Users

users@lists.roundcube.net

1 participants
2944 discussions

R: R: autologin from other php page
by kaifamm＠libero.it 07 Mar '12

07 Mar '12

Hi, the plugin "autologin" with version 0.7.1 doesn't work !!! The logical it's all different !! I made a little script in php to make autologin and it works : <? require_once 'program/include/iniset.php'; $RCMAIL = rcmail::get_instance(); $auth= $RCMAIL->get_request_token(); ?> <form method="post" action="index.php" name="form"> <input type="hidden" value="<?php echo $auth ?>" name="_token"> <input type="hidden" value="login" name="_action"> <input id="timezone" type="hidden" value="_default_" name="_timezone"> <input id="url" type="hidden" name="_url"> <input id="domain" type="hidden" value="xxxxxx.xx" name="_domainname"> <input id="redirectdomain" type="hidden" value="xxxxxx.xx" name=" _redirect_domain"> <input id="loginuser" type="text" value="" name="_user"> <input id="loginpwd" type="password" value="" name="_pass"> <input type="submit" value="SUBMIT"> </form> >----Messaggio originale---- >Da: kaifamm(a)libero.it >Data: 06/03/2012 18.21 >A: <users(a)lists.roundcube.net> >Ogg: [RCU] R: autologin from other php page > >Hi, > >in my previous email I was wrong to write : the autologin plugin does NOT >work !!! > >Thank you >Mark > > > >>----Messaggio originale---- >>Da: kaifamm(a)libero.it >>Data: 06/03/2012 17.01 >>A: <users(a)lists.roundcube.net> >>Ogg: [RCU] autologin from other php page >> >>Hi All, >> >> it's me again :-) !!!!!!! >> >>I would use roundcube with autologin from another php script. I found the >>plugin "autologin" but it seems to work. >>This is my php script : >> >><!DOCTYPE html> >><html> >><head> >></head> >><body> >><? >>$_POST['password'] = 'password in clear and in plain text'; >>$_SESSION['userpassword'] = strrev(base64_encode('*yourkey*'.$_POST >>['password'])); >>?> >><form name="roundcubelogin" action="http://192.168.254.201/roundcube/? >>_task=mail" method="post" target="roundcube"> >><input type="hidden" name="_timezone" value="_default_" /> >><input type="hidden" name="_task" value="mail" /> >><input type="hidden" name="_autologin" value="1" /> >><input type="hidden" name="_user" value="mark" /> >><input type="hidden" name="_host" value="192.168.254.201:143" /> >><input type="hidden" name="_pass" value="<?echo $_SESSION['userpassword']? >" >>/> >><input type="submit" name="submit" value="SUBMIT" /> >></form> >></body> >></html> >> >>The plugin autologin.php : >> >><?php >> >>/** >> * This plugin performs an automatic login if accessed >> * with post Data from other Site an Portal or CMS >> * Based on sample autologon PlugIn >> * >> * @version 0.2 >> * @author Eric Appelt (lacri) >> * >> * show into README to install and config >> * >> * changes >> * 0.2 make a little bit secure with base64_encode strrev >> * and a key thats replace after submitting encoded pass data >> * >> */ >> >>class autologin extends rcube_plugin >>{ >> >> function init() >> { >> $this->add_hook('startup', array($this, 'startup')); >> $this->add_hook('authenticate', array($this, 'authenticate')); >> } >> >> function startup($args) >> { >> $rcmail = rcmail::get_instance(); >> >> $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); >> >> // change action to login >> if ($args['task'] == 'mail' && empty($args['action']) && empty($_SESSION >>['user_id']) && !empty($autologin)) { >> $args['action'] = 'login'; >> >> // decode pass, revert and replace key >> $_POST['_pass'] = str_replace('*yourkey*','',base64_decode(strrev >>(get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1')))); >> >> // set initial cookie without this cookie login is not possible >> $_COOKIE['roundcube_sessid'] = session_id(); >> } >> return $args; >> } >> >> function authenticate($args) >> { >> $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); >> >> if (!empty($autologin)) { >> $args['user'] = get_input_value('_user', RCUBE_INPUT_POST); >> $args['pass'] = get_input_value('_pass', RCUBE_INPUT_POST); >> $args['host'] = get_input_value('_host', RCUBE_INPUT_POST); >> } >> return $args; >> } >>} >>_______________________________________________ >>Roundcube Users mailing list >>users(a)lists.roundcube.net >>http://lists.roundcube.net/mailman/listinfo/users >> > > >_______________________________________________ >Roundcube Users mailing list >users(a)lists.roundcube.net >http://lists.roundcube.net/mailman/listinfo/users >

1 0

R: Re: plugin to set forwarding in a roundcube-exim configuration
by kaifamm＠libero.it 07 Mar '12

07 Mar '12

Hi, yes it works, i'm using procmail that call sieve and also the file .forward in home directory of user. I in the .forward file call sieve so : | /usr/libexec/dovecot/deliver Bye ----Messaggio originale---- Da: gedeon007(a)gmail.com Data: 07/03/2012 11.05 A: "Roundcube Users mailing list"<users(a)lists.roundcube.net> Ogg: Re: [RCU] plugin to set forwarding in a roundcube-exim configuration Hello, Thank you for your answer. Actually we don't use sieve (I haven't heard about it yet). We are using a multi tenanted environment. We configure forwarders in the following way: we have a folder for each domains in the /etc/virtual folder and each folder contains a file called aliases. All of the forwarders for domain example.com are configured in /etc/virtual/example.com/aliases file. If I add a new alias then I only run newaliases and it's working. Do you have experiences such configuration and do you know whether this method and sieve works together? Thank you once more. Best regards, Chris 2012/3/6 Benny Pedersen <me(a)junc.org> Den 2012-03-05 16:04, Krisztián Gulyás skrev: I would like to install a plugin (or any solution) next to my roundcube-exim configuration to let my users set forwarding on their own. managesieve, if you got exim sieve working aswell from that on make a forward sieve rule in roundcube _______________________________________________ Roundcube Users mailing list users(a)lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users

2 1

plugin to set forwarding in a roundcube-exim configuration
by Krisztián Gulyás 07 Mar '12

07 Mar '12

Hi all, I would like to install a plugin (or any solution) next to my roundcube-exim configuration to let my users set forwarding on their own. Has anyone experienced something similar or could anyone help me? Thank you very much. Best regards, Chris -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

2 2

R: autologin from other php page
by kaifamm＠libero.it 06 Mar '12

06 Mar '12

Hi, in my previous email I was wrong to write : the autologin plugin does NOT work !!! Thank you Mark >----Messaggio originale---- >Da: kaifamm(a)libero.it >Data: 06/03/2012 17.01 >A: <users(a)lists.roundcube.net> >Ogg: [RCU] autologin from other php page > >Hi All, > > it's me again :-) !!!!!!! > >I would use roundcube with autologin from another php script. I found the >plugin "autologin" but it seems to work. >This is my php script : > ><!DOCTYPE html> ><html> ><head> ></head> ><body> ><? >$_POST['password'] = 'password in clear and in plain text'; >$_SESSION['userpassword'] = strrev(base64_encode('*yourkey*'.$_POST >['password'])); >?> ><form name="roundcubelogin" action="http://192.168.254.201/roundcube/? >_task=mail" method="post" target="roundcube"> ><input type="hidden" name="_timezone" value="_default_" /> ><input type="hidden" name="_task" value="mail" /> ><input type="hidden" name="_autologin" value="1" /> ><input type="hidden" name="_user" value="mark" /> ><input type="hidden" name="_host" value="192.168.254.201:143" /> ><input type="hidden" name="_pass" value="<?echo $_SESSION['userpassword']?>" >/> ><input type="submit" name="submit" value="SUBMIT" /> ></form> ></body> ></html> > >The plugin autologin.php : > ><?php > >/** > * This plugin performs an automatic login if accessed > * with post Data from other Site an Portal or CMS > * Based on sample autologon PlugIn > * > * @version 0.2 > * @author Eric Appelt (lacri) > * > * show into README to install and config > * > * changes > * 0.2 make a little bit secure with base64_encode strrev > * and a key thats replace after submitting encoded pass data > * > */ > >class autologin extends rcube_plugin >{ > > function init() > { > $this->add_hook('startup', array($this, 'startup')); > $this->add_hook('authenticate', array($this, 'authenticate')); > } > > function startup($args) > { > $rcmail = rcmail::get_instance(); > > $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); > > // change action to login > if ($args['task'] == 'mail' && empty($args['action']) && empty($_SESSION >['user_id']) && !empty($autologin)) { > $args['action'] = 'login'; > > // decode pass, revert and replace key > $_POST['_pass'] = str_replace('*yourkey*','',base64_decode(strrev >(get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1')))); > > // set initial cookie without this cookie login is not possible > $_COOKIE['roundcube_sessid'] = session_id(); > } > return $args; > } > > function authenticate($args) > { > $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); > > if (!empty($autologin)) { > $args['user'] = get_input_value('_user', RCUBE_INPUT_POST); > $args['pass'] = get_input_value('_pass', RCUBE_INPUT_POST); > $args['host'] = get_input_value('_host', RCUBE_INPUT_POST); > } > return $args; > } >} >_______________________________________________ >Roundcube Users mailing list >users(a)lists.roundcube.net >http://lists.roundcube.net/mailman/listinfo/users >

1 0

autologin from other php page
by kaifamm＠libero.it 06 Mar '12

06 Mar '12

Hi All, it's me again :-) !!!!!!! I would use roundcube with autologin from another php script. I found the plugin "autologin" but it seems to work. This is my php script : <!DOCTYPE html> <html> <head> </head> <body> <? $_POST['password'] = 'password in clear and in plain text'; $_SESSION['userpassword'] = strrev(base64_encode('*yourkey*'.$_POST ['password'])); ?> <form name="roundcubelogin" action="http://192.168.254.201/roundcube/? _task=mail" method="post" target="roundcube"> <input type="hidden" name="_timezone" value="_default_" /> <input type="hidden" name="_task" value="mail" /> <input type="hidden" name="_autologin" value="1" /> <input type="hidden" name="_user" value="mark" /> <input type="hidden" name="_host" value="192.168.254.201:143" /> <input type="hidden" name="_pass" value="<?echo $_SESSION['userpassword']?>" /> <input type="submit" name="submit" value="SUBMIT" /> </form> </body> </html> The plugin autologin.php : <?php /** * This plugin performs an automatic login if accessed * with post Data from other Site an Portal or CMS * Based on sample autologon PlugIn * * @version 0.2 * @author Eric Appelt (lacri) * * show into README to install and config * * changes * 0.2 make a little bit secure with base64_encode strrev * and a key thats replace after submitting encoded pass data * */ class autologin extends rcube_plugin { function init() { $this->add_hook('startup', array($this, 'startup')); $this->add_hook('authenticate', array($this, 'authenticate')); } function startup($args) { $rcmail = rcmail::get_instance(); $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); // change action to login if ($args['task'] == 'mail' && empty($args['action']) && empty($_SESSION ['user_id']) && !empty($autologin)) { $args['action'] = 'login'; // decode pass, revert and replace key $_POST['_pass'] = str_replace('*yourkey*','',base64_decode(strrev (get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1')))); // set initial cookie without this cookie login is not possible $_COOKIE['roundcube_sessid'] = session_id(); } return $args; } function authenticate($args) { $autologin = get_input_value('_autologin', RCUBE_INPUT_POST); if (!empty($autologin)) { $args['user'] = get_input_value('_user', RCUBE_INPUT_POST); $args['pass'] = get_input_value('_pass', RCUBE_INPUT_POST); $args['host'] = get_input_value('_host', RCUBE_INPUT_POST); } return $args; } }

1 0

R: Re: R: Re: Ldap Addressbook : problem for credentials in private addressbook
by kaifamm＠libero.it 06 Mar '12

06 Mar '12

Hi, Thank you for the tips !!!! I found the solution !!!!!!!! Yes in the script rcabook-setup.sh there is not the creation of single users for private addressbook !!! So I made a script ( rc_create_user.sh) that create users in ldap server for private addressbook. This script must run for each ldap users. #!/bin/bash # Parameters : USER PASSWORD # example : rc_create_user.sh mark xxxx # #------------ parameters start -------------------------------- if [ $# -lt 2 ] ; then echo "ERROR - Number of parameters is wrong. Example: rc_create_user.sh user password" exit 1 fi abook_user=$1; abook_pass=$2; #------------ parameters end -------------------------------- #------------ configuration start -------------------------------- server="ldap://localhost:389"; suffix="dc=localhost"; rootdn="cn=admin,$suffix"; abook_name="rcabook"; subdir_public="public"; subdir_private="private"; base_dn="ou=$subdir_private,ou=$abook_name,$suffix"; bind_dn="cn=$abook_user,$base_dn"; bind_pass="$abook_pass"; #------------ configuration end -------------------------------- echo " dn: $bind_dn cn: $abook_user userPassword: `slappasswd -s $abook_pass` objectClass: organizationalRole objectClass: simpleSecurityObject " | ldapadd -x -c -H $server -D $rootdn -W 2> /dev/null || { echo "ERROR-unable to create user!"; exit 1; }; >----Messaggio originale---- >Da: andudi(a)gmx.ch >Data: 05/03/2012 20.03 >A: "kaifamm(a)libero.it"<kaifamm(a)libero.it>, "Roundcube Users mailing list" <users(a)lists.roundcube.net> >Ogg: Re: [RCU] R: Re: Ldap Addressbook : problem for credentials in private addressbook > >Well. the script was written before private abooks was added... ACL is not checked for that yet >But have you created the user? Can you show the output of ldapsearch? >I have not yet scanned yor slapd log... will do that at home > >Andreas > > > >"kaifamm(a)libero.it" <kaifamm(a)libero.it> schrieb: > >>Hi All, >> >> thanks for the answers !!! >> >>I made other tests : >> >>If I try this : ldapsearch -xLLL -H ldap://localhost:389 -D cn=rcuser, >>ou=rcabook,dc=localhost -w rcpass -b ou=rcabook,dc=localhost >>it works fine. >> >>If I try this : ldapsearch -xLLL -H ldap://localhost:389 -D cn=mark, >>ou=private,ou=rcabook,dc=localhost -w xxxx >>It answer : ldap_bind: Invalid credentials (49), >>so I think that there is an ACL problem. >> >>I think that there is an error in the script rcabook-setup.sh. >> >>I did run and run again the script rcabook-setup.sh, it doesn't return >>errors and it said : >>The LDAP addressbook is ready now for using: >> base_dn: ou=rcabook,dc=localhost >> bind_dn: cn=rcuser,ou=rcabook,dc=localhost >> >>Use the following command for reading and checking your setup: >> ldapsearch -xLLL -H ldap://localhost:389 -D cn=rcuser,ou=rcabook, >>dc=localhost -w rcpass -b ou=rcabook,dc=localhost >> >>I report my ldap.log with the debug of ldap server : >> >>daemon: activity on: >>slap_listener_activate(7): >>daemon: epoll: listen=7 busy >>daemon: epoll: listen=8 active_threads=0 tvp=zero >>>>> slap_listener(ldap:///) >>daemon: listen=7, new connection on 13 >>daemon: activity on 1 descriptor >>daemon: activity on: >>daemon: epoll: listen=7 active_threads=0 tvp=zero >>daemon: epoll: listen=8 active_threads=0 tvp=zero >>daemon: added 13r (active) listener=(nil) >>daemon: activity on 1 descriptor >>conn=21 fd=13 ACCEPT from IP=127.0.0.1:45320 (IP=0.0.0.0:389) >>daemon: activity on: 13r >>daemon: read active on 13 >>daemon: epoll: listen=7 active_threads=0 tvp=zero >>connection_get(13) >>daemon: epoll: listen=8 active_threads=0 tvp=zero >>connection_get(13): got connid=21 >>connection_read(13): checking for input on id=21 >>ber_get_next >>ldap_read: want=8, got=8 >>0000: 30 84 00 00 00 3e 02 01 0....>.. >> >>ldap_read: want=60, got=60 >>0000: 01 60 84 00 00 00 35 02 01 03 04 2a 63 6e 3d 6d >>.`....5....*cn=m >>0010: 61 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 2c 6f >>ark,ou=private,o >>0020: 75 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c 6f 63 >>u=rcabook,dc=loc >>0030: 61 6c 68 6f 73 74 80 04 78 78 78 78 alhost..xxxx >> >>ber_get_next: tag 0x30 len 62 contents: >>ber_dump: buf=0xa0b040a8 ptr=0xa0b040a8 end=0xa0b040e6 len=62 >>0000: 02 01 01 60 84 00 00 00 35 02 01 03 04 2a 63 6e >>...`....5....*cn >>0010: 3d 6d 61 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 >>=mark,ou=private >>0020: 2c 6f 75 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c >>,ou=rcabook,dc=l >>0030: 6f 63 61 6c 68 6f 73 74 80 04 78 78 78 78 >>ocalhost..xxxx >>op tag 0x60, time 1330963449 >>ber_get_next >>ldap_read: want=8 error=Resource temporarily unavailable >>conn=21 op=0 do_bind >>ber_scanf fmt ({imt) ber: >>ber_dump: buf=0xa0b040a8 ptr=0xa0b040ab end=0xa0b040e6 len=59 >>0000: 60 84 00 00 00 35 02 01 03 04 2a 63 6e 3d 6d 61 >>`....5....*cn=ma >>0010: 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 2c 6f 75 >>rk,ou=private,ou >>0020: 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c 6f 63 61 >>=rcabook,dc=loca >>0030: 6c 68 6f 73 74 80 04 78 78 78 78 lhost..xxxx >> >>ber_scanf fmt (m}) ber: >>ber_dump: buf=0xa0b040a8 ptr=0xa0b040e0 end=0xa0b040e6 len=6 >>0000: 00 04 78 78 78 78 ..xxxx >> >>>>> dnPrettyNormal: <cn=mark,ou=private,ou=rcabook,dc=localhost> >>=> ldap_bv2dn(cn=mark,ou=private,ou=rcabook,dc=localhost,0) >><= ldap_bv2dn(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 >>=> ldap_dn2bv(272) >><= ldap_dn2bv(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 >>=> ldap_dn2bv(272) >><= ldap_dn2bv(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 >><<< dnPrettyNormal: <cn=mark,ou=private,ou=rcabook,dc=localhost>, >><cn=mark, >>ou=private,ou=rcabook,dc=localhost> >>conn=21 op=0 BIND dn="cn=mark,ou=private,ou=rcabook,dc=localhost" >>method=128 >>do_bind: version=3 dn="cn=mark,ou=private,ou=rcabook,dc=localhost" >>method=128 >>==> bdb_bind: dn: cn=mark,ou=private,ou=rcabook,dc=localhost >>bdb_dn2entry("cn=mark,ou=private,ou=rcabook,dc=localhost") >>=> bdb_dn2id("cn=mark,ou=private,ou=rcabook,dc=localhost") >><= bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found >>(-30988) >>send_ldap_result: conn=21 op=0 p=3 >>send_ldap_result: err=49 matched="" text="" >>send_ldap_response: msgid=1 tag=97 err=49 >>ber_flush2: 22 bytes to sd 13 >>0000: 30 84 00 00 00 10 02 01 01 61 84 00 00 00 07 0a >>0........a...... >>0010: 01 31 04 00 04 00 .1.... >> >>ldap_write: want=22, written=22 >>0000: 30 84 00 00 00 10 02 01 01 61 84 00 00 00 07 0a >>0........a...... >>0010: 01 31 04 00 04 00 .1.... >> >>conn=21 op=0 RESULT tag=97 err=49 text= >>daemon: activity on 1 descriptor >>daemon: activity on: >>daemon: epoll: listen=7 active_threads=0 tvp=zero >>daemon: epoll: listen=8 active_threads=0 tvp=zero >>daemon: activity on 1 descriptor >>daemon: activity on: 13r >>daemon: read active on 13 >>daemon: epoll: listen=7 active_threads=0 tvp=zero >>connection_get(13) >>daemon: epoll: listen=8 active_threads=0 tvp=zero >>connection_get(13): got connid=21 >>connection_read(13): checking for input on id=21 >>ber_get_next >>ldap_read: want=8, got=0 >> >>ber_get_next on fd 13 failed errno=0 (Success) >>connection_read(13): input error=-2 id=21, closing. >>connection_closing: readying conn=21 sd=13 for close >>connection_close: conn=21 sd=13 >>daemon: activity on 1 descriptor >>daemon: removing 13 >>daemon: activity on: >>conn=21 fd=13 closed (connection lost) >>daemon: epoll: listen=7 active_threads=0 tvp=zero >>daemon: epoll: listen=8 active_threads=0 tvp=zero >> >> >> >>Thanks a lot >>Mark >> >>>----Messaggio originale---- >>>Da: andudi(a)gmx.ch >>>Data: 05/03/2012 14.09 >>>A: "kaifamm(a)libero.it"<kaifamm(a)libero.it>, <users(a)lists.roundcube.net> >>>Ogg: Re: [RCU] Ldap Addressbook : problem for credentials in private >>addressbook >>> >>>Hei >>>I am i ski hollydays and have not my setup in front. >>> >>>Your setup seems ok, but can you try to connect with ldapsearch on the >> >>commandline? >>>Another try could be to switch on logging in slapd.conf >>>Ldap.conf is not used by server but by clients like ldapsearch... >>> >>>Andreas >>> >>> >>> >>>"kaifamm(a)libero.it" <kaifamm(a)libero.it> schrieb: >>> >>>>Hi All, >>>> >>>>I configured the ldap server and roundcube to manage contacts. I used >>>>the >>>>howto : http://trac.roundcube.net/wiki/Howto_Ldap. It work quite, I >>>>have only >>>>a problem for credentials in private addressbook. The public >>>>addressbook works >>>>fine, I can search and add contacts. >>>> >>>>I checked the Mark's password and it is correct. I tried to use >>rootpw >>>>but it >>>>doesn't works. >>>> >>>>My versions are : >>>>openldap-servers-2.4.19-6 >>>>php-5.3.3-1 >>>>roundcube 0.7.1 >>>> >>>>I report the error in ldap log of rouncube, my slapd.conf and my >>>>main.inc.php. >>>> >>>>Thanks a lot >>>> >>>>Mark >>>> >>>>-------------------------------- >>>>logs/ldap : >>>> >>>>[05-Mar-2012 10:09:01 +0100]: C: Connect [localhost:389] >>>>[05-Mar-2012 10:09:01 +0100]: S: OK >>>>[05-Mar-2012 10:09:01 +0100]: C: Bind [dn: >>>>cn=mark,ou=private,ou=rcabook, >>>>dc=localhost] [pass: xxxx] >>>>[05-Mar-2012 10:09:01 +0100]: S: Invalid credentials >>>>[05-Mar-2012 10:09:01 +0100]: C: Close >>>> >>>> >>>>[05-Mar-2012 10:14:24 +0100]: C: Connect [localhost:389] >>>>[05-Mar-2012 10:14:24 +0100]: S: OK >>>>[05-Mar-2012 10:14:24 +0100]: C: Bind [dn: >>>>cn=mark,ou=private,ou=rcabook, >>>>dc=localhost] [pass: xxxx] >>>>[05-Mar-2012 10:14:24 +0100]: S: Invalid credentials >>>>[05-Mar-2012 10:14:24 +0100]: C: Close >>>>[05-Mar-2012 10:27:42 +0100]: C: Connect [localhost:389] >>>>[05-Mar-2012 10:27:42 +0100]: S: OK >>>>[05-Mar-2012 10:27:42 +0100]: C: Bind [dn: >>>>cn=mark,ou=private,ou=rcabook, >>>>dc=localhost] [pass: xxxx] >>>>[05-Mar-2012 10:27:42 +0100]: S: Invalid credentials >>>>[05-Mar-2012 10:27:42 +0100]: C: Close >>>>[05-Mar-2012 10:27:52 +0100]: C: Connect [localhost:389] >>>>[05-Mar-2012 10:27:52 +0100]: S: OK >>>>[05-Mar-2012 10:27:52 +0100]: C: Bind [dn: >>>>cn=mark,ou=private,ou=rcabook, >>>>dc=localhost] [pass: xxxx] >>>>[05-Mar-2012 10:27:52 +0100]: S: Invalid credentials >>>>[05-Mar-2012 10:27:52 +0100]: C: Add [dn: >>mail=ssssss(a)iiii.uu,cn=mark, >>>>ou=private,ou=rcabook,dc=localhost]: Array >>>>( >>>> [cn] => ssssssss sss >>>> [sn] => sss >>>> [givenname] => ssssssss >>>> [mail] => ssssss(a)iiii.uu >>>> [objectClass] => Array >>>> ( >>>> [0] => top >>>> [1] => inetOrgPerson >>>> ) >>>> >>>>) >>>> >>>>[05-Mar-2012 10:27:52 +0100]: S: Strong(er) authentication required >>>>[05-Mar-2012 10:27:52 +0100]: C: Close >>>>------------------------------------------------------------ >>>>config/main.inc.php >>>> >>>>$rcmail_config['ldap_public']['public'] = array( >>>> 'name' => 'Public LDAP Addressbook', >>>> 'hosts' => array('localhost'), >>>> 'use_tls' => >_______________________________________________ >Roundcube Users mailing list >users(a)lists.roundcube.net >http://lists.roundcube.net/mailman/listinfo/users >

2 1

R: Re: Ldap Addressbook : problem for credentials in private addressbook
by kaifamm＠libero.it 05 Mar '12

05 Mar '12

Hi All, thanks for the answers !!! I made other tests : If I try this : ldapsearch -xLLL -H ldap://localhost:389 -D cn=rcuser, ou=rcabook,dc=localhost -w rcpass -b ou=rcabook,dc=localhost it works fine. If I try this : ldapsearch -xLLL -H ldap://localhost:389 -D cn=mark, ou=private,ou=rcabook,dc=localhost -w xxxx It answer : ldap_bind: Invalid credentials (49), so I think that there is an ACL problem. I think that there is an error in the script rcabook-setup.sh. I did run and run again the script rcabook-setup.sh, it doesn't return errors and it said : The LDAP addressbook is ready now for using: base_dn: ou=rcabook,dc=localhost bind_dn: cn=rcuser,ou=rcabook,dc=localhost Use the following command for reading and checking your setup: ldapsearch -xLLL -H ldap://localhost:389 -D cn=rcuser,ou=rcabook, dc=localhost -w rcpass -b ou=rcabook,dc=localhost I report my ldap.log with the debug of ldap server : daemon: activity on: slap_listener_activate(7): daemon: epoll: listen=7 busy daemon: epoll: listen=8 active_threads=0 tvp=zero >>> slap_listener(ldap:///) daemon: listen=7, new connection on 13 daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: added 13r (active) listener=(nil) daemon: activity on 1 descriptor conn=21 fd=13 ACCEPT from IP=127.0.0.1:45320 (IP=0.0.0.0:389) daemon: activity on: 13r daemon: read active on 13 daemon: epoll: listen=7 active_threads=0 tvp=zero connection_get(13) daemon: epoll: listen=8 active_threads=0 tvp=zero connection_get(13): got connid=21 connection_read(13): checking for input on id=21 ber_get_next ldap_read: want=8, got=8 0000: 30 84 00 00 00 3e 02 01 0....>.. ldap_read: want=60, got=60 0000: 01 60 84 00 00 00 35 02 01 03 04 2a 63 6e 3d 6d .`....5....*cn=m 0010: 61 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 2c 6f ark,ou=private,o 0020: 75 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c 6f 63 u=rcabook,dc=loc 0030: 61 6c 68 6f 73 74 80 04 78 78 78 78 alhost..xxxx ber_get_next: tag 0x30 len 62 contents: ber_dump: buf=0xa0b040a8 ptr=0xa0b040a8 end=0xa0b040e6 len=62 0000: 02 01 01 60 84 00 00 00 35 02 01 03 04 2a 63 6e ...`....5....*cn 0010: 3d 6d 61 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 =mark,ou=private 0020: 2c 6f 75 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c ,ou=rcabook,dc=l 0030: 6f 63 61 6c 68 6f 73 74 80 04 78 78 78 78 ocalhost..xxxx op tag 0x60, time 1330963449 ber_get_next ldap_read: want=8 error=Resource temporarily unavailable conn=21 op=0 do_bind ber_scanf fmt ({imt) ber: ber_dump: buf=0xa0b040a8 ptr=0xa0b040ab end=0xa0b040e6 len=59 0000: 60 84 00 00 00 35 02 01 03 04 2a 63 6e 3d 6d 61 `....5....*cn=ma 0010: 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 2c 6f 75 rk,ou=private,ou 0020: 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c 6f 63 61 =rcabook,dc=loca 0030: 6c 68 6f 73 74 80 04 78 78 78 78 lhost..xxxx ber_scanf fmt (m}) ber: ber_dump: buf=0xa0b040a8 ptr=0xa0b040e0 end=0xa0b040e6 len=6 0000: 00 04 78 78 78 78 ..xxxx >>> dnPrettyNormal: <cn=mark,ou=private,ou=rcabook,dc=localhost> => ldap_bv2dn(cn=mark,ou=private,ou=rcabook,dc=localhost,0) <= ldap_bv2dn(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 <<< dnPrettyNormal: <cn=mark,ou=private,ou=rcabook,dc=localhost>, <cn=mark, ou=private,ou=rcabook,dc=localhost> conn=21 op=0 BIND dn="cn=mark,ou=private,ou=rcabook,dc=localhost" method=128 do_bind: version=3 dn="cn=mark,ou=private,ou=rcabook,dc=localhost" method=128 ==> bdb_bind: dn: cn=mark,ou=private,ou=rcabook,dc=localhost bdb_dn2entry("cn=mark,ou=private,ou=rcabook,dc=localhost") => bdb_dn2id("cn=mark,ou=private,ou=rcabook,dc=localhost") <= bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found (-30988) send_ldap_result: conn=21 op=0 p=3 send_ldap_result: err=49 matched="" text="" send_ldap_response: msgid=1 tag=97 err=49 ber_flush2: 22 bytes to sd 13 0000: 30 84 00 00 00 10 02 01 01 61 84 00 00 00 07 0a 0........a...... 0010: 01 31 04 00 04 00 .1.... ldap_write: want=22, written=22 0000: 30 84 00 00 00 10 02 01 01 61 84 00 00 00 07 0a 0........a...... 0010: 01 31 04 00 04 00 .1.... conn=21 op=0 RESULT tag=97 err=49 text= daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: activity on 1 descriptor daemon: activity on: 13r daemon: read active on 13 daemon: epoll: listen=7 active_threads=0 tvp=zero connection_get(13) daemon: epoll: listen=8 active_threads=0 tvp=zero connection_get(13): got connid=21 connection_read(13): checking for input on id=21 ber_get_next ldap_read: want=8, got=0 ber_get_next on fd 13 failed errno=0 (Success) connection_read(13): input error=-2 id=21, closing. connection_closing: readying conn=21 sd=13 for close connection_close: conn=21 sd=13 daemon: activity on 1 descriptor daemon: removing 13 daemon: activity on: conn=21 fd=13 closed (connection lost) daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero Thanks a lot Mark >----Messaggio originale---- >Da: andudi(a)gmx.ch >Data: 05/03/2012 14.09 >A: "kaifamm(a)libero.it"<kaifamm(a)libero.it>, <users(a)lists.roundcube.net> >Ogg: Re: [RCU] Ldap Addressbook : problem for credentials in private addressbook > >Hei >I am i ski hollydays and have not my setup in front. > >Your setup seems ok, but can you try to connect with ldapsearch on the commandline? >Another try could be to switch on logging in slapd.conf >Ldap.conf is not used by server but by clients like ldapsearch... > >Andreas > > > >"kaifamm(a)libero.it" <kaifamm(a)libero.it> schrieb: > >>Hi All, >> >>I configured the ldap server and roundcube to manage contacts. I used >>the >>howto : http://trac.roundcube.net/wiki/Howto_Ldap. It work quite, I >>have only >>a problem for credentials in private addressbook. The public >>addressbook works >>fine, I can search and add contacts. >> >>I checked the Mark's password and it is correct. I tried to use rootpw >>but it >>doesn't works. >> >>My versions are : >>openldap-servers-2.4.19-6 >>php-5.3.3-1 >>roundcube 0.7.1 >> >>I report the error in ldap log of rouncube, my slapd.conf and my >>main.inc.php. >> >>Thanks a lot >> >>Mark >> >>-------------------------------- >>logs/ldap : >> >>[05-Mar-2012 10:09:01 +0100]: C: Connect [localhost:389] >>[05-Mar-2012 10:09:01 +0100]: S: OK >>[05-Mar-2012 10:09:01 +0100]: C: Bind [dn: >>cn=mark,ou=private,ou=rcabook, >>dc=localhost] [pass: xxxx] >>[05-Mar-2012 10:09:01 +0100]: S: Invalid credentials >>[05-Mar-2012 10:09:01 +0100]: C: Close >> >> >>[05-Mar-2012 10:14:24 +0100]: C: Connect [localhost:389] >>[05-Mar-2012 10:14:24 +0100]: S: OK >>[05-Mar-2012 10:14:24 +0100]: C: Bind [dn: >>cn=mark,ou=private,ou=rcabook, >>dc=localhost] [pass: xxxx] >>[05-Mar-2012 10:14:24 +0100]: S: Invalid credentials >>[05-Mar-2012 10:14:24 +0100]: C: Close >>[05-Mar-2012 10:27:42 +0100]: C: Connect [localhost:389] >>[05-Mar-2012 10:27:42 +0100]: S: OK >>[05-Mar-2012 10:27:42 +0100]: C: Bind [dn: >>cn=mark,ou=private,ou=rcabook, >>dc=localhost] [pass: xxxx] >>[05-Mar-2012 10:27:42 +0100]: S: Invalid credentials >>[05-Mar-2012 10:27:42 +0100]: C: Close >>[05-Mar-2012 10:27:52 +0100]: C: Connect [localhost:389] >>[05-Mar-2012 10:27:52 +0100]: S: OK >>[05-Mar-2012 10:27:52 +0100]: C: Bind [dn: >>cn=mark,ou=private,ou=rcabook, >>dc=localhost] [pass: xxxx] >>[05-Mar-2012 10:27:52 +0100]: S: Invalid credentials >>[05-Mar-2012 10:27:52 +0100]: C: Add [dn: mail=ssssss(a)iiii.uu,cn=mark, >>ou=private,ou=rcabook,dc=localhost]: Array >>( >> [cn] => ssssssss sss >> [sn] => sss >> [givenname] => ssssssss >> [mail] => ssssss(a)iiii.uu >> [objectClass] => Array >> ( >> [0] => top >> [1] => inetOrgPerson >> ) >> >>) >> >>[05-Mar-2012 10:27:52 +0100]: S: Strong(er) authentication required >>[05-Mar-2012 10:27:52 +0100]: C: Close >>------------------------------------------------------------ >>config/main.inc.php >> >>$rcmail_config['ldap_public']['public'] = array( >> 'name' => 'Public LDAP Addressbook', >> 'hosts' => array('localhost'), >> 'use_tls' => false, >> 'ldap_version' => 3, // using LDAPv3 >> 'port' => 389, >> 'auth_method' => '', >> 'user_specific' => false, >> 'writable' => true, >> 'base_dn' => 'ou=public,ou=rcabook,dc=localhost', >> 'bind_dn' => 'cn=rcuser,ou=rcabook,dc=localhost', >> 'bind_pass' => 'rcpass', >> 'fieldmap' => array( >> 'name' => 'cn', >> 'surname' => 'sn', >> 'firstname' => 'givenName', >> 'email' => 'mail', >> 'phone:home' => 'homePhone', >> 'phone:work' => 'telephoneNumber', >> 'phone:mobile' => 'mobile', >> 'street' => 'street', >> 'zipcode' => 'postalCode', >> 'locality' => 'l', >> 'country' => 'c', >> 'organization' => 'o', >> ), >> 'LDAP_Object_Classes' => array('top', 'inetOrgPerson'), >> 'LDAP_rdn' => 'mail', >> 'required_fields' => array('cn', 'sn', 'mail'), >> 'filter' => '(objectClass=inetOrgPerson)', >> 'groups' => array( >> 'base_dn' => '', // in this Howto, the same base_dn as >>for the contacts is used >> 'filter' => '(objectClass=groupOfNames)', >> 'object_classes' => array("top", "groupOfNames"), >> ), >>); >> >>$rcmail_config['ldap_public']['private'] = array( >> 'name' => 'Private LDAP Addressbook', >> 'hosts' => array('localhost'), >> 'use_tls' => false, >> 'ldap_version' => 3, // using LDAPv3 >> 'port' => 389, >> 'auth_method' => '', >> 'user_specific' => true, >> 'writable' => true, >> 'base_dn' => 'cn=%u,ou=private,ou=rcabook,dc=localhost', >> 'bind_dn' => 'cn=%u,ou=private,ou=rcabook,dc=localhost', >> 'bind_pass' => '', // the user login password is used >> 'fieldmap' => array( >> 'name' => 'cn', >> 'surname' => 'sn', >> 'firstname' => 'givenName', >> 'email' => 'mail', >> 'phone:home' => 'homePhone', >> 'phone:work' => 'telephoneNumber', >> 'phone:mobile' => 'mobile', >> 'street' => 'street', >> 'zipcode' => 'postalCode', >> 'locality' => 'l', >> 'country' => 'c', >> 'organization' => 'o', >> ), >> 'LDAP_Object_Classes' => array('top', 'inetOrgPerson'), >> 'LDAP_rdn' => 'mail', >> 'required_fields' => array('cn', 'sn', 'mail'), >> 'filter' => '(objectClass=inetOrgPerson)', >> 'groups' => array( >> 'base_dn' => '', // in this Howto, the same base_dn as >>for the contacts is used >> 'filter' => '(objectClass=groupOfNames)', >> 'object_classes' => array("top", "groupOfNames"), >> ), >>); >> >>------------------------------------------- >>openldap/slapd.conf >> >># >># See slapd.conf(5) for details on configuration options. >># This file should NOT be world readable. >># >> >>include /etc/openldap/schema/corba.schema >>include /etc/openldap/schema/core.schema >>include /etc/openldap/schema/cosine.schema >>include /etc/openldap/schema/duaconf.schema >>include /etc/openldap/schema/dyngroup.schema >>include /etc/openldap/schema/inetorgperson.schema >>include /etc/openldap/schema/java.schema >>include /etc/openldap/schema/misc.schema >>include /etc/openldap/schema/nis.schema >>include /etc/openldap/schema/openldap.schema >>include /etc/openldap/schema/ppolicy.schema >>include /etc/openldap/schema/collective.schema >> >># Allow LDAPv2 client connections. This is NOT the default. >>allow bind_v2 >> >># Do not enable referrals until AFTER you have a working directory >># service AND an understanding of referrals. >>#referral ldap://root.openldap.org >> >>pidfile /var/run/openldap/slapd.pid >>argsfile /var/run/openldap/slapd.args >> >>SIZELIMIT 100000 >> >> >># >># if no access controls are present, the default policy >># allows anyone and everyone to read anything but restricts >># updates to rootdn. (e.g., "access to * by * read") >># >># rootdn can always read and write EVERYTHING! >> >>####################################################################### >># ldbm and/or bdb database definitions >>####################################################################### >> >>database bdb >>suffix "dc=localhost" >>checkpoint 1024 15 >>rootdn "cn=admin,dc=localhost" >># Cleartext passwords, especially for the rootdn, should >># be avoided. See slappasswd(8) and slapd.conf(5) for details. >># Use of strong authentication encouraged. >>rootpw {SSHA}xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx >> >># The database directory MUST exist prior to running slapd AND >># should only be accessible by the slapd and slap tools. >># Mode 700 recommended. >>directory /var/lib/ldap >> >># Indices to maintain for this database >>index objectClass eq,pres >>index ou,cn,mail,surname,givenname eq,pres,sub >>index uidNumber,gidNumber,loginShell eq,pres >>index uid,memberUid eq,pres,sub >>index nisMapName,nisMapEntry eq,pres,sub >> >># Replicas of this database >>#replogfile /var/lib/ldap/openldap-master-replog >>#replica host=ldap-1.example.com:389 starttls=critical >># bindmethod=sasl saslmech=GSSAPI >># authcId=host/ldap-master.example.com(a)EXAMPLE.COM >> >> >># Grant the Roundcub user to create private users >>access to dn.one="ou=private,ou=rcabook,dc=localhost" >>attrs=userPassword >> by dn="cn=rcuser,ou=rcabook,dc=localhost" write >> by anonymous auth >> by self write >> by * none >> >># For user authentication and password change >>access to attrs=userPassword >> by dn="cn=admin,dc=localhost" write >> by anonymous auth >> by self write >> by * none >> >># Grant the Roundcube users access to their private addressbooks >>access to dn.regex="^.*cn=([^,]+),ou=private,ou=rcabook,dc=localhost$" >> by dn="cn=admin,dc=localhost" write >> by dn="cn=rcuser,ou=rcabook,dc=localhost" write >> by dn.exact,expand="cn=$1,ou=private,ou=rcabook,dc=localhost" write >> >># Grant the Roundcube user access to the whole addressbook >>access to dn.subtree="ou=rcabook,dc=localhost" >> by dn="cn=admin,dc=localhost" write >> by dn="cn=rcuser,ou=rcabook,dc=localhost" write >> >># For direcory access >>access to * >> by dn="cn=admin,dc=localhost" write >> >># enable monitoring >>database monitor >> >>----------------------------------------- > >-- >List info: http://lists.roundcube.net/users/ >BT/09979466 >

2 1

R: Re: Ldap Addressbook : problem for credentials in private addressbook
by kaifamm＠libero.it 05 Mar '12

05 Mar '12

1 0

Mailing list migration to new host
by Thomas Bruederli 05 Mar '12

05 Mar '12

Dear subscribers of the Roundcube mailing lists I'd like to announce the migration of our mailing lists to a new host which is planned to take place on Monday, March 5th at 3pm GMT. There's no action required on your side, all subscriptions and settings will be transferred to the new host. There might be some delay until all nodes on the net have updated their DNS entries for lists.roundcube.net and to avoid any loss of messages during that period, we recommend to suspend posting between 3pm and 9pm GMT on Monday. This is also a good occasion to thank Jason at gigo.com for offering the list hosting for the last couple of years and to Jeroen at kolab.org to take over. Best, Thomas -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

3 4

Ldap Addressbook : problem for credentials in private addressbook
by kaifamm＠libero.it 05 Mar '12

05 Mar '12

Hi All, I configured the ldap server and roundcube to manage contacts. I used the howto : http://trac.roundcube.net/wiki/Howto_Ldap. It work quite, I have only a problem for credentials in private addressbook. The public addressbook works fine, I can search and add contacts. I checked the Mark's password and it is correct. I tried to use rootpw but it doesn't works. My versions are : openldap-servers-2.4.19-6 php-5.3.3-1 roundcube 0.7.1 I report the error in ldap log of rouncube, my slapd.conf and my main.inc.php. Thanks a lot Mark -------------------------------- logs/ldap : [05-Mar-2012 10:09:01 +0100]: C: Connect [localhost:389] [05-Mar-2012 10:09:01 +0100]: S: OK [05-Mar-2012 10:09:01 +0100]: C: Bind [dn: cn=mark,ou=private,ou=rcabook, dc=localhost] [pass: xxxx] [05-Mar-2012 10:09:01 +0100]: S: Invalid credentials [05-Mar-2012 10:09:01 +0100]: C: Close [05-Mar-2012 10:14:24 +0100]: C: Connect [localhost:389] [05-Mar-2012 10:14:24 +0100]: S: OK [05-Mar-2012 10:14:24 +0100]: C: Bind [dn: cn=mark,ou=private,ou=rcabook, dc=localhost] [pass: xxxx] [05-Mar-2012 10:14:24 +0100]: S: Invalid credentials [05-Mar-2012 10:14:24 +0100]: C: Close [05-Mar-2012 10:27:42 +0100]: C: Connect [localhost:389] [05-Mar-2012 10:27:42 +0100]: S: OK [05-Mar-2012 10:27:42 +0100]: C: Bind [dn: cn=mark,ou=private,ou=rcabook, dc=localhost] [pass: xxxx] [05-Mar-2012 10:27:42 +0100]: S: Invalid credentials [05-Mar-2012 10:27:42 +0100]: C: Close [05-Mar-2012 10:27:52 +0100]: C: Connect [localhost:389] [05-Mar-2012 10:27:52 +0100]: S: OK [05-Mar-2012 10:27:52 +0100]: C: Bind [dn: cn=mark,ou=private,ou=rcabook, dc=localhost] [pass: xxxx] [05-Mar-2012 10:27:52 +0100]: S: Invalid credentials [05-Mar-2012 10:27:52 +0100]: C: Add [dn: mail=ssssss(a)iiii.uu,cn=mark, ou=private,ou=rcabook,dc=localhost]: Array ( [cn] => ssssssss sss [sn] => sss [givenname] => ssssssss [mail] => ssssss(a)iiii.uu [objectClass] => Array ( [0] => top [1] => inetOrgPerson ) ) [05-Mar-2012 10:27:52 +0100]: S: Strong(er) authentication required [05-Mar-2012 10:27:52 +0100]: C: Close ------------------------------------------------------------ config/main.inc.php $rcmail_config['ldap_public']['public'] = array( 'name' => 'Public LDAP Addressbook', 'hosts' => array('localhost'), 'use_tls' => false, 'ldap_version' => 3, // using LDAPv3 'port' => 389, 'auth_method' => '', 'user_specific' => false, 'writable' => true, 'base_dn' => 'ou=public,ou=rcabook,dc=localhost', 'bind_dn' => 'cn=rcuser,ou=rcabook,dc=localhost', 'bind_pass' => 'rcpass', 'fieldmap' => array( 'name' => 'cn', 'surname' => 'sn', 'firstname' => 'givenName', 'email' => 'mail', 'phone:home' => 'homePhone', 'phone:work' => 'telephoneNumber', 'phone:mobile' => 'mobile', 'street' => 'street', 'zipcode' => 'postalCode', 'locality' => 'l', 'country' => 'c', 'organization' => 'o', ), 'LDAP_Object_Classes' => array('top', 'inetOrgPerson'), 'LDAP_rdn' => 'mail', 'required_fields' => array('cn', 'sn', 'mail'), 'filter' => '(objectClass=inetOrgPerson)', 'groups' => array( 'base_dn' => '', // in this Howto, the same base_dn as for the contacts is used 'filter' => '(objectClass=groupOfNames)', 'object_classes' => array("top", "groupOfNames"), ), ); $rcmail_config['ldap_public']['private'] = array( 'name' => 'Private LDAP Addressbook', 'hosts' => array('localhost'), 'use_tls' => false, 'ldap_version' => 3, // using LDAPv3 'port' => 389, 'auth_method' => '', 'user_specific' => true, 'writable' => true, 'base_dn' => 'cn=%u,ou=private,ou=rcabook,dc=localhost', 'bind_dn' => 'cn=%u,ou=private,ou=rcabook,dc=localhost', 'bind_pass' => '', // the user login password is used 'fieldmap' => array( 'name' => 'cn', 'surname' => 'sn', 'firstname' => 'givenName', 'email' => 'mail', 'phone:home' => 'homePhone', 'phone:work' => 'telephoneNumber', 'phone:mobile' => 'mobile', 'street' => 'street', 'zipcode' => 'postalCode', 'locality' => 'l', 'country' => 'c', 'organization' => 'o', ), 'LDAP_Object_Classes' => array('top', 'inetOrgPerson'), 'LDAP_rdn' => 'mail', 'required_fields' => array('cn', 'sn', 'mail'), 'filter' => '(objectClass=inetOrgPerson)', 'groups' => array( 'base_dn' => '', // in this Howto, the same base_dn as for the contacts is used 'filter' => '(objectClass=groupOfNames)', 'object_classes' => array("top", "groupOfNames"), ), ); ------------------------------------------- openldap/slapd.conf # # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # include /etc/openldap/schema/corba.schema include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/duaconf.schema include /etc/openldap/schema/dyngroup.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/java.schema include /etc/openldap/schema/misc.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/openldap.schema include /etc/openldap/schema/ppolicy.schema include /etc/openldap/schema/collective.schema # Allow LDAPv2 client connections. This is NOT the default. allow bind_v2 # Do not enable referrals until AFTER you have a working directory # service AND an understanding of referrals. #referral ldap://root.openldap.org pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args SIZELIMIT 100000 # # if no access controls are present, the default policy # allows anyone and everyone to read anything but restricts # updates to rootdn. (e.g., "access to * by * read") # # rootdn can always read and write EVERYTHING! ####################################################################### # ldbm and/or bdb database definitions ####################################################################### database bdb suffix "dc=localhost" checkpoint 1024 15 rootdn "cn=admin,dc=localhost" # Cleartext passwords, especially for the rootdn, should # be avoided. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. rootpw {SSHA}xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx # The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd and slap tools. # Mode 700 recommended. directory /var/lib/ldap # Indices to maintain for this database index objectClass eq,pres index ou,cn,mail,surname,givenname eq,pres,sub index uidNumber,gidNumber,loginShell eq,pres index uid,memberUid eq,pres,sub index nisMapName,nisMapEntry eq,pres,sub # Replicas of this database #replogfile /var/lib/ldap/openldap-master-replog #replica host=ldap-1.example.com:389 starttls=critical # bindmethod=sasl saslmech=GSSAPI # authcId=host/ldap-master.example.com(a)EXAMPLE.COM # Grant the Roundcub user to create private users access to dn.one="ou=private,ou=rcabook,dc=localhost" attrs=userPassword by dn="cn=rcuser,ou=rcabook,dc=localhost" write by anonymous auth by self write by * none # For user authentication and password change access to attrs=userPassword by dn="cn=admin,dc=localhost" write by anonymous auth by self write by * none # Grant the Roundcube users access to their private addressbooks access to dn.regex="^.*cn=([^,]+),ou=private,ou=rcabook,dc=localhost$" by dn="cn=admin,dc=localhost" write by dn="cn=rcuser,ou=rcabook,dc=localhost" write by dn.exact,expand="cn=$1,ou=private,ou=rcabook,dc=localhost" write # Grant the Roundcube user access to the whole addressbook access to dn.subtree="ou=rcabook,dc=localhost" by dn="cn=admin,dc=localhost" write by dn="cn=rcuser,ou=rcabook,dc=localhost" write # For direcory access access to * by dn="cn=admin,dc=localhost" write # enable monitoring database monitor ----------------------------------------- openldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. #BASE dc=example,dc=com #URI ldap://ldap.example.com ldap://ldap-master.example.com:666 #SIZELIMIT 12 #TIMELIMIT 15 #DEREF never URI ldap://127.0.0.1/ BASE dc=localhost TLS_REQCERT never TLS_CACERTDIR /etc/openldap/cacerts -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users