1

Topic: how integrate iredmail with active directory?

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.2
- Linux/BSD distribution name and version: ubuntu14.0.2LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro?
- Related log if you're reporting an issue:
====
how integrate iredmail with active directory?  is there any updated documents for the 0.9.2 ?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: how integrate iredmail with active directory?

Reference: http://www.iredmail.org/docs/active.directory.html

3 (edited by yavuz.maslak 2015-08-15 05:25:11)

Re: how integrate iredmail with active directory?

I followed the link,  I have some problems.


I edited as the page ;

    Create file: /etc/postfix/ad_sender_login_maps.cf:

server_host     = serverip
server_port     = 389
version         = 3
bind            = yes
start_tls       = no
bind_dn         = vmail@ihlas
bind_pw         = pass
search_base     = dc=domain,dc=local
scope           = sub
query_filter    = (&(userPrincipalName=%s)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
result_attribute= userPrincipalName
debuglevel      = 0

if i try to login imap
I get credential error in dovecot.log;
Aug 15 00:18:26 auth: Info: ldap(mazlak@ihlas.com.tr,10.212.1.254,<SNsZ/ksdCgAK1I3+>): invalid credentials (given password: PASS)
Aug 15 00:18:28 auth: Debug: client passdb out: FAIL    1       user=mazlak@ihlas.com.tr
Aug 15 00:21:15 imap-login: Info: Disconnected: Inactivity (auth failed, 1 attempts in 169 secs): user=<mazlak@ihlas.com.tr>, method=PLAIN, rip=10.212.1.254, lip=10.21.200.105, session=<SNsZ/ksdCgAK1I3+>

whereas i can login to exchange server with the same user and password
how can i fix that ?

my dovecot-ldap.conf
hosts           = 10.2.2.2:389
ldap_version    = 3
auth_bind       = yes
auth_bind_userdn = seta-int\%u
#dn              = vmail@ihlas
dn              = vmail@ihlas
dnpass          = PASS
base            = dc=ihlas,dc=local
scope           = subtree
deref           = never
user_filter     = (&(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_filter     = (&(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_attrs      = userPassword=password
default_pass_scheme = CRYPT
user_attrs      = =home=/var/vmail/vmail1/%Ld/%Ln/Maildir/,=mail=maildir:/var/vmail/vmail1/%Ld/%Ln/Maildir/

4

Re: how integrate iredmail with active directory?

Hi Zhang
is there any solve ?

5

Re: how integrate iredmail with active directory?

Turn on password related debug option in Dovecot config file, try again and monitor its log file:
http://www.iredmail.org/docs/debug.dovecot.html