Postfix-2.11+Dovecot-2.0.9+MySQL+Cyrus-sasl+Extmail-1.2实现基于虚拟用户的邮件系统架构
系统：
CentOS 6.5
IP:192.168.100.100
域名：mail.test.com
----------------------------------------------------------------------------------------
――安装前的准备工作
1）关闭Selinux
[root@node1 ~]# vi /etc/selinux/config
SELINUX=disabled
2）安装程序依赖包
[root@node1 ~]# yum install db4-devel ntpdate cyrus-sasl-md5 perl-GD perl-DBD-MySQL perl-GD perl-CPAN perl-CGI perl-CGI-Session cyrus-sasl-lib cyrus-sasl-plain cyrus-sasl cyrus-sasl-devel libtool-ltdl-devel telnet mail -y
3）同步时间 [可选项]
[root@node1 ~]# ntpdate ntp.sjtu.edu.cn
4）安装Unix-Syslog补丁
[root@node1 soft]# wget http://www.cpan.org/authors/id/M/MH/MHARNISCH/Unix-Syslog-1.1.tar.gz [root@node1 soft]# tar fzvx Unix-Syslog-1.1.tar.gz [root@node1 soft]# cd Unix-Syslog-1.1 [root@node1 Unix-Syslog-1.1]# perl Makefile.PL [root@node1 Unix-Syslog-1.1]# make && make install
注意：不安装此补丁的话使用extmail会报如下错误：
Unix::Syslog not found, please install it first! (in cleanup) Undefined subroutine &Ext::Logger::do_closelog called at /var/www/extsuite/extmail/libs/Ext/Logger.pm line 86.
5）在shell下面执行如下命令：
[root@node1 ~]# perl -e shell -MCPAN
CPAN is the world-wide archive of perl resources. It consists of about
300 sites that all replicate the same contents around the globe. Many
countries have at least one CPAN site already. The resources found on
CPAN are easily accessible with the CPAN.pm module. If you want to use
CPAN.pm, lots of things have to be configured. Fortunately, most of
them can be determined automatically. If you prefer the automatic
configuration, answer 'yes' below.
If you prefer to enter a dialog instead, you can answer 'no' to this
question and I'll let you configure in small steps one thing after the
other. (Note: you can revisit this dialog anytime later by typing 'o
conf init' at the cpan prompt.)
Would you like me to configure as much as possible automatically? [yes] yes
.....
.....
.....
cpan shell -- CPAN exploration and modules installation (v1.9402)
Enter 'h' for help.
cpan[1]> install CGI
......
.....
...
..
.
Checking if your kit is complete...
Looks good
Warning: prerequisite FCGI 0.67 not found.
Warning: prerequisite Test::More 0.98 not found. We have 0.92.
Writing Makefile for CGI
Could not read '/root/.cpan/build/CGI.pm-3.65-nKc3sL/META.yml'. Falling back to other methods to determine prerequisites
---- Unsatisfied dependencies detected during ----
---- MARKSTOS/CGI.pm-3.65.tar.gz ----
Test::More [requires]
FCGI [requires]
Shall I follow them and prepend them to the queue
of modules we are processing right now? [yes] yes
......
.....
....
...
..
.
Warning (usually harmless): 'YAML' not installed, will not store persistent state
cpan[2]> quit
Terminal does not support GetHistory.
Lockfile removed.
注意：不执行上面的命令使用extmail会报如下类似错误：
Can't locate CGI.pm in @INC (@INC contains: /var/www/extsuite/extmail/libs /usr/local/lib/perl5 /usr/local/share/perl5 /usr/lib/perl5/vendor_perl
/usr/share/perl5/vendor_perl /usr/lib/perl5 /usr/share/perl5) at /var/www/extsuite/extmail/libs/Ext/CGI.pm line 20. BEGIN failed--compilation aborted at
/var/www/extsuite/extmail/libs/Ext/CGI.pm line 20. Compilation failed in require at /var/www/extsuite/extmail/libs/Ext/App.pm line 23. BEGIN failed--compilation
aborted at /var/www/extsuite/extmail/libs/Ext/App.pm line 23. Compilation failed in require at /var/www/extsuite/extmail/libs/Ext/App/Login.pm line 16. BEGIN failed--
compilation aborted at /var/www/extsuite/extmail/libs/Ext/App/Login.pm line 16. Compilation failed in require at /var/www/extsuite/extmail/cgi/index.cgi line 20.
6）重启服务器
[root@node1 ~]# reboot
――安装postfix
1）卸载系统自带的postfix软件和用户组
[root@node1 ~]# yum remove postfix -y [root@node1 ~]# userdel postfix [root@node1 ~]# groupdel postdrop
2）添加postfix用户和组
[root@node1 ~]# groupadd -g 2525 postfix [root@node1 ~]# useradd -g postfix -u 2525 -s /sbin/nologin -M postfix [root@node1 ~]# groupadd -g 2526 postdrop [root@node1 ~]# useradd -g postdrop -u 2526 -s /sbin/nologin -M postdrop
3）下载postfix
[root@node1 ~]# mkdir /tmp/soft [root@node1 ~]# cd /tmp/soft [root@node1 soft]# wget ftp://ftp.cuhk.edu.hk/pub/packages/mail-server/postfix/official/postfix-2.11.0.tar.gz
3）解压并安装postfix
[root@node1 soft]# tar xfv postfix-2.11.0.tar.gz [root@node1 soft]# cd postfix-2.11.0 [root@node1 postfix-2.11.0]# make makefiles \ 'CCARGS=-DHAS_MYSQL -I/usr/include/mysql -DUSE_SASL_AUTH \ -DUSE_CYRUS_SASL -I/usr/include/sasl -DUSE_TLS ' \ 'AUXLIBS=-L/usr/lib64/mysql -lmysqlclient -lz -lrt -lm -L/usr/lib64/sasl2 -lsasl2 -lssl -lcrypto' [root@node1 postfix-2.11.0]# make && make install
4）配置相应权限
[root@node1 postfix-2.11.0]# chown -R postfix:postdrop /var/spool/postfix [root@node1 postfix-2.11.0]# chown -R postfix:postdrop /var/lib/postfix/ [root@node1 postfix-2.11.0]# chown root /var/spool/postfix [root@node1 postfix-2.11.0]# chown -R root /var/spool/postfix/pid
5）配置postfix
[root@node1 postfix-2.12-20140406]# vi /etc/postfix/main.cf #设置主机名 myhostname = mail.test.com #指定域名 mydomain = test.com #指明发件人所在的域名 myorigin = $mydomain #指定postfix系统监听的网络接口 inet_interfaces = all #指定postfix接收邮件时收件人的域名 [使用虚拟域需要禁用] mydestination = $myhostname, localhost.$mydomain, localhost,$mydomain #指定信任网段类型 mynetworks_style = host #指定信任的客户端 mynetworks = 192.168.40.0/24, 127.0.0.0/8 #指定允许中转邮件的域名 relay_domains = $mydestination #设置邮件的别名 alias_maps = hash:/etc/aliases
4）添加Postfix启动脚本 [脚本内容省略，太长]
[root@node1 postfix-2.12-20140406]# vi /etc/init.d/postfix
5）添加执行权限
[root@node1 postfix-2.12-20140406]# chmod +x /etc/init.d/postfix
6）设置开启启动
[root@node1 postfix-2.12-20140406]# chkconfig --add postfix [root@node1 postfix-2.12-20140406]# chkconfig postfix on [root@node1 postfix-2.12-20140406]# service postfix restart [root@node1 postfix-2.12-20140406]# netstat -antup |grep 25 tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 1917/master
――安装Dovecot
1）安装Dovecot
[root@node1 ~]# yum install -y dovecot dovecot-devel dovecot-mysql
2）配置Dovecot
[root@node1 soft]# cd /etc/dovecot/
[root@node1 dovecot]# vi dovecot.conf
protocols = imap pop3
!include conf.d/*.conf
listen = *
base_dir = /var/run/dovecot/
[root@node1 dovecot]# cd conf.d/
[root@node1 conf.d]# vi 10-auth.conf
disable_plaintext_auth = no
[root@node1 conf.d]# vi 10-mail.conf
mail_location = maildir:~/Maildir
mail_location = maildir:/var/mailbox/%d/%n/Maildir
mail_privileged_group = mail
[root@node1 conf.d]# vi 10-ssl.conf
ssl = no
[root@node1 conf.d]# vi 10-logging.conf
log_path = /var/log/dovecot.log
info_log_path = /var/log/dovecot.info
log_timestamp = "%Y-%m-%d %H:%M:%S "
[root@node1 conf.d]# cp auth-sql.conf.ext auth-sql.conf
[root@node1 conf.d]# vi auth-sql.conf
passdb {
driver = sql
args = /etc/dovecot/dovecot-sql.conf
}
userdb {
driver = sql
args = /etc/dovecot/dovecot-sql.conf
}
3）编辑dovecot通过mysql认证的文件
[
root@node1 conf.d]# vi /etc/dovecot-mysql.conf driver = mysql connect = host=localhost dbname=extmail user=extmail password=extmail default_pass_scheme = CRYPT password_query = SELECT username AS user,password AS password FROM mailbox WHERE username = '%u' user_query = SELECT maildir, uidnumber AS uid, gidnumber AS gid FROM mailbox WHERE username = '%u'
――安装courier-authlib
1）下载安装courier-authlib
[root@node1 soft]# wget http://jaist.dl.sourceforge.net/project/courier/authlib/0.66.1/courier-authlib-0.66.1.tar.bz2
2）解压并编译安装
[root@node1 soft]# tar fvx courier-authlib-0.66.1.tar.bz2
[root@node1 soft]# cd courier-authlib-0.66.1
[root@node1 courier-authlib-0.66.1]# ./configure \
--prefix=/usr/local/courier-authlib \
--sysconfdir=/etc \
--without-authpam \
--without-authshadow \
--without-authvchkpw \
--without-authpgsql \
--with-authmysql \
--with-mysql-libs=/usr/lib64/mysql \
--with-mysql-includes=/usr/include/mysql \
--with-redhat \
--with-authmysqlrc=/etc/authmysqlrc \
--with-authdaemonrc=/etc/authdaemonrc \
--with-mailuser=postfix
[root@node1 courier-authlib-0.66.1]# make && make install
3）配置courier-authlib
[root@node1 courier-authlib-0.66.1]# chmod 755 /usr/local/courier-authlib/var/spool/authdaemon
[root@node1 courier-authlib-0.66.1]# cp /etc/authdaemonrc.dist /etc/authdaemonrc
[root@node1 courier-authlib-0.66.1]# cp /etc/authmysqlrc.dist /etc/authmysqlrc
[root@node1 courier-authlib-0.66.1]# vi /etc/authdaemonrc
authmodulelist="authmysql"
authmodulelistorig="authmysql"
[root@node1 courier-authlib-0.66.1]# vi /etc/authmysqlrc
MYSQL_SERVER localhost
MYSQL_USERNAME extmail
MYSQL_PASSWORD extmail
MYSQL_SOCKET /var/lib/mysql/mysql.sock
MYSQL_PORT 3306
MYSQL_DATABASE extmail
MYSQL_USER_TABLE mailbox
MYSQL_CRYPT_PWFIELD password
DEFAULT_DOMAIN test.com
MYSQL_UID_FIELD '2525'
MYSQL_GID_FIELD '2525'
MYSQL_LOGIN_FIELD username
MYSQL_HOME_FIELD concat('/var/mailbox/',homedir)
MYSQL_NAME_FIELD name
MYSQL_MAILDIR_FIELD concat('/var/mailbox/',maildir)
4）设置courier-authlib开机启动
[root@node1 courier-authlib-0.66.1]# cp courier-authlib.sysvinit /etc/init.d/courier-authlib [root@node1 courier-authlib-0.66.1]# chmod +x /etc/init.d/courier-authlib [root@node1 courier-authlib-0.66.1]# chkconfig --add courier-authlib [root@node1 courier-authlib-0.66.1]# chkconfig courier-authlib on [root@node1 courier-authlib-0.66.1]# echo "/usr/local/courier-authlib/lib/courier-authlib" >> /etc/ld.so.conf.d/courier-authlib.conf [root@node1 courier-authlib-0.66.1]# ldconfig [root@node1 courier-authlib-0.66.1]# service courier-authlib start Starting Courier authentication services: authdaemond
5）设置smtpd认证
[root@node1 courier-authlib-0.66.1]# vi /usr/lib64/sasl2/smtpd.conf pwcheck_method: authdaemond log_level: 3 mech_list: PLAIN LOGIN authdaemond_path:/usr/local/courier-authlib/var/spool/authdaemon/socket
6）配置postfix支持SMTP
[root@node1 dovecot]# vi /etc/postfix/main.cf smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = '' smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination broken_sasl_auth_clients=yes smtpd_client_restrictions = permit_sasl_authenticated smtpd_sasl_security_options = noanonymous
7）配置postfix支持虚拟用户
[root@node1 courier-authlib-0.66.1]# vi /etc/postfix/main.cf virtual_mailbox_base = /var/mailbox virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf virtual_alias_domains = virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf virtual_uid_maps = static:2525 virtual_gid_maps = static:2525 virtual_transport = virtual
――安装Extmail
1）创建相关目录并解压extmail
[root@node1 soft]# mkdir -p /var/www/extsuite [root@node1 soft]# tar fzvx extmail-1.2.tar.gz -C /var/www/extsuite/ [root@node1 soft]# cp /var/www/extsuite/extmail-1.2 /var/www/extsuite/extmail [root@node1 soft]# cd /var/www/extsuite/extmail
2）修改Extmail的主配置文件
[root@node1 extmail]# cp webmail.cf.default webmail.cf [root@node1 extmail]# vi webmail.cf SYS_SESS_DIR = /tmp/extmail SYS_UPLOAD_TMPDIR = /tmp/extmail/upload SYS_USER_LANG = zh_CN SYS_MIN_PASS_LEN = 8 SYS_MAILDIR_BASE = /var/mailbox SYS_MYSQL_USER = extmail SYS_MYSQL_PASS = extmail SYS_MYSQL_DB = extmail SYS_MYSQL_HOST = localhost SYS_MYSQL_SOCKET = /var/lib/mysql/mysql.sock SYS_MYSQL_TABLE = mailbox SYS_MYSQL_ATTR_USERNAME = username SYS_MYSQL_ATTR_DOMAIN = domain SYS_MYSQL_ATTR_PASSWD = password SYS_AUTHLIB_SOCKET = /usr/local/courier-authlib/var/spool/authdaemon/socket
3）建立extmail的临时文件目录及session目录
[root@node1 extman]# mkdir -p /tmp/extmail/upload [root@node1 extman]# chown postfix.postfix -R /tmp/extmail/
――安装Extman
1）解压extmail
[root@node1 soft]# tar fzvx extman-1.1.tar.gz -C /var/www/extsuite/ [root@node1 soft]# cd /var/www/extsuite/extmail [root@node1 extsuite]# mv extman-1.1 extman [root@node1 extsuite]# cd extman
2）修改Extman的主配置文件
[root@node1 extman]# cp webman.cf.default webman.cf [root@node1 extman]# vi webman.cf SYS_MAILDIR_BASE = /var/mailbox SYS_DEFAULT_UID = 2525 SYS_DEFAULT_GID = 2525 SYS_MYSQL_USER = extmail SYS_MYSQL_PASS = extmail SYS_MYSQL_DB = extmail SYS_MYSQL_HOST = localhost SYS_MYSQL_SOCKET = /var/lib/mysql/mysql.sock
3）修改cgi目录的属主
[root@node1 extman]# chown -R postfix.postfix /var/www/extsuite/extman/cgi/ [root@node1 extman]# chown -R postfix.postfix /var/www/extsuite/extmail/cgi/
4）导入Extman的数据库
[root@node1 extman]# cd docs/ [root@node1 docs]# vi extmail.sql 将文件里面所有的TYPE=MyISAM改为ENGINE=MyISAM、命令如下： :% s/TYPE/ENGINE/g [root@node1 docs]# mysql -u root < extmail.sql [root@node1 docs]# mysql -u root < init.sql
5）授予用户extmail访问extmail数据库的权限
[root@node1 soft]# mysql -u root MariaDB [(none)]> GRANT all privileges on extmail.* TO extmail@localhost IDENTIFIED BY 'extmail'; Query OK, 0 rows affected (0.52 sec) MariaDB [(none)]> GRANT all privileges on extmail.* TO [email protected] IDENTIFIED BY 'extmail'; Query OK, 0 rows affected (0.05 sec) MariaDB [(none)]> quit Bye
6）为Extman创建临时目录并给予权限
[root@node1 docs]# mkdir /tmp/extman [root@node1 docs]# chown postfix.postfix -R /tmp/extman/
――重启postfix、dovecot、saslauthd、nginx
[root@node1 docs]# service postfix restart [root@node1 docs]# service dovecot restart [root@node1 docs]# service saslauthd restart
――测试虚拟用户实现结果
1）测试Postfix 支持虚拟用户
[root@node1 docs]# /usr/local/courier-authlib/sbin/authtest -s login [email protected] extmail Authentication succeeded. // 表示成功 Authenticated: [email protected] (uid 1000, gid 1000) Home Directory: /mailbox/extmail.org/postmaster Maildir: /mailbox/extmail.org/postmaster/Maildir/ Quota: (none) Encrypted Password: $1$phz1mRrj$3ok6BjeaoJYWDBsEPZb5C0 Cleartext Password: extmail Options: (none)
2）测试虚拟用户SMPT发信认证
[root@node1 docs]# printf "[email protected]" | openssl base64 cG9zdG1hc3RlckBleHRtYWlsLm9yZw== [root@node1 docs]# printf "extmail" | openssl base64 ZXh0bWFpbA== [root@node1 docs]# [root@node1 docs]# telnet localhost 25 Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. 220 mail.benet.com ESMTP Postfix auth login 334 VXNlcm5hbWU6 cG9zdG1hc3RlckBleHRtYWlsLm9yZw== 334 UGFzc3dvcmQ6 ZXh0bWFpbA== 235 2.0.0 Authentication successful // 表示成功 quit 221 2.0.0 Bye Connection closed by foreign host.
――启动extmail和extman的相关程序
1）修改dispatch-initSU_UID和SU_GID
[root@node1 docs]# vi /var/www/extsuite/extmail/dispatch-init SU_UID=postfix SU_GID=postfix
2）启动dispatch-init并添加到/etc/rc.local [不启动dispatch-init]
[root@node1 docs]# /var/www/extsuite/extmail/dispatch-init start [root@node1 docs]# echo "/var/www/extsuite/extmail/dispatch-init start" >> /etc/rc.local
注意：不启动dispatch-init 连接extmail时候会报502错误。
3）启动cmdserver并添加到/etc/rc.local
[root@node1 docs]# /data/www/extman/daemon/cmdserver -v -d [root@node1 docs]# echo "/var/www/extsuite/extman/daemon/cmdserver -v -d " >> /etc/rc.local
注意：不启动cmdserver的话，extmail登录管理后台，系统信息里会报Connection refused错误
如果出现如下错误：Undefined subroutine &Ext::Utils::sort2name called at /var/www/extsuite/extmail/libs/Ext/App/Folders.pm line 387.
解决办法：
[root@node1 Ext]# cd /var/www/extsuite/extmail/libs/Ext [root@node1 Ext]# cp Utils.pm /var/www/extsuite/extman/libs/ [root@node1 Ext]# cd /var/www/extsuite/extman/libs/Ext [root@node1 Ext]# mv Utils.pm ManUtils.pm [root@node1 Ext]# /var/www/extsuite/extmail/dispatch-init stop [root@node1 Ext]# /var/www/extsuite/extmail/dispatch-init start
――Extmail虚拟主机配置 [这里用的是nginx]
1）配置extmail虚拟主机
[root@node1 ~]# vi /usr/local/nginx/conf/conf.d/extmail.conf
server {
listen 8080;
server_name mail.test.com;
index index.html index.htm index.php index.cgi;
root /var/www/extsuite/extmail/html/;
location /extmail/cgi/ {
fastcgi_pass 127.0.0.1:8888;
fastcgi_index index.cgi;
fastcgi_param SCRIPT_FILENAME /var/www/extsuite/extmail/cgi/$fastcgi_script_name;
include fcgi.conf;
}
location /extmail/ {
alias /var/www/extsuite/extmail/html/;
}
location /extman/cgi/ {
fastcgi_pass 127.0.0.1:8888;
fastcgi_index index.cgi;
fastcgi_param SCRIPT_FILENAME /var/www/extsuite/extman/cgi/$fastcgi_script_name;
include fcgi.conf;
}
location /extman/ {
alias /var/www/extsuite/extman/html/;
}
access_log /usr/local/nginx/logs/extmail_access.log;
}
2）创建fcgi.conf
[root@node1 ~]# vi /usr/local/nginx/conf/fcgi.conf fastcgi_param GATEWAY_INTERFACE CGI/1.1; fastcgi_param SERVER_SOFTWARE nginx; fastcgi_param QUERY_STRING $query_string; fastcgi_param REQUEST_METHOD $request_method; fastcgi_param CONTENT_TYPE $content_type; fastcgi_param CONTENT_LENGTH $content_length; fastcgi_param SCRIPT_NAME $fastcgi_script_name; fastcgi_param REQUEST_URI $request_uri; fastcgi_param DOCUMENT_ROOT $document_root; fastcgi_param SERVER_PROTOCOL $server_protocol; fastcgi_param REMOTE_ADDR $remote_addr; fastcgi_param REMOTE_PORT $remote_port; fastcgi_param SERVER_ADDR $server_addr; fastcgi_param SERVER_PORT $server_port; fastcgi_param SERVER_NAME $server_name;
3）重启nginx
[root@node1 ~]# service nginx restart
――Extmail测试
待续...