strace did the job. i had the wrong permissions on the certkey, the postfix user cant read it.
thx for help 2010/2/2 Wietse Venema <wie...@porcupine.org>: > spamv...@googlemail.com: >> thx Wietse >> >> trying it as user postfix i get (Can't contact LDAP server) >> >> hmm strange > > You have some incorrect file permission, or some "security" software > such as SeLinux or AppArmor is mis-configured. > > Try: > > # service selinux stop > # service apparmor stop > > etc. > > If that is not the problem, try: > > $ strace -o tempfile postmap ... > > and look for EACCES etc. errors in the strace output. etc. > > Wietse >