postfix/templates/ldap_aliases.conf

<%-
# TODO I am sure that a more elegant way could be find
query_string = ''
aliases_group.each do |g|  
    query_string += '(memberOf=cn=' + g + ',ou=Group,' + dc_suffix + ')'
end 

ldap = ldap_servers.map { |l| "ldaps://#{l}:636" }
-%>
server_host = <%= ldap.join(' ') %>
search_base = <%= dc_suffix %>
query_filter = (&(uid=%u)(|<%= query_string %>))
result_attribute = mail
bind = yes
bind_dn = cn=postfix-<%= hostname %>,ou=System Accounts,<%= dc_suffix %>
bind_pw = <%= ldap_password %>
# postfix complain on url 
# warning: dict_ldap_open: URL scheme ldaps requires protocol version 3
version = 3 
domain = <%= domain %>
1	misc	1288	<%-
2			# TODO I am sure that a more elegant way could be find
3			query_string = ''
4			aliases_group.each do \|g\|
5			query_string += '(memberOf=cn=' + g + ',ou=Group,' + dc_suffix + ')'
6			end
7	misc	2335
8	misc	2345	ldap = ldap_servers.map { \|l\| "ldaps://#{l}:636" }
9	misc	1288	-%>
10	misc	2345	server_host = <%= ldap.join(' ') %>
11	misc	1287	search_base = <%= dc_suffix %>
12	misc	1288	query_filter = (&(uid=%u)(\|<%= query_string %>))
13	misc	1287	result_attribute = mail
14			bind = yes
15	misc	1290	bind_dn = cn=postfix-<%= hostname %>,ou=System Accounts,<%= dc_suffix %>
16	misc	1287	bind_pw = <%= ldap_password %>
17	misc	1294	# postfix complain on url
18			# warning: dict_ldap_open: URL scheme ldaps requires protocol version 3
19			version = 3
20	misc	1346	domain = <%= domain %>