Mandriva Directory Server (MDS) + VMware Server 2 + Debian lenny Часть 6

ПОЧТА

Настроим протокол SSL. Создаем конфиг:
# vi /etc/ssl/mail.cnf
[ req ]
default_bits = 2048
default_keyfile = privkey.pem
distinguished_name = req_distinguished_name
prompt = no
string_mask = nombstr
x509_extensions = server_cert
[ req_distinguished_name ]
countryName = RU
stateOrProvinceName = Omskaya oblast
localityName = Omsk
organizationName = lxf OOO
organizationalUnitName = IT
commonName = pdc.lxf.su
emailAddress = postmaster@lxf.su
[ server_cert ]
basicConstraints = critical, CA:FALSE
subjectKeyIdentifier = hash
keyUsage = digitalSignature, keyEncipherment
extendedKeyUsage = serverAuth, clientAuth
nsCertType = server
nsComment = "mailserver"

Создадим SSL сертификат и установим на него правильные права:
# openssl req -x509 -new -config /etc/ssl/mail.cnf -out /etc/ssl/certs/mail.pem -keyout /etc/ssl/private/mail.key -days 365 -nodes -batch
Generating a 2048 bit RSA private key
....................................................................................................................+++
....+++
writing new private key to '/etc/ssl/private/mail.key'
-----
# chmod 600 /etc/ssl/private/mail.key

Далее, настраиваем пакет SASL. Его настройка нужна для Postfix. Т.к. он использует его для аутентификации юзеров в LDAP.

# mkdir -p /var/spool/postfix/var/run/saslauthd/

Исправим следующие строчки в:
# vim /etc/default/saslauthd
START=yes
MECHANISMS="ldap"
MECH_OPTIONS=""
THREADS=5
OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd -r"

# vim /etc/saslauthd.conf
ldap_servers: ldap://127.0.0.1
ldap_search_base: ou=Users,dc=lxf,dc=su
ldap_filter: (&(objectClass=mailAccount)(mail=%u@%r)(mailenable=OK))

# vim /etc/postfix/sasl/smtpd.conf
pwcheck_method: saslauthd
mech_list: plain login

Добавляем юзера postfix в группу sasl. И перезапускаем sasl:

# adduser postfix sasl
# /etc/init.d/saslauthd restart