Hi folks:

This is my first post to this list and my spanish isn't very good, so I hope to be lucky getting help.

I'm running Postfix and LDAP as a backend authentication for users within OpenXchange Server 5. I need to apply certain restrictions (i.e. bcc_maps, recipient_access, sender_access, etc.) to some users based on LDAP attributes.

Example:
Some users are members of a LDAP group (objectClass: posixGroup), and I want to keep a blind carbon copy of their sent emails.
Traditionally I could do this:

sender_bcc_maps = hash:/etc/postfix/sender_bcc

/etc/postfix/sender_bcc contains:

[EMAIL PROTECTED]   [EMAIL PROTECTED]

That works OK, but I need to use LDAP maps instead of a hash table.
So I was doing something like this:

...
...
server_host = 127.0.0.1
server_port = 389
search_base = ou=groups,dc=redtube,dc=com
query_filter = (&(objectclass=posixGroup)(memberUid=%u))
result_attribute = memberUid
...
...

My problem begins here: I don't want to use the value returned by result_attribute, instead I want to use a custom value to return (i.e. [EMAIL PROTECTED])

I was thinking about inserting a different LDAP attribute that contains the admin e-mail ([EMAIL PROTECTED]) and then return that attribute in 'result_attribute' directive, but this idea is not easy because of LDAP schemas rules and OpenXchange structure.

Is it possible to change the value of result_attribute? I'd like to use LDAP to check if a user matches some criteria. If it does then return a custom value written -maybe- in main.cf.

I hope someone can help me, thanks :)

Reply via email to