April 2024 - dovecot - dovecot.org

Re: Fwd: Dovecot, Load Balancing and SSL
by Joseph Tam 04 Apr '24

04 Apr '24

leon(a)relay.gb.net writes: > I wonder if someone would provide me with some advice. I've been setting > up a couple of Postfix servers just for fun. I've got two Postfix > servers m1.domain.com and m2.domain.com. I can send and receive mail via > both of them. Ive also got Postfixadmin and RoundCube on them and I'm > replicating the database over both servers. > > I introduced a load balancer. Postfixadmin and Roundcube work perfectly. > However. When I send mail from Thunderbird. M1 reports that the > certificate does not match. It's expecting a certificate for > mail.domain.com. Complaints when you're sending mail? This is not Dovecot's problem, but Postfix's. If you're setting your SMTP outgoing to M1, then the certificate M1 uses have M1 as a subject. If you're setting the outgoing mail server as "mail.domain.com" load balanced to M1/M2, then both your Postifx servers need to use the same certificate with "mail.domain.com" as a subject. Simple as that. Joseph Tam <jtam.home(a)gmail.com>

1 0

Dovecot, Load Balancing and SSL
by leon＠relay.gb.net 04 Apr '24

04 Apr '24

Hi Everyone! I wonder if someone would provide me with some advice. I've been setting up a couple of Postfix servers just for fun. I've got two Postfix servers m1.domain.com and m2.domain.com. I can send and receive mail via both of them. Ive also got Postfixadmin and RoundCube on them. I introduced a load balancer. Postfixadmin and Roundcube work perfectly. However. When I send mail from Thunderbird. M1 reports that the certificate does not match. It's expecting a certificate for mail.domain.com. On M1 I thought I would try to specify the location of the SSL when using mail.domain.com. I placed the certificate in the NAS and specified it in the 10-ssl file. I did this as per the docs. mail.domain.com local_name mail.domain.com { ssl_cert = </nas/ssl/fullchain.pem ssl_key = </nas/ssl/privkey.pem } It doesn't work. And I'm not entirely sure why M2 works and M1 doesn't. As far as I can see I haven't specified or placed a certificate for mail.domain.com on M2 and searching my bash history doesn't produce anything related to mail.domain.com. So how can I load balance email connections over my two servers without getting a damn certificate warning? Any help would be much appreciated. Thanks.

2 3

Any way to make a shared mailbox(not a shared folder)
by Maksim Rodin 02 Apr '24

02 Apr '24

Hello I wonder if there is a right way to make a shared mailbox? I do not mean "shared folder" but a whole mailbox. E.g. I have a mailbox info(a)company.com and I have a user mailbox user1(a)company.com. I would like that a user which can already authenticate as user1(a)company.com can setup another account in his Thunderbird as, say, user1@company.com\info@company.com or something like user1*info, enters his own password and can use the mailbox info(a)company.com as his second mailbox. It might be something similar to master user feature but I do not want the user1(a)company.com to have access to all the mailboxes on the dovecot imap server. -- Regards Maksim Rodin

4 6