From f8e348e07bdec397ea8bcc733ff2006ca5659145 Mon Sep 17 00:00:00 2001 From: Someone Date: Fri, 4 Oct 2024 13:42:40 +0200 Subject: [PATCH] [roles/server/mail/saslauthd] setup saslauthd --- .../mail/saslauthd/files/default/saslauthd | 69 +++++++++++++++++++ roles/server/mail/saslauthd/handlers/main.yml | 13 ++++ roles/server/mail/saslauthd/tasks/main.yml | 36 ++++++++++ 3 files changed, 118 insertions(+) create mode 100644 roles/server/mail/saslauthd/files/default/saslauthd create mode 100644 roles/server/mail/saslauthd/handlers/main.yml create mode 100644 roles/server/mail/saslauthd/tasks/main.yml diff --git a/roles/server/mail/saslauthd/files/default/saslauthd b/roles/server/mail/saslauthd/files/default/saslauthd new file mode 100644 index 0000000..1f311f3 --- /dev/null +++ b/roles/server/mail/saslauthd/files/default/saslauthd @@ -0,0 +1,69 @@ +# +################################################ +### Managed by someone's ansible provisioner ### +################################################ +# Part of: https://git.somenet.org/root/pub/somesible.git +# 2017-2024 by someone +# +# +# Settings for saslauthd daemon +# Please read /usr/share/doc/sasl2-bin/README.Debian for details. +# + +# Should saslauthd run automatically on startup? (default: no) +START=yes + +# Description of this saslauthd instance. Recommended. +# (suggestion: SASL Authentication Daemon) +DESC="SASL Authentication Daemon" + +# Short name of this saslauthd instance. Strongly recommended. +# (suggestion: saslauthd) +NAME="saslauthd" + +# Which authentication mechanisms should saslauthd use? (default: pam) +# +# Available options in this Debian package: +# getpwent -- use the getpwent() library function +# kerberos5 -- use Kerberos 5 +# pam -- use PAM +# rimap -- use a remote IMAP server +# shadow -- use the local shadow password file +# sasldb -- use the local sasldb database file +# ldap -- use LDAP (configuration is in /etc/saslauthd.conf) +# +# Only one option may be used at a time. See the saslauthd man page +# for more information. +# +# Example: MECHANISMS="pam" +MECHANISMS="pam" + +# Additional options for this mechanism. (default: none) +# See the saslauthd man page for information about mech-specific options. +MECH_OPTIONS="" + +# How many saslauthd processes should we run? (default: 5) +# A value of 0 will fork a new process for each connection. +THREADS=2 + +# Other options (default: -c -m /var/run/saslauthd) +# Note: You MUST specify the -m option or saslauthd won't run! +# +# WARNING: DO NOT SPECIFY THE -d OPTION. +# The -d option will cause saslauthd to run in the foreground instead of as +# a daemon. This will PREVENT YOUR SYSTEM FROM BOOTING PROPERLY. If you wish +# to run saslauthd in debug mode, please run it by hand to be safe. +# +# See /usr/share/doc/sasl2-bin/README.Debian for Debian-specific information. +# See the saslauthd man page and the output of 'saslauthd -h' for general +# information about these options. +# +# Example for chroot Postfix users: "-c -m /var/spool/postfix/var/run/saslauthd" +# Example for non-chroot Postfix users: "-c -m /var/run/saslauthd" +# +# To know if your Postfix is running chroot, check /etc/postfix/master.cf. +# If it has the line "smtp inet n - y - - smtpd" or "smtp inet n - - - - smtpd" +# then your Postfix is running in a chroot. +# If it has the line "smtp inet n - n - - smtpd" then your Postfix is NOT +# running in a chroot. +OPTIONS="-V -c -m /var/run/saslauthd" diff --git a/roles/server/mail/saslauthd/handlers/main.yml b/roles/server/mail/saslauthd/handlers/main.yml new file mode 100644 index 0000000..cf049ce --- /dev/null +++ b/roles/server/mail/saslauthd/handlers/main.yml @@ -0,0 +1,13 @@ +##################################### +### someone's ansible provisioner ### +##################################### +# Part of: https://git.somenet.org/root/pub/somesible.git +# 2017-2024 by someone +# +--- +- name: restart saslauthd.service + systemd: + name: saslauthd.service + daemon_reload: yes + state: restarted + ignore_errors: yes diff --git a/roles/server/mail/saslauthd/tasks/main.yml b/roles/server/mail/saslauthd/tasks/main.yml new file mode 100644 index 0000000..4ff6759 --- /dev/null +++ b/roles/server/mail/saslauthd/tasks/main.yml @@ -0,0 +1,36 @@ +##################################### +### someone's ansible provisioner ### +##################################### +# Part of: https://git.somenet.org/root/pub/somesible.git +# 2017-2024 by someone +# +--- +- name: install saslauthd + apt: + pkg: + - sasl2-bin + state: present + policy_rc_d: 101 + tags: "online" + ignore_errors: "{{ignore_online_errors | bool}}" + + +- name: copy saslauthd defaults + copy: + src: "{{item}}" + dest: "/etc/default/saslauthd" + mode: 0644 + owner: "root" + group: "root" + with_first_found: + - "{{lookup('env','PWD')}}/host_files/{{inventory_hostname}}/{{role_name}}/saslauthd" + - "{{lookup('env','PWD')}}/group_files/{{group_files_group}}/{{role_name}}/saslauthd" + - "{{lookup('env','PWD')}}/group_files/all/{{role_name}}/saslauthd" + - "default/saslauthd" + notify: restart saslauthd.service + + +- name: enable and start saslauthd.service + include_role: name="base/systemd/enable-and-start" + vars: + service_name: saslauthd.service -- 2.43.0