March 2007 - dovecot - dovecot.org

[Dovecot] authenticating with LDAP and SSL
by Nathan Fiedler 19 Mar '07

19 Mar '07

I managed to configure Dovecot to use a local OpenLDAP server to authenticate clients, without using SSL. However, I would rather that LDAP is accessed using SSL, but I cannot get Dovecot to connect. All that I did was change "uris" to "ldaps://localhost", and this appears in the maillog: Mar 18 12:53:00 server dovecot: Dovecot v1.0.rc15 starting up Mar 18 12:53:01 server dovecot: auth(default): ldap_bind((null)) failed: Can't contact LDAP server Is there additional configuration that is needed for SSL? Note that I altered the slapd.conf file from not requiring SSL to requiring SSL when I changed the "uris" parameter. And, of course, accessing the directory using ldapsearch works just fine. It seems that there's only a problem when using SSL, but I don't know how to debug it. Thanks n

4 3

[Dovecot] Kerberos
by forum 18 Mar '07

18 Mar '07

Hey all new to this crack Ok so i have setup kerosene on my server i run mutt and it goes off and gets kerberos key from server I have added teh gssapi to config file but when the key seams to want to authenticate off dovecot it fail anyone help me? Mutt is returning No authentication available Dovecot logs are returning: Mar 18 01:34:31 bandicoot dovecot: auth(default): gssapi(?,MYIPADDRESS): While acquiring service credentials: Miscellaneous failure Mar 18 01:34:31 bandicoot dovecot: auth(default): gssapi(?,MYIPADDRESS): While acquiring service credentials: No principal in keytab matches desired name Mar 18 01:34:34 bandicoot dovecot: imap-login: Aborted login: method=GSSAPI, rip=MYIPADDRESS, lip=MYIPADDRESS, TLS Thanks

3 5

[Dovecot] 1.0.rc27 released
by Timo Sirainen 18 Mar '07

18 Mar '07

http://dovecot.org/releases/dovecot-1.0.rc27.tar.gz http://dovecot.org/releases/dovecot-1.0.rc27.tar.gz.sig A few new small features and lots of index/mbox fixes. I've been heavily stress testing this release, so I think it should be about perfect. :) I think the only thing still missing from v1.0 is documentation. There are some unwritten pages in the wiki, and I still haven't bothered to write the wiki -> doc/*.txt conversion script. The script will probably be pretty easy, but writing the docs can take a while. + mbox and index file code handles silently out of quota/disk space errors (maildir still has problems). They will give the user a "Not enough disk space" error instead of flooding the log file. + Added fsync_disable setting. + mail-log plugin: Log the mailbox name, except if it's INBOX + dovecot-auth: Added a lot more debug logging to passdbs and userdbs + dovecot-auth: Added %c variable which expands to "secured" with SSL/TLS/localhost. + dovecot-auth: Added %m variable which expands to auth mechanism name - maildir++ quota: With ignore=box setting the quota was still updated for the mailbox even though it was allowed to go over quota (but quota recalculation ignored the box). - Index file handling fixes - mbox syncing fixes - Wrong endianess index files still weren't silently rebuilt - IMAP quota plugin: GETQUOTAROOT returned the mailbox name wrong the namespace had a prefix or if its separator was non-default - IMAP: If client was appending multiple messages with MULTIAPPEND and LITERAL+ extensions and one of the appends failed, Dovecot treated the rest of the mail data as IMAP commands. - If mail was sent to client with sendfile() call, we could have hanged the connection. This could happen only if mails were saved with CR+LF linefeeds.

5 7

Re: [Dovecot] Login processes and a new performance/security compromise [was: Re: pre-1.0.rc27: Index and mbox fixes]
by Bill Boebel 18 Mar '07

18 Mar '07

On Sat, March 17, 2007 10:51 pm, Timo Sirainen <tss(a)iki.fi> said: > Oh, and as for when the rewrite is in CVS, I'm not really sure. I'm > still wondering if I should put it there soon and make the release after > v1.0 be v2.0, or if I should first stabilize the current new CVS HEAD > features (which shouldn't take too long), do a v1.2 release and only > then put this code to CVS and make it v2.0.. I vote for first stabilizing the current new CVS HEAD, do a v1.1 release, and then put the ssl rewrite into CVS and plan to make that either v1.2 or v2.0. That way people will start banging on the new features in current CVS HEAD sooner. Bill

2 1

[Dovecot] Connection closed by foreign host.
by tubauwe＠gmx.de 18 Mar '07

18 Mar '07

I installed dovecot on my system using the following configuration (in dovecot.conf): protocols = imap listen = * ssl_disable = yes login_user = nobody login_processes_count = 3 mail_extra_groups = nobody default_mail_env = maildir:/home/%u/Maildir auth default { mechanisms = plain passdb shadow { } userdb passwd { } user = root } After that I tested via telnet an got the message: Connection closed by foreign host. In the log-file I found the following lines: dovecot: Mar 12 22:49:18 Info: Dovecot v1.0.rc15 starting up dovecot: Mar 12 22:51:12 Info: imap-login: Login: user=<username>, method=PLAIN, rip=192.168.??.20, lip=192.168.??.3 dovecot: Mar 12 22:51:12 Error: setmntent(/etc/mtab) failed: No such file or directory dovecot: Mar 12 22:51:12 Error: child 616 (imap) killed with signal 11 Because I'm quite a newbie, I don't know what to do. Therefore I ask here for help. Thank you! -- "Feel free" - 5 GB Mailbox, 50 FreeSMS/Monat ... Jetzt GMX ProMail testen: www.gmx.net/de/go/mailfooter/promail-out

4 4

[Dovecot] M-Box benchmark
by Maykel Moya 18 Mar '07

18 Mar '07

A friend of mine passed me this[1] cause I'm recommending him Dovecot. My personal experience is very different to the one in that benchmark. I will appreciate similar links from those of you who had benchmarked Dovecot against other IMAP servers. I'm conscious that my personal experience is far to be a objetive comparison. I switched from UW-Imap/Mbox to Dovecot/Maildir a box with 45k local users, 3.5MB/s sustained IMAP/POP traffic in work hours. The main performance gain is from mbox -> maildir switching. Anyway the users (and myself) "perceive" a good performance with the new setup. Regards, maykel [1] http://www.isode.com/whitepapers/mbox-benchmark.html

8 13

[Dovecot] pre-1.0.rc27: Index and mbox fixes
by Timo Sirainen 18 Mar '07

18 Mar '07

I've been doing some stress testing in the last few days and fixing all the errors I saw. I'm hoping that I've finally really fixed all the index/mbox problems. So, again I think the only thing left for v1.0 is the documentation. Please test this nightly snapshot before I'll release rc27 tomorrow: http://dovecot.org/nightly/dovecot-latest.tar.gz If you've seen any of the following error messages in log files, these should all be fixed now: - index: Append with UID 56297, but next_uid = 56298 - mbox: UID inserted in the middle of mailbox /home/tss/mail/inbox (45769 > 45768, seq=28, idx_msgs=30) - mbox: Expunged message reappeared in mailbox /home/tss/mail/inbox (UID 86957 < 86958, seq=28, idx_msgs=27) These should be fixed for most cases, but they can still rarely happen: - index: Extension reset without intro prefix There's a really tiny possibility of it still happening with mmap_disable=no, but I think it's practically fixed now. A proper fix would require more changes than I want to do for v1.0 (either support for marking transaction start/end positions or getting rid of the stupid intro prefix completely). - Cached message offset 38340 is invalid for mbox file /home/tss/mail/inbox This should happen only if you're using in-memory indexes or mbox_min_index_size isn't 0. This happens if the mbox file's timestamp and file size are the exact same after some expunges+appends, so the only way to properly fix it would be to wait a second and update the mtime before unlocking the mbox file after expunges. This sleep is actually already done when Dovecot notices that a) mtime and size really are the same after modification and b) mails have been moved around inside the file (ie. flag changes were done but there weren't enough empty space in the mail's own headers so mails had to be moved to get the needed space). Should be pretty rare. Anyway, this error is completely invisible to users and it doesn't have any other side effects that mbox_dirty_syncs doesn't already have. The whole error message could even be removed if it's going to become a problem.. Other changes in the snapshot: + mail-log plugin: Log the mailbox name, except if it's INBOX + dovecot-auth: Added a lot more debug logging passdbs and userdbs + dovecot-auth: Added %c variable which expands to "secured" with SSL/TLS/localhost. + dovecot-auth: Added %m variable which expands to auth mechanism name - Wrong endianess index files still weren't silently rebuilt - IMAP quota plugin: GETQUOTAROOT returned the mailbox name wrong the namespace had a prefix or if its separator was non-default

5 24

[Dovecot] Lazy expunge
by meka＠ns-linux.org 17 Mar '07

17 Mar '07

When I try to use it i get undefined symbol: dlopen(/usr/lib/dovecot/pop3/lib02_lazy_expunge_plugin.so) failed: /usr/lib/dovecot/pop3/lib02_lazy_expunge_plugin.so: undefined symbol: namespace_find_prefix Does anyone has this problem or I've compiled it with too agresive flags? Thanx! PS. I've folowed http://wiki.dovecot.org/Plugins/Lazyexpunge word to word. -- FreeB(eer)S(ex)D(rugs) are the real daemons

3 2

[Dovecot] deliver to subfolder with dovecot's LDA
by Tom Bombadil 17 Mar '07

17 Mar '07

Hi all... How can deliver messages to a subfolder using the LDA? For example, I want a message to joe+spam(a)abc.com to be placed inside the 'spam' subfolder. Any hint is appreciated. Thanks ;)

3 2

[Dovecot] flock problems with index files and passwd-file
by Michal Soltys 17 Mar '07

17 Mar '07

While experimenting a bit, I found that for some reason, locking indexes with flock is problematic, but only if user is taken from passwd-file. The host system is openbsd 3.9, dovecot's configuration is added at the bottom. Authentication is from two places - first from mentioned passwd-file, then from passwd file using bsdauth (in this case, there're no problems with flock). So, if a user is i.e.: test@domain.tld:{plain}test:20000:10::/home/regular/test::userdb_mail=maildir:~/Maildir Then the mail client will timeout (thunderbird in this case), and dovecot will leave following info in the logs: Mar 15 11:13:38 rasengan dovecot: IMAP(test(a)domain.tld): Effective uid=20000, gid=10, home=/home/regular/test Mar 15 11:13:38 rasengan dovecot: IMAP(test(a)domain.tld): maildir: data=~/Maildir Mar 15 11:13:38 rasengan dovecot: IMAP(test(a)domain.tld): maildir: root=~/Maildir, index=~/Maildir, control=, inbox= Mar 15 11:15:38 rasengan dovecot: IMAP(test(a)domain.tld): Timeout while waiting for lock for transaction log file /home/regular/test/Maildir/dovecot.index.log Happens both if in maildir and mbox (userdb_mail=mbox:~/mail:INBOX=/home/regular/test/mbx) cases. Locking through dotlocks or fcntl works well in all situations (passwd-file or not). Dovecot 1.0 rc27 OpenBSD 3.9 (stable), i386 Dovecot config (dovecot -n): # /etc/dovecot.conf base_dir: /var/dovecot/ protocols: imap imaps pop3 pop3s ssl_listen: * ssl_ca_file: /etc/ssl/cert_bundle.pem ssl_cert_file: /etc/ssl/ca_ppgk/certs/fetch_crt.pem ssl_key_file: /etc/ssl/ca_ppgk/private/fetch_key.pem verbose_ssl: yes login_dir: /var/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Dovecot IMAP server ready. login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no valid_chroot_dirs: /var/mail:/home/regular verbose_proctitle: yes first_valid_uid: 1999 first_valid_gid: 10 mail_location: mbox:~/Mail:INBOX=/var/mail/%u mail_debug: yes lock_method: flock maildir_copy_with_hardlinks: yes mbox_read_locks: flock mbox_write_locks: flock mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: verbose: yes debug: yes passdb: driver: passwd-file args: /etc/dovecot.passwd passdb: driver: bsdauth userdb: driver: passwd-file args: /etc/dovecot.passwd userdb: driver: passwd /etc/dovecot.passwd is just a single line: test@domain.tld:{plain}test:20000:10::/home/regular/test::userdb_mail=maildir:~/Maildir

2 5