Differences

This shows you the differences between two versions of the page.

--- ubuntuserver810:postfix_vs_dovecot [2008/12/15 15:34] – svschwartz
+++ ubuntuserver810:postfix_vs_dovecot [2010/06/20 16:19] (current) – svschwartz
@@ Line 24: / Line 24: @@
 Добавляем в основной файл конфигурации **/etc/postfix/main.cf**
 <code>
-mailbox_transport = dovecot
+# basic protection
+smtpd_helo_required = yes
+strict_rfc821_envelopes = yes
+smtpd_helo_restrictions =
+        permit_mynetworks
+        reject_invalid_helo_hostname
+        reject_non_fqdn_helo_hostname
+        reject_unknown_hostname
+smtpd_recipient_restrictions =
+        permit_mynetworks
+        permit_sasl_authenticated
+        reject_unauth_destination
+virtual_mailbox_domains = drivesource.ru
+virtual_alias_maps = hash:/etc/postfix/virtual_alias
+virtual_mailbox_maps = ldap:/etc/postfix/ldap-aliases.cf
+virtual_transport = dovecot
+dovecot_destination_recipient_limit = 1
+# SASL authentication
+smtpd_sasl_auth_enable = yes
+smtpd_sasl_type = dovecot
+smtpd_sasl_path = private/auth
+</code>
+Запишем в файл ** /etc/postfix/ldap-aliases.cf ** следующую конфигурацию
+<code>
+server_host = localhost
+search_base = ou=Users,dc=drivesource, dc=ru
+query_filter = uid=%u
+result_attribute = uid
 </code>
@@ Line 48: / Line 80: @@
 mail_location = maildir:/var/vmail/%u
+# System user and group used to access mails. If you use multiple, userdb
+# can override these by returning uid or gid fields. You can use either numbers
+# or names. <doc/wiki/UserIds>
+mail_uid = 500
+mail_gid = 500
 protocol lda {
@@ Line 79: / Line 119: @@
     group = vmail # Or alternatively mode 0660 + LDA user in this group
   }
+  client {
+      # The client socket is generally safe to export to everyone. Typical use
+      # is to export it to your SMTP server so it can do SMTP AUTH lookups
+      # using it.
+      #path = /var/run/dovecot/auth-client
+      #mode = 0660
+      path = /var/spool/postfix/private/auth
+      mode = 0660
+      user = postfix
+      group = postfix
+    }
 }
@@ Line 111: / Line 163: @@
 # You can use same UID and GID for all user accounts if you really want to.
 # If the UID/GID is still found from LDAP reply, it overrides these values.
-user_global_uid = 500
+#user_global_uid = 500
-user_global_gid = 500
+#user_global_gid = 500
 </code>