开源ISPCP社区 - syscp

Debian 5下安装syscp教程（二）

webmaster@ispcpcn.com() — Thu, 21 Jan 2010 12:32:18 GMT

      五、IMAP/POP3服务器：
     （一）Courier
      1、安装Courier:

# apt-get install courier-pop courier-imap courier-authlib-mysql

2、编辑/etc/courier/authdaemonrc：

# /etc/courier/authdaemonrc

将authmodulelist的值修改为authmysql，如下：

[.......]
authmodulelist="authmysql"
[.......]

3、将/etc/courier/authmysqlrc改名备份：

# mv /etc/courier/authmysqlrc /etc/courier/authmysqlrc.bak

新建/etc/courier/authmysqlrc：

# vi /etc/courier/authmysqlrc

内容如下（注意将红色部分改成您设置的syscp数据库的密码）：

MYSQL_SERVER 127.0.0.1
MYSQL_USERNAME syscp
MYSQL_PASSWORD MYSQL_PASSWORD
MYSQL_PORT 3306
MYSQL_DATABASE syscp
MYSQL_USER_TABLE mail_users
MYSQL_CRYPT_PWFIELD password_enc
MYSQL_UID_FIELD uid
MYSQL_GID_FIELD gid
MYSQL_LOGIN_FIELD username
MYSQL_HOME_FIELD homedir
MYSQL_MAILDIR_FIELD maildir
MYSQL_QUOTA_FIELD (quota*1024*1024)

4、重启重启courier：

# /etc/init.d/courier-authdaemon restart
# /etc/init.d/courier-pop restart

（二）、Dovecot
1、安装Dovecot：

# apt-get install dovecot-imapd dovecot-pop3d

2、改名备份/etc/dovecot/dovecot.conf：

# /etc/dovecot/dovecot.conf /etc/dovecot/dovecot.conf.bak

新建/etc/dovecot/dovecot.conf：

# vi /etc/dovecot/dovecot.conf

内容如下（注意将红色修改为您的主机名）：

base_dir = /var/run/dovecot
protocols = imap pop3 imaps pop3s
listen = *
mail_access_groups = vmail
mail_debug = no
## Uncomment this line to allow Plaintext Logins from foreign IP if the Connection doesn't use TLS
disable_plaintext_auth = no

### SSL Settings
### After setting this options, set disable_plaintext_auth to yes (see above)
### and add imaps pop3s to the protocols
#ssl_cert_file = /etc/ssl/server/host.ispcpcn.com.pem
#ssl_key_file = /etc/ssl/server/host.ispcpcn.com.key
## This is an example with CACerts class3 cert!
#ssl_ca_file = /path/to/cacert.class3.crt
#ssl_cipher_list = ALL:!LOW:!SSLv2

protocol imap {
mail_plugins = quota imap_quota
}

protocol pop3 {
# Uncomment this line if you are migrating from Courier also see Migration from Courier
pop3_uidl_format = UID%u-%v
mail_plugins = quota

}
protocol lda {
# postmaster is the one in charge of the mail system. MUST be set to a vailid address!
postmaster_address = <postmaster-address>
auth_socket_path = /var/run/dovecot/auth-master
mail_plugins = quota
sendmail_path = /usr/sbin/sendmail
}

auth default {
mechanisms = plain login
passdb sql {
args = /etc/dovecot/dovecot-sql.conf
}

userdb prefetch {
}

userdb sql {
args = /etc/dovecot/dovecot-sql.conf
}

user = vmail
socket listen {
# Postfix uses the client socket for SMTP Auth
client {
# Assuming the default Postfix $queue_directory setting
path = /var/spool/postfix/private/auth
mode = 0660
# Assuming the default Postfix user and group
user = postfix
group = postfix
}
# Note that we're setting a master socket. SMTP AUTH for Postfix and Exim uses client sockets.
master {
path = /var/run/dovecot/auth-master
mode = 0660
user = vmail
group = vmail
}

}
}
plugin {
quota = maildir
}

3、将/etc/dovecot/dovecot-sql.conf改名备份：

# mv /etc/dovecot/dovecot-sql.conf /etc/dovecot/dovecot-sql.conf.bak

新建/etc/dovecot/dovecot-sql.conf文件：

# mv /etc/dovecot/dovecot-sql.conf

内容如下（注意将红色部分替换成您的syscp数据库的密码）：

driver = mysql
connect = host=127.0.0.1 dbname=syscp user=syscp password=MYSQL_PASSWORD
default_pass_scheme = CRYPT
password_query = SELECT username AS user, password_enc AS password, CONCAT(homedir, maildir) AS userdb_home, uid AS userdb_uid, gid AS userdb_gid, CONCAT('maildir:storage=', (quota*1024)) as userdb_quota FROM mail_users WHERE username = '%u' OR email = '%u'
user_query = SELECT CONCAT(homedir, maildir) AS home, uid, gid, CONCAT('maildir:storage=', (quota*1024)) as quota FROM mail_users WHERE username = '%u' OR email = '%u'

4、重启dovecot：

# /etc/init.d/dovecot restart

      六、FTP服务器
      （一）proftpd
      1、安装proftpd：

# apt-get install proftpd proftpd-basic proftpd-mod-mysql proftpd-mod-ldap

安装过程中会出选择界面，请选择“standalone”
2、改名备份/etc/proftpd/sql.conf：

# mv /etc/proftpd/sql.conf /etc/proftpd/sql.conf.bak

新建/etc/proftpd.sql.conf：

# vi /etc/proftpd/sql.conf

内容如下（注意红色部分要修改成您设置的syscp数据库密码）：

<IfModule mod_sql.c>
DefaultRoot ~
RequireValidShell off
AuthOrder mod_sql.c

SQLBackend mysql
SQLEngine on
SQLAuthenticate on

SQLAuthTypes Crypt
SQLAuthenticate users* groups*
SQLConnectInfo syscp@127.0.0.1 syscp MYSQL_PASSWORD
SQLUserInfo ftp_users username password uid gid homedir shell
SQLGroupInfo ftp_groups groupname gid members
SQLUserWhereClause "login_enabled = 'y'"

SQLLog PASS login
SQLNamedQuery login UPDATE "last_login=now(), login_count=login_count+1 WHERE username='%u'" ftp_users

SQLLog RETR download
SQLNamedQuery download UPDATE "down_count=down_count+1, down_bytes=down_bytes+%b WHERE username='%u'" ftp_users

SQLLog STOR upload
SQLNamedQuery upload UPDATE "up_count=up_count+1, up_bytes=up_bytes+%b WHERE username='%u'" ftp_users
</IfModule>

3、改名备份/etc/proftpd/modules.conf：

# mv /etc/proftpd/modules.conf /etc/proftpd/modules.conf.bak

新建/etc/proftpd/modules.conf：

# vi /etc/proftpd/modules.conf

内容如下：

#
# This file is used to manage DSO modules and features.
#

# This is the directory where DSO modules reside

ModulePath /usr/lib/proftpd

# Allow only user root to load and unload modules, but allow everyone
# to see which modules have been loaded

ModuleControlsACLs insmod,rmmod allow user root
ModuleControlsACLs lsmod allow user *

LoadModule mod_ctrls_admin.c
LoadModule mod_tls.c

# Install proftpd-mod-mysql or proftpd-mod-pgsql to use this
LoadModule mod_sql.c

# Install proftpd-mod-ldap to use this
#LoadModule mod_ldap.c

#
# 'SQLBackend mysql' or 'SQLBackend postgres' directives are required
# to have SQL authorization working. You can also comment out the
# unused module here, in alternative.
#

# Install proftpd-mod-mysql to use this
LoadModule mod_sql_mysql.c

# Install proftpd-mod-pgsql to use this
#LoadModule mod_sql_postgres.c

LoadModule mod_radius.c
LoadModule mod_quotatab.c
LoadModule mod_quotatab_file.c

# Install proftpd-mod-ldap to use this
#LoadModule mod_quotatab_ldap.c

# Install proftpd-mod-pgsql or proftpd-mod-mysql to use this
#LoadModule mod_quotatab_sql.c
LoadModule mod_quotatab_radius.c
LoadModule mod_wrap.c
LoadModule mod_rewrite.c
LoadModule mod_load.c
LoadModule mod_ban.c
LoadModule mod_wrap2.c
LoadModule mod_wrap2_file.c
# Install proftpd-mod-pgsql or proftpd-mod-mysql to use this
#LoadModule mod_wrap2_sql.c
LoadModule mod_dynmasq.c

# keep this module the last one
LoadModule mod_ifsession.c

4、改名备份/etc/proftpd/proftpd.conf：

# mv /etc/proftpd/proftpd.conf /etc/proftpd/proftpd.conf.bak

新建/etc/proftpd/proftpd.conf：

# vi /etc/proftpd/proftpd.conf

内容如下：

#
# /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file.
# To really apply changes reload proftpd after modifications.
#
# Includes DSO modules
Include /etc/proftpd/modules.conf
# Set off to disable IPv6 support which is annoying on IPv4 only boxes.
UseIPv6 off
# If set on you can experience a longer connection delay in many cases.
IdentLookups off
ServerName "host.ispcpcn.com FTP Server"
ServerType standalone
DeferWelcome off

MultilineRFC2228 on
DefaultServer on
ShowSymlinks on

TimeoutNoTransfer 600
TimeoutStalled 600
TimeoutIdle 1200

DisplayLogin welcome.msg
DisplayChdir .message true
ListOptions "-l"

DenyFilter \*.*/

# Use this to jail all users in their homes
# DefaultRoot ~

# Users require a valid shell listed in /etc/shells to login.
# Use this directive to release that constrain.
# RequireValidShell off

# Port 21 is the standard FTP port.
Port 21

# In some cases you have to specify passive ports range to by-pass
# firewall limitations. Ephemeral ports can be used for that, but
# feel free to use a more narrow range.
# PassivePorts 49152 65534

# If your host was NATted, this option is useful in order to
# allow passive tranfers to work. You have to use your public
# address and opening the passive ports used on your firewall as well.
# MasqueradeAddress 1.2.3.4

# This is useful for masquerading address with dynamic IPs:
# refresh any configured MasqueradeAddress directives every 8 hours
<IfModule mod_dynmasq.c>
# DynMasqRefresh 28800
</IfModule>

# To prevent DoS attacks, set the maximum number of child processes
# to 30. If you need to allow more than 30 concurrent connections
# at once, simply increase this value. Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances 30

# Set the user and group that the server normally runs at.
User proftpd
Group nogroup

# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask 022 022
# Normally, we want files to be overwriteable.
AllowOverwrite on

# Uncomment this if you are using NIS or LDAP via NSS to retrieve passwords:
# PersistentPasswd off

# This is required to use both PAM-based authentication and local passwords
# AuthOrder mod_auth_pam.c* mod_auth_unix.c

# Be warned: use of this directive impacts CPU average load!
# Uncomment this if you like to see progress and transfer rate with ftpwho
# in downloads. That is not needed for uploads rates.
#
# UseSendFile off

TransferLog /var/log/proftpd/xferlog
SystemLog /var/log/proftpd/proftpd.log

<IfModule mod_quotatab.c>
QuotaEngine off
</IfModule>

<IfModule mod_ratio.c>
Ratios off
</IfModule>

# Delay engine reduces impact of the so-called Timing Attack described in
# http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
# It is on by default.
<IfModule mod_delay.c>
DelayEngine off
</IfModule>

<IfModule mod_ctrls.c>
ControlsEngine off
ControlsMaxClients 2
ControlsLog /var/log/proftpd/controls.log
ControlsInterval 5
ControlsSocket /var/run/proftpd/proftpd.sock
</IfModule>

<IfModule mod_ctrls_admin.c>
AdminControlsEngine off
</IfModule>

#
# Alternative authentication frameworks
#
#Include /etc/proftpd/ldap.conf
Include /etc/proftpd/sql.conf

#
# This is used for FTPS connections
#
#Include /etc/proftpd/tls.conf

5、重启proftpd：

# /etc/init.d/proftpd restart

（二）Pure-ftpd
1、安装pure-ftpd：

# apt-get install pure-ftpd-common pure-ftpd-mysql

2、建立文件/etc/pure-ftpd/conf/MaxIdleTime：

# vi /etc/pure-ftpd/conf/MaxIdleTime

文件内容为“15”，如下：

3、建立/etc/pure-ftpd/conf/ChrootEveryone：

# vi /etc/pure-ftpd/conf/ChrootEveryone

内容为“yes”，如下：

yes

4、编辑/etc/pure-ftpd/conf/PAMAuthentication：

# vi /etc/pure-ftpd/conf/PAMAuthentication

将“yes”改成“no”，如下：

5、改名备份/etc/pure-ftpd/db/mysql.conf：

# mv /etc/pure-ftpd/db/mysql.conf /etc/pure-ftpd/db/mysql.conf.bak

重新建立文件/etc/pure-ftpd/db/mysql.conf：

# vi /etc/pure-ftpd/db/mysql.conf

内容如下（注意将红色部分替换成您的syscp数据库密码）：

MYSQLServer 127.0.0.1
MYSQLUser syscp
MYSQLPassword MYSQL_PASSWORD
MYSQLDatabase syscp
MYSQLCrypt any

MYSQLGetPW SELECT password FROM ftp_users WHERE username="\L" AND login_enabled="y"
MYSQLGetUID SELECT uid FROM ftp_users WHERE username="\L" AND login_enabled="y"
MYSQLGetGID SELECT gid FROM ftp_users WHERE username="\L" AND login_enabled="y"
MYSQLGetDir SELECT homedir FROM ftp_users WHERE username="\L" AND login_enabled="y"

6、建立/etc/pure-ftpd/conf/CustomerProof：

# vi /etc/pure-ftpd/conf/CustomerProof

内容为“1”，如下：

7、建立/etc/pure-ftpd/conf/Bind：

# vi /etc/pure-ftpd/conf/Bind

内容为“21”，如下：

8、改名备份/etc/default/pure-ftpd-common：

# mv /etc/default/pure-ftpd-common /etc/default/pure-ftpd-common.bak

重新创建/etc/default/pure-ftpd-common：

# vi /etc/default/pure-ftpd-common

内容如下：

STANDALONE_OR_INETD=standalone
VIRTUALCHROOT=false
UPLOADSCRIPT=
UPLOADUID=
UPLOADGID=

9、重启pure-ftpd：

# /etc/init.d/pure-ftpd-mysql restart

七、添加计划任务
1、建立/etc/cron.d/syscp文件：

# vi /etc/cron.d/syscp

内容如下：

0 0 * * * root /usr/bin/php5 -q /var/www/syscp/scripts/cron_traffic.php
30 0 * * * root /usr/bin/php5 -q /var/www/syscp/scripts/cron_ticketarchive.php
0 1 * * * root /usr/bin/php5 -q /var/www/syscp/scripts/cron_used_tickets_reset.php
*/5 * * * * root /usr/bin/php5 -q /var/www/syscp/scripts/cron_autoresponder.php
*/5 * * * * root /usr/bin/php5 -q /var/www/syscp/scripts/cron_apsinstaller.php
*/30 * * * * root /usr/bin/php5 -q /var/www/syscp/scripts/cron_apsupdater.php

2、重启计划任务：

# /etc/init.d/cron restart

八、xinetd
1、安装xinetd：

# apt-get install xinetd
# echo -e "syscp 0/tcp # SysCP Realtime" >> /etc/services

2、建立/etc/xinetd.d/syscp：

# vi /etc/xinetd.d/syscp

内容如下：

service syscp
{
id = syscp
socket_type = dgram
protocol = tcp
wait = no
user = root
server = /usr/bin/php
server_args = -q /var/www/syscp/scripts/cron_tasks.php
only_from = 127.0.0.1
}

3、重启xinetd：

# /etc/init.d/xinetd restart

至此，安装基本完毕，还剩下awstats，我使用的是lighttpd，在安装awstats过程中失败，不知道是什么原因，所以awstats暂时空缺吧！！您可以使用http://yourip/syscp 来管理你的虚拟主机了！！

Debian 5下安装syscp教程（一）

webmaster@ispcpcn.com() — Thu, 21 Jan 2010 12:31:14 GMT

       SysCP (System Control Panel) 是一个基于Web 的 ISP 服务器管理工具,可以管理包括 Apache HTTP、Lighttpd服务器、邮件服务器(Postfix、Exim,Courier、dovecot)、FTP服务器(ProFTPd、PureFtpd)、MySQL数据库服务器以及域名服务器Bind、PowerDNS。
       下面，我们在Debian 5.0.1下安装SysCP。
       安装前的准备工作：
       1、安装操作系统，可参见：Debian 5.0.1图文安装教程！
       2、操作系统的配置（仅作参考，您可以将这些参数修改为您的服务器的配置参数）
            服务器IP：192.168.0.200
            子网掩码：255.255.255.0
            网关：192.168.0.1
            DNS解析服务器地址：61.128.192.68 61.128.128.68
            服务器主机名：host.ispcpcn.com
            备注：以上参数仅作为安装时的说明，请注意按照您的具体情况进行设置，对服务器IP、子网掩码、网关、DNS地址和服务器的主机名您如果不清楚，可以向相关技术人员咨询。
        3、更新系统
        使用下面的命令更新Debian系统到最新：

#apt-get update
#apt-get upgrade

4、安装openssh-server
Debian默认没有安装openssh-server，所以我们要自己安装它，使用如下命令安装openssh-server

#apt-get install ssh openssh-server

        5、教程说明
             本文中，“一”、“二”、“三”代表的是每一种服务。
             本文中（一）、（二）、（三）代表的每一种服务可选择的软件包，比如web服务中，可选择（一）Apache，（二）Lighttpd
             本文中，“1、”、“2、”、“3、”代表每种软件包的安装步骤。

一、数据库服务器的安装
1、SysCP使用的数据库是MySQL数据库，因此，我们只有一种选择，使用下面的命令行安装MySQL服务：

# apt-get install mysql-server-5.0 libnss-mysql

在安装过程中，会要求输入MySQL数据库管理员root的密码，连续输入两次即可。
2、设置MySQL

# /usr/bin/mysql_secure_installation

在设置过程中，会出现以下选项，请根据您的需要作出选择，同意就输入“Y”，不同意就输入“n”：

Set root password? [Y/n] → 是否设置数据库的root管理员的密码
Remove anonymous users? [Y/n] → 是否删除匿名用户
Disallow root login remotely? [Y/n] → 是否禁止root远程访问
Remove test database and access to it? [Y/n] → 是否删除测试数据库和他的远程访问
Reload privilege tables now? [Y/n] → 是否重置数据表的权限

       二、安装Web服务器
       （一）Apache
       1、安装Apache和PHP以及部分软件

# apt-get install apache2-mpm-prefork apache2-suexec-custom libapache2-mod-fcgid libapache2-mod-php5 php5-cgi php5-cli php5-imap php5-gd php5-mysql php5-mcrypt php5-xcache unzip unrar-nonfree webalizer geoip-bin

2、建立虚拟主机设置，编辑/etc/apache2/httpd.conf

# vi /etc/apache2/httpd.conf

内容如下：

DocumentRoot /var/www/
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>

3、使用如下命令建立虚拟主机的网页，日志，PHP临时目录等：

# mkdir -p /var/customers/webs/
# mkdir -p /var/customers/logs/
# mkdir -p /var/customers/tmp
# chmod 1777 /var/customers/tmp
# a2dismod userdir

4、启用新设置，运行如下命令：

# a2dissite default
# a2dissite default-ssl
# /etc/init.d/apache2 restart

5、改变suexec设置，编辑/etc/apache2/suexec/www-data ：

# vi /etc/apache2/suexec/www-data

编辑后的内容如下：

/var/kunden/
public_html/cgi-bin
# The first two lines contain the suexec document root and the suexec userdir
# suffix. Both features can be disabled separately by prepending a # character.
# This config file is only used by the apache2-suexec-custom package

6、重启Apache服务器

# /etc/init.d/apache2 restart

（二）Lighttpd
1、安装Lighttpd及部分软件

#apt-get update lighttpd php5-cgi php5-imap php5-gd php5-mysql php5-mcrypt php5-xcache unzip unrar-nonfree webalizer geoip-bin

2、改名备份/etc/lighttpd/lighttpd.conf

# mv /etc/lighttpd/lighttpd.conf /etc/lighttpd/lighttpd.conf.bak

新建/etc/lighttpd/lighttpd.conf

# vi /etc/lighttpd/lighttpd.conf

内容如下（注意红色提醒部分）：

#######################################################
#Default lighttpd.conf for SysCP.
#######################################################
var.basedir = "/var/www"
var.logdir = "/var/log/lighttpd"
var.statedir = "/var/lib/lighttpd"
server.modules = (
"mod_rewrite",
"mod_redirect",
"mod_alias",
"mod_access",
"mod_auth",
"mod_fastcgi",
"mod_accesslog"
)
server.username = "www-data"
server.groupname = "www-data"
server.document-root = var.basedir
server.pid-file = "/var/run/lighttpd.pid"
accesslog.filename = var.logdir + "/access.log"
server.errorlog = var.logdir + "/error.log"
server.indexfiles = ("index.php", "index.html",
"index.htm", "default.htm")

server.name = "host.ispcpcn.com" ←这里改成你的服务器主机名
server.port = 80
server.bind = "192.168.0.200" ←这里改成你的服务器IP
url.access-deny = ("~", ".inc")
fastcgi.server = (
".php" => (
"localhost" => (
"socket" => "/tmp/php.stock",
"broken-scriptfilename" => "enable",
"bin-path" => "/usr/bin/php5-cgi",
"min-procs" => 1,
"max-procs" => 1,
"max-load-per-proc" => 4,
"idle-timeout" => 60,
"bin-environment" => (
"UID" => "www-data",
"GID" => "www-data",
"PHP_FCGI_CHILDREN" => "0",
"PHP_FCGI_MAX_REQUESTS" => "10000"
),
"bin-copy-environment" => ( "" )
)
)
)
#### external configuration files
## mimetype mapping
include_shell "/usr/share/lighttpd/create-mime.assign.pl"
## load enabled configuration files,
## read /etc/lighttpd/conf-available/README first
include_shell "/usr/share/lighttpd/include-conf-enabled.pl"

3、然后运行下面的命令行设置lighttpd和重启lighttpd：

# mkdir -p /etc/lighttpd/conf-enabled/
# mkdir -p /etc/lighttpd/syscp-diroptions/
# echo -e '\ninclude_shell "find /etc/lighttpd/conf-enabled/ -maxdepth 1 -name '*.conf' -exec cat {} \;"' >> /etc/lighttpd/lighttpd.conf
# echo -e '\ninclude_shell "find /etc/lighttpd/syscp-diroptions/ -maxdepth 1 -name '*.conf' -exec cat {} \;"' >> /etc/lighttpd/lighttpd.conf
# mkdir -p /var/customers/webs/
# mkdir -p /var/customers/logs/
# mkdir -p /var/customers/tmp
# chmod 1777 /var/customers/tmp
# /etc/init.d/lighttpd restart

三、安装syscp控制面板
1、安装subversion，以便使用svn安装syscp

# apt-get install subversion

2、切换到/var/www下载syscp文件：

# cd /var/www
# svn co http://svn.syscp.org/trunk/syscp

        3、使用http://你的ip/syscp/install/install.php访问syscp，安装设置syscp
             具体设置界面和设置方法请看下图：

         设置完成后，移动/tmp/userdata.ini.php到/var/www/syscp/lib/

# mv /tmp/userdata.inc.php /var/www/syscp/lib/

         现在使用http://yourip/syscp就可以访问你的控制面板了。
         4、编辑/etc/nss-mysql.conf
          请对参照下面的内容对您的/etc/nss-mysql.conf进行修改：

conf.version = 2;
users.host = inet:127.0.0.1:3306;
users.database = syscp;
users.db_user = syscp;
users.db_password = MYSQL_PASSWORD;←这里输入你安装syscp设置的syscp的数据库密码
users.table = ftp_users u;
users.where_clause =;
users.user_column = u.username;
users.password_column = u.password;
users.userid_column = u.id;
users.uid_column = u.uid;
users.gid_column = u.gid;
users.realname_column = u.username;
users.homedir_column = u.homedir;
users.shell_column = u.shell;
groups.group_info_table = ftp_groups g;
groups.where_clause = ;
groups.group_name_column = g.groupname;
groups.groupid_column = g.id;
groups.gid_column = g.gid;
groups.password_column = "x";
groups.members_table = ftp_groups ug;
groups.member_userid_column = ug.customerid;
groups.member_groupid_column = ug.id;

5、编辑/etc/nsswitch.conf5、编辑/etc/nsswitch.conf：

# vi /etc/nsswitch.conf

请参照下面内容进行编辑：

# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd: compat mysql
group: compat mysql
shadow: compat mysql

hosts: files dns
networks: files

protocols: db files
services: db files
ethers: db files
rpc: db files

netgroup: nis

6、编辑/etc/nss-mysql-root.conf

# vi /etc/nss-mysql-root.conf

参照下面的内容进行编辑，注意红色提醒部分：

conf.version = 2;
shadow.host = inet:localhost:3306;
shadow.database = syscp;
shadow.db_user = syscp;
shadow.db_password = MYSQL_PASSWORD;←这里将MYSQL_PASSWORD替换成您的syscp数据库的密码
shadow.table = ftp_users u;
shadow.where_clause = ;
shadow.userid_column = u.id;
shadow.user_column = u.username;
shadow.password_column = u.password;
shadow.lastchange_column = UNIX_TIMESTAMP()-10;
shadow.min_column = 1;
shadow.max_column = 2;
shadow.warn_column = 7;
shadow.inact_column = -1;
shadow.expire_column = -1;

       三、DNS服务器配置：
       （一）Bind9
         1、安装并设置Bind9

# apt-get install bind9
# echo "include \"/etc/bind/syscp_bind.conf\";" >> /etc/bind/named.conf
# touch /etc/bind/syscp_bind.conf

3、重启Bind9

# /etc/init.d/bind9 restart

（二）PowerDNS
1、安装PowerDNS

# apt-get install pdns

2、/etc/powerdns/pdns.conf ：

# vi /etc/powerdns/pdns.conf

编辑后的内容如下：

allow-recursion=127.0.0.1
config-dir=/etc/powerdns
daemon=yes
guardian=yes
launch=bind
lazy-recursion=yes
local-port=53
master=yes
module-dir=/usr/lib/powerdns
setgid=pdns
setuid=pdns
socket-dir=/var/run
version-string=powerdns
bind-config=/etc/bind/named.conf
bind-check-interval=300
include=/etc/powerdns/pdns_syscp.conf

3、编辑/etc/powerdns/pdns_syscp.conf：

# vi /etc/powerdns/pdns_syscp.conf

编辑后的内容如下：

allow-axfr-ips=
#local-ipv6=YOUR_IPv6_(if_any)
bind-config=/etc/bind/named.conf
bind-check-interval=180
log-dns-details=yes
local-address=192.168.0.200,127.0.0.1 ←注意将192.168.0.200替换成您的服务器IP

4、重启PowerDNS:

# /etc/init.d/pdns restart

         四、SMTP服务器
         （一）Exim4
          1、安装exim4-daemon-heavy

# apt-get install exim4-daemon-heavy

2、使用下面命令进行基本的配置：

# dpkg-reconfigure exim4-config

          设置中会出现：
          （1）邮件系统的常见设置：这里选择现在不进行配置。
          （2）询问是否不配置：这里选择是。
          （3）将设置文件拆成小文件：这里选择是。
          3、建立/etc/exim4/conf.d/acl/30_exim4-config_check_rcpt.rul：

# vi /etc/exim4/conf.d/acl/30_exim4-config_check_rcpt.rul

文件内容如下：

### acl/30_exim4-config_check_rcpt
#################################
acl_check_rcpt:
accept
hosts = :
warn
hosts = +relay_from_hosts
control = submission/sender_retain
.ifdef CHECK_RCPT_LOCAL_LOCALPARTS
deny
domains = +local_domains:+syscp_domain
local_parts = CHECK_RCPT_LOCAL_LOCALPARTS
message = restricted characters in address
.endif
.ifdef CHECK_RCPT_REMOTE_LOCALPARTS
deny
domains = !+local_domains
local_parts = CHECK_RCPT_REMOTE_LOCALPARTS
message = restricted characters in address
.endif
accept
.ifndef CHECK_RCPT_POSTMASTER
local_parts = postmaster
.else
local_parts = CHECK_RCPT_POSTMASTER
.endif
domains = +local_domains:+syscp_domain
deny
message = sender envelope address $sender_address is locally blacklisted here. If you think this is wrong, get in touch with postmaster
!acl = acl_local_deny_exceptions
senders = ${if exists{CONFDIR/local_sender_blacklist}\
{CONFDIR/local_sender_blacklist}\
{}}
deny
message = sender IP address $sender_host_address is locally blacklisted here. If you think this is wrong, get in touch with postmaster
!acl = acl_local_deny_exceptions
hosts = ${if exists{CONFDIR/local_host_blacklist}\
{CONFDIR/local_host_blacklist}\
{}}
.ifdef CHECK_RCPT_VERIFY_SENDER
deny
message = Sender verification failed
!acl = acl_local_deny_exceptions
!verify = sender
.endif
deny
!acl = acl_local_deny_exceptions
senders = ${if exists{CONFDIR/local_sender_callout}\
{CONFDIR/local_sender_callout}\
{}}
!verify = sender/callout
deny
!acl = acl_local_deny_exceptions
recipients = ${if exists{CONFDIR/local_rcpt_callout}\
{CONFDIR/local_rcpt_callout}\
{}}
!verify = recipient/callout
.ifdef CHECK_RCPT_REVERSE_DNS
warn
message = X-Host-Lookup-Failed: Reverse DNS lookup failed for $sender_host_address (${if eq{$host_lookup_failed}{1}{failed}{deferred}})
condition = ${if and{{def:sender_host_address}{!def:sender_host_name}}\
{yes}{no}}
.endif
.ifdef CHECK_RCPT_IP_DNSBLS
warn
message = X-Warning: $sender_host_address is listed at $dnslist_domain ($dnslist_value: $dnslist_text)
log_message = $sender_host_address is listed at $dnslist_domain ($dnslist_value: $dnslist_text)
dnslists = CHECK_RCPT_IP_DNSBLS
.endif
.ifdef CHECK_RCPT_DOMAIN_DNSBLS
warn
message = X-Warning: $sender_address_domain is listed at $dnslist_domain ($dnslist_value: $dnslist_text)
log_message = $sender_address_domain is listed at $dnslist_domain ($dnslist_value: $dnslist_text)
!senders = ${if exists{CONFDIR/local_domain_dnsbl_whitelist}\
{CONFDIR/local_domain_dnsbl_whitelist}\
{}}
dnslists = CHECK_RCPT_DOMAIN_DNSBLS/$sender_address_domain
.endif
.ifdef CHECK_RCPT_LOCAL_ACL_FILE
.include CHECK_RCPT_LOCAL_ACL_FILE
.endif
accept
domains = +local_domains:+syscp_domain
endpass
message = unknown user
verify = recipient
accept
domains = +relay_to_domains
endpass
.ifdef CHECK_RCPT_GIVE_UNKNOWN_USER
message = ${if eq{$acl_verify_message}{Unrouteable address}{unknown user}{$acl_verify_message}}
.else
message = unrouteable address
.endif
verify = recipient
############
# If control reaches this point, the domain is neither in +local_domains
# nor in +relay_to_domains.
############
accept
hosts = +relay_from_hosts
accept
authenticated = *
deny
message = relay not permitted

4、建立/etc/exim4/conf.d/auth/30_syscp-config：

# vi /etc/exim4/conf.d/auth/30_syscp-config

文件内容如下：

### auth/30_syscp-config
#################################
plain_server:
driver = plaintext
public_name = PLAIN
server_condition = "${if and { \
{!eq{$2}{}} \
{!eq{$3}{}} \
{crypteq{$3}{${lookup mysql{SYSCP_AUTH_PLAIN}{$value}fail}}} \
} {yes}{no}}"
server_set_id = $2
server_prompts = :
# .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS
# server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
# .endif
login_server:
driver = plaintext
public_name = LOGIN
server_prompts = "Username:: : Password::"
server_condition = "${if and { \
{!eq{$1}{}} \
{!eq{$2}{}} \
{crypteq{$2}{${lookup mysql{SYSCP_AUTH_LOGIN}{$value}fail}}} \
} {yes}{no}}"
server_set_id = $1
# .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS
# server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
# .endif

5、建立/etc/exim4/conf.d/main/10_syscp-config_options：

# vi /etc/exim4/conf.d/main/10_syscp-config_options

文件内容如下：

hide mysql_servers = 127.0.0.1/syscp/syscp/MYSQL_PASSWORD //这里将MYSQL_PASSWORD替换成您的syscp数据库的密码
SYSCP_LOCAL_DOMAIN = SELECT domain FROM panel_domains WHERE domain = '${quote_mysql:$domain}' AND isemaildomain = '1'

SYSCP_MAILALIAS = SELECT REPLACE(destination,' ',',') FROM mail_virtual WHERE \
(( email = '${quote_mysql:$local_part}@${quote_mysql:$domain}' ) \
OR ( email = '@${quote_mysql:$domain}' AND iscatchall > 0 )) \
AND destination <> '' AND destination <> ' ' ORDER BY iscatchall ASC LIMIT 1

SYSCP_MAILUSER = SELECT CONCAT(homedir,maildir) FROM mail_users WHERE \
email = '${quote_mysql:$local_part}@${quote_mysql:$domain}' AND postfix = 'y'

SYSCP_PARENT_DOMAIN = SELECT parent.domain FROM `panel_domains` AS parent INNER JOIN panel_domains AS alias \
ON alias.domain = '${quote_mysql:$domain}' AND parent.id = alias.aliasdomain

SYSCP_AUTH_PLAIN = SELECT password_enc FROM mail_users WHERE username = '${quote_mysql:$2}'

SYSCP_AUTH_LOGIN = SELECT password_enc FROM mail_users WHERE username = '${quote_mysql:$1}'

domainlist syscp_domain = mysql;SYSCP_LOCAL_DOMAIN

6、建立/etc/exim4/conf.d/router/180_syscp-config文件：

# vi /etc/exim4/conf.d/router/180_syscp-config

内容如下：

syscp_mailalias:
debug_print = "R: syscp_mailalias for $local_part@$domain"
driver = redirect
domains = +syscp_domain
data = ${lookup mysql {SYSCP_MAILALIAS}{$value}fail}

syscp_mailuser:
debug_print = "R: syscp_mailuser for $local_part@$domain"
driver = redirect
domains = +syscp_domain
data = ${lookup mysql {SYSCP_MAILUSER}{$value}fail}
directory_transport = maildir_syscp

7、建立/etc/exim4/conf.d/transport/30_syscp-config：

# vi /etc/exim4/conf.d/transport/30_syscp-config

内容如下：

maildir_syscp:
debug_print = "T: maildir_syscp for $local_part@$domain"
driver = appendfile
create_directory
delivery_date_add
envelope_to_add
return_path_add
maildir_format
directory_mode = 0770
mode = 0660
mode_fail_narrower = false
user = 2000
group = 2000

8、使用如下命令，启用新设置，并重新启动exim4：

# chmod o-rx /var/lib/exim4
# chmod o-rx /etc/exim4/conf.d/main/10_syscp-config_options
# /etc/init.d/exim4 restart

     （二）postfix
      1、卸载Exim4
       Debian5.0.1默认安装Exim4，在安装postfix前，我们应先卸载它，使用下列命令卸载：

# apt-get remove exim4*

2、安装postfix，运行如下命令：

# apt-get install postfix postfix-mysql libsasl2-2 libsasl2-modules libsasl2-modules-sql

3、使用下列命令行进行基本的设置：

# mkdir -p /etc/postfix/sasl
# mkdir -p /var/spool/postfix/etc/pam.d
# mkdir -p /var/spool/postfix/var/run/mysqld
# groupadd -g 2000 vmail
# useradd -u 2000 -g vmail vmail
# mkdir -p /var/customers/mail/
# chown -R vmail:vmail /var/customers/mail/
# touch /etc/postfix/mysql-virtual_alias_maps.cf
# touch /etc/postfix/mysql-virtual_mailbox_domains.cf
# touch /etc/postfix/mysql-virtual_mailbox_maps.cf
# touch /etc/postfix/sasl/smtpd.conf
# chown root:root /etc/postfix/main.cf
# chown root:root /etc/postfix/master.cf
# chown root:postfix /etc/postfix/mysql-virtual_alias_maps.cf
# chown root:postfix /etc/postfix/mysql-virtual_mailbox_domains.cf
# chown root:postfix /etc/postfix/mysql-virtual_mailbox_maps.cf
# chown root:root /etc/postfix/sasl/smtpd.conf
# chmod 0644 /etc/postfix/main.cf
# chmod 0644 /etc/postfix/master.cf
# chmod 0640 /etc/postfix/mysql-virtual_alias_maps.cf
# chmod 0640 /etc/postfix/mysql-virtual_mailbox_domains.cf
# chmod 0640 /etc/postfix/mysql-virtual_mailbox_maps.cf
# chmod 0600 /etc/postfix/sasl/smtpd.conf

3、配置main.cf
（1）运行一下命令，将main.cf改名备份：

# mv /etc/postfix/main.cf /etc/postfix/main.cf.bak

（2）新建main.cf：

# vi /etc/postfix/main.cf

main.cf内容如下（注意红色部分改成你的主机名）：

# Postfix programs paths settings
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
program_directory = /usr/lib/postfix
sendmail_path = /usr/sbin/sendmail
## General Postfix configuration
# should be the default domain from your provider eg. "server100.provider.tld"
mydomain = host.ispcpcn.com
# should be different from $mydomain eg. "mail.$mydomain"
myhostname = host.ispcpcn.com
mydestination = $myhostname,
$mydomain,
localhost.$myhostname,
localhost.$mydomain,
localhost
mynetworks = 127.0.0.0/8
inet_interfaces = all
append_dot_mydomain = no
biff = no
# Postfix performance settings
default_destination_concurrency_limit = 20
local_destination_concurrency_limit = 2
# SMTPD Settings
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
reject_unauth_pipelining,
reject_non_fqdn_recipient
smtpd_sender_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_unknown_hostname,
reject_unknown_recipient_domain,
reject_unknown_sender_domain
smtpd_client_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_unknown_client
# Maximum size of Message in bytes (50MB)
message_size_limit = 52428800
## SASL Auth Settings
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
## Dovecot Settings for deliver, SASL Auth and virtual transport
## uncomment those line to use Dovecot
#mailbox_command = /usr/lib/dovecot/deliver
#virtual_transport = dovecot
#dovecot_destination_recipient_limit = 1
# Virtual delivery settings
virtual_mailbox_base = /var/customers/mail/
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailbox_maps.cf
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_mailbox_domains.cf
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_alias_maps.cf
virtual_uid_maps = static:2000
virtual_gid_maps = static:2000
# Local delivery settings
local_transport = local
alias_database = hash:/etc/aliases
alias_maps = $alias_database
# Default Mailbox size, is set to 0 which means unlimited!
mailbox_size_limit = 0
### TLS settings
###
## TLS for outgoing mails from the server to another server
#smtp_use_tls = yes
#smtp_tls_note_starttls_offer = yes
## TLS for email client
#smtpd_tls_cert_file = /etc/ssl/server/host.ispcpcn.com.pem
#smtpd_tls_key_file = /etc/ssl/server/host.ispcpcn.com.pem
#smtpd_tls_CAfile = /etc/ssl/cacert.class3.crt # Just an example for CACert.org
#smtpd_tls_auth_only = no
#smtpd_tls_loglevel = 1
#smtpd_tls_received_header = yes
#smtpd_tls_session_cache_timeout = 3600s
#tls_random_source = dev:/dev/urandom
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
ddd $daemon_directory/$process_name $process_id & sleep 5

2、编辑/etc/postfix/master.cf：

# vi /etc/postfix/master.cf

在/etc/postfix/master.cf的最后一行，增加如下内容：

# Add this lines to be able to use dovecot as delivery agent
# Dovecot LDA
dovecot unix - n n - - pipe
flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient}

3、新建文件/etc/postfix/mysql-virtual_alias_maps.cf：

# vi /etc/postfix/mysql-virtual_alias_maps.cf

内容如下（注意将红色部分改成你设置的syscp的数据库的密码）：

user = syscp
password = MYSQL_PASSWORD
dbname = syscp
table = mail_virtual
select_field = destination
where_field = email
additional_conditions = and destination <> '' and destination <> ' '
hosts = 127.0.0.1

4、建立/etc/postfix/mysql-virtual_mailbox_domains.cf：

# vi /etc/postfix/mysql-virtual_mailbox_domains.cf

内容如下（注意将红色部分改成你设置的syscp的数据库的密码）：

user = syscp
password = MYSQL_PASSWORD
dbname = syscp
table = panel_domains
select_field = domain
where_field = domain
additional_conditions = and isemaildomain = '1'
hosts = 127.0.0.1

5、建立/etc/postfix/mysql-virtual_mailbox_maps.cf：

# vi /etc/postfix/mysql-virtual_mailbox_maps.cf

内容如下（注意将红色部分改成你设置的syscp的数据库的密码）：

user = syscp
password = MYSQL_PASSWORD
dbname = syscp
table = mail_users
select_field = maildir
where_field = email
hosts = 127.0.0.1

6、建立/etc/postfix/sasl/smtpd.conf：

# vi /etc/postfix/sasl/smtpd.conf

内容如下（注意将红色部分改成你设置的syscp的数据库的密码）：

pwcheck_method: auxprop
auxprop_plugin: sql
allowanonymouslogin: no
allowplaintext: yes
mech_list: plain login cram-md5 digest-md5
sql_engine: mysql
sql_hostnames: 127.0.0.1
sql_user: syscp
sql_passwd: MYSQL_PASSWORD
sql_database: syscp
sql_select: SELECT password FROM mail_users WHERE username='%u@%r' OR email='%u@%r'

7、重启postfix:

# /etc/init.d/postfix restart
# newaliases