Bug 45193 - Need SPF and DKIM support for POSTFIX in UCS 4.2.x - postfix components not available to install
Need SPF and DKIM support for POSTFIX in UCS 4.2.x - postfix components not a...
Status: CLOSED INVALID
Product: UCS
Classification: Unclassified
Component: Mail
UCS 4.2
amd64 All
: P5 critical (vote)
: ---
Assigned To: Mail maintainers
Mail maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2017-08-11 22:26 CEST by J Renquist
Modified: 2017-09-15 14:06 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Security Issue
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Security
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description J Renquist 2017-08-11 22:26:56 CEST
Postfix in UCS 4.2.x and onward absolutely needs to support SMTP security standards for DKIM and SPF fully.

It is not possible to install the necessary spf and dkim postfix and opendkim etc components either with univention-install command or using apt-get install.
Components are not found, but are standard in Debian8 and ubuntu .deb packages.

Why or how has this possible been overlooked?

This bug has been registered since UCS 3.x and apparently has not been resolved.
This creates SERIOUS concerns for SMTP email security, blacklisting risks, mail delivery issues etc.

Please fix this ASAP.
URGENT.

These are instructions for normally how to get this working on standard Debian8.
WHY has Univention removed this support from postfix and the OS for UCS? Doesn't rally make sense. 

univention-install opendkim opendkim-tools postfix-policyd-spf-python postfix-pcre
-bash: univention-install: command not found
xxxxx@portal:~$ sudo univention-install opendkim opendkim-tools postfix-policyd-spf-python postfix-pcre
Get:1 https://updates.software-univention.de 4.0-0/all/ InRelease [3 B]
Ign https://updates.software-univention.de 4.0-0/all/ InRelease
Get:2 https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ InRelease [292 B]
Ign https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ InRelease
Get:3 https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ InRelease [294 B]
Ign https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ InRelease
Get:4 https://updates.software-univention.de 4.0-0/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.0-0/amd64/ InRelease
Get:5 https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ InRelease [292 B]
Ign https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ InRelease
Get:6 https://updates.software-univention.de 4.0-1/all/ InRelease [3 B]
Ign https://updates.software-univention.de 4.0-1/all/ InRelease
Get:7 https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ InRelease [294 B]
Ign https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ InRelease
Get:8 https://updates.software-univention.de 4.0-1/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.0-1/amd64/ InRelease
Get:9 https://appcenter.software-univention.de kopano-core_20170530164016/all/ InRelease [285 B]
Ign https://appcenter.software-univention.de kopano-core_20170530164016/all/ InRelease
Get:10 https://updates.software-univention.de 4.0-2/all/ InRelease [3 B]
Ign https://updates.software-univention.de 4.0-2/all/ InRelease
Get:11 https://appcenter.software-univention.de kopano-core_20170530164016/amd64/ InRelease [287 B]
Ign https://appcenter.software-univention.de kopano-core_20170530164016/amd64/ InRelease
Get:12 https://updates.software-univention.de 4.0-2/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.0-2/amd64/ InRelease
Get:13 https://appcenter.software-univention.de kopano-webapp_20170530164135/all/ InRelease [287 B]
Ign https://appcenter.software-univention.de kopano-webapp_20170530164135/all/ InRelease
Get:14 https://updates.software-univention.de 4.0-3/all/ InRelease [3 B]
Ign https://updates.software-univention.de 4.0-3/all/ InRelease
Get:15 https://appcenter.software-univention.de kopano-webapp_20170530164135/amd64/ InRelease [289 B]
Ign https://appcenter.software-univention.de kopano-webapp_20170530164135/amd64/ InRelease
Get:16 https://updates.software-univention.de 4.0-3/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.0-3/amd64/ InRelease
Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ Release.gpg
Get:17 https://updates.software-univention.de 4.0-4/all/ InRelease [3 B]
Ign https://updates.software-univention.de 4.0-4/all/ InRelease
Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ Release.gpg
Get:18 https://updates.software-univention.de 4.0-4/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.0-4/amd64/ InRelease
Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ Release.gpg
Get:19 https://updates.software-univention.de 4.0-5/all/ InRelease [3 B]
Ign https://updates.software-univention.de 4.0-5/all/ InRelease
Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ Release.gpg
Get:20 https://updates.software-univention.de 4.0-5/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.0-5/amd64/ InRelease
Hit https://appcenter.software-univention.de kopano-core_20170530164016/all/ Release.gpg
Get:21 https://updates.software-univention.de 4.1-0/all/ InRelease [3 B]
Ign https://updates.software-univention.de 4.1-0/all/ InRelease
Hit https://appcenter.software-univention.de kopano-core_20170530164016/amd64/ Release.gpg
Get:22 https://updates.software-univention.de 4.1-0/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.1-0/amd64/ InRelease
Hit https://appcenter.software-univention.de kopano-webapp_20170530164135/all/ Release.gpg
Get:23 https://updates.software-univention.de 4.1-1/all/ InRelease [3 B]
Ign https://updates.software-univention.de 4.1-1/all/ InRelease
Hit https://appcenter.software-univention.de kopano-webapp_20170530164135/amd64/ Release.gpg
Get:24 https://updates.software-univention.de 4.1-1/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.1-1/amd64/ InRelease
Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ Release
Get:25 https://updates.software-univention.de 4.1-2/all/ InRelease [3 B]
Ign https://updates.software-univention.de 4.1-2/all/ InRelease
Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ Release
Get:26 https://updates.software-univention.de 4.1-2/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.1-2/amd64/ InRelease
Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ Release
Get:27 https://updates.software-univention.de 4.1-3/all/ InRelease [3 B]
Ign https://updates.software-univention.de 4.1-3/all/ InRelease
Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ Release
Get:28 https://updates.software-univention.de 4.1-3/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.1-3/amd64/ InRelease
Hit https://appcenter.software-univention.de kopano-core_20170530164016/all/ Release
Get:29 https://updates.software-univention.de 4.1-4/all/ InRelease [3 B]
Ign https://updates.software-univention.de 4.1-4/all/ InRelease
Hit https://appcenter.software-univention.de kopano-core_20170530164016/amd64/ Release
Get:30 https://updates.software-univention.de 4.1-4/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.1-4/amd64/ InRelease
Hit https://appcenter.software-univention.de kopano-webapp_20170530164135/all/ Release
Get:31 https://updates.software-univention.de 4.2-0/all/ InRelease [3 B]
Ign https://updates.software-univention.de 4.2-0/all/ InRelease
Hit https://appcenter.software-univention.de kopano-webapp_20170530164135/amd64/ Release
Get:32 https://updates.software-univention.de 4.2-0/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.2-0/amd64/ InRelease
Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ Packages
Get:33 https://updates.software-univention.de 4.2-1/all/ InRelease [3 B]
Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ Packages
Ign https://updates.software-univention.de 4.2-1/all/ InRelease
Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/all/ Packages
Get:34 https://updates.software-univention.de 4.2-1/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.2-1/amd64/ InRelease
Hit https://appcenter.software-univention.de kopano-webmeetings_20170808134523/amd64/ Packages
Get:35 https://updates.software-univention.de 4.2-1-errata/all/ InRelease [3 B]
Ign https://updates.software-univention.de 4.2-1-errata/all/ InRelease
Hit https://appcenter.software-univention.de kopano-core_20170530164016/all/ Packages
Get:36 https://updates.software-univention.de 4.2-1-errata/amd64/ InRelease [3 B]
Ign https://updates.software-univention.de 4.2-1-errata/amd64/ InRelease
Hit https://appcenter.software-univention.de kopano-core_20170530164016/amd64/ Packages
Hit https://updates.software-univention.de 4.0-0/all/ Release.gpg
Hit https://appcenter.software-univention.de kopano-webapp_20170530164135/all/ Packages
Hit https://updates.software-univention.de 4.0-0/amd64/ Release.gpg
Hit https://appcenter.software-univention.de kopano-webapp_20170530164135/amd64/ Packages
Hit https://updates.software-univention.de 4.0-1/all/ Release.gpg
Hit https://updates.software-univention.de 4.0-1/amd64/ Release.gpg
Hit https://updates.software-univention.de 4.0-2/all/ Release.gpg
Hit https://updates.software-univention.de 4.0-2/amd64/ Release.gpg
Hit https://updates.software-univention.de 4.0-3/all/ Release.gpg
Hit https://updates.software-univention.de 4.0-3/amd64/ Release.gpg
Hit https://updates.software-univention.de 4.0-4/all/ Release.gpg
Hit https://updates.software-univention.de 4.0-4/amd64/ Release.gpg
Hit https://updates.software-univention.de 4.0-5/all/ Release.gpg
Hit https://updates.software-univention.de 4.0-5/amd64/ Release.gpg
Hit https://updates.software-univention.de 4.1-0/all/ Release.gpg
Hit https://updates.software-univention.de 4.1-0/amd64/ Release.gpg
Hit https://updates.software-univention.de 4.1-1/all/ Release.gpg
Hit https://updates.software-univention.de 4.1-1/amd64/ Release.gpg
Hit https://updates.software-univention.de 4.1-2/all/ Release.gpg
Hit https://updates.software-univention.de 4.1-2/amd64/ Release.gpg
Hit https://updates.software-univention.de 4.1-3/all/ Release.gpg
Hit https://updates.software-univention.de 4.1-3/amd64/ Release.gpg
Hit https://updates.software-univention.de 4.1-4/all/ Release.gpg
Hit https://updates.software-univention.de 4.1-4/amd64/ Release.gpg
Hit https://updates.software-univention.de 4.2-0/all/ Release.gpg
Hit https://updates.software-univention.de 4.2-0/amd64/ Release.gpg
Hit https://updates.software-univention.de 4.2-1/all/ Release.gpg
Hit https://updates.software-univention.de 4.2-1/amd64/ Release.gpg
Hit https://updates.software-univention.de 4.2-1-errata/all/ Release.gpg
Hit https://updates.software-univention.de 4.2-1-errata/amd64/ Release.gpg
Hit https://updates.software-univention.de 4.0-0/all/ Release
Hit https://updates.software-univention.de 4.0-0/amd64/ Release
Hit https://updates.software-univention.de 4.0-1/all/ Release
Hit https://updates.software-univention.de 4.0-1/amd64/ Release
Hit https://updates.software-univention.de 4.0-2/all/ Release
Hit https://updates.software-univention.de 4.0-2/amd64/ Release
Hit https://updates.software-univention.de 4.0-3/all/ Release
Hit https://updates.software-univention.de 4.0-3/amd64/ Release
Hit https://updates.software-univention.de 4.0-4/all/ Release
Hit https://updates.software-univention.de 4.0-4/amd64/ Release
Hit https://updates.software-univention.de 4.0-5/all/ Release
Hit https://updates.software-univention.de 4.0-5/amd64/ Release
Hit https://updates.software-univention.de 4.1-0/all/ Release
Hit https://updates.software-univention.de 4.1-0/amd64/ Release
Hit https://updates.software-univention.de 4.1-1/all/ Release
Hit https://updates.software-univention.de 4.1-1/amd64/ Release
Hit https://updates.software-univention.de 4.1-2/all/ Release
Hit https://updates.software-univention.de 4.1-2/amd64/ Release
Hit https://updates.software-univention.de 4.1-3/all/ Release
Hit https://updates.software-univention.de 4.1-3/amd64/ Release
Hit https://updates.software-univention.de 4.1-4/all/ Release
Hit https://updates.software-univention.de 4.1-4/amd64/ Release
Hit https://updates.software-univention.de 4.2-0/all/ Release
Hit https://updates.software-univention.de 4.2-0/amd64/ Release
Hit https://updates.software-univention.de 4.2-1/all/ Release
Hit https://updates.software-univention.de 4.2-1/amd64/ Release
Hit https://updates.software-univention.de 4.2-1-errata/all/ Release
Hit https://updates.software-univention.de 4.2-1-errata/amd64/ Release
Hit https://updates.software-univention.de 4.0-0/all/ Packages
Hit https://updates.software-univention.de 4.0-0/amd64/ Packages
Hit https://updates.software-univention.de 4.0-1/all/ Packages
Hit https://updates.software-univention.de 4.0-1/amd64/ Packages
Hit https://updates.software-univention.de 4.0-2/all/ Packages
Hit https://updates.software-univention.de 4.0-2/amd64/ Packages
Hit https://updates.software-univention.de 4.0-3/all/ Packages
Hit https://updates.software-univention.de 4.0-3/amd64/ Packages
Hit https://updates.software-univention.de 4.0-4/all/ Packages
Hit https://updates.software-univention.de 4.0-4/amd64/ Packages
Hit https://updates.software-univention.de 4.0-5/all/ Packages
Hit https://updates.software-univention.de 4.0-5/amd64/ Packages
Hit https://updates.software-univention.de 4.1-0/all/ Packages
Hit https://updates.software-univention.de 4.1-0/amd64/ Packages
Hit https://updates.software-univention.de 4.1-1/all/ Packages
Hit https://updates.software-univention.de 4.1-1/amd64/ Packages
Hit https://updates.software-univention.de 4.1-2/all/ Packages
Hit https://updates.software-univention.de 4.1-2/amd64/ Packages
Hit https://updates.software-univention.de 4.1-3/all/ Packages
Hit https://updates.software-univention.de 4.1-3/amd64/ Packages
Hit https://updates.software-univention.de 4.1-4/all/ Packages
Hit https://updates.software-univention.de 4.1-4/amd64/ Packages
Hit https://updates.software-univention.de 4.2-0/all/ Packages
Hit https://updates.software-univention.de 4.2-0/amd64/ Packages
Hit https://updates.software-univention.de 4.2-1/all/ Packages
Hit https://updates.software-univention.de 4.2-1/amd64/ Packages
Hit https://updates.software-univention.de 4.2-1-errata/all/ Packages
Hit https://updates.software-univention.de 4.2-1-errata/amd64/ Packages
Reading package lists...
Reading package lists...
Building dependency tree...
Reading state information...
E: Unable to locate package opendkim
E: Unable to locate package opendkim-tools
E: Unable to locate package postfix-policyd-spf-python
xxxx@portal:~$ sudo apt-get install opendkim opendkim-tools postfix-policyd-spf-python postfix-pcre


sudo apt-get install opendkim opendkim-tools postfix-policyd-spf-python postfix-pcre
Reading package lists... Done
Building dependency tree       
Reading state information... Done
E: Unable to locate package opendkim
E: Unable to locate package opendkim-tools
E: Unable to locate package postfix-policyd-spf-python
Comment 1 J Renquist 2017-08-11 22:28:54 CEST
This really needs to be addressed and resolved asap.
Has been an open issue, and reported since at least UCS 3.x

URGENT

SECURITY RISK HIGH
Comment 2 Stefan Gohmann univentionstaff 2017-08-12 14:42:11 CEST
Try it this way:
 ucr set repository/online/unmaintained='yes' 
 univention-install ...


Bugzilla is for bug reports. For help requests try help.univention.com.

Thanks,
Stefan
Comment 3 J Renquist 2017-08-12 18:53:51 CEST
(In reply to Stefan Gohmann from comment #2)
> Try it this way:
>  ucr set repository/online/unmaintained='yes' 
>  univention-install ...
> 
> 
> Bugzilla is for bug reports. For help requests try help.univention.com.
> 
> Thanks,
> Stefan

Stefan das geht auch nicht.

Sehen Sie hier was passiert:
Reading package lists...
Reading package lists...
Building dependency tree...
Reading state information...
E: Unable to locate package opendkim
E: Unable to locate package opendkim-tools
E: Unable to locate package postfix-policyd-spf-python

Immer noch nicht gefunden fuer die packages opendkim opendkim-tools postfix-policyd-spf-python postfix-pcre
und das ist ja mit ucr set repository/online/unmaintained='yes'

Vielleicht ist das Problem...nach ucr set repository/online/unmaintained='yes'

dann find' ich: wo unmaintained NICHT DA in /etc/apt/sources.list.d/20_ucs-online-component.list steht. Warum? 

#Warning: This file is auto-generated and might be overwritten by
#         univention-config-registry.
#         Please edit the following file(s) instead:
#Warnung: Diese Datei wurde automatisch generiert und kann durch
#         univention-config-registry überschrieben werden.
#         Bitte bearbeiten Sie an Stelle dessen die folgende(n) Datei(en):
#
#       /etc/univention/templates/files/etc/apt/sources.list.d/20_ucs-online-component.list
#

deb https://updates.software-univention.de/4.2/maintained/component/ 4.2-1-errata/all/
deb https://updates.software-univention.de/4.2/maintained/component/ 4.2-1-errata/amd64/
deb https://updates.software-univention.de/4.2/unmaintained/component/ 4.2-1-errata/all/
deb https://updates.software-univention.de/4.2/unmaintained/component/ 4.2-1-errata/amd64/
deb https://appcenter.software-univention.de/univention-repository/4.2/maintained/component/ kopano-webmeetings_20170808134523/all/
deb https://appcenter.software-univention.de/univention-repository/4.2/maintained/component/ kopano-webmeetings_20170808134523/amd64/
deb https://appcenter.software-univention.de/univention-repository/4.1/maintained/component/ kopano-webmeetings_20170808134523/all/
deb https://appcenter.software-univention.de/univention-repository/4.1/maintained/component/ kopano-webmeetings_20170808134523/amd64/
deb https://appcenter.software-univention.de/univention-repository/4.2/maintained/component/ kopano-core_20170530164016/all/
deb https://appcenter.software-univention.de/univention-repository/4.2/maintained/component/ kopano-core_20170530164016/amd64/
deb https://appcenter.software-univention.de/univention-repository/4.2/maintained/component/ kopano-webapp_20170530164135/all/
deb https://appcenter.software-univention.de/univention-repository/4.2/maintained/component/ kopano-webapp_20170530164135/amd64/
Comment 4 Florian Best univentionstaff 2017-08-14 14:00:23 CEST
It's also working for me:

# grep unmaintained /etc/apt/sources.list.d/15_ucs-online-version.list
→
deb http://univention-repository.knut.univention.de/4.2/unmaintained/ 4.2-0/all/
deb http://univention-repository.knut.univention.de/4.2/unmaintained/ 4.2-0/amd64/

# apt-cache policy opendkim opendkim-tools postfix-policyd-spf-python postfix-pcre
opendkim:
  Installiert:           (keine)
  Installationskandidat: 2.9.2-2+deb8u1
  Versionstabelle:
     2.9.2-2+deb8u1 0
        500 http://univention-repository.knut.univention.de/4.2/unmaintained/ 4.2-0/amd64/ Packages
     2.6.8-4.7.201403201616 0
        500 http://univention-repository.knut.univention.de/4.0/unmaintained/ 4.0-0/amd64/ Packages
opendkim-tools:
  Installiert:           (keine)
  Installationskandidat: 2.9.2-2+deb8u1
  Versionstabelle:
     2.9.2-2+deb8u1 0
        500 http://univention-repository.knut.univention.de/4.2/unmaintained/ 4.2-0/amd64/ Packages
     2.6.8-4.7.201403201616 0
        500 http://univention-repository.knut.univention.de/4.0/unmaintained/ 4.0-0/amd64/ Packages
postfix-policyd-spf-python:
  Installiert:           (keine)
  Installationskandidat: 1.3.1-1
  Versionstabelle:
     1.3.1-1 0
        500 http://univention-repository.knut.univention.de/4.2/unmaintained/ 4.2-0/all/ Packages
     1.0-2.4.201403120739 0
        500 http://univention-repository.knut.univention.de/4.0/unmaintained/ 4.0-0/all/ Packages
postfix-pcre:
  Installiert:           (keine)
  Installationskandidat: 2.11.3-1
  Versionstabelle:
     2.11.3-1 0
        500 http://univention-repository.knut.univention.de/4.2/maintained/ 4.2-0/amd64/ Packages
     2.9.6-2.48.201403262056 0
        500 http://univention-repository.knut.univention.de/4.0/unmaintained/ 4.0-0/amd64/ Packages
Comment 5 Stefan Gohmann univentionstaff 2017-09-15 14:06:39 CEST
Set status of old resolved issues to closed.