Nowe posty
|
Ta sekcja pozwala Ci zobaczyć wszystkie wiadomości wysłane przez tego użytkownika. Zwróć uwagę, że możesz widzieć tylko wiadomości wysłane w działach do których masz aktualnie dostęp.
Wiadomości - mariuszad
1
« dnia: 2024-07-25, 12:42:23 »
Witam Skompilowałem samba 4.20.2 ze źródeł. Chciałem postawić kontroler domeny z AD. Podczas konfiguracji kontrolera domeny doszedłem do momentu wyboru serwera DNS. Z racji tego iż mam swój odpowiedziałem NONE. # samba-tool domain provision --use-rfc2307 --interactive (24 min) Realm [LOCAL.TLD]: LOCAL.TLD
Domain [LOCAL]: LOCAL
Server Role (dc, member, standalone) [dc]: dc
DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) [SAMBA_INTERNAL]: NONE
Administrator password:hasło
Retype password:hasło
INFO 2024-07-25 10:23:46,703 pid:62655 /usr/local/samba/lib64/python3.9/site-packages/samba/provision/__init__.py #2110: Looking up IPv4 addresses
INFO 2024-07-25 10:23:46,703 pid:62655 /usr/local/samba/lib64/python3.9/site-packages/samba/provision/__init__.py #2127: Looking up IPv6 addresses
WARNING 2024-07-25 10:23:46,704 pid:62655 /usr/local/samba/lib64/python3.9/site-packages/samba/provision/__init__.py #2134: No IPv6 address will be assigned
INFO 2024-07-25 10:23:46,948 pid:62655 /usr/local/samba/lib64/python3.9/site-packages/samba/provision/__init__.py #2300: Setting up share.ldb
...
INFO 2024-07-25 10:23:55,372 pid:62655 /usr/local/samba/lib64/python3.9/site-packages/samba/provision/__init__.py #2412: A Kerberos configuration suitable for Samba AD has been generated at /usr/local/samba/private/krb5.conf
INFO 2024-07-25 10:23:55,372 pid:62655 /usr/local/samba/lib64/python3.9/site-packages/samba/provision/__init__.py #2414: Merge the contents of this file with your system krb5.conf or replace it with this one. Do not create a symlink!
INFO 2024-07-25 10:23:55,570 pid:62655 /usr/local/samba/lib64/python3.9/site-packages/samba/provision/__init__.py #2084: Setting up fake yp server settings
INFO 2024-07-25 10:23:55,682 pid:62655 /usr/local/samba/lib64/python3.9/site-packages/samba/provision/__init__.py #487: Once the above files are installed, your Samba AD server will be ready to use
INFO 2024-07-25 10:23:55,683 pid:62655 /usr/local/samba/lib64/python3.9/site-packages/samba/provision/__init__.py #492: Server Role: active directory domain controller
INFO 2024-07-25 10:23:55,683 pid:62655 /usr/local/samba/lib64/python3.9/site-packages/samba/provision/__init__.py #493: Hostname: dc
INFO 2024-07-25 10:23:55,683 pid:62655 /usr/local/samba/lib64/python3.9/site-packages/samba/provision/__init__.py #494: NetBIOS Domain: LOCAL
INFO 2024-07-25 10:23:55,683 pid:62655 /usr/local/samba/lib64/python3.9/site-packages/samba/provision/__init__.py #495: DNS Domain: local.tld
INFO 2024-07-25 10:23:55,683 pid:62655 /usr/local/samba/lib64/python3.9/site-packages/samba/provision/__init__.py #496: DOMAIN SID: S-1-5-21-241
Do serwera DNS dodałem wpisy dotyczące kontrolera domeny: ...
_ldap._tcp.local.tld. 3600 IN SRV 0 100 389 dc.local.tld.
_kerberos._tcp.local.tld. 3600 IN SRV 0 100 88 dc.local.tld.
_kpasswd._tcp.local.tld. 3600 IN SRV 0 100 464 dc.local.tld.
;;
dc IN A 192.168.0.111
...
Z poziomu virtualki na której jest DC nslookup i dig rozwiązują zapytania. # dig SRV _ldap._tcp._local.tld
; <<>> DiG 9.16.23-RH <<>> SRV _ldap._tcp.local.tld
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61895
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 2
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 45b67aa4b9e403bc0100000066a206fd6c5e58dcff521738 (good)
;; QUESTION SECTION:
;_ldap._tcp.local.tld. IN SRV
;; ANSWER SECTION:
_ldap._tcp.local.tld. 3600 IN SRV 0 100 389 dc.local.tld.
;; ADDITIONAL SECTION:
dc.local.tld. 86400 IN A 192.168.0.111
;; Query time: 0 msec
;; SERVER: 192.168.0.106#53(192.168.0.106)
;; WHEN: Thu Jul 25 10:04:13 CEST 2024
;; MSG SIZE rcvd: 125
# nslookup -query=SRV _ldap._tcp.local.tld
Server: 192.168.0.106
Address: 192.168.0.106#53
[root@dc ~]# nmcli connection show enp0s3 | grep dns
connection.mdns: -1 (default)
connection.dns-over-tls: -1 (default)
ipv4.dns: 127.0.0.1,192.168.0.106,192.168.0.1
ipv4.dns-search: local.tld
ipv4.dns-options: --
ipv4.dns-priority: 0
ipv4.ignore-auto-dns: no
ipv6.dns: --
ipv6.dns-search: --
ipv6.dns-options: --
ipv6.dns-priority: 0
ipv6.ignore-auto-dns: no
Przy testach DNS to mam komunikat: # host -t SRV _ldap._tcp.local.tld
_ldap._tcp.local.tld has SRV record 0 100 389 dc.local.tld.
[root@dc ~]# host -t SRV _kerberos._tcp.local.tld
_kerberos._tcp.local.tld has SRV record 0 100 88 dc.local.tld.
# host www.google.com
www.google.com has address 142.250.203.196
www.google.com has IPv6 address 2a00:1450:401b:810::2004
Jednak przy próbie wylistowania stref dns mam błąd: # samba-tool dns zonelist 127.0.0.1 -U Administrator
Password for [LOCAL\Administrator]:
ERROR(runtime): Could not contact RPC server [WERR_DNS_ERROR_DS_UNAVAILABLE] - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE')
Dlaczego dig, nslookup, host zwracają rozwiązują zapytania w oparciu o DNS a DC nie potrafi ? Pozdrawiam Mariusz
2
« dnia: 2024-07-24, 10:30:38 »
Poprawione z: na ... i działa Dzięki
3
« dnia: 2024-07-23, 14:16:35 »
Ok..... dzięki za sugestię. Poprawiłem jeden szczegół Teraz za pomoca lynx mogę ją wyświetlić z poziomu serwera dns ale nadal nie moge z poziomu laptopa na którym zainstalowany jest vb. Idzie tylko ip http://192.168.0.108. Wpisanie adresu domeny daje komunikat: Serwer local.tld odrzucił połączenie. ERR_CONNECTION_REFUSED
4
« dnia: 2024-07-22, 10:04:16 »
Witajcie. Czy możecie mi pomóc w takiej kwestii ? Zainstalowałem dwie virualki. Na jednej działa DNS. Na drugiej serwer WWW. Dystrybucja Centos9. Domena local.tld. Obie virtualki działaja w trybie bridge na interfejscie hosta. Serwer dns "działa." # hostname
dns1
# firewall-cmd --permanent --add-port=53/tcp
# firewall-cmd --permanent --add-port=53/udp
# firewall-cmd --reload
# nslookup dns1
Server: 192.168.0.106
Address: 192.168.0.106#53
Name: dns1.local.tld
Address: 192.168.0.106
# nslookup 192.168.0.106
106.0.168.192.in-addr.arpa name = dns1.local.tld.
# nslookup 192.168.0.108
108.0.168.192.in-addr.arpa name = www.local.tld.
# nslookup www.local.tld
Server: 192.168.0.106
Address: 192.168.0.106#53
Name: www.local.tld
Address: 192.168.0.108
# nslookup local.tld
Server: 192.168.0.106
Address: 192.168.0.106#53
Name: local.tld
Address: 192.168.0.106
# ping 192.168.0.108
PING 192.168.0.108 (192.168.0.108) 56(84) bytes of data.
64 bytes from 192.168.0.108: icmp_seq=1 ttl=64 time=0.650 ms
64 bytes from 192.168.0.108: icmp_seq=2 ttl=64 time=1.02 ms
^C
--- 192.168.0.108 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1008ms
rtt min/avg/max/mdev = 0.650/0.834/1.019/0.184 ms
[root@dns1 ~]# ping google.com
PING google.com (142.250.203.142) 56(84) bytes of data.
64 bytes from waw07s06-in-f14.1e100.net (142.250.203.142): icmp_seq=1 ttl=119 time=17.7 ms
64 bytes from waw07s06-in-f14.1e100.net (142.250.203.142): icmp_seq=2 ttl=119 time=18.1 ms
^C
--- google.com ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 17.666/17.882/18.098/0.216 ms
To znaczy nslookup i dig widzą się nazwajem zarówno wykonywane z serwera DNS jak i WWW. Ping do domen publicznych działa. Jak wpiszę adres serwera WWW w przeglądarce (http:\\192.168.0.108) na komputerze hoście pojawia się strona testowa. Jak użyję nazwy domenowej http:\\local.tld mam błąd: ERR_CONNECTION_REFUSED. Do C:\Windows\System32\drivers\etc\hosts na komuperze host dodałem: 192.168.0.106 local.tld W CMD c:/> ipconfig /flushdns
c:/> ipconfig /registerdns
ping 192.168.0.108
Pinging 192.168.0.108 with 32 bytes of data:
Reply from 192.168.0.108: bytes=32 time<1ms TTL=64
Reply from 192.168.0.108: bytes=32 time<1ms TTL=64
Ping statistics for 192.168.0.108:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Control-C
^C
ping 192.168.0.106
Pinging 192.168.0.106 with 32 bytes of data:
Reply from 192.168.0.106: bytes=32 time<1ms TTL=64
Reply from 192.168.0.106: bytes=32 time<1ms TTL=64
Ping statistics for 192.168.0.106:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Control-C
^C
ping local.tld
Pinging local.tld [192.168.0.106] with 32 bytes of data:
Reply from 192.168.0.106: bytes=32 time<1ms TTL=64
Reply from 192.168.0.106: bytes=32 time<1ms TTL=64
Ping statistics for 192.168.0.106:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Control-C
^C
Czy to problem z ustawieniami virtualbox czy raczej z konfiguracją serwera ? Na serwerze www otwarte porty 80 i 443... Pozdrawiam Mariusz
5
« dnia: 2024-01-30, 12:31:33 »
Witam
Mam switcha TPLINK SG3452. Możecie mi doradzić jakie moduły SFP RJ45 będą działały z min bezproblemowo? Czy moduł 10/100/1000 z autonegocjacją będzie lepszą opcją niż bez i stałą prędkością 1Gbps ?
Pozdrawiam
ma
6
« dnia: 2023-12-07, 10:31:02 »
Dzięki za sugestię ale wykropkowałem żeby nie zaśmiecać przekazu. Sprawdziłem - wszystkie ... zawierają wyhaszowane wiersze więc konfiguracja pliku zawiera tylko opcje które zamieściłem
7
« dnia: 2023-11-30, 09:20:50 »
Witam Mam problem DKIM (Centos 7). W nagłówku maila nie pojawia się sygnatura DKIM. Przy testach : # openssl s_client -connect poczta.local.tld:587 -starttls smtp
# openssl s_client -connect poczta.local.tld:25 -starttls smtp
Nagłówek wygląda tak: Return-Path: <admin@local.tld>
Delivered-To: user2@local.tld
Received: from poczta.local.tld
by zeus with LMTP id AMe9FuE3aGXtBQAAZ8L/vg
for <user2@local.tld>; Thu, 30 Nov 2023 08:21:05 +0100
Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=192.168.0.114; helo=poczta.local.tld; envelope-from=admin@local.tld; receiver=webmaster@local.tld
DKIM-Filter: OpenDKIM Filter v2.11.0 poczta.local.tld ADF5D60439A1
Received: from poczta.local.tld (unknown [192.168.0.114])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by poczta.local.tld (Postfix) with ESMTPS id ADF5D60439A1
for <webmaster@local.tld>; Thu, 30 Nov 2023 07:20:55 +0000 (UTC)
Message-Id: <20231130072058.ADF5D60439A1@poczta.local.tld>
Date: Thu, 30 Nov 2023 08:20:55 +0100 (CET)
From: admin@local.tld
Konfiguracja postfixa # cat /etc/postfix/main.cf
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
html_directory = no
inet_interfaces = localhost
inet_protocols = all
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain, localhost
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.10.1/README_FILES
sample_directory = /usr/share/doc/postfix-2.10.1/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
unknown_local_recipient_reject_code = 550
# ============
#Ustawienia ogólne
myhostname = poczta.local.tld
mydomain = local.tld
myorigin = $mydomain
inet_interfaces = all
mydestination = $myhostname, localhost.$mydomain, localhost
mynetworks = 127.0.0.0/8
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
home_mailbox = Maildir/
# Ustawienia poczty przychodzącej (SMTP)
smtpd_banner = $myhostname ESMTP
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
policyd-spf_time_limit = 3600
smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
check_policy_service unix:private/policyd-spf
smtpd_helo_restrictions = permit_mynetworks permit_sasl_authenticated reject_invalid_hostname
# Ustawienia poczty wychodzącej (SMTP)
relayhost =
smtpd_client_restrictions = permit_sasl_authenticated
# TLS
smtpd_tls_cert_file=/etc/ssl/poczta/poczta.local.tld.crt
smtpd_tls_key_file=/etc/ssl/poczta/poczta.key
smtpd_tls_CAfile = /etc/ssl/poczta/ca.crt
smtpd_tls_security_level = may
smtp_tls_security_level = may
smtpd_tls_auth_only = yes
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
# Logowanie
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $myhostname
broken_sasl_auth_clients = yes
virtual_transport = lmtp:unix:private/dovecot-lmtp
#Virtual
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf,
mysql:/etc/postfix/mysql-virtual-email2email.cf
# Milter configuration
milter_default_action = accept
milter_protocol = 6
smtpd_milters = inet:127.0.0.1:8891
non_smtpd_milters = $smtpd_milters
# cat /etc/postfix/master.cf
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
smtp inet n - n - - smtpd
...
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o smtpd_reject_unlisted_recipient=no
...
smtps inet n - n - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_reject_unlisted_recipient=no
...
pickup unix n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr unix n - n 300 1 qmgr
#qmgr unix n - n 300 1 oqmgr
tlsmgr unix - - n 1000? 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - n - - smtp
relay unix - - n - - smtp
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - n - - showq
error unix - - n - - error
retry unix - - n - - error
discard unix - - n - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
scache unix - - n - 1 scache
...
policyd-spf unix - n n - 0 spawn
user=policyd-spf argv=/usr/libexec/postfix/policyd-spf
Konfiguracja DKIM: # grep ^[^#] /etc/opendkim.conf
PidFile /var/run/opendkim/opendkim.pid
Mode sv
Syslog yes
SyslogSuccess yes
LogWhy yes
UserID opendkim:opendkim
Socket inet:8891@localhost
Umask 002
SendReports yes
SoftwareHeader yes
Canonicalization relaxed/relaxed
Domain local.tld
Selector default
MinimumKeyBits 1024
KeyTable /etc/opendkim/KeyTable
SigningTable refile:/etc/opendkim/SigningTable
ExternalIgnoreList refile:/etc/opendkim/TrustedHosts
InternalHosts refile:/etc/opendkim/TrustedHosts
OversignHeaders From
Test DKIM # opendkim-testkey -d local.tld -s 20102023001 -vvv
opendkim-testkey: using default configfile /etc/opendkim.conf
opendkim-testkey: checking key '20102023001._domainkey.local.tld'
opendkim-testkey: key OK
DKIM dodany do pliku strefy: # dig 20102023001._domainkey.local.tld txt
<<>> DiG 9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.15 <<>> 20102023001._domainkey.local.tld txt
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18191
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;20102023001._domainkey.local.tld. IN TXT
;; ANSWER SECTION:
20102023001._domainkey.local.tld. 86400 IN TXT "v=DKIM1; k=rsa; " "p=MIICIjANBgkqhkiG9w0BAQEFAAOCAg9AMIICCgKCAgEA8vEvrGiBiAwp7TJBc3frjRT6yulOGBp08oCA4C+AHyZEgLPhsypU8TNBedZuTS9DOlN3g4jTjU0xN8NmWb/n4tZ1/Pt4yymkZReeJOvmgZhvPTaq/jEh4lRWpHRisifJoPz83UitdTADltTSkFpYyggrYvuo5OYDUzVXIpKKk82Xefmeixk6H3v/ozj6qXzeoa3rRl/e54ZjJP" "yyOeGpAJcc9LsjoHlRadWQmWYfINCms3KYix07OK431WQfNYF/QG9nsqb5JdPnEOSSaOq7iQM/hTNNMsW33pmvB2cAi5gtxLQdHdwcb7bC4SHXbjB7EqIWNY651rX9BGo21ZnId3uMrTBb+aCrfssdIUxWwcjHLtTYvZWcluLRIyWdot0E8V8ULcXUHzIojLBnMU4O8qSEwKUGSouYLvfzGBcm3Q23xevHii8QnXCMEqYfcotD99UNYsxo" "yamObgaPl9gCRf1p6PihnMpHkb2A+GqhSO3JwQ+subdGwoIvklUK3TaFVMsOqdcqi03DH64wVoUIKIUBmGk3QDRS8lsv9d6xP2EczoIZp/HOT+IBE6n/GcQYj5wIa5DXFu9kfv8CwovBJdbuwhuVPqA7zDsxPUrNLhycpl5kt4tjamUgPkckhoj9DA/DB1W4IMvtNW4BlveVrtbF5SQOyj+ZWAz3QCkQFXUCAwEAAQ=="
;; AUTHORITY SECTION:
local.tld. 86400 IN NS local.tld.
;; ADDITIONAL SECTION:
local.tld. 86400 IN A 192.168.0.114
;; Query time: 0 msec
;; SERVER: 192.168.0.114#53(192.168.0.114)
;; WHEN: czw lis 30 08:46:30 CET 2023
;; MSG SIZE rcvd: 861
Czy to może być spowodowane tym, że działam w domenie lokalnej, czy może to skopana konfiguracja? Mogę liczyć na pomoc?. Pozdrawiam
8
« dnia: 2023-11-06, 08:30:20 »
Sprawdziłem : Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MariaDB connection id is 31
Server version: 11.1.2-MariaDB MariaDB Server
Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
MariaDB [(none)]> sHOW GRANTS FOR 'dbaccess'@'%';
ERROR 1141 (42000): There is no such grant defined for user 'dbaccess' on host '%'
MariaDB [(none)]> SHOW GRANTS FOR 'dbaccess'@'127.0.0.1';
ERROR 1141 (42000): There is no such grant defined for user 'dbaccess' on host '127.0.0.1'
MariaDB [(none)]> SHOW GRANTS FOR 'dbaccess'@'localhost';
+-----------------------------------------------------------------------------------------------------------------+
| Grants for dbaccess@localhost |
+-----------------------------------------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO `dbaccess`@`localhost` IDENTIFIED BY PASSWORD '*4A93C29414FDB853A547732B1A97757D8D4D6376' |
| GRANT ALL PRIVILEGES ON `dbmail`.* TO `dbaccess`@`localhost` |
+-----------------------------------------------------------------------------------------------------------------+
2 rows in set (0,000 sec)
Zmieniłem w dovecot-sql.conf.ext na: driver = mysql
connect = host=localhost dbname=dbmail user=dbaccess password=my-password
default_pass_scheme = SHA512-CRYPT
password_query = SELECT email as user, password FROM virtual_users WHERE email='%u';
i działa! Wielkie dzięki!
9
« dnia: 2023-10-31, 09:48:05 »
Witam Potrzebuję pomocy ze zdiagnozowaniem przyczyny problemu. Postawiłem na domenie lokalnej serwer poczty (postfix+dovecot+mariadb+centos7). Podczas sesji próbnej teletem niby wszystko przechodzi ok ale mail nie dociera do odbiorcy. W logach pojawia się komunikat: # telnet poczta.local.tld smtp
Trying 192.168.0.114...
Connected to poczta.local.tld.
Escape character is '^]'.
ehlo poczta.local.tld
250-poczta.local.tld
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from:<user1@local.tld>
250 2.1.0 Ok
rcpt to:<user2@local.tld>
250 2.1.5 Ok
data
354 End data with <CR><LF>.<CR><LF>
.
250 2.0.0 Ok: queued as CFF06607E3D5
quit
221 2.0.0 Bye
Connection closed by foreign host.
Mail wisi w kolejce # mailq
-Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
CFF06607E3D5* 316 Tue Oct 31 09:33:01 user1@local.tld
user2@local.tld
-- 0 Kbytes in 1 Request.
W logach mam błąd autoryzacji w bazie mysql: Oct 31 09:31:50 zeus postfix/smtpd[1586]: disconnect from poczta.local.tld[192.168.0.114]
Oct 31 09:32:43 zeus postfix/smtpd[1586]: connect from web2.local.tld[192.168.0.114]
Oct 31 09:33:07 zeus postfix/smtpd[1586]: CFF06607E3D5: client=web2.local.tld[192.168.0.114]
Oct 31 09:33:16 zeus postfix/cleanup[1600]: CFF06607E3D5: message-id=<20231031083307.CFF06607E3D5@poczta.local.tld>
Oct 31 09:33:16 zeus postfix/qmgr[1274]: CFF06607E3D5: from=<user1@local.tld>, size=316, nrcpt=1 (queue active)
Oct 31 09:33:17 zeus dovecot: lmtp(1604): Connect from local
Oct 31 09:33:17 zeus dovecot: auth-worker(1606): Error: mysql(127.0.0.1): Connect failed to database (dbmail): Access denied for user 'dbaccess'@'localhost' (using password: YES) - waiting for 1 seconds before retry
Oct 31 09:33:17 zeus dovecot: auth-worker(1606): Error: mysql(127.0.0.1): Connect failed to database (dbmail): Access denied for user 'dbaccess'@'localhost' (using password: YES) - waiting for 1 seconds before retry
Oct 31 09:33:18 zeus dovecot: auth-worker(1606): Error: mysql(127.0.0.1): Connect failed to database (dbmail): Access denied for user 'dbaccess'@'localhost' (using password: YES) - waiting for 5 seconds before retry
Oct 31 09:33:18 zeus dovecot: auth-worker(1606): Error: mysql(127.0.0.1): Connect failed to database (dbmail): Access denied for user 'dbaccess'@'localhost' (using password: YES) - waiting for 5 seconds before retry
Oct 31 09:33:23 zeus dovecot: auth-worker(1606): Error: mysql(127.0.0.1): Connect failed to database (dbmail): Access denied for user 'dbaccess'@'localhost' (using password: YES) - waiting for 25 seconds before retry
Oct 31 09:33:23 zeus dovecot: auth-worker(1606): Error: mysql(127.0.0.1): Connect failed to database (dbmail): Access denied for user 'dbaccess'@'localhost' (using password: YES) - waiting for 25 seconds before retry
Oct 31 09:33:23 zeus postfix/smtpd[1586]: disconnect from web2.local.tld[192.168.0.114]
Oct 31 09:33:48 zeus dovecot: auth-worker(1606): Error: mysql(127.0.0.1): Connect failed to database (dbmail): Access denied for user 'dbaccess'@'localhost' (using password: YES) - waiting for 125 seconds before retry
Oct 31 09:33:48 zeus dovecot: auth-worker(1606): Error: mysql(127.0.0.1): Connect failed to database (dbmail): Access denied for user 'dbaccess'@'localhost' (using password: YES) - waiting for 125 seconds before retry
Gdy próbuję zalogować się na uzytkownika dbaccess z lini poleceń udaje się to bez problemu: # mariadb -u dbaccess -p
Enter password:
Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MariaDB connection id is 360
Server version: 11.1.2-MariaDB MariaDB Server
Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
MariaDB [(none)]> \quit
Bye
Moje słabe doświadczenie podpowiada, że to problem z konfiguracją dovecot w sekcji dovecot-sql.conf.ext? driver = mysql
connect = host=127.0.0.1 dbname=dbmail user=dbaccess password='my-password'
default_pass_scheme = SHA512-CRYPT
password_query = SELECT email as user, password FROM virtual_users WHERE email='%u';
Jeżeli będzie trzeba to wrzucę konfig dovecot i postfixa czy tabele z bazy dbmail ale na razie nie chcę zagęszczać wiadomości. Będę wdzięczny za każdą pomoc.
10
« dnia: 2023-10-30, 14:22:42 »
Poszło Dzięki
11
« dnia: 2023-10-17, 10:28:05 »
Witam Bezmyślnie zmieniłem prawa pliku dovecot - master.pid na : -rw------- 1 root root 5 10-17 09:57 master.pid
Z tego co pamiętam powinno być : srw------- 1 root root 5 10-17 09:57 master.pid
Może mi ktoś podpowiedzieć jak do tego wrócić ? Pozdrawiam ma
12
« dnia: 2023-10-10, 14:19:45 »
Wszystko jasne Dzięki
13
« dnia: 2023-10-10, 13:44:56 »
Witam
Czy za pomocą Let's Encrypt można wygenerować certyfikaty dla domeny lokalnej np.: my.domain ?
Pozdrawiam
ma
14
« dnia: 2023-04-06, 10:40:03 »
# openssl x509 -in CERT -text
.....
Authority Information Access:
OCSP - URI:http://status.rapidssl.com
CA Issuers - URI:http://cacerts.rapidssl.com/RapidSSLG34SACA2BD018.crt
15
« dnia: 2023-04-06, 08:44:14 »
Hejka
Kupiłem certyfikat wildcard przez DIGICERT. Mam dwa pliki CERT i PKEY. Potrzebuję jeszcze certyfikatu pośredniego. Na ich stronie jest trochę tego :https://www.digicert.com/kb/digicert-root-certificates.htm. Może mi ktoś podpowiedzieć z którego mam skorzystać ?
Pozdrawiam
ma
|
Pokaż wiadomości