[10:15] <p4> Hello. How to adjust Ldap-authorization Samba if LDAP is on OTHER server?
[10:17] <lionelp> p4: hello
[10:17] <lionelp> the same
[10:17] <lionelp> but change localhost by your LDAP server :)
[10:53] <p4> Thank. Where it is better to look adjustment in Ubuntu LDAP-authorizations SAMBA?
[10:56] <alexis_> hi
[10:57] <alexis_> does anyone got the postfix-ldap package to work
[10:57] <alexis_> ?
[11:16] <lionelp> alexis_: yep
[11:17] <alexis_> hi
[11:17] <alexis_> postfix tells me "SASL CRAM-MD5 authentication failed"
[11:18] <alexis_> every time i try to send a mail with a user which is in the ldap base
[11:19] <alexis_> testsaslauthd works well (0: OK "Success.")
[11:19] <lionelp> For what purpose you use LDAP with postfix ?
[11:19] <lionelp> Ok, for SMTP-AUTH ?
[11:19] <alexis_> i nned to migrate a macosx server (with netinfo) to ldap
[11:20] <alexis_> ??
[11:20] <alexis_> what do you mean by "Ok, for SMTP-AUTH ?"?
[11:21] <lionelp> You are trying to use SMTP-AUTH with Postfix ?
[11:21] <alexis_> yes
[11:21] <alexis_> i need the smtp server to allow only ldap users to send mails
[11:22] <lionelp> 2s
[11:22] <alexis_> it works well without authentification
[11:22] <alexis_> ok
[11:30] <lionelp> alexis_: sorry
[11:30] <alexis_> yep
[11:30] <lionelp> You does not need postfix-ldap to make SMTP-AUTH
[11:30] <lionelp> postfix-ldap is for maps LDAP support in postfix
[11:30] <lionelp> (for example if you store mail addreses in LDAP)
[11:31] <alexis_> it's what i want to do
[11:31] <lionelp> in your case, it is SASL (saslauthd to be more precise) that will interact with LDAP
[11:31] <lionelp> Ok :)
[11:31] <alexis_> yes 
[11:31] <alexis_> saslauthd works
[11:31] <lionelp> with LDAP ?
[11:32] <lionelp> Oh, i know
[11:32] <alexis_> but postfix always tell me "SASL authentication failure: no secret in database"
[11:32] <lionelp> did you take care of Postfix chroot ?
[11:32] <alexis_> yes
[11:32] <alexis_> i have a testman in ldap and "testsaslauthd -u testman -p 123" works
[11:33] <lionelp> That's fine for saslauthd
[11:33] <alexis_> yes i did some changes in configuration files (google)
[11:33] <lionelp> How did you had saslauthd socket in postfix chroot ?
[11:34] <alexis_> but when  i try testsaslauthd being not root it does not work
[11:36] <alexis_> i added a few lines into /etc/init.d/saslauthd
[11:36] <lionelp> Can you show me the /etc/default/saslauthd ?
[11:37] <alexis_> yes
[11:37] <alexis_> 2s
[11:38] <alexis_> http://paste.ubuntu-nl.org/20744
[11:39] <alexis_> and i added these lines into /etc/init.d/saslautd: http://paste.ubuntu-nl.org/20743
[11:40] <lionelp> Ok
[11:40] <alexis_> and i modified 2 lines in the beginning of /etc/init.d/saslautd:
[11:40] <alexis_> PWDIR=/var/spool/postfix/var/run/saslauthd
[11:40] <alexis_> PIDFILE="/var/spool/postfix/var/run/${NAME}/saslauthd.pid"
[11:42] <p4> How to LDAP+SAMBA?
[11:42] <p4> How to LDAP+SAMBA?
[11:42] <alexis_> i haven't tried samba yet
[11:42] <alexis_> but ftp works well
[11:42] <alexis_> ftp+ldap i mean
[11:43] <lionelp> alexis_: what is the content of /etc/postfix/sasl/smtpd.conf ?
[11:43] <alexis_> pwcheck_method: saslauthd
[11:43] <lionelp> p4: We understand even if you ask only once :)
[11:44] <lionelp> p4: did you check http://us4.samba.org/samba/docs/man/Samba-HOWTO-Collection/
[11:46] <lionelp> oh sorry alexis_ i missed your answer
[11:47] <lionelp> you should add the following line
[11:47] <lionelp> mech_list: PLAIN LOGIN
[11:47] <alexis_> ok i'll try
[11:48] <alexis_> it does not work
[11:48] <alexis_> i check the logs...
[11:49] <lionelp> did you reload postfix ?
[11:49] <alexis_> yes
[11:49] <alexis_> the log is not the same
[11:49] <alexis_> 2s i post it on pastebin
[11:50] <alexis_> over there http://paste.ubuntu-nl.org/20752
[11:54] <alexis_> it is the same error i i tell sylpheed-claws to use AUTH PLAIN instead of AUTH LOGIN 
[11:56] <alexis_> "cannot connect to saslauthd server: No such file or directory"... which file is it talking about?
[12:01] <lionelp> alexis_: I think this is the socket file
[12:03] <alexis_> i see the problem
[12:03] <alexis_> /var/run/saslautd is a link to /var/spool/postfix/var/run/saslauthd
[12:04] <alexis_> but /var/spool/postfix/var/run/saslauthd does not exist even if saslautd is running
[12:04] <lionelp> hum...
[12:05] <lionelp> Can you check the content of /var/run/saslauthd ?
[12:05] <lionelp> Does your socket even exists ?
[12:05] <alexis_> i will put back the original configuration
[12:05] <lionelp> I personnaly used a moutn with bind option
[12:06] <lionelp> Here is my fstab entry :  /var/run/saslauthd /var/spool/postfix/var/run/saslauthd none bind,defaults 0 0
[12:07] <alexis_> i will try this
[12:08] <alexis_> wow
[12:09] <alexis_> i dont kno what i have changed but testsaslauthd does not work anymore
[12:12] <alexis_> ok now it works again
[12:12] <alexis_> so i must keep PWDIR=/var/spool/postfix/var/run/saslauthd ?
[12:12] <lionelp> no
[12:12] <alexis_> i need to put back PWDIR=/var/run/saslauthd?
[12:13] <lionelp> I would do so
[12:13] <alexis_> ok
[12:13] <alexis_> now i'll change my fstab
[12:15] <alexis_> YES
[12:16] <alexis_> authentification is OK
[12:16] <alexis_> but now...
[12:16] <alexis_> it wouldn't send my mail
[12:16] <alexis_> [12:16:39]  ESMTP< 235 Authentication successful
[12:17] <alexis_> but after that it does nothing
[12:17] <alexis_> AUTH PLAIN works and AUTH LOGIN works
[12:18] <lionelp> did you changed the smtpd_recipient_restrictions ?
[12:19] <alexis_> smtpd_recipient_restrictions = permit_mynetworks
[12:19] <alexis_>                                permit_sasl_authenticated
[12:19] <alexis_>                                reject_unauth_destination
[12:20] <lionelp> Ok, looks good
[12:20] <lionelp> Does log tell you more ?
[12:20] <alexis_> 2s i look
[12:20] <alexis_> i ll post it
[12:21] <alexis_> ah
[12:21] <alexis_> fatal: ldap:aliases(0,100): table lookup problem
[12:21] <lionelp> alexis_: I will look at it after lunch
[12:21] <lionelp> oh, you've got it
[12:21] <alexis_> ok
[12:21] <alexis_> bon appetit
[12:21] <lionelp> collegues are waiting for me
[12:21] <lionelp> merci :)
[12:22] <alexis_> thank you very much
[01:03] <DevGet> I get "forbidden" when I'm trying to go to the defult cgi-bin in my webbrowser, whats wrong?
[01:03] <DevGet> what's*
[01:03] <DevGet> oh, sry
[01:03] <DevGet> wrong channel
[04:38] <alexis_> are you here lionelp?
[05:33] <J_P> hi all
[05:34] <J_P> hey all, anyone know some colocation (server location) in the web that install ubuntu too in servers ?
[06:17] <infinity> J_P: I don't know of any off hand, but I've always just gone with places that do RedHat or CentOS or whatever, then debootstrapped an ubuntu install, and used a static shell to mangle it into place.
[06:17] <infinity> J_P: Another option is someplace like www.layeredtech.com that installs Debian Sarge, and you can "sidegrade" from Sarge to Dapper.
[06:18] <J_P> infinity: humm second option is better, but yet is bad, becouse I would like two HDs doing RAID and LVM, so ned do this in instalation
[10:29] <dj_ryan> hail people.