October 2004 - dovecot

[Dovecot] [PATCH, RFC] add APOP authentication mechanism
by Andrey Panin 14 Aug '17

14 Aug '17

Hello all, this patch add APOP authentication mechanism to dovecot 1.0-test23. Please take a look. Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke(a)donpac.ru | PGP key: wwwkeys.pgp.net

3 2

[Dovecot] POP (dot) locks
by Christian Balzer 09 Apr '06

09 Apr '06

Hello, just to soothe my paranoia from many years of qpopper usage, which enforces solitary access to a POP mailbox. Only one login per user is possible at the same time and if a session terminates w/o qpopper being properly notified it will remain locked for some time, 30 minutes by default. With dovecot (0.99.10.4) one can login multiple times (using POP, with IMAP of course this comes as no surprise :) and thus I presume this bit from the configuration: --- # Should we create dotlock file even when we want only a read-lock? Setting # this to yes hurts the performance when the mailbox is accessed simultaneously # by multiple processes, but it's needed for reliable reading if no other # locking methods are available. #mbox_read_dotlock = no --- means that if the only other reading accesses to a (mbox style in this case here) mailbox are via other dovecot processes everything will be fine? Regards, Christian Balzer -- Christian Balzer Network/Systems Engineer NOC chibi(a)gol.com Global OnLine Japan/Fusion Network Services http://www.gol.com/

5 10

RE: [Dovecot] IMAP login name conversion
by Zoong Pham 24 Feb '06

24 Feb '06

> -----Original Message----- > From: Timo Sirainen [mailto:tss@iki.fi] > Sent: Tuesday, 1 June 2004 9:39 PM > To: Zoong Pham > Cc: dovecot(a)dovecot.org > Subject: Re: [Dovecot] IMAP login name conversion > > What passdb and userdb do you use? Unless you're authenticating from > SQL you probably have to modify the source. Let me explain: My server runs OpenBSD-3.5 and Sendmail. We host few virtual domains. Local accounts have login names in this format: login-domain_abc_xyz For example: joedirt-joedomain_com_au, info-adomain_com, info-otherdomain_com That way login accounts are unique across all the virtual domains. I use the OpenBSD pre-compiled dovecot-0.99.10p2. It is set to use "auth_passdb = passwd" and "auth_userdb = passwd" I can use mutt to access my mailbox via IMAPS with login name format joedirt-joedomain_com_au. Other users use different MUA like Outlook and prefer to login with their email addresses (joedirt(a)joedomain.com.au, info(a)adomain.com, info(a)otherdomain.com) We use squirrelmail for webmail. I modified squirrelmail to automatically convert login name from format of joedirt(a)joedomain.com.au to joedirt-joedomain_com_au. So if users use squirrelmail, they can just login with their email addresses. My question is how to achieve the same thing with other MUAs like Outlook? Do I have to modify dovecot source? Can I use LDAP or SQL instead? Note that we are using Sendmail and prefer it than othe MTA. I have looked at the Wiki, specially the "DovecotOpenLdap" but am still confused. Thanks Zoong

3 2

[Dovecot] Dovecot, Outlook Express and new accounts
by news.gmane.org 12 Nov '05

12 Nov '05

I have come across a strange situation, involving new accounts. I am running Dovecot 0.99.10-5 on Fedora Core 2. Dovecot is configured to use pam for authentication, and the dovecot pam service is configured to use pam_mkhomedir. When an account is created and the user logs in through SquirrelMail, there is no problem. The standard folders are available - Inbox, Drafts, Sent Items and Trash. When logging in through Outlook Express first, it gives the following error:- The server did not respond to this IMAP command before the connection was terminated. Configuration: Account: mail.server Server: mail.server User name: username Protocol: IMAP Port: 143 Secure(SSL): 0 Code: 800ccc0f A packet trace shows the following:- <<< * OK dovecot ready. >>> 008E CAPABILITY <<< * CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN LISTEXT LIST-SUBSCRIBED STARTTLS AUTH=PLAIN <<< 008E OK Capability completed. >>> 008F LOGIN "username" "password" <<< 008F OK Logged in. >>> 008G IDLE <<< + idling >>> DONE <<< 008G OK Idle completed. 008H LIST "" "*" Connection to host lost. My suspicion that Outlook Express is not intelligent enough to create the folders, although the sudden connection drop might indicate a bug. If it is not a bug, is there a workaround? Regards -- Chris Hills IT Services North East Worcestershire College

6 10

[Dovecot] [Fwd: Dovecot disconnecting users at login for inactivity]
by Chris Liljenstolpe 25 Oct '05

25 Oct '05

3 3

[Dovecot] problems with ldap auth
by Nuno Lopes 10 May '05

10 May '05

I'm trying Dovecot v1.0-test43 with ldap authentication but can't seem to make it work. I'm getting the following errors in the log: dovecot: Sep 16 19:50:09 Info: Dovecot v1.0-test43 starting up dovecot: Sep 16 19:50:10 Error: Auth process died too early - shutting down What can I do to see where the error is? I have this configuration working with dovecot 0.99.xx . And if I replace the ldap authentication scheme with another one it starts up right. Following some past mailing list sugestions I've also tried removing most of the auth modules from the compilation but it made no diference. You can see my configuration files in: http://iluvatar.portugalmail.pt/dovecot/dovecot.conf http://iluvatar.portugalmail.pt/dovecot/dovecot-ldap.conf (I've intalled the binaries in /opt/dovecot) Don't know how much more data I can provide to help finding out what the problem is here (I think this won't be enough unless there's a known bug). Thanks, -- Nuno Lopes

3 2

[Dovecot] [PATCH] yet another NTLM update
by Andrey Panin 02 Nov '04

02 Nov '04

Hello, after more than week using dovecot as exim4 authentication backend, I noticed that some strange clients send type 3 messages with LM response only. Attached patch allows them to log in. Please consider applying. Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke(a)donpac.ru | PGP key: wwwkeys.pgp.net

2 2

[Dovecot] Logging and libwrap
by Jesse 01 Nov '04

01 Nov '04

Hi, A few things regarding logging and libwrap.. a) PAM_RHOST patch Back in July, dean gaudet helpfully posted a patch to dovecot PAM_RHOST the remote IP. Is this going to be included in the main dovecot tree? It seems like a worthwhile addition. The more informative and concise the logging the better. See http://www.dovecot.org/list/dovecot/2004-July/004011.html for the original message. b) Better logging Is it possible to get logging of when a client connects and disconnects? I'm very used to seeing this information and it's very useful for debugging user sessions. It's frustrating not being able to easily tell whether a user has opened a connection. Really many of the log messages could be more verbose. For instance, on disconnect, I see imap-login: Disconnected [ip.here] but the username they were logged in as isn't included. It would be nice to have that rather than having to dig back for a login message with the same IP. Heck, even the pid isn't logged. That would be nice too. c) libwrap Any chance of getting libwrap support built into dovecot? Right now I'm running dovecot out of xinetd, so that I can see when tcp connections are opened, and take advantage of tcpwrappers. But this causes the problem that dovecot thinks all connections come from the local host. Correlating logins to IPs gets to be a lot of hassle, with the information divided over so many lines, while needing multiple ways to track which messages from xinetd, dovecot and pam match each other. With some of the minor logging changes (more info on one line, notification of tcp connections), plus libwrap, it'd be much simpler and much more informative. :) Thanks for the great imap server. Just thinking of some improvements. :) --- Jesse <j(a)lumiere.net>

2 2

[Dovecot] Test51 compile problems
by Greg Deputy 01 Nov '04

01 Nov '04

First of all, thanks for a great product. I've been able to get dovecot up and running with minimum pain. Very nice. Running Fedora Core 2 with postfix using mysql for virtual mailbox config. Got release version of dovecot working with a passwd-file, then I wanted to try it out with using the same mysql db as postfix, so I downloaded test51. I run ./configure --sysconfdir=/etc --with-mysql And it seems happy. Completes with: Install prefix ...................... : /usr/local File offsets ........................ : 64bit I/O loop method ..................... : poll Building with SSL support ........... : no Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with user database modules . : static passwd passwd-file checkpassword mysql (modules) Building with password lookup modules : passwd passwd-file shadow checkpassword mysql (modules) Then I run make, and it errors out with: gcc -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o dovecot-auth auth-cache.o auth-client-connection.o auth-master-connection.o auth-module.o db-ldap.o db-sql.o db-passwd-file.o main.o mech.o mech-anonymous.o mech-plain.o mech-login.o mech-cram-md5.o mech-digest-md5.o mech-ntlm.o mech-rpa.o mech-apop.o passdb.o passdb-bsdauth.o passdb-cache.o passdb-ldap.o passdb-passwd.o passdb-passwd-file.o passdb-pam.o passdb-checkpassword.o passdb-shadow.o passdb-vpopmail.o passdb-sql.o userdb.o userdb-ldap.o userdb-passwd.o userdb-passwd-file.o userdb-static.o userdb-vpopmail.o userdb-sql.o -Wl,--export-dynamic libpassword.a ../lib-settings/libsettings.a ../lib-ntlm/libntlm.a ../lib-sql/libsql.a ../lib/liblib.a -lcrypt -L/usr/local/mysql/lib -lmysqlclient -lz -ldl /usr/local/mysql/lib/libmysqlclient.a(sha1.o)(.text+0x5c): In function `sha1_result': : multiple definition of `sha1_result' ../lib/liblib.a(sha1.o)(.text+0x7f4):/root/dovecot-1.0-test51/src/lib/sh a1.c:242: first defined here /usr/bin/ld: Warning: size of symbol `sha1_result' changed from 158 in ../lib/liblib.a(sha1.o) to 126 in ../lib/liblib.a(sha1.o) collect2: ld returned 1 exit status make[3]: *** [dovecot-auth] Error 1 make[3]: Leaving directory `/root/dovecot-1.0-test51/src/auth' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/root/dovecot-1.0-test51/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/root/dovecot-1.0-test51' make: *** [all] Error 2 Any help would be appreciated. Thanks!

2 3

[Dovecot] new crash in dovecot-auth test51
by Dan Sully 01 Nov '04

01 Nov '04

#0 io_remove (io=0x0) at ioloop.c:51 51 if ((io->condition & IO_NOTIFY_MASK) != 0) { (gdb) bt #0 io_remove (io=0x0) at ioloop.c:51 #1 0x0804fd68 in auth_client_connection_destroy_wait (conn=0x80877d8) at auth-client-connection.c:494 #2 0x08050acd in auth_callback (request=0x84716b8, result=134681554, reply=0x0, reply_size=0) at auth-client-connection.c:104 #3 0x08050950 in auth_client_input (context=0x80877d8) at auth-client-connection.c:286 #4 0x0805f170 in io_loop_handler_run (ioloop=0x80898a8) at ioloop-epoll.c:243 #5 0x0805e698 in io_loop_run (ioloop=0x8082b88) at ioloop.c:218 #6 0x080525a5 in main (argc=1, argv=0x0) at main.c:296 Linux 2.6.9 / glibc 2.3.3 / epoll (also does it with poll()) / vpopmail & passwd-db dovecot: Oct 28 09:31:28 Warning: auth(vpopmail): Authentication client 8908: Transmit buffer full, killing it dovecot: Oct 28 09:31:28 Warning: auth(vpopmail): Authentication client 8908: Transmit buffer full, killing it dovecot: Oct 28 09:31:28 Warning: imap-login: Error sending request to auth server: Broken pipe dovecot: Oct 28 09:31:28 Error: child 5689 (auth) killed with signal 11 dovecot: Oct 28 09:31:28 Error: child 8908 (login) killed with signal 11 dovecot: Oct 28 09:51:26 Warning: auth(default): Authentication client 10685: Transmit buffer full, killing it dovecot: Oct 28 09:51:26 Warning: auth(default): Authentication client 10685: Transmit buffer full, killing it dovecot: Oct 28 09:51:26 Error: child 5687 (auth) killed with signal 11 dovecot: Oct 28 09:51:26 Warning: imap-login: Error sending request to auth server: Connection reset by peer dovecot: Oct 28 09:51:26 Error: child 10685 (login) killed with signal 11 -D -- <iNoah> you know, most free operating systems come preinstalled with their own high horse.

2 7