November 2006 - dovecot

[Dovecot] [IDEA] Shared Folders via LDAP Lookups
by Gavin Henry 03 Dec '06

03 Dec '06

Hi All, We've been thinking a lot about the 2 different ways dovecot implements shares; namespaces and symlinks. We currently use the symlink version for our clients and they use the create_dovecot_shares.pl tool we did at: http://dovecot.org/tools/ Our idea is either in the namespace declaration or if a folder has a dovecot-shared file/symlink, have a ldap lookup defined in say, dovecot-ldap-shares.conf or dovecot-ldap.conf, that queries a dn and looks for memberUID or a group dn, then those uids/groups can get into the IMAP maildir. Obviously the original folder would need to be owned by some predefined user, e.g dovecot etc. Then it's just a simple matter of adding a new memberUID/group to the share listing. We can do a custom dovecot.schema if needed (for say a dovecotShare attribute etc.), as long as we get dovecot a Private Enterprise Number from: http://www.iana.org/cgi-bin/enterprise.pl If Timo hasn't already got one, but I can't see one in: http://www.iana.org/assignments/enterprise-numbers Thoughts? -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

3 4

Re: [Dovecot] Can't drop root group privileges
by Jackie Hunt 03 Dec '06

03 Dec '06

An update on my problem dropping root group privileges. I discovered this is a problem for a user if they are in the system group (gid 0). If I remove the user from the system group, and leave them in their primary group, I don't see the error. I've tried setting first_valid_gid to something like 4, hoping dovecot would filter out gid 0, but that doesn't work. Still searching for an answer... Jackie > > Hi all, > > I need your insight. I've been testing Dovecot on an AIX 5.2 > system. Compiled and running fine. We have some users on an > AIX 5.1 system, so I'm working on installing it there, so we > can do further testing. > > I'm using Dovecot 1.0 RC15 with OpenSSL 9.0.7e, configured to use > port 10143 (imap) and 10993 (imaps). The error I'm seeing in the log is: > > dovecot: Nov 28 09:23:54 Info: imap-login: Login: user=<jackie>, method=PLAIN, r > ip=xx.x.xxx.xxx, lip=xxx.xx.xxx.xx, TLS > dovecot: Nov 28 09:23:54 Error: IMAP(jackie): We couldn't drop root group privil > eges (wanted=200, gid=200, egid=0) > dovecot: Nov 28 09:23:54 Error: child 860274 (imap) returned error 89 > > I've seen this error reported on the list, with the suggested resolution > being to set the first_valid_gid = 0 in dovecot.conf. I've tried that, > and nothing changes. > > Any help would be greatly appreciated! > > Jackie > --- > Jackie Hunt > ACNS Voice: (970) 663-3789 > Colorado State University FAX: (970) 491-1958 > Fort Collins, CO 80523 Email: jackie.hunt(a)colostate.edu > Jackie Hunt ACNS Voice: (970) 663-3789 Colorado State University FAX: (970) 491-1958 Fort Collins, CO 80523 Email: jackie.hunt(a)colostate.edu

2 2

[Dovecot] small mbox and index files problem
by Paul Shackel 03 Dec '06

03 Dec '06

Dovecot version: 1.0-0_33.rc15 built by atrpms Operating system: Redhat EL4 CPU architecture: x86 Filesystem you used: mailboxs via nfs to fileserver using xfs Just upgraded from 1.0-0_20.rc7 to 1.0-0_33.rc15 built by atrpms and we had previously set mbox_min_index_size to 1024 (1Mb) and now all mailboxes (mbox format) that are under this size are not able to be opened and throw an "Internal error occured. Refer to server log for more information." using either Thunderbird or Outlook Express, both of which are recent versions. The small mailboxes can be opened after turning mbox_min_index_size setting back to 0, at which time it creates indexes. There is nothing in the syslog file. I am looking in the right place as I can see the dovecot startup message. paul --

3 2

[Dovecot] Inactivity, Thunderbird -> bad password
by Peter Veerman 03 Dec '06

03 Dec '06

Hi, I'm running dovecot rc13 now on sparc64, freebsd 6.1-STABLE When i'm connected with my 5 accounts to my dovecot imap over ssl/tls server i get the following message in my logs: Nov 18 15:25:47 Info: imap-login: Disconnected: Inactivity: rip=x.x.x.x, lip=x.x.x.x, TLS My client (thunderbird) then re-requests my password for only one of the 5 accounts. In my dovecot.conf is the following variable set: imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep

2 8

[Dovecot] Loging folder based information etc?
by Mart Pirita 03 Dec '06

03 Dec '06

Hello. Today one user lost Sent Items folder, seems he deleted it, but I want to be sure. But how? Right now I'm using: login_log_format_elements = %u [%r] %m %c What should I use to see in logs information about created/deleted folders etc? -- Mart

2 1

[Dovecot] Freebsd: fs quota / big maildir
by Geoffroy Desvernay 03 Dec '06

03 Dec '06

I'm testing dovecot as courier-imap replacement. My setup: FreeBSD 6.1 nfs homedirs on FreeBSD server ~/Maildir 's LDAP auth - bind_auth=yes Seems to work well in most cases, but: - No way to read a maildir with 35000+ messages (a freebsd mailing-list for some years) => Nov 21 12:11:42 host dovecot: child 7217 (imap) killed with signal 11 - No way to have quota plugin reporting anything => quotactl(Q_GETQUOTA, /users/group) failed: Operation not supported Any idea ? What did I forget ? What could I do to debug this ? (mail_debug = yes) -- ___________________________________________________________ / Geoffroy DESVERNAY | \ /\ `Service info` | Tel: (+33|0)4 91 05 45 24 /\ \/ Ecole Centrale de Marseille | Fax: (+33|0)4 91 05 45 98 \/ \ (ex-EGIM) | Mail: dgeo(a)ec-marseille.fr / -----------------------------------------------------------

3 3

[Dovecot] Caching passwords?
by Hein Celliers 03 Dec '06

03 Dec '06

Hi all! I need some help....changing passwords....... Dovecot server, appears to cache the old credentials. It only discovers the change upon a restart. I need to know how to configure dovecot (dovecot-1.0-0.beta2.7) as not to cache the passwords. (Using fedora core 5) Thanks Hein Celliers

2 1

Re: [Dovecot] dovecot:IMAP(user) killed with signal 6
by Spil Oss 03 Dec '06

03 Dec '06

Thanks Timo! Since I've been running rc10 again dovecot stopped aborting. By the way, when I used the create_shares.pl script, it created a symlink for every file in the directory to be shared. Simple symlinking the dir seemed to 'almost' work but for the keyword file errors. Upgrading to rc15 fixes the problem as well, the Permission Denied message still comes up, but dovecot no longer aborts. Will try the create_shares.pl script again and see where my symlink-config is wrong. FWIW I wouldn't want any undocumented behaviour in dovecot just because I'm a stupid twat... Kind regards, Spil. On 20/11/06, Spil Oss <spil.oss(a)googlemail.com> wrote: > That's indeed very standard, but it was complaining before (up to > rc10) but not aborting. > > Dovecot keeps resetting the mode and owner on the keyword file > > lrwxr-xr-x 1 user1 user 37 Nov 9 21:48 .MeldWelSpam -> > /home/sharedmail/Maildir/.MeldWelSpam > > $ ls -l /home/sharedmail/Maildir/.MeldWelSpam > total 68 > drwxrwx--- 2 sharedmail sharedmail 1024 Nov 16 16:49 cur > -rw------- 1 user2 sharedmail 50 Nov 16 16:49 dovecot-keywords > -rwxrws--- 1 sharedmail sharedmail 0 Oct 17 15:01 dovecot-shared > -rw-rw---- 1 user2 sharedmail 12451 Nov 16 16:49 dovecot-uidlist > -rw-rw---- 1 sharedmail sharedmail 712 Nov 16 16:51 dovecot.index > -rw-rw---- 1 sharedmail sharedmail 17408 Oct 17 14:58 dovecot.index.cache > -rw-rw---- 1 sharedmail sharedmail 26436 Nov 16 16:51 dovecot.index.log > -rwxrws--- 1 sharedmail sharedmail 0 Oct 17 14:39 maildirfolder > drwxrwx--- 2 sharedmail sharedmail 512 Nov 14 21:41 new > drwxrwx--- 2 sharedmail sharedmail 1536 Nov 16 16:49 tmp > > It seems that whoever gets there first, creates the dovecot-keywords > file with perms 600 and subsequent users of the shared folder are out > of luck. > > # chown sharedmail:sharedmail dovecot-keywords dovecot-uidlist ; chmod > 660 dovecot-keywords > #ls -l dovecot-keywords dovecot-uidlist > -rw-rw---- 1 sharedmail sharedmail 50 Nov 16 16:49 dovecot-keywords > -rw-rw---- 1 sharedmail sharedmail 12451 Nov 16 16:49 dovecot-uidlist > > Moving some folders into the MeldWelSpam folder as user1 > # ls -l dovecot-keywords dovecot-uidlist > -rw------- 1 user1 sharedmail 258 Nov 16 16:57 dovecot-keywords > -rw-rw---- 1 user1 sharedmail 12736 Nov 16 16:57 dovecot-uidlist > > As long as dovecot keeps setting the mode to 600, I can't see how I > get this fixed. > > Spil. > > On 16/11/06, Odhiambo WASHINGTON <odhiambo.raburu(a)wananchi.com> wrote: > > * On 16/11/06 16:17 +0100, Spil Oss wrote: > > | Just upgraded to rc14 and problem persists. > > | > > | On 16/11/06, Spil Oss <spil.oss(a)googlemail.com> wrote: > > | >Hi all, > > | > > > | >After rc10 I have problems with imap and imaps > > | > > > | >Hi all, > > | > > > | >After rc10 I have problems with imap and imaps > > | > > > | >Nov 16 15:42:39 beastie dovecot: IMAP(user1): > > | >open(/home/user1/Maildir/.MeldWelSpam/dovecot-keywords) failed: > > | >Permission denied > > | >Nov 16 15:44:09 beastie dovecot: IMAP(user2): > > | >open(/home/user2/Maildir/.MeldWelSpam/dovecot-keywords) failed: > > | >Permission denied > > | >Nov 16 15:44:09 beastie dovecot: IMAP(user2): file maildir-keywords.c: > > | >line 222 (maildir_keywords_lookup_or_create): assertion failed: > > | >(mk->synced) > > | >Nov 16 15:44:09 beastie dovecot: child 98798 (imap) killed with signal 6 > > | >Nov 16 15:46:10 beastie dovecot: IMAP(user2): > > | >open(/home/user2/Maildir/.MeldWelSpam/dovecot-keywords) failed: > > | >Permission denied > > | >Nov 16 15:46:10 beastie dovecot: IMAP(user2): file maildir-keywords.c: > > | >line 222 (maildir_keywords_lookup_or_create): assertion failed: > > | >(mk->synced) > > | >Nov 16 15:46:10 beastie dovecot: child 98819 (imap) killed with signal 6 > > | > > > | >The Permission denied messages where there in rc10 as well, but that > > | >was not causing problems. These folders are symlinks to shared spam > > | >and ham folders for spamassassin learning. > > | > > > | >Any clue on how to fix this? > > | > > > | >FreeBSD-i386 6.1-RELEASE-p10 > > | >dovecot-1.0.r13 from ports > > > > "Permission Denied" is such a straight error message that you should be > > able to figure out and fix, everything being standard[1] > > > > What are the permissions on that folder (.MeldWelSpam)? > > Is it really owned by user2? > > Dovecot wants to write to it, but is being denied that chance. It should > > be writable by dovecot, I believe. So that folder should be group > > writable and dovecot should be in that group. > > > > But again, perhaps we should see the permissions on the dovecot binary > > also, because dovecot should be writing there "as user2" (suid), yes? > > > > > > [1] I suppose you are installing dovecot using the ports tree and that > > you have not tweaked your box beyond your own comprehension. > > I don't see > > > > > > -Wash > > > > http://www.netmeister.org/news/learn2quote.html > > > > DISCLAIMER: See http://www.wananchi.com/bms/terms.php > > > > -- > > +======================================================================+ > > |\ _,,,---,,_ | Odhiambo Washington <wash(a)wananchi.com> > > Zzz /,`.-'`' -. ;-;;,_ | Wananchi Online Ltd. www.wananchi.com > > |,4- ) )-,_. ,\ ( `'-'| Tel: +254 20 313985-9 +254 20 313922 > > '---''(_/--' `-'\_) | GSM: +254 722 743223 +254 733 744121 > > +======================================================================+ > > > > Garbage In -- Gospel Out. > > >

2 1

[Dovecot] Problem with rc10, perhaps 11-15
by Steven F Siirila 03 Dec '06

03 Dec '06

I don't recall if I mentioned this on the list, but when you are configured with mbox format, and a user has no Dovecot index files yet, and the config is such that mbox_min_index_size is set to non-zero, non-default (128 in my test case), dovecot deliver fails. Commenting out "mbox_min_index_size" fixed the problem, and the indexes then get created. This problems exists in RC10 -- I'm mentioned this in case it still exists in the latest revs so it can get fixed before release. -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 1

[Dovecot] IMAPS works, IMAP does not
by Peter Lindgren 03 Dec '06

03 Dec '06

Hello! I have a simple (I think) problem. I have had IMAPS working fine for a long time. Now I want to start to use IMAP and STARTLS, since my mobile SonyEricsson P900 can't use IMAPS directly. But I can't connect even locally to the IMAP port (143), no-one listens there according to netstat (*.imaps is in LISTEN state). I have the following settings in my /etc/dovecot.conf: protocols = imap imaps ssl_cert_file = /etc/ssl/dovecotcert.pem ssl_key_file = /etc/ssl/private/dovecot.pem disable_plaintext_auth = no login_user = _dovecot login_greeting = Dovecot@casiopea ready. mail_read_mmaped = yes mmap_no_write = no protocol imap { login_greeting_capability = yes } protocol pop3 { } auth_verbose = yes auth default { mechanisms = cram-md5 digest-md5 passdb passwd { } userdb passwd { } user = root } I have restarted (SIGTERM) dovecot to be sure that dovecot is restarted. I still run 1.0beta3 on OpenBSD. TIA, Peter -- Peter Lindgren, dataingenjör E-post: peter "at" norrskenkonsult punkt com http://www.norrskenkonsult.com

2 1