1 Topic by Googlom

  • Googlom
  • Member
  • Offline
  • Registered: 2017-10-19
  • Posts: 9

Topic: Creating LDAP users with a dn containing cn attribute

==== Required information ====
- iRedMail version (check /etc/iredmail-release):
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
======== Required information ====
- iRedMail version (check /etc/iredmail-release):  0.9.7
- Linux/BSD distribution name and version: Debian 8
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Apache2
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Is there a way to create LDAP users using cn attribute in iRedAdmin, where dn of new user will be "cn=Jack Daniels,ou=Users,domainName=example.com,o=domains,dc=example,dc=com"?
I've tried to change

RDN_USER = 'mail'       # Supports: mail, cn, uid.
RDN_MAILLIST = RDN_ALIAS = RDN_ADMIN = RDN_CATCHALL = 'mail'

to

RDN_USER = 'cn'       # Supports: mail, cn, uid.
RDN_MAILLIST = RDN_ALIAS = RDN_ADMIN = RDN_CATCHALL = 'cn'

in /opt/www/iredadmin/libs/ldaplib, then restarted apache. But it didn't help - Unable to login as postmaster in iRedAdmin, it says invalid credentials.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,793

Re: Creating LDAP users with a dn containing cn attribute

iRedMail hard-codes the full DN, and the supported rdn is 'mail'.
Curious, why do you have to use 'cn' as rdn?

3 Reply by Googlom

  • Googlom
  • Member
  • Offline
  • Registered: 2017-10-19
  • Posts: 9

Re: Creating LDAP users with a dn containing cn attribute

I have several services that use the same LDAP server. Some of them don't even need a 'mailUser' object class and its attributes. So, adding a user for other services using iRedAdmin creates several redundant attributes, but adding "by hand" spoils the general view of my LDAP tree: some entries are with 'cn', some 'mail' ...
I've read this comment and thought it was possible:

RDN_USER = 'cn'       # Supports: mail, cn, uid.

Anyway, thanks for the reply. I'll try to find a workaround.