User:Stefan.constantin

2006-11-27T12:25:42Z

Stefan.constantin:

e_mail: stefan.constantin_FARA_SPAM_VA_ROG_gmail.com<br>
yahoo id: cupubboy

User:Stefan.constantin

2006-11-27T12:24:55Z

Stefan.constantin:

Email: stefan.constantin_FARA_SPAM_VA_ROG_gmail.com
yahoo id: cupubboy

Talk:Postfix tls mysql dovecot

2006-11-27T09:38:08Z

Stefan.constantin:

27.11.2006 - Stefan Constantin: Am modificat campul "lock" din tabelul "users", acum se numeste "block". Problema era ca pe versiuni recente de mysqld lock este un cuvant cheie rezervat si query-ul de creare a tableului esua. Cu toate ca aceasta schimbare n-ar trebui sa afecteze nimic altceva din tutorial .. orice alte scripturi create din informatii continute de acest tutorial s-ar putea sa necesite modificari .. daca gasesc pe site vreunul am sa il modific (sansele sunt mari sa nu fie cazul).

Talk:Postfix tls mysql dovecot

2006-11-27T09:37:16Z

Stefan.constantin:

Am modificat campul "lock" din tabelul "users", acum se numeste "block". Problema era ca pe versiuni recente de mysqld lock este un cuvant cheie rezervat si query-ul de creare a tableului esua. Cu toate ca aceasta schimbare n-ar trebui sa afecteze nimic altceva din tutorial .. orice alte scripturi create din informatii continute de acest tutorial s-ar putea sa necesite modificari .. daca gasesc pe site vreunul am sa il modific (sansele sunt mari sa nu fie cazul).

Postfix tls mysql dovecot

2006-11-27T09:33:57Z

Stefan.constantin: /* Configurarea bazei de date in mysql */

==Scopul Ghidului==
Creearea unui mailserver cu ajutorul programelor postfix,mysql, dovecot si interfata de webmail squirrelmail.
In loc de clasicul cyrus saslauth o sa folosim dovecot-sasl, postfix-ul 2.3 are suport pentru acesta.

==Nota==
Instalarea s-a facut pe o distributie Slackware 10.2 cu mysql instalat si apache. Acest ghid nu se va ocupa de instalarea serverului mysql si nici de configurarea si instalarea serverului de web apache.
In functie de distributia folosita unele comenzi necesita o mica modificare de cale (vezi mysql in configurarea postfix-ului).

==Compilarea si instalarea programelor postfix si dovecot==
In momentul scrierii acestui ghid versiunile folosite au fost cele mai noi.

Instalare postfix
<code><sh/>wget http://postfix.imar.ro/postfix-release/experimental/postfix-2.3-20060202.tar.gz
tar -zxf postfix-2.3-20060202.tar.gz
cd postfix-2.3-20060202
make tidy
make -f Makefile.init makefiles 'CCARGS=-DHAS_MYSQL -DUSE_TLS -I/usr/include/mysql -DUSE_SASL_AUTH \
-DDEF_SASL_SERVER=\"dovecot\"' 'AUXLIBS=-L/usr/lib/mysql -lmysqlclient -lz -lm -lssl -lcrypto'
make
useradd postfix
groupadd postdrop
make install</code>

Instalare dovecot
<code><sh/>wget http://www.dovecot.org/releases/dovecot-1.0.beta2.tar.gz
tar -zxf dovecot-1.0.beta2.tar.gz
cd dovecot-1.0.beta2
./configure --prefix=/usr --sysconfdir=/etc/dovecot --with-mysql
make
make install</code>

==Crearea unui certificat self-signed==
<code><sh/>cd /etc/postfix
mkdir ssl
cd ssl
openssl req -new -x509 -nodes -out smtpd.pem -keyout smtpd.pem -days 3650</code>

==Configurare postfix==
main.cf:
<pre>
queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
mail_owner = postfix
unknown_local_recipient_reject_code = 550
mynetworks_style = subnet
mailbox_command =
debug_peer_level = 2
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
xxgdb $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/sbin/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
setgid_group = postdrop
html_directory = no
manpage_directory = /usr/man/
sample_directory = /etc/postfix
mynetworks = 127.0.0.0/8
readme_directory = no
myhostname = domeniu.ro
smtpd_sasl_local_domain =
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,rejec
t_unauth_destination
inet_interfaces = all
transport_maps = mysql:/etc/postfix/mysql_virtual_transport.cf
virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_mailbox_base = /home/mails
virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_limit = 51200000
virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_transport = virtual
virtual_uid_maps = mysql:/etc/postfix/uid.cf
virtual_gid_maps = mysql:/etc/postfix/gid.cf
virtual_create_maildirsize = yes
virtual_mailbox_extended = yes
virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql_virtual_mailbox_limit_maps
.cf
virtual_mailbox_limit_override = yes
virtual_maildir_limit_message = Sorry, the user's maildir has no space available
in their inbox.
virtual_overquota_bounce = yes
relay_domains = mysql:/etc/postfix/mysql_relay_domains_maps.cf
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_limit_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_limi
t_maps.cf
proxy_read_maps = $local_recipient_maps $virtual_alias_maps
$virtual_alias_domains $virtual_mailbox_maps $mydestination $virtual_mailbox_d
omains
$relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps
$recipient_canonical_maps $relocated_maps $transport_maps $mynetworks
$virtual_mailbox_limit_maps
smtpd_tls_auth_only = no
smtp_use_tls = yes
smtpd_use_tls = yes
smtpd_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.pem
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.pem
smtpd_tls_CAfile = /etc/postfix/ssl/smtpd.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
</pre>

gid.cf:
<pre>
hosts=localhost
user=mailuser
password=mailpass
dbname=email
table=users
select_field=gid
where_field=userid
</pre>

uid.cf:
<pre>
hosts=localhost
user=mailuser
password=mailpass
dbname=email
table=users
select_field=uid
where_field=userid
</pre>

mysql_relay_domains_maps.cf:
<pre>
hosts = localhost
dbname = email
user = mailuser
password = mailpass
table = domain
select_field = domain
where_field = domain
</pre>

mysql_virtual_alias_maps.cf:
<pre>
hosts = localhost
dbname = email
user = mailuser
password = mailpass
table = alias
select_field = goto
where_field = email
</pre>

mysql_virtual_domains_maps.cf:
<pre>
hosts = localhost
dbname = email
user = mailuser
password = mailpass
table = domain
select_field = domain
where_field = domain
</pre>

mysql_virtual_mailbox_limit_maps.cf:
<pre>
hosts = localhost
dbname = email
user = mailuser
password = mailpass
table = users
select_field = quota
where_field = userid
</pre>

mysql_virtual_mailbox_maps.cf:
<pre>
hosts = localhost
dbname = email
user = mailuser
password = mailpass
table = users
select_field = home
where_field = userid
</pre>

mysql_virtual_transport.cf:
<pre>
hosts = localhost
dbname = email
user = mailuser
password = mailpass
table = domain
select_field = transport
where_field = domain
</pre>

==Configurare dovecot==
dovecot.conf :
<pre>
base_dir = /var/run/dovecot/
protocols = imap pop3s imaps pop3
listen = *
ssl_disable = no
ssl_cert_file = /etc/postfix/ssl/smtpd.pem
ssl_key_file = /etc/postfix/ssl/smtpd.pem
disable_plaintext_auth = no
login_user = postfix
first_valid_uid = 400
mail_debug = no
default_mail_env = maildir:/home/mails/%h/
protocol imap {
}
protocol pop3 {
pop3_uidl_format = %08Xu%08Xv
}
auth default {
mechanisms = plain digest-md5 cram-md5
passdb sql {
args = /etc/dovecot/dovecot-mysql.conf
}
userdb sql {
args = /etc/dovecot/dovecot-mysql.conf
}
user = root
socket listen {
client {
path = /var/spool/postfix/private/auth
mode = 0666
}
}
}
</pre>

dovecot-mysql.conf:
<pre>
driver=mysql
default_pass_scheme = crypt
connect = host=localhost dbname=email user=mailuser password=mailpass
password_query = SELECT password FROM users WHERE userid = '%n'
user_query = SELECT home, uid , gid FROM users WHERE userid = '%n';
</pre>

==Configurarea bazei de date in mysql==
Se va folosi fisierul postdov.sql pentru crearea tabelelor in baza de date cu numele email.
I se va da acces userului mailuser si cu parola mailpass drept de citire pentru baza de date email.
Atentie: Este recomandat sa schimbati parola si userul in toate fisierele de configurare.

postdov.sql:
<code><sql/>--
-- Table structure for table `alias`
--

CREATE TABLE alias (
email varchar(255) NOT NULL default '',
goto text NOT NULL,
domain varchar(255) NOT NULL default '',
PRIMARY KEY (email),
KEY domain (domain)
) TYPE=MyISAM;

--
-- Dumping data for table `alias`
--

INSERT INTO alias VALUES ('root@domeniu.ro','administrator@domeniu.ro','domeniu.ro');
--
-- Table structure for table `domain`
--

CREATE TABLE domain (
domain varchar(255) NOT NULL default '',
transport varchar(50) NOT NULL default 'virtual',
PRIMARY KEY (domain)
) TYPE=MyISAM;

--
-- Dumping data for table `domain`
--

INSERT INTO domain VALUES ('domeniu.ro','virtual');

--
-- Table structure for table `users`
--
--
-- Table structure for table `users`
--

CREATE TABLE users (
userid varchar(255) NOT NULL default '',
password varchar(255) NOT NULL default '',
home varchar(255) NOT NULL default '',
quota int(10) NOT NULL default '0',
domain varchar(255) NOT NULL default '',
uid int(11) NOT NULL default '0',
gid int(11) NOT NULL default '0',
block enum('y','n') NOT NULL default 'n'
) TYPE=MyISAM;

--
-- Dumping data for table `users`
--

INSERT INTO users VALUES ('administrator','$1$3totus54$6J1/1ETB/LdZHHt5D1bv7.','root/',0,'domeniu.ro',400,400,'n');</code>

Fisierul postdov.sql creeaza tabelele necesare pentru postfix si dovecot, precum si un cont administrator si un alias catre acest cont. Parola implicita pentru acest cont este '123456'.
Parola este de tipul MD5. Un mic script pentru generarea parolelor poate fi urmatorul.
<code><html/>
<form method="post" action="'.$_SERVER['PHP_SELF'].'">
<input type="text" name="pass" size="13">
<input type="submit" name="doit" value="generate">
</form>
<?php
if (CRYPT_MD5 == 1 && $_POST['pass']) {
echo 'MD5: ' . crypt($_POST['pass'], '$1$3totus54$') . "\n";
};
?></code>

==Testarea serverului==
Va trebui sa creeam intai directorul in care vor fi casutele postale
<pre>
mkdir /home/mails
</pre>

Pornirea serverelor binenteles si mysql trebuie sa fie pornit si configurat corespunzator.
<pre>
postfix start
dovecot
</pre>

Verificam daca totul este in regula pana acum:
Pentru postfix
<pre>
telnet 127.0.0.1 25
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
220 domeniu.ro ESMTP Postfix
ehlo localhost
250-domeniu.ro
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH PLAIN DIGEST-MD5 CRAM-MD5
250-AUTH=PLAIN DIGEST-MD5 CRAM-MD5
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
</pre>

Si pentru dovecot
<pre>telnet 127.0.0.1 143
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
* OK Dovecot ready.
</pre>

==Instalare si configurare Squirrelmail==

==Final==

[[Category:HowTo]]
[[Category:Networking]]

linux360 - User contributions [en]

User:Stefan.constantin

User:Stefan.constantin

Talk:Postfix tls mysql dovecot

Talk:Postfix tls mysql dovecot

Postfix tls mysql dovecot