| From | Sent On | Attachments |
|---|---|---|
| Michael Heuser | Mar 6, 2002 3:32 am | |
| Michael Heuser | Mar 6, 2002 5:39 am | |
| Kelvin Cookshaw | Mar 6, 2002 6:55 am |
| Subject: | [courier-users] authldap: "refuse to authenticate" | |
|---|---|---|
| From: | Michael Heuser (sk...@gmx.net) | |
| Date: | Mar 6, 2002 3:32:42 am | |
| List: | net.sourceforge.lists.courier-users | |
Hello List,
I've a problem with ldap authentication. I'm using courier-imap 1.4.3 on SuSE 7.1
./configure --without-authvchkpw --with-authldap --without-authmysql --without-authcram --without-authpgsql --without-authplain --without-authcuston --with-db=gdbm --without-ipv6
I made my settings in /usr/lib/courier-imap/etc/authldaprc
/usr/lib/courier-imap/libexec/authlib/authdaemond start /usr/lib/courier-imap/libexec/imapd.rc start
pstree -p shows couriertcpd an 5 authdaemond.ldap daemons. seems to be ok.
I do a telnet localhost 143:
"OK Courier-IMAP ready. Copyright ....."
a001 LOGIN ema...@myhost.com password "a001 NO login failed."
When I look in /var/log/messages
"Mar 6 14:05:05 server1 slapd[6828]: conn=25 op=0 BIND dn="CN=ROOT,O=MYHOST.COM,C=DE" method=128 Mar 6 14:05:05 server1 slapd[6828]: conn=25 op=0 RESULT err=0 tag=97 nentries=0 Mar 6 14:05:05 server1 slapd[6829]: conn=25 op=1 SRCH base="O=MYHOST.COM,C=DE" scope=2 filter="(email=EMA...@MYHOST.COM)" Mar 6 14:05:05 server1 authdaemond.ldap: authlib: refuse to authenticate ema...@myhost.com: uid=0, gid=0 Mar 6 14:05:05 server1 slapd[6829]: conn=25 op=1 RESULT err=0 tag=101 nentries=1 "
LDAP seems to find the entry. (...email=ema...@myhost.com...nentries=1) (yes, I renamed "mail" in authldaprc to "email")
I tried to auth both with clearpw and cryptpw.
When I do a
ldapsearch -b 'o=myhost.com, c=DE' 'email=ema...@myhost.com'
the result is
email=ema...@myhost.com, o=myhost.com, c=DE email=ema...@myhost.com cn=Michael Heuser password=K2i3wSXm/e32Q maildir=/home/vpopmail/domains/myhost.com/herz/Maildir homedirectory=/home/vpopmail/domains/myhost.com/herz/Maildir maildirquota=100000000 clearpassword=password
Can somebody help me?
Thanks, Michael
-- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net





