October 2003 - dovecot

[Dovecot] Plaintext Authentication from Localhost
by Paul C. Bryan 06 Sep '04

06 Sep '04

Hi: It appears that at least at one time, Dovecot supported plaintext authentication from localhost, even if disable_plaintext_auth = yes. To wit, the example configuration file reads: # Disable LOGIN command and all other plaintext authentications unless # SSL/TLS is used (LOGINDISABLED capability). Note that 127.*.*.* and # IPv6 ::1 addresses are considered secure, this setting has no effect if # you connect from those addresses. #disable_plaintext_auth = yes On brief inspection of the code, there doesn't seem to be any such support. This is corroborated by the fact that 0.99.10 (Debian package) behaves by disallowing plaintext authentication via connections on localhost. This is a particularly useful feature, as local webmail clients can safely authenticate via the local interface without requiring secure authentication. So, the question is, is Dovecot supposed to support plaintext auth via localhost even if disallowed in dovecot.conf? If so, any suggestions as to what I may be doing wrong? Yours truly, Paul C. Bryan email(a)pbryan.net

2 4

[Dovecot] Re: Bug with partial IMAP fetches
by Matthew Reimer 03 Nov '03

03 Nov '03

A little more information: This bug results in Mozilla and pine never rendering the message, since dovecot lies about how much data was really sent, as seen in the following log in which only 394 bytes (rather than the 10240 dovecot is claiming to send) are returned: ---- 8 UID fetch 94 (UID RFC822.SIZE BODY[]<10240.10240>) * 24 FETCH (UID 94 RFC822.SIZE 20873 BODY[]<10240> {10240} G SRC="/world/image/nav/contents_bottom.gif" WIDTH="49" HEIGHT="15" BORDER="0" VSPACE="10"></A></TD></TR></TABLE>  <script type="text/javascript"> if(parent.frames.length>0&&!isContents) top.location.replace(document.location) </script> </BODY> </HTML>  --------------010405000308030207040500-- ) 8 OK Fetch completed. ---- Matt

2 1

[Dovecot] Debian bug #201444: More verbose logging
by Jaldhar H. Vyas 03 Nov '03

03 Nov '03

I brought this up a while ago but the submitter is wondering if there has been any progress on this issue. He says: It would be extremely nice to have a little bit more detailed logging, and I believe it doesn't really require that much code. I use now a daemon which logs login (name, ip; as dovecot does), and logout (with name, logout reason if any special) with the numbers of "read new mail number and size" and "mail left on server number and size". Would be nice to have something like that in dovecot. Could something like this be added for the next version? -- Jaldhar H. Vyas <jaldhar(a)debian.org> La Salle Debain - http://www.braincells.com/debian/

3 4

[Dovecot] Problems finding information on passwd-file
by David A. Desrosiers 03 Nov '03

03 Nov '03

I've recently converted over to dovecot to uw-imap, and am having a heck of a time trying to find actual docs that describe how to set up virtual users properly without using ldap or posgres.. Basically I need to know what goes in auth_userdb and auth_passdb for a system with *NO* local user accounts in /etc/passwd and /etc/shadow. I will only create mbox files for these users in /var/mail/%u and alternately a home directory where they can store their own mail folders under /home/%u. How can I do this, given the current dovecot codebase? I've googled for a few hours, talked to many people on irc, and checked the mailing lists (of what I could find) related to this, and found nothing whatsoever describing how to achive this. Dovecot apparently supports "virtual users", but I can't find any supporting documentation that describes exactly HOW to set that up. Thanks in advance. d.

2 1

[Dovecot] Bug with partial IMAP fetches
by Matthew Reimer 01 Nov '03

01 Nov '03

X-UIDL: 61c08992b287bf24b6fff123164620b2 Return-Path: <mreimer(a)vpop.net> Delivered-To: krista(a)vpop.net Received: from vpop.net (bilbo.vpop.net [65.103.33.41]) by boromir.vpop.net (Postfix) with ESMTP id 6B7D43A60F6 for <krista(a)vpop.net>; Sun, 6 Oct 2002 21:16:38 -0700 (PDT) Message-ID: <3DA10B4B.50405(a)vpop.net> Date: Sun, 06 Oct 2002 23:19:23 -0500 From: Matthew Reimer <mreimer(a)vpop.net> Organization: VPOP Technologies, Inc. User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.1) Gecko/20020829 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Krista Reimer <krista(a)vpop.net> Subject: WORLD October 12, 2002: Eight principles Content-Type: multipart/mixed; boundary="------------010405000308030207040500" This is a multi-part message in MIME format. --------------010405000308030207040500 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Lemme know if this doesn't come through right. http://www.worldmag.com/world/issue/10-12-02/closing_1.asp Matt --------------010405000308030207040500 Content-Type: text/html; charset=WINDOWS\252; name="www.worldmag.com/world/issue/10-12-02/closing_1.asp" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="www.worldmag.com/world/issue/10-12-02/closing_1.asp" Content-Base: "http://www.worldmag.com/world/issue/10 -12-02/closing_1.asp" Content-Location: "http://www.worldmag.com/world/issue/10 -12-02/closing_1.asp" <DOCTYPE HTML PUBLIC "-//IETF//DTD HTML3.0//EN" "html.dtd"> <HTML><HEAD><TITLE>WORLD October 12, 2002: Eight principles</TITLE> <META HTTP-EQUIV="Content-type" CONTENT="text/html; charset=Windows\252"> <META NAME="ISSUE" CONTENT="2002-10-12"> <META NAME="ISSUEFOLDER" CONTENT="10-12-02"> <META NAME="DESCRIPTION" CONTENT="How Christians should relate to those of other faiths : 1. We should not conceal aspects of our faith so as to avoid criticism or disapproval, and we should not ask others to do that. We believe it is just and loving to point out publicly the errors of other faiths, provided this is done with suf..."> <META NAME="ARTICLEAUTHOR" CONTENT=""></HEAD> <BODY BGCOLOR=ffffff BACKGROUND=/world/image/bg.gif LINK=#000099 VLINK=#6699CC ALINK=#0000FF> <A NAME="top">  <script type="text/javascript" src="/world/world_ad.js"></script> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="520"> <TR><TD WIDTH=20 VALIGN=TOP ALIGN=LEFT><IMG SRC="/world/image/dot_red.gif" WIDTH="20" HEIGHT="56" BORDER="0"></TD><TD WIDTH=500 VALIGN=MIDDLE ALIGN=LEFT><A TARGET="_top" HREF="/world/adredir.asp?url=http://stats.schwa.com/ss%3Fclick%26world%263a5f25c8&image=/world/image/ads/maiad.jpg" ><IMG SRC="/world/image/ads/maiad.jpg" ALT="Medical Ambassadors International" WIDTH=468 HEIGHT=60 BORDER=1></A> <BR></TD></TR></TABLE> <BR> <script type="text/javascript"> var isContents=false </script> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="720"> <TR><TD ALIGN=LEFT VALIGN=TOP WIDTH="4"><IMG SRC="/world/image/dot_red.gif" WIDTH="4" HEIGHT="1" BORDER="0"><BR></TD><TD ALIGN=LEFT VALIGN=MIDDLE WIDTH="110"><FONT SIZE="1" FACE="arial, helvetica">Call 1-800-951-NEWS (6397) to subscribe today! <BR></TD><TD ALIGN=LEFT VALIGN=MIDDLE WIDTH="38"><BR></TD><TD WIDTH="280" VALIGN=BOTTOM ALIGN=LEFT><IMG SRC="/world/image/world_header.gif" WIDTH="276" HEIGHT="51" BORDER="0"> </TD><TD WIDTH=98 VALIGN=MIDDLE ALIGN=LEFT><FONT SIZE="1" FACE="arial, helvetica">October 12, 2002<BR> Volume 17<BR> Number 39 </FONT><BR> </TD> <TD width="190"> <a href="http://www.weeklystandard.com/world"><img src="/world/image/side_ads/TWS-Wrld-2.gif" width="180" height="100"></a> </TD></TR></TABLE> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="720"><TR>  <TD ALIGN=LEFT VALIGN=TOP ROWSPAN="1" WIDTH="4"><IMG SRC="/world/image/dot_red.gif" WIDTH="4" HEIGHT="1" BORDER="0"></TD>   <TD ALIGN=LEFT VALIGN=TOP WIDTH="136"> <IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="11" BORDER="0"><BR><A HREF="home.asp" TARGET="_top"><IMG SRC="/world/image/nav/contents.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="opening_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/opening.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="cover_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/cover.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="national_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/national.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="international_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/international.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="cultural_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/cultural.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><IMG SRC="/world/image/nav/closing_v.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="20" BORDER="0"><BR><A HREF="/world/meta/search/" TARGET="_top"><IMG SRC="/world/image/nav/search.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="/world/meta/subscribe/" TARGET="_top"><IMG SRC="/world/image/nav/subscribe.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="https://secure.palmcoastd.com/pcd/document?ikey=057FCIREN" TARGET="_top"><IMG SRC="/world/image/nav/renew.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="/world/meta/archives/" TARGET="_top"><IMG SRC="/world/image/nav/archives.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="/world/classifieds/" TARGET="_top"><IMG SRC="/world/image/nav/classifieds.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="/world/meta/adrates/" TARGET="_top"><IMG SRC="/world/image/nav/adinfo.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="110"><TR><TD ALIGN=LEFT VALIGN=TOP WIDTH="110"><FONT SIZE="1" FACE="arial, helvetica"><STYLE> A.side {color:white;} </STYLE> <P><A class=side HREF=/world/issue/08-17-02/home.asp TARGET=_top><IMG SRC=/world/issue/08-17-02/image/cover_thumb.jpg WIDTH=72 HEIGHT=97 HSPACE=15 VSPACE=10 BORDER=0><BR><center>REMEMBERING 9/11 </center></A> <P>Read <A TARGET=_top HREF=/world/olasky/centralideas/index.html class=side>Central Ideas in the Development of American Journalism</a>, <A TARGET=_top HREF=/world/olasky/truth1.html class=side>Telling the Truth</A> and <A TARGET=_top HREF=/world/olasky/Prodigal/index.html class=side>Prodigal Press</a>, three books on journalism by Marvin Olasky.  <P> <A TARGET=_top HREF=http://www.gwbc.com/godsworld/worldad.asp class=side>Add Olasky, Belz, and other great thinkers to your reading list!</A> <P> <A class=side HREF=/world/meta/wear/ TARGET=_top> <IMG SRC=/world/image/world_wear_ad.gif WIDTH=99 HEIGHT=99 HSPACE=0 VSPACE=0 BORDER=1></A> <P> <A class=side HREF=/world/meta/subscribe/sub_standard.asp TARGET=_top> <IMG SRC=/world/image/bennett_book.gif WIDTH=75 HEIGHT=101 HSPACE=15 VSPACE=0 BORDER=1> <center>Free Book!</center></A> <P>Find out <A TARGET=_top HREF=/world/meta/contact/ class=side>how to contact us</A>. <P>Not familiar with WORLD Magazine? <A HREF=/world/meta/about/pr.asp TARGET=_top class=side>Find out more about us.</A> <P>Read our <A HREF=/world/meta/about/mission.asp TARGET=_top class=side>Mission Statement.</A> <P>If you are already a WORLD reader, head to <A HREF=/world/meta/help/ TARGET=_top class=side>Help Us Out</A> to find out how to help us grow.  <P>Find out <A HREF=/world/meta/about/about.asp TARGET=_top class=side>about this site</A>. <P>Excellence in Home Education starts here. Visit the new God's World Book Club Online! <A HREF=http://www.gwbc.com/godsworld TARGET=_top class=side>www.gwbc.com</A>. <p>Check out the World Journalism Institute website at <a href=http://www.worldji.com TARGET=_top class=side>www.worldji.com</a> and apply online! <p>Since 1981, God's World News has been helping children to understand and interpret the world around them. Now you can visit God's World News Online at <A HREF=http://www.gwnews.com TARGET=_top class=side>GWNews.com</a></font></body> <P></FONT> </TD> </TR> </TABLE> </TD>   <TD ALIGN=LEFT VALIGN=TOP WIDTH="16"> <IMG SRC="/world/image/dot_clr.gif" WIDTH="16" HEIGHT="1" BORDER="0"><BR></TD>   <TD ALIGN=LEFT VALIGN=TOP WIDTH="364">   <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" BORDER="0" HEIGHT="45"> <TR VALIGN="MIDDLE"> <TD ALIGN="LEFT"><FORM METHOD="POST" ACTION="/world/redirect.asp"> <INPUT TYPE=HIDDEN NAME="folder" VALUE="10-12-02"> <SELECT NAME="where"> <OPTION VALUE="closing_1.asp">Also in CLOSING THOUGHTS <OPTION VALUE="closing_2.asp">What's the difference? </SELECT> </TD> <TD ALIGN="LEFT"> <INPUT TYPE=SUBMIT VALUE="go"></FORM> </TD></TR></TABLE>  <FONT SIZE="5" COLOR="CC0000" FACE="arial, helvetica"><B>JOHN PIPER</B></FONT><BR><IMG SRC="/world/image/line_364.gif" WIDTH="364" HEIGHT="1" BORDER="0"><BR> <H2>Eight principles</H2> <H3><I>How Christians should relate to those of other faiths</I></H3>   <P>1. We should not conceal aspects of our faith so as to avoid criticism or disapproval, and we should not ask others to do that. We believe it is just and loving to point out publicly the errors of other faiths, provided this is done with sufficient evidence that the sacred writings or representative spokesmen of those faiths do indeed express these errors. We must strive not to misrepresent other faiths, as that is not only disrespectful but also undermining of our own credibility.<P> 2. We should acknowledge our sin and desperate need of salvation by a crucified and risen Savior, and not posture ourselves as worthy of salvation as if we had superior intellect or wisdom or goodness. We are beggars who have, by grace, found the life-giving bread of truth, forgiveness, and joy. As we expose the errors of other religions, we should feel and express sorrow and compassion for those who do not embrace Christ so as to be saved.<P> 3. We should not expect a fair fight in a secular world that is hostile to God and uncomfortable around the truth of Christ. Therefore, our response to abuse, distortion, or slander should not be angry resentment, but patient witness to the truth, in the hope and with the prayer that returning good for evil may open hearts to the truth. We must recognize that persecution is normal and that much of the protection Christians have in America is abnormal in history and in the world. Our witness will be best advanced by kind, steadfast statements and reasonable defenses of the truth.<P> 4. We should renounce all violence as a means of spreading our faith. Christians spread biblical faith by suffering, not by causing suffering. Authentic Christianity cannot be coerced by force or manipulation. We should acknowledge and proclaim that Christ will, at his personal appearing, punish those who have rejected him; his violence at the end of the age is a decisive reason we should not and may not exert violence against anyone because of his beliefs. This is Christ's right, not ours.<P> 5. We believe that God has given to civil government, not individuals or the church, the duty to bear the sword for justice and safety. Civil authorities should not punish beliefs, but some behaviors rooted in beliefssuch as killing, assault, or theftmay be outside the law and therefore punishable by the civil authority. Which behaviors are legally prohibited in a society based on freedom of belief and religion will be determined in a process of persuasion, debate, and election of representative lawmakers, with checks and balances provided by the executive and judicial branches and by constitutional safeguards for the rights of minorities.<P> 6. We should distinguish between a just war of defense against aggression and a religious war against people because of their beliefs. We should acknowledge that this distinction will probably not be recognized by certain religions that define their beliefs to include the right of cultural domination by force. But we should insist on this distinction rather than accept the claim of aggressors that our resistance is a religious attack on their faith. We should argue that the ground of such national defense is the civil right to freedom (of religion and speech and press and assembly), not disapproval of the religion underlying the attack.<P> 7. We should distinguish between the right to express criticism of erroneous beliefs and sinful behaviors, on the one hand, and the false inference some draw from this criticism that proponents of the criticized beliefs can therefore legitimately be mistreated. We also should not accept the claim that being criticized or denounced as mistaken or as sinners is a form of mistreatment. It is not a crime (hate crime or otherwise) to say publicly that someone's belief is wrong and harmful, or to call someone's behavior sinful and destructive. A necessary part of all debate concerning beliefs, behaviors, or proposals is the argument that some are wrong, ill-founded, and have deleterious effects.<P> 8. We believe that every religion, worldview, or philosophy of life may freely endeavor to influence and shape our culture. We renounce the use of force or bribery or deceit in this culture-shaping effort. We affirm preaching the gospel, publishing truth, and modeling love and justice, as well as prayer, persuasion, and participation in the political process. We recognize that all laws "impose" some group's behavioral conviction on all, so it is not a compelling criticism to say that a law that governs behavior is bad because it "imposes someone's morality" on society. It is therefore particularly vital to support principles, laws, and policies that protect the legal freedoms of minorities that do not have the numbers to sway lawmaking processes.<P> These principles are further developed at the website http://www.desiringgod.org/library/topics/culture/tolerance_principles.html  <BR></TD><TD width="200" valign="top"> <link rel="Stylesheet" href="/world/right-bar-basic.css" type="text/css"></link> <style type="text/css"> @import: "/world/right-bar-advanced.css"; </style> <div id="rightbar"> <div id="listenlinks"> <h4><a target="_top" href="/world/listen/">Listen to WORLD</a></h4> <div>Daily radio shorts by Nick Eicher. <a target="_top" href="/world/listen/">Read more...</a><br /> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000201.mp3">10/7/02 download MP3</a></p> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000199.mp3">10/8/02 download MP3</a></p> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000198.mp3">10/9/02 download MP3</a></p> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000197.mp3">10/10/02 download MP3</a></p> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000196.mp3">10/11/02 download MP3</a></p> </div> </div> <div id="recentlinks"> <h4><a target="_top" href="/world/meta/archives/">From Previous Weeks</a></h4> <div> <p><a target="_top" href="/world/issue/10-05-02/"><img src="/world/issue/10-05-02/image/cover_thumb.jpg" width="72" height="97" /><br /> October 5, 2002</a></p> <p><a target="_top" href="/world/issue/09-28-02/"><img src="/world/issue/09-28-02/image/cover_thumb.jpg" width="72" height="97" /><br /> September 28, 2002</a></p> <p><a target="_top" href="/world/issue/09-21-02/"><img src="/world/issue/09-21-02/image/cover_thumb.jpg" width="72" height="97" /><br /> September 21, 2002</a></p> </div> <br /> <a href="http://worldmag.com/world/classifieds/"><img src="/world/image/side_ads/Searching_Ad_100x180.gif" width="180" height="100"></a> </div> </div> </TD></TR> </TABLE> <BR> <TABLE BORDER="0" WIDTH=520><TR><TD WIDTH=110 ALIGN=right VALIGN=top><FONT COLOR=ffffff><B>Search for more<BR>articles about:</B></FONT><BR></TD><TD WIDTH=40><BR></TD><TD WIDTH=370 VALIGN=top ALIGN=left BGCOLOR="#CCCC99"> <TABLE WIDTH="370" BORDER="0" CELLPADDING="8" CELLSPACING="0"><TR><TR><TD WIDTH="370" ALIGN="LEFT" VALIGN="top"><form name="searchForm" action="/world/meta/search/search.asp" onsubmit=""> <input type="hidden" name="performSearch" value="y"> <INPUT TYPE="text" NAME="target" SIZE="30" MAXLENGTH="100"><br> <input type=checkbox name="stype" value="phrase" checked> exact phrase </TD><TD ALIGN="LEFT" VALIGN="TOP"> <INPUT TYPE=SUBMIT VALUE="search"></FORM> </TD></TR> </TABLE> </TD></TR></TABLE> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="500"><TR><TD WIDTH="156"><BR></TD><TD ALIGN=LEFT WIDTH="253"><FONT SIZE="1"><A HREF="/world/meta/copyright.asp" TARGET="_top">© 1996 - 2002 WORLD</A> Magazine. <A HREF="/world/meta/contact/" TARGET="_top">mailbag(a)worldmag.com</A></FONT></TD><TD COLSPAN="1" ALIGN=RIGHT WIDTH="91"><A HREF="#top"><IMG SRC="/world/image/nav/top_bottom.gif" WIDTH="22" HEIGHT="15" HSPACE="10" VSPACE="10" BORDER="0"></A><A HREF="home.asp" TARGET="_top"><IMG SRC="/world/image/nav/contents_bottom.gif" WIDTH="49" HEIGHT="15" BORDER="0" VSPACE="10"></A></TD></TR></TABLE>  <script type="text/javascript"> if(parent.frames.length>0&&!isContents) top.location.replace(document.location) </script> </BODY> </HTML>  --------------010405000308030207040500--

1 0

Re: [Dovecot] SSL Certificate Chains?
by Matthew Reimer 29 Oct '03

29 Oct '03

Timo Sirainen wrote: > On Mon, 2003-10-27 at 15:01, Steve Gare wrote: > >>Just a quicky, I can't see anything about how Dovecot handles >>certificate chains. >> >>1, Does it handle them? >>2, How, if if does? >> >>(Just got a cert from www.instantssl.com and I need there intermediate >>cert do validate it.., Works fine with Apache and Exim ) > > > Dovecot doesn't check client's certificate. It's client's job to check > server's certificate and check the chains. Or at least I don't think > there's anything special Dovecot should do with them.. I had trouble with an instantssl cert, and found that what I needed to do was to also include all the certs up the chain, in a certain order, to keep the client from complaining about an invalid certificate. The first certificate in the pem file should be the the server certificate, followed by its chain starting from the root certificate down. Matt

1 0

[Dovecot] Copy from INBOX to INBOX corrupts file
by Andreas Jaekel 29 Oct '03

29 Oct '03

Aloha, again, Timo. Concerning the problem of copying within one folder... I'm still not sure it's not a problem I created myself, but I think it's caused by the use of the buffered IO routines in ostream-file.c ... you use io_add() to schedule write operations for later while simultanously reading new chunks from the very same file. This seems to confuse dovecot and make it write the copy to the strangest locations. I think when working within one folder I should use either blocking IO or a lot of calls to o_stream_flush()... what do you think? Greetings, Andy

2 3

[Dovecot] SSL Certificate Chains?
by Steve Gare 29 Oct '03

29 Oct '03

Hi, Just a quicky, I can't see anything about how Dovecot handles certificate chains. 1, Does it handle them? 2, How, if if does? (Just got a cert from www.instantssl.com and I need there intermediate cert do validate it.., Works fine with Apache and Exim ) Cheers, Steve Gare - Xantara.Net -- 0845 123 5707

2 1

[Dovecot] root privilidge issues?
by lists＠netxp.com.au 24 Oct '03

24 Oct '03

hi all, i am migrating from imap-uw to dovecot on a freebsd machine and i am getting this error message: imap(phil): Oct 22 19:24:01 Fatal: We couldn't drop root group privileges imap-login: Oct 22 19:24:01 Info: Login: phil [220.240.217.2] dovecot: Oct 22 19:24:01 Error: child 1019 (imap) returned error 89 when it trie manually logining in this is what i see telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK dovecot ready. 1 login phil password 1 OK Logged in. Connection closed by foreign host. any ideas? thansk in advance phil

2 1

[Dovecot] Shared Folders
by D Canfield 21 Oct '03

21 Oct '03

I was just wondering if any thought has been given to shared folders and how they might be implemented yet? True shared folders are compelling enough to our organization that I've been looking into moving to Cyrus from Courier, but transparent folder migration looks to be nearly impossible for more than a handful of accounts... so that leaves me back at hoping courier or dovecot can eventually do what we want. We have a lot of organizations on campus that have a generic mail address such as "maintenance" of "physics." We don't like the idea of shared accounts (invariably either the mailbox gets forgotten about when a secretary changes, the password gets lost, or everyone on campus ends up with the password), so our policies require such generic accounts to be forwarded to a folder in a "real person's" account. This works well for us, but the users are clamoring for the ability to have more than one person access those folders. The problem with Courier's shared folders is that one person owns the folder and while others can see that mailbox, only the owner has write access. This kills most of the utility of shared folders, except for use as announcement areas. As I understand it, the reason Courier does it this way is that it uses the underlying unix permissions to control access to the mailbox. I'm thinking that even if dovecot uses the same concept for shared folders, it should be possible to allow multiple users to write to the folders if filesystem ACL support is used. At least ext3 and XFS both support ACL's, so there is a reasonable amount of support for them, and they would allow dovecot to give multiple users write access to the folders without having to manage it's own security system. The only issue would be that the delivery agent would have to make sure that that ACLs for a folder are kept consistent... I'm not even sure dovecot has to be ACL-aware. Anyway, if there is a completely different plan in the works, that's great too, but I wanted to at least voice an opinion and offer a suggestion of how to make it work. Thanks DC

4 5