311072017 [Bebian squeeze] Serveur poss + dovecot LDA avee Open.dap- David Mercereau David Mercereau Le savoir rest fen si nest pas parlagé [Debian squeeze] Serveur postfix + dovecot LDA avec OpenLdap Un annuaire LDAP (avec le schéma misc) est déja en place, nous souhaitons monter un serveur de mail SMTP/IMAPS en s’appuyant sur l'authentification de ’annuaire LDAP = apt-get install postfix postfix-Idap dovecot-imapd Postfix Tout d’abord /ete/postfix/main.cf : smtpd_banner = $myhostname biff = no append_dot_mydomain = no readme_directory = no smtpd_tls_cert_file=/etc/ss1/certs/ss1-cert-snakeoil.pem smtpd_tls_key_file=/etc/ss1/private/ssl-cert-snakeoil. key smtpd_use_t1s=yes smtpd_t1s_session_cache_database - btree:${data_directory}/smtpd_scache smtp_tls_session_cache database = btree:${data_directory}/smtp_scache myhostname = hostname. zici.fr myorigin = /etc/mailname relayhost mynetworks = 127.0.0.0/8 [::ffFF:127.0.0.0]/104 [::1]/128 mailbox_command = /usr/1ib/dovecot/deliver mailbox_size_limit = @ recipient_delimiter inet_interfaces = all luser_relay = alias_maps = hash:/etc/aliases virtual_mailbox_domains = zici.fr, mercereau. info, liencontrelien.zici.fr virtual_alias_maps = hash: /www/zici/emailPoubelle/virtual dovecot_destination_recipient_limit = 1 hpsdavid mercereauinfoldebian-squeeze-serveur-postfx-dovecol-4a-avee-openiap! “4sio7i2017 [Debian squoeze] Server poste + dovecot LA avec Opent dap — David Mercoreau virtual_transport = dovecot mailbox_transport = dovecot dovecot_destination_recipient_limit Dans le fichier master. il suffit de rajouter la ligne suivante 4 la fin du fichier: # Dovecot LDA dovecot unix - nn - - pipe flags=DRhu user=vmail:mail argv=/usr/Lib/dovecot/deliver -f ${sender} -d ${recipient} -d ${user} Dovecot Iln’y a que 2 fichiers de conf, d’abord, /ete/dovecot/dovecot.cont protocols = imap imaps log_timestamp = "RY-%m-%d XH:%M:%S. mail_location = maildir: /var/mail/%n mail_uid = 500 mail_gid = 8 mail_privileged group = mail protocol imap { imap_client_workarounds = outlook-idle y protocol pop3 { pop3_uidl_format = X@8xuxesXv + protocol managesieve { + protocol 1da { postmaster_address = postmaster@zici.fr auth_socket_path = /var/run/dovecot/auth-master y auth default { mechanisms = plain login passdb pam { y passdb ldap { args = /etc/dovecot/dovecot-1dap. conf y userdb Idap { args = /etc/dovecot /dovecot-1dap.conf + user = root socket listen { master { path = /var/run/dovecot/auth-master hpsdavid mercereauinfoldebian-squeeze-serveur-postfx-dovecol-4a-avee-openiap!sio7i2017 [Debian squoeze] Server poste + dovecot LA avec Opent dap — David Mercoreau mode = 0680 user = vmail group = mail y y y dict { y plugin { y et enfin /etc/dovecot/dovecot-Idap.conf hosts = 127.0.0.1 auth_bind = yes Idap_version = 3 base = ou-Utilisateur,de-zici,de-fr user_attrs = uidNumber=500, gidNumber=8 user_filter = (&(objectClass=posixAccount)(c pass_filter = (&(objectClass=posixAccount)(c default_pass_scheme = SSHA Astuce pour tester les filtres utiliser la commande Adapsearch -x -h localhost -b “ou=Utilisateur,dc=zici,de=fr” "(& (objectClass=posixaccount) (cn=Utilisateur))' Source : + http:/www-404blog.net!?p-36 + http://monblog.system-linux.net/blog/20111/05/ 2/ajouter-des-schemas-dans-votre-annuaire- openidap-avee-debian-squeeze! + http:/wwwarjsystems.nl/en/2100-d6-openldap-provider php 1. [rkhunter] Warning The file properties have changed 2. fispeonfig] Remplacer Amavis/Spamassassin par Dspam 3. OpenDKIM & Postfix sur debian squeeze 4, fispeonfig] Managesieve (dovecot) & Horde hpsdavid mercereauinfoldebian-squeeze-serveur-postfx-dovecol-4a-avee-openiap! 38311072017 [Debian squeeze] Serveur postfix + dovecot LDA avec Opent.dap ~ David Mercereau {2 3.avri 2012 & David fH Informatique @ debian, dovecot, postfix, serveur Figrement propulsé par WordPress hpsdavid mercereauinfoldebian-squeeze-serveur-postfx-dovecol-4a-avee-openiap! 418