September 2008 - dovecot

[Dovecot] cram-md5 and users maintaining their own passwords?
by Steinar Bang 13 Sep '08

13 Sep '08

Is there any other mechanism than using passwd files with md5-hashed passwords created by dovecotpw that will support cram-md5 authentication? Has anyone created setups where the passwd databases reside in the individual users home directories? Is it possible to persuade dovecotpw to update the passwd databases automatically. Having to use a text editor to paste in the passwords sets a high user treshold on using the cram-md5 authentication mechanism. Thanx! - Steinar

2 7

[Dovecot] Questions about using sieve
by Robin Atwood 13 Sep '08

13 Sep '08

I am trying to filter my imap mail sent to my phone by using sieve. Currently everything is set up and works well using mbox and sendmail as the lda. I have re-installed dovecot with sieve included and updated dovecot.conf, which gives # dovecot -n # 1.1.3: /etc/dovecot/dovecot.conf ssl_cert_file: /etc/ssl/dovecot/server.pem ssl_key_file: /etc/ssl/dovecot/server.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login mail_privileged_group: mail mail_location: mbox:~/mail:INBOX=/var/mail/%u auth default: passdb: driver: pam args: * userdb: driver: passwd and I have added "mail_plugins = cmusieve" to protocol lda{}. I then created a ".dovecot.sieve" script but am not sure where to place it. I tried ~/ and ~/.imap but it never seems to get compiled. Dovecot is running as a root service so it should have access. Setting mail_debug=yes produces no clues, so what should I be looking at? TIA -Robin -- ---------------------------------------------------------------------- Robin Atwood. "Ship me somewheres east of Suez, where the best is like the worst, Where there ain't no Ten Commandments an' a man can raise a thirst" from "Mandalay" by Rudyard Kipling ----------------------------------------------------------------------

3 3

[Dovecot] Dovecot Ldap Logs
by Proskurin Kirill 13 Sep '08

13 Sep '08

Hello all! One question about ldap. In my logs im see this: Info: auth(default): ldap(sysadmin(a)domain.off,172.16.1.80): user search: base=dc=CAS scope=subtree filter=(&(objectClass=mailUser)(mail=sysadmin(a)domain.off)) fields=(all) Info: auth(default): ldap(sysadmin(a)domain.off,172.16.1.80): result: accountStatus(?unknown?)= cn(?unknown?)= givenName(?unknown?)= initials(?unknown?)= l(?unknown?)= o(?unknown?)= objectClass(?unknown?)= telephoneNumber(?unknown?)= sn(?unknown?)= title(?unknown?)= uid(?unknown?)= userPassword(?unknown?)= mail(?unknown?)= --- What is that mean? And how can im get a rid of this? -- Best regards, Proskurin Kirill

2 3

[Dovecot] API Examples?
by tcowin 13 Sep '08

13 Sep '08

I need to write a little client to just get the 5 most recent email headers (and \Seen status) from the INBOX of a given user. Are there any API examples anywhere that would speed this process along, or any spots in the source that would give me a jump start? or would it be better to act as an IMAP client? Many Thanks In Advance, Tom -- View this message in context: http://www.nabble.com/API-Examples--tp19444931p19444931.html Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] version 1.1.3 assertion on index-sort-string
by Nuno Lopes 13 Sep '08

13 Sep '08

Hi, I am seeing the following log lines on some accounts on my setup: Sep 11 01:42:36 xxxx dovecot: Panic: IMAP(xxxxxxxxxxxxxxxx): file index-sort-string.c: line 610 (index_sort_add_ids_range): assertion failed: (skip > 0) Sep 11 01:42:36 xxxx dovecot: IMAP(xxxxxxxxxxxxxx): Raw backtrace: imap [0x5555555d3690] -> imap [0x5555555d36f7] -> imap [0x5555555d2d58] -> imap(index_sort_list_finish_string+0xf13) [0x5555555a04b3] -> imap(index_storage_search_next_nonblock+0x432) [0x55555559cd22] -> imap(mailbox_search_next+0x21) [0x5555555a42b1] -> imap(imap_sort+0xdc) [0x555555577ddc] -> imap(cmd_sort+0x33d) [0x555555570ead] -> imap(cmd_uid+0x54) [0x555555571934] -> imap [0x55555557234c] -> imap [0x555555572402] -> imap [0x555555572c1f] -> imap(client_input+0x62) [0x555555572e42] -> imap(io_loop_handler_run+0xf8) [0x5555555da6d8] -> imap(io_loop_run+0x1d) [0x5555555d972d] -> imap(main+0x462) [0x55555557a5f2] -> /lib64/libc.so.6(__libc_start_main+0xf4) [0x2b7c871d8154] -> imap [0x55555556c8c9] these assertions happen when ordering by from and go away by deleting index files. As usual if you wish I can send you the index files as they were when this error happened. Thanks, -- Nuno Lopes

2 2

[Dovecot] Dovecot 1.1.3 Kerberos5 GSSAPI bug (with patch)
by Matthew Wesley 12 Sep '08

12 Sep '08

The functionality added in changeset 818a638fa9a3 has a bug for x86_64 on line 103. The src/auth/mech-gssapi.c file must now include stdlib.h to have the declaration for getenv(). Otherwise, the compiler uses the implicit return type (int), which truncates the 8-byte pointer getenv() returns to a 4-byte value. This causes a segfault on subsequent reads. Here is debugger output illustrating the problem: (gdb) list 106 101 const char *path; 102 103 path = getenv("KRB5_KTNAME"); 104 if (path != NULL) { 105 #ifdef HAVE_GSSKRB5_REGISTER_ACCEPTOR_IDENTITY 106 gsskrb5_register_acceptor_identity(path); 107 #elif defined (HAVE_KRB5_GSS_REGISTER_ACCEPTOR_IDENTITY) 108 krb5_gss_register_acceptor_identity(path); 109 #endif 110 } (gdb) p/x getenv("KRB5_KTNAME") $32 = 0xb0d7aef7 (gdb) x/s 0xb0d7aef7 0xb0d7aef7: <Address 0xb0d7aef7 out of bounds> (gdb) x/s 0x7fffb0d7aef7 0x7fffb0d7aef7: "/etc/dovecot/dovecot.keytab" A Mercurial bundle with a fix is attached, and here is the trivial patch to put in the needed #include: diff -r 43e55b9af85b src/auth/mech-gssapi.c --- a/src/auth/mech-gssapi.c Mon Sep 01 15:02:49 2008 +0300 +++ b/src/auth/mech-gssapi.c Wed Sep 03 11:37:33 2008 -0400 @@ -22,6 +22,8 @@ #include "safe-memset.h" #ifdef HAVE_GSSAPI + +#include <stdlib.h> #ifndef HAVE___GSS_USEROK # define USE_KRB5_USEROK -- UNIX was not designed to stop you from doing stupid things, because that would also stop you from doing clever things. -- Doug Gwyn

2 2

[Dovecot] error in 1.1.2
by Cor Bosman 12 Sep '08

12 Sep '08

Ive been getting a LOT of these errors since 1.1.2: So far ive seen this with 1800 customers, and we're getting active complaints about errors in imap clients. When I check the users log I always see this error.. This always happens with COPY commands in Squirrelmail. Sep 2 20:09:35 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): rename(/var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache.lock, /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache) failed: No such file or directory Sep 2 20:09:35 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): rename(/var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache.lock, /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache) failed: No such file or directory Sep 2 20:09:35 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): file_dotlock_replace() failed with index cache file /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache: No such file or directory Sep 2 20:09:35 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): file_dotlock_replace() failed with index cache file /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache: No such file or directory Sep 1 20:14:06 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): rename(/var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache.lock, /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache) failed: No such file or directory Sep 1 20:14:06 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): rename(/var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache.lock, /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache) failed: No such file or directory Sep 1 20:14:06 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): file_dotlock_replace() failed with index cache file /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache: No such file or directory Sep 1 20:14:06 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): file_dotlock_replace() failed with index cache file /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache: No such file or directory FreeBSD 6.2, NFS storage for everything. Any idea? Cor

6 41

[Dovecot] Dovecot 1.1.12 ignores auth_krb5_keytab settings
by christop 12 Sep '08

12 Sep '08

Hello, i am using here a FreeBSD 7.0 amd64 with latest dovecot from ports. It ignores the krb5_keytab settings, which looks like this in the logs: dovecot: Aug 02 18:56:54 Error: auth(default): gssapi(?,130.149.58.145): While processing incoming data: Miscellaneous failure (see text) dovecot: Aug 02 18:56:54 Error: auth(default): gssapi(?,130.149.58.145): While processing incoming data: /etc/krb5.keytab: No such file or directory dovecot: Aug 02 18:56:59 Info: imap-login: Aborted login (auth failed, 1 attempts): method=GSSAPI, rip=130.149.58.145, lip=130.149.58.162, TLS It is the same errror i got with dovecot 1.0.13. MfG Christoph Below my config: # 1.1.2: /usr/local/etc/dovecot.conf log_path: /var/log/dovecot.log protocols: imaps managesieve listen: mail2.physik-pool.tu-berlin.de ssl_cert_file: /etc/CERT ssl_key_file: /etc/KEY login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login verbose_proctitle: yes first_valid_uid: 200 mail_privileged_group: mail mail_location: maildir:~/maildir:INDEX=/var/dovecot/%1n/%n mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(managesieve): sieve_storage(default): sieve_storage(imap): sieve_storage(managesieve): ~/sieve sieve(default): sieve(imap): sieve(managesieve): ~/.dovecot.sieve namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/ location: mbox:~/mail list: yes subscriptions: yes auth default: mechanisms: gssapi plain login krb5_keytab: /etc/mail2.krb5.keytab worker_max_count: 120 passdb: driver: pam userdb: driver: passwd args: [blocking=yes]

2 4

[Dovecot] Public (Shared Folders) ACL Questions
by Mailing List 11 Sep '08

11 Sep '08

I'm trying to set up a public namespace so that a set of IMAP folders are available to all staff - similar to MS Exchange Public Folders. I've managed to set up the namespace correctly but I'm having trouble with the ACLs. The global ACL file is the only method I can get to work. All I want to do is to allow 1 user admin privileges to create & delete anything but all other users should only be able to create not delete. Reading through the mailing list I thought a /etc/dovecot-acls/.DEFAULT file would be suitable but what should be put in here to achieve what I want? Are you able to use wildcards somehow within this file, i.e.: ---------------------------------------- owner lrwstiekxa user=admin(a)domain.com lrwstiekxa user=*(a)domain.com lrw ---------------------------------------- Does this .DEFAULT file only apply to the public (shared) namespace or will it effect private mailboxes also? If I was to create a specific global acl file for a specific folder which would take precedence, the .DEFAULT acls or the specific folder acls? Also an "INBOX" is shown within the public folders namespace but no folder exists in the public folders maildir hierarchy - any ideas how I can stop this? Any help would be greatly appreciated. Gavin

2 1

[Dovecot] Stumped on adding X-Header...
by Brian Hayden 11 Sep '08

11 Sep '08

Recently I posted about wanting to add an x-header recording a timestamp for changing the \Deleted flag, for purposes of doing expiry on mbox mailboxes. Timo replied: > Be sure to add it to mbox_hide_headers[] and mbox_save_drop_headers[] > arrays in mbox-storage.c and hope that it doesn't exist in any of your > existing mails. :) Other than that there shouldn't be problems. I looked at the two places where X-Status was being written--mbox-save.c and mbox-sync-update.c--and tried adding this header. It didn't work. To test my sanity, I changed the string 'X-Status' in each of these to something else. The mbox file still ended up with 'X-Status' written in it, and I can't for the life of me find any other code that might write that string. Timo? Anyone? -- Brian Hayden UMN OIT Internet Services

2 1