From: Tony Earnshaw (tonyebilly.demon.nl)
Date: Sat Sep 03 2005 - 11:37:22 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

lør, 03.09.2005 kl. 05.04 skrev Victor Duchovni:

[...]

> Use of nss_ldap, nss_nis, ... on mail servers performing local(8)
> delivery is inadvisable, avoid at all costs (dump the user list) to
> /etc/passwd or "db" periodically, ... If nss_ldap, ... must be used,
> provide enough replica servers and sufficiently robust networking to
> make lookup failure extremely improbable.

Yes. After more than a year running Postfix 2.1.5 on a given RHAS3 site
and having 1150+ users really hammering OpenLDAP 2.2.17 both with
ns_ldap and LDAP searches, no problems whatsoever, present uptime 90+
days (downtimes due to RHAS3 kernel updates).

All Postfix local(8) delivery is local. And no use whatsoever is made of
nss for LDAP.

This is to OP:

> Consider "-o soft_bounce=yes"
> in the local delivery agent if other failures can be reasonably
> ruled out, and monitoring is added to move messages that repeatedly
> into the incoming queue of a second instance without soft_bounce...
> or other gross hacks...

Best,

--Tonni

--
mail: tonyebilly.demon.nl
http://www.billy.demon.nl

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]