Re: Problem with ldap table lookups and TLS

2009-02-25 Thread Nick Geron
Victor Duchovni wrote: On Wed, Feb 25, 2009 at 03:30:51PM -0600, Nick Geron wrote: Well, I have found my problem. I probably should have mentioned earlier (how many times has than appeared on this list?) that ldap is used on this system for local user authentication, meaning pam/nss are

Re: Problem with ldap table lookups and TLS

2009-02-25 Thread Nick Geron
Realized my error in logic there. smtpd worked regardless because it's suppling to a client, not trying to verify anything like proxymap. -Nick However, the fact that smtpd never experienced the same clobbering as proxymap still seems a bit odd. Any ideas why? -Nick

Re: Problem with ldap table lookups and TLS

2009-02-25 Thread Nick Geron
Thanks again for the reply. I sent off my last post before reading this one, and it looks like we came to the same conclusion that it was my nsswitch/system ldap settings getting in the way. I would be inclined to agree that the problem is in libldap or other parts of openldap (there's a reas

Re: Problem with ldap table lookups and TLS

2009-02-25 Thread Nick Geron
iated. If this seems like a simple bit of patching, I would love to know. It would save us the trouble of having to write a custom patch to enable both ldap alias/domain mappings and single sign-on for the admins. -Nick Geron Nick Geron wrote: Victor Duchovni wrote: On Wed, Feb 25, 2009 at 09:36:08AM -0600, Nick Geron wrote:

Re: Problem with ldap table lookups and TLS

2009-02-25 Thread Nick Geron
, but proxymap does not load the CA, hence determines the cert to be invalid. I've posted output from syslog and strace in my last reply to Victor on this thread. -Nick Geron Quanah Gibson-Mount wrote: --On Wednesday, February 25, 2009 11:59 AM -0600 Nick Geron wrote: I think this is fa

Re: Problem with ldap table lookups and TLS

2009-02-25 Thread Nick Geron
Victor Duchovni wrote: On Wed, Feb 25, 2009 at 09:36:08AM -0600, Nick Geron wrote: You only show a test running as root, not "postfix". What versions of Postfix and OpenLDAP are these? This question seemed pretty clear. The answer is relevant to the discussion. An

Re: Problem with ldap table lookups and TLS

2009-02-25 Thread Nick Geron
if the previous message with requested verbose output didn't make it to the list. -Nick Geron Nick Geron wrote: Thanks for the reply, Victor. Responses below. Please let me know if any additional output is needed, or if I did something foolish ;) Note: I cut out most of dict_eval verbo

Re: Problem with ldap table lookups and TLS

2009-02-25 Thread Nick Geron
can make things more concise with grep. -Nick Victor Duchovni wrote: On Tue, Feb 24, 2009 at 06:48:12PM -0600, Nick Geron wrote: So as root or my limited rights postfix user this works: #postmap -q j...@example.com ldap:/etc/postfix/ldap/aliases.cf j...@example.com You only show a

Re: Problem with ldap table lookups and TLS

2009-02-25 Thread Nick Geron
S and openldap ldapsearch, courier authlib's ldap module, and cyrus saslauthd. -Nick Quanah Gibson-Mount wrote: --On Tuesday, February 24, 2009 6:48 PM -0600 Nick Geron wrote: I'm in the process of putting together a postfix system with an ldap back-end and have come across som

Problem with ldap table lookups and TLS

2009-02-24 Thread Nick Geron
nning openDS 1.2. Thanks for any help. This one's got me baffled. Please let me know if I should provide any additional output. -Nick Geron