User Tools

Site Tools


doc:appunti:linux:sa:postfix_spamassassin_clamav_dovecot

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
doc:appunti:linux:sa:postfix_spamassassin_clamav_dovecot [2019/04/05 10:09] – [Sanitizer/ClamAV Filter] niccolodoc:appunti:linux:sa:postfix_spamassassin_clamav_dovecot [2021/02/09 09:36] – [Postfix SASL over Dovecot Auth] niccolo
Line 39: Line 39:
 We want a **single authentication mechanism** for SMTP, POP3 and IMAP, and we want to let the user to authenticate using the Unix **username** or the full **email address** and the password. Dovecot authentication is suitable for the task; the default Debian configuration provides authentication against the system usernames via the PAM module. The configuration file is **/etc/dovecot/conf.d/auth-system.conf.ext**. We want a **single authentication mechanism** for SMTP, POP3 and IMAP, and we want to let the user to authenticate using the Unix **username** or the full **email address** and the password. Dovecot authentication is suitable for the task; the default Debian configuration provides authentication against the system usernames via the PAM module. The configuration file is **/etc/dovecot/conf.d/auth-system.conf.ext**.
  
-To let authentication using the email address, we provide a passwd-like file **/etc/dovecot/userdb**, we will leave //gecos//, //shell// and //extra_fields// blank. See [[https://wiki2.dovecot.org/AuthDatabase/PasswdFile|PasswdFile]] wiki page for details:+To let authentication using the email address, we provide a passwd-like file **/etc/dovecot/users**, we will leave //gecos//, //shell// and //extra_fields// blank. See [[https://wiki2.dovecot.org/AuthDatabase/PasswdFile|PasswdFile]] wiki page for details:
  
 <file> <file>
Line 50: Line 50:
 passdb { passdb {
   driver = passwd-file   driver = passwd-file
-  args = scheme=CRYPT /etc/dovecot/userdb+  args = scheme=CRYPT username_format=%u /etc/dovecot/users
 } }
  
 userdb { userdb {
   driver = passwd-file   driver = passwd-file
-  args = /etc/dovecot/userdb+  args = username_format=%u /etc/dovecot/users
 } }
 </file> </file>
Line 85: Line 85:
 </code> </code>
  
-The file **/etc/dovecot/userdb** should be built e.g. by a cron-job, joining Postfix ''virtual_alias_maps'' and ''/etc/shadow'' passwords. It is re-read at each lookup. We need also to protect it:+The file **/etc/dovecot/users** should be built e.g. by a cron-job, joining Postfix ''virtual_alias_maps'' and ''/etc/shadow'' passwords. It is re-read at each lookup. We need also to protect it:
  
 <code> <code>
-chmod 0640 /etc/dovecot/userdb +chmod 0640 /etc/dovecot/users 
-chown root:dovecot /etc/dovecot/userdb+chown root:dovecot /etc/dovecot/users
 </code> </code>
  
Line 100: Line 100:
 ===== Postfix SASL over Dovecot Auth ===== ===== Postfix SASL over Dovecot Auth =====
  
-See **[[https://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL|Postfix And Dovecot SASL]]**.+See **[[https://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL|Postfix and Dovecot SASL]]**.
  
 First of all we need to activate the socket used by Posfix for authentication. In **/etc/dovecot/conf.d/10-master.conf** ensure that into the //service auth// section there is: First of all we need to activate the socket used by Posfix for authentication. In **/etc/dovecot/conf.d/10-master.conf** ensure that into the //service auth// section there is:
Line 154: Line 154:
   * **dovecot-pop3d**   * **dovecot-pop3d**
  
-Once installed, the basic services **IMAP2** on port **TCP/143** and **POP3** on port **TCP/110** are already working, eventually with the **Dovecot Authentication on userdb** as seen above.+Once installed, the basic services **IMAP2** on port **TCP/143** and **POP3** on port **TCP/110** are already working, eventually with the **Dovecot Authentication on users** as seen above.
  
 ==== Enable SSL, imaps and pop3s ==== ==== Enable SSL, imaps and pop3s ====
doc/appunti/linux/sa/postfix_spamassassin_clamav_dovecot.txt · Last modified: 2023/10/30 11:09 by niccolo