[Postfixbuch-users] LDAP Map Query Problem

[Alexander Dalloz]

Am 26.06.2010 11:28, schrieb Martin Ott:
> Hallo Alexander,
> 
>> # /etc/postfix/ldap-all_map.cf
>> #
>> # lookup for the dynamic all dispatcher alias
>>
>> server_host = zcp.example.com
>> server_port = 389
>> version = 3
>> bind = no
>> search_base = ou=Aliases,dc=example,dc=com
>> scope = one
>> query_filter = (mail=%s)
>> special_result_attribute = memberURL
>> result_attribute = mail
>>
>>    
> ...
>> Wo kommt dieses Resultat her - feature by design? Und besser noch, wie
>> verhindere ich dies?
>>    
> Dass bei der Abfrage mit key=all at example.com als value u.a. wieder
> all at example.com zurückkommt liegt an result_attribute = mail. Um das
> abzustellen kannst  du versuchen "result_attribute =" und
> "leaf_result_attribute = mail" zu setzen.
> 
> http://www.postfix.org/ldap_table.5.html
> 
> *leaf_result_attribute (default: empty)*
>               When  one  or  more  special  result attributes are
>               found in a non-terminal  (see  above)  LDAP  entry,
>               leaf result attributes are excluded from the expan-
>               sion of that entry. This is useful  when  expanding
>               groups and the desired mail address attribute(s) of
>               the member objects obtained via DN or URI recursion
>               are  also  present  in  the  group  object. To only
>               return the attribute values from the  leaf  objects
>               and  not the containing group, add the attribute to
>               the  leaf_result_attribute  list,   and   not   the
>               result_attribute  list,  which  is always expanded.
>               Note, the default value  of  "result_attribute"  is
>               not  empty, you may want to set it explicitly empty
>               when using "leaf_result_attribute"  to  expand  the
>               group  to  a list of member DN addresses.
> 
> 
> Gruß,
> Martin

Ah, danke Martin! Ich hätte mal auf die von Dir angegebene Dokuseite
gehen sollen, anstatt nur mein lokale ldap_table manpage zu lesen. Denn
"leaf_result_attribute" gibt es erst ab Postfix 2.4 und hier läuft 2.3.3
(RHEL 5 Clone). Also habe ich einen triftigen Grund, ein eigenes Postfix
2.7.1 RPM zu bauen.

Gruß

Alexander