Upgrade/iRedMail/0.7.4-0.8.0 - Revision history

ZhangHuangbin: /* Add internal service required by Doveadm */

ZhangHuangbin — Mon, 01 Oct 2012 12:48:27 GMT

Add internal service required by Doveadm

← Older revision		Revision as of 12:48, 1 October 2012
Line 129:		Line 129:

	== Add internal service required by Doveadm ==		== Add internal service required by Doveadm ==
		+
		+	'''NOTE''': This step is applicable to both Dovecot-1.x and Dovecot-2.x.

	To use doveadm command provided by Dovecot-2, please add one more value of attribute 'enabledService' for mail user.		To use doveadm command provided by Dovecot-2, please add one more value of attribute 'enabledService' for mail user.

ZhangHuangbin: /* ChangeLog */

ZhangHuangbin — Thu, 12 Jul 2012 10:26:02 GMT

ChangeLog

← Older revision		Revision as of 10:26, 12 July 2012
Line 175:		Line 175:

	= ChangeLog =		= ChangeLog =
		+	* 2012-07-12: Two optional steps:
		+	** [OPTIONAL] Enforce connections over HTTPS in Roundcube webmail
		+	** [OPTIONAL] Enforce connections over POP3S/IMAPS in Dovecot
	* 2012-05-10: Initial release.		* 2012-05-10: Initial release.

ZhangHuangbin: /* Fix logrotate setting of Dovecot log files */

ZhangHuangbin — Thu, 12 Jul 2012 10:24:42 GMT

Fix logrotate setting of Dovecot log files

← Older revision		Revision as of 10:24, 12 July 2012
Line 87:		Line 87:
	endscript		endscript
	</pre>}}		</pre>}}
		+
		+
		+	== [OPTIONAL] Enforce connections over HTTPS in Roundcube webmail ==
		+
		+	'''NOTE:''' This step is '''optional''', but highly recommended for better security.
		+
		+	Please update below parameter in Roundcube config file '''roundcubemail/config/main.inc.php''' to enforce connections over https for better security.
		+	With this option enabled, all non-secure connections will be redirected to httpS://.
		+	* On RHEL/CentOS/Scientific Linux, Gentoo, OpenBSD, it's '''/var/www/roundcubemail/config/main.inc.php'''.
		+	* On Debian/Ubuntu, it's '''/usr/share/apache2/roundcubemail/config/main.inc.php'''.
		+	* On openSUSE, it's '''/srv/www/roundcubemail/config/main.inc.php'''.
		+	* On FreeBSD, it's '''/usr/local/www/roundcubemail/config/main.inc.php'''.
		+	{{cfg\|roundcubemail/config/main.inc.php\|<pre>
		+	$rcmail_config['force_https'] = true;
		+	</pre>}}
		+
		+	Restarting Apache web server is required.
		+
		+	== [OPTIONAL] Enforce connections over POP3S/IMAPS in Dovecot ==
		+
		+	'''NOTE:'''
		+	* This step is '''OPTIONAL''', but highly recommended for better security.
		+	* Since it may requires update on your mail users' MUA (e.g. Thunderbird, Outlook), please notify your mail users before this change.
		+
		+	Since iRedMail-0.8.0, all clients are forced to use IMAPS and POPS (via STARTTLS) for better security by default. To enable this feature, please update below parameters in your Dovecot config file, '''dovecot.conf'''.
		+	* On RHEL/CentOS/Scientific Linux 5.x, it's '''/etc/dovecot.conf'''.
		+	* On RHEL/CentOS/Scientific Linux 6.x, it's '''/etc/dovecot/dovecot.conf'''.
		+	* On Debian/Ubuntu, it's '''/etc/dovecot/dovecot.conf'''.
		+	* On openSUSE, it's '''/etc/dovecot/dovecot.conf'''.
		+	* On FreeBSD, it's '''/usr/local/etc/dovecot/dovecot.conf'''.
		+	{{cfg\|dovecot.conf\|<pre>
		+	ssl = required
		+	disable_plaintext_auth = yes
		+	</pre>}}
		+
		+	Restarting Dovecot service is required.
		+
		+	To enable POP3/IMAPS without STARTTLS, please set '''disable_plaintext_auth=no''' AND '''ssl=yes''' in dovecot.conf.

	= OpenLDAP backend special =		= OpenLDAP backend special =

ZhangHuangbin: /* Enable greylist opt in and opt out in Policyd */

ZhangHuangbin — Fri, 18 May 2012 23:46:11 GMT

Enable greylist opt in and opt out in Policyd

← Older revision		Revision as of 23:46, 18 May 2012
Line 44:		Line 44:
	type of complaints or praise from your users.		type of complaints or praise from your users.

-	Please update Policyd setting '''OPTINOUT''' to 1 to enable greylist opt in / opt out:	+	Please update Policyd setting '''OPTINOUT''' and '''OPTINOUTALL=1''' to 1 to enable greylist opt in / opt out:
	* On RHEL/CentOS/Scientific Linux, it's set in file '''/etc/policyd.conf'''.		* On RHEL/CentOS/Scientific Linux, it's set in file '''/etc/policyd.conf'''.
	* On Debian/Ubuntu, it's set in file '''/etc/postfix-policyd.conf'''.		* On Debian/Ubuntu, it's set in file '''/etc/postfix-policyd.conf'''.
Line 51:		Line 51:
	{{cfg\|policyd.conf\|<pre>		{{cfg\|policyd.conf\|<pre>
	OPTINOUT=1		OPTINOUT=1
		+	OPTINOUTALL=1
	</pre>}}		</pre>}}

ZhangHuangbin: /* General (All backends should apply these upgrade steps) */

ZhangHuangbin — Tue, 15 May 2012 10:14:58 GMT

General (All backends should apply these upgrade steps)

← Older revision		Revision as of 10:14, 15 May 2012
Line 1:		Line 1:
	__TOC__		__TOC__

		+
		+	Don't forget to update /etc/iredmail-release with version number '0.8.0'.

	= General (All backends should apply these upgrade steps) =		= General (All backends should apply these upgrade steps) =

ZhangHuangbin: /* Set strict file permission for Dovecot config files */

ZhangHuangbin — Thu, 10 May 2012 06:30:12 GMT

Set strict file permission for Dovecot config files

← Older revision		Revision as of 06:30, 10 May 2012
Line 20:		Line 20:
	{{cmd\|<pre>		{{cmd\|<pre>
	# chown dovecot:dovecot /etc/dovecot/used-quota.conf		# chown dovecot:dovecot /etc/dovecot/used-quota.conf
-	# chmod 0500 /etc/dovecot/~~dovecot-~~used-quota.conf	+	# chmod 0500 /etc/dovecot/used-quota.conf
	</pre>}}		</pre>}}

ZhangHuangbin: /* Set strict file permission for Dovecot config files */

ZhangHuangbin — Thu, 10 May 2012 05:36:18 GMT

Set strict file permission for Dovecot config files

← Older revision		Revision as of 05:36, 10 May 2012
Line 6:		Line 6:
	== Set strict file permission for Dovecot config files ==		== Set strict file permission for Dovecot config files ==

-	There'~~re two Dovecot config files are~~ world-readable, we should set strict file owner and permission on ~~them~~ so that it won't leak SQL server infomation.	+	There's one world-readable Dovecot config file, we should set strict file owner and permission on it so that it won't leak SQL server infomation.

	Please execute below command to fix it, then restart Dovecot service:		Please execute below command to fix it, then restart Dovecot service:
		+	* NOTE: The file name on different Linux/BSD distributions may be different, it should be dovecot-used-quota.conf or used-quota.conf.

	* On RHEL/CentOS/Scientific Linux 5.x:		* On RHEL/CentOS/Scientific Linux 5.x:
	{{cmd\|<pre>		{{cmd\|<pre>
-	# chown dovecot:dovecot /etc/dovecot-used-quota~~.conf /etc/dovecot-share-folder~~.conf	+	# chown dovecot:dovecot /etc/dovecot-used-quota.conf
-	# chmod 0500 /etc/dovecot-used-quota~~.conf /etc/dovecot-share-folder~~.conf	+	# chmod 0500 /etc/dovecot-used-quota.conf
	</pre>}}		</pre>}}

	* On RHEL/CentOS/Scientific Linux 6.x, Debian, Ubuntu, openSUSE:		* On RHEL/CentOS/Scientific Linux 6.x, Debian, Ubuntu, openSUSE:
	{{cmd\|<pre>		{{cmd\|<pre>
-	# chown dovecot:dovecot /etc/dovecot/~~dovecot-~~used-quota~~.conf /etc/dovecot/dovecot-share-folder~~.conf	+	# chown dovecot:dovecot /etc/dovecot/used-quota.conf
-	# chmod 0500 /etc/dovecot/dovecot-used-quota~~.conf /etc/dovecot/dovecot-share-folder~~.conf	+	# chmod 0500 /etc/dovecot/dovecot-used-quota.conf
	</pre>}}		</pre>}}

	* On FreeBSD:		* On FreeBSD:
	{{cmd\|<pre>		{{cmd\|<pre>
-	# chown dovecot:dovecot /usr/local/etc/dovecot-used-quota~~.conf /usr/local/etc/dovecot-share-folder~~.conf	+	# chown dovecot:dovecot /usr/local/etc/dovecot-used-quota.conf
-	# chmod 0500 /usr/local/etc/dovecot-used-quota~~.conf /usr/local/etc/dovecot-share-folder~~.conf	+	# chmod 0500 /usr/local/etc/dovecot-used-quota.conf
	</pre>}}		</pre>}}

ZhangHuangbin: /* Enable greylist opt in and opt out in Policyd */

ZhangHuangbin — Wed, 09 May 2012 13:17:09 GMT

Enable greylist opt in and opt out in Policyd

← Older revision		Revision as of 13:17, 9 May 2012
Line 29:		Line 29:

	== Enable greylist opt in and opt out in Policyd ==		== Enable greylist opt in and opt out in Policyd ==
		+
		+	Note: If you're running Ubuntu 11.10 or later releases, there's no Policyd (v1.8) installed at all, it's replaced by Cluebringer, a.k.a. Policyd v2. So it's safe to skip this step.
		+
	Some people are fairly irate when it comes to mail and		Some people are fairly irate when it comes to mail and
	refuse wanting to have any type of delay. this feature		refuse wanting to have any type of delay. this feature

ZhangHuangbin at 10:31, 9 May 2012

ZhangHuangbin — Wed, 09 May 2012 10:31:03 GMT

← Older revision		Revision as of 10:31, 9 May 2012
Line 1:		Line 1:
	__TOC__		__TOC__

-	~~THIS UPGRADE TUTORIAL IS A DRAFT, DO NOT APPLY IT.~~

	= General (All backends should apply these upgrade steps) =		= General (All backends should apply these upgrade steps) =
Line 129:		Line 128:
	mysql> ALTER TABLE mailbox ADD COLUMN enabledoveadm TINYINT(1) NOT NULL DEFAULT 1;		mysql> ALTER TABLE mailbox ADD COLUMN enabledoveadm TINYINT(1) NOT NULL DEFAULT 1;
	</pre>}}		</pre>}}
		+
		+	= ChangeLog =
		+	* 2012-05-10: Initial release.

ZhangHuangbin: /* Add internal service required by Doveadm */

ZhangHuangbin — Thu, 19 Apr 2012 15:58:12 GMT

Add internal service required by Doveadm

← Older revision		Revision as of 15:58, 19 April 2012
Line 113:		Line 113:

	It will print progress message in the terminal, just wait until completed.		It will print progress message in the terminal, just wait until completed.
		+
		+	If you're running Dovecot-2, please add below lines in '''dovecot-ldap.conf''' to make command 'doveadm mailbox' work as expected:
		+	{{cfg\|dovecot-ldap.conf\|<pre>
		+	iterate_attrs = mail=user
		+	iterate_filter = (&(objectClass=mailUser)(accountStatus=active)(enabledService=mail))
		+	</pre>}}

	= MySQL backend special =		= MySQL backend special =