Virtual Domains and full email login for Open-Xchange howto

[sevet]

Hi all, just wanted to post how I did this and get your tip on why it is a good or bad way of doing things since i'm not (yet?) an expert in ldap, postfix or cyrus

The original Open-Xchange thread was a big monster thats why I opened a new one, is there a way to search on a specific thread to the correct page?

Following on the installation from the excellent gentoo ox install guide:
(which was used to make a working OX almost without any problems)

Here's the guide:
edit /etc/imapd.conf

virtdomains: on
defaultdomain: localhost.domain.com

virtdomains: I think this is not mandatory
defaultdomain: not mandatory and make sure this is NOT one of the virtual domain.

Postfix config:
edit /etc/postfix/master.cf

#changes should replace original.
old-cyrus unix - n n - - pipe
flags= user=cyrus argv=/usr/lib/cyrus/deliver -r ${sender} -m ${extension} ${recipient}
cyrus unix - n n - - pipe
user=cyrus argv=/usr/lib/cyrus/deliver -r ${sender} -m ${extension} ${recipient}


ediit /etc/postfix/main.cf

mydomain = localhost.mydomain.com
mydestination = $myhostname, $mydomain

mailbox_transport = cyrus
virtual_transport = cyrus

virtual_mailbox_domains = virtual1.com, virtual2.com
virtual_mailbox_maps = hash:/etc/postfix/virtual

Just make sure mydestinations do not include any of the virtual domains, I make all my domains virtual even my main one, and i think that with my solution there might be a problem using a local domain but i haven't tested it, any way, Its better to have many virtual then one local domain.

Now we need to add virtual users (which we already made with the adduser_ox tool):
(there must be a way to do this with ldap already inserted info, please let me know how.)

edit /etc/postfix/virtual
# same users as in the ldap so the postfix will know about them

user1@virtual1.com None
user2@virtual1.com None
user1@virtual2.com None
user2@virtual2.com None

# there must be a second field, or it won't work, originally it was the mapped address or user.

for every change made to /etc/postfix/virtual you must run:

postmap /etc/postfix/virtual[/b]
(must be a way to do the virtual maps with ldap, let me know)

You now add a user to OX where the username is his full email address, and that also is how your users will need to login to ox with full email as the username (only add a user after modifying the adduser_ox):

/usr/local/open-xchange/sbin/adduser_ox --username="user1@virtual1.com" --passwd="password" --name="Your" --sname="Name" --maildomain="virtual1.com" --ox_timezone="ISR"


Now we need to make sure adduser_ox won't put our domain to the email address in the ldap and it will look like user1@virtual1.com@virtual1.com

mark and put the following:
edit /usr/local/open-xchange/sbin/adduser_ox

#echo "mail: $USERNAME@$MAILDOMAIN" >> $TMPDIF
echo "mail: $USERNAME" >> $TMPDIF

Need to change the saslauthd to try authenticate full email
(this might break the local domain support, but i didn' try yet)

edit /etc/conf.d/saslauthd

# add the "-r" to options
SASLAUTHD_OPTS="-a ${SASLAUTH_MECH} -r"

The -r option tells saslauthd to send the realm (domain) with the user (after it broke the username to user/domain)

adding a cyrus user is the same only add the @domain at the end (in cyrus admin):

cm user.user1@virtual1.com

Well thats it, I hope I didn't forget anything, please give me your thought on this setup, like if it might break ox functionality in a place I didn't think of, and of course if you succeded in following this simple guide or improved it (ldap for the virtual search...)

P.S. I also changed the installdir of the htdocs in the .configure and made the vhost in apache so ox won't be the only site on my server, but that was very simple (just add a regular virtual host section in apache config, nothing to do on ox or tomcat...

[facundooz]

Hi Sevet,
Have you got success with this modifications? I'm very interested in getting multiple domains in my Gentoo's Open-xchange, but I´ve read that is imposible. Have you do it? Have you done it better?
Thank you very much!!

Facundo
_________________
Facundo

[ronbasset]

Hi Facundo,

I can help you with that, I have sent you a PM.

Cheers

Ron Basset