All,
I've posted aliases2ldap, a VBScript that automatically adds IMail
aliases to an 8.1x OpenLDAP address book. Normally, IMail does not
show aliases in the address book, only users. With aliases2ldap
running periodically, aliases will be shown as well.
You may find it generally useful to provide your aliases to LDAP
clients. However, this script was specifically written as a companion
to the ldap2aliases script, which replicates LDAP data to a remote
IMail MX to combat dictionary attacks. You periodically run
aliases2ldap on the mailbox server to make sure both and aliases are
in the LDAP directory, while periodically running ldap2aliases on the
MX to pull all the LDAP data over.
The script may be easily scheduled using Windows Task Scheduler.
Notes:
- If you were planning to run ldap2aliases and don't have any
aliases in use, you don't need to run this script. Or, if you have
just a couple of standard aliases in use, like 'abuse' and
'postmaster,' you may find it easier to just change these aliases
into users with permanent forwards. You wouldn't need to run
aliases2ldap in that case, since the users would automatically be
visible via LDAP.
- IMail publishes users under ou=people, o=mail.example.com, where
mail.example.com is the virtual host name. Aliases2ldap leaves
this information untouched, but adds a new Organizational Unit
(OU) ou=_aliases under o=mail.example.com for the alias objects.
This gives you a choice in LDAP client apps such as Outlook. If
you continue to set the search base to
ou=people,o=mail.example.com (current best practice), users will
see only the user objects, which may be desirable. If you "open
up" the search base to o=mail.example.com, most client apps will
then search the entire subtree, showing both aliases and users.
It's up to you.
- An IMail 'Init LDAP' will erase all of the information added by
aliases2ldap. It will be re-added whenever the script is next run.
'Sync LDAP' will not affect the additional data.
System requirements:
- IMail 8.12 w/LDAP running on the mailbox server.
- Incoming TCP 389 open only if running with ldap2aliases on a
remote MX.
Support:
- Please post support questions as [OT] to the IMail or Declude
forums to create a public archive.
Download:
http://www.mailmage.com/products/software/freeutils/aliases2ldap/download/release/
http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/
--Sandy
------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
Defuse Dictionary Attacks: Turn Remote Mailboxes into Aliases on your IMail MX!
http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/