>
>
>> Occured to me a new idea now.
>>
>> Qmail-ldap would smoothly implement this feature if it was added as a new
>> functionality to qmail-verify (the process invoked by qmail-smtpd to check 
>> out
>> things inside the directory).
>
> tripping far in this idea, imagine how crazy it would be if qmail-verify
> accepted user-defined ldap queries, trigged by user-defined qmail-smtpd
> environment variables. Qmail-ldap could be infinitely customizable...
>
> regards,
> bnegrao
>
>

Negrao,

You mean something like below (a snippet of my Postfix main.cf config file)?

-----------------cut
accounts_server_host = 127.0.0.1
accounts_search_base = ou=Users,o=DASA
accounts_query_filter = 
(&(objectClass=qmailUser)(|(mail=%s)(mailAlternateAddress=%s)))
accounts_result_attribute = mailMessageStore
accounts_bind = yes
accounts_scope = one
-----------------cut

I think it would be much more flexible then the way it is now.
Also, it will change responsibility for the filter code from
the qmail-ldap coders to the administrator. Must think about
the implications on that...

And you must also remember, when you issue a query, you are
expecting to get back one or more attributes. That is why
there is much more info in the main.cf file than just the
query...

In spite of that, you will not be able to use that filter to
control which users can send/receive email to/from internet.

Because you must first verify if the sender is in your domain
AND recipient is not; if that is true, you should apply the
query to LDAP to verify if the sender is authorized to send
to internet. Or, in case of an incoming email, if the
recipient is authorized to receive from internet.

-- 
Bye,
Fernando Maciel Souto Maior
[EMAIL PROTECTED]
http://www.araujo.com.br
+55+31 3270-5886
LPIC/1 # 31908

AVISO-------------------------------------------------------------
Esta mensagem pode conter informacao confidencial ou privilegiada.
Se voce nao for o destinatario ou a pessoa autorizada a receber
esta mensagem, nao pode usar, copiar ou divulgar as informacoes
nela contidas ou tomar qualquer acao baseada nessas informacoes.
Se voce recebeu esta mensagem por engano, favor avisar o remetente
imediatamente, respondendo o e-mail e em seguida apagando-o.
Obrigado pela cooperacao.

DISCLAIMER--------------------------------------------------------
This message may contain confidential and/or privileged information.
If you are not the addressee or authorized to receive this for the
addressee, you must not use, copy, disclose or take any action based
on any information herein. If you have received this message in
error, please advise the sender immediately by replying to this
e-mail and delete this message. Thank you for your cooperation.

------------------------------------------------------------------
This email was sent using SquirrelMail - http://squirrelmail.org

Reply via email to