Shulou(Shulou.com)06/01 Report--

It is believed that many inexperienced people have no idea about how to install iRedMail into Samba4 AD on CentOS 7. Therefore, this article summarizes the causes and solutions of the problem. Through this article, I hope you can solve this problem.

This series of tutorials will guide you through how to install iRedMail and Samba4 AD domain controllers on CentOS 7 so that domain accounts can send or receive mail through the Thunderbird desktop client or through the Roundcube Web interface.

The CentOS 7 server on which iRedMail will be installed will allow SMTP or mail routing services through ports 25 and 587, and will also provide POP3 and IMAP services through Dovecot as a mail delivery agent, both of which will be secured with self-signed certificates issued during installation.

The recipient mailbox will be stored on the same CentOS server as the webmail user agent provided by Roundcube. IRedMail will use Samba4 AD to query and verify recipient accounts, create mailing lists with the help of the AD group, and control mail accounts through Samba4 AD DC.

Need to:

Create an AD infrastructure using Samba4 on Ubuntu

Step 1: install iRedMail on CentOS 7

1. Before installing iRedMail, make sure that you use the following guidelines to install a new CentOS 7 operating system on your machine:

Fresh installation of CentOS 7 Minimal

2. Also use the following command to ensure that the system updates the security patches and software packages.

# yum update

3. The system also needs a FQDN hostname, which is set by using the following command. Use your custom FQDN instead of the mail.tecmint.lan variable.

# hostnamectl set-hostname mail.tecmint.lan

Use the following command to verify the system hostname.

# hostname-s # Short name # hostname-f # FQDN # hostname-d # Domain # cat / etc/hostname # Verify it with cat command

Verify CentOS 7 hostname

4. Map the machine's FQDN and short name to the machine's loopback IP address by manually editing / etc/hosts. Add the values shown below and replace the values of mail.tecmint.lan and mail accordingly.

127.0.0.1 mail.tecmint.lan mail localhost localhost.localdomain

5. IRedMail experts suggest that SELinux should be completely disabled. Disable SELinux by editing / etc/selinux/config and setting the value of the SELINUX parameter from permissive to disabled.

SELINUX=disabled

Restart the machine and apply the new SELinux policy, or run setenforce with the parameter 0 to force SELinux to disable immediately.

# reboot or # setenforce 0

6. Next, install the following software packages that will be used for system management next:

# yum install bzip2 net-tools bash-completion wget

7. To install iRedMail, first open the download page http://www.iredmail.org/download.html and download the * * version with the following command.

# wget https://bitbucket.org/zhb/iredmail/downloads/iRedMail-0.9.6.tar.bz2

8. After the download is complete, use the following command to extract the package and enter the decompressed iRedMail directory.

# tar xjf iRedMail-0.9.6.tar.bz2 # cd iRedMail-0.9.6/ # ls

9. Use the following command to execute the shell script for iRedMail to start the installation. The installer then asks a series of questions.

# bash iRedMail.sh

10. In the * * Welcome prompt, click Yes to continue the installation.

IRedMail installation Wizard

Next, select the location where the mail is stored. The iRedMail default mailbox is stored in / var/vmail/.

If the partition where this directory is located has enough space to save all your domain accounts' emails, then click Next to continue.

Otherwise, if you have configured a larger partition for mail storage, change the default location with a different directory.

IRedMail mail storage path

In the next step, select the front-end Web server that you want to interact with iRedMail. In the future, the iRedMail management panel will be completely disabled, so we will use the front-end Web server to access account mail only through the Roundcube Web panel.

If you don't have thousands of email accounts accessing the webmail interface every hour, you should use an Apache Web server to make it flexible and easy to manage.

Web server for iRedMail * *

13. In this step, due to the compatibility of the Samba4 domain controller, select the OpenLDAP backend database and click Next to continue, but once the iRedMail is integrated into the Samba domain controller, we will no longer use the OpenLDAP database.

IRedMail LDAP backend

Next, as shown in the following figure, specify the LDAP suffix for your Samba4 domain name, and then click Next to continue.

IRedMail LDAP suffix

In the next prompt, just enter your domain name and click Next to continue. Replace the tecmint.lan value accordingly.

IRedMail mail domain

Now, set a password for the postmaster@yourdomain.tld administrator and click Next to continue.

IRedMail Mail Domain Administrator

Next, select the optional components to integrate with the mail server from the list. I strongly recommend that you install Roundcube to provide a Web interface for domain accounts to access email, although you can also install and configure Roundcube on different computers to free up mail server resources under high load.

For local areas with limited access to the Internet, especially when we use domain integration, other components are not very useful except for Awstats that can be used for your email analysis.

IRedMail optional component

Enter Y in the next step to apply the configuration and start the installation.

IRedMail configuration Chan

19, *, enter Y for all questions and accept iRedMail script to automatically configure your firewall and MySQL configuration file.

IRedMail system configuration

After the installation is complete, the installer will provide some sensitive information. Examples include iRedAdmin credentials, the URL address of the web panel, and the file location of all parameters used during installation.

Summary of iRedMail installation

Read the above information carefully and restart the machine using the following command to enable all mail services.

# init 6

21. After the system is restarted, log in with an account with root authority or log in as root, and use the following command to list all network sockets and related programs that your mail server is listening to.

In the socket list, you will see that the mail server covers almost all the services needed for the mail service to function properly: SMTP/S, POP3/S, IMAP/S and antivirus, as well as spam protection.

# netstat-tulpn

IRedMail network socket

22. In order to see the location of all the configuration files that iRedMail has modified, the credentials used for database management during iRedMail installation, mail management accounts, and other accounts, the iRedMail.tips file is displayed.

This file is located in the directory where you originally unzipped the installation package. Please note that you should move and protect this file because it contains sensitive information about the mail server.

# less iRedMail-0.9.6/iRedMail.tips

23. The above-mentioned files containing mail server details will also be automatically sent to postmaster, the mail server administrator account.

By entering the IP address of the machine in the browser, you can securely access webmail through the HTTPS protocol. Accept the error generated by the iRedMail self-signed certificate in the browser and log in with the password set for the postmaster@your_domain.tld account in the installation. Read and store this email in a secure mailbox.

Https://192.168.1.254

IRedMail login account

IRedMail Web Mail

That's it! So far, you have configured a complete mail server that runs on your own, but it has not been integrated with the Samba4 AD domain controller service.

In the next section, we will see how to modify the iRedMail service (postfix,dovecot and roundcube profiles) to query domain accounts, send, receive, and read mail.

After reading the above, have you learned how to install iRedMail integration into Samba4 AD on CentOS 7? If you want to learn more skills or want to know more about it, you are welcome to follow the industry information channel, thank you for reading!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.