Editing CBpolicyD on Postfix for Tetra Relay Servers (section)

== Configurations ==
 

 vi /etc/policyd/cluebringer.conf
 Change the following
 DSN=DBI:mysql:database=policyd;host=localhost
 Username=root
 Password=Tetra321

'''For Web Access''' 

 vi /etc/policyd/webui.conf
 #$DB_DSN="sqlite:////tmp/cluebringer.sqlite";
 $DB_DSN="mysql:host=localhost;dbname=policyd";
 $DB_USER="root";
 $DB_PASS="Tetra321";

 vi /etc/httpd/conf.d/cluebringer.conf	
 Change the following 
 Alias /cluebringer /usr/share/cluebringer/webui
 <Directory /usr/share/cluebringer/webui>
    # Comment out the following 3 lines to make web ui accessible from anywhere
        AllowOverride AuthConfig
        Order Deny,Allow
        #Deny from all
        Allow from all
 </Directory>

'''Create Web Access protections with username and password''' 

 vi /usr/share/cluebringer/webui/.htaccess
 Add following in new file 
 AuthUserFile /usr/share/cluebringer/webui/.htpasswd
 AuthGroupFile /dev/null
 AuthName "user and password"
 AuthType Basic
 #
 <LIMIT GET>
 require valid-user
 </LIMIT>

'''Create user'''

 htpasswd -c /usr/share/cluebringer/webui/.htpasswd tetra_service
 password: System_0099?

 systemctl status httpd	
 systemctl enable httpd	
 systemctl start httpd	
 systemctl restart cbpolicyd
 systemctl enable cbpolicyd
'''
Configuration at Postfix for integration''' 

 vi /etc/postfix/main.cf
 change the line to 
 smtpd_recipient_restrictions = check_policy_service inet:127.0.0.1:10031, check_sender_access hash:/etc/postfix/sender_access, permit_mynetworks, permit_sasl_authenticated, reject_sender_login_mismatch, reject_unauth_destination
 systemctl restart postfix	
 tail -f /var/log/cbpolicyd.log
 tail -f /var/log/maillog