Using IMAP Shared Folders

1
# deluser rrosso

1
# apt-get install dovecot-imapd

1
# apt-get install krb5-config krb5-user libkrb5-3 libpam-krb5 samba-common samba winbind smbclient
2

3
# cat /etc/krb5.conf
4
[libdefaults]
5
  default_realm = DOMAIN.COM
6
  dns_lookup_realm = true
7
  dns_lookup_kdc = true
8

9
[realms]
10
  DOMAIN.COM = {
11
    kdc = ad1.domain.com
12
    admin_server = ad1.domain.com
13
  }
14

15
# kinit administrator
16
Password for administrator@DOMAIN.COM:
17
# klist
18
Ticket cache: FILE:/tmp/krb5cc_0
19
Default principal: administrator@DOMAIN.COM
20

21
Valid starting    Expires           Service principal
22
30/04/2012 10:39  30/04/2012 20:40  krbtgt/DOMAIN.COM@DOMAIN.COM
23
  renew until 01/05/2012 10:39
24

25
In /etc/samba dir:
26
# cat smb.conf
27
[global]
28
  workgroup = DOMAIN
29
  realm = DOMAIN.COM
30
  security = ADS
31
  server string = MAIL ARCHIVE SERVER
32
  load printers = no
33
  password server = ad1
34
  password level = 8
35
  username level = 8
36
  local master = no
37
  domain master = no
38
  preferred master = no
39
  encrypt passwords = yes
40
  netbios name = usmailarchserver
41
  client signing = yes
42
  dns proxy = no
43
  socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
44
  wins support = No
45
  veto files = /*.eml/*.nws/riched20.dll/*.{*}/
46
  idmap uid = 10000-20000
47
  idmap gid = 10000-20000
48
  template shell = /bin/bash
49
  template homedir = /home/%D/%U
50
  winbind separator = +
51
  winbind enum users = Yes
52
  winbind enum groups = Yes
53
  winbind use default domain = Yes
54
  auth methods = winbind
55
[IPC$]
56
        hosts allow = 127.0.0.1,172.20.0.0/16
57
        hosts deny = 0.0.0.0/0
58

59
# /etc/init.d/winbind restart
60
Stopping the Winbind daemon: winbind.
61
Starting the Winbind daemon: winbind.
62

63
# net ads join -U administrator
64
Enter administrator's password:
65
Using short domain name -- DOMAIN
66
Joined 'USMAILARCHSERVER' to realm 'domain.com'
67

68
# /etc/init.d/winbind restart
69
Stopping the Winbind daemon: winbind.
70
Starting the Winbind daemon: winbind.
71

72
# wbinfo -u | grep -i rrosso
73
rrosso
74

75
# wbinfo -g | grep -i Infrastructure
76
it infrastructure
77
...snip
78

79
# grep winbind /etc/nsswitch.conf
80
passwd:         compat winbind
81
group:          compat winbind
82

83
rrosso@jamaica:~$ ssh usmailarchserver
84

85
Creating directory '/home/DOMAIN/rrosso'.
86
Linux usmailarchserver 3.2.0-2-amd64 #1 SMP Sun Apr 15 16:47:38 UTC 2012 x86_64

1
# grep location *
2
10-mail.conf:mail_location = maildir:~/Maildir
3

4
# grep winbind *
5
10-auth.conf:auth_winbind_helper_path = /usr/bin/ntlm_auth
6

7
# vi 10-mail.conf
8
# When creating any namespaces, you must also have a private namespace:
9
namespace {
10
  type = private
11
  separator = /
12
  prefix =
13
  #location defaults to mail_location.
14
  inbox = yes
15
}
16
namespace {
17
  type = public
18
  separator = /
19
  prefix = Public/
20
  location = maildir:/PublicFolders
21
  subscriptions = no
22
}
23

24
# /etc/init.d/dovecot restart
25
Restarting IMAP/POP3 mail server: dovecot.

1
dpkg-reconfigure exim4-config
2
** Pick mail sent by smarthost; received via SMTP or fetchmail
3
** Accept from all hosts by deleting 127.0.0.1 entry
4
** Maildir format in home directory
5

6
In /etc/exim4 folder:
7
# vi exim4.conf.template
8
begin routers
9

10
# This router handles special mail addresses to be
11
...snip
12
shared_folders:
13
  debug_print = "R: shared_folders for $local_part@$domain"
14
  local_parts = "hostmaster:ITAlerts"
15
  driver = accept
16
  transport = maildir_shared_folder
17

18
begin transports
19
...snip
20
maildir_shared_folder:
21
  driver = appendfile
22
  maildir_format = true
23
  directory = /PublicFolders/.IT.${local_part}/
24
  create_directory = false
25
  check_string = ""
26
  escape_string = ""
27
  delivery_date_add
28
  envelope_to_add
29
  return_path_add
30
  mode = 0777
31
  no_mode_fail_narrower
32
  user = mail
33
  group = 10000
34

35
# ps -ef | grep exim
36
101      14450     1  0 14:29 ?        00:00:00 /usr/sbin/exim4 -bd -q30m
37

38
** We are trying to accept hostmaster@ email straight into Maildir so disable system alias for this user.
39
# grep hostmaster /etc/aliases
40
#hostmaster: root
41

42
# newaliases
43

44
# exim4 -bt hostmaster@usmailarchserver.domain.com
45
R: system_aliases for hostmaster@usmailarchserver.domain.com
46
R: shared_folders for hostmaster@usmailarchserver.domain.com
47
hostmaster@usmailarchserver.domain.com
48
  router = shared_folders, transport = maildir_shared_folder
49

50
# exim4 -bt ITAlerts@usmailarchserver.domain.com
51
R: system_aliases for italerts@usmailarchserver.domain.com
52
R: shared_folders for italerts@usmailarchserver.domain.com
53
ITAlerts@usmailarchserver.domain.com
54
  router = shared_folders, transport = maildir_shared_folder
55

56
# tail -f /var/log/exim4/mainlog
57
2012-05-04 15:06:21 End queue run: pid=16475
58
2012-05-04 15:14:31 1SQQl9-0004IN-J6  italerts  R=shared_folders T=maildir_shared_folder
59
2012-05-04 15:14:31 1SQQl9-0004IN-J6 Completed
60
2012-05-04 15:17:51 1SQQou-0004JG-IE  hostmaster  R=shared_folders T=maildir_shared_folder
61
2012-05-04 15:17:51 1SQQou-0004JG-IE Completed
62
...snip

1
# grep hostmaster exim4.conf.template
2
  local_parts = "hostmaster:ITAlerts:backupnotifications:busapps"
3

4
# grep hostmaster /PublicFolders/mailEnabledList
5
hostmaster:.IT.hostmaster
6

7
# /etc/init.d/exim4 reload