aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--figures/network.tex2
-rw-r--r--fripost-docs.org13
2 files changed, 8 insertions, 7 deletions
diff --git a/figures/network.tex b/figures/network.tex
index 8be726a..833c3f5 100644
--- a/figures/network.tex
+++ b/figures/network.tex
@@ -203,7 +203,7 @@
.. controls +(30:8cm) and +(0,-2.5cm) ..
(LDAP-producer.south)
node[pos=0.5,above,proto] {LDAP \textnormal{(over \texttt{SSH})}}
- node[pos=0.15,below,what] {mod. \texttt{userPassword}}
+ node[pos=0.15,align=center,what] {bind to \\ mod. \texttt{userPassword}}
node[pos=0.96,above,port] {389};
\draw[->,route] (MSA) edge
diff --git a/fripost-docs.org b/fripost-docs.org
index 3514573..41655b4 100644
--- a/fripost-docs.org
+++ b/fripost-docs.org
@@ -1247,22 +1247,23 @@ the prefix.
TODO: Postfix 2.7 does not support SASL binds. Hence one cannot SASL bind on
the socket with the EXTERNAL mechanism, which leads to a flood of warnings
"connection_read(XX): no connection!" in the syslog. One can also reproduce the
-flood with
+warning with
ldapsearch -H 'ldapi://%2Fvar%2Fspool%2Fpostfix%2Fvar%2Frun%2Fldapi/' -x -WD 'cn=guilhem,ou=managers,o=mailHosting,dc=fripost,dc=org' -b 'o=mailHosting,dc=fripost.org,dc=org'
-instead of
+instead of the proper
ldapsearch -H 'ldapi://%2Fvar%2Fspool%2Fpostfix%2Fvar%2Frun%2Fldapi/' -Y EXTERNAL -WD 'cn=guilhem,ou=managers,o=mailHosting,dc=fripost,dc=org' -b 'o=mailHosting,dc=fripost.org,dc=org'
(The first one performs a simple bind and does not unbind properly, while
the second one is safe and performs a SASL bind with the EXTERNAL mechanism.)
-TODO: With Postfix 2.8, one could do [Not tested]
- bind = sasl
- sasl_mechs = EXTERNAL
-
See also
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=643970
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=660223
http://www.openldap.org/lists/openldap-software/200811/msg00078.html
+TODO: In the time being, we stick to simple binds on 127.0.0.1:389, but with
+Postfix 2.8, one could do [Not tested]
+ bind = sasl
+ sasl_mechs = EXTERNAL
+
:: /etc/postfix/ldap/ldap_virtual_mailbox_domains.cf