Very Quick LDAP integration

General eFa discussion
Post Reply
Widmo
Posts: 17
Joined: 23 Jun 2014 12:45

Very Quick LDAP integration

Post by Widmo »

I've done small blog post:

http://blog.widmo.biz/postfix-check-use ... tory-ldap/

I think it's so easy to implement, maintain, configure, that should be included in project.

Cheers.
buzzzo
Posts: 94
Joined: 03 Feb 2014 09:09

Re: Very Quick LDAP integration

Post by buzzzo »

This is good and bad:

GOOD: no need to user relay_recipient map and thus the need to create a script to populate it
THE BAD: if someone tries to ddos your postfix gateway you have two side effects:
a) down of the postfix gateway
b) down of your internal ldap server flooded by the ldap query

MITIGATION: use proxymap on postfix gateway side.
Widmo
Posts: 17
Joined: 23 Jun 2014 12:45

Re: Very Quick LDAP integration

Post by Widmo »

c) comment line in postfix with queries to ldap.
buzzzo
Posts: 94
Joined: 03 Feb 2014 09:09

Re: Very Quick LDAP integration

Post by buzzzo »

your c) is supposed to be bad ?
Post Reply