On 17 July 2015 at 06:28, Joel Carnat <[email protected]> wrote:
>
>> Le 16 juil. 2015 à 20:26, Joerg Jung <[email protected]> a écrit :
>>
>> On Thu, Jul 16, 2015 at 08:09:41PM +0200, Joel Carnat wrote:
>>> Hi,
>>>
>>> I have configured OpenSMTPD 5.4.4 (from OpenBSD 5.7) with virtual LDAP 
>>> users and LMTP to Dovecot.
>>>
>>> table vusers ldap:/etc/mail/ldap.conf
>>> table vdomains ldap:/etc/mail/ldap.conf
>>>
>>> accept from any for domain <vdomains> virtual <vusers> deliver to lmtp 
>>> "/var/dovecot/lmtp"
>>>
>>> If the user id exists in /etc/passwd, the mail is accepted by OpenSMTPD and 
>>> delivered to dovecot.
>>> Dovecot only uses LDAP so it doesn???t care about users not being in 
>>> /etc/passwd since they exist un LDAP ; tested using direct telnet on LMTP 
>>> port.
>>>
>>> If the user id does not exist in /etc/passwd (but exists in LDAP), the mail 
>>> gets rejected by OpenSMTPD with error + 550 Invalid recipient ;.
>>>
>>> Is this expected or does it reflect a miss-configuration on the LDAP size ?
>>> Sounds weird to me that virtual user must exist in /etc/passwd :)
>>
>> AFAIK, this is "by design", deliver to ... expects a local system user.
>> As workaround, you might use a userbase table (see smtpd.conf(5)) to map
>> all your virtual users to a single (fake) system users.  Also, you might
>> play with deliver to lda instead of lmtp.
>>
>
> OK, I’ll dig the LDA ; although Dovecot seem to recommend LTMP over LDA.
>

OpenSMTP, when using a virtual user table mapping will fork to that
user to issue the mda (opensmtp) -> lda (dovecot).  This works quite
well.  I did try to do what you did with LTMP, but that just wasted
time.  In the end, I was happy how opensmtp handled the lda
connection, thus didn't mind deviating from the recommended dovecot
setting.

Cheers!

-- 
"If my calculations are correct, when this baby hits 88MPH, you're
gonna to see some serious shit" - Emmett "Doc" Brown

--
You received this mail because you are subscribed to [email protected]
To unsubscribe, send a mail to: [email protected]

Reply via email to