Package: postfix
Version: 2.3.4-1
Severity: wishlist

Hi,

Postfix's mysql support is good, but it is lacking some key elements,
namely SSL support, default-character-set (yay japanese) and
connection timeout settings. These are all supported in the mysql
libraries that postfix-mysql is built with, but there is no support
for setting these configuration values.

Fortunately there is a real simple way to add this support by adding
the ability for postfix to make a call to mysql_options() which will
read the /etc/mysql/my.cnf file and use the values specified there.
Its an amazingly simple solution which adds some incredibly useful
enhancements to the postfix mysql support. The patch is very simple.

The referenced patch[1] adds this functionality, as well as the ability
to specify a different config file than /etc/mysql/my.cnf. For
example, in main.cf you might have:

smtpd_client_restrictions = mysql: /etc/postfix/client_access.mysql 

in client_access.mysql:

default_group = postfix
hosts         = host
query         = SELECT dest FROM aliases WHERE source = '%s'

The "default_group" in that file allows us to specify options for
postfix in my.cnf.

/etc/mysql/my.cnf:
    
[postfix] 
default-character-set = ujis 
connect-timeout       = 15 
user                  = username 
password              = password_for_username 
database              = dbname 
ssl-ca                = /etc/certs/roots/cacert-root.pem
ssl-cert              = /etc/certs/cert.pem
ssl-key               = /etc/certs/key.pem

You'll note that you can specify the user, password here (instead
of in the postfix map file),  you can set a connect-timeout, a default
character set, and by specifying the SSL certs and keys the mysql
connections will be encrypted. 

Thats some good simple magic.

This patch comes from [EMAIL PROTECTED] (I unfortunately do not have this
person's name).

Micah

1.
http://www.tmtm.org/postfix/patch/postfix-2.2.3-mysql_default_file-2.patch

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-2-vserver-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages postfix depends on:
ii  adduser                   3.99           Add and remove users and groups
ii  debconf [debconf-2.0]     1.5.9          Debian configuration management sy
ii  dpkg                      1.13.24        package maintenance system for Deb
ii  libc6                     2.3.6.ds1-8    GNU C Library: Shared libraries
ii  libdb4.3                  4.3.29-6       Berkeley v4.3 Database Libraries [
ii  libsasl2                  2.1.22.dfsg1-4 Authentication abstraction library
ii  libssl0.9.8               0.9.8c-3       SSL shared libraries
ii  lsb-base                  3.1-22         Linux Standard Base 3.1 init scrip
ii  netbase                   4.27           Basic TCP/IP networking system
ii  ssl-cert                  1.0.13         Simple debconf wrapper for openssl

Versions of packages postfix recommends:
ii  emacs-snapshot-n 1:20061123-1            The GNU Emacs editor (without X su
ii  icedove [mail-re 1.5.0.8-2               free/unbranded thunderbird mail cl
ii  jed [mail-reader 0.99.18-6               editor for programmers (textmode v
ii  mailx [mail-read 1:8.1.2-0.20050715cvs-1 A simple mail user agent
ii  mutt [mail-reade 1.5.13-1                text-based mailreader supporting M

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to