Angel L. Mateo:
> Hello,
> 
>       We have a postfix servers' backend for our domain (debian etch servers,
> postfix 2.3.8). We have several domains and its users are in a ldap
> database. So we have defined several ldap maps in postfix to check
> relocated users, mail aliases and virtual users.
> 
>       With this configuration we are observing that we have a lot of ldap
> searches like:
> 
> (&(mail=@<localdomain>)(objectClass=CourierMailAccount))
> 
>       that is with the local part of the email direction as null, void.

Postfix virtual alias table lookups are documented in virtual(5).
http://www.postfix.org/virtual.5.html.

See also ldap_table(5) for details specific to LDAP lookups.
http://www.postfix.org/ldap_table.5.html

        Wietse

>       This problem is not (aparently) affecting to our email servers, so we
> are receiving (and rejecting) mail without any problem, but it
> overloading our ldap servers, because this is one of the most searched
> operations.
> 
>       Our postfix configuration is:
> 
> smtpd_recipient_restrictions =
>     reject_non_fqdn_sender,
>     reject_non_fqdn_recipient,
>     reject_unknown_sender_domain,
>     reject_unknown_recipient_domain,
>     ...
>     check_recipient_access hash:/etc/postfix/verified_recipient_checks,
>     ...
>     permit_mynetworks,
>     permit_sasl_authenticated,
>     ...
>     reject_unknown_reverse_client_hostname,
>     reject_unauth_destination,
>     check_helo_access hash:/etc/postfix/helo_checks,
>     check_client_access cidr:/etc/postfix/client_checks.cidr,
>     reject_rbl_client <rbls>,
>     ...
>     check_recipient_maps,
>     permit
> ...
> relocated_maps = ldap:/etc/postfix/ldap-relocated.cf
> ...
> relay_recipient_maps = ldap:/etc/postfix/ldap-vmail.cf,
> ldap:/etc/postfix/ldap-sysaliases.cf
> 
>       My map configuration is like this:
> 
> server_host = <ldapserver>
> server_port = 389
> search_base = <search base>
> query_filter = (&(mail=%s)(objectClass=CourierMailAccount))
> result_attribute = uid
> bind = yes
> bind_dn = <binddn>
> bind_pw = <bindpw>
> 
>       Any idea?
> 
> -- 
> Angel L. Mateo Mart?nez
> Secci?n de Telem?tica
> ?rea de Tecnolog?as de la Informaci?n       _o)
> y las Comunicaciones Aplicadas (ATICA)      / \\
> http://www.um.es/atica                    _(___V
> Tfo: 968367590
> Fax: 968398337
> 
> 
> 

Reply via email to