postconf not displaying all options


postconf not displaying all options
\ Alain Spineux (23 Jul 2007)
. \ (Wietse Venema) (23 Jul 2007)
. \ Magnus Bäck (23 Jul 2007)
. . \ Victor Duchovni (23 Jul 2007)
. . . \ Alain Spineux (23 Jul 2007)

3 msg	empty_address_recipient not mapped by virtual o...
5 msg	stop smtp from anyone unless sasl auth?
2 msg	'piped' aliases & DSNs
12 msg	Strange From: in headers
5 msg	Mail - Access Denied
4 msg	qpsmtpd support service for postfix
39 msg	pix workaround broken?
2 msg	X-Original-To after bcc contains wrong address
8 msg	/usr/lib/sendmail delivery status/message id's ...
23 msg	Recommended Filesystems?
8 msg	Mail going to backup server instead main server
3 msg	outgoing rate control
5 msg	mail forwarding loop: how do I prevent this?
5 msg	Server relaying existing virtual mailbox
1 msg	how can I rewrite the Mail From
3 msg	Constant connections from user unknown sending ...
2 msg	sporadic deferrals
8 msg	transport_maps: different behavior if discard o...
4 msg	Address verification questions

Subject:	postconf not displaying all options
Group:	Postfix-users
From:	Alain Spineux
Date:	23 Jul 2007

My main.cf contains some "virtual" definitions

# grep virtual /kolab/etc/postfix/main.cf
virtual_maps = hash:/kolab/etc/postfix/virtual,
ldap:/kolab/etc/postfix/ldapdistlist.cf,
ldap:/kolab/etc/postfix/ldapvirtual.cf
#virtual_mailbox_maps = $virtual_maps
local_recipient_maps = $virtual_maps, $alias_maps

I restart postfix

[root@fc6-eg trunk]# /kolab/sbin/postfix -c /kolab/etc/postfix stop
postfix/postfix-script: stopping the Postfix mail system
[root@fc6-eg trunk]# /kolab/sbin/postfix -c /kolab/etc/postfix start
postfix/postfix-script: warning: not owned by root:
/kolab/etc/postfix/ldapdistlist.cf
postfix/postfix-script: warning: not owned by root:
/kolab/etc/postfix/ldaptransport.cf
postfix/postfix-script: warning: not owned by root:
/kolab/etc/postfix/ldapvirtual.cf
postfix/postfix-script: warning: not owned by root: /kolab/etc/postfix/main.cf
postfix/postfix-script: warning: not owned by root: /kolab/etc/postfix/master.cf
postfix/postfix-script: starting the Postfix mail system

I check postconf output

# /kolab/sbin/postconf -c /kolab/etc/postfix -n | grep virtual
local_recipient_maps = $virtual_maps, $alias_maps

I check the "full" output, this time using the .cf file

# /kolab/sbin/postconf -c /kolab/etc/postfix | grep ldapvirtual.cf
NOTHING

I recheck the main.cf, the same way

# grep ldapvirtual.cf /kolab/etc/postfix/main.cf
virtual_maps = hash:/kolab/etc/postfix/virtual,
ldap:/kolab/etc/postfix/ldapdistlist.cf,
ldap:/kolab/etc/postfix/ldapvirtual.cf

Whereas the virtual mapping is working :

# postmap -q alain.spineux ldap:/kolab/etc/postfix/ldapvirtual.cf
asx
# echo hello | mail -s Hello alain.spineux
# tail -n 10 /kolab/var/postfix/log/postfix.log
Jul 23 21:39:49 fc6-eg.asxnet.loc <info> postfix/smtpd[25376]: connect
from localhost.localdomain[127.0.0.1]
Jul 23 21:39:49 fc6-eg.asxnet.loc <info> postfix/smtpd[25376]:
7841E7FBD: client=localhost.localdomain[127.0.0.1]
Jul 23 21:39:49 fc6-eg.asxnet.loc <info> postfix/cleanup[25383]:
7841E7FBD: message-id=<200707231939.l6NJdnX3025370>
Jul 23 21:39:49 fc6-eg.asxnet.loc <info> postfix/qmgr[25312]:
7841E7FBD: from=<postmaster>, size=965, nrcpt=1 (queue
active)
Jul 23 21:39:49 fc6-eg.asxnet.loc <info> postfix/smtpd[25376]:
disconnect from localhost.localdomain[127.0.0.1]
Jul 23 21:39:49 fc6-eg.asxnet.loc <info> postfix/lmtp[25384]:
7841E7FBD: to=<asx>,
relay=/kolab/var/kolab/lmtp[/kolab/var/kolab/lmtp], delay=0,
status=sent (250 2.1.5 Ok)
Jul 23 21:39:49 fc6-eg.asxnet.loc <info> postfix/qmgr[25312]: 7841E7FBD: removed

Here are more info

main.cf, master.cf, postconf -n

======================postconf -n ==============================

# /kolab/sbin/postconf -c /kolab/etc/postfix -n
alias_database = hash:/kolab/etc/postfix/aliases
alias_maps = hash:/kolab/etc/postfix/aliases
alternate_config_directories = /kolab/etc/postfix_front
broken_sasl_auth_clients = yes
canonical_maps = hash:/kolab/etc/postfix/canonical
command_directory = /kolab/sbin
config_directory = /kolab/etc/postfix
content_filter =
daemon_directory = /kolab/libexec/postfix
default_privs = kolab-n
empty_address_recipient = alain.spineux
enable_original_recipient = no
local_recipient_maps = $virtual_maps, $alias_maps
local_transport = lmtp:unix:/kolab/var/kolab/lmtp
mail_owner = kolab
masquerade_classes = envelope_sender, envelope_recipient,
header_sender, header_recipient
masquerade_domains = $mydomain
message_size_limit = 20971520
mydestination = asxnet.loc mydomain.loc alpha.loc gamma.loc beta.loc
mydomain = asxnet.loc
myhostname = fc6-eg.asxnet.loc
mynetworks =
myorigin = $mydomain
queue_directory = /kolab/var/postfix
recipient_delimiter = +
relay_domains =
relocated_maps = hash:/kolab/etc/postfix/relocated
setgid_group = kolab-r
smtpd_recipient_restrictions =
permit_mynetworks,permit_sasl_authenticated,
reject_unauth_destination, reject_unlisted_recipient,
check_policy_service unix:private/kolabpolicy
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = permit_mynetworks, check_policy_service
unix:private/kolabpolicy
smtpd_starttls_timeout = 300s
smtpd_timeout = 300s
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /kolab/etc/kolab/cert.pem
smtpd_tls_key_file = /kolab/etc/kolab/key.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = no
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
transport_maps = hash:/kolab/etc/postfix/transport,
ldap:/kolab/etc/postfix/ldaptransport.cf

===================== main.cf ================================

# cat /kolab/etc/postfix/main.cf
# (c) 2004 Steffen Hansen <steffen>
(Klaralvdalens Datakonsult AB)
# (c) 2003 Tassilo Erlewein <tassilo.erlewein>
# (c) 2003 Martin Konold <martin.konold >
# (c) 2003 Achim Frank <achim.frank>
# This program is Free Software under the GNU General Public License (>=v2).
# Read the file COPYING that comes with this packages for details.

# this file is automatically written by the Kolab config backend
# manual additions are lost unless made to the template in the Kolab
config directory

# postfix default is 10 240 000 Byte = 10.24 Megabyte,
# we use 20 Mebibyte = 20*2^20 Byte
message_size_limit = 20971520

# paths
command_directory = /kolab/sbin
daemon_directory = /kolab/libexec/postfix
queue_directory = /kolab/var/postfix

# users
mail_owner= kolab
setgid_group= kolab-r
default_privs= kolab-n

# local host
myhostname = fc6-eg.asxnet.loc
mydomain = asxnet.loc
myorigin = $mydomain

#
masquerade_domains = $mydomain
# Kolab Server does _not_ want to forward to local machines by default,
# so we can add "envelope_recipient" to masquerade_classes:
masquerade_classes = envelope_sender, envelope_recipient,
header_sender, header_recipient

# smtp daemon
#smtpd_banner = $myhostname ESMTP $mail_name
#inet_interfaces = 127.0.0.1

# ASX mynetwoks MUST BE EMPTY BY DESIGN TO REJECT ANY EXTERNAL DOMAIN !!!
# because postfix_front is 127.0.0.1
# relaying
#mynetworks = 127.0.0.0/8
mynetworks =
mydestination = asxnet.loc mydomain.loc alpha.loc gamma.loc beta.loc
relay_domains =
#smtpd_recipient_restrictions = permit_mynetworks,
# check_client_access
hash:/kolab/etc/postfix/access,
# check_relay_domains

recipient_delimiter = +

# maps
canonical_maps = hash:/kolab/etc/postfix/canonical
virtual_maps = hash:/kolab/etc/postfix/virtual,
ldap:/kolab/etc/postfix/ldapdistlist.cf,
ldap:/kolab/etc/postfix/ldapvirtual.cf
relocated_maps = hash:/kolab/etc/postfix/relocated
transport_maps = hash:/kolab/etc/postfix/transport,
ldap:/kolab/etc/postfix/ldaptransport.cf
alias_maps = hash:/kolab/etc/postfix/aliases
alias_database = hash:/kolab/etc/postfix/aliases
#virtual_mailbox_maps = $virtual_maps
local_recipient_maps = $virtual_maps, $alias_maps

## only use local_transport or a higher recipent_limit if issue825 is fixed
# local delivery, not using postfix local(8)
#local_transport = kolabmailboxfilter
# alternatively with local(8), something like

# ASX orig is mailbox_transport = kolabmailboxfilter
# - kolabmailboxfilter inpect emails for icalendar information and
# update scheduling accordingly
# - mailbox_transport take care of "local" rules like .forward and
# delivers to recipients one by one and then duplicates email in the
# imap storage
# - local_transport deliver to all recipients at once
# * my solution is local_transport = lmtp:unix:/kolab/var/kolab/lmtp
#
# mailbox_transport = lmtp:unix:/kolab/var/kolab/lmtp
# use local_transport to avoid duplication of delivery
# issue825 require the use of mailbox_transport because of bug in
kolabmailboxfilter
local_transport = lmtp:unix:/kolab/var/kolab/lmtp

# local_destination_recipient_limit = 20

#TLS settings
smtpd_use_tls = yes
smtpd_tls_auth_only = yes
smtpd_starttls_timeout = 300s
smtpd_timeout = 300s
#smtpd_tls_CAfile = /kolab/etc/kolab/server.pem
#smtpd_tls_CApath =
#smtpd_tls_ask_ccert = no
#smtpd_tls_ccert_verifydepth = 5
smtpd_tls_cert_file = /kolab/etc/kolab/cert.pem
#smtpd_tls_cipherlist =
#smtpd_tls_dcert_file =
#smtpd_tls_dh1024_param_file =
#smtpd_tls_dh512_param_file =
#smtpd_tls_dkey_file = $smtpd_tls_dcert_file
#smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_tls_key_file = /kolab/etc/kolab/key.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = no
#smtpd_tls_req_ccert = no
#smtpd_tls_session_cache_database =
smtpd_tls_session_cache_timeout = 3600s
#smtpd_tls_wrappermode = no

#tls_random_bytes = 32
tls_random_source = dev:/dev/urandom
#tls_daemon_random_bytes = 32
#tls_daemon_random_source =
#tls_random_exchange_name = ${config_directory}/prng_exch
#tls_random_prng_update_period = 60s
#tls_random_reseed_period = 3600s

#smtp_starttls_timeout = 300s
#smtp_tls_CAfile =
#smtp_tls_CApath =
#smtp_tls_cert_file =
#smtp_tls_cipherlist =
#smtp_tls_dcert_file =
#smtp_tls_dkey_file = $smtp_tls_dcert_file
#smtp_tls_enforce_peername = yes
#smtp_tls_key_file = $smtp_tls_cert_file
#smtp_tls_loglevel = 0
#smtp_tls_note_starttls_offer = no
#smtp_tls_per_site =
#smtp_tls_scert_verifydepth = 5
#smtp_tls_session_cache_database =
#smtp_tls_session_cache_timeout = 3600s

# authentication via sasl

## Kolab Policy Server
smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,
reject_unauth_destination, reject_unlisted_recipient,
check_policy_service unix:private/kolabpolicy
smtpd_sender_restrictions = permit_mynetworks, check_policy_service
unix:private/kolabpolicy
kolabpolicy_time_limit = 3600
kolabpolicy_max_idle = 20

#smtpd_restriction_classes =
smtpd_sasl_auth_enable = yes

# We want to allow for uids without any realm
#smtpd_sasl_local_domain = $myhostname
smtpd_sasl_local_domain =

smtpd_sasl_security_options = noanonymous

# Support broken clients like Microsoft Outlook Express 4.x which
expect AUTH=LOGIN instead of AUTH LOGIN
broken_sasl_auth_clients = yes

# ASX orig content_filter=kolabfilter
# kolabfilter make some checking about the sender
# Then kolabfilter send back to amavis (if enabled)
# but now, need to send directly to amavis if enabled
# because I want to bypass kolabfilter

content_filter=

# ASX enable_original_recipient = no
# when sending to the same aliasES of a mailbox (i.e. the catchall)
# avoid to deliver multiple copy of the same email,
# this was useless when kolabfilter was enable (or maybe when AV is enable)
# but dont slowdown anything, then always enable it
enable_original_recipient = no

# ASX on the old way, I was making a delivery for each recipient
# in the catchall, then the X-Original-to was giving me the name
of the recipient
# now I use a emailgency-id database, I dont need anymore of the
*recipient_limit=1
#kolabfilter_destination_recipient_limit = 1
#lmtp_destination_recipient_limit = 1
#cyrus_destination_recipient_limit = 1

alternate_config_directories = /kolab/etc/postfix_front

empty_address_recipient=alain.spineux

================================== master.cf
====================================

# cat /kolab/etc/postfix/master.cf
# (c) 2004 Steffen Hansen <steffen>
(Klaralvdalens Datakonsult AB)
# (c) 2003 Tassilo Erlewein < tassilo.erlewein>
# (c) 2003 Martin Konold <martin.konold>
# (c) 2003 Achim Frank < achim.frank>
# This program is Free Software under the GNU General Public License (>=v2).
# Read the file COPYING that comes with this packages for details.

# this file is automatically written by the Kolab config backend
# manual additions are lost unless made to the template in the Kolab
config directory

# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
# nobody from this instance listening on port 25 nor 465
127.0.0.1:10090 inet n - n - - smtpd
-o smtpd_authorized_xforward_hosts=127.0.0.0/8
#628 inet n - n - - qmqpd
pickup fifo n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr fifo n - n 300 1 qmgr
tlsmgr unix - - n 1000? 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
smtp unix - - n - - smtp
relay unix - - n - - smtp -o fallback_relay=
showq unix n - n - - showq
error unix - - n - - error
local unix - n n - - local
#virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
scache unix - - n - 1 scache
#cyrus unix - n n - - pipe
user=cyrus argv=/kolab/bin/cyrdeliver -e -r ${sender} -m ${extension}
${user}
# ASX
#cyrus unix - n n - - pipe
flags=Onhqu user=kolab-r argv=/kolab/bin/cyrdeliver -e -r ${sender} -m
${recipient} ${user}

#uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=/kolab/bin/uux -r -n -z -a$sender -
$nexthop!rmail ($recipient)
#ifmail unix - n n - - pipe flags=F
user=ftn argv=/kolab/bin/ifmail -r $nexthop ($recipient)
#bsmtp unix - n n - - pipe flags=Fq.
user=foo argv=/kolab/bin/bsmtp -f $sender $nexthop $recipient
#465 inet n - n - - smtpd -o
smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
post-cleanup unix n - n - 0 cleanup -o virtual_maps=
smtp-amavis unix - - n - 2 smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes
-o disable_dns_lookups=yes
# SMTP interface for injecting mail back into postfix
# from kolabfilter
127.0.0.1:10025 inet n - n - - smtpd
-o content_filter=
-o cleanup_service_name=post-cleanup
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8
-o smtpd_authorized_xforward_hosts= 127.0.0.0/8
-o strict_rfc821_envelopes=yes
-o smtpd_error_sleep_time=0
-o smtpd_soft_error_limit=1001
-o smtpd_hard_error_limit=1000
# SMTP interface for injecting mail back into postfix
# from amavis
127.0.0.1:10026 inet n - n - - smtpd
-o content_filter=
-o cleanup_service_name=post-cleanup
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks= 127.0.0.0/8
-o strict_rfc821_envelopes=yes
-o smtpd_error_sleep_time=0
-o smtpd_soft_error_limit=1001
-o smtpd_hard_error_limit=1000
kolabpolicy unix - n n - - spawn
user=kolab-n argv=/kolab/etc/kolab/kolab_smtpdpolicy

kolabfilter unix - n n - - pipe
user=kolab-n flags=n argv=/kolab/bin/php
-c /kolab/etc/apache/php.ini
-f /kolab/etc/resmgr/kolabfilter.php
--
-h fc6-eg.asxnet.loc
-s ${sender}
-r ${recipient}
-c ${client_address}
-u ${sasl_username}

kolabmailboxfilter unix - n n - -
pipe user=kolab-n flags=n argv=/kolab/bin/php
-c /kolab/etc/apache/php.ini
-f /kolab/etc/resmgr/kolabmailboxfilter.php
--
-h fc6-eg.asxnet.loc
-s ${sender}
-r ${recipient}
-c ${client_address}

--
Alain Spineux
aspineux gmail com
May the sources be with you

--
--
Alain Spineux
aspineux gmail com
May the sources be with you