Re: Virtual users need to exist in /etc/passwd ?

2015-07-16 Thread Jason Tubnor
On 17 July 2015 at 06:28, Joel Carnat  wrote:
>
>> Le 16 juil. 2015 à 20:26, Joerg Jung  a écrit :
>>
>> On Thu, Jul 16, 2015 at 08:09:41PM +0200, Joel Carnat wrote:
>>> Hi,
>>>
>>> I have configured OpenSMTPD 5.4.4 (from OpenBSD 5.7) with virtual LDAP 
>>> users and LMTP to Dovecot.
>>>
>>> table vusers ldap:/etc/mail/ldap.conf
>>> table vdomains ldap:/etc/mail/ldap.conf
>>>
>>> accept from any for domain  virtual  deliver to lmtp 
>>> "/var/dovecot/lmtp"
>>>
>>> If the user id exists in /etc/passwd, the mail is accepted by OpenSMTPD and 
>>> delivered to dovecot.
>>> Dovecot only uses LDAP so it doesn???t care about users not being in 
>>> /etc/passwd since they exist un LDAP ; tested using direct telnet on LMTP 
>>> port.
>>>
>>> If the user id does not exist in /etc/passwd (but exists in LDAP), the mail 
>>> gets rejected by OpenSMTPD with error + 550 Invalid recipient ;.
>>>
>>> Is this expected or does it reflect a miss-configuration on the LDAP size ?
>>> Sounds weird to me that virtual user must exist in /etc/passwd :)
>>
>> AFAIK, this is "by design", deliver to ... expects a local system user.
>> As workaround, you might use a userbase table (see smtpd.conf(5)) to map
>> all your virtual users to a single (fake) system users.  Also, you might
>> play with deliver to lda instead of lmtp.
>>
>
> OK, I’ll dig the LDA ; although Dovecot seem to recommend LTMP over LDA.
>

OpenSMTP, when using a virtual user table mapping will fork to that
user to issue the mda (opensmtp) -> lda (dovecot).  This works quite
well.  I did try to do what you did with LTMP, but that just wasted
time.  In the end, I was happy how opensmtp handled the lda
connection, thus didn't mind deviating from the recommended dovecot
setting.

Cheers!

-- 
"If my calculations are correct, when this baby hits 88MPH, you're
gonna to see some serious shit" - Emmett "Doc" Brown

--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: Virtual users need to exist in /etc/passwd ?

2015-07-16 Thread Joel Carnat

> Le 16 juil. 2015 à 20:26, Joerg Jung  a écrit :
> 
> On Thu, Jul 16, 2015 at 08:09:41PM +0200, Joel Carnat wrote:
>> Hi,
>> 
>> I have configured OpenSMTPD 5.4.4 (from OpenBSD 5.7) with virtual LDAP users 
>> and LMTP to Dovecot.
>> 
>> table vusers ldap:/etc/mail/ldap.conf
>> table vdomains ldap:/etc/mail/ldap.conf
>> 
>> accept from any for domain  virtual  deliver to lmtp 
>> "/var/dovecot/lmtp"
>> 
>> If the user id exists in /etc/passwd, the mail is accepted by OpenSMTPD and 
>> delivered to dovecot.
>> Dovecot only uses LDAP so it doesn???t care about users not being in 
>> /etc/passwd since they exist un LDAP ; tested using direct telnet on LMTP 
>> port.
>> 
>> If the user id does not exist in /etc/passwd (but exists in LDAP), the mail 
>> gets rejected by OpenSMTPD with error + 550 Invalid recipient ;.
>> 
>> Is this expected or does it reflect a miss-configuration on the LDAP size ?
>> Sounds weird to me that virtual user must exist in /etc/passwd :)
> 
> AFAIK, this is "by design", deliver to ... expects a local system user.
> As workaround, you might use a userbase table (see smtpd.conf(5)) to map
> all your virtual users to a single (fake) system users.  Also, you might
> play with deliver to lda instead of lmtp.
> 

OK, I’ll dig the LDA ; although Dovecot seem to recommend LTMP over LDA.

Thanks.
--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: Virtual users need to exist in /etc/passwd ?

2015-07-16 Thread Joerg Jung
On Thu, Jul 16, 2015 at 08:09:41PM +0200, Joel Carnat wrote:
> Hi,
> 
> I have configured OpenSMTPD 5.4.4 (from OpenBSD 5.7) with virtual LDAP users 
> and LMTP to Dovecot.
> 
> table vusers ldap:/etc/mail/ldap.conf
> table vdomains ldap:/etc/mail/ldap.conf
> 
> accept from any for domain  virtual  deliver to lmtp 
> "/var/dovecot/lmtp"
> 
> If the user id exists in /etc/passwd, the mail is accepted by OpenSMTPD and 
> delivered to dovecot.
> Dovecot only uses LDAP so it doesn???t care about users not being in 
> /etc/passwd since they exist un LDAP ; tested using direct telnet on LMTP 
> port.
> 
> If the user id does not exist in /etc/passwd (but exists in LDAP), the mail 
> gets rejected by OpenSMTPD with error + 550 Invalid recipient ;.
> 
> Is this expected or does it reflect a miss-configuration on the LDAP size ?
> Sounds weird to me that virtual user must exist in /etc/passwd :)

AFAIK, this is "by design", deliver to ... expects a local system user.
As workaround, you might use a userbase table (see smtpd.conf(5)) to map
all your virtual users to a single (fake) system users.  Also, you might
play with deliver to lda instead of lmtp.

Regards,
Joerg

-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Virtual users need to exist in /etc/passwd ?

2015-07-16 Thread Joel Carnat
Hi,

I have configured OpenSMTPD 5.4.4 (from OpenBSD 5.7) with virtual LDAP users 
and LMTP to Dovecot.

table vusers ldap:/etc/mail/ldap.conf
table vdomains ldap:/etc/mail/ldap.conf

accept from any for domain  virtual  deliver to lmtp 
"/var/dovecot/lmtp"

If the user id exists in /etc/passwd, the mail is accepted by OpenSMTPD and 
delivered to dovecot.
Dovecot only uses LDAP so it doesn’t care about users not being in /etc/passwd 
since they exist un LDAP ; tested using direct telnet on LMTP port.

If the user id does not exist in /etc/passwd (but exists in LDAP), the mail 
gets rejected by OpenSMTPD with error « 550 Invalid recipient ».

Is this expected or does it reflect a miss-configuration on the LDAP size ?
Sounds weird to me that virtual user must exist in /etc/passwd :)

TIA,
  Jo