[Dovecot] Managesieve with multiple uid's

[Joseba Torre]

Hi,

I'm trying to setup a system with dovecot to remove the old courier one, and 
everything (pop3, imap, lmtp, quotas) but managesieve is working fine. It 
seems like it's a problem with each user having a separate uid, because I have 
a working similar setup with a single uid working without problems.

In this system when I try to connect to the managesieve port using telnet I 
get no response:

$ telnet localhost 4190
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
^]
telnet> quit

In the logs I see:

Dec 21 14:16:30 v000148 dovecot: managesieve-login: Disconnected: Inactivity 
(no auth attempts): rip=10.0.4.25, lip=10.0.82.8
Dec 21 14:16:30 v000148 dovecot: managesieve-login: Error: auth: 
connect(login) in directory / failed: Permission denied (euid=102(<unknown>) 
egid=103(<unknown>) missing +x perm: /, euid is not dir owner)
Dec 21 14:16:30 v000148 dovecot: managesieve-login: Error: auth: 
connect(login) in directory / failed: Permission denied (euid=102(<unknown>) 
egid=103(<unknown>) missing +x perm: /, euid is not dir owner)
Dec 21 14:19:30 v000148 dovecot: managesieve-login: Disconnected: Inactivity 
(no auth attempts): rip=10.0.4.25, lip=10.0.82.

(102  is the uid of the dovecot user, and 103 is the gid of the dovenull 
group)

My current setup is (I changed the mode of the service auth to 666 thinking 
the problem was there, but I got no change):

# 2.0.8: /usr/local/etc/dovecot/dovecot.conf
# OS: Linux 2.6.18-194.26.1.el5 x86_64 Red Hat Enterprise Linux Server release 
5.5 (Tikanga) nfs
auth_cache_size = 10 M
auth_verbose = yes
lock_method = dotlock
mail_location = maildir:/docencia/cuentas/%1n/%n/Maildir/
mail_plugins = quota
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character 
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags 
copy include variables body enotify environment mailbox date
passdb {
  args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext
  driver = ldap
}
plugin {
  quota = dict:User quota::file:%h/dovecot-quota
  quota_rule = *:storage=100M
  quota_warning = storage=85%% quota-warning 85 %u
  quota_warning2 = storage=82%% quota-warning 82 %u
  sieve = ~/.dovecot.sieve
  sieve_dir = ~/sieve
}
protocols = imap pop3 sieve lmtp
service auth-worker {
  user = dovecot
}
service auth {
  unix_listener auth-userdb {
    mode = 0666
  }
}
service imap-login {
  chroot = login
  service_count = 1
  user = dovecot
}
service lmtp {
  unix_listener /var/spool/postfix/private/dovecot-lmtp {
    group = postfix
    mode = 0660
    user = postfix
  }
}
service pop3-login {
  chroot = login
  service_count = 1
  user = dovecot
}
service quota-warning {
  executable = script /usr/local/bin/quota-warning.sh
  unix_listener quota-warning {
    user = vmail
  }
  user = dovecot
}
ssl_cert = </usr/share/ssl/certs/imapd.pem
ssl_key = </usr/share/ssl/certs/imapd.pem
syslog_facility = local1
userdb {
  driver = prefetch
}
userdb {
  args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext
  driver = ldap
}
protocol imap {
  mail_plugins = quota imap_quota
}
protocol lmtp {
  mail_plugins = quota sieve
  syslog_facility = local2
}


-- 
Joseba Torre. Vicegerencia de TICs, área de Explotación