9 messages in net.sourceforge.lists.courier-users[courier-users] Using LDAP with virtu...
FromSent OnAttachments
Lloyd ZusmanMay 28, 2005 12:38 pm 
Gordon MessmerMay 28, 2005 5:38 pm 
Lloyd ZusmanMay 28, 2005 6:04 pm 
Gordon MessmerMay 28, 2005 8:30 pm 
Lloyd ZusmanMay 29, 2005 7:04 am 
Sam VarshavchikMay 29, 2005 8:13 am 
Lloyd ZusmanMay 29, 2005 9:19 am 
Sam VarshavchikMay 29, 2005 9:27 am 
Lloyd ZusmanMay 29, 2005 9:59 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[courier-users] Using LDAP with virtual and normal accountsActions...
From:Lloyd Zusman (lj@asfast.com)
Date:May 28, 2005 12:38:05 pm
List:net.sourceforge.lists.courier-users

I have a question about the use of LDAP within Courier.

I have one set of email addresses whose Maildirs live under the user's home directory. For the purpose of this discussion, I'm calling this a "normal" email account. For example, if I'm hosting a domain called "bar.com" and it's listed in my "locals" file, I might have the following setup:

fo@bar.com => /home/foo/Maildir

I use these "normal" accounts for users who have shell access and therefore home directories.

I have another class of users who are email-only users. They don't have home directories, and therefore, I am setting up what I'm calling virtual accounts for them. For example the "vmail" user ID has "/var/vmail" as its home directory. Each such email-only user has his or her email going to a directory under /var/vmail. If, for example, the domains abc.com and def.com are hosted on my machine, these "virtual" accounts would be set up like this:

qua@abc.com => /var/vmail/qua@abc.com/Maildir yip@def.com => /var/vmail/yip@def.com/Maildir

I know how to do this in the non-LDAP world under Courier, but now I want to use LDAP to manage all of this.

My questions about this are as follows:

1. Is it indeed possible to manage both setups simultaneously using LDAP under Courier?

2. If the answer to #1 is "yes", then I believe that the following settings are appropriate in the "authldaprc" file:

For the "normal" accounts:

LDAP_HOMEDIR homeDirectory (to contain home directory) LDAP_UID uidNumber (to contain user's uid) LDAP_GID gidNumber (to contain user's gid)

For the "virtual" accounts:

LDAP_MAILROOT /var/vmail LDAP_GLOB_UID vmail LDAP_GLOB_GID vmail

However, even with these settings, I don't know what to put into the LDAP database in order to indicate that a given email address is "virtual" instead of "normal", and that it therefore should use one of the /var/vmail Maildirs.

In other words, I know that for the "fo@bar.com" example, above, in the LDAP database I can set "homeDirectory" to "/home/foo", "uidNumber" to user foo's uid and "gidNumber" to user foo's gid.

However, for the "qua@abc.com" user, what do I put into the same LDAP database to indicate that it's not a normal account, but rather, one of the virtual accounts that lives under /var/vmail and whose Maildir is "/var/vmail/qua@abc.com/Maildir"?

Thanks in advance.