On 10/23/2013 2:55 PM, Daniel L. Miller wrote:
> Not using exchange.
>
> I do have a different user, same domain, in a contact.  But so far I
> haven't been able to come with an LDAP search that would reveal that
> contact using the LDAP filters setup in ASSP.
>
Ok.  I THINK I got it killed - and it was in part having the external 
addresses in LDAP (in different subtree, but there nonetheless).

Took a while to figure out how to write the necessary LDAP filter - but 
I think I've got it now.  If it will help anyone else I'll share.  My 
LDAP setup includes my base, and the following subtrees:

dc=domain,dc=local
ou=MailDomains,dc=domain,dc=local
ou=users,dc=domain,dc=local
ou=aliases,dc=domain,dc=local
ou=contacts,dc=domain,dc=local

The breaking point was I started making entries into contacts - and my 
indiscriminate filter picked them up.  And now, even though I've got 
both ldLDAPRoot and LDAPRoot set to where ou=contacts shouldn't be 
visible (I moved it to a different base), ASSP still appears to be 
either ignoring those root settings or something else is wrong. Either 
way, I made my filters specific:

(&(ou:dn:=MailDomains)(dc=DOMAIN))

So even though ldLDAPRoot has "ou=MailDomains,dc=domain,dc=local" this 
filter ensures it only checks the ou=MailDomains subtree.  Then some 
magic for local user/alias checks:

(&(|(ou:dn:=aliases)(ou:dn:=users))(|(mail=EMAILADDRESS)(cn=EMAILADDRESS)))

This searches both the ou=aliases and ou=users subtrees - but only those 
subtrees.  Hope this helps someone.

-- 
Daniel


------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135991&iu=/4140/ostg.clktrk
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to