grml.de

Dies ist eine alte Version des Dokuments!

---

root@dovecot:~# uname -a
Linux dovecot 5.15.83-1-pve #1 SMP PVE 5.15.83-1 (2022-12-15T00:00Z) x86_64 GNU/Linux

# apt install dovecot-core dovecot-ldap dovecot-managesieved dovecot-sieve dovecot-imapd dovecot-antispam

# vi /etc/dovecot/dovecot-ldap.conf.ext

hosts = 2a02:8106:4:1800:cc20:a8ff:fe90:c2a0
base = ou=user,dc=grml,dc=de
ldap_version = 3
user_attrs = =user=%{ldap:uid}
user_filter = (&(objectclass=inetOrgPerson)(|(uid=%n)(mail=%u)))
pass_attrs = uid=user, userPassword=password
pass_filter = (&(objectclass=inetOrgPerson)(uid=%u))
auth_bind = yes
iterate_attrs = mail=user
iterate_filter = (objectclass=inetOrgPerson)
default_pass_scheme = SSHA

# vi /etc/dovecot/conf.d/10-master.conf

[...]
!include auth-ldap.conf.ext
[...]

# vi /etc/dovecot/conf.d/10-master.conf

[...]
service lmtp {
  inet_listener lmtp {
    # Avoid making LMTP visible for the entire internet
    address = 2a02:8106:4:1800:cc9f:11ff:fe0a:624f
    port = 24
  }
  user = vmail
}
[...]

# vi /etc/dovecot/conf.d/10-ssl.conf

[...]
ssl = required
ssl_cert = </opt/certs/grml.de/fullchain.cer
ssl_key = </opt/certs/grml.de/grml.de.key
[...]