Hi there, 

I am using Postfix 2.3.3 to integrate with RedHat Open LDAP server. I
verified that my LDAP set up is correct, because I used the same
configuration on another Postfix server, it worked. 
The following is how I ask LDAP to validate domain name. 

main.cf:

mydestination = $myhostname, localhost.$mydomain, localhost,
ldap:acceptdomains

acceptdomains_server_host = ldap://<hostname>:389/
acceptdomains_server_port = 389
acceptdomains_search_base =
ou=domain,dc=hubdirect,dc=int,dc=medplus,dc=com
acceptdomains_query_filter = (domainname=%s)
acceptdomains_result_attribute = domainname

When I do postmap for testing a domain: test.medplus.com, here is what I
get. 

postmap -qv  test.medplus.com ldap:acceptdomains
postmap: fatal: open database  test.medplus.com.db: No such file or
directory

postmap -q  test.medplus.com ldap:acceptdomains
 <---return nothing in command line--->

When I looked in LDAP log, I see the query issued correctly but nothing
is retrieved. 

However, in another environment having identical setup, I am getting
"test.medplus.com" back in response, thus showing Postfix knows this
domain.

Any idea why Postfix lookup LDAP does not work in this particular
instance?  The only difference between the two environment is that:
- on the one working, my LDAP root node has the
"dc=int,dc=medplus,dc=com".
- on the one not working, my LDAP root node has "dc=medplus,dc=com", and
"dc=int" is one level below the root. 

Both entries have the same DN path "dc=int,dc=medplus,dc=com".


Thanks,

Yan










Confidentiality Notice: The information contained in this electronic 
transmission is confidential and may be legally privileged. It is intended only 
for the addressee(s) named above. If you are not an intended recipient, be 
aware that any disclosure, copying, distribution or use of the information 
contained in this transmission is prohibited and may be unlawful. If you have 
received this transmission in error, please notify us by telephone (513) 
229-5500 or by email (postmas...@medplus.com). After replying, please erase it 
from your computer system.



Reply via email to