OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
relay_domains lookup ldap problem

From: Floyd Kan (floydfloydkan.com)
Date: Wed Jul 25 2007 - 21:33:54 CDT


Hi All,

I have 2 Questions for postfix LDAP lookup...

Question 1)
I have successfully use LDAP for lookup relay_recipient_maps =
ldap:/etc/postfix/relay_recipients_ldap.cf , but i can't control the
result, BTW , it also work for me.

server_host = myldapserver
server_port = 389
search_base = ou=mail,dc=group,o=myldap
scope = one
bind = no
query_filter =
(&(|(mailLocalAddress=%s)(mailAlternateAddress=%s))(accountstatus=active))
result_attribute = mailLocalAddress mailAlternateAddress
result_format = %u%d <mailto:%25u%25d>

I found that postfix will allow relay "mailLocalAddress" and
"mailAlternateAddress" even I config to below

result_attribute = mailLocalAddress mailAlternateAddress
or
result_attribute = mailLocalAddress
or
result_attribute = mailAlternateAddress

Question 2)
I have config relay_domains from my LDAP, because I don't want to manually
add domain each time.
I can query by postmap -q , please see below.... but I telnet 25 port to
test still show "Relay access denied"

#postmap -q rootabc.com ldap:/etc/postfix/relay_domains_ldap.cf
abc.com,abc.com,abc.com

This is my main.cf ......

relay_domains = ldap:/etc/postfix/relay_domains_ldap.cf

#cat relay_domains_ldap.cf

server_host = myldapserver
server_port = 389
search_base = ou=mail,dc=group,o=myldap
scope = one
bind = no
query_filter =
(&(|(maillocaladdress=%u%d)(mailAlternateAddress=%u%d))(accountstatus=acti
ve
<mailto:maillocaladdress=%25u%25d)(mailAlternateAddress=%25u%25d))(account
status=active> ))
result_attribute = maillocaladdress mailAlternateAddress
result_format = %d

anybody can solve this problems? Thank you so much!

Floyd