Hello,

I manage a server with a mix of a few local users on a OpenSMTPD server and all others users authenticate via an LDAP directory.

All user on registered on the LDAP directory received emails, local users get "Invalid recipient":

Aug 22 14:14:16 mx-01 smtpd[15911]: 1413a338b810bc82 smtp failed-command command="RCPT TO:<m...@passerelles34.fr>" result="550 Invalid recipient: <m...@passerelles34.fr>" Aug 22 14:14:17 mx-01 smtpd[15911]: 1413a338b810bc82 smtp disconnected reason=disconnect

I confirm the user exist on the OpenSMTPD server.

~$ getent passwd mob
mob:x:1079:1011:Mob,,,:/home/mob:/bin/bash

Here the configuration files :

pki mx-01.passerelles34.fr cert "/etc/letsencrypt/live/mx-01.passerelles34.fr/fullchain.pem" pki mx-01.passerelles34.fr key "/etc/letsencrypt/live/mx-01.passerelles34.fr/privkey.pem"

table aliases db:/etc/aliases.db
table sympa db:/etc/mail/sympa/aliases.db
table ldap ldap:/etc/mail/ldap.conf

filter check_dyndns phase connect match rdns regex { '.*\.dyn\..*', '.*\.dsl\..*' } \
    disconnect "550 no residential connections"

filter check_rdns phase connect match !rdns \
    disconnect "550 no rDNS"

filter check_fcrdns phase connect match !fcrdns \
    disconnect "550 no FCrDNS"

filter "rspamd" proc-exec "filter-rspamd"

smtp max-message-size "20M"

#listen on enp1s0 tls pki mx-01.passerelles34.fr auth-optional filter rspamd
listen on enp1s0 tls pki mx-01.passerelles34.fr auth-optional filter { check_dyndns, check_rdns, check_fcrdns, rspamd } listen on enp1s0 port submission tls-require pki mx-01.passerelles34.fr auth filter rspamd
listen on enp10s0 tls pki mx-01.passerelles34.fr auth-optional filter rspamd
listen on enp10s0 port submission tls-require pki mx-01.passerelles34.fr auth filter rspamd

action "relaysympa" relay host 192.168.78.70
action "mailinglist" forward-only alias <sympa>
action "inbound" maildir junk userbase <ldap> alias <aliases>
action "outbound" relay

match from any for domain "sympa.passerelles34.fr" action "relaysympa"
match from any for rcpt-to <sympa> action "mailinglist"
match from any for domain "passerelles34.fr" action "inbound"
#match for local action "local"
match from auth for any action "outbound"


Here the OpenSMTPD PAM file /etc/pam.d/smtpd :

#%PAM-1.0

account     [default=bad success=ok user_unknown=ignore] pam_ldap.so debug

auth            sufficient      pam_unix.so nullok
auth            sufficient      pam_ldap.so debug
auth            required        pam_deny.so


I cannot put those local user on the LDAP for some reason I doesn't control and want my local users to receive their emails.

Am I made something wrong I didn't see, Any clue is good.

Best regards,
Yan

Reply via email to