Hi Mark, > or by setting $ldap_lookups_no_at_means_domain to true, > into a: > > [email protected] > [email protected] > user+foo@ > user@ > sub.example.com > .sub.example.com > .example.com > .com > . > > A query filter template like: > (&(objectClass=amavisAccount)(mail=%m)) > gets expanded into an OR of all mail=%m comparisions, e.g.: > (&(objectClass=amavisAccount)(|(mail=v1)(mail=v2)...(mail=vn))) > > So if you only have full domains listed in LDAP, then only domains > get compared, full email or subdomains will never be able to > match any domain name in a database.
thanks for your detailed answer and the hint about "$ldap_lookups_no_at_means_domain". As Domains are not listed with "@" within our LDAP-Directory $ldap_lookups_no_at_means_domain could do the trick. Amazing, I will try this tomorrow. Cheers, Werner
