Hi
After applying erratum 49 my smtp stopped working.
The error stopped and returned to work after changing the following registry ucr set mail / postfix / tls / client / level = none
Although it is working, now it does not stop falling on the other error log
Postfix / smtp [6156]: warning: hash: / etc / postfix / tls_policy is not available. Open database /etc/postfix/tls_policy.db: No such file or directory
In fact, this file is not present in the path indicated.
What should I do to correct this error?
Thanks for helping
the file /etc/postfix/tls_policy.db should exist, if the update succeeded. Please check if there were errors in /var/log/univention/updater.log
To continue an interrupted installation/update run apt-get install -f
If there is a file /etc/postfix/tls_policy but not /etc/postfix/tls_policy.db, then you can run postmap /etc/postfix/tls_policy
to create it.
When the situation with the tls_policy(.db) file has been resolved, please return the UCRV mail/postfix/tls/client/level to its default: ucr unset mail/postfix/tls/client/level
Hi
I followed his guidance, and applied an apt-get -install -f but there was nothing left behind.
Looking at the updater log, see below what happened:
Create mail / postfix / tls / client / policy / amavis
Postmap: fatal: open / etc / postfix / tls_policy: No such file or directory
The user postfix 'is already a member of sasl’.
Warning: Unit file of postfix.service changed on disk, ‘systemctl daemon-reload’ recommended.
That is all I have so far on this issue.
Also not appearing for me the need to install this file tls_policy
Hi
After reinstalling the “univention-mail-postfix” package the tls_policy file now exists, but it is not copied to /etc/ postifx. When I run the command ucr commit /etc/postfix/tls_policy the file is also not copied to /etc/postfix.
Hi,
The first two commands work fine. When it arrives at the postmap, this error occurs:
Postmap: fatal: open /etc/postfix/tls_policy: No such file or directory
It does not copy the tls_policy file into /etc/postfix
You modified the UCR template, so the update didn’t overwrite it:
Configuration file '/etc/univention/registry.info/variables/univention-mail-postfix.cfg'
==> Modified (by you or by a script) since installation.
==> Package distributor has shipped an updated version.
==> Using current old file as you requested.
Installing new version of config file /etc/univention/templates/files/etc/postfix/main.cf.d/60_tls ...
Configuration file '/etc/univention/templates/info/univention-mail-postfix.info'
==> Modified (by you or by a script) since installation.
==> Package distributor has shipped an updated version.
==> Using current old file as you requested.
I don’t know how to fix this - I’ll ask around. My guess is, that you’ll have to look for something like /etc/univention/registry.info/variables/univention-mail-postfix.cfg.*dpkg* and /etc/univention/templates/info/univention-mail-postfix.info.*dpkg* and you’ll have to merge your changes and ours manually.
It is curious that the update mechanism thinks that /etc/univention/templates/info/univention-mail-postfix.info has been modified. Just to be sure: have you altered this file intentionally? If not, we have to dig deeper. I have a workaround for you but it would be great if you give use some information first to understand the problem.
So here is my question catalog:
Please also attach the /etc/univention/templates/info/univention-mail-postfix.info to this thread.
Please run the following command and send me the results: md5sum /etc/univention/templates/info/univention-mail-postfix.info
Please run the following command and send me the results: find -ls /etc/univention/templates/info/univention-mail-postfix*
Did you remove and reinstall the Univention Mail Server App in the past?
Do you have any mail related apps installed? Kopano? OX? maildisclaimer? …
What was the initial UCS version the system has been installed with?
The commands above have to be executed before the following workaround can be applied.
In fact, now I begin to understand why it did not update. Important to know that the postix is working ok. The update did not happen completely.
This server was installed with UCS 4.2
At first I got to install the univention-mail-canonical-maps package but it was later removed.
And a change was made through the Univention Configuration Registry. I inserted a new UCR Variable mail/postfix/smtp/headerchecks >>> value >>> regexp: /etc/postfix/header_check
This should be the cause of the problem in completing the modifications.
Do you think I should still apply the suggestion you gave?
yes, first you should perform the steps mentioned above to get back a working system.
If I’m right, you only added Variables: mail/postfix/smtp/headerchecks to univention-mail-postfix.info. This entry is only required to make sure that upon a change of the UCR variable mail/postfix/smtp/headerchecks the file /etc/postfix/main.cf is automatically recreated from the UCR templates.
If the entry is missing, you have to perform an additional step for changing the value:
ucr set mail/postfix/smtp/headerchecks="foo bar baz"
ucr commit /etc/postfix/main.cf
invoke-rc.d postfix restart
Regarding changes for main.cf:
it is possible to add your own custom subtemplate for main.cf. This is described in the following thread. Please note that postfix is always using the last definition of an option within the main.cf. So if you redefine an option in your own subtemplate at the end of main.cf, postfix is using your value. There’s one drawback: postfix issues a warning when defining options a second/third/… time.
Hi,
I ran as suggested, the problem is that it is not copying the tls_policy file into /etc/postfix
So I can not run the postmap /etc/ postfix/tls_policy, of the problem because it does not find this file.
The previous commands will work … it just can not copy tls_policy.
Should I copy this file in hand?
What do you think?
So you copied the univention-mail-postfix.info.dpkg-dist back to univention-mail-postfix.info and executed ucr update?
Does the file /etc/univention/templates/files/etc/postfix/tls_policy exist?
What happens if you call ucr commit /etc/postfix/tls_policy again? Does the file exist now?
If not, please send the md5sum of the new univention-mail-postfix.info file.
Ucr commit / etc / postfix / tls_policy again, fixed the problem.
Now the file has been copied, and the errors are gone.
Thank you very much, that helped a lot.
