Univention Bugzilla – Bug 33143
univention-mail-postfix: mention dep. of SSL/TLS support on univention-sasl in UCRV description
Last modified: 2019-01-03 07:18:49 CET
The Postfix configutation file /etc/postfix/master.cf is created by a template from the package univention-mail-postfix. For Port 465 (SMTPS) the option smtpd_sasl_auth_enable is set to "yes" by the template. Bug #23565 only introduced dependencies for univention-mail-server and univention-mail-cyrus. This will at least leave SASL uninstalled for the zarafa4ucs integration package where univention-mail-postfix is installed through a dependency.
This is still true (and bad) for UCS 4. Ticket#2015031021000471 shows that sasl is still not installed when zarafa is installed. Postfix does not accept mail vis smtps then.
Yes, this is very annoying. Maybe we can move the package dependency univention-sasl from univention-mail-server to univention-mail-postfix.
(In reply to Felix Botner from comment #2) > Yes, this is very annoying. Maybe we can move the package dependency > univention-sasl from univention-mail-server to univention-mail-postfix. univention-mail-postfix is installed on every UCS system which would imply that univention-sasl is also installed on every UCS system. I think the zarafa4ucs package should add a dependency to univention-sasl AND univention-mail-postfix. > Postfix does not accept mail vis smtps then. If univention-sasl is not installed, this should be also the case for port 25/smtp.
Occurred again
As discussed internally, this is currently mainly an issue of the zarafa integration packages (missing dependency to univention-sasl). A new issue in zarafa's GIRA is going to be created. Despite that, the package univention-mail-postfix/univention-mail-server should be improved by adding comments to UCR variable description and univention-mail-server.postinst that mention the required dependency to univention-sasl.
FYI: The Zarafa App since version 7.1.12 on UCS 3.2 and 4.0 will install univention-sasl by default
This issue has been filled against UCS 4.1. The maintenance with bug and security fixes for UCS 4.1 has ended on 5st of April 2018. Customers still on UCS 4.1 are encouraged to update to UCS 4.3. Please contact your partner or Univention for any questions. If this issue still occurs in newer UCS versions, please use "Clone this bug" or simply reopen the issue. In this case please provide detailed information on how this issue is affecting you.