Mailing List Archive

Help with Exim and LDAP
Hi all,

We are currently using Netscape Messaging and Netscape Directory
for emil. We want to convert this over to Exim and OpenLDAP.

I'm looking for documentation on how to configure Exim with LDAP,
and I can't seem to find decent information.

Specifically, what I want to know how to do is the following:
- use LDAP for aliasing and address verification
- use LDAP for SMTP AUTH
- use LDAP for forwarding and vacation messages

Basically, I want to use LDAP for everything. But I can't
find specific information (or even general information, in
some cases) on how to set up the config file to do this.

Being new to Exim, I'm having quite a bit of trouble with it.

Can someone point me in the right direction?

Thanks.

--
David L. Harfst Computerized Medical Systems
Senior Systems Engineer St. Louis, Missouri
mailto:harfst@cms-stl.com http://www.cms-stl.com
Re: Help with Exim and LDAP [ In reply to ]
Hi,

I'm using exim together with courier-imap with the following
information hosted in OpenLDAP (using a custom schema):

- Local domains (query for mail attribute "postmaster@domain")
- Aliases (query for mail attribute)
- Custom autoreplies (using self-defined attributes)
- Forwards with and without copy to original recipient (also using
self-defined attributes)
- Local users (query for the existence of the maildir location of an uid)
- Quota support (query for the quota of an uid and use it with
deliverquota from courier)

I didn't need SMTP AUTH yet, but that should be one of the easier things
to do.

I wrote a little web-interface based on PHP and JavaScript to manage all
of this (admin and user), but it's still buggy.

To put it in a nutshell: you can use LDAP for all the things you
mentioned. Take a closer look on chapter 9.9ff of the exim specification
and try to get the information out of LDAP for every router.

E.g.:
domainlist local_domains = @${lookup ldapm{\
ldap:///ou=Users,ou=Accounts,o=Example?uid?sub?\
(&(objectClass=mailAccount)(mail=postmaster@$domain))\
} { : $domain}{}}

Good luck!

Regards,
Daniel

> I'm looking for documentation on how to configure Exim with LDAP,
> and I can't seem to find decent information.
>
> Specifically, what I want to know how to do is the following:
> - use LDAP for aliasing and address verification
> - use LDAP for SMTP AUTH
> - use LDAP for forwarding and vacation messages
>
> Basically, I want to use LDAP for everything. But I can't
> find specific information (or even general information, in
> some cases) on how to set up the config file to do this.
>
> Being new to Exim, I'm having quite a bit of trouble with it.
>
> Can someone point me in the right direction?
>
> Thanks.
>
> --
> David L. Harfst Computerized Medical Systems
> Senior Systems Engineer St. Louis, Missouri
> mailto:harfst@c... http://www.cms-stl.com
Re: Help with Exim and LDAP [ In reply to ]
--
On Thu, Jun 20, 2002 at 10:34:08AM -0500, David L. Harfst wrote:

| I'm looking for documentation on how to configure Exim with LDAP,
| and I can't seem to find decent information.
|
| Specifically, what I want to know how to do is the following:

| - use LDAP for SMTP AUTH

I now know how to make this work, via 'ldapauth' and via PAM. See
http://lists.debian.org/debian-user/2002/debian-user-200206/msg03782.html
for info.

| - use LDAP for aliasing and address verification
| - use LDAP for forwarding and vacation messages
|
| Basically, I want to use LDAP for everything.

I want to do this at work too.

| But I can't find specific information (or even general information,
| in some cases) on how to set up the config file to do this.
|
| Being new to Exim, I'm having quite a bit of trouble with it.
|
| Can someone point me in the right direction?

The spec has some details on how LDAP works in exim. The spec doesn't
say a whole lot about LDAP because LDAP is "just another" lookup type.
You can use it anywhere a lookup is allowed.

One way to start out is with the 'eximconfig' script in the debian
package. It will generate a config file (for 3.xx) that follows one
of 4 common patterns of usage. It gives you a start from which you
can work with. Philip's release also comes with a sample config file.
Start with one of those and have the spec handy to read through a few
times.

HTH,
-D

--

The teaching of the wise is a fountain of life,
turning a man from the snares of death.
Proverbs 13:14

http://dman.ddts.net/~dman/

--
[ Content of type application/pgp-signature deleted ]
--