OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Wietse Venema (wietseporcupine.org)
Date: Tue Mar 06 2001 - 08:32:34 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Robert Kiessling:
    > The implementation of dictionaries seems to allow only success and
    > failure as result, not "temporary failure".

    This is inaccurate. In several places the maps return a temporary
    error condition.

    > As a result, when smtpd checks users in the virtual_maps, virtual_maps
    > refers to some external source like LDAP and this lookup fails
    > temporarily, e.g. LDAP server not available for a short time, smtpd
    > fails with a "User unknown" instead of something like "temporarily not
    > available, try later".

    The LDAP map returns DICT_ERR_RETRY in many places. The error is
    in the smtpd code that is oblivious of DICT_ERR_RETRY results.

    The find the places that need to be fixed:

        % grep 'maps_find\(virtual_maps' smtpd_check.c

    I am pretty much swamped with other work, and suggest that you set
    up a backup LDAP server, which I would recommend regardless.

            Wietse