- dovecot - dovecot.org

[Dovecot] auth failure with digest-md5
by LeVA 18 Aug '06

18 Aug '06

Hi! I'm using: Dovecot 1.0.beta8 OpenBSD 3.9 KMail 1.9.3 My password file contains only one user now. I've changed its password to a dumb one: 'asd' (so this is not a wrong password failure :) I've configured the PLAIN and DIGEST-MD5 mechanisms in dovecot.conf, and I'm only using pop3. Also I've turned on the verbose auth logging, and I'm attaching the logs inline. My password db contains the {DIGEST-MD5} prefixed password. The problem is very simple but very weird. I start the dovecot server and try to log in. It succeeds, I'm happy. But after one (the first) success, all further logins fails. Yes this a sometimes working/sometimes not problem, which is rare in this business... Here is the log of the first success: 00:48:41 Info: auth(default): client in: AUTH 1 DIGEST-MD5 service=POP3 secured lip=192.168.0.202 rip=192.168.0.3 resp= <newline> 00:48:41 Info: auth(default): client out: CONT 1 cmVhbG09IiIsbm9uY2U9ImJua2tUaHBDVURJblFENWRJZlgyb1E9PSIscW9wPSJhdXRoIixjaGFyc2V0PSJ1dGYtOCIsYWxnb3JpdGhtPSJtZDUtc2VzcyI= <newline> 00:48:41 Info: auth(default): client in: CONT 1 dXNlcm5hbWU9ImxldmEiLHJlYWxtPSIiLG5vbmNlPSJibmtrVGhwQ1VESW5RRDVkSWZYMm9RPT0iLGNub25jZT0iTy9MYndLMVo1dWc4ZURiT2wzaWlhN2ZsTUVTV3MvN1JSc05HL3JPbzhpND0iLG5jPTAwMDAwMDAxLHFvcD1hdXRoLGRpZ2VzdC11cmk9InBvcC8xOTIuMTY4LjAuMjAyIixyZXNwb25zZT0wYTQ3ZmUyNmVlMDg0MWE4ZDgzNTM3NzI5MzUxZmE3YQ== <newline> 00:48:41 Info: auth(default): client out: CONT 1 cnNwYXV0aD01MmQ1YTRlNTVhNWNiYzA0NDk2YTg5ODcyMDMwMGUxYw== <newline> 00:48:41 Info: auth(default): client in: CONT 1 <newline> 00:48:41 Info: auth(default): client out: OK 1 user=username <newline> 00:48:41 Info: auth(default): master in: REQUEST 9 15718 1 <newline> 00:48:41 Info: auth(default): master out: USER 9 username uid=6000 gid=6000 home=/var/mail/virtual/username/./ <newline> 00:48:41 Info: pop3-login: Login: user=<username>, method=DIGEST-MD5, rip=192.168.0.3, lip=192.168.0.202, TLS <newline> 00:48:41 Info: POP3(username): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 And after that, every login fails: 00:49:28 Info: auth(default): client in: AUTH 1 DIGEST-MD5 service=POP3 secured lip=192.168.0.202 rip=192.168.0.3 resp=dXNlcm5hbWU9ImxldmEiLHJlYWxtPSIiLG5vbmNlPSJibmtrVGhwQ1VESW5RRDVkSWZYMm9RPT0iLGNub25jZT0iTy9MYndLMVo1dWc4ZURiT2wzaWlhN2ZsTUVTV3MvN1JSc05HL3JPbzhpND0iLG5jPTAwMDAwMDAyLHFvcD1hdXRoLGRpZ2VzdC11cmk9InBvcC8xOTIuMTY4LjAuMjAyIixyZXNwb25zZT0wMWRkMDNjYTcyMzBmMzM5YjRiY2NlM2VmMTcwMGU4Yw== <newline> 00:49:28 Info: pop3-login: Aborted login: method=DIGEST-MD5, rip=192.168.0.3, lip=192.168.0.202, TLS <newline> 00:49:28 Info: auth(default): passwd-file /etc/dovecot.passwd: Read 1 users I can notice that the second (the failure) log is shorter than the first (the success). Maybe something is missing from there. The PLAIN auth mechanism is working, even after a failed DIGEST-MD5 login. In fact the PLAIN login always works :) Thanks! Daniel -- LeVA

3 3

[Dovecot] Also in 1.0RC7, Beginner Help with a fatal error in a first Basic Install
by Paul 18 Aug '06

18 Aug '06

Thinking that the issue with libssl is an artifact of the unstable branch, I've just tried, a reproduced the problem with, v10.rc7. Thank you. Paul

1 0

[Dovecot] 1.0 RC7 released
by Netserve 18 Aug '06

18 Aug '06

>> | Can everyone now agree that there are no more hangs? :) > 100,000 logins since we upgraded, no problems at all Linux svr22 2.6.xx- FC4 #1 Fri Aug 26 20:35:25 EDT 2005 x86_64 x86_64 86_64 GNU/Linux Good work! Regards John Lyons ADSL £9.99 www.discountadsl.co.uk Netserve Consultants Ltd Unit 8 The Bungalow Offices St Asaph Business Park St Asaph LL17 0LQ T: 0845 6444194 F: 01745 582374 w: www.netserve.co.uk e: support(a)nsnoc.com

1 0

[Dovecot] LDAP Auth problems with auth_bind=yes
by Rob Coward 18 Aug '06

18 Aug '06

Hi, I first posted this problem a day or two ago and have not seen any responses yet. To clarify my problem, I am authenticating virtual users against Active Directory on Win2k3, where their login id is their email address. I am using an almost identical setup to Suranga's below, however my initial bind user doesn't have access to the userPassword attribute, so I am using: auth_bind = yes This is working fine when users enter their correct email address & password, or if the email address is not found, however if a valid email address is given but the password is incorrect, it seems to kill something in the ldap_auth code as all further connections get a temporary authentication error at the client, and the following in /var/log/maillog: Aug 18 13:04:31 gm-ho-lin-06 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=::ffff:127.0.0.1 rip=::ffff:127.0.0.1 resp=ADA5OTlAc3RvcmVzLmdhbWUuY28udWsAOTk5MA== Aug 18 13:04:31 gm-ho-lin-06 dovecot: auth(default): ldap(0999@stores.game.co.uk,::ffff:127.0.0.1): bind search: base=OU=Stores,OU=UK,DC=group,DC=game,DC=net filter=(&(objectClass=user)(mail=0999(a)stores.game.co.uk)) Aug 18 13:04:31 gm-ho-lin-06 dovecot: auth(default): ldap(0999@stores.game.co.uk,::ffff:127.0.0.1): ldap_search() failed: Operations error Aug 18 13:04:31 gm-ho-lin-06 dovecot: auth(default): client out: FAIL 1 user=0999(a)stores.game.co.uk temp Aug 18 13:04:31 gm-ho-lin-06 dovecot: imap-login: Aborted login: user=<0999(a)stores.game.co.uk>, method=PLAIN, rip=::ffff:127.0.0.1, lip=::ffff:127.0.0.1, secured Is the auth_ldap code not resetting the ldap connection bind details to the dn/dnpass values for each login ? You help would be greatly appreciated as I hope to make this a production server within the next week. Regards, Rob Coward Unix Developer GAME STORES GROUP LTD Tel: 01256 784476 Email: Rob.Coward(a)game.net -----Original Message----- From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] On Behalf Of suranga de silva Sent: 18 August 2006 19:14 To: dovecot(a)dovecot.org Subject: Re: [Dovecot] dovecot Digest, Vol 40, Issue 65 Dear Tim Schafer, Take a look at my sample dovecot-ldap.conf hosts = localhost dn = cn=root,dc=ceylonlinux,dc=com dnpass = secret ldap_version = 3 base = dc=ceylonlinux,dc=com deref = never scope = subtree user_attrs = mail,homeDirectory=mailMessageStore,uidNumber=1003,gidNumber=1003 user_filter = (&(objectClass=user)(mail=%u)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=user)(mail=%u)) default_pass_scheme = CRYPT user_global_uid = 1003 user_global_gid = 1003 Here I am using my own schema called "user", but in your case change it to inetOrgPerson or the schema name you are using. I think the most common problem in this process is the ldap filter. Above in my configuration user_filter and pass_filter are used as ldap filters for querying user name and password. There I am using mail attribute. gid and uid are belong to the user vmail. May be this explanation will help you to figure out your problem You can refer my article in the following link for further reference http://www.ceylonlinux.com/pdf/openldap_backsql_postfix_maildir_cl.pdf Cheers!!! Suranga De Silva. CTO CEYLON LINUX This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this e-mail in error please notify the system manager at: mailto:postmaster@game.net The recipient acknowledges that the transmissions made via the Internet can be corrupted and therefore THE GAME GROUP PLC and any of its subsidiaries do not give any warranty as to the quality or accuracy of any information contained in the message or assume any liability for it or for its transmission, reception or storage. This footnote also confirms that this e-mail message has been swept by anti-virus software for the presence of computer viruses. http://www.game.co.uk http://www.gamegroup.plc.uk

1 0

[Dovecot] How to change passwords on LDAP Server?
by Luis Motta Campos 18 Aug '06

18 Aug '06

Dear List People Someone here could please send me some advice on changin' LDAP passwords? It seems that everything is working nice, except by dovecot: I can send emails using my new LDAP password trought postfix smtp authentication, I can login to my Intranet website and to the Mod-LDAP protected pages on my company. I just can't POP my mail messages, because Dovecot says "dovecot-auth: ldap(user(a)company.net): password mismatch". I guess this is because I'm incorrectly coding the password. Please help me to figure out the right way to crypt the password so Dovecot can read this from the LDAP. *Extra* *Information:* I made a simpler and smaller test version of the program that I use to change passwords, its attached to the email. The essentials are there. *Versions:* My dovecot is a Debian/Sarge (Stable) 3.1 package. I'm also using Perl, Net::LDAP, Apache with Mod_Perl and OpenLDAP. Everything on linux, of course. Package Version ---- ---- dovecot-common 0.99.14-1sarge0 dovecot-imapd 0.99.14-1sarge0 dovecot-pop3d 0.99.14-1sarge0 perl 5.8.4-8sarge4 libnet-ldap-perl 0.3202-3 apache-perl 1.3.33-6sarge2 slapd 2.2.23-8 kernel-image-2.4.2 2.4.27-10sarge1 Any help, suggestion or comment are welcome. Thank you all in advance. -- Luis Motta Campos Segula Technologies Portugal http://www.segula.pt/ #!/usr/bin/perl use strict; use warnings; use Net::LDAP; use Carp qw( croak ); # Connects to server my $ldap = new Net::LDAP( 'localhost' ) or croak $@; my $message = $ldap->bind( 'uid=user,ou=People,dc=company,dc=com', password => 'secret' ); croak $message->error if $message->is_error; # Locate user $message = $ldap->search( base => 'ou=People, dc=company, dc=com', filter => 'uid=user', scope => 'one' ); croak $message->error if $message->is_error; my $entry = $message->entry(0); croak 'Nobody found!?!' unless $entry; # Replace password. $entry->replace( userPassword => '{CRYPT}'. crypt( 'secret', join( '', ('.', '/', 0..9, 'A'..'Z', 'a'..'z')[rand 64, rand 64] ) ) ); $message = $entry->update( $ldap ); croak $message->error if $message->is_error; # Report results. print q{User password changed to: "}.$entry->get_value( 'userPassword' ).qq{".\n};

1 0

[Dovecot] OT: best way to move maildirs to another host ?
by Brice Figureau 18 Aug '06

18 Aug '06

Hi, I'm sorry because this mail is a little bit off-topic, but Timo's email titled "1.0RC7 Released" made me think about a possible issue for me. I have to move an old dovecot installation (1.0b2) from an i386 server to a new x86_64 server running latest available dovecot. My concern is about moving all my users' mail stored as maildir onto this new server. What would be the best way to do that ? >From Timo's comment on 32bits->64bits migration, I guess I'll have to move only the maildirs (and get rid of dovecot cache files), right ? Next, from what I remember about maildir, the message names usually contain the inode so that the file name is unique. If I strictly move the files, I can be sure that the moved files won't have the same inodes number as what is in the name. Should I care ? Or should I use something different than scp/rsync to perform the migration ? Thanks for your answers, Regards, -- Brice Figureau <brice+dovecot(a)daysofwonder.com>

3 3

[Dovecot] Dovecot 1.0RC7 on FreeBSD 6.1/i386
by Martin Jackson 18 Aug '06

18 Aug '06

Everything looks good here, with kqueue support. Thanks for all the hard work, Timo! Marty

1 0

Re: [Dovecot] 1.0 RC7 released
by Bill Boebel 18 Aug '06

18 Aug '06

On Thu, August 17, 2006 6:28 pm, Timo Sirainen <tss(a)iki.fi> said: > I think my v1.0 TODO list is: > > - avoid duplicate flag change notifications, or in case the message is > also expunged don't bother notifying its flag changes at all > (shouldn't be hard) > - HFS+ avoid-hardlinks patch? > - 32bit -> 64bit upgrade still doesn't work without assert-crashing: > mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: > (fixed_size == (unsigned int)-1 || fixed_size == data_size) > - Courier-compatible INBOX. namespace gives "invalid namespace" errors What about this one? The "Connection queue full" issue doesn't appear to be entirely fixed. In fact the fix was disconnecting so frequently that I reverted to the non-fixed version: http://www.dovecot.org/list/dovecot/2006-August/015401.html Bill

1 0

[Dovecot] dovecot mbox to dovecot maildir migration
by Michael Blancas 18 Aug '06

18 Aug '06

Hi, I'm migrating accounts from one server with dovecot mbox and pam nss-ldap authentication to a new server with dovecot maildir and mysql auth (no posix accounts). My problem is the pop3 uidl format on the two servers are different, even though I'm using pop3_uidl_format = %08Xu%08Xv in both configs, I'm always re-downloading left messages on my test runs. Is there a way I could reuse the X-UID and X-IMAPbase headers on the converted mails. Issuing the UIDL command via pop3 always give a different result for the mbox and maildir spools. The X-UID and X-IMAPbase headers are present in the converted mails. The first number of X-IMAPbase maps to the mail UIDVALIDITY and the second is the same as X-UID, the mail uid. Thanks.

2 2

[Dovecot] Supporting local and virtual LDAP users, with seperate mail_env
by Tim Schafer 18 Aug '06

18 Aug '06

Is it possible to have local users with mail in maildir:%h/.maildir and virutal users with mail in maildir:/home/exim/%u/.maildir I seem to have authentication working for both local users and LDAP users. But I'm getting this error trying to access a virtual users mail. Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: data=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: root=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir, index=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_B Y_USERDB/.maildir, control=, inbox= Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): mkdir(/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir/cur) failed: Permission denied -- Regards, Tim Schafer Information Technology Logistics Easier with Technology Freight Solution Providers direct 916-376-6190 10453 Old Placerville Road fax 916-376-6156 Sacramento, CA 95827 tim_schafer(a)shipfsp.com

4 7

[Dovecot] kqueue rewrite testing, try #3
by Timo Sirainen 18 Aug '06

18 Aug '06

So, apparently the original kqueue code was working fine after all, although it was much more complex than it really needed to be. So, this time there's a really simple and pretty kqueue implementation: http://dovecot.org/nightly/dovecot-latest.tar.gz Tested that it seems to work with FreeBSD.

3 2

[Dovecot] 1.0rc7 getting near
by Timo Sirainen 18 Aug '06

18 Aug '06

To avoid having some stupid new problems with 1.0rc7, could you test this night's snapshot once it arrives in a couple of hours: http://dovecot.org/nightly/dovecot-20060811.tar.gz Especially people who had compiling problems with 1.0rc6. Also everyone who are still experiencing hangs could you try the suggestions in this mail and tell me what happened: http://dovecot.org/list/dovecot/2006-August/015377.html

8 16

[Dovecot] BSD people, please test kqueue changes
by Timo Sirainen 17 Aug '06

17 Aug '06

I rewrote much of the kqueue code since the old code didn't handle properly the case when both input and output I/O handlers were added to the same file descriptor with different callbacks. This is done commonly in Dovecot, so I'm wondering why more people didn't complain about problems with it.. :) I don't anyway have access to any BSDs so the code is completely untested. Please test how it works before 1.0rc7 :) http://dovecot.org/nightly/dovecot-latest.tar.gz I'd guess the hangs caused by recent RC versions were because the default was to use notify=kqueue instead of notify=none. I changed this back to none unless --with-ioloop=kqueue is used. There are a couple of things in the code that I'm not completely sure of. The kqueue() manual page says that EV_ADD "modifies" the event if it already exists. What exactly does that mean? Does it mean that the filter is replaced, or that it's ORed into the existing one? The same question for the EV_DELETE, does it delete everything or only those filters given in parameters? The code currently assumes ORing and EV_DELETE deleting only the given filters, since this is what the original code also did. I suppose the data and udata parameters don't matter in EV_DELETE since they weren't given originally in ioloop-notify-kqueue.c either, so I left them that way.

9 20

[Dovecot] [Fwd: Re: Supporting local and virtual LDAP users, with seperate mail_env]
by Tim Schafer 17 Aug '06

17 Aug '06

Ooops, this didn't go to the list -------- Original Message -------- Subject: Re: [Dovecot] Supporting local and virtual LDAP users, with seperate mail_env Date: Thu, 17 Aug 2006 11:33:51 -0700 From: Tim Schafer <tim_schafer(a)shipfsp.com> To: Timo Sirainen <tss(a)iki.fi> References: <44E4A543.3070100(a)shipfsp.com> <1155837188.9142.8.camel@hurina> <44E4AEF1.70202(a)shipfsp.com> <1155838393.9142.21.camel@hurina> I'm running rc6 The user_attrs = uid=user alone isn't doing the trick I also tried changing default_mail_env = maildir:/home/exim/%n/.maildir to default_mail_env = maildir:/home/exim/%u/.maildir dovecot.conf: listen = [::] disable_plaintext_auth = no ssl_disable = yes default_mail_env = maildir:/home/exim/%u/.maildir namespace private { separator = . prefix = INBOX. inbox = yes } mail_debug = yes first_valid_uid = 0 protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth_username_chars = abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb shadow { } passdb ldap { args = /etc/dovecot-ldap.conf } userdb passwd { } userdb ldap { args = /etc/dovecot-ldap.conf } user = root } dict { } plugin { } dovecot-ldap.conf: hosts = localhost auth_bind = yes auth_bind_userdn = cn=%n,ou=people,dc=domain,dc=com ldap_version = 3 base = ou=people,dc=domain,dc=com scope = subtree user_attrs = uid=user user_filter = (&(objectClass=uidObject)(cn=%n)) user_global_uid = mail user_global_gid = mail Regards, Tim Schafer Information Technology Logistics Easier with Technology Freight Solution Providers direct 916-376-6190 10453 Old Placerville Road fax 916-376-6156 Sacramento, CA 95827 tim_schafer(a)shipfsp.com Timo Sirainen said the following on 8/17/2006 11:13 AM: > On Thu, 2006-08-17 at 11:01 -0700, Tim Schafer wrote: > > Thank you Timo, > > > > I changed > > default_mail_env = maildir:/home/exim/%n/.maildir > > > > I may not have to support local users > > > > But I'm still running into the problem that the user authenticates as > > Firstname Lastname > > which is the cn in LDAP > > but the uid in LDAP, which would be something like > > flastname > > needs to be used for mail location. > > > > Is there a way to use the uid in LDAP to specify the mail location, > > without modifying the current LDAP database to include the full path? > > It would have been easier to answer if you had given your > dovecot-ldap.conf settings. But if "uid" in LDAP contains the short > form, then giving pass_attrs = uid=user,.. should help. Although that > was also there by default.. > > -- Regards, Tim Schafer Information Technology Logistics Easier with Technology Freight Solution Providers direct 916-376-6190 10453 Old Placerville Road fax 916-376-6156 Sacramento, CA 95827 tim_schafer(a)shipfsp.com

1 0

[Dovecot] BSD kqueue testing, once more before 1.0rc7
by Timo Sirainen 17 Aug '06

17 Aug '06

I did a few more changes and it seems to be working with FreeBSD. I didn't before realize that event filters weren't bitmasks so that broke things. Anyway, a bit more "real world testing" would be better than my test program and telnet localhost -tests :) I'll release 1.0rc7 in any case today before I go to sleep (so, max. 6 hours or so). http://dovecot.org/nightly/dovecot-latest.tar.gz

2 2

[Dovecot] LDAP usernames with spaces
by Tim Schafer 17 Aug '06

17 Aug '06

I'm trying to setup dovecot to work with an existing virtual user database in LDAP in order to replace courier-imap. I have users in LDAP with dn of the following form cn=Firstname Lastname,ou=company,dc=domain,dc=com and the uid attribute containes a userid of the form flastname The on disk format for an account is: /home/exim/<uid>/.maildir My first problem is that I cannot get dovecot to authenticate the existing DNs It complains: dovecot: auth(default): plain(?,ipaddress): Username contains disallowed characters I'm assuming it doesn't like the spaces. Any way around this? Also, I don't see any way to support the seperate username and userid where the username is for authentication and the userid is used for on disk pathname. Anyway to support this? Thanks in advance. -- Regards, Tim Schafer

2 2

[Dovecot] Mailbox isn't a valid mbox file (dovecot 1.0-0.beta8.2.fc5)
by FiL ＠ Kpoxa 17 Aug '06

17 Aug '06

Hello, I have upgraded my dovecot-0.99.13-3.FC3 to dovecot-1.0-0.beta8.2.fc5 recently and now am having weird problem. If somebody's mailbox has the first line in a form of From "User Name" <user(a)host.domain.edu> Thu Oct 7 14:20:00 1999 instead of From user(a)host.domain.edu Thu Oct 7 14:20:00 1999 then that mailbox couldn't be precessed by dovecot. It wasn't a problem with 0.99.13, but it is a problem with 1.0. Is there any fix for that on a dovecot's side? I don't like the idea of going through all 100Gb of mailboxes and fixing the From line. Thank you, FiL

1 1

[Dovecot] Help, the dovecot ldap is down !
by kleiton＠pcs.com.br 17 Aug '06

17 Aug '06

Hi ! my dovecot server is down, the users don't can make login. In a sometimes the dovecot log show the message bellow Aug 17 08:35:46 xxxxx dovecot-auth: nss_ldap: reconnected to LDAP server ldap://127.0.0.1 after 1 attempt In other times show Aug 17 09:40:46 xxxxx dovecot-auth: nss_ldap: reconnected to LDAP server ldap://127.0.0.1 after 5 attempts In another times too Aug 17 10:12:02 xxxxx dovecot-auth: nss_ldap: reconnected to LDAP server ldap://127.0.0.1 after 1 attempt Aug 17 10:12:25 xxxxx last message repeated 3 times Somepeople can help me ? Thanks !

2 4

[Dovecot] warn before overquota
by Dominik Saar 17 Aug '06

17 Aug '06

Hi, is there an implementation to warn the user before his storage capacity exceeded? Regards Dominik

4 4

[Dovecot] dovecot on OSF/1 4.0
by "Gábor Bérczi (Gabucino)" 17 Aug '06

17 Aug '06

Hi,, In src/lib/mountpoint.c:53 the following had to be commented out: // point_r->type = p_strdup(pool, buf.f_fstypename); because f_fstypename is undeclared on this OS. Also the following errors occur with the DEC C compiler (which compiles the other files just fine): source='file-cache.c' object='file-cache.o' libtool=no DEPDIR=.deps depmode=none /usr/bin/posix/sh ../../depcomp cc -std -DHAVE_CONFIG_H -I. -I. -I../.. -I/usr/pkg/include -ieee -O2 -I/usr/pkg/include - I/usr/pkg/include -c file-cache.c cc: Error: file-cache.c, line 70: In this statement, "cache- >mmap_base" and "(-1)" may not be compared for equality or inequality. if (cache->mmap_base == MAP_FAILED) { --------------------^ cc: Error: file-cache.c, line 79: In this statement, "cache- >mmap_base" and "(-1)" may not be compared for equality or inequality. if (cache->mmap_base == MAP_FAILED) { --------------------^ *** Exit 1 Stop. And: source='istream-mmap.c' object='istream-mmap.o' libtool=no DEPDIR=.deps depmode=none /usr/bin/posix/sh ../../depcomp cc -std - DHAVE_CONFIG_H -I. -I. -I../.. -I/usr/pkg/include -ieee -O2 -I/ usr/pkg/include -I/usr/pkg/include -c istream-mmap.c cc: Error: istream-mmap.c, line 121: In this statement, "mstream- >mmap_base" and "(-1)" may not be compared for equality or inequality. if (mstream->mmap_base == MAP_FAILED) { --------------------^ And: source='mmap-anon.c' object='mmap-anon.o' libtool=no DEPDIR=.deps depmode=none /usr/ bin/posix/sh ../../depcomp cc -std -DHAVE_CONFIG_H -I. -I. - I../.. -I/usr/pkg/inc lude -ieee -O2 -I/usr/pkg/include -I/usr/pkg/include -c mmap-anon.c cc: Error: mmap-anon.c, line 67: In this statement, "base" and "(-1)" may not be comp ared for equality or inequality. if (base == MAP_FAILED) ------------^ cc: Warning: mmap-anon.c, line 68: In this statement, "(-1)" of type "long", is being converted to "pointer to void". return MAP_FAILED; -----------------------^ cc: Error: mmap-anon.c, line 85: In this statement, "new_base" and "(-1)" may not be compared for equality or inequality. if (new_base == MAP_FAILED) ------------^ cc: Warning: mmap-anon.c, line 86: In this statement, "(-1)" of type "long", is being converted to "pointer to void". return MAP_FAILED; -----------------------^ cc: Error: mmap-anon.c, line 116: In this statement, "old_address" and "(-1)" may not be compared for equality or inequality. if (old_address == NULL || old_address == MAP_FAILED) { -----------------------------------^ cc: Warning: mmap-anon.c, line 118: In this statement, "(-1)" of type "long", is being converted to "pointer to void". return MAP_FAILED; -----------------------^ cc: Warning: mmap-anon.c, line 131: In this statement, "(-1)" of type "long", is being converted to "pointer to void". return MAP_FAILED; -------------------------------^ cc: Error: mmap-anon.c, line 152: In this statement, "start" and "(-1)" may not be compared for equality or inequality. if (start == NULL || start == MAP_FAILED) { -----------------------------^ *** Exit 1 Stop. And: Making all in lib-index source='mail-cache.c' object='mail-cache.o' libtool=no DEPDIR=.deps depmode=none /usr/bin/posix/sh ../../depcomp cc -std -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib -I../../src/lib-mail -I/usr/pkg/ include -ieee -O2 -I/usr/pkg/include -I/usr/pkg/include -c mail- cache.c cc: Error: mail-index-private.h, line 177: Invalid declarator. unsigned int readonly:1; ---------------------^ *** Exit 1 Stop. source='mail-cache-compress.c' object='mail-cache-compress.o' libtool=no DEPDIR=.deps depmode=none /usr/bin/posix/sh ../../ depcomp cc -std -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - I../../src/lib-mail -I/usr/pkg/include -ieee -O2 -I/usr/pkg/include -I/usr/pkg/include -c mail-cache-compress.c cc: Error: mail-index-private.h, line 177: Invalid declarator. unsigned int readonly:1; ---------------------^ *** Exit 1 Stop. source='mail-cache-decisions.c' object='mail-cache-decisions.o' libtool=no DEPDIR=.deps depmode=none /usr/bin/posix/sh ../../ depcomp cc -std -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - I../../src/lib-mail -I/usr/pkg/include -ieee -O2 -I/usr/pkg/include -I/usr/pkg/include -c mail-cache-decisions.c cc: Error: mail-index-private.h, line 177: Invalid declarator. unsigned int readonly:1; ---------------------^ *** Exit 1 Stop. ... etc, more of this error in other files... -- Gábor Bérczi

2 1

[Dovecot] .imap.index.data Files
by Nigel Cox 17 Aug '06

17 Aug '06

Hi, We recently had a mail storm which resulted in many tens of thousands of e-mails being delivered to each of 4 users in just 5 minutes. This was quickly resolved. However, one more savvy user though he could use the webmail (squirrelmail) to delete the e-mail without downloading it. He gave up on the idea though. I, however, removed the mail directly from the server file system. The problem now is that he has a .imap.index.data file of over 250MB! I have asked him to login again and view all the directories, I even sent him another test and asked him to delete this via webmail. None of this had any effect on the file. I thought the indexes were rebuilt with the deletion of a message? Any ideas? Nigel _____________________________________________________________________ This message has been checked for all known viruses by MessageLabs on behalf of Rentokil Initial plc

2 1

[Dovecot] ldap quota limitation problem
by Amadou Toure 17 Aug '06

17 Aug '06

hello, We have configured the quota enforcement folowing the link (http://wiki.dovecot.org/Quota) but we note that the global quota limitation configuration in dovecot.conf works well but not the ldap users configuration limit. For example in the casee below, we have tried to limit quota usage for some users to 1Gb but only the global quota limitation appear in the user quota. please find below config of the dovecot.conf, dovecot-ldap.conf and the ldap attributes ####################### dovecot.conf PROTOCOL IMAP mail_plugins = quota imap_quota PROTOCOL POP3 mail_plugins = quota LDA mail_plugins = cmusieve # quota PLUGIN quota = maildir:storage=256000 ######################## dovecot-ldap.conf user_attrs = uid,homeDirectory,,uid,uidNumber,gidNumber,quotaStorage=mailQuotaSize=dirsize:storage ############################# Amadou TOURE Sonatel Multimedia, 136 Sacre Coeur, Pyrotechnique, BP 21100 Dakar Tel +221-8699810. Fax +221-8641094 http://www.sentoo.sn DAKAR - SENEGAL

2 2

[Dovecot] From passwd-file to Postgresql database
by Jonathan Ballet 17 Aug '06

17 Aug '06

Hello, I have a working installation of Dovecot, which use passwd-file for both users and passwords databases. My setup uses CRAM-MD5 for the authentification mechanism and the password in my passwd-file was stored encoded with HMAC-MD5. Now, I want to use Postgresql to replace those passwd-files. So I make the necessary change in my dovecot.conf file : ========================================= userdb sql { args = /etc/dovecot/dovecot-sql.conf } passdb sql { args = /etc/dovecot/dovecot-sql.conf } ========================================= In the dovecot-sql.conf file, I comment out the simplest query, and change the default_pass_scheme to HMAC-MD5 (as in my previous setup). I put my users from the passwd-file into my database, with the same user id, and the same password (starting with {HMAC-MD5}) ... ... but it fails :( The log file says to me : ========== dovecot: 2006-08-14 15:36:12 Info: auth(default): cram-md5(jon,xxx): password mismatch ========== I tried several other password schemes (DIGEST-MD5, PLAIN-MD5, PLAIN), but only PLAIN seems to work (of course, I changed the password in the database accordingly). The documentation isn't very clear about this (or I don't find it ?) : - in an "old" auth.txt, it is written that only PLAIN is supported, but I don't knwo if I can trust it ? - I've got an old dovecot-pgsql.conf (2004, maybe from dovecot 0.9x ?), which said that supported scheme are "PLAIN, PLAIN-MD5, DIGEST-MD5, and CRYPT" So, what I am doing wrong ? And what is correct (or not) in my previous search ? Regards, -- Jonathan

3 6

[Dovecot] Trying to compile again
by Greg Deputy 17 Aug '06

17 Aug '06

I'm currently running a pre 1.0 version of dovecot. Months back I tried to compile beta6, couldn't due to some mysql client libraries issues, and gave up. I'm now trying again with rc6. This is on a fedora core2 box, with postfix 2.3 and mysql 5.0. The error I'm getting when I run make is below. Any help would be greatly appreciated, thanks! I'd really like to get up to a more recent version. ..... /usr/local/mysql/lib/libmysqlclient.a(crypto_wrapper.o)(.gnu.linkonce.d.__vt _Q25yaSSL10BulkCipher+0x8): undefined reference to `__pure_virtual' /usr/local/mysql/lib/libmysqlclient.a(crypto_wrapper.o)(.gnu.linkonce.d.__vt _Q25yaSSL10BulkCipher+0xc): more undefined references to `__pure_virtual' follow /usr/local/mysql/lib/libmysqlclient.a(crypto_wrapper.o)(.gnu.linkonce.t._._Q 28TaoCrypt14RSA_PrivateKey+0x12e): In function `TaoCrypt::RSA_PrivateKey::~RSA_PrivateKey(void)': : undefined reference to `__builtin_delete' /usr/local/mysql/lib/libmysqlclient.a(log.o)(.text+0x30): In function `yaSSL::Log::~Log(void)': : undefined reference to `__builtin_delete' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-algebra.o)(.gnu.linkonc e.d.__vt_Q28TaoCrypt23AbstractEuclideanDomain+0xc): undefined reference to `__pure_virtual' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-algebra.o)(.gnu.linkonc e.d.__vt_Q28TaoCrypt23AbstractEuclideanDomain+0x10): undefined reference to `__pure_virtual' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-algebra.o)(.gnu.linkonc e.d.__vt_Q28TaoCrypt23AbstractEuclideanDomain+0x14): undefined reference to `__pure_virtual' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-algebra.o)(.gnu.linkonc e.d.__vt_Q28TaoCrypt23AbstractEuclideanDomain+0x18): undefined reference to `__pure_virtual' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-algebra.o)(.gnu.linkonc e.d.__vt_Q28TaoCrypt23AbstractEuclideanDomain+0x3c): undefined reference to `__pure_virtual' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-algebra.o)(.gnu.linkonc e.d.__vt_Q28TaoCrypt23AbstractEuclideanDomain+0x40): more undefined references to `__pure_virtual' follow /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-file.o)(.text+0x88): In function `TaoCrypt::FileSource::~FileSource(void)': : undefined reference to `__builtin_delete' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-file.o)(.text+0x28c): In function `TaoCrypt::FileSink::~FileSink(void)': : undefined reference to `__builtin_delete' collect2: ld returned 1 exit status make[3]: *** [dovecot-auth] Error 1 make[3]: Leaving directory `/root/dovecot-1.0.rc6/src/auth' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/root/dovecot-1.0.rc6/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/root/dovecot-1.0.rc6' make: *** [all] Error 2

4 5

[Dovecot] ACL-s and folders
by xrado 16 Aug '06

16 Aug '06

hi im new to imap servers and dovecot ... and im trying to setup acls for my imap folders i made dovecot-acl in my ~/Maildir/ root, but the setting are only applyed to inbox (.INBOX) folder is there a way to setup acl for other folders i made ..for instance work (.work folder in maildir root) another thing ...it is posibile to accomplish that i can move mail between folders but i cant delete it? greetings, rado

1 0

[Dovecot] Mailbox isn't a valid mbox file (dovecot 1.0-0.beta8.2.fc5)
by Dmitry Filonov 16 Aug '06

16 Aug '06

Hello, I have upgraded my dovecot-0.99.13-3.FC3 to dovecot-1.0-0.beta8.2.fc5 recently and now am having weird problem. If somebody's mailbox has the first line in a form of From "User Name" <user(a)host.domain.edu> Thu Oct 7 14:20:00 1999 instead of From user(a)host.domain.edu Thu Oct 7 14:20:00 1999 then that mailbox couldn't be precessed by dovecot. It wasn't a problem with 0.99.13, but it is a problem with 1.0. Is there any fix for that on a dovecot's side? I don't like the idea of going through all 100Gb of mailboxes and fixing the From line. Thank you, FiL

1 0

[Dovecot] Port Change?
by Charlie Davis 16 Aug '06

16 Aug '06

Hey all, Got a super simple question that I can't find an answer to on google or on the list. I want dovecot to listen to port 143 and another port as well for imap. Is this possible? The dovecot.conf has a little note that says "If you want to specify ports # for each service, you will need to configure these settings inside the # protocol imap/pop3 { ... } section, so you can specify different ports # for IMAP/POP3." but in the protocol section for imap, I don't see any example or what not of changing the port. Any help? -Charlie

1 0

[Dovecot] Authentication Failure
by William J. Dzieciolowski 16 Aug '06

16 Aug '06

Probably a newbie question.... sorry. Did a deluser a week or so ago, but didn't remove any of the users files. I re-enabled the user via useradd with the -u and set the uid the same as it was before. Now when I try and log the user into his mail via Thunderbird, /var/log/messages reports dovecot(pam_unix)[17259]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=sean Any help is appreciated. Thanks.

2 1

[Dovecot] help debugging TLS
by Richard 16 Aug '06

16 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 hi, i've built dovecot latest cvs on OSX 10.4.7. i'm making a 1st attempt @ trying/failing to get TLS operation up-n-running ... my install's OK: Install prefix ...................... : /usr/local/dovecot File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : kqueue Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : no Building with pop3 server ........... : yes Building with mail delivery agent .. : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword sql (modules) Building with password lookup modules : passwd passwd-file pam checkpassword sql (modules) Building with SQL drivers ............: mysql NOTE: This is the UNSTABLE development branch of Dovecot. You may want to change into the stabilizing branch: cvs up -r branch_1_0 i've config'd for ssl/tls w/: ... listen = 10.0.0.6 ssl_listen = 10.0.0.6 ssl_disable = no verbose_ssl = yes auth_verbose = yes auth_debug = yes disable_plaintext_auth = no ssl_cert_file = /var/MailServer/Data/CERTS/mail.testdomain.com.cert.rsa.pem ssl_key_file = /var/MailServer/Data/CERTS/mail.testdomain.com.privkey.rsa.pem ssl_ca_file = /var/MailServer/Data/CERTS/main.CA.cert.rsa.pem ssl_verify_client_cert = no ssl_parameters_regenerate = 24 ssl_cipher_list = ALL:!SSLv2:!aNULL:!NULL:!EXPORT:!DES:!LOW:@STRENGTH 17 ... after launch: % ps -ax | grep -i dovecot 14034 ?? Ss 0:11.61 /usr/local/dovecot/sbin/dovecot -c /var/MailServer/Conf/Dovecot/dovecot.conf 14035 ?? S 0:17.00 dovecot-auth on test via telnet, i see: % telnet 10.0.0.6 143 Trying 10.0.0.6... Connected to mail.testdomain.com. Escape character is '^]'. * OK mail.testdomain.com Dovecot IMAP4 v1.0cvs server ready 1 capability * CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS STARTTLS AUTH=PLAIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5 1 OK Capability completed. ... but, a test with: % openssl s_client -connect 10.0.0.6:143 fails & reports, simply: CONNECTED(00000003) 14282:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:567: i'm migrating from cyrus where this simple testing returns correctly w/o error. unclear, atm, whether there's something in dovecot, or in my testing, not working ... suggestions? thanks, richard - -- /"\ \ / ASCII Ribbon Campaign X against HTML email, vCards / \ & micro$oft attachments [GPG] OpenMacNews at gmail dot com fingerprint: 50C9 1C46 2F8F DE42 2EDB D460 95F7 DDBD 3671 08C6 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iEYEAREDAAYFAkTjK7UACgkQlffdvTZxCMbisgCggspE05II6KCAik5dfvoHtSyI 1PgAn2ErKP0xGfRAlwMrzyavstIw02a7 =kWXI -----END PGP SIGNATURE-----

2 2

[Dovecot] dovecot 1.0rc6 and LDAP problem
by Marcin Deranek 16 Aug '06

16 Aug '06

Hi, I have been using Dovecot with LDAP support (only for password authentication) for a couple of weeks already and everything was running smoothly so far.. till last week when discovered interesting thing: whenever I start LDAP server (openldap 2.3.24) before I start Dovecot everything is fine.. however when Dovecot is started first and then LDAP server it's not possible to authenticate :-( My dovecot-ldap.conf file: hosts = 127.0.0.1 auth_bind = yes auth_bind_userdn = uid=%u,ou=Users,dc=domain,dc=tld ldap_version = 3 base = ou=Users,dc=domain,dc=tld These are messages I get in syslog: slapd is down Aug 15 18:56:55 ftp dovecot: Dovecot v1.0.rc6 starting up Aug 15 18:56:56 ftp dovecot: auth(default): LDAP: Can't connect to server: 127.0.0.1 slapd is started Aug 15 18:58:36 ftp dovecot: imap-login: Disconnected: Inactivity: method=plain, rip=192.168.1.3, lip=192.168.1.2, TLS Aug 15 18:58:36 ftp dovecot: login: tried to change state 2 -> 2 (if you can't login at all, see src/lib/fdpass.c) slapd messages: Aug 15 18:57:19 ftp slapd[20544]: slapd starting Aug 15 18:57:36 ftp slapd[20544]: conn=0 fd=11 ACCEPT from IP=127.0.0.1:37703 (IP=0.0.0.0:389) Aug 15 18:57:36 ftp slapd[20544]: conn=0 op=0 BIND dn="uid=user,ou=Users,dc=domain,dc=tld" method=128 Aug 15 18:57:36 ftp slapd[20544]: conn=0 op=0 BIND dn="uid=user,ou=Users,dc=domain,dc=tld" mech=SIMPLE ssf=0 Aug 15 18:57:36 ftp slapd[20544]: conn=0 op=0 RESULT tag=97 err=0 text= Aug 15 18:58:39 ftp slapd[20544]: conn=0 op=1 BIND anonymous mech=implicit ssf=0 Aug 15 18:58:39 ftp slapd[20544]: conn=0 op=1 BIND dn="uid=user,ou=Users,dc=domain,dc=tld" method=128 Aug 15 18:58:39 ftp slapd[20544]: conn=0 op=1 BIND dn="uid=user,ou=Users,dc=domain,dc=tld" mech=SIMPLE ssf=0 Aug 15 18:58:39 ftp slapd[20544]: conn=0 op=1 RESULT tag=97 err=0 text= Aug 15 18:59:41 ftp slapd[20544]: conn=0 op=2 BIND anonymous mech=implicit ssf=0 Aug 15 18:59:41 ftp slapd[20544]: conn=0 op=2 BIND dn="uid=user,ou=Users,dc=domain,dc=tld" method=128 Aug 15 18:59:41 ftp slapd[20544]: conn=0 op=2 BIND dn="uid=user,ou=Users,dc=domain,dc=tld" mech=SIMPLE ssf=0 Aug 15 18:59:41 ftp slapd[20544]: conn=0 op=2 RESULT tag=97 err=0 text= Has anyone else has the same problem ? Regards, Marcin

2 2

[Dovecot] stale imap processes with 1.0.rc6 on FreeBSD
by Jeremy C. Reed 16 Aug '06

16 Aug '06

Was running dovecot-1.0.rc2 but many stale imap processes (only one user of IMAP). Switched to dovecot-1.0.rc6 but problem continued. This is on FreeBSD 4 something. Maybe it has bug with kqueue?? I read messages about the stale imap processes on the list. It seems to hit *BSD systems. But email about new release candidate indicated it should be fixed. I read on the pkgsrc commit list about --with-ioloop=best So I configured with that and saw that the I/O loop method is now kqueue. (I saved configure output and it was poll before). But the stale imap processes problem continues. For one user over past couple hours I have eight imap processes in "I" state. I have: File offsets ........................ : 64bit I/O loop method ..................... : kqueue File change notification method ..... : kqueue Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with mail delivery agent .. : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword (modules) Building with password lookup modules : passwd passwd-file pam checkpassword (modules) Building with SQL drivers ............: And I have: protocols = imap pop3 protocol imap { imap_client_workarounds = outlook-idle delay-newmail } (Just started using delay-newmail today.) My maillogs don't show any problems. The IMAP user tells me that Outlook says it has reset connections often. I see multiple imap-login Login within a few minutes for this same user who said received a connection reset in outlook at the same time. Just received a screenshot that said: Microsoft Office Outlook Failed to update headers. The TCP/IP connection unexpectedly terminated by the server. Then also received an error (in Outlook I think), like: imap session idle too long, connection reset (I don't have or use Outlook myself so can't test myself.) It is used for a lot of pop3 and seems fine with that. (It uses stunnel for pop3s but not imaps for over a week to eliminate stunnel from our troubleshooting). Any ideas on troubleshooting this would be appreciated. Jeremy C. Reed

4 13

[Dovecot] problem with sieve implementation
by Amadou Toure 16 Aug '06

16 Aug '06

Hello, I follow the instruction of this link (http://wiki.dovecot.org/LDA) to implement sieve with my dovecot installation (dovecot-1.0rc2) and i'm running the timsieve daemon of my cyrus-imapd installation but i got the following error message when the sieve daemon try to formward message : entered bc_action_emit with filelen: 16 Aug 13 14:53:27 ldap sieve[3870]: entered bc_action_emit with filelen: 36 Thank you for your help regards Amadou TOURE

2 2

[Dovecot] cleartext password logging
by Imre Gergely 16 Aug '06

16 Aug '06

hi is it possible to somehow log cleartext passwords (preferably after the authentication is done, and the user logged in)? 'auth_verbose = yes' doesn't seem to be enough. i have dovecot 0.99. thx.

2 1

[Dovecot] Dovecot - Issue with Maildir++ quotas
by Andrew Richards 16 Aug '06

16 Aug '06

Hi, I've been bitten by an issue running Squirrelmail on top of Dovecot using Maildir++ quotas. Having configured these quotas in Dovecot, I notice that Dovecot appears not to exclude the 'Trash' folder from its quota calculation (which it should do, according to the Maildir++ spec). Unfortunately this breaks Squirrelmail if I try to delete a message from a close-to-quota mailbox - as per July's thread: "Maildir++ quota - how to handle a full mailbox" Which unfortunately means that a fairly full mailbox can become 'Wedged' with Dovecot/Squirrelmail in this situation with its owner unable to delete messages if that's the only way they access their mailbox. I took a look at the source and found the 'Quota exceeded' lines in src/plugins/quota/quota-storage.c but didn't understand it well enough to dive in... except to notice that the 'Trash' folder doesn't appear to get excluded from the calculations. cheers, Andrew.

5 8

[Dovecot] multiple Authentication
by Marc Perkel 16 Aug '06

16 Aug '06

I'm using the following authentication passing the full email address user(a)domain.com auth default { mechanisms = plain # Linuxconf passwd-like file with specified location passdb passwd-file { args = /etc/vmail/shadow.%d } # Linuxconf passwd-like file with specified location userdb passwd-file { args = /etc/vmail/passwd.%d } user = root } But - what I want to do is if the user doesn't enter the domain part I want it to assume one specific domain. How would I do that?

2 1

[Dovecot] POP3 and TLS don't work (dovecot 1.0 rc6)
by kaspars.bogdanovs＠awtech.lv 16 Aug '06

16 Aug '06

Hi! It seems there are problem with POP3 connection when TLS enabled. Previously it worked fine, but for now it doesn't... Plain & SSL POP3 works. Plain, TLS & SSL IMAP works too. In logs nothing than: dovecot: Aug 16 10:36:23 Warning: pop3-login: SSL_accept() failed: error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac [xxx.xxx.xxx.xx] xxx.. - remote ip address On client side: KMail - Could not connect to host Your POP3 server claims to support TLS but negotiation was unsuccessful. You can disable TSL in KDE using the crypto settings module. Thunderbird (on Windows) - nothing special, but can't connect. OS: Debian Linux __ Kaspars P.S. sorry for bad english

2 1

[Dovecot] default_realm problem
by Anton Martchukov 16 Aug '06

16 Aug '06

Hello List, I've upgraded to dovecot from FreeBSD ports, changed the config from previous 0.99 version, but meet a problem with %d variable beeing empty in userdb static configuration directive. Our server supports multiple domains, e.g. 'mxc.ru' and 'mail.mxc.ru'. Users can log into using their full e-mail address like antonm(a)mxc.ru or antonm(a)mail.mxc.ru, but the feature of adding default domain should also be present, e.g. when logging with user name 'antonm' server should assume username to be 'antonm(a)mxc.ru' cause 'mxc.ru' is the default domain. This wroked fine in 0.99 version, but, alas, I can't get it working in newer version. I've tried different settings combination, but all of them results in '%d' beeing empty Debug authentication log is: dovecot: Aug 16 10:59:46 Info: auth(default): auth(antonm(a)mxc.ru,10.3.1.192): username changed antonm(a)mxc.ru -> antonm dovecot: Aug 16 10:59:46 Info: auth(default): ldap(antonm,10.3.1.192): uid(user)=antonm userPassword(password)=<hidden> dovecot: Aug 16 10:59:46 Info: auth(default): client out: OK 1 user=antonm dovecot: Aug 16 10:59:46 Info: auth(default): master in: REQUEST 11 97887 1 dovecot: Aug 16 10:59:46 Info: auth(default): master out: USER 11 antonm uid=1004 gid=1004 home=/data/mai lspool//antonm The problem here seems to be with "username changed antonm(a)mxc.ru -> antonm", but I do not know how to switch it off. The relevant config file parts are: dovecot.conf: auth_default_realm = mxc.ru auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth default { mechanisms = plain digest-md5 passdb ldap { args = /usr/local/etc/dovecot-ldap.conf } userdb static { args = uid=1004 gid=1004 mail=maildir:/data/mailspool/%d/%n } } dovecot-ldap.conf: #all user attrs here are commented, since we don't get any user info from ldap, but checking a password #user_attrs = uid,homeDirectory,,,uidNumber,gidNumber #user_attrs = ,,,,,,, #user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_filter = (&(objectClass=mailUser)(dc=%d)(uid=%n)(accountActive=TRUE)) default_pass_scheme = PLAIN The authentication is working, so on the pass_filter in dovecot-ldap.conf '%d' is resolved properly, but in userdb static's mail argument it's empty whatever I do. Thank you for your help! -- Anton Martchukov - http://www.martchukov.com

2 1

[Dovecot] Problems after upgrade (0.99.x -> 1.0.x)
by fazer69＠o2.pl 16 Aug '06

16 Aug '06

Hello :) I had a working Dovecot 0.99.x with the following dovecot.conf: ### ssl_disable = yes disable_plaintext_auth = no login = imap verbose_proctitle = yes default_mail_env = maildir:%h/Maildir auth = default auth_mechanisms = plain auth_userdb = passwd /etc/passwd auth_passdb = shadow /etc/shadow auth_user = root protocols = imap pop3 ### Then I've downloaded, compiled and installed Doveot 1.0.rc6, I tried lot of "possibilities" in the new dovecot.conf but I always get : dovecot: Dovecot v1.0.rc6 starting up dovecot: Login process died too early - shutting down dovecot: child 15288 (login) killed with signal 11 dovecot: child 15289 (login) killed with signal 11 dovecot: child 15290 (login) killed with signal 11 Some add. info: # dovecot -n # /usr/local/etc/dovecot.conf ssl_disable: yes login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login auth default: passdb: driver: shadow args: /etc/shadow userdb: driver: passwd How can I get the new Dovecot acting as the old one? I don't use pam (which seems to be default now), simply shadow passwords (Slackware). http://wiki.dovecot.org/UpgradingDovecot did not help me. TIA, websafe

6 7

[Dovecot] Migrating from qpopper to dovecot
by asko 16 Aug '06

16 Aug '06

Hi, I am planning a migration from Qpopper 4.0.5 to Dovecot.. I need to use mbox format (because Openwebmail does not have native Maildir support yet) and pop3. The system will have about 1500 users, once migrating is complete. To avoid users downloading their mailboxes all over again, i need to set "pop3_reuse_xuidl = yes".. But that option works since Dovecot 1.0alpha1. RHEL has latest stable version 0.99.11-2. So let me rephrase my question: is latest dovecot (1.0.rc6) stable enough to handle the load (mbox with pop3) or should I wait for the stable version to come out.. I want to avoid trouble under heavy load and/or with different pop3 clients. I found some problem reports of mbox related issues from dovecot mailing list. I could go with latest Qpopper 4.0.8, trading speed to safety.. If you have any similar experiences, please share your knowledge ;-) -- asko

1 0

[Dovecot] LDAP Authorising users from Active Directory
by Rob Coward 16 Aug '06

16 Aug '06

Hi, I am having stability problems setting up dovecot to authenticate virtual users against Active Directory on Win2k3. If the correct userid and password are used, everything works fine, see first logfile snippet below. If an unknown userid is used, again everything works fine. If I try logging in with a valid userid but get the password wrong, that connection is rejected (see second logfile snippet), and all subsequent connection even with correct userid/password are rejected with thunderbird getting a temporary auth failure (see third logfile snippet below). I am using auth_bind = yes and it seems as though after the failed login with an incorrect password, dovecot is loosing the dn & dnpass settings for the initial user lookup. I have found numerous references to PHP and ActiveDirectory on Win2k3 getting a similar "ldap_search() failed: Operations error" error and they suggested ensuring LDAP Version 3 is used and the Deref is set to 'never'. I am already using these setting to no avail. Has anyone else experience these problems, or have any suggestions on how to overcome it ? Many thanks, Rob Coward Normal Login with correct password Aug 16 10:08:52 gm-ho-lin-05 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=ADA5OTlAc3RvcmVzLmdhbWUuY28udWsAOTk5MA== Aug 16 10:08:52 gm-ho-lin-05 dovecot: auth(default): ldap(0999(a)stores.game.co.uk,127.0.0.1): bind search: base=OU=Stores,OU=UK,DC=group,DC=game,DC=net filter=(&(objectClass=user)(mail=0999(a)stores.game.co.uk)) Aug 16 10:08:52 gm-ho-lin-05 dovecot: auth(default): client out: OK 1 user=0999(a)stores.game.co.uk Aug 16 10:08:52 gm-ho-lin-05 dovecot: auth(default): master in: REQUEST 6 20765 1 Aug 16 10:08:52 gm-ho-lin-05 dovecot: auth(default): ldap(0999(a)stores.game.co.uk,127.0.0.1): base=OU=Stores,OU=UK,DC=group,DC=game,DC=net scope=subtree filter=(&(objectClass=user)(mail=0999(a)stores.game.co.uk)) fields=uid,,,uid,, Aug 16 10:08:52 gm-ho-lin-05 dovecot: auth(default): master out: USER 6 0999(a)stores.game.co.uk uid=12367 gid=12367 Aug 16 10:08:52 gm-ho-lin-05 dovecot: imap-login: Login: user=<0999(a)stores.game.co.uk>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Aug 16 10:08:52 gm-ho-lin-05 dovecot: IMAP(0999(a)stores.game.co.uk): Effective uid=12367, gid=12367 Aug 16 10:08:52 gm-ho-lin-05 dovecot: IMAP(0999(a)stores.game.co.uk): maildir: data=/data/mailstore/stores.game.co.uk/0999 Aug 16 10:08:52 gm-ho-lin-05 dovecot: IMAP(0999(a)stores.game.co.uk): maildir: root=/data/mailstore/stores.game.co.uk/0999, index=/data/mailstore/stores.game.co.uk/0999, control=, inbox= Aug 16 10:08:52 gm-ho-lin-05 dovecot: IMAP(0999(a)stores.game.co.uk): Disconnected: Logged out Login with incorrect password Aug 16 10:09:37 gm-ho-lin-05 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=ADA5OTlAc3RvcmVzLmdhbWUuY28udWsAMTIzNA== Aug 16 10:09:37 gm-ho-lin-05 dovecot: auth(default): ldap(0999(a)stores.game.co.uk,127.0.0.1): bind search: base=OU=Stores,OU=UK,DC=group,DC=game,DC=net filter=(&(objectClass=user)(mail=0999(a)stores.game.co.uk)) Aug 16 10:09:39 gm-ho-lin-05 dovecot: auth(default): client out: FAIL 1 user=0999(a)stores.game.co.uk Aug 16 10:09:39 gm-ho-lin-05 dovecot: imap-login: Aborted login: user=<0999(a)stores.game.co.uk>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Subsequent logins with correct password Aug 16 10:09:48 gm-ho-lin-05 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=ADA5OTlAc3RvcmVzLmdhbWUuY28udWsAOTk5MA== Aug 16 10:09:48 gm-ho-lin-05 dovecot: auth(default): ldap(0999(a)stores.game.co.uk,127.0.0.1): bind search: base=OU=Stores,OU=UK,DC=group,DC=game,DC=net filter=(&(objectClass=user)(mail=0999(a)stores.game.co.uk)) Aug 16 10:09:48 gm-ho-lin-05 dovecot: auth(default): ldap(0999(a)stores.game.co.uk,127.0.0.1): ldap_search() failed: Operations error Aug 16 10:09:49 gm-ho-lin-05 dovecot: auth(default): client out: FAIL 1 user=0999(a)stores.game.co.uk temp Aug 16 10:09:49 gm-ho-lin-05 dovecot: imap-login: Aborted login: user=<0999(a)stores.game.co.uk>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this e-mail in error please notify the system manager at: mailto:postmaster@game.net The recipient acknowledges that the transmissions made via the Internet can be corrupted and therefore THE GAME GROUP PLC and any of its subsidiaries do not give any warranty as to the quality or accuracy of any information contained in the message or assume any liability for it or for its transmission, reception or storage. This footnote also confirms that this e-mail message has been swept by anti-virus software for the presence of computer viruses. http://www.game.co.uk http://www.gamegroup.plc.uk

1 0

[Dovecot] imap+ssl feedback
by Herr Nagengast 15 Aug '06

15 Aug '06

I've been using 1.0rc5 since August 2nd. Thunderbird users on multiple platforms haven't had any problems saving messages to the Sent mailbox. I know from reading release notes that the SSL proxy code in rc5 is different from rc6, but I have to admit to being leery about upgrading since it works for me. Here's my configure command: ./configure --without-shadow --localstatedir=/var --with-notify=kqueue --with-cyrus-sasl2 --without-gssapi --without-vpopmail --prefix=/usr/local --build=i386-portbld-freebsd5.3 Thanks for your hard work! Todd

1 0

[Dovecot] Possible to alias ("ln") a folder?
by scianos＠speakeasy.net 15 Aug '06

15 Aug '06

Greetings - I've got an interesting issue that has cropped up due to some brain-dead "functionality" in mobile Windows Mobile clients... Our mail infrastructure traditionally uses "Sent" as our sent items folder. This is the default. However, WM puts it's sent messages in a folder called "Sent Items", and does not let you change it. Is there any proper and/or elegant way to alias the Sent folder to Sent Items (and allow both to coexist as the same message store) in an automated fashion without needing to set this up for each user? Thank you in advance for you help and patience! - Stu

2 1

[Dovecot] dovecot tring to load sql modules
by Dean Gibson (Mail Administrator) 15 Aug '06

15 Aug '06

Dovecot is issuing: Aug 12 17:09:27 athlon1 dovecot: Dovecot v1.0.rc6 starting up Aug 12 17:09:27 athlon1 dovecot: Generating Diffie-Hellman parameters for the first time. This may take a while.. Aug 12 17:09:28 athlon1 dovecot: Auth process died too early - shutting down Aug 12 17:09:28 athlon1 dovecot: auth(default): dovecot-auth: error while loading shared libraries: libmysqlclient.so.10: cannot open shared object file: No such file or directory Aug 12 17:09:28 athlon1 dovecot: child 28705 (auth) returned error 127 That's because I installed the RPM from atrpms.net using "--nodeps". The RPM requires the above SQL library module, among others (inc. postgresql and sqlite). However: 1. Why do I need ANY SQL library??? I want PAM to do the authorization. 2. If I have to use SQL, I want Dovecot to use PostgreSQL (which I have installed and am using in another application). I hope the above is a dumb question, because that means the fix is easy. No, I'd rather not build my own; that's why I picked an RPM. Running Fedora Core 1. -- Dean

7 16

[Dovecot] dovecot-lda, sieve, maildir
by Frank Cusack 14 Aug '06

14 Aug '06

I'm unable to get dovecot-lda with sieve filtering to deliver into maildir folders. The examples on the wiki explicitly say "mbox", so I'm wondering, does the dovecot-lda sieve implementation not support filtering into maildir folders? -frank

5 13

[Dovecot] forbid dots in folder names
by nitbix 14 Aug '06

14 Aug '06

Is it possible to disallow creation of maildir subfolders with dots in their name? Thanks --- Alan Mosca

2 1

[Dovecot] duplicate uids in Outlook
by Faisal Shaikh 14 Aug '06

14 Aug '06

Hi, I run a Postfix/Dovecot server with Outlook 2002, Thunderbird clients as well as a Squirrelmail setup. All use IMAP to query the server. I recently converted our mail spool from mbox to maildir. After the conversion, one of the users is receiving two types of error messages which appear in a popup window. 1. The first popup says the following The UI D of a message changed unexpectedly. This typically indicates a server bug. Your program may not function properly after this. It then gives details of the MsgSeqNum, old UID and the new UID. 2. The second popup says Your server has reported a UID which does not comply with the IMAP standard. This typically indicates a server bug. Your program may not function properly after this. Ive searched for this on google and it has been reported before, but there are no reports of a solution or workaround. I would really appreciate any pointers or suggestions. Many Thanks, Faisal Shaikh

3 5

[Dovecot] POP to IMAP Transition
by Yudhvir Singh Sidhu 14 Aug '06

14 Aug '06

I am using Dovecot IMAP and added an IMAP folder to an Outlook client which is also popping another account. Both account folders exist in the same client. I am wondering if I can drag the pop-ed mail to the IMAP folder, thereby transferring old mail to the IMAP folder? Outlook allows me to click and drag folders into the IMAP folder. You see where I am going with this, I wnat to transition from the old POP accounts to the new IMAP accounts and delete the old folders. Is this possible? I'd love to hear from someone who has done this. ======== Yudhvir Singh Sidhu Systems Administrator Industry-University Cooperative Research Program www.ucdiscoverygrant.org 2087 Addison Street, 2nd Floor Berkeley, CA 94720-3340 510 643 4039 fax 510 643 7839

3 2

[Dovecot] Dovecot fails to come up when using ACLs (1.0.b5)
by Jeff Turner 14 Aug '06

14 Aug '06

Hi, I just had a go at enabling ACLs with 1.0b5. As per the docs I've done the configuration bit: protocol imap { .. mail_plugins = acl } ... plugin { acl = vfile:/usr/local/etc/dovecot-acls } and created the dovecot-acls file. When I start dovecot, it hangs for a few seconds and dies with this: [root@redback root]# /etc/init.d/dovecot restart Shutting down IMAP daemon (/usr/local/sbin/dovecot1.0rc5): [ OK ] Starting IMAP daemon (/usr/local/sbin/dovecot1.0rc5): IEffective uid=65534, gid=65534 INamespace: type=private, prefix=, sep=/, inbox=yes, hidden=no, subscriptions=no Imaildir: data=/imap/mailboxes/dump-capability Imaildir: root=/imap/mailboxes/dump-capability, index=/imap/mailboxes/dump-capability, control=, inbox= INamespace: type=public, prefix=JiraSupport/, sep=/, inbox=no, hidden=no, subscriptions=no Imaildir: data=/imap/mailboxes/jira-support:CONTROL=/imap/mailboxes/dump-capability/shared-settings/jira-support/control:INDEX=/imap/mailboxes/dump-capability/shared-settings/jira-support/index Imaildir: root=/imap/mailboxes/jira-support, index=/imap/mailboxes/dump-capability/shared-settings/jira-support/index, control=/imap/mailboxes/dump-capability/shared-settings/jira-support/control, inbox= Elstat(/imap/mailboxes/jira-support/cur) failed: Permission denied [FAILED] there's a strange dump-capability mailbox created: [root@redback root]# ls -la /imap/mailboxes/dump-capability/ total 20 drwxrwx--- 5 nfsnobody nfsnobody 4096 Aug 4 19:59 . drwxr-xrwx 28 root mail 4096 Aug 4 19:59 .. drwxrwx--- 2 nfsnobody nfsnobody 4096 Aug 4 19:59 cur drwxrwx--- 2 nfsnobody nfsnobody 4096 Aug 4 19:59 new drwxrwx--- 2 nfsnobody nfsnobody 4096 Aug 4 19:59 tmp [root@redback root]# First I tried making /imap/mailboxes/jira-support/* world-readable, which fixes the 'Permisison denied' error. Dovecot still fails to come up. When I strace the process on startup, this is what it looks like: ...... open("/etc/passwd", O_RDONLY) = 3 fcntl64(3, F_GETFD) = 0 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 fstat64(3, {st_mode=S_IFREG|0644, st_size=3091, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40016000 read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 3091 close(3) = 0 munmap(0x40016000, 4096) = 0 access("/usr/local/libexec/dovecot/imap", X_OK) = 0 access("/usr/local/lib/dovecot/imap", R_OK|X_OK) = 0 geteuid32() = 0 pipe([3, 4]) = 0 fcntl64(3, F_GETFD) = 0 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 fcntl64(4, F_GETFD) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 dup(2) = 5 fcntl64(5, F_GETFD) = 0 fcntl64(5, F_SETFD, FD_CLOEXEC) = 0 fork() = 16282 close(5) = 0 close(4) = 0 alarm(5) = 0 wait4(-1, IEffective uid=65534, gid=65534 INamespace: type=private, prefix=, sep=/, inbox=yes, hidden=no, subscriptions=no Imaildir: data=/imap/mailboxes/dump-capability Imaildir: root=/imap/mailboxes/dump-capability, index=/imap/mailboxes/dump-capability, control=, inbox= INamespace: type=public, prefix=JiraSupport/, sep=/, inbox=no, hidden=no, subscriptions=no Imaildir: data=/imap/mailboxes/jira-support:CONTROL=/imap/mailboxes/dump-capability/shared-settings/jira-support/control:INDEX=/imap/mailboxes/dump-capability/shared-settings/jira-support/index Imaildir: root=/imap/mailboxes/jira-support, index=/imap/mailboxes/dump-capability/shared-settings/jira-support/index, control=/imap/mailboxes/dump-capability/shared-settings/jira-support/control, inbox= 0xbfffcb7c, 0, NULL) = ? ERESTARTSYS (To be restarted) --- SIGALRM (Alarm clock) @ 0 (0) --- +++ killed by SIGALRM +++ I tried chmod ugo+r'ing the /imap/dump-capability/ directory tree and it made no difference. I've attached my dovecot.conf, stripped of comments. Cheers, Jeff

2 2

Re: [Dovecot] dovecot tring to load sql modules
by Axel Thimm 14 Aug '06

14 Aug '06

On Sun, Aug 13, 2006 at 10:15:43AM -0700, Dean Gibson (Mail Administrator) wrote: > On 2006-08-13 02:50, Axel Thimm wrote: > >The fix is to _never_ use --nodeps in rpm and other package managers, and > >to simply add the mysql libs and ignore their presence. > > > >Unless you are setting up an embedded system and are running out of space > >there is no reason not to allow mysql libs to install. > > OT gripe: > > Well, if that's what I have to do, that's what I'll do. It's > getting to the state where, when you install Linux, you just have to > install everything, or administration becomes a treasure hunt. > Otherwise, every time you want to install a package, you have to go > on a treasure hunt. It's also why I search for RPMS rather than > doing a build from source; that's also a treasure hunt for more > files. Do you know that you can't run the printer command-line > configuration tools on Linux unless you have the GUI installed? You > can't set the time zone with the tools provided unless you have some > other giant package installed (I forget which) that I don't need. I > run several Linux servers, and I don't need that GUI crap on each > server. I thought one of the fundamental security concepts was, if > you don't need it, don't install it. Installing support for mysql client libs does not imply you have to run a mysql server (or even access one). That's what security is about when discussing minimal systems in a security context. > I first started with RH Linux 5.2 and it was a joy. However, > starting with about RH Linux 7.0, Linux developers have lost sight > of the original goal, in my opinion, which is to have a small, > easily managed server system. > > I don't have any problem with the dovecot RPM having support for God > knows what, built in. What would be nice is that if I don't reference > it in dovecot.conf, then it doesn't get called. Do you need hyperbole and elliptic functions? Or maybe not even sqrt? Should then glibc allow riping them out? Of course not. And what shoudl any packaging system do when you suddenly do reference mysql support in dovecot.conf? Should it automatically install the missing libs the moment you leave the editor? > End of gripe. I'll go find the required (but unused) packages and > install them, and hope that they don't drag in stall more (unused) crap. If you use --nodeps you'll end up with a broken system. -- Axel.Thimm at ATrpms.net

3 3

[Dovecot] Comments in dovcot.conf files
by Marc Perkel 12 Aug '06

12 Aug '06

Suggestion for comments. Why not support this syntax for comments as well as # /* comments comments */ It will allow for neater looking config files.

2 3