[Linuxtrent] Postfix non riesce a comunicare correttamente con il mio vecchio LDAP

  • From: Marco Agostini <comunelevico@xxxxxxxxx>
  • To: linuxtrent@xxxxxxxxxxxxx
  • Date: Fri, 12 Aug 2011 09:33:56 +0200

Ciao lista,

sto provando a configurare un server di posta con Postfix + Dovecot e
integrarlo con LDAP presente in un Active Directory Windows 2000
seguendo questa guida
http://www.linuxmail.info/postfix-dovecot-ldap-centos-5/ ma ho qualche
problema ad ottenere dei risultati dal server LDAP

ho:
- installato postfix e postfix-ldap
- ho creato un file /etc/postfix/ldap-users.cf con questo contenuto

server_host = ldap://IP_DEL_SERVER_ACTIVE_DIRECTORY
version = 2
bind = yes
bind_dn = CN=UTENTE_ABILITATO_A_LEGGERE_LDAP,CN=Users,dc=MIODOMINIO,dc=LOCALE
bind_pw = PASSWORD_UTENTE_ABILITATO_A_LEGGERE_LDAP
search_base = dc=MIODOMINIO,dc=LOCALE
query_filter = (cn=Marco Agostini)  <--- questo l'ho volutamente
forzato per fare dei test
result_attribute = cn

quando provo a lanciare un test di connessione tramite postmap -v -q
UTENTE_DI_PROVA ldap:/etc/postfix/ldap-users.cf ottengo questo come
risultato:


postmap: dict_eval: const  mail
postmap: dict_eval: const  ipv4
postmap: dict_eval: const
postmap: dict_eval: const
postmap: dict_eval: const
postmap: name_mask: ipv4
postmap: dict_eval: const  srvimap.levico.locale
postmap: dict_eval: const  levico.locale
postmap: dict_eval: const  Postfix
postmap: dict_eval: expand
${multi_instance_name:postfix}${multi_instance_name?$multi_instance_name}
-> postfix
postmap: dict_eval: const  postfix
postmap: dict_eval: const  postdrop
postmap: dict_eval: const  comune.levico-terme.tn.it,
srvimap.levico.locale, localhost.levico.locale, localhost
postmap: dict_eval: const  /etc/mailname
postmap: dict_eval: const
postmap: dict_eval: const  /usr/lib/postfix
postmap: dict_eval: const  /var/lib/postfix
postmap: dict_eval: const  /usr/sbin
postmap: dict_eval: const  /var/spool/postfix
postmap: dict_eval: const  pid
postmap: dict_eval: const  loopback-only
postmap: dict_eval: const
postmap: dict_eval: const  double-bounce
postmap: dict_eval: const  nobody
postmap: dict_eval: const  hash:/etc/aliases
postmap: dict_eval: const  20100608
postmap: dict_eval: const  2.7.1
postmap: dict_eval: const  hash
postmap: dict_eval: const  deferred, defer
postmap: dict_eval: const  +
postmap: dict_eval: expand $mydestination ->
comune.levico-terme.tn.it, srvimap.levico.locale,
localhost.levico.locale, localhost
postmap: dict_eval: expand $relay_domains ->
comune.levico-terme.tn.it, srvimap.levico.locale,
localhost.levico.locale, localhost
postmap: dict_eval: const  TZ MAIL_CONFIG LANG
postmap: dict_eval: const  MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ
XAUTHORITY DISPLAY LANG=C
postmap: dict_eval: const  subnet
postmap: dict_eval: const
postmap: dict_eval: const  +=
postmap: dict_eval: const  -=+
postmap: dict_eval: const
debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,smtpd_access_maps
postmap: dict_eval: const
postmap: dict_eval: const  bounce
postmap: dict_eval: const  cleanup
postmap: dict_eval: const  defer
postmap: dict_eval: const  pickup
postmap: dict_eval: const  qmgr
postmap: dict_eval: const  rewrite
postmap: dict_eval: const  showq
postmap: dict_eval: const  error
postmap: dict_eval: const  flush
postmap: dict_eval: const  verify
postmap: dict_eval: const  trace
postmap: dict_eval: const  proxymap
postmap: dict_eval: const  proxywrite
postmap: dict_eval: const
postmap: dict_eval: const
postmap: dict_eval: const  100s
postmap: dict_eval: const  100s
postmap: dict_eval: const  100s
postmap: dict_eval: const  100s
postmap: dict_eval: const  3600s
postmap: dict_eval: const  3600s
postmap: dict_eval: const  5s
postmap: dict_eval: const  5s
postmap: dict_eval: const  1000s
postmap: dict_eval: const  1000s
postmap: dict_eval: const  10s
postmap: dict_eval: const  10s
postmap: dict_eval: const  1s
postmap: dict_eval: const  1s
postmap: dict_eval: const  1s
postmap: dict_eval: const  1s
postmap: dict_eval: const  500s
postmap: dict_eval: const  500s
postmap: dict_eval: const  18000s
postmap: dict_eval: const  18000s
postmap: dict_eval: const  1s
postmap: dict_eval: const  1s
postmap: dict_eval: const  127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
postmap: inet_addr_local: configured 2 IPv4 addresses
postmap: dict_ldap_open: Using LDAP source /etc/postfix/ldap-users.cf
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: server_host =
ldap://IP_DEL_SERVER_LDAP
postmap: cfg_get_int: /etc/postfix/ldap-users.cf: server_port = 389
postmap: cfg_get_int: /etc/postfix/ldap-users.cf: version = 2
postmap: dict_ldap_open: /etc/postfix/ldap-users.cf server_host URL is
ldap://IP_DEL_SERVER_LDAP
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: scope = sub
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: search_base =
OU=OU-UtentiComune,dc=levico,dc=locale
postmap: cfg_get_int: /etc/postfix/ldap-users.cf: timeout = 10
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: query_filter =
(cn=Marco Agostini)
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: result_format = <NULL>
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: result_filter = %s
postmap: warning: dict_ldap_open: /etc/postfix/ldap-users.cf: Fixed
query_filter (cn=Marco Agostini) is probably useless
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: domain =
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: terminal_result_attribute =
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: leaf_result_attribute =
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: result_attribute = cn
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: special_result_attribute =
postmap: cfg_get_bool: /etc/postfix/ldap-users.cf: bind = on
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: bind_dn =
CN=UTENTE_ABILITATO_A_LEGGERE_LDAP,CN=Users,dc=MIODOMINIO,dc=LOCALE
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: bind_pw =
PASSWORD_UTENTE_ABILITATO_A_LEGGERE_LDAP
postmap: cfg_get_bool: /etc/postfix/ldap-users.cf: cache = off
postmap: cfg_get_int: /etc/postfix/ldap-users.cf: cache_expiry = -1
postmap: cfg_get_int: /etc/postfix/ldap-users.cf: cache_size = -1
postmap: cfg_get_int: /etc/postfix/ldap-users.cf: recursion_limit = 1000
postmap: cfg_get_int: /etc/postfix/ldap-users.cf: expansion_limit = 0
postmap: cfg_get_int: /etc/postfix/ldap-users.cf: size_limit = 0
postmap: cfg_get_int: /etc/postfix/ldap-users.cf: dereference = 0
postmap: cfg_get_bool: /etc/postfix/ldap-users.cf: chase_referrals = off
postmap: cfg_get_bool: /etc/postfix/ldap-users.cf: start_tls = off
postmap: cfg_get_bool: /etc/postfix/ldap-users.cf: tls_require_cert = off
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: tls_ca_cert_file =
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: tls_ca_cert_dir =
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: tls_cert =
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: tls_key =
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: tls_random_file =
postmap: cfg_get_str: /etc/postfix/ldap-users.cf: tls_cipher_suite =
postmap: cfg_get_int: /etc/postfix/ldap-users.cf: debuglevel = 0
postmap: dict_open: ldap:/etc/postfix/ldap-users.cf
postmap: dict_ldap_lookup: In dict_ldap_lookup
postmap: dict_ldap_lookup: No existing connection for LDAP source
/etc/postfix/ldap-users.cf, reopening
postmap: dict_ldap_connect: Connecting to server ldap://IP_DEL_SERVER_LDAP
postmap: dict_ldap_connect: Actual Protocol version used is 2.
postmap: dict_ldap_connect: Binding to server
ldap://IP_DEL_SERVER_LDAP as dn
CN=UTENTE_ABILITATO_A_LEGGERE_LDAP,CN=Users,dc=MIODOMINIO,dc=LOCALE
postmap: dict_ldap_connect: Successful bind to server
ldap://IP_DEL_SERVER_LDAP as
CN=UTENTE_ABILITATO_A_LEGGERE_LDAP,CN=Users,dc=MIODOMINIO,dc=LOCALE
postmap: dict_ldap_connect: Cached connection handle for LDAP source
/etc/postfix/ldap-users.cf
postmap: dict_ldap_lookup: /etc/postfix/ldap-users.cf: Searching with
filter (cn=Marco Agostini)
postmap: dict_ldap_get_values[1]: Search found 0 match(es)
postmap: dict_ldap_get_values[1]: Leaving dict_ldap_get_values
postmap: dict_ldap_lookup: Search returned nothing
postmap: dict_ldap_close: Closed connection handle for LDAP source
/etc/postfix/ldap-users.cf


da qui capisco che il bind con LDAP è andato a buon fine:
postmap: dict_ldap_connect: Successful bind to server
ldap://IP_DEL_SERVER_LDAP as
CN=UTENTE_ABILITATO_A_LEGGERE_LDAP,CN=Users,dc=MIODOMINIO,dc=LOCALE

ma la stringa di ricerca non restituisce nulla:
postmap: dict_ldap_lookup: /etc/postfix/ldap-users.cf: Searching with
filter (cn=Marco Agostini)
postmap: dict_ldap_get_values[1]: Leaving dict_ldap_get_values
postmap: dict_ldap_lookup: Search returned nothing

Ho provato da un altro pc, tramite JXplorer
(http://www.jxplorer.org/downloads/users.html) ad interrogare LDAP
utilizzando le stesse credenziali e la stessa tipologia di ricerca
ottenendo i risultati sperati.

Ho provato anche a variare alcuni valori:
version = 3 e altre tipologie di ricerche per query_filter.... ma
senza ottenere risultati nelle ricerche.


Suggerimenti ? cosa stò sbagliando ?

grazie mille in anticipo.
--
Per iscriversi  (o disiscriversi), basta spedire un  messaggio con OGGETTO
"subscribe" (o "unsubscribe") a mailto:linuxtrent-request@xxxxxxxxxxxxx


Other related posts: