Andrzej A. Filip: > wie...@porcupine.org (Wietse Venema) wrote: > [...] > > In any case, using UNIX system account names with @ is a mistake, > > and I will not put in a great deal of effort to make that easy. > > IMHO it does make sense at big system shared by a few+ "loosely coupled" > organizations or in server group sharing common authentication system.
Do those users really require shell access on your server? I would allow only UNIX shell accounts via PAM, and look up the remainder with the Postfix LDAP client. I forgot to mention one thing is you use virtual(8) as outlined in my reply with aliases to local(8). If you have a virtual_alias_maps entry for r...@example.com -> root@localhost, then you don't need to list r...@example.com in virtual_mailbox/uid/gid_maps. Ditto for other standard accounts. ietse