November 2003 - dovecot

[Dovecot] Plaintext Authentication from Localhost
by Paul C. Bryan 06 Sep '04

06 Sep '04

Hi: It appears that at least at one time, Dovecot supported plaintext authentication from localhost, even if disable_plaintext_auth = yes. To wit, the example configuration file reads: # Disable LOGIN command and all other plaintext authentications unless # SSL/TLS is used (LOGINDISABLED capability). Note that 127.*.*.* and # IPv6 ::1 addresses are considered secure, this setting has no effect if # you connect from those addresses. #disable_plaintext_auth = yes On brief inspection of the code, there doesn't seem to be any such support. This is corroborated by the fact that 0.99.10 (Debian package) behaves by disallowing plaintext authentication via connections on localhost. This is a particularly useful feature, as local webmail clients can safely authenticate via the local interface without requiring secure authentication. So, the question is, is Dovecot supposed to support plaintext auth via localhost even if disallowed in dovecot.conf? If so, any suggestions as to what I may be doing wrong? Yours truly, Paul C. Bryan email(a)pbryan.net

2 4

[Dovecot] corrupted empty message with CVS
by dean gaudet 09 Dec '03

09 Dec '03

with CVS as of an hour ago i'm seeing corruption of messages (in an mbox) with an empty message body. for example, here's what i have in my test INBOX right after receiving the empty message: --- top of INBOX --- >From dean(a)arctic.org Tue Nov 25 19:02:23 2003 Return-Path: <dean(a)arctic.org> Delivered-To: dgtest(a)arctic.org Received: (qmail 3626 invoked by uid 500); 26 Nov 2003 03:02:23 -0000 Received: from localhost (sendmail-bs(a)127.0.0.1) by 127.0.0.1 with SMTP; 26 Nov 2003 03:02:23 -0000 Date: Tue, 25 Nov 2003 19:02:23 -0800 (PST) From: dean gaudet <dean(a)arctic.org> To: dgtest(a)arctic.org Subject: quibble Message-ID: <Pine.LNX.4.58.0311251902160.15721(a)twinlark.arctic.org> X-comment: visit http://arctic.org/~dean/legal for information regarding copyright and disclaimer. MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on twinlark.arctic.org X-Spam-Level: X-Spam-Status: No, hits=0.0 required=5.0 tests=none autolearn=ham version=2.60 --- end of INBOX --- and then i use pine 4.58 to access {localhost}INBOX and it shows a corrupted message (no subject/etc) then i quit pine, and here's what the INBOX looks like on disk afterwards: --- top of INBOX --- >From dean(a)arctic.org Tue Nov 25 19:02:23 2003 X-IMAPbase: 1069815483 6 Status: RO X-UID: 6 Content-Length: 0 X-Keywords: --- end of INBOX --- any ideas or other info which would be useful? thanks -dean

2 5

[Dovecot] Dovecot for solaris 8 x86
by Ted S. Garaventa 29 Nov '03

29 Nov '03

Does someone out there have the ability to compile dovecot for solaris 8 x86. I have tried and failed to get it to work. Any format would be acceptable tar or pkgadd. Thanks in advance for any help. Ted

3 2

[Dovecot] Maildir Sub folder was not fetch as start
by 陳銘偉 Chan Min Wai 29 Nov '03

29 Nov '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello all, I'm new to dovecot and have been using sinces Fedora Core 1 release. My setup is as below. Server : dovecot Imap Maildir (was from courier-imap) (v 0.99.10 from fedora) Client : Mozilla mail 1.5 (rpm from www.mozilla.org with some additional patch to work with fedora) The Problem is like this. When the Maildir is in this format .INBOX.Foldername And Subfolder is .INBOX.Foldername.Subfolder (courier-imap don't use this file names, I rename it personally) So that the client can access without any changes. When using this Folder format I've no problem on fetching the subfolder. They all load nicely when mozilla mail start. So One day I've change My Maildir into this format .INBOX.Foldername ---> .Foldername .INBOX.Foldername.Subfolder ---> .Foldername.Subfolder Something weird happen... My foldername is System Log The subfolder just don't load it correctly *ON THE FIRST TIME of access* on mozilla I'll have to click on the mail root (as a refresh) to make sure it fetch all the folder. Well Maybe This is not dovecot Problem so I'm here to Just make sure this. BTW, I'm not using a subscribe folder in the mozilla. so that it will show all folder in my Maildir. Thank You Chan Min Wai - -- 馬來西亞淨宗學會 Amitabha Buddhist Society (M) 16A, 1st Floor, Jalan Pahang, 53000, Kuala Lumpur, Malaysia. Tel:+603-40414101, 40452630 Fax:+603-40412172 WebPage: http://www.amtb-m.org.my E-Mail: amtbmy(a)amtb-m.org.my -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/xtIPV0p9slMZLW4RAtQ0AKCuvyy2pkamzZh0CFhy1+0bbrEKzQCg0s7p oOPoooeQpMp/135MCyeJX1A= =Gqbu -----END PGP SIGNATURE-----

2 2

[Fwd: Re: [Dovecot] Compiling dovecot on SuSE 9]
by Ted S. Garaventa 28 Nov '03

28 Nov '03

Thank you very much for the rpm.... it works great on SuSE 9. I still don't understand how you compiled it to work!!! Thanks again Ted hi, On 2003-11-26 17:44:43 +0200, Timo Sirainen wrote: > Doesn't the error message get written to log file as well? If not, I'll have to fix it. timo it wasnt in earlier versions. but for 0.99.10.4 it reports the missing ssl cert to the stderr of the current console. but no messages in the log. and why did you enabled pgsql auth as default in the dovecot-example.conf? it took me 10 min to find out why it was whining about the conf. ;) and would it possible to modify the paths in the example config according to the sysconfdir? for Ted: http://monsters.rsn.uni-rostock.de/~darix/suse/9.0/ i added dovecot-0.99.10.4-1.i586.rpm today. darix -- irssi - the client of the smart and beautiful people http://www.irssi.de/

2 1

[Dovecot] pop3-login process leakage
by Clive Jones 28 Nov '03

28 Nov '03

Hi, I've recently deployed dovecot on our servers, to replace courier-imapd. I'm delighted with its features and performance, but there's a major problem - it's leaking pop3-login processes. We have about 60 client machines, each collecting mail once every two minutes. In this configuration, the number of pop3-login processes increases by about ten an hour - apparently without bound. My workaround is to increase the open files rlimit, and the kernel overall limit on open files. This postpones disaster for long enough that killing and restarting dovecot nightly avoids problems. A possibly related problem is that about 1% of attempted POP3 logins fail. At the server, all I see is a syslog entry like this: Nov 3 22:17:21 greenwich pop3-login: Disconnected: Inactivity [10.76.30.246] At the client, there is a long (about 60-second) timeout. Then the client automatically retries, and generally succeeds. There are *not* exactly as many such disconnects as there are stray pop3-login processes - I counted roughly 230 inactivity disconnects in the time it took for 190 stray processes to accumulate. We are running dovecot 0.99.10 on OpenBSD 3.2 . The configuration is fairly normal, except that we are using a custom userdb and passdb (compiled as shared objects): auth_userdb = passwd8 auth_passdb = smb passwd8 is just userdb-passwd.c with a trivial tweak to truncate presented user names to eight characters. smb is an shim that delegates authentication to smbclient, to check passwords against NT domain controllers. I've placed the source code for these two modules in: http://www.nsict.org/~clive/misc/dovecot-2003-11-04/ ...along with my dovecot.conf, and a file that illustrates the growth in the number of pop3-login processes over time. So far as I'm aware, those modules are loaded by the dovecot-auth process, not the pop3-login processes, and are therefore unlikely to be the problem? The client machines are LAN-connected, and running a mixture of Outlook (2000/XP) and Outlook Express (5.5 and 6). There are also a couple of people using Mozilla. Most are collecting e-mail via POP3, a few via IMAP. This issue didn't show up under beta-test loading before I deployed dovecot. Since it seems only to be exhibited (or, at least, noticeably exhibited) under live load, it's very hard for me to diagnose things further without disrupting service. I'd be very grateful if anyone could suggest what might be wrong. Regards, --Clive.

2 5

[Dovecot] Pid file?
by Clive Jones 27 Nov '03

27 Nov '03

Is there a way to make Dovecot maintain a pid file? Most daemons put their pid in /var/run/dovecot.pid (or similar) while they are running, then remove it on exit, but I can't find any option to do this in Dovecot. (Of course, if I could work out how on earth to stop Dovecot leaking processes, I wouldn't be looking for a simpler way to keep bringing the daemon down and restarting it. (-8 ) Regards, --Clive.

2 2

[Dovecot] Compiling dovecot on SuSE 9
by Ted S. Garaventa 27 Nov '03

27 Nov '03

Again I am asking for some help to compile and configure dovecot on SuSE 9. I have configured and compiled it as per the instructions and no errors or problems. When I try to run dovecot from the command line it does not complain or give me any errors. The daemon starts and dies almost immediately. Do I need to compile differently? What can I do to see what is the problem. I was asked to run strace but I don't know what it is telling me. Thanks

3 3

[Dovecot] Incompatibility with eudora
by Kadlecsik Jozsi 27 Nov '03

27 Nov '03

Hello, We installed dovecot-0.99.10.2 on Monday and upgraded to dovecot-0.99.10.4 today, but our eudora users still are very unhappy: old undeleted mail messages are donwloaded every time they use our server. Looking into the source code, we found that dovecot knows about the following status flags: A: answered F: flagged (?) T: draft (?) R: seen (read) D: deleted However, it does not know and ignore the O flag. According to IETF (http://www.ietf.org/internet-drafts/draft-palme-mailext-headers-08.txt) the following flags are valid (I know, it's a draft and not RFC): U: message is not downloaded and not deleted R: message is read or downloaded O: message is old but not deleted D: to be deleted N: new "Combinations of these characters can occur, such as "Status: OR" to indicate that a message is downloaded but not deleted." The old mails of our eudora users contain exactly this flag combination: Status: RO Could the compatibility problem somehow be fixed? Currently our system is pretty unusable for the users :-( Thank you and best regards, Jozsef -- E-mail : kadlec(a)sunserv.kfki.hu, kadlec(a)blackhole.kfki.hu PGP key: http://www.kfki.hu/~kadlec/pgp_public_key.txt Address: KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary

1 0

[Fwd: Re: [Dovecot] Compiling dovecot on SuSE 9]
by Ted S. Garaventa 27 Nov '03

27 Nov '03

Thanks for the reply regarding the compilaton of dovecot to SuSE 9. I have made the key and put it in the correct area but still no luck. I have attached the strace output to the end of this email. Thanks!!! > Date: Wed, 26 Nov 2003 00:17:07 -0800 (PST) > From: "Ted S. Garaventa" <tsg(a)cctg.com> > Subject: [Dovecot] Compiling dovecot on SuSE 9 > To: dovecot(a)procontrol.fi > > Again I am asking for some help to compile and configure dovecot on SuSE 9. im working on some rpm for it. i think ill release them on thursday. > I have configured and compiled it as per the instructions and no errors or problems. When I try to run dovecot from the command line it does not complain or give me any errors. The daemon starts and dies almost immediately. you did everything right so far. the problem is that dovecot comes with SSL enabled by default but there is no cert for it. go to $SRCDIR/doc/ edit mkcert.sh (change imapd.pem to dovecot.pem) run it. restart dovecot and everything will be fine. but you need a dovecot pam file. i use the file from [1]. > Do I need to compile differently? What can I do to see what is the problem. I was asked to run strace but I don't know what it is telling me. the solution would be: strace -e trace=file dovecot you would see a file not found error at the end of the log. darix [1] http://monsters.rsn.uni-rostock.de/~darix/suse/dovecot you can find the patch for mkcert.sh + dovecot.pam + init script there. and of course the rpm when it's done. -- irssi - the client of the smart and beautiful people http://www.irssi.de/ strace output follows: --------------------------------------------------------------------------- casella:/etc/ssl/private # strace -e trace=file /usr/local/sbin/dovecot execve("/usr/local/sbin/dovecot", ["/usr/local/sbin/dovecot"], [/* 55 vars */]) = 0 open("/etc/ld.so.preload", O_RDONLY) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=86690, ...}) = 0 open("/lib/i686/libc.so.6", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0755, st_size=1461208, ...}) = 0 open("/usr/local/etc/dovecot.conf", O_RDONLY|O_LARGEFILE) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=18087, ...}) = 0 pread(3, "## Dovecot 1.0 configuration fil"..., 2048, 0) = 2048 pread(3, "gfile instead of syslog(). /dev/"..., 2035, 2048) = 2035 pread(3, "k-bombing\n# we check only once i"..., 1978, 4083) = 1978 pread(3, "processes (ie. /var/mail will al"..., 2046, 6061) = 2046 pread(3, " which speeds up most operations"..., 2023, 8107) = 2023 pread(3, "s. There\'s no access checks othe"..., 2008, 10130) = 2008 pread(3, " and flock too; if you do the or"..., 2024, 12138) = 2024 pread(3, "modules = /usr/lib/dovecot/pop3\n"..., 2042, 14162) = 2042 pread(3, "e, see doc/dovecot-pgsql.conf\nau"..., 1883, 16204) = 1883 open("/etc/nsswitch.conf", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=1291, ...}) = 0 open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=86690, ...}) = 0 open("/lib/libnss_compat.so.2", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0755, st_size=33795, ...}) = 0 open("/lib/libnsl.so.1", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0755, st_size=89220, ...}) = 0 open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=86690, ...}) = 0 open("/lib/libnss_nis.so.2", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0755, st_size=40322, ...}) = 0 open("/lib/libnss_files.so.2", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0755, st_size=42162, ...}) = 0 open("/etc/passwd", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=1475, ...}) = 0 open("/etc/passwd", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=1475, ...}) = 0 access("/usr/local/libexec/dovecot/imap-login", X_OK) = 0 access("/usr/local/libexec/dovecot/imap", X_OK) = 0 lstat64("/usr/local/var/run/dovecot", {st_mode=S_IFDIR|0700, st_size=72, ...}) = 0 open("/usr/local/var/run/dovecot", O_RDONLY|O_LARGEFILE) = 3 fstat64(3, {st_mode=S_IFDIR|0700, st_size=72, ...}) = 0 lstat64("/usr/local/var/run/dovecot", {st_mode=S_IFDIR|0700, st_size=72, ...}) = 0 open(".", O_RDONLY|O_LARGEFILE) = 3 open("/usr/local/var/run/dovecot/login", O_RDONLY|O_LARGEFILE|O_NOFOLLOW) = 4 open(".", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY) = 5 fstat64(5, {st_mode=S_IFDIR|0750, st_size=48, ...}) = 0 lstat64("/usr/local/var/run/dovecot/login", {st_mode=S_IFDIR|0750, st_size=48, ...}) = 0 open("/usr/local/var/run/dovecot/login", O_RDONLY|O_LARGEFILE) = 3 fstat64(3, {st_mode=S_IFDIR|0750, st_size=48, ...}) = 0 lstat64("/usr/local/var/run/dovecot/login", {st_mode=S_IFDIR|0750, st_size=48, ...}) = 0 access("/usr/local/libexec/dovecot/dovecot-auth", X_OK) = 0 open("/dev/null", O_RDONLY|O_LARGEFILE) = 3

1 0