General discussion on installation and configuration of SOGo

Text archives Help


Re: [SOGo] LDAP group expansion in postifx


Chronological Thread 
  • From: Carsten Thiel < >
  • To:
  • Subject: Re: [SOGo] LDAP group expansion in postifx
  • Date: Tue, 23 Apr 2013 16:27:13 +0200

Dear André,

instead of
result_attribute = mail
use
leaf_result_attribute = mail

Best
Carsten


-- André Schild wrote (23.04.2013 15:30) --
> Hello,
>
> since mails sent to ldap groups must be expanded by the mta,
> I tried to come up with a working configuration.
>
> It works (almost), the problem I actually see, is that postfix expands
> the recipients to all members, BUT then also adds the email address of
> the group to the list.
> In this case
>
>
>
> Here the group expanding in postfix:
>
> server_host = 192.168.202.11
> search_base = ou=aarboard.ch,ou=groups,o=mailhosting2,dc=aarboard,dc=ch
> query_filter = (&(mail=%s)(objectclass=groupOfUniqueNames))
> result_attribute = mail
> special_result_attribute = uniquemember
>
>
> And the associated ldap entries:
>
> LDAP Group:
>
> dn: cn=Gruppe1,ou=aarboard.ch,ou=groups,o=mailhosting2,dc=aarboard,dc=ch
> objectClass: extensibleObject
> objectClass: top
> objectClass: groupOfUniqueNames
> cn: Gruppe1
> uniqueMember:
> mail= ,jvd=aarboard.ch,o=mailhosting2,dc=aa
> rboard,dc=ch
> uniqueMember:
> mail= ,jvd=aarboard.ch,o=mailhosting2,dc=a
> arboard,dc=ch
> mail:
>
> And the LDAP - Mailusers
>
> dn:
> mail= ,jvd=aarboard.ch,o=mailhosting2,dc=aarboard,dc
> =ch
> objectClass: JammMailAccount
> objectClass: top
> accountActive: TRUE
> delete: FALSE
> homeDirectory: /home/vmail/domains
> lastChange: 1366702070
> mail:
>
> mailbox: aarboard.ch/a.schild2/
>
> and
>
> dn:
> mail= ,jvd=aarboard.ch,o=mailhosting2,dc=aarboard,dc=
> ch
> objectClass: JammMailAccount
> objectClass: top
> accountActive: TRUE
> delete: FALSE
> homeDirectory: /home/vmail/domains
> lastChange: 1304579374
> mail:
>
> mailbox: aarboard.ch/a.schild/
>
>
> Already the postmap command shows the wrong number of results:
>
> postmap -v -q
>
> ldap:/etc/postfix/expand_groups.cf
> returns:
> postmap: dict_ldap_lookup: In dict_ldap_lookup
> postmap: dict_ldap_lookup: No existing connection for LDAP source
> /etc/postfix/expand_groups.cf, reopening
> postmap: dict_ldap_connect: Connecting to server ldap://192.168.202.11:389
> postmap: dict_ldap_connect: Actual Protocol version used is 2.
> postmap: dict_ldap_connect: Binding to server ldap://192.168.202.11:389
> as dn
> postmap: dict_ldap_connect: Successful bind to server
> ldap://192.168.202.11:389 as
> postmap: dict_ldap_connect: Cached connection handle for LDAP source
> /etc/postfix/expand_groups.cf
> postmap: dict_ldap_lookup: /etc/postfix/expand_groups.cf: Searching with
> filter
> (&(mail= )(objectclass=groupOfUniqueNames))
> postmap: dict_ldap_get_values[1]: Search found 1 match(es)
> postmap: dict_ldap_get_values[1]: looking up DN
> mail= ,jvd=aarboard.ch,o=mailhosting2,dc=aarboard,dc=ch
> postmap: dict_ldap_get_values[2]: Search found 1 match(es)
> postmap: dict_ldap_get_values[2]: search returned 1 value(s) for
> requested result attribute mail
> postmap: dict_ldap_get_values[2]: Leaving dict_ldap_get_values
> postmap: dict_ldap_get_values[1]: looking up DN
> mail= ,jvd=aarboard.ch,o=mailhosting2,dc=aarboard,dc=ch
> postmap: dict_ldap_get_values[2]: Search found 1 match(es)
> postmap: dict_ldap_get_values[2]: search returned 1 value(s) for
> requested result attribute mail
> postmap: dict_ldap_get_values[2]: Leaving dict_ldap_get_values
> postmap: dict_ldap_get_values[1]: search returned 2 value(s) for special
> result attribute uniqueMember
> postmap: dict_ldap_get_values[1]: search returned 1 value(s) for
> requested result attribute mail
> postmap: dict_ldap_get_values[1]: Leaving dict_ldap_get_values
> postmap: dict_ldap_lookup: Search returned
> , ,
> , ,
>
>
> Any ideas what might be wrong or how I can remove the group-email from
> the group itself?
>
>
> With best regards
>
> André Schild
>




Archive powered by MHonArc 2.6.18.

Top of page