December 2005 - dovecot

[Dovecot] Case sensitive nightmare
by Erik Petersen 12 Dec '05

12 Dec '05

It took me 4 days to figure this out and I sure hope someone can help me solve it. My Setup: Postfix + MySQL + dovecot dovecot.conf: default_mail_env = maildir:/var/spool/vmail/%d/%n/Maildir password_query = SELECT password FROM mailbox WHERE username='%u' user_query = SELECT maildir, 108 AS uid, 108 AS gid FROM mailbox WHERE username='%u' The virtual host schema is postfix.admin compatible but I¹m not using it (phpMyAdmin is actually easier to use). When foo(a)domain.tld, abrand new account, logs in using an IMAP client (any client; squirrelmail, OE, tbird, Apple...) a maildir is created named domain.tld/foo/Maildir¹ and everything is good. Now I login as Foo(a)domain.tld and then as fOo(a)domain.tld and then as foO(a)domain.tld then so on for every case variation. Each of these accounts can login correctly, they are seen as being the same account by dovecot. On the other hand they are not seen as being the same mailbox! When I check my mail spool I see one maildir for every case variation (domain.tld/foo/Maildir, domain.tld/FOO/Maildir, etc.) It would seem to me that the queries above would fail for the different variations of the name but they don¹t seem to. Is dovecot converting %u to lower case for the query on the virtual users table but then using it unconverted when looking up the Mairdir for the account? If the username column has the value foo(a)domain.tld1 how does SELECT * FROM table WHERE username=¹FOO(a)domain.tld1 match the row? Also puzzling is that I select a column named maildir which has the path to the mailbox in it (using the correct case). Even if SELECT pigs fly¹ AS when WHERE FoO¹=¹foo¹ the maildir path for the account is being returned which is domain.tld/foo/Maildir¹ so how does domain.tld/FoO/Maildir¹ get created? This is both a pain in the nuts support nightmare but also a security problem (albeit fairly limited). An account named ³barneyrubble² could generate a significant number of maildir directories if you logged in with every variation thereof. Any assistance would be greatly appreciated. Thanks

5 6

[Dovecot] configuring squirrelmail with tls for both imap & smtp on FC3 with dovecot & postfix
by ankush grover 12 Dec '05

12 Dec '05

hey friends, I am trying to secure my mail server.I have enabled TLS support in postfix(version postfix-2.1.5), now I am trying to configure squirrelmail(version 1.4.4-1 rpm) for tls/ssl support.In config.php i have choosen use_imap_tls=true and use_smpt_tls=true. Moreover If I send any mail from squirrelmail there are no entries for ssl or tls in maillogs whereas If I send the mail through evolution I can see tls/ssl entries in maillogs. starting TLS engine Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: setting up TLS connection from [192.168.1.68] Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:before/accept initialization Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:error in SSLv2/v3 read client hello A Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:error in SSLv2/v3 read client hello B Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 read client hello A Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 write server hello A Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 write certificate A Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 write server done A Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 flush data Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:error in SSLv3 read client certificate A Dec 12 12:30:08 cluster1 last message repeated 2 times Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 read client key exchange A Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:error in SSLv3 read certificate verify A Dec 12 12:30:08 cluster1 last message repeated 3 times Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 read finished A Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 write change cipher spec A Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 write finished A Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 flush data Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: TLS connection established from [192.168.1.68]: SSLv3 with cipher RC4-MD5 (128/128 bits) But when I did the config.test for squirrelmail I got the below error Checking IMAP service.... IMAP server ready (* OK dovecot ready.) Capabilities: * CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT IDLE CHILDREN LISTEXT LIST-SUBSCRIBED NAMESPACE AUTH=PLAIN *ERROR:* You have enabled TLS encryption in the config, but the server does not report STARTTLS capability. TLS is probably not supported. Lines of ssl in /etc/dovecot.conf protocols = imaps pop3s imaps_listen = * pop3s_listen = * ssl_disable = no ssl_cert_file = /usr/share/ssl/certs/dovecot.pem ssl_key_file = /usr/share/ssl/private/dovecot.pem ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat disable_plaintext_auth = yes If i do telnet localhost 993 or 995 I don't see any "Ok Dovecot Ready" message.But If I enable pop3 and imap in dovecot.conf and then I telnet localhost 110 or 143 I can see "Ok Dovecot Ready" message. How do I make squirrelmail to use tls/ssl for both imap & smtp. Thanks & Regards Ankush Grover

1 0

Re: [Dovecot] Dovecot LDA config problem on RHEL 4 x86_64
by Bob Gustafson 11 Dec '05

11 Dec '05

I see the same problem I downloaded from cvs - dovecot and dovecot-lda Did autogen, configure, make on dovecot (see autogen and configure scripts below) [root@hoho0 cvs]# cat conf-dov-cvs-rdg.sh export ACLOCAL_FLAGS="-I /usr/share/aclocal/" ./autogen.sh 2>&1 | tee autogen.out [root@hoho0 cvs]# cat conf-rdg.sh export CPPFLAGS=-I/usr/local/ssl/include export LDFLAGS="-L/usr/local/ssl/lib -ldl" ./configure \ --without-deliver \ --with-gnu-ld \ --with-ldap \ --with-pgsql \ --with-mysql \ --with-ssl=openssl \ 2>&1 | tee config.out [root@hoho0 cvs]# Then did autogen, configure on dovecot-lda and got hang before Makefile was generated (but script said it was generating Makefile) My system is Fedora4 and is pretty up2date - maybe a week behind using updates, base, extras [root@hoho0 cvs]# cat /proc/version Linux version 2.6.14-1.1637_FC4 (bhcompile(a)hs20-bc1-4.build.redhat.com) (gcc version 4.0.1 20050727 (Red Hat 4.0.1-5)) #1 Wed Nov 9 18:19:37 EST 2005 [root@hoho0 cvs]# I am running Dovecot and Postfix - seems pretty solid, but I would like to have the filtering done at incoming time. Bob G tomi hakala wrote on Thu Nov 17 22:41:51 EET 2005 > Hello, > > Has anyone succeeded on configuring and compiling Sieve capable Dovecot > LDA on RHEL 4 x86_64 platform? > > I am having problems with configure script hanging on sed while creating > Makefiles. > > # ./configure --with-dovecot=../dovecot > .. > checking how to hardcode library paths into programs... immediate > checking whether stripping libraries is possible... yes > checking for library containing regcomp... none required > checking rxposix.h usability... no > checking rxposix.h presence... no > checking for rxposix.h... no > configure: creating ./config.status > config.status: creating Makefile > > Configure stops there, if I suspend job I see two running sed processes: > > 0:00 sed -f ./confstatC25247/subs-2.sed > 1:28 sed -f ./confstatC25247/subs-3.sed > > I already tried latest sed available from gnu.org with no change .. > > -- > Tomi Hakala

3 5

[Dovecot] Corrupted index problem when disk quota exceeded
by Sergey Redin 11 Dec '05

11 Dec '05

Hi! I should report yet another problem with dovecot index files. Suppose we have a user with his filesystem disk quota exceeded. He logins via POP3 or IMAP to remove some mail messages and fix this problem. When he logins for the first time, everything works fine, and he can read and remove something. But if his disk quota is still exceeded when he logs out, he cannot login any more. I guess it is not fair to give user only one chance to clean his mail folders :) The problem is that dovecot tries to rewrite index files on logout, but it cannot do it correctly because the user's filesystem quota is exceeded. So the next time dovecot just replies "Mailbox is in inconsistent state, please relogin". I believe that dovecot should work with any kind of corrupted index files, this is why I report such kind of bugs here. Here is a sample session with dovecot which shows the problem: ======================================== dovtest# telnet localhost pop3 Trying ::1... Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready.<6e56.7.439bbc09.Ciej0vGPllkO4txCYDEkWA==(a)dovtest.ru> user test +OK pass q1 +OK Logged in. list +OK 1 messages: 1 324 . dele 1 +OK Marked to be deleted. quit +OK Logging out, messages deleted. Connection closed by foreign host. dovtest# telnet localhost pop3 Trying ::1... Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready.<6e56.8.439bbc1a.yUc5zYQ1KXeITsKTYaKlGg==(a)dovtest.ru> user test +OK pass q1 +OK Logged in. -ERR Mailbox is in inconsistent state, please relogin. Connection closed by foreign host. dovtest# tail /var/log/maillog Dec 11 05:41:03 dovtest dovecot: pop3-login: Login: user=<test>, method=PLAIN, rip=82.146.33.127, lip=82.146.33.127 Dec 11 05:41:06 dovtest dovecot: pop3(test): Logout. top=0/0, retr=0/ del=0/1, size=324 Dec 11 05:41:14 dovtest dovecot: pop3-login: Login: user=<test>, method=PLAIN, rip=82.146.33.127, lip=82.146.33.127 Dec 11 05:41:22 dovtest dovecot: pop3(test): Logout. top=0/0, retr=1/ del=0/1, size=324 Dec 11 05:41:36 dovtest dovecot: pop3-login: Login: user=<test>, method=PLAIN, rip=82.146.33.127, lip=82.146.33.127 Dec 11 05:41:44 dovtest dovecot: pop3(test): Logout. top=0/0, retr=0/ del=1/1, size=324 Dec 11 05:41:53 dovtest dovecot: pop3-login: Login: user=<test>, method=PLAIN, rip=82.146.33.127, lip=82.146.33.127 Dec 11 05:41:53 dovtest dovecot: pop3(test): Corrupted index cache file /home/dovtest.ru/data/mail/.imap/INBOX/dovecot.index.cache: indexid changed Dec 11 05:41:53 dovtest dovecot: pop3(test): Mailbox is in inconsistent state. top=0/0, retr=0/ del=0/0, size=0 Dec 11 05:41:53 dovtest dovecot: pop3(test): Mailbox init failed top=0/0, retr=0/ del=0/0, size=0 dovtest# ls -la /home/dovtest.ru/data/mail/.imap/INBOX/ total 4 drwx------ 2 test test 512 Dec 11 05:41 . drwx------ 3 test test 512 Dec 11 05:38 .. -rw------- 1 test test 240 Dec 11 05:38 dovecot.index -rw------- 1 test test 628 Dec 11 05:41 dovecot.index.log dovtest# ======================================== It's a pity I did not report this yesterday, before 1.0.alpha5 was released... By the way I tested this on 1.0.alpha5 compiled from source on a FreeBSD 4.11 VDS. -- Sergey

2 1

[Dovecot] Feature request: Dynamic user lookup modules
by Mark Rosenstand 11 Dec '05

11 Dec '05

Hi, As a packager I'd think it would be way cool if the lookup modules that needs to link against external librarires (ldap, pgsql and mysql) could be loaded dynamically at run-time. Am I alone on this? :-)

2 1

[Dovecot] help! assertion failed in 1.0alpha4
by Henrique Moniz 10 Dec '05

10 Dec '05

Hi, I've been getting this bug in 1.0alpha4. It happens every time the user checks his Inbox. I'm using mbox btw. Can I get any hint on why this is happening? Dec 9 09:08:39 lasige-serv dovecot: imap(pjsousa): file mail-index-sync-ext.c: line 155 (get_ext_header): assertion failed: (memcmp((char *)(ext_hdr + 1), ext->name, strlen(ext->name)) == 0) Dec 9 09:08:39 lasige-serv dovecot: child 18309 (imap) killed with signal 6

3 2

[Dovecot] openssl > 0.9.f-4 a must for dovecot 0.99.14 ??
by Adrian Mak 10 Dec '05

10 Dec '05

My linux is Redhat AS3 U3, openssl is 0.9.7a-33 I downloaded dovecot 0.99.14 src rpm and rebuild to binary rpm Everything went smooth but I tried to install the dovecot binary rpm, it reported that openssl need >= 0.9.7f-4 Since there are many other rpm packages have dependency on the current version of openssl 0.9.7a-33, so It's not possible to upgrade openssl to 0.9.7f-4 or greater Is it a must to use openssl 0.9.7f-4 or greater in order to use dovecot 0.99.14 ?

2 1

[Dovecot] Order of emails
by Marcus Don 10 Dec '05

10 Dec '05

Hi We have an issue regarding the order in which emails are displayed in an imap folder, which our customers regularly complain about. By default, emails are returned from a folder in the order in which they were placed into the folder, which makes perfect sense. However, if an email is moved into another folder, it will always appear at the top, no matter how old it is. We could order the emails ourselves before displaying them in our webmail program. However, this would mean parsing the headers of every single email, which could be many thousands, so would slow things down considerably and greatly increase load. At the moment, we only read 30 at a time as the user pages through the folder. >From what I can see, the order is determined by the timestamp in the email filename, which gets updated every time the email is moved. Is there any way we could disable this, so the filename (or at least the timestamp part of it) remains constant? If so, would this affect in any way the behaviour of other imap clients, such as Outlook? All suggestions welcome. Thanks Marcus -- Marcus Don Applications Development Manager Namesco Limited Main Line: +44 (0)870 120 8888 Main Fax: +44 (0)870 120 8008 Tech Support: +44 (0)870 162 4950 Email: mdon(a)names.co.uk Website: http://www.names.co.uk Address: Acton House, Perdiswell Park, Worcester, WR3 7GD This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender immediately. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. ------------------------------------------------------------------------ --------------------------------------- | Free Dial-up - no need to register! | --------------------------------------- Namesco Limited provides Free dialup access to anyone that wishes to use it. You do not even have to be a customer, there is no need to register and is especially handy if you are unable to connect with your current provider. Simply use the following details: Dialup Number: 0844 535 2100* Username: namesco Password: easydialup * Local call rate charges apply, 33% Cheaper than BT's 0845 local call rate. If you need any help in configuring the Free Dial-up service on your computer, please do not hesitate to call us on 0870 162 4950.

4 3

[Dovecot] Squirrelmail/dovecot sort problem/bug
by A.P.Munnikes 10 Dec '05

10 Dec '05

Hello, there is a little bug in Squirrelmail 1.4.5 or Dovecot 1.0.alpha4-1: the sort is not correct if I use squirrelmail with the option: 10. Allow server thread sort : true 11. Allow server-side sorting : true with the option on false and with Thunderbird 1.5rc1 there is no problem, but I think Thunderbird 1.5rc1 already does the sort by itself. I have a folder with 1054 messages, but if I sort (from old to new) them in squirrelmail the newest 3 messages (received after the migration from thunderbird/pop3 to dovecot) are on the first page, before the messages from 5 month ago. 14:08 3.4 k (that is today 8 dec, 2005 ) 08:26 5.2 k + 00:07 2.9 k 8 jul, 2005 4.1 k 6 jul, 2005 3.5 k 3 jul, 2005 3.1 k 8 jul, 2005 4.1 k 6 jul, 2005 3.3 k 8 jul, 2005 3.8 k 5 jul, 2005 4 k 8 jul, 2005 7.4 k 11 jul, 2005 6.8 k Also my 'sent' folder: sorted from new to old contains on the last page 2 messaged that I send today (after the migration to dovecot) 12 jan, 2005 2.8 k 12 jan, 2005 1.7 k 11 jan, 2005 1.5 k 10 jan, 2005 1.1 k 8 dec, 2005 1.1 k ( <= send from thunderbird) 8 dec, 2005 1.6 k ( <= send from squirrelmail) And also an other mail folder has sorting problems. However my INBOX looks normal, while I received 5 or 6 messages after the migration. What have I done: *restarted apache2 a couple of times *restarted dovecot a couple of times *In the first folder (with >1000 messages) I already have deleted the dovecot files and new files are generated -rw------- 1 alfred alfred 17184 2005-12-08 23:41 dovecot.index -rw------- 1 alfred alfred 60416 2005-12-08 23:42 dovecot.index.cache -rw------- 1 alfred alfred 17908 2005-12-08 23:42 dovecot.index.log -rw------- 1 alfred alfred 10 2005-12-08 21:15 dovecot-keywords -rw------- 1 alfred alfred 40600 2005-12-08 23:41 dovecot-uidlist *closed webbrowser and restarted a new firefox 1.5 and surfed to squirrelmail. I don't know if this is a dovecot or squirrelmail problem. Alfred

2 1

[Dovecot] Update on Using Dovecot with Webmin
by Lee MSN 10 Dec '05

10 Dec '05

First of all thanks for the replies. I have decided to try the updated version 1.0 alpha After uninstalling Dovecot .99 and cleaning up user,groups and files. (Dovecot .99 was authenticating as best I can tell using unix users = the default -- and PAM = the default - I only had to setup the PAM if I remember correctly. Loaded Dovecot 1.0, made sure user, folders and files all seem to be setup correctly. Now - Webmin is able to stop and start Dovecot and it loads fine on reboot. But, it is pretty obvious that the Webmin modual is not up with then new and much more powerful Dovecot config file. For me that is OK, as long it will show weather the service is up or down - stop and start it, which is seems to be doing just fine. The reason I say this is when I try and use the Webmin modual to set user authentication to Standard Unix user database and PAM - it does not work. So I am needing help editing the Dovecot.conf file. My new problem is this: Can not get users to authenticate. I am trying to first setup just unix authentication - with plain text for starters then will move up to more secure. I have left the config file default - just made changes until it would start. With the notable execption I set plain text to yes. I have setup the Dovecot PAM file per the documentation. So what I need help now with is this I am wanting to setup a very simple setup to start with: A setup so that a outlook express client can login, using plain text password, unix login and password POP3 = yes Users = linux/unix (/etc/passwd) Passwords = PAM or Shadow Can anyone send me and edited config file that is setup to for this type of authentication? Or cut from their config file those sections needed for the authentication? Actually, if anyone is willing to share a config file that is setup with a more secure type of authentication that would be great too. (Thinking of switching to Cyrus - have any of you jump off of Cyrus to use Dovecot -- why??) Lee D System: Fedora Core 4 with SE on SendMail 8.13.4 SpamAssassign 3.03 MailScanner 1.1-4 ClamAV .87 Webmin 1.250 Webmin Dovecot Module - not sure only one out there _________________________________________________________________ Dont just search. Find. Check out the new MSN Search! http://search.msn.click-url.com/go/onm00200636ave/direct/01/

1 0