On 10/26/2011 4:06 AM, Nerijus Kislauskas wrote:

> As I can see now, postfix decides, that user exists when some attribute
> (or set of attributes) is returned from a search operation. And in my
> opinion that is wrong behavior. LDAP search operation returns DN (or set
> of DN's) everytime the search query matches any object(s) and
> attributes, if requested. if not, only DN's returned. That is all you
> need to say, that there is one (more than one) object in DIT, message
> will be delivered to. So you should not need to return attributes at all.

The postfix database interface is a general-purpose mechanism, not
an LDAP interface.  In the case of relay_recipient_maps, the
requirement is that a result must be returned, but the value is not
used.  As long as a lookup returns anything, the user is considered
valid.


  -- Noel Jones

Reply via email to