Sorry, a bit busy, i come back on this.
Little recap: i'm using exim fetching LDAP user data, and i need to 'reject'
some recipient.
Jeremy Harris say:
> You could. But you might just as well do it in ACL, eg a "require"
> verb with a condition doing the ldap lookup looking for an active user.
Good. But my setup practically consider LDAP as a sources of ''aliases''
(gaio@ is also marco.gaiarin@, for example) and actual delivery happen only
on POSIX account.
I've setup this way because i've found in the past that there's no foolproof
way to know if LDAP query does not work because user does not exist, or
bcause LDAP server is down.
So actual delivery happen on POSIX account, where all the stack
(NSS/NSLCD/NSCD) do a very good caching/fail management.
Modifying the configuration now seems to me a bit ''expensive'', but if i
setup a 'negative router' that, based on a query on LDAP, do a reject could
be a feasable way?
If the query fail (because the user have to be deliverable, or because
simply the LDAP server does not respond), the router get skipped and so the
user delivered, right?!
I hope i was clear. Thanks.
--
``... La memoria conta veramente solo se tiene insieme l'impronta del
presente e il progetto del futuro, se permette di fare senza dimenticare
quel che si voleva fare, di diventare senza smettere di essere,
di essere senza smettere di diventare...'' (Italo Calvino)
