I did not make tests) to consult the virtual
domínios through ldap. <br>
<br>
I used canonical_maps in postfix quering ldap for the mail ( <a
href="mailto:user@domain.com">user@domain.com</a>) and returning email (<a
href="mailto:12345@dominio.com">12345@dominio.com</a>), but for virtual domains
I would have to add a new attribute in LDAP with the personal ID + the domain. <br>
<br>
Someone has experience in this integration and that it can help me? <br>
<br>
<br>
thank's for attention.<br>
Neto.<br>
<br clear=all>
<br>
-- <br>
José Morelli Neto<br>
<a href="http://josemorelli.net">http://josemorelli.net </a><o:p></o:p></p>
<p><font size=2 face="Times New Roman"><span style='font-size:10.0pt'>--<br>
No virus found in this incoming message.<br>
Checked by AVG.<br>
Version: 7.5.433 / Virus Database: 268.16.7/619 - Release Date: 07/01/2007
18:29</span></font><o:p></o:p></p>
</div>
</div>
</body>
</html>
<BR>
<P><FONT SIZE=2>--<BR>
No virus found in this outgoing message.<BR>
Checked by AVG.<BR>
Version: 7.5.433 / Virus Database: 268.16.7/619 - Release Date: 07/01/2007 18:29<BR>
</FONT> </P>