Dovecot-extras

From SME Server
Revision as of 20:39, 22 September 2014 by Stephdl (talk | contribs) (Stephdl moved page Smeserver-dovecot-extras to Dovecot-extras)
Jump to navigationJump to search


dovecot-extras for SME Server

PythonIcon.png Skill level: easy
The instructions on this page can be followed by a beginner.


Maintainer

Daniel B. from Firewall Services

Description

dovecot-extras is a contrib to bring 'sieve' support and IMAP acl (sharedmailbox) to dovecot, the imap server

Requirements

You need the firewall-services repo to install this contribs

Installation 9.x Only

This contrib is currently held in the fws repository, so the following commands will install on your smeserver.

yum install --enablerepo=fws smeserver-dovecot-extras

You will then need to activate the database changes etc. The 'official' way is to perform

signal-event post-upgrade;  signal-event reboot

or if you do not want to restart your computer

signal-event email-update

Configuration

Sieve

There is no panel in the server-manager, You have to use the db command

[root@sme9 ~]# config show sieve 
 sieve=service
   TCPPort=4190
   access=private
   status=enabled

for example

config setprop sieve TCPORT 5190
signal-event email-update

you can change the IP listening (default localhost)

config setprop sieve Listen xxx.xxx.xxx.xxx
signal-event email-update


Shared Mailboxes

ShareMailbox is an important feature.

To enable it:

db configuration setprop dovecot SharedMailbox enabled
signal-event email-update

When this feature is enabled, a special group named sharedmailbox (automatically created during install) will have:

  • x permission on each user home (/home/e-smith/files/users/username) in order to access the Maildir folder (but it won't have any permission to read something else, like the home sub-folder)
  • Full read / write access to the Maildir for everyone

This special group is empty (no member), so this has limited impact on the security of the server. Just be sure to never add any user in this group. (It's a system group, and won't appear in the server-manager, so you cannot add members easily).

When a user access its mailbox through the IMAP server, dovecot spawn a new process with the standard user privileges, plus the sharedmailbox group. So basically a user is member of this special group only through dovecot. This configuration allows shared mailbox at the filesystem level. Effective permissions between differents users are enforced by IMAP ACL extension. You need a client which support this (tested with SOGo and Thunderbird using this extension ).

Once enabled, you can grant different access level (read, post, delete, change flags, create sub folders etc.) to other users, or group of users on your IMAP folders.

Uninstall

yum remove smeserver-dovecot-extras
signal-event post-upgrade;  signal-event reboot

Bugs

Sources for this contribs can be found in Firewall Service's repository [1]