Author Topic: Send in name of anaother user fails  (Read 2523 times)

mig

  • Zen Apprentice
  • *
  • Posts: 11
  • Karma: +3/-0
    • View Profile
Send in name of anaother user fails
« on: October 08, 2012, 03:44:05 pm »
User account "User1" is configured with user delegate which is "User2".

"User2" can send email in name of "User1" from webaccess.

However, when user "User2" is using Thunderbird and sending email in name of "User1" with SMTP protocol is getting reject.

Oct  8 15:08:51 coresbs postfix/smtpd[32249]: NOQUEUE: reject: RCPT from unknown[192.168.1.185]: 553 5.7.1 <support@domain.com>: Sender address rejected: not owned by user user2@domain.com; from=<user1@domain.com> to=<user3@domain.com> proto=ESMTP helo=<[192.168.1.185]>

towme

  • Zen Apprentice
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
Re: Send in name of anaother user fails
« Reply #1 on: November 08, 2012, 02:02:10 pm »
Had the same problem, mybe this is intentional.
Ok this not an official fix, but it does the trick for me.
I have compared the /etc/postfix/main.cf files from zentyal 2.2 server and a zentyal 3.0 server. The following lines do not exist in the 2.2 version, and smtp worked there.

smtpd_sender_restrictions=reject_authenticated_sender_login_mismatch
smtpd_sender_login_maps = ldap:senderlogin
senderlogin_server_host = localhost:390
senderlogin_version = 3
senderlogin_search_base =
senderlogin_query_filter = (&(mail=%s)(objectClass=CourierMailAccount))
senderlogin_result_attribute = mail
senderlogin_bind = yes
senderlogin_bind_dn =
senderlogin_bind_pw =

So I commented out the section from /usr/share/zentyal/stubs/mail/main.cf.mas, save something in the mail module and everything works like a charm.

I think that the origin of the problem is that the mail attribute is in the Users container in the ldap tree, but the mail alias is in the postfix container. So either two queries need to be made, or the attributes need to be moved into the users container.

But until no official fix I will use it this way.
As I tested it authentication still remains intact, but this way you can write anything into the from field of your mail.
Decide which finger you bite

Marcus

  • Forum Moderator
  • Zen Samurai
  • *****
  • Posts: 395
  • Karma: +12/-0
    • View Profile
    • Professional IT Service
Re: Send in name of anaother user fails
« Reply #2 on: November 10, 2012, 01:52:31 am »
Hello,

Before playing in any file, make sure to copy it...

Code: [Select]
sudo cp /usr/share/zentyal/stubs/mail/main.cf.mas /etc/zentyal/stubs/mail/main.cf.mas
After copying the file, you should edit the following file (and not the original one):
Code: [Select]
sudo nano /etc/zentyal/stubs/mail/main.cf.mas
To revert back to the original Zentyal config, simply delete the following file:
Code: [Select]
sudo rm /etc/zentyal/stubs/mail/main.cf.mas
Best,

Marcus