Re: Postfix, LDAP, Active Directory, NOT exchange

From: Tim Weippert (no email)
Date: Wed Feb 01 2006 - 05:40:31 EST

  • Next message: Justin Krejci: "Re: moving the queue"

    Hi,

    On Wed, Feb 01, 2006 at 10:01:39AM +0000, wrote:
    > We are trying to configure Postfix create mailboxes for each user that are users on our Windows Active Directory.
    >
    > So that when an email enters, if a user does not already have a mailbox, postfix (through LDAP) queries Active Directory to check if a user exists (using either "mail" attribute, or the sAMAccountName, or whatever you suggest) and then if user exists on AD, creates a mailbox on postfix.
    >
    > All mail would reside on the Postfix server, and would NOT be relayed to an exchange server.
    >
    > Adding another problem, our domain name: example.org does not match our active directory domain: schooldomain.local
    >
    > Which is why we were looking at perhaps stripping the first part of the user account i.e. email to: would be queried against the sAMAccountName: or the mail attribute
    >
    > We can successfully perform an LDAP bind against AD, but postfix reports "User unknown in local recipient table" (local_recipent_maps=aliases ldap/etc/ldap/ldapmaps.cf)
    >
    > ldapmaps.cf attached
    > --------------------------------------
    > server_host = server1.schooldomain.local
    > server2.schooldomain.local
    > server3.schooldomain.local
    > server_port = 389
    > search_base = OU=StaffUsers,,dc=schooldomain,dc=LOCAL
    > query_filter = (mail=%s)
    > bind_dn = CN=PostfixBind,OU=Users,DC=schooldomain,DC=LOCAL
    > bind_pw = postfixpassword
    > version = 3
    > result_attribute = (mail)
    > --------------------------------------

    If you want to search for you can't user mail=%s
    as query filter. For this you should user something like
    (mail=%u at schooldomain dot local).

    For the rest try to look into the VIRTUAL_README.

    HTH,

            tim

    -- 
    The whole world is a scab.  The point is to pick it constructively.
    		-- Peter Beard
    Tim Weippert <>
    http://www.topf-sicret.org/
    

  • Next message: Justin Krejci: "Re: moving the queue"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD