Sebenarnya query postfix (imho) ke ldap nggak 'efisien', tiap filter sepertinya akan diquery 4 kali, belum lagi bicara query dari pam (untunglah pam punya connection pooling, postfix tidak). Status client cache pun masih tdk dianjurkan.
1. bagaimana cara mereduce queries? ie. query "(&(objectClass=mailUser)(|([EMAIL PROTECTED])([EMAIL PROTECTED])))" sebenarnya tdk perlu dalam kasus saya. 2. bagaimana membatasi agar selain lokal domain tdk diquery? main.cf: virtual_alias_maps = ldap:ldapvirtual ldapvirtual_server_host = 11.10.10.3 11.200.100.3 ldapvirtual_server_port = 389 ldapvirtual_timeout = 10 ldapvirtual_bind = no ldapvirtual_cache = no ldapvirtual_version = 3 ldapvirtual_search_base = dc=indorama,dc=com ldapvirtual_scope = sub ldapvirtual_query_filter = (&(objectClass=mailUser)(|(mail=%s)(mailAlternateAddress=%s))) ldapvirtual_result_attribute = mailLocalAddress outbound_restriction_server_host = 11.10.10.3 11.200.100.3 outbound_restriction_server_port = 389 outbound_restriction_timeout = 10 outbound_restriction_bind = no outbound_restriction_cache = no outbound_restriction_version = 3 outbound_restriction_search_base = dc=indorama,dc=com outbound_restriction_scope = sub outbound_restriction_query_filter = (&(objectClass=mailUser)(|(mail=%s)(mailAlternateAddress=%s))) outbound_restriction_result_attribute = mailExternalAccess matchlogin_server_host = 11.10.10.3 11.200.100.3 matchlogin_server_port = 389 matchlogin_timeout = 10 matchlogin_bind = no matchlogin_cache = no matchlogin_version = 3 matchlogin_search_base = dc=indorama,dc=com matchlogin_scope = sub matchlogin_query_filter = (&(objectClass=mailUser)(|(mail=%s)(mailAlternateAddress=%s))) matchlogin_result_attribute = mail logs. .... Dec 13 11:42:50 jambu slapd[16043]: conn=478990 op=166 SRCH base="ou=jakarta,dc=indorama,dc=com" scope=2 filter="(&(objectClass=mailUser)(|([EMAIL PROTECTED])([EMAIL PROTECTED])))" Dec 13 11:42:50 jambu slapd[16043]: conn=478990 op=166 SEARCH RESULT tag=101 err=0 nentries=1 text= Dec 13 11:42:50 jambu slapd[27226]: conn=478990 op=167 BIND dn="uid=jktbudhi,ou=people,ou=jakarta,dc=indorama,dc=com" method=128 Dec 13 11:42:50 jambu slapd[27226]: conn=478990 op=167 BIND dn="uid=jktbudhi,ou=people,ou=jakarta,dc=indorama,dc=com" mech=simple ssf=0 Dec 13 11:42:50 jambu slapd[27226]: conn=478990 op=167 RESULT tag=97 err=0 text= Dec 13 11:42:50 jambu slapd[27228]: conn=478990 op=168 BIND anonymous mech=implicit ssf=0 Dec 13 11:42:50 jambu slapd[27228]: conn=478990 op=168 BIND dn="" method=128 Dec 13 11:42:50 jambu slapd[27228]: conn=478990 op=168 RESULT tag=97 err=0 text= Dec 13 11:42:50 jambu slapd[16042]: conn=480200 op=73 SRCH base="dc=indorama,dc=com" scope=2 filter="(&(objectClass=mailUser)(|([EMAIL PROTECTED])([EMAIL PROTECTED])))" Dec 13 11:42:50 jambu slapd[16042]: conn=480200 op=73 SRCH attr=mail Dec 13 11:42:50 jambu slapd[16042]: conn=480200 op=73 SEARCH RESULT tag=101 err=0 nentries=1 text= Dec 13 11:42:50 jambu slapd[27247]: conn=480187 op=53 SRCH base="dc=indorama,dc=com" scope=2 filter="(&(objectClass=mailUser)(|([EMAIL PROTECTED])([EMAIL PROTECTED])))" Dec 13 11:42:50 jambu slapd[27247]: conn=480187 op=53 SRCH attr=mailExternalAccess Dec 13 11:42:50 jambu slapd[27247]: conn=480187 op=53 SEARCH RESULT tag=101 err=0 nentries=1 text= Dec 13 11:42:50 jambu slapd[27610]: conn=480192 op=108 SRCH base="dc=indorama,dc=com" scope=2 filter="(&(objectClass=mailUser)(|([EMAIL PROTECTED])([EMAIL PROTECTED])))" Dec 13 11:42:50 jambu slapd[27610]: conn=480192 op=108 SRCH attr=mailLocalAddress Dec 13 11:42:50 jambu slapd[27610]: conn=480192 op=108 SEARCH RESULT tag=101 err=0 nentries=0 text= Dec 13 11:42:50 jambu slapd[27609]: conn=480192 op=109 SRCH base="dc=indorama,dc=com" scope=2 filter="(&(objectClass=mailUser)(|([EMAIL PROTECTED])([EMAIL PROTECTED])))" Dec 13 11:42:50 jambu slapd[16043]: conn=480909 op=135 SRCH attr=mailLocalAddress Dec 13 11:42:50 jambu slapd[16043]: conn=480909 op=135 SEARCH RESULT tag=101 err=0 nentries=0 text= Dec 13 11:42:50 jambu slapd[27212]: conn=481273 fd=16 ACCEPT from IP=11.200.100.2:36251 (IP=0.0.0.0:389) Dec 13 11:42:50 jambu slapd[27226]: conn=481273 op=0 BIND dn="" method=128 Dec 13 11:42:50 jambu slapd[27226]: conn=481273 op=0 RESULT tag=97 err=0 text= Dec 13 11:42:50 jambu slapd[27228]: conn=481273 op=1 SRCH base="ou=people,ou=jakarta,dc=indorama,dc=com" scope=1 filter="(&(objectClass=shadowAccount)(uid=nobody))" Dec 13 11:42:50 jambu slapd[27228]: conn=481273 op=1 SRCH attr=uid userPassword shadowLastChange shadowMax shadowMin shadowWarning shadowInactive shadowExpire Dec 13 11:42:50 jambu slapd[27228]: conn=481273 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text= Dec 13 11:42:50 jambu slapd[16042]: conn=481241 op=2 SRCH base="dc=indorama,dc=com" scope=2 filter="(&(objectClass=mailUser)(|([EMAIL PROTECTED])([EMAIL PROTECTED])))" Dec 13 11:42:50 jambu slapd[27610]: conn=481189 op=29 SEARCH RESULT tag=101 err=0 nentries=0 text= Dec 13 11:42:50 jambu slapd[27609]: conn=481189 op=30 SRCH base="dc=indorama,dc=com" scope=2 filter="(&(objectClass=mailUser)(|([EMAIL PROTECTED])([EMAIL PROTECTED])))" Dec 13 11:42:50 jambu slapd[27609]: conn=481189 op=30 SRCH attr=mailLocalAddress Dec 13 11:42:50 jambu slapd[27609]: conn=481189 op=30 SEARCH RESULT tag=101 err=0 nentries=0 text= Dec 13 11:42:51 jambu slapd[27212]: conn=481273 fd=16 closed --beast -- Right or wrong my list. Unsubscribe option is currently unavailable. Indeed, it's available upon request .. but: cepek dulu donk!
