On 10/26/2011 4:06 AM, Nerijus Kislauskas wrote: > As I can see now, postfix decides, that user exists when some attribute > (or set of attributes) is returned from a search operation. And in my > opinion that is wrong behavior. LDAP search operation returns DN (or set > of DN's) everytime the search query matches any object(s) and > attributes, if requested. if not, only DN's returned. That is all you > need to say, that there is one (more than one) object in DIT, message > will be delivered to. So you should not need to return attributes at all.
The postfix database interface is a general-purpose mechanism, not an LDAP interface. In the case of relay_recipient_maps, the requirement is that a result must be returned, but the value is not used. As long as a lookup returns anything, the user is considered valid. -- Noel Jones