874 lines
24 KiB
Markdown
874 lines
24 KiB
Markdown
# Upgrade iRedMail from 0.5.1 to 0.6.0
|
|
|
|
[TOC]
|
|
|
|
## ChangeLog
|
|
|
|
> We provide remote upgrade service, check
|
|
> [the price](https://www.iredmail.org/support.html) and
|
|
> [contact us](https://www.iredmail.org/contact.html).
|
|
|
|
* 2010-06-19: Fixed: Add new column in MySQL database after upgarding PostfixAdmin.
|
|
* 2010-06-18: [OpenLDAP] New: Index missed LDAP attributes.
|
|
* 2010-06-03: Fixed: Forget to add new parameter to enable domain alias management in PostfixAdmin.
|
|
* 2010-06-02: Fixed: incorrect config file of phpLDAPadmin. Thanks billybons2006@forum.
|
|
* 2010-06-02: Fixed: incorrect PostfixAdmin config file. Thanks hata_ph@forum.
|
|
|
|
## General (All backends should apply these steps)
|
|
|
|
### Apply hotfix for iRedMail-0.5.1
|
|
|
|
* [Incorrect crontab job of vmail user](https://forum.iredmail.org/topic418-fixed-in-051-incorrect-crontab-job-of-vmail-user.html)
|
|
* [iRedAdmin-0.1.1 (shipped in iRedMail-0.5.1): not all arguments converted during string formatting](https://forum.iredmail.org/topic398-fixed-in-iredadmin011-not-all-arguments-converted.html)
|
|
|
|
### Add missing MySQL table (Debian/Ubuntu only)
|
|
|
|
__Note__: This step is applicable to only Debian/Ubuntu.
|
|
|
|
You should manually import another MySQL table if you are using below distributions:
|
|
|
|
* Debian 5
|
|
* Ubuntu 8.04
|
|
* Ubuntu 9.04
|
|
|
|
```
|
|
$ mysql -uroot -p postfixpolicyd
|
|
mysql> SOURCE /usr/share/dbconfig-common/data/postfix-policyd/upgrade/mysql/1.73-1;
|
|
mysql> GRANT SELECT,INSERT,UPDATE,DELETE ON postfixpolicyd.* TO postfix-policyd@localhost;
|
|
mysql> quit;
|
|
```
|
|
|
|
It will create a new table `postfixpolicyd.blacklist_dnsname`. Used to block
|
|
emails sent from `blacklist_dnsname` in Policyd,
|
|
|
|
### Upgrade Roundcube webmail to 0.3.1
|
|
|
|
Roundcube-0.3.1 brings new features and better performance, all users are encouraged to upgrade it.
|
|
|
|
To upgrade roundcube to 0.3.1, we should:
|
|
* Backup current roundcube installation.
|
|
* Download roundcube source tarball: roundcubemail-0.3.1.tar.gz, and uncompress it.
|
|
* Copy it to apache server root directory.
|
|
* Upgrade SQL database.
|
|
* Replace symbol link by new version.
|
|
* Create new config files and synchronize settings from old configuration files.
|
|
* Enable necessary plugins.
|
|
* Restart apache web server
|
|
* [Next Step] Configure plugin (`managesieve`) to allow user to customize mail filter rule.
|
|
|
|
Steps to upgrade it:
|
|
|
|
* Backup current roundcube installation.
|
|
|
|
* We should backup roundcubemail database in MySQL. If upgrade failed, we can recovery it from this backup copy.
|
|
* Backing up installation files is not required since we won't move or override them during upgrade procedure.
|
|
|
|
```
|
|
$ mysqldump -uroot -p --default-character-set=utf8 roundcubemail > /opt/roundcubemail-old.sql
|
|
```
|
|
|
|
File `/opt/roundcubemail-old.sql` is the backup copy of current roundcubemail database.
|
|
|
|
* Download Roundcube 0.3.1: http://sourceforge.net/projects/roundcubemail/files/ .
|
|
we assume you downloaded it to /root/ directory.
|
|
|
|
```
|
|
# cd /root/
|
|
# tar zxf roundcubemail-0.3.1.tar.gz
|
|
```
|
|
|
|
* Copy it to apache server root directory:
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# cp -rf /root/roundcubemail-0.3.1 /var/www/
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# cp -rf /root/roundcubemail-0.3.1 /usr/share/apache2/
|
|
```
|
|
|
|
* Remove old symbol link, and create a new one:
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# cd /var/www/
|
|
# rm -i roundcubemail # Do not use command 'rm' with '-r' flag here.
|
|
# ln -s roundcubemail-0.3.1 roundcubemail
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# cd /usr/share/apache2/
|
|
# rm -i roundcubemail
|
|
# ln -s roundcubemail-0.3.1 roundcubemail
|
|
```
|
|
|
|
* Upgrade SQL database.
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# mysql -uroot -p
|
|
mysql> USE roundcubemail;
|
|
mysql> SOURCE /var/www/roundcubemail/SQL/mysql.update.sql;
|
|
mysql> quit;
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# mysql -uroot -p
|
|
mysql> USE roundcubemail;
|
|
mysql> SOURCE /usr/share/apache2/roundcubemail/SQL/mysql.update.sql;
|
|
mysql> quit;
|
|
```
|
|
|
|
* Create new config files and synchronize settings from old configuration files.
|
|
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# cd /var/www/roundcubemail/config/
|
|
# cp db.inc.php.dist db.inc.php # Database config file.
|
|
# cp main.inc.php.dist main.inc.php # Main config file.
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# cd /usr/share/apache2/roundcubemail/config/
|
|
# cp db.inc.php.dist db.inc.php # Database config file.
|
|
# cp main.inc.php.dist main.inc.php # Main config file.
|
|
```
|
|
|
|
Sync database config file `db.inc.php` with below config parameters:
|
|
|
|
```
|
|
# Part of file: roundcubemail/config/db.inc.php
|
|
|
|
$rcmail_config['db_dsnw'] =
|
|
```
|
|
|
|
Sync config parameters in main config file `main.inc.php`. Roundcube 0.3.1 has
|
|
some new config parameters in main config file `main.inc.php`, but you can use
|
|
most of them with default values. What we need to do is syncing config
|
|
parameters from old installation.
|
|
|
|
```
|
|
$rcmail_config['enable_installer'] = FALSE;
|
|
$rcmail_config['check_all_folders'] = TRUE;
|
|
$rcmail_config['default_host'] =
|
|
$rcmail_config['smtp_server'] =
|
|
$rcmail_config['smtp_user'] = "%u";
|
|
$rcmail_config['smtp_pass'] = "%p";
|
|
$rcmail_config['smtp_auth_type'] = "LOGIN";
|
|
$rcmail_config['username_domain'] =
|
|
$rcmail_config['language'] =
|
|
$rcmail_config['enable_spellcheck'] =
|
|
$rcmail_config['default_charset'] = "UTF-8";
|
|
$rcmail_config['useragent'] = "RoundCube WebMail";
|
|
$rcmail_config['create_default_folders'] = TRUE;
|
|
$rcmail_config['mime_param_folding'] = 1;
|
|
$rcmail_config['identities_level'] = 3;
|
|
$rcmail_config['preview_pane'] = TRUE;
|
|
$rcmail_config['quota_zero_as_unlimited'] = TRUE;
|
|
$rcmail_config['log_driver'] = "syslog";
|
|
$rcmail_config['syslog_id'] = "roundcube";
|
|
$rcmail_config['syslog_facility'] = LOG_MAIL;
|
|
$rcmail_config['log_logins'] = TRUE;
|
|
$rcmail_config['delete_always'] = TRUE;
|
|
|
|
#
|
|
# ---- Global LDAP Address Book ----
|
|
# You can simply copy from old config file.
|
|
#
|
|
$rcmail_config['ldap_public']
|
|
```
|
|
|
|
* Enable necessary plugins.
|
|
|
|
Roundcube 0.3.1 officially ships some plugins, currently, we need two plugins:
|
|
`password`, `managesieve`. List them in main config file: `main.inc.php`.
|
|
|
|
```
|
|
# Part of file: roundcubemail/config/main.inc.php
|
|
|
|
$rcmail_config['plugins'] = array("password", "managesieve",);
|
|
```
|
|
|
|
Plugin name is same as folder name under `roundcubemail/plugins/` directory,
|
|
and we have to config plugins separately.
|
|
|
|
* Restart apache web server.
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# /etc/init.d/httpd restart
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# /etc/init.d/apache2 restart
|
|
```
|
|
|
|
* Apply two patches. About these two patches:
|
|
|
|
* Refer to this forum topic for more detail about patch for CVE-2010-0464: [https://forum.iredmail.org/topic673-security-fix-in-roundcube-disable-dns-prefetching-cve20100464.html Security fix in Roundcube: Disable DNS prefetching. (CVE-2010-0464)]
|
|
* Patch `managesieve_rule_width_on_safari.patch` is used to fix page width in filter plugin, for Safari web browser.
|
|
|
|
Steps to patch your roundcube 0.3.1:
|
|
|
|
* On RHEL/CentOS:
|
|
```
|
|
# cd /tmp/
|
|
# wget http://iredmail.googlecode.com/hg/tags/0.6.0/patches/roundcubemail/roundcube-CVE-2010-0464.patch
|
|
# wget http://iredmail.googlecode.com/hg/tags/0.6.0/patches/roundcubemail/managesieve_rule_width_on_safari.patch
|
|
# cd /var/www/roundcubemail/
|
|
# patch -p0 < /tmp/roundcube-CVE-2010-0464.patch
|
|
# patch -p0 < /tmp/managesieve_rule_width_on_safari.patch
|
|
```
|
|
|
|
* On Debian/Ubuntu:
|
|
```
|
|
# cd /tmp/
|
|
# wget http://iredmail.googlecode.com/hg/tags/0.6.0/patches/roundcubemail/roundcube-CVE-2010-0464.patch
|
|
# wget http://iredmail.googlecode.com/hg/tags/0.6.0/patches/roundcubemail/managesieve_rule_width_on_safari.patch
|
|
# cd /usr/share/apache2/roundcubemail/
|
|
# patch -p0 < /tmp/roundcube-CVE-2010-0464.patch
|
|
# patch -p0 < /tmp/managesieve_rule_width_on_safari.patch
|
|
```
|
|
|
|
#### Configure plugin for mail filter rules: managesieve
|
|
|
|
Roundcube 0.3.1 officially ships a plugin to allow users to customize mail
|
|
filter rule: `managesieve`. To make it work, we should generate new config
|
|
file and config necessary parameters.
|
|
|
|
* Change current directory to plugin directory:
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# cd /var/www/roundcubemail/plugins/managesieve/
|
|
# cp config.inc.php.dist config.inc.php
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# cd /usr/share/apache2/roundcubemail/plugins/managesieve/
|
|
# cp config.inc.php.dist config.inc.php
|
|
```
|
|
|
|
* Configure plugin in `config.inc.php`:
|
|
|
|
```
|
|
# Part of file: roundcubemail/plugins/managesieve/config.inc.php
|
|
|
|
$rcmail_config['managesieve_port'] = 2000;
|
|
$rcmail_config['managesieve_host'] = "127.0.0.1";
|
|
$rcmail_config['managesieve_usetls'] = false;
|
|
$rcmail_config['managesieve_default'] = "/var/vmail/sieve/dovecot.sieve";
|
|
```
|
|
|
|
* Make sure this plugin is enabled/listed in roundcube main config file: `roundcubemail/config/main.inc.php`.
|
|
|
|
```
|
|
# Part of file: roundcubemail/config/main.inc.php
|
|
|
|
$rcmail_config['plugins'] = array("password", "managesieve",);
|
|
```
|
|
|
|
### Upgrade phpMyAdmin to 2.11.10
|
|
|
|
phpMyAdmin doesn't require additional config, you can simply download new version
|
|
and copy old config file into new version.
|
|
|
|
* Download new version and uncompress it:
|
|
```
|
|
# cd /root/
|
|
# wget https://dl.iredmail.org/yum/misc/phpMyAdmin-2.11.10-all-languages.tar.bz2
|
|
# tar xjf phpMyAdmin-2.11.10-all-languages.tar.bz2
|
|
```
|
|
|
|
* Copy it to apache server root directory, remove old symbol link and create a
|
|
new one, copy old config file into new version:
|
|
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# cp -rf /root/phpMyAdmin-2.11.10-all-languages /var/www/
|
|
# cd /var/www/
|
|
# rm -i phpmyadmin
|
|
# ln -s phpMyAdmin-2.11.10-all-languages phpmyadmin
|
|
# cp phpMyAdmin-OLD-VERSION/config.inc.php phpmyadmin/
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# cp -rf /root/phpMyAdmin-2.11.10-all-languages /usr/share/apache2/
|
|
# cd /usr/share/apache2/
|
|
# rm -i phpmyadmin
|
|
# ln -s phpMyAdmin-2.11.10-all-languages phpmyadmin
|
|
# cp phpMyAdmin-OLD-VERSION/config.inc.php phpmyadmin/
|
|
```
|
|
|
|
* It's recommended to restart apache web server:
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# /etc/init.d/httpd restart
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# /etc/init.d/apache2 restart
|
|
```
|
|
|
|
## OpenLDAP backend only
|
|
|
|
### Use newest schema file
|
|
|
|
NOTE: New LDAP schema provides several new attributes, but it's backwards
|
|
compatibility, it's __SAFE__ to replace the old one without additional operations.
|
|
|
|
To use the newest iRedMail ldap schem file, we have to:
|
|
* Download the newest iRedMail ldap schema file
|
|
* Copy old ldap schema file as a backup copy
|
|
* Replace the old one
|
|
* Restart OpenLDAP service.
|
|
|
|
Here we go:
|
|
|
|
* On RHEL/CentOS:
|
|
```
|
|
# cd /tmp
|
|
# wget http://iredmail.googlecode.com/hg/tags/0.6.0/samples/iredmail.schema
|
|
|
|
# cd /etc/openldap/schema/
|
|
# cp iredmail.schema iredmail.schema.bak
|
|
|
|
# mv -i /tmp/iredmail.schema /etc/openldap/schema/
|
|
# /etc/init.d/ldap restart
|
|
```
|
|
|
|
* On Debian/Ubuntu:
|
|
```
|
|
# cd /tmp
|
|
# wget http://iredmail.googlecode.com/hg/tags/0.6.0/samples/iredmail.schema
|
|
|
|
# cd /etc/ldap/schema/
|
|
# cp iredmail.schema iredmail.schema.bak
|
|
|
|
# mv -i /tmp/iredmail.schema /etc/ldap/schema/
|
|
# /etc/init.d/slapd restart
|
|
```
|
|
|
|
### Include Amavisd LDAP schema file in OpenLDAP
|
|
|
|
We're starting to provide better Amavisd integration in iRedMail, e.g.
|
|
per-user blacklist/whitelist, anti-spam and anti-virus settings.
|
|
|
|
Since Amavisd can read per-user settings which stored in LDAP, we have to
|
|
include Amavisd LDAP schema file in OpenLDAP.
|
|
|
|
NOTE: Amavisd LDAP schema file is installed in OpenLDAP schema directory during
|
|
installing Amavisd-new, so we don't need to copy/move it.
|
|
|
|
* On RHEL/CentOS, edit `/etc/openldap/slapd.conf` and append Amavisd schema
|
|
file before `iredmail.schema`:
|
|
|
|
```
|
|
# Part of file: /etc/openldap/slapd.conf
|
|
|
|
# Integrate Amavisd-new.
|
|
include /etc/openldap/schema/amavisd-new.schema
|
|
include /etc/openldap/schema/iredmail.schema
|
|
```
|
|
|
|
Restart OpenLDAP service to make it work:
|
|
```
|
|
# /etc/init.d/ldap restart
|
|
```
|
|
|
|
* On Debian/Ubuntu, edit `/etc/ldap/slapd.conf` and append Amavisd schema file before `iredmail.schema`:
|
|
|
|
```
|
|
# part of file: /etc/ldap/slapd.conf
|
|
|
|
# Integrate Amavisd-new.
|
|
include /etc/ldap/schema/amavis.schema
|
|
include /etc/ldap/schema/iredmail.schema
|
|
```
|
|
|
|
Restart OpenLDAP service to make it work:
|
|
```
|
|
# /etc/init.d/slapd restart
|
|
```
|
|
|
|
### Index missed attributes
|
|
|
|
We will search email address which stored in attribute `shadowAddress`, so make
|
|
sure you have `shadowAddress` indexed in OpenLDAP configure file like this:
|
|
|
|
```
|
|
# Part of file: slapd.conf
|
|
|
|
index shadowAddress eq,pres,sub
|
|
```
|
|
|
|
If `shadowAddress` already exists in `slapd.conf`, you don't need to do
|
|
additional operations. If you add them now, you have to initially index this
|
|
attribute manually now.
|
|
|
|
* Stop OpenLDAP service first.
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# /etc/init.d/ldap stop
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# /etc/init.d/slapd stop
|
|
```
|
|
|
|
* Execute 'slapindex' to index all attributes:
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# slapindex -f /etc/openldap/slapd.conf
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# slapindex -f /etc/ldap/slapd.conf
|
|
```
|
|
|
|
* Start OpenLDAP service now.
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# /etc/init.d/ldap start
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# /etc/init.d/slapd start
|
|
```
|
|
|
|
### Add missing LDAP attribute/value
|
|
|
|
iRedMail-0.6.0 requires some more values of attribute `enabledService` and `objectClass`:
|
|
|
|
* enabledService=sieve
|
|
* enabledService=sievesecured
|
|
* enabledService=internal
|
|
* objectClass=amavisAccount
|
|
|
|
Both `enabledService=sieve` and `enabledService=sievesecured` are used in
|
|
Dovecot-1.2.x, for builtin managesieve service. `enabledService=internal` is
|
|
used for shared IMAP folder. `objectClass=amavisAccount` is used for
|
|
Amavisd-new integration, for example, per-user anti-spam settings, anti-virus
|
|
control.
|
|
|
|
Steps:
|
|
|
|
* Download python script used to adding missing values.
|
|
```
|
|
# cd /root/
|
|
# wget http://iredmail.googlecode.com/hg/extra/update/updateLDAPValues_051_to_060.py
|
|
```
|
|
|
|
* Open `updateLDAPValues_051_to_060.py`, config below parameters in file head:
|
|
```
|
|
# Part of file: updateLDAPValues_051_to_060.py
|
|
|
|
uri = 'ldap://127.0.0.1:389'
|
|
basedn = 'o=domains,dc=iredmail,dc=org'
|
|
bind_dn = 'cn=vmailadmin,dc=iredmail,dc=org'
|
|
bind_pw = 'passwd'
|
|
```
|
|
|
|
You can find required LDAP credential in iRedAdmin config file or `iRedMail.tips`
|
|
file under your iRedMail installation directory. Using either
|
|
`cn=Manager,dc=xx,dc=xx` or `cn=vmailadmin,dc=xx,dc=xx` as bind dn is ok.
|
|
|
|
* Execute this script, it will add missing values for mail accounts:
|
|
```
|
|
# python updateLDAPValues_051_to_060.py
|
|
```
|
|
|
|
### Add `shadowAddress` support for mail alias
|
|
|
|
* Update postfix mysql lookup file: `/etc/postfix/ldap_virtual_alias_maps.cf`:
|
|
|
|
```
|
|
# Part of file: /etc/postfix/ldap_virtual_alias_maps.cf
|
|
|
|
# OLD SETTING
|
|
query_filter = (&(mail=%s)(accountStatus=active)(enabledService=mail)(enabledService=deliver)(|(objectClass=mailList)(objectClass=mailAlias)(&(objectClass=mailUser)(enabledService=forward))))
|
|
|
|
# NEW SETTING.
|
|
# - Added: shadowAddress=%s
|
|
# - Removed: objectClass=mailList. It's impossible to add shadow address support for mail list.
|
|
query_filter = (&(|(mail=%s)(shadowAddress=%s))(accountStatus=active)(enabledService=mail)(enabledService=deliver)(|(objectClass=mailAlias)(&(objectClass=mailUser)(enabledService=forward))))
|
|
```
|
|
|
|
Note: We add `shadowAddress` support for mail alias here, and remove
|
|
`shadowAddress` support for mail list. Because mail list doesn't support this
|
|
feature.
|
|
|
|
### Add catch-all account support
|
|
|
|
NOTE: This is required by iRedAdmin-Pro-1.2.0.
|
|
|
|
* Change your postfix setting in `/etc/postfix/main.cf`:
|
|
|
|
```
|
|
# Part of file: /etc/postfix/main.cf
|
|
|
|
virtual_alias_maps =
|
|
proxy:ldap:/etc/postfix/ldap_virtual_alias_maps.cf,
|
|
proxy:ldap:/etc/postfix/ldap_virtual_group_maps.cf,
|
|
proxy:ldap:/etc/postfix/ldap_sender_login_maps.cf, # <-- Add this line.
|
|
proxy:ldap:/etc/postfix/ldap_catch_all_maps.cf # <-- Add this line.
|
|
```
|
|
|
|
* File `/etc/postfix/ldap_sender_login_maps.cf` already exists by default, so
|
|
what you need to do is adding new file: `/etc/postfix/ldap_catch_all_maps.cf`.
|
|
|
|
```
|
|
# File: /etc/postfix/ldap_catch_all_maps.cf
|
|
|
|
#
|
|
# WARNING: Please REPLACE bind_dn, bind_pw, search_base below, you can find
|
|
# them in /etc/postfix/ldap_*.cf.
|
|
#
|
|
server_host = 127.0.0.1
|
|
server_port = 389
|
|
version = 3
|
|
bind = yes
|
|
start_tls = no
|
|
bind_dn = cn=vmail,dc=iredmail,dc=org
|
|
bind_pw = JnvF4UQheMdImdXYnRVEgKpsdCXJy3
|
|
search_base = domainName=%d,o=domains,dc=iredmail,dc=org
|
|
scope = sub
|
|
query_filter = (&(objectClass=mailUser)(accountStatus=active)(mail=@%d))
|
|
result_attribute= mailForwardingAddress
|
|
debuglevel = 0
|
|
```
|
|
|
|
* Restart postfix service to make it work.
|
|
```# /etc/init.d/postfix restart```
|
|
|
|
### Roundcube Webmail plugin: change password stored in OpenLDAP
|
|
|
|
Password plugin which officially shipped in Roundcubemail-0.3.1 requires php-pear and Net_LDAP2, so we have to:
|
|
* Generate a new config file and config necessary parameters.
|
|
* Force upgrade php-pear to support password plugin on RHEL/CentOS 5 (Not required on Debian/Ubuntu)
|
|
* Install php-mhash to provide hash algorithms such as MD5, SHA1, GOST, and many others. (Not required on Debian/Ubuntu)
|
|
* Install php pear package: Net_LDAP2.
|
|
* Restart Apache web service.
|
|
|
|
Steps:
|
|
|
|
* Generate a new config file:
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# cd /var/www/roundcubemail/plugins/password/
|
|
# cp config.inc.php.dist config.inc.php
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# cd /usr/share/apache2/roundcubemail/plugins/password/
|
|
# cp config.inc.php.dist config.inc.php
|
|
```
|
|
|
|
* Config it:
|
|
```
|
|
# Part of file: roundcubemail/plugins/password/config.inc.php
|
|
|
|
$rcmail_config['password_driver'] = "ldap";
|
|
$rcmail_config['password_confirm_current'] = true;
|
|
$rcmail_config['password_minimum_length'] = 6;
|
|
$rcmail_config['password_require_nonalpha'] = false;
|
|
|
|
$rcmail_config['password_ldap_host'] = "127.0.0.1";
|
|
$rcmail_config['password_ldap_port'] = "389";
|
|
$rcmail_config['password_ldap_starttls'] = false;
|
|
$rcmail_config['password_ldap_version'] = "3";
|
|
$rcmail_config['password_ldap_basedn'] = "o=domains,dc=iredmail,dc=org"; # REPLACE THIS BY YOUR OWN BASE DN
|
|
$rcmail_config['password_ldap_method'] = "user";
|
|
$rcmail_config['password_ldap_adminDN'] = "null";
|
|
$rcmail_config['password_ldap_adminPW'] = "null";
|
|
|
|
#
|
|
# WARNING: REPLACE BASE DN BY YOUR OWN ONE
|
|
#
|
|
$rcmail_config['password_ldap_userDN_mask'] = "mail=%login,ou=Users,domainName=%domain,o=domains,dc=iredmail,dc=org";
|
|
|
|
$rcmail_config['password_ldap_encodage'] = "ssha";
|
|
$rcmail_config['password_ldap_pwattr'] = "userPassword";
|
|
$rcmail_config['password_ldap_force_replace'] = false;
|
|
```
|
|
|
|
* Upgrade php-pear and install pear package: Net_LDAP2.
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# pear upgrade --force pear
|
|
# pear install Net_LDAP2
|
|
# yum install php-mhash # Please make sure you have iRedMail yum repository enabled.
|
|
# /etc/init.d/httpd restart # Restart Apache web service.
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# pear install Net_LDAP2
|
|
# /etc/init.d/apache2 restart # Restart Apache web service.
|
|
```
|
|
|
|
### Upgrade phpLDAPadmin to 1.2.0.5
|
|
|
|
phpLDAPadmin doesn't require additional config, you can simply download new
|
|
version and copy sample config file to make it work.
|
|
|
|
* Download new version and uncompress it:
|
|
```
|
|
# cd /root/
|
|
# wget https://dl.iredmail.org/yum/misc/phpldapadmin-1.2.0.5.tgz
|
|
# tar zxf phpldapadmin-1.2.0.5.tgz
|
|
```
|
|
|
|
* Copy it to apache server root directory, remove old symbol link and create
|
|
a new one, copy old config file into new version:
|
|
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# cp -rf /root/phpldapadmin-1.2.0.5 /var/www/
|
|
# cd /var/www/
|
|
# rm -i phpldapadmin
|
|
# ln -s phpldapadmin-1.2.0.5 phpldapadmin
|
|
# cd phpldapadmin/config/
|
|
# cp config.php.example config.php
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# cp -rf /root/phpldapadmin-1.2.0.5 /usr/share/apache2/
|
|
# cd /usr/share/apache2/
|
|
# rm -i phpldapadmin
|
|
# ln -s phpldapadmin-1.2.0.5 phpldapadmin
|
|
# cd phpldapadmin/config/
|
|
# cp config.php.example config.php
|
|
```
|
|
|
|
* Edit config file to hide template warning messages: `phpldapadmin/config/config.php`.
|
|
```
|
|
# Part of file: phpldapadmin/config/config.php
|
|
|
|
#
|
|
# Search 'hide_template_warning' in config file, uncomment below line, and change value to 'true'.
|
|
#
|
|
$config->custom->appearance['hide_template_warning'] = true;
|
|
```
|
|
|
|
* It's recommended to restart apache web server:
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# /etc/init.d/httpd restart
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# /etc/init.d/apache2 restart
|
|
```
|
|
|
|
## MySQL backend only
|
|
|
|
### Add missing SQL columns in `vmail.mailbox`
|
|
|
|
iRedMail-0.6.0 adds a new SQL column in `vmail.mailbox` table: `enableinternal`.
|
|
This is used in Dovecot, e.g. shared IMAP folders, etc.
|
|
|
|
```
|
|
$ mysql -uroot -p
|
|
mysql> USE vmail;
|
|
mysql> ALTER TABLE mailbox ADD COLUMN enableinternal TINYINT(1) NOT NULL DEFAULT '1';
|
|
mysql> quit;
|
|
```
|
|
|
|
### Domain alias support
|
|
|
|
Note: You can use PostfixAdmin-2.3 to manage domain alias. iRedAdmin-Pro for
|
|
MySQL backend will support this feature later.
|
|
|
|
* Save below lines in temporary file: `/tmp/upgrade_iredmail.sql`:
|
|
```
|
|
CREATE TABLE IF NOT EXISTS `alias_domain` (
|
|
`alias_domain` varchar(255) NOT NULL,
|
|
`target_domain` varchar(255) NOT NULL,
|
|
`created` datetime NOT NULL default '0000-00-00 00:00:00',
|
|
`modified` datetime NOT NULL default '0000-00-00 00:00:00',
|
|
`active` tinyint(1) NOT NULL default '1',
|
|
PRIMARY KEY (`alias_domain`),
|
|
KEY `active` (`active`),
|
|
KEY `target_domain` (`target_domain`)
|
|
) ENGINE=MyISAM;
|
|
```
|
|
|
|
* Import missing MySQL table in `vmail` database with above temporary file:
|
|
```
|
|
# mysql -uroot -p
|
|
mysql> USE vmail;
|
|
mysql> SOURCE /tmp/upgrade_iredmail.sql;
|
|
```
|
|
|
|
* Update postfix config in `/etc/postfix/main.cf`.
|
|
|
|
```
|
|
# Part of file: /etc/postfix/main.cf
|
|
|
|
# ---- OLD SETTING ----
|
|
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf
|
|
|
|
# ---- NEW SETTING ----
|
|
virtual_alias_maps =
|
|
proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf,
|
|
proxy:mysql:/etc/postfix/mysql_domain_alias_maps.cf
|
|
```
|
|
|
|
* Add new file: `/etc/postfix/mysql_domain_alias_maps.cf`.
|
|
```
|
|
# File: /etc/postfix/mysql_domain_alias_maps.cf
|
|
|
|
#
|
|
# WARNING: REPLACE password below. You can find it in /etc/postfix/mysql_*.cf.
|
|
#
|
|
user = vmail
|
|
password = YOUR_MYSQL_BIND_PW
|
|
hosts = localhost
|
|
port = 3306
|
|
dbname = vmail
|
|
query = SELECT goto FROM alias,alias_domain WHERE alias_domain.alias_domain = '%d' and alias.address = CONCAT('%u', '@', alias_domain.target_domain) AND alias.active = 1 AND alias_domain.active='1'
|
|
```
|
|
|
|
### Roundcube Webmail plugin: change password
|
|
|
|
* Generate a new config file:
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# cd /var/www/roundcubemail/plugins/password/
|
|
# cp config.inc.php.dist config.inc.php
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# cd /usr/share/apache2/roundcubemail/plugins/password/
|
|
# cp config.inc.php.dist config.inc.php
|
|
```
|
|
|
|
* Config it:
|
|
|
|
```
|
|
# Part of file: roundcubemail/plugins/password/config.inc.php
|
|
|
|
$rcmail_config['password_driver'] = "sql";
|
|
$rcmail_config['password_confirm_current'] = true;
|
|
$rcmail_config['password_minimum_length'] = 6;
|
|
$rcmail_config['password_require_nonalpha'] = false;
|
|
|
|
$rcmail_config['password_db_dsn'] = 'mysqli://roundcube:REPLACE_YOUR_PASSWORD_HERE@localhost/vmail';
|
|
$rcmail_config['password_query'] = 'UPDATE vmail.mailbox SET password=%c,modified=NOW() WHERE username=%u LIMIT 1';
|
|
$rcmail_config['password_hash_algorithm'] = 'md5crypt';
|
|
$rcmail_config['password_hash_base64'] = false;
|
|
```
|
|
|
|
### Upgrade PostfixAdmin to 2.3
|
|
|
|
To upgrade PostfixAdmin to 2.3, we should:
|
|
|
|
* Download and uncompress new version.
|
|
* Copy new version to apache server root directory.
|
|
* Copy config file from old version.
|
|
* Add new column in MySQL database.
|
|
* Restart apache web server. (Optional, but is recommended.)
|
|
|
|
Steps:
|
|
|
|
* Download and uncompress new version:
|
|
```
|
|
# cd /root/
|
|
# wget https://dl.iredmail.org/yum/misc/postfixadmin_2.3.tar.gz
|
|
# tar zxf postfixadmin_2.3.tar.gz
|
|
```
|
|
|
|
* Copy new version to apache server root directory, create new symbol link and copy old config file:
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# cp -rf /root/postfixadmin-2.3 /var/www/
|
|
# cd /var/www/
|
|
# cp postfixadmin/config.local.php postfixadmin-2.3/
|
|
# rm -i postfixadmin
|
|
# ln -s postfixadmin-2.3 postfixadmin
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# cp -rf /root/postfixadmin-2.3 /usr/share/apache2/
|
|
# cd /usr/share/apache2/
|
|
# cp postfixadmin/config.local.php postfixadmin-2.3/
|
|
# rm -i postfixadmin
|
|
# ln -s postfixadmin-2.3 postfixadmin
|
|
```
|
|
|
|
* Add one more parameter in `postfixadmin/config.local.php` to enable domain alias management:
|
|
|
|
```
|
|
# Part of file: postfixadmin/config.local.php
|
|
|
|
$CONF['alias_domain'] = 'YES';
|
|
```
|
|
|
|
* Add new column in MySQL database.
|
|
```
|
|
# mysql -uroot -p
|
|
mysql> USE vmail;
|
|
mysql> ALTER TABLE mailbox ADD local_part VARCHAR(255) NOT NULL DEFAULT '';
|
|
mysql> UPDATE mailbox SET local_part = substring_index(username, '@', 1);
|
|
```
|
|
|
|
* Restart apache web server.
|
|
```
|
|
#
|
|
# ---- On RHEL/CentOS ----
|
|
#
|
|
# /etc/init.d/httpd restart
|
|
|
|
#
|
|
# ---- On Debian/Ubuntu ----
|
|
#
|
|
# /etc/init.d/apache2 restart
|
|
```
|