<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
Hallo Alexander,<br>
<br>
<blockquote
cite="mid:42663.213.157.4.156.1277477616.squirrel@nimrod.dscd.de"
type="cite">
<pre wrap=""># /etc/postfix/ldap-all_map.cf
#
# lookup for the dynamic all dispatcher alias
server_host = zcp.example.com
server_port = 389
version = 3
bind = no
search_base = ou=Aliases,dc=example,dc=com
scope = one
query_filter = (mail=%s)
special_result_attribute = memberURL
result_attribute = mail
</pre>
</blockquote>
...<br>
<blockquote
cite="mid:42663.213.157.4.156.1277477616.squirrel@nimrod.dscd.de"
type="cite">
<pre wrap="">Wo kommt dieses Resultat her - feature by design? Und besser noch, wie
verhindere ich dies?
</pre>
</blockquote>
Dass bei der Abfrage mit <a class="moz-txt-link-abbreviated" href="mailto:key=all@example.com">key=all@example.com</a> als value u.a. wieder
<a class="moz-txt-link-abbreviated" href="mailto:all@example.com">all@example.com</a> zurückkommt liegt an result_attribute = mail. Um das
abzustellen kannst du versuchen "result_attribute =" und
"leaf_result_attribute = mail" zu setzen. <br>
<br>
<a class="moz-txt-link-freetext" href="http://www.postfix.org/ldap_table.5.html">http://www.postfix.org/ldap_table.5.html</a><br>
<pre><b>leaf_result_attribute (default: empty)</b>
When one or more special result attributes are
found in a non-terminal (see above) LDAP entry,
leaf result attributes are excluded from the expan-
sion of that entry. This is useful when expanding
groups and the desired mail address attribute(s) of
the member objects obtained via DN or URI recursion
are also present in the group object. To only
return the attribute values from the leaf objects
and not the containing group, add the attribute to
the leaf_result_attribute list, and not the
result_attribute list, which is always expanded.
Note, the default value of "result_attribute" is
not empty, you may want to set it explicitly empty
when using "leaf_result_attribute" to expand the
group to a list of member DN addresses.</pre>
<br>
<pre>
Gruß,
Martin
</pre>
<br>
<br>
<pre class="moz-signature" cols="72">
</pre>
</body>
</html>