From: JOYDEEP (j.bakshiunlimitedmail.org)
Date: Tue May 01 2007 - 23:32:53 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Magnus Bäck wrote:
> On Mon, April 30, 2007 12:47 pm, JOYDEEP said:
>
>
>> both my cyrus and postfix is working :-) I am grateful to you all for
>> giving me the guidance.
>>
>> anyhow in my main.cf I have "local_recipient_maps = "
>> means the system is open to security attack. how can I use my LDAP
>> database here as all users are stored in LDAP.
>>
>
> Are your users system users accessible as such via nss_ldap?

Hi Magnus,
I actually have pam_ldap module.

here is my saslauthd.conf
========================================
ldap_servers: ldaps://lvps87-230-8-228.dedicated.hosteurope.de:636
ldap_bind_dn: cn=Manager,dc=dedicated,dc=hosteurope,dc=de
ldap_bind_pw: secret
ldap_search_base: ou=Users,dc=dedicated,dc=hosteurope,dc=de
ldap_version: 3
ldap_filter: uid=%U
ldap_default_domain: dedicated.hosteurope.de
=================================================

Here is my /etc/pam.d/imap ; /etc/pam.d/smtp
=======================================
auth sufficient /lib/security/pam_ldap.so
auth required /lib/security/pam_unix.so try_first_pass

account sufficient /lib/security/pam_ldap.so
account required /lib/security/pam_unix.so
========================================

here is /etc/sysconfig/saslauthd
=======================
SASLAUTHD_AUTHMECH=pam
=======================

> That is, does
> "postmap -q username unix:passwd.byname" work? I assume yes since local(8)
> doesn't complain, and in that case you can just delete the
> local_recipient_maps line from main.cf to use the default instead. If not,
> setup an LDAP configuration map similar to the mailbox query. Note however
> that the lookup key used will be the bare username and not the whole
> address.
>
> [...]
>
>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]