Your message dated Thu, 13 Dec 2018 12:50:25 -0500
with message-id <14440092.WPebx7ETz8@kitterma-e6430>
and subject line Re: postfix: Please include MySQL defaults file patch
has caused the Debian Bug report #400395,
regarding postfix: Please include MySQL defaults file patch
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
400395: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=400395
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: postfix
Version: 2.3.4-1
Severity: wishlist

Hi,

Postfix's mysql support is good, but it is lacking some key elements,
namely SSL support, default-character-set (yay japanese) and
connection timeout settings. These are all supported in the mysql
libraries that postfix-mysql is built with, but there is no support
for setting these configuration values.

Fortunately there is a real simple way to add this support by adding
the ability for postfix to make a call to mysql_options() which will
read the /etc/mysql/my.cnf file and use the values specified there.
Its an amazingly simple solution which adds some incredibly useful
enhancements to the postfix mysql support. The patch is very simple.

The referenced patch[1] adds this functionality, as well as the ability
to specify a different config file than /etc/mysql/my.cnf. For
example, in main.cf you might have:

smtpd_client_restrictions = mysql: /etc/postfix/client_access.mysql 

in client_access.mysql:

default_group = postfix
hosts         = host
query         = SELECT dest FROM aliases WHERE source = '%s'

The "default_group" in that file allows us to specify options for
postfix in my.cnf.

/etc/mysql/my.cnf:
    
[postfix] 
default-character-set = ujis 
connect-timeout       = 15 
user                  = username 
password              = password_for_username 
database              = dbname 
ssl-ca                = /etc/certs/roots/cacert-root.pem
ssl-cert              = /etc/certs/cert.pem
ssl-key               = /etc/certs/key.pem

You'll note that you can specify the user, password here (instead
of in the postfix map file),  you can set a connect-timeout, a default
character set, and by specifying the SSL certs and keys the mysql
connections will be encrypted. 

Thats some good simple magic.

This patch comes from [email protected] (I unfortunately do not have this
person's name).

Micah

1.
http://www.tmtm.org/postfix/patch/postfix-2.2.3-mysql_default_file-2.patch

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-2-vserver-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages postfix depends on:
ii  adduser                   3.99           Add and remove users and groups
ii  debconf [debconf-2.0]     1.5.9          Debian configuration management sy
ii  dpkg                      1.13.24        package maintenance system for Deb
ii  libc6                     2.3.6.ds1-8    GNU C Library: Shared libraries
ii  libdb4.3                  4.3.29-6       Berkeley v4.3 Database Libraries [
ii  libsasl2                  2.1.22.dfsg1-4 Authentication abstraction library
ii  libssl0.9.8               0.9.8c-3       SSL shared libraries
ii  lsb-base                  3.1-22         Linux Standard Base 3.1 init scrip
ii  netbase                   4.27           Basic TCP/IP networking system
ii  ssl-cert                  1.0.13         Simple debconf wrapper for openssl

Versions of packages postfix recommends:
ii  emacs-snapshot-n 1:20061123-1            The GNU Emacs editor (without X su
ii  icedove [mail-re 1.5.0.8-2               free/unbranded thunderbird mail cl
ii  jed [mail-reader 0.99.18-6               editor for programmers (textmode v
ii  mailx [mail-read 1:8.1.2-0.20050715cvs-1 A simple mail user agent
ii  mutt [mail-reade 1.5.13-1                text-based mailreader supporting M

-- debconf information excluded


--- End Message ---
--- Begin Message ---
On Sat, 25 Nov 2006 15:36:45 -0700 Micah Anderson <[email protected]> wrote:
> Package: postfix
> Version: 2.3.4-1
> Severity: wishlist
> 
> Hi,
> 
> Postfix's mysql support is good, but it is lacking some key elements,
> namely SSL support, default-character-set (yay japanese) and
> connection timeout settings. These are all supported in the mysql
> libraries that postfix-mysql is built with, but there is no support
> for setting these configuration values.
> 
> Fortunately there is a real simple way to add this support by adding
> the ability for postfix to make a call to mysql_options() which will
> read the /etc/mysql/my.cnf file and use the values specified there.
> Its an amazingly simple solution which adds some incredibly useful
> enhancements to the postfix mysql support. The patch is very simple.
> 
> The referenced patch[1] adds this functionality, as well as the ability
> to specify a different config file than /etc/mysql/my.cnf. For
> example, in main.cf you might have:
> 
> smtpd_client_restrictions = mysql: /etc/postfix/client_access.mysql 
> 
> in client_access.mysql:
> 
> default_group = postfix
> hosts         = host
> query         = SELECT dest FROM aliases WHERE source = '%s'
> 
> The "default_group" in that file allows us to specify options for
> postfix in my.cnf.
> 
> /etc/mysql/my.cnf:
>     
> [postfix] 
> default-character-set = ujis 
> connect-timeout       = 15 
> user                = username 
> password            = password_for_username 
> database            = dbname 
> ssl-ca              = /etc/certs/roots/cacert-root.pem
> ssl-cert            = /etc/certs/cert.pem
> ssl-key             = /etc/certs/key.pem
> 
> You'll note that you can specify the user, password here (instead
> of in the postfix map file),  you can set a connect-timeout, a default
> character set, and by specifying the SSL certs and keys the mysql
> connections will be encrypted. 
> 
> Thats some good simple magic.
> 
> This patch comes from [email protected] (I unfortunately do not have this
> person's name).
> 
> Micah
> 
> 1.
> http://www.tmtm.org/postfix/patch/postfix-2.2.3-mysql_default_file-2.patch

An equivalent change was included in postfix 2.11.

Scott K
> 

--- End Message ---

Reply via email to