Integration/PureFTPd.iRedMail.with.OpenLDAP/Debian - Revision history

Shake.chen: /* Troubleshooting */

Shake.chen — Mon, 29 Mar 2010 03:51:38 GMT

Troubleshooting

← Older revision		Revision as of 03:51, 29 March 2010
Line 262:		Line 262:

	{{cmd\|<pre>		{{cmd\|<pre>
-	tail -0f /var/log/openldap.log	+	# tail -0f /var/log/openldap.log
-	tail -0f /var/log/pureftpd.log	+	Nov 11 17:42:09 mail slapd[16124]: warning: /etc/hosts.deny, line 0: missing newline or line too long
		+	Nov 11 17:42:09 mail slapd[16124]: conn=5 fd=14 ACCEPT from IP=127.0.0.1:46247 (IP=0.0.0.0:389)
		+	Nov 11 17:42:09 mail slapd[16124]: conn=5 op=0 BIND dn="cn=vmail,dc=example,dc=com" method=128
		+	Nov 11 17:42:09 mail slapd[16124]: conn=5 op=0 BIND dn="cn=vmail,dc=example,dc=com" mech=SIMPLE ssf=0
		+	Nov 11 17:42:09 mail slapd[16124]: conn=5 op=0 RESULT tag=97 err=0 text=
		+	Nov 11 17:42:09 mail slapd[16124]: conn=5 op=1 SRCH base="o=domains,dc=example,dc=com" scope=2
		+	deref=0 filter="(&(objectClass=PureFTPdUser)(mail=user1@example.com)(FTPStatus=enabled))"
		+	Nov 11 17:42:09 mail slapd[16124]: conn=5 op=1 SRCH attr=FTPHomeDir uidNumber
		+	FTPuid gidNumber FTPgid userPassword loginShell FTPStatus FTPQuotaFiles
		+	FTPQuotaMBytes FTPDownloadRatio FTPUploadRatio FTPDownloadBandwidth FTPUploadBandwidth
		+	Nov 11 17:42:09 mail slapd[16124]: conn=5 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
		+	Nov 11 17:42:09 mail slapd[16124]: conn=5 op=2 UNBIND
		+	Nov 11 17:42:09 mail slapd[16124]: conn=5 fd=14 closed
		+
		+	# tail -0f /var/log/pure-ftpd/pureftpd.log
		+	Nov 11 17:39:37 mail pure-ftpd: (?@123.114.254.226) [INFO] New connection from 123.114.254.226
		+	Nov 11 17:39:37 mail pure-ftpd: (?@123.114.254.226) [DEBUG] Command [user] [user1@example.com]
		+	Nov 11 17:39:38 mail pure-ftpd: (?@123.114.254.226) [DEBUG] Command [pass] [<*>]
		+	Nov 11 17:39:38 mail pure-ftpd: (?@123.114.254.226) [INFO] user1@example.com is now logged in
		+	Nov 11 17:39:38 mail pure-ftpd: (user1@example.com@123.114.254.226) [DEBUG] Command [syst] []
		+	Nov 11 17:39:39 mail pure-ftpd: (user1@example.com@123.114.254.226) [DEBUG] Command [feat] []
		+	Nov 11 17:39:39 mail pure-ftpd: (user1@example.com@123.114.254.226) [DEBUG] Command [pwd] []
		+	Nov 11 17:39:39 mail pure-ftpd: (user1@example.com@123.114.254.226) [DEBUG] Command [type] [A]
		+	Nov 11 17:39:40 mail pure-ftpd: (user1@example.com@123.114.254.226) [DEBUG] Command [port] [123,114,254,226,17,57]
		+	Nov 11 17:39:40 mail pure-ftpd: (user1@example.com@123.114.254.226) [DEBUG] Command [list] [-a]
		+	Nov 11 17:39:48 mail pure-ftpd: (user1@example.com@123.114.254.226) [DEBUG] Command [type] [I]
		+	Nov 11 17:39:49 mail pure-ftpd: (user1@example.com@123.114.254.226) [DEBUG] Command [port] [123,114,254,226,17,60]
		+	Nov 11 17:39:49 mail pure-ftpd: (user1@example.com@123.114.254.226) [DEBUG] Command [stor] [test.pdf]
		+	Nov 11 17:39:51 mail pure-ftpd: (user1@example.com@123.114.254.226) [NOTICE]
		+	/home/ftp/example.com/u/us/use/user1-2009.11.11.17.22.26/ftp//chenshake.pdf uploaded (14317 bytes, 9.45KB/sec)
		+	Nov 11 17:39:51 mail pure-ftpd: (user1@example.com@123.114.254.226) [DEBUG] Command [type] [A]
		+	Nov 11 17:39:52 mail pure-ftpd: (user1@example.com@123.114.254.226) [DEBUG] Command [port] [123,114,254,226,17,61]
		+	Nov 11 17:39:53 mail pure-ftpd: (user1@example.com@123.114.254.226) [DEBUG] Command [list] [-a]
		+	Nov 11 17:40:24 mail pure-ftpd: (user1@example.com@123.114.254.226) [DEBUG] Command [pwd] []
		+	Nov 11 17:40:34 mail pure-ftpd: (user1@example.com@123.114.254.226) [INFO] Logout.
		+
	</pre>}}		</pre>}}

Shake.chen: /* Testing */

Shake.chen — Mon, 29 Mar 2010 03:49:07 GMT

Testing

← Older revision		Revision as of 03:49, 29 March 2010
Line 220:		Line 220:
	-rw------- 1 500 vmail 0 Jun 10 16:16 .ftpquota		-rw------- 1 500 vmail 0 Jun 10 16:16 .ftpquota

		+	</pre>}}
		+
		+
		+	=Troubleshooting=
		+
		+	*Enable verbose log in pure-ftpd
		+
		+	{{cmd\|<pre>
		+	echo "yes" > /etc/pure-ftpd/conf/VerboseLog
		+	</pre>}}
		+
		+	Open /etc/rsyslog.conf and set correct values:
		+	{{cfg\|/etc/rsyslog.conf \|<pre>
		+	ftp.* -/var/log/pure-ftpd/pureftpd.log # <-- Add entry
		+	</pre>}}
		+
		+	Create the file of pureftpd.log
		+
		+	{{cmd\|<pre>
		+	touch /var/log/pure-ftpd/pureftpd.log
		+	</pre>}}
		+
		+
		+	*Enable OpenLDAP log
		+
		+	Open /etc/ldap/slapd.conf and set correct values:
		+	{{cfg\|/etc/ldap/slapd.conf \|<pre>
		+	loglevel 256 # <-- change form 0 to 256
		+
		+	</pre>}}
		+
		+	Restart service
		+
		+	{{cmd\|<pre>
		+	#/etc/init.d/pure-ftpd-ldap restart
		+	#/etc/init.d/rsyslog restart
		+	#/etc/init.d/slapd restart
		+	</pre>}}
		+
		+	Monitor /var/log/pureftpd.log and /var/log/openldap.log for troubleshooting.
		+
		+	{{cmd\|<pre>
		+	tail -0f /var/log/openldap.log
		+	tail -0f /var/log/pureftpd.log
	</pre>}}		</pre>}}

Shake.chen: /* Config the LDAP setting for PureFTPD */

Shake.chen — Mon, 29 Mar 2010 03:39:59 GMT

Config the LDAP setting for PureFTPD

← Older revision		Revision as of 03:39, 29 March 2010
Line 54:		Line 54:


-	=Config ~~the~~ LDAP setting ~~for PureFTPD~~=	+	=Config PureFTPD LDAP setting=

	* Open /etc/pure-ftpd/db/ldap.conf and change the value :		* Open /etc/pure-ftpd/db/ldap.conf and change the value :

Shake.chen: /* Config iptables */

Shake.chen — Mon, 29 Mar 2010 03:36:16 GMT

Config iptables

← Older revision		Revision as of 03:36, 29 March 2010
Line 167:		Line 167:
	{{cmd\|<pre>		{{cmd\|<pre>
	#/etc/init.d/iptables restart		#/etc/init.d/iptables restart
		+	</pre>}}
		+
		+	=Testing=
		+
		+	You can use windows FTP client or linux ftp client lftp test.
		+
		+	{{cmd\|<pre>
		+	lftp localhost
		+	lftp localhost:~> debug 4
		+	lftp localhost:~> login user1@example.com user1 # <-- input the username and password
		+	lftp user1@example.com@localhost:~> ls
		+
		+	---- Connecting to localhost (127.0.0.1) port 21
		+	<--- 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
		+	<--- 220-You are user number 1 of 50 allowed.
		+	<--- 220-Local time is now 16:25. Server port: 21.
		+	<--- 220-IPv6 connections are also welcome on this server.
		+	<--- 220 You will be disconnected after 15 minutes of inactivity.
		+	<--- 211-Extensions supported:
		+	<--- EPRT
		+	<--- IDLE
		+	<--- MDTM
		+	<--- SIZE
		+	<--- REST STREAM
		+	<--- MLST type;size;sizd;modify;UNIX.mode;UNIX.uid;UNIX.gid;unique;
		+	<--- MLSD
		+	<--- ESTP
		+	<--- PASV
		+	<--- EPSV
		+	<--- SPSV
		+	<--- ESTA
		+	<--- AUTH TLS
		+	<--- PBSZ
		+	<--- PROT
		+	<--- UTF8
		+	<--- 211 End.
		+	<--- 500 This security scheme is not implemented
		+	<--- 200 OK, UTF-8 enabled
		+	<--- 200 MLST OPTS type;size;sizd;modify;UNIX.mode;UNIX.uid;UNIX.gid;unique;
		+	<--- 331 User user1@example.com OK. Password required
		+	<--- 230-Your bandwidth usage is restricted
		+	<--- 230-User user1@example.com has group access to: vmail
		+	<--- 230-You must respect a 1:5 (UL/DL) ratio
		+	<--- 230-OK. Current restricted directory is /
		+	<--- 230-0 files used (0%) - authorized: 50 files
		+	<--- 230 0 Kbytes used (0%) - authorized: 10240 Kb
		+	<--- 257 "/" is your current location
		+	<--- 227 Entering Passive Mode (127,0,0,1,32,58)
		+	<--- 150 Accepted data connection
		+	drwxr-xr-x 2 500 vmail 4096 Jun 10 16:16 .
		+	drwxr-xr-x 2 500 vmail 4096 Jun 10 16:16 ..
		+	-rw------- 1 500 vmail 0 Jun 10 16:16 .ftpquota
		+
	</pre>}}		</pre>}}

Shake.chen: /* Add LDAP FTP attributes and values for new user */

Shake.chen — Mon, 29 Mar 2010 03:35:20 GMT

Add LDAP FTP attributes and values for new user

← Older revision		Revision as of 03:35, 29 March 2010
Line 149:		Line 149:
	adding new entry "mail=user1@example.com,ou=Users,domainName=example.com,o=domains,dc=example,dc=com"		adding new entry "mail=user1@example.com,ou=Users,domainName=example.com,o=domains,dc=example,dc=com"
	adding new entry "mail=user2@example.com,ou=Users,domainName=example.com,o=domains,dc=example,dc=com"		adding new entry "mail=user2@example.com,ou=Users,domainName=example.com,o=domains,dc=example,dc=com"
		+	</pre>}}
		+
		+
		+	=Config iptables=
		+
		+	By default the iredmail mail have not open 21 port,If you use the ftp client test, you need open the 20 and 21 port.
		+
		+	* Open /etc/default/iptables and set correct values:
		+	{{cfg\|/etc/default/iptables \|<pre>
		+	# http/https, smtp/smtps, pop3/pop3s, imap/imaps, ssh
		+	-A INPUT -p tcp -m multiport --dport 80,443,25,465,110,995,143,993,587,465,22,20,21 -j ACCEPT # <-- Add 20 21
		+
		+	</pre>}}
		+
		+	*Restart the iptables service
		+
		+	{{cmd\|<pre>
		+	#/etc/init.d/iptables restart
	</pre>}}		</pre>}}

Shake.chen: /* Restart OpenLDAP and PureFTPD Service */

Shake.chen — Mon, 29 Mar 2010 03:33:27 GMT

Restart OpenLDAP and PureFTPD Service

← Older revision		Revision as of 03:33, 29 March 2010
Line 123:		Line 123:
	tcp6 0 0 :::21 :::* LISTEN 12548/pure-ftpd (SE		tcp6 0 0 :::21 :::* LISTEN 12548/pure-ftpd (SE

		+	</pre>}}
		+
		+	=Add LDAP FTP attributes and values for new user=
		+
		+	use the iredmail tools quick create the user include the PureFTP attributes and values.
		+
		+	* Open /iRedMail-x.y.z/tools/create_mail_user_OpenLDAP.sh and set correct values:
		+	{{cfg\|/iRedMail-x.y.z/tools/create_mail_user_OpenLDAP.sh\|<pre>
		+	LDAP_SUFFIX="dc=example,dc=com" # <- Change the LDAP suffix
		+	BINDPW='passwd' # <- The user cn=manager,dc=example,dc=com password
		+	PUREFTPD_INTEGRATION='YES' # <- Change form NO to YES,enable the pureftp inteegration
		+	</pre>}}
		+
		+	*Run the script create a user user1 and user2. by default, the default password is same with user name.
		+
		+	{{cmd\|<pre>
		+	#bash create_mail_user_OpenLDAP.sh example.com user1 user2
		+
		+	adding new entry "ou=Users,domainName=example.com,o=domains,dc=example,dc=com"
		+	ldapadd: Already exists (68)
		+	adding new entry "ou=Groups,domainName=example.com,o=domains,dc=example,dc=com"
		+	ldapadd: Already exists (68)
		+	adding new entry "ou=Aliases,domainName=example.com,o=domains,dc=example,dc=com"
		+	ldapadd: Already exists (68)
		+	adding new entry "mail=user1@example.com,ou=Users,domainName=example.com,o=domains,dc=example,dc=com"
		+	adding new entry "mail=user2@example.com,ou=Users,domainName=example.com,o=domains,dc=example,dc=com"
	</pre>}}		</pre>}}

Shake.chen: /* Create FTP Home Dir */

Shake.chen — Mon, 29 Mar 2010 03:32:27 GMT

Create FTP Home Dir

← Older revision		Revision as of 03:32, 29 March 2010
Line 111:		Line 111:
	</pre>}}		</pre>}}

		+	=Restart OpenLDAP and PureFTPD Service=

		+	Make sure pure-ftpd is running:

-	~~mkdir~~ /~~home~~/~~ftp~~/	+	{{cmd\|<pre>
-	~~ls -dl~~ /~~home~~/~~ftp~~	+	#/etc/init.d/slapd restart
-	~~drwxr~~-xr-~~x 2 root root 4096 Oct 3 16~~:53 /~~home~~/~~ftp~~	+	#/etc/init.d/pure-ftpd-ldap restart
		+
		+	# netstat -ntlp \| grep pure-ftpd
		+	tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 12548/pure-ftpd (SE
		+	tcp6 0 0 :::21 :::* LISTEN 12548/pure-ftpd (SE
		+
		+	</pre>}}

Shake.chen: /* Config OpenLDAP */

Shake.chen — Mon, 29 Mar 2010 03:28:47 GMT

Config OpenLDAP

← Older revision		Revision as of 03:28, 29 March 2010
Line 99:		Line 99:

	</pre>}}		</pre>}}
		+
		+
		+	=Create FTP Home Dir=
		+
		+	FTP data are all stored in /home/ftp/ directory.Create /home/ftp/, owner must be 'root' user.
		+
		+	{{cmd\|<pre>
		+	#mkdir /home/ftp/
		+	#ls -dl /home/ftp
		+	drwxr-xr-x 2 root root 4096 Oct 3 16:53 /home/ftp
		+	</pre>}}
		+
		+
		+
		+	mkdir /home/ftp/
		+	ls -dl /home/ftp
		+	drwxr-xr-x 2 root root 4096 Oct 3 16:53 /home/ftp

Shake.chen: /* Config the LDAP setting for PureFTPD */

Shake.chen — Mon, 29 Mar 2010 03:25:39 GMT

Config the LDAP setting for PureFTPD

← Older revision		Revision as of 03:25, 29 March 2010
Line 68:		Line 68:
	LDAPHomeDir FTPHomeDir # <- This is new attribute, we will add it		LDAPHomeDir FTPHomeDir # <- This is new attribute, we will add it
	LDAPVersion 3		LDAPVersion 3
		+	</pre>}}
		+
		+	=Config OpenLDAP=
		+
		+	* Get the schema modify by iredmail
		+
		+	{{cmd\|<pre>
		+	#wget http://iredmail.googlecode.com/svn/trunk/extra/pureftpd.schema -P /etc/ldap/schema/
		+	</pre>}}
		+
		+	* Open /etc/ldap/slapd.conf :include pureftpd.schema after iredmail.schema and Add index for attributes defined in pureftpd.schema:
		+	{{cfg\|/etc/ldap/slapd.conf \|<pre>
		+	include /etc/ldap/schema/iredmail.schema
		+	include /etc/ldap/schema/pureftpd.schema # <-- Add this line.
		+
		+
		+	# Default index.
		+	#
		+	index objectClass eq,pres
		+	index ou,cn,mail,surname,givenname,telephoneNumber eq,pres,sub
		+	index uidNumber,gidNumber,loginShell eq,pres
		+	index uid,memberUid eq,pres,sub
		+	index nisMapName,nisMapEntry eq,pres,sub
		+	# <-- Add the below
		+	#Index for FTP attrs.
		+	index FTPQuotaFiles,FTPQuotaMBytes eq,pres
		+	index FTPUploadRatio,FTPDownloadRatio eq,pres
		+	index FTPUploadBandwidth,FTPDownloadBandwidth eq,pres
		+	index FTPStatus,FTPuid,FTPgid,FTPHomeDir eq,pres
		+
	</pre>}}		</pre>}}

Shake.chen: /* Config PureFTPD */

Shake.chen — Mon, 29 Mar 2010 03:21:00 GMT

Config PureFTPD

← Older revision		Revision as of 03:21, 29 March 2010
Line 51:		Line 51:
	{{cmd\|<pre>		{{cmd\|<pre>
	echo "yes" > /etc/pure-ftpd/conf/DontResolve		echo "yes" > /etc/pure-ftpd/conf/DontResolve
		+	</pre>}}
		+
		+
		+	=Config the LDAP setting for PureFTPD=
		+
		+	* Open /etc/pure-ftpd/db/ldap.conf and change the value :
		+	{{cfg\| /etc/pure-ftpd/db/ldap.conf \|<pre>
		+	LDAPServer localhost
		+	LDAPPort 389
		+	LDAPBaseDN o=domains,dc=example,dc=com
		+	LDAPBindDN cn=vmail,dc=example,dc=com
		+	LDAPBindPW kZ6uB29mViWKWI9lOH3cGnF7z3Dw3B #cn=vmail password
		+	LDAPDefaultUID 1000 # <- UID of 'vmail' user.
		+	LDAPDefaultGID 1000 # <- GID of 'vmail' user.
		+	LDAPFilter (&(objectClass=PureFTPdUser)(mail=\L)(FTPStatus=enabled))
		+	LDAPHomeDir FTPHomeDir # <- This is new attribute, we will add it
		+	LDAPVersion 3
	</pre>}}		</pre>}}