December 2005 - dovecot

[Dovecot] PATCH: Dovecot SASL authentication for Postfix 2.3-20051220
by Timo Sirainen 24 Dec '05

24 Dec '05

Tested with PLAIN authentication. Doesn't require any external libraries. Building: make makefiles CCARGS="-DUSE_SASL_AUTH" If you want Cyrus SASL support also (eg. for SASL client), just follow SASL_README instructions normally. main.cf: smtpd_sasl_type = dovecot # non-chrooted smtpd: #smtpd_sasl_path = /var/spool/postfix/private/auth # chrooted smtpd: smtpd_sasl_path = /private/auth dovecot.conf: auth default { .. socket listen { client { path = /var/spool/postfix/private/auth mode = 0666 } } }

2 1

[Dovecot] Re: PATCH: Dovecot SASL authentication for Postfix 2.3-20051220
by wietse＠porcupine.org 23 Dec '05

23 Dec '05

I'm adding the finishing touch to the Postfix Dovecot plug-in, to be released with snapshot 20051223. The plug-in code quality is generally very good. I had two observations, both of minor importance: - The authentication server protocol uses the TAB character as a delimiter, so it is critical that legitimate user names don't contain this character. This is of course trivial to ensure with the authentication server implementation, so I will not worry about it. - I noticed that the plug-in did not satisfy one Postfix principle, namely that operations be bounded in time. I added a time limit for connect, read and write operations. Postfix will time-bound all operations anyway, but the diagnostics of the watchdog timer are less specific and therefore less useful. Wietse

2 1

[Dovecot] Thinking about switching from courier-imap to Dovecot: 2 simple questions
by kadafax 23 Dec '05

23 Dec '05

Hi, I'm using RHEL4 and since the dovecot RPM is present in the main repository, I'm thinking about switching from courier-imap (with whom I've got trouble to update) to Dovecot. Here are two questions about Dovecot (google didn't answer me): 1. Is it possible for dovecot to use the bind mecanism against ldap for authentification purpose. My main concern is to avoid the clear-text password in the dovecot-ldap.conf file. With courier-imap, the process simply bind to the ldap tree with the users's supplied login/password. No need for a special authentification purpose user. 2. Does imap's dovecot implementation support folders imbrication (more than one level folders) ? Thanks, kfx.

3 3

RE: [Dovecot] Vacation Message HOWTO
by Joshua Goodall 23 Dec '05

23 Dec '05

John Peacock wrote: > It's probably possible to use with any LDA which support delivery > scripts (e.g. .forward files). The CVS version of dovecot-lda has Sieve script support, and it works well. http://wiki.dovecot.org/moin.cgi/LDA - Joshua.

1 0

[Dovecot] Dovecot & pam_mkhomedir
by Stroller 22 Dec '05

22 Dec '05

Hi there, Does anyone have Dovecot working correctly with pam_mkhomedir, please? I seem to be going through quite a number of IMAP servers this week, trying to find one that will not only authenticate against a Windows domain but which will also create home directories for users the first time they log in. I'm using winbind to do the authentication & that seems to be doing the trick in the first instance - if I log in using Squirrelmail I see entries written to the system log saying: Dec 16 11:58:35 baby pam_winbind[9319]: user 'ned' granted access I have set Dovecot to log to /var/log/mail and in that I see only three entries saying: imap-login: Dec 16 11:58:36 Info: Login: ned [127.0.0.1] But Squirrelmail gives: ERROR: Could not complete request. Query: SELECT "INBOX" Reason Given: /etc/pam.d/imap says: #%PAM-1.0 auth required /lib/security/pam_winbind.so account required /lib/security/pam_winbind.so session required /lib/security/pam_mkhomedir.so skel=/etc/skel umask=0022 If I use the same configuration for SSH then the user's home directory is created upon authenticaton, but not with Dovecot. I chose to try Dovecot because I understood it handled PAM session wossisnames, which Courier-IMAP doesn't. My dovecot.conf is attached - I'm wondering if the problem could be with the "auth_userdb" setting, but `getent passwd` does show an entry for the user: # grep ned /etc/passwd # getent passwd | grep ned ned:x:10012:10000:Ned Nedbody:/home/DOMAIN/ned:/bin/false # Many thanks in advance for any advice or suggestions - I'd really like to understand what's going on here. I believe I can authenticate against the domain using LDAP / Active Directory, but since I don't know if that'll help I'd rather not go that route yet. If I first try to log in using ssh with pam_mkhomedir enabled then the users' home directory is created successfully & I can subsequently log on in Squirrelmail. But it's important to me that I shouldn't have to create users' home dirs for them - I should be able to add them on the Windows domain controller & just tell them to log in to their email - the home dir on the mailserver should be created automagically when they authenticate against the domain. Stroller.

7 13

[Dovecot] Authentication trouble.
by Michael Peters 22 Dec '05

22 Dec '05

I am not having much luck with resolving my authentication issue. The environment is "SunOS 5.10 Generic_118822-11 sun4u sparc SUNW,UltraSPARC-IIi-cEngine". dovecot-1.0.alpha5 ./configure --with-passwd --with-shadow --with-pam --with-checkpassword --with-mysql --with-storages=maildir # telnet 172.16.0.40 143 Trying 172.16.0.40... Connected to 172.16.0.40. Escape character is '^]'. * OK mailhub is for business purposes only. Usage is monitored. A01 login username mypassword * BAD [ALERT] Plaintext authentication is disabled, but your client sent password in plaintext anyway. If anyone was listening, the password was exposed. A01 NO Plaintext authentication disabled. A04 Logout * BYE Logging out A04 OK Logout completed. Connection to 172.16.0.40 closed by foreign host. *I have tried adding digest-md5 cram-md5 and shadow but Dovecot will not start.* auth default { # Space separated list of wanted authentication mechanisms: # plain digest-md5 cram-md5 apop anonymous gssapi mechanisms = plain *Dovecot will not start when I tried these options. Maybe I am entering this wrong?* passdb shadow { /etc/shadow } passdb passwd { /etc/passwd } Any assistance would be appreciated. -- Best regards, Michael

2 1

[Dovecot] dovecot -CVS and epoll and cvs not building
by Reuben Farrelly 22 Dec '05

22 Dec '05

Hi, After reviewing my dovecot ./configure options I thought I'd give --with-ioloop=epoll a go again (as opposed to just using =poll) but I'm seeing some errors appearing in the maillog that aren't there with standard poll: Dec 23 02:34:47 tornado dovecot: imap-login: Login: user=<reuben>, auth-method=plain, remote=220.237.24.149, TLS Dec 23 02:34:48 tornado dovecot: imap-login: io_loop_handle_add: epoll_ctl(3, 9): No such file or directory Dec 23 02:34:48 tornado dovecot: child 16524 (login) returned error 89 They're appearing fairly frequently, ie within a few mins of starting up and then the message won't go away until the client is restarted. So it's easy to reproduce but I'm not sure how to go about debugging it. Can anyone help with this? It's a very recent Linux-2.6 system so epoll support should not be an issue. Additionally -CVS won't compile for me right now, it bails out when compiling the 'quota' plugin. Workaround is to manually edit the dovecot/src/plugins/Makefile and not build this plugin.. Timo - is there a file/commit missing from -CVS at the moment for this plugin? I see no other reference anywhere for dqb_curblocks in the code. gcc -DHAVE_CONFIG_H -I. -I. -I../../.. -I../../../src/lib -I../../../src/lib-dict -I../../../src/lib-mail -I../../../src/lib-storage -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/kerberos/include -MT quota-fs.lo -MD -MP -MF .deps/quota-fs.Tpo -c quota-fs.c -fPIC -DPIC -o .libs/quota-fs.o quota-fs.c: In function 'fs_quota_get_resource': quota-fs.c:208: error: 'struct dqblk' has no member named 'dqb_curblocks' make[1]: *** [quota-fs.lo] Error 1 reuben

2 1

[Dovecot] Migrating from mbox to maildir, which converter is compatible with dovecot
by Oliver Schulze L. 22 Dec '05

22 Dec '05

Hi, I'm testing/debuging the migration from mbox to maildir in a mailserver running Dovecot 1.0alpha5. I migrated all 472715 emails(in a test server) and later noted that dovecot could not get the same flags/status of the emails as in the mbox. I was using perfect_maildir.pl and I think its not dovecot fault. Seems to me that perfect_maildir.pl convert the emails in a way that dovecot could not understand completelly. So, my cuestion is, which mbox to maildir converter can I use that is compatible with dovecot 1.0alpha5 ? Thanks Oliver -- Oliver Schulze L. <oliver(a)samera.com.py>

2 2

[Dovecot] mailbox from ldap and indexes
by Stian Jordet 21 Dec '05

21 Dec '05

Hi, because of quota, I would like to have indexes on another filesystem then user's maildir. This I can do with "default_mail_env= maildir:/% h/Maildir:INDEX=/var/indexes/%u" or something. But when I get the users mailbox location from ldap, there is no way to set the index? I guess I can make the ldap entry contain the INDEX as well, but I would like to use the ldap entry in the exim conf as well, to tell exim where to write the mails... Is there a way I haven't thought of yet? I have this in dovecot-ldap.conf now: user_attrs = uid,homeDirectory,mailbox,uid,uidNumber,gidNumber If I could do something like: user_attrs = uid,..,"maildir:" . mailbox . ":INDEX=var/indexes/%u",... that would have been awesome. Best regards, Stian

2 1

[Dovecot] Another "Too many files open" post
by Andy Cravens 21 Dec '05

21 Dec '05

I'm running Solaris 9 Sparc with Dovecot alpha 5 and using maildir format.. I noticed in the log file the following error: dovecot: Dec 20 15:54:18 Error: imap(xxxxxxxx): open(/export/home/xxxxxxxx/mail/.Sent Messages/cur/1135013649.002916.mbox:2,Sab) failed: Too many open files I called the guy and asked him what he was doing... synching his folders. It hung for a while but finally finished. I searched the archives and found some related info from Jeff Ballard: >Actually on Solaris 9 you want to put something like this in >/etc/system: > >set rlim_fd_cur = 32768 >set rlim_fd_max = 65536 > >That sets the current fd's to 32k and max to 64k. Unfortunately, to >take effect you'll need to reboot. After the reboot, ulimit -a should >show that nofiles(descriptors) is 32768. > >-Jeff And I found this from Jeff Earickson: >I ran into this problem with alpha4 on Solaris 9. I doubled the >following dovecot settings: > >login_max_processes_count = 256 (was 128) >login_max_logging_users = 512 (was 256) > >and the problem went away. I carried these numbers forward intoalpha5, >and it has been working fine. I changed my /etc/system file but have not rebooted yet. Also, on Jeff Earickson's post, I looked at my dovecot.conf settings and they're basically default which means everything in the "Login processes" section is commented out. I have 10 users on this system and will hold off migrating any more until I can resolve this problem. By the way, my "ulimit -a" shows "open files" at 256 which seems low. # ulimit -a core file size (blocks) 0 data seg size (kbytes) unlimited file size (blocks) unlimited open files 256 pipe size (512 bytes) 10 stack size (kbytes) 8192 cpu time (seconds) unlimited max user processes 29995 virtual memory (kbytes) unlimited Any advice would be appreciated. I can't reboot for a few more days.

8 9