Biswajit at 14:28, 14 January 2013

2013-01-14T14:28:18Z

← Older revision		Revision as of 14:28, 14 January 2013
Line 1:		Line 1:
			[[category:Kortek Electronics]]


	= qmail LDAP Configuration. =		= qmail LDAP Configuration. =
	== Qmail Downloads ==		== Qmail Downloads ==

Biswajit: Created page with "= qmail LDAP Configuration. = == Qmail Downloads == '''wget '''[http://www.qmailrocks.org/downloads/qmailrocks.tar.gz http://www.qmailrocks.org/downloads/qmailrocks.tar.gz] ..."

2013-01-14T14:27:15Z

Created page with "= qmail LDAP Configuration. = == Qmail Downloads == '''wget '''[http://www.qmailrocks.org/downloads/qmailrocks.tar.gz http://www.qmailrocks.org/downloads/qmailrocks.tar.gz] ..."

New page

= qmail LDAP Configuration. =
== Qmail Downloads ==
'''wget '''[http://www.qmailrocks.org/downloads/qmailrocks.tar.gz http://www.qmailrocks.org/downloads/qmailrocks.tar.gz]

wget [http://www.nrg4u.com/qmail/qmail-ldap-1.03-20060201.patch.gz http://www.nrg4u.com/qmail/qmail-ldap-1.03-20060201.patch.gz]

wget [http://packages.sw.be/rpmforge-release/rpmforge-release-0.3.6-1.el5.rf.i386.rpm http://packages.sw.be/rpmforge-release/rpmforge-release-0.3.6-1.el5.rf.i386.rpm]

rpm -Uhv rpmforge-release-0.3.6-1.el5.rf.i386.rpm

yum install gcc*

yum install openldap*

yum install zlib*

yum install glib

yum install gdbm*

yum install openssl-devel

yum install php*

== Qmail Users / groups ==
mkdir -p /var/qmail

groupadd nofiles

useradd -g nofiles -d /var/qmail/alias -s /sbin/nologin -p'*' alias

useradd -g nofiles -d /var/qmail -s /sbin/nologin -p'*' qmaild

useradd -g nofiles -d /var/qmail -s /sbin/nologin -p'*' qmaill

useradd -g nofiles -d /var/qmail -s /sbin/nologin -p'*' qmailp

groupadd qmail

useradd -g qmail -d /var/qmail -s /sbin/nologin -p'*' qmailq

useradd -g qmail -d /var/qmail -s /sbin/nologin -p'*' qmailr

useradd -g qmail -d /var/qmail -s /sbin/nologin -p'*' qmails

groupadd vmail

useradd -g vmail -s /bin/true vmail

== Qmail Compilation ==
mkdir -p /var/qmail

mkdir /usr/src/qmail

cd /usr/src/qmail

tar xvzf /downloads/qmailrocks/qmail-1.03.tar.gz

cd qmail-1.03

cd /downloads

gzip -d qmail-ldap-1.03-20060201.patch.gz

cd /usr/src/qmail/qmail-1.03

<nowiki>patch -p1 < /downloads/qmail-ldap-1.03-20060201.patch </nowiki>

vim Makefile

<nowiki>-------------------------------------------------------------------------------------------</nowiki>

LDAPFLAGS=-DQLDAP_CLUSTER -DEXTERNAL_TODO -DDASH_EXT -DDATA_COMPRESS -DQMQP_COMPRESS -DSMTPEXECCHECK -DALTQUEUE

ZLIB=-lz

MDIRMAKE=-DAUTOMAILDIRMAKE

HDIRMAKE=-DAUTOHOMEDIRMAKE

SHADOWLIBS=-lcrypt

DEBUG=-DDEBUG

<nowiki>-----------------------------------------------------------------------------------------</nowiki>

vi extra.h

<nowiki>----------------</nowiki>

<nowiki>#ifndef EXTRA_H </nowiki>

<nowiki>#define EXTRA_H </nowiki>

<nowiki>#define QUEUE_EXTRA "Tarch\0" </nowiki>

<nowiki>#define QUEUE_EXTRALEN 6 </nowiki>

<nowiki>#endif </nowiki>

<nowiki>----------------</nowiki>

make setup check

== Qmail Configration and LDAP controls files ==
mkdir /var/qmail/supervise

cd /var/qmail/supervise

mkdir -p qmail-smtpd/log qmail-send/log qmail-pop3d/log

chmod +t qmail-smtpd qmail-send qmail-pop3d

mkdir /var/log/qmail

cd /var/log/qmail

mkdir qmail-send qmail-smtpd qmail-pop3d

chown -R qmaill:root /var/log/qmail

chmod -R 750 /var/log/qmail

cd /var/qmail/control

echo 100 > concurrencyincoming

echo 255 > concurrencyremote

echo ./Maildir/ > defaultdelivery

echo kortekelectronics.com > defaultdomain

echo 10000 > defaultquotacount

echo 10000000 > defaultquotasize

echo /var/qmail/bin/dirmaker > dirmaker

echo dc=kortekelectronics,dc=com > ldapbasedn

echo 0 > ldapcluster

id -g vmail > ldapgid

echo cn=manager,dc=kortekelectronics,dc=com > ldaplogin

echo /home/vmail > ldapmessagestore

echo qmailUser > ldapobjectclass

echo p4mail1server > ldappassword

echo 127.0.0.1 > ldapserver

id -u vmail > ldapuid

echo mail1.kortekelectronics.com > me

echo 127.:allow,NOPBS="" :deny > qmail-pop3d.rules

echo 800000000 > qmail-smtpd-softlimit

echo 3 > qmail-start-loglevel

echo 3 > qmail-pop3d-loglevel

'''echo 800000000 > qmail-pop3d-softlimit '''

echo " Your mail quota is overflowing, check it out" > quotawarning

echo kortekelectronics.com >> rcpthosts

echo mail1.kortekelectronics.com >> rcpthosts

ln -s rcpthosts locals

echo admin@kortekelectronics.com > /var/qmail/alias/.qmail-root

echo admin@kortekelectronics.com > /var/qmail/alias/.qmail-postmaster

echo admin@kortekelectronics.com > /var/qmail/alias/.qmail-mailer-daemon

ln -s /var/qmail/alias/.qmail-root /var/qmail/alias/.qmail-anonymous

chmod 644 /var/qmail/alias/.qmail*

cd /var/qmail

vi bin/dirmaker

<nowiki>-------------------------------------------------------------------------------------</nowiki>

<nowiki>#!/bin/sh</nowiki>

echo '----------------------------------------------' >> /tmp/dirmaker

date >> /tmp/dirmaker

echo $1 >> /tmp/dirmaker

id >> /tmp/dirmaker

mkdir --parents -m 700 -p $1/Maildir

mkdir --parents -m 700 -p $1/Maildir/tmp

mkdir --parents -m 700 -p $1/Maildir/cur

mkdir --parents -m 700 -p $1/Maildir/new

chown -R vmail:vmail $1

<nowiki>---------------------------------------------------------------------------------------</nowiki>

vi rc

<nowiki>---------------------------------------------------------------------------------------</nowiki>

<nowiki>#!/bin/sh</nowiki>

QLOG="`cat /var/qmail/control/qmail-start-loglevel`"

DEFD="`cat /var/qmail/control/defaultdelivery`"

exec env - PATH="/var/qmail/bin:$PATH" LOGLEVEL="$QLOG" qmail-start "$DEFD"

<nowiki>--------------------------------------------------------------------------------------------</nowiki>

chmod 755 rc bin/dirmaker

== UCSPI-TCP / Daemontools Install ==
cd /usr/src/qmail

tar zxvf /downloads/qmailrocks/ucspi-tcp-0.88.tar.gz

cd ucspi-tcp-0.88

<nowiki>patch < /downloads/qmailrocks/patches/ucspi-tcp-0.88.errno.patch</nowiki>

make && make setup check

mkdir -p /package

chmod 1755 /package

cd /package

tar zxvf /downloads/qmailrocks/daemontools-0.76.tar.gz

cd /package/admin/daemontools-0.76/src

<nowiki>patch < /downloads/qmailrocks/patches/daemontools-0.76.errno.patch</nowiki>

cd /package/admin/daemontools-0.76

package/install

== Qmail Run Files ==
cd /var/qmail/supervise

vi qmail-smtpd/run

<nowiki>------------------------------------------------------------------------------------------</nowiki>

<nowiki>#!/bin/sh</nowiki>

QUID=`id -u qmaild`

QGID=`id -g qmaild`

MAXD=`head -1 /var/qmail/control/concurrencyincoming`

HOST=`head -1 /var/qmail/control/me`

SOFT=`head -1 /var/qmail/control/qmail-smtpd-softlimit`

CDBF="/etc/tcp.smtp.cdb"

<nowiki>if [ -z "$QUID" -o -z "$QGID" -o -z "$MAXD" -o -z "$HOST" ]; then</nowiki>

'''echo QUID, QGID, MAXD, or HOST is unset in'''

'''echo /var/qmail/supervise/qmail-smtpd/run'''

'''exit 1'''

fi

exec /usr/local/bin/softlimit -m $SOFT \

'''/usr/local/bin/tcpserver -v \'''

'''-H \'''

'''-R \'''

'''-l $HOST \'''

'''-x $CDBF \'''

'''-c $MAXD \'''

'''-u $QUID \'''

'''-g $QGID \'''

'''0 \'''

'''smtp \'''

'''/var/qmail/bin/qmail-smtpd \'''

'''/var/qmail/bin/auth_smtp /usr/bin/true 2>&1'''

'''<nowiki>---------------------------------------------------------------------------------------------</nowiki>'''

vi qmail-smtpd/log/run

<nowiki>---------------------------------------------------------------------------------------------</nowiki>

<nowiki>#!/bin/sh</nowiki>

PATH=/var/qmail/bin:/usr/local/bin:/usr/bin:/bin

export PATH

exec /usr/local/bin/setuidgid qmaill /usr/local/bin/multilog t s10000000 n20 /var/log/qmail/qmail-smtpd 2>&1

<nowiki>---------------------------------------------------------------------------------------------</nowiki>

vi qmail-send/run

<nowiki>---------------------------------------------------------------------------------------------</nowiki>

<nowiki>#!/bin/sh</nowiki>

exec /var/qmail/rc

<nowiki>---------------------------------------------------------------------------------------------</nowiki>

vi qmail-send/log/run

<nowiki>---------------------------------------------------------------------------------------------</nowiki>

<nowiki>#!/bin/sh</nowiki>

exec /usr/local/bin/setuidgid qmaill /usr/local/bin/multilog t s10000000 n20 /var/log/qmail/qmail-send 2>&1

<nowiki>----------------------------------------------------------------------------------------------</nowiki>

vi qmail-pop3d/run

<nowiki>----------------------------------------------------------------------------------------------</nowiki>

<nowiki>#!/bin/sh</nowiki>

IP=`head -1 /var/qmail/control/me`

LL=`head -1 /var/qmail/control/qmail-pop3d-loglevel`

SL=`head -1 /var/qmail/control/qmail-pop3d-softlimit`

exec \

env LOGLEVEL=$LL \

softlimit -m $SL \

/usr/local/bin/tcpserver -v -R -H -l 0 0 pop3 \

/var/qmail/bin/qmail-popup $IP \

/var/qmail/bin/tcp-env \

/var/qmail/bin/auth_pop \

/var/qmail/bin/qmail-pop3d Maildir 2>&1

vi qmail-pop3d/log/run

<nowiki>--------------------------------------------------------------</nowiki>

<nowiki>#!/bin/sh </nowiki>

PATH=/var/qmail/bin:/usr/local/bin:/usr/bin:/bin

export PATH

exec setuidgid qmaill multilog t s10000000 n20 /var/log/qmail/qmail-pop3d 2>&1 --------------------------------------------------------------

vi /etc/tcp.smtp

<nowiki>---------------------------------------------------------------------------------------------------</nowiki>

127.:allow,RELAYCLIENT="",MAXRCPTCOUNT="25"

10.:allow,RELAYCLIENT="",MAXRCPTCOUNT="25"

:deny

<nowiki>#10.:allow,RELAYCLIENT="",SMTPAUTH="",AUTHREQUIRED="",SENDERCHECK="",LOGLEVEL="3",RCPTCHECK="",NOPBS="",SANITYCHECK="",BLCKRELAYPRBE=""</nowiki>

<nowiki>---------------------------------------------------------------------------------------------------</nowiki>

cd /var/qmail

rsync -avur /downloads/qmailrocks/scripts/finalize/qmailctl bin/.

ln -s /var/qmail/bin/qmailctl /usr/bin

== Qmail others configuration ==
/etc/init.d/sendmail stop

chkconfig sendmail off

mv /usr/lib/sendmail /usr/lib/sendmail.org

mv /usr/sbin/sendmail /usr/sbin/sendmail.org

ln -s /var/qmail/bin/sendmail /usr/lib/sendmail

ln -s /var/qmail/bin/sendmail /usr/sbin/sendmail

cd /var/qmail/supervise/

chmod +x */run

chmod +x */log/run

mkdir -p /service

ln -s /var/qmail/supervise/qmail-send /var/qmail/supervise/qmail-smtpd /var/qmail/supervise/qmail-pop3d /service

= OPENLDAP Integration with QMAIL-LDAP =
== Configuration ==
cd /downloads

wget http://phpqladmin.com/phpQLAdmin-2.2.7.tar.gz

tar zxvf /downloads/phpQLAdmin-2.2.7.tar.gz

cd /etc/openldap

cp /usr/src/qmail/qmail-1.03/qmail.schema schema/.

cp /downloads/phpQLAdmin-2.2.7/schemas/phpQLAdmin.schema schema/.

vim slapd.conf

<nowiki>-----------------------------------------------------------------------------------------------------</nowiki>

include /etc/openldap/schema/core.schema

include /etc/openldap/schema/cosine.schema

include /etc/openldap/schema/inetorgperson.schema

include /etc/openldap/schema/nis.schema

include /etc/openldap/schema/qmail.schema

include /etc/openldap/schema/phpQLAdmin.schema

<nowiki># </nowiki>Directives needed to implement policy:

database bdb

suffix "dc=kortekelectronics,dc=com"

rootdn "cn=Manager,dc=kortekelectronics,dc=com"

rootpw p4mail1server

<nowiki>-------------------------------------------------------------------------------------------------</nowiki>

vi ldap.conf

<nowiki>------------------------------------------------------------------------------------------------</nowiki>

HOST 127.0.0.1

BASE dc=kortekelectronics,dc=com

<nowiki>------------------------------------------------------------------------------------------------</nowiki>

<nowiki>---------------------------------------------------------------------------------------------------</nowiki>

vim schema/phpQLAdmin.schema

<nowiki>--------------------------------------------------------------------------------------------------</nowiki>

( Uncomment the following line )

<nowiki># This is also availible in krb5-kdc.schema (from OpenLDAP.org)</nowiki>

attributetype ( 1.3.6.1.4.1.5322.10.1.12

NAME 'krb5RealmName'

EQUALITY octetStringMatch

SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} )

<nowiki>#</nowiki>

attributetype ( 1.3.6.1.4.1.5322.10.1.1

NAME 'krb5PrincipalName'

DESC 'The unparsed Kerberos principal name'

EQUALITY caseExactIA5Match

SINGLE-VALUE

SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

<nowiki># PQL_ATTR_KRB5_ADMIN_SERVER</nowiki>

attributetype ( 1.3.6.1.4.1.8767.3.2.2.15 NAME 'krb5AdminServer'

DESC 'Fully Qualified Host Name of the Kerberos admin server'

EQUALITY caseExactIA5Match

SYNTAX 1.3.6.1.4.1.1466.115.121.1.26

SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.8767.3.2.4.1 NAME 'defaultDomain'

DESC 'Default domain name for the branch'

EQUALITY caseIgnoreMatch

SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1024}

SINGLE-VALUE )

<nowiki>------------------------------------------------------------------------------------------------</nowiki>

/etc/init.d/ldap start

== Creation of LDAP datbase and LDIF FILES. ==
# ldif for creating base

vi base.ldif

<nowiki>------------------------------------------------------------------------</nowiki>

<nowiki>#</nowiki>kortekelectronics.com

dn: dc=kortekelectronics,dc=com

objectClass: top

objectClass: domain

dc: kortekelectronics

<nowiki>---------------------------------------------------------------------------------------</nowiki>

# ldif for creating organizational unit

vi ou.ldif

<nowiki>------------------------------------------------------------------------------------------</nowiki>

<nowiki>#kortekelectronics.com</nowiki>

dn: ou=users,dc=kortekelectronics,dc=com

objectClass: top

objectClass: organizationalUnit

ou: users

description: users

<nowiki>------------------------------------------------------------------------------------------</nowiki>

c. ldif file for creating Admin User.

(Note: Password is postmaster )

vi admin.ldif

<nowiki>-----------------------------------------------------------------------------------------</nowiki>

<nowiki># admin, kortekelectronics.com</nowiki>

dn: uid=admin,ou=users,dc=kortekelectronics,dc=com

objectClass: top

objectClass: inetOrgPerson

objectClass: qmailuser

cn: admin admin

sn: admin admin

mail: admin@kortekelectronics.com

accountStatus: active

userPassword:: e0NSWVBUfU9XY3dPTS9IekVBT2s=

mailMessageStore: kortekelectronics.com/admin

uid: admin

deliveryMode: noforward

<nowiki>------------------------------------------------------------------------------------------</nowiki>

== Commnad to create user/ database ==
ldapadd -acvx -D"cn=Manager,dc=''kortekelectronics'',dc=com" -w p4mail1server -f base.ldif

ldapadd -acvx -D"cn=Manager,dc=''kortekelectronics'',dc=com" -w p4mail1server -f ou.ldif

ldapadd -acvx -D"cn=Manager,dc=''kortekelectronics'',dc=com" -w p4mail1server -f admin.ldif

= Courier IMAP Integration. =
== Compilation and its parameters ==
cd /downloads/qmailrocks/

tar jxvf courier-authlib-0.55.tar.bz2

cd courier-authlib-0.55

./configure --prefix=/usr/local --exec-prefix=/usr/local --with-authldap --without-authmysql --disable-root-check --with-ssl --with-authchangepwdir=/usr/local/libexec/authlib --with-redhat

make && make check

make install-strip && make install-configure

vi /etc/rc.local

( Add following line )

<nowiki>----------------------------------------------------------------------------------------------------</nowiki>

/usr/local/sbin/authdaemond start

<nowiki>-----------------------------------------------------------------------------------------------------</nowiki>

cd /downloads/qmailrocks/

tar jxvf courier-imap-4.0.2.tar.bz2

useradd bsmith

chown -R bsmith:wheel courier-imap-4.0.2

cd /downloads/qmailrocks/courier-imap-4.0.2

su bsmith

./configure --prefix=/usr/local --exec-prefix=/usr/local --without-authvchkpw --with-authldap --without-authmysql --disable-root-check --with-ssl --with-authchangepwdir=/usr/local/libexec/authlib --with-redhat

make && make check

exit

make install-strip && make install-configure

/usr/local/sbin/mkimapdcert

vi /usr/local/etc/imapd.cnf

(Change postmaser@example.com an administrative email address )

<nowiki>------------------------------------------------------------------------------------------------------</nowiki>

…………………………..

………………………….

emailAddress=admin@kortekelectronics.com

……………………………

<nowiki>-------------------------------------------------------------------------------------------------------</nowiki>

== Configuration changes ==
vi /usr/local/etc/imapd

<nowiki>-------------------------------------------------------------------------------------------------------</nowiki>

IMAPDSTART=YES

<nowiki>-------------------------------------------------------------------------------------------------------</nowiki>

vi /usr/local/etc/imapd-ssl

<nowiki>-------------------------------------------------------------------------------------------------------</nowiki>

IMAPDSSLSTART=YES

TLS_CERTFILE=/usr/local/share/imapd.pem

<nowiki>-------------------------------------------------------------------------------------------------------</nowiki>

vi /usr/local/etc/authlib/authdaemonrc

<nowiki>-------------------------------------------------------------------------------------------------------</nowiki>

authmodulelist="authldap"

authmodulelistorig="authldap"

<nowiki>-------------------------------------------------------------------------------------------------------</nowiki>

vi /usr/local/etc/authlib/authldaprc

<nowiki>-------------------------------------------------------------------------------------------------------</nowiki>

LDAP_SERVER localhost

LDAP_PORT 389

LDAP_PROTOCOL_VERSION 3

LDAP_BASEDN dc=kortekelectronics,dc=com

LDAP_BINDDN cn=manager, dc=kortekelectronics,dc=com

LDAP_BINDPW p4mail1server

LDAP_TIMEOUT 5

LDAP_AUTHBIND 1

LDAP_MAIL uid

LDAP_GLOB_UID vmail

LDAP_GLOB_GID vmail

LDAP_HOMEDIR mailMessageStore

LDAP_MAILROOT /home/vmail

LDAP_DEFAULTDELIVERY defaultDelivery

LDAP_FULLNAME cnmail.kortekelectronics.com

LDAP_CLEARPW clearPassword

LDAP_CRYPTPW userPassword

<nowiki>#LDAP_CRYPTPW </nowiki>sambaLMPassword

LDAP_DEREF never

LDAP_TLS 0

<nowiki>---------------------------------------------------------------------------------------------------</nowiki>

cp /usr/local/libexec/imapd.rc /etc/rc.d/init.d/imap

cp /usr/local/libexec/imapd-ssl.rc /etc/rc.d/init.d/imaps

vi /etc/rc.local

( Add following line )

<nowiki>----------------------------------------------------------------------------------------------------</nowiki>

/etc/rc.d/init.d/imap start

/etc/rc.d/init.d/imaps start

<nowiki>-----------------------------------------------------------------------------------------------------</nowiki>

/usr/local/sbin/authdaemond stop

/usr/local/sbin/authdaemond start

/etc/rc.d/init.d/imap stop

/etc/rc.d/init.d/imaps stop

/etc/rc.d/init.d/imap start

/etc/rc.d/init.d/imaps start

qmailctl cdb

'''phpldapadmin'''

yum install php -y

yum install php-ldap -y

cd /downloads

wget http://downloads.sourceforge.net/project/phpldapadmin/phpldapadmin-php5/1.2.0.5/phpldapadmin-1.2.0.5.tgz?use_mirror=nchc

tar zxvf phpldapadmin-1.2.0.5.tgz

mv phpldapadmin-1.2.0.5 /var/www/html/phpldapadmin

cd /var/www/html/phpldapadmin

mv config/config.php.example config/config.php

mkdir templates/creation/old templates/modification/old

mv templates/creation/* templates/creation/old/

mv templates/modification/* templates/modification/old/

vi /etc/php.ini

memory_limit = 128M

'''Webmail'''

cd /downloads

wget http://downloads.sourceforge.net/project/squirrelmail/stable/1.4.20/squirrelmail-1.4.20.tar.gz?use_mirror=space

tar zxvf squirrelmail-1.4.20.tar.gz

mv squirrelmail-1.4.20 /var/www/html/webmail

cd /var/www/html/webmail

mkdir /var/sqattachements

'''chown -R apache:apache /var/sqattachements'''

'''chown -R apache:apache data'''

'''cd config'''

'''./conf.pl'''

'''Clam Antivirus & SpamAssassin'''

install these perl modules using cpan

'''Digest::SHA1Digest::HMACNet::DNSTime::HiResHTML::TagsetHTML::ParserPod::UsageParse::SyslogStatistics::Distributions'''

yum install perl-suidperl

yum install unzip

'''cd /downloads/qmailrocks/'''

rpm -Uvh clamav-0.87-1.i386.rpm

'''rpm -Uvh clamav-devel-0.87-1.i386.rpm'''

'''vi /etc/clamd.conf'''

change User clamav to

<nowiki>--------------------</nowiki>

User qscand

<nowiki>--------------------</nowiki>

'''useradd -c "Qmail-Scanner Account" -s /bin/false qscand '''

chown qscand.qscand /var/log/clamav/

'''/etc/init.d/clamd stop'''

'''/etc/init.d/clamd start '''

Qmail LDAP Configuration for Kortek Electronics - Revision history

Biswajit at 14:28, 14 January 2013

Biswajit: Created page with "= qmail LDAP Configuration. = == Qmail Downloads == '''wget '''[http://www.qmailrocks.org/downloads/qmailrocks.tar.gz http://www.qmailrocks.org/downloads/qmailrocks.tar.gz] ..."