Re: [courier-users] authenticate against Windows LDAP server?

This is a discussion on Re: [courier-users] authenticate against Windows LDAP server? within the Courier-Imap forums, part of the Mail Servers and Related category; Steve Melo said: > Can anyone tell me if it is possible to authenticate using a windows 2003 > server ...


Go Back   Usenet Forums > Mail Servers and Related > Courier-Imap

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 02-16-2005
Jay Lee
 
Posts: n/a
Default Re: [courier-users] authenticate against Windows LDAP server?

Steve Melo said:
> Can anyone tell me if it is possible to authenticate using a windows 2003
> server instead of OpenLDAP? I want my users to use the same windows login
> password for their email. I configured the courier-authdeamon to use the
> ldap module but im getting errors in my syslog file: "authdaemond.ldap:
> ldap_simple_bind_s failed: Invalid credentials".


In theory, yes it should be entirely possible. My user's authenticate
against a Novell eDirectory Netware Server via LDAP. However, I've not
heard any reports of someone successfully configuring Windows 2003 AD LDAP
and Courier. AD is a somewhat different beast then OpenLDAP or even
eDirectory. The first error your recieving here seems to be an
authentication failure. Did you enter an admin account in
/etc/authlib/authldaprc LDAP_BINDDN and LDAP_BINDPW? You will need to
specify the full context for BINDDN, it should look something like:

CN=Jay Jamieson, OU=Worcester,DC=cp,DC=com

also, I don't believe AD will search sub organizational units by default
(i.e. search down the tree) so you will need to make sure LDAP_BASEDN is
set to the exact area where your users exist. I am not sure if it's
possible to specify multiple ou's for LDAP_BASEDN, Sam may know.

> This is my first time working with LDAP and im not really sure how it
> works.
> I see that the ldap port is open on my windows server. I also couldn't
> find
> any good documentation for the authldaprc file and im not sure exactly
> what
> to enter into the variables.


One thing that may help is to use a LDAP utility program to browse your
tree and get a better understanding of how your AD looks from the LDAP
side. I've used Softerra's free LDAP Browser in the past and found it to
be useful:

http://www.ldapadministrator.com/download/index.php


--
Jay Lee
Network / Systems Administrator
Information Technology Dept.
Philadelphia Biblical University
--


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/.../courier-users
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 08:54 AM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0