zoukankan      html  css  js  c++  java
  • CentOS 6.4 x64 postfix + dovecot + 虚拟用户认证

    第一, 首先必须安装 apacache  mysql  php    

    CentOS 直接使用 yum 安装

    yum -y install httpd httpd-devel mysql php-mysql mysql-server mysql-devel  mysql-test mysql-connector-odbc64 php pam-devel perl-ExtUtils-CBuilder perl-ExtUtils-MakeMaker

    第二,安装Postfix邮件

    tar zxvf postfix-2.10.0.tar.gz

    cd postfix-2.10.0

    groupadd  -g 1200 postdrop

    groupadd  -g 25 postfix

    useradd  -u 25 -g 25 -G postdrop -s /sbin/nologin -M postfix

    make -f Makefile.init makefiles 'CCARGS=-DHAS_MYSQL -I/usr/include/mysql' 'AUXLIBS=-L/usr/lib64/mysql -lmysqlclient -lz -lm'

    make install

    其间需要配置,我们按照默认方式既可,一直按按回车,既为默认模式安装

    输出以下信息:

    ----------------------------------------------------------------------------------------------------------------------------

        Warning: you still need to edit myorigin/mydestination/mynetworks

        parameter settings in /etc/postfix/main.cf.

        See also http://www.postfix.org/STANDARD_CONFIGURATION_README.html

        for information about dialup sites or about sites inside a firewalled

        network.

        BTW: Check your /etc/aliases file and be sure to set up aliases

        that send mail for root and postmaster to a real person, then run

        /usr/bin/newaliases.

    -----------------------------------------------------------------------------------------------------------------------------

    这里先关闭系统自带的sendmail

    chkconfig --level 2345 sendmail off

    激活别名功能  

    newaliases

    使用postconf 可查看支持

    postconf -m |grep mysql  查看是否支持mysql

    第三,下面配置postfix

    vim /etc/postfix/main.cf

    修改 myhostname 为邮件域名

    myhostname = mail.11111.com    改成自己的主机名

    myorigin = $mydomain

    inet_interfaces = all

    mynetworks = 127.0.0.0/8  

    home_mailbox = Maildir/

    启动 postfix 

    postfix start

    ---------------------------------------------------------------------

    postfix/postfix-script: starting the Postfix mail system

    ----------------------------------------------------------------------

    第四,安装配置 dovecot

    1. 新建 dovecot 用户

    useradd  -M -s /sbin/nologin dovecot

    编译安装 dovecot

    tar zxvf dovecot-1.1.4.tar.gz 

    cd dovecot-1.1.4

    ./configure --sysconfdir=/etc/ --with-mysql

    make -j 2 && make install

    2. 配置 dovecot

    cp /etc/dovecot-example.conf  /etc/dovecot.conf

    vim /etc/dovecot.conf

    protocols = imap imaps pop3 pop3s

    disable_plaintext_auth = no

    ssl_disable = yes

    mail_location = maildir:~/opt/mailbox/%d/%n/Maildir

    3. 启动dovecot  (-c指定配置文件)

    /usr/local/sbin/dovecot -c /etc/dovecot.conf

    ps aux|grep dovecot 

    lsof -i:110 

    lsof -i:143

    第五,添加mysql 虚拟用户支持

    tar zxvf extman-1.1.tar.gz

    cd extman-1.1/docs/

    1.导入数据库

    mysql -uroot -p < extmail.sql

    mysql -uroot -p < init.sql

    2. 拷贝mysql认证配置文件到 postfix 目录

    cp mysql_virtual_* /etc/postfix/

    3. 建虚拟用户vuser

    groupadd -g 1000 vuser

    useradd -u 1000 -g 1000 -s /sbin/nologin -M vuser

    mkdir /opt/mailbox

    chown -R vuser:vuser /opt/mailbox

    4. 修改main.cf 配置文件,增加以下内容支持mysql 认证查询

    vim /etc/postfix/main.cf

    # extmail config here

    virtual_mailbox_base = /opt/mailbox

    virtual_uid_maps = static:1000

    virtual_gid_maps = static:1000

    virtual_transport = virtual

    virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf

    virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf

    virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf

    virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql_virtual_limit_maps.cf

    第六,搭建extmail

    1. 安装依赖包.

    tar zxvf Unix-Syslog-1.1.tar.gz

    cd Unix-Syslog-1.1

    perl Makefile.PL && make && make install

    cd ..

    tar zxvf DBI-1.616.tar.gz

    cd DBI-1.616

    perl Makefile.PL && make && make install

    cd ..

    tar zxvf DBD-mysql-4.020.tar.gz 

    cd DBD-mysql-4.020

    perl Makefile.PL && make && make install

    cd ..

    2. 安装 extmail

    tar zxvf extmail-1.2.tar.gz

    cp -r extmail-1.2 /opt/htdocs/extmail

    cd /opt/htdocs/extmail/

    chown -R postfix:postfix cgi/

    cp webmail.cf.default webmail.cf

    vim webmail.cf

    SYS_CONFIG = /opt/htdocs/extmail/

    SYS_LANGDIR = /opt/htdocs/extmail/lang

    SYS_TEMPLDIR = /opt/htdocs/extmail/html

    SYS_MAILDIR_BASE = /opt/mailbox

    SYS_MYSQL_USER = extmail

    SYS_MYSQL_PASS = extmail

    SYS_MYSQL_DB = extmail

    SYS_MYSQL_HOST = localhost

    SYS_MYSQL_SOCKET = /var/lib/mysql/mysql.sock

    SYS_G_ABOOK_FILE_PATH = /opt/htdcos/extmail/globabook.cf

    3. 配置httpd 虚拟主机

    vim /etc/httpd/conf/httpd.conf

    User vuser

    Group vuser

    <VirtualHost *:80>

        ServerAdmin admin@moxian.com

        DocumentRoot /var/www/html/extmail/html

        ServerName mail.moxian.com

        ErrorLog logs/error.log

        CustomLog logs/access.log common

    ScriptAlias /extmail/cgi/ "/var/www/html/extmail/cgi/"

        Alias /extmail "/var/www/html/extmail/html/"

    </VirtualHost>

    第七,搭建extman

    1. 安装依赖包.

    yum install gd-devel -y

    tar zxvf GD-2.46.tar.gz 

    cd GD-2.46

    perl Makefile.PL && make && make install

    cd ..

    tar zxvf File-Tail-0.99.3.tar.gz

    cd File-Tail-0.99.3

    perl Makefile.PL && make && make install

    cd ..

    2. 安装图形日志依赖包rrdtool,rrdtool-perl  (centos 6.0以上的可用 yum 安装   yum -y install rrdtool rrdtool-perl ) 

    centos默认yum源中没有这两个包,所以需要手动添加yum源来安装这两个包

    vim /etc/yum.repos.d/CentOS-Base.repo

    ---------------------------------------------------------------

    [dag]

    name=Dag RPM Repository for Red Hat Enterprise Linux

    baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag

    gpgcheck=1

    gpgkey=http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt

    enabled=1

    -------------------------------------------------------------------

    yum install rrdtool rrdtool-perl -y

    3. 安装extman

    tar zxvf extman-1.1.tar.gz

    cp -r extman-1.1 /opt/htdocs/extman

    cd /opt/htdocs/extman/

    chown -R postfix:postfix cgi/

    mkdir /tmp/extman

    chown -R postfix:postfix /tmp/extman/

    chmod -R 777 /tmp/extman/

    4. 修改extman配置参数, 让其支持MYSQL 查询

    cp webman.cf.default webman.cf

    vim webman.cf

    SYS_CONFIG = /opt/htdocs/extman/

    SYS_LANGDIR = /opt/htdocs/extman/lang

    SYS_TEMPLDIR = /opt/htdocs/extman/html

    SYS_MAILDIR_BASE = /opt/mailbox

    SYS_SESS_DIR = /tmp/extman/

    SYS_DEFAULT_UID = 1000

    SYS_DEFAULT_GID = 1000

    SYS_MYSQL_USER = webman

    SYS_MYSQL_PASS = webman

    SYS_MYSQL_DB = extmail

    SYS_MYSQL_HOST = localhost

    SYS_MYSQL_SOCKET = /var/lib/mysql/mysql.sock

    5. 修改虚拟主机配置文件,使其支持extman

    在上面虚拟机中添加

    <VirtualHost *:80>

        .......

        ScriptAlias /extman/cgi "/opt/htdocs/extman/cgi/"

        Alias /extman "/opt/htdocs/extman/html/"</VirtualHost>

    6. 启动extman 中自带的图形化支持脚本

    /opt/htdocs/extman/daemon/cmdserver -d

    cp -a /opt/htdocs/extman/addon/mailgraph_ext/ /usr/local/

    /opt/htdocs/extman/addon/mailgraph_ext/mailgraph-init start

    /opt/htdocs/extman/addon/mailgraph_ext/qmonitor.pl &

    第八,虚拟用户发信认证

    1. 安装courier-authlib认证软件包

    tar jxvf courier-authlib-0.62.4.tar.bz2

    cd courier-authlib-0.62.4

    ./configure --prefix=/usr/local/courier-authlib --without-stdheaderdir --with-authmysql --with-mysql-libs=/usr/lib64/mysql/ --with-mysql-includes=/usr/include/mysql/  

    make -j 8 && make install && make install-configure

    2. 把courier-authlib链接库添加进系统默认支持库

    vim /etc/ld.so.conf.d/courier-authlib.conf

    /usr/local/courier-authlib/lib/courier-authlib

    3. 编辑authdaemonrc,使其支持mysql认证

    cd /usr/local/courier-authlib/etc/authlib/

    vim authdaemonrc

    authmodulelist="authmysql"

    authmodulelistorig="authmysql"

    chmod -R 755 /usr/local/courier-authlib/var/spool/authdaemon/

    4. 编辑authmysqlrc设置和mysql的连接参数.

    cd /usr/local/courier-authlib/etc/authlib/

    vim authmysqlrc

    MYSQL_SERVER            localhost

    MYSQL_USERNAME          extmail

    MYSQL_PASSWORD          extmail

    MYSQL_SOCKET            /var/lib/mysql/mysql.sock

    MYSQL_PORT              3306

    MYSQL_DATABASE          extmail

    MYSQL_USER_TABLE        mailbox

    MYSQL_CRYPT_PWFIELD     password

    MYSQL_UID_FIELD         1000

    MYSQL_GID_FIELD         1000

    MYSQL_LOGIN_FIELD       username

    MYSQL_HOME_FIELD        concat('/opt/mailbox/',homedir)

    MYSQL_NAME_FIELD        name

    MYSQL_MAILDIR_FIELD     concat('/opt/mailbox/',maildir)

    5. 将脚本文件添加进默认环境变量中,并添加开机启动程序

    cp /opt/software/courier-authlib-0.62.4/courier-authlib.sysvinit /usr/local/bin/courier-authlib 

    chmod 755  /usr/local/bin/courier-authlib

    courier-authlib start

    6. 新建smtpd.conf文件,使postfix支持认证。

    vim /usr/lib64/sasl2/smtpd.conf

    ----------------------------------------------------------------------------

    pwcheck_method: authdaemond

    mech_list:PLAIN LOGIN

    authdaemond_path:/usr/local/courier-authlib/var/spool/authdaemon/socket

    -----------------------------------------------------------------------------

    cp -a /usr/local/courier-authlib/sbin/authtest /usr/local/sbin/

    第九,虚拟用户收信认证

    1. 编辑dovecot.conf 文件 打开mysql认证,关闭默认pam认证

    vim /etc/dovecot.conf

    --------------------------------------------------------------------------------------------------

    protocols = imap imaps pop3 pop3s  <---默认没有打开pop3,需要手动添加

    disable_plaintext_auth = no       <------允许plain认证

    ssl_disable = yes<------禁用ssl加密

    mail_location = maildir:~/opt/mailbox/%d/%n/Maildir

    mechanisms = plain

     #passdb pam {<--默认是打开的,需要注释掉

     #}

     passdb sql {

            args = /etc/dovecot-mysql.conf

        }

      userdb sql {

            args = /etc/dovecot-mysql.conf    

    }

    ---------------------------------------------------------------------------------------------------

    2. 创建dovecot-mysql.conf,设置和mysql连接及查询参数

    vim /etc/dovecot-mysql.conf

    -----------------------------------------------------------------------------------------------------------------

    driver = mysql

    connect  =  host=localhost  dbname=extmail  user=extmail  password=extmail

    default_pass_scheme  =  CRYPT

    password_query  =  SELECT  username  AS  user,password  AS  password  FROM  mailbox  WHERE  username  = '%u'

    user_query  =  SELECT  maildir,  uidnumber  AS  uid,  gidnumber  AS  gid  FROM  mailbox  WHERE  username  =  '%u'

    --------------------------------------------------------------------------------------------------------------------

    3. 重启 dovecot  

    pkill dovecot

    dovecot -c /etc/dovecot.conf

    第十,虚拟用户SASL身份认证

    1. 重新编译 postfix

    postfix stop

    make makefiles 'CCARGS=-DHAS_MYSQL -I/usr/include/mysql -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl  -DUSE_TLS ' 'AUXLIBS=-L/usr/lib64/mysql -lmysqlclient -lz -lm -L/usr/lib64/sasl2 -lsasl2   -lssl -lcrypto'

    make -j 8

    2. 升级postfix  (升级)

    make upgrade

    重新启动 postfix 

    postfix start

    postconf  -a  查看是否支持 cyrus

    3. 修改main.cf配置文件,配置sasl认证参数

    vim /etc/postfix/main.cf

    在最后面增加 sasl认证

    #sasl认证

    smtpd_sasl_auth_enable = yes

    broken_sasl_auth_clients = yes

    smtpd_sasl_security_options = noanonymous

    smtpd_recipient_restrictions =

            permit_mynetworks,

            permit_sasl_authenticated,

            reject_non_fqdn_hostname,

            reject_unknown_sender_domain,

            reject_non_fqdn_sender,

            reject_non_fqdn_recipient,

            reject_unauth_destination,

            reject_unauth_pipelining,

            reject_invalid_hostname

    smtpd_sender_login_maps =

            mysql:/etc/postfix/mysql_virtual_sender_maps.cf,

            mysql:/etc/postfix/mysql_virtual_alias_maps.cf

    邮件过滤 dkim-milter

    --------------------------------------------------------------------------------------------------

    rpm -ivh http://download4.fedora.redhat.com/pub/epel/5/`uname -i`/dkim-milter-2.8.3-8.el5.`uname -i`.rpm --nodeps
    wget -O dkim-milter.tar.gz http://sourceforge.net/projects/dkim-milter/files/latest/download?source=files
    tar zxvf dkim-milter.tar.gz
    cd  dkim-milter-*
    mkdir -p /etc/dkim-milter/keys/
    cp ./dkim-filter/dkim-genkey.sh /etc/dkim-milter/keys/
    cd /etc/dkim-milter/keys/
    chmod +x ./dkim-genkey.sh
    chown dkim-milter /etc/dkim-milter
    chmod 700 /etc/dkim-milter
    chgrp postfix /var/run/dkim-milter
    chmod 770 /var/run/dkim-milter
    ./dkim-genkey.sh -r -d `hostname -f`
    chown dkim-milter /etc/dkim-milter/keys/default.private
    mv /etc/dkim-milter/keys/default.private /etc/dkim-milter/keys/default.key.pem

    #会生成default.txt 和 default.private
    #根据default.txt 里面的内容,将DNS的TXT记录添加好
    #default.private已安置好,并改名为default.key.pem,可以使用了
    #下面的命令,大家根据实际微调

    echo "*@moxianmail.com:moxianmail.com:/etc/dkim-milter/keys/default.key.pem" >> /etc/mail/dkim-milter/keys/keylist

    echo 'AutoRestart yes' >> /etc/mail/dkim-milter/dkim-filter.conf
    echo 'AutoRestartRate 10/1h' >> /etc/mail/dkim-milter/dkim-filter.conf
    echo 'Domain kn007.net' >> /etc/mail/dkim-milter/dkim-filter.conf
    echo 'SubDomains yes' >> /etc/mail/dkim-milter/dkim-filter.conf
    echo 'Selector default' >> /etc/mail/dkim-milter/dkim-filter.conf
    echo 'KeyFile /etc/dkim-milter/keys/default.key.pem' >> /etc/mail/dkim-milter/dkim-filter.conf
    echo 'Background yes' >> /etc/mail/dkim-milter/dkim-filter.conf
    echo 'Socket inet:8891' >> /etc/mail/dkim-milter/dkim-filter.conf
    echo 'Userid dkim-milter' >> /etc/mail/dkim-milter/dkim-filter.conf

    echo 'smtpd_milters = inet:8891' >> /etc/postfix/main.cf
    echo 'non_smtpd_milters = inet:8891' >> /etc/postfix/main.cf
    echo 'milter_protocol = 2' >> /etc/postfix/main.cf
    echo 'milter_default_action = accept' >> /etc/postfix/main.cf
    chkconfig --level 345 dkim-milter on
    service dkim-milter start
    service postfix restart
    cat /var/log/maillog  



     

    错误 1

    Can't locate CPAN.pm in @INC (@INC contains: /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .).

    BEGIN failed--compilation aborted.

    yum -y install perl-CPAN

    然后

    perl -MCPAN -eshell

    出现  cpan[1]>  

    输入

    install CGI

    错误 2

    warning: dict_nis_init: NIS domain name not set - NIS lookups disabled

    postfix/smtpd[7256]: connect from unknown[113.116.237.125]

    postfix/smtpd[7256]: warning: xsasl_cyrus_server_get_mechanism_list: no applicable SASL mechanisms

    postfix/smtpd[7256]: fatal: no SASL authentication mechanisms

    postfix/master[7247]: warning: process /usr/libexec/postfix/smtpd pid 7256 exit status 1

    postfix/master[7247]: warning: /usr/libexec/postfix/smtpd: bad command startup -- throttling

    ln -s /usr/local/lib/sasl2 /usr/lib/sasl2

    yum -y install cyrus-sasl-plain cyrus-sasl-sql

    =====================================================================================

    常用命令维护:

    查询邮件队列:postqueue -p

    清除所有邮件队列:postsuper -d ALL

  • 相关阅读:
    Spring包的依赖关系以及提供下载
    正则
    Spring征服数据库
    Java之多线程同步基础
    Java之多线程优先级基础
    ColorMatrixFilter色彩矩阵滤镜
    AS3.0 位图翻转、旋转
    AS3.0 自定义右键菜单类
    精确选择识别png图片有像素的区域
    AS3动画效果常用公式
  • 原文地址:https://www.cnblogs.com/jicki/p/5546928.html
Copyright © 2011-2022 走看看