From: Artur Mücke (muecketyntec.biz)
Date: Wed Jan 16 2008 - 13:34:08 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Thx for your answer.
> Can the "postfix" user read the client certificate and key files you
> have told it to use? Run "postmap -q" as "postfix".
>

I tried that already and it works. By default the postfix user doesnt
have a shell in debian but I setup the bash for it and tried it that way:

su postfix

postmap -q "domain.de" ldap:/etc/postfix/domains.cf

and it worked perfectly.
> LDAP server connections are made after Postfix drops privs.
>
> Is there a usable source of random numbers for the LDAP TLS client?
> (tls_random_file attribute in the ldap table).
>
>

Yes, there is one. I had the option "tls_random_file = /dev/urandom" in
my configuration but it didnt change anything so I removed it again.

Cheers,

Artur

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]