Separate Domains and Virtual Users

[smithsm]

The article Supporting Multiple Domains with Postfix describes how to set up virtual “separate” domains with system users.

I need, however, to set up separate domains with virtual users (using the terminology in the Postfix: Definitive Guide). The article mentions that if you want virtual users and virtual domains to look into mysql setups. I have a 10 user license to OSX server but need about 30 email accounts total distributed over a dozen domains. So I don’t need the power (and complexity) of the mysql approach but I do need virtual users.

My biggest hangup is how to have both virtual users and system users. The cyrus docs I can find don’t really describe how to do that in os x. Or if I need virtual users I have to only have virtual users?

The Cyrus docs say that Cyrus has 4 authorization mechanisms. 1) Unix /etc/passwd 2) Kerberos 4 3) Kerberos 5 4) External ptloader.

Since the users I set up in workgroup manager do not show up in /etc/passwd and as far as I know I am not using kerberos, then I assume that apple is using 4) External ptloader authorization (LDAP?).

I just don’t know where to start. The Cyrus docs and the cyradmin docs don’t really discuss what the implications are of having some users authorized externally and coexisting with virtual users.

I have searched the web and can’t find a how to for separate domains with virtual users in os x server using cyrus and postfix.

Any help you can give would be appreciated.

[smithsm]

MacTroll,

Could you elaborate on what you mean by set file permissions to prevent them from logging into any of the other services?

Do I create them as local users or users under the default LDAP domain?

[smithsm]

In the article “Supporting Multiple Domains With Postfix” is says that to support mailing lists to add the domain to the mydestination line in main.cf and to NOT include the domain in /etc/postfix/virtual.

Does this mean that one can’t have a mailing list for a domain that is a virtual domain?

In other words is I want user [email protected] and [email protected] to be separate email accounts the I can’t have a mailing list for either domain1 or domain2?

The server admin only requests a name for a mailing list, not a domain. Is there some special way to have mailing list on anything but the server’s domain?

[Author]

Posts