[mdoupe]

we never did get Augmented users to work (with any applications)

but there is an issue with squirrelmail where it tries to authenticate with dovecot using some sort of encryption. we turned that off (somewhere in the /etc dir there is a squirrelmail setup perl script, we ran that and set it to clear text auth.

[mdoupe]

we ended up statically mapping the MailAttribute for all AD users. The squirrelmail implementation doesn’t seem to be set up properly either, but we fixed that too. squirrel was trying to authenticate with cram-md5 and dovecot was having none of it. 😛

I think we tried looking in search, both with WGM and DSCL, and neither would show the augmented mailattribute.

[mdoupe]

Someone much smarter than I found the solution.

We ended up being running squirrelmail’s conf.pl (within the apache etc directory) and setting it to plain authentication, and doing the same in dovecot’s config.

This along with dsconfigad -staticmap’ing the MailAttribute has us up and running with AD users authenticating to squirrelmail.

We had done an upgrade from a 10.5.6 server (since we only have one xserve)

hope this helps somebody 🙂

[Author]

Posts