I use Google Apps for Work. Let's say I have:
primarydomain.com
And another alias domain:
aliasdomain.com
As long as I send emails from primary domain both SPF and DKIM result perfectly aligned.
However, when I send emails from alias domain SPF fails to align for a valid reason that it is actually primarydomain.com that is sending emails.
Is there any way to align SPF for alias domain?
I am using Postfix as a gateway for my domain and need it to change or rewrite the Envelope From address to match the From header. For example, the From: header is "[email protected]" and the Envelope From is "[email protected]". I want Postfix to make the Envelope From "[email protected]" before relaying it on. I took a look at the Postfix Address Rewriting document but couldn't find anything that matched my use case.
(In case you're curious why I need to do this: Gmail uses the same Envelope From when sending from a particular account, no matter which From: address you choose to use. I would prefer not to disclose the account being used to send the email. Also, it messes with SPF/DMARC domain alignment - see 4.2.2 of the DMARC draft spec.)
I see tons of solutions for allowing Google Apps to use external AD and LDAP services for login.
However, I already have a ton of users setup in Google Apps already, and I'm trying to go the other way around. That is, I'd like to allow users to log into my external servers using the accounts I created in Google Apps.
Has anyone successfully discovered a way to use a Google Apps domain as an Open Directory, Active Directory, or LDAP provider?
I'm using the new AWS GUI for Route 53 to setup my domain records. However, the AWS console won't accept the recommended Google Apps SPF record, v=spf1 include:_spf.google.com ~all (found here).
It keeps giving me an error stating
The record set could not be saved because:
- The Value field contains invalid characters or is in an invalid format.
This happens when saving as SPF and TXT. Any ideas?
We're a small shop running Google Apps (Enterprise) for our email needs. Love it. Internally, we're using Windows AD (2003). No complaints there either.
I'd like to get some method of SSO going between AD and Google Apps such that AD is the only place my folks have to manage (and periodically CHANGE!) passwords.
I've looked over google's "tfm"s in the past, but I guess I just don't quite get it. Has anyone does this? If so, would you be willing to share how? Can it be done without a huge amount of complexity and expense?