Progetto

Generale

Profilo

EnPostfixAdminInst » Cronologia » Versione 4

Amministratore Truelite, 01-10-2009 15:56

1 1 Amministratore Truelite
[[TracNav(EnTOC)]]
2
3
== A mail server with Postfixadmin, Postfix and Dovecot on Debian Lenny ==
4
5 2 Amministratore Truelite
This HOWTO will explain the installation and configuration of a full featured mail server using Postfix as SMTP server, Dovecot as POP/IMAP server and Postfixadmin as management interface. As Postfixadmin need a database to maintain account and domain informations we will use MySQL (but also PostgresSQL or SQLite can be used). All the configurations were done on a Debian Lenny system.
6 1 Amministratore Truelite
7
=== Postfixadmin Installation ===
8
9 2 Amministratore Truelite
Postfixadmin is distributed as Debian package directly by the maintainer, but we need to download just the {{{.deb}}} file from [http://sourceforge.net/project/showfiles.php?group_id=191583&package_id=225300 here] because there is no repository. Before installing it we will need to install some dependencies (a web server, and because we want to use it on a standalone server, also a database server). We choose to use Apache as web server and MySQL as database server, so we will need to install their packages and also the other Postfixadmin dependencies; this can be done the Debian way with the command:
10 1 Amministratore Truelite
{{{
11
aptitude install dbconfig-common wwwconfig-common  \
12
      libapache2-mod-php5 php5 php5-imap php5-mysql \
13
      mysql-client mysql-server postfix-mysql
14
}}}
15 2 Amministratore Truelite
and we will also have to answer to the ordinary setup questions made by ''debconf''; we can just accept the default values, but we will have to give a password for the default MySQL {{{root}}} administrative account.
16 1 Amministratore Truelite
17 2 Amministratore Truelite
Before installing the Postfixadmin {{{.deb}}} file we will also need to create a dedicated database and a database account to manage it; we can do this with the following commands:
18 1 Amministratore Truelite
{{{
19
mysqladmin -u root -p create postfixadmin
20
mysql -u root -p
21
mysql> grant create, select, insert, update, delete, lock, index, alter, drop 
22
             on postfixadmin.* to 'postfixadmin'@'localhost' 
23
             identified by 'secretandcomplexpassword';
24
mysql> flush privileges;
25
mysql> \q
26
}}}
27 2 Amministratore Truelite
(they will ask for the {{{root}}} account password that was given in the previous step). After this we can install the {{{.deb}}} file with:
28 1 Amministratore Truelite
{{{
29
dpkg -i postfixadmin_*.deb 
30
}}}
31
32 2 Amministratore Truelite
There are two possible choices for Postfixadmin: the 2.2 stable version and the new 2.3 release candidate; this last one supports more features and is almost production ready. If you use the 2.2 stable version you will need to modify the following lines of the {{{/etc/postfixadmin/config.inc.php}}} file to setup the access to the previously created database:
33 1 Amministratore Truelite
{{{
34
$CONF['configured'] = true;
35
...
36
$CONF['database_type'] = 'mysql';
37
$CONF['database_host'] = 'localhost';
38
$CONF['database_user'] = 'postfixadmin';
39
$CONF['database_password'] = 'secretandcomplexpassword';
40
$CONF['database_name'] = 'postfixadmin';
41
}}}
42
43 2 Amministratore Truelite
If instead you use the 2.3 development version, having {{{dbconfig-common}}} e {{{wwwconfig-common}}} installed,  the previous step of the database creation is managed by the package itself and it is no more needed. Also the database access configuration inside {{{/etc/postfixadmin/config.inc.php}}} is automatically done by ''debconf'', so all is needed is to give to ''debconf'' the password of the MySQL {{{root}}} user that you setup at the beginning, and then answer to the ''debconf'' questions about the password used for the Postfixadmin dedicated database user.
44 1 Amministratore Truelite
45 3 Amministratore Truelite
After this we can proceed to populate the database, this will be done by Postfixadmin itself, using the following link in a browser (we can use the same link for database upgrade with new Postfixadmin version or to reset the Postfixadmin superuser password):
46 1 Amministratore Truelite
{{{
47
http://MY.POSTFIXADMIN.SERVER.IP/postfixadmin/setup.php
48
}}}
49 3 Amministratore Truelite
50
Up to 2.2 version this PHP script should be run once, and then removed after its use. With the 2.3 version when it is used for the first time it would ask for a setup password, and then print an hashed value that must be put inside {{{/etc/postfixadmin/config.inc.php}}}; the browser will show the line that should replace this one:
51 1 Amministratore Truelite
{{{
52
$CONF['setup_password'] = 'changeme';
53
}}}
54
55 3 Amministratore Truelite
With this modification done we can re-execute the script going back to {{{http://MY.POSTFIXADMIN.SERVER.IP/postfixadmin/setup.php}}}; this time can use the setup password to create an administrative Postfixadmin account having full access to all management functions. It should be noted that like all Postfixadmin accounts also this one should be given in the form of an email address (i.e. something like {{{admin@mydomain.it}}}).
56
57
To check that this initial setup has been completed successfully we can see if everything is working fine going to the {{{http://MY.POSTFIXADMIN.SERVER.IP/postfixadmin}}} address and logging in using the superuser account we just created.  After this check we can proceed doing some more specific configuration; the first one is to put proper references to our main domain in the web interface; this can be done with the following commands:
58 1 Amministratore Truelite
{{{
59
cd /etc/postfixadmin/
60
mv config.inc.php config.inc.php.orig
61
sed -e 's/change-this-to-your.domain.tld/mydomain.it/g' config.inc.php.orig > config.inc.php
62 2 Amministratore Truelite
}}}
63 3 Amministratore Truelite
and to be sure we can check the file to see if all link to web pages are correct (they will be always something like {{{http://mydomain.it}}}).
64 1 Amministratore Truelite
65 3 Amministratore Truelite
An important step is to configure the mailbox pathname that will be used by both Postfix and Dovecot, we choose to map an email account like {{{username@mydomain.it}}}) to a mailbox pathname like {{{mydomain.it/username}}}, to do this we have to put the following configuration values in the {{{/etc/postfixadmin/config.inc.php}}} file:
66 1 Amministratore Truelite
{{{
67
$CONF['domain_path'] = 'YES';
68
$CONF['domain_in_mailbox'] = 'NO';
69
}}}
70
71 3 Amministratore Truelite
Then to enable quotas we will need to modify also the following line:
72 1 Amministratore Truelite
{{{
73 2 Amministratore Truelite
$CONF['quota'] = 'YES';
74 1 Amministratore Truelite
}}}
75 3 Amministratore Truelite
and to enable the {{{vacation}}} support we will need to modify the following lines:
76 1 Amministratore Truelite
{{{
77
$CONF['vacation'] = 'YES';
78
$CONF['vacation_domain'] = 'autoreply.mydomain.it'
79
}}}
80 3 Amministratore Truelite
where {{{autoreplay.mydomain.it}}} is the domain used by Postfix to manage {{{vacation}}} email (we'll look at this in the following).  
81
82
Other configuration lines that can be modified are the following:
83 1 Amministratore Truelite
{{{
84
$CONF['default_language'] = 'it';
85
$CONF['min_password_length'] = 6;
86
$CONF['aliases'] = '50';
87
$CONF['mailboxes'] = '50';
88
$CONF['maxquota'] = '50';
89
}}}
90 3 Amministratore Truelite
respectively to setup the web interface language, a minimum length for the accounts password, and the default values for limit on number of alias, mailbox and megabytes for the quota. These last three will be proposed by the management interface when creating a new domain (a 0 means no limit).
91 1 Amministratore Truelite
92 3 Amministratore Truelite
If you install the 2.3 version there is a new simplified management to have the same aliases on more domains; this need more database queries and a modified Postfix configuration, so is better to disable it; this can be done with the following line:
93 1 Amministratore Truelite
{{{
94
$CONF['alias_domain'] = 'NO';
95
}}}
96
97
98
=== Postfix configuration ===
99
100 3 Amministratore Truelite
Having setup Postfixadmin to manage account and domain data inside MySQL, we need then to configure Postfix to use the same data. The first step is to create a directory where to put all mailboxes; we will also need a system user that will own all the files. We can do this with the following commands:
101 1 Amministratore Truelite
{{{
102
mkdir /var/mail/vmail
103
useradd -d /var/mail/vmail vmail
104
chown vmail:vmail /var/mail/vmail/
105
chmod o-xr /var/mail/vmail/
106
}}}
107
108 3 Amministratore Truelite
Then we need to tell Postfix to use the informations stored in the database for its virtual mailbox management; this can be done adding the following lines to {{{/etc/postfix/main.cf}}}:
109 1 Amministratore Truelite
{{{
110
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf
111
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf
112
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
113
virtual_mailbox_base = /var/mail/vmail
114
virtual_minimum_uid = 106
115
virtual_transport = virtual
116
virtual_uid_maps = static:106
117
virtual_gid_maps = static:61
118 2 Amministratore Truelite
}}}
119 1 Amministratore Truelite
where 106 e 61 are the numeric uid and gid for the {{{vmail}}} user (these number can be different in each system so you have to check them yourself with something like {{{getent passwd|grep vmail}}}).
120
121 3 Amministratore Truelite
Then we need to create all the {{{mysql_*}}} files to tell Postfix how to access to the database to get the  information it needs. The first file, {{{mysql_virtual_alias_maps.cf}}}, configure the access to the aliases definitions and it should be something like:
122 1 Amministratore Truelite
{{{
123
user = postfixadmin
124 2 Amministratore Truelite
password = secretandcomplexpassword
125 1 Amministratore Truelite
hosts = localhost
126
dbname = postfixadmin
127
query = SELECT goto FROM alias WHERE address='%s' AND active = 1
128
}}}
129 3 Amministratore Truelite
the second file, {{{mysql_virtual_domains_maps.cf}}}, configure the access to the domain definitions, and it should be something like:
130 1 Amministratore Truelite
{{{
131
user = postfixadmin
132
password = secretandcomplexpassword
133
hosts = localhost
134
dbname = postfixadmin
135
query = SELECT domain FROM domain WHERE domain='%s' and backupmx = '0' and active = '1'
136 2 Amministratore Truelite
}}}
137 3 Amministratore Truelite
the third file, {{{mysql_virtual_mailbox_maps.cf}}}, configure the access to the mailbox pathname, and it should be something like:
138 1 Amministratore Truelite
{{{
139
user = postfixadmin
140 2 Amministratore Truelite
password = secretandcomplexpassword
141 1 Amministratore Truelite
hosts = localhost
142
dbname = postfixadmin
143
query = SELECT maildir FROM mailbox WHERE username='%s' AND active = 1
144
}}}
145
146 3 Amministratore Truelite
If we also want to use Postfixadmin to manage secondary mail server we will need to add to {{{/etc/postfix/main.cf}}} the following line:
147 1 Amministratore Truelite
{{{
148
relay_domains = $mydestination, proxy:mysql:/etc/postfix/mysql_relay_domains_maps.cf
149
}}}
150 3 Amministratore Truelite
where {{{mysql_relay_domains_maps.cf}}} should be something like:
151 1 Amministratore Truelite
{{{
152
user = postfixadmin
153 3 Amministratore Truelite
password = secretandcomplexpassword
154 1 Amministratore Truelite
hosts = localhost
155
dbname = postfixadmin
156
query = SELECT domain FROM domain WHERE domain='%s' and backupmx = '1' and active = '1'
157
}}}
158
159 3 Amministratore Truelite
=== Postfix vacation configuration ===
160 1 Amministratore Truelite
161 3 Amministratore Truelite
If we want to manage {{{vacation}}} trough Postfixadmin message we need some additional Postfix configurations. As first step we need a system user dedicated to the automatic answer management with the lowest possible privileges; we can create it with the following commands:
162 1 Amministratore Truelite
{{{
163
groupadd -g 65501 vacation
164
useradd -g 65501 -u 65501 -c Vacation -s /sbin/nologin -d /nonexistent vacation
165
}}}
166 3 Amministratore Truelite
then we will need a directory for temporary files accessible only for this user, we can create it with the following commands:
167 1 Amministratore Truelite
{{{
168
mkdir /var/spool/vacation
169
chown -R vacation.vacation /var/spool/vacation
170
chmod o-xr /var/spool/vacation 
171
}}}
172 3 Amministratore Truelite
173
The second step is to setup the vacation script, we need copy it (it's distributed with Postfixadmin) in the previous directory, this can be done with the following commands:
174 1 Amministratore Truelite
{{{
175
cd /usr/share/doc/postfixadmin/examples/VIRTUAL_VACATION/
176
zcat vacation.pl.gz > /var/spool/vacation/vacation.pl
177
chmod 700 /var/spool/vacation/vacation.pl
178
}}}
179 3 Amministratore Truelite
to make the script work we will also need some perl modules; these can be installed with the command:
180 1 Amministratore Truelite
{{{
181
aptitude install libemail-valid-perl libmime-encwords-perl libmime-perl \
182
         libmail-sender-perl liblog-log4perl-perl
183
}}}
184 3 Amministratore Truelite
last we will need to setup the script to access to the database, this can be done modifying the following lines at the beginning of it (we must use the same values used in the Postfixadmin configuration):
185 1 Amministratore Truelite
{{{
186
our $db_type = 'mysql';
187
our $db_host = 'localhost';
188
our $db_username = 'postfixadmin';
189 3 Amministratore Truelite
our $db_password = 'secretandcomplexpassword';
190 1 Amministratore Truelite
our $db_name     = 'postfixadmin';
191
192 3 Amministratore Truelite
our $vacation_domain = 'autoreply.mydomain.it';
193 1 Amministratore Truelite
}}}
194
195 3 Amministratore Truelite
The last step is the Postfix configuration; we will need to setup a new transport for {{{vacation}}}, so we need to add to {{{/etc/postfix/master.cf}}} the following lines:
196 1 Amministratore Truelite
{{{
197
vacation    unix  -       n       n       -       -       pipe
198
  flags=Rq user=vacation argv=/var/spool/vacation/vacation.pl -f ${sender} -- ${recipient}
199
}}}
200 3 Amministratore Truelite
and the we will need to use this transport for all mail directed to the special {{{autoreply.mydomain.it}}} domain, so first we need to put in {{{/etc/postfix/transport}}} the following line:
201 1 Amministratore Truelite
{{{
202 3 Amministratore Truelite
autoreply.mydomain.it       vacation:
203 1 Amministratore Truelite
}}}
204 3 Amministratore Truelite
and then add to {{{/etc/postfix/main.cf}}} the following line:
205 1 Amministratore Truelite
{{{
206
transport_maps = hash:/etc/postfix/transport
207
}}}
208 3 Amministratore Truelite
this done we can tell Postfix to use the new configuration with the following commands:
209 1 Amministratore Truelite
{{{
210
postmap /etc/postfix/transport
211
postfix reload
212
}}}
213
214
215 3 Amministratore Truelite
=== Dovecot configuration ===
216 1 Amministratore Truelite
217 4 Amministratore Truelite
To make emails available to the users we well need a POP/IMAP server, we choose to use Dovecot, so we will need to install it, we will do the Debian way with the following command:
218 1 Amministratore Truelite
{{{
219
aptitude install dovecot-imapd dovecot-pop3d
220
}}}
221 4 Amministratore Truelite
then we will need to tell Dovecot where to find the emails and how to authenticate users. 
222 3 Amministratore Truelite
223 4 Amministratore Truelite
The first step is to modify the default configuration to access to the {{{/var/mail/vmail}}} directory as the user {{{vmail}}}, having mailbox in the form {{{username/mydomain.it}}}; this can be done putting the following lines in {{{/etc/dovecot/dovecot.conf}}}:
224 1 Amministratore Truelite
{{{
225
mail_location = maildir:/var/mail/vmail/%d/%n
226
mail_privileged_group = vmail
227
first_valid_uid = 106
228
}}}
229 4 Amministratore Truelite
where 106 is the {{{vmail}}} uid (as before this could be different on different installations). 
230 1 Amministratore Truelite
231 4 Amministratore Truelite
The second step is to enable the user authentication over the MySQL data, this can be done removing the default PAM configuration for the {{{userdb}}} and {{{passdb}}} directives, putting instead something like the following in {{{/etc/dovecot/dovecot.conf}}}:
232 1 Amministratore Truelite
{{{
233
  passdb sql {
234
    args = /etc/dovecot/dovecot-mysql.conf
235
  }
236
  userdb sql {
237
    args = /etc/dovecot/dovecot-mysql.conf
238
  }
239
}}}
240 4 Amministratore Truelite
then we will need to create the file {{{/etc/dovecot/dovecot-mysql.conf}}} to tell Dovecot how to access to the database; it should be something like:
241 1 Amministratore Truelite
{{{
242
driver = mysql
243
connect = host=localhost dbname=postfixadmin user=postfixadmin password=passsegretaedifficile client_flags=0
244
default_pass_scheme = MD5
245
user_query = SELECT maildir, 106 AS uid, 61 AS gid FROM mailbox WHERE username = '%u'
246
password_query = SELECT password FROM mailbox WHERE username = '%u' AND active = '1' 
247
}}}
248 4 Amministratore Truelite
where 106 and 61 are respectively the uid and gid of the user {{{vmail}}}.