forum.lissyara.su

Код: Выделить всё

begin routers

localuser:
  driver = accept
  check_local_user
# local_part_suffix = +* : -*
# local_part_suffix_optional
#  transport = local_delivery
  transport = dovecot_lda
  cannot_route_message = Unknown user

begin transports

dovecot_lda:
driver = pipe
command = /usr/libexec/dovecot/dovecot-lda -f "$sender_address" -d "$local_part@$domain"
home_directory = /home/$local_part/Maildir
message_prefix =
message_suffix =
delivery_date_add
envelope_to_add
return_path_add
log_output
log_defer_output
return_fail_output
umask = 077
freeze_exec_fail
temp_errors = 64: 69: 70: 71: 72: 73: 74: 75: 78
group = exim
user = exim
#mode = 0660

Код: Выделить всё

...
socket listen {
master {
path = /var/run/dovecot/auth-master
mode = 0600
user = exim
group = exim
}
...

Код: Выделить всё

PLAIN:
  driver                     = dovecot
  server_set_id              = $auth1
  server_socket              = /var/run/dovecot/auth-client
#  server_prompts             = :
  server_condition           = ${if saslauthd{{$2}{$3}{smtp}} {1}}
  server_advertise_condition = ${if def:tls_in_cipher }

# LOGIN authentication has traditional prompts and responses. There is no
# authorization ID in this mechanism, so unlike PLAIN the username and
# password are $auth1 and $auth2. Apart from that you can use the same
# server_condition setting for both authenticators.

LOGIN:
  driver                     = dovecot
  server_set_id              = $auth1
#  server_prompts             = <| Username: | Password:
  server_socket              = /var/run/dovecot/auth-client
  server_condition           = ${if saslauthd{{$1}{$2}{smtp}} {1}}
  server_advertise_condition = ${if def:tls_in_cipher }

Код: Выделить всё

# System user and group used to access mails. If you use multiple, userdb
# can override these by returning uid or gid fields. You can use either numbers
# or names. <doc/wiki/UserIds.txt>
mail_uid = exim
mail_gid = exim

Код: Выделить всё

[root@mail-10 conf.d]# cat ./auth-master.conf.ext
# Authentication for master users. Included from 10-auth.conf.

# By adding master=yes setting inside a passdb you make the passdb a list
# of "master users", who can log in as anyone else.
# <doc/wiki/Authentication.MasterUsers.txt>

# Example master user passdb using passwd-file. You can use any passdb though.
passdb {
  driver = passwd-file
  master = yes
  args = /etc/dovecot/master-users

  # Unless you're using PAM, you probably still want the destination user to
  # be looked up from passdb that it really exists. pass=yes does that.
  pass = yes
}

Код: Выделить всё

passdb {
  driver = passwd-file
      # Path for passwd-file. Also set the default password scheme.
            args = scheme=cram-md5 /etc/cram-md5.pwd
                  }

Код: Выделить всё

[root@mail-10 conf.d]# cat ./auth-passwdfile.conf.ext
# Authentication for passwd-file users. Included from 10-auth.conf.
#
# passwd-like file with specified location.
# <doc/wiki/AuthDatabase.PasswdFile.txt>

passdb {
  driver = passwd-file
  args = scheme=CRYPT username_format=%Lu /etc/cram-md5.pwd
}

userdb {
  driver = passwd-file
  args = username_format=%Lu /etc/cram-md5.pwd

  # Default fields that can be overridden by passwd-file
  #default_fields = quota_rule=*:storage=1G

  # Override fields from passwd-file
  #override_fields = home=/home/virtual/%u
}