<![CDATA[iRedMail — Problem setting up LDAP with Windows AD]]> http://www.iredmail.org/forum/topic3521-problem-setting-up-ldap-with-windows-ad.html Thu, 21 Jun 2012 06:15:12 +0000 PunBB <![CDATA[Re: Problem setting up LDAP with Windows AD]]> http://www.iredmail.org/forum/post16563.html#p16563 I tried but it's not working! Maibe someone have a solution!

]]> Thu, 21 Jun 2012 06:15:12 +0000 http://www.iredmail.org/forum/post16563.html#p16563 <![CDATA[Re: Problem setting up LDAP with Windows AD]]> http://www.iredmail.org/forum/post16498.html#p16498 bobbo1981 wrote:

Now I use Ldap Windows AD authentication! In this case can I change password from Roundcube?

I didn't test it before, you can try it yourself. smile

]]> Mon, 18 Jun 2012 12:31:28 +0000 http://www.iredmail.org/forum/post16498.html#p16498 <![CDATA[Re: Problem setting up LDAP with Windows AD]]> http://www.iredmail.org/forum/post16496.html#p16496 Problem solved!

I have a new question! Now I use Ldap Windows AD authentication! In this case can I change password from Roundcube?

]]> Mon, 18 Jun 2012 10:53:12 +0000 http://www.iredmail.org/forum/post16496.html#p16496 <![CDATA[Re: Problem setting up LDAP with Windows AD]]> http://www.iredmail.org/forum/post16485.html#p16485 Hi bobbo1981,

It's clear in the pasted log:

Error: LDAP: binding failed (dn cn=vmail@my.domain): Invalid credentials

That means either bind dn or password is incorrect. Try use 'vmail' in Dovecot, or full LDAP dn (cn=vmail@my.domain is NOT a FULL dn).

]]> Sun, 17 Jun 2012 01:25:51 +0000 http://www.iredmail.org/forum/post16485.html#p16485 <![CDATA[Re: Problem setting up LDAP with Windows AD]]> http://www.iredmail.org/forum/post16472.html#p16472 Postfix it's working fine but Dovecot NOT! I have put there messeges from log!

So where is the problem?

]]> Sat, 16 Jun 2012 04:57:38 +0000 http://www.iredmail.org/forum/post16472.html#p16472 <![CDATA[Re: Problem setting up LDAP with Windows AD]]> http://www.iredmail.org/forum/post16468.html#p16468 bobbo1981 wrote:

With this user and pass postfix it's working fine!

Glad to hear that. smile

]]> Sat, 16 Jun 2012 00:53:55 +0000 http://www.iredmail.org/forum/post16468.html#p16468 <![CDATA[Re: Problem setting up LDAP with Windows AD]]> http://www.iredmail.org/forum/post16438.html#p16438 Ok! This is the log:

Jun 15 07:52:49 auth: Error: LDAP: binding failed (dn cn=vmail@my.domain): Invalid credentials, 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1

This is dovecot-ldap.conf :

hosts           = 192.168.0.8:389
ldap_version    = 3
auth_bind       = yes
dn              = cn=vmail@my.domain
dnpass          = mypassword
base            = cn=users,dc=my,dc=domain
scope           = subtree
deref           = never
user_filter     = (&(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_filter     = (&(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_attrs      = userPassword=password
default_pass_scheme = CRYPT
user_attrs      = =home=/var/vmail/vmail1/%Ln/%Ln/Maildir/,=mail=maildir:/var/vmail/vmail1/%Ln/%Ln/Maildir/



With this user and pass postfix it's working fine!

]]> Fri, 15 Jun 2012 04:57:40 +0000 http://www.iredmail.org/forum/post16438.html#p16438 <![CDATA[Re: Problem setting up LDAP with Windows AD]]> http://www.iredmail.org/forum/post16434.html#p16434 bobbo1981 wrote:

. NO [UNAVAILABLE] Temporary authentication failure.

Please check Dovecot log file (/var/log/dovecot.log) for more details. If there's no detailed log, please turn on debug mode in Dovecot first, then try again.

Reference: How to turn on debug mode in Dovecot:
http://www.iredmail.org/forum/topic453- … rules.html

]]> Thu, 14 Jun 2012 23:54:17 +0000 http://www.iredmail.org/forum/post16434.html#p16434 <![CDATA[Re: Problem setting up LDAP with Windows AD]]> http://www.iredmail.org/forum/post16430.html#p16430 Ok!
Next problem:

telnet localhost 143
Trying ::1...
telnet: connect to address ::1: Connection refused
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
. login mail@my.domain  password
. NO [UNAVAILABLE] Temporary authentication failure.

]]> Thu, 14 Jun 2012 14:25:49 +0000 http://www.iredmail.org/forum/post16430.html#p16430 <![CDATA[Re: Problem setting up LDAP with Windows AD]]> http://www.iredmail.org/forum/post16428.html#p16428 Then please try to use the full ldap dn of vmail user instead.

]]> Thu, 14 Jun 2012 11:25:03 +0000 http://www.iredmail.org/forum/post16428.html#p16428 <![CDATA[Problem setting up LDAP with Windows AD]]> http://www.iredmail.org/forum/post16419.html#p16419 ==== Provide required information ====
- iRedMail version and backend (LDAP/MySQL/PGSQL):
- Linux/BSD distribution name and version:
- Any related log? Log is helpful for troubleshooting.
====
iRedMail 0.8.1 backend LDAP
Linux CentOS 6.2

When I try to search ldap with this command I receive this error. I have created the vmail user and I have trien the command with user Administrator from de Windows domain. The same result!
What is the problem?

ldapsearch -x -h  192.168.0.8 -D 'vmail' -W -b 'cn=users,dc=my,dc=domain'
Enter LDAP Password:
ldap_bind: Invalid credentials (49)
        additional info: 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1

]]> Thu, 14 Jun 2012 09:11:04 +0000 http://www.iredmail.org/forum/post16419.html#p16419