Re: opinions: postfix + virtual domains + LDAP + highload

1 msg	VDA high CPU load
20 msg	Spamhaus

opinions: postfix + virtual domains + LDAP + hi...
\ Daniel (23 Nov 2007)
. \ Listaccount (23 Nov 2007)
. \ mouss (23 Nov 2007)
. \ Daniel (23 Nov 2007)
. . \ mouss (23 Nov 2007)

1 msg	Weader, Jeremy is out of the office.
4 msg	Sending mails to web.de often gets deferred rec...
6 msg	Masquerade domain, but only to certain recipients
1 msg	Bounce error edit
4 msg	how to delete specific sender messages from def...
3 msg	SASL and TLS Question
8 msg	Unique to securehostedemail.com, or postfix ove...
4 msg	Empty Sender - backscatter
6 msg	Retry notification
5 msg	Customized relay / transport
2 msg	Redirect all e-mails from a specific IP address
2 msg	Relaying question
2 msg	PATCH (well kind of) (was: bounces and sender_d...
3 msg	dns names in mynetworks
8 msg	Lan and Wan
4 msg	Different nexthop depending on LDAP result
35 msg	Another change to smtp_sasl_auth.

Subject:	Re: opinions: postfix + virtual domains + LDAP + highload
Group:	Postfix-users
From:	mouss
Date:	23 Nov 2007

Daniel wrote:
> Thanks for mouss and listaccount for the anwsers!
>

Please do not top post: put your repies after the text your reply to.
and when in doubt, put all you text at the end of the message.

> I need virtual domains, i.e, I can have john@dom1 and john@dom2 an they are
> diferent peoples.
> I willn't use mysql or LDAP for now.
> My main doubt is about login/passwords store and handle: I can treat it in
> local db-files (... hash:/dir/file)? They will have passwd and shadow
> format? What postfix command I can use to create users and passwords.
>

postfix doesn't access passwords. if you use sasl authentication, then
you'll need to check the docs for the sasl implementation. postfix
supports dovecot-sasl and cyrus-sasl. These are configured differently.

> The bellow entrys are from a mysql example I find on postfix site.
> Could someone map this to db-files and show how I handle user/password
> for 2
> domains.
>
> virtual_mailbox_domains =
> mysql:/usr/local/etc/postfix/mysql_virtual_domains_maps.cf

virtual_mailbox_domains = hash:/etc/postfix/virtual_mailbox_domains

and in the file put:

domain1.example blahblah
domain2.example blahblah
(the right hand side, "blahblah" here, is not used, but must be present).

> virtual_mailbox_base = /usr/local/virtual
> virtual_mailbox_maps =
> mysql:/usr/local/etc/postfix/mysql_virtual_mailbox_maps.cf

virtual_mailbox_domains = hash:/etc/postfix/virtual_mailbox_maps

and in the file put something like:

user1 domain1.example/user1/mail
...

if you deliver to maildir, you must append a slash ('/') at the end of
the mailbox name.

> virtual_alias_maps = mysql:/usr/local/etc/postfix/virtual_alias_maps.cf

virtual_alias_maps = hash:/etc/postfix/virtual_alias

and in the file, put things like

foo user
bar user1, user2

Note that virtual aliases apply to _all_ mail (for any domain, even if
it's gmail.com...)

> virtual_transport = virtual

This is the default, so remove it.

> virtual_gid_maps = static:1001
> virtual_mailbox_limit = 51200000

only set parameters if you need them. otherwise, stick with the defaults.

> virtual_minimum_uid = 1001
> virtual_uid_maps = static:1001
>
> PS:
> I'm reading about virtual domains and your anwsers help a lot to gain time
> and look for rigth direction!
>

there are two different things:

- virtual mailbox domains. These are like local domains except that
mailboxes do not correspond to unix accounts

- virtual alias domains. mail to these is redirected to _another_
domain. In short, there is no mailbox for such domains.

virtual_alias_maps are used to redirect mail for an address to other
addresses. They apply to all mail, without regard to the domain class.