I would like to set up SMTP, allowing the user to authenticate as their main address, but still continue to send mail using their alias (without disabling reject_sender_login_mismatch, as discussed here http://serverfault.com/questions/61351/)
I'm just not sure what my ldap mapping config should look like... when I add the LDAP attribute mailAlternateAddress to the query_filter, it allows me to authenticate using both the main address and the alias but it won't allow me to send from an address owned by that user other than what was used for authentication. master.cf -o smtpd_sender_login_maps=ldap:/etc/postfix/virtual -o smtpd_sender_restrictions=reject_sender_login_mismatch /etc/postfix/virtual server_host = ldap://ldapserver:389 server_port = 389 search_base = #query_filter = (mail=%s) query_filter = (&(|(mail=%s)(mailAlternateAddress=%s))) result_attribute = uid version = 3 start_tls = no bind = yes bind_dn = xxxxxxx bind_pw = xxxxxxx timeout = 30 Thanks!