OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Maybe design error in lookup mechanism

From: Michaylov Michael (straitvtg.com.ua)
Date: Wed Mar 02 2005 - 09:55:22 CST


>Stop right there and go back to basics. Read books, online docs, list
>archives, ... until you understand restrictions a lot better. This
>is wrong on so many levels it is hard to know where to start.

first i used this paper
(http://www.postfix.org/RESTRICTION_CLASS_README.html)

second
my scheme works fine with hash where only username part is used

username1 remote
username2 remote

(in above link full mail address is used)
username1some.domain some_class
username2some.domain some_class

problem rises only if i use ldap

after deep debug i've noticed that no matter %u key was set in
query_filter the search procedure always uses all words in address
(multiple times) and this condition leads to collision