openship 0.4.5 → 0.4.7

package/dist/server/engine/samples/iredmail/iredmail.schema

@@ -0,0 +1,456 @@
+#---------------------------------------------------------------------
+# This file is part of iRedMail, which is an open source mail server
+# solution for Red Hat(R) Enterprise Linux, CentOS, Debian and Ubuntu.
+#
+# iRedMail is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# iRedMail is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with iRedMail.  If not, see <http://www.gnu.org/licenses/>.
+#---------------------------------------------------------------------
+
+#
+# This schema is shipped within iRedMail project:
+#   http://www.iredmail.org/
+#
+# It should be localed at:
+#   - RHEL/CentOS: /etc/openldap/schema/iredmail.schema
+#   - Debian: /etc/ldap/schema/iredmail.schema
+#   - FreeBSD: /usr/local/etc/openldap/schema/
+#
+#--------------------------------------------------------------------
+# The offical iRedMail OID assigned by IANA is 32349, you can find it in url:
+# http://www.iana.org/assignments/enterprise-numbers
+#
+# 1.3.6.1.4.1.32349         OID of iRedMail.org
+# 1.3.6.1.4.1.32349.1       iRedMail
+# 1.3.6.1.4.1.32349.1.2     iRedMail LDAP Elements
+# 1.3.6.1.4.1.32349.1.2.1   AttributeTypes
+# 1.3.6.1.4.1.32349.1.2.2   ObjectClasses
+#--------------------------------------------------------------------
+#
+# This schema depends on:
+#       - core.schema
+#       - cosine.schema
+#
+
+#
+# Mail Service: Domain related attributes.
+#
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.1 NAME 'domainName'
+    DESC 'Virtual Domain Name'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255}
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.2 NAME 'mtaTransport'
+    DESC 'Transport program for Postfix'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
+    SINGLE-VALUE )
+# When updating 'accountStatus=' for mail domain, must update 'domainStatus'
+# for all mail user/alias/list accounts.
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.3 NAME 'domainStatus'
+    DESC 'Domain status, used by mail user/alias/list, not by mail domain itself.'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.4 NAME 'domainAdmin'
+    DESC 'Domain admin'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320} )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.5 NAME 'domainGlobalAdmin'
+    DESC 'Site wide domin admin: yes'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.6 NAME 'domainBackupMX'
+    DESC 'Backup MX: yes, no'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.7 NAME 'domainSenderBccAddress'
+    DESC 'Sender BCC address for whole domain'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320}
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.8 NAME 'domainRecipientBccAddress'
+    DESC 'Recipient BCC address for whole domain'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320}
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.9 NAME 'domainMaxQuotaSize'
+    DESC 'Obsoleted. Max quota size limit for single domain'
+    EQUALITY integerMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.10 NAME 'domainCurrentQuotaSize'
+    DESC 'Current quota size limit for single domain'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.11 NAME 'domainMaxUserNumber'
+    DESC 'Obsoleted. Max user number limit for single domain'
+    EQUALITY integerMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.12 NAME 'domainCurrentUserNumber'
+    DESC 'Current user number limit for single domain'
+    EQUALITY integerMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.13 NAME 'domainMaxAliasNumber'
+    DESC 'Obsoleted. Max alias number limit for single domain'
+    EQUALITY integerMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.14 NAME 'domainCurrentAliasNumber'
+    DESC 'Current alias number limit for single domain'
+    EQUALITY integerMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.15 NAME 'domainMaxListNumber'
+    DESC 'Obsoleted. Max mail list number limit for single domain'
+    EQUALITY integerMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.16 NAME 'domainCurrentListNumber'
+    DESC 'Current mail list number limit for single domain'
+    EQUALITY integerMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.17 NAME 'disclaimer'
+    DESC 'Disclaimer text'
+    EQUALITY caseIgnoreMatch
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.18 NAME 'domainDefaultUserQuota'
+    DESC 'Default quota for new user'
+    EQUALITY integerMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.19 NAME 'domainAliasName'
+    DESC 'Domain Alias Name'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255} )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.20 NAME 'domainWhitelistIP'
+    DESC 'Whitelist IP address'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.21 NAME 'domainWhitelistSender'
+    DESC 'Whitelist sender address'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.22 NAME 'domainBlacklistIP'
+    DESC 'Blacklist IP address'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.23 NAME 'domainBlacklistSender'
+    DESC 'Blacklist sender address'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+attributetype ( 1.3.6.1.4.1.32349.1.2.1.24 NAME 'domainPendingAliasName'
+    DESC 'Pending alias domain name'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255} )
+
+#
+# Mail Service: User related attributes.
+#
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.1 NAME 'mailUID'
+    DESC 'UID of the user on the mailsystem'
+    EQUALITY integerMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.2 NAME 'mailGID'
+    DESC 'GID of the user on the mailsystem'
+    EQUALITY integerMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.3 NAME 'storageBaseDirectory'
+    DESC 'Path to mail storage base directory. Deprecated since iRedMail-0.9.8.'
+    EQUALITY caseExactIA5Match
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.4 NAME 'mailMessageStore'
+    DESC 'Path to the maildir/mbox on the mail system. Deprecated since iRedMail-0.9.8.'
+    EQUALITY caseExactIA5Match
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.5 NAME 'mailQuota'
+    DESC 'The amount of space the user can use until all further messages get bounced'
+    EQUALITY integerMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.6 NAME 'mailQuotaMessageLimit'
+    DESC 'Quota limit in number of messages, 0 means unlimited'
+    EQUALITY integerMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.7 NAME 'mailHost'
+    DESC 'On which mail server the messagestore of this user is located'
+    EQUALITY caseIgnoreIA5Match
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.8 NAME 'mailForwardingAddress'
+    DESC 'Address(es) to forward all incoming messages to.'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreIA5SubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320} )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.9 NAME 'accountStatus'
+    DESC 'The status of a user account: active, disabled'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.10 NAME 'userRecipientBccAddress'
+    DESC 'Recipient BCC address for single user: must be a valid email address'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320}
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.11 NAME 'userSenderBccAddress'
+    DESC 'Sender BCC address for single user: must be a valid email address'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320}
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.12 NAME 'backupMailAddress'
+    DESC 'Backup mail address, used to reset password or whatever'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320}
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.13 NAME 'enabledService'
+    DESC 'Enabled service: mail, smtp, imap, pop3, deliver, forward, senderbcc, recipientbcc, displayedInGlobalAddressBook'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.14 NAME 'memberOfGroup'
+    DESC 'Group/List name which user belong to, MUST be a valid email address'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320} )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.18 NAME 'expiredDate'
+    DESC 'Account expired date in YYYYMMDDHHMMSSZ format. Sample: 20180323142122Z'
+    EQUALITY generalizedTimeMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.19 NAME 'shadowAddress'
+    DESC 'Shadow address for mail user'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320} )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.20 NAME 'accountSetting'
+    DESC 'Account setting. Default format: var:value'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.21 NAME 'userManager'
+    DESC 'Mail address of manager'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320} )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.22 NAME 'mailWhitelistRecipient'
+    DESC 'Whitelist recipient'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.23 NAME 'mailBlacklistRecipient'
+    DESC 'Blacklist recipient'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.24 NAME 'disabledService'
+    DESC 'Disabled service names'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+
+# This is a comma separated list of IPs and/or networks where the user is
+# allowed to log in from. If the user tries to log in elsewhere, the
+# authentication will fail the same way as if a wrong password was given.
+# Used in Dovecot LDAP query 'pass_attrs ='.
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.25 NAME 'allowNets'
+    DESC 'Allow user to log in from only specified IPs.'
+    EQUALITY caseIgnoreMatch
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1024}
+    SINGLE-VALUE )
+
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.26 NAME 'senderRelayHost'
+    DESC 'Sender dependent relayhost'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255}
+    SINGLE-VALUE )
+
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.27 NAME 'maxMessageSize'
+    DESC 'Max message size (in bytes)'
+    EQUALITY integerMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+    SINGLE-VALUE )
+
+# Mailbox format.
+# All formats supported by Dovecot are ok. e.g. maildir, mdbox.
+# FYI: https://wiki2.dovecot.org/MailboxFormat
+# Dovecot config file (/etc/dovecot/dovecot-ldap.conf) sets default value
+# to 'maildir' if this attribute doesn't present.
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.28 NAME 'mailboxFormat'
+    DESC 'Mailbox format. All formats supported by Dovecot are ok. e.g. maildir, mdbox.'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{50}
+    SINGLE-VALUE )
+
+# Mailbox folder name can be any folder name supported by Linux/BSD file system.
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.29 NAME 'mailboxFolder'
+    DESC 'Folder name appended to maildir path. e.g. Maildir, Mailbox.'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{50}
+    SINGLE-VALUE )
+
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.30 NAME 'recoveryEmail'
+    DESC 'Address used to receive email to recover password.'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320}
+    SINGLE-VALUE )
+
+attributetype ( 1.3.6.1.4.1.32349.1.2.2.31 NAME 'birthday'
+    DESC 'Birthday (in YYYY-MM-DD format).'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{10}
+    SINGLE-VALUE )
+
+#
+# Mail Service: Mail List related attributes.
+#
+attributetype ( 1.3.6.1.4.1.32349.1.2.3.1 NAME 'accessPolicy'
+    DESC 'Mail list access policy: open, domain, subdomain, moedratorsonly, memberOnly'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.3.2 NAME 'hasMember'
+    DESC 'Group has members: yes, no'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
+    SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.32349.1.2.3.3 NAME 'listAllowedUser'
+    DESC 'Addresses which are ALWAYS allowed to send email to mailing list'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320} )
+attributetype ( 1.3.6.1.4.1.32349.1.2.3.4 NAME 'listModerator'
+    DESC 'Moderator of mailing list'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320} )
+attributetype ( 1.3.6.1.4.1.32349.1.2.3.5 NAME 'listOwner'
+    DESC 'Owner of mailing list'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{320} )
+attributetype ( 1.3.6.1.4.1.32349.1.2.3.6 NAME 'mailingListID'
+    DESC 'A server-wide unique id for each (mlmmj) mailing list'
+    EQUALITY caseIgnoreIA5Match
+    SUBSTR caseIgnoreSubstringsMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{36} )
+
+#
+# Object Class Definitions
+#
+objectclass ( 1.3.6.1.4.1.32349.1.2.4.1 NAME 'mailDomain'
+    DESC 'Mail Domain' SUP top STRUCTURAL
+    MUST ( domainName )
+    MAY ( cn $ mtaTransport $ domainAdmin $
+        enabledService $ disabledService $
+        domainBackupMX $ accountStatus $ mailHost $
+        domainSenderBccAddress $ domainRecipientBccAddress $
+        domainMaxQuotaSize $ domainCurrentQuotaSize $
+        domainMaxUserNumber $ domainCurrentUserNumber $
+        domainMaxAliasNumber $ domainCurrentAliasNumber $
+        domainMaxListNumber $ domainCurrentListNumber $
+        domainDefaultUserQuota $ domainAliasName $ domainPendingAliasName $
+        disclaimer $ description $ street $ telephoneNumber $
+        facsimileTelephoneNumber $ expiredDate $ accountSetting $
+        domainWhitelistIP $ domainWhitelistSender $
+        domainBlacklistIP $ domainBlacklistSender $
+        preferredLanguage $ senderRelayHost ) )
+objectclass ( 1.3.6.1.4.1.32349.1.2.4.2 NAME 'mailAdmin'
+    DESC 'Mail Domain Admin' SUP top STRUCTURAL
+    MUST ( mail )
+    MAY ( domainGlobalAdmin $ description $
+        enabledService $ disabledService $
+        userPassword $ accountStatus $ cn $ sn $
+        preferredLanguage $ givenName $ expiredDate $
+        mailHost $ accountSetting $ shadowLastChange ) )
+objectclass ( 1.3.6.1.4.1.32349.1.2.4.3 NAME 'mailUser'
+    DESC 'Mail User' SUP top AUXILIARY
+    MUST ( mail $ uid )
+    MAY ( storageBaseDirectory $ mailMessageStore $ homeDirectory $
+        userPassword $ mailHost $ mailUID $ mailGID $
+        mailQuota $ mailQuotaMessageLimit $
+        mailForwardingAddress $ shadowAddress $ accountStatus $
+        userRecipientBccAddress $ userSenderBccAddress $
+        enabledService $ disabledService $
+        telephoneNumber $ backupMailAddress $
+        mtaTransport $ memberOfGroup $ expiredDate $
+        preferredLanguage $ disclaimer $ accountSetting $
+        title $ userManager $
+        mailWhitelistRecipient $ mailBlacklistRecipient $
+        domainGlobalAdmin $ allowNets $ senderRelayHost $
+        domainStatus $ maxMessageSize $ mailboxFormat $ mailboxFolder $
+        recoveryEmail $ birthday ) )
+objectclass ( 1.3.6.1.4.1.32349.1.2.4.4 NAME 'mailAlias'
+    DESC 'Mail Alias Account' SUP top STRUCTURAL
+    MUST ( mail )
+    MAY ( accountStatus $ description $ cn $ memberOfGroup $
+        enabledService $ disabledService $
+        mailForwardingAddress $ shadowAddress $ expiredDate $
+        accountSetting $ mailHost $ domainStatus $
+        accessPolicy $ listModerator ) )
+
+# Notes:
+#   - 'mtaTransport' and 'mailingListID' are used by mlmmj mailing list account
+objectclass ( 1.3.6.1.4.1.32349.1.2.4.5 NAME 'mailList'
+    DESC 'Mailing List Account' SUP top STRUCTURAL
+    MUST ( mail )
+    MAY ( cn $ accountStatus $ description $ accessPolicy $ shadowAddress $
+        enabledService $ disabledService $ memberOfGroup $ hasMember $
+        listAllowedUser $ expiredDate $ accountSetting $ mailHost $
+        member $ uniqueMember $ memberUid $ gidNumber $ domainStatus $
+        listModerator $ listOwner $
+        mtaTransport $ mailinglistID $ maxMessageSize ) )
+objectclass ( 1.3.6.1.4.1.32349.1.2.4.6 NAME 'mailExternalUser'
+    DESC 'Mail External User' SUP top STRUCTURAL
+    MUST ( memberOfGroup )
+    MAY ( cn $ accountStatus $ mail $ enabledService $ disabledService $
+        description $ mailHost $ accountSetting $ shadowAddress $
+        domainStatus ) )

package/dist/server/engine/samples/iredmail/used_quota_triggers_dovecot_2.3.pgsql

@@ -0,0 +1,40 @@
+-- Trigger required by Dovecot 2.3 quota dict.
+CREATE OR REPLACE FUNCTION merge_quota() RETURNS TRIGGER AS $$
+BEGIN
+    IF NEW.messages < 0 OR NEW.messages IS NULL THEN
+        -- ugly kludge: we came here from this function, really do try to insert
+        IF NEW.messages IS NULL THEN
+            NEW.messages = 0;
+        ELSE
+            NEW.messages = -NEW.messages;
+        END IF;
+        return NEW;
+    END IF;
+
+    LOOP
+        UPDATE used_quota
+        SET bytes = bytes + NEW.bytes, messages = messages + NEW.messages, domain=split_part(NEW.username, '@', 2)
+        WHERE username = NEW.username;
+        IF found THEN
+            RETURN NULL;
+        END IF;
+
+        BEGIN
+            IF NEW.messages = 0 THEN
+                INSERT INTO used_quota (bytes, messages, username, domain)
+                VALUES (NEW.bytes, NULL, NEW.username, split_part(NEW.username, '@', 2));
+            ELSE
+                INSERT INTO used_quota (bytes, messages, username, domain)
+                VALUES (NEW.bytes, -NEW.messages, NEW.username, split_part(NEW.username, '@', 2));
+            END IF;
+            return NULL;
+            EXCEPTION WHEN unique_violation THEN
+            -- someone just inserted the record, update it
+        END;
+    END LOOP;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE OR REPLACE TRIGGER mergequota
+    BEFORE INSERT ON used_quota FOR EACH ROW
+    EXECUTE PROCEDURE merge_quota();

package/dist/server/engine/samples/iredmail/used_quota_triggers_dovecot_2.4.pgsql

@@ -0,0 +1,18 @@
+-- Dovecot 2.4 uses plugin `quota_clone` to store quota usage info in SQL db,
+-- Dovecot 2.3 uses quota dict for that, triggers used by 2.3 does not work
+-- in 2.4 anymore, and we just need trigger to set `used_quota.domain` in 2.4.
+
+-- Remove trigger created for Dovecot 2.3.
+DROP TRIGGER IF EXISTS mergequota ON used_quota;
+
+CREATE OR REPLACE FUNCTION set_used_quota_domain() RETURNS TRIGGER AS $$
+BEGIN
+    NEW.domain := split_part(LOWER(NEW.username), '@', 2);
+    RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE OR REPLACE TRIGGER used_quota_before_insert
+    BEFORE INSERT ON used_quota
+    FOR EACH ROW
+    EXECUTE PROCEDURE set_used_quota_domain();

package/dist/server/engine/samples/logrotate/dovecot

@@ -0,0 +1,13 @@
+PH_DOVECOT_LOG_DIR/*.log {
+    weekly
+    rotate 10
+    missingok
+    compress
+    delaycompress
+    notifempty
+    sharedscripts
+
+    postrotate
+        PH_SYSLOG_POSTROTATE_CMD
+    endscript
+}

package/dist/server/engine/samples/logrotate/iredapd

@@ -0,0 +1,13 @@
+PH_IREDAPD_LOG_DIR/*.log {
+    weekly
+    rotate 10
+    missingok
+    compress
+    delaycompress
+    notifempty
+    sharedscripts
+
+    postrotate
+        PH_SYSLOG_POSTROTATE_CMD
+    endscript
+}

package/dist/server/engine/samples/logrotate/mlmmjadmin

@@ -0,0 +1,13 @@
+PH_MLMMJADMIN_LOG_DIR/*.log {
+    weekly
+    rotate 10
+    missingok
+    compress
+    delaycompress
+    notifempty
+    sharedscripts
+
+    postrotate
+        PH_SYSLOG_POSTROTATE_CMD
+    endscript
+}

package/dist/server/engine/samples/logrotate/openldap

@@ -0,0 +1,19 @@
+PH_OPENLDAP_LOG_FILE {
+    compress
+    weekly
+    rotate 10
+    create 0600 PH_SYS_USER_LDAP PH_SYS_GROUP_LDAP
+    missingok
+    notifempty
+    sharedscripts
+
+    # Use bzip2 for compress.
+    #compresscmd bzip2
+    #uncompresscmd bunzip2
+    #compressoptions -9
+    #compressext .bz2
+
+    postrotate
+        PH_SYSLOG_POSTROTATE_CMD
+    endscript
+}

package/dist/server/engine/samples/logrotate/php-fpm

@@ -0,0 +1,13 @@
+PH_PHP_FPM_LOG_DIR/*.log {
+    weekly
+    rotate 10
+    missingok
+    compress
+    delaycompress
+    notifempty
+    sharedscripts
+
+    postrotate
+        PH_SYSLOG_POSTROTATE_CMD
+    endscript
+}

package/dist/server/engine/samples/openbsd/ldapd.conf

@@ -0,0 +1,58 @@
+schema "/etc/ldap/core.schema"
+schema "/etc/ldap/inetorgperson.schema"
+schema "/etc/ldap/nis.schema"
+schema "/etc/ldap/amavisd.schema"
+schema "/etc/ldap/iredmail.schema"
+
+listen on lo0 secure
+#listen on 127.0.0.1 secure
+listen on "/var/run/ldapi"
+
+namespace "PH_LDAP_SUFFIX" {
+    rootdn  "PH_LDAP_ROOTDN"
+    rootpw  "PH_LDAP_ROOTPW"
+
+    index   objectClass
+    index   accountStatus
+
+    index   sn
+    index   givenName
+    index   cn
+    index   mail
+    index   uid
+    index   shadowLastChange
+    index   userSenderBccAddress
+    index   userRecipientBccAddress
+
+    index   domainName
+    index   domainAliasName
+    index   domainPendingAliasName
+    index   domainAdmin
+    index   domainGlobalAdmin
+    index   domainBackupMX
+    index   domainSenderBccAddress
+    index   domainRecipientBccAddress
+    index   domainStatus
+
+    index   accessPolicy
+    index   memberOfGroup
+    index   member
+    index   uniqueMember
+    index   mailingListID
+
+    #
+    # Access policies
+    #
+    # Deny by default.
+    deny read,write access to subtree root by any
+
+    # Allow bind/read/write by self
+    allow read,write access to subtree root by self
+
+    # Read all mail accounts
+    allow read access to subtree "PH_LDAP_BASEDN" by "PH_LDAP_BINDDN"
+
+    # Allow to manage (read+write) mail accounts
+    allow read,write access to subtree "PH_LDAP_BASEDN" by "PH_LDAP_ADMIN_DN"
+    allow read,write access to subtree "PH_LDAP_ADMIN_BASEDN" by "PH_LDAP_ADMIN_DN"
+}

package/dist/server/engine/samples/openbsd/pf.conf

@@ -0,0 +1,28 @@
+# Basic PF rules for mail server.
+
+mail_services="{www, https, smtp, submission, imap, imaps, pop3, pop3s, ssh}"
+
+#table <spamd-white> persist
+#table <nospamd> persist file "/etc/mail/nospamd"
+#table <fail2ban> persist
+
+# Options
+set block-policy drop
+set skip on lo
+
+# Block all
+block log all
+
+# Fail2ban
+#block in quick on egress proto tcp from <fail2ban> to any
+
+pass out
+
+# rules for spamd(8)
+#pass in on egress proto tcp from any to any port smtp \
+#    divert-to 127.0.0.1 port spamd
+#pass in on egress proto tcp from <nospamd> to any port smtp
+#pass in log on egress proto tcp from <spamd-white> to any port smtp
+
+# Access to other mail services
+pass in on egress proto tcp from any to any port $mail_services

package/dist/server/engine/samples/postfix/command_filter.pcre

@@ -0,0 +1,3 @@
+# Work around clients that send `RCPT TO:<'user@domain'>` (Outlook 2003/2007).
+# WARNING: do not lose the parameters that follow the address.
+/^(RCPT\s+TO:\s*<)'([^[:space:]]+)'(>.*)/   $1$2$3