Re: [Dovecot] replication howto

2012-03-21 Thread Timo Sirainen
On 19.3.2012, at 12.50, Matteo Cazzador wrote: > Hi, i've a simple question, what do you mean for dovecot director setup? > 'i've a doubt. > The solution that i'm testing is using 3 mail server in different > geoghrapic locations. > An user can travel in varius location, and i want his imap mail r

Re: [Dovecot] replication howto

2012-03-19 Thread /dev/rob0
On Mon, Mar 19, 2012 at 09:35:34AM +0100, Michael Grimm wrote: > On 15.03.2012 22:05, Timo Sirainen wrote: > >On 15.3.2012, at 22.48, Michael Grimm wrote: > > >>Actually it's a bad idea to use root for ssh from a security > >>point of view. A hacked root account isn't fun. Thus, normally > >>one n

Re: [Dovecot] replication howto

2012-03-19 Thread Matteo Cazzador
Hi, i've a simple question, what do you mean for dovecot director setup? 'i've a doubt. The solution that i'm testing is using 3 mail server in different geoghrapic locations. An user can travel in varius location, and i want his imap mail reside on mail server in every locations. Sò i use you solu

Re: [Dovecot] replication howto

2012-03-19 Thread Michael Grimm
Hi -- On 15.03.2012 22:05, Timo Sirainen wrote: On 15.3.2012, at 22.48, Michael Grimm wrote: Actually it's a bad idea to use root for ssh from a security point of view. A hacked root account isn't fun. Thus, normally one needs to explicitly change the config of the sshd daemon to allow root l

Re: [Dovecot] replication howto

2012-03-16 Thread Matteo Cazzador
Hi, Solved! i add at my sql SELECT maildir, 1000 AS uid, 1000 AS gid, '/home/domini-posta/netlite.locale/matteo' as mail, '/home/domini-posta/netlite.locale/matteo' as home FROM mailbox WHERE username = 'matteo@netlite.locale' Now i've see first replication going!!! thank's everybody I hope

Re: [Dovecot] replication howto

2012-03-16 Thread Matteo Cazzador
Hi, with this changes first step is passed: I decomment this #dsync_remote_cmd = ssh -p 22 -l%{login} %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} i active and add absolute path of doveadm dsync_remote_cmd = ssh -p 22 -l%{login} %{host} /usr/local/bin/doveadm dsync-server

Re: [Dovecot] replication howto

2012-03-16 Thread Matteo Cazzador
Hi, i obtain the same error Mar 16 13:02:01 Gentoo_cyrus_imap dovecot: dsync-local(matteo@netlite.locale): Error: remote: bash: doveadm: command not found Mar 16 13:02:01 Gentoo_cyrus_imap dovecot: dsync-local(matteo@netlite.locale): Error: read() from worker server failed: EOF i've create vmail

Re: [Dovecot] replication howto

2012-03-16 Thread Matteo Cazzador
Hi, thank's everybody, today afternoon i apply the suggest and i test solution. I post the actual configuration that i will test: vmail users is present too, i create ssh-keygen for users vmail and relative home directory and permit ssh with no password with user vmail on two servers. Then i use

Re: [Dovecot] replication howto

2012-03-15 Thread Timo Sirainen
Plus the scripts that 1) when calling ssh dsync first writes the username to stdout (before dsync starts communicating) and 2) dsync.sh on remote first reads the username from stdin, before execing dsync itself Because it's not possible to give -u $username parameter in the authorized_keys c

Re: [Dovecot] replication howto

2012-03-15 Thread David Ford
in ~privilgeduser/.ssh/authorized keys: from= cmd=dsync.sh pubkey... On 03/15/2012 05:05 PM, Timo Sirainen wrote: Then again it's safer to use system user accounts than a single vmail account that has access to everyone's emails. And if you allow ssh login only with public key authentication I

Re: [Dovecot] replication howto

2012-03-15 Thread Timo Sirainen
On 15.3.2012, at 22.48, Michael Grimm wrote: > On 15.03.2012, at 18:57, Matteo Cazzador wrote: > >> Hi, yes it'a good idea but i'm using now root i hope this not >> invalid all > > Actually it's a bad idea to use root for ssh from a security point > of view. A hacked root account isn't fun. Thu

Re: [Dovecot] replication howto

2012-03-15 Thread Michael Grimm
Hi -- On 15.03.2012, at 18:57, Matteo Cazzador wrote: > Hi, yes it'a good idea but i'm using now root i hope this not > invalid all Actually it's a bad idea to use root for ssh from a security point of view. A hacked root account isn't fun. Thus, normally one needs to explicitly change the con

Re: [Dovecot] replication howto

2012-03-15 Thread Matteo Cazzador
Hi, yes it'a good idea but i'm using now root i hope this not invalid all I obtain this error but maybe i need some pause Mar 15 18:55:28 Gentoo_cyrus_imap dovecot: dsync-local(matteo@netlite.locale): Error: remote: bash: doveadm: command not found Mar 15 18:55:28 Gentoo_cyrus_imap dovecot: dsync

Re: [Dovecot] replication howto

2012-03-15 Thread Michael Grimm
Hi -- On 15.03.2012, at 18:16, Matteo Cazzador wrote: > with virtual user (i have no system user ) and there are not ssh > account. So i must use a dedicate account for replication (ssh) > that must act sync for all virtual mail account. Yes, that's what I use. I did create a dedicated account f

Re: [Dovecot] replication howto

2012-03-15 Thread Matteo Cazzador
Hi, thank's a lot! for your detailed answer. About ssh (excuse for my english) i think you correctly understand what is "my problem" with virtual user (i have no system user ) and there are not ssh account. So i must use a dedicate account for replication (ssh) that must act sync for all virtual m

Re: [Dovecot] replication howto

2012-03-15 Thread Michael Grimm
Hi -- On 15.03.2012, at 17:42, Matteo Cazzador wrote: > Hello, excuse me but there is some documentation about replication now? Not that I'm aware of. > I dont' understand where i must put the lines below (dovecot.conf? , > 20-imap?) You can put them wherever you wish, as long as you include t