OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Victor.Duchovni_at_morganstanley.com
Date: Thu Jan 02 2003 - 14:32:50 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Thu, 2 Jan 2003, Derek Simkowiak wrote:

    > The external LDAP database that holds my users is also being used
    > for PAM (Pluggable Authentication Modules), and thus, each email recipient
    > (aka "local user") does have a system account.
    >
    > But here's a wrench to throw into the gears: I want to support
    > multiple domains, and I can't have usernames conflict across domains.
    > Thus, I need to support both
    >
    > dereksfirst.com
    > derekssecond.com
    >
    > ...and have those refer to two separate "dereks" accounts on the
    > system. The solution seems to be using account usernames like
    >

    What are the UNIX user names (LDAP "uid"s?) that correspond to the two
    email addresses?

    Show a sample LDAP entry in ldif format with the following attributes:

            dn:
            uid:
            mail: (or whatever field stores the official address of the user)

    The email addresses can be used as keys for a virtual_alias_maps table
    with the "uid" value mapping to a unique UNIX account name.

    Unix account names MUST not contain "" characters. If you want the login
    name to be the email address, and want to use LDAP auth, then don't use
    PAM, dont make these into "local" users, and use virtual delivery.

    Are these UNIX users, or are these IMAP/POP only users. Make up your mind.
    This is not a Postfix issue per-se: what services are you providing to the
    users, email-only accounts or system login accounts.

    --
    	Viktor.