Ubuntu 14.04 64-bit, using packages from distro.

postconf -n

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
debug_peer_level = 2
debug_peer_list = 127.0.0.1
inet_interfaces = $myhostname, localhost
inet_protocols = ipv4
local_destination_concurrency_limit = 5
local_destination_recipient_limit = 300
local_recipient_maps = $alias_maps, $virtual_alias_maps,
ldap:/etc/postfix/ldap-users.cf
mailbox_transport = lmtp:inet:hostname.domain.com:2003
message_size_limit = 20480000
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mynetworks = 192.168.0.0/16, 127.0.0.0/8
myorigin = $mydomain
readme_directory = no
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated, reject_unauth_destination,
reject_unverified_recipient
smtpd_sasl_auth_enable = yes
smtpd_tls_CAfile = /etc/ssl/certs/myca.crt
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/certs/mycert.crt
smtpd_tls_key_file = /etc/ssl/private/mykey.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_use_tls = yes
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_alias_maps = ldap:/etc/postfix/ldap-aliases.cf

/etc/postfix/ldap-aliases.cf

server_host = ldaps://dc.domain.com:636
search_base = OU=Mail Aliases,OU=XYZ,DC=domain,DC=com
version = 3
query_filter = (&(objectclass=group)(name=%s))
special_result_attribute = member
result_attribute = mail
bind = yes
bind_dn = CN=<removed>
bind_pw = <removed>
tls_ca_cert_file = /etc/ssl/certs/myca.crt

Manual lookup via "postmap -q al...@domain.com
ldap:/etc/postfix/ldap-aliases.cf" works without issue

But we get this in the logs when any message is received by postfix
(not just aliases)

May 23 12:07:57 postfix/pickup[15854]: 5CD3DAE7: uid=0 from=<root>
May 23 12:07:57 postfix/pickup[15854]: warning: maildrop/D5CDC22C:
error writing 5CD3DAE7: queue file write error
May 23 12:07:57 postfix/master[15356]: warning: process
/usr/lib/postfix/cleanup pid 15907 killed by signal 11
May 23 12:07:57 postfix/master[15356]: warning:
/usr/lib/postfix/cleanup: bad command startup -- throttling
May 23 12:07:57 postfix/pickup[15854]: 6456FAE9: uid=0 from=<root>
May 23 12:07:57 postfix/pickup[15854]: warning: maildrop/F2D5A93C:
error writing 6456FAE9: queue file write error
May 23 12:07:57 postfix/master[15356]: warning: process
/usr/lib/postfix/cleanup pid 15908 killed by signal 11

If we change the server_host to just "ldap://dc.domain.com"; (no SSL)
then all is well.

I can't tell if something is misconfigured, a library is missing, or
if this is just a bug in the Ubuntu build.

Thanks,

Jeff

Reply via email to