Changeset 131

Timestamp:

02/21/06 23:43:08 (7 years ago)

Author:

anarcat

Message:

[project @ alternc: changeset 2003-07-28 13:58:06 by root]
Mise à jour de la config postfix pour - SASL - TLS => SASL
est actif uniquement en mode TLS TLS utilise le certificat du
courier-pop-ssl /etc/courier/pop3d.pem AlternC dépend maintenant
aussi de ca-certificates

Original author: root
Date: 2003-07-28 13:58:10

Files:

• debian/control (modified) (1 diff)
• install/scripts/alternc.install (modified) (1 diff)
• install/scripts/etc/postfix/main.cf (modified) (4 diffs)

debian/control

@@ -7 +7 @@
 Package: alternc
 Architecture: i386
-Depends: apache, apache-ssl, courier-ssl, courier-imap-ssl, courier-pop-ssl, gettext, mysql-server, php4-mysql, php4-ldap, php4-cgi, phpmyadmin, proftpd-mysql, squirrelmail, alternc-webalizer, slapd, postfix-tls, postfix-ldap, pdksh, bind9, wget, libapache-mod-gzip, debconf, rsync, quota, ldap-utils, courier-ldap, pop-before-smtp, sasl-bin
+Depends: apache, apache-ssl, courier-ssl, courier-imap-ssl, courier-pop-ssl, gettext, mysql-server, php4-mysql, php4-ldap, php4-cgi, phpmyadmin, proftpd-mysql, squirrelmail, alternc-webalizer, slapd, postfix-tls, postfix-ldap, pdksh, bind9, wget, libapache-mod-gzip, debconf, rsync, quota, ldap-utils, courier-ldap, pop-before-smtp, sasl-bin, ca-certificates
 Suggests: screen
 Description: AlternC, hosting software managment suite for Debian.

install/scripts/alternc.install

@@ -181 +181 @@
         "etc/ldap/conf", "etc/init.d","etc/ldap/tmp","etc/postfix","etc/cron.d",
         "etc/logrotate.d", "etc/webalizer", "etc/squirrelmail", "etc/php4/cgi",
-        "change_ldappass"
+        "change_ldappass", "etc/pop-before-smtp"
         );
 

install/scripts/etc/postfix/main.cf

@@ -1 +1 @@
 #
 # Fichier de configuration de Postfix pour AlternC
-# $Id: main.cf,v 1.4 2003/04/08 01:53:14 root Exp $
+# $Id: main.cf,v 1.5 2003/07/28 13:58:10 root Exp $
 # 
 
@@ -30 +30 @@
 smtpd_tls_dcert_file = /etc/courier/pop3d.pem
 smtpd_tls_dkey_file = $smtpd_tls_dcert_file
-smtpd_tls_CAfile = /etc/postfix/ca.der
+smtpd_tls_CApath = /etc/ssl/certs/
 smtpd_tls_key_file =  $smtpd_tls_dcert_file
 smtpd_tls_cert_file =  $smtpd_tls_dcert_file
@@ -40 +40 @@
 # Configuration TLS pour le client smtp
 smtp_use_tls = yes
-smtp_tls_dcert_file = /etc/courier/pop3d.pem
-smtp_tls_dkey_file = $smtp_tls_dcert_file
+smtp_tls_dcert_file = $smtpd_tls_dcert_file
+smtp_tls_dkey_file = $smtpd_tls_dcert_file
+smtp_tls_CApath = $smtpd_tls_CApath
 
 # Configuration SASL via sasldb (/etc/sasldb) uniquement en TLS.
+# Sinon le pass passe en clair et c'est mal !
 smtpd_tls_auth_only = yes
 smtpd_sasl_auth_enable = yes
 smtpd_sasl_local_domain = postfix
 smtpd_sasl_security_options = noanonymous
+enable_sasl_authentification = yes
+broken_sasl_auth_clients = yes
+
 queue_directory = /var/spool/postfix
 command_directory = /usr/sbin
@@ -53 +58 @@
 mail_owner = postfix
 recipient_delimiter = +
+
+
 
 # Pour éviter certains vieux spammeurs.