Hi,
I have a question about refint overlay.
Situation:
I have a ldap server maintaining a ldap tree of users, groups and email aliases like this:
--------------------------------------------------- dn: uid=user_a,ou=users,dc=example,dc=com mail:user_a@example.com
dn: uid=user_b,ou=users,dc=example,dc=com mail:user_b@example.com
dn: cn=group_a,ou=groups,dc=example,dc=com member: uid=user_a,ou=users,dc=example,dc=com
dn: cn=group_b,ou=groups,dc=example,dc=com member: uid=user_b,ou=users,dc=example,dc=com
dn: cn=alias_a,ou=emailAliases,dc=example,dc=com member: uid=user_a,ou=users,dc=example,dc=com member: uid=group_b,ou=users,dc=example,dc=com
dn: cn=alias_b,ou=emailAliases,dc=example,dc=com member: uid=user_b,ou=users,dc=example,dc=com member: uid=group_a,ou=users,dc=example,dc=com ---------------------------------------------------
Now, I have configured my SMTP server (specifically, postfix) to read email aliases from LDAP, and let postfix to recursively expand email aliases from ou=emailAliases,dc=example,dc=com until actual email address is resolved. (no problem here).
But, when I need to rename the user/group, I have to manually update the corresponding alias, and I figured refint overlay would be useful for me. I tried, but seems that it just do nothing. Below is my configuration. Did I missed something? Thank you very much.
------------------------- slapd.conf
allow bind_v2 include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema #include /etc/ldap/schema/nis.schema include /etc/ldap/schema/rfc2307bis.schema include /etc/ldap/schema/inetorgperson.schema include /etc/ldap/schema/mozillaabpersonalpha.schema include /etc/ldap/schema/misc.schema include /etc/ldap/schema/hdb.schema
pidfile /var/run/slapd/slapd.pid argsfile /var/run/slapd/slapd.args loglevel none modulepath /usr/lib/ldap moduleload back_hdb moduleload refint sizelimit 500 tool-threads 1 sasl-secprops minssf=0 sasl-realm EXAMPLE.COM sasl-host foo.example.com sasl-regexp "gidNumber=.*\+uidNumber=0,cn=peercred,cn=external,cn=auth" "cn=heimdal,dc=example,dc=com" authz-regexp "uid=root,cn=gssapi,cn=auth" "cn=admin,dc=example,dc=com" authz-regexp "uid=(.*),cn=example.com,cn=gssapi,cn=auth" "uid=$1,ou=users,dc=example,dc=com"
backend hdb
database config rootpw secret
database hdb suffix "dc=example,dc=com" directory "/var/lib/ldap" dbconfig set_cachesize 0 2097152 0 dbconfig set_lk_max_objects 1500 dbconfig set_lk_max_locks 1500 dbconfig set_lk_max_lockers 1500
index objectClass eq index ou eq index uidNumber eq index gidNumber eq index cn,sn,givenName eq,sub index mail eq,sub index uid eq,sub index memberUid,member eq index uniqueMember eq index displayName eq,sub index labeledURI eq index entryUUID eq index createTimestamp,modifyTimestamp eq index mozillaNickname sub index mozillaSecondEmail sub index nsAIMid sub index mozillaHomeLocalityName sub index mozillaHomeState sub index mozillaHomePostalCode sub index mozillaHomeCountryName sub index mailLocalAddress eq index krb5PrincipalName eq
lastmod on checkpoint 512 30
(ACL omitted)
overlay refint refint_attributes member refint_nothing "cn=admin"