fedora core3 에서 rpm으로 sendmail, cyrus-imapd 를 조합하여 SMTP AUTH기능을 사용하는 메일 서버를 구성하는데 참조한 자료들과 설치 과정을 기록한 것이다.
1. sendmail 및 saslauthd, cyrus-imapd 의 설치
yum으로 설치하면 되지만 애초에 anaconda에서 메일서버 구성요소를 선택하고 설치한 경우에 이미 설치되어있으므로 특별히 패키지 설치는 생략한다.
소스로 설치하는 방법은 솔직히 해보지 않아서 모르겠음.
단 saslauthd는 cyrus-imapd를 설치하기 전에 이미 설치되어있어야 한다.
2. sendmail측 설정관련 자료. 인용한것을 알수있게 전문을 복사했다.
(https://www.redhat.com/archives/fedora-list/2005-April/msg01514.html)
[Date Prev][Date Next] [Thread Prev][Thread Next] [Thread Index] [Date Index] [Author Index]
Re: Sendmail & Cyrus-imapd
* From: GPL
* To: fedora-list redhat com
* Subject: Re: Sendmail & Cyrus-imapd
* Date: Thu, 7 Apr 2005 21:17:41 -0400
Thank you for the help guys. I have been deep into the reading, and
hair pulling :)
On Apr 5, 2005 1:02 PM, Aleksandar Milivojevic wrote:
> GPL wrote:
> > Hi folks, I'm starting my first jump into working with a Linux mail
> > server. So far from what I have read I need sendmail for SMTP and some
> > other service for POP/IMAP. From what I see the thing to use with
> > fedora is Cyrus-imapd. My goal is to run a mail server for a handful
> > of people in a non mission critical environment that can be accessed
> > by outlook/thunderbird, etc.. A learning experience mainly.
>
> There are two IMAP servers distributed with Fedora.
>
> Cyrus IMAPD is very powerfull IMAP server. It is very fast, and has
> many features needed for large installations. It also allows you to
> setup virtual users (in other words, you can setup mail accounts without
> need to create actual system accounts). It implements complete
> separation of system accounts and email store.
>
> Dovecot is simple IMAP server. It is trivial to setup, and uses
> existing system accounts, and user's home directories to store email.
> If you simply want something that is fast and easy to get working, it
> might be better choice. There's not much to learn with that one ;-)
>
> If you want to lear advanced thing about IMAP, Cyrus is the right way to
> go, because Dovecot does not have support for some features. If you
> decide to go Cyrus route, couple of hints to get you going.
>
> The configuration files distributed with Fedora will make use of system
> accounts for authentication. It is easy to change them to use LDAP or
> some other form of athentication if you want to go that way. By
> default, /etc/imapd.conf is setup to saslauthd to perform
> authentication, and saslauthd is configured (in
> /etc/sysconfig/saslauthd) to use /etc/shadow file. If you want to take
> advantage of PAM, you can instruct saslauthd to use pam mechanisms
> instead of directly accessing /etc/shadow.
>
> This will take care of authentication.
>
> Since email store is completely separate from system accounts, you will
> need to manually create mailboxes, or let Cyrus IMAPD create them
> automatically when they are accessed for the first time.
>
> Fire up cyrus-imapd and saslauthd services (and make sure they are
> started on boot using chkconfig command).
>
> To create mailboxes manually, set the password for cyrus account
> ("passwd cyrus" as root). Than execute "cyradm --user cyrus localhost".
> It will prompt you for cyrus' password. Inside cyradm, you can type
> "help" to get list of all commands. To create mailbox for user foobar
> (for example), you would type "cm user.foobar". The "user." part is
> important, since if you type only "cm foobar", you would create shared
> folder, not user's mailbox!
>
> You'd probably want to create mailbox for root, yourself, and all other
> accounts that you want to receive mail for (most system accounts are
> aliased to root, so you don't need mailboxes for them, unless you
> changed /etc/aliases file). You can get list of all mailboxes and
> folders by typing "lm".
>
> To delete mailbox, you first need to allow cyradm to do that.
> Basically, you would grant priviledge with "sam user.foobar +c cyradm",
> and than delete mailbox with "dm user.foobar". It is kind of safety
> mechanism to prevent you from wiping out your entire mail store (yes,
> "dm user" would delete *all* mailboxes). There are many more things you
> can do from within cyradm, including setting up ACLs if you want users
> to be able share folders and so on.
>
> If you want mailboxes to be created automatically, instead of you
> creating them by hand, edit /etc/imapd.conf and add something along the
> lines:
>
> autocreatequota: -1
> autocreateinboxfolders: Drafts|Templates|Sent Items
> autosubscribeinboxfolders: Drafts|Templates|Sent Items
>
> When user logs in for the first time to check email, his mailbox will be
> created, and some common folders will be also created and user
> subscribed to them. Note that user will not be able to receive email
> before he logs in for the first time (since mailbox isn't existing),
> unless you created mailbox manually. I would advise against using
> "createonpost" option, since that would create mailboxes for
> non-existing users too. For more details, check imapd.conf man page.
--> 이부분은 옵션에 불과하지만 꽤 중요한 내용을 담고있다. 각 메일박스는 손으로 만들어주거나, 위의 옵션을 /etc/imapd.conf 에 추가해서 자동으로 만들어지게 할 수 있지만, 자동으로 만들어지는 시점은 POP이나IMAP으로 로그인한 시점에서야 가능하다.
즉, 메일박스가 만들어지기 전까지는 메일 수신이 불가능하다.
>
> You also need to instruct sendmail that email is no longer to be stored
> in /var/spool/mail directory. Go to /etc/mail directory, and edit
> sendmail.mc file. Remove (or comment) this two lines:
>
> FEATURE(`local_procmail')
> MAILER(procmail)
>
> And add this three lines:
>
> define(`CYRUSV2_MAILER_ARGS', `FILE /var/lib/imap/socket/lmtp')
> define(`confLOCAL_MAILER',`cyrusv2')
> MAILER(cyrusv2)
>
> Rebuild sendmail.cf (type "m4 sendmail.mc > sendmail.cf"), restart
> sendmail, and off you go.
--> 내게는 이부분이 중요했다. cyrus-imapd는 일반적인 유저 디렉토리상의 mbox가 아닌 별도의 mailbox를 사용하므로 이부분을 바꿔주지않으면 cyrus-imapd로는 메일을 받아볼수가 없다. (mail명령으로는 메일수신을 확인할수 있지만...)
>
> There are many resources about Cyrus IMAPD. The O'Reilly book is sadly
> out of date, so I wouldn't recommend spending any money on it (until
> there is an updated version). There are some helpfull resources on
> Cyrus web site:
>
> http://asg.web.cmu.edu/cyrus/imapd/
>
> Sligtly out-of-date HOWTO (most stuff from it was already done for you
> by Red Hat, but you might want to check it out):
>
> http://en.tldp.org/HOWTO/Cyrus-IMAP.html
>
> There's also mailing list (you'll find links on Cyrus web site), that
> might be helpfull in some cases (in my experience too many bigshots on
> the list who don't want to be bothered with begginers questions).
>
> --
> Aleksandar Milivojevic Pollard Banknote Limited
> Systems Administrator 1499 Buffalo Place
> Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7
>
* References:
o Sendmail & Cyrus-imapd
+ From: GPL
o Re: Sendmail & Cyrus-imapd
+ From: Aleksandar Milivojevic
[Date Prev][Date Next] [Thread Prev][Thread Next] [Thread Index] [Date Index] [Author Index]
3. cyrus-imapd의 설정 수정(cyrus-imapd가 데이터베이스를 준비한다는 메시지 이후 기동실패하는 현상 해결)
(http://bbs.fedora.jp/read.php?FID=2&TID=967)
| Top | 掲示板 | wiki |
Google
このスレッドに返信する
Fedora JP BBS ≫ Fedora Core 3 ≫ スレッド : file誤認識によるcyrus-imapdの不具合
1
全 1 ページ
名前 コメント
K. Ishida
03/01/05 09:16
編集
file誤認識によるcyrus-imapdの不具合 cyrus-imapdを起動すると以下のエラーメッセージが出て
起動しません。
# more cvt_cyrusdb_all.log
you are using /var/lib/imap/sieve as your sieve directory.
fatal error: can't open old database
Converting from /var/lib/imap/mailboxes.db (berkeley) to /var/lib/imap/mailboxes.db.flat (flat)
ERROR: unable to convert /var/lib/imap/mailboxes.db from berkeley to flat
調べてみると cvt_cyrusdb_all で呼び出している
file コマンドが、mailboxes.db を誤認識しているようです。
# file mailboxes.db
mailboxes.db: Apple QuickTime movie (modified)
その場しのぎで以下のように
「Apple」の場合「skiplist」を返すように変更を加えたところ、
skiplistとして処理でき、cyrus-imapdが起動できました。
# more cvt_cyrusdb_all
file_type() {
this_type=$(file -b -m "$system_magic:$cyrus_magic" "$1" 2> /dev/null)
if echo "$this_type" | grep -qi skip > /dev/null 2>&1; then
echo skiplist
elif echo "$this_type" | grep -qi Apple > /dev/null 2>&1; then
echo skiplist
elif echo "$this_type" | grep -qi text > /dev/null 2>&1; then
echo flat
else
echo berkeley
fi
}
FC3インストール後、全てのパッケージを更新していますが、
この問題が生じています。
--> 동일한 현상이었으므로 해당파일을 수정하니 cyrus-imapd가 정상기동 되었다.
위에서 나타났다는 에러 메시지는 /var/lib/imap/rpm/cvt_cyrusdb_all.log
파일내에서 발견된다.
おそらくfileコマンドが使用するファイル
/usr/share/file/magic
に問題がありそうです。
なみ
03/01/05 10:36
編集
Re: file誤認識によるcyrus-imapdの不具合 Bug 148808 - cyrus-imapd doesn't start if started for the first time with the 2.2.10-3.fc3
https://bugzilla.redhat.com/beta/show_bug.cgi?id=148808
これでしょうか。ステータスがまだNEWなので、追加情報を書いてやると、向こうは助かるかと思います。
1
全 1 ページ
このスレッドに返信する
Access Count:5,579,537
Powered by F-board Ver0.3
Fedora and Red Hat are registered trademarks of Red Hat Inc.
4. mailman의 기동실패 현상 해결(mailman이라는 sitelist가 존재하지 않음)
(http://mail.python.org/pipermail/mailman-developers/2002-December/014184.html)
-->단순히 mailman이라는 메일링 리스트를 하나 작성하면 정상기동되었다.
[Mailman-Developers] "Site list is missing"
Stonewall Ballard sb.list at sb.org
Tue Dec 3 00:32:37 2002
* Previous message: [Mailman-Developers] "Site list is missing"
* Next message: [Mailman-Developers] [ mailman-Bugs-647102 ] MemoryError when generating indexes
* Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
You need to have a mailing list named "mailman". The INSTALL file says:
- Create a "site-wide" mailing list. This is the one that
password reminders will appear to come from. Usually this
should be the "mailman" mailing list, but if you need to change
this, be sure to change the MAILMAN_SITE_LIST variable in
mm_cfg.py (see below).
% bin/newlist mailman
Follow the prompts, and see the README file for more
information.
- You should then subscribe yourself to the mailman list.
- Stoney
On 12/2/02 5:20 PM, "NOW Website Coordinator" wrote:
> I can't find this answer in the archives, or in the scripts. The first
> time that 2.1 (right now I'm using 2.1b5) would send out password
> reminders, it failed with this message:
>
> Your "cron" job on now
> /usr/local/bin/python -S /usr/local/mailman/cron/mailpasswds
> produced the following output:
> Site list is missing: mailman
>
> When I look at the mailpasswds script, I find the section it came from:
>
> # This is the list that all the reminders will look like they come from,
> # but with the host name coerced to the virtual host we're processing.
> try:
> sitelist = MailList.MailList(mm_cfg.MAILMAN_SITE_LIST, lock=0)
> except Errors.MMUnknownListError:
> # Do it this way for I18n's _()
> sitelistname = mm_cfg.MAILMAN_SITE_LIST
> print >> sys.stderr, _('Site list is missing: %(sitelistname)s')
> syslog('error', 'Site list is missing: %s', mm_cfg.MAILMAN_SITE_LIST)
> sys.exit(1)
>
>
> but I'm not sure what exactly the problem is. Is there something in
> mm_cfg.py I should set?
>
> Thanks in advance.
>
> By the way, this worked for 2.0.
>
> Also: 2.1b5 fixed my earlier problem of not being able to see the
> members! Thanks.
>
>
> Sarah Stapleton-Gray
> --------------------------------------------
> Web Site Coordinator
> National Organization for Women
> http://www.now.org
>
>
>
> _______________________________________________
> Mailman-Developers mailing list
> Mailman-Developers@python.org
> http://mail.python.org/mailman/listinfo/mailman-developers
* Previous message: [Mailman-Developers] "Site list is missing"
* Next message: [Mailman-Developers] [ mailman-Bugs-647102 ] MemoryError when generating indexes
* Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
More information about the Mailman-Developers mailing list
5. mailman관리 페이지상에서 list작성시
ERROR: Site list is missing: mailman 메시지 출현
--> site관리 암호가 지정되어있지 않아서이다.
/usr/lib/mailman/bin/mmsitepass 를 실행하여 패스워드를 지정한 뒤
웹 페이지상에서 위에서 지정한 패스워드를 사용하면 된다.
6. Unknown virtual host 메시지 출현
(http://mail.python.org/pipermail/mailman-developers/2004-February/016479.html)
[Mailman-Developers] Unknown virtual host
Robby Griffin rmg at terc.edu
Mon Feb 2 10:14:22 EST 2004
* Previous message: [Mailman-Developers] Unknown virtual host
* Next message: [Mailman-Developers] Unknown virtual host
* Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
On Sunday, Feb 1, 2004, at 15:58 US/Eastern, Mark Edwards wrote:
> This is incorrect, secure.antsclimbtree.com most certainly is a known
> vitual host, both to apache and to exim. Obviously whatever method
> Mailman is using to check virtual host validity is consulting
> something other than apache or exim.
Right, mailman has to consult its own list of virtual hosts in order to
be sure it uses the correct, canonical mapping of webserver hosts to
mail domains for thru-the-web list creation. See bug #835870, fixed in
2.1.4 -- just because your 'create' CGI is reachable at some URL
doesn't necessarily mean you want people to be able to create lists
that refer to that hostname, especially for email. In your mm_cfg.py, I
believe you'd need to add this:
add_virtualhost('secure.antsclimbtree.com', 'secure.antsclimbtree.com')
--> add_virtualhost('실제 메일 서버의 호스트명(도메인까지)', '메일서버를 사용해서 메일을 보낼때 도메인부에 쓰이는 도메인명')
add_virtualhost('mail.mydomain.com', 'mydomain.com')
since you apparently intend both URLs and email addresses to contain
the full hostname. If you omit the second argument, mailman assumes the
corresponding emailhost is the same as the webserver minus the first
domain component, i.e. 'antsclimbtree.com'.
Or, you could set VIRTUAL_HOST_OVERVIEW = Off if you don't want to be
bothered with as many distinctions between virtual hosts. This sounds
useful if what you're really doing is running lists under some primary
domain with other possible domains acting like aliases for the primary.
> As I don't know python whatsoever, I can't figure out what test is
> being used here.
References to mm_cfg should be a big clue. Typically each python file
is a module with its own namespace, so mm_cfg.FOO is the FOO variable
set in (or imported by) mm_cfg.py. It's worthwhile when you're
upgrading Mailman to take a careful look at NEWS and Defaults.py to
check for new settings that you'll need to customize, things in your
mm_cfg.py that may have been changed or deprecated, etc. The virtual
host settings have been there for several releases.
That said, it might have been possible to resolve bug #835870 without
getting in your way, I just have no idea how. I would think list
creation would be ok if the domain were defined in mm_cfg.py, _or_ used
in any existing list, but that is probably too annoying to implement
and still confusing if you add a virtual host later. Certainly
consulting the apache or exim config is out of the question.
--Robby
* Previous message: [Mailman-Developers] Unknown virtual host
* Next message: [Mailman-Developers] Unknown virtual host
* Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
More information about the Mailman-Developers mailing list
위의 자료들을 참조해서 무사히 메일서버 구축이 가능했다.
#################### 여기서부터는 추가 설정이다.
/etc/aliases에 설정한 mailman의 알리아스가 작동하지 않아 sendmail.mc를 고치던중
smrsh를 사용한 mailman에의 프로그램 redirect가 작동하지 않는것을 발견했다.
ESMTP및 IMAP을 사용하기 위해서는 위에서도 설정했지만 sendmail.mc의 맨 뒤에
....
MAILER(local)dnl
MAILER(smtp)dnl
dnl MAILER(procmail)dnl
dnl
dnl # Options for cyrus-imapd that sendmail stores mail
dnl
define(`CYRUSV2_MAILER_ARGS', `FILE /var/lib/imap/socket/lmtp')
define(`confLOCAL_MAILER',`cyrusv2')
define(`CYRUSV2_MAILER_FLAGS',`A5@w')
MAILER(cyrusv2)dnl
의 설정을 추가했었다. 여기서 원래 메일러는 local 이었지만(지정가능한 MAILER들은 /usr/share/sendmail-cf/mailer 내의 *.m4파일들), cyrusv2로 송신하면서 alias의 프로그램 redirect설정이 메일 어드레스처럼 처리되어 버린다.
그래서 아래와 같은 에러메일로 반송되었다.
The original message was received at Thu, 9 Mar 2006 11:01:54 +0900
from xxx.xxxxxxxx.co.jp [xxx.xxx.xxx.xxx]
----- The following addresses had permanent fatal errors -----
"|/usr/lib/mailman/mail/mailman post test"
(reason: 550 5.1.1 User unknown)
(expanded from: )
----- Transcript of session follows -----
550 5.1.1 "|/usr/lib/mailman/mail/mailman post test"... User unknown
Reporting-MTA: dns; mydomain.co.jp
Received-From-MTA: DNS; xxx.xxxxxxxx.co.jp
Arrival-Date: Thu, 9 Mar 2006 11:01:54 +0900
Final-Recipient: RFC822; test@mydomain.co.jp
X-Actual-Recipient: RFC822; "|/usr/lib/mailman/mail/mailman post test"@mydomain.co.jp
Action: failed
Status: 5.1.1
Diagnostic-Code: SMTP; 550 5.1.1 User unknown
Last-Attempt-Date: Thu, 9 Mar 2006 11:01:55 +0900
문제해결을 위해
http://www.sendmail.org/m4/ostype.html에서 아래의 설정들을 참조했다.
CYRUSV2_MAILER_FLAGS
| [A@/:|m]The flags used by the cyrusv2 mailer. The flags lsDFMnqXz are always included. |
CYRUSV2_MAILER_MAXMSGS
| [undefined]If defined, the maximum number of messages to deliver in a single connection for the cyrusv2 mailer. |
CYRUSV2_MAILER_MAXRCPTS
| [undefined]If defined, the maximum number of recipients to deliver in a single connection for the cyrusv2 mailer. |
CYRUSV2_MAILER_ARGS
| [FILE /var/imap/socket/lmtp]The arguments passed to the cyrusv2 mailer. This can be used to change the name of the Unix domain socket, or to switch to delivery via TCP (e.g., `TCP $h lmtp') |
| CYRUSV2_MAILER_QGRP | [undefined]The queue group for the cyrusv2 mailer. |
CYRUSV2_MAILER_CHARSET
| [undefined]If defined, messages containing 8-bit data that ARRIVE from an address that resolves to one the Cyrus mailer and which are converted to MIME will be labeled with this character set. |
아무래도CYRUSV2_MAILER_FLAGS가 기본값(파란색[A@/:|m])과 다른것이 신경쓰여서 기본치로 설정해본결과 문제가 해결되었다. 여기에 각 유저의 ~/.forward 파일에 지정된 메일 어드레스로 포워딩을 해주기 위해 [A@/:|mw] 와 같이 소문자 w를 추가해 주었다.
/var/log/maillog에서 mailer=cyrusv2 가 mailer=prog (local메일러 사용시에 이렇게 나옴. 대략 프로그램으로 리다이렉트하면 program이 실행된다는 의미로 나오는것으로 추정) 로 출력되면서 ESMTP로 송신되면서 alias의 redirect프로그램도 local메일러 사용시처럼 실행되었다.
cyrus모듈에서 보안을 위해 alias의 프로그램부분을 돌리는 옵션이 플래그에 섞여있는듯 하나 어느 플래그인지는 실제 메일 서비스를 제공하는 서버에서 돌리기에는 서비스의 지장이 많으므로 실시하지 않았다.
