--On Thursday, December 11, 2008 7:21 PM +0100 Mark Martinec <[email protected]> wrote:
> Would it be practical to store a signing key (in PEM format) in LDAP, > or is it too risky, and storing a file name would be preferred > (filename within a fixed directory)? Finding the most appropriate > signing key is quite elaborate now (two level: known set of > available signing keys, and complicated by preferences in > @dkim_signature_options_bysender_maps), so this would have to > translate into LDAP lookups somehow, probably in a simplified > (less flexible) manner. We currently store certs in LDAP for other reasons. As always, the question is how well you protect your data. In our LDAP server, the amavis user has its own credentials (binddn/password), and we use startTLS to encrypt the session. That may not be secure enough for other people. The translation of the lookups does seem the most problematic part of this. >> Another thing we want to be able to do is add a disclaimer on a >> per-domain basis with altermime, without having to restart amavis all >> the time, or to maintain the very large configuration array. > > It would be fairly trivial to add a LDAP (or SQL) attribute to > @disclaimer_options_bysender_maps, so the replacement of the _OPTIONS_ > placeholder in @altermime_args_disclaimer could be made dynamic. > It would involve adding a LDAP attribute to the schema, adding LDAP > attribute name to @ldap_attrs list in package Amavis::Lookup::LDAP, > and adding a corresponding 'unshift' in sub process_request. > >> Would it be possible to extend amavis to pull this sort of information >> from a database such as LDAP or mysql, rather than using the hard coded >> arrays it does now? > > For @disclaimer_options_bysender_maps yes. For fetching > signing keys it would require considering the best approach. Ok, I'm happy to help brainstorm on the approach for signing keys. ;) And having the disclaimer_options_bysender_maps would be great. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration ------------------------------------------------------------------------------ SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The future of the web can't happen without you. Join us at MIX09 to help pave the way to the Next Web now. Learn more and register at http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/ _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
