Users March 2012

users@lists.roundcube.net

43 participants
45 discussions

main.inc.php settings in database table
by Ismail YENIGUL 08 Mar '12

08 Mar '12

Hello, Is there plugin or feature to store main.inc.php configuration to store on sql table for easy management? I see that "Admin interface for managing users and settings" feature in the roadmap "milestone:Later" Does this feature will cover this request? Thanks -- Ismail YENIGUL Team Leader / Takım Lideri SurGATE Labs Phone :+90 216-4709423 | Mobile:+90 533 747 36 65 SurGATE: West Coast Labs Premium Anti-Spam Certificated Twitter: http://www.twitter.com/surgate Blog: http://www.surgate.com/blog

1 0

R: R: R: autologin from other php page
by kaifamm＠libero.it 07 Mar '12

07 Mar '12

Hi, I found also this : /roundcube/config/main.inc.php $rcmail_config['plugins'] = array('autologon'); /roundcube/plugins/autologon/autologon.php <?php /** * Sample plugin to try out some hooks. * This performs an automatic login if accessed from localhost */ class autologon extends rcube_plugin { public $task = 'login'; function init() { $this->add_hook('startup', array($this, 'startup')); $this->add_hook('authenticate', array($this, 'authenticate')); } function startup($args) { $rcmail = rcmail::get_instance(); // change action to login if (empty($_SESSION['user_id']) && !empty($_POST['_autologin'])) $args['action'] = 'login'; return $args; } function authenticate($args) { if (!empty($_POST['_autologin'])) { $args['user'] = $_POST['_user']; $args['pass'] = $_POST['_pass']; $args['cookiecheck'] = false; $args['valid'] = true; } return $args; } } HTML: <form name="form" action="roundcube/index.php" method="post"> <input type="hidden" name="_action" value="login" /> <input type="hidden" name="_task" value="login" /> <input type="hidden" name="_autologin" value="1" /> <table border="0"> <tr> <td>username:</td> <td> <input name="_user" id="rcmloginuser" size="28" type="text" /></td> </tr> <tr> <td>Password:</td> <td> <input name="_pass" id="rcmloginpwd" size="28" type="password"/></td> </tr> <tr> <td> <input class="Button" type="submit" size="28" value="Webmail Login"/></td> </tr> </table> </form> >----Messaggio originale---- >Da: kaifamm(a)libero.it >Data: 07/03/2012 15.38 >A: <users(a)lists.roundcube.net> >Ogg: [RCU] R: R: autologin from other php page > >Hi, > > the plugin "autologin" with version 0.7.1 doesn't work !!! The logical it's >all different !! > >I made a little script in php to make autologin and it works : > ><? >require_once 'program/include/iniset.php'; >$RCMAIL = rcmail::get_instance(); >$auth= $RCMAIL->get_request_token(); >?> > ><form method="post" action="index.php" name="form"> ><input type="hidden" value="<?php echo $auth ?>" name="_token"> ><input type="hidden" value="login" name="_action"> ><input id="timezone" type="hidden" value="_default_" name="_timezone"> ><input id="url" type="hidden" name="_url"> ><input id="domain" type="hidden" value="xxxxxx.xx" name="_domainname"> ><input id="redirectdomain" type="hidden" value="xxxxxx.xx" name=" >_redirect_domain"> > ><input id="loginuser" type="text" value="" name="_user"> ><input id="loginpwd" type="password" value="" name="_pass"> ><input type="submit" value="SUBMIT"> ></form> > > > >>----Messaggio originale---- >>Da: kaifamm(a)libero.it >>Data: 06/03/2012 18.21 >>A: <users(a)lists.roundcube.net> >>Ogg: [RCU] R: autologin from other php page >> >>Hi, >> >>in my previous email I was wrong to write : the autologin plugin does NOT >>work !!! >> >>Thank you >>Mark >> >> >> >>>----Messaggio originale---- >>>Da: kaifamm(a)libero.it >>>Data: 06/03/2012 17.01 >>>A: <users(a)lists.roundcube.net> >>>Ogg: [RCU] autologin from other php page >>> >>>Hi All, >>> >>> it's me again :-) !!!!!!! >>> >>>I would use roundcube with autologin from another php script. I found the >>>plugin "autologin" but it seems to work. >>>This is my php script : >>> >>><!DOCTYPE html> >>><html> >>><head> >>></head> >>><body> >>><? >>>$_POST['password'] = 'password in clear and in plain text'; >>>$_SESSION['userpassword'] = strrev(base64_encode('*yourkey*'.$_POST >>>['password'])); >>>?> >>><form name="roundcubelogin" action="http://192.168.254.201/roundcube/? >>>_task=mail" method="post" target="roundcube"> >>><input type="hidden" name="_timezone" value="_default_" /> >>><input type="hidden" name="_task" value="mail" /> >>><input type="hidden" name="_autologin" value="1" /> >>><input type="hidden" name="_user" value="mark" /> >>><input type="hidden" name="_host" value="192.168.254.201:143" /> >>><input type="hidden" name="_pass" value="<?echo $_SESSION['userpassword']? >>" >>>/> >>><input type="submit" name="submit" value="SUBMIT" /> >>></form> >>></body> >>></html> >>> >>>The plugin autologin.php : >>> >>><?php >>> >>>/** >>> * This plugin performs an automatic login if accessed >>> * with post Data from other Site an Portal or CMS >>> * Based on sample autologon PlugIn >>> * >>> * @version 0.2 >>> * @author Eric Appelt (lacri) >>> * >>> * show into README to install and config >>> * >>> * changes >>> * 0.2 make a little bit secure with base64_encode strrev >>> * and a key thats replace after submitting encoded pass data >>> * >>> */ >>> >>>class autologin extends rcube_plugin >>>{ >>> >>> function init() >>> { >>> $this->add_hook('startup', array($this, 'startup')); >>> $this->add_hook('authenticate', array($this, 'authenticate')); >>> } >>> >>> function startup($args) >>> { >>> $rcmail = rcmail::get_instance(); >>> >>> $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); >>> >>> // change action to login >>> if ($args['task'] == 'mail' && empty($args['action']) && empty ($_SESSION >>>['user_id']) && !empty($autologin)) { >>> $args['action'] = 'login'; >>> >>> // decode pass, revert and replace key >>> $_POST['_pass'] = str_replace('*yourkey*','',base64_decode(strrev >>>(get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1')))); >>> >>> // set initial cookie without this cookie login is not possible >>> $_COOKIE['roundcube_sessid'] = session_id(); >>> } >>> return $args; >>> } >>> >>> function authenticate($args) >>> { >>> $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); >>> >>> if (!empty($autologin)) { >>> $args['user'] = get_input_value('_user', RCUBE_INPUT_POST); >>> $args['pass'] = get_input_value('_pass', RCUBE_INPUT_POST); >>> $args['host'] = get_input_value('_host', RCUBE_INPUT_POST); >>> } >>> return $args; >>> } >>>} >>>_______________________________________________ >>>Roundcube Users mailing list >>>users(a)lists.roundcube.net >>>http://lists.roundcube.net/mailman/listinfo/users >>> >> >> >>_______________________________________________ >>Roundcube Users mailing list >>users(a)lists.roundcube.net >>http://lists.roundcube.net/mailman/listinfo/users >> > > >_______________________________________________ >Roundcube Users mailing list >users(a)lists.roundcube.net >http://lists.roundcube.net/mailman/listinfo/users >

1 0

R: R: autologin from other php page
by kaifamm＠libero.it 07 Mar '12

07 Mar '12

Hi, the plugin "autologin" with version 0.7.1 doesn't work !!! The logical it's all different !! I made a little script in php to make autologin and it works : <? require_once 'program/include/iniset.php'; $RCMAIL = rcmail::get_instance(); $auth= $RCMAIL->get_request_token(); ?> <form method="post" action="index.php" name="form"> <input type="hidden" value="<?php echo $auth ?>" name="_token"> <input type="hidden" value="login" name="_action"> <input id="timezone" type="hidden" value="_default_" name="_timezone"> <input id="url" type="hidden" name="_url"> <input id="domain" type="hidden" value="xxxxxx.xx" name="_domainname"> <input id="redirectdomain" type="hidden" value="xxxxxx.xx" name=" _redirect_domain"> <input id="loginuser" type="text" value="" name="_user"> <input id="loginpwd" type="password" value="" name="_pass"> <input type="submit" value="SUBMIT"> </form> >----Messaggio originale---- >Da: kaifamm(a)libero.it >Data: 06/03/2012 18.21 >A: <users(a)lists.roundcube.net> >Ogg: [RCU] R: autologin from other php page > >Hi, > >in my previous email I was wrong to write : the autologin plugin does NOT >work !!! > >Thank you >Mark > > > >>----Messaggio originale---- >>Da: kaifamm(a)libero.it >>Data: 06/03/2012 17.01 >>A: <users(a)lists.roundcube.net> >>Ogg: [RCU] autologin from other php page >> >>Hi All, >> >> it's me again :-) !!!!!!! >> >>I would use roundcube with autologin from another php script. I found the >>plugin "autologin" but it seems to work. >>This is my php script : >> >><!DOCTYPE html> >><html> >><head> >></head> >><body> >><? >>$_POST['password'] = 'password in clear and in plain text'; >>$_SESSION['userpassword'] = strrev(base64_encode('*yourkey*'.$_POST >>['password'])); >>?> >><form name="roundcubelogin" action="http://192.168.254.201/roundcube/? >>_task=mail" method="post" target="roundcube"> >><input type="hidden" name="_timezone" value="_default_" /> >><input type="hidden" name="_task" value="mail" /> >><input type="hidden" name="_autologin" value="1" /> >><input type="hidden" name="_user" value="mark" /> >><input type="hidden" name="_host" value="192.168.254.201:143" /> >><input type="hidden" name="_pass" value="<?echo $_SESSION['userpassword']? >" >>/> >><input type="submit" name="submit" value="SUBMIT" /> >></form> >></body> >></html> >> >>The plugin autologin.php : >> >><?php >> >>/** >> * This plugin performs an automatic login if accessed >> * with post Data from other Site an Portal or CMS >> * Based on sample autologon PlugIn >> * >> * @version 0.2 >> * @author Eric Appelt (lacri) >> * >> * show into README to install and config >> * >> * changes >> * 0.2 make a little bit secure with base64_encode strrev >> * and a key thats replace after submitting encoded pass data >> * >> */ >> >>class autologin extends rcube_plugin >>{ >> >> function init() >> { >> $this->add_hook('startup', array($this, 'startup')); >> $this->add_hook('authenticate', array($this, 'authenticate')); >> } >> >> function startup($args) >> { >> $rcmail = rcmail::get_instance(); >> >> $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); >> >> // change action to login >> if ($args['task'] == 'mail' && empty($args['action']) && empty($_SESSION >>['user_id']) && !empty($autologin)) { >> $args['action'] = 'login'; >> >> // decode pass, revert and replace key >> $_POST['_pass'] = str_replace('*yourkey*','',base64_decode(strrev >>(get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1')))); >> >> // set initial cookie without this cookie login is not possible >> $_COOKIE['roundcube_sessid'] = session_id(); >> } >> return $args; >> } >> >> function authenticate($args) >> { >> $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); >> >> if (!empty($autologin)) { >> $args['user'] = get_input_value('_user', RCUBE_INPUT_POST); >> $args['pass'] = get_input_value('_pass', RCUBE_INPUT_POST); >> $args['host'] = get_input_value('_host', RCUBE_INPUT_POST); >> } >> return $args; >> } >>} >>_______________________________________________ >>Roundcube Users mailing list >>users(a)lists.roundcube.net >>http://lists.roundcube.net/mailman/listinfo/users >> > > >_______________________________________________ >Roundcube Users mailing list >users(a)lists.roundcube.net >http://lists.roundcube.net/mailman/listinfo/users >

1 0

R: Re: plugin to set forwarding in a roundcube-exim configuration
by kaifamm＠libero.it 07 Mar '12

07 Mar '12

Hi, yes it works, i'm using procmail that call sieve and also the file .forward in home directory of user. I in the .forward file call sieve so : | /usr/libexec/dovecot/deliver Bye ----Messaggio originale---- Da: gedeon007(a)gmail.com Data: 07/03/2012 11.05 A: "Roundcube Users mailing list"<users(a)lists.roundcube.net> Ogg: Re: [RCU] plugin to set forwarding in a roundcube-exim configuration Hello, Thank you for your answer. Actually we don't use sieve (I haven't heard about it yet). We are using a multi tenanted environment. We configure forwarders in the following way: we have a folder for each domains in the /etc/virtual folder and each folder contains a file called aliases. All of the forwarders for domain example.com are configured in /etc/virtual/example.com/aliases file. If I add a new alias then I only run newaliases and it's working. Do you have experiences such configuration and do you know whether this method and sieve works together? Thank you once more. Best regards, Chris 2012/3/6 Benny Pedersen <me(a)junc.org> Den 2012-03-05 16:04, Krisztián Gulyás skrev: I would like to install a plugin (or any solution) next to my roundcube-exim configuration to let my users set forwarding on their own. managesieve, if you got exim sieve working aswell from that on make a forward sieve rule in roundcube _______________________________________________ Roundcube Users mailing list users(a)lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users

2 1

plugin to set forwarding in a roundcube-exim configuration
by Krisztián Gulyás 07 Mar '12

07 Mar '12

Hi all, I would like to install a plugin (or any solution) next to my roundcube-exim configuration to let my users set forwarding on their own. Has anyone experienced something similar or could anyone help me? Thank you very much. Best regards, Chris -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

2 2

R: autologin from other php page
by kaifamm＠libero.it 06 Mar '12

06 Mar '12

Hi, in my previous email I was wrong to write : the autologin plugin does NOT work !!! Thank you Mark >----Messaggio originale---- >Da: kaifamm(a)libero.it >Data: 06/03/2012 17.01 >A: <users(a)lists.roundcube.net> >Ogg: [RCU] autologin from other php page > >Hi All, > > it's me again :-) !!!!!!! > >I would use roundcube with autologin from another php script. I found the >plugin "autologin" but it seems to work. >This is my php script : > ><!DOCTYPE html> ><html> ><head> ></head> ><body> ><? >$_POST['password'] = 'password in clear and in plain text'; >$_SESSION['userpassword'] = strrev(base64_encode('*yourkey*'.$_POST >['password'])); >?> ><form name="roundcubelogin" action="http://192.168.254.201/roundcube/? >_task=mail" method="post" target="roundcube"> ><input type="hidden" name="_timezone" value="_default_" /> ><input type="hidden" name="_task" value="mail" /> ><input type="hidden" name="_autologin" value="1" /> ><input type="hidden" name="_user" value="mark" /> ><input type="hidden" name="_host" value="192.168.254.201:143" /> ><input type="hidden" name="_pass" value="<?echo $_SESSION['userpassword']?>" >/> ><input type="submit" name="submit" value="SUBMIT" /> ></form> ></body> ></html> > >The plugin autologin.php : > ><?php > >/** > * This plugin performs an automatic login if accessed > * with post Data from other Site an Portal or CMS > * Based on sample autologon PlugIn > * > * @version 0.2 > * @author Eric Appelt (lacri) > * > * show into README to install and config > * > * changes > * 0.2 make a little bit secure with base64_encode strrev > * and a key thats replace after submitting encoded pass data > * > */ > >class autologin extends rcube_plugin >{ > > function init() > { > $this->add_hook('startup', array($this, 'startup')); > $this->add_hook('authenticate', array($this, 'authenticate')); > } > > function startup($args) > { > $rcmail = rcmail::get_instance(); > > $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); > > // change action to login > if ($args['task'] == 'mail' && empty($args['action']) && empty($_SESSION >['user_id']) && !empty($autologin)) { > $args['action'] = 'login'; > > // decode pass, revert and replace key > $_POST['_pass'] = str_replace('*yourkey*','',base64_decode(strrev >(get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1')))); > > // set initial cookie without this cookie login is not possible > $_COOKIE['roundcube_sessid'] = session_id(); > } > return $args; > } > > function authenticate($args) > { > $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); > > if (!empty($autologin)) { > $args['user'] = get_input_value('_user', RCUBE_INPUT_POST); > $args['pass'] = get_input_value('_pass', RCUBE_INPUT_POST); > $args['host'] = get_input_value('_host', RCUBE_INPUT_POST); > } > return $args; > } >} >_______________________________________________ >Roundcube Users mailing list >users(a)lists.roundcube.net >http://lists.roundcube.net/mailman/listinfo/users >

1 0

autologin from other php page
by kaifamm＠libero.it 06 Mar '12

06 Mar '12

Hi All, it's me again :-) !!!!!!! I would use roundcube with autologin from another php script. I found the plugin "autologin" but it seems to work. This is my php script : <!DOCTYPE html> <html> <head> </head> <body> <? $_POST['password'] = 'password in clear and in plain text'; $_SESSION['userpassword'] = strrev(base64_encode('*yourkey*'.$_POST ['password'])); ?> <form name="roundcubelogin" action="http://192.168.254.201/roundcube/? _task=mail" method="post" target="roundcube"> <input type="hidden" name="_timezone" value="_default_" /> <input type="hidden" name="_task" value="mail" /> <input type="hidden" name="_autologin" value="1" /> <input type="hidden" name="_user" value="mark" /> <input type="hidden" name="_host" value="192.168.254.201:143" /> <input type="hidden" name="_pass" value="<?echo $_SESSION['userpassword']?>" /> <input type="submit" name="submit" value="SUBMIT" /> </form> </body> </html> The plugin autologin.php : <?php /** * This plugin performs an automatic login if accessed * with post Data from other Site an Portal or CMS * Based on sample autologon PlugIn * * @version 0.2 * @author Eric Appelt (lacri) * * show into README to install and config * * changes * 0.2 make a little bit secure with base64_encode strrev * and a key thats replace after submitting encoded pass data * */ class autologin extends rcube_plugin { function init() { $this->add_hook('startup', array($this, 'startup')); $this->add_hook('authenticate', array($this, 'authenticate')); } function startup($args) { $rcmail = rcmail::get_instance(); $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); // change action to login if ($args['task'] == 'mail' && empty($args['action']) && empty($_SESSION ['user_id']) && !empty($autologin)) { $args['action'] = 'login'; // decode pass, revert and replace key $_POST['_pass'] = str_replace('*yourkey*','',base64_decode(strrev (get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1')))); // set initial cookie without this cookie login is not possible $_COOKIE['roundcube_sessid'] = session_id(); } return $args; } function authenticate($args) { $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); if (!empty($autologin)) { $args['user'] = get_input_value('_user', RCUBE_INPUT_POST); $args['pass'] = get_input_value('_pass', RCUBE_INPUT_POST); $args['host'] = get_input_value('_host', RCUBE_INPUT_POST); } return $args; } }

1 0

R: Re: R: Re: Ldap Addressbook : problem for credentials in private addressbook
by kaifamm＠libero.it 06 Mar '12

06 Mar '12

Hi, Thank you for the tips !!!! I found the solution !!!!!!!! Yes in the script rcabook-setup.sh there is not the creation of single users for private addressbook !!! So I made a script ( rc_create_user.sh) that create users in ldap server for private addressbook. This script must run for each ldap users. #!/bin/bash # Parameters : USER PASSWORD # example : rc_create_user.sh mark xxxx # #------------ parameters start -------------------------------- if [ $# -lt 2 ] ; then echo "ERROR - Number of parameters is wrong. Example: rc_create_user.sh user password" exit 1 fi abook_user=$1; abook_pass=$2; #------------ parameters end -------------------------------- #------------ configuration start -------------------------------- server="ldap://localhost:389"; suffix="dc=localhost"; rootdn="cn=admin,$suffix"; abook_name="rcabook"; subdir_public="public"; subdir_private="private"; base_dn="ou=$subdir_private,ou=$abook_name,$suffix"; bind_dn="cn=$abook_user,$base_dn"; bind_pass="$abook_pass"; #------------ configuration end -------------------------------- echo " dn: $bind_dn cn: $abook_user userPassword: `slappasswd -s $abook_pass` objectClass: organizationalRole objectClass: simpleSecurityObject " | ldapadd -x -c -H $server -D $rootdn -W 2> /dev/null || { echo "ERROR-unable to create user!"; exit 1; }; >----Messaggio originale---- >Da: andudi(a)gmx.ch >Data: 05/03/2012 20.03 >A: "kaifamm(a)libero.it"<kaifamm(a)libero.it>, "Roundcube Users mailing list" <users(a)lists.roundcube.net> >Ogg: Re: [RCU] R: Re: Ldap Addressbook : problem for credentials in private addressbook > >Well. the script was written before private abooks was added... ACL is not checked for that yet >But have you created the user? Can you show the output of ldapsearch? >I have not yet scanned yor slapd log... will do that at home > >Andreas > > > >"kaifamm(a)libero.it" <kaifamm(a)libero.it> schrieb: > >>Hi All, >> >> thanks for the answers !!! >> >>I made other tests : >> >>If I try this : ldapsearch -xLLL -H ldap://localhost:389 -D cn=rcuser, >>ou=rcabook,dc=localhost -w rcpass -b ou=rcabook,dc=localhost >>it works fine. >> >>If I try this : ldapsearch -xLLL -H ldap://localhost:389 -D cn=mark, >>ou=private,ou=rcabook,dc=localhost -w xxxx >>It answer : ldap_bind: Invalid credentials (49), >>so I think that there is an ACL problem. >> >>I think that there is an error in the script rcabook-setup.sh. >> >>I did run and run again the script rcabook-setup.sh, it doesn't return >>errors and it said : >>The LDAP addressbook is ready now for using: >> base_dn: ou=rcabook,dc=localhost >> bind_dn: cn=rcuser,ou=rcabook,dc=localhost >> >>Use the following command for reading and checking your setup: >> ldapsearch -xLLL -H ldap://localhost:389 -D cn=rcuser,ou=rcabook, >>dc=localhost -w rcpass -b ou=rcabook,dc=localhost >> >>I report my ldap.log with the debug of ldap server : >> >>daemon: activity on: >>slap_listener_activate(7): >>daemon: epoll: listen=7 busy >>daemon: epoll: listen=8 active_threads=0 tvp=zero >>>>> slap_listener(ldap:///) >>daemon: listen=7, new connection on 13 >>daemon: activity on 1 descriptor >>daemon: activity on: >>daemon: epoll: listen=7 active_threads=0 tvp=zero >>daemon: epoll: listen=8 active_threads=0 tvp=zero >>daemon: added 13r (active) listener=(nil) >>daemon: activity on 1 descriptor >>conn=21 fd=13 ACCEPT from IP=127.0.0.1:45320 (IP=0.0.0.0:389) >>daemon: activity on: 13r >>daemon: read active on 13 >>daemon: epoll: listen=7 active_threads=0 tvp=zero >>connection_get(13) >>daemon: epoll: listen=8 active_threads=0 tvp=zero >>connection_get(13): got connid=21 >>connection_read(13): checking for input on id=21 >>ber_get_next >>ldap_read: want=8, got=8 >>0000: 30 84 00 00 00 3e 02 01 0....>.. >> >>ldap_read: want=60, got=60 >>0000: 01 60 84 00 00 00 35 02 01 03 04 2a 63 6e 3d 6d >>.`....5....*cn=m >>0010: 61 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 2c 6f >>ark,ou=private,o >>0020: 75 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c 6f 63 >>u=rcabook,dc=loc >>0030: 61 6c 68 6f 73 74 80 04 78 78 78 78 alhost..xxxx >> >>ber_get_next: tag 0x30 len 62 contents: >>ber_dump: buf=0xa0b040a8 ptr=0xa0b040a8 end=0xa0b040e6 len=62 >>0000: 02 01 01 60 84 00 00 00 35 02 01 03 04 2a 63 6e >>...`....5....*cn >>0010: 3d 6d 61 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 >>=mark,ou=private >>0020: 2c 6f 75 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c >>,ou=rcabook,dc=l >>0030: 6f 63 61 6c 68 6f 73 74 80 04 78 78 78 78 >>ocalhost..xxxx >>op tag 0x60, time 1330963449 >>ber_get_next >>ldap_read: want=8 error=Resource temporarily unavailable >>conn=21 op=0 do_bind >>ber_scanf fmt ({imt) ber: >>ber_dump: buf=0xa0b040a8 ptr=0xa0b040ab end=0xa0b040e6 len=59 >>0000: 60 84 00 00 00 35 02 01 03 04 2a 63 6e 3d 6d 61 >>`....5....*cn=ma >>0010: 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 2c 6f 75 >>rk,ou=private,ou >>0020: 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c 6f 63 61 >>=rcabook,dc=loca >>0030: 6c 68 6f 73 74 80 04 78 78 78 78 lhost..xxxx >> >>ber_scanf fmt (m}) ber: >>ber_dump: buf=0xa0b040a8 ptr=0xa0b040e0 end=0xa0b040e6 len=6 >>0000: 00 04 78 78 78 78 ..xxxx >> >>>>> dnPrettyNormal: <cn=mark,ou=private,ou=rcabook,dc=localhost> >>=> ldap_bv2dn(cn=mark,ou=private,ou=rcabook,dc=localhost,0) >><= ldap_bv2dn(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 >>=> ldap_dn2bv(272) >><= ldap_dn2bv(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 >>=> ldap_dn2bv(272) >><= ldap_dn2bv(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 >><<< dnPrettyNormal: <cn=mark,ou=private,ou=rcabook,dc=localhost>, >><cn=mark, >>ou=private,ou=rcabook,dc=localhost> >>conn=21 op=0 BIND dn="cn=mark,ou=private,ou=rcabook,dc=localhost" >>method=128 >>do_bind: version=3 dn="cn=mark,ou=private,ou=rcabook,dc=localhost" >>method=128 >>==> bdb_bind: dn: cn=mark,ou=private,ou=rcabook,dc=localhost >>bdb_dn2entry("cn=mark,ou=private,ou=rcabook,dc=localhost") >>=> bdb_dn2id("cn=mark,ou=private,ou=rcabook,dc=localhost") >><= bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found >>(-30988) >>send_ldap_result: conn=21 op=0 p=3 >>send_ldap_result: err=49 matched="" text="" >>send_ldap_response: msgid=1 tag=97 err=49 >>ber_flush2: 22 bytes to sd 13 >>0000: 30 84 00 00 00 10 02 01 01 61 84 00 00 00 07 0a >>0........a...... >>0010: 01 31 04 00 04 00 .1.... >> >>ldap_write: want=22, written=22 >>0000: 30 84 00 00 00 10 02 01 01 61 84 00 00 00 07 0a >>0........a...... >>0010: 01 31 04 00 04 00 .1.... >> >>conn=21 op=0 RESULT tag=97 err=49 text= >>daemon: activity on 1 descriptor >>daemon: activity on: >>daemon: epoll: listen=7 active_threads=0 tvp=zero >>daemon: epoll: listen=8 active_threads=0 tvp=zero >>daemon: activity on 1 descriptor >>daemon: activity on: 13r >>daemon: read active on 13 >>daemon: epoll: listen=7 active_threads=0 tvp=zero >>connection_get(13) >>daemon: epoll: listen=8 active_threads=0 tvp=zero >>connection_get(13): got connid=21 >>connection_read(13): checking for input on id=21 >>ber_get_next >>ldap_read: want=8, got=0 >> >>ber_get_next on fd 13 failed errno=0 (Success) >>connection_read(13): input error=-2 id=21, closing. >>connection_closing: readying conn=21 sd=13 for close >>connection_close: conn=21 sd=13 >>daemon: activity on 1 descriptor >>daemon: removing 13 >>daemon: activity on: >>conn=21 fd=13 closed (connection lost) >>daemon: epoll: listen=7 active_threads=0 tvp=zero >>daemon: epoll: listen=8 active_threads=0 tvp=zero >> >> >> >>Thanks a lot >>Mark >> >>>----Messaggio originale---- >>>Da: andudi(a)gmx.ch >>>Data: 05/03/2012 14.09 >>>A: "kaifamm(a)libero.it"<kaifamm(a)libero.it>, <users(a)lists.roundcube.net> >>>Ogg: Re: [RCU] Ldap Addressbook : problem for credentials in private >>addressbook >>> >>>Hei >>>I am i ski hollydays and have not my setup in front. >>> >>>Your setup seems ok, but can you try to connect with ldapsearch on the >> >>commandline? >>>Another try could be to switch on logging in slapd.conf >>>Ldap.conf is not used by server but by clients like ldapsearch... >>> >>>Andreas >>> >>> >>> >>>"kaifamm(a)libero.it" <kaifamm(a)libero.it> schrieb: >>> >>>>Hi All, >>>> >>>>I configured the ldap server and roundcube to manage contacts. I used >>>>the >>>>howto : http://trac.roundcube.net/wiki/Howto_Ldap. It work quite, I >>>>have only >>>>a problem for credentials in private addressbook. The public >>>>addressbook works >>>>fine, I can search and add contacts. >>>> >>>>I checked the Mark's password and it is correct. I tried to use >>rootpw >>>>but it >>>>doesn't works. >>>> >>>>My versions are : >>>>openldap-servers-2.4.19-6 >>>>php-5.3.3-1 >>>>roundcube 0.7.1 >>>> >>>>I report the error in ldap log of rouncube, my slapd.conf and my >>>>main.inc.php. >>>> >>>>Thanks a lot >>>> >>>>Mark >>>> >>>>-------------------------------- >>>>logs/ldap : >>>> >>>>[05-Mar-2012 10:09:01 +0100]: C: Connect [localhost:389] >>>>[05-Mar-2012 10:09:01 +0100]: S: OK >>>>[05-Mar-2012 10:09:01 +0100]: C: Bind [dn: >>>>cn=mark,ou=private,ou=rcabook, >>>>dc=localhost] [pass: xxxx] >>>>[05-Mar-2012 10:09:01 +0100]: S: Invalid credentials >>>>[05-Mar-2012 10:09:01 +0100]: C: Close >>>> >>>> >>>>[05-Mar-2012 10:14:24 +0100]: C: Connect [localhost:389] >>>>[05-Mar-2012 10:14:24 +0100]: S: OK >>>>[05-Mar-2012 10:14:24 +0100]: C: Bind [dn: >>>>cn=mark,ou=private,ou=rcabook, >>>>dc=localhost] [pass: xxxx] >>>>[05-Mar-2012 10:14:24 +0100]: S: Invalid credentials >>>>[05-Mar-2012 10:14:24 +0100]: C: Close >>>>[05-Mar-2012 10:27:42 +0100]: C: Connect [localhost:389] >>>>[05-Mar-2012 10:27:42 +0100]: S: OK >>>>[05-Mar-2012 10:27:42 +0100]: C: Bind [dn: >>>>cn=mark,ou=private,ou=rcabook, >>>>dc=localhost] [pass: xxxx] >>>>[05-Mar-2012 10:27:42 +0100]: S: Invalid credentials >>>>[05-Mar-2012 10:27:42 +0100]: C: Close >>>>[05-Mar-2012 10:27:52 +0100]: C: Connect [localhost:389] >>>>[05-Mar-2012 10:27:52 +0100]: S: OK >>>>[05-Mar-2012 10:27:52 +0100]: C: Bind [dn: >>>>cn=mark,ou=private,ou=rcabook, >>>>dc=localhost] [pass: xxxx] >>>>[05-Mar-2012 10:27:52 +0100]: S: Invalid credentials >>>>[05-Mar-2012 10:27:52 +0100]: C: Add [dn: >>mail=ssssss(a)iiii.uu,cn=mark, >>>>ou=private,ou=rcabook,dc=localhost]: Array >>>>( >>>> [cn] => ssssssss sss >>>> [sn] => sss >>>> [givenname] => ssssssss >>>> [mail] => ssssss(a)iiii.uu >>>> [objectClass] => Array >>>> ( >>>> [0] => top >>>> [1] => inetOrgPerson >>>> ) >>>> >>>>) >>>> >>>>[05-Mar-2012 10:27:52 +0100]: S: Strong(er) authentication required >>>>[05-Mar-2012 10:27:52 +0100]: C: Close >>>>------------------------------------------------------------ >>>>config/main.inc.php >>>> >>>>$rcmail_config['ldap_public']['public'] = array( >>>> 'name' => 'Public LDAP Addressbook', >>>> 'hosts' => array('localhost'), >>>> 'use_tls' => >_______________________________________________ >Roundcube Users mailing list >users(a)lists.roundcube.net >http://lists.roundcube.net/mailman/listinfo/users >

2 1

R: Re: Ldap Addressbook : problem for credentials in private addressbook
by kaifamm＠libero.it 05 Mar '12

05 Mar '12

Hi All, thanks for the answers !!! I made other tests : If I try this : ldapsearch -xLLL -H ldap://localhost:389 -D cn=rcuser, ou=rcabook,dc=localhost -w rcpass -b ou=rcabook,dc=localhost it works fine. If I try this : ldapsearch -xLLL -H ldap://localhost:389 -D cn=mark, ou=private,ou=rcabook,dc=localhost -w xxxx It answer : ldap_bind: Invalid credentials (49), so I think that there is an ACL problem. I think that there is an error in the script rcabook-setup.sh. I did run and run again the script rcabook-setup.sh, it doesn't return errors and it said : The LDAP addressbook is ready now for using: base_dn: ou=rcabook,dc=localhost bind_dn: cn=rcuser,ou=rcabook,dc=localhost Use the following command for reading and checking your setup: ldapsearch -xLLL -H ldap://localhost:389 -D cn=rcuser,ou=rcabook, dc=localhost -w rcpass -b ou=rcabook,dc=localhost I report my ldap.log with the debug of ldap server : daemon: activity on: slap_listener_activate(7): daemon: epoll: listen=7 busy daemon: epoll: listen=8 active_threads=0 tvp=zero >>> slap_listener(ldap:///) daemon: listen=7, new connection on 13 daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: added 13r (active) listener=(nil) daemon: activity on 1 descriptor conn=21 fd=13 ACCEPT from IP=127.0.0.1:45320 (IP=0.0.0.0:389) daemon: activity on: 13r daemon: read active on 13 daemon: epoll: listen=7 active_threads=0 tvp=zero connection_get(13) daemon: epoll: listen=8 active_threads=0 tvp=zero connection_get(13): got connid=21 connection_read(13): checking for input on id=21 ber_get_next ldap_read: want=8, got=8 0000: 30 84 00 00 00 3e 02 01 0....>.. ldap_read: want=60, got=60 0000: 01 60 84 00 00 00 35 02 01 03 04 2a 63 6e 3d 6d .`....5....*cn=m 0010: 61 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 2c 6f ark,ou=private,o 0020: 75 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c 6f 63 u=rcabook,dc=loc 0030: 61 6c 68 6f 73 74 80 04 78 78 78 78 alhost..xxxx ber_get_next: tag 0x30 len 62 contents: ber_dump: buf=0xa0b040a8 ptr=0xa0b040a8 end=0xa0b040e6 len=62 0000: 02 01 01 60 84 00 00 00 35 02 01 03 04 2a 63 6e ...`....5....*cn 0010: 3d 6d 61 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 =mark,ou=private 0020: 2c 6f 75 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c ,ou=rcabook,dc=l 0030: 6f 63 61 6c 68 6f 73 74 80 04 78 78 78 78 ocalhost..xxxx op tag 0x60, time 1330963449 ber_get_next ldap_read: want=8 error=Resource temporarily unavailable conn=21 op=0 do_bind ber_scanf fmt ({imt) ber: ber_dump: buf=0xa0b040a8 ptr=0xa0b040ab end=0xa0b040e6 len=59 0000: 60 84 00 00 00 35 02 01 03 04 2a 63 6e 3d 6d 61 `....5....*cn=ma 0010: 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 2c 6f 75 rk,ou=private,ou 0020: 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c 6f 63 61 =rcabook,dc=loca 0030: 6c 68 6f 73 74 80 04 78 78 78 78 lhost..xxxx ber_scanf fmt (m}) ber: ber_dump: buf=0xa0b040a8 ptr=0xa0b040e0 end=0xa0b040e6 len=6 0000: 00 04 78 78 78 78 ..xxxx >>> dnPrettyNormal: <cn=mark,ou=private,ou=rcabook,dc=localhost> => ldap_bv2dn(cn=mark,ou=private,ou=rcabook,dc=localhost,0) <= ldap_bv2dn(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 <<< dnPrettyNormal: <cn=mark,ou=private,ou=rcabook,dc=localhost>, <cn=mark, ou=private,ou=rcabook,dc=localhost> conn=21 op=0 BIND dn="cn=mark,ou=private,ou=rcabook,dc=localhost" method=128 do_bind: version=3 dn="cn=mark,ou=private,ou=rcabook,dc=localhost" method=128 ==> bdb_bind: dn: cn=mark,ou=private,ou=rcabook,dc=localhost bdb_dn2entry("cn=mark,ou=private,ou=rcabook,dc=localhost") => bdb_dn2id("cn=mark,ou=private,ou=rcabook,dc=localhost") <= bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found (-30988) send_ldap_result: conn=21 op=0 p=3 send_ldap_result: err=49 matched="" text="" send_ldap_response: msgid=1 tag=97 err=49 ber_flush2: 22 bytes to sd 13 0000: 30 84 00 00 00 10 02 01 01 61 84 00 00 00 07 0a 0........a...... 0010: 01 31 04 00 04 00 .1.... ldap_write: want=22, written=22 0000: 30 84 00 00 00 10 02 01 01 61 84 00 00 00 07 0a 0........a...... 0010: 01 31 04 00 04 00 .1.... conn=21 op=0 RESULT tag=97 err=49 text= daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: activity on 1 descriptor daemon: activity on: 13r daemon: read active on 13 daemon: epoll: listen=7 active_threads=0 tvp=zero connection_get(13) daemon: epoll: listen=8 active_threads=0 tvp=zero connection_get(13): got connid=21 connection_read(13): checking for input on id=21 ber_get_next ldap_read: want=8, got=0 ber_get_next on fd 13 failed errno=0 (Success) connection_read(13): input error=-2 id=21, closing. connection_closing: readying conn=21 sd=13 for close connection_close: conn=21 sd=13 daemon: activity on 1 descriptor daemon: removing 13 daemon: activity on: conn=21 fd=13 closed (connection lost) daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero Thanks a lot Mark >----Messaggio originale---- >Da: andudi(a)gmx.ch >Data: 05/03/2012 14.09 >A: "kaifamm(a)libero.it"<kaifamm(a)libero.it>, <users(a)lists.roundcube.net> >Ogg: Re: [RCU] Ldap Addressbook : problem for credentials in private addressbook > >Hei >I am i ski hollydays and have not my setup in front. > >Your setup seems ok, but can you try to connect with ldapsearch on the commandline? >Another try could be to switch on logging in slapd.conf >Ldap.conf is not used by server but by clients like ldapsearch... > >Andreas > > > >"kaifamm(a)libero.it" <kaifamm(a)libero.it> schrieb: > >>Hi All, >> >>I configured the ldap server and roundcube to manage contacts. I used >>the >>howto : http://trac.roundcube.net/wiki/Howto_Ldap. It work quite, I >>have only >>a problem for credentials in private addressbook. The public >>addressbook works >>fine, I can search and add contacts. >> >>I checked the Mark's password and it is correct. I tried to use rootpw >>but it >>doesn't works. >> >>My versions are : >>openldap-servers-2.4.19-6 >>php-5.3.3-1 >>roundcube 0.7.1 >> >>I report the error in ldap log of rouncube, my slapd.conf and my >>main.inc.php. >> >>Thanks a lot >> >>Mark >> >>-------------------------------- >>logs/ldap : >> >>[05-Mar-2012 10:09:01 +0100]: C: Connect [localhost:389] >>[05-Mar-2012 10:09:01 +0100]: S: OK >>[05-Mar-2012 10:09:01 +0100]: C: Bind [dn: >>cn=mark,ou=private,ou=rcabook, >>dc=localhost] [pass: xxxx] >>[05-Mar-2012 10:09:01 +0100]: S: Invalid credentials >>[05-Mar-2012 10:09:01 +0100]: C: Close >> >> >>[05-Mar-2012 10:14:24 +0100]: C: Connect [localhost:389] >>[05-Mar-2012 10:14:24 +0100]: S: OK >>[05-Mar-2012 10:14:24 +0100]: C: Bind [dn: >>cn=mark,ou=private,ou=rcabook, >>dc=localhost] [pass: xxxx] >>[05-Mar-2012 10:14:24 +0100]: S: Invalid credentials >>[05-Mar-2012 10:14:24 +0100]: C: Close >>[05-Mar-2012 10:27:42 +0100]: C: Connect [localhost:389] >>[05-Mar-2012 10:27:42 +0100]: S: OK >>[05-Mar-2012 10:27:42 +0100]: C: Bind [dn: >>cn=mark,ou=private,ou=rcabook, >>dc=localhost] [pass: xxxx] >>[05-Mar-2012 10:27:42 +0100]: S: Invalid credentials >>[05-Mar-2012 10:27:42 +0100]: C: Close >>[05-Mar-2012 10:27:52 +0100]: C: Connect [localhost:389] >>[05-Mar-2012 10:27:52 +0100]: S: OK >>[05-Mar-2012 10:27:52 +0100]: C: Bind [dn: >>cn=mark,ou=private,ou=rcabook, >>dc=localhost] [pass: xxxx] >>[05-Mar-2012 10:27:52 +0100]: S: Invalid credentials >>[05-Mar-2012 10:27:52 +0100]: C: Add [dn: mail=ssssss(a)iiii.uu,cn=mark, >>ou=private,ou=rcabook,dc=localhost]: Array >>( >> [cn] => ssssssss sss >> [sn] => sss >> [givenname] => ssssssss >> [mail] => ssssss(a)iiii.uu >> [objectClass] => Array >> ( >> [0] => top >> [1] => inetOrgPerson >> ) >> >>) >> >>[05-Mar-2012 10:27:52 +0100]: S: Strong(er) authentication required >>[05-Mar-2012 10:27:52 +0100]: C: Close >>------------------------------------------------------------ >>config/main.inc.php >> >>$rcmail_config['ldap_public']['public'] = array( >> 'name' => 'Public LDAP Addressbook', >> 'hosts' => array('localhost'), >> 'use_tls' => false, >> 'ldap_version' => 3, // using LDAPv3 >> 'port' => 389, >> 'auth_method' => '', >> 'user_specific' => false, >> 'writable' => true, >> 'base_dn' => 'ou=public,ou=rcabook,dc=localhost', >> 'bind_dn' => 'cn=rcuser,ou=rcabook,dc=localhost', >> 'bind_pass' => 'rcpass', >> 'fieldmap' => array( >> 'name' => 'cn', >> 'surname' => 'sn', >> 'firstname' => 'givenName', >> 'email' => 'mail', >> 'phone:home' => 'homePhone', >> 'phone:work' => 'telephoneNumber', >> 'phone:mobile' => 'mobile', >> 'street' => 'street', >> 'zipcode' => 'postalCode', >> 'locality' => 'l', >> 'country' => 'c', >> 'organization' => 'o', >> ), >> 'LDAP_Object_Classes' => array('top', 'inetOrgPerson'), >> 'LDAP_rdn' => 'mail', >> 'required_fields' => array('cn', 'sn', 'mail'), >> 'filter' => '(objectClass=inetOrgPerson)', >> 'groups' => array( >> 'base_dn' => '', // in this Howto, the same base_dn as >>for the contacts is used >> 'filter' => '(objectClass=groupOfNames)', >> 'object_classes' => array("top", "groupOfNames"), >> ), >>); >> >>$rcmail_config['ldap_public']['private'] = array( >> 'name' => 'Private LDAP Addressbook', >> 'hosts' => array('localhost'), >> 'use_tls' => false, >> 'ldap_version' => 3, // using LDAPv3 >> 'port' => 389, >> 'auth_method' => '', >> 'user_specific' => true, >> 'writable' => true, >> 'base_dn' => 'cn=%u,ou=private,ou=rcabook,dc=localhost', >> 'bind_dn' => 'cn=%u,ou=private,ou=rcabook,dc=localhost', >> 'bind_pass' => '', // the user login password is used >> 'fieldmap' => array( >> 'name' => 'cn', >> 'surname' => 'sn', >> 'firstname' => 'givenName', >> 'email' => 'mail', >> 'phone:home' => 'homePhone', >> 'phone:work' => 'telephoneNumber', >> 'phone:mobile' => 'mobile', >> 'street' => 'street', >> 'zipcode' => 'postalCode', >> 'locality' => 'l', >> 'country' => 'c', >> 'organization' => 'o', >> ), >> 'LDAP_Object_Classes' => array('top', 'inetOrgPerson'), >> 'LDAP_rdn' => 'mail', >> 'required_fields' => array('cn', 'sn', 'mail'), >> 'filter' => '(objectClass=inetOrgPerson)', >> 'groups' => array( >> 'base_dn' => '', // in this Howto, the same base_dn as >>for the contacts is used >> 'filter' => '(objectClass=groupOfNames)', >> 'object_classes' => array("top", "groupOfNames"), >> ), >>); >> >>------------------------------------------- >>openldap/slapd.conf >> >># >># See slapd.conf(5) for details on configuration options. >># This file should NOT be world readable. >># >> >>include /etc/openldap/schema/corba.schema >>include /etc/openldap/schema/core.schema >>include /etc/openldap/schema/cosine.schema >>include /etc/openldap/schema/duaconf.schema >>include /etc/openldap/schema/dyngroup.schema >>include /etc/openldap/schema/inetorgperson.schema >>include /etc/openldap/schema/java.schema >>include /etc/openldap/schema/misc.schema >>include /etc/openldap/schema/nis.schema >>include /etc/openldap/schema/openldap.schema >>include /etc/openldap/schema/ppolicy.schema >>include /etc/openldap/schema/collective.schema >> >># Allow LDAPv2 client connections. This is NOT the default. >>allow bind_v2 >> >># Do not enable referrals until AFTER you have a working directory >># service AND an understanding of referrals. >>#referral ldap://root.openldap.org >> >>pidfile /var/run/openldap/slapd.pid >>argsfile /var/run/openldap/slapd.args >> >>SIZELIMIT 100000 >> >> >># >># if no access controls are present, the default policy >># allows anyone and everyone to read anything but restricts >># updates to rootdn. (e.g., "access to * by * read") >># >># rootdn can always read and write EVERYTHING! >> >>####################################################################### >># ldbm and/or bdb database definitions >>####################################################################### >> >>database bdb >>suffix "dc=localhost" >>checkpoint 1024 15 >>rootdn "cn=admin,dc=localhost" >># Cleartext passwords, especially for the rootdn, should >># be avoided. See slappasswd(8) and slapd.conf(5) for details. >># Use of strong authentication encouraged. >>rootpw {SSHA}xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx >> >># The database directory MUST exist prior to running slapd AND >># should only be accessible by the slapd and slap tools. >># Mode 700 recommended. >>directory /var/lib/ldap >> >># Indices to maintain for this database >>index objectClass eq,pres >>index ou,cn,mail,surname,givenname eq,pres,sub >>index uidNumber,gidNumber,loginShell eq,pres >>index uid,memberUid eq,pres,sub >>index nisMapName,nisMapEntry eq,pres,sub >> >># Replicas of this database >>#replogfile /var/lib/ldap/openldap-master-replog >>#replica host=ldap-1.example.com:389 starttls=critical >># bindmethod=sasl saslmech=GSSAPI >># authcId=host/ldap-master.example.com(a)EXAMPLE.COM >> >> >># Grant the Roundcub user to create private users >>access to dn.one="ou=private,ou=rcabook,dc=localhost" >>attrs=userPassword >> by dn="cn=rcuser,ou=rcabook,dc=localhost" write >> by anonymous auth >> by self write >> by * none >> >># For user authentication and password change >>access to attrs=userPassword >> by dn="cn=admin,dc=localhost" write >> by anonymous auth >> by self write >> by * none >> >># Grant the Roundcube users access to their private addressbooks >>access to dn.regex="^.*cn=([^,]+),ou=private,ou=rcabook,dc=localhost$" >> by dn="cn=admin,dc=localhost" write >> by dn="cn=rcuser,ou=rcabook,dc=localhost" write >> by dn.exact,expand="cn=$1,ou=private,ou=rcabook,dc=localhost" write >> >># Grant the Roundcube user access to the whole addressbook >>access to dn.subtree="ou=rcabook,dc=localhost" >> by dn="cn=admin,dc=localhost" write >> by dn="cn=rcuser,ou=rcabook,dc=localhost" write >> >># For direcory access >>access to * >> by dn="cn=admin,dc=localhost" write >> >># enable monitoring >>database monitor >> >>----------------------------------------- > >-- >List info: http://lists.roundcube.net/users/ >BT/09979466 >

2 1

R: Re: Ldap Addressbook : problem for credentials in private addressbook
by kaifamm＠libero.it 05 Mar '12

05 Mar '12

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users March 2012