Hallo
Ich habe keine lokalen User usw. Die Benutzerverwaltung funktioniert kompl. über die Datenbank v. Zarafa (MySQL). Ist zwar bez. Performance nicht so gut aber es sind ja nur 10 User. Bei größeren Umgebungen ist es vielleicht anders besser.
Ich habe jetzt nochmals die Auth. mit rimap getestet. Laut div. Anleitungen (Zarafa Forum,Postix Buch, http://www.postfix.org/SASL_README.html usw) sollte dieses auch funktionieren.
hier meine Änderungen
/etc/sasl2/smtpd.conf
pwcheck_method: saslauthd
mech_list: plain login
log_level: 3
/etc/sysconfig/saslauthd
SASLAUTHD_AUTHMECH="rimap -O meinedomain.at"
jetzt der Test mit testsaslauthd
Server-005:~ # testsaslauthd -u email@meinedomain.at -p Passwort
0: OK "Success."
Sollte eigentlich funktionieren
hier mein Postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
biff = no
broken_sasl_auth_clients = yes
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
defer_transports =
disable_dns_lookups = no
disable_mime_output_conversion = no
html_directory = /usr/share/doc/packages/postfix/html
inet_interfaces = all
inet_protocols = all
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_size_limit = 0
mailbox_transport = zarafa:
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions = root
message_size_limit = 15240000
mydestination = $myhostname, localhost.$mydomain, localhost.localdomain, localhost
mydomain = meinedomain.at
myhostname = Server-005.meinedomain.at
mynetworks = 192.168.100.0/24,127.0.0.0/8
mynetworks_style = subnet
myorigin = /etc/mailname
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
relayhost =
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_restrictions =
smtpd_helo_required = yes
smtpd_helo_restrictions =
smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,check_relay_domains,reject_unauth_destination,
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous,
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_tls_CAfile = /etc/postfix/ssl/CAcert.pem
smtpd_tls_cert_file = /etc/postfix/ssl/cert.pem
smtpd_tls_key_file = /etc/postfix/ssl/key.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
strict_8bitmime = no
strict_rfc821_envelopes = no
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_gid_maps = static:303
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 303
virtual_transport = zarafa:
virtual_uid_maps = static:303
hier ein Auszug wenn ich eine Mail von intern verschicke
Apr 16 21:23:58 Server-005 postfix/smtpd[29566]: connect from localhost[127.0.0.1]
Apr 16 21:23:58 Server-005 postfix/smtpd[29566]: B695339E8A: client=localhost[127.0.0.1]
Apr 16 21:23:58 Server-005 postfix/cleanup[29623]: B695339E8A: message-id=<vmime.4da9ecce.73b5.bf0c25a2b67aaeae@SVCTS-005>
Apr 16 21:23:58 Server-005 postfix/qmgr[29545]: B695339E8A: from=<email@meinedomain.at>, size=8111, nrcpt=1 (queue active)
Apr 16 21:23:58 Server-005 postfix/smtpd[29566]: disconnect from localhost[127.0.0.1]
Apr 16 21:23:59 Server-005 postfix/smtp[29627]: certificate verification failed for gmail-smtp-in.l.google.com[74.125.39.27]:25: untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate Authority
Apr 16 21:24:00 Server-005 postfix/smtp[29627]: B695339E8A: to=<test@gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.39.27]:25, delay=2, delays=0.04/0.03/0.36/1.5, dsn=2.0.0, status=sent (250 2.0.0 OK 1302981863 o12si3614030fal.59)
Apr 16 21:24:00 Server-005 postfix/qmgr[29545]: B695339E8A: removed
schaut ja gut aus
hier der Auszug von extern:
Apr 16 21:23:06 Server-005 postfix/smtpd[29566]: connect from unknown[91.119.3.227]
Apr 16 21:23:06 Server-005 postfix/smtpd[29566]: warning: support for restriction "check_relay_domains" will be removed from Postfix; use "reject_unauth_destination" instead
Apr 16 21:23:06 Server-005 postfix/smtpd[29566]: NOQUEUE: reject: RCPT from unknown[91.119.3.227]: 554 5.7.1 <test@gmail.com>: Recipient address rejected: Relay access denied; from=<email@meinedomain.at> to=<test@gmail.com> proto=ESMTP helo=<[10.0.0.112]>
Apr 16 21:23:06 Server-005 postfix/smtpd[29566]: warning: restriction `reject_unauth_destination' after `check_relay_domains' is ignored
Apr 16 21:23:06 Server-005 postfix/smtpd[29566]: disconnect from unknown[91.119.3.227]
da stehe ich jetzt an. :???:
Ich weiß nicht ob die master.cf stimmt
hier die /etc/postfix/master.cf
# Postfix master process configuration file. For details on the format
# of the file, see the Postfix master(5) manual page.
#
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
smtp inet n - n - - smtpd
#amavis unix - - n - 4 smtp
# -o smtp_data_done_timeout=1200
# -o smtp_send_xforward_command=yes
# -o disable_dns_lookups=yes
# -o max_use=20
#submission inet n - n - - smtpd
# -o smtpd_etrn_restrictions=reject
# -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes
# -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
#submission inet n - n - - smtpd
# -o smtpd_etrn_restrictions=reject
# -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
#628 inet n - n - - qmqpd
pickup fifo n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr fifo n - n 300 1 qmgr
#qmgr fifo n - n 300 1 oqmgr
tlsmgr unix - - n 1000? 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
smtp unix - - n - - smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay unix - - n - - smtp
-o fallback_relay=
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - n - - showq
error unix - - n - - error
discard unix - - n - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
#localhost:10025 inet n - n - - smtpd
# -o content_filter=
# -o smtpd_delay_reject=no
# -o smtpd_client_restrictions=permit_mynetworks,reject
# -o smtpd_helo_restrictions=
# -o smtpd_sender_restrictions=
# -o smtpd_recipient_restrictions=permit_mynetworks,reject
# -o smtpd_data_restrictions=reject_unauth_pipelining
# -o smtpd_end_of_data_restrictions=
# -o smtpd_restriction_classes=
# -o mynetworks=127.0.0.0/8
# -o smtpd_error_sleep_time=0
# -o smtpd_soft_error_limit=1001
# -o smtpd_hard_error_limit=1000
# -o smtpd_client_connection_count_limit=0
# -o smtpd_client_connection_rate_limit=0
# -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_address_mappings
# -o local_header_rewrite_clients=
# -o local_recipient_maps=
# -o relay_recipient_maps=
scache unix - - n - 1 scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent. See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
cyrus unix - n n - - pipe
user=cyrus argv=/usr/lib/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
# do not filter locally delivered mail when USE_AMAVIS=yes
# (don't set content_filter=vscan in main.cf)
#vscan unix - n n - 10 pipe
# user=vscan argv=/usr/sbin/amavis ${sender} ${recipient}
procmail unix - n n - - pipe
flags=R user=nobody argv=/usr/bin/procmail -t -m /etc/procmailrc ${sender} ${recipient}
retry unix - - n - - error
proxywrite unix - - n - 1 proxymap
zarafa unix - n n - 10 pipe flags=DRhu user=vmail argv=/usr/bin/zarafa-dagent -R ${recipient}
