vrfydmn_ldap - lookup RFC5322 From:-addresses in an LDAP database.

Author

Christian Roessner <c@roessner.co> wrote the program. Patrick Ben Koetter <p@sys4.de> wrote this man page.

Bugs

There are no known bugs so far. Please submit bugs to https://github.com/croessner/vrfydmn/issues.

Copying

Description

vrfydmn uses lists and tables to lookup mail related informations. A lookup tables may be an LDAP database. In order to use LDAP lookups, specify a path to a file holding LDAP connection and query configuration. The path must be given when vrfydmn is invoked on command line: vrfydmn -l ldap:///etc/vrfydmn/ldap.cfg

Name

vrfydmn_ldap - lookup RFC5322 From:-addresses in an LDAP database.

Options

base (default: None) The RFC2253 base DN at which to conduct the search, e.g. base = ou=maildomains,dc=example,dc=com bindmethod (default: None) The method used when binding to the LDAP server. Valid options are simple or sasl. cacert (default: None) Specifies the file that contains certificates for all of the Certificate Authorities the client will recognize. cacert = /etc/ssl/certs/cacerts.pem cert (default: None) Specifies the file that contains the client certificate. cert = /etc/ssl/certs/mail.example.com-crt.pem filter (default: None) The RFC2254 filter used to search the directory, e.g. filter = (domain=*) host (default: None) The name of the host running the LDAP server, e.g. host = 127.0.0.1, ldap.example.com key (default: None) Specifies the file that contains the private key that matches the certificate stored in the cert file. Currently, the private key must not be protected with a password, so it is of critical importance that the key file is protected carefully. key = /etc/ssl/private/mail.example.com-key.pem reqcert (default: demand) Specifies what checks to perform on server certificates in a TLS session, if any. The <level> can be specified as one of the following keywords: never The client will not request or check any server certificate. allow The server certificate is requested. If no certificate is provided, the session proceeds normally. If a bad certificate is provided, it will be ignored and the session proceeds normally. try The server certificate is requested. If no certificate is provided, the session proceeds normally. If a bad certificate is provided, the session is immediately terminated. demand The server certificate is requested. If no certificate is provided, or a bad certificate is provided, the session is immediately terminated. This is the default setting. result_attrs (default: None) The name of the attribute whose value the query should return. result_attrs = domain saslmech (default: None) The mechanism outgoing’s LDAP client should use, when it sasl-binds to the remote LDAP server. Valid options are currently PLAIN or EXTERNAL. scope (default: None) The LDAP search scope: sub, base, or one. usetls (default: No) A Boolean option to enable or disable usage of TLS when connecting to the LDAP server. Valid options are Yes or No.