[Dovecot] setup of dovecot as proxy to dbmail

Reindl Harald h.reindl at thelounge.net
Tue Sep 3 05:43:09 EEST 2013



Am 03.09.2013 04:22, schrieb Regan Yelcich:
> Can anyone point me in the direction of a detailed how-to for setting up a postfix and dovecot (proxy) node with dbmail?
> 
> In particular I'm looking for a how-to which shows dovecot authenticating against the dbmail database directly.
> 
> The only example I've found is this one which requires a duplication of the user database.
> http://content.fens.org/index.php?q=admin-howto/mail/dovecot2dbmail-proxy

no idea why someone would duplicate existing data
___________________________________________________

[root at testserver:~]$ cat /etc/dovecot/sql.conf
driver              = mysql
connect             = host=/var/lib/mysql/mysqld.sock dbname=dbmail user=dbmail password=***********
password_query      = SELECT passwd as password, '127.0.0.1' as host, userid as destuser, passwd AS pass, 'Y' AS
nologin, 'Y' AS nodelay, 'Y' AS proxy FROM dbmail_users WHERE userid='%u'
default_pass_scheme = plain
___________________________________________________

[root at testserver:~]$ cat /etc/dovecot/dovecot.conf
# provided services
protocols                      = imap pop3

# configure ssl
ssl                            = yes
ssl_cert                       = </etc/postfix/certs/localhost.pem
ssl_key                        = </etc/postfix/certs/localhost.pem
ssl_cipher_list                =
EECDH+AES:EDH+AES:-SHA1:EECDH+RC4:EDH+RC4:RC4-SHA:EECDH+AES256:EDH+AES256:AES256-SHA:HIGH:!aNULL:!eNULL:!EXP:!MD5:!LOW:!SSLv2

# configure imap-proxy
service imap-login {
  inet_listener imap {
    address                    = <public-ip>
    port                       = 143
  }
  inet_listener imaps {
    address                    = <public-ip>
    port                       = 993
  }
  vsz_limit                    = 256M
  service_count                = 0
  process_min_avail            = 1
  process_limit                = 1
  client_limit                 = 200
}

# configure pop3-proxy
service pop3-login {
  inet_listener pop3 {
    address                    = <public-ip>
    port                       = 110
  }
  inet_listener pop3s {
    address                    = <public-ip>
    port                       = 995
  }
  vsz_limit                    = 256M
  service_count                = 0
  process_min_avail            = 1
  process_limit                = 1
  client_limit                 = 200
}

# default settings
imap_capability                = IMAP4 IMAP4rev1 ACL RIGHTS=texk NAMESPACE CHILDREN SORT QUOTA
THREAD=ORDEREDSUBJECT UNSELECT IDLE
login_greeting                 =
login_log_format_elements      = %u %r %m %c
login_log_format               = %$: %s
mail_max_userip_connections    = 100
auth_mechanisms                = CRAM-MD5 DIGEST-MD5 APOP LOGIN PLAIN
disable_plaintext_auth         = no
shutdown_clients               = no
version_ignore                 = yes

# Logging
syslog_facility                = mail

# authentication process
auth_worker_max_count          = 50
auth_cache_size                = 1024
auth_cache_ttl                 = 600
auth_cache_negative_ttl        = 600
auth_username_chars            = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@%
auth_username_translation      = %@AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz

# debug options
auth_debug                     = no
auth_debug_passwords           = no
auth_verbose                   = no
mail_debug                     = no
verbose_ssl                    = no

# configure proxy-database
passdb {
 driver                        = sql
 args                          = /etc/dovecot/sql.conf
}

# we are not using local users
userdb {
 driver                        = static
 args                          = static uid=10000 gid=10000 home=/dev/null
}

# configure backend for postfix sasl-auth
service auth {
  unix_listener /var/spool/postfix/private/auth {
  mode                         = 0660
  user                         = postfix
  group                        = postfix
 }
}




-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 263 bytes
Desc: OpenPGP digital signature
URL: <http://dovecot.org/pipermail/dovecot/attachments/20130903/d04c67c8/attachment.bin>


More information about the dovecot mailing list