OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: virtual_maibox_maps, ldap lookups, and multiple attributes

From: Victor Duchovni (Victor.Duchovnimorganstanley.com)
Date: Sun Feb 01 2009 - 22:58:48 CST

On Sun, Feb 01, 2009 at 11:15:00PM -0500, ben thielsen wrote:

> dn: uid=user,ou=people,ou=users,ou=accounts,dc=example,dc=com
> mailLocalAddress: userfoo.com - delivered to foo.com/user/Maildir/
> mailLocalAddress: userbar.net - delivered to bar.net/user/Maildir/
> mailLocalAddress: ufoobar.org - delivered to foobar.org/u/Maildir/
>
> this works well for entries that contain only a single mailLocalAddress
> attribute, but not so well when multiple attributes exist. using %U and %D
> in the result_format value appeared to be a step in the right direction,
> but still returns more than one result, which suggested that there might be
> a more sensible approach. i also experimented with expansion_limit and
> size_limit, neither of which appeared to change the outcome (aside from
> introducing failures).
>
> at first glance, it seems to me that being able to use % expansions in the
> result_attribute might get me what i'm after (e.g. result_attribute =
> mailLocalAddress=%s or such), the idea being that only attributes that
> matched a particular value would be returned. since this isn't possible
> though, according to the ldap_table man page, i'm wondering how else i
> might achieve my goal, without requiring independent entries in ldap for
> each mailbox.

Pick a single-valued attribute as the result_attribute.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.