[postfix-jp:03786] Re: LDAP+SASL+Postfix (Virtual domain)

["yosimuta@xxxxxxxxx" <yosimuta@xxxxxxxxx>]

吉牟田です。
YamYas様、中満様 ありがとうございます。
多分、私の凡ミスとおもいつつ・・

YamYas様へ：
情報不足で申し訳ありません。今回、sasldbは（全く）使用して
いないのでよく分かりませが、多分関係ないと思われます。

以下、長くなりますので恐縮ですが、中満様ご指摘の、関連しそ
うな（疑わしい）ファイルの内容を示します。

お気づきの点や不足の情報があれば、ご指摘ください。
よろしくお願いします。

※ 前回のuser@example.comは、yoshimuta@xxxxxxと読み替えてください。
  なお, qdc.jpはテスト用の実ドメインです。

--- main.cf---------------------------------------------------------
# egrep '^[^#].*'  /etc/postfix/main.cf
queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
mail_owner = postfix
myhostname = mail.qdc.jp
mydomain = qdc.jp
myorigin = $mydomain
mydestination =
unknown_local_recipient_reject_code = 450
mynetworks = xx.xx.xx.xx/26, 127.0.0.0/8
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
debug_peer_level = 5
debugger_command =
         PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
         xxgdb $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/sbin/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
setgid_group = postdrop
manpage_directory = /usr/local/man
sample_directory = /etc/postfix
readme_directory = no
smtpd_sasl_auth_enable = yes
smtpd_recipient_restrictions = permit_sasl_authenticated,
   permit_mynetworks,
   permit_auth_destination,
   reject
virtual_mailbox_base = /
virtual_mailbox_maps = ldap:mbox
virtual_minimum_uid = 10012
virtual_uid_maps = static:10012
virtual_gid_maps = static:10012
transport_maps = ldap:transport
transport_server_host = localhost
transport_search_base = o=mailuser, dc=qdc, dc=jp
transport_query_filter = (domainName=%s)
transport_result_attribute = transport
virtual_mailbox_base = /
virtual_mailbox_maps = ldap:mbox
virtual_minimum_uid = 10012
virtual_uid_maps = static:10012
virtual_gid_maps = static:10012
virtual_mailbox_maps = ldap:mbox
mbox_server_host = localhost
mbox_search_base = o=mailuser, dc=qdc, dc=jp
mbox_query_filter = (&(|(mail=%s)(mailAlias=%s))(mailActive=TRUE))
mbox_result_attribute = mailDir
virtual_maps = ldap:deliver
deliver_server_host = localhost
deliver_search_base = o=mailuser, dc=qdc, dc=jp
deliver_query_filter = (&(|(mail=%s)(mailAlias=%s))(mailActive=TRUE))
deliver_result_attribute = mail, mailForward


--- saslauthd.conf------------------------------------------------------
# cat /usr/local/etc/saslauthd.conf
ldap_servers: ldap://localhost
ldap_search_base: o=mailuser, dc=qdc, dc=jp
ldap_filter: mail=%u

--- smtpd.conf----------------------------------------------------------
# cat /usr/local/lib/sasl2/smtpd.conf
pwcheck_method: saslauthd
mech_list: plain login

-----LDAP -------------------------------------------------------------
# ldapsearch -x -D "cn=Directory Manager, dc=qdc, dc=jp" -w secret -b ' \
  dc=qdc, dc=jp' '(objectclass=*)'

# extended LDIF
#
# LDAPv3
# base <dc=qdc, dc=jp> with scope sub
# filter: (objectclass=*)
# requesting: ALL
#

# qdc.jp
dn: dc=qdc,dc=jp
objectClass: dcObject
objectClass: organization
o: root
dc: qdc

# mailuser, qdc.jp
dn: o=mailuser,dc=qdc,dc=jp
objectClass: organization
o: mailuser

# jp, mailuser, qdc.jp
dn: dc=jp,o=mailuser,dc=qdc,dc=jp
objectClass: organization
objectClass: dcObject
o: mailuser
dc: jp

# sitemanager, mailuser, qdc.jp
dn: cn=sitemanager,o=mailuser,dc=qdc,dc=jp
objectClass: inetOrgPerson
objectClass: superAccount
cn: sitemanager
sn: sitemanager
givenName: sitemanager
userPassword:: xxxxxxxxxxxxxx
mailGroup: sitemanager

# qdc, jp, mailuser, qdc.jp
dn: dc=qdc,dc=jp,o=mailuser,dc=qdc,dc=jp
objectClass: organization
objectClass: dcObject
o: mailuser
dc: qdc

# admin, qdc, jp, mailuser, qdc.jp
dn: cn=admin,dc=qdc,dc=jp,o=mailuser,dc=qdc,dc=jp
objectClass: inetOrgPerson
objectClass: adminAccount
cn: admin
sn: admin
givenName: admin
userPassword:: xxxxxxxxxxxxxx
domainName: qdc.jp
domainDirectory: /home/mailuser/qdc.jp
transport: virtual
mailGroup: admin

# yoshimuta, qdc, jp, mailuser, qdc.jp
dn: cn=yoshimuta,dc=qdc,dc=jp,o=mailuser,dc=qdc,dc=jp
objectClass: top
objectClass: mailAccount
objectClass: inetOrgPerson
cn: yoshimuta
sn: YOSHIMUTA
givenName: Kozo
userPassword:: xxxxxxxxxxxxxx
homeDirectory: /home/mailuser/qdc.jp/yoshimuta
mail: yoshimuta@xxxxxx
mailAlias: yoshiko@xxxxxx
mailDir: /home/mailuser/qdc.jp/yoshimuta/Maildir/
mailActive: TRUE
domainName: qdc.jp
mailGroup: user
----------------------------
Passwordはxxxxxxxxxxxxxxにしています
取りあえず、以上です。
--
yosimuta yoshimuta@xxxxxxxxx