April 2008 - dovecot - dovecot.org

[Dovecot] LDAP
by Wojtek Bogusz 15 Apr '08

15 Apr '08

hi. i am trying to setup dovecot imap server with users in LDAP. but i get "Internal login failure". can you help please? it is probably something obvious. thank you. Wojtek i am using version 1.0.rc17 # /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps imap ssl_cert_file: /etc/apache2/ssl/server.pem ssl_key_file: /etc/apache2/ssl/server.key disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable: /usr/lib/dovecot/imap-login login_greeting_capability: yes mail_extra_groups: mail mail_location: maildir:/home/MAIL/%u imap_client_workarounds: tb-extra-mailbox-sep auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf # /etc/dovecot/dovecot-ldap.conf hosts = localhost dn = uid=root,ou=Users,dc=frontline dnpass = [user root plain text password here] auth_bind = yes auth_bind_userdn = uid=%u,ou=Users,dc=frontline ldap_version = 3 base = ou=Users,dc=frontline scope = subtree user_attrs = homeDirectory=home,uidNumber=uid user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%u)) default_pass_scheme = MD5 user_global_uid = dovecot user_global_gid = dovecot in logfile i got this when i try to login: # /var/log/mail.info Mar 15 16:13:25 base dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Ilip=192.168.0.202^Irip=192.168.0.200 Mar 15 16:13:25 base dovecot: auth(default): client out: CONT^I1^I Mar 15 16:13:25 base dovecot: auth(default): client in: CONT^I1^IAHdvanRlawBiZWR6aWUgZG9icnpl Mar 15 16:13:25 base dovecot: auth(default): ldap(wojtek,192.168.0.200): bind: dn=uid=wojtek,ou=Users,dc=frontline Mar 15 16:13:25 base dovecot: auth(default): client out: OK^I1^Iuser=wojtek Mar 15 16:13:25 base dovecot: auth(default): master in: REQUEST^I1^I24908^I1 Mar 15 16:13:25 base dovecot: auth(default): ldap(wojtek,192.168.0.200): user search: base=ou=Users,dc=frontline scope=subtree filter=(&(objectClass=*)(u id=wojtek)) fields=homeDirectory,uidNumber Mar 15 16:13:25 base dovecot: auth(default): ldap(wojtek,192.168.0.200): Authenticated user not found Mar 15 16:13:25 base dovecot: auth(default): userdb(wojtek,192.168.0.200): user not found from userdb Mar 15 16:13:25 base dovecot: auth(default): master out: NOTFOUND^I1 Mar 15 16:13:25 base dovecot: imap-login: Internal login failure: user=<wojtek>, method=PLAIN, rip=192.168.0.200, lip=192.168.0.202

3 6

Re: [Dovecot] A little assistance with Sieve
by cam＠ellisonpsychology.ca 15 Apr '08

15 Apr '08

> From what I see here I am not quite sure whether you have understood > the ManageSieve protocol. The putscript command as specified above > expects you to provide 2049 bytes of script directly after entering the > command. It will not accept other commands until it has fully read the > 2049 bytes. (Refer to the specification > http://tools.ietf.org/id/draft-martin-managesieve-08.txt) The listing > above shows no script and a logout command in stead. You indicate that > you have to cancel the connection using Ctrl-C which is consistent with > that behavior. > > The following similar protocol session should show how it is done with a > trivially small script: > > OK "Logged in." > CAPABILITY > "IMPLEMENTATION" "dovecot" > "SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags > notify include envelope body relational regex subaddress copy" > OK "Capability completed." > PUTSCRIPT "hotseflots" {6+} > keep; > OK "Putscript completed." > GETSCRIPT "hotseflots" > {6} > keep; > OK "Getscript completed. > SETACTIVE "hotseflots" > OK "Setactive completed." > LISTSCRIPTS > "phpscript" > "hotseflots" ACTIVE > "frop" > "ingo" > "fruts" > OK "Listscripts completed." > > BTW, it is not useful to upload a script called .dovecot.sieve on the > server. For managesieve, the .dovecot.sieve script (as looked for by the > Sieve plugin) is a symbolic link that points to the actual active script > in the sieve storage directory. That also explains the warning in your > follow-up e-mail, indicating that a normal file is still in place. When > you upload and activate a new script, the situation is resolved. The > regular file previously called .dovecot.sieve is moved to the sieve > directory as dovecot-orig.sieve (and listed as dovecot-orig). However, > if you consider your current sieve script to be important you are > advised to back it up before uploading and activating a script through > managesieve. OK. I understand all this. Thank you for the reference to the specification. Apart from the wrong name, I was using PUTSCRIPT instead of GETSCRIPT. Now, where do I have to put the scripts to GET them? My home directory does not work, nor do the /var/mail/user/ and /var/mail/user/Maildir directories. I get a "Script does not exist" response, though the script is in all three locations. Thank you for all the assistance Cam -- Cam Ellison, PhD RPsych (BC #01417) Cam Ellison & Associates Ltd. 3446 Beach Avenue Roberts Creek BC V0N 2W2 Phone 604.885.4806 Fax 694.885.4809 Cell 604.989.0635

4 8

[Dovecot] dovecot-deliver auth-master error
by Wouter Amsterdam 15 Apr '08

15 Apr '08

Hi all, I'm trying to get the sieve plugin to work, but with little result. I'm following http://wiki.dovecot.org/LDA, http://wiki.dovecot.org/LDA/Postfix and http://wiki.dovecot.org/LDA/Sieve but it won't work. As I have virtual users from several virtual domains, I added the "virtual users - with lookup" section from http://wiki.dovecot.org/LDA, but now dovecot fails to start. My dovecot.conf is as follows: # 1.0.13: /etc/dovecot.conf login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:/data/mail/mydomain/%Ln maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: username_format: %Lu debug: yes debug_passwords: yes passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: static args: uid=5000 gid=5000 home=/var/mail/vmail socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: sieve: /home/virtual/%u/sieve The problem seems to be in the auth-master path, for /var/log/maillog shows: Apr 14 16:14:44 termserv dovecot: Dovecot v1.0.13 starting up Apr 14 16:14:44 termserv dovecot: auth(default): unlink(/var/run/dovecot/auth-master) failed: Is a directory Apr 14 16:14:44 termserv dovecot: Auth process died too early - shutting down Apr 14 16:14:44 termserv dovecot: child 12385 (auth) returned error 89 Can anyone point me in the right direction? TIA, Wouter

2 2

[Dovecot] generating passdb files
by Dave 15 Apr '08

15 Apr '08

Hello, I'm running dovecot 1.0.3 on an fc6 box. I've got postfix and dovecot set up for virtual domains, all look good. The issue is finding the password file generator. I googled and think i'm looking for mkpasswd but searching the system i'm not seeing this. Has the name of this prog changed? Thanks. Dave.

2 1

[Dovecot] dovecot-deliver auth-master error
by Wouter Amsterdam 14 Apr '08

14 Apr '08

Hi all, I'm trying to get the sieve plugin to work, but with little result. I'm following http://wiki.dovecot.org/LDA, http://wiki.dovecot.org/LDA/Postfix and http://wiki.dovecot.org/LDA/Sieve but it won't work. As I have virtual users from several virtual domains, I added the "virtual users - with lookup" section from http://wiki.dovecot.org/LDA, but now dovecot fails to start. My dovecot.conf is as follows: # 1.0.13: /etc/dovecot.conf login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:/data/mail/mydomain/%Ln maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: username_format: %Lu debug: yes debug_passwords: yes passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: static args: uid=5000 gid=5000 home=/var/mail/vmail socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: sieve: /home/virtual/%u/sieve The problem seems to be in the auth-master path, for /var/log/maillog shows: Apr 14 16:14:44 termserv dovecot: Dovecot v1.0.13 starting up Apr 14 16:14:44 termserv dovecot: auth(default): unlink(/var/run/dovecot/auth-master) failed: Is a directory Apr 14 16:14:44 termserv dovecot: Auth process died too early - shutting down Apr 14 16:14:44 termserv dovecot: child 12385 (auth) returned error 89 Can anyone point me in the right direction? TIA, Wouter

1 0

[Dovecot] localhost deliver(root@vlocalhost): setgid(5001) failed with euid=8, gid=8, egid=8: Operation not permitted
by Gert Cuykens 12 Apr '08

12 Apr '08

How can i give lda dovecot permision to set user and goup id to 5001 dovecot unix - n n - - pipe flags=DRhu user=mail:mail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${recipient}

3 9

[Dovecot] virtual spam maildir directory
by Douglas Willcocks 12 Apr '08

12 Apr '08

Hi, There's an example on how to do just that by using Sieve on http://wiki.dovecot.org/LDA/Sieve Douglas Willcocks

1 0

[Dovecot] virtual spam maildir directory
by Gert Cuykens 12 Apr '08

12 Apr '08

dovecot unix - n n - - pipe flags=DRhu user=mail:mail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${recipient} is there anyway i can tell dovecot to put spam labeled headers from spamassasin into a maildir spam folder

1 0

[Dovecot] memory issues with 1.1.rc4 (now it's PAM)
by Wolfram Schlich 11 Apr '08

11 Apr '08

Hi! I'm running 1.1rc4 on a system and this happens occasionally: --8<-- mail.info; dovecot: auth(default): client in: AUTH 1 PLAIN service=imap lip=NN.NN.NN.NN rip=NNN.NN.NNN.NN lport=143 mail.info; dovecot: auth-worker(default): pam(XXXXXXXXXXXX,NNN.NN.NNN.NN): lookup service=imap kern.alert; kernel: grsec: From NN.NN.NN.NN: denied resource overstep by requesting 134242304 for RLIMIT_AS against limit 134217728 for /us authpriv.err; dovecot-auth: PAM unable to dlopen(/lib/security/pam_unix.so) authpriv.err; dovecot-auth: PAM [error: /lib/security/pam_unix.so: failed to map segment from shared object: Cannot allocate memory] authpriv.err; dovecot-auth: PAM adding faulty module: /lib/security/pam_unix.so mail.err; dovecot: auth-worker(default): pam(XXXXXXXXXXXX,NNN.NN.NNN.NN): pam_authenticate() failed: Authentication failure mail.info; dovecot: auth(default): new auth connection: pid=6262 mail.info; dovecot: auth(default): client out: FAIL 1 user=XXXXXXXXXXXX --8<-- When I restart dovecot, it runs fine for a while, then it starts happening again. I'm pretty unsure about the cause, can someone give me a hint? --8<--[ dovecot -n ]--8<-- # 1.1.rc4: /etc/dovecot/dovecot.conf protocols: imap pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_process_size: 128 max_mail_processes: 128 verbose_proctitle: yes mail_privileged_group: mail mail_location: maildir:%h/.maildir mail_debug: yes mail_drop_priv_before_exec: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_process_size: 1024 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: verbose: yes debug: yes process_size: 128 passdb: driver: pam args: * userdb: driver: passwd --8<-- Thanks! -- Regards, Wolfram Schlich <wschlich(a)gentoo.org> Gentoo Linux * http://dev.gentoo.org/~wschlich/

2 1

[Dovecot] makemaildir
by Jeff Koch 11 Apr '08

11 Apr '08

Hi Guys: Does anyone know where I can get the 'makemaildir' program without having to install courier-imap? Best Regards, Jeff Koch

4 3