On Sat, 2010-09-04 at 12:11 +0530, Ashwin Muni wrote:
> I am using exchange  and want to migrate to postfix, The issue is
> users should be authenticated from Active Directory and other thing is
> i have got 1000 users from which 150 users will remain on exchange and
> the rest mailboxes will be created on postfix (Linux Box). the 750
> users are actually not very important.
> 
> 
>                                    If user has mailbox in AD deliver
> in Ad
>                        ||
> =================(4)==========================================
>                        ||
> ||
> [                ][               ]=======(3)=<=========[                     
>            ]                         [   v           ]
> (1)--> Port 25 ][ Postfix    ] Authentication from AD   [ Active
> Directory Box] ===========[ Exchange]
> [                ][Linux Box ]==>===(2)===========
> [                               ]
> [                ]   
>                        ||           Else Deliver on Postfix Machine
>                      (5)
>                        ||
>                  [     v                            ]
>                  [ Storage on Linux Box ]
>                  [                                  ]
> 
> 1. Mail Entering Postfix machien using Port 25
> 2. Authentication from AD if user exists and mailbox location
> 3  Results from AD
> 4. If user on Mailbox on exchange then deliver to echange
> 5. Else Deliver to postfix 
> 

Why do you want to query AD in real-time.  Micro$$oft AD implements ldap
very poorly and you will waste time on your postfix server waiting for
AD replies. 

Instead do this 
* Ldap Query the Ad server in the cron and get list of all valid users
with mailboxes.
* create a transport file to deliver only these users to the Exchange
  Rest to your local delivery .. I assume you use lmtp

-----------/etc/postfix/transport
  exch_us...@domain.tld smtp:[exchange.server.ip]
  exch_us...@domain.tld smtp:[exchange.server.ip]
  exch_us...@domain.tld smtp:[exchange.server.ip]
  ...
  ..
  domain.tld lmtp:/path
------------



* Just make sure the unknown users are rejected at the smtpd level
before the mail enters inside. 



Thanks
Ram











> Any help appreciated.
> 
> -- 
> Ashwin Muni
> http://www.linuxmaza.com
> Linux Tutorials and Howtos


Reply via email to