configuring postfix
configuring postfix
The first goal is to force postfix to ask openldap for valid email addresses. This is very easy. If you have a "simple" setup, then you just have to set
local_recipient_maps =ldap:/etc/postfix/ldap-local_recipients.cf
in /etc/postfix/main.cf. The file /etc/postfix/ldap-local_recipients.cf contains the ldap setup:
server_host = ldap.redflo.de version = 3 search_base = dc=redflo, dc=de query_filter = (&(objectClass=inetOrgPerson)(mail=%s)) result_attribute = mail
In this case you have to fill the "mail" attribute for persons that should be able to receive mail. You can also use another attribute like "sn" or "uid". The default domain is always added in checks, so you can fill the "mail" attribute with "flo" or "flo@redflo.de".
If your mailserver has the nsswitch for passwd set to ldap and you have configured your /etc/ldap.conf accordingly, than you even don't have to do that (unchecked! todo: check)!
If you have a more complex setup with a mailrelay located near your firewall you may want to use:
relay_recipient_maps =ldap:/etc/postfix/ldap-relay_recipients.cf
instead.
If you do virtual hosting then you should use:
virtual_alias_maps = ldap:/etc/postfix/ldap-virtual.cf
and use result_attibute=cn in your config file.
Next we have to connect postfix to deliver mail to the cyrus imap server. This is acheived with the setting:
mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp
Created by admin. Last Modification: Sunday 19 of February, 2006 00:11:49 UTC by admin.
Category: UNIX
-
wiki page:
- How to use Microsoft Active Directory with postfix
- inserting the first object in your ldap directory
- Installing the mailsystem packages
- Integrating LDAP in your unix system
- Introduction
- Kerberizing kadmin
- Kerberizing sshd
- Kerberos setup
- LDAP
- LDAP schema files
- logging
- Motivation
- nss_ldap security
- OpenLDAP config files
- Other documentation
- performing a first ldap query
- PerfParse
- populating the directory
- Postfix and cyrus imapd and kerberos and LDAP
- Setting up a kerberos client machine
- Setting up your Kerberos servers
- SIngle sign on (SSO) first try
- SSO and Central Administration with Kerberos and LDAP
- Start the kerberos servers
- The configuration files
- The name service switch
- Tweak pam
- Understanding Kerberos
- Understanding Kerberos pt. 2
- Webserver Stress Test Tools
- What is LDAP?
- What the heck is pam?
- What we need
- What we want
- Audience
- Authenticating
- Bash script with timeout function
- Check Processes
- Check your installation
- Choosing a Realm
- configure your mail client
- Configuring and understanding pam
- configuring cyrus imapd
- configuring postfix
- Connect to kadmind and have a look into the database
- Creating the kerberos database
- Edit the Kerberos Admin Server ACL config
- Edit the kerberos client config file
- Edit the kerberos server config file
- Excursus to principals
- exploring schemas
- Fight Image Spam
- Fight Spam best practice
- adding a group
- Adding principals and authenticating
- Another principal
- nss with Solaris 10
- SerialConsole






