OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
ldap suggestions

From: Craig White (craigwhiteazapple.com)
Date: Tue Oct 16 2007 - 21:19:24 CDT


I am only modestly skilled at ldap and there is something that isn't
clear to me.

for qualification (RHEL v5)
# rpm -q postfix
postfix-2.3.3-2

main.cf includes...
virtualAliases_search_base = ou=People,dc=example,dc=com
virtualAliases_query_filter = (|(uid=%u)(mail=%s)(mailLocalAddress=%s))
virtualAliases_result_attribute = mail
virtualAliases_search_scope = one

and this works well if e-mail addresses are either in mail or
mailLocalAddress

I am getting tired of maintaining group distribution lists
in /etc/aliases and would like to maintain them in LDAP but if I create
ou=Mail Groups,dc=example,dc=com then I am SOL because of my
search_base. I also want to keep 'one' search instead of 'sub' search
because there are many address books (Users each have a private address
book under their DN).

I am presuming that only one search base is allowed. I have read
http://www.postfix.org/LDAP_README.html#example_group
but that discusses 'ldapgroup' ou which of course doesn't exist in
openldap-2.3.x but groupOfUniqueNames does exist and I suppose that
would work but must I keep it inside of ou=people,dc=example,dc=com
because that is the only search base that is going to work for me?

Suggestions?

Craig