Virtual Mail Domains and Users

I'm having an issue with virtual hosts and mail hosts. I have three domains lets call them domain1.com, domain2.com and domain3.com
now lets say I have a user russ and he wants to recive mail only at domain2.com is there anyway to just let him recieve mail at that domain? becasue he also recives mail at domain1.com becasue it is the default domain.
Any help on this is greatly appreciated.
Thank You,
Russ

Did you ever sort this properly or just go with your 'fix'?
I have set up our 10.5 mailserver and everything works fine for people with accounts on the server but forwarders to external mail accounts are not working properly.
Emails sent from an external source to a forwarding account on our server receive a bounce message with the errors...
<[email protected]>: host mailserver.domain1.com[/var/imap/socket/lmtp]
said: 550-Mailbox unknown. Either there is no mailbox associated with this
550-name or you do not have authorization to see it. 550 5.1.1 User unknown
(in reply to end of DATA command)
...and...
Diagnostic-Code: smtp; 550-Mailbox unknown. Either there is no mailbox
associated with this 550-name or you do not have authorization to see it.
550 5.1.1 User unknown
In this case '[email protected]' is an account on the mailserver set as a forwarder to '[email protected]'
Despite the sevder getting the bounce message the actual message is however forwarded and received by '[email protected]'
Paul

Similar Messages

Virtual Mail Domains and Email Client setup...

Hello,
I have read the Apple Mail Services pdf and I have read petrobytes pdf on virtual user setup and I now have it working.
The question I have is if I have a virtual domain called vdom1.com and a local domain called ldom.com and I have a user called "user1" in each of these should I not be able to to use "user1" as the username in a mail client config? It won't let me and I would really rather not give out usernames that look like vdom1user1, if at all possible?
Thanks,
tom

Well, obviously you haven't read my tutorial properly
11. - What do my users need to know?
"Username: user1 and password will not work or fetch the wrong
mailbox (unless the user is a local domain user). For virtual
domain users, [email protected] and password is the
way to go."
Use user1 for the local domains and [email protected] for the virtual domain.
Alex

Virtual mail domain and POP problem

Hi all,
I am currently on my 7th or 8th install of 10.5 server, so far without managing to make a working mailsetup with virtual domains and virtual users. That is, it works when my customers use an IMAP-client (or webmail via squirrelmail), but it doesn't work when using a POP-client. I have yet to discover the cause of my problems, as the server-logs show perfectly good logins – but unfortunately nothing gets downloaded to the client.
I currently host 15 domains, which until my purchase of 10.5 server were hosted on a computer running 10.4 client-version with dovecot as mailserver, a custom DNS-setup and various custominstalled supporting apps. On the old client, everything was running smoothly (albeit slowly, due to the old hardware), but as I have stated, on my new server I can't get POP-access to work.
When I do a fresh install of 10.5 server, I can log in to the accounts on the primary domain with either POP3 or IMAP, but as soon as I set up a virtual domain, POP-access to all accounts ceases to function.
I suspect Cyrus configuration to be the main culprit, since everything else seems to work as expected, but having no previous experience with cyrus, I have yet to find a solution.
If anyone has any pointers to a good source of cyrus-IMAP knowledge, I would be very grateful for any help.
/Lars

Hi Alex,
This is really strange, and it's also really bugging me!
I use OD. If I add several shortnames to a user, fqn and not-fqn, I can only log in with the first shortname and any of the fqn-names. However, only the login using the first shortname recieves any mail.
I dont know if you have any explanation as to why my setup doesn't include a /etc/postfix/virtual file or a virtualaliasmaps statement in main.cf, which is the only difference in my system that I registered compared to your guide.
This is some lines from mailaccess.log when logging in to an account using Outlook Express in XP (user info masked):
Dec 7 22:50:05 server pop3[84858]: login: [192.168.2.3] comexampleuser plaintext User logged in
Dec 7 22:51:15 server pop3[84858]: login: [192.168.2.3] [email protected] plaintext User logged in
Dec 7 22:51:25 server pop3[84858]: login: [192.168.2.3] [email protected] plaintext User logged in
Dec 7 22:51:35: --- last message repeated 3 times ---
Dec 7 22:51:46 server pop3[84858]: login: [192.168.2.3] [email protected] plaintext User logged in
Dec 7 22:52:16: --- last message repeated 2 times ---
Dec 7 22:52:44 server pop3[84858]: login: [192.168.2.3] [email protected] plaintext User logged in
Dec 7 22:56:01 server pop3[84946]: login: [192.168.2.3] [email protected] plaintext User logged in
Dec 7 22:57:04 server pop3[84946]: login: [192.168.2.3] [email protected] plaintext User logged in
The log level is set to "Information", and as you can see all logins appear to be successful. However, only the first login using the comexampleuser login receives any mail (and I sent more mails inbetween to make sure something would register, of course).
Here's the relevant part from mail.log:
Dec 7 22:51:04 server postfix/smtpd[84875]: connect from unknown[192.168.2.3]
Dec 7 22:51:04 server postfix/smtpd[84875]: 4A362F8F58: client=unknown[192.168.2.3], sasl_method=CRAM-MD5, [email protected]
Dec 7 22:51:04 server postfix/cleanup[84880]: 4A362F8F58: message-id=<[email protected]>
Dec 7 22:51:04 server postfix/qmgr[81164]: 4A362F8F58: from=<[email protected]>, size=602, nrcpt=1 (queue active)
Dec 7 22:51:04 server postfix/smtpd[84884]: connect from localhost[127.0.0.1]
Dec 7 22:51:04 server postfix/smtpd[84884]: B4844F8F67: client=localhost[127.0.0.1]
Dec 7 22:51:04 server postfix/cleanup[84880]: B4844F8F67: message-id=<[email protected]>
Dec 7 22:51:04 server postfix/smtpd[84884]: disconnect from localhost[127.0.0.1]
Dec 7 22:51:04 server postfix/qmgr[81164]: B4844F8F67: from=<[email protected]>, size=1112, nrcpt=1 (queue active)
Dec 7 22:51:04 server postfix/smtp[84882]: 4A362F8F58: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.47, delays=0.03/0.02/0.01/0.41, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as B4844F8F67)
Dec 7 22:51:04 server postfix/qmgr[81164]: 4A362F8F58: removed
Dec 7 22:51:04 server postfix/pipe[84886]: B4844F8F67: to=<[email protected]>, relay=cyrus, delay=0.14, delays=0.01/0.03/0/0.1, dsn=2.0.0, status=sent (delivered via cyrus service)
Dec 7 22:51:04 server postfix/qmgr[81164]: B4844F8F67: removed
Dec 7 22:52:04 server postfix/smtpd[84875]: disconnect from unknown[192.168.2.3]
And here are the lines from system.log:
Dec 7 22:50:05 server pop3[84858]: login: [192.168.2.3] comexampleuser plaintext User logged in
Dec 7 22:51:15 server pop3[84858]: login: [192.168.2.3] [email protected] plaintext User logged in
Dec 7 22:51:25 server pop3[84858]: login: [192.168.2.3] [email protected] plaintext User logged in
Dec 7 22:51:35: --- last message repeated 3 times ---
Dec 7 22:51:46 server pop3[84858]: login: [192.168.2.3] [email protected] plaintext User logged in
Dec 7 22:52:16: --- last message repeated 2 times ---
Dec 7 22:52:44 server pop3[84858]: login: [192.168.2.3] [email protected] plaintext User logged in
Dec 7 22:53:14: --- last message repeated 2 times ---
Dec 7 22:56:01 server pop3[84946]: login: [192.168.2.3] [email protected] plaintext User logged in
Dec 7 22:57:04 server pop3[84946]: login: [192.168.2.3] [email protected] plaintext User logged in
bash-3.2# cat /etc/imapd.conf
admins: cyrusimap
configdirectory: /var/imap
partition-default: /var/spool/imap
unixhierarchysep: yes
altnamespace: yes
servername: server.skovgaarddesign.dk
sievedir: /usr/sieve
sendmail: /usr/sbin/sendmail
lmtpdowncasercpt: 1
unixgroupenable: 0
berkeleytxnsmax: 400
berkeleylocksmax: 20000
berkeley_cachesize: 8192
berkeleymax_logregion: 2048
berkeleymax_logfile: 10240
berkeleymax_logbuffer: 2048
tlskeyfile: /etc/certificates/Default.key
quotawarn_frequencydays: 1
tlscertfile: /etc/certificates/Default.crt
enablequotawarnings: yes
imapauth_crammd5: yes
popauthapop: yes
logrolling_daysenabled: 0
logrollingdays: 1
imapauthlogin: yes
imapauthplain: yes
imapauthgssapi: yes
lmtpover_quota_permfailure: yes
tlsserveroptions: use
popauthgssapi: yes
bash-3.2# cat /etc/cyrus.conf
# standard standalone server implementation
START {
# do not delete this entry!
recover cmd="ctl_cyrusdb -r"
# this is only necessary if using idled for IMAP IDLE
idled cmd="idled"
# UNIX sockets start with a slash and are put into /var/imap/socket
SERVICES {
# add or remove based on preferences
imap cmd="imapd" listen="imap" prefork=0
imaps cmd="imapd -s" listen="imaps" prefork=0
pop3 cmd="pop3d" listen="pop3" prefork=0
pop3s cmd="pop3d -s" listen="pop3s" prefork=0
sieve cmd="timsieved" listen="sieve" prefork=0
# at least one LMTP is required for delivery
# lmtp cmd="lmtpd" listen="lmtp" prefork=0
lmtpunix cmd="lmtpd" listen="/var/imap/socket/lmtp" prefork=0
# this is only necessary if using notifications
# notify cmd="notifyd" listen="/var/imap/socket/notify" proto="udp" prefork=1
EVENTS {
# this is required
checkpoint cmd="ctl_cyrusdb -c" period=30
# this is only necessary if using duplicate delivery suppression
delprune cmd="cyr_expire -E 3" at=0400
# this is only necessary if caching TLS sessions
tlsprune cmd="tls_prune" at=0400
LIMITS {
imaplimit value=0
And here are the output of ps U _cyrus when logging in via POP (I have removed the IMAP-lines, as I doubt they are necessary, but feel free to correct me if I'm mistaken).
bash-3.2# ps U _cyrus
PID TT STAT TIME COMMAND
19062 ?? Ss 1:08.79 /usr/bin/cyrus/bin/cyrus-quota -r
81174 ?? Ss 0:01.32 master -l 256
81177 ?? S 0:02.04 idled
85071 ?? Ss 0:00.03 /sbin/launchd
85073 ?? S 0:00.03 pop3d: [192.168.2.3] [email protected] user.firstname^lastname@exampl
I hope some of the above will provide some clues.
/Lars

Virtual Mail Domains

10.4.10 Server.
I've set up virtual mail domains. Added email addresses to the shortnames list. When anyone sends an email to [email protected] it gets delivered to all hosted domains. So i get the same email in domain2.com.
Anyone know what's causing this?
cheers
Multiple Mac OS X (10.4.10)

Sydney, while you are waiting for a response, just a clarification on local DNS, MX, etc...
The MX record is only required for 'external' users, in order to discover where the responsible mail server is (because all they have to start from is a basic domain name, not a server hostname). In your LAN, your mail clients will already have this location as you put this into the sending/receiving field in the mail client - either as a hostname (which must be resolvable to the local server's IP in your local DNS) or directly as an IP address. So local DNS does not need an MX record if this scenario is applicable.
The hostname you put into your local mail client has no meaning to the mail server - it purely resolves to an IP address and then your client 'drops' that hostname and contacts the mail server at the IP address. The important bit of info used by the mail client is the user login name - this tells the mail server what account, in what domain, to access.
-david

Allow join domain and user AD authentication through WatchGuard UTM

The question you have, suggests me, that you are not using WSM to manage your firewall?
You should use the traffic monitor in the Firebox system Manager, zhat is part of the WSM install and watch the traffic between your DC and a test computer. Therefor you can set a filter in the traffic monitor, so you will be shown only the traffic of your test computer. If some kind of traffic is blocked from or to your test computer, it will be shown as a red line. If you analyze this line, you will see exactly what port it was, that was denied.
In general tho I think, that all you need is to appoint your clients the use of a DNS server, that is 'AD aware' (has the needed A records you need for AD) and a SMB rule, that will allow SMB traffic to you MS subnet.

hi all,
I am configuring new WatchGuard UTM to have 3 different VLANs, for server, staff and students. My target is to allow computers from staff and students to connect DCs on server VLAN and join domain; and staff/student to logon successfully.
I found the link below and successfully configured to allow DC replication.
https://support.microsoft.com/en-us/kb/832017
However for computer to join domain and user AD authentication, I could not come up with a list of ports to open on WatchGuard.
Any suggestions on this would be much appreciated.
Peter
This topic first appeared in the Spiceworks Community

I'm unable to load my Microsoft Exchange account. Think I'm entering the wrong info for domain and user but haven't figured out the correct inputs...

I think the problem is with my domain and user name information. Does anyone have any suggestions...

I know that when i tried to add a Live/Hotmail account I tried MS Ex but ended up having to forward my Live to my Gmail or just add an IMAP account.

Few virtual mail domains work fine. How about SMTP?

Hello,
Following detailed advices here we have successfully set up our mail server to support our several domains (e.g. company.com, company.net, company.co.uk, etc), however all emails are being sent from one same SMTP address (mail.company.com) and not from respective addresses (mail.company.net, mail.company.co.uk) as we wanted.
We tried using those SMTP virtual servers above (mail.company.net, mail.company.co.uk, etc) in users' mail clients but for some reason they won't resolve to our server. Maybe it is a DNS thing? Currently we have one zone and it is for company.com. Adding additional zone for company.net didn't help. Moreover I am not sure it is the right thing to do as all zones MX will point to the same local IP?
Anybody can shed some light on our problem please?
PS: Latest updated Leopard Server, domains were added as virtual. Receiving and sending of mail works perfect except for the fact that long headers in email itself contain 'wrong' address of SMTP server.

Alex, thanks for your reply.
I will try with what I want to achieve.
1. Company has 3 domain names (one.com, two.com, three.com)
2. Leopard server has been setup with mail.one.com being main domain whereas mail.two.com and mail.three.com are virtual.
3. When users of two.com and three.com send emails from their email clients, long headers will show mail.one.com as the SMTP server.
Q: Is it possible to configure Leopard server so that emails sent from two.com and three.com accounts will have SMTP server mail.two.com and mail.three.com respectively in their long headers?
PS: we currently have 1 public static IP address and 1 Leopard server. If this task is unachievable with single server we will consider buying more IPs and more servers as being an owner of all three domains company wants to separate mail from them completely.

Virtual mail domain problem

I upgrade to 10.5 and it did a lot of damage. I got most of it back into shape, however, I have email addresses with the same user name but different domain. So in tiger if I wanted to keep those separate, I create one with the username bob and the second one with username bob2 and a shortname of [email protected] and it all worked.
So user bob has email address [email protected] and user bob2 has email address [email protected] Which makes two mailboxes.
Now if I do that, ANY virtual domain I have with same name goes to one box. I.E. [email protected] goes to [email protected] Even if I don't have a specific account setup with an address like [email protected], it will still go through to the one box.
Any one seen this problem or know where to look to fix it?
Thanks,

I don't remember exactly but the post lead me to this article on topicdesk. http://osx.topicdesk.com/content/view/45/41/
Instead of using shortnames I used postfix aliases and that solved it all. However, it is not a fix to the problem at hand because this means every time you want to add a virtual user you have to go edit a file and bounce postfix.
Lame.

Provision to Exchange if it's in a root domain and users in child AD: OIM

Hello,
Users are in a child domain at: dc=test,dc=mydomain,dc=com.
This is the base context value I provide for my ADITResource.
However, Exchange is installed at the root domain: dc=mydomain,dc=com.
Due to this, when I try to provision to Exchange, I get an error:
2009-08-17 13:13:54,722 DEBUG [OIMCP.MEXC] com.thortech.xl.integration.Exchange.tcExchangeTasks :
checkIfMailboxCreated : No value for homeMDB fetched
I'm guessing it can't see the mailstores since they are located a level above in the tree. When I ran reconciliation to get the mailstore names, I updated the base context temporarily to dc=mydomain,dc=com. But I can't keep it at this since then AD users will not get provisioned.
Has anyone come across a situation like this before? Is there a workaround? Can a connector talk across root/child domains?
Any suggestions would be great.
Thanks.
Edited by: user4486549 on Aug 18, 2009 12:00 PM

What I actually meant was that pre Exchange 2007 you could do the whole provisioning process of both AD and Exchange through JNDI. The RUS would automatically create the Exchange object based on the data that you put into the users AD object.
It looks to me that in Exchange 2007 you will need to create the AD account (which can be done through JNDI) and then run certain powershell which seems to be slightly more complex but not not impossible. Especially not if you have your OIM server running on a windows host which should mean that you don't have to bother with the remote connector stuff. (At least if the OIM server is in the same domain as your production domain).
Best regards
/Martin

Domain and User Level Security

Dear Friends
Tuxedo Version : 8.0
Weblogic Server: 7.0
Operating System : Win 2000
I have successfully run the simpapp example with WTC as the connector between
the remote domain (tuxedo) and local domain (WLS).
Now, i want to perform authentication, the documents are not being of much help
so can anybody give me any suggestion to create domain level security and ACL.
Please note, i'm just using the services (import).
As per the documents and newsgroup,
i made changes to the TUXEDO ENVIRNMENT, ubbdomain, adding SECURITY , AUTHSERV
parameters in it.
Also made respective changes in WTC, but when i run the example,
it throws an exception as TPENOENT.
Thank you in anticipation.
Please help me !

Hi Shamu,
I answered similar questions in a posting with title "Service
Authentication How to". The questions were posted after your post.
Check out the questions and my reply see whether they are useful to you.
Regards,
Honghsi
shamu wrote:
>
Dear Friends
Tuxedo Version : 8.0
Weblogic Server: 7.0
Operating System : Win 2000
I have successfully run the simpapp example with WTC as the connector between
the remote domain (tuxedo) and local domain (WLS).
Now, i want to perform authentication, the documents are not being of much help
so can anybody give me any suggestion to create domain level security and ACL.
Please note, i'm just using the services (import).
As per the documents and newsgroup,
i made changes to the TUXEDO ENVIRNMENT, ubbdomain, adding SECURITY , AUTHSERV
parameters in it.
Also made respective changes in WTC, but when i run the example,
it throws an exception as TPENOENT.
Thank you in anticipation.
Please help me !

How do you host a domain and several email addresses from that domain with OS X Server?

Right now I have a domain name through GoDaddy.com and one email address to that domain...we will have about 5-8 in total...How do I setup OS X Server to host our own domain (without using GoDaddy) and setup our own mail server?

There are several steps that you would need to do.
Set up OS X Server with mail services and users. Also, you may have to have your OS X mail server relay messages through your ISP so you can email people at other domains.
Set up firewall/router to forward IMAP/POP and SMTP ports from your external IP address to your server (which is either in the DMZ of the firewall or on LAN).
Set up DNS records so your domain name points to your server (and if you do not have a static IP address, you will need to set up dynamic DNS). At a minimum you will need 2 DNS records: an A (or AAAA for IPv6) record for the server (I think it can be the root of the zone) and a MX (mail exchange) record.
If everything is set up correctly, you should have a mail server hosting on your domain with your server.
Those would be the major steps you would need to complete. Details on the exact procedure for each of these steps can be found reading the OS X Server documentation, documentation for your router/firewall for port forwarding/NAT, and your specific DNS service.

MBAM 2.5 - Connection between Machines and Users in DB Error

Hey everyone.
I'm having a bit of trouble deploying MBAM 2.5.
I had a previous installation of MBAM 2.0. The 2.5 installation went smooth, the GPOs are deployed and everything is working well. Except for one thing. I can't rescue TPM passwords or use Drive Recovery if I complete the User Domain and User fields in the
forms.
After consulting the database I can see that both ComplianceCore.Machines_Users and RecoveryandHardwareCore.Machines_Users is not updating, thus not associating users with the respective computers. All else is working great, all tables are being refreshed
with Machines, Volumes and Users. Only thing not working is the association of Users with Machines.
Is this a known bug or could there be something wrong in my configuration?
Thanks in advance,
Miguel Duarte

That can be the issue as well, see this: http://technet.microsoft.com/en-us/library/dn645378.aspx It reads the following:
The enterprise domain must contain at least one Windows Server 2008 (or later) domain controller.
If it is possible, can you share your inetpub folder with me? it should be on the IIS server, a root directory of the IIS server.
thanks!
Mayank Sharma Support Engineer at Microsoft working in Enterprise Platform Support.

Changing mail domain name OCS 10.1.2

I can't receive mail in OCS and think I need to alter my domain name so it will work on this test box and not interfere with the mail to our main campus domain mailserver.
I downloaded the 10.1.2 Linux software and installed for a trial demo against other groupware here. I put in the wrong mail domain and think I need to change it. I have found the blurb in the documentation where it tells how to do it, but I'm not sure what userid to use to let me administer e-mail. This is the doc that points me to OCS Webmail from the OCS Mail Administrator's Guide, chapter 2...
http://download-east.oracle.com/docs/cd/B25553_01/mail.1012/b25499/objects.htm#BABEAGIJ
This is the blurb that it points to about OCS Webmail
http://download-east.oracle.com/docs/cd/B25553_01/mail.1012/b25499/intro.htm#BHCHCGJJ
The two lines that give the URL don't seem to work in my installation. Is it an OCS problem or is my installation screwed up? I don't see how it could be.
http://host_name:port/pls/portal
http://host_name:port/um
My Web Cache Administrator Port is 9400 according to portlist.ini file. Going to http://host_name:9400 works fine. When I try to add /pls/portal or /um, it bombs.
I found that I could use ias_admin to login to OEM AS Control (port 1810) and work my way through the application to the component list and when I click on the Administer button next to Mail, I have no idea what userid to use to administer it.
So I either need to know what userid works to administer Mail, or I need to know how to run Webmail and then what userid to use for that as well.
Thank you to anybody who can help.
Chris Behrens
Clemson University
[email protected]

Do changing host name effect in google PR update ?

MySQL Virtual Mail Aliases with OS X Server (10.8)?

Has anyone been able to set OS X Mountain Lion Server up with virtual mail aliases and MySQL virtual-mysql-*.conf mappings?

From what I can tell, you will need to build your own version of Postfix even on 10.8. While ldap was added in 10.6 or 10.7 I believe, mysql is still missing.
If you issue postconf -m in Terminal, you will notice that mysql is not among the supported methods.

Is it possible to do machine and user authentication in same Authorization profile?

Hi,
I want to know is it possible to do machine authenticaiton and user authentication happen at the same time? Some thing like this...
Condition
IF ( wired_802.1x and AD:externalgroup EQUAL dommain computer AND AD:exteranalgroup EQUAL Some_domain_user_group )
Permissions
then Vlan x
Basically i am trying to check a machine is part of domain and user is valid only then he should be able to have full access.
Any help will be of great value.

Hi,
IF ( wired_802.1x and AD:externalgroup EQUAL dommain computer AND AD:exteranalgroup EQUAL Some_domain_user_group )
- Not possible
As user and machine authentication occur at different contexts.
ACS cannot verify the both at the same time.
Using MAR, you can, though club the both together and achieve:
"machine is part of domain and user is valid only then he should be able to have full access"
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.1/user/guide/users_id_stores.html#wp1235978
Tips for configuring MAR:
1) Set the client to perform user or computer authentication.
2) Create two rules in authorization, one for user and and one for machine (identity them by using group membership on AD).
3) Enable MAR under the AD configuration page on ACS and set the aging time.
4) In the user rule, customize and use the condition "Was machine authenticated" and set it to true.
Rate if useful

Virtual Mail Domains and Users

Similar Messages

Maybe you are looking for