On Tue, Dec 03, 2013 at 09:06:10PM +0400, Igor Zinovik wrote: > >That makes no sense. You don't have to update the LDAP records > >for every user when adding a new domain, unless for some strange > >reason every user needs to have an additional email address in that > >domain. Generally, users don't want very many email addresses, the > >more addresses, the more spam. > > Yes, I clearly understand that, but organization was known on the > by one domain (3-d level, dom.org.ru), then it bought itself a 2-nd > level domain (myorg.ru) name and postmaster just decided to make direct > mapping u...@dom.org.ru -> u...@myorg.ru. I have to tell people > that there is no difference between addresses, but I cannot force > everyone to use 2-nd level domain in their mail programs, because > 3-d level domain is added in tons of address books and posted on > web sites. I cannot brake working infrustructure, if I do this, > I'm going to be fired, but of course using one domain is much > less confusing.
Well that's all history. How many more such domains are you going to add. At some point in the future you may want a virtual domain with just a few addresses for a small number of users. Handling this in LDAP one user at a time is more flexible. Anyway, you have two mechanisms now. Pick the right one. -- Viktor.