December 2004 - dovecot

[Dovecot] PLAIN-MD5 passwords?
by Peter Clark 03 Jan '05

03 Jan '05

After I found out that {CRYPT} doesn't support passwords longer than 8 characters, I decided to switch over to MD5 for user passwords in my LDAP database. However, while I have no problem with Postfix + SASL, Dovecot fails to authenticate. Relevant bits from /etc/dovecot-ldap.conf: user_attrs = mailAddress,,,,, # The search string is identical to what's found in /etc/saslauthd.conf: user_filter = (&(|(uid=%u)(mailAddress=%u))(status=active)) pass_attrs = mailAddress,userPassword pass_filter = (&(|(uid=%u)(mailAddress=%u))(status=active)) default_pass_scheme = PLAIN-MD5 When I try to connect using either KMail or SquirrelMail (which worked just fine before I switched schemes), the following error appears in /var/log/syslog: ldap(user(a)mydomain.tld): password mismatch But when I try 'testsaslauthd -u user(a)mydomain.tld -p longpassword' it authenticates just fine. I have the line 'password-hash {MD5}' in /etc/ldap/slapd.conf, and I used 'slappasswd -h {MD5}' to create the MD5 versions of the passwords. Dovecot is v. 0.99.11. If I can't figure out how to get it to work with MD5, I guess I'll have to go back to CRYPT, but it would be nice to have longer passwords... :Peter

5 5

Re: [Dovecot] Maildir owner importance
by Roi Efrati 02 Jan '05

02 Jan '05

That last line actually made it possible for me to be able to log into the server :) I am still getting errors from PAM but it starting to look good. Is there a good HowTo on setting Dovecot to comunicate directly to MySql without using PAM in the middle ? Also, Since Postfix is still not working on my server, I can't actually recive Emails. Is there somewere an example of the files that need to be in the maildir that I can put them in there and test that the email client get's the mail out ? On Wed, 29 Dec 2004 18:36:34 +0200, Timo Sirainen <tss(a)iki.fi> wrote: > > If you have passwords in Mysql, you probably don't want to use > passwd-file as your auth_userdb. Rather just use: > > auth_userdb = static uid=100 gid=101 home=/var/local/virtualdir/%d/%u >

4 7

[Dovecot] random pool depletion
by Johannes Berg 31 Dec '04

31 Dec '04

I'm facing a problem with dovecot 1.0 test-59; ever since I installed it and use it my random pool is always depleted whenever someone opens an imap connection. This wouldn't be too bad if the machine was used interactively, but since it is not and other services read directly from /dev/random those are sometimes blocked due to dovecot depleting the pool by reading /dev/urandom. Thus my question: is it really necessary to use random numbers from /dev/urandom for temporary filenames? And even if, couldn't it use less? It apparently uses 8 bytes every time. johannes

2 3

[Dovecot] delivery agent in 1.0?
by "Branko F. Gračnar" 31 Dec '04

31 Dec '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi :) Is there any plan to include delivery agent in 1.x? I would be very happy, if there would be lmtp delivery agent included with dovecot 1.x... This would make creating large mailsystem cluster creation very simple + indexes would be always up2date. Brane -----BEGIN PGP SIGNATURE----- iD8DBQFBytD9N7LHXgqRB4IRAi67AKCn/A1t3tCsMX0nhL8l4sgzTfDhlACgj1j5 NdgMzA3v0dLx6Bnui62rLRc= =4UGm -----END PGP SIGNATURE-----

9 18

[Dovecot] Authentication difficulties
by Timo Sirainen 30 Dec '04

30 Dec '04

There are constantly pretty basic questions in this list (and in my inbox) about how to get user authentication work correctly. This means that the documentation how it all works is either bad, or people don't find it easily. Any ideas how to improve it? I did this now: - Documentation link in dovecot.org now points directly to Wiki, so people don't go read the outdated documents - Upcoming 1.0-tests and 0.99.13 will contain doc/USE-WIKI-INSTEAD file pointing to Wiki: http://dovecot.org/list/dovecot-cvs/2004-December/003928.html - Updated comments in dovecot-example.conf: http://dovecot.org/list/dovecot-cvs/2004-December/003924.html - Added pointers to Wiki in dovecot-example.conf: http://dovecot.org/list/dovecot-cvs/2004-December/003927.html How good are the Wiki documents about user authentication in general? The content should probably be split somehow to "getting started" vs. "everything there is to know about it" and "system users" vs. "virtual users". I'm not really sure how to best do that though. I think the Wiki in general could be better organized. Wish I knew how.

3 2

[Dovecot] Maildir owner importance
by Roi Efrati 29 Dec '04

29 Dec '04

I have set up a directory (/var/local/virtualdir/) as the maildir with a special user/group (virtualmail) and in it I create directories for each domain (example1.tld, example2.tld etc) and sub dir's for each mailbox). Only at the moment, apart from the first one, they are all created as with user root as the owner. How important is to have all the directory tree owned by the same user group (virtualmail:virtualmail) ?

4 11

[Dovecot] bug in 99.13-rc2 in ldap md5 patch
by Farkas Levente 29 Dec '04

29 Dec '04

hi, it takes me another hour do debug it again, although i already report it for both joshua and timo. the original patch for openldap's md5 crypt has a small bug. in passdb-ldap.c the schema is already PLAIN-MD5 since that was set in the other part of the original patch in password-scheme.c. do anybody use dovecot with ldap and md5 password? i don't think so:-( this patch would be useful to apply before the final 0.99.13. anyway in the current 1.0 series the PLAIN-MD5 and LDAP-MD5 schema are different. at least plain_md5_verify and plain_md5_generate differ from ldap_md5_verify and ldap_md5_generate. why? -- Levente "Si vis pacem para bellum!" --- dovecot-0.99.13/src/auth/passdb-ldap.c.lfarkas 2004-12-22 17:06:25.000000000 +0100 +++ dovecot-0.99.13/src/auth/passdb-ldap.c 2004-12-22 17:06:56.000000000 +0100 @@ -109,12 +109,11 @@ } /* Special case for OpenLDAP's MD5 type */ - if (strcasecmp(scheme, "MD5") == 0) { + if (strcasecmp(scheme, "PLAIN-MD5") == 0) { buf = buffer_create_static(data_stack_pool, 16); if (base64_decode(password, strlen(password), NULL, buf) == 1 && buffer_get_used_size(buf) == 16) { password = binary_to_hex(buffer_get_data(buf, NULL), 16); - scheme = "PLAIN-MD5"; } }

2 4

[Dovecot] 0.99.13-rc3
by Timo Sirainen 29 Dec '04

29 Dec '04

http://dovecot.org/rc/ One more. Added LDAP-MD5 password scheme and changed non-$1$-MD5 passwords to use it. This is how it's done in 1.0-tests.

1 0

[Dovecot] dovecot_auth / pam_mysql login errors
by Roi Efrati 29 Dec '04

29 Dec '04

I am getting this errors at the maillog file : Dec 29 12:22:10 websrv dovecot-auth: pam_sm_authenticate called. Dec 29 12:22:10 websrv dovecot-auth: host changed. Dec 29 12:22:10 websrv dovecot-auth: database changed. Dec 29 12:22:10 websrv dovecot-auth: dbuser changed. Dec 29 12:22:10 websrv dovecot-auth: dbpasswd changed. Dec 29 12:22:10 websrv dovecot-auth: table changed. Dec 29 12:22:10 websrv dovecot-auth: usercolumn changed. Dec 29 12:22:10 websrv dovecot-auth: passwdcolumn changed. Dec 29 12:22:10 websrv dovecot-auth: crypt changed. Dec 29 12:22:10 websrv dovecot-auth: sqllog changed. Dec 29 12:22:10 websrv dovecot-auth: db_connect called. Dec 29 12:22:10 websrv dovecot-auth: returning 0 . Dec 29 12:22:10 websrv dovecot-auth: db_checkpasswd called. Dec 29 12:22:10 websrv dovecot-auth: pam_mysql: where clause = Dec 29 12:22:10 websrv dovecot-auth: SELECT password FROM email_users WHERE log in='myname' Dec 29 12:22:10 websrv dovecot-auth: sqlLog called. Dec 29 12:22:10 websrv dovecot-auth: returning 0 . Dec 29 12:22:10 websrv dovecot-auth: returning 0. ## And then: Dec 29 12:22:10 websrv dovecot-auth: pam_mysql: setcred called but not implemen ted. Dec 29 12:22:10 websrv dovecot-auth: pam_mysql: acct_mgmt called but not implem ented. Dont panic though :) Dec 29 12:22:10 websrv pop3-login: Internal login failure: myname [xxx.xxx.xxx.xxx] As much as I was trying to find reading material on them I have not maneged to find something that will help me. If anybody can shed some light on how to fix my server...

1 0

[Dovecot] Deleting a message through IMAP
by Doug Eubanks 28 Dec '04

28 Dec '04

I have been having a problem with the test releases...I am now using Test 59. When I delete a message using SquirrelMail (IMAP) the message stays in the message list....but you can't open it anymore because it can't be found, if I logout and log back in...the message is gone from the list. I thought it could be a problem with the cache, so I added mail_never_cache_fields = MessagePart Envelope Body only to recieve Dec 24 09:23:34 news dovecot: IMAP(admin): mail_never_cache_fields: Invalid cache field name 'Body', ignoring Any ideas? This problem has plagued me for a while and I always go back to using the and older test like 22 and the problem isn't there... Doug

3 2