OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: LDAP Email Recipients Query Script - Feedback Appreciated

From: Patrick Ben Koetter (pstate-of-mind.de)
Date: Sun Jun 14 2009 - 06:55:13 CDT


* Stefan Förster <cite+postfix-usersincertum.net>:
> * James Robertson <jmesrobertson.com> wrote:
> > I decided to write a bash script for extracting recipients from Windows
> > Active Directory for a Postfix box in front of Exchange.
> [...]
> > $LDAPSEARCH -x -h $LDAPHOST -D $LDAPUSER -w $LDAPPASS -b $LDAPBASE \
> > '(proxyAddresses=*)' 2>$ERRORLOG | $GREP -f $RELAYDOMAINS | $GREP -Fi
>
> While this will almost certainly work for smaller networks, you are in
> serious trouble if you have more than 1000 recipients. To work around
> this issue from the Linux side, consider using "-E pr=100/(no)prompt".
> As for the Exchange side, I really don't know, but I know for sure
> that there is a LDAP protocol settings dialogue in the Exchange server
> administration GUI. Perhaps someone else can shed some light on this
> one.

IIRC, the user who connects to the Exchange's Active Directory must be
permitted to exceed the default query size limit of 1.000. And yes, I remember
that to be a administration GUI switch, too.

prick

--
All technical answers asked privately will be automatically answered on
the list and archived for public access unless privacy is explicitely
required and justified.

saslfinger (debugging SMTP AUTH):
<http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>