Hello, I have also encountered the same situation : multiple results with one LDAP query. I first think about the expansion_limit parameter, but it still gives a lookup transport error. I have no possibility in adding a parameter to ensure that the LDAP query will only return one result.
My ldap directory is quite large and we have several tools to ensure that there won't be any entries having the same address email. However it could still happens and I would really appreciate if you could give us the "solution" to fix that. >It is "possible" to work-around the inevitable multiple result values, but >I am loath to recommend it, so would prefer to not post such a "solution". Thank you, Henri S. On Mon, May 11, 2009 at 10:28 PM, Victor Duchovni < victor.ducho...@morganstanley.com> wrote: > On Mon, May 11, 2009 at 02:29:45PM +0200, postfix wrote: > > > A high level description of my need may help: > > "I would like to accept relaying messages coming from a set of IPs AND > > which recipient address is described AT LEAST ONE TIME in the LDAP > > directory, not as a mail/mailAlternateAddress address but as group(s) > > member(s). > > This data model is flawed. LDAP is not SQL, arbitrary relations are > poorly supported. Determining wether a user is a member of "some" group > is not efficient in LDAP, as you have to scan the set of all groups, > and then return multiple large group "entries" that match the filter. > > If you insist on this design, dump LDAP groups periodically to flat > files, and build an indexed "CDB" or "Berkeley DB" table indexed by > addesses of users who are group members. > > > => I would like to have one OK result_filter and not several ones. > > But maybe this is not possible. > > It is "possible" to work-around the inevitable multiple result values, but > I am loath to recommend it, so would prefer to not post such a "solution". > The build-a-static-table approach is I think much better. > > -- > Viktor. > > Disclaimer: off-list followups get on-list replies or get ignored. > Please do not ignore the "Reply-To" header. > > To unsubscribe from the postfix-users list, visit > http://www.postfix.org/lists.html or click the link below: > <mailto:majord...@postfix.org?body=unsubscribe%20postfix-users> > > If my response solves your problem, the best way to thank me is to not > send an "it worked, thanks" follow-up. If you must respond, please put > "It worked, thanks" in the "Subject" so I can delete these quickly. >
