[Dovecot] Multiple "mail" field in one LDAP account

Timo Sirainen tss at iki.fi
Sat Oct 18 18:15:29 EEST 2008


On Thu, 2008-10-16 at 14:18 +0400, Proskurin Kirill wrote:
> Timo Sirainen wrote:
> > On Oct 16, 2008, at 12:09 PM, Proskurin Kirill wrote:
> > 
> >> pass_attrs = mail=user,userPassword=password
> > 
> > You could remove the mail=user here and instead set 
> > auth_username_format=%Lu to make sure the username is lowercased.
> 
> Thanks Timo - seems this work!
> But now im don`t really understand how he lookup user name in LDAP now.

The lookup is done exactly the same way as before, in both cases LDAP
server returns only a single result. Only now it doesn't use the looked
up "mail" value for anything.

> Thunder bird send credentials:
> login: sysadmin at domain.off
> pass: 123
> 
> Dovecot makes LDAP lookup and search user with such pass in userPassword 
> and such login in were?

The search is done with the user name. From that result it uses the
userPassword to verify validity of the password.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20081018/312b2916/attachment.bin 


More information about the dovecot mailing list