July 2006 - dovecot - dovecot.org

[Dovecot] ssl-parameters.dat permissions
by Thomas Hummel 01 Jul '06

01 Jul '06

Hello, I'm using 1.0rc1 with login_dir = /var/dovecot-1.0/run/dovecot/login #login_user = dovecot but when launched, I've got dovecot: imap-login: Can't open SSL parameter file ssl-parameters.dat: Permission denied as a matter of fact, ssl-parameters.dat is created with the following permissions : -rw------- 1 root dovecot 230 Jun 30 14:35 /var/dovecot-1.0/run/dovecot/login/ssl-parameters.dat -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] set quota on INBOX only
by Kristian Vlahovicek 01 Jul '06

01 Jul '06

Hello, how can I configure the IMAP quota plugin to force quotas on inbox only? I would like to limit the size of each of the user's inbox (in /var/mail/%u) to 50 meg and I do not want to force any quotas in their folders (mbox style). They should keep their inbox small :) thanks, Kristian

2 1

[Dovecot] help for static user
by JC 01 Jul '06

01 Jul '06

Hi everybody, I have been long (for 2 days) trying, but I really need some help. I would like to use virtual static users. I configured my file as indicated in the documentation and then I created the following directory, with the needed rights (mail account) and leave them empty : /var/mail/virtual/<mon_domaine>.fr/toto/ I am not sure that it is the good method, but I understand it as follows : dovecot looks up in the directories and takes them as usernames and domain names. When I try to open the imap box from a client (evolution), I get a "Unknown error - the server closed the connection" message, that doesn't appear in the server's syslog. My dovecont.conf : << base_dir = /var/run/dovecot/ protocols = pop3s imaps imap_listen = *:143 pop3_listen = * ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem disable_plaintext_auth = yes log_path = /var/log/dovecot.log log_timestamp = "%b %d %H:%M:%S " login_dir = /var/run/dovecot/login login_chroot = yes login = imap login_executable = /usr/lib/dovecot/imap-login login_user = dovecot login_process_size = 32 login_process_per_connection = yes login_processes_count = 3 login_max_processes_count = 128 login_max_logging_users = 256 login = pop3 login_executable = /usr/lib/dovecot/pop3-login max_mail_processes = 1024 verbose_proctitle = yes first_valid_uid = 8 last_valid_uid = 0 first_valid_gid = 1 last_valid_gid = 0 mail_extra_groups = mail client_workarounds = outlook-idle outlook-pop3-no-nuls mailbox_check_interval = 0 mailbox_idle_check_interval = 30 mail_full_filesystem_access = no mail_max_flag_length = 50 mail_save_crlf = no mail_read_mmaped = no maildir_stat_dirs = no maildir_copy_with_hardlinks = no maildir_check_content_changes = no mbox_lock_timeout = 300 mbox_dotlock_change_timeout = 30 umask = 0077 imap_executable = /usr/lib/dovecot/imap imap_process_size = 256 imap_use_modules = no imap_modules = /usr/lib/dovecot/imap pop3_executable = /usr/lib/dovecot/pop3 pop3_process_size = 256 pop3_use_modules = no pop3_modules = /usr/lib/dovecot/pop3 auth = cram-md5 auth_mechanisms = cram-md5 auth_realms = auth_userdb = passwd static uid=8 gid=8 home=/var/mail/virtual/%d/%u auth_passdb = passwd-file /etc/dovecot/cram-md5.pwd auth_user = dovecot auth_chroot = auth_executable = /usr/lib/dovecot/dovecot-auth auth_process_size = 256 auth_count = 1 auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ >> Thank you in advance for any help.

2 1

[Dovecot] Secure connection from "localhost" in jails
by Dirk Engling 01 Jul '06

01 Jul '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear dovecot developers, first: thanks for this really cool imapd, on my server it serves some hundred domains, all in all some thousand users, some having hundred thousand mails in their Maildirs (their spam boxes mostly). Since I put this installation in an FreeBSD geli encrypted disc image I had no choice but to choose an imapd with clever indexes - dovecot was perfect. However, since I reconfigured the disc image to work as a FreeBSD jail, I had some trouble with my web mail solution. Squirrelmail does not work with imaps (or at least not smoothly, out of the box, or whatever) and I didn't like to hack php to support SSL. Plus: there is no point in using ssl for a local connection. In a FreeBSD jail a sockets source address is always rewritten to the jails address, so squirrelmail opening a connection to dovecot will not come from 127.0.0.1 but from the same (jails) address, dovecot listens to. Still, dovecot only considers 'localhost' addresses as secure and allows LOGIN or PLAIN auth. With the little patch below dovecot allows clients from the jail to authenticate via LOGIN, when they connect from the IP it accepts connections at. Something similar is lurking around in pop3 auth code, I am sure, you get the point. Regards erdgeist ======== 8< ======== 8< ======== 8< ======== 8< ======== 8< ======== 8< dovecot-1.0.rc1/src/imap-login 18:59:44 #> diff -u client.c* - --- client.c Thu Jun 29 18:59:39 2006 +++ client.c_new Thu Jun 29 18:59:19 2006 @@ -411,7 +411,7 @@ const struct ip_addr *ip) { struct imap_client *client; - - const char *addr; + const char *addr, *local_addr; if (max_logging_users > CLIENT_DESTROY_OLDEST_COUNT && hash_size(clients) >= max_logging_users) { @@ -429,8 +429,10 @@ client->common.tls = ssl; addr = net_ip2addr(ip); + local_addr = net_ip2addr(local_ip); client->common.secured = ssl || (IPADDR_IS_V4(ip) && strncmp(addr, "127.", 4) == 0) || + (IPADDR_IS_V4(ip) && strncmp(addr, local_addr, strlen(local_addr)) == 0) || (IPADDR_IS_V6(ip) && (strcmp(addr, "::1") == 0 || strncmp(addr, "::ffff:127.", 11) == 0)); -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) iD8DBQFEpmKwImmQdUyYEgkRAmWJAKCISUFtjdwvIZvHucqREHXKmB3s3ACeO7ql phwkh3m/KTjQCKsRetLxORA= =VnV4 -----END PGP SIGNATURE-----

1 0