OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: LDAP smtpd_sender_login_maps domain owner

From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Tue Mar 04 2008 - 16:54:33 CST


On Tue, Mar 04, 2008 at 12:46:40PM -0800, Gary C. New wrote:

> While we are able to configure
> reject_sender_login_mismatch and ldap based
> smtpd_sender_login_maps on a basic per userdomain
> level, we have a number of users who have multiple
> sender addresses and domains that send email through a
> primary SMTP Auth'ed sender address.

Put all the user's email addresses in a single LDAP record for the user,
and return the login name as the result value.

        mail: joe.userexample.net
        mailalternateaddress: joe.userexample.net
        mailalternateaddress: user1example.com
        mailalternateaddress: user2example.org
        mailalternateaddress: user3example.edu
        uid: joeuser

The LDAP sender -> login query will map mailalternateaddress -> uid.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.