The postfix HOWTO links to http://www-personal.umich.edu/~malth/gaptuning/postfix/ which has a script for contacting Active Directory and grabbing an up to date list of e-mail addresses. Very handy.
Alas, upon attempting to use it I receive the error LDAP_STRONG_AUTH_REQUIRED, due to Active Directory at our site being setup to require LDAP signing. Changing the script is outside my abilities, so I'm hoping someone else might have followed the same process and hit this stumbling block first. Any advice beyond reducing LDAP signing to 'Negotiate' is welcome. Paul Cocker TNT Post is the trading name for TNT Post UK Ltd (company number: 04417047), TNT Post (Doordrop Media) Ltd (00613278), TNT Post Scotland Ltd (05695897), TNT Post North Ltd (05701709), TNT Post South West Ltd (05983401), TNT Post Midlands Limited (6458167)and TNT Post London Limited (6493826). Emma's Diary and Lifecycle are trading names for Lifecycle Marketing (Mother and Baby) Ltd (02556692). All companies are registered in England and Wales; registered address: 1 Globeside Business Park, Fieldhouse Lane, Marlow, Buckinghamshire, SL7 1HY.