majic-ansible-roles Files · roles/mail_server/templates/dovecot-ldap.conf.ext.j2

Files @ 17cf34f73ca6

Branch filter:

Location: majic-ansible-roles/roles/mail_server/templates/dovecot-ldap.conf.ext.j2

17cf34f73ca6 687 B text/plain Show Annotation Show as Raw Download as Raw

branko

MAR-28: Implemented additional tests for mail_server role:

- Deploy a number of tools on clients in order to test SMTP, IMAP, and Sieve
services.
- Added one more user to LDAP directory for testing group restrictions.
- Deploy CA certificate on all testing machines for TLS validation purposes.
- Use different custom-configured cipher for mail server ciphers.
- Fixed invalid postmaster address for parameters-optional host.
- Deploy configuration files for use with Imap-CLI on client test machines.
- Updated testing of SMTP server to include checks for users that do not belong
to mail group.
- Extended some SMTP-related tests to cover both test servers.
- Some small fixes in SMTP-related tests for expected output from commands.
- Implemented tests covering Dovecot (IMAP + Sieve) functionality.
- Implemented tests for running/enabled services.
- Implemented tests for ClamAV.
- Implemented tests for firewall and connectivity.
- Implemented tests for Postfix TLS configuration.
- TODO: Tests for Sieve TLS configuration have not been written yet due to
limitation of available tools.

uris = {{ mail_ldap_url }}
dn = cn=dovecot,ou=services,{{ mail_ldap_base_dn }}
dnpass = {{ mail_ldap_dovecot_password }}
tls = yes
tls_ca_cert_file = /etc/ssl/certs/mail_ldap_tls_truststore.pem
tls_require_cert = demand
auth_bind = yes
base = ou=people,{{ mail_ldap_base_dn }}
scope = onelevel
user_filter = (&(objectClass=inetOrgPerson)(mail=%u)(memberOf=cn=mail,ou=groups,{{ mail_ldap_base_dn }}))
pass_attrs = mail=user,userPassword=password
pass_filter = (&(objectClass=inetOrgPerson)(mail=%u)(memberOf=cn=mail,ou=groups,{{ mail_ldap_base_dn }}))
iterate_attrs = mail=user
iterate_filter = (memberOf=cn=mail,ou=groups,{{ mail_ldap_base_dn }})
default_pass_scheme = SSHA
user_attrs =