[Exim] Recipient checking: LDAP

Exim 4.22, openldap


I'd like to check user once rather in each router. Where is the best
place place
to do this? I tried creating a separate router like this, so
that if it failed no more routers are tried, but it didn't work:

check_recipient:
 driver redirect
 hide condition = ${if and { \
        { eq {${lookup ldap {user="cn=admin,dc=localsurface,dc=com" \
        pass=PASS
ldap:///cn=${quote_ldap:$local_part},ou=${quote_ldap:$domain}, \
        dc=localsurface,dc=com?cn?sub?}}}{$local_part}} \
        { eq {${lookup ldap {user="cn=admin,dc=localsurface,dc=com" \
        pass=PASS
ldap:///cn=${quote_ldap:$local_part},ou=${quote_ldap:$domain}, \
        dc=localsurface,dc=com?accountStatus?sub?}}}{true}}} \
        {yes}{no}}
 hide data = ${lookup ldap {user="cn=admin,dc=localsurface,dc=com"
pass=PASS \
        ldap:///cn=${quote_ldap:$local_part},ou=${quote_ldap:$domain},\
        dc=localsurface,dc=com?mail?sub?}}
 no_more

Is this the way to do it or is there another way with ACLS which I've
also tried like
this, but again it didn't work:

acl_check_rcpt:

accept condition [using same as above]

THanks,

--
Craig Jackson
cjackson@???