Aller au contenu principal

Voir les messages

Cette espace vous permet de voir toutes les Voir les messages réalisées par ce membre. Vous ne pouvez voir que les Voir les messages réalisées dans les espaces auxquels vous avez accès.

Messages - nigihayami

2
Internet, réseaux et serveurs / Re : dovecot : user doesn't exist
ça marche à condition de
0/ ne pas installer amavis qui fout le bordel pendant la configuration
1/Vérifier que doveadm user gilles existe
2/pour imap
chmod a+rwxt /var/mail.
chmod 0666 /var/mail
dovecot ; 10-mail.conf ;
namespace inbox {
  # Namespace type: private, shared or public
  type = private

  # Hierarchy separator to use. You should use the same separator for all
  # namespaces or some clients get confused. '/' is usually a good one.
  # The default however depends on the underlying mail storage format.
  separator = /

  # Prefix required to access this namespace. This needs to be different for
  # all namespaces. For example "Public/".
  prefix = INBOX./

  # Physical location of the mailbox. This is in same format as
  # mail_location, which is also the default for it.
 # location = maildir:/home/%u/Maildir

 location =  mbox:~/mail:INBOX=/var/mail/%u

  # There can be only one INBOX, and this setting defines which namespace
  # has it.
  inbox = yes

  # If namespace is hidden, it's not advertised to clients via NAMESPACE
  # extension. You'll most likely also want to set list=no. This is mostly
  # useful when converting from another server with different namespaces which
  # you want to deprecate but still keep working. For example you can create
  # hidden namespaces with prefixes "~/mail/", "~%u/mail/" and "mail/".
  hidden = no

  # Show the mailboxes under this namespace with LIST command. This makes the
  # namespace visible for clients that don't support NAMESPACE extension.
  # "children" value lists child mailboxes, but hides the namespace prefix.
  list = yes

  # Namespace handles its own subscriptions. If set to "no", the parent
  # namespace handles them (empty prefix should always have this as "yes")
  #subscriptions = yes

  # See 15-mailboxes.conf for definitions of special mailboxes.
}
.........

# or names. <doc/wiki/UserIds.txt>
mail_uid = dovenull
mail_gid = dovecot

# Group to enable temporarily for privileged operations. Currently this is
# used only with INBOX when either its initial creation or dotlocking fails.
# Typically this is set to "mail" to give access to /var/mail.
mail_privileged_group = mail

# Grant access to these supplementary groups for mail processes. Typically
# these are used to set up access to shared mailboxes. Note that it may be
# dangerous to set these if users can create symlinks (e.g. if "mail" group is
# set here, ln -s /var/mail ~/mail/var could allow a user to delete others'
# mailboxes, or ln -s /secret/shared/box ~/mail/mybox would allow reading it).
mail_access_groups = dovecot

# Allow full filesystem access to clients. There's no access checks other than
# what the operating system does for the active UID/GID. It works with both
# maildir and mboxes, allowing you to prefix mailboxes names with eg. /path/
# or ~user/.
mail_full_filesystem_access = no


Ajoutons à 15-mailboxes.conf
dans le namespace inbox {
....
 mailbox virtual/Archive {
     special_use =  \Archive
  }

Pour les clients Thunderbird ajouter à 20-imap.conf ligne 72 ;

imap_client_workarounds = tb-extra-mailbox-sep

Avec ça, j'ai dégrossis le chemin.
3
Internet, réseaux et serveurs / dovecot : user doesn't exist
gilles@logic-immo:~> sudo service postfix start
gilles@logic-immo:~> sudo service dovecot start
gilles@logic-immo:~> sudo doveadm user gilles@logic-immo.site

userdb lookup: user gilles@logic-immo.site doesn't exist
field   value

 postconf -n
alias_maps = lmdb:/etc/aliases
biff = no
canonical_maps = lmdb:/etc/postfix/canonical
command_directory = /usr/sbin
compatibility_level = 2
content_filter = amavis:[127.0.0.1]:10024
daemon_directory = /usr/lib/postfix/bin/
data_directory = /var/lib/postfix
debug_peer_level = 2
debug_peer_list = logic-immo.site
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
defer_transports =
delay_warning_time = 1h
disable_dns_lookups = no
disable_mime_output_conversion = no
disable_vrfy_command = yes
home_mailbox = Maildir/
html_directory = /usr/share/doc/packages/postfix-doc/html
inet_interfaces = all
inet_protocols = all
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command =
mailbox_size_limit = 0
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions = root
message_size_limit = 0
message_strip_characters = \0
meta_directory = /usr/lib/postfix
mydestination = logic-immo.site, mail.logic-immo.site, localhost.logic-immo.site, localhost
mydomain = logic-immo.site
myhostname = mail.logic-immo.site
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128, 82.125.194.150
mynetworks_style = host
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix-doc/README_FILES
relay_clientcerts = lmdb:/etc/postfix/relay_ccerts
relay_domains = $mydestination lmdb:/etc/postfix/relay
relayhost = [smtp.orange.fr]:465
relocated_maps = lmdb:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix-doc/samples
sender_canonical_maps = default_database_type = lmdb:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
shlib_directory = /usr/lib/postfix
smtp_enforce_tls = no
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = :/etc/postfix/sasl_passwd
smtp_sasl_security_options = noanonymous
smtp_tls_CAfile =
smtp_tls_CApath = /etc/postfix/ssl/cacerts
smtp_tls_cert_file = /etc/letsencrypt/live/mail.logic-immo.site/fullchain.pem
smtp_tls_ciphers = medium
smtp_tls_key_file = /etc/letsencrypt/live/mail.logic-immo.site/privkey.pem
smtp_tls_note_starttls_offer = yes
smtp_tls_protocols = !SSLv2, !SSLv3
smtp_tls_security_level = may
smtp_tls_session_cache_database = lmdb:/var/lib/postfix/smtp_tls_session_cache
smtp_tls_wrappermode = yes
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP
smtpd_client_restrictions =
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions =
smtpd_noop_commands = etrn
smtpd_sasl_auth_enable = no
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_sender_restrictions = lmdb:/etc/postfix/access
smtpd_starttls_timeout = 300s
smtpd_tls_CAfile =
smtpd_tls_CApath = /etc/postfix/ssl/cacerts
smtpd_tls_ask_ccert = yes
smtpd_tls_cert_file = /etc/letsencrypt/live/mail.logic-immo.site//fullchain.pem
smtpd_tls_exclude_ciphers = RC4
smtpd_tls_key_file = /etc/letsencrypt/live/mail.logic-immo.site//privkey.pem
smtpd_tls_loglevel = 1
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtpd_tls_received_header = yes
smtpd_tls_security_level = encrypt
smtpd_tls_session_cache_database = lmdb:/var/lib/postfix/smtpd_tls_session_cache
smtpd_use_tls = yes
strict_8bitmime = no
strict_rfc821_envelopes = no
transport_maps = lmdb:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_alias_maps = lmdb:/etc/postfix/virtual

avec doveadm config on a ;
service auth-worker {
  chroot =
  client_limit = 1
  drop_priv_before_exec = no
  executable = auth -w
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 0
  process_min_avail = 0
  protocol =
  service_count = 1
  type = worker
  unix_listener auth-worker {
    group =
    mode = 0600
    user = $default_internal_user
  }
  user =
  vsz_limit = 18446744073709551615 B
}
service auth {
  chroot =
  client_limit = 0
  drop_priv_before_exec = no
  executable = auth
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 1
  process_min_avail = 0
  protocol =
  service_count = 0
  type =
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0666
    user = postfix
  }
  unix_listener auth-client {
    group =
    mode = 0600
    user = $default_internal_user
  }
  unix_listener auth-login {
    group =
    mode = 0600
    user = $default_internal_user
  }
  unix_listener auth-master {
    group =
    mode = 0600
    user =
  }
  unix_listener auth-userdb {
    group =
    mode = 0666
    user = $default_internal_user
  }
  unix_listener login/login {
    group =
    mode = 0666
    user =
  }
  unix_listener token-login/tokenlogin {
    group =
    mode = 0666
    user =
  }
  user = $default_internal_user
  vsz_limit = 18446744073709551615 B
}

5
Internet, réseaux et serveurs / Re : mail() d'apache ne fonctionne pas
chez moi sur mon Lamp
Nouveau, j'ai redirigé le MX sur mon serveur que j'ai configuré avec yast-mailserver
et pas d'erreur,
sauf que il ne poste rien ce con. >:(
c'est surement du au blocage du port 25 par mon FAI
si seulement je pouvais configurer postfix sur le port 465 ça m'aiderait
7
Internet, réseaux et serveurs / Re : mail() d'apache ne fonctionne pas
To enable port 587, edit the file /etc/postfix/master.cf

vi /etc/postfix/master.cf

and remove the # in front of the line (uncomment the line):

#submission inet n - n - - smtpd

so that it looks like this:

submission inet n - n - - smtpd

You may want to uncomment additional lines enabling SASL authentication right after this line. Each new line should start with space!

 -o syslog_name=postfix/submission
 -o smtpd_tls_security_level=encrypt
 -o smtpd_sasl_auth_enable=yes
 -o smtpd_client_restrictions=permit_sasl_authenticated,reject

All the other settings to be configured in /etc/postfix/main.cf based on your environment.

Additionally you may need to configure TLS settings:

# TLS parameters
# you need to specify a real certificate location
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert.key
smtpd_use_tls=yes
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtp_tls_session_cache_database = btree:$data_directory/smtp_tls_session_cache
smtpd_sasl_tls_security_options=noanonymous
smtpd_tls_auth_only=yes


Additional security restrictions:

smtpd_relay_restrictions=permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination
smtpd_recipient_restrictions=permit_mynetworks,permit_sasl_authenticated,reject_non_fqdn_helo_hostname,reject_non_fqdn_sender,reject_unknown_sender_domain,reject_non_fqdn_recipient,reject_unknown_recipient_domain

check and restart postfix:

postfix check
systemctl restart postfix

You can make sure that postfix is now listening on both ports 25 and 587:

netstat -na | grep LISTEN | grep 25
netstat -na | grep LISTEN | grep 587
  >:(  >:(  >:(  >:(  c'est une usine à gaz cette connerie, je ne comprend pas comment faire la ligne en rouge
10
Internet, réseaux et serveurs / Re : mail() d'apache ne fonctionne pas
Bon il faut être humble et reconnaitre qu'on est con. ;D
Je viens de fouiner dans /var/mail et vu les mails de root, il se trouve que MX était correct, jusqu'à ce que je bidouille les DNS, or les mail étaient correct,j'ai corrigé et je patiente jusqu'à mise à jour, j'ai réglé à 1h.
Mais l'erreur est ailleurs.
Postfix et mail() d'apache fonctionnent... Je poursuit les investigations. ::)
13
Internet, réseaux et serveurs / Re : Prestashop ne fonctionne pas bien sous Leap 15.2
Voici l'exemple d'erreurs que je rencontre ;
[Thu Oct 29 16:59:16.388237 2020] [php7:warn] [pid 1844] [client 127.0.0.1:60414] PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /srv/www/htdocs/shop/vendor/doctrine/orm/lib/Doctrine/ORM/UnitOfWork.php on line 2636

ou encore

[Thu Oct 29 17:09:50.157633 2020] [php7:notice] [pid 2802] [client 127.0.0.1:32784] PHP Notice:  Trying to access array offset on value of type null in /srv/www/htdocs/shop/vendor/doctrine/annotations/lib/Doctrine/Common/Annotations/DocParser.php on line 995, referer: http://haku.ddns.net/shop/admin***/index.php/sell/catalog/products/20?_token=txl3NKpRbqLE9xXZ4UgNH8KtGjhK_iBmtf3bTJBpy6k

pourtant les champs ne sont pas null, c'est ce genre de bug qui m'énerve le plus.
Merci pour votre réponse
14
Internet, réseaux et serveurs / Prestashop ne fonctionne pas bien sous Leap 15.2
Prestashop fonctionne parfaitement sous Debian ;
Informations sur votre serveur Linux #1 SMP Debian 5.4.19-1~bpo10+1 (2020-03-09) x86_64
Version du logiciel serveur : Apache/2.4.25 (Debian)
Version de PHP : 7.1.33
Limite de mémoire : 128M
Temps maximal d'exécution : 60
Taille max. pour envoi de fichiers : 64M

Par contre il buggue sous Leap 15.2 : les menus et autres js ne fonctionnent pas correctement

Linux #1 SMP Thu Oct 15 16:05:25 UTC 2020 (41f7396) x86_64
Version du logiciel serveur :Apache
Version de PHP :7.4.6
Limite de mémoire :128M
Temps maximal d'exécution :30
Taille max. pour envoi de fichiers :16M

Avez-vous une idée sur ce qu'il manque à apache pour bien fonctionner?
cordialement