Betreibt man einen Mailserver mit vielen virtuellen Domains und hat auch noch mehrere Administratoren, die sich um die Neuanlage der Nutzerkonten und deren Pflege kümmern, wird es bei meist etwas komplizierter. Entweder man braucht ein mächtigen LDAP-Server und zugehörige versierte Administratoren, Admins mit Konsolen-Zugang zum IMAP- und Postfix-Server oder man greift auf eine einfache WEB-GUI zum Verwalten der Maildomänen und Postfächer zurück.

Wir werden nun in diesem Konfigurationsbeispiel auf eine mySQL-Datenbank als Datenbankbackendsystem und auf Postfixadmin als WEB-GUI für die Administratoren zurückgreifen.

Als erstes holen wir uns das aktuelle Programmarchiv von der Projektseite bei Sourceforge.

Wir wechseln als erstes in unser lokales Paketverzeichnis; falls wir dieses noch nicht angelegt haben, erstellen wir ggf. das fehlende Verzeichnis.

 # mkdir -p /usr/local/src/packages/

 # cd /usr/local/src/packages/

Dann laden wir das tar.gz-Archiv auf unseren Webserver herunter.

 # wget https://downloads.sourceforge.net/project/postfixadmin/postfixadmin/postfixadmin-3.1/postfixadmin-3.1.tar.gz

Im nächsten Schritt entpacken wir das Verzeichnis in den Webseiten-Speicherbereiches unseres Apache-Webservers.

 # tar -zxf postfixadmin-3.1.tar.gz -C /srv/www/html/

Den Inhalt des Zielverzeichnis enthält sieht nun wie folgt aus:

/srv/www/html/postfixadmin-3.1/
├── ADDITIONS
│   ├── change_password.tgz
│   ├── cleanupdirs.pl
│   ├── convert-passwd-to-postfixadmin.pl
│   ├── cyrus
│   │   ├── Changelog
│   │   ├── cyrus.conf
│   │   ├── cyrus-mailbox-postcreation.pl
│   │   ├── cyrus-mailbox-postdelete.pl
│   │   ├── cyrus-mailbox-postedit.pl
│   │   ├── README-ES.txt
│   │   └── README.txt
│   ├── delete-mailq-by-domain.pl
│   ├── fetchmail.pl
│   ├── import_users_from_csv.py
│   ├── mailbox_remover.pl
│   ├── mkeveryone.pl
│   ├── pfa_maildir_cleanup.pl
│   ├── postfixadmin-domain-postdeletion.sh
│   ├── postfixadmin-mailbox-postcreation.sh
│   ├── postfixadmin-mailbox-postdeletion.sh
│   ├── quota_usage.pl
│   ├── README.TXT
│   ├── squirrelmail-plugin
│   │   ├── common.php
│   │   ├── config.php.sample
│   │   ├── debian
│   │   │   ├── changelog
│   │   │   ├── conffiles
│   │   │   ├── control
│   │   │   ├── copyright
│   │   │   ├── docs
│   │   │   ├── files
│   │   │   ├── postfixadmin-squirrelmail.dirs
│   │   │   ├── postinst
│   │   │   ├── README.Debian
│   │   │   └── rules
│   │   ├── functions.inc.php
│   │   ├── index.php
│   │   ├── INSTALL
│   │   ├── LICENSE.txt
│   │   ├── locale
│   │   │   ├── build.sh
│   │   │   ├── cs_CZ
│   │   │   │   └── LC_MESSAGES
│   │   │   │       ├── postfixadmin.mo
│   │   │   │       └── postfixadmin.po
│   │   │   ├── da_DK
│   │   │   │   └── LC_MESSAGES
│   │   │   │       ├── postfixadmin.mo
│   │   │   │       └── postfixadmin.po
│   │   │   ├── de_DE
│   │   │   │   └── LC_MESSAGES
│   │   │   │       ├── postfixadmin.mo
│   │   │   │       └── postfixadmin.po
│   │   │   ├── hu_HU
│   │   │   │   └── LC_MESSAGES
│   │   │   │       ├── postfixadmin.mo
│   │   │   │       └── postfixadmin.po
│   │   │   ├── it_IT
│   │   │   │   └── LC_MESSAGES
│   │   │   │       └── postfixadmin.po
│   │   │   ├── nl_NL
│   │   │   │   └── LC_MESSAGES
│   │   │   │       ├── postfixadmin.mo
│   │   │   │       └── postfixadmin.po
│   │   │   ├── pl_PL
│   │   │   │   └── LC_MESSAGES
│   │   │   │       ├── postfixadmin.mo
│   │   │   │       └── postfixadmin.po
│   │   │   └── pt_BR
│   │   │       └── LC_MESSAGES
│   │   │           ├── postfixadmin.mo
│   │   │           └── postfixadmin.po
│   │   ├── po
│   │   │   └── postfixadmin.po
│   │   ├── postfixadmin_changepass.php
│   │   ├── postfixadmin_forward.php
│   │   ├── postfixadmin_vacation.php
│   │   ├── README.md
│   │   ├── setup.php
│   │   └── version
│   └── virtualmaildel.php
├── backup.php
├── broadcast-message.php
├── calendar.js
├── CHANGELOG.TXT
├── common.php
├── config.inc.php
├── configs
│   └── menu.conf
├── css
│   ├── calendar.css
│   └── default.css
├── delete.php
├── DOCUMENTS
│   ├── BACKUP_MX.txt
│   ├── DOVECOT.txt
│   ├── FAQ.txt
│   ├── HORDE.txt
│   ├── LANGUAGE.txt
│   ├── POSTFIXADMIN.txt
│   ├── POSTFIX_CONF.txt
│   ├── screenshots
│   │   ├── postfixadmin-admin-create-alias.jpg
│   │   ├── postfixadmin-admin-create-domain.jpg
│   │   ├── postfixadmin-admin-create-mailbox.jpg
│   │   ├── postfixadmin-admin-domain-list.jpg
│   │   ├── postfixadmin-admin-virtual-list.jpg
│   │   ├── postfixadmin-inital-welcome.jpg
│   │   ├── postfixadmin-mail-admin-login.jpg
│   │   ├── postfixadmin-user-change-forward.jpg
│   │   ├── postfixadmin-user-overview.jpg
│   │   ├── postfixadmin-user-vacation.jpg
│   │   └── README.txt
│   ├── SECURITY.txt
│   ├── SUPERADMIN.txt
│   └── UPGRADE.txt
├── editactive.php
├── edit.php
├── favicon.ico
├── functions.inc.php
├── GPL-LICENSE.TXT
├── images
│   ├── arrow-l.png
│   ├── arrow-r.png
│   ├── arrow-u.png
│   ├── calendar
│   │   ├── cal.gif
│   │   ├── next_mon.gif
│   │   ├── next_year.gif
│   │   ├── no_cal.gif
│   │   ├── pixel.gif
│   │   ├── prev_mon.gif
│   │   ├── prev_year.gif
│   │   ├── shade_bl.png
│   │   ├── shade_bm.png
│   │   ├── shade_br.png
│   │   ├── shade_mr.png
│   │   └── shade_tr.png
│   ├── index.php
│   ├── logo-default.png
│   ├── mail_bg.gif
│   ├── postbox.png
│   ├── postfixadmin2.png
│   ├── postfixadmin2.xcf
│   ├── postfixadmin.png
│   └── quota-colors.png
├── index.php
├── INSTALL.TXT
├── languages
│   ├── bg.lang
│   ├── ca.lang
│   ├── cn.lang
│   ├── cs.lang
│   ├── da.lang
│   ├── de.lang
│   ├── en.lang
│   ├── es.lang
│   ├── et.lang
│   ├── eu.lang
│   ├── fi.lang
│   ├── fo.lang
│   ├── fr.lang
│   ├── hr.lang
│   ├── hu.lang
│   ├── index.php
│   ├── is.lang
│   ├── it.lang
│   ├── ja.lang
│   ├── language.php
│   ├── language-update.sh
│   ├── lt.lang
│   ├── mk.lang
│   ├── nb.lang
│   ├── nl.lang
│   ├── nn.lang
│   ├── pl.lang
│   ├── pt-br.lang
│   ├── ro.lang
│   ├── ru.lang
│   ├── sk.lang
│   ├── sl.lang
│   ├── sv.lang
│   ├── tr.lang
│   └── tw.lang
├── LICENSE.TXT
├── list.php
├── list-virtual.php
├── login.php
├── main.php
├── model
│   ├── AdminHandler.php
│   ├── AdminpasswordHandler.php
│   ├── AliasdomainHandler.php
│   ├── AliasHandler.php
│   ├── CliDelete.php
│   ├── CliEdit.php
│   ├── CliHelp.php
│   ├── CliScheme.php
│   ├── CliView.php
│   ├── Config.php
│   ├── DomainHandler.php
│   ├── FetchmailHandler.php
│   ├── MailboxHandler.php
│   ├── PFAHandler.php
│   └── VacationHandler.php
├── README.md
├── scripts
│   ├── postfixadmin-cli
│   ├── postfixadmin-cli.php
│   ├── shells
│   │   ├── mailbox.php
│   │   └── shell.php
│   └── snippets
│       ├── crypt.php
│       ├── crypt_test.php
│       └── dovecot_crypt.php
├── sendmail.php
├── setup.php
├── smarty
│   ├── COPYING.lib
│   ├── libs
│   │   ├── Autoloader.php
│   │   ├── debug.tpl
│   │   ├── plugins
│   │   │   ├── block.textformat.php
│   │   │   ├── function.counter.php
│   │   │   ├── function.cycle.php
│   │   │   ├── function.fetch.php
│   │   │   ├── function.html_checkboxes.php
│   │   │   ├── function.html_image.php
│   │   │   ├── function.html_options.php
│   │   │   ├── function.html_radios.php
│   │   │   ├── function.html_select_date.php
│   │   │   ├── function.html_select_time.php
│   │   │   ├── function.html_table.php
│   │   │   ├── function.mailto.php
│   │   │   ├── function.math.php
│   │   │   ├── modifier.capitalize.php
│   │   │   ├── modifiercompiler.cat.php
│   │   │   ├── modifiercompiler.count_characters.php
│   │   │   ├── modifiercompiler.count_paragraphs.php
│   │   │   ├── modifiercompiler.count_sentences.php
│   │   │   ├── modifiercompiler.count_words.php
│   │   │   ├── modifiercompiler.default.php
│   │   │   ├── modifiercompiler.escape.php
│   │   │   ├── modifiercompiler.from_charset.php
│   │   │   ├── modifiercompiler.indent.php
│   │   │   ├── modifiercompiler.lower.php
│   │   │   ├── modifiercompiler.noprint.php
│   │   │   ├── modifiercompiler.string_format.php
│   │   │   ├── modifiercompiler.strip.php
│   │   │   ├── modifiercompiler.strip_tags.php
│   │   │   ├── modifiercompiler.to_charset.php
│   │   │   ├── modifiercompiler.unescape.php
│   │   │   ├── modifiercompiler.upper.php
│   │   │   ├── modifiercompiler.wordwrap.php
│   │   │   ├── modifier.date_format.php
│   │   │   ├── modifier.debug_print_var.php
│   │   │   ├── modifier.escape.php
│   │   │   ├── modifier.needle.php
│   │   │   ├── modifier.regex_replace.php
│   │   │   ├── modifier.replace.php
│   │   │   ├── modifier.spacify.php
│   │   │   ├── modifier.truncate.php
│   │   │   ├── outputfilter.trimwhitespace.php
│   │   │   ├── shared.escape_special_chars.php
│   │   │   ├── shared.literal_compiler_param.php
│   │   │   ├── shared.make_timestamp.php
│   │   │   ├── shared.mb_str_replace.php
│   │   │   ├── shared.mb_unicode.php
│   │   │   ├── shared.mb_wordwrap.php
│   │   │   └── variablefilter.htmlspecialchars.php
│   │   ├── SmartyBC.class.php
│   │   ├── Smarty.class.php
│   │   └── sysplugins
│   │       ├── smarty_cacheresource_custom.php
│   │       ├── smarty_cacheresource_keyvaluestore.php
│   │       ├── smarty_cacheresource.php
│   │       ├── smartycompilerexception.php
│   │       ├── smarty_data.php
│   │       ├── smartyexception.php
│   │       ├── smarty_internal_cacheresource_file.php
│   │       ├── smarty_internal_compile_append.php
│   │       ├── smarty_internal_compile_assign.php
│   │       ├── smarty_internal_compilebase.php
│   │       ├── smarty_internal_compile_block.php
│   │       ├── smarty_internal_compile_break.php
│   │       ├── smarty_internal_compile_call.php
│   │       ├── smarty_internal_compile_capture.php
│   │       ├── smarty_internal_compile_config_load.php
│   │       ├── smarty_internal_compile_continue.php
│   │       ├── smarty_internal_compile_debug.php
│   │       ├── smarty_internal_compile_eval.php
│   │       ├── smarty_internal_compile_extends.php
│   │       ├── smarty_internal_compile_foreach.php
│   │       ├── smarty_internal_compile_for.php
│   │       ├── smarty_internal_compile_function.php
│   │       ├── smarty_internal_compile_if.php
│   │       ├── smarty_internal_compile_include.php
│   │       ├── smarty_internal_compile_include_php.php
│   │       ├── smarty_internal_compile_insert.php
│   │       ├── smarty_internal_compile_ldelim.php
│   │       ├── smarty_internal_compile_nocache.php
│   │       ├── smarty_internal_compile_private_block_plugin.php
│   │       ├── smarty_internal_compile_private_foreachsection.php
│   │       ├── smarty_internal_compile_private_function_plugin.php
│   │       ├── smarty_internal_compile_private_modifier.php
│   │       ├── smarty_internal_compile_private_object_block_function.php
│   │       ├── smarty_internal_compile_private_object_function.php
│   │       ├── smarty_internal_compile_private_php.php
│   │       ├── smarty_internal_compile_private_print_expression.php
│   │       ├── smarty_internal_compile_private_registered_block.php
│   │       ├── smarty_internal_compile_private_registered_function.php
│   │       ├── smarty_internal_compile_private_special_variable.php
│   │       ├── smarty_internal_compile_rdelim.php
│   │       ├── smarty_internal_compile_section.php
│   │       ├── smarty_internal_compile_setfilter.php
│   │       ├── smarty_internal_compile_shared_inheritance.php
│   │       ├── smarty_internal_compile_while.php
│   │       ├── smarty_internal_config_file_compiler.php
│   │       ├── smarty_internal_configfilelexer.php
│   │       ├── smarty_internal_configfileparser.php
│   │       ├── smarty_internal_data.php
│   │       ├── smarty_internal_debug.php
│   │       ├── smarty_internal_extension_clear.php
│   │       ├── smarty_internal_extension_handler.php
│   │       ├── smarty_internal_method_addautoloadfilters.php
│   │       ├── smarty_internal_method_adddefaultmodifiers.php
│   │       ├── smarty_internal_method_appendbyref.php
│   │       ├── smarty_internal_method_append.php
│   │       ├── smarty_internal_method_assignbyref.php
│   │       ├── smarty_internal_method_assignglobal.php
│   │       ├── smarty_internal_method_clearallassign.php
│   │       ├── smarty_internal_method_clearallcache.php
│   │       ├── smarty_internal_method_clearassign.php
│   │       ├── smarty_internal_method_clearcache.php
│   │       ├── smarty_internal_method_clearcompiledtemplate.php
│   │       ├── smarty_internal_method_clearconfig.php
│   │       ├── smarty_internal_method_compileallconfig.php
│   │       ├── smarty_internal_method_compilealltemplates.php
│   │       ├── smarty_internal_method_configload.php
│   │       ├── smarty_internal_method_createdata.php
│   │       ├── smarty_internal_method_getautoloadfilters.php
│   │       ├── smarty_internal_method_getconfigvars.php
│   │       ├── smarty_internal_method_getdebugtemplate.php
│   │       ├── smarty_internal_method_getdefaultmodifiers.php
│   │       ├── smarty_internal_method_getregisteredobject.php
│   │       ├── smarty_internal_method_getstreamvariable.php
│   │       ├── smarty_internal_method_gettags.php
│   │       ├── smarty_internal_method_gettemplatevars.php
│   │       ├── smarty_internal_method_loadfilter.php
│   │       ├── smarty_internal_method_loadplugin.php
│   │       ├── smarty_internal_method_mustcompile.php
│   │       ├── smarty_internal_method_registercacheresource.php
│   │       ├── smarty_internal_method_registerclass.php
│   │       ├── smarty_internal_method_registerdefaultconfighandler.php
│   │       ├── smarty_internal_method_registerdefaultpluginhandler.php
│   │       ├── smarty_internal_method_registerdefaulttemplatehandler.php
│   │       ├── smarty_internal_method_registerfilter.php
│   │       ├── smarty_internal_method_registerobject.php
│   │       ├── smarty_internal_method_registerplugin.php
│   │       ├── smarty_internal_method_registerresource.php
│   │       ├── smarty_internal_method_setautoloadfilters.php
│   │       ├── smarty_internal_method_setdebugtemplate.php
│   │       ├── smarty_internal_method_setdefaultmodifiers.php
│   │       ├── smarty_internal_method_unloadfilter.php
│   │       ├── smarty_internal_method_unregistercacheresource.php
│   │       ├── smarty_internal_method_unregisterfilter.php
│   │       ├── smarty_internal_method_unregisterobject.php
│   │       ├── smarty_internal_method_unregisterplugin.php
│   │       ├── smarty_internal_method_unregisterresource.php
│   │       ├── smarty_internal_nocache_insert.php
│   │       ├── smarty_internal_parsetree_code.php
│   │       ├── smarty_internal_parsetree_dqcontent.php
│   │       ├── smarty_internal_parsetree_dq.php
│   │       ├── smarty_internal_parsetree.php
│   │       ├── smarty_internal_parsetree_tag.php
│   │       ├── smarty_internal_parsetree_template.php
│   │       ├── smarty_internal_parsetree_text.php
│   │       ├── smarty_internal_resource_eval.php
│   │       ├── smarty_internal_resource_extends.php
│   │       ├── smarty_internal_resource_file.php
│   │       ├── smarty_internal_resource_php.php
│   │       ├── smarty_internal_resource_registered.php
│   │       ├── smarty_internal_resource_stream.php
│   │       ├── smarty_internal_resource_string.php
│   │       ├── smarty_internal_runtime_cachemodify.php
│   │       ├── smarty_internal_runtime_codeframe.php
│   │       ├── smarty_internal_runtime_filterhandler.php
│   │       ├── smarty_internal_runtime_foreach.php
│   │       ├── smarty_internal_runtime_getincludepath.php
│   │       ├── smarty_internal_runtime_hhvm.php
│   │       ├── smarty_internal_runtime_inheritance.php
│   │       ├── smarty_internal_runtime_subtemplate.php
│   │       ├── smarty_internal_runtime_tplfunction.php
│   │       ├── smarty_internal_runtime_updatecache.php
│   │       ├── smarty_internal_runtime_updatescope.php
│   │       ├── smarty_internal_runtime_validatecompiled.php
│   │       ├── smarty_internal_runtime_var.php
│   │       ├── smarty_internal_runtime_writefile.php
│   │       ├── smarty_internal_smartytemplatecompiler.php
│   │       ├── smarty_internal_templatebase.php
│   │       ├── smarty_internal_templatecompilerbase.php
│   │       ├── smarty_internal_templatelexer.php
│   │       ├── smarty_internal_templateparser.php
│   │       ├── smarty_internal_template.php
│   │       ├── smarty_internal_testinstall.php
│   │       ├── smarty_internal_undefined.php
│   │       ├── smarty_resource_custom.php
│   │       ├── smarty_resource.php
│   │       ├── smarty_resource_recompiled.php
│   │       ├── smarty_resource_uncompiled.php
│   │       ├── smarty_security.php
│   │       ├── smarty_template_cached.php
│   │       ├── smarty_template_compiled.php
│   │       ├── smarty_template_config.php
│   │       ├── smarty_template_resource_base.php
│   │       ├── smarty_template_source.php
│   │       ├── smarty_undefined_variable.php
│   │       └── smarty_variable.php
│   └── smarty_version
├── smarty.inc.php
├── templates
│   ├── backupwarning.tpl
│   ├── broadcast-message.tpl
│   ├── editform.tpl
│   ├── flash_error.tpl
│   ├── footer.tpl
│   ├── header.php
│   ├── header.tpl
│   ├── index.tpl
│   ├── list.tpl
│   ├── list-virtual_alias_domain.tpl
│   ├── list-virtual_alias.tpl
│   ├── list-virtual_mailbox.tpl
│   ├── list-virtual.tpl
│   ├── login.tpl
│   ├── main.tpl
│   ├── menu.tpl
│   ├── message.tpl
│   ├── password.tpl
│   ├── sendmail.tpl
│   ├── users_edit-alias.tpl
│   ├── users_main.tpl
│   ├── users_menu.tpl
│   ├── vacation.tpl
│   └── viewlog.tpl
├── tests
│   ├── common.php
│   ├── RemoteAliasTest.php
│   ├── RemoteTest.php
│   ├── RemoteUserTest.php
│   └── RemoteVacationTest.php
├── upgrade.php
├── users
│   ├── calendar.js
│   ├── css
│   │   ├── calendar.css
│   │   └── default.css
│   ├── edit-alias.php
│   ├── images
│   │   └── calendar
│   │       ├── cal.gif
│   │       ├── next_mon.gif
│   │       ├── next_year.gif
│   │       ├── no_cal.gif
│   │       ├── pixel.gif
│   │       ├── prev_mon.gif
│   │       ├── prev_year.gif
│   │       ├── shade_bl.png
│   │       ├── shade_bm.png
│   │       ├── shade_br.png
│   │       ├── shade_mr.png
│   │       └── shade_tr.png
│   ├── index.php
│   ├── login.php
│   ├── main.php
│   ├── password.php
│   └── vacation.php
├── vacation.php
├── viewlog.php
├── VIRTUAL_VACATION
│   ├── FILTER_README
│   ├── index.php
│   ├── INSTALL.TXT
│   ├── tests
│   │   ├── asterisk-email.txt
│   │   ├── facebook.txt
│   │   ├── mailing-list.txt
│   │   ├── mail-myself.txt
│   │   ├── spam.txt
│   │   ├── teodor-smtp-envelope-headers.txt
│   │   ├── test-email.txt
│   │   └── test.sh
│   └── vacation.pl
└── xmlrpc.php

45 directories, 453 files

Damit bei der späteren Konfiguration der Anwendung es nicht zu der Fehlermeldung
ERROR: the templates_c directory doesn’t exist or isn’t writeable for the webserver
kommt, legen wir noch das fehlende Verzeichnis templates_c an.

 # mkdir /srv/www/html/postfixadmin-3.1/templates_c

Da wir den Alternativer FastCGI Process Manager einsetzen passen wir noch die Verzeichnis und Dateirechte entsprechend an.

 # chown php-fpm: /srv/www/html/postfixadmin-3.1/ -R

Wichtige Informationen zur Installation finden wir in der Datei INSTALL.TXT.

 # less /srv/www/html/postfixadmin-*/INSTALL.TXT

/srv/www/html/postfixadmin-*/INSTALL.TXT

#
# Postfix Admin
# by Mischa Peters <mischa at high5 dot net>
# Copyright (c) 2002 - 2005 High5!
# Licensed under GPL for more info check GPL-LICENSE.TXT
#
 
REQUIRED!!
----------
- You are using Postfix 2.0 or higher.
- You are using Apache 1.3.27 / Lighttpd 1.3.15 or higher.
- You are using PHP 5.1.2 or higher.
- You are using MySQL 3.23 or higher (5.x recommended) OR PostgreSQL 7.4 (or higher)
 
 
READ THIS FIRST!
----------------
When this is an upgrade from a previous version of Postfix Admin, please read 
DOCUMENTS/UPGRADE.TXT also!
 
If you need to setup Postfix to be able to handle Virtual Domains and Virtual
Users check out:
 
  - the PostfixAdmin documentation in the DOCUMENTS/ directory
  - our wiki at https://sourceforge.net/p/postfixadmin/wiki/
 
There are also lots of HOWTOs around the web. Be warned that many of them 
(even those listed below) may be outdated or incomplete. 
Please stick to the PostfixAdmin documentation, and use those HOWTOs only if
you need some additional information that is missing in the PostfixAdmin 
DOCUMENTS/ folder.
  - http://codepoets.co.uk/postfixadmin-postgresql-courier-squirrelmail-debian-etch-howto-tutorial (Debian+Courier+PostgreSQL+Postfix+Postfixadmin)
  - http://bliki.rimuhosting.com/space/knowledgebase/linux/mail/postfixadmin+on+debian+sarge (Postfix+MySQL+Postfixadmin+Dovecot)
  - http://en.gentoo-wiki.com/wiki/Virtual_mail_server_using_Postfix,_Courier_and_PostfixAdmin (Postfix+MySQL+Postfixadmin+Courier)
 
 
1. Unarchive new Postfix Admin
------------------------------
Make sure that you are in your WWW directory and then unarchive the
Postfix Admin archive (whatever the filename is):
 
  $ tar -zxvf postfixadmin-$version.tgz
 
 
2. Setup a Database
-------------------
 
With your chosen/preferred database server (i.e. MySQL or PostgreSQL), 
you need to create a new database. A good name for this could be :
 
  postfix
 
The mechanics of creating the database vary depending on which server 
you are using. Most users will find using phpMyAdmin or phpPgAdmin the
easiest route.
 
If you wish to use the command line, you'll need to do something like :
 
For MySQL:
  CREATE DATABASE postfix;
  CREATE USER 'postfix'@'localhost' IDENTIFIED BY 'choose_a_password';
  GRANT ALL PRIVILEGES ON `postfix` . * TO 'postfix'@'localhost';
 
For PostgreSQL:
  CREATE USER postfix WITH PASSWORD 'whatever';
  CREATE DATABASE postfix OWNER postfix ENCODING 'unicode';
 
 
3. Configure PostfixAdmin so it can find the database
-----------------------------------------------------
 
Create a config.local.php file for your local configuration:
 
<?php
$CONF['database_type'] = 'mysqli';
$CONF['database_user'] = 'postfix';
$CONF['database_password'] = 'postfixadmin';
$CONF['database_name'] = 'postfix';
 
$CONF['configured'] = true;
?>
 
See config.inc.php for all available config options and their default value.
 
You can also edit config.inc.php instead of creating a config.local.php,
but this will make updates harder and is therefore not recommended.
 
The most important settings are those for your database server.
 
You must also change the line that says :
 
$CONF['configured'] = false;
 
to
 
$CONF['configured'] = true;
 
 
PostfixAdmin does not require write access to any files except the templates_c 
directory (smarty cache). You can therefore leave the files owned as root (or
another user); as long as the web server user (e.g. www-data) can read them, it
will be fine.
For templates_c/, allow write access (only) for the web server user (e. g. www-data).
The easiest way to do this is   chown -R www-data templates_c
 
 
4. Check settings, and create Admin user
----------------------------------------
 
Hit http://yourserver.tld/postfixadmin/setup.php in a web browser.
 
You should see a list of 'OK' messages. 
 
The setup.php script will attempt to create the database structure 
(or upgrade it if you're coming from a previous version). 
 
Assuming everything is OK you can specify a password (which you'll 
need to use setup.php again in the future); when you submit the form, 
the hashed value (which you need to enter into config.inc.php is echoed 
out - with appropriate instructions on what to do with it).
 
create the admin user using the form displayed.
 
5. Use PostfixAdmin
-------------------
 
This is all that is needed. Fire up your browser and go to the site that you
specified to host Postfix Admin.
 
6. Integration with Postfix, Dovecot etc.
-----------------------------------------
 
Now that PostfixAdmin is working, you need to do some configuration in Postfix,
Dovecot etc. so that they use the domains, mailboxes and aliases you setup in
PostfixAdmin.
 
The files in the DOCUMENTS/ directory explain which settings you need to
do/change.
 
7. XMLRPC Integration (OPTIONAL!)
--------------------------------
 
See ADDITIONS/squirrelmail-plugin
See xmlrpc.php - only a subset of Postfixadmin's functionality is currently exposed.
See config.inc.php - see xmlrpc_enabled key (defaults to off).
 
You'll need to install a copy of the Zend Framework (version 1.12.x) within Postfixadmin
or your PHP include_path (see header within xmlrpc.php).
NOTE: The XMLRPC interface is _not compatible_ with Zend Framework version 2.x.
You'll need to enable the xmlrpc link (see config.inc.php)
 
8. More information
-------------------
As of March 2007, PostfixAdmin moved to SourceForge.  For the
forum posts and source updates, see:
 
https://sourceforge.net/projects/postfixadmin
 
There is also #postfixadmin on irc.freenode.net.

Wichtige Informationen zum Upgrade einer vorhandenen Installation finden wir in der Datei UPGRADE.txt.

 # less /srv/www/html/postfixadmin-*/DOCUMENTS/UPGRADE.txt

/srv/www/html/postfixadmin-*/DOCUMENTS/UPGRADE.txt

#
# Postfix Admin
# by Mischa Peters <mischa at high5 dot net>
# Copyright (c) 2002 - 2005 High5!
# Licensed under GPL for more info check GPL-LICENSE.TXT
#
 
REQUIRED!!
----------
- You are using Postfix 2.0 or higher.
- You are using Apache 1.3.27 / Lighttpd 1.3.15 or higher.
- You are using PHP 5.1.2 or higher.
- You are using MySQL 3.23 or higher OR PostgreSQL v7.4+
 
 
READ THIS FIRST!
----------------
 
This document describes upgrading from an older PostfixAdmin version
(>= v1.5x)
 
It's recommend that you install Postfix Admin in a new folder and not
on-top of the old install!! (At the very least, make sure you have backups of 
the database and relevant filesystem!)
 
When upgrading Postfix Admin, make sure you backup your database before
running upgrade.php.
 
 
1. Backup the Database
----------------------
When you install from a previous version make sure you backup your database
first. There are a lot of changes in the database structure since Postfix Admin
1.5.4.
 
  $ mysqldump -a -u root -p > /tmp/postfixadmin-backup.sql
or
  $ pg_dump -ad -u postfix postfix > /tmp/postfixadmin-backup.sql
 
 
2. Unarchive new Postfix Admin
------------------------------
Make sure that you are in your WWW directory and then unarchive the
Postfix Admin archive (whatever the filename is):
 
  $ tar -zxvf postfixadmin-X.X.tgz
 
 
3. Change permissions
----------------------
Since the database password is stored in the config.inc.php it's a good idea
to have change the permissions for Postfix Admin.
 
  $ cd /usr/local/www/postfixadmin
  $ find -type f -print0 | xargs -0 chmod 640
  $ find -type f -print0 | xargs -0 chown root:www
 
(the last command assumes your Apache is running with group "www")
 
Since version 2.4 we use smarty templates. That means the templates_c directory
needs to be writeable for your webserver.
 
  $ chown -R www-data templates_c/
 
(if your Apache runs as user "www-data")
 
 
4. Configure
------------
Check the config.inc.php file. There you can specify settings that are
relevant to your setup.
 
Comparing config.inc.php with your previous using "diff" might save you some
time.
 
You can use a config.local.php file to contain your local settings. These will override any 
defined in config.inc.php - and save some time when upgrading to a new version of PostfixAdmin ;-)
 
5. Run setup.php
----------------------------------------
 
Access setup.php through a web browser.
 
It will attempt to upgrade your database, and also allow you to create a superadmin user.
(In case the database upgrade fails, you can run setup.php?debug=1 to see the last executed query.)
 
From version 2.3, you need to specify a setup_password in config.inc.php - 
setup.php should guide you through this process. If you do not have a setup_password, type one
into the form, and setup.php will echo out the hashed value (which needs to go into config.inc.php).
The setup_password removes the requirement for you to delete setup.php, and also closes a security hole.
 
Since version 2.2 of Postfixadmin, setup.php can perform the needed database 
updates automatically .
 
If you update from 2.1 or older, also create a superadmin account using setup.php.
 
Note that admin/ has been merged into the main directory. Login with the
superadmin account to setup domains and domain admins.
 
6. Upgrade your postfix config
------------------------------
 
Since version 2.3, PostfixAdmin supports alias domains ($CONF['alias_domain']).
If you want to use them, you have to add some queries to your postfix config -
see POSTFIX_CONF for details.
 
 
7. Done
-------
This is all that is needed. Fire up your browser and go to the site that you
specified to host Postfix Admin.

Wie Eingangs erwähnt, nutzen wir für die Verwaltung unserer Maildomänen und deren Nutzerkonten sowie Aliasen eine mySQL-Datenbank.

Wir melden uns also als berechtigter Datenbankuser an der mySQL-Datenbank an.

  # mysql -h localhost -u root -p

Enter password: 
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 141459
Server version: 5.1.73 Source distribution

Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql>

Dort legen wir als aller erst einmal eine Datenbank mit dem Namen postfix an.

 mysql> create database postfix;

 Query OK, 1 row affected (0.03 sec)

Anschließend legen wir uns einen oder mehrere Datenbankuser an, denen wir entsprechende Rechte an der Datenbank postfix einräumen. In diesem Anwendungsbeispiel gehen wir von drei Nutzern aus.

1. Postfix-Admin : Der Nutzer, der vom Webserver, also unserer WEB-GUI PostfixAdmin, aus Zugriffe vornehmen wird.
2. Postfix-Systemuser : technische User, der vom MTA¹⁾ also unserem Postfix-Server aus bei der Einlieferung der elektronischen Post die Datenbank befragen wird.
3. Dovecot-Systemuser : technische User, der vom MDA²⁾ also unserem Dovecot-IMAP Server beim Abholen der eMails durch die Nutzer die Authentifizierung und Autorisierung benötigt wird.

Also:

1. postfixadmin-user:
   Nutzer anlegen:

   mysql> CREATE USER 'pfadmin_user'@'10.0.0.97' IDENTIFIED BY 'rbgsDK39DeM2b2btx9iMHfzd';

   Query OK, 0 rows affected (0.00 sec)

   mysql> CREATE USER 'pfadmin_user'@'vml000090.dmz.nausch.org' IDENTIFIED BY 'rbgsDK39DeM2b2btx9iMHfzd';

   Query OK, 0 rows affected (0.00 sec)

   
   Nutzerberechtigungen setzen:

   mysql> GRANT ALL PRIVILEGES ON postfix.* TO 'pfadmin_user'@'10.0.0.97' IDENTIFIED BY 'rbgsDK39DeM2b2btx9iMHfzd' WITH GRANT OPTION MAX_QUERIES_PER_HOUR 0 MAX_CONNECTIONS_PER_HOUR 0 MAX_UPDATES_PER_HOUR 0 MAX_USER_CONNECTIONS 0;

   Query OK, 0 rows affected (0.00 sec)

   mysql> GRANT ALL PRIVILEGES ON postfix.* TO 'pfadmin_user'@'vml000090.dmz.nausch.org' IDENTIFIED BY 'rbgsDK39DeM2b2btx9iMHfzd' WITH GRANT OPTION MAX_QUERIES_PER_HOUR 0 MAX_CONNECTIONS_PER_HOUR 0 MAX_UPDATES_PER_HOUR 0 MAX_USER_CONNECTIONS 0;

   Query OK, 0 rows affected (0.00 sec)

   
   Berechtigungen zuweisen:

   mysql> FLUSH PRIVILEGES;

   Query OK, 0 rows affected (0.00 sec)

2. postfix_user:
   Nutzer anlegen:

   mysql> CREATE USER 'postfix_user'@'10.0.0.87' IDENTIFIED BY 'rbBgeM2b2btx9iMHfzd';

   Query OK, 0 rows affected (0.00 sec)

   mysql> CREATE USER 'postfix_user'@'smtp.dmz.nausch.org' IDENTIFIED BY 'rbBgeM2b2btx9iMHfzd';

   Query OK, 0 rows affected (0.00 sec)

   
   Berechtigungen zuweisen:

   mysql> GRANT ALL PRIVILEGES ON postfix.* TO 'postfix_user'@'10.0.0.87' IDENTIFIED BY 'rbBgeM2b2btx9iMHfzd' WITH GRANT OPTION MAX_QUERIES_PER_HOUR 0 MAX_CONNECTIONS_PER_HOUR 0 MAX_UPDATES_PER_HOUR 0 MAX_USER_CONNECTIONS 0;

   Query OK, 0 rows affected (0.00 sec)

   mysql> GRANT ALL PRIVILEGES ON postfix.* TO 'postfix_user'@'smtp.dmz.nausch.org' IDENTIFIED BY 'rbBgeM2b2btx9iMHfzd' WITH GRANT OPTION MAX_QUERIES_PER_HOUR 0 MAX_CONNECTIONS_PER_HOUR 0 MAX_UPDATES_PER_HOUR 0 MAX_USER_CONNECTIONS 0;

   Query OK, 0 rows affected (0.00 sec)

   
   Berechtigungen zuweisen:

   mysql> FLUSH PRIVILEGES;

   Query OK, 0 rows affected (0.00 sec)

3. dovecot_user:
   Nutzer anlegen:

   mysql> CREATE USER 'dovecot_user'@'10.0.0.77' IDENTIFIED BY 'GOMrG7l1bD74Ez81sUO';

   Query OK, 0 rows affected (0.00 sec)

   mysql> CREATE USER 'dovecot_user'@'imap.dmz.nausch.org' IDENTIFIED BY 'GOMrG7l1bD74Ez81sUO';

   Query OK, 0 rows affected (0.00 sec)

   
   Nutzerberechtigungen setzen:

   mysql> GRANT ALL PRIVILEGES ON postfix.* TO 'dovecot_user'@'10.0.0.77' IDENTIFIED BY 'GOMrG7l1bD74Ez81sUO' WITH GRANT OPTION MAX_QUERIES_PER_HOUR 0 MAX_CONNECTIONS_PER_HOUR 0 MAX_UPDATES_PER_HOUR 0 MAX_USER_CONNECTIONS 0;

   Query OK, 0 rows affected (0.00 sec)

   mysql> GRANT ALL PRIVILEGES ON postfix.* TO 'dovecot_user'@'imap.dmz.nausch.org' IDENTIFIED BY 'GOMrG7l1bD74Ez81sUO' WITH GRANT OPTION MAX_QUERIES_PER_HOUR 0 MAX_CONNECTIONS_PER_HOUR 0 MAX_UPDATES_PER_HOUR 0 MAX_USER_CONNECTIONS 0;

   Query OK, 0 rows affected (0.00 sec)

   
   Berechtigungen zuweisen:

   mysql> FLUSH PRIVILEGES;

   Query OK, 0 rows affected (0.00 sec)

Abschließend melden wir uns wieder von unserem Datenbankhost ab.

 mysql> quit

 Bye

Bevor wir uns auf unserem Webserver einen vHost anlegen, überprüfen wir noch, ob das Paket php-mbstring sowie php-mysql bereits im System installiert wurden.

 # yum list php70u-mbstring php70u-mysqlnd php70u-imap

Sofern eins der Pakete noch nicht installiert wurde, holen wir dies jetzt nach.

 # yum install php70u-mbstring php70u-mysqlnd php70u-imap -y

Da wir später personenbezogene Daten verarbeiten werden, setzen wir einen SSL geschützten vHOST ein. Die Definition dieses vHOSTs nehmen wir nun als nächstes vor. Wir legen uns eine passende Konfigurationsdatei im Verzeichnis /etc/httpd/conf.d/ an.

 # vim /etc/httpd/conf.d/vhost_443_postfixadmin.conf

/etc/httpd/conf.d/vhost_443_postfixadmin.conf

#
# Django : 2017-10-08
#          vHost postfixadmin
#
 
# Variablen der Hostvariablen
Define vhost postfixadmin
Define errors_log logs/${vhost}_error.log
Define access_log logs/${vhost}_access.log
Define ssl_log logs/${vhost}_ssl_request.log
 
<VirtualHost *:80>
    ServerAdmin webmaster@nausch.org
    ServerName ${vhost}.nausch.org
 
    RewriteEngine on
    RewriteCond %{HTTPS} off
    RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
 
    # Welche Logdateien sollen beschrieben werden
    SetEnvIf Remote_Addr "10\.0\.0\.117" dontlog
    ErrorLog  ${errors_log}
    CustomLog ${access_log} combined env=!dontlog
</VirtualHost>
<VirtualHost *:443>
    ServerAdmin webmaster@nausch.org
    ServerName ${vhost}.nausch.org
    ServerPath /
 
    # Wer soll Zugriff auf die Webseite(n) bekommen?
    <Proxy *>
        Options +FollowSymLinks +Multiviews -Indexes
        AllowOverride None
        AuthType Basic
        AuthName "Fuer den Zugriff auf den Webserver bitte Anmeldedaten eingeben!"
        AuthBasicProvider ldap
        AuthLDAPUrl ldaps://openldap.dmz.nausch.org:636/ou=People,dc=nausch,dc=org?uid
        AuthLDAPBindDN cn=Technischeruser,dc=nausch,dc=org
        AuthLDAPBindPassword "e1n531f!D4xIi57n38103034u!"
        AuthLDAPBindAuthoritative on
        Require ldap-user pfa-admin
    </Proxy>
 
    # Welcher Inhalt soll angezeigt bzw. auf welchen Server sollen die HTTP-Requests weitergeleitet werden?
    DocumentRoot   "/srv/www/html/postfixadmin-3.1/"
    DirectoryIndex index.php
 
    <Directory /srv/www/html/postfixadmin-3.1/>
        Options none
        AllowOverride Limit
        Require all granted
    </Directory>
 
    <LocationMatch "/(config.inc.php|configs|scripts|smarty|tests|users|VIRTUAL_VACATION)/">
        Require all denied
    </LocationMatch>
 
    <FilesMatch \.php$>
        SetHandler "proxy:fcgi://127.0.0.1:9001"
        #SetHandler "proxy:unix:/run/php-fpm/www.sock|fcgi://localhost"
    </FilesMatch>
 
 
    # Welche Logdateien sollen beschrieben werden
    SetEnvIf Remote_Addr "10\.0\.0\.117" dontlog
    ErrorLog  ${errors_log}
    CustomLog ${access_log} combined env=!dontlog
    CustomLog ${ssl_log} "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
 
    # Absicherung der Übertragung mit Hilfe von TLS
    # Django : 2015-10-04 - TLS-Verschlüsselung mit Hilfe von mod_ssl
    SSLEngine on
    # Definition der anzubietenden Protokolle
    SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
    # Definition der Cipher
    SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384
    # Schlüsseldatei, mit der der CSR erstellt wurde
    SSLCertificateKeyFile /etc/pki/tls/private/wildcard_2017.nausch.org.serverkey.pem
    # Zertifikatsdatei, die von der CA signiert wurde
    SSLCertificateFile /etc/pki/tls/certs/wildcard_2017.nausch.org.certificate_161118.pem
    # Zertifikatsdatei des bzw. der Intermediate-Zertifikate(s)
    SSLCertificateChainFile /etc/pki/tls/certs/AlphaSSL_Intermediate.certificate.pem
    # Änderung der Cipherorder der Clients verneinen 
    SSLHonorCipherOrder on
    # TLS 1.0 Kompremmierung deaktivieren (CRIME attacks)
    SSLCompression off
    # Online Certificate Status Protocol stapling zum Prüfen des Gültigkeitsstatus des Serverzertifikats.
    SSLUseStapling on
    SSLStaplingResponderTimeout 5
    SSLStaplingReturnResponderErrors off
 
    # HTTP Strict Transport Security (HSTS), bei dem der Server dem Client im HTTP-Header mitteilt,
    # dass dieser nur noch verschlüsselt mit dem Server kommunizieren soll.
    Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
 
    # This header enables the Cross-site scripting (XSS) filter built into most recent web browsers.
    # It's usually enabled by default anyway, so the role of this header is to re-enable the filter for
    # this particular website if it was disabled by the user.
    # https://www.owasp.org/index.php/List_of_useful_HTTP_headers
    #Header set X-XSS-Protection "1; mode=block"
    Header always set X-Xss-Protection "1; mode=block"
 
    # when serving user-supplied content, include a X-Content-Type-Options: nosniff header along with the Content-Type: header,
    # to disable content-type sniffing on some browsers.
    # https://www.owasp.org/index.php/List_of_useful_HTTP_headers
    # currently suppoorted in IE > 8 http://blogs.msdn.com/b/ie/archive/2008/09/02/ie8-security-part-vi-beta-2-update.aspx
    # http://msdn.microsoft.com/en-us/library/ie/gg622941(v=vs.85).aspx
    # 'soon' on Firefox https://bugzilla.mozilla.org/show_bug.cgi?id=471020
    # Sofern die Datei auch den entsprechenden MIME-Typ "text/css" entspricht, soll der Browser 
    # CSS-Dateien nur als CSS interprätieren.
    Header always set X-Content-Type-Options nosniff
 
    # config to don't allow the browser to render the page inside an frame or iframe
    # and avoid clickjacking http://en.wikipedia.org/wiki/Clickjacking
    # if you need to allow [i]frames, you can use SAMEORIGIN or even set an uri with ALLOW-FROM uri
    # https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options
    ###header set X-Frame-Options SAMEORIGIN
    header always set X-Frame-Options DENY
 
    # hide server header (apache and php version)
    Header always unset Server
 
    # Only allow JavaScript from the same domain to be run.
    # don't allow inline JavaScript to run.
    Header always set X-Content-Security-Policy "allow 'self';"
    Header always set Content-Security-Policy "default-src 'self'; report-uri https://nausch.report-uri.io/r/default/csp/enforce"
 
    # Add Secure and HTTP only attributes to cookies
    Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
 
    # prevent Clickjacking Attack
    #Header always append X-Frame-Options SAMEORIGIN
    Header always set X-Frame-Options "SAMEORIGIN"
 
    # hkpk-stuff
    Header always set Public-Key-Pins "pin-sha256=\"nMiOpb6vUnjCoWCkPkDaxieG4ND8SNWzFTsQf2ZfruLno0=\"; pin-sha256=\"INhxSQ38nCS6ijaAAyo4xBabej9xeL3Xaak+GGiM2fo=\"; max-age=2592000; report-uri=\"https://nausch.report-uri.io/r/default/hpkp/enforce\""
</VirtualHost>

Bevor wir unseren neuen vHOST am Webserver zum Ausliefern der dynamisch generierten PHP-Webseiten durch einen Reload des Daemon bewegen, führen wir noch einen syntakischen Test der Konfigurationsdateien durch. Hierzu verwenden wir das Tool apachectl.

 # apachectl -t

 Syntax OK

Ist alles O.K. dann steht einem restart des Apache httpd nichts mehr im Wege.

 # systemctl restart httpd.service

Wollen wir den Reload kontrollieren, fragen wir den Status des Webservers ab.

 # systemctl status httpd.service

● httpd.service - The Apache HTTP Server
   Loaded: loaded (/etc/systemd/system/httpd.service; enabled; vendor preset: disabled)
   Active: active (running) since Sun 2017-10-08 14:53:48 CEST; 7min ago
     Docs: man:httpd(8)
           man:apachectl(8)
  Process: 32610 ExecStop=/bin/kill -WINCH ${MAINPID} (code=exited, status=0/SUCCESS)
  Process: 1496 ExecReload=/usr/sbin/httpd $OPTIONS -k graceful (code=exited, status=0/SUCCESS)
 Main PID: 32614 (httpd)
   Status: "Total requests: 0; Current requests/sec: 0; Current traffic:   0 B/sec"
   CGroup: /system.slice/httpd.service
           ├─ 1498 /usr/sbin/httpd -DFOREGROUND
           ├─ 1499 /usr/sbin/httpd -DFOREGROUND
           ├─ 1500 /usr/sbin/httpd -DFOREGROUND
           ├─ 1504 /usr/sbin/httpd -DFOREGROUND
           ├─ 1602 /usr/sbin/httpd -DFOREGROUND
           └─32614 /usr/sbin/httpd -DFOREGROUND

Oct 08 14:53:48 vml000107.dmz.nausch.org systemd[1]: Starting The Apache HTTP Server...
Oct 08 14:53:48 vml000107.dmz.nausch.org systemd[1]: Started The Apache HTTP Server.