> I have the patch, it has not yet been fully reviewed/integrated. If
> anyone wants to test it "as is", it is attached.

Thanks. I took the patch and applied it. Is compiled without warnings. Just 
little bugs in the man page, which I am going to fix tomorrow.

server_host = ldap://db.roessner-net.de/
              ldap://ldapslave.roessner-net.de/

start_tls = yes 
tls_ca_cert_file = /ca/cacert_org.crt
tls_cert = /ca/mx0.roessner-net.de/newcert.pem
tls_key = /ca/mx0.roessner-net.de/newkey.pem
tls_require_cert = yes 

search_base = ou=users,ou=people,dc=roessner-net,dc=de
bind = yes 
sasl = yes 
sasl_mechs = EXTERNAL
scope = sub 
query_filter = 
(&(objectClass=rnsMSPostfixAccount)(rnsMSRecipientAddress=%s)(rnsMSEnablePostfix=TRUE))
result_attribute = rnsMSDeliverToAddress
version = 3 
# debuglevel = 2 


postmap -q "de10...@service.intern" ldap:/etc/postfix/ldap/test.cf

At ldap.log:

Sep 15 18:29:06 db slapd[1355]: conn=3021 op=1 do_bind
Sep 15 18:29:06 db slapd[1355]: do_bind: dn () SASL mech EXTERNAL
Sep 15 18:29:06 db slapd[1355]: do_bind: SASL/EXTERNAL bind: 
dn="cn=mx0.roessner-net.de" sasl_ssf=0


So it seems, it might work. I will paste the results when I have set up LDAP 
with appropriate  settings (authz*)

Christian

Attachment: PGP.sig
Description: Signierter Teil der Nachricht

Reply via email to