Penguin
Recent Changes
Note: You are viewing an old revision of this page. View the current version.

Over a weekend myself and my CoWorker decided to create a mail system using ActiveDirectory as a backend database for authentication of usernames.

This allows us a single central database for users names/passwords.

Software Configuration:

  • Windows 2003 Datacenter Server
  • Debian Linux 3.0 (woody)
  • Exim 3.35
  • Cyrus 2.1.15
  • Samba 3.0b2

to be continued...

Exim Configuration

Put this in your directors section of the exim config file.

active_directory_user

driver = aliasfile search_type = ldapm query = "user=\"cn=james,ou=Admins,ou=Accounts,dc=clonedm,dc=regent,dc=ac,dc=nz\" pass=\"Secret12\" \

ldap://achor.clonedm.regent.ac.nz:389/dc=clonedm,dc=regent,dc=ac,dc=nz?sAMAccountName?sub?sAMAccountName=$local_part)"

expand transport = local_delivery_cyrus

This will search the LDAP server (in this case, achor.clonedm.regent.ac.nz) for entries that match sAMAccountName=$local_part and return the sAMAccountName, the sub? is important and instructs ldap to do a recursive (sublevel) search.

CategoryInteroperability