On Wed, Oct 26, 2011 at 04:56:40PM +0300, Nerijus Kislauskas wrote: > On 10/26/2011 02:09 PM, Noel Jones wrote: > > The postfix database interface is a general-purpose mechanism, not > > an LDAP interface. In the case of relay_recipient_maps, the > > requirement is that a result must be returned, but the value is not > > used. As long as a lookup returns anything, the user is considered > > valid. > > It depends how you understand "lookup returns". It may be:
The LDAP table driver considers entries that match the query filter, but which lack the requested attributes, or have only empty values for the requested attributes to not be matching attributes. The Postfix dictionary abstraction above the Postfix LDAP driver therefore only sees entries with non-empty result (or leaf or terminal) attributes. -- Viktor.