postfix/templates/ldap_aliases.conf

<%-
# TODO I am sure that a more elegant way could be find
query_string = ''
aliases_group.each do |g|  
    query_string += '(memberOf=cn=' + g + ',ou=Group,' + dc_suffix + ')'
end 
-%>
server_host = ldaps://ldap.<%= domain %>:636
search_base = <%= dc_suffix %>
query_filter = (&(uid=%u)(|<%= query_string %>))
result_attribute = mail
bind = yes
bind_dn = cn=postfix-<%= hostname %>,ou=System Accounts,<%= dc_suffix %>
bind_pw = <%= ldap_password %>
# postfix complain on url 
# warning: dict_ldap_open: URL scheme ldaps requires protocol version 3
version = 3 
domain = <%= domain %>
1	<%-
2	# TODO I am sure that a more elegant way could be find
3	query_string = ''
4	aliases_group.each do \|g\|
5	query_string += '(memberOf=cn=' + g + ',ou=Group,' + dc_suffix + ')'
6	end
7	-%>
8	server_host = ldaps://ldap.<%= domain %>:636
9	search_base = <%= dc_suffix %>
10	query_filter = (&(uid=%u)(\|<%= query_string %>))
11	result_attribute = mail
12	bind = yes
13	bind_dn = cn=postfix-<%= hostname %>,ou=System Accounts,<%= dc_suffix %>
14	bind_pw = <%= ldap_password %>
15	# postfix complain on url
16	# warning: dict_ldap_open: URL scheme ldaps requires protocol version 3
17	version = 3
18	domain = <%= domain %>