Re: MS AD integration

[lst_hoe02]

Zitat von K bharathan <kbhara...@gmail.com>:

On Sun, Jan 9, 2011 at 7:41 PM, Jan Johansson <j...@mupp.net> wrote:

  >hi all

>is there any way to postfix could query  the mail users directly from
Active Directory?

>what is required for this

>Thanks



Sure, plenty of ways, but do you _*really*_ want this?



The reason I myself prefer to periodically transfer a dump of all
proxy-addresses from the AD/Exchange environment and parse that into Postfix
is that should you ever face a larger spam attack, and have tons of queries
against the AD your AD/exchange will bog down.



Also, I answered this as late as yesterday on the list, the search feature
is a good thing ;)



But, here is my reply on how I export Proxy-addresses from AD (2008R2).

I use a slightly modified version of
https://exchangepedia.com/blog/stuff/ListEmailAddresses.zip (I just
changed it do not output a dialog, just the resulting text file)



Then I use a a small PHP-script to parse the files into transport,
relay_domains, relay_recipients



 hi

but i was thinking of a scenario where the exchange is not there; can i make
postfix query the DC AD database;

For sure. Microsoft AD has a LDAP interface so you simply have to configure Postfix to use LDAP lookups (http://www.postfix.org/LDAP_README.html) and query for the correct attribute with a "LDAP" user able to read it.

Regards

Andreas

smime.p7s
Description: S/MIME Cryptographic Signature