January 2007 - dovecot

[Dovecot] DvCot/PstFix Virtual Domains Virtual Users PAM Authentication - How pls
by Kyle 03 Jan '07

03 Jan '07

Hi Folks, I'm hoping some one can set me straight here please. Postfix 2.1.5 Dovecot 0.99.11-2 I have Postfix set up on a new box with Virtual Domains and Virtual Users using MailDir format with their mail homes in /var/spool/mail/<domain>/<user> I want Dovecot to login using PAM Authentication. The idea is to host multiple domains which each have multiple aliases which resolve to one email account for their respective domain but using a user name which actually _is_ a system user. So I might have; jo(a)abc.com joe(a)abc.com joey(a)abc.com pete(a)abc.com peter(a)abc.com jo(a)xyz.com joe(a)xyz.com joey(a)xyz.com pete(a)xyz.com peter(a)xyz.com where 'joe' and 'peter' are both system users each with mail homes of; /var/spool/mail/abc.com/joe /var/spool/mail/abc.com/peter /var/spool/mail/xyz.com/joe /var/spool/mail/xyz.com/peter In my dovecot.conf, I have; auth_userdb = static uid=89 gid=89 home=/var/spool/mail/%d/%u auth_passdb = pam If I login with just 'joe', I get; Fatal: chdir(/var/spool/mail//joe) failed with uid 89: Not a directory Fair enough, that sounds logical to me. But if I then login with 'joe(a)abc.com', I get; PAM: pam_authenticate(joe(a)abc.com) failed: Authentication failure So it appears Dovecot is checking PAM for 'joe(a)abc.com' rather than just 'joe'. How can I make it check for just 'joe' please? -- ------------------------------------------------------------------------ Kind Regards Kyle

2 1

[Dovecot] configured mechanisms don't work
by Eggert Ehmke 03 Jan '07

03 Jan '07

Hi, I am new to this list and to dovecot. Forgive me if I ask long discussed items. I managed to install postfix and dovecot 1.0.rc15 on a Debian Sarge server out of the backports. It works so far, I can send emails via smtp to postfix, they are stored in the virtual mailboxes of some users, and I can get them via IMAP from dovecot. However, in dovecot.conf I configured mechanisms = plain login digest-md5 cram-md5 when I connect to the server via telnet 143, I get this: 2 CAPABILITY * CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS STARTTLS LOGINDISABLED 2 OK Capability completed. So I can't authenticate using cram-md5. What may I be missing? Regards & happy new year! Eggert

2 1

[Dovecot] determining connection type/port in logs
by Glenn Leavell 03 Jan '07

03 Jan '07

Is there a way to configure logging to indicate what connection type was used to authenticate? I'd like to be able to tell from the logs whether the user used STARTTLS on port 143 or an SSL-wrapped connection on port 993. Using RC15 with auth_verbose=yes gives us the following log entries during login and logout (lines wrapped for convenience): # login port 143 with STARTTLS: Jan 3 14:17:24 tony dovecot: [ID 107833 local5.info] imap-login: Login: user=<glenn>, method=plain, rip=10.0.0.2, lip=192.168.1.2, TLS Jan 3 14:17:41 tony dovecot: [ID 107833 local5.info] IMAP(glenn): Disconnected: Logged out # login port 993/SSL Jan 3 14:19:11 tony dovecot: [ID 107833 local5.info] imap-login: Login: user=<glenn>, method=plain, rip=10.0.0.2, lip=192.168.1.2, TLS Jan 3 14:19:20 tony dovecot: [ID 107833 local5.info] IMAP(glenn): Disconnected: Logged out Turning on auth_debug=yes added some additional info, but I still wasn't able to tell what port or connection type was used. Thanks very much, Glenn -- Glenn Leavell <glenn(a)usg.edu> Office of Information and Instructional Technology Board of Regents of the University System of Georgia

2 1

[Dovecot] Ampersand in Folder names causing folders to disappear?
by Mark Adams 03 Jan '07

03 Jan '07

Hi All, Dovecot 1.0.rc7 Not sure if this is a problem with Outlook, or with Dovecot, or to do with encoding in Linux. Whenever a user enters an ampersand into an IMAP folder name, it dissapears from outlook. These folders appear on the ext3 filesystem as &- for example drwx------ 5 mailusers mailusers 4096 2006-10-10 17:54 .INBOX.Networks.London Networks.NDCs.WH&-P joint working Any pointers or previous experience anyone has of this would be very gratefully received. Regards, Mark

2 2

[Dovecot] "Not connected to database" MySQL errors
by Cassidy B. Larson 03 Jan '07

03 Jan '07

I've been in the process of moving my pop3 proxy over to the dovecot proxy. I have a ton of users using pop3 still, and am seeing these errors popup within a minute or so of the connection to the database: Password query failed: Not connected to database Eventually the auth-worker will reconnect to the database and things will go on normal for another minute or two, then the same issue occurs. I'm runing MySQL 5.0.22 on FreeBSD 6.1. I upgraded to 5.0.27, however I started getting the: "Password query failed: Commands out of sync; you can't run this command now" error instead. So I downgraded until I could figure out this issue first. I've tried connecting to localhost, /tmp/mysql.sock, and a remote server and all exhibit the same problem. The MySQL idle timeouts shouldnt come into play because I'm constantly having users check their accounts. Any insights will be useful, Thanks! Cassidy ### Part of my dovecot.conf that might be useful: login_process_per_connection = yes login_processes_count = 3 login_max_processes_count = 512 auth_verbose = yes auth_debug = yes auth_debug_passwords =yes auth_worker_max_count = 400 auth mail.infowest.com { mechanisms = plain passdb sql { args = /usr/local/etc/dovecot-sql.conf } userdb static { args = uid=5000 gid=5000 home=/dev/null } user = root # Number of authentication processes to create count = 10 ## dovecot-sql.conf driver = mysql connect = host=/tmp/mysql.sock dbname=iwmailsystem user=imap_proxy password=***** client_flags=65536 default_pass_scheme = MD5 password_query = CALL pop_auth('%u','%l','%r')

2 2

[Dovecot] Dovecot and Mail.app
by Barry Warsaw 03 Jan '07

03 Jan '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm trying to convert a courier-imap installation over to using Dovecot, but I'm having some problems with Mail.app on OS X. FTR, we use both Mail.app and Thunderbird. Note that in the Mail.app preferences, I have a blank IMAP Path Prefix. I'm using Dovecot 1.0_rc15 on Gentoo, and Mail.app from OS X 10.4.8, Thunderbird 1.5.0.9. With the old courier setup, in Mail.app I would see a top level Inbox folder, with an inbox icon'd folder underneath that representing the IMAP account. That IMAP account subfolder would be the inbox of that account. Under that, I'd see all the subfolders for that account. Something like: Inbox Account1 Folder1 Folder2 ... Account2 FolderA Outbox Drafts Sent Junk SmartFolder1 SmartFolder2 Note that a straight copy from the courier Maildir leaves me with directories like ~/Maildir/.Folder1 and ~/Maildir/.Folder2 -- IOW, they do not have .INBOX. prefix. I tried adding a "namespace private" section, with separator, prefix, and inbox values as specified in the docs. This gives me the same layout in the Mail.app u/i as with Courier, but there's a big problem: none of the folders under Account1 have any contents. The folders are there, and in the right location, but they have zero messages (even though they certainly have messages in the filesystem). Nothing in the Dovecot log file indicates any problem. But if I hover over say Folder1 in the Mail.app u/i, I see a popup message like: Mail was unable to open this mailbox on the server "imap.example.com". The server error encountered was: Unknown namespace Moving over to Thunderbird though, I see exactly what I want to see. Top level expandable is the account, with Inbox under that, which expands to all my folders. Of course Thunderbird supports subscriptions, which Mail.app does not, so I only see the folders I've subscribed to. Clearly, there's some weird interaction between Mail.app and Dovecot. Next, I tried removing the 'prefix' value from the "namespace private" section, and restarted Dovecot. Now the Mail.app u/i is different, but all the folders have their contents back! The u/i now shows: Inbox Account1 Account2 FolderA Outbox Drafts Sent Junk SmartFolder1 SmartFolder2 Account1 Folder1 Folder2 IOW, all of account1's folders live under a separate expandable section below the top level Inbox expandable (that section has a little world icon instead of the little inbox icon). Account1's inbox lives in a different section from its folders, but it has no subfolders. Looking back at Thunderbird, I notice that all the subscribed folders are now at the same level as the Inbox, just under the account name. I.e. Account1 Inbox Trash Folder1 Folder2 ... I suppose I can live with the Mail.app behavior sans the prefix setting in the namespace section, but it's not ideal. I'd really like to know why Mail.app has a problem with this! Why are the folders there but the contents empty? Is there any way to increase the logging that Dovecot does to understand what the Mail.app client is sending and why Dovecot is sending back that error? Any help would be greatly appreciated! - -Barry P.S. I wasn't able to use courier2dovecot.sh from the wiki (I think others had problems with running it on Linux as well, probably due to the different rename(1) syntax). The courier2dovecot.py file was no longer available, so I wrote my own. I can make that available to folks if there's any interest. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iQCVAwUBRZC8sXEjvBPtnXfVAQK90gQAjFhEH+vIPh7pnY4MuOTU8ChWfJ57ppIQ g0HvHidiD5nOfd8pfpsfacdD1nC40cRlpnJkR6vcahvqQsLzSUzUMwVlUqP2IDSE jGvZGpGSBpjTHV/ktWbyJhPo9+ehVxiq+qEfbDgfw9iqBtulOXe4M25iUKO8tsuA n2bCHHoUXuk= =hxad -----END PGP SIGNATURE-----

4 8

Re: [Dovecot] dovecot/vpopmail lastauth
by Max A 03 Jan '07

03 Jan '07

> Hi All, > > I have dovecot working wonderfully on a qmail/vpopmail, but I've noticed > my 'lastauth' is never filled in.. If I use vpopmail's pop, and auth to > that, then 'lastauth' is updated. It just seems weird that if dovecot > is using the vpopmail lib, that lastauth wouldn't be updated. > > Has anyone else run into this? If to use the checkpassword interface all works correctly: passdb checkpassword { args = /var/qmail/vpopmail/bin/vchkpw } userdb prefetch { }

1 0

[Dovecot] I can't use sql auth
by Toni Panadès 03 Jan '07

03 Jan '07

I need some help. I have compiled dovecot (1.0-rc15) with --with-mysql option, when I execute the binary with --build-options I get this: Build options: ioloop=poll notify=dnotify ipv6 openssl SQL drivers: Passdb: checkpassword passwd passwd-file shadow Userdb: checkpassword passwd prefetch passwd-file static In this case, when I execute dovecot I get this error: dovecot: Jan 03 03:48:47 Error: auth(default): Unknown userdb driver 'sql' (typo, or Dovecot was built without support for it? Check with dovecot --build-options) Well, now I compile with "--with-mysql --with-sql-drivers" and I get this: Build options: ioloop=poll notify=dnotify ipv6 openssl SQL drivers: Passdb: checkpassword passwd passwd-file shadow sql Userdb: checkpassword passwd prefetch passwd-file sql static And now, the error is: dovecot: Jan 03 03:53:21 Error: auth(default): Unknown database driver 'mysql' My dovecont.conf auth section: --------8<--------8<--------8<--------8<--------8<--------8< auth default { mechanisms = plain userdb static { args = uid=8 gid=12 home=/home/vpopmail/domains/%d/%u/Maildir } passdb sql { args = /usr/local/etc/dovecot-sql.conf } userdb sql { args = /usr/local/etc/dovecot-sql.conf } } --------8<--------8<--------8<--------8<--------8<--------8< My dovecot-sql.conf have: --------8<--------8<--------8<--------8<--------8<--------8< driver = mysql connect = host=localhost dbname=mail user=postfix password=secret default_pass_scheme = PLAIN-MD5 password_query = SELECT email as user, crypt as password, maildir as userdb_home, uid as userdb_uid, gid as userdb_gid FROM postfix_users WHERE email = '%u' --------8<--------8<--------8<--------8<--------8<--------8< what's wrong? thanks!

2 2

[Dovecot] Dovecot 1.0-rc15 on Solaris 10
by Steven F Siirila 02 Jan '07

02 Jan '07

We are running Dovecot 1.0-rc15 on Solaris 10 and are starting to ramp up our user count and ran into a file descriptor limit: Jan 1 19:38:54 <hostname> dovecot: IMAP(username): Newly created index file is corrupted: /home/username/.imap/foldername/dovecot.index.tmp Jan 1 19:38:54 <hostname> dovecot: IMAP(username): file mail-index.c: line 1806 (mail_index_move_to_memory): assertion failed: (index->fd == -1) Jan 1 19:38:54 <hostname> dovecot: pipe() failed: Too many open files Jan 1 19:38:54 <hostname> dovecot: Temporary failure in creating login processes, slowing down for now We got around this by calling "ulimit -n 512" and restarting Dovecot. This got us further (upwards of 300 concurrent users), but we are now running into what appears to be a full listen queue (connections are not rejected, but rather slow in being established). What I would like to know is if anyone else out there runs with large numbers of concurrent IMAP sessions via Dovecot and has run into problems. If so, did you have to up your fd limit w/ulimit? Any other issues? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

1 1

[Dovecot] dovecot/vpopmail lastauth
by Rick Romero 02 Jan '07

02 Jan '07

Hi All, I have dovecot working wonderfully on a qmail/vpopmail, but I've noticed my 'lastauth' is never filled in.. If I use vpopmail's pop, and auth to that, then 'lastauth' is updated. It just seems weird that if dovecot is using the vpopmail lib, that lastauth wouldn't be updated. Has anyone else run into this? Thanks Rick

1 0