OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Fwd: ldap users & aliases config]

From: Victor Duchovni (Victor.Duchovnimorganstanley.com)
Date: Thu May 08 2008 - 11:49:31 CDT


On Thu, May 08, 2008 at 05:41:28PM +0100, Wojtek Bogusz wrote:

> >You will rewrite "your-last-namegmail.com" to "your-accountgmail.com"
> >even though the "gmail.com" address has nothing to do with you or your
> >account.
>
> does it mean that there is no other way than have all the accounts and
> aliases repeating domain part ('frontlinedefenders.org')?

No, you just need to make your rewriting rules apply *ONLY* to address in
your domain. Failure to do that will yield unacceptable erratic results.

> >>$ ldapsearch -b 'ou=EmailAliases,dc=frontline' -x 'sn=admin' cn

Query filter in this case is?

> how come. in /etc/postfix/ldap-aliases.cf i have:
> server_host = localhost
> search_base = ou=EmailAliases,dc=frontline
> query_filter = (&(objectClass=inetOrgPerson)(sn=%u))
>
> this is exactly what i am ldapsearch'ing above i think.

Query filter in this case is? Are the two the same? What is your
result_attribute?

> >"postmap -vq" and see what query Postfix sends, try that query for
> >yourself with "ldapsearch" if you like. Make sure your result_attribute
> >is valid.
>
> ok. i guess those are the lines from 'postmap -vq'
>
> postmap: dict_ldap_lookup: /etc/postfix/ldap-aliases.cf: Searching with
> filter (&(objectClass=inetOrgPerson)(sn=admin))
> postmap: dict_ldap_get_values[1]: Search found 2 match(es)
> postmap: dict_ldap_get_values[1]: Leaving dict_ldap_get_values
> postmap: dict_ldap_lookup: Search returned nothing
>
> so to my untrained eye the search string
> '(&(objectClass=inetOrgPerson)(sn=admin))' is ok. and than there is the
> part i do not understand: found 2 matches = returned nothing.

No non-empty values of the requested result_attribute.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.