August 2007 - dovecot

[Dovecot] Latest 1.1 tree build failure
by David Favor 07 Aug '07

07 Aug '07

Suggestions of how to fix this? mkdir -p /build/work/dovecot-1.1-alpha1 cd /build/work/dovecot-1.1-alpha1 export LDFLAGS='-L/common/pkgs/sqlite-3.4.1.1/lib64 -R/common/pkgs/sqlite-3.4.1.1/lib64' export CPPFLAGS='-pipe -O2 -I/common/pkgs/sqlite-3.4.1.1/include' unset CDPATH make distclean ./configure --prefix=/common/pkgs/dovecot-1.1-alpha1 --disable-nls --disable-ipv6 --with-db --with-sql=plugin --with-sqlite --with-mysql --with-postgresql --with-ssl=openssl --with-ssldir=/etc/pki/dovecot --with-notify=inotify --with-ioloop=epoll --without-vpopmail --with-ldap=plugin --without-gssapi make ... ... ... mv -f .deps/auth-master-listener.Tpo .deps/auth-master-listener.Po make[3]: *** No rule to make target `auth-module.o', needed by `dovecot-auth'. Stop. make[3]: Leaving directory `/build/work/dovecot-1.1-alpha1/src/auth' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/build/work/dovecot-1.1-alpha1/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/build/work/dovecot-1.1-alpha1' make: *** [all] Error 2 exp=0, got ec=2, abort=1 -- Like feeling your best ever, all day, every day? Email join(a)RadicalHealth.com for the easy way.

2 2

[Dovecot] dovecot + LDAP-SASL ?
by Hadmut Danisch 07 Aug '07

07 Aug '07

Hi, just a question: I know that dovecot supports SASL authentication and supports LDAP. Which means that dovecot performs the SASL methods itself and stores the plaintext secret on LDAP. But it is also possible to have the LDAP do the SASL work and dovecot just pass SASL messages through? Even when the LDAP server uses a proprietary SASL method not supported by dovecot? regards Hadmut

3 3

[Dovecot] Ideas for Webmail/OTP
by Frank Behrens 07 Aug '07

07 Aug '07

I want to discuss some problems/enhancements for dovecot in a webmail/otp setup. For access to an IMAP server like dovecot I see different client types: a) a "normal" MUA installed in a more or less trusted environment b) remote access via "webmail" from untrusted environments For a) I see with dovecot and other IMAP servers no problems, tricky is the setup for b). If you use a webmail client in an untrusted environment the risk is high, that keyloggers and other malware steal your password. One easy solution is to use One-Time-Passwords (OTP). The otp setup for interactive logins (e.g. ssh) is easy, but until now I did not find any easy to use solution for webmail. The main problems I see - In most cases a webmail client does not hold a persistent connection to the IMAP server, but makes a login for every request. - The webmail clients are not prepared to display the otp password challenge to the user. When we say "otp" with IMAP we further have to distinguish a) the OTP SASL authentication mechanism b) OTP configured by PAM. I believe a) is implemented in new dovecot 1.1 version, but I prefer b), because - it works with many clients without special client support - all authentication setup is central in the os. All above described problems are not specially linked to dovecot, but I believe with dovecot there is an easy solution to solve them. :-) Solution 1: When PAM is configured for IMAP the user can use a one-time-password in the same way as before. The problem is, that the user must know the sequence number for the password (otp challenge), so we need a way to display it. The PAM module supplies the otp challenge in the conversation function, but the challenge is not processed by the IMAP server. My proposal: The IMAP server stores the challenge from the conversation function and includes it in the LOGIN response, when the login was not successful. So a user can try a login with a wrong dummy password and get knowlegdge about the current otp sequence. The webmail server should be extended in a way, that it displays the complete IMAP error message, when a login fails. Solution 2: Webmail clients do not use persistent connections in most cases. A OTP login needs different passwords for every displayed web page. My proposal: Use dovecot's login cache and do not ask the os for every login. :-) Solution 3: When we configure PAM we can restrict/allow it's use depending on IP address of client. Unfortunately with a webmail client the IMAP client is always the the webserver. It should be possible, that the webserver forwards the client IP address to the IMAP server. Furthermore to use dovecot's login cache as described above in a safe manner, the IP address should be compared, too. My proposal: Create a new IMAP command "XSETREMOTEIP". With this IMAP extension a client can set the real IP address of remote client. The access to this command is restricted to the webserver with a new configuration parameter "trusted clients", which holds an IP address with mask. I ask to discuss these solutions. It seems to work, I'm making the first tests now. I have patches for dovecot and squirrelmail, but they are very "quick and dirty". They show a possible solution, but not a clean implementation. Do you believe, that we can build a good webmail system this way, or do you have better solutions? Regards, Frank -- Frank Behrens, Osterwieck, Germany PGP-key 0x5B7C47ED on public servers available.

7 19

[Dovecot] A few dovecot 1.1 bugs - sort, flag reset and etc.
by wenjie zheng 07 Aug '07

07 Aug '07

I installed dovecot 1.1 on our system yesterday, and found a few bugs so far. Here is the list: BUG #1: can't access some folders Details: a select "RSS.A List Apart" * FLAGS (\Answered \Flagged \Deleted \Seen \Draft $$$INDEXED###) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft $$$INDEXED### \*)] Flags permitted. * 52 EXISTS * 0 RECENT * OK [UNSEEN 50] First unseen. * OK [UIDVALIDITY 1166644056] UIDs valid * OK [UIDNEXT 65] Predicted next UID a OK [READ-WRITE] Select completed. a SORT (DATE) UTF-8 UNSEEN imap(jing(a)webmail.us <javascript:void(0);>): Panic: file mail-cache-lookup.c: line 70: unreached imap(jing(a)webmail.us <javascript:void(0);>): Error: Raw backtrace: /usr/libexec/dovecot/imap [0x80be647] -> /usr/libexec/dovecot/imap [0x80be82f] -> /usr/libexec/dovecot/imap [0x809849b] -> /usr/libexec/dovecot/imap(mail_cache_lookup_iter_init+0x6c) [0x809857c] -> /usr/libexec/dovecot/imap(mail_cache_lookup_headers+0xf7) [0x8098c77] -> /usr/libexec/dovecot/imap [0x8091ac7] -> /usr/libexec/dovecot/imap(index_mail_get_first_header+0x17) [0x8091dff] -> /usr/libexec/dovecot/imap(mail_get_first_header+0x12) [0x80b054a] -> /usr/libexec/dovecot/imap [0x8093b5a] -> /usr/libexec/dovecot/imap [0x8093cee] -> /usr/libexec/dovecot/imap [0x8093eff] -> /usr/libexec/dovecot/imap(bsearch_insert_pos+0x40) [0x80bd794] -> /usr/libexec/dovecot/imap [0x8094660] -> /usr/libexec/dovecot/imap [0x8094759] -> /usr/libexec/dovecot/imap(index_sort_list_finish+0x2f) [0x8094a27] -> /usr/libexec/dovecot/imap(index_storage_search_next_nonblock+0x119) [0x8093819] -> /usr/libexec/dovecot/imap(mailbox_search_next_nonblock+0x17) [0x80b21f3] -> /usr/libexec/dovecot/imap(mailbox_search_next+0x1d) [0x80b21c5] -> /usr/libexec/dovecot/imap(imap_sort+0xb5) [0x8064529] -> /usr/libexec/dovecot/imap(cmd_sort+0x10e) [0x805e356] -> /usr/libexec/dovecot/imap [0x805fe82] -> /usr/libexec/dovecot/imap [0x805fda1] -> /usr/libexec/dovecot/imap [0x805ff11] -> /usr/libexec/dovecot/imap(_client_input+0x56) [0x805ffce] -> /usr/libexec/dovecot/imap(io_loop_handler_run+0x100) [0x80c3e38] -> /usr/libexec/dovecot/imap(io_loop_run+0x2d) [0x8069339] -> /usr/libexec/dovecot/imap(main+0x64) [0x8068d30] -> /lib/tls/libc.so.6(__libc_start_main+0xda) [0x73978a] Program received signal SIGABRT, Aborted. 0x0074bcdf in raise () from /lib/tls/libc.so.6 (gdb) bt full #0 0x0074bcdf in raise () from /lib/tls/libc.so.6 No symbol table info available. #1 0x0074d4e5 in abort () from /lib/tls/libc.so.6 No symbol table info available. #2 0x080be666 in default_panic_handler (format=0x80cdbdd "file %s: line %d: unreached", args=0xbfff9cb4 "MP\r\bF") at failures.c:136 backtrace = 0x8d2ac38 "/usr/libexec/dovecot/imap [0x80be647] -> /usr/libexec/dovecot/imap [0x80be82f] -> /usr/libexec/dovecot/imap [0x809849b] -> /usr/libexec/dovecot/imap(mail_cache_lookup_iter_init+0x6c) [0x809857c] -> /u"... #3 0x080be82f in i_panic (format=0x80cdbdd "file %s: line %d: unreached") at failures.c:213 No locals. #4 0x0809849b in mail_cache_lookup_offset (cache=0x8d4a9b8, view=0x8d4d460, seq=18, offset_r=0x0) at mail-cache-lookup.c:70 map = (struct mail_index_map *) 0x8d4a898 data = (const void *) 0x8d4f4a4 idx = 148024040 i = -1073767072 ret = 0 #5 0x0809857c in mail_cache_lookup_iter_init (view=0x8d4d558, seq=18, ctx_r=0xbfff9d60) at mail-cache-lookup.c:125 ctx = (struct mail_cache_lookup_iterate_ctx *) 0xbfff9d60 ret = 0 #6 0x08098c77 in mail_cache_lookup_headers (view=0x8d4d558, dest=0x8d52038, seq=18, field_idxs=0xbfff9de4, fields_count=1) at mail-cache-lookup.c:470 cache = (struct mail_cache *) 0x8d4a9b8 iter = {view = 0x8d4d558, remap_counter = 0, seq = 18, rec = 0x0, pos = 0, rec_size = 0, offset = 0, stop = 0, failed = 0, appends_checked = 0} field = {field_idx = 12, data = 0x8d4dbc0, size = 0} ctx = {view = 0x8d4d558, lines = {arr = {buffer = 0x8d2aae8, element_size = 8}, v = 0x8d2aae8, v_modifiable = 0x8d2aae8}} lines = (struct header_lookup_line *) 0x1 p = (const unsigned char *) 0x0 start = (const unsigned char *) 0xbfff9d60 "XÕÔ\b" end = (const unsigned char *) 0x42a5 <Address 0x42a5 out of bounds> field_state = (uint8_t *) 0x8d2aab8 "" i = 1 max_field = 10 hdr_size = 3221200208 want = 1 '\001' buf = (buffer_t *) 0xbfff9d50 ret = 0 #7 0x08091ac7 in index_mail_get_raw_headers (mail=0x8d3d3b8, field=0x80ce56b "Subject") at index-mail-headers.c:568 headers = {0xbfff9e18 "8\236ÿ¿J\005\v\b¸ÓÓ\bkå\f\b", 0x809059c "\213\216(\001"} value = 0x0 headers_ctx = (struct mailbox_header_lookup_ctx *) 0x8d3d3b8 data = (unsigned char *) 0x8d4b1a8 "h³Ô\b *Ó\b\224X\t\b¬X\t\bÐ\200\006\b\204Å\006\b°2\a\b¤3\a\büÇ\006\bÌÈ\006\bTÉ\006\b" field_idx = 10 dest = (string_t *) 0x8d52038 i = 148100024 len = 148100132 ret = 148156840 header_values = {arr = {buffer = 0xac, element_size = 3221200392}, v = 0xac, v_modifiable = 0xac} #8 0x08091dff in index_mail_get_first_header (_mail=0x8d3d3b8, field=0x80ce56b "Subject", decode_to_utf8=false) at index-mail-headers.c:673 list = (const char * const *) 0x6 #9 0x080b054a in mail_get_first_header (mail=0x0, field=0x80ce56b "Subject") at mail.c:96 No locals. #10 0x08093b5a in sort_header_get (sort_type=MAIL_SORT_SUBJECT, mail=0x8d3d3b8, seq=18) at index-sort.c:180 str = 0x8d3d3b8 "¨±Ô\b8ÇÔ\b\022" buf = (string_t *) 0x20 #11 0x08093cee in sort_node_cmp_type (ctx=0x80e62e0, sort_program=0x8d3d334, n1=0xbfff9f20, n2=0x8d3d850) at index-sort.c:223 sort_type = MAIL_SORT_SUBJECT str1 = 0x8d2aa50 "NEVER USE A WARNING WHEN YOU MEAN UNDO" str2 = 0x0 time1 = 32 time2 = 6 size1 = 148023856 size2 = 73276437037062 ret = 148023888 #12 0x08093eff in sort_node_cmp_no_sort_id (p1=0xbfff9f20, p2=0x8d3d850) at index-sort.c:309 No locals. ---Type <return> to continue, or q <return> to quit--- #13 0x080bd794 in bsearch_insert_pos (key=0xbfff9f20, base=0x8d3d798, nmemb=46, size=8, cmp=0x8093ee0 <sort_node_cmp_no_sort_id>, idx_r=0xbfff9f1c) at bsearch-insert-pos.c:20 p = (const void *) 0x0 idx = 23 left_idx = 0 right_idx = 46 ret = 0 #14 0x08094660 in index_sort_headers (program=0x8d3d330, last_seq=52) at index-sort.c:590 node = {seq = 47, sort_id = 0} count = 46 idx = 15 #15 0x08094759 in index_sort_build (program=0x8d3d330, last_seq=52) at index-sort.c:637 ibox = (struct index_mailbox *) 0x8d4b1a8 node = {seq = 1, sort_id = 0} data = (const void *) 0x0 i = 6 #16 0x08094a27 in index_sort_list_finish (program=0x8d3d330) at index-sort.c:743 No locals. #17 0x08093819 in index_storage_search_next_nonblock (_ctx=0x8d3d2c8, mail=0x8d50440, tryagain_r=0xbfffa01b) at index-search.c:1058 box = (struct mailbox *) 0x8d4b1a8 count = 12 ret = 0 #18 0x080b21f3 in mailbox_search_next_nonblock (ctx=0x6, mail=0x8d50440, tryagain_r=0xbfffa01b) at mail-storage.c:598 No locals. #19 0x080b21c5 in mailbox_search_next (ctx=0x8d3d2c8, mail=0x8d50440) at mail-storage.c:589 tryagain = false ret = 0 #20 0x08064529 in imap_sort (cmd=0x8d35f40, charset=0x8d3a2e0 "UTF-8", args=0x8d4b7b0, sort_program=0x8d292c0) at imap-sort.c:90 client = (struct client *) 0x8d345d0 wanted_headers = {0x80ce56b "Subject", 0x0} wanted_fields = 0 search_ctx = (struct mail_search_context *) 0x8d3d2c8 t = (struct mailbox_transaction_context *) 0x8d4c738 headers_ctx = (struct mailbox_header_lookup_ctx *) 0x8d3c9b0 mail = (struct mail *) 0x8d50440 str = (string_t *) 0x8d292c0 written = false ret = 148070208 #21 0x0805e356 in cmd_sort (cmd=0x8d35f40) at cmd-sort.c:134 client = (struct client *) 0x8d345d0 sargs = (struct mail_search_arg *) 0x0 sorting = {MAIL_SORT_SUBJECT, MAIL_SORT_END, 3221201096, 7656935, 148070264, 135062878, 20, 18} args = (const struct imap_arg *) 0x8d3a1e8 args_count = 0 pool = 0x8d4b798 error = 0x0 charset = 0x8d3a2e0 "UTF-8" #22 0x0805fe82 in client_command_input (cmd=0x8d35f40) at client.c:488 client = (struct client *) 0x8d345d0 #23 0x0805fda1 in client_command_input (cmd=0x8d35f40) at client.c:545 client = (struct client *) 0x8d345d0 #24 0x0805ff11 in client_handle_next_command (client=0x8d345d0) at client.c:556 size = 27 #25 0x0805ffce in _client_input (client=0x8d345d0) at client.c:616 cmd = (struct client_command_context *) 0x2 ret = 2 #26 0x080c3e38 in io_loop_handler_run (ioloop=0x8d31a68) at ioloop-poll.c:200 ctx = (struct ioloop_handler_context *) 0x8d31aa8 pollfd = (struct pollfd *) 0x2 tv = {tv_sec = 4, tv_usec = 199377} io = (struct io_file *) 0x8d340c8 t_id = 2 msecs = 0 ret = 0 ---Type <return> to continue, or q <return> to quit--- call = 165 #27 0x08069339 in io_loop_run (ioloop=0x8d31a68) at ../../src/lib/ioloop.c:351 No locals. #28 0x08068d30 in main (argc=1, argv=0xbfffa264, envp=0xbfffa26c) at main.c:301 No locals. BUG #2: Some flags are reset after they were set a while ago, like messages that has been read are randomly becoming unread again. Bug #3: CRLF in the email file on disk is shown like "=0A", which causes display problem in wireless access. =0A =0A =0A =0A =0AHey all, =0A=C2=A0 Thanks, Wenjie

3 3

[Dovecot] Subfolders
by Azher Amin 07 Aug '07

07 Aug '07

Hi, Does dovecot supports sub folders ?? I tried creating a subfolder for a folder under the main tree .... Thunderbird allows you creating but doesn't show up ... Plz suggest how it can be enabled. Regards -Azher -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

5 5

[Dovecot] [PATCH] Split sql drivers from lib-sql to plugins
by Tomas Janousek 07 Aug '07

07 Aug '07

Hi, in order to solve rhbz#170960 [1], I split the sql drivers to plugins so that they are loaded dynamically and can be split to separate packages. [1] https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170960 The patches are here: [2] http://people.redhat.com/tjanouse/dovecot/145241/dovecot-1.0-split.patch [3] http://people.redhat.com/tjanouse/dovecot/145241/dovecot-trunk-split.patch (mv src/lib-sql/driver-mysql.c src/plugins/sql-mysql/, etc., afterwards) I'd like to ask for your comments and whether it's ok for inclusion or at least ok to use in the Fedora package. Regards, -- Tomas Janousek, SW Engineer, Red Hat, Inc.

2 6

[Dovecot] cache questions
by Daniel Watts 06 Aug '07

06 Aug '07

Hi Guys, We have: auth_cache_size = 2048 #Kb auth_cache_ttl = 900 #life of the cache Seems to work well (though haven't tried looking at stats). Only problem is that every so often, one of our new users tries to log in quickly before the account is marked (in a db) as 'active'. They use the right password but the sql query fails because the active flag is not yet set. This results in their trying to log in and failing for 15 minutes (900 seconds) until the cache clears. Is this dovecot caching negative results? Is this a good idea and can it be disabled? Some more questions: 1. Is the expire time on a per-login basis or for the entire cache? If someone logs in 14 minutes after the last expiry is their data cached for just 1 minute? 2. If it is per-login, is the time reset after every hit? If someone is using webmail and hitting the cache every 5 minutes, will the cache keep the information? 3. How does the cache size relate to number of distinct logins? Roughly how many auth datasets cached per 1MB of cache? Thanks! Daniel tg3 dovecot # dovecot --version 1.0.rc27 p.s. please CC my email so I know when this has been replied to. I will respond to group!

2 4

[Dovecot] dovecot-1.1-alpha1 prefetch appears broken
by David Favor 06 Aug '07

06 Aug '07

Config shows... # 1.1.alpha1: /usr/local/conf/dovecot.conf protocols: imaps ssl_listen: 69.94.137.124:10943 login_dir: /common/pkgs/dovecot-1.1-alpha1/var/run/dovecot/login login_executable: /common/pkgs/dovecot-1.1-alpha1/libexec/dovecot/imap-login mail_debug: yes auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /usr/local/conf/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /usr/local/conf/dovecot-sql.conf Log shows... auth(default): client in: AUTH 1 PLAIN service=imap secured lip=69.94.137.124 rip=71.155.185.14 auth(default): client out: CONT 1 auth(default): client in: CONT 1 AGRvZGExAGZpcmUyM2JyaWNr auth-worker(default): sql(doda1,71.155.185.14): query: SELECT password, home AS userdb_home,\ uid AS userdb_uid, gid AS userdb_gid FROM users WHERE user = 'doda1' auth(default): client out: OK 1 user=doda1 auth(default): master in: REQUEST 1 12491 1 auth(default): prefetch(doda1,71.155.185.14): passdb didn't return userdb entries auth-worker(default): sql(doda1,71.155.185.14): SELECT home, uid, gid FROM users WHERE \ user = 'doda1' auth(default): master out: USER 1 doda1 \ home=/common/vhost/coolsurf.com/users/david uid=503 gid=501 imap-login: Login: user=<doda1>, method=PLAIN, rip=71.155.185.14, lip=69.94.137.124, TLS IMAP(doda1): Effective uid=503, gid=501, home=/common/vhost/coolsurf.com/users/david IMAP(doda1): maildir: root exists (/common/vhost/coolsurf.com/users/david/Maildir) IMAP(doda1): maildir++: root=/common/vhost/coolsurf.com/users/david/Maildir, index=,\ control=, inbox=/common/vhost/coolsurf.com/users/david/Maildir The passdb query returns expected data directly from sqlite and apparently (from the logs) to dovecot also. Problem is dovecot seems to be missing all the data returned as userdb_* field names. Suggestions? -- Like feeling your best ever, all day, every day? Email join(a)RadicalHealth.com for the easy way.

2 1

[Dovecot] Resend: How do I configure sendmail to accept emails for dovecot when dovecot has sql auth/user db.
by Joseph Silverman 06 Aug '07

06 Aug '07

Apologies for resending this, I am not sure it made it through the first time.. --- Included below are my config files: sendmail.mc, dovecot.m4, dovecot.conf, dovecot-sql.conf. Whenever I try to send email into this system, it rejects it with user does not exist, however, the user does exist as far as dovecot (imap) is concerned, it is in the database. THANKS - Yossie # for i in /etc/dovecot/dovecot.conf /etc/dovecot/dovecot-sql.conf / usr/share/sendmail-cf/mailer/dovecot.m4 /etc/mail/sendmail.mc; do echo "FILE: $i"; echo ===; echo ""; egrep -v '^ *(#|$)' $i; echo ""; echo ""; done FILE: /etc/dovecot/dovecot.conf === listen = [::] disable_plaintext_auth = no ssl_disable = yes ssl_cert_file = /etc/ssl/dovecot/server.pem ssl_key_file = /etc/ssl/dovecot/server.key mail_location = maildir:~/.maildir namespace private { separator = . inbox = yes hidden = no } namespace private { separator = . prefix = INBOX. inbox = no hidden = yes } first_valid_uid = 0 protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com main_plugin_dir = /usr/lib/dovecot/lda mail_plugins = cmusieve quota } auth default { mechanisms = plain passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb sql { args = /etc/dovecot/dovecot-sql.conf } user = root socket listen { master { path = /var/run/dovecot/auth-master mode = 0666 } client { path = /var/run/dovecot/auth-client mode = 0666 } } } dict { } plugin { } FILE: /etc/dovecot/dovecot-sql.conf === driver = mysql connect = host=localhost dbname=dovecot user=root default_pass_scheme = PLAIN password_query = SELECT userPassword as password, user, concat("/var/ spool/dovecot/",substr(user,1,1),"/user/",user) as userdb_home, 97 as userdb_uid, 97 as userdb_gid FROM authdb WHERE user = '%n' and userPassword = '%w' user_query = SELECT concat("/var/spool/imap/",substr(user,1,1),"/ user/",user) as home, 97 as uid, 97 as gid FROM authdb WHERE user = '%n' FILE: /usr/share/sendmail-cf/mailer/dovecot.m4 === Mdovecot, P=/usr/libexec/dovecot/deliver, F=DFMPhnu9, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP/HdrFromSMTP, T=DNS/RFC822/X-Unix, A=deliver -d $u FILE: /etc/mail/sendmail.mc === divert(-1) dnl This is the macro config file used to generate the /etc/sendmail.cf dnl file. If you modify the file you will have to regenerate the dnl /etc/sendmail.cf by running this macro config through the m4 dnl preprocessor: dnl dnl m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf dnl dnl You will need to have the sendmail-cf package installed for this to dnl work. include(`/usr/share/sendmail-cf/m4/cf.m4')dnl define(`confDEF_USER_ID',``mail:mail'')dnl OSTYPE(`linux')dnl undefine(`UUCP_RELAY')dnl undefine(`BITNET_RELAY')dnl define(`confALIAS_WAIT', `30')dnl define(`confTO_CONNECT', `1m')dnl define(`confTRY_NULL_MX_LIST',true)dnl define(`confDONT_PROBE_INTERFACES',true)dnl define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail')dnl dnl define delivery mode: interactive, background, or queued dnl define(`confDELIVERY_MODE', `i') MASQUERADE_AS(`ford.qa.laszlosystems.com')dnl FEATURE(`limited_masquerade')dnl FEATURE(`masquerade_envelope')dnl FEATURE(`smrsh',`/usr/sbin/smrsh')dnl FEATURE(mailertable)dnl dnl virtusertable: redirect incoming mail to virtual domain to particular user or domain FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable')dnl dnl genericstable: rewrite sender address for outgoing mail FEATURE(genericstable)dnl FEATURE(always_add_domain)dnl FEATURE(redirect)dnl FEATURE(use_cw_file)dnl FEATURE(local_procmail)dnl FEATURE(`access_db')dnl FEATURE(`blacklist_recipients')dnl FEATURE(`relay_based_on_MX')dnl dnl FEATURE(dnsbl, `blackholes.mail-abuse.org', `Rejected - see http://www.mail-abuse.org/rbl/')dnl dnl FEATURE(dnsbl, `dialups.mail-abuse.org', `Dialup - see http:// www.mail-abuse.org/dul/')dnl dnl FEATURE(dnsbl, `relays.mail-abuse.org', `Open spam relay - see http://www.mail-abuse.org/rss/')dnl FEATURE(`delay_checks')dnl FEATURE(`stickyhost')dnl dnl SASL Configuration dnl extract from http://www.sendmail.org/~ca/email/auth.html dnl dnl Next two lines are for SMTP Authentication TRUST_AUTH_MECH(`LOGIN PLAIN')dnl define(`confAUTH_MECHANISMS', `LOGIN PLAIN')dnl dnl dnl Next line stops sendmail from allowing auth without encryption define(`confAUTH_OPTIONS', `Apy')dnl dnl dnl STARTTLS configuration dnl extract from http://www.sendmail.org/~ca/email/starttls.html dnl define(`CERT_DIR', `/etc/ssl/sendmail')dnl define(`confCACERT_PATH', `CERT_DIR')dnl define(`confCACERT', `CERT_DIR/CAcert.pem')dnl define(`confSERVER_CERT', `CERT_DIR/MYcert.pem')dnl define(`confSERVER_KEY', `CERT_DIR/MYkey.pem')dnl define(`confCLIENT_CERT', `CERT_DIR/MYcert.pem')dnl define(`confCLIENT_KEY', `CERT_DIR/MYkey.pem')dnl dnl dnl Uncomment next lines to hide identity of mail serve define(`confPRIVACY_FLAGS',`goaway,restrictqrun,restrictmailq')dnl dnl define(`confSMTP_LOGIN_MSG', `$j server ready at $b')dnl MAILER(smtp)dnl MAILER(procmail)dnl MAILER(dovecot)dnl ford dovecot #

4 3

[Dovecot] How do I configure sendmail to accept emails for dovecot when dovecot has sql auth/user db.
by Yossie Silverman 06 Aug '07

06 Aug '07

Included below are my config files: sendmail.mc, dovecot.m4, dovecot.conf, dovecot-sql.conf. Whenever I try to send email into this system, it rejects it with user does not exist, however, the user does exist as far as dovecot (imap) is concerned, it is in the database. THANKS - Yossie # for i in /etc/dovecot/dovecot.conf /etc/dovecot/dovecot-sql.conf / usr/share/sendmail-cf/mailer/dovecot.m4 /etc/mail/sendmail.mc; do echo "FILE: $i"; echo ===; echo ""; egrep -v '^ *(#|$)' $i; echo ""; echo ""; done FILE: /etc/dovecot/dovecot.conf === listen = [::] disable_plaintext_auth = no ssl_disable = yes ssl_cert_file = /etc/ssl/dovecot/server.pem ssl_key_file = /etc/ssl/dovecot/server.key mail_location = maildir:~/.maildir namespace private { separator = . inbox = yes hidden = no } namespace private { separator = . prefix = INBOX. inbox = no hidden = yes } first_valid_uid = 0 protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com main_plugin_dir = /usr/lib/dovecot/lda mail_plugins = cmusieve quota } auth default { mechanisms = plain passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb sql { args = /etc/dovecot/dovecot-sql.conf } user = root socket listen { master { path = /var/run/dovecot/auth-master mode = 0666 } client { path = /var/run/dovecot/auth-client mode = 0666 } } } dict { } plugin { } FILE: /etc/dovecot/dovecot-sql.conf === driver = mysql connect = host=localhost dbname=dovecot user=root default_pass_scheme = PLAIN password_query = SELECT userPassword as password, user, concat("/var/ spool/dovecot/",substr(user,1,1),"/user/",user) as userdb_home, 97 as userdb_uid, 97 as userdb_gid FROM authdb WHERE user = '%n' and userPassword = '%w' user_query = SELECT concat("/var/spool/imap/",substr(user,1,1),"/ user/",user) as home, 97 as uid, 97 as gid FROM authdb WHERE user = '%n' FILE: /usr/share/sendmail-cf/mailer/dovecot.m4 === Mdovecot, P=/usr/libexec/dovecot/deliver, F=DFMPhnu9, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP/HdrFromSMTP, T=DNS/RFC822/X-Unix, A=deliver -d $u FILE: /etc/mail/sendmail.mc === divert(-1) dnl This is the macro config file used to generate the /etc/sendmail.cf dnl file. If you modify the file you will have to regenerate the dnl /etc/sendmail.cf by running this macro config through the m4 dnl preprocessor: dnl dnl m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf dnl dnl You will need to have the sendmail-cf package installed for this to dnl work. include(`/usr/share/sendmail-cf/m4/cf.m4')dnl define(`confDEF_USER_ID',``mail:mail'')dnl OSTYPE(`linux')dnl undefine(`UUCP_RELAY')dnl undefine(`BITNET_RELAY')dnl define(`confALIAS_WAIT', `30')dnl define(`confTO_CONNECT', `1m')dnl define(`confTRY_NULL_MX_LIST',true)dnl define(`confDONT_PROBE_INTERFACES',true)dnl define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail')dnl dnl define delivery mode: interactive, background, or queued dnl define(`confDELIVERY_MODE', `i') MASQUERADE_AS(`ford.qa.laszlosystems.com')dnl FEATURE(`limited_masquerade')dnl FEATURE(`masquerade_envelope')dnl FEATURE(`smrsh',`/usr/sbin/smrsh')dnl FEATURE(mailertable)dnl dnl virtusertable: redirect incoming mail to virtual domain to particular user or domain FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable')dnl dnl genericstable: rewrite sender address for outgoing mail FEATURE(genericstable)dnl FEATURE(always_add_domain)dnl FEATURE(redirect)dnl FEATURE(use_cw_file)dnl FEATURE(local_procmail)dnl FEATURE(`access_db')dnl FEATURE(`blacklist_recipients')dnl FEATURE(`relay_based_on_MX')dnl dnl FEATURE(dnsbl, `blackholes.mail-abuse.org', `Rejected - see http://www.mail-abuse.org/rbl/')dnl dnl FEATURE(dnsbl, `dialups.mail-abuse.org', `Dialup - see http:// www.mail-abuse.org/dul/')dnl dnl FEATURE(dnsbl, `relays.mail-abuse.org', `Open spam relay - see http://www.mail-abuse.org/rss/')dnl FEATURE(`delay_checks')dnl FEATURE(`stickyhost')dnl dnl SASL Configuration dnl extract from http://www.sendmail.org/~ca/email/auth.html dnl dnl Next two lines are for SMTP Authentication TRUST_AUTH_MECH(`LOGIN PLAIN')dnl define(`confAUTH_MECHANISMS', `LOGIN PLAIN')dnl dnl dnl Next line stops sendmail from allowing auth without encryption define(`confAUTH_OPTIONS', `Apy')dnl dnl dnl STARTTLS configuration dnl extract from http://www.sendmail.org/~ca/email/starttls.html dnl define(`CERT_DIR', `/etc/ssl/sendmail')dnl define(`confCACERT_PATH', `CERT_DIR')dnl define(`confCACERT', `CERT_DIR/CAcert.pem')dnl define(`confSERVER_CERT', `CERT_DIR/MYcert.pem')dnl define(`confSERVER_KEY', `CERT_DIR/MYkey.pem')dnl define(`confCLIENT_CERT', `CERT_DIR/MYcert.pem')dnl define(`confCLIENT_KEY', `CERT_DIR/MYkey.pem')dnl dnl dnl Uncomment next lines to hide identity of mail serve define(`confPRIVACY_FLAGS',`goaway,restrictqrun,restrictmailq')dnl dnl define(`confSMTP_LOGIN_MSG', `$j server ready at $b')dnl MAILER(smtp)dnl MAILER(procmail)dnl MAILER(dovecot)dnl ford dovecot #

2 1