{"id":68,"date":"2015-09-11T11:42:08","date_gmt":"2015-09-11T15:42:08","guid":{"rendered":"http:\/\/blog.voipxswitch.com\/?p=68"},"modified":"2015-09-14T13:39:52","modified_gmt":"2015-09-14T17:39:52","slug":"setup-an-smtp-server-with-user-authentication-using-postgres-postfix-and-dovecot-on-debian-8","status":"publish","type":"post","link":"https:\/\/blog.voipxswitch.com\/?p=68","title":{"rendered":"Setup an SMTP server with user authentication using postgres, postfix, and dovecot on Debian 8"},"content":{"rendered":"

Please note: this tutorial assumes postgres is already setup and configured on the machine.<\/strong>
\nInstall & configure the dovecot and postfix:<\/strong><\/p>\n

apt-get install dovecot-core dovecot-pgsql postfix -y<\/pre>\n
Provision the smtp database in postgres:<\/strong><\/p>\n
su -c \"psql -c \\\"CREATE USER smtp WITH PASSWORD 'smtp';\\\"\" postgres\r\nsu -c \"psql -c \\\"CREATE DATABASE smtp WITH OWNER=smtp;\\\"\" postgres<\/pre>\n
Encrypt you password using doveadm tool and SHA512-CRYPT:<\/p>\n
doveadm pw -s SHA512-CRYPT -p test1234 -r 100000\r\n************************\r\n<\/pre>\n
Create the SQL file with your one test user:<\/p>\n
cat > smtp.sql<<EOT\r\nCREATE TABLE users (\r\n\u00a0\u00a0\u00a0 id SERIAL,\r\n\u00a0\u00a0\u00a0 username VARCHAR(128) NOT NULL,\r\n\u00a0\u00a0\u00a0 password VARCHAR(512) NOT NULL,\r\n\u00a0\u00a0\u00a0 constraint username_key unique (username)\r\n);\r\ninsert into users (username, password) values ('emailuser01', '************************');\r\n\r\nEOT\r\n<\/pre>\n
Import your SQL table and test user:<\/p>\n
psql -h localhost -d 'smtp' -U smtp -W < smtp.sql<\/pre>\n
Configure dovecot<\/strong>
\nOpen \/etc\/dovecot\/conf.d\/10-master.conf<\/strong> in your favorite text editor and uncomment the following:<\/p>\n
\u00a0 # Postfix smtp-auth\r\n\u00a0 unix_listener \/var\/spool\/postfix\/private\/auth {\r\n\u00a0\u00a0\u00a0 mode = 0666\r\n\u00a0 }\r\n<\/pre>\n
Enable SQL and login auth:<\/p>\n
sed -i \"s\/auth_mechanisms = plain\/auth_mechanisms = plain login\/g\" \/etc\/dovecot\/conf.d\/10-auth.conf\r\nsed -i \"s\/\\!include auth-system.conf.ext\/#\\!include auth-system.conf.ext\/g\" \/etc\/dovecot\/conf.d\/10-auth.conf\r\nsed -i \"s\/#\\!include auth-sql.conf.ext\/\\!include auth-sql.conf.ext\/g\" \/etc\/dovecot\/conf.d\/10-auth.conf\r\n<\/pre>\n
Disable the default password scheme<\/p>\n
sed -i \"s\/default_pass_scheme\/#default_pass_scheme\/g\" \/etc\/dovecot\/dovecot-sql.conf.ext<\/pre>\n
Enable SHA512-CRYPT and set database parameters<\/p>\n
cat >>\/etc\/dovecot\/dovecot-sql.conf.ext<<EOT\r\ndefault_pass_scheme = SHA512-CRYPT\r\ndriver = pgsql\r\nconnect = host=localhost dbname=smtp user=smtp password='smtp'\r\npassword_query = select username as user, password from users where username = '%n';\r\n\r\nEOT\r\n<\/pre>\n
Restart dovecot<\/strong><\/p>\n
service dovecot restart\r\n<\/pre>\n
Configure postfix to use dovecot for sasl<\/strong><\/p>\n
postconf -e 'smtpd_sasl_type = dovecot'\r\npostconf -e 'smtpd_sasl_auth_enable = yes'\r\npostconf -e 'smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'\r\npostconf -e 'smtpd_sasl_path = private\/auth'\r\n<\/pre>\n
Enable submission for clients on port tcp\/587<\/strong><\/p>\n
sed -i \"s\/\\#submission\/submission\/g\" \/etc\/postfix\/master.cf\r\n<\/pre>\n
Restart postfix<\/strong><\/p>\n
service postfix restart\r\n<\/pre>\n
Email client setup example<\/h3>\n
Now configure your mail client to use the SMTP server. For this example we will say the mail client is postfix and the smtp server we just setup has an IP of 192.168.0.186<\/p>\n
192.168.0.186:587 emailuser01:test1234 > \/etc\/postfix\/sasl_passwd<\/pre>\n
postmap hash:\/etc\/postfix\/sasl_passwd<\/pre>\n
cat >>\/etc\/postfix\/main.cf <<EOT\r\n\r\nsmtp_sasl_auth_enable = yes\r\nsmtp_sasl_mechanism_filter = plain, login\r\nsmtp_sasl_security_options = noanonymous\r\nsmtp_sasl_password_maps = hash:\/etc\/postfix\/sasl_passwd\r\nrelayhost = 192.168.0.186:587\r\n\r\nEOT\r\n<\/pre>\n
Restart postfix<\/strong><\/p>\n
service postfix restart<\/pre>\n
Send test email<\/strong><\/p>\n
echo \"TEST\" > testemail\r\nmail -s \"TEST EMAIL\" me@myemaildomain.com < testemail<\/pre>\n","protected":false},"excerpt":{"rendered":"
Please note: this tutorial assumes postgres is already setup and configured on the machine. Install & configure the dovecot and postfix: apt-get install dovecot-core dovecot-pgsql postfix -y Provision the smtp database in postgres: su -c “psql -c \\”CREATE USER smtp WITH PASSWORD ‘smtp’;\\”” postgres su -c “psql -c \\”CREATE DATABASE smtp WITH OWNER=smtp;\\”” postgres Encrypt […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18,5,13,14],"tags":[],"class_list":["post-68","post","type-post","status-publish","format-standard","hentry","category-dovecot","category-email","category-postfix","category-smtp"],"_links":{"self":[{"href":"https:\/\/blog.voipxswitch.com\/index.php?rest_route=\/wp\/v2\/posts\/68","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.voipxswitch.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.voipxswitch.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.voipxswitch.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.voipxswitch.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=68"}],"version-history":[{"count":18,"href":"https:\/\/blog.voipxswitch.com\/index.php?rest_route=\/wp\/v2\/posts\/68\/revisions"}],"predecessor-version":[{"id":87,"href":"https:\/\/blog.voipxswitch.com\/index.php?rest_route=\/wp\/v2\/posts\/68\/revisions\/87"}],"wp:attachment":[{"href":"https:\/\/blog.voipxswitch.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=68"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.voipxswitch.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=68"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.voipxswitch.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=68"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}