forum.lissyara.su

Код: Выделить всё

Apr 29 16:27:04 auth: Debug: client in: AUTH    1       PLAIN   service=imap    session=zYKZAH/buQDAqAEE        lip=192.168.1.9 rip=192.168.1.4 lport=143     rport=62137      resp=AGRlbmlzQHZvbG9nZGFiZXJyeS5sb2NhbAA5ODc1MzIx
Apr 29 16:27:04 auth: Debug: ldap(denis,192.168.1.4,<zYKZAH/buQDAqAEE>): bind search: base=CN=Users,dc=firma,dc=local filter=(&(sAMAccountName=denis)(objectClass=user)(mail=denis@firma.local)\(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
Apr 29 16:27:04 auth: Error: ldap(denis,192.168.1.4,<zYKZAH/buQDAqAEE>): ldap_search((&(sAMAccountName=denis)(objectClass=user)(mail=denis@firma.local)\(!(userAccountControl:1.2.840.113556.1.4.803:=2)))) parsing failed: Bad search filter
Apr 29 16:27:06 auth: Debug: client passdb out: FAIL    1       user=denis      temp

Код: Выделить всё

root@mail:/usr/local/etc/dovecot # cat dovecot-ldap.conf.ext
# http://wiki.dovecot.org/AuthDatabase/LDAP
# Список LDAP-хостов, а в нашем случае контроллеров домена (DC):
hosts = 192.168.1.6:3268
#uris = ldap://192.168.1.6
# Авторизовываться при подключении к DC
auth_bind = yes
# Distinguished Name . имя пользователя, используемое для подключения к DC
dn = cn=unix_ldap,cn=Users,dc=firma,dc=local
# Пароль пользователя, указанного выше
dnpass = 9875321
# LDAP base . конкретная область поиска в AD
base = CN=Users,dc=firma,dc=local
# Фильтр для выборки пользователей
#user_filter = (&(ObjectClass=person)(sAMAccountName=%u))
user_filter = (&(sAMAccountName=%u)(objectClass=user)(mail=%u@firma.local)\(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
# Фильтр для проверки паролей
#pass_filter = (&(ObjectClass=person)(sAMAccountName=%u))
pass_filter = (&(sAMAccountName=%u)(objectClass=user)(mail=%u@firma.local)\(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
# Атрибуты проверки пароля, и что они означают для Dovecot.
# Здесь указываем, что при проверке пароля имя пользователя брать из sAMAccountName
pass_attrs = sAMAccountName=user

Код: Выделить всё

Apr 29 16:34:46 master: Info: Dovecot v2.1.15 starting up
Apr 29 16:34:59 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth
Apr 29 16:34:59 auth: Debug: auth client connected (pid=1232)
Apr 29 16:35:08 auth: Debug: client in: AUTH    1       PLAIN   service=imap    session=3st3HX/bRgDAqAEE        lip=192.168.1.9 rip=192.168.1.4 lport=143     rport=62278      resp=AGRlbmlzQHZvbG9nZGFiZXJyeS5sb2NhbAA5ODc1MzIx
Apr 29 16:35:08 auth: Debug: ldap(denis,192.168.1.4,<3st3HX/bRgDAqAEE>): bind search: base=CN=Users,dc=firma,dc=local filter=(&(ObjectClass=person)(sAMAccountName=denis))
Apr 29 16:35:08 auth: Debug: ldap(denis,192.168.1.4,<3st3HX/bRgDAqAEE>): result: sAMAccountName=denis
Apr 29 16:35:08 auth: Debug: client passdb out: OK      1       user=denis
Apr 29 16:35:08 auth: Debug: master in: REQUEST 2132279297      1232    1       6728a97bb85b1205f46104c6baf83306
Apr 29 16:35:08 auth: Debug: ldap(denis,192.168.1.4,<3st3HX/bRgDAqAEE>): user search: base=CN=Users,dc=firma,dc=local scope=subtree filter=(&(ObjectClass=person)(sAMAccountName=denis)) fields=homeDirectory,uidNumber,gidNumber
Apr 29 16:35:08 auth: Debug: ldap(denis,192.168.1.4,<3st3HX/bRgDAqAEE>): result:  homeDirectory missing; uidNumber missing; gidNumber missing
Apr 29 16:35:08 auth: Debug: master userdb out: USER    2132279297      denis
Apr 29 16:35:08 imap-login: Info: Login: user=<denis>, method=PLAIN, rip=192.168.1.4, lip=192.168.1.9, mpid=1236, session=<3st3HX/bRgDAqAEE>
Apr 29 16:35:08 imap(denis): Debug: Effective uid=26, gid=26, home=
Apr 29 16:35:08 imap(denis): Error: user denis: Initialization failed: userdb didn't return a home directory, but mail_location used it (%h): maildir:%h
Apr 29 16:35:08 imap(denis): Error: Invalid user settings. Refer to server log for more information.