Univention Bugzilla – Bug 45193
Need SPF and DKIM support for POSTFIX in UCS 4.2.x - postfix components not available to install
Last modified: 2017-09-15 14:06:39 CEST
Postfix in UCS 4.2.x and onward absolutely needs to support SMTP security standards for DKIM and SPF fully. It is not possible to install the necessary spf and dkim postfix and opendkim etc components either with univention-install command or using apt-get install. Components are not found, but are standard in Debian8 and ubuntu .deb packages. Why or how has this possible been overlooked? This bug has been registered since UCS 3.x and apparently has not been resolved. This creates SERIOUS concerns for SMTP email security, blacklisting risks, mail delivery issues etc. Please fix this ASAP. URGENT. These are instructions for normally how to get this working on standard Debian8. WHY has Univention removed this support from postfix and the OS for UCS? Doesn't rally make sense. univention-install opendkim opendkim-tools postfix-policyd-spf-python postfix-pcre -bash: univention-install: command not found xxxxx@portal:~$ sudo univention-install opendkim opendkim-tools postfix-policyd-spf-python postfix-pcre Get:1 https://updates.software-univention.de 4.0-0/all/ InRelease [3 B] Ign https://updates.software-univention.de 4.0-0/all/ InRelease Get:2 https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ InRelease [292 B] Ign https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ InRelease Get:3 https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ InRelease [294 B] Ign https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ InRelease Get:4 https://updates.software-univention.de 4.0-0/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.0-0/amd64/ InRelease Get:5 https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ InRelease [292 B] Ign https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ InRelease Get:6 https://updates.software-univention.de 4.0-1/all/ InRelease [3 B] Ign https://updates.software-univention.de 4.0-1/all/ InRelease Get:7 https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ InRelease [294 B] Ign https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ InRelease Get:8 https://updates.software-univention.de 4.0-1/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.0-1/amd64/ InRelease Get:9 https://appcenter.software-univention.de kopano-core_20170530164016/all/ InRelease [285 B] Ign https://appcenter.software-univention.de kopano-core_20170530164016/all/ InRelease Get:10 https://updates.software-univention.de 4.0-2/all/ InRelease [3 B] Ign https://updates.software-univention.de 4.0-2/all/ InRelease Get:11 https://appcenter.software-univention.de kopano-core_20170530164016/amd64/ InRelease [287 B] Ign https://appcenter.software-univention.de kopano-core_20170530164016/amd64/ InRelease Get:12 https://updates.software-univention.de 4.0-2/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.0-2/amd64/ InRelease Get:13 https://appcenter.software-univention.de kopano-webapp_20170530164135/all/ InRelease [287 B] Ign https://appcenter.software-univention.de kopano-webapp_20170530164135/all/ InRelease Get:14 https://updates.software-univention.de 4.0-3/all/ InRelease [3 B] Ign https://updates.software-univention.de 4.0-3/all/ InRelease Get:15 https://appcenter.software-univention.de kopano-webapp_20170530164135/amd64/ InRelease [289 B] Ign https://appcenter.software-univention.de kopano-webapp_20170530164135/amd64/ InRelease Get:16 https://updates.software-univention.de 4.0-3/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.0-3/amd64/ InRelease Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ Release.gpg Get:17 https://updates.software-univention.de 4.0-4/all/ InRelease [3 B] Ign https://updates.software-univention.de 4.0-4/all/ InRelease Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ Release.gpg Get:18 https://updates.software-univention.de 4.0-4/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.0-4/amd64/ InRelease Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ Release.gpg Get:19 https://updates.software-univention.de 4.0-5/all/ InRelease [3 B] Ign https://updates.software-univention.de 4.0-5/all/ InRelease Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ Release.gpg Get:20 https://updates.software-univention.de 4.0-5/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.0-5/amd64/ InRelease Hit https://appcenter.software-univention.de kopano-core_20170530164016/all/ Release.gpg Get:21 https://updates.software-univention.de 4.1-0/all/ InRelease [3 B] Ign https://updates.software-univention.de 4.1-0/all/ InRelease Hit https://appcenter.software-univention.de kopano-core_20170530164016/amd64/ Release.gpg Get:22 https://updates.software-univention.de 4.1-0/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.1-0/amd64/ InRelease Hit https://appcenter.software-univention.de kopano-webapp_20170530164135/all/ Release.gpg Get:23 https://updates.software-univention.de 4.1-1/all/ InRelease [3 B] Ign https://updates.software-univention.de 4.1-1/all/ InRelease Hit https://appcenter.software-univention.de kopano-webapp_20170530164135/amd64/ Release.gpg Get:24 https://updates.software-univention.de 4.1-1/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.1-1/amd64/ InRelease Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ Release Get:25 https://updates.software-univention.de 4.1-2/all/ InRelease [3 B] Ign https://updates.software-univention.de 4.1-2/all/ InRelease Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ Release Get:26 https://updates.software-univention.de 4.1-2/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.1-2/amd64/ InRelease Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ Release Get:27 https://updates.software-univention.de 4.1-3/all/ InRelease [3 B] Ign https://updates.software-univention.de 4.1-3/all/ InRelease Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ Release Get:28 https://updates.software-univention.de 4.1-3/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.1-3/amd64/ InRelease Hit https://appcenter.software-univention.de kopano-core_20170530164016/all/ Release Get:29 https://updates.software-univention.de 4.1-4/all/ InRelease [3 B] Ign https://updates.software-univention.de 4.1-4/all/ InRelease Hit https://appcenter.software-univention.de kopano-core_20170530164016/amd64/ Release Get:30 https://updates.software-univention.de 4.1-4/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.1-4/amd64/ InRelease Hit https://appcenter.software-univention.de kopano-webapp_20170530164135/all/ Release Get:31 https://updates.software-univention.de 4.2-0/all/ InRelease [3 B] Ign https://updates.software-univention.de 4.2-0/all/ InRelease Hit https://appcenter.software-univention.de kopano-webapp_20170530164135/amd64/ Release Get:32 https://updates.software-univention.de 4.2-0/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.2-0/amd64/ InRelease Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ Packages Get:33 https://updates.software-univention.de 4.2-1/all/ InRelease [3 B] Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ Packages Ign https://updates.software-univention.de 4.2-1/all/ InRelease Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ Packages Get:34 https://updates.software-univention.de 4.2-1/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.2-1/amd64/ InRelease Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ Packages Get:35 https://updates.software-univention.de 4.2-1-errata/all/ InRelease [3 B] Ign https://updates.software-univention.de 4.2-1-errata/all/ InRelease Hit https://appcenter.software-univention.de kopano-core_20170530164016/all/ Packages Get:36 https://updates.software-univention.de 4.2-1-errata/amd64/ InRelease [3 B] Ign https://updates.software-univention.de 4.2-1-errata/amd64/ InRelease Hit https://appcenter.software-univention.de kopano-core_20170530164016/amd64/ Packages Hit https://updates.software-univention.de 4.0-0/all/ Release.gpg Hit https://appcenter.software-univention.de kopano-webapp_20170530164135/all/ Packages Hit https://updates.software-univention.de 4.0-0/amd64/ Release.gpg Hit https://appcenter.software-univention.de kopano-webapp_20170530164135/amd64/ Packages Hit https://updates.software-univention.de 4.0-1/all/ Release.gpg Hit https://updates.software-univention.de 4.0-1/amd64/ Release.gpg Hit https://updates.software-univention.de 4.0-2/all/ Release.gpg Hit https://updates.software-univention.de 4.0-2/amd64/ Release.gpg Hit https://updates.software-univention.de 4.0-3/all/ Release.gpg Hit https://updates.software-univention.de 4.0-3/amd64/ Release.gpg Hit https://updates.software-univention.de 4.0-4/all/ Release.gpg Hit https://updates.software-univention.de 4.0-4/amd64/ Release.gpg Hit https://updates.software-univention.de 4.0-5/all/ Release.gpg Hit https://updates.software-univention.de 4.0-5/amd64/ Release.gpg Hit https://updates.software-univention.de 4.1-0/all/ Release.gpg Hit https://updates.software-univention.de 4.1-0/amd64/ Release.gpg Hit https://updates.software-univention.de 4.1-1/all/ Release.gpg Hit https://updates.software-univention.de 4.1-1/amd64/ Release.gpg Hit https://updates.software-univention.de 4.1-2/all/ Release.gpg Hit https://updates.software-univention.de 4.1-2/amd64/ Release.gpg Hit https://updates.software-univention.de 4.1-3/all/ Release.gpg Hit https://updates.software-univention.de 4.1-3/amd64/ Release.gpg Hit https://updates.software-univention.de 4.1-4/all/ Release.gpg Hit https://updates.software-univention.de 4.1-4/amd64/ Release.gpg Hit https://updates.software-univention.de 4.2-0/all/ Release.gpg Hit https://updates.software-univention.de 4.2-0/amd64/ Release.gpg Hit https://updates.software-univention.de 4.2-1/all/ Release.gpg Hit https://updates.software-univention.de 4.2-1/amd64/ Release.gpg Hit https://updates.software-univention.de 4.2-1-errata/all/ Release.gpg Hit https://updates.software-univention.de 4.2-1-errata/amd64/ Release.gpg Hit https://updates.software-univention.de 4.0-0/all/ Release Hit https://updates.software-univention.de 4.0-0/amd64/ Release Hit https://updates.software-univention.de 4.0-1/all/ Release Hit https://updates.software-univention.de 4.0-1/amd64/ Release Hit https://updates.software-univention.de 4.0-2/all/ Release Hit https://updates.software-univention.de 4.0-2/amd64/ Release Hit https://updates.software-univention.de 4.0-3/all/ Release Hit https://updates.software-univention.de 4.0-3/amd64/ Release Hit https://updates.software-univention.de 4.0-4/all/ Release Hit https://updates.software-univention.de 4.0-4/amd64/ Release Hit https://updates.software-univention.de 4.0-5/all/ Release Hit https://updates.software-univention.de 4.0-5/amd64/ Release Hit https://updates.software-univention.de 4.1-0/all/ Release Hit https://updates.software-univention.de 4.1-0/amd64/ Release Hit https://updates.software-univention.de 4.1-1/all/ Release Hit https://updates.software-univention.de 4.1-1/amd64/ Release Hit https://updates.software-univention.de 4.1-2/all/ Release Hit https://updates.software-univention.de 4.1-2/amd64/ Release Hit https://updates.software-univention.de 4.1-3/all/ Release Hit https://updates.software-univention.de 4.1-3/amd64/ Release Hit https://updates.software-univention.de 4.1-4/all/ Release Hit https://updates.software-univention.de 4.1-4/amd64/ Release Hit https://updates.software-univention.de 4.2-0/all/ Release Hit https://updates.software-univention.de 4.2-0/amd64/ Release Hit https://updates.software-univention.de 4.2-1/all/ Release Hit https://updates.software-univention.de 4.2-1/amd64/ Release Hit https://updates.software-univention.de 4.2-1-errata/all/ Release Hit https://updates.software-univention.de 4.2-1-errata/amd64/ Release Hit https://updates.software-univention.de 4.0-0/all/ Packages Hit https://updates.software-univention.de 4.0-0/amd64/ Packages Hit https://updates.software-univention.de 4.0-1/all/ Packages Hit https://updates.software-univention.de 4.0-1/amd64/ Packages Hit https://updates.software-univention.de 4.0-2/all/ Packages Hit https://updates.software-univention.de 4.0-2/amd64/ Packages Hit https://updates.software-univention.de 4.0-3/all/ Packages Hit https://updates.software-univention.de 4.0-3/amd64/ Packages Hit https://updates.software-univention.de 4.0-4/all/ Packages Hit https://updates.software-univention.de 4.0-4/amd64/ Packages Hit https://updates.software-univention.de 4.0-5/all/ Packages Hit https://updates.software-univention.de 4.0-5/amd64/ Packages Hit https://updates.software-univention.de 4.1-0/all/ Packages Hit https://updates.software-univention.de 4.1-0/amd64/ Packages Hit https://updates.software-univention.de 4.1-1/all/ Packages Hit https://updates.software-univention.de 4.1-1/amd64/ Packages Hit https://updates.software-univention.de 4.1-2/all/ Packages Hit https://updates.software-univention.de 4.1-2/amd64/ Packages Hit https://updates.software-univention.de 4.1-3/all/ Packages Hit https://updates.software-univention.de 4.1-3/amd64/ Packages Hit https://updates.software-univention.de 4.1-4/all/ Packages Hit https://updates.software-univention.de 4.1-4/amd64/ Packages Hit https://updates.software-univention.de 4.2-0/all/ Packages Hit https://updates.software-univention.de 4.2-0/amd64/ Packages Hit https://updates.software-univention.de 4.2-1/all/ Packages Hit https://updates.software-univention.de 4.2-1/amd64/ Packages Hit https://updates.software-univention.de 4.2-1-errata/all/ Packages Hit https://updates.software-univention.de 4.2-1-errata/amd64/ Packages Reading package lists... Reading package lists... Building dependency tree... Reading state information... E: Unable to locate package opendkim E: Unable to locate package opendkim-tools E: Unable to locate package postfix-policyd-spf-python xxxx@portal:~$ sudo apt-get install opendkim opendkim-tools postfix-policyd-spf-python postfix-pcre sudo apt-get install opendkim opendkim-tools postfix-policyd-spf-python postfix-pcre Reading package lists... Done Building dependency tree Reading state information... Done E: Unable to locate package opendkim E: Unable to locate package opendkim-tools E: Unable to locate package postfix-policyd-spf-python
This really needs to be addressed and resolved asap. Has been an open issue, and reported since at least UCS 3.x URGENT SECURITY RISK HIGH
Try it this way: ucr set repository/online/unmaintained='yes' univention-install ... Bugzilla is for bug reports. For help requests try help.univention.com. Thanks, Stefan
(In reply to Stefan Gohmann from comment #2) > Try it this way: > ucr set repository/online/unmaintained='yes' > univention-install ... > > > Bugzilla is for bug reports. For help requests try help.univention.com. > > Thanks, > Stefan Stefan das geht auch nicht. Sehen Sie hier was passiert: Reading package lists... Reading package lists... Building dependency tree... Reading state information... E: Unable to locate package opendkim E: Unable to locate package opendkim-tools E: Unable to locate package postfix-policyd-spf-python Immer noch nicht gefunden fuer die packages opendkim opendkim-tools postfix-policyd-spf-python postfix-pcre und das ist ja mit ucr set repository/online/unmaintained='yes' Vielleicht ist das Problem...nach ucr set repository/online/unmaintained='yes' dann find' ich: wo unmaintained NICHT DA in /etc/apt/sources.list.d/20_ucs-online-component.list steht. Warum? #Warning: This file is auto-generated and might be overwritten by # univention-config-registry. # Please edit the following file(s) instead: #Warnung: Diese Datei wurde automatisch generiert und kann durch # univention-config-registry überschrieben werden. # Bitte bearbeiten Sie an Stelle dessen die folgende(n) Datei(en): # # /etc/univention/templates/files/etc/apt/sources.list.d/20_ucs-online-component.list # deb https://updates.software-univention.de/4.2/maintained/component/ 4.2-1-errata/all/ deb https://updates.software-univention.de/4.2/maintained/component/ 4.2-1-errata/amd64/ deb https://updates.software-univention.de/4.2/unmaintained/component/ 4.2-1-errata/all/ deb https://updates.software-univention.de/4.2/unmaintained/component/ 4.2-1-errata/amd64/ deb https://appcenter.software-univention.de/univention-repository/4.2/maintained/component/ kopano-webmeetings_20170808134523/all/ deb https://appcenter.software-univention.de/univention-repository/4.2/maintained/component/ kopano-webmeetings_20170808134523/amd64/ deb https://appcenter.software-univention.de/univention-repository/4.1/maintained/component/ kopano-webmeetings_20170808134523/all/ deb https://appcenter.software-univention.de/univention-repository/4.1/maintained/component/ kopano-webmeetings_20170808134523/amd64/ deb https://appcenter.software-univention.de/univention-repository/4.2/maintained/component/ kopano-core_20170530164016/all/ deb https://appcenter.software-univention.de/univention-repository/4.2/maintained/component/ kopano-core_20170530164016/amd64/ deb https://appcenter.software-univention.de/univention-repository/4.2/maintained/component/ kopano-webapp_20170530164135/all/ deb https://appcenter.software-univention.de/univention-repository/4.2/maintained/component/ kopano-webapp_20170530164135/amd64/
It's also working for me: # grep unmaintained /etc/apt/sources.list.d/15_ucs-online-version.list → deb http://univention-repository.knut.univention.de/4.2/unmaintained/ 4.2-0/all/ deb http://univention-repository.knut.univention.de/4.2/unmaintained/ 4.2-0/amd64/ # apt-cache policy opendkim opendkim-tools postfix-policyd-spf-python postfix-pcre opendkim: Installiert: (keine) Installationskandidat: 2.9.2-2+deb8u1 Versionstabelle: 2.9.2-2+deb8u1 0 500 http://univention-repository.knut.univention.de/4.2/unmaintained/ 4.2-0/amd64/ Packages 2.6.8-4.7.201403201616 0 500 http://univention-repository.knut.univention.de/4.0/unmaintained/ 4.0-0/amd64/ Packages opendkim-tools: Installiert: (keine) Installationskandidat: 2.9.2-2+deb8u1 Versionstabelle: 2.9.2-2+deb8u1 0 500 http://univention-repository.knut.univention.de/4.2/unmaintained/ 4.2-0/amd64/ Packages 2.6.8-4.7.201403201616 0 500 http://univention-repository.knut.univention.de/4.0/unmaintained/ 4.0-0/amd64/ Packages postfix-policyd-spf-python: Installiert: (keine) Installationskandidat: 1.3.1-1 Versionstabelle: 1.3.1-1 0 500 http://univention-repository.knut.univention.de/4.2/unmaintained/ 4.2-0/all/ Packages 1.0-2.4.201403120739 0 500 http://univention-repository.knut.univention.de/4.0/unmaintained/ 4.0-0/all/ Packages postfix-pcre: Installiert: (keine) Installationskandidat: 2.11.3-1 Versionstabelle: 2.11.3-1 0 500 http://univention-repository.knut.univention.de/4.2/maintained/ 4.2-0/amd64/ Packages 2.9.6-2.48.201403262056 0 500 http://univention-repository.knut.univention.de/4.0/unmaintained/ 4.0-0/amd64/ Packages
Set status of old resolved issues to closed.