Cyrus + LDAP + SASLauth problem. Rewrite login?
Georg Gell
georg_1 at have2.com
Thu Oct 6 06:30:39 EDT 2005
David Manchado schrieb:
> Hello Georg,
>
> what I've found regarding this issue is:
>
>> dn: cn=defaultrecipient, dc=fake, dc=dom
>> objectclass: top
>> objectclass: virtualaccount
>> cn: defaultrecipient
>> owner: uid=root, dc=someserver, dc=isp, dc=dom
>>1 -> mailacceptinggeneralid: fake.dom
>>2 -> mailacceptinggeneralid: @fake.dom
>>3 -> maildrop: realuser at real.dom
>
> But you must associate the address to one from a domain listed in my domain
> (in the example real.dom).
>
> As I thought it seems cyrus only delegates in saslauthd the auth (logical
> anyway) and not the way to change the user login.
>
> Let's try to solve the problem in postfix.
>
> Regards,
>
> El Jueves 6 Octubre 2005 08:54, Georg Gell escribió:
>
>>David schrieb:
>>
>>>Hello,
>>>
>>>I would like to 'rewrite' or associate the user at domain.com mailbox with
>>>user.domain.com at localhost.
>>>
>>>Due to postfix limitations, it can only accept mail for domain listed in
>>>mydomains (localhost for example). The problem is adding a domain to
>>>mydomains list implies a reload of postfix and the decrease of
>>>performance, besides the procedure is not as simple as creating the
>>>accounts in LDAP, I need to access to smtp servers.
>>>
>>>With a maildrop configuration like user at domain.com ->
>>>user.domain.com at localhost I would workaround this problem in
>>>postfix-side, but then I have the problem with the user login of the
>>>customers that should be user.domain.com (with virtdomains adding
>>>@localhost) but should be desiderable to use login user at domain.com due to
>>>current configuration in qmail/qpopper server that we need to integrate.
>>>
>>>Thanks in advance, regards
>>
>>postfix can use ldap lookups for virtual domains,
>>http://www.postfix.org/LDAP_README.html. No need to restart postfix.
>
Hello David,
I spent some time with this problem, because I needed to integrate
open-xchange on my sql lookup table driven mail server - and ox uses ldap.
first read this:
http://www.postfix.org/VIRTUAL_README.html#in_virtual_other
AFAIK that's what you want to do
use virtual_mailbox_domains for ldap domain lookup, not mydomains. I
don't know how to do that because I have no real clue how to get the
domains out of your ldap server.
for virtual_mailbox_maps the ldap lookup has to return any value for all
existing email addresses, so postfix excepts mail for this address.
virtual_alias_maps let's you create alias addresses
IIRC I had to change the cyrus line in /etc/postfix/master.cf to
cyrus unix - n n - - pipe
user=cyrus argv=/usr/lib/cyrus/deliver -e -r ${sender} ${recipient}
and I use
virtual_transport = cyrus
regards
Georg
More information about the Info-cyrus
mailing list