May 2007 - dovecot - dovecot.org

[Dovecot] dovecot + ldap tls
by aza zel 23 May '07

23 May '07

hi... i trying to have a secure conetion between dovecot and directory server, but i cant do it. The documentation are so poor ( http://wiki.dovecot.org/AuthDatabase/LDAP) these are my configurations files: (pre: i have a directory server accepting secure conections (port 389 via TLS and port 636 via SSL). File "/opt/csw/etc/dovecot-ldap.conf": hosts=100.0.4.98 dn = cn=bindmailusers,cn=mailusers,dc=prueba,dc=uy dnpass =passbindmailUsers tls = yes ldap_version = 3 base= cn=mailUsers,dc=prueba,dc=uy deref = never scope = subtree user_attrs = uidnumber=uidnumber, gidnumber=gidnumber,homedirectory=homedirectory, mailbox=mailbox user_filter = (&(objectClass=mailaccount)(uid=%u)(disableimap=FALSE)) pass_attrs = uid=uid,userpassword=password pass_filter= (&(objectClass=mailaccount)(uid=%u)(disableimap=FALSE)) default_pass_scheme = CRYPT user_global_uid =12356 user_global_gid =12356 File "/opt/csw/etc/openldap/ldap.conf" (openldap client): TLS_REQCERT allow host 100.0.4.98 TLS_CACERT /opt/csw/etc/postfix/ldap-cert/cacert.pem these are my log file: # tail dovecot-log.log : : dovecot: May 22 15:48:31 Error: auth(default): LDAP: ldap_start_tls_s() failed: Can't contact LDAP server any suggest :( -- Salu2 ;)

2 2

[Dovecot] need some help please
by Paul A 23 May '07

23 May '07

We currently had dovecote 99 running and ran into some issues with it, mainly our pop3 sessions timeout and were slow. I upgraded to the latest version and im serving imap with pop3 using pam. Heres my pam file: [root@pop etc]# cat /etc/pam.d/dovecot #%PAM-1.0 auth required pam_unix.so nullok account required pam_unix.so The problem I'm having is I can authenticate to imap, but it's very slow, however pop3 doesn't work at all. I have auth debug set and I can see the imap authentication but not pop3. Here is my config file. ssl_disable: yes login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login mail_location: maildir:/home/%1u/%u/Maildir mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 auth default: debug: yes debug_passwords: yes passdb: driver: pam args: dovecot passdb: driver: passwd userdb: driver: passwd May 21 13:51:15 pop dovecot: imap-login: Login: user=<test>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured May 21 13:51:38 pop dovecot: auth(default): passwd(test,127.0.0.1): lookup May 21 13:51:53 pop dovecot: IMAP(ftest): Disconnected: Logged out May 21 13:51:54 pop dovecot: imap-login: Login: user=<ftest>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured May 21 13:51:54 pop dovecot: auth(default): pam(ftest,127.0.0.1): lookup service=dovecot May 21 13:51:56 pop dovecot: auth(default): client out: OK 1 user=ftest May 21 13:51:56 pop dovecot: auth(default): passwd(ftest,127.0.0.1): lookup May 21 13:51:56 pop dovecot: auth(default): master out: USER 95 ftest system_user=ftest uid=11094 g id=503 home=/home/f/ftest May 21 13:52:18 pop dovecot: auth(default): pam(ftest,127.0.0.1): lookup service=dovecot May 21 13:52:21 pop dovecot: IMAP(ftest): Time just moved backwards by 1 seconds. I'll sleep now until we're back in pre sent. May 21 13:52:21 pop dovecot: imap-login: Login: user=<ftest>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured May 21 13:52:22 pop dovecot: IMAP(ftest): Disconnected: Logged out Using maildir's with pam authentication, I really would appreciate any help.

3 6

[Dovecot] shared folders
by David Obando 23 May '07

23 May '07

Dear all, I would like to use shared folders but I'm not quite sure whether Dovecot supports it the way I want it: -user A should be able to share a folder with users B, C, D -B, C and D should have read-access to this folder Did anyone implement shared folders like this? Regards, David -- The day microsoft makes something that doesn't suck is the day they start making vacuum cleaners. gpg --keyserver pgp.mit.edu --recv-keys 1920BD87 Key fingerprint = 3326 32CE 888B DFF1 DED3 B8D2 105F 29CB 1920 BD87

2 1

[Dovecot] Quota warning message ala courier
by Ralf Hildebrandt 23 May '07

23 May '07

I have to face it, my users are retards: * either they're using crap MUAs which will not display their quota to them * or they're using POP with "leave mail on server" and will never notice their quota, unless it's too late * and once their quota is exceeded, their mails will bounce -- they'll never notice that, though. Thus I need a feature in dovecot that will tell them via email: Level1: "You ALMOST exceeded your quota, you're at 90% now" Level2: "You're very close to exceededin your quota, you're at 95% now" Level3: "Would you please clean up now? You're at 99% now" -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) plonk(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de "Hardware: the parts of a computer that can be kicked." -- Jeff Pesis

4 3

[Dovecot] Quota handling - opportunity for new Feature?
by Charles Marcus 23 May '07

23 May '07

This initial proposal for a Feature Request is the result of my desire to implement quotas, but not have the attendant headaches that inevitably accompany its implementation. Ralf Hildebrandt wrote: > I have to face it, my users are retards: Is there any other kind of user? ;) <snip> > Thus I need a feature in dovecot that will tell them via email: > > Level1: "You ALMOST exceeded your quota, you're at 90% now" > Level2: "You're very close to exceededin your quota, you're at 95% > now" > Level3: "Would you please clean up now? You're at 99% now" What I'd *really* like to see implemented is something along the lines outlined below - but of course, this will depend entirely on whether or not Timo thinks it is doable - or desirable... I know this would only be applicable if also using the dovecot LDA, because what I want to do requires cooperation at both the deliver and pop/imap ends... 1. Have two 'special' user-specific folders (by special, I mean like the Drafts, Sent, Templates folders) that dovecot controls: a) one, that the user has read-only access to and shows up in his folders list, that is used only for system-related messages, like over-quota notices - and maybe even user-specific log-type errors could be delivered here? b) and one (hidden) that the user does *not* have access to, to temporarily hold messages that come in that are unable to be delivered due to an over-quota condition 2. When user is over quota, have LDA deliver to folder b (yes, accept the message for delivery from the sending mta), and then generate an over-quota message that is delivered to folder a. Optionally, a bounce could be generated to the sender, informing them that their message is being 'held in queue' or something to that effect, due to the recipient being over-quota. 3. Once the user deletes enough mail to come back under quota, dovecot would then move messages from the 'over-quota' folder to his Inbox. Ok, am willing to hear reasons how/why this is a terrible idea... :) -- Best regards, Charles Marcus I.T. Director Media Brokers International 678.514.6200 x224 678.514.6299 fax

2 5

[Dovecot] dovecot.pid
by Dehnert James Sr 23 May '07

23 May '07

Can I define where dovecot.pid should be in the config file on 1.0.0? Nothing is being written to /var/run/dovecot, even after I changed the ownership to dovecot. Thanks, Zeke -- James "Zeke" Dehnert mailto:jdehnert@norcalnetworks.com Phone: +1 707.546.6620 x602 Fax: +1 707.324.8043 "Life is racing, everything else is just waiting"

2 1

[Dovecot] dovecot.org moves to a new server
by Timo Sirainen 23 May '07

23 May '07

Parts of dovecot.org will be down for a few hours while I'm moving to a new server (and to a new ISP as well). The new server won't be virtual anymore, so I'm hoping to get a bit better performance from it as well (the old virtual server had some disk I/O hogs). The DNS records have been using 1 hour TTL for last few days, so this move should be fast for everyone. Thanks to Nebula for hosting dovecot.org for the last 7 months. So, beginning the move by shutting down Postfix and Mailman..

4 6

[Dovecot] newbie with dovecot acls needs a little help :-)
by Rachid Zarouali 22 May '07

22 May '07

hy all, i'm trying to make an acl so a local unix user 'sie' can access exalead mboxes. my exalead mboxes are stored in : /opt/exalead/mail/sie/ mailboxes are automatically created every week like sie.2007.W17 for the 17th week of the year. how can i do this ? i've tried several things but none succedded. dovecot version 1.0.rc15 # /etc/dovecot.conf ddIEffective uid=65534, gid=65534 ddILoading modules from directory: /usr/lib64/dovecot/imap ddIModule loaded: /usr/lib64/dovecot/imap/lib01_acl_plugin.so log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-info.log protocols: imap imaps login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_greeting_capability: yes mail_extra_groups: exalead mail_location: mbox:/opt/exalead/mail mail_debug: yes mail_plugins: acl auth default: verbose: yes debug: yes passdb: driver: pam userdb: driver: passwd userdb: driver: prefetch socket: type: listen client: master: path: /var/run/dovecot/auth-master mode: 384 user: exalead group: exalead thanks for your help -- Rachid Zarouali Administrateur Systèmes/Applications AFNIC rachid.zarouali(a)nic.fr 01.39.30.83.47

2 2

[Dovecot] simultaneous access to folder
by David Lee 22 May '07

22 May '07

We have for many years been a UW-IMAP site, with users having their own traditional, private, mbox-format INBOX and folders: almost (but not quite) no complications of shared or simultaneous access. We have just completed a transparent transition to dovecot (official 1.0.0 release). But we have one residual issue affecting one important user account. UW-IMAP specifically only allows single access to "mbox" folders. If different IMAP connections are attempted to such a folder, the latest attempt kills off earlier connections. (That's just the way it works, which was mostly fine for us.) On this particular account we had explicitly set two folders to UW-IMAP's different "mbx" format, so that a group of staff could simultaneously access that folder and delete messages. This is by a single, common, id/pw account. But dovecot doesn't support "mbx" format. Is there a way for us to set up such a group-access folder under dovecot? I've checked wiki pages such as "http://wiki.dovecot.org/SharedMailboxes" but that doesn't seem to be clear on the particular matter of which formats are suitable for such simultaneous access. It talks about different users accessing a folder; in our case it is multiple instances of the the same user. Under dovecot, can we simply let it be "mbox" format? And can dovecot (unlike UW-IMAP) then handle the simultaneous access? [Background: this is just two folders (amongst many) on one username; the overall service successfully handles over 15,000 usernames. And the solution (work-around) will only need to last a few months until that whole account is Exchange-ified (but let's not digress...!)] If I've missed something on the wiki which addresses this matter, point me in the right direction... -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : UNIX Team Leader Durham University : : South Road : : http://www.dur.ac.uk/t.d.lee/ Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. :

2 1

[Dovecot] [PATCH] add some const's
by Andrey Panin 22 May '07

22 May '07

Add some const's. I think patch is self-explaining :) -- Andrey Panin | Linux and UNIX system administrator pazke(a)donpac.ru | PGP key: wwwkeys.pgp.net

2 1