Results 1 to 10 of 10

Thread: Disable opendkim?

  1. #1
    mackoftrack's Avatar
    mackoftrack is offline Special Member
    Join Date
    Sep 2008
    Location
    Los Angeles, CA
    Posts
    135
    Rep Power
    6

    Default Disable opendkim?

    How do I disable opendkim altogether?

    Release 8.0.1_GA_5438.RHEL6_64_20121105164510 RHEL6_64 NETWORK edition.

  2. #2
    quanah is offline Zimbra Employee
    Join Date
    May 2007
    Location
    Zimbra
    Posts
    1,266
    Rep Power
    10

    Default

    Why? it does nothing unless you configure it to.
    Quanah Gibson-Mount
    Server Architect
    Zimbra, Inc
    --------------------
    Zimbra :: the leader in open source messaging and collaboration

  3. #3
    mackoftrack's Avatar
    mackoftrack is offline Special Member
    Join Date
    Sep 2008
    Location
    Los Angeles, CA
    Posts
    135
    Rep Power
    6

    Default

    Quote Originally Posted by quanah View Post
    Why? it does nothing unless you configure it to.
    Because I configured it at one point, and now I don't want to use it. So the question remains... How do I disable opendkim?

    I currently have 2 opendkim processes running:

    Code:
    zimbra   23973     1  0 Nov26 ?        00:00:00 /opt/zimbra/opendkim/sbin/opendkim -x /opt/zimbra/conf/opendkim.conf -u zimbra
    zimbra   23974 23973  0 Nov26 ?        00:00:18 /opt/zimbra/opendkim/sbin/opendkim -x /opt/zimbra/conf/opendkim.conf -u zimbra

  4. #4
    quanah is offline Zimbra Employee
    Join Date
    May 2007
    Location
    Zimbra
    Posts
    1,266
    Rep Power
    10

    Default

    a) Delete your opendkim key from the ldap server and DNS servers. This will put you back at the standard configuration of opendkim not doing anything.
    b) You have one opendkim instance running, with a parent and child thread
    Quanah Gibson-Mount
    Server Architect
    Zimbra, Inc
    --------------------
    Zimbra :: the leader in open source messaging and collaboration

  5. #5
    fooz is offline Member
    Join Date
    Jan 2010
    Posts
    11
    Rep Power
    5

    Default

    I too wanted to disable the bundled opendkim installation as I had to run a separate up-to-date opendkim milter version anyway. The duplicate logging for the bundled opendkim milter and my own milter were confusing...also the Zimbra bundled version had lots of logged segfaults in /var/log/messages.

    These are the steps I took to stop the Zimbra-bundled opendkim install from running & being called by Postfix:

    1) Update the "/opt/zimbra/postfix/conf/master.cf.in" file to comment out the port <ip or host>:10030 content_filter checks:

    diff -u /opt/zimbra/postfix/conf/master.cf.in-before-disabling-opendkim /opt/zimbra/postfix/conf/master.cf.in
    --- /opt/zimbra/postfix/conf/master.cf.in-before-disabling-opendkim 2013-04-17 16:27:19.883999977 -0700
    +++ /opt/zimbra/postfix/conf/master.cf.in 2013-04-23 14:54:27.178000081 -0700
    @@ -7,10 +7,10 @@
    # (yes) (yes) (yes) (never) (100)
    # ================================================== ========================
    smtp inet n - n - - smtpd
    - -o content_filter=scan:[%%zimbraLocalBindAddress%%]:10030
    +# -o content_filter=scan:[%%zimbraLocalBindAddress%%]:10030
    %%uncomment LOCALostjournal_enabled%% -o smtpd_proxy_filter=[%%zimbraLocalBindAddress%%]:10027
    465 inet n - n - - smtpd
    - -o content_filter=scan:[%%zimbraLocalBindAddress%%]:10030
    +# -o content_filter=scan:[%%zimbraLocalBindAddress%%]:10030
    -o smtpd_tls_wrappermode=yes
    -o smtpd_sasl_auth_enable=yes
    -o smtpd_client_restrictions=
    @@ -23,7 +23,7 @@
    -o milter_macro_daemon_name=ORIGINATING
    %%uncomment LOCALostjournal_enabled%% -o smtpd_proxy_filter=[%%zimbraLocalBindAddress%%]:10027
    submission inet n - n - - smtpd
    - -o content_filter=scan:[%%zimbraLocalBindAddress%%]:10030
    +# -o content_filter=scan:[%%zimbraLocalBindAddress%%]:10030
    -o smtpd_etrn_restrictions=reject
    -o smtpd_sasl_auth_enable=%%zimbraMtaSaslAuthEnable%%
    -o smtpd_tls_security_level=%%zimbraMtaTlsSecurityLev el%%

    2) Update the zmmtactl file to disable starting the embedded opendkim milter:

    --- /opt/zimbra/bin/zmmtactl.before-opendkimt-disable 2013-04-23 14:57:38.689000079 -0700
    +++ /opt/zimbra/bin/zmmtactl 2013-04-23 14:58:33.133000082 -0700
    @@ -28,9 +28,9 @@
    zimbraMilterServerEnabled=${zimbraMilterServerEnab led:=FALSE}

    if [ x"$zimbraMilterServerEnabled" = "xTRUE" ]; then
    - SCRIPTS="postfix zmsaslauthdctl zmmilterctl zmopendkimctl"
    + SCRIPTS="postfix zmsaslauthdctl zmmilterctl"
    else
    - SCRIPTS="postfix zmsaslauthdctl zmopendkimctl"
    + SCRIPTS="postfix zmsaslauthdctl"
    fi

    rewriteconfig() {


    3) As the "zimbra" user, run these commands:

    zmopendkimctl stop
    zmmtactl restart
    Last edited by fooz; 04-24-2013 at 09:47 AM.

  6. #6
    jim.thornton is offline Loyal Member
    Join Date
    May 2010
    Posts
    95
    Rep Power
    5

    Default

    Fooz: I'm sorry to hijack this thread, but I was hoping that you could please share the method in which you installed a non-bundled version of opendkim? I would like to activate opendkim but there seems to be a common issue (segfaults) and I would rather a smooth running version. So I didn't want to activate the bundled version.
    Release 7.1.2_GA_3268.UBUNTU10_64 UBUNTU10_64 FOSS edition.

  7. #7
    quanah is offline Zimbra Employee
    Join Date
    May 2007
    Location
    Zimbra
    Posts
    1,266
    Rep Power
    10

    Default

    There is no "issue" with segfaults and OpenDKIM in Zimbra. The segfaults only occur when OpenDKIM is *stopped*. It has zero effect on the running service, and is a minor, non-service affecting issue related to the way the TLS library is torn down at shutdown. ZCS 8.0.4 has an updated version of OpenDKIM that fixes this annoyance, but it has no service affecting impact. Use the version bundled with Zimbra.
    Quanah Gibson-Mount
    Server Architect
    Zimbra, Inc
    --------------------
    Zimbra :: the leader in open source messaging and collaboration

  8. #8
    jim.thornton is offline Loyal Member
    Join Date
    May 2010
    Posts
    95
    Rep Power
    5

    Default

    Fair enough... Hopefully I didn't mess anything up. Please tell me would the following actions mess up the bundled version:

    1. Installing opendkim opendkim-tools packages with aptitude
    2. creating folder /etc/opendkim and /etc/opendkim/keys including the files /etc/opendkim/opendkim.conf
    3. rm -rf /etc/opendkim
    4. dpkg -P opendkim opendkim-tools

    Basically, I started installing it, never finished and then removed what I did. Will this mess up Zimbra's opendkim bundle?
    Release 7.1.2_GA_3268.UBUNTU10_64 UBUNTU10_64 FOSS edition.

  9. #9
    quanah is offline Zimbra Employee
    Join Date
    May 2007
    Location
    Zimbra
    Posts
    1,266
    Rep Power
    10

    Default

    Hi Jim,

    You should be fine, Zimbra's OpenDKIM is self-contained.
    Quanah Gibson-Mount
    Server Architect
    Zimbra, Inc
    --------------------
    Zimbra :: the leader in open source messaging and collaboration

  10. #10
    fooz is offline Member
    Join Date
    Jan 2010
    Posts
    11
    Rep Power
    5

    Default

    I should point out that as of Zimbra 8.0.4, the bundled opendkim instance is a toggle-able feature. You can fully disable it by running the following:

    zmprov ms `zmhostname` -zimbraServiceEnabled opendkim

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. opendkim crashed with segfault in zimbra 8.0.0 & 8.0.1 ose
    By Knatterton in forum Administrators
    Replies: 6
    Last Post: 05-29-2013, 12:12 PM
  2. opendkim crashed with segfault in zimbra 8.0.0 & 8.0.1 ose
    By Knatterton in forum Error Reports
    Replies: 1
    Last Post: 11-26-2012, 06:40 AM
  3. zimbra 8 openDKIM - milter issue
    By oddmyth in forum Administrators
    Replies: 2
    Last Post: 10-31-2012, 01:50 PM
  4. digital signature with opendkim in zimbra
    By breejesh in forum Administrators
    Replies: 0
    Last Post: 07-04-2012, 01:00 AM
  5. Replies: 2
    Last Post: 08-25-2011, 03:41 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •