Validate LDAPS queries in Postfix with IPA CA

[jb3]

Now that lovelace is enrolled, we can use the automatically collected /etc/ipa/ca.crt file to validate the LDAPS connection.

This is dead simple to setup, all it needs is for the ldap tables used by Postfix to have the following line added:

tls_ca_cert_file = /etc/ipa/ca.crt
tls_require_cert = yes

(Source: https://www.postfix.org/ldap_table.5.html)

Once implemented, it should be validated the lookups still work with a query like:

joe@lovelace:~$ sudo postmap -q [email protected] ldap:/etc/postfix/ldap-registeredaddress.cf
[email protected]