Mysql – convert plain text passwords to sha512-crypt in dovecot + postfix’s thesql mailbox table

dovecotMySQLpostfixroundcubeubuntu-15.10

I have an old postfix + dovecot + Roundcube mailserver (mail.domain.Tld). Server clock is loosing time and adjusting it causes dovecot to kill itself, we cannot install more memory, bigger hard-drives, etc.

I have built a new server box (mail2.domain.Tld) With Postfix + dovecot + Roundcube. This server is functioning, with a client's new domain, and my personal domain. it's password system is SHA512-CRYPT.

I have imported the users from the old server over to the new server. I have created a new column "plain_pass" for the plain passwords.
I have been following this "tutorial" without much luck – http://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes#CA-26af2b83a43b8100522c57565773f605c21f2f27_1

Best Answer

From the dovecot support group, Particulary - Gedalya:

Run this mysql query:

UPDATE mailbox set password = ENCRYPT(plain_pass, CONCAT('$6$',sha(RAND()))) WHERE password IS NULL OR password='';

Related Solutions

Postfix: Virtual Mailbox Mapping and Dovecot

Try setting up your dovecot LDA with the following parameters:

argv=/usr/libexec/dovecot/deliver -f ${sender}
           -d ${user}@${nexthop} -a ${recipient} -n -m ${extension}

I use this to support extensions in the local part (like test+xyz@example.com). You may want to try ${mailbox} in place of ${user}@${nexthop}. Have a look at man 8 pipe for all possible substitutions.

BTW: This is used by me for a working virtual mapping which maps email adresses for multiple domains into virtual mailboxes. On dovecot's side I'm using the same tables (via dovecot's SQL configuration) to do authentication for each virtual mail user. Not sure if you can map virtual mail addresses to real system users this way.

Postfix 5.7.1 Relay access denied

The problem is that you are not authenticating via SASL.

You have this set on submission:

-o smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject

The first allows mynetworks (which seems to be only localhost), the second allows ony authenticated users. Your log shows you establishing an anonymous TLS connection, but no SASL auth.

I don't see any SASL configuration in your main.cf, you may want to have a look at this.

Best Answer

Related Solutions

Postfix: Virtual Mailbox Mapping and Dovecot

Postfix 5.7.1 Relay access denied

Related Topic