Prepare to update the configuration files located in the /etc/gromox directory.

WalterH

The Grommunio developers are currently preparing some changes to the configuration files. Some configuration files in the /etc/gromox directory will be removed or reduced in size, and their parameters will be moved to the /etc/gromox/gromox.cfg file with different names.

You can check the port changes using the following command: journalctl --grep 'deprecated' - this will display lines such as the following:

Mar 29 11:11:49 mail gromox-pop3[428]: /etc/gromox/pop3.cfg:pop3_listen_tls_port is deprecated in favor of /etc/gromox/gromox.cfg:pop3_listen_tls
Mar 29 11:11:49 mail gromox-delivery-queue[422]: /etc/gromox/smtp.cfg:lda_listen_port is deprecated in favor of /etc/gromox/gromox.cfg:lda_listen

The first step involves some communication port parameters.
Read the second post to find out which parameters need to be moved now.

WalterH

The port parameters from the configuration files: /etc/gromox/http.cfg, /etc/gromox/imap.cfg, /etc/gromox/pop3.cfg, and /etc/gromox/smtp.cfg are transferred to the configuration file /etc/gromox/gromox.cfg. Over time, the names of the port parameters have been changed, which is why this guide lists both the old and new names of the parameters. For example, the parameter http_listen_port used to be simply listen_port in http.cfg.
The instructions below list all known parameter names, but each configuration file should only contain one name for a given parameter, and only this parameter will be transferred to gromox.cfg under a new name.

Use the editor of your choice to edit these configuration files.

Remove the following parameters from the file /etc/gromox/http.cfg:

# Since gromox > 3.4.x, http ports are defined in gromox.cfg, not in http.cfg
#http_listen_addr=
#http_listen_port=10080
#http_listen_tls_port=10443
#listen_port=10080
#listen_tls_port=10443
# Since gromox > 3.4.x, HTTP and HTTPS ports for gromox-http are defined in gromox.cfg

Remove the following parameters from the file /etc/gromox/imap.cfg:

# Since gromox > 3.4.x, IMAP and POP3 ports are defined in gromox.cfg, not in imap.cfg
#imap_listen_addr=
#imap_listen_port=143
#imap_listen_tls_port=993
#listen_port=143
#listen_tls_port=993
# ** Important: remove the IMAP and POP3 ports from imap.cfg and pop3.cfg **

Remove the following parameters from the file /etc/gromox/pop3.cfg:

# Since gromox > 3.4.x, IMAP and POP3 ports are defined in gromox.cfg, not in pop3.cfg
#pop3_listen_addr=
#pop3_listen_port=110
#pop3_listen_tls_port=995
#listen_port=110
#listen_tls_port=995
# ** Important: remove the IMAP and POP3 ports from imap.cfg and pop3.cfg **

Remove the following parameters from the file /etc/gromox/smtp.cfg:

# Since gromox > 3.4.x, LDA ports are defined in gromox.cfg, not in smtp.cfg
#lda_listen_addr=
#lda_listen_port=24
#lda_listen_tls_port=
# ** Important: remove the LDA ports from smtp.cfg **

Now, let's add the relevant parameters to the end of the /etc/gromox/gromox.cfg file.
Below is a list of common parameters:

#
# Since gromox > 3.4.x, HTTP and HTTPS ports for gromox-http are defined in gromox.cfg
http_listen  = [::]:10080
http_listen_tls = [::]:10443
# ** Important: remove the listen_port and listen_ssl_port ports from http.cfg **
#
# Since gromox > 3.4.x, IMAP and POP3 ports are defined in gromox.cfg
#imap_listen = [::]:143
imap_listen_tls = [::]:993
#pop3_listen = [::]:110
pop3_listen_tls = [::]:995
# ** Important: remove the IMAP and POP3 ports from imap.cfg and pop3.cfg **
#
# Since gromox > 3.4.x, lda ports are defined in gromox.cfg, not in smtp.cfg
lda_listen = [::]:24
# ** Important: remove the lda ports from smtp.cfg **

You only need to insert the corresponding parameters that were also present in the configuration files. Pay attention to the changed names.

Finally, we need to restart the relevant services:
systemctl restart gromox-http gromox-zcore gromox-imap gromox-pop3 gromox-delivery gromox-delivery-queue
After restarting, there should be no more new 'deprecated' messages in journalctl.
Test with: journalctl --grep 'deprecated'

Enjoy Grommunio!

ibVUjapddsbvpfbu

Vielen Dank bereits vorab, allerdings haben unsere /etc/gromox/*.cfg noch SSL anstelle von TLS eingetragen.
Beispiel http.cfg:
http_support_ssl=true
listen_ssl_port=10443

Ist es dann angebracht, in der /etc/gromox/gromox.cfg trotzdem die *_listen_tls zu verwenden?

Grüße
Hagen

WalterH

ibVUjapddsbvpfbu http_support_ssl=true

The parameter "http_support_ssl" remains in the respective configuration file.
Yes, *_listen_tls is required as a replacement for the SSL parameters.

umgfoin

ibVUjapddsbvpfbu http_support_ssl=true

in der derzeitigen Implementierung ist listenhttp_support_ssl ein Alias für http_support_tls
d.h. beide Direktiven kontrollieren den gleichen Parameter und können alternativ verwendet werden.

listen_ssl_port ist ein Alias für:
http_listen_tls_port,
lda_listen_tls_port,
pop3_listen_tls_port,
imap_listen_tls_port

abhängig davon, in welcher config-Datei die Direktive steht.
Gleiches gilt analog für listen_portund*_listen_port,

Ist es dann angebracht, in der /etc/gromox/gromox.cfg trotzdem die *_listen_tls zu verwenden?

Ja, es sollten dann aber die listen_ssl_port-Direktiven in den Einzelconfigs gelöscht werden.

Ich würde aber die neuen Direktiven wie von Walter beschrieben verwenden - d.h.
aus der Kombination:

(bisher)
http_listen_addr = ::1 und listen_ssl_port=10443 bzw http_listen_tls_port=10443
http_listen_addr = ::1 und listen_port=10443 bzw http_listen_port=10080

wird (jetzt)
http_listen_tls = [::1]:10443
http_listen = [::1]:10080

(Nur) diese Syntax erlaubt auch die Definition mehrerer Adress/Port-Paare pro Daemon, was bisher nicht möglich war.