[Phamm] postfix strange prb

[Aldo Reset]

hi,

in my mx backup:
myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP Dites Bonjour
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# TLS parameters
smtpd_tls_cert_file=/etc/postfix/tls/mail2.example.crt
smtpd_tls_key_file=/etc/postfix/tls/t.tld.key
smtpd_tls_CAfile = /etc/postfix/tls/cacert.tld.pem
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.
# alias_maps = hash:/etc/aliases

myhostname = mail2.example.tld
mydestination = mail2.example.tld, localhost
mynetworks = 127.0.0.0/8
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all

#
# Settings required to support virtual mail delivery using lookups in
# the Postgres database.
#

# CONTROL DELIVER

message_size_limit = 7000000
Header_size_limit = 2048
line_length_limit = 102400
bounce_size_limit = 50000

smtp_connect_timeout = 15s
smtp_helo_timeout = 60s
bounce_queue_lifetime = 36h
maximal_queue_lifetime = 36h

# CONTROL DELIVRANCE
non_fqdn_reject_code            = 450
invalid_hostname_reject_code    = 450
maps_rbl_reject_code            = 450

allow_untrusted_routing = no
smtp_recipient_limit = 25
disable_vrfy_command = yes
strict_rfc821_envelopes = yes


smtpd_client_restrictions = permit_mynetworks
                            permit_sasl_authenticated
                            reject_rbl_client multi.uribl.com
                            reject_rbl_client dul.dnsbl.sorbs.net
                            reject_rbl_client sbl-xbl.spamhaus.tld
                            reject_rbl_client list.dsbl.tld
                            reject_rbl_client bl.spamcop.net
                            reject_rbl_client dnsbl.sorbs.net
                            reject_rbl_client ix.dnsbl.manitu.net
                            reject_rbl_client combined.rbl.msrbl.net
                            reject_rbl_client rabl.nuclearelephant.com
                            reject_rbl_client cbl.abuseat.tld
                            permit

smtpd_helo_required = yes
smptd_helo_restrictions =  permit_mynetworks
                           permit_sasl_authenticated
               reject_invalid_helo_hostname
                           reject_non_fqdn_helo_hostname
                           reject_non_fqdn_hostname
                           reject_invalid_hostname
                           reject_unknown_helo_hostname
                           reject_unknown_hostname
                           permit

# requirements for the sender address
smtpd_sender_restrictions =  permit_mynetworks
                             permit_sasl_authenticated
                             reject_non_fqdn_sender
                             reject_unknown_sender_domain
                             permit

smtpd_data_restrictions = reject_unauth_pipelining
                          reject_multi_recipient_bounce
                          permit

smtpd_recipient_restrictions = permit_mynetworks
                               permit_sasl_authenticated
                               check_sender_access 
hash:/etc/postfix/sender_checks
                   reject_unknown_client
                               reject_non_fqdn_sender
                               reject_non_fqdn_recipient
                               reject_unknown_sender_domain
                               reject_unknown_recipient_domain
                               reject_unauth_destination
                               reject_unlisted_recipient
                               permit

# main.cf specific for phamm
# on the mx backup
#  Copyright (c) 2005 Alessandro De Zorzi, Mirko Grava
#                  <phamm at rhx.it> http://phamm.rhx.it/
#
#  Permission is granted to copy, distribute and/or modify this document
#  under the terms of the GNU Free Documentation License, Version 1.2
#  or any later version published by the Free Software Foundation;
#  A copy of the license in DOCS.LICENSE file.

ldap_server_host = ldaps://ldap.example.tld:636
ldap_bind_dn = cn=admin,dc=example,dc=tld
ldap_bind_pw = secret
ldap_domain = dc=example,dc=tld
ldap_search_base = o=hosting,dc=example,dc=tld
ldap_version = 3
tls_cert = /etc/postfix/tls/mail2.example.tld.crt
tls_key = /etc/postfix/tls/example.tld.key

# MX Backup
mxb_server_host = $ldap_server_host
mxb_search_base = $ldap_search_base
mxb_domain = $ldap_domain
mxb_version = 3
mxb_bind_dn = $ldap_bind_dn
mxb_bind_pw = $ldap_bind_pw
mxb_start_tls = yes
mxb_query_filter = 
(&(&(vd=%s)(objectClass=VirtualDomain))(accountActive=TRUE)(delete=FALSE))
mxb_result_attribute = vd
mxb_cache = no
mxb_bind = yes
mxb_scope = one

aliasmap_server_host = $ldap_server_host
aliasmap_search_base = $ldap_search_base
aliasmap_version = 3
aliasmap_bind_dn = $ldap_bind_dn
aliasmap_bind_pw = $ldap_bind_pw
aliasmap_start_tls = yes
aliasmap_query_filter = 
(&(&(objectClass=VirtualMailAlias)(mail=%s))(accountActive=TRUE))
aliasmap_result_attribute = mail
aliasmap_cache = no
aliasmap_bind = yes


accountmap_server_host = $ldap_server_host
accountmap_search_base = $ldap_search_base
accountmap_version = 3
accountmap_bind_dn = $ldap_bind_dn
accountmap_bind_pw = $ldap_bind_pw
accountmap_start_tls = yes
accountmap_query_filter = 
(&(&(objectClass=VirtualMailAccount)(mail=%s))(accountActive=TRUE))
accountmap_result_attribute = mail
accountmap_cache = no
accountmap_bind = yes

relay_domains = $mydestination, ldap:mxb
relay_recipient_maps = hash:/etc/postfix/relay_recipients, 
ldap:accountmap, ldap:aliasmap


the prb if i do not put:
mxb_domain = $ldap_domain i have this message error:
mail2 postfix/master[30351]: warning: process 
/usr/lib/postfix/trivial-rewrite pid 30359 killed by signal 6
mail2 postfix/master[30351]: warning: /usr/lib/postfix/trivial-rewrite: 
bad command startup -- throttling

if i put: mxb_domain = $ldap_domain
it seems that have no connection to ldap server ?

any idea ?

bst regards.
Aldo