OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: postfix with imail

From: sub (subqinherent.org)
Date: Mon May 03 2004 - 11:26:18 CDT


On Fri, 23 Apr 2004 12:06:40 -0700, you wrote:

>
>The LDAP will not hold any Imail aliases, including mailing list aliases,
>so you are limited in what you can do.
>
>If you goal is just to use the SMTP auth for outbound user mail, you can
>make it work. But then you still pound on the Imail server every time an
>LDAP lookup is made.
>
>The happy medium, as I recall when I researched that, is to install a
>caching LDAP server on the Postfix box. That way lookups to the Imail
>LDAP are limited.
>
>On the other hand, if you also want to filter inbound email based of the
>existence of the recipient, you need to do a little more work.
>
>For every inbound alias, you would need to make a matching address so that
>they would be in the LDAP database.
>
>This ends up being a problem if hosted domains have users that can add
>aliases.
>
>
>Also, some base work for exporting passwords has been done:
>
>http://www.smartbusiness.net/imail/
>
>That could be used as a method of building a password file.
>

I already have a tool that can export username passwords.

I suppose the quickest method would be to export a username password
list that would need SMTP auth and then put it on the postfix server.
I suppose I just need to research how to implement SMTP auth on the
postfix server if I can import a flat text file of username passwords.

>
>Another long term solution would be to change your Imail to a database
>lookup. Then you could create a database that both Imail and Postfix
>reference. Because both Imail and Postfix support custom database
>interaction, this is a very good option. The problem is setting up the
>Imail side of things.
>
>

This is the long term solution in mind.

>You might also search the archives of the Postfix list for some Exchange
>and/or Active Directory solutions that have been done for this. While
>Imail is not Exchange, and LDAP is not the AD, many of the issues will be
>similar.
>
>--Eric
>