Commit Graph
16 Commits
Author SHA1 Message Date
downtownallday 4cf82ae36e Merge branch 'master' into EHDD 2020-05-17 10:18:03 -04:00
downtownallday 9d89c40ad7 Merge branch 'master' into ldap 2020-05-17 10:17:25 -04:00
downtownallday f37664439b Merge branch 'master' into EHDD 2020-05-11 13:45:50 -04:00
downtownallday a30b721014 Merge branch 'master' into ldap 2020-05-11 13:45:12 -04:00
downtownallday 3c61a655e4 Merge branch 'master' into EHDD 2020-04-21 07:05:12 -04:00
downtownallday e7c27d9035 Merge branch 'master' into ldap 2020-04-21 07:04:23 -04:00
downtownallday b70eb65e45 Merge branch 'master' into EHDD 2020-04-11 18:12:58 -04:00
downtownallday 53ba80daaf Merge branch 'master' into ldap 2020-04-11 18:12:32 -04:00
downtownallday 827d918c2b Merge branch 'master' into EHDD 2020-03-15 09:51:47 -04:00
downtownallday b8cf7bc193 Merge branch 'master' into ldap 2020-03-15 09:51:10 -04:00
downtownallday 18e376ea2b Merge branch 'master' into EHDD 2020-02-16 03:27:06 -05:00
downtownallday 86d2e78d61 Merge branch 'master' into ldap 2020-02-16 03:26:00 -05:00
downtownallday cf4d1105c1 Merge branch 'master' into EHDD 2020-01-22 10:11:46 -05:00
downtownallday 37183c79c8 Merge branch 'master' into ldap 2020-01-22 09:56:16 -05:00
downtownallday 42d471ba7f Initial commit to support a luks formatted partition holding user-data.
See #1340.

Run setup/start-encrypted.sh instead of setup/start.sh.

After reboots, login to your box and run tools/startup.sh.
2020-01-20 12:26:50 -05:00
downtownallday 1f0d2ddb92 Issue #1340 - LDAP backend for accounts
This commit will:

1. Change the user account database from sqlite to OpenLDAP
2. Add policyd-spf to postfix for SPF validation
3. Add a test runner with some automated test suites

Notes:

User account password hashes are preserved.

There is a new Roundcube contact list called "Directory" that lists the users in LDAP (MiaB users), similar to what Google Suite does.

Users can still change their password in Roundcube.

OpenLDAP is configured with TLS, but all remote access is blocked by firewall rules. Manual changes are required to open it for remote access (eg. "ufw allow proto tcp from <HOST> to any port ldaps").

The test runner is started by executing tests/runner.sh. Be aware that it will make changes to your system, including adding new users, domains, mailboxes, start/stop services, etc. It is highly unadvised to run it on a production system!

The LDAP schema that supports mail delivery with postfix and dovecot is located in conf/postfix.schema. This file is copied verbatim from the LdapAdmin project (GPL, ldapadmin.org). Instead of including the file in git, it could be referenced by URL and downloaded by the setup script if GPL is an issue or apply for a PEN from IANA.

Mangement console and other services should not appear or behave any differently than before.
2020-01-17 17:03:21 -05:00