OpenLDAP

[CourtesyFlush]

Tearing my hair out for 3 days now ....

I want to get Postfix to lookup local recipients in Openldap. I want postfix to connect to openldap, using an ldap account I have created for this purpose.

postfix/postfix

bind=yes
bind_dn = uid=postfix, ou=Users, dc=absolutleyfedupnow, dc=com
bind_pw = postfix
server_host = ldap://server.absolutleyfedupnow.com:389
search_base = ou=Users, dc=absolutleyfedupnow, dc=com
domain = absolutleyfedupnow.com
query_filter = (&(mail=%s)(mailEnabled=TRUE))
result_attribute = mail

Simple Bind Failed: NT_STATUS_LOGON_FAILURE

Why?

I can log in with these credentials from the command line using Kinit??????

[fannyadams]

Does the entry exist in LDAP with uid? cn is more common usage.

[suityou01]

Tearing my hair out for 3 days now ....

I want to get Postfix to lookup local recipients in Openldap. I want postfix to connect to openldap, using an ldap account I have created for this purpose.

postfix/postfix

bind=yes
bind_dn = uid=postfix, ou=Users, dc=absolutleyfedupnow, dc=com
bind_pw = postfix
server_host = ldap://server.absolutleyfedupnow.com:389
search_base = ou=Users, dc=absolutleyfedupnow, dc=com
domain = absolutleyfedupnow.com
query_filter = (&(mail=%s)(mailEnabled=TRUE))
result_attribute = mail

Why?

I can log in with these credentials from the command line using Kinit??????

Try this

bind=yes
bind_dn = [email protected]
bind_pw = postfix
server_host = ldap://server.absolutleyfedupnow.com:389
search_base = ou=Users, dc=absolutleyfedupnow, dc=com
domain = absolutleyfedupnow.com
query_filter = (&(mail=%s)(mailEnabled=TRUE))
result_attribute = mail

HTH

[vetran]

softerra do a nice LDAP browser I find that really helps figure out what you are doing wrong.

[NoddY]

I've had luck with generating local UNIX accounts using LDAP:

nss_ldap-1.265_12 RFC 2307 NSS module
openldap-client-2.4.40_1 Open source LDAP client implementation
pam_ldap-1.8.6_3 Pam module for authenticating with LDAP


Then Postfix (and Dovecot for IMAP) need very little config because they now see all accounts as local.

I've also be using Apache Directory Studio for browing ldap trees - it a plugin for Eclipse.