1

Topic: Authenticating against Central OpenLDAP

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.7.1 OPENLDAP edition
- Deployed with iRedMail Easy or the downloadable installer? Yes.
- Linux/BSD distribution name and version: Ubuntu 24.04.1
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  LDAP
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No.
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Okay so after 4 days I was able to get the schema moved over from a freshly install iRedmail instance to our central OpenLDAP. Now remains the authentication part, for everything authenticating to our central OpenLDAP. I can do this in the next few days. No issue there. My question is we have a structure too our LDAP. I need to figure out how to make it work with that vs the one that iRedmail uses..


Our Structure before importing the ldif for iRedmail:
dc=corp,dc=example,dc=com
>ou=Externals
>ou=Groups
>>ou=Access
>>>cn=Admins
>>>cn=VPN Users
>>cn=Domain Users
>ou=Servers
>ou=ServiceAccounts
>ou=Users
>>uid=username

After
dc=corp,dc=example,dc=com
>ou=Externals
>ou=Groups
>>ou=Access
>>>cn=Admins
>>>cn=VPN Users
>>cn=Domain Users
>ou=Servers
>ou=ServiceAccounts
>ou=Users
>>uid=username
>cn=vmail
>cn=vmailadmin
>o=domainAdmins
>o=domains
>>domainName=example.com
>>>ou=Aliases
>>>ou=Externals
>>>ou=Groups
>>>ou=Users
>>>>mail=postmaster@example.com



so how do I make it where all my users have mail accounts.....all my user accounts are located here.

dc=corp,dc=example,dc=com
>ou=Users
>>uid=username

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Authenticating against Central OpenLDAP

- iRedMail doesn't support external OpenLDAP right now, so you're on your own.
- You may tune the LDAP query base dn and filter to achieve same features without modifying LDAP structure.

3 (edited by bpatel 2024-10-28 00:25:48)

Re: Authenticating against Central OpenLDAP

I was able to get this to work. Wasn't as hard. Had to edit the Postfix, and Dovecot LDAP files, and Sogo config file.

I installed iRedmail with OpenLDAP using my current base dn. Then went thru the files and changed the server IP, and changed the search dn to the base dn. This way the whole ldap was searched. 

Attached are the files i edited/notes.

Post's attachments

iRedmail LDAP config.txt 15.25 kb, 5 downloads since 2024-10-27 

You don't have the permssions to download the attachments of this post.

4

Re: Authenticating against Central OpenLDAP

Thanks for sharing.