On 02:58, Wed 26 Apr 06, Rajkumar S wrote: > One problem with this arrangement is that I cannot do RCPTCHECK, because > none of the domains are in locals, but in rcpthosts. I would really like > to do RCPTCHECK because of spam. I tried to put one domain in locals. > When I do that qmail-smtp checks the recipient fine, but qmail-send > refuses to send the mail and terminates with the error: > > LDAP attribute is not given but mandatory. (#5.3.5) > > I tried to give administrator username and password to qmail to discount > any issues with permissions, but that did not work. The same ldap > database is used by second machine to deliver mails locally, so that > part is also fine. Any ldap attribute required when smtproutes is > involved? Any clues?
I have a small suggestion here. In your front facing qmail, don't use qmail-ldap. Instead use stock qmail with fehcom.de's SPAMCONTROL patch. This will enable a 'recipients' extension using which you can have a list of recipients residing in a cdb file. You can further write a script that queries your ldap server on a regular basis and makes a conclusive list of email IDs from the mail and mailAlternateAddress attibutes of users. With this list, you can generate your recipients.cdb file and reject emails to non-existant users. You can configure the SPAMCONTROL patch to either give a permanent error (a 5xx) on not finding the recipient in the database or you can also give a temporary error (a 4xx). Hope this helps... Cheers, Abhas. -- i-take-charge at DeepRoot Linux http://www.deeproot.co.in / +91 (80) 4112 4784 / 85 Getting GNU/Linux to work for you. Faster. Better. Today. Every way.
