Uma pergunta ao Psycho: existe algum problema se eu montar aos poucos no wiki o tutorial? Eu tô agarrado em alguns projetos mas quero contribuir, tudo bem?


Abaixo vou colocar a configuração que fiz no postfix pra funcionar com o LDAP + SASL,
Qualquer dúvida...

#-------------------------------------------------------
# GENERAL
#-------------------------------------------------------
inet_interfaces = all
inet_protocols = ipv4
queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
command_time_limit = 1h

domain1 = domain1.com
domain2 = domain2.com.br

myhostname = mail.mailserver.com
mydomain = servidor.local
myorigin = $mydomain
mydestination = $myhostname $mydomain www.$mydomain mail.$mydomain $domain1 $domain2
mynetworks = 127.0.0.1

sendmail_path = /usr/sbin/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq

html_directory = no
manpage_directory = /usr/local/man
sample_directory = /etc/postfix
readme_directory = no
setgid_group = postdrop
mail_owner = postfix

#-------------------------------------------------------
# Debug
#-------------------------------------------------------
debug_peer_level = 2
debugger_command =
         PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
         ddd $daemon_directory/$process_name $process_id & sleep 5

#-------------------------------------------------------
# MAPS
#-------------------------------------------------------
home_mailbox = Maildir/
mailbox_transport = virtual:
mailbox_command = /usr/bin/procmail
mailbox_command_maps = ldap:accounts
local_recipient_maps = $alias_maps $virtual_mailbox_maps

#-------------------------------------------------------
# Virtual
#-------------------------------------------------------
alias_maps = ldap:accountsmap
alias_database = ldap:accountsmap
virtual_maps = ldap:accountsmap
virtual_mailbox_base = /servidor/vmail
virtual_mailbox_maps = ldap:accounts
virtual_uid_maps = static:777
virtual_gid_maps = static:777
virtual_maildir_extended = yes

#-------------------------------------------------------
# LDAP
#-------------------------------------------------------
accountsmap_server_host = localhost
accountsmap_server_port = 389
accountsmap_bind = yes
accountsmap_bind_dn = cn=Manager,dc=servidor,dc=local
accountsmap_bind_pw = 700748jes9922
accountsmap_version = 3
accountsmap_search_base = ou=servidor,dc=servidor,dc=local
accountsmap_query_filter = (&(|(mail=%s)(mailAlternateAddress=%s))(|(AccountStatus=active)(AccountStatus=shared)))
accountsmap_result_attribute = %[email protected]

#-------------------------------------------------------
# roteamento
#-------------------------------------------------------
accounts_server_host = localhost
accounts_server_port = 389
accounts_bind = yes
accounts_bind_dn = cn=Manager,dc=servidor,dc=local
accounts_bind_pw = SENHALDAP
accounts_version = 3
accounts_search_base = ou=servidor,dc=servidor,dc=local
accounts_query_filter = (mailAlternateAddress=%s)
accounts_result_attribute = mailMessageStore

#-------------------------------------------------------
# Anti - Spam
#-------------------------------------------------------
strict_rfc821_envelopes = yes
disable_vrfy_command = yes
delay_warning_time = 1h

#-------------------------------------------------------
# SMTP
#-------------------------------------------------------
smtpd_helo_required = yes
smtpd_banner= ESMTP SERVIDOR Mail Server
smtpd_reject_unlisted_recipient = yes
smtpd_client_restrictions = permit_sasl_authenticated,
                            permit_mynetworks,
                            warn_if_reject,
                            reject_unauth_destination,
                            reject_unlisted_recipient,
                            reject_unauth_pipelining

smtpd_helo_restrictions = permit_sasl_authenticated,
                          permit_mynetworks,
                          warn_if_reject,
                          reject_unauth_destination,
                          reject_unlisted_recipient,
                          reject_invalid_hostname,
                          reject_unauth_pipelining

smtpd_sender_restrictions = permit_sasl_authenticated,
                            permit_mynetworks,
                            warn_if_reject,
                            reject_unauth_destination,
                            reject_unlisted_recipient,
                            reject_non_fqdn_sender,
                            reject_unknown_sender_domain,
                            reject_unauth_pipelining

smtpd_data_restrictions = reject_unauth_pipelining
smtpd_delay_reject = yes
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_recipient_restrictions = permit_sasl_authenticated,
                               permit_mynetworks,
                               warn_if_reject,
                               reject_invalid_hostname,
                               reject_unauth_pipelining,
                               reject_non_fqdn_sender,
                               reject_unknown_sender_domain,
                               reject_non_fqdn_recipient,
                               reject_unknown_recipient_domain,
                               reject_unauth_destination

smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous
smtpd_sasl_path = smtpd
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_sasl_type = cyrus
broken_sasl_auth_clients = yes

smtpd_use_tls = yes
smtpd_tls_auth_only = yes
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_loglevel = 2
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom


JES escreveu:
Conforme prometido segue o arquivo com as rotinas de compilação e instalação.
Vou arrumar todos os arquivos de configuração para postar depois. Quanto ao site a idéia é boa, já pensei nisso, mas o problema é arrumar tudo e colocar mais "didático".

Com isso dá pra colocar o egroupware funcionando em qualquer distro, se alguém tiver dúvida é só falar.


Molinero escreveu:
Me interessa sim.

 Vc poderia tmb criar um Artigo e postar em algum(s) site de Linux.


======================================
                  CyberCrow
        Conhecimento é Poder !

  Quando voce perde a mente limitada
       Voce liberta a sua vida

======================================

   1. Try to find an answer by searching the archives of the forum you plan to post to.
   2. Try to find an answer by searching the Web.
   3. Try to find an answer by reading the manual.
   4. Try to find an answer by reading a FAQ.
   5. Try to find an answer by inspection or experimentation.
   6. Try to find an answer by asking a skilled friend.
   7. If you're a programmer, try to find an answer by reading the source code.

-----BEGIN GEEK CODE BLOCK-----
  Version: 3.12
  GCM/L/U d- s-: a- C++ LSU++++ P+ L+++ E--- W++ N w--
  O-- M- V- PS PE- Y PGP++ t 5 X++ R tv- b++ DI D+
  G++ e- h* r y+
-------END GEEK CODE BLOCK------



JES wrote:
  
Molinero,

    Funcionou beleza, eu tava perdendo o maior tempo pensando que o
problema estava com as configurações do postfix, e acabei não olhando
se tinha compilado direito o sasl.

    Vlw,

    Bom pra colaborar com a lista, eu posso ceder os arquivos de
configuração deste servidor se alguém tiver interesse.

    Tenho configurado lá e funcionando 100%:
    postfix + courier-imap + openldap + sasl + clamav + spamassassin +
maildrop
    egroupware + openldap
    postgresql
    apache + php5

  
Molinero escreveu:
    
Cara... achei isso aqui na documentação do Postfix.

Building the Cyrus SASL library

Postfix appears to work with cyrus-sasl-1.5.x or cyrus-sasl-2.1.x, which
are available from:

    ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/

IMPORTANT: if you install the Cyrus SASL libraries as per the default,
you will have to symlink /usr/lib/sasl -> /usr/local/lib/sasl for
version 1.5.x or /usr/lib/sasl2 -> /usr/local/lib/sasl2 for version 2.1.x.

Reportedly, Microsoft Outlook (Express) requires the non-standard LOGIN
authentication method. To enable this authentication method, specify
``./configure --enable-login''.



======================================
                  CyberCrow
        Conhecimento é Poder !

  Quando voce perde a mente limitada
       Voce liberta a sua vida

======================================

   1. Try to find an answer by searching the archives of the forum you plan to post to.
   2. Try to find an answer by searching the Web.
   3. Try to find an answer by reading the manual.
   4. Try to find an answer by reading a FAQ.
   5. Try to find an answer by inspection or experimentation.
   6. Try to find an answer by asking a skilled friend.
   7. If you're a programmer, try to find an answer by reading the source code.

-----BEGIN GEEK CODE BLOCK-----
  Version: 3.12
  GCM/L/U d- s-: a- C++ LSU++++ P+ L+++ E--- W++ N w--
  O-- M- V- PS PE- Y PGP++ t 5 X++ R tv- b++ DI D+
  G++ e- h* r y+
-------END GEEK CODE BLOCK------



JES wrote:
  
      
Molinero,

    Engraçado, eu já configurei o OL para usar a 465, e mesmo assim
não passa. Já tentei de tudo na configuração. Vi uma galera na web com
o mesmo problema. O pior é que é só nesse programa o problema.

    Tô usando Postfix + OpenLDAP + SASL
   
    Dá uma olhada no SASL

    smtpd_sasl_auth_enable = yes
    smtpd_sasl_local_domain = $myhostname
    smtpd_sasl_security_options = noanonymous
    smtpd_sasl_path = smtpd
    smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
    smtpd_sasl_type = cyrus
    broken_sasl_auth_clients = yes



Molinero escreveu:
    
        
Vc tá usando SSL na porta 25. Ou desabilita isso ou configura o OutLixo
pra usar SMTPs (porta:465). Isso se o servidor estiver configurado com
suporte a SSL.


======================================
                  CyberCrow
        Conhecimento é Poder !

  Quando voce perde a mente limitada
       Voce liberta a sua vida

======================================

   1. Try to find an answer by searching the archives of the forum you plan to post to.
   2. Try to find an answer by searching the Web.
   3. Try to find an answer by reading the manual.
   4. Try to find an answer by reading a FAQ.
   5. Try to find an answer by inspection or experimentation.
   6. Try to find an answer by asking a skilled friend.
   7. If you're a programmer, try to find an answer by reading the source code.

-----BEGIN GEEK CODE BLOCK-----
  Version: 3.12
  GCM/L/U d- s-: a- C++ LSU++++ P+ L+++ E--- W++ N w--
  O-- M- V- PS PE- Y PGP++ t 5 X++ R tv- b++ DI D+
  G++ e- h* r y+
-------END GEEK CODE BLOCK------



JES wrote:
  
      
          
Prezados,

    Tenho um problema que ocorre somente quando preciso utilizar o 
Outlook Express no envio de email.
    Quando tento enviar algo aparece a seguinte mensagem:

    Detalhe: [email protected] seria o email de destino.

    The message could not be sent because one of the recipients was 
rejected by the server. The rejected e-mail address was 
'[email protected]'. Subject 'dddd', Account: 'ADMIN', Server: 
'mail.


online.com', Protocol: SMTP, Server Response: '554 5.7.1 
<[email protected]>: Relay access denied', Port: 25, Secure(SSL): Yes, 
Server Error: 554, Error Number: 0x800CCC79

    Isso só acontece com o Outlook Express, com todos os outros funciona 
100%

    Fico Grato se alguém souber de algo.

   
   

    
  
    
        
            
  
          
    
        
  
      


  

-- 
Atenciosamente,

Jorge Elias
Desenvolvimento Estratégico de Sistemas
(22)2673-6643
(22)7835-0938 / (22)8816-6643 (24Hrs)
(21)3717-2032 - VoIP (seg/sex) 8:00-12:00 / 13:30-19:00
Skype: JESISTEMAS



-- 
Atenciosamente,

Jorge Elias
Desenvolvimento Estratégico de Sistemas
(22)2673-6643
(22)7835-0938 / (22)8816-6643 (24Hrs)
(21)3717-2032 - VoIP (seg/sex) 8:00-12:00 / 13:30-19:00
Skype: JESISTEMAS

--~--~---------~--~----~------------~-------~--~----~
GUS-BR - Grupo de Usuários de Slackware Brasil
http://www.slackwarebrasil.org/
http://groups.google.com/group/slack-users-br

Antes de perguntar:
http://www.istf.com.br/perguntas/

Para sair da lista envie um e-mail para:
[email protected]
-~----------~----~----~----~------~----~------~--~---

begin:vcard
fn:Jorge Elias
n:Elias;Jorge
email;internet:[email protected]
tel;work:(22) 2673-6643
tel;cell:(22) 7835-0938
x-mozilla-html:TRUE
version:2.1
end:vcard

Responder a