List Info

Thread: Re: delegation feature in debian etch




Re: delegation feature in debian etch
country flaguser name
Germany
2008-02-18 07:38:56
Hi,

"Eleni Postantzi" <lenapostantzigmail.com> writes:

> hi,
>
> i've installed kolab (1.9.4-20060707.dfsg-2) on a
debian etch (2.6.18-4-amd64) with horde (3.1.3-4etch2), etc
but i'm not able to make delegations work...
>
> i've added a user to the delegation field, but he isn't
able to access the delegated mailbox.
>
> i also saw that this functionality was broken among
some versions. Could it apply to the debian package too?
>
> have you maybe already heard of such issues with the
debian package?

concerning the debian packages it is probably better to ask
on their
mailing list at:

http://
alioth.debian.org/mail/?group_id=30845

The OpenPKG version should support delegates just fine.

Cheers,

Gunnar

>
> Many thanks,
>
> Elena
>
> _______________________________________________
> Kolab-users mailing list
> Kolab-userskolab.org
> https:
//kolab.org/mailman/listinfo/kolab-users

-- 
______ http://kdab.com
_______________ http://kolab-konsortium.c
om _

prdus Kolab work is funded in part by KDAB and the
Kolab Konsortium

____ http://www.pardus.de
_________________ http://gunnarwrobel.de _
E-mail : prdus.de                                 Dr. Gunnar
Wrobel
Tel.   : +49 700 6245 0000                         
Bundesstrasse 29
Fax    : +49 721 1513 52322                          D-20146
Hamburg
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~
   >> Mail at ease - Rent a kolab groupware server at
prdus <<                 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

Re: delegation feature in debian etch
user name
2008-02-20 15:22:13
Hi Gunnar,

As far no answer from the debian group :/

however,i've managed to get it work better... at least now i can see in the logs that the kolabpolicy is called...

now, here's my config :

/etc/postfix/main.cf


# Debian specific:&nbsp; Specifying a file name will cause the first
# line of that file to be used as the name. ; The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

# TLS parameters
smtpd_tls_cert_file=/var/smtp/mail.pem
smtpd_tls_key_file=/var/smtp/mail.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = myhost.mydomain.org
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = myhost.mydomain.org, mydomain.org, localhost
relayhost =
mynetworks = 127.0.0.0/8
mailbox_command = procmail -a "$EXTENSION";
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all

virtual_alias_maps = ldap:/etc/postfix/kolab-ldapdistlist.cf,ldap:/etc/postfix/kolab-ldapvirtual.cf
# transport_maps = ldap:/etc/postfix/kolab-ldaptransport.cf

mailbox_transport = kolabmailboxfilter
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
# Support broken clients like Microsoft Outlook Express 4.x which expect AUTH=LOGIN instead of AUTH LOGIN
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated,reject_unauth_destination, reject_unlisted_recipient, check_policy_service unix:private/kolabpolicy
#smtpd_sender_restrictions = permit_mynetworks, check_policy_service unix:private/kolabpolicy

relay_domains=

kolabpolicy_time_limit = 3600
kolabpolicy_max_idle = 20

----------------------------------------------------------------------

/etc/postfix/master.cf

#
# Postfix master process configuration file. ; For details on the format
# of the file, see the master(5) manual page (command: "man 5 master&quot;).
#
# ==========================================================================
# service type  private unpriv&nbsp; chroot&nbsp; wakeup&nbsp; maxproc command + args
#&nbsp; &nbsp; &nbsp; &nbsp;   ; &nbsp; &nbsp; (yes) ;  (yes) ;  (yes) ;  (never) (100)
# ==========================================================================
smtp &nbsp; &nbsp;  inet  n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; smtpd
#submission inet n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; smtpd
#&nbsp; -o smtpd_enforce_tls=yes
#  -o smtpd_sasl_auth_enable=yes
#&nbsp; -o smtpd_client_restrictions=permit_sasl_authenticated,reject
smtps&nbsp;   ; inet  n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; smtpd
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
 ; -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#628&nbsp; &nbsp;   inet  n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; qmqpd
pickup &nbsp;  fifo  n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; 60 &nbsp; &nbsp;  1 &nbsp; &nbsp; &nbsp; pickup
cleanup&nbsp;  unix  n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; 0 &nbsp; &nbsp; &nbsp; cleanup
qmgr &nbsp; &nbsp;  fifo  n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; 300 &nbsp;   1 &nbsp; &nbsp; &nbsp; qmgr
#qmgr  ; &nbsp; fifo  n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; 300 &nbsp;   1 &nbsp; &nbsp; &nbsp; oqmgr
tlsmgr &nbsp;  unix  - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; 1000? ;  1 &nbsp; &nbsp; &nbsp; tlsmgr
rewrite&nbsp;  unix  - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; trivial-rewrite
bounce &nbsp;  unix  - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; 0 &nbsp; &nbsp; &nbsp; bounce
defer &nbsp; &nbsp; unix  - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; 0 &nbsp; &nbsp; &nbsp; bounce
trace &nbsp; &nbsp; unix  - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; 0 &nbsp; &nbsp; &nbsp; bounce
verify&nbsp; &nbsp; unix  - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; 1 &nbsp; &nbsp; &nbsp; verify
flush &nbsp; &nbsp; unix  n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; 1000? ;  0 &nbsp; &nbsp; &nbsp; flush
proxymap  unix  - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; proxymap
smtp &nbsp; &nbsp;  unix  - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay &nbsp; &nbsp; unix  - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; smtp
 ; &nbsp; -o fallback_relay=
#&nbsp; &nbsp; &nbsp;  -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq  ; &nbsp; unix  n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; showq
error &nbsp; &nbsp; unix  - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; error
discard &nbsp; unix  - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; discard
local &nbsp; &nbsp; unix  - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; local
virtual&nbsp;  unix  - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; virtual
lmtp &nbsp; &nbsp;  unix  - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; lmtp
anvil  ; &nbsp; unix  - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; 1 &nbsp; &nbsp; &nbsp; anvil
scache &nbsp;    unix   ; - &nbsp;  - &nbsp;  - &nbsp;  - &nbsp;  1 &nbsp;  scache
#
# ====================================================================
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.&nbsp; See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop&nbsp; unix  - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; pipe
 ; flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# See the Postfix UUCP_README file for configuration details.
#
uucp   ; &nbsp; unix  - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; pipe
&nbsp; flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail&nbsp; &nbsp; unix  - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; pipe
 ; flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp &nbsp; &nbsp; unix  - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; pipe
 ; flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix   ; - &nbsp;  n &nbsp;  n &nbsp;  - &nbsp;  2 &nbsp;  pipe
 ; flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store $ $ ${extension}
mailman &nbsp; unix  - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; pipe
 ; flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  $ $
kolabfilter&nbsp; &nbsp;  unix  - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; pipe user=nobody null_sender= argv=/usr/bin/php
 &nbsp; -c /etc/php4/cli/php.ini
 &nbsp; -f /usr/share/kolab-resource-handlers/kolabfilter.php
&nbsp;  --
 &nbsp; -h myhost.mydomain.org
  ; -s $
  ; -r ${recipient}
 &nbsp; -c ${client_address}

kolabmailboxfilter&nbsp; &nbsp;  unix  - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; pipe user=nobody null_sender= argv=/usr/bin/php
&nbsp;  -c /etc/php4/cli/php.ini
 &nbsp; -f /usr/share/kolab-resource-handlers/kolabmailboxfilter.php
&nbsp;  --
 &nbsp; -h myhost.mydomain.org
  ; -s $
  ; -r ${recipient}
 &nbsp; -c ${client_address}
kolabpolicy&nbsp; &nbsp; unix  - &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; n &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; - &nbsp; &nbsp; &nbsp; spawn user=kolab argv=/usr/sbin/kolab_smtpdpolicy -v

------------------------------------------------------------

and finally,

/etc/kolab/kolab_smtpdpolicy.conf

ldap_uri: ldap://127.0.0.1:389
basedn: dc=mydomain,dc=org
binddn: cn=manager,cn=internal,dc=mydomain,dc=org
bindpw: mypassword
domain: mydomain.org
allow_unauth: 1
permithosts: localhost

Do these config files seem good to you?

i can't understand why when putting allow_unauth: 0 then i get the following error when i send a mail from an external user to a kolab user

Feb 20 21:47:47 mailhost /usr/sbin/kolab_smtpdpolicy[18637]: Checking sender=&quot; megmail.com">megmail.com", recipient=" kolabusermydomain.org">kolabusermydomain.org", username=&quot;", domains= permithosts=localhost, conf_allowunauth=0
Feb 20 21:47:47 mailhost /usr/sbin/kolab_smtpdpolicy[18637]: LDAP search returned 0 objects
Feb 20 21:47:47 mailhost /usr/sbin/kolab_smtpdpolicy[18637]: Attempt to fake address megmail.com">megmail.com
Feb 20 21:47:47 mailhost /usr/sbin/kolab_smtpdpolicy[18637]: Action: REJECT Invalid sender
Feb 20 21:47:47 mailhost postfix/smtpd[18631]: NOQUEUE: reject: RCPT from myserver.gmail.com: 554 5.7.1 < megmail.com">megmail.com>: Sender address rejected: Invalid sender; from=< megmail.com">megmail.com> to=< olabusermydomain.org">olabusermydomain.org> proto=ESMTP helo=<smtp.gmail.com>

When i send a mail directly from Horde (which is on the same server) the policy is not called to treat the message... I suppose that it has something to do with the order of parameters in smtpd_recipient_restrictions ?

Many thanks for your help,

Eleni




[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )