bedah/ansible
1
0
Fork 0
forked from infra/ansible
Code Issues Pull Requests Releases Wiki Activity

Fix dovecot auth settings.

Browse Source
This commit is contained in:
Markus 2016-04-06 21:19:42 +02:00
parent 34663c35c6
commit 65f1511913
2 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
roles/mail/templates/dovecot/dovecot-ldap.conf.ext.j2
View File

@ -17,7 +17,7 @@
# by * none # by * none
# Space separated list of LDAP hosts to use. host:port is allowed too. # Space separated list of LDAP hosts to use. host:port is allowed too.
#hosts = {{ ldap_host }} #hosts =
# LDAP URIs to use. You can use this instead of hosts list. Note that this # LDAP URIs to use. You can use this instead of hosts list. Note that this
# setting isn't supported by all LDAP libraries. # setting isn't supported by all LDAP libraries.
@ -43,7 +43,7 @@ dnpass = {{ ldap_bindpw }}
#sasl_authz_id = #sasl_authz_id =
# Use TLS to connect to the LDAP server. # Use TLS to connect to the LDAP server.
tls = yes tls = no
# TLS options, currently supported only with OpenLDAP: # TLS options, currently supported only with OpenLDAP:
tls_ca_cert_file = {{ ldap_ca }} tls_ca_cert_file = {{ ldap_ca }}
#tls_ca_cert_dir = #tls_ca_cert_dir =
@ -108,7 +108,7 @@ scope = subtree
# There are also other special fields which can be returned, see # There are also other special fields which can be returned, see
# http://wiki2.dovecot.org/UserDatabase/ExtraFields # http://wiki2.dovecot.org/UserDatabase/ExtraFields
#user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid #user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid
user_attr = user_attrs =
# Filter for user lookup. Some variables can be used (see # Filter for user lookup. Some variables can be used (see
# http://wiki2.dovecot.org/Variables for full list): # http://wiki2.dovecot.org/Variables for full list):

9
roles/mail/templates/dovecot/local.conf.j2
View File

@ -1,6 +1,6 @@
auth_mechanisms = plain login auth_mechanisms = plain login
auth_verbose = yes auth_verbose = yes
auth_debug=yes auth_debug = yes
disable_plaintext_auth = yes disable_plaintext_auth = yes
mail_debug = yes mail_debug = yes
@ -34,10 +34,14 @@ userdb {
service auth { service auth {
unix_listener /var/spool/postfix/private/auth { unix_listener /var/spool/postfix/private/auth {
mode = 0666 mode = 0660
user = postfix user = postfix
group = postfix group = postfix
} }
unix_listener auth-master {
user = vmail
mode = 0600
}
} }
service imap-login { service imap-login {
@ -59,6 +63,7 @@ service managesieve-login {
} }
protocol lda { protocol lda {
auth_socket_path = /var/run/dovecot/auth-master
mail_plugins = sieve mail_plugins = sieve
log_path = /var/log/dovecot/deliver.log log_path = /var/log/dovecot/deliver.log
info_log_path = /var/log/dovecot/deliver.log info_log_path = /var/log/dovecot/deliver.log