July 2004 - dovecot - dovecot.org

[Dovecot] [PATCH, RFC] add APOP authentication mechanism
by Andrey Panin 14 Aug '17

14 Aug '17

Hello all, this patch add APOP authentication mechanism to dovecot 1.0-test23. Please take a look. Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke(a)donpac.ru | PGP key: wwwkeys.pgp.net

3 2

[Dovecot] POP (dot) locks
by Christian Balzer 09 Apr '06

09 Apr '06

Hello, just to soothe my paranoia from many years of qpopper usage, which enforces solitary access to a POP mailbox. Only one login per user is possible at the same time and if a session terminates w/o qpopper being properly notified it will remain locked for some time, 30 minutes by default. With dovecot (0.99.10.4) one can login multiple times (using POP, with IMAP of course this comes as no surprise :) and thus I presume this bit from the configuration: --- # Should we create dotlock file even when we want only a read-lock? Setting # this to yes hurts the performance when the mailbox is accessed simultaneously # by multiple processes, but it's needed for reliable reading if no other # locking methods are available. #mbox_read_dotlock = no --- means that if the only other reading accesses to a (mbox style in this case here) mailbox are via other dovecot processes everything will be fine? Regards, Christian Balzer -- Christian Balzer Network/Systems Engineer NOC chibi(a)gol.com Global OnLine Japan/Fusion Network Services http://www.gol.com/

5 10

RE: [Dovecot] IMAP login name conversion
by Zoong Pham 24 Feb '06

24 Feb '06

> -----Original Message----- > From: Timo Sirainen [mailto:tss@iki.fi] > Sent: Tuesday, 1 June 2004 9:39 PM > To: Zoong Pham > Cc: dovecot(a)dovecot.org > Subject: Re: [Dovecot] IMAP login name conversion > > What passdb and userdb do you use? Unless you're authenticating from > SQL you probably have to modify the source. Let me explain: My server runs OpenBSD-3.5 and Sendmail. We host few virtual domains. Local accounts have login names in this format: login-domain_abc_xyz For example: joedirt-joedomain_com_au, info-adomain_com, info-otherdomain_com That way login accounts are unique across all the virtual domains. I use the OpenBSD pre-compiled dovecot-0.99.10p2. It is set to use "auth_passdb = passwd" and "auth_userdb = passwd" I can use mutt to access my mailbox via IMAPS with login name format joedirt-joedomain_com_au. Other users use different MUA like Outlook and prefer to login with their email addresses (joedirt(a)joedomain.com.au, info(a)adomain.com, info(a)otherdomain.com) We use squirrelmail for webmail. I modified squirrelmail to automatically convert login name from format of joedirt(a)joedomain.com.au to joedirt-joedomain_com_au. So if users use squirrelmail, they can just login with their email addresses. My question is how to achieve the same thing with other MUAs like Outlook? Do I have to modify dovecot source? Can I use LDAP or SQL instead? Note that we are using Sendmail and prefer it than othe MTA. I have looked at the Wiki, specially the "DovecotOpenLdap" but am still confused. Thanks Zoong

3 2

[Dovecot] imap idle on non-inbox?
by Collin Grady 22 Oct '04

22 Oct '04

Can this be done with dovecot? I really like the imap idle feature, but it doesn't work for me because I sort my mail into folders with procmail, so it only notifies me when one drops into inbox and not a subfolder. Is there just an option for this I'm missing, or does support for this not exist yet? Also, I don't think its a client issue as I watched the traffic with tcpdump and it only announced anything for inbox, messages dropping into other folders caused no traffic. -- Collin Grady BOFH excuse #347: The rubber band broke

5 9

[Dovecot] Plaintext Authentication from Localhost
by Paul C. Bryan 06 Sep '04

06 Sep '04

Hi: It appears that at least at one time, Dovecot supported plaintext authentication from localhost, even if disable_plaintext_auth = yes. To wit, the example configuration file reads: # Disable LOGIN command and all other plaintext authentications unless # SSL/TLS is used (LOGINDISABLED capability). Note that 127.*.*.* and # IPv6 ::1 addresses are considered secure, this setting has no effect if # you connect from those addresses. #disable_plaintext_auth = yes On brief inspection of the code, there doesn't seem to be any such support. This is corroborated by the fact that 0.99.10 (Debian package) behaves by disallowing plaintext authentication via connections on localhost. This is a particularly useful feature, as local webmail clients can safely authenticate via the local interface without requiring secure authentication. So, the question is, is Dovecot supposed to support plaintext auth via localhost even if disallowed in dovecot.conf? If so, any suggestions as to what I may be doing wrong? Yours truly, Paul C. Bryan email(a)pbryan.net

2 4

[Dovecot] 0.99.10.x auth memory leak?
by Christian Balzer 26 Aug '04

26 Aug '04

Hello, running 0.99.10.6 (but seen it before that, too). Also (quite obviously) running 5 auth processes, given the fact that this is a pretty busy box and I didn't want to introduce any artificial bottlenecks. Alas with them eating up half of the free memory (which would go to a much better use as FS cache) I'm getting sorta concerned. If it's not a leak, it's caching something rather needlessly and inefficiently (the LDAP DB memory footprint for ALL users is less than this and the box below just serves half of those). This box sees about 0.5 million POP3/IMAP logins/day. --- PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 31235 root 16 0 220m 216m 5560 S 0.0 10.7 25:01.54 dovecot-auth 31234 root 16 0 205m 202m 5560 S 0.0 10.0 24:08.84 dovecot-auth 31231 root 16 0 200m 196m 5560 S 0.7 9.7 23:25.37 dovecot-auth 31232 root 16 0 196m 192m 5560 S 0.0 9.5 23:10.44 dovecot-auth 31233 root 15 0 179m 175m 5560 S 0.3 8.6 22:13.07 dovecot-auth --- So, I guess my questions to Timo are: Think it's leaky and any idea where? Given the load, would a single auth process be a bad idea? (it is a quite fast dual opteron box) Regards, Christian Balzer -- Christian Balzer Network/Systems Engineer NOC chibi(a)gol.com Global OnLine Japan/Fusion Network Services http://www.gol.com/

3 5

[Dovecot] What about saving your INBOX at ~/mbox ?
by Nico Kadel-Garcia 23 Aug '04

23 Aug '04

Hi, folks. I'm testing out RedHat's "Fedora Core 2" release, which has switched from the old WashU imapd to dovecot-0.99.10. Overall, this looks like a really, really good move on their part: it looks like a very sweet little tool without some of the ingrained idiocy of Mark Crispin insisting that every home directory consist of nothing but mbox files and allowing you to use a configurable subdirectory by default, ~/mail. Cool. There is one feature of the old WashU imapd that I miss, though. That daemonn could be configured to automatically transfer the user's email to the "~/mbox" upon activation of the daemon, effectively reducing the size of the /var/spool/mail/{username}" mail spool and helping keep the user's disk usage in their home directories, not in /var/spool/mail. This can be a good thing for various reasons. But I don't see any way to enable that behavior for dovecot. Is there something I'm missing, or do folks feel it would be reasonable to add? -- Nico Kadel-Garcia Systems Engineer Mitsubish Electric Research Lab <nkadel(a)merl.com>

4 6

[Dovecot] [PATCH 0/10] NTLM patchset submission
by Andrey Panin 02 Aug '04

02 Aug '04

Hello all, as I promised some days ago here is NTLM (aka SPA, aka MSN) authentication support patchset. It contains common code in src/lib-ntlm directory, Samba compatible NTLM password scheme and authentication mechanism itself. All patches are against 1.0-test30. Please take a look. Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke(a)donpac.ru | PGP key: wwwkeys.pgp.net

6 27

[Dovecot] SSL CA root certificate
by Mail Admin 02 Aug '04

02 Aug '04

In reading through the mailing list, this question seems to have come up before, but never quite answered. I bought a certificate from Digital Signature Trust which is a well known certificate authority. The reason I bought my certificate, was so that email clients connecting to my imaps server wouldn't be bothered with warnings of unrecognized certificate authority as they would see with a self-signed server certificate. However, I haven't been able to configure dovecot with my Digital Signature Trust signed certificate so that the unrecognized certificate authority warning doesn't appear. I have the root certificate for Digital Signature Trust, but I don't know where to put it so that dovecot will use it. I tried appending the CA root certificate onto my server's certificate file with no success. The answer here is not, load my server's certificate into thunderbird or outlook express, because that is exactly what I'm trying to avoid by purchasing my certificate from a recognized authority. Help. Thanks, Derek

3 2

[Dovecot] Patch: fix $-terminated MCF
by Joshua Goodall 31 Jul '04

31 Jul '04

p/t_strdup_until wasn't returning a terminated string: Index: src/lib/strfuncs.c =================================================================== RCS file: /home/cvs/dovecot/src/lib/strfuncs.c,v retrieving revision 1.41 diff -u -p -r1.41 strfuncs.c --- src/lib/strfuncs.c 18 Jul 2004 01:44:59 -0000 1.41 +++ src/lib/strfuncs.c 31 Jul 2004 08:43:35 -0000 @@ -154,6 +154,7 @@ char *p_strdup_until(pool_t pool, const mem = p_malloc(pool, size + 1); memcpy(mem, start, size); + mem[size] = '\0'; return mem; } Noticed while testing $-terminated modular crypt strings, because I didn't (and still don't) understand the reason for line 65 of password-scheme.c; ... /* stop at next '$' */ p = strchr(p+3, '$'); if (p != NULL) *password = t_strdup_until(*password, p); ... and I have ln -s 'J' /etc/malloc.conf on freebsd 5-current, so malloc'd memory isn't zeroed, causing a segfault. Is there some system that appends dollar signs to MCF formats? The commit message for r1.3 of password-scheme.c doesn't explain. Joshua. -- Joshua Goodall "as modern as tomorrow afternoon" joshua(a)roughtrade.net - FW109

2 2