Question 1/ ok I understand now Thank you Question 2/ this a too long story so I do not want to go ahead here; In the ldap server that is used there are several entries having the same mailalternateaddress ; a list with members should be used insteed but i do not manage this ldap server . It would help if Postfix could understand the sequence "a@b.c OK,OK,OK" as "a@b.c OK". This way it would work. However a corrective on the ldap server is the best way to close this case. Thank you
Alain ----- Original Message ----- From: Victor Duchovni <victor.ducho...@morganstanley.com> Date: Friday, January 7, 2011 1:10 am Subject: Re: smptd trivial-rewrite daemons and ldap checking To: postfix-users@postfix.org > On Thu, Jan 06, 2011 at 06:15:00PM +0100, postfix wrote: > > > I apply a ldap filter to check senders and a ldap filter for the > > recipients route. > > I have the following warnings in the postfix logs when the > filters fail > > both due to a ldap size limit exceeded. > > > > agu-fe postfix/trivial-rewrite[30723]: warning: dict_ldap_lookup: > Search> error 4: Size limit exceeded > > agu-fe postfix/trivial-rewrite[30723]: warning: transport_maps > lookup> failure > > agu-fe postfix/smtpd[29970]: NOQUEUE: reject: RCPT from > > srv.sample.com[10.1.1.48]: 451 4.3.0 <t...@spam3.gm.transpac.fr>: > > Temporary lookup failure; from=<t...@spam3.gm.transpac.fr> > > to=<al...@spam3.gm.transpac.fr> proto=ESMTP helo=<srv.sample.com> > > > > Question 1: > > Why do I have some trivial-rewrite warnings in the logs ? > > (why does Postfix run the trivial-rewrite daemon while the smtpd > daemon> already returs a ldap error when checking the sender > address ) > > No, smtpd(8) is merely the messenger, reporting the error that > trivial-rewrite(8) encountered, when trying to resolve a sender or > recipient address to a (user, transport, nexthop) triple. The mapping > that maps an address to a transport:nexthop MUST be single-valued. > > > Question 2: > > How to do when the result_filter parameter returns a "OK COMMA > SEPARATED> LIST" from a ldap request ? (for example "a@b.c OK,OK,OK") > > You have failed to post the most important information required > to help you: > > - the definition of the transport_maps LDAP table. > - LDIF form of the relevant attributes of the LDAP entry that > exhibits the problem. > - Other details per http://www.postfix.org/DEBUG_README.html#mail > > -- > Viktor. >