1 Topic by claudio.santoro

  • claudio.santoro
  • claudio.santoro
  • Member
  • Offline
  • From: Brasília, Brazil
  • Registered: 2016-09-15
  • Posts: 5

Topic: Questions Ubuntu PAM Authentication iRedMail LDAP

==== Required information ====
- iRedMail version (check /etc/iredmail-release): Latest
- Linux/BSD distribution name and version: CentOS 7 (Server) Ubuntu 16 (Client)
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  LDAP
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? Nope
- Related log if you're reporting an issue:
====

Hello, i tried to configure LDAP Client Authentication in Ubuntu 16.04, followed all steps of this tutorial: https://www.unixmen.com/configure-linux … -openldap/

But can't login on Ubuntu GUI.
Observation.: If i do ldapsearch with Manager account, it works.

I'm wondering if i need change something in the /etc/ldap.conf
Since iRedMail stores users in ou=Users,o=domains,dc=mysite,dc=extension ...

What i need change on the /etc/ldap.conf on the PAM or NSC section?

Observations:
1. LDAP Server: auth.uiot.org running at Port: 8080
2. Base DN: o=domains,dc=uiot,dc=org
3. Using Root Account as Manager
4. Using Database Read Only account as VMAIL.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

claudio.santoro's Website

2 Reply by claudio.santoro

  • claudio.santoro
  • claudio.santoro
  • Member
  • Offline
  • From: Brasília, Brazil
  • Registered: 2016-09-15
  • Posts: 5

Re: Questions Ubuntu PAM Authentication iRedMail LDAP

Ok solved first part.

Now on the logon GUI says:
"you are required to change your password immediately"

claudio.santoro's Website

3 Reply by claudio.santoro

  • claudio.santoro
  • claudio.santoro
  • Member
  • Offline
  • From: Brasília, Brazil
  • Registered: 2016-09-15
  • Posts: 5

Re: Questions Ubuntu PAM Authentication iRedMail LDAP

Changed password.

But now says that the password is incorrect. wtf.

claudio.santoro's Website

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,787

Re: Questions Ubuntu PAM Authentication iRedMail LDAP

claudio.santoro wrote:

Changed password.

But now says that the password is incorrect. wtf.

How did you change password?
Try to use a SSHA password hash.

5 Reply by claudio.santoro

  • claudio.santoro
  • claudio.santoro
  • Member
  • Offline
  • From: Brasília, Brazil
  • Registered: 2016-09-15
  • Posts: 5

Re: Questions Ubuntu PAM Authentication iRedMail LDAP

ZhangHuangbin wrote:
claudio.santoro wrote:

Changed password.

But now says that the password is incorrect. wtf.

How did you change password?
Try to use a SSHA password hash.

Nevermind, got it working by following strictly this tutorial:

http://serverfault.com/questions/556040 … entication

I only didn't some things, because i think that wasn't better doing it.

Also the magic is on the PosixAccounts...

claudio.santoro's Website

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,787

Re: Questions Ubuntu PAM Authentication iRedMail LDAP

I wonder whether you can configure sssd to use a flexible ldap filter and lookup different (non-default) ldap attributes in this case.

If you modified iRedMail LDAP schema file, you should pay attention to sync this schema with iRedMail.

7 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,787

Re: Questions Ubuntu PAM Authentication iRedMail LDAP

BTW, iRedAdmin-Pro supports customizing LDAP objectclass and attributes while adding new domain/user, also offers hook  to call your own Python function for advanced customization.