alias_database using ldap with kerberos authentication

[Mark Clarke <Mark@xxxxxxxxxxxxxxxxxxxxxx>]

Hi there,

I have the following setup.

Openldap setup to authenticate users via kerberos. I am using heimdal
kerberos implementation which allows for the principles to be stored in
the ldap server

I have postfix which is setup to use ldap for alias lookups. I am not
sure though if postfix can support kerberos authentication for the alias
database. Here is the relevant section from main.cf. I have created a
principle postfixuser with the password secret.


alias_maps =ldap:ldapsource
ldapsource_server_host = slain.abc.co.za
ldapsource_search_base = dc=abc,dc=co,dc=za
ldapsource_query_filter = (mail=%$)
ldapsource_bind_dn = cn=postfixuser,dc=kerbeos,dc=abc,dc=co,dc=za
ldapsource_bind_pw = secret
ldapsource_start_tls = yes
ldapsource_tls_ca_cert_file = /etc/ssl/ldap.pem
ldapsource_result_attribute = mail
lmtp_cache_connection =NO



Should this work?

thanks
Mark