Changes
Page history
follow service page renames
authored
Nov 04, 2025
by
anarcat
Show whitespace changes
Inline
Side-by-side
service/email.md
View page @
a5383d3e
...
@@ -30,7 +30,7 @@ password". For this, you need to update your account in LDAP:
...
@@ -30,7 +30,7 @@ password". For this, you need to update your account in LDAP:
1.
head towards
<https://db.torproject.org/update.cgi>
1.
head towards
<https://db.torproject.org/update.cgi>
2.
login with your LDAP credentials (here's how to do a
[
password
2.
login with your LDAP credentials (here's how to do a
[
password
reset
](
howto
/ldap#password-reset
)
if you lost that)
reset
](
service
/ldap#password-reset
)
if you lost that)
3.
be careful to hit the "Update my info" button (not the "Full
3.
be careful to hit the "Update my info" button (not the "Full
search")
search")
4.
enter a new,
*strong*
password in the
`Change mail password:`
4.
enter a new,
*strong*
password in the
`Change mail password:`
...
@@ -734,7 +734,7 @@ There is currently no easy way to turn this into a highly available / redundant
...
@@ -734,7 +734,7 @@ There is currently no easy way to turn this into a highly available / redundant
SASL authentication is delegated to a dummy
SASL authentication is delegated to a dummy
Dovecot server which is
*only*
used for authentication (i.e. it
Dovecot server which is
*only*
used for authentication (i.e. it
doesn't provide IMAP or POP storage). Username/password pairs are
doesn't provide IMAP or POP storage). Username/password pairs are
deployed by
[
ud-ldap
](
howto
/ldap
)
into
`/etc/dovecot/private/mail-passwords`
.
deployed by
[
ud-ldap
](
service
/ldap
)
into
`/etc/dovecot/private/mail-passwords`
.
The LDAP server stores those passwords in a
`mailPassword`
field and
The LDAP server stores those passwords in a
`mailPassword`
field and
the web interface is used to modify those passwords. Passwords are
the web interface is used to modify those passwords. Passwords are
...
@@ -961,7 +961,7 @@ than the "smtps" port (465), but both are supported. Lately, the
...
@@ -961,7 +961,7 @@ than the "smtps" port (465), but both are supported. Lately, the
documentation has been changed for suggest port 465 first instead.
documentation has been changed for suggest port 465 first instead.
The TLS server is authenticated using the regular Let's Encrypt CA
The TLS server is authenticated using the regular Let's Encrypt CA
(see
[
TLS documentation
](
howto
/tls
)
).
(see
[
TLS documentation
](
service
/tls
)
).
## Storage
## Storage
...
@@ -988,7 +988,7 @@ commandline interface.
...
@@ -988,7 +988,7 @@ commandline interface.
On the submission server, SASL authentication is delegated to a dummy
On the submission server, SASL authentication is delegated to a dummy
Dovecot server which is
*only*
used for authentication (i.e. it
Dovecot server which is
*only*
used for authentication (i.e. it
doesn't provide IMAP or POP storage). Username/password pairs are
doesn't provide IMAP or POP storage). Username/password pairs are
deployed by
[
ud-ldap
](
howto
/ldap
)
into
`/etc/dovecot/private/mail-passwords`
.
deployed by
[
ud-ldap
](
service
/ldap
)
into
`/etc/dovecot/private/mail-passwords`
.
The LDAP server stores those passwords in a
`mailPassword`
field and
The LDAP server stores those passwords in a
`mailPassword`
field and
the web interface is used to modify those passwords. Passwords are
the web interface is used to modify those passwords. Passwords are
...
@@ -1003,7 +1003,7 @@ Most software in this space is written in C (Postfix, Dovecot, OpenDKIM).
...
@@ -1003,7 +1003,7 @@ Most software in this space is written in C (Postfix, Dovecot, OpenDKIM).
## Related services
## Related services
The submission and mail forwarding services both rely on the
[
LDAP
The submission and mail forwarding services both rely on the
[
LDAP
service
](
howto
/ldap
)
, for secrets and aliases, respectively.
service
](
service
/ldap
)
, for secrets and aliases, respectively.
The
[
mailing list service
](
services/lists
)
and
[
schleuder
](
service/schleuder
)
both depend on basic
The
[
mailing list service
](
services/lists
)
and
[
schleuder
](
service/schleuder
)
both depend on basic
email services for their normal operations. The
[
CiviCRM service
](
service/crm
)
email services for their normal operations. The
[
CiviCRM service
](
service/crm
)
...
@@ -1040,7 +1040,7 @@ built by anarcat, and is maintained by TPA.
...
@@ -1040,7 +1040,7 @@ built by anarcat, and is maintained by TPA.
Some parts of the mail services (the submission service, in
Some parts of the mail services (the submission service, in
particular) depends on patches on
`userdir-ldap`
that were partially
particular) depends on patches on
`userdir-ldap`
that were partially
merged in the upstream, see
[
LDAP docs
](
howto
/ldap#maintainer-users-and-upstream
)
for details.
merged in the upstream, see
[
LDAP docs
](
service
/ldap#maintainer-users-and-upstream
)
for details.
## Users
## Users
...
@@ -1292,7 +1292,7 @@ Stockholm meeting.
...
@@ -1292,7 +1292,7 @@ Stockholm meeting.
### Proposed Solution
### Proposed Solution
The proposed design is to setup a new email server in the
[
howto
/ganeti
](
howto
/ganeti
)
The proposed design is to setup a new email server in the
[
service
/ganeti
](
service
/ganeti
)
cluster (currently
`gnt-fsn`
) with the user list synchronized from
cluster (currently
`gnt-fsn`
) with the user list synchronized from
LDAP, using a new password field (named
`mailPassword`
). The access
LDAP, using a new password field (named
`mailPassword`
). The access
would therefore be granted only to LDAP users, and LDAP accounts would
would therefore be granted only to LDAP users, and LDAP accounts would
...
...
...
...