dovecot - Jun 2013 - Passdb + single sing on + NTLM + Thunderbird.

Hi!,

I want to use single sign on from Windows with Thunderbird or Outlook using
NTLM.
Which should be placed in the configuration file for passdb?.
Currently I have:

passdb {
  driver = pam
}

But it generates the following error when trying to check mail:
dovecot: auth: pam (pepe, 190 108 101 120): unknown user
If I remove imap passdb just does not work and I add at the end of this
mail the log.
Thank :)

----------------( dovecot -n  )------------------------------

# 2.0.9: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-358.6.2.el6.x86_64 x86_64 CentOS release 6.4 (Final)
auth_debug = yes
auth_mechanisms = plain login ntlm
auth_use_winbind = yes
auth_username_format = %n
disable_plaintext_auth = no
mbox_write_locks = fcntl
passdb {
  driver = pam
}
protocols = imap pop3
ssl = no
userdb {
  args = uid=10000 gid=10000 home=/mail/%d/%n
  driver = static
}

----------------(  wbinfo -t  )------------------------------

checking the trust secret for domain FNR via RPC calls succeeded

----------------(  wbinfo -u  )------------------------------

list all users

----------------(  wbinfo -g  )------------------------------

list all groups

------------(  /usr/bin/ntlm_auth --username=pepe  )---------

password:
NT_STATUS_OK: Success (0x0)

------------(   tail -n 500 -f /var/log/maillog )-------------

Jun 26 14:58:41 prueba-mail dovecot: master: Dovecot v2.0.9 starting up
(core dumps disabled)
Jun 26 14:59:00 prueba-mail dovecot: auth: Debug: Loading modules from
directory: /usr/lib64/dovecot/auth
Jun 26 14:59:00 prueba-mail dovecot: auth: Debug: Module loaded:
/usr/lib64/dovecot/auth/libauthdb_ldap.so
Jun 26 14:59:00 prueba-mail dovecot: auth: Debug: Module loaded:
/usr/lib64/dovecot/auth/libdriver_sqlite.so
Jun 26 14:59:00 prueba-mail dovecot: auth: Debug: Module loaded:
/usr/lib64/dovecot/auth/libmech_gssapi.so
Jun 26 14:59:00 prueba-mail dovecot: auth: Fatal: No passdbs specified in
configuration file. LOGIN mechanism needs one
Jun 26 14:59:00 prueba-mail dovecot: master: Error: service(auth): command
startup failed, throttling
Jun 26 14:59:35 prueba-mail dovecot: imap-login: Error: Timeout waiting for
handshake from auth server. my pid=1734, input bytes=0
Jun 26 15:00:00 prueba-mail dovecot: auth: Debug: Loading modules from
directory: /usr/lib64/dovecot/auth
Jun 26 15:00:00 prueba-mail dovecot: auth: Debug: Module loaded:
/usr/lib64/dovecot/auth/libauthdb_ldap.so
Jun 26 15:00:00 prueba-mail dovecot: auth: Debug: Module loaded:
/usr/lib64/dovecot/auth/libdriver_sqlite.so
Jun 26 15:00:00 prueba-mail dovecot: auth: Debug: Module loaded:
/usr/lib64/dovecot/auth/libmech_gssapi.so
Jun 26 15:00:00 prueba-mail dovecot: auth: Fatal: No passdbs specified in
configuration file. LOGIN mechanism needs one
Jun 26 15:00:00 prueba-mail dovecot: master: Error: service(auth): command
startup failed, throttling
Jun 26 15:00:30 prueba-mail dovecot: imap-login: Error: Timeout waiting for
handshake from auth server. my pid=1734, input bytes=0

-- 
Maria Jos?

On 6/26/2013 1:17 PM, Maria Jose Ya?ez Dacosta wrote:
> I want to use single sign on from Windows with Thunderbird or Outlook using
> NTLM.
http://wiki2.dovecot.org/Authentication/Kerberos

-- 
Stan

On 6/27/2013 7:48 AM, Maria Jose Ya?ez Dacosta wrote:
> Thanks!!.
> I have a little question,
> This page explains AUTH = GSSAPI but I'm interested in AUTH = NTLM.
> I want to get single sign on with clients in Windows against a Windows
> Active Directory.
> For NTLM should use another library like pam_krb5.so?
> Sorry for so many questions and thanks again
http://wiki2.dovecot.org/Authentication/Mechanisms/Winbind
http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM
> 2013/6/26 Stan Hoeppner <stan at hardwarefreak.com>
> 
>> On 6/26/2013 1:17 PM, Maria Jose Ya?ez Dacosta wrote:
>>
>>> I want to use single sign on from Windows with Thunderbird or
Outlook
>> using
>>> NTLM.
>>
>> http://wiki2.dovecot.org/Authentication/Kerberos

Hello I have configured Dovecot against AD, using outlook with NTLM and is
working like a charm...
Try the following this link...

http://wiki.dovecot.org/HowTo/ActiveDirectoryNtlm

I hope this will help you...


-----Original Message-----
From: dovecot-bounces at dovecot.org [mailto:dovecot-bounces at dovecot.org] On
Behalf Of Maria Jose Ya?ez Dacosta
Sent: viernes, 28 de junio de 2013 02:59 p.m.
To: Dovecot Mailing List
Subject: Re: [Dovecot] Passdb + single sing on + NTLM + Thunderbird.


"Notificaci?n Autom?tica:
Este mensaje ha sido recibido desde la Internet, no se garantiza la
autenticidad del remitente. "

Thank you very much for the reply :)
I try with that.


2013/6/27 Stan Hoeppner <stan at hardwarefreak.com>
> On 6/27/2013 7:48 AM, Maria Jose Ya?ez Dacosta wrote:
> > Thanks!!.
> > I have a little question,
> > This page explains AUTH = GSSAPI but I'm interested in AUTH =
NTLM.
> > I want to get single sign on with clients in Windows against a 
> > Windows Active Directory.
> > For NTLM should use another library like pam_krb5.so?
> > Sorry for so many questions and thanks again
>
> http://wiki2.dovecot.org/Authentication/Mechanisms/Winbind
> http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM
>
> > 2013/6/26 Stan Hoeppner <stan at hardwarefreak.com>
> >
> >> On 6/26/2013 1:17 PM, Maria Jose Ya?ez Dacosta wrote:
> >>
> >>> I want to use single sign on from Windows with Thunderbird or 
> >>> Outlook
> >> using
> >>> NTLM.
> >>
> >> http://wiki2.dovecot.org/Authentication/Kerberos
>
>

--
Maria Jos?