Re: [exim] LDAP router section - part 2

Top Page
Delete this message
Reply to this message
Author: Heiko Schlittermann
Date:  
To: exim-users
Subject: Re: [exim] LDAP router section - part 2
Stanczak Slawomir <sws@???> (Do 16 Sep 2010 15:42:53 CEST):
> On Thu, 16 Sep 2010, Stanczak Slawomir wrote:
>
> > local_delivery:
> > ---------------
> > debug_print = "T: local_delivery for $local_part@$domain"
> > driver = appendfile
> > directory = $home/Maildir
> [...]
>
> I changed it:
>
> local_delivery:
>    debug_print = "T: local_delivery for $local_part@$domain"
>    driver = appendfile
>    directory = ${lookup ldap {ldap:///UBASE?homeDirectory?one?uid=${local_part}}{$value/Maildir/}fail}
>    ---------------------------------------------------------------------------------------------------
>    create_directory
>    create_file = anywhere
>    delivery_date_add
>    envelope_to_add
>    return_path_add
>    maildir_format
>    directory_mode = 0700
>    mode = 0660
>    mode_fail_narrower = false
>    group = Debian-exim

>
> Exim find LDAP user and user directory but still it can't deliver message:
>
> 2010-09-16 15:28:39 1OwEVy-0003nv-TS == opr@???
> R=ldap_user T=local_delivery defer (13): Permission denied: cannot chdir
> to /home/prac/sec/opr/Maildir/


I'd guess, everything is written there: permission denied. I'd add
something like

    user = ${lookup ldap {ldap:///UBASE?uidNumber?one?uid=${quote_ldap:local_part}}}


to the transport. Iff your LDAP has the uidNumber attribute. But I
suppose it has, if you've already homeDirectory.

As a side note: This suggested setup gives the user all permissions to
the Maildir. I think, it's not wise, even it is simple. I would setup
the mailsystem as a black box, input is SMTP, access is IMAP and POP3,
nothing else.


    Best regards from Dresden/Germany
    Viele Grüße aus Dresden
    Heiko Schlittermann
-- 
 SCHLITTERMANN.de ---------------------------- internet & unix support -
 Heiko Schlittermann HS12-RIPE -----------------------------------------
 gnupg encrypted messages are welcome - key ID: 48D0359B ---------------
 gnupg fingerprint: 3061 CFBF 2D88 F034 E8D2  7E92 EE4E AC98 48D0 359B -