OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: postfix, cyrus-imapd and ldap limitation

From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Wed May 03 2006 - 12:36:40 CDT


On Wed, May 03, 2006 at 06:34:30AM -0700, Craig White wrote:

> I have a client with a somewhat long domain name... myhomelenders.net

This is not an unusually long domain name...

> I am using LDAP and the primary mail address is in an ldap attribute
> called 'mail' and that is working fine.
>
> I also use an ldap attribute called 'mailLocalAddress' for storing
> aliases and those have been working fine until now.
>
> using raw ldapsearch, it works fine when I...
>
> ldapsearch -x '(mailLocalAddress=usernamemyhomelenders.net)'
>
> but apparently the chop comes after 23 characters because when I send
> mail to the usernamemyhomelenders.net...
>
> I get an email rejection for usernamemyhomelenders.n
> Reporting-MTA: dns; srv1.myhomelenders.net
> X-Postfix-Queue-ID: 4C7F8F8CD0
> X-Postfix-Sender: rfc822; rootmyhomelenders.net
> Arrival-Date: Thu, 27 Apr 2006 18:25:02 -0700 (MST)
>
> Final-Recipient: rfc822; usernamemyhomelenders.n
> Original-Recipient: rfc822; usernamemyhomelenders.net
> Action: failed
> Status: 5.0.0
> Diagnostic-Code: X-Postfix; [myhomelenders.n]: Name or service not known

Find out which of your rewriting tables returned the truncated answer.
Postfix does no such truncation.

> and I get the email in 'user.et' (the balance of the name that remained
> from above) which was delivered by cyrus.

This means that the address got rewritten to:

        usernamemyhomelenders.n,et
or
        usernamemyhomelenders.n et

or something similar due to data entry errors in your LDAP database.

> So it seems as though the problem comes from postfix.

That is the wrong conclusion.

> # grep filter /etc/postfix/main.cf
> virtualAliases_query_filter = (|(mail=%s)(mailLocalAddress=%s))
>

Do debug LDAP lookup issues, use

        postmap -q localdomain ldap:mapname | cat -etv

This will expose any unexpected content in the table result.

--
        Viktor.

P.S. Morgan Stanley is looking for a New York City based, Senior Unix
     system/email administrator to architect and sustain the Unix email
     environment. If you are interested, please drop me a note.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.