1 message in net.sourceforge.lists.courier-users[courier-users] Feature Request: auth...
FromSent OnAttachments
Ryan HoeggMay 20, 2002 1:26 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[courier-users] Feature Request: authldap emailmap without handle lookupActions...
From:Ryan Hoegg (rho@isisnetworks.net)
Date:May 20, 2002 1:26:39 pm
List:net.sourceforge.lists.courier-users

Hello,

I am interested in making some changes to the way authldap looks up the LDAP user based on the username given. I wanted to run my idea by you guys since you have been working with this longer than I have.

What I want to do is to 1. Enable @user@ and @realm@ expansion in LDAP_EMAILMAP_BASEDN (patch already finished for this) 2a. If LDAP_EMAILMAP_ATTRIBUTE and LDAP_EMAILMAP_MAIL are not specified, do NOT perform a handle lookup; instead, use the user located by the LDAP_EMAILMAP and LDAP_EMAILMAP_BASEDN for authentication.

Number 2 is why I decided to ask you all about it. The reason I want this functionality is that I store my users in separate OUs for each virtual domain. I want the IMAP server to look up the user based on the user portion of an email address entered in the username field, within a base DN built from the domain portion entered in the username field.

Would this be more appropriate? 2b. Create an LDAP_SEARCHFILTER parameter that supercedes the LDAP_MAIL parameter. I would then build the @user@ and @realm@ expansion into this new parameter and also into LDAP_BASEDN.

Please let me know your feelings on whether 2a or 2b is more inline with the design goals of the authldap codebase. I will be happy to contribute my changes back to the Courier team when finished.