Differences between version 14 and predecessor to the previous major change of EximSmtpAuth.
Other diffs: Previous Revision, Previous Author, or view the Annotated Edit History
| Newer page: | version 14 | Last edited on Friday, May 27, 2005 10:32:33 pm | by TomConstans | Revert |
| Older page: | version 13 | Last edited on Thursday, February 3, 2005 6:16:12 pm | by CraigBox | Revert |
@@ -85,8 +85,21 @@
ldap://localhost/ou=Domains,BASEDN?uid?sub?(uid=$1)}{yes}fail}"
server_set_id = $1
This one differs slightly, in that in order to find the binddn, i first had to do a query to find the dn of the uid relating to user@domain.co.nz. As this is stored in o=$domain,ou=Domains..., and the $domain wont work in this case (its only populated when it gets an incoming mail, not for an auth session), I either needed a regex to split $1 into $user and $domain, or else to do this extra query. It works out ok though :). Note that the internal query is of type 'ldapdn' - this returns the dn of the result, and assumes there is only one match for uid=$1.
+
+----
+!! another setup
+something maybe simpler, that supports multiple virtual domains:
+
+login:
+ driver = plaintext
+ public_name = LOGIN
+ server_prompts = "LDAP Username:: : LDAP Password::"
+ server_condition = ${if ldapauth { user="${lookup ldapdn{ ldap://LDAPSERVER/BASEDN?dn?sub?(mail=$1)}}" pass=${quote:$2} ldap://LDAPSERVER/}{yes}{no}}
+ server_set_id = $1
+
+the ldapdn lookup retrieves the full dn of user identified by is "mail" ( this attribute can of course be changed ) and attempt a bind to the ldapserver, with the given dn. if it succeeds, then smtp auth is considered successful
----
!! Client Setup
All mail generated at my house gets sent to exim which runs on the router connected to my DSL line, my ISPs smarthost sucks (for various reasons), and being on a dynamic IP delivering directly is not such a smart idea. The solution is to smarthost to another server somewhere that will accept my mail using SMTP AUTH. In this case exim is acting as an SMTP AUTH client rather than a server.
