---
name: "vrfydmn_ldap"
section: "5"
platform: "linux"
package: "vrfydmn"
version: "0.11.0-4"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/vrfydmn_ldap"
---

# vrfydmn\_ldap(5)

lookup RFC5322 From:-addresses in an LDAP database.

## NAME

vrfydmn\_ldap - lookup RFC5322 From:-addresses in an LDAP database.

## SYNOPSIS

**vrfydmn** -l *ldap:///etc/vrfydmn/ldap.cfg*

## DESCRIPTION

vrfydmn uses lists and tables to lookup mail related informations. A lookup tables may be an LDAP database.

In order to use LDAP lookups, specify a path to a file holding LDAP connection and query configuration. The path must be given when **vrfydmn** is invoked on command line:

**vrfydmn** -l *ldap:///etc/vrfydmn/ldap.cfg*

## OPTIONS

**base** (default: None)

The RFC2253 base DN at which to conduct the search, e.g.

```
base = ou=maildomains,dc=example,dc=com
```

**bindmethod** (default: None)

The method used when binding to the LDAP server. Valid options are simple or sasl.

**cacert** (default: None)

Specifies the file that contains certificates for all of the Certificate Authorities the client will recognize.

```
cacert = /etc/ssl/certs/cacerts.pem
```

**cert** (default: None)

Specifies the file that contains the client certificate.

```
cert = /etc/ssl/certs/mail.example.com-crt.pem
```

**filter** (default: None)

The RFC2254 filter used to search the directory, e.g.

```
filter = (domain=*)
```

**host** (default: None)

The name of the host running the LDAP server, e.g.

```
host = 127.0.0.1, ldap.example.com
```

**key** (default: None)

Specifies the file that contains the private key that matches the certificate stored in the cert file. Currently, the private key must not be protected with a password, so it is of critical importance that the key file is protected carefully.

```
key = /etc/ssl/private/mail.example.com-key.pem
```

**reqcert** (default: **demand**)

Specifies what checks to perform on server certificates in a TLS session, if any. The \<level\> can be specified as one of the following keywords:

**never**

The client will not request or check any server certificate.

**allow**

The server certificate is requested. If no certificate is provided, the session proceeds normally. If a bad certificate is provided, it will be ignored and the session proceeds normally.

**try**

The server certificate is requested. If no certificate is provided, the session proceeds normally. If a bad certificate is provided, the session is immediately terminated.

**demand**

The server certificate is requested. If no certificate is provided, or a bad certificate is provided, the session is immediately terminated. This is the default setting.

**result\_attrs** (default: None)

The name of the attribute whose value the query should return.

```
result_attrs = domain
```

**saslmech** (default: None)

The mechanism outgoing’s LDAP client should use, when it sasl-binds to the remote LDAP server. Valid options are currently PLAIN or EXTERNAL.

**scope** (default: None)

The LDAP search scope: sub, base, or one.

**usetls** (default: No)

A Boolean option to enable or disable usage of TLS when connecting to the LDAP server. Valid options are Yes or No.

## SEE ALSO

[vrfydmn(8)](/vrfydmn/8.md)

## BUGS

There are no known bugs so far. Please submit bugs to https://github.com/croessner/vrfydmn/issues.

## AUTHOR

Christian Roessner \<c@roessner.co\> wrote the program.

Patrick Ben Koetter \<p@sys4.de\> wrote this man page.

## RESOURCES

vrfydmn’s home is at https://github.com/croessner/vrfydmn.

## COPYING

Copyright (C) 2014-2015 Christian Roessner. Free use of this software is granted under the terms of the GNU General Public License (GPL).