atom feed3 messages in net.sourceforge.lists.courier-users[courier-users] authldap: "refuse to ...
FromSent OnAttachments
Michael HeuserMar 6, 2002 3:32 am 
Michael HeuserMar 6, 2002 5:39 am 
Kelvin CookshawMar 6, 2002 6:55 am 
Subject:[courier-users] authldap: "refuse to authenticate"
From:Michael Heuser (sk@gmx.net)
Date:Mar 6, 2002 3:32:42 am
List:net.sourceforge.lists.courier-users

Hello List,

I've a problem with ldap authentication. I'm using courier-imap 1.4.3 on SuSE 7.1

./configure --without-authvchkpw --with-authldap --without-authmysql --without-authcram --without-authpgsql --without-authplain --without-authcuston --with-db=gdbm --without-ipv6

I made my settings in /usr/lib/courier-imap/etc/authldaprc

/usr/lib/courier-imap/libexec/authlib/authdaemond start /usr/lib/courier-imap/libexec/imapd.rc start

pstree -p shows couriertcpd an 5 authdaemond.ldap daemons. seems to be ok.

I do a telnet localhost 143:

"OK Courier-IMAP ready. Copyright ....."

a001 LOGIN ema@myhost.com password "a001 NO login failed."

When I look in /var/log/messages

"Mar 6 14:05:05 server1 slapd[6828]: conn=25 op=0 BIND dn="CN=ROOT,O=MYHOST.COM,C=DE" method=128 Mar 6 14:05:05 server1 slapd[6828]: conn=25 op=0 RESULT err=0 tag=97 nentries=0 Mar 6 14:05:05 server1 slapd[6829]: conn=25 op=1 SRCH base="O=MYHOST.COM,C=DE" scope=2 filter="(email=EMA@MYHOST.COM)" Mar 6 14:05:05 server1 authdaemond.ldap: authlib: refuse to authenticate ema@myhost.com: uid=0, gid=0 Mar 6 14:05:05 server1 slapd[6829]: conn=25 op=1 RESULT err=0 tag=101 nentries=1 "

LDAP seems to find the entry. (...email=ema@myhost.com...nentries=1) (yes, I renamed "mail" in authldaprc to "email")

I tried to auth both with clearpw and cryptpw.

When I do a

ldapsearch -b 'o=myhost.com, c=DE' 'email=ema@myhost.com'

the result is

email=ema@myhost.com, o=myhost.com, c=DE email=ema@myhost.com cn=Michael Heuser password=K2i3wSXm/e32Q maildir=/home/vpopmail/domains/myhost.com/herz/Maildir homedirectory=/home/vpopmail/domains/myhost.com/herz/Maildir maildirquota=100000000 clearpassword=password

Can somebody help me?

Thanks, Michael