AFP548 Changing the world one server at a time.

setting up AD users with mail accounts?

Home › Forums › OS X Server and Client Discussion › Active Directory › setting up AD users with mail accounts?

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • November 20, 2009 at 3:26 pm #377553
    mdoupe
    Participant

    Hi all! 🙂

    We just recently upgraded to Snow Leopard Server, and want to add mail into the mix. We’ve tried statically mapping MailAttribute for AD users, We’ve tried cylinder of destiny, we’ve tried adding AD users to an OD or local group, and then setting the SACL’s to specifically allow access to mail, but no matter what we try, we see this line in the mail access log:

    Nov 20 01:10:07 studentdc01 dovecot[2692]: auth(default): client out: FAIL 1 user=mdoupe
    Nov 20 01:10:12 studentdc01 dovecot[2692]: imap-login: Aborted login (auth failed, 1 attempts): user=, method=CRAM-MD5, rip=127.0.0.1, lip=127.0.0.1, secured

    Any ideas or suggestions on things we can try to troubleshoot this?

    I’ve pasted a whole login session log below, thanks in advance for any help you can give!

    Nov 20 01:10:04 studentdc01 dovecot[2692]: auth(default): client in: AUTH       1       CRAM-MD5        service=imap    secured lip=127.0.0.1   rip=127.0.0.1       lport=143       rport=50373
Nov 20 01:10:04 studentdc01 dovecot[2692]: auth(default): mech_cram_md5: challenge: <some numbers@studentdc01.cesd.ad>
Nov 20 01:10:04 studentdc01 dovecot[2692]: auth(default): client out: CONT      1       random string of characters
Nov 20 01:10:04 studentdc01 dovecot[2692]: auth(default): client in: CONT       1       random string of characters
Nov 20 01:10:04 studentdc01 dovecot[2692]: auth(default): od(mdoupe,127.0.0.1): auth mech=CRAM-MD5
Nov 20 01:10:04 studentdc01 dovecot[2692]: auth(default): od(mdoupe,127.0.0.1): username=mdoupe, challenge=<some numbers@studentdc01.cesd.ad>, response=some characters
Nov 20 01:10:04 studentdc01 dovecot[2692]: auth(default): od(mdoupe,127.0.0.1): directory lookup for: user=mdoupe
Nov 20 01:10:04 studentdc01 dovecot[2692]: auth(default): od[getpwnam_ext](mdoupe,127.0.0.1): uid=1854971937 gid=1056050139 state=0xe quota=0 guid=EE90A021-529B-4862-BA4D-85136FDF75F2 name=mdoupe loc=studentdc01.cesd.ad alt=(null) fwd=(null)
Nov 20 01:10:04 studentdc01 dovecot[2692]: auth(default): od(mdoupe,127.0.0.1): adding user to table: mdoupe
Nov 20 01:10:06 studentdc01 dovecot[2692]: auth(default): od(mdoupe,127.0.0.1): mail SACL is enabled; overriding settings in user record
Nov 20 01:10:07 studentdc01 dovecot[2692]: auth(default): client out: FAIL      1       user=mdoupe
Nov 20 01:10:12 studentdc01 dovecot[2692]: imap-login: Aborted login (auth failed, 1 attempts): user=<mdoupe>, method=CRAM-MD5, rip=127.0.0.1, lip=127.0.0.1, secured
Nov 20 01:10:12 studentdc01 dovecot[2692]: auth(default): new auth connection: pid=2716

    November 20, 2009 at 9:45 pm #377555
    mdoupe
    Participant

    Someone much smarter than I found the solution.

    We ended up being running squirrelmail’s conf.pl (within the apache etc directory) and setting it to plain authentication, and doing the same in dovecot’s config.

    This along with dsconfigad -staticmap’ing the MailAttribute has us up and running with AD users authenticating to squirrelmail.

    We had done an upgrade from a 10.5.6 server (since we only have one xserve)

    hope this helps somebody 🙂

  • Author
    Posts
Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.