## sender was presumably checked upstream, and we can believe that
## the name has been transmitted honestly.
accept condition = ${if def:tls_peerdn}
+ set acl_m_user = ${if match_address{$authenticated_sender} \
+ {*@CONF_master_domain} \
+ {${local_part:$authenticated_sender}}}
## If this is submission, and the client has authenticated, then we
## check that the name matches the user.