benno_mailarchiv
Unterschiede
Hier werden die Unterschiede zwischen zwei Versionen angezeigt.
Beide Seiten der vorigen RevisionVorhergehende ÜberarbeitungNächste Überarbeitung | Vorhergehende Überarbeitung | ||
benno_mailarchiv [2018/08/13 18:07] – matthias | benno_mailarchiv [2019/11/25 18:33] (aktuell) – matthias | ||
---|---|---|---|
Zeile 3: | Zeile 3: | ||
- | Integration in die Univention Managemnt Console (Web UI): | + | =====Integration in die Univention Managemnt Console (Web UI)===== |
https:// | https:// | ||
Zeile 10: | Zeile 9: | ||
Vereinfacht die etwas komplizierte Aktion wie hier beschrieben [[https:// | Vereinfacht die etwas komplizierte Aktion wie hier beschrieben [[https:// | ||
+ | |||
+ | |||
+ | =====benno auf eigenem Server===== | ||
+ | Für den Betrieb eines vom Kopan-Server getrennten Benno-Servers ist eine manuelle Anpassung der Postfix-Configuration auf dem Kopano-Server nötig: | ||
+ | |||
+ | ucr set mail/ | ||
+ | ucr set mail/ | ||
+ | | ||
+ | ucr set mail/ | ||
+ | ucr set mail/ | ||
+ | | ||
+ | ucr commit / | ||
+ | systemctl restart postfix | ||
+ | |||
+ | Auf dem Benno Server muss die Datei / | ||
+ | |||
+ | SOCKET auskommentieren oder löschen: | ||
+ | # | ||
+ | Einfügen: | ||
+ | SOCKET_TYPE=inet | ||
+ | SOCKET=22500@0.0.0.0 | ||
+ | |||
+ | :!: benno-milter unterstützt kein IPv6 :!: | ||
+ | |||
+ | ===== LDAP Authentisierung ===== | ||
+ | / | ||
+ | < | ||
+ | # | ||
+ | # LDAP Authentication configuration file | ||
+ | # | ||
+ | # This file must be readable by the user of the web server | ||
+ | # | ||
+ | |||
+ | # LDAP host | ||
+ | # | ||
+ | # < | ||
+ | # | ||
+ | # Univention UCS + Samba4: < | ||
+ | # | ||
+ | host = ucs.domain.lan: | ||
+ | |||
+ | |||
+ | # LDAP base dn | ||
+ | # | ||
+ | # Base dn of the ldap directory, the bind dn will be determined by a search | ||
+ | # | ||
+ | # request the user uid | ||
+ | # | ||
+ | basedn = dc=domain, | ||
+ | |||
+ | |||
+ | # User id attribute | ||
+ | # | ||
+ | # The attribute which holds the user id for authentication | ||
+ | # | ||
+ | # Windows AD: userattr = sAMAccountName | ||
+ | #userattr = uid | ||
+ | |||
+ | # user rdn | ||
+ | # | ||
+ | # Authentication will be performed as: $userattr=USERLOGIN, | ||
+ | # | ||
+ | # If disabled, a LDAP search operation will be performed to detect the user dn | ||
+ | usersuffix = cn=users, | ||
+ | |||
+ | |||
+ | # User objectclas | ||
+ | # | ||
+ | # Objectclass of user object | ||
+ | # | ||
+ | # Windows AD: objectclass = user | ||
+ | objectclass = posixAccount | ||
+ | |||
+ | # Encrypt LDAP connection with TLS if set to " | ||
+ | tls = true | ||
+ | |||
+ | # DN to bind for search requests | ||
+ | # | ||
+ | # Dn of an user with permissions to search at the ldap tree. | ||
+ | # Enable if anonymous search is not permitted! | ||
+ | # | ||
+ | # Windows AD: binddn = < | ||
+ | #binddn = | ||
+ | |||
+ | # Password of the admin user | ||
+ | # | ||
+ | #password = | ||
+ | |||
+ | ## User is allowed to access his own email adresses and | ||
+ | ## addtional adresses | ||
+ | |||
+ | # Email address attribute | ||
+ | # Univention UCS: mailPrimaryAddress | ||
+ | email = mailPrimaryAddress | ||
+ | |||
+ | # Email alias attribute | ||
+ | # Windows AD: proxyAddress | proxyAddresses | ||
+ | # Univention UCS: mailAlternativeAddress | ||
+ | alias = mailAlternativeAddress, | ||
+ | |||
+ | # Allow access to additional email addresses | ||
+ | addemail = bennoEmailAddress | ||
+ | |||
+ | |||
+ | # Benno role attribute | ||
+ | role = bennoRole | ||
+ | |||
+ | # Benno container name attribute | ||
+ | container = bennoContainer | ||
+ | |||
+ | # Default container (if containerattr not set in LDAP) | ||
+ | default_container = BennoContainer | ||
+ | |||
+ | # Username who will always assigned the admin role | ||
+ | adminuser = Administrator | ||
+ | |||
+ | |||
+ | # remove domain from username during authentication if set to " | ||
+ | # | ||
+ | </ | ||
+ | |||
+ | LDAP-Modul aktivieren: | ||
+ | |||
+ | cd / | ||
+ | ln -s / | ||
+ | |||
+ | Die Datei / | ||
+ | |||
+ | EXTERNAL_AUTH = / | ||
+ | |||
+ | ===== Mailadressen ausschliessen und Kopano ===== | ||
+ | |||
+ | Für das Filtern von Mails in Benno sind nur die Evnelope-Adressen sinnvolles Ziel. Postfix kann X-Original-To Headere einfügen. Per Default ist das aber mit Kopano am UCS nicht so. Dazu müssen folgende Anpassungen vorgenommen werden: | ||
+ | |||
+ | / | ||
+ | kopano unix - | ||
+ | |||
+ | / | ||
+ | kopano_destination_recipient_limit = 1 | ||
+ | |||
+ | Aktivieren: | ||
+ | ucr set mail/ | ||
+ | ucr commit / | ||
+ | systemctl restart postfix | ||
+ | |||
+ | [[https:// | ||
+ | |||
+ | Dann noch auf dem Benno Server der Datei / | ||
+ | |||
+ | < | ||
+ | |||
+ | =====Kopano Plugin installieren===== | ||
+ | |||
+ | echo "deb https:// | ||
+ | wget -O - https:// | ||
+ | apt update | ||
+ | apt install benno-kopano-webapp-plugin | ||
benno_mailarchiv.1534183670.txt.gz · Zuletzt geändert: 2018/08/13 18:07 von matthias