Re: Qmail-ldap + dovecot

2011-08-25 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi,

On 25-08-2011 17:55, Ismail YENIGUL wrote:
> This is another solution but If you use dovecot-ldap settings
> you will loose session forwarding(proxy) feature of
> auth_dovecot/auth_imap in multi-backend server environments.
> With session forwarding feature, it does not matter which
> imap backend server you connect. the server will forward you
> request to account's imap server(mailserver attr).
> at retrieve the mails.

Nice. :)

Can't you achieve the same behavior with an imap proxy service?


Kind regards,
- -- 
Felipe Augusto van de Wiel 
Tecnologia da Informação (TI) - Complexo Pequeno Príncipe
http://www.pequenoprincipe.org.br/T: +55 41 3310 1747
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBCgAGBQJOVtskAAoJECCPPxLgxLxPgJcQAIxYjIKPbrvPPVEq2YiYx6GQ
786sJjtcmWkH3Q0H22f1vlbZAzpqOV46VShpj0wDx2Is2R3f9RUKNAsT7tVy9LGs
NbzfQ2jX2zDEYrIabuVw9ieSxuNj7E4Ky17mGM9ebz/VZZZfhkhSJGGE/GiWFTX4
TxBC0rXDoVuzECWSrz+Ga0rxkve+yGiNQs81mwvWVD/284f8QUDMKDXKiWbb/nPC
fnUZWqCfPg4VMCbiGAFtjVwdZhclFvx43RtySF1AoEAWGXs4ql4bxAl0X3DsuMq5
n3PtjSuUVEYRIWcd/YTRVpW/sKyJDG/5O5ROWcJvenz5dTPzVwS9/b7GBz1lZVIv
TdMPoBvSGLORo02ZILsWgQWZrlgSRwJPrH2Qtt5A18u+ymjDVvxdk2SlIDQxII0E
l1hDNva+AiJ8UMot7zMkAXPdLjWAzr1/HMUp4+BRYDG+sSfmj20dOYZL70cjqoDI
xE6xmuEfkOwUspU2+VfCG1QEeTSj0/T7Z5ZXNSa3Ye3K2Fqq8gpNzWVt1fOXoHs2
xESCIxZhcLyPmzPWzHUhoDac1/n5z7RzR7PKTFZEHWqzMGMdNVv/DvqxE71CHFu6
sudyZEMsbqMZX4UiD5c+ChrZEI/U64YllAnDEswJkdeGnTBT1PAkD5551qpoGjgd
5N6yAfC9jJm8xnibx2FW
=4ocm
-END PGP SIGNATURE-


Re: Qmail-ldap + dovecot

2011-08-25 Thread Ismail YENIGUL

Hello,

This is another solution but If you use dovecot-ldap settings you will 
loose session forwarding(proxy) feature of auth_dovecot/auth_imap in 
multi-backend server environments.
With session forwarding feature, it does not matter which imap backend 
server you connect. the server will forward you request to account's 
imap server(mailserver attr).

at retrieve the mails.
Best Regards.

Ismail YENIGUL
Project Manager
Endersys Ltd
Phone :+90 216-4709423 | Mobile:+90 533 747 36 65
SurGATE: West Coast Labs Premium Anti-Spam Certificated
Twitter: http://www.twitter.com/endersys
Blog: http://blog.endersys.com

On 25.08.2011 19:54, Felipe Augusto van de Wiel wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 25-08-2011 08:02, Nickitas wrote:

Hello list ,

  I am trying to use dovecot in our qmail-ldap installation . I got the
qmail-ldap-1.03-20060201-dovecot.v0.5 patch from
"http://www.mail-archive.com/qmail-ldap@qmail-ldap.org/msg07158.html"; .
The patch was done with some warnings (since our source has a spf patch
that is normal) , so i also made the changes by hand just to be sure ..

[...]

I don't use auth_dovecot, but I do use qmail-ldap+dovecot,
customizing dovecot to take a look at the right parameters in LDAP.
I'm using Debian 5.0 (a.k.a. Lenny), with dovecot from backports.

dovecot-imapd  1:1.2.10-1~bpo


My /etc/dovecot contains:

dovecot.conf
dovecot-ldap.conf
dovecot-ldap-userdb.conf ->  dovecot-ldap.conf (yes, it's a symlink)


- --8<--8<--8<--8<--

The relevant part of dovecot.conf:

protocols = imap imaps
disable_plaintext_auth = yes
log_path = /var/log/dovecot.log
info_log_path = /var/log/dovecot-info.log
log_timestamp = "%Y-%m-%d %H:%M:%S "

ssl = required
login_processes_count = 10
login_max_processes_count = 512

mail_location = maildir:~/Maildir
mail_gid = vmail
mail_privileged_group = mail

protocol imap {
   mail_plugins = quota imap_quota
   mail_plugin_dir = /usr/lib/dovecot/modules/imap
}

protocol pop3 {
   pop3_uidl_format = %08Xu%08Xv
}

auth default {
   mechanisms = plain
   passdb pam {
   }

   passdb ldap {
 args = /etc/dovecot/dovecot-ldap.conf
   }

   userdb ldap {
 args = /etc/dovecot/dovecot-ldap-userdb.conf
   }

   user = root
}

plugin {
   quota = maildir:User quota
   quota_rule = *:storage=2560M
}

- --8<--8<--8<--8<--

The relevant part of dovecot-ldap.conf:

hosts = YOUR-SERVER-IP
auth_bind = yes
auth_bind_userdn = uid=%u,ou=People,dc=example,dc=net
ldap_version = 3
base = dc=example,dc=net
user_attrs = 
qmailUID=uid,mailMessageStore=home=/var/qmail/maildirs/%$,mailQuotaSize=quota_rule=*:bytes=%$
user_filter = 
(&(objectClass=qmailUser)(uid=%u)(!(accountStatus=noaccess))(!(accountStatus=disabled)))
pass_attrs = mail=user,userPassword=password
pass_filter = 
(&(objectClass=qmailUser)(!(accountStatus=disabled))(!(accountStatus=noaccess)))
default_pass_scheme = SSHA


Kind regards,
- -- 
Felipe Augusto van de Wiel

Tecnologia da Informação (TI) - Complexo Pequeno Príncipe
http://www.pequenoprincipe.org.br/T: +55 41 3310 1747
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=Y5QH
-END PGP SIGNATURE-



Re: Qmail-ldap + dovecot

2011-08-25 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 25-08-2011 08:02, Nickitas wrote:
> Hello list ,
> 
>  I am trying to use dovecot in our qmail-ldap installation . I got the
> qmail-ldap-1.03-20060201-dovecot.v0.5 patch from
> "http://www.mail-archive.com/qmail-ldap@qmail-ldap.org/msg07158.html"; .
> The patch was done with some warnings (since our source has a spf patch
> that is normal) , so i also made the changes by hand just to be sure ..
[...]

I don't use auth_dovecot, but I do use qmail-ldap+dovecot,
customizing dovecot to take a look at the right parameters in LDAP.
I'm using Debian 5.0 (a.k.a. Lenny), with dovecot from backports.

dovecot-imapd  1:1.2.10-1~bpo


My /etc/dovecot contains:

dovecot.conf
dovecot-ldap.conf
dovecot-ldap-userdb.conf -> dovecot-ldap.conf (yes, it's a symlink)


- --8<--8<--8<--8<--

The relevant part of dovecot.conf:

protocols = imap imaps
disable_plaintext_auth = yes
log_path = /var/log/dovecot.log
info_log_path = /var/log/dovecot-info.log
log_timestamp = "%Y-%m-%d %H:%M:%S "

ssl = required
login_processes_count = 10
login_max_processes_count = 512

mail_location = maildir:~/Maildir
mail_gid = vmail
mail_privileged_group = mail

protocol imap {
  mail_plugins = quota imap_quota
  mail_plugin_dir = /usr/lib/dovecot/modules/imap
}

protocol pop3 {
  pop3_uidl_format = %08Xu%08Xv
}

auth default {
  mechanisms = plain
  passdb pam {
  }

  passdb ldap {
args = /etc/dovecot/dovecot-ldap.conf
  }

  userdb ldap {
args = /etc/dovecot/dovecot-ldap-userdb.conf
  }

  user = root
}

plugin {
  quota = maildir:User quota
  quota_rule = *:storage=2560M
}

- --8<--8<--8<--8<--

The relevant part of dovecot-ldap.conf:

hosts = YOUR-SERVER-IP
auth_bind = yes
auth_bind_userdn = uid=%u,ou=People,dc=example,dc=net
ldap_version = 3
base = dc=example,dc=net
user_attrs = 
qmailUID=uid,mailMessageStore=home=/var/qmail/maildirs/%$,mailQuotaSize=quota_rule=*:bytes=%$
user_filter = 
(&(objectClass=qmailUser)(uid=%u)(!(accountStatus=noaccess))(!(accountStatus=disabled)))
pass_attrs = mail=user,userPassword=password
pass_filter = 
(&(objectClass=qmailUser)(!(accountStatus=disabled))(!(accountStatus=noaccess)))
default_pass_scheme = SSHA


Kind regards,
- -- 
Felipe Augusto van de Wiel 
Tecnologia da Informação (TI) - Complexo Pequeno Príncipe
http://www.pequenoprincipe.org.br/T: +55 41 3310 1747
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBCgAGBQJOVn5bAAoJECCPPxLgxLxP41IP/RRW+zeylXSDlmfinbu9D7un
0ALwsmTKJkv05RIAPlyCvInEHa0Gfh9MS6+kUE0LmOifblJYok9X/cRhTnREf1Up
2Z4T8y7TVsOI0MOuEKs4smXixGMLMi7XaSDkxPWO5mHlQ6CZdmw8hPa2JkIVSGKx
/DQmd87uwcRc9+6P0+WU8baQsMG/6og8+jvM6iE/QL4A1csHyYo1IJ82NnMnrhuX
QtYiSijRV+WhSvq8CzPxcRImara0ZBckMsTF5AQPXiFutqWepDVNtbLVwK3gINJp
rKJ+Yr/hL3Qj/4sdU2Sh/oSs2glAoNNW5xUy8IQkQItNKsEoTxM+v5W5C9UIoMol
d0WLGuLFSLo+HEGN9wrjeNW9KKZs2cjqwfHKaKaUkiQRhmjMCRcMgQu+bO7PDSCQ
FCKoaNqTRqytb76DvYq6f8211M1UPl63wCa5rCPEr8LvC6tBM0O/KG63q0DLfiMz
/W4c0XalxaTbu1+b4h154wThcxmze5QjGMorhnpyQtp18zy76jJx8PvBW8lpSqVe
EvwEP09/f6c6pdmVVG7uyOZAG9aUwfMRU7+7mpnWFXugG2IJE6ffc8/DoBMslelr
LOlzGN04q4y3qpwPj+687u//A7SdmP9FcStrtO2h7zgIzxRTHGilYHxhlitXpDwf
Trgc67TIbjG8j/AAUZgZ
=Y5QH
-END PGP SIGNATURE-