Fedora Linux Support Community & Resources Center

Go Back   FedoraForum.org > Fedora 17/18 > Servers & Networking
FedoraForum Search

Forgot Password? Join Us!

Servers & Networking Discuss any Fedora server problems and Networking issues such as dhcp, IP numbers, wlan, modems, etc.

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 20th October 2005, 02:02 PM
Balrog Offline
Registered User
 
Join Date: Oct 2005
Age: 46
Posts: 9
Thumbs down HELP Postfix + LDAP on Fedora Core 3

Hi ,

I’m trying to activate a Postfix Application with LDAP application on server Fedora Core 3.

All Applications on server works good , except Postfix witch don’t recognize LDAP users like local user

If i write this Query:

[root@test ~]# postmap -q passwduser unix:passwd.byname
passwduser:x:502:500::/home/passwduser:/bin/bash
[root@test ~]# postmap -q ldapuser unix:passwd.byname
ldapuser:x:9999:10000:User LDAP:/home/ldapuser:/bin/bash

all users (passwd and LDAP) is recognized.

An e- mail sent to user subscribed on passwd (mail passwduser) is ok.

An e-mail sent to user subscribed on ldap (mail ldapuser) is rejected with (“Uknown User : "ldapuser").

I've read the HOWTO:

http://www.postfix.org/LDAP_README.html
http://www.postfix.org/LOCAL_RECIPIENT_README.html

and i've try the example on

http://directory.fedora.redhat.com/wiki/Howto:Postfix

but nothing work.

How can I do ?

I’m be able to install Sendmail , RPM and for default parameters is good.

The question is : I’m not be able to set RPM Fedora 3 or RPM fedora 3 is wrong?

If I use a default parameters on a Sendmail Application with RPM everything is OK , and any SSH , FTP , SQUIRRELMAIL authentication.

And Postfix ? Doesn’t work.

Why ?

I don’t Know , so I need a Help.

Help Me!!!!

Many Thanks to everyone who reply me.
Reply With Quote
  #2  
Old 20th October 2005, 02:29 PM
amessina's Avatar
amessina Offline
Registered User
 
Join Date: Apr 2005
Location: Chicago, IL, US
Age: 35
Posts: 100
Arrow

i have a setup with ldap which works fine:

you'll need to define
Code:
local_recipient_maps = ldap:/etc/postfix/ldap_local.cf $alias_maps
then in ldap_local.cf:
Code:
server_host = ldap.yourdomain.com
server_port = 389
start_tls = yes
tls_require_cert = yes
tls_ca_cert_file = /etc/pki/tls/certs/CAcertInc-crt.pem
bind = no
version = 3
search_base = ou=People,dc=yourdomain,dc=com
scope = one
timeout = 5
query_filter = uid=%u
result_attribute = mail
if you need further assistance, i can help you in the support forum of my website listed below.
__________________
Visit my website: http://messinet.com
Visit my online gallery: http://messinet.com/modules.php?name...op=visit&lid=3

Registered Linux User #389089
Get counted!: http://counter.li.org
Reply With Quote
  #3  
Old 20th October 2005, 02:58 PM
Balrog Offline
Registered User
 
Join Date: Oct 2005
Age: 46
Posts: 9
Thumbs down

I have already tried with the conf:

local_recipient_maps = ldap:/etc/postfix/ldapusers.cf $alias_maps

and ldapusers.cf

bind = yes
bind_dn = cn=Manager,dc=test,dc=testdomain,dc=it
bind_pw = secret
version = 3
timeout = 20
size_limit = 1
expansion_limit = 0

start_tls = no

server_host = ldap://127.0.0.1
server_port = 389
search_base = ou=Utenti,dc=test,dc=testdomain,dc=it
scope = sub
query_filter = uid=%u
result_attribute = mail

but the result is the same (unknown user: "ldapuser")

[root@test postfix]# postmap -q ldapuser ldap:/etc/postfix/ldapusers.cf
ldapuser@test.testdomain.it
Reply With Quote
  #4  
Old 20th October 2005, 03:27 PM
amessina's Avatar
amessina Offline
Registered User
 
Join Date: Apr 2005
Location: Chicago, IL, US
Age: 35
Posts: 100
can you try doing it with "bind = no" and comment out "bind_dn" and "bind_pw"?

also, do your ldap logs show any useful information?

also does "ldapuser" actually exist in your ldap database?
__________________
Visit my website: http://messinet.com
Visit my online gallery: http://messinet.com/modules.php?name...op=visit&lid=3

Registered Linux User #389089
Get counted!: http://counter.li.org

Last edited by amessina; 20th October 2005 at 03:31 PM.
Reply With Quote
  #5  
Old 20th October 2005, 03:43 PM
Balrog Offline
Registered User
 
Join Date: Oct 2005
Age: 46
Posts: 9
my ACL need bind so it can read LDAP info.

from slapd.conf:

access to attr=userPassword
by self write
by anonymous auth
by * none

access to *
by self write
by users none
by * none

access to *
by self read
by users none
by * none

suffix "dc=test,dc=testdomain,dc=it"
rootdn "cn=Manager,dc=test,dc=testdomain,dc=it"
rootpw secret

The query with postmap work, but postfix don't recognize the LDAP user.

Oct 20 15:45:33 test slapd[8873]: conn=678 fd=17 ACCEPT from IP=127.0.0.1:57054 (IP=0.0.0.0:389)
Oct 20 15:45:33 test slapd[8873]: conn=678 op=0 BIND dn="cn=Manager,dc=test,dc=testdomain,dc=it" method=128
Oct 20 15:45:33 test slapd[8873]: conn=678 op=0 BIND dn="cn=Manager,dc=test,dc=testdomain,dc=it" mech=SIMPLE ssf=0
Oct 20 15:45:33 test slapd[8873]: conn=678 op=0 RESULT tag=97 err=0 text=
Oct 20 15:45:33 test slapd[8873]: conn=678 op=1 SRCH base="ou=Utenti,dc=test,dc=testdomain,dc=it" scope=2 deref=0 filter="(uid=ldapuser)"
Oct 20 15:45:33 test slapd[8873]: conn=678 op=1 SRCH attr=mail
Oct 20 15:45:33 test slapd[8873]: conn=678 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Oct 20 15:45:33 test slapd[8873]: conn=678 op=2 UNBIND
Oct 20 15:45:33 test slapd[8873]: conn=678 fd=17 closed

Last edited by Balrog; 20th October 2005 at 03:49 PM.
Reply With Quote
  #6  
Old 20th October 2005, 03:51 PM
amessina's Avatar
amessina Offline
Registered User
 
Join Date: Apr 2005
Location: Chicago, IL, US
Age: 35
Posts: 100
your ldapsearch is showing things working properly. but it shows that using the filter "(uid=ldapuser)" -- doesn't exist.

can you do at the command rpompt:

ldapsearch -x "(uid=ldapuser)"

and post the results?
__________________
Visit my website: http://messinet.com
Visit my online gallery: http://messinet.com/modules.php?name...op=visit&lid=3

Registered Linux User #389089
Get counted!: http://counter.li.org
Reply With Quote
  #7  
Old 20th October 2005, 04:04 PM
Balrog Offline
Registered User
 
Join Date: Oct 2005
Age: 46
Posts: 9
[root@test log]# ldapsearch -x "(uid=ldapuser)"
# extended LDIF
#
# LDAPv3
# base <> with scope sub
# filter: (uid=ldapuser)
# requesting: ALL
#

# ldapuser, Utenti, test.testdomain.it
dn: uid=ldapuser,ou=Utenti,dc=test,dc=testdomain,dc=it
objectClass: top
objectClass: person
objectClass: posixAccount
objectClass: shadowAccount
objectClass: inetOrgPerson
objectClass: PostfixMTAVirtual
objectClass: IDWebSite
uid: ldapuser
shadowMin: -1
shadowMax: 999999
shadowWarning: 7
shadowInactive: -1
shadowExpire: -1
shadowFlag: 0
cn: User LDAP
givenName: LDAP
sn: User
street: via prova
st: Ciita
natoil: 1967-17-04
sociodal: 2005-07-20
loginShell: /bin/bash
uidNumber: 9999
gidNumber: 10000
userPassword:: b2xpXHYDKSD==
homeDirectory: /home/ldapuser
mailSpoolDirectory: /home/ldapuser/mail
mailquota: 5120000
idforum: 486
ida: 0
idb: 0
idc: 0
idd: 0
mailacceptinggeneralid: ldapuser@virtual.it
maildrop: ldapuser
mail: ldapuser@test.testdomain.it

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1
[root@test log]#
Reply With Quote
  #8  
Old 20th October 2005, 04:14 PM
amessina's Avatar
amessina Offline
Registered User
 
Join Date: Apr 2005
Location: Chicago, IL, US
Age: 35
Posts: 100
this is tricky. according to your configs, things should be working. has postfix been restarted after creating or making changes to ldapusers.cf?

the only place i can think to go from here is to post the output from typing "postconf" at the command line. that will tell you the values that postfix is actually using.
__________________
Visit my website: http://messinet.com
Visit my online gallery: http://messinet.com/modules.php?name...op=visit&lid=3

Registered Linux User #389089
Get counted!: http://counter.li.org

Last edited by amessina; 21st October 2005 at 11:48 AM.
Reply With Quote
  #9  
Old 20th October 2005, 04:28 PM
Balrog Offline
Registered User
 
Join Date: Oct 2005
Age: 46
Posts: 9
This i the postconf:

[root@test postfix]# postconf
2bounce_notice_recipient = postmaster
access_map_reject_code = 554
address_verify_default_transport = $default_transport
address_verify_local_transport = $local_transport
address_verify_map =
address_verify_negative_cache = yes
address_verify_negative_expire_time = 3d
address_verify_negative_refresh_time = 3h
address_verify_poll_count = 3
address_verify_poll_delay = 3s
address_verify_positive_expire_time = 31d
address_verify_positive_refresh_time = 7d
address_verify_relay_transport = $relay_transport
address_verify_relayhost = $relayhost
address_verify_sender = postmaster
address_verify_service_name = verify
address_verify_transport_maps = $transport_maps
address_verify_virtual_transport = $virtual_transport
alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
allow_mail_to_commands = alias, forward
allow_mail_to_files = alias, forward
allow_min_user = no
allow_percent_hack = yes
allow_untrusted_routing = no
alternate_config_directories =
always_bcc =
append_at_myorigin = yes
append_dot_mydomain = yes
application_event_drain_time = 100s
backwards_bounce_logfile_compatibility = yes
berkeley_db_create_buffer_size = 16777216
berkeley_db_read_buffer_size = 131072
best_mx_transport =
biff = yes
body_checks =
body_checks_size_limit = 51200
bounce_notice_recipient = postmaster
bounce_queue_lifetime = 5d
bounce_service_name = bounce
bounce_size_limit = 50000
broken_sasl_auth_clients = no
canonical_maps =
cleanup_service_name = cleanup
command_directory = /usr/sbin
command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWX YZ
command_time_limit = 1000s
config_directory = /etc/postfix
content_filter =
daemon_directory = /usr/libexec/postfix
daemon_timeout = 18000s
debug_peer_level = 2
debug_peer_list =
default_database_type = hash
default_delivery_slot_cost = 5
default_delivery_slot_discount = 50
default_delivery_slot_loan = 3
default_destination_concurrency_limit = 20
default_destination_recipient_limit = 50
default_extra_recipient_limit = 1000
default_minimum_delivery_slots = 3
default_privs = nobody
default_process_limit = 100
default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}
default_recipient_limit = 10000
default_transport = smtp
default_verp_delimiters = +=
defer_code = 450
defer_service_name = defer
defer_transports =
delay_notice_recipient = postmaster
delay_warning_time = 0h
deliver_lock_attempts = 20
deliver_lock_delay = 1s
disable_dns_lookups = no
disable_mime_input_processing = no
disable_mime_output_conversion = no
disable_verp_bounces = no
disable_vrfy_command = no
dont_remove = 0
double_bounce_sender = double-bounce
duplicate_filter_limit = 1000
empty_address_recipient = MAILER-DAEMON
enable_errors_to = no
enable_original_recipient = yes
error_notice_recipient = postmaster
error_service_name = error
expand_owner_alias = no
export_environment = TZ MAIL_CONFIG
fallback_relay =
fallback_transport =
fast_flush_domains = $relay_domains
fast_flush_purge_time = 7d
Reply With Quote
  #10  
Old 20th October 2005, 04:29 PM
Balrog Offline
Registered User
 
Join Date: Oct 2005
Age: 46
Posts: 9
fast_flush_refresh_time = 12h
fault_injection_code = 0
flush_service_name = flush
fork_attempts = 5
fork_delay = 1s
forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWX YZ
forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward
hash_queue_depth = 1
hash_queue_names = incoming, active, deferred, bounce, defer, flush, hold, trace
header_address_token_limit = 10240
header_checks =
header_size_limit = 102400
helpful_warnings = yes
home_mailbox =
hopcount_limit = 50
html_directory = no
ignore_mx_lookup_error = no
import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY
in_flow_delay = 1s
inet_interfaces = all
initial_destination_concurrency = 5
invalid_hostname_reject_code = 501
ipc_idle = 100s
ipc_timeout = 3600s
ipc_ttl = 1000s
line_length_limit = 2048
lmtp_bind_address =
lmtp_bind_address6 =
lmtp_cache_connection = yes
lmtp_connect_timeout = 0s
lmtp_data_done_timeout = 600s
lmtp_data_init_timeout = 120s
lmtp_data_xfer_timeout = 180s
lmtp_destination_concurrency_limit = $default_destination_concurrency_limit
lmtp_destination_recipient_limit = $default_destination_recipient_limit
lmtp_lhlo_timeout = 300s
lmtp_mail_timeout = 300s
lmtp_quit_timeout = 300s
lmtp_rcpt_timeout = 300s
lmtp_rset_timeout = 120s
lmtp_sasl_auth_enable = no
lmtp_sasl_password_maps =
lmtp_sasl_security_options = noplaintext, noanonymous
lmtp_send_xforward_command = no
lmtp_skip_quit_response = no
lmtp_tcp_port = 24
lmtp_xforward_timeout = 300s
local_command_shell =
local_destination_concurrency_limit = 2
local_destination_recipient_limit = 1
local_recipient_maps = ldap:/etc/postfix/ldapusers.cf $alias_maps
local_transport = local:$myhostname
luser_relay =
mail_name = Postfix
mail_owner = postfix
mail_release_date = 20040915
Reply With Quote
  #11  
Old 20th October 2005, 04:29 PM
Balrog Offline
Registered User
 
Join Date: Oct 2005
Age: 46
Posts: 9
mail_spool_directory = /var/mail
mail_version = 2.1.5
mailbox_command =
mailbox_command_maps =
mailbox_delivery_lock = fcntl, dotlock
mailbox_size_limit = 51200000
mailbox_transport =
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maps_rbl_domains =
maps_rbl_reject_code = 554
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions =
max_idle = 100s
max_use = 100
maximal_backoff_time = 4000s
maximal_queue_lifetime = 5d
message_size_limit = 10240000
mime_boundary_length_limit = 2048
mime_header_checks = $header_checks
mime_nesting_limit = 100
minimal_backoff_time = 1000s
multi_recipient_bounce_reject_code = 550
mydestination = $myhostname, localhost.$mydomain, localhost
mydomain = testdomain.it
myhostname = test.testdomain.it
mynetworks = 127.0.0.0/8 62.220.92.0/27 192.168.0.0/24 [fe80::213:8fff:fe03:b14b]/64 [::1]/128 [fe80::2a0:a2ff:fe00:f372]/64
mynetworks_style = subnet
myorigin = $myhostname
nested_header_checks = $header_checks
newaliases_path = /usr/bin/newaliases.postfix
non_fqdn_reject_code = 504
notify_classes = resource, software
owner_request_special = yes
parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,perm it_mx_backup_networks,qmqpd_authorized_clients,rel ay_domains,smtpd_access_maps
permit_mx_backup_networks =
pickup_service_name = pickup
prepend_delivered_header = command, file, forward
process_id_directory = pid
propagate_unmatched_extensions = canonical, virtual
proxy_interfaces =
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks
qmgr_clog_warn_time = 300s
qmgr_fudge_factor = 100
qmgr_message_active_limit = 20000
qmgr_message_recipient_limit = 20000
qmgr_message_recipient_minimum = 10
qmqpd_authorized_clients =
qmqpd_error_delay = 1s
qmqpd_timeout = 300s
queue_directory = /var/spool/postfix
queue_file_attribute_count_limit = 100
queue_minfree = 0
queue_run_delay = 1000s
queue_service_name = qmgr
rbl_reply_maps =
readme_directory = /usr/share/doc/postfix-2.1.5/README_FILES
receive_override_options =
recipient_bcc_maps =
recipient_canonical_maps =
recipient_delimiter =
reject_code = 554
relay_clientcerts =
relay_destination_concurrency_limit = $default_destination_concurrency_limit
relay_destination_recipient_limit = $default_destination_recipient_limit
relay_domains = $mydestination
relay_domains_reject_code = 554
relay_recipient_maps =
relay_transport = relay
relayhost =
relocated_maps =
require_home_directory = no
resolve_dequoted_address = yes
resolve_null_domain = no
rewrite_service_name = rewrite
sample_directory = /usr/share/doc/postfix-2.1.5/samples
sender_based_routing = no
sender_bcc_maps =
sender_canonical_maps =
sendmail_path = /usr/sbin/sendmail.postfix
service_throttle_time = 60s
setgid_group = postdrop
show_user_unknown_table_name = yes
showq_service_name = showq
smtp_always_send_ehlo = yes
smtp_bind_address =
smtp_bind_address6 =
smtp_connect_timeout = 30s
smtp_data_done_timeout = 600s
smtp_data_init_timeout = 120s
smtp_data_xfer_timeout = 180s
smtp_defer_if_no_mx_address_found = no
smtp_destination_concurrency_limit = $default_destination_concurrency_limit
smtp_destination_recipient_limit = $default_destination_recipient_limit
smtp_enforce_tls = no
smtp_helo_name = $myhostname
smtp_helo_timeout = 300s
smtp_host_lookup = dns
smtp_line_length_limit = 990
smtp_mail_timeout = 300s
smtp_mx_address_limit = 0
smtp_mx_session_limit = 2
smtp_never_send_ehlo = no
smtp_pix_workaround_delay_time = 10s
smtp_pix_workaround_threshold_time = 500s
smtp_quit_timeout = 300s
smtp_quote_rfc821_envelope = yes
smtp_randomize_addresses = yes
smtp_rcpt_timeout = 300s
smtp_rset_timeout = 120s
smtp_sasl_auth_enable = no
smtp_sasl_password_maps =
smtp_sasl_security_options = noplaintext, noanonymous
smtp_sasl_tls_security_options = $var_smtp_sasl_opts
smtp_sasl_tls_verified_security_options = $var_smtp_sasl_tls_opts
smtp_send_xforward_command = no
smtp_skip_5xx_greeting = yes
smtp_skip_quit_response = yes
smtp_starttls_timeout = 300s
smtp_tls_CAfile =
smtp_tls_CApath =
smtp_tls_cert_file =
smtp_tls_cipherlist =
smtp_tls_dcert_file =
smtp_tls_dkey_file = $smtp_tls_dcert_file
smtp_tls_enforce_peername = yes
smtp_tls_key_file = $smtp_tls_cert_file
smtp_tls_loglevel = 0
smtp_tls_note_starttls_offer = no
smtp_tls_per_site =
smtp_tls_scert_verifydepth = 5
smtp_tls_session_cache_database =
smtp_tls_session_cache_timeout = 3600s
smtp_use_tls = no
smtp_xforward_timeout = 300s
smtpd_authorized_verp_clients = $authorized_verp_clients
smtpd_authorized_xclient_hosts =
smtpd_authorized_xforward_hosts =
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_connection_count_limit = 50
smtpd_client_connection_limit_exceptions = $mynetworks
smtpd_client_connection_rate_limit = 0
smtpd_client_restrictions =
smtpd_data_restrictions =
smtpd_delay_reject = yes
smtpd_enforce_tls = no
smtpd_error_sleep_time = 1s
smtpd_etrn_restrictions =
smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~
smtpd_hard_error_limit = 20
smtpd_helo_required = no
smtpd_helo_restrictions =
smtpd_history_flush_threshold = 100
smtpd_junk_command_limit = 100
smtpd_noop_commands =
smtpd_null_access_lookup_key = <>
smtpd_policy_service_max_idle = 300s
smtpd_policy_service_max_ttl = 1000s
smtpd_policy_service_timeout = 100s
smtpd_proxy_ehlo = $myhostname
smtpd_proxy_filter =
smtpd_proxy_timeout = 100s
smtpd_recipient_limit = 1000
smtpd_recipient_overshoot_limit = 1000
smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = no
smtpd_restriction_classes =
smtpd_sasl_application_name = smtpd
smtpd_sasl_auth_enable = no
smtpd_sasl_exceptions_networks =
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_sender_login_maps =
smtpd_sender_restrictions =
smtpd_soft_error_limit = 10
smtpd_starttls_timeout = 300s
smtpd_timeout = 300s
smtpd_tls_CAfile =
smtpd_tls_CApath =
smtpd_tls_ask_ccert = no
smtpd_tls_auth_only = no
smtpd_tls_ccert_verifydepth = 5
smtpd_tls_cert_file =
smtpd_tls_cipherlist =
smtpd_tls_dcert_file =
smtpd_tls_dh1024_param_file =
smtpd_tls_dh512_param_file =
smtpd_tls_dkey_file = $smtpd_tls_dcert_file
smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_tls_loglevel = 0
smtpd_tls_received_header = no
smtpd_tls_req_ccert = no
smtpd_tls_session_cache_database =
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_wrappermode = no
smtpd_use_tls = no
soft_bounce = no
stale_lock_time = 500s
strict_7bit_headers = no
strict_8bitmime = no
strict_8bitmime_body = no
strict_mime_encoding_domain = no
strict_rfc821_envelopes = no
sun_mailtool_compatibility = no
swap_bangpath = yes
syslog_facility = mail
syslog_name = postfix
tls_daemon_random_bytes = 32
tls_daemon_random_source =
tls_ipv6_version = 1.26
tls_random_bytes = 32
tls_random_exchange_name = ${config_directory}/prng_exch
tls_random_prng_update_period = 60s
tls_random_reseed_period = 3600s
tls_random_source =
trace_service_name = trace
transport_maps =
transport_retry_time = 60s
trigger_timeout = 10s
undisclosed_recipients_header = To: undisclosed-recipients:;
unknown_address_reject_code = 450
unknown_client_reject_code = 450
unknown_hostname_reject_code = 450
unknown_local_recipient_reject_code = 550
unknown_relay_recipient_reject_code = 550
unknown_virtual_alias_reject_code = 550
unknown_virtual_mailbox_reject_code = 550
unverified_recipient_reject_code = 450
unverified_sender_reject_code = 450
verp_delimiter_filter = -=+
virtual_alias_domains = $virtual_alias_maps
virtual_alias_expansion_limit = 1000
virtual_alias_maps = $virtual_maps
virtual_alias_recursion_limit = 1000
virtual_destination_concurrency_limit = $default_destination_concurrency_limit
virtual_destination_recipient_limit = $default_destination_recipient_limit
virtual_gid_maps =
virtual_mailbox_base =
virtual_mailbox_domains = $virtual_mailbox_maps
virtual_mailbox_limit = 51200000
virtual_mailbox_lock = fcntl
virtual_mailbox_maps =
virtual_minimum_uid = 100
virtual_transport = virtual
virtual_uid_maps =
Reply With Quote
  #12  
Old 20th October 2005, 04:57 PM
amessina's Avatar
amessina Offline
Registered User
 
Join Date: Apr 2005
Location: Chicago, IL, US
Age: 35
Posts: 100
wow. this is interesting. your config looks good. so, you can get ldapsearch to return the user. you can get postmap -q to return the user. but postfix itself cannot. hmmm.

what version of postfix are you using?
__________________
Visit my website: http://messinet.com
Visit my online gallery: http://messinet.com/modules.php?name...op=visit&lid=3

Registered Linux User #389089
Get counted!: http://counter.li.org
Reply With Quote
  #13  
Old 20th October 2005, 05:07 PM
Balrog Offline
Registered User
 
Join Date: Oct 2005
Age: 46
Posts: 9
[root@test ~]# rpm -qa | grep postfix
postfix-pflogsumm-2.1.5-5
postfix-2.1.5-5
Reply With Quote
  #14  
Old 21st October 2005, 11:40 AM
amessina's Avatar
amessina Offline
Registered User
 
Join Date: Apr 2005
Location: Chicago, IL, US
Age: 35
Posts: 100
Talking

i think i may have figured it out! after reading the man page at http://postfix.messinet.com/ldap_table.5.html, i noticed that your size_limit parameter is set to 1. if you set this to 1, you will only get one entry returned from any ldapsearch. not that if you do ldapsearch -x "(uid=ldapuser)", you actually get 2 results (even though it's just one entry). try setting your size limit to 0 tp disable (which is the default) or you could omit it from your config (since it is the default).

i'm not sure this will work, but the rest of what you have looks pretty standard.

let me know what happens.
__________________
Visit my website: http://messinet.com
Visit my online gallery: http://messinet.com/modules.php?name...op=visit&lid=3

Registered Linux User #389089
Get counted!: http://counter.li.org

Last edited by amessina; 21st October 2005 at 11:51 AM.
Reply With Quote
  #15  
Old 21st October 2005, 05:38 PM
Balrog Offline
Registered User
 
Join Date: Oct 2005
Age: 46
Posts: 9
Unhappy

no.......

ldapusers.cf

bind = yes
bind_dn = cn=Manager,dc=test,dc=testdomain,dc=it
bind_pw = secret
version = 3
timeout = 20

start_tls = no

server_host = ldap://127.0.0.1
server_port = 389
search_base = ou=Utenti,dc=test,dc=testdomain,dc=it
scope = sub
query_filter = uid=%u
result_attribute = mail

[root@test postfix]# postmap -q ldapuser ldap:/etc/postfix/ldapusers.cf
ldapuser@test.testdomin.it

maillog

Oct 21 18:24:29 test postfix/local[25320]: 65914660B21: to=<ldapuser@test.testdomain.it>, orig_to=<ldapuser>, relay=local, delay=0, status=bounced (unknown user: "ldapuser")

ldaplog
Oct 21 18:32:23 test slapd[22457]: conn=122 fd=17 ACCEPT from IP=127.0.0.1:55188 (IP=0.0.0.0:389)
Oct 21 18:32:23 test slapd[22457]: conn=122 op=0 BIND dn="cn=Manager,dc=test,dc=testdomain,dc=it" method=128
Oct 21 18:32:23 test slapd[22457]: conn=122 op=0 BIND dn="cn=Manager,dc=test,dc=testdomain,dc=it" mech=SIMPLE ssf=0
Oct 21 18:32:23 test slapd[22457]: conn=122 op=0 RESULT tag=97 err=0 text=
Oct 21 18:32:23 test slapd[22457]: conn=122 op=1 SRCH base="ou=Utenti,dc=test,dc=testdomain,dc=it" scope=2 deref=0 filter="(uid=ldapuser)"
Oct 21 18:32:23 test slapd[22457]: conn=122 op=1 SRCH attr=mail
Oct 21 18:32:23 test slapd[22457]: conn=122 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Oct 21 18:32:23 test slapd[22457]: conn=122 op=2 UNBIND
Reply With Quote
Reply

Tags
core, fedora, ldap, postfix

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Postfix Ldap failover raggoflex Using Fedora 0 8th November 2007 10:12 AM
Postfix Server + LDAP smdanzar Servers & Networking 0 13th September 2005 11:21 AM
Ldap for postfix jkmartha Servers & Networking 1 15th May 2005 10:52 AM


Current GMT-time: 11:27 (Thursday, 23-05-2013)

TopSubscribe to XML RSS for all Threads in all ForumsFedoraForumDotOrg Archive
logo

All trademarks, and forum posts in this site are property of their respective owner(s).
FedoraForum.org is privately owned and is not directly sponsored by the Fedora Project or Red Hat, Inc.

Privacy Policy | Term of Use | Posting Guidelines | Archive | Contact Us | Founding Members

Powered by vBulletin® Copyright ©2000 - 2012, vBulletin Solutions, Inc.

FedoraForum is Powered by RedHat