1 Topic by sergey.shibka

  • sergey.shibka
  • Member
  • Offline
  • Registered: 2014-05-08
  • Posts: 2

Topic: Dovecot does not find users in the User Group located in OU.

======== Required information ====
- iRedMail version: 0.8.6
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MS 2008R2 AD
- Linux/BSD distribution name and version: CentOS 6.5
- Related log if you're reporting an issue:
====

Hi!
My mailer Postfix + Dovecot + AD

Dovecot is looking for user accounts only OU.
How to make Dovecot users search from the root of the domain Active Directory or User Group which is located in OU?

My config dovecot-ldap.conf; "e-mai"l it OU, "user-mail" it User Group which is located in OU:

hosts           = server.developer.com:389
ldap_version    = 3
auth_bind       = yes
dn              = user@developer.com
dnpass          = 123456
base            = cn=user-mail,ou=e-mail,dc=developer,dc=com
scope           = subtree
deref           = never
user_filter     = (&(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_filter     = (&(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_attrs      = userPassword=password
default_pass_scheme = CRYPT
user_attrs      = =home=/var/vmail/vmail1/%Ld/%Ln/Maildir/,=mail=maildir:/var/vmail/vmail1/%Ld/%Ln/Maildir/

Post's attachments

2014-05-08 07-21-36 Скриншот экрана.png
2014-05-08 07-21-36 Скриншот экрана.png 31.86 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,094

Re: Dovecot does not find users in the User Group located in OU.

Does it return any objects with command 'ldapsearch' with this ldap filter "(&(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))"? (You should replace '%u' by a real email address when use ldapsearch)