[matteo@server-centos ~]$ ldapsearch -x -D 'cn=vmail,dc=fracassetti,dc=lan' -w '<password>' -b 'o=domains,dc=fracassetti,dc=lan' "(&(objectclass=mailUser)(accountStatus=active)(enabledService=domainadmin)(domainGlobalAdmin=yes))"
# extended LDIF
#
# LDAPv3
# base <o=domains,dc=fracassetti,dc=lan> with scope subtree
# filter: (&(objectclass=mailUser)(accountStatus=active)(enabledService=domainadmin)(domainGlobalAdmin=yes))
# requesting: ALL
## search result
search: 2
result: 0 Success# numResponses: 1
[matteo@server-centos ~]$ ldapsearch -x -D 'cn=vmail,dc=fracassetti,dc=lan' -w '<password>' -b 'dc=fracassetti,dc=lan' "(&(objectclass=mailUser)(accountStatus=active)(enabledService=domainadmin)(domainGlobalAdmin=yes))"
# extended LDIF
#
# LDAPv3
# base <dc=fracassetti,dc=lan> with scope subtree
# filter: (&(objectclass=mailUser)(accountStatus=active)(enabledService=domainadmin)(domainGlobalAdmin=yes))
# requesting: ALL
## search result
search: 2
result: 0 Success# numResponses: 1
It confirms that user "postmaster@fracassetti.it" can't login in awstats due to is out of the search scope defined by AuthLDAPUrl, right?
[matteo@server-centos ~]$ ldapsearch -x -D 'cn=vmail,dc=fracassetti,dc=lan' -w '<password>' -b 'dc=fracassetti,dc=lan' "(&(accountStatus=active)(|(enabledService=awstats)(enabledService=domainadmin)(domainGlobalAdmin=yes))(|(objectclass=mailUser)(objectclass=mailAdmin)))"
# extended LDIF
#
# LDAPv3
# base <dc=fracassetti,dc=lan> with scope subtree
# filter: (&(accountStatus=active)(|(enabledService=awstats)(enabledService=domainadmin)(domainGlobalAdmin=yes))(|(objectclass=mailUser)(objectclass=mailAdmin)))
# requesting: ALL
## postmaster@fracassetti.it, domainAdmins, fracassetti.lan
dn: mail=postmaster@fracassetti.it,o=domainAdmins,dc=fracassetti,dc=lan
objectClass: mailAdmin
objectClass: shadowAccount
objectClass: top
uid: postmaster
givenName: postmaster
mail: postmaster@fracassetti.it
domainGlobalAdmin: yes
enabledService: awstats
preferredLanguage: en_US
cn: postmaster
accountStatus: active
userPassword:: <enc_password># search result
search: 2
result: 0 Success# numResponses: 2
# numEntries: 1