March 2007 - dovecot - dovecot.org

[Dovecot] rc29 and documentation changes
by Timo Sirainen 28 Mar '07

28 Mar '07

http://dovecot.org/nightly/dovecot-latest.tar.gz Any comments about the doc/wiki/ contents? doc/documentation.txt? dovecot-example.conf's doc/wiki/ pointers? ./autogen.sh now updates the wiki from http://www.dovecot.org/tmp/wiki-export.tar.gz (updated each night) if doc/wiki/Authentication.txt doesn't exist. I guess I'll release rc29 tomorrow. The current changes are: + Added auth_gssapi_hostname setting. - IMAP: LIST "" "" didn't return anything if there didn't exist a namespace with empty prefix. This broke some clients. - If Dovecot is tried to be started when it's already running, don't delete existing auth sockets and break the running Dovecot - If deliver failed too early it still returned exit code 89 instead of EX_TEMPFAIL. - deliver: INBOX fallbacking with -n parameter wasn't working. - passdb passwd and shadow couldn't be used as master or deny databases - IDLE: inotify didn't notice changes in mbox file - If index file directory couldn't be created, disable indexes instead of failing to open the mailbox. - Several other minor fixes

1 0

[Dovecot] MANAGESIEVE patch v3 for dovecot 1.0.rc28
by Stephan Bosch 28 Mar '07

28 Mar '07

Hello dovecot users, I have updated the MANAGESIEVE patch to apply and compile against dovecot 1.0.rc28. Not much has changed with respect to the functionality of the previous version however: ChangeLog vs v2 - Updated source to compile with dovecot 1.0.rc28, tested with rc27 (debian package) - Daemon now uses the same location for .dovecot.sieve as dovecot-lda This is typically ~/.dovecot.sieve. - If .dovecot.sieve is a regular file, it is now moved into the script storage as dovecot.orig.sieve, preventing deletion of (important) active scripts upon managesieve installation. Otherwise, it would simply be replaced by a symlink to the new active script. - Changed error handling to yield a BYE message when the managesieve daemon exits unexpectedly (upon login) before any commands are entered. Horde-ingo would wait indefinitely for a response. This patch still includes (yet another) instance of the CMU Sieve source, as explained in my previous mail (http://dovecot.org/list/dovecot/2006-July/015016.html) It can be downloaded at: http://sinas.rename-it.nl/~sirius/dovecot-1.0.rc28-MANAGESIEVE-v3.diff.gz Have fun testing the patch. Notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl IRC: Freenode, #dovecot, S[r]us

10 20

[Dovecot] gssapi auth issue...
by Dan Price 28 Mar '07

28 Mar '07

Hi all-- been away from the list for a few weeks so forgive me if this problem has been reported-- with the help of some of our Kerberos engineers, we tracked down why we can't authenticate our Solaris kerberos clients to Dovecot. Here's the deal: Our IT organization issued us kerberos tickets of the form imap(a)foobar.sfbay.sun.com Which I presume is their standard-- and probably not negotiable. However, the hostname of the machine is: "foobar", not foobar.sfbay.sun.com (as reported by gethostname(3c)). So when dovecot does this: mech-gssapi.c: principal_name = t_str_new(128); str_append(principal_name, service_name); str_append_c(principal_name, '@'); ---> str_append(principal_name, my_hostname); We wind up asking kerberos to look for a ticket for imap@foobar, instead of imap(a)foobar.sfbay.sun.com. Obviously we can patch the source, but I was wondering if we could have a gssapi_hostname setting in the config file? Or perhaps we could have a knob letting us globally override my_hostname? Although I don't know what side effects that could have. We have some new cores I also need to report-- I'll get on that. Thanks in advance, -dp -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

3 2

[Dovecot] Custom Mail Directory for some users
by Patrick Kranz 27 Mar '07

27 Mar '07

Hi list, I'm new on this mailing list and I'm kind of stucked at the moment. I managed to get Postfix and Dovecot working together with Amavis, OpenLDAP und SASL on Ubuntu Linux Release "Dapper Drake". The Dovecot version shipped with Dapper is 1.0-beta3 (at least, that's what the package database tells me), I also tried this with a Debian Backport of version 1.0-rc15. And here is my problem: A customer of mine needs usernames different from the mail address for his third party software to work. In other words, I need the ability to login with the username foo to get access to the mailbox bar(a)example.com. So I tried to override the mail_location property for this user with a separate mailDirectory attribute in my LDAP tree. Speaking in dovecot.conf words: mail_location = maildir:/var/spool/dovecot/mail/%d/%n auth default { machanisms = plain passdb ldap { args = /etc/dovecot/dovecot-ldap.com } userdb ldap { args = /etc/dovecot/dovecot-ldap.com } userdb static { args = uid=vmail gid=vmail user = dovecot } and dovecot-ldap.conf: hosts = localhost dn = cn=admin,dc=ekits,dc=de dnpass = secret auth_bind = yes ldap_version = 3 base = ou=mailsystem,dc=ekits,dc=de scope = subtree user_attrs = mailDirectory=mail user_filter = (&(objectClass=ekitsMailAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=ekitsMailAccount)(uid=%u)) user_global_uid = vmail user_global_gid = vmail a typical ldap entry looks something like this: dn: cn=Patrick Kranz,o=EK IT-Solutions,ou=mailsystem,dc=ekits,dc=de ekitsMailDestination: patrick(a)ekits.de objectClass: ekitsMailAccount objectClass: top cn: Patrick Kranz structuralObjectClass: ekitsMailAccount entryUUID: b4ebb9e8-6d8d-102b-9dc9-9edb870845a4 creatorsName: cn=admin,dc=ekits,dc=de createTimestamp: 20070323132526Z userPassword:: YVBhc3M= mailDirectory: maildir:/var/spool/dovecot/mail/ekits.de/blubb uid: patrick As far as I can interpret the log of slapd, dovecot doesn't even ask for the attribute "mailDirectory". I also tried this with userdb prefetch. With this it did actually ask for the attribute but it still had no effect. With this configuration dovecot creates the directory /var/spool/spool/dovecot/mail/patrick if I login with the uid patrick but I wanted access to /var/spool/dovecot/mail/ekits.de/blubb If anybody has any clue what I did wrong or if I have a conceptional misunderstanding, I would appreciate every help. Thanks in advance. Greetings, Patrick

3 4

[Dovecot] recent master-settings.c and main.c changes breaks dovecot on my system
by Daniel 27 Mar '07

27 Mar '07

Hi! Compiled the latest cvs today, and noticed the changes in src/master/main.c and master-settings.c. With the versions 1.80.2.19 and 1.125.2.28 (respectively) I can not start dovecot, because it says: Fatal: dup2(stdin) failed: Bad file descriptor Error: imap dump-capability process returned 89 After reverting the patch: http://www.dovecot.org/list/dovecot-cvs/2007-March/008371.html everything is back to normal. My system is OpenBSD 4.0 and dovecot is recent cvs. Daniel

2 1

[Dovecot] Coredump in dovecot-auth on gss auth
by Dan Price 27 Mar '07

27 Mar '07

I've enabled the GSS code in dovecot, but our Kerberos nerds are complaining that it doesn't work :) I probably have the thing totally misconfigured (so don't worry about that part for now), but I do have a crash: Info: imap-login: Disconnected: rip=XXX.YYY.229.8, lip= XXX.YYY.17.59, TLS handshake Error: auth(default): gssapi(?,XXX.YYY.229.8): While acquiring service credentials: No credentials were supplied, or the credentials were unavailable or inaccessible Error: auth(default): gssapi(?,XXX.YYY.229.8): While acquiring service credentials: No principal in keytab matches desired name Info: imap-login: Disconnected: method=GSSAPI, rip=129.146.229.8, lip=XXX.YYY.17.59 Error: child 188558 (auth) killed with signal 11 Info: imap-login: Disconnected: method=PLAIN, rip=129.146.229.8, lip=XXX.YYY.17.59 The dovecot auth process SIGSEGV's and dies at login time (I think). Here's the backtrace: (gdb) bt full #0 0xfef25e1a in gss_release_name () from /usr/lib/libgss.so.1 No symbol table info available. #1 0x08064ccf in mech_gssapi_auth_free (request=0xfef3c000) at mech-gssapi.c:394 minor_status = 0 #2 0x08060551 in auth_request_handler_flush_failures () at auth-request-handler.c:493 auth_request = (struct auth_request **) 0x8047b5c i = 1 size = 1 __PRETTY_FUNCTION__ = "auth_request_handler_flush_failures" #3 0x0806f54a in io_loop_handle_timeouts (ioloop=0x8096f78) at ioloop.c:276 t = (struct timeout *) 0x8098048 called_timeouts = (struct timeout *) 0x8098048 tv = {tv_sec = 134852200, tv_usec = 0} t_id = 2 #4 0x0806fb42 in io_loop_handler_run (ioloop=0x8096f78) at ioloop-poll.c:159 ctx = (struct ioloop_handler_context *) 0x8096fb0 pollfd = (struct pollfd *) 0x8096f78 tv = {tv_sec = 0, tv_usec = 0} io = (struct io *) 0x8047f99 t_id = 134836088 msecs = 134894204 ret = 0 call = true #5 0x0806f65d in io_loop_run (ioloop=0x8096f78) at ioloop.c:311 No locals. #6 0x08062bb2 in main (argc=1, argv=0x809ae68) at main.c:321 foreground = false Thanks, -dp -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

3 2

[Dovecot] Sync of read message status between squirrelmail and outlook express
by Mohd Ikhwan Abdullah 27 Mar '07

27 Mar '07

Hi, We have a Linux email server running CentOS 4.4. I have a scenario here. The users here use a mixture of outlook express and squirrel mail as their email client. The users download their mail into outlook express via pop3 but the have configured outlook express to leave a copy on the server for 7 days. 1. After downloading the mail into outlook express the users would read the mail and the mail would be set as 'READ' in outlook express. 2. Is there a way to configure dovecot so that the 'READ' status in outlook express is reflected on the message still stored on the server as well. Cause when they access via squirrel mail the message is still mark as 'UNREAD'. Any suggestions is very much appreciated. Thanks in advance.

3 3

[Dovecot] compiling dovecot on aix gcc 3.3.2
by funkypunky drunky 27 Mar '07

27 Mar '07

I try to compile the dovecot with gcc version 3.3.2 on aix. It seemed it was okay. It was working but when i try to use quota dynamic modules i get error. Edlopen(/usr/local/lib/dovecot/imap/lib10_quota_plugin.so) failed: Could not load module /usr/local/lib/dovecot/imap/lib10_quota_plugin.so. System error: No such file or directory Error: imap dump-capability process returned 89 When i check the /usr/local/lib/dovecot/imap/lib10_quota_plugin.so i see that it is a link which is pointing /usr/local/lib/dovecot/lib10_quota_plugin.so . But there is no lib10_quota_plugin.so . I try compiling it on linux debian. I see that lib10_quota_plugin.so in it is proper place. I dont know what to do. Did i something wrong? I need help Best regards

4 9

[Dovecot] LDA bouncing mails after upgrade
by Milan Holzäpfel 27 Mar '07

27 Mar '07

Hello, on my system, I have a copy of /usr/libexec/dovecot/deliver located in /usr/libexec/dovecot/postfix-deliver/deliver (only accessible to postfix and with SUID root permissions). If I happen to forget to update this copy after an upgrade of dovecot, the deliver LDA bounces mails: | Mar 22 20:29:20 host.example.org deliver(user(a)example.org): Module is for different version 1.0.rc27: /usr/lib/dovecot/lda/lib10_quota_plugin.so | Mar 22 20:29:20 host.example.org postfix/pipe[17344]: <ID>: to=<user(a)example.org>, relay=dovecot, delay=1.9, delays=1.5/0/0/0.35, dsn=5.3.0, status=bounced (Command died with status 89: "/usr/libexec/dovecot/postfix-deliver/deliver") Should I just set version_ignore=yes and remember myself to upgrade it, or could deliver return a code signaling "temporary failure", or should I rather make postfix interpret 89 as temporary failure? (don't know by heart whether that's possible). Regards, Milan -- Milan Holzaepfel <mail(a)mjh(d)name> <URL:http://mjh.name/> pub 4096R/C790FC23 EB8E 5E81 81E3 53A9 9B74 B895 5179 54C0 C790 FC23

4 3

[Dovecot] Odd error message
by Steven F Siirila 27 Mar '07

27 Mar '07

We are running Dovecot 1.0-rc27 and have run across what seems to be a fatal error (SIGSEGV) in the past few days (4 times total in past 6 days). It appears to have been 5 separate users, 5 separate remote IP addresses. Two of these have this format: Mar 26 15:13:10 myhostname dovecot: imap-login: Authenticate PLAIN failed: Don't send unrequested data: user=<rmtuser>, method=PLAIN, rip=10.9.9.9, lip=10.1.1.1, TLS The other three have this format: Mar 26 09:41:45 myhostname dovecot: imap-login: Authenticate PLAIN failed: Don't send unrequested data: method=PLAIN, rip=10.9.9.9, lip=10.1.1.1, TLS Here's the first one a bit more expanded, showing the SIGSEGV (signal 11): Mar 26 15:13:10 myhostname dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=10.1.1.1 rip=10.9.9.9 Mar 26 15:13:10 myhostname dovecot: auth(default): client out: CONT 1 Mar 26 15:13:10 myhostname dovecot: auth(default): client in: CONT<hidden> Mar 26 15:13:10 myhostname dovecot: auth(default): pam(rmtuser,10.9.9.9): lookup service=IMAP Mar 26 15:13:10 myhostname dovecot: auth(default): client out: OK 1 user=rmtuser Mar 26 15:13:10 myhostname dovecot: auth(default): master in: REQUEST 675645 3333 1 Mar 26 15:13:10 myhostname dovecot: auth(default): passwd(rmtuser,10.9.9.9): lookup Mar 26 15:13:10 myhostname dovecot: auth(default): master out: USER 675645 rmtuser system_user=rmtuser uid=99999 gid=9999 home=/home/r/rmtuser Mar 26 15:13:10 myhostname dovecot: imap-login: Authenticate PLAIN failed: Don't send unrequested data: user=<rmtuser>, method=PLAIN, rip=10.9.9.9, lip=10.1.1.1, TLS Mar 26 15:13:10 myhostname dovecot: imap-login: Disconnected: user=<rmtuser>, method=PLAIN, rip=10.9.9.9, lip=10.1.1.1, TLS Mar 26 15:13:10 myhostname dovecot: child 3333 (login) killed with signal 11 What can I do to further diagnose this problem? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 1