web_интерфейс_к_почте

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Last revision Both sides next revision
web_интерфейс_к_почте [2024/01/27 09:21]
val [Roundcube]
web_интерфейс_к_почте [2024/05/01 15:44]
val [Roundcube]
Line 21: Line 21:
 $config['​default_host'​] = '​localhost';​ $config['​default_host'​] = '​localhost';​
 $rcmail_config['​mail_domain'​] = '​corpX.un';​ $rcmail_config['​mail_domain'​] = '​corpX.un';​
 +...
 +//​https://​treeone.ru/​roundcube-smtp-error-code-1-connection-failed-after-upgrade-debian/​
 +$config['​smtp_server'​] = '​localhost:​25';  ​
 ... ...
 </​code><​code>​ </​code><​code>​
Line 50: Line 53:
   '​user_specific'​ => false, ​  // If true the base_dn, bind_dn and bind_pass default to the user's IMAP login.   '​user_specific'​ => false, ​  // If true the base_dn, bind_dn and bind_pass default to the user's IMAP login.
  
-  ​'​base_dn' ​      => '​ou=People,​dc=corpX,​dc=un',​+//  ​'​base_dn' ​      => '​ou=People,​dc=corpX,​dc=un',​
  
-////  ​'​base_dn' ​      => '​cn=Users,​dc=corpX,​dc=un',​+  ​'​base_dn' ​      => '​cn=Users,​dc=corpX,​dc=un',​
 //  '​base_dn' ​      => '​dc=corpX,​dc=un',​ //  '​base_dn' ​      => '​dc=corpX,​dc=un',​
-//  ​'​bind_dn' ​      => '​cn=Administrator,​cn=Users,​dc=corpX,​dc=un',​ +  ​'​bind_dn' ​      => '​cn=Administrator,​cn=Users,​dc=corpX,​dc=un',​ 
-//  '​bind_pass' ​    => '​Pa$$w0rd',​+  '​bind_pass' ​    => '​Pa$$w0rd',​
  
   '​search_filter' ​ => '', ​  // e.g. '​(&​(objectClass=posixAccount)(uid=%u))'​   '​search_filter' ​ => '', ​  // e.g. '​(&​(objectClass=posixAccount)(uid=%u))'​
Line 104: Line 107:
 </​code>​ </​code>​
  
-=== OAuth2 ​аутентификация ===+=== OpenID ​аутентификация ===
  
   * [[https://​goauthentik.io/​integrations/​services/​roundcube/​|This integration describes how to use Roundcube'​s oauth support with authentik to automatically sign into an email account]]   * [[https://​goauthentik.io/​integrations/​services/​roundcube/​|This integration describes how to use Roundcube'​s oauth support with authentik to automatically sign into an email account]]
Line 112: Line 115:
  
 <​code>​ <​code>​
-# cat /​var/​lib/​roundcube/​config/​config.inc.php+debian12# cat /​var/​lib/​roundcube/​config/​config.inc.php
 </​code><​code>​ </​code><​code>​
 ... ...
 $config['​oauth_provider'​] = '​generic';​ $config['​oauth_provider'​] = '​generic';​
-$config['​oauth_provider_name'​] = '​Keycloak ​corp20';+$config['​oauth_provider_name'​] = '​Keycloak ​corp13';
 $config['​oauth_client_id'​] = "​any-client";​ $config['​oauth_client_id'​] = "​any-client";​
 $config['​oauth_client_secret'​] = "​anystring";​ $config['​oauth_client_secret'​] = "​anystring";​
-$config['​oauth_auth_uri'​] = "​https://​server.corp20.un:8443/realms/corp20/​protocol/​openid-connect/​auth";​ +$config['​oauth_auth_uri'​] = "​https://​keycloak.corp13.un/realms/corp13/​protocol/​openid-connect/​auth";​ 
-$config['​oauth_token_uri'​] = "​https://​server.corp20.un:8443/realms/corp20/​protocol/​openid-connect/​token";​ +$config['​oauth_token_uri'​] = "​https://​keycloak.corp13.un/realms/corp13/​protocol/​openid-connect/​token";​ 
-$config['​oauth_identity_uri'​] = "​https://​server.corp20.un:8443/realms/corp20/​protocol/​openid-connect/​userinfo";​+$config['​oauth_identity_uri'​] = "​https://​keycloak.corp13.un/realms/corp13/​protocol/​openid-connect/​userinfo";​
 $config['​oauth_verify_peer'​] = false; $config['​oauth_verify_peer'​] = false;
 $config['​oauth_scope'​] = "email profile openid";​ $config['​oauth_scope'​] = "email profile openid";​
Line 129: Line 132:
 $config['​login_password_maxlen'​] = 4096; $config['​login_password_maxlen'​] = 4096;
 </​code><​code>​ </​code><​code>​
-# cat /​usr/​share/​roundcube/​program/​include/​rcmail_oauth.php+debian12# cat /​usr/​share/​roundcube/​program/​include/​rcmail_oauth.php
 </​code><​code>​ </​code><​code>​
 ... ...
Line 137: Line 140:
          //​$oauth_identity_uri ​ = $this->​options['​identity_uri'​];​          //​$oauth_identity_uri ​ = $this->​options['​identity_uri'​];​
  
-       ​$oauth_token_uri ​    = "​https://​server.corp20.un:8443/realms/corp20/​protocol/​openid-connect/​token";​+       ​$oauth_token_uri ​    = "​https://​keycloak.corp13.un/realms/corp13/​protocol/​openid-connect/​token";​
        ​$oauth_client_id ​    = "​any-client";​        ​$oauth_client_id ​    = "​any-client";​
        ​$oauth_client_secret = "​anystring";​        ​$oauth_client_secret = "​anystring";​
-       ​$oauth_identity_uri ​ = "​https://​server.corp20.un:8443/realms/corp20/​protocol/​openid-connect/​userinfo";​+       ​$oauth_identity_uri ​ = "​https://​keycloak.corp13.un/realms/corp13/​protocol/​openid-connect/​userinfo";​
 ... ...
 </​code>​ </​code>​
web_интерфейс_к_почте.txt · Last modified: 2024/05/04 05:09 by val