Dovecot Active Directory Authentication - Revision history

Ebroch at 23:43, 26 January 2025

2025-01-26T23:43:01Z

← Older revision		Revision as of 17:43, 26 January 2025
Line 12:		Line 12:
	__EOF__		__EOF__

	Change passdb; userdb untouched		Change passdb; userdb untouched
	# Authenticates by AD server		# Authenticates by AD server
	passdb {		passdb {

Ebroch at 23:42, 26 January 2025

2025-01-26T23:42:09Z

← Older revision		Revision as of 17:42, 26 January 2025
Line 12:		Line 12:
	__EOF__		__EOF__

	Change passdb, userdb ~~should remain the same~~		Change passdb; userdb untouched
			# Authenticates by AD server
	passdb {		passdb {
	driver = ldap		driver = ldap
	args = /etc/dovecot/dovecot-ldap.conf.ext		args = /etc/dovecot/dovecot-ldap.conf.ext
	}		}
			# Retrieves user home directory, mail directory, uid, and gid
	userdb {		userdb {
	driver = sql		driver = sql

Ebroch at 23:37, 26 January 2025

2025-01-26T23:37:11Z

← Older revision		Revision as of 17:37, 26 January 2025
Line 12:		Line 12:
	__EOF__		__EOF__

	~~Add to /etc/dovecot.conf while commenting any other~~ passdb ~~and~~ userdb ~~settings~~		Change passdb, userdb should remain the same
	~~mail_location = maildir:~/Maildir/~~
	passdb {		passdb {
	driver = ldap		driver = ldap
Line 19:		Line 18:
	}		}
	userdb {		userdb {
	driver = ~~static~~		driver = sql
	args = ~~uid=89 gid=89 home=/home/vpopmail~~/~~domains~~/%d/%n		args = /etc/dovecot/dovecot-sql.conf.ext
	}		}

	# systemctl restart dovecot		# systemctl restart dovecot

	[[Qmail_Dovecot_Authentication\|Configure QMT Dovecot authorization]]		[[Qmail_Dovecot_Authentication\|Configure QMT Dovecot authorization]]

Ebroch at 18:29, 13 January 2025

2025-01-13T18:29:35Z

← Older revision		Revision as of 12:29, 13 January 2025
Line 10:		Line 10:
	auth_bind_userdn = %u		auth_bind_userdn = %u
	auth_bind = yes		auth_bind = yes

	__EOF__		__EOF__

Ebroch at 18:28, 13 January 2025

2025-01-13T18:28:30Z

← Older revision		Revision as of 12:28, 13 January 2025
Line 5:		Line 5:
	# cd /etc/dovecot		# cd /etc/dovecot
	# cat > dovecot-ldap.conf.ext << __EOF__		# cat > dovecot-ldap.conf.ext << __EOF__
	hosts = ~~mail~~.domain.tld		hosts = ad.domain.tld
	ldap_version = 3		ldap_version = 3
	base = dc=domain,dc=tld		base = dc=domain,dc=tld

Ebroch at 18:28, 13 January 2025

2025-01-13T18:28:11Z

← Older revision		Revision as of 12:28, 13 January 2025
Line 6:		Line 6:
	# cat > dovecot-ldap.conf.ext << __EOF__		# cat > dovecot-ldap.conf.ext << __EOF__
	hosts = mail.domain.tld		hosts = mail.domain.tld
	~~dn = administrator@domain.tld~~
	~~dnpass = "adminpass"~~
	~~base = cn=users,dc=domain,dc=tld~~
	ldap_version = 3		ldap_version = 3
			base = dc=domain,dc=tld
			auth_bind_userdn = %u
	auth_bind = yes		auth_bind = yes
	~~iterate_attrs = userPrincipalName=user~~
	~~iterate_filter = (&(userPrincipalName=*)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))~~
	~~user_filter = (&(userPrincipalName=%u)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))~~
	~~pass_filter = (&(userPrincipalName=%u)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))~~
	~~pass_attrs = userPassword=password~~
	~~default_pass_scheme = CRYPT~~
	__EOF__		__EOF__

Ebroch: Created page with "Back
Assumes working AD server # cd /etc/dovecot # cat > dovecot-ldap.conf.ext << EOF hosts = mail.domain.tld dn = administrator@domain.tld dnpass = "adminpass" base = cn=users,dc=domain,dc=tld ldap_version = 3 auth_bind = yes iterate_attrs = userPrincipalName=user iterate_filter = (&(userPrincipalName=*)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) user_filter = (&(userPrin..."

2024-11-02T15:03:41Z

Created page with "Back<br> Assumes working AD server # cd /etc/dovecot # cat > dovecot-ldap.conf.ext << __EOF__ hosts = mail.domain.tld dn = administrator@domain.tld dnpass = "adminpass" base = cn=users,dc=domain,dc=tld ldap_version = 3 auth_bind = yes iterate_attrs = userPrincipalName=user iterate_filter = (&(userPrincipalName=*)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) user_filter = (&(userPrin..."

New page

[[Configuration#Dovecot_LDAP_Authentication|Back]]<br>

Assumes working AD server

# cd /etc/dovecot
# cat > dovecot-ldap.conf.ext << __EOF__
hosts = mail.domain.tld
dn = administrator@domain.tld
dnpass = "adminpass"
base = cn=users,dc=domain,dc=tld
ldap_version = 3
auth_bind = yes
iterate_attrs = userPrincipalName=user
iterate_filter = (&(userPrincipalName=*)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
user_filter = (&(userPrincipalName=%u)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_filter = (&(userPrincipalName=%u)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_attrs = userPassword=password
default_pass_scheme = CRYPT
__EOF__

Add to /etc/dovecot.conf while commenting any other passdb and userdb settings
mail_location = maildir:~/Maildir/
passdb {
driver = ldap
args = /etc/dovecot/dovecot-ldap.conf.ext
}
userdb {
driver = static
args = uid=89 gid=89 home=/home/vpopmail/domains/%d/%n
}

# systemctl restart dovecot

[[Qmail_Dovecot_Authentication|Configure QMT Dovecot authorization]]