source: server/mail/dovecot.xml@ 2c5dfc2d

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 2c5dfc2d was 2c5dfc2d, checked in by Fernando de Oliveira <fernando@…>, 9 years ago

Dovecot-2.2.16 Security Issue: CVE-2015-3420.
Update to apr-1.5.2.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@15905 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 10.6 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY dovecot-download-http
8 "http://www.dovecot.org/releases/&dovecot-major;.&dovecot-minor;/dovecot-&dovecot-version;.tar.gz">
9 <!ENTITY dovecot-download-ftp " ">
10 <!ENTITY dovecot-md5sum "8dba21e817b4239e462d98a925233418">
11 <!ENTITY dovecot-size "4.6 MB">
12 <!ENTITY dovecot-buildsize "235 MB">
13 <!ENTITY dovecot-time "1.4 SBU (additional 0.5 SBU for the tests)">
14]>
15
16<sect1 id="dovecot" xreflabel="Dovecot-&dovecot-version;">
17 <?dbhtml filename="dovecot.html"?>
18
19 <sect1info>
20 <othername>$LastChangedBy$</othername>
21 <date>$Date$</date>
22 </sect1info>
23
24 <title>Dovecot-&dovecot-version;</title>
25
26 <indexterm zone="dovecot">
27 <primary sortas="a-Dovecot">Dovecot</primary>
28 </indexterm>
29
30 <sect2 role="package">
31 <title>Introduction to Dovecot</title>
32
33 <para>
34 <application>Dovecot</application> is an Internet Message Access Protocol
35 (IMAP) and Post Office Protocol (POP) server, written primarily with
36 security in mind. <application>Dovecot</application> aims to be
37 lightweight, fast and easy to set up as well as highly configurable and
38 easily extensible with plugins.
39 </para>
40
41 &lfs77_checked; &gcc5_checked;
42
43 <bridgehead renderas="sect3">Package Information</bridgehead>
44 <itemizedlist spacing="compact">
45 <listitem>
46 <para>
47 Download (HTTP): <ulink url="&dovecot-download-http;"/>
48 </para>
49 </listitem>
50 <listitem>
51 <para>
52 Download (FTP): <ulink url="&dovecot-download-ftp;"/>
53 </para>
54 </listitem>
55 <listitem>
56 <para>
57 Download MD5 sum: &dovecot-md5sum;
58 </para>
59 </listitem>
60 <listitem>
61 <para>
62 Download size: &dovecot-size;
63 </para>
64 </listitem>
65 <listitem>
66 <para>
67 Estimated disk space required: &dovecot-buildsize;
68 </para>
69 </listitem>
70 <listitem>
71 <para>
72 Estimated build time: &dovecot-time;
73 </para>
74 </listitem>
75 </itemizedlist>
76
77 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
78 <itemizedlist spacing='compact'>
79 <listitem>
80 <para>Required patch: <ulink
81 url="&patch-root;/dovecot-&dovecot-version;-CVE_2015_3420-1.patch"/>
82 </para>
83 </listitem>
84 </itemizedlist>
85
86 <bridgehead renderas="sect3">Dovecot Dependencies</bridgehead>
87
88 <bridgehead renderas="sect4">Optional</bridgehead>
89 <para role="optional">
90 <xref linkend="clucene"/>,
91 <xref linkend="libcap-pam"/>,
92 <xref linkend="linux-pam"/>,
93 <xref linkend="mariadb"/> or <ulink url="http://www.mysql.com/">MySQL</ulink>,
94 <xref linkend="mitkrb"/> (for GSSAPI support),
95 <xref linkend="openldap"/>,
96 <xref linkend="openssl"/>,
97 <xref linkend="postgresql"/>,
98 <xref linkend="sqlite"/>, and
99 <xref linkend="valgrind"/>
100 </para>
101
102 <para condition="html" role="usernotes">User Notes:
103 <ulink url="&blfs-wiki;/dovecot"/>
104 </para>
105 </sect2>
106
107 <sect2 role="installation">
108 <title>Installation of Dovecot</title>
109
110 <para>
111 There should be dedicated users and groups for unprivileged Dovecot
112 processes and for processing users' logins. Issue the following commands
113 as the <systemitem class="username">root</systemitem> user:
114 </para>
115
116<screen role="root"><userinput>groupadd -g 42 dovecot &amp;&amp;
117useradd -c "Dovecot unprivileged user" -d /dev/null -u 42 \
118 -g dovecot -s /bin/false dovecot &amp;&amp;
119groupadd -g 43 dovenull &amp;&amp;
120useradd -c "Dovecot login user" -d /dev/null -u 43 \
121 -g dovenull -s /bin/false dovenull</userinput></screen>
122
123 <para>
124 Install <application>Dovecot</application> by running the following
125 commands:
126 </para>
127
128<screen><userinput>patch -Np1 -i ../dovecot-&dovecot-version;-CVE_2015_3420-1.patch &amp;&amp;
129./configure --prefix=/usr \
130 --sysconfdir=/etc \
131 --localstatedir=/var \
132 --docdir=/usr/share/doc/dovecot-&dovecot-version; \
133 --disable-static &amp;&amp;
134make</userinput></screen>
135
136 <para>To test the results, issue <command>make -k check</command>. One test
137 fails for unknown reason</para>
138
139 <para>
140 Now, as the <systemitem class="username">root</systemitem> user:
141 </para>
142
143<screen role="root"><userinput>make install</userinput></screen>
144
145 </sect2>
146
147 <sect2 role="commands">
148 <title>Command Explanations</title>
149
150 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
151 href="../../xincludes/static-libraries.xml"/>
152
153 <para>
154 <option>--with-ldap</option>: This switch enables
155 <application>OpenLDAP</application> authentication support.
156 </para>
157
158 <para>
159 <option>--with-pgsql</option>: This switch enables
160 <application>PostgreSQL</application> authentication support.
161 </para>
162
163 <para>
164 <option>--with-mysql</option>: This switch enables
165 <application>MySQL</application> authentication support.
166 </para>
167
168 <para>
169 <option>--with-sqlite</option>: This switch enables
170 <application>SQLite</application> authentication support.
171 </para>
172
173 <para>
174 <option>--with-lucene</option>: This switch enables
175 <application>CLucene</application> full text search support.
176 </para>
177
178 <para>
179 <option>--with-krb5</option>: This switch enables
180 GSSAPI authentication support.
181 </para>
182
183 </sect2>
184
185 <sect2 role="configuration">
186 <title>Configuring Dovecot</title>
187
188 <sect3 id="dovecot-config">
189 <title>Config Files</title>
190
191 <para>
192 <filename>/etc/dovecot/dovecot.conf</filename>,
193 <filename>/etc/dovecot/conf.d/*</filename>, and
194 <filename>/etc/dovecot/local.conf</filename>
195 </para>
196
197 <indexterm zone="dovecot dovecot-config">
198 <primary sortas="e-etc-dovecot-dovecot.conf">/etc/dovecot/dovecot.conf</primary>
199 </indexterm>
200 <indexterm zone="dovecot dovecot-config">
201 <primary sortas="e-etc-dovecot-conf.d">/etc/dovecot/conf.d/*</primary>
202 </indexterm>
203 <indexterm zone="dovecot dovecot-config">
204 <primary sortas="e-etc-dovecot-local.conf">/etc/dovecot/local.conf</primary>
205 </indexterm>
206
207 </sect3>
208
209 <sect3>
210 <title>Configuration Information</title>
211
212 <para>
213 Copy an example configuration, which you can use as a starting point:
214 </para>
215
216<screen role="root"><userinput>cp -rv /usr/share/doc/dovecot-&dovecot-version;/example-config/* /etc/dovecot</userinput></screen>
217
218 <para>
219 The following configuration is a simple proof of concept with IMAP
220 service using local users for authentication and mailbox location.
221 Reading files from the <filename class="directory">conf.d</filename>
222 directory is commented out since the included example configuration
223 requires <application>OpenSSL</application> and
224 <application>Linux PAM</application>.
225 </para>
226
227<screen role="root"><userinput>sed -i '/^\!include / s/^/#/' /etc/dovecot/dovecot.conf &amp;&amp;
228chmod -v 1777 /var/mail &amp;&amp;
229cat &gt; /etc/dovecot/local.conf &lt;&lt; "EOF"
230<literal>protocols = imap
231ssl = no
232# The next line is only needed if you have no IPv6 network interfaces
233listen = *
234mail_location = mbox:~/Mail:INBOX=/var/mail/%u
235userdb {
236 driver = passwd
237}
238passdb {
239 driver = shadow
240}</literal>
241EOF</userinput></screen>
242
243 <para>
244 You will definitely want to read the official documentation at <ulink
245 url="http://wiki2.dovecot.org/"/> if you plan to use
246 <application>Dovecot</application> in production environment.
247 </para>
248
249 </sect3>
250
251 <sect3 id="dovecot-init">
252 <title>Boot Script</title>
253
254 <para>If you want the <application>Dovecot</application> server to
255 start automatically when the system is booted, install the
256 <filename>/etc/rc.d/init.d/dovecot</filename> init script included
257 in the <xref linkend="bootscripts"/> package.</para>
258
259 <indexterm zone="dovecot dovecot-init">
260 <primary sortas="f-dovecot">dovecot</primary>
261 </indexterm>
262
263<screen role="root"><userinput>make install-dovecot</userinput></screen>
264
265 </sect3>
266
267 </sect2>
268
269 <sect2 role="content">
270 <title>Contents</title>
271
272 <segmentedlist>
273 <segtitle>Installed Programs</segtitle>
274 <segtitle>Installed Libraries</segtitle>
275 <segtitle>Installed Directories</segtitle>
276
277 <seglistitem>
278 <seg>
279 doveadm, doveconf, dovecot, dsync, and various internal programs
280 </seg>
281 <seg>
282 various internal plugins
283 </seg>
284 <seg>
285 /etc/dovecot,
286 /usr/include/dovecot,
287 /usr/lib/dovecot,
288 /usr/libexec/dovecot, and
289 /usr/share/doc/dovecot-&dovecot-version;
290 </seg>
291 </seglistitem>
292 </segmentedlist>
293
294 <variablelist>
295 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
296 <?dbfo list-presentation="list"?>
297 <?dbhtml list-presentation="table"?>
298
299 <varlistentry id="doveadm">
300 <term><command>doveadm</command></term>
301 <listitem>
302 <para>
303 is the <application>Dovecot</application> administration tool.
304 </para>
305 <indexterm zone="dovecot doveadm">
306 <primary sortas="b-doveadm">doveadm</primary>
307 </indexterm>
308 </listitem>
309 </varlistentry>
310
311 <varlistentry id="doveconf">
312 <term><command>doveconf</command></term>
313 <listitem>
314 <para>
315 is <application>Dovecot</application>'s configuration dumping
316 utility.
317 </para>
318 <indexterm zone="dovecot doveconf">
319 <primary sortas="b-doveconf">doveconf</primary>
320 </indexterm>
321 </listitem>
322 </varlistentry>
323
324 <varlistentry id="dovecot-prog">
325 <term><command>dovecot</command></term>
326 <listitem>
327 <para>
328 is the IMAP and POP server.
329 </para>
330 <indexterm zone="dovecot dovecot-prog">
331 <primary sortas="b-dovecot">dovecot</primary>
332 </indexterm>
333 </listitem>
334 </varlistentry>
335
336 <varlistentry id="dsync">
337 <term><command>dsync</command></term>
338 <listitem>
339 <para>
340 is <application>Dovecot</application>'s mailbox synchronization
341 utility.
342 </para>
343 <indexterm zone="dovecot dsync">
344 <primary sortas="b-dsync">dsync</primary>
345 </indexterm>
346 </listitem>
347 </varlistentry>
348
349
350 </variablelist>
351
352 </sect2>
353
354</sect1>
Note: See TracBrowser for help on using the repository browser.