Hello,
I am interested in making some changes to the way authldap looks up the
LDAP user based on the username given. I wanted to run my idea by you
guys since you have been working with this longer than I have.
What I want to do is to
1. Enable @user@ and @realm@ expansion in LDAP_EMAILMAP_BASEDN (patch
already finished for this)
2a. If LDAP_EMAILMAP_ATTRIBUTE and LDAP_EMAILMAP_MAIL are not specified,
do NOT perform a handle lookup; instead, use the user located by the
LDAP_EMAILMAP and LDAP_EMAILMAP_BASEDN for authentication.
Number 2 is why I decided to ask you all about it. The reason I want
this functionality is that I store my users in separate OUs for each
virtual domain. I want the IMAP server to look up the user based on the
user portion of an email address entered in the username field, within a
base DN built from the domain portion entered in the username field.
Would this be more appropriate?
2b. Create an LDAP_SEARCHFILTER parameter that supercedes the LDAP_MAIL
parameter. I would then build the @user@ and @realm@ expansion into
this new parameter and also into LDAP_BASEDN.
Please let me know your feelings on whether 2a or 2b is more inline with
the design goals of the authldap codebase. I will be happy to
contribute my changes back to the Courier team when finished.