gmane.mail.qmail.ldap

Issues with plain authentication mode with qmail-ldap 20120221

André Alexandre Gaio — 2013-05-19T01:51:07

Hello Guys,

I'm having a problem since I started using the patch 20120221, about 1 
year ago, I had not noticed yet.

The problem is as follows:

If I use the LOGIN authentication mode, everything happens normally. 
This is how I configure my email clients by default.

If I set any email client PLAIN authentication mode, the login process 
usually happens when the user enters the correct password, and send 
email normally follows too.

But when the user misses the password at login, the qmail-smtpd process 
falls with a segfault, but he usually responds well:

535 authentication failure
or
501 failed authentication exchange

It ends the session normally.

I noticed this strange behavior when a user configured mode PLAIN by 
mistake in your email client instead of LOGIN so that is what standardized.

Appears in the log with LOGLEVEL=255 and DEBUGLEVEL=3:

< at >400000005197d6e333ee9034 tcpserver: pid 27959 from XXX.XXX.45.10
< at >400000005197d6e333f575d4 tcpserver: ok 27959 
correio.domaindst.com.br:172.16.1.2:587 
c

Re: openbsd+ldap+qmail: a nightmare

Henning Brauer — 2013-04-25T19:13:17

* Friedrich Locke <friedrich.locke< at >gmail.com> [2013-01-14 17:15]:

that works just fine, to the extend the openldap pig can work fine.

I am still running the older openldap-server
(openldap-server-2.3.43p10) since the 2.4 one is even worse and
removed the only reliable backend, ldbm.

once our own ldapd has replication support I should be able to get rid
of openldap eventually...

Re: ezmlm

José Celestino — 2013-04-02T19:46:53

http://www.lifewithqmail.org/ldap/#qmail-ldap%20and%20ezmlm

Re: ezmlm

Nicolas de Bari Embriz Garcia Rojas — 2013-04-02T20:06:16

yes, with out any issue.

you can used an ldiff like this one:

dn: uid=list< at >ejemplo.org,ou=ejemplo.org,ou=vusers,dc=domain,dc=tld
objectClass: top
objectClass: person
objectClass: inetOrgPerson
objectClass: qmailUser
uid: list< at >ejemplo.org
cn: list
sn: list
mail: list< at >ejemplo.org
mailAlternateAddress: list-catchall< at >ejemplo.org
mailMessageStore: ejemplo.org/list
accountStatus: nopop
qmailDotMode: dotonly

then just create the list using the ezml commands






On Tue, Apr 2, 2013 at 8:37 PM, Friedrich Locke
<friedrich.locke< at >gmail.com>wrote:

ezmlm

Friedrich Locke — 2013-04-02T19:37:12

Does qmail-ldap works with ezmlm ?

Thanks.

Fried

Qmail-LDAP/Dovecot Cluster

Jeff Hardy — 2013-03-13T17:19:12

Hello,

I have worked with qmail-ldap and Dovecot for a number of years, and 
recently wrote up a piece going into great detail about all aspects of 
our environment.  It currently supports a rather small installation of 
~10K active users.  If it should be of interest:

http://fritz.potsdam.edu/projects/email

It is intended primarily for system administrators or mail 
administrators interested in building mail infrastructure on top of 
open-source technologies, and is inspired by the likes of Life with qmail.

Topics include storage, backup, directory integration, local and remote 
mail exchange, checkpassword SMTP-Auth and Dovecot login, RBLs, 
content-scanning and anti-spam, quarantine, webmail, etc.  Full 
installation directions and configuration stanzas are provided for 
nearly every piece of the infrastructure.

Comments/criticism welcome.  Cheers.

-Jeff

--
Jeffrey M Hardy
Network / Systems Administrator
hardyjm< at >potsdam.edu

Re: Want to blacklist a sender and drop mails silently

Nicolas de Bari Embriz Garcia Rojas — 2013-02-06T19:43:26

Try using later version of qmail-ldap or patch your version so that it
can support this:

http://code.google.com/p/qmail-ldap-smtpauthuser/wiki/SETUP
http://code.google.com/p/qmail-ldap-smtpauthuser/wiki/HowTo

if you are using freebsd , from the qmail-ldap ports you can select to
use the SMTPAUTHUSER once done. you can configure your filters and do
exactly what you are looking for.

An example of the filter is here:
http://code.google.com/p/qmail-ldap-smtpauthuser/source/browse/trunk/test-ldap.pl

regards.

On Wed, Feb 6, 2013 at 10:14 AM, Raja T Nair <rtnair< at >gmail.com> wrote:

Re: Want to blacklist a sender and drop mails silently

Raja T Nair — 2013-02-06T10:14:33

Hello Dawie,

Yes I have tried `badmailfrom', but this sends a message back to the
sender, saying `your mail is administratively denied' - which I do not want.

Regards,
Raja.

On 4 February 2013 19:21, Dawie Swarts <dawies< at >bidpaperplus.co.za> wrote:

RE: Want to blacklist a sender and drop mails silently

Dawie Swarts — 2013-02-04T13:51:02

Hi

As far as I remember you can add badmailfrom to your /var/qmail/control/ directory. Just list the email address you want to drop in there.


Regards
Dawie


From: Shepherd Nhongo [mailto:shepherdzw< at >gmail.com]
Sent: 04 February 2013 03:41 PM
To: Raja T Nair
Cc: qmail-ldap< at >qmail-ldap.org
Subject: Re: Want to blacklist a sender and drop mails silently

:-) don't be evil hahahahahaha


Yes there is a way
On Mon, Feb 4, 2013 at 3:09 PM, Raja T Nair <rtnair< at >gmail.com<mailto:rtnair< at >gmail.com>> wrote:
Hello All,

Is there a way in qmail-ldap, where I can blacklist one sender and drop all mails from this id silently?
I don't want to send a 'mail rejected' message to her.

Regards,
Raja.
--
:^)



--
Shepherd Nhongo

Do not Queue mail with SENDMAIL, send mail with QMAIL

Mobile +263 772 688 072

______________________________________________________________________
This email has been scanned by the IS Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com
___________

Re: Want to blacklist a sender and drop mails silently

Shepherd Nhongo — 2013-02-04T13:40:34

:-) don't be evil hahahahahaha


Yes there is a way

On Mon, Feb 4, 2013 at 3:09 PM, Raja T Nair <rtnair< at >gmail.com> wrote:

Want to blacklist a sender and drop mails silently

Raja T Nair — 2013-02-04T13:09:08

Hello All,

Is there a way in qmail-ldap, where I can blacklist one sender and drop all
mails from this id silently?
I don't want to send a 'mail rejected' message to her.

Regards,
Raja.

YNT: changing user mailhost on working environment

Ismail Yenigul — 2013-01-15T18:15:54

Just move the user mailbox like a regular directory. If the messagestore path is different on the new host. You must update this attr. Or use a Shared storage on all machines. Nfs might be easy solution.




-Sent from Galaxy NoteFriedrich Locke <friedrich.locke< at >gmail.com> yazdı:Hi,

suppose i have a cluster with 5 machine. For a given user, let me say: xyz, the mailhost is z, i want to change his mailhost to b. The ldap part is pretty easy, but what about the email the user already have in mailhost z. How do i move them from mailhost z to mailhost b.
How do you do that ?

Thanks in advance.

changing user mailhost on working environment

Friedrich Locke — 2013-01-15T16:18:17

Hi,

suppose i have a cluster with 5 machine. For a given user, let me say: xyz,
the mailhost is z, i want to change his mailhost to b. The ldap part is
pretty easy, but what about the email the user already have in mailhost z.
How do i move them from mailhost z to mailhost b.
How do you do that ?

Thanks in advance.

Re: patches for qmail-ldap

Tomas Kuliavas — 2013-01-14T20:02:52

2013.01.14 20:41 Friedrich Locke rašė:

it is already pasted on link you posted and it is only four line change.

See
http://www.gnu.org/software/diffutils/manual/html_node/Detailed-Unified.html#Detailed-Unified,
if you are familiar with unified diff format.

patches for qmail-ldap

Friedrich Locke — 2013-01-14T18:41:26

Sorry folks,

but in my journey to get obsd+oldap+qmail working i am in need for a patch
(AFAIK, by Mr. Jeker) , more precisely:

http://www.mail-archive.com/qmail-ldap< at >qmail-ldap.org/msg07407.html

I cannot cut and paste it right now, that's why i am asking!

Does anybody have it and would like to send me ?

Thanks in advance.

Re: Just installed qmail+ldap: i am loosing my hairs

Friedrich Locke — 2013-01-14T18:32:51

Hi everybody.

The problem i am havin dues to buggy code in the lastest qmail-ldap
release. Accordingly to

http://www.mail-archive.com/qmail-ldap< at >qmail-ldap.org/msg07407.html

there are mistakes in the release.

Now, i will ask Mr. Claudio or Nicolas de Bari Embriz Garcia Rojas  to send
me a patch.

[]s

On Mon, Jan 14, 2013 at 1:28 PM, Ismail YENIGUL
<ismail.yenigul< at >surgate.com>wrote:

Re: Just installed qmail+ldap: i am loosing my hairs

Friedrich Locke — 2013-01-14T18:17:07

Yes! Some thing is very strange here.

Did anybody already faced such weird stuff ? I downloaded the packages from
cr.yp.to and from dave opperman site.

Anybody knows what is that ?

On Mon, Jan 14, 2013 at 3:29 PM, Robert Müller
<rmueller< at >thinxsolutions.com>wrote:

Re: Just installed qmail+ldap: i am loosing my hairs

Robert Müller — 2013-01-14T17:29:42

Somewhat strange - normally this should look like:

/var/qmail/bin/qmail-ldaplookup -d255 -m a< at >b.c
Searching ldap for: 
(&(objectClass=qmailUser)(|(mail=a< at >b.c)(mailAlternateAddress=a< at >b.c)))
under dn: dc=b,dc=c
Found 1 entry:
[..]

So in your qmail-ldaplookup the whole objectClass filter part is 
missing, but the last closing ")" is still there...

Regards,
Robert



Am 14.01.2013 16:17, schrieb Friedrich Locke:

Re: Just installed qmail+ldap: i am loosing my hairs

Friedrich Locke — 2013-01-14T16:48:43

Here is my slapd.conf access directives :

###############################################################################
# access definition on ou=appsrv,dc=ufv,dc=br
################################################################################

access to dn.one="ou=appsrv,dc=ufv,dc=br" attrs=userPassword
        by self read
        by anonymous auth
#       by * none

access to dn.one="ou=appsrv,dc=ufv,dc=br"
        by dn.one="ou=appsrv,dc=ufv,dc=br" read

access to dn.base="ou=appsrv,dc=ufv,dc=br" attrs=entry
        by dn.one="ou=appsrv,dc=ufv,dc=br" read
################################################################################
# access definition on ou=group,dc=ufv,dc=br
################################################################################

access to dn.one="ou=group,dc=ufv,dc=br"
        by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read
        by dn.one="ou=people,dc=ufv,dc=br" read

access to dn.base="ou=group,dc=ufv,dc=br" attrs=entry
        by dn.base="cn=ypldap,ou=appsrv,

openbsd+ldap+qmail: a nightmare

Friedrich Locke — 2013-01-14T16:15:26

Hi folks,

i have been walking around and now i need to get qmail+ldap+openbsd working.
I could configure  everything, as usual openbsd runs rock solid. But i
believe openldap does not like openbsd somehow. That's what i want to
figure it out.

The point is: i have just setted up obsd+oldap+qmail. I am trying to send a
message for the only user i have in the tree: somehow, i don't know why is
"eating" all my system memory. I am really curious why it happens on OBSD.
I am running amd64 5.2, but i remenber to have given up some time ago when
the obsd version was not 5.2. When i issue ldapsearch not memory increase
is realized.

The problem remains even with the 5.2 version.
Some information is provided below :

sioux< at >gustav$ uname -a
OpenBSD gustav.cpd.ufv.br 5.2 GENERIC.MP#368 amd64
sioux< at >gustav$ pkg_info | grep openldap
openldap-client-2.4.31 Open source LDAP software (client)
openldap-server-2.4.31p0 Open source LDAP software (server)
sioux< at >gustav$

For the /etc/openldap/slapd.conf, here you have it:

#
# S

Re: Just installed qmail+ldap: i am loosing my hairs

Ismail YENIGUL — 2013-01-14T16:09:49

 >mailMessageStore: vlobo
Also messagestore value must be a full path.  and directory owner must 
be ldapuid value.


On 14.01.2013 18:05, Friedrich Locke wrote: