Re: Postfix, LDAP, Active Directory, NOT exchange

From: Gellér Sándor (no email)
Date: Wed Feb 01 2006 - 05:33:01 EST

  • Next message: Gabriel Craciun: "moving the queue"

     wrote:
    > We are trying to configure Postfix create mailboxes for each user that are users on our Windows Active Directory.
    >
    > So that when an email enters, if a user does not already have a mailbox, postfix (through LDAP) queries Active Directory to check if a user exists (using either "mail" attribute, or the sAMAccountName, or whatever you suggest) and then if user exists on AD, creates a mailbox on postfix.
    >
    > All mail would reside on the Postfix server, and would NOT be relayed to an exchange server.
    >
    > Adding another problem, our domain name: example.org does not match our active directory domain: schooldomain.local
    >
    > Which is why we were looking at perhaps stripping the first part of the user account i.e. email to: would be queried against the sAMAccountName: or the mail attribute
    >
    > We can successfully perform an LDAP bind against AD, but postfix reports "User unknown in local recipient table" (local_recipent_maps=aliases ldap/etc/ldap/ldapmaps.cf)
    >
    > ldapmaps.cf attached
    > --------------------------------------
    > server_host = server1.schooldomain.local
    > server2.schooldomain.local
    > server3.schooldomain.local
    > server_port = 389
    > search_base = OU=StaffUsers,,dc=schooldomain,dc=LOCAL
    > query_filter = (mail=%s)
    > bind_dn = CN=PostfixBind,OU=Users,DC=schooldomain,DC=LOCAL
    > bind_pw = postfixpassword
    > version = 3
    > result_attribute = (mail)
    > --------------------------------------
    >
    > Any help appreciated
    >
    > James

    I suggest to reading VIRTUAL_README, maybe virtual_mailbox_domains is
    what you are looking for. I suggest to create a local database instead
    of querying the AD server directly. Use ldapsearch to query the AD,
    create a suitable virtual_mailbox_map from the output, and use a modern
    POP3/IMAP server which can handle virtual users and can authenticate
    from the AD server.

    -- 
    Sandor Geller
    

  • Next message: Gabriel Craciun: "moving the queue"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD