[Postfixbuch-users] OT: dovecot2 an AD via ntlm

[Soeren Mindorf]

Hallo zusammen,

ich verzweifel hier langsam, vielleicht könnt Ihr mir helfen.
Ich muß dovecot2 an eine AD ranknüppeln, aber irgendwie klappt das 
nicht.

OS: OpenSUSE 11.4 und auch OpenSUSE 12.2

Die Server sind erfolgreich in der AD.
wbinfo -u und wbinfo -g funktionieren.

hier dovecot -n:

-----%<-----
# 2.1.7: /etc/dovecot/dovecot.conf
# OS: Linux 3.4.6-2.10-desktop x86_64 openSUSE 12.2 (x86_64)
auth_debug = yes
auth_mechanisms = plain ntlm login
auth_use_winbind = yes
auth_verbose = yes
mail_debug = yes
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope 
encoded-character vacation subaddress comparator-i;ascii-numeric 
relational regex imap4flags copy include variables body enotify 
environment mailbox date ihave
namespace inbox {
   inbox = yes
   location =
   mailbox Drafts {
     special_use = \Drafts
   }
   mailbox Junk {
     special_use = \Junk
   }
   mailbox Sent {
     special_use = \Sent
   }
   mailbox "Sent Messages" {
     special_use = \Sent
   }
   mailbox Trash {
     special_use = \Trash
   }
   prefix =
}
passdb {
   driver = pam
}
plugin {
   sieve = ~/.dovecot.sieve
   sieve_dir = ~/sieve
}
ssl = no
userdb {
   driver = passwd
}
verbose_proctitle = yes
----->%-----

/etc/pam.d/dovecot:
-----%<-----
auth     sufficient   pam_krb5.so no_user_check validatesufficient   
pam_krb5.so no_user_check validate
account   sufficient   pam_permit.so
password include        common-password
session  include        common-session
----->%-----

Wenn ich jetzt von Roundcube versuche, auf meine Mails zuzugreifen, 
bekomme ich:

-----%<-----
Sep  6 11:27:00 pc11858-testvm1 dovecot: auth: Debug: Loading modules 
from directory: /usr/lib64/dovecot/modules/auth
Sep  6 11:27:00 pc11858-testvm1 dovecot: auth: Debug: Module loaded: 
/usr/lib64/dovecot/modules/auth/libdriver_mysql.so
Sep  6 11:27:00 pc11858-testvm1 dovecot: auth: Debug: Module loaded: 
/usr/lib64/dovecot/modules/auth/libdriver_pgsql.so
Sep  6 11:27:00 pc11858-testvm1 dovecot: auth: Debug: Module loaded: 
/usr/lib64/dovecot/modules/auth/libdriver_sqlite.so
Sep  6 11:27:00 pc11858-testvm1 dovecot: auth: Debug: auth client 
connected (pid=7661)
Sep  6 11:27:00 pc11858-testvm1 dovecot: auth: Debug: client in: 
AUTH#0111#011PLAIN#011service=imap#011secured#011session=DdvrFwXJCQAAAAAAAAAAAAAAAAAAAAAB#011lip=::1#011rip=::1#011lport=143#011rport=60425#011resp=<hidden>
Sep  6 11:27:00 pc11858-testvm1 dovecot: auth-worker(7665): Debug: 
Loading modules from directory: /usr/lib64/dovecot/modules/auth
Sep  6 11:27:00 pc11858-testvm1 dovecot: auth-worker(7665): Debug: 
Module loaded: /usr/lib64/dovecot/modules/auth/libdriver_mysql.so
Sep  6 11:27:00 pc11858-testvm1 dovecot: auth-worker(7665): Debug: 
Module loaded: /usr/lib64/dovecot/modules/auth/libdriver_pgsql.so
Sep  6 11:27:00 pc11858-testvm1 dovecot: auth-worker(7665): Debug: 
Module loaded: /usr/lib64/dovecot/modules/auth/libdriver_sqlite.so
Sep  6 11:27:00 pc11858-testvm1 dovecot: auth-worker(7665): Debug: 
pam(s.mindorf at euroimmun.de,::1): lookup service=dovecot
Sep  6 11:27:00 pc11858-testvm1 dovecot: auth-worker(7665): Debug: 
pam(s.mindorf at euroimmun.de,::1): #1/1 style=1 msg=Password:
Sep  6 11:27:00 pc11858-testvm1 dovecot: auth-worker(7665): 
pam(s.mindorf at euroimmun.de,::1): pam_authenticate() failed: Permission 
denied
Sep  6 11:27:02 pc11858-testvm1 dovecot: auth: Debug: client out: 
FAIL#0111#011user=s.mindorf at euroimmun.de
Sep  6 11:27:02 pc11858-testvm1 dovecot: imap-login: Aborted login 
(auth failed, 1 attempts in 2 secs): user=<s.mindorf at euroimmun.de>, 
method=PLAIN, rip=::1, lip=::1, secured, 
session=<DdvrFwXJCQAAAAAAAAAAAAAAAAAAAAAB>
----->%-----

Wo liegt mein Fehler?

Danke und Gruß
Sören

-- 
Sören Mindorf
Senior IT-Systemadministrator Linux
Birkbusch 14
23911 Ziethen