Mail server on Debian GNU/Linux Sarge
Webmail with Horde/IMP
Password/Forward/Vacation
Give the ability to users to change their password, configure email forwarding, and set up vacation messages through the webmail interface. Unfortunatelly, there is no usable packages in Debian for these modules.
As these modules are really tiny and not very intrusive, using the tar.gz is as easy as making a Debian package or a backport (the maintenance/updates has to be done by the administrator in all cases).
We are also going to modify the authldap.schema from the courier-imap packages. We need to do this to make it aware of mailforward parameter, and some other ones for the vacation part. Please note this operation is quite fussy : LDAP schemas are normalized, so be cautious before doing it in your company’s LDAP directory.
# ****************************************
# * MODIFY YOUR SCHEMA AT YOUR OWN RISK! *
# ****************************************
attributetype ( 1.3.6.1.4.1.10018.1.1.14 NAME 'mailhost'
DESC 'Host to which incoming POP/IMAP connections should be proxied'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
attributetype ( 1.3.6.1.4.1.10018.1.1.15 NAME 'mailforward'
DESC 'Mailbox - mail forward'
EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
attributetype ( 1.3.6.1.4.1.10018.1.1.16 NAME 'vacationInfo'
DESC 'Mailbox - vacation message'
EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} )
attributetype ( 1.3.6.1.4.1.10018.1.1.17 NAME 'vacationActive'
DESC 'Mailbox - vacation active'
EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
objectclass ( 1.3.6.1.4.1.10018.1.2.1 NAME 'CourierMailAccount' SUP top AUXILIARY
DESC 'Mail account object as used by the Courier mail server'
MUST ( mail $ homeDirectory )
MAY ( uidNumber $ gidNumber $ mailbox $ uid $ cn $ gecos $ description $ loginShell $
quota $ userPassword $ clearPassword $ defaultdelivery $ disableimap $
disablepop3 $ disablewebmail $ sharedgroup $ disableshared $ mailhost $
mailforward $ vacationInfo $ vacationActive) )
objectclass ( 1.3.6.1.4.1.10018.1.2.2 NAME 'CourierMailAlias' SUP top AUXILIARY
DESC 'Mail aliasing/forwarding entry'
MUST ( mail $ maildrop )
MAY ( mailsource $ description ) )
objectclass ( 1.3.6.1.4.1.10018.1.2.3 NAME 'CourierDomainAlias' SUP top AUXILIARY
DESC 'Domain mail aliasing/forwarding entry'
MUST ( virtualdomain $ virtualdomainuser )
MAY ( mailsource $ description ) )
index mailforward eq
slapindex
/etc/init.d/slapd restart
Password
wget http://ftp.horde.org/pub/snaps/latest/passwd-HEAD-year-month-day.tar.gz
apt-get install php4-mhash
/etc/init.d/apache2 reload
tar zxvf passwd-HEAD-year-month-day.tar.gz -C /usr/share/horde3
chown -R www-data.www-data /usr/share/horde3/passwd/config
$backends['ldapadmin'] = array(
'name' => 'localhost',
'preferred' => 'localhost',
'password policy' => array(
'minLength' => 6,
'maxLength' => 30
),
'driver' => 'ldap',
'params' => array(
'host' => 'localhost',
'port' => 389,
'basedn' => 'ou=people,dc=domain,dc=ch',
'admindn' => '',
'adminpw' => '',
'uid' => 'uid',
'attribute' => 'userPassword',
// this will be appended to the username when looking for the userdn.
//'realm' => '',
'encryption' => 'sha',
// make sure the host == cn in the server certificate
'tls' => false,
'sslhost' => false
)
);
access to attrs=userPassword
by dn="cn=admin,dc=domain,dc=ch" write
by dn="cn=adminro,dc=domain,dc=ch" read
by anonymous auth
by self write
by * none
'status' => 'active'
Forward
wget http://ftp.horde.org/pub/snaps/latest/forwards-HEAD-year-month-day.tar.gz
tar zxvf forwards-HEAD-year-month-day.tar.gz -C /usr/share/horde3
chown -R www-data.www-data /usr/share/horde3/forwards/config
'status' => 'active'
access to attrs=hordePrefs,impPrefs,mailforward
by self write
by * read
/etc/init.d/slapd restart
version = 3
bind = no
scope = sub
server_host = ldap://127.0.0.1
search_base = dc=domain,dc=ch
query_filter = (mail=%s)
result_attribute = mailforward
virtual_alias_maps = proxy:ldap:/etc/postfix/ldap/forwards.cf, proxy:ldap:/etc/postfix/ldap/maildrop_aliases.cf
/etc/init.d/postfix reload
Test it with the web interface
Vacation
wget http://ftp.horde.org/pub/snaps/latest/vacation-HEAD-year-month-day.tar.gz
apt-get install vacation
tar zxvf vacation-HEAD-year-month-day.tar.gz -C /usr/share/horde3
chown -R www-data.www-data /usr/share/horde3/vacation/config
'status' => 'active'
apt-get install gnarwl ed
...
# map_field $begin vacationStart
# map_field $end vacationEnd
# map_field $deputy vacationForward
base ou=people,dc=domain,dc=ch
queryfilter (&(maildrop=$recepient)(vacationActive=Y))
mta /usr/sbin/sendmail $recepient $sender
...
From: $fullname <$recepient>
To: $sender
X-mailer: GNARWL
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
useradd -c "Vacation user" -d /var/lib/gnarwl/ -g vmail -s /bin/false -u 1002 gnarwl
chown gnarwl /etc/gnarwl.cfg
chown -R gnarwl /var/lib/gnarwl
gnarwl unix - n n - - pipe
flags=F user=gnarwl argv=/usr/bin/gnarwl -s $sender -a $recipient
autoreply.domain.ch gnarwl:
postmap /etc/postfix/transports
/etc/init.d/postfix reload
dn: uid=csahut,ou=people,dc=domain,dc=ch
changetype: modify
add: maildrop
maildrop: csahut@autoreply.domain.ch
ldapmodify -x -f add_autoreply_csahut.ldif -D "cn=admin,dc=domain,dc=ch" -W
access to attrs=hordePrefs,impPrefs,mailforward,vacationActive,vacationInfo
by self write
by * read
/etc/init.d/slapd restart
