September 2008 - dovecot

[Dovecot] dovecot 1.0.10 inet_addr(0.0.0.0)
by Zbigniew Polito 05 Oct '08

05 Oct '08

Hi, I've got a problem. my Dovecot is not running ;) It immidiately exits when run with no output info I've figuret out that is something wrong with network but i can't find such option in conf any Ideas?? strace output : dup(3) = 5 fcntl64(5, F_GETFD) = 0 fcntl64(5, F_SETFD, FD_CLOEXEC) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 6 setsockopt(6, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 setsockopt(6, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 bind(6, {sa_family=AF_INET, sin_port=htons(995), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 getsockname(6, {sa_family=AF_INET, sin_port=htons(995), sin_addr=inet_addr("0.0.0.0")}, [16]) = 0 listen(6, 8) = 0 fcntl64(6, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(6, F_SETFL, O_RDWR|O_NONBLOCK) = 0 fcntl64(6, F_GETFD) = 0 fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 7 setsockopt(7, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 setsockopt(7, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 bind(7, {sa_family=AF_INET, sin_port=htons(110), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 getsockname(7, {sa_family=AF_INET, sin_port=htons(110), sin_addr=inet_addr("0.0.0.0")}, [16]) = 0 listen(7, 8) = 0 fcntl64(7, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(7, F_SETFL, O_RDWR|O_NONBLOCK) = 0 fcntl64(7, F_GETFD) = 0 fcntl64(7, F_SETFD, FD_CLOEXEC) = 0 dup2(5, 0) = 0 dup2(5, 1) = 1 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7e2b708) = 2692 --- SIGCHLD (Child exited) @ 0 (0) --- exit_group(0) = ? Process 2691 detached Regards -- Pozdrawiam Zbigniew Polito zbigniew_pol(a)airpost.net -- http://www.fastmail.fm - A fast, anti-spam email service.

5 10

[Dovecot] authentication issue - dovecot + Mysql
by Reinhard Sanjeet Lal 05 Oct '08

05 Oct '08

Hi, I have a FreeBSD 7.0 server with the following version of software's installed: postfix-2.5.4,1 postfixadmin-2.2.1.1 roundcube-0.2.a,1 php5 mysql-server-5.0.67 dovecot-1.1.3_1 Note that pre-reqs for all of the above also has been installed. I have used this guide to walk myself through the setup : http://www.purplehat.org/?page_id=4 My setup uses virtual domain and user style(mostly for hosting provider type) , all stored into the Mysql db, now when I try to telnet to port 110 for pop test or even telnet for IMAP test , I get this error: dovecot: Sep 24 18:51:49 Info: pop3-login: Aborted login (auth failed, 1 attempts): user=<rein>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured note : there are numerous of there errors , but I included only this. Dovecot is not able to authenticate by using the query in its dovecot-sql.conf file. I have tried a lot of tricks by changing the mechanism MD5 , PLAIN LOGIN etc, but no avail. Please , could someone assist me in solving this issue, not that I can send and receive emails but pop and IMAP seems not to work , so is the webmail functionality . Here is my dovecot -n output : # 1.1.3: /usr/local/etc/dovecot.conf log_path: /var/log/dovecot.log protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/dovecot/cert.pem ssl_key_file: /etc/ssl/dovecot/key.pem disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Baby Is Ready. login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no verbose_proctitle: yes first_valid_uid: 125 last_valid_uid: 125 first_valid_gid: 125 last_valid_gid: 125 mail_privileged_group: mail mail_location: maildir:/usr/local/virtual/%d/%n maildir_copy_preserve_filename: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-se imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_enable_last(default): no pop3_enable_last(imap): no pop3_enable_last(pop3): yes pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: login plain cram-md5 digest-md5 plain login username_format: %Ln passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 ____________________________ Reinhard Sanjeet Lal Manager Network Operations p + 679 3275040 f + 679 3275053 m + 679 9923147 e sanjeet(a)getunwired.com.fj <http://www.unwired.com.fj> www.unwired.com.fj disclaimer "This transmission is for the intended addressee only and is confidential information. If you have received this transmission in error, please delete it and notify the sender. The contents of this e-mail are the opinion of the writer only and are not endorsed by Unwired Fiji unless expressly stated otherwise. Unwired Fiji has virus detection in place and makes every reasonable effort to ensure that this message is free from viruses. However, you should scan this message and any attachments for viruses. Under no circumstances will Unwired Fiji accept liability for any loss or damage that may result from your receipt of this message or any attachments."

2 1

[Dovecot] cyrus2courrier mass migration
by Mathieu Kretchner 05 Oct '08

05 Oct '08

Hello, So we've chosen to use dovecot as our imap mail server and replace our old cyrus server ! BUT : I would like to do a conversion of my imap accounts (and keep all theirs characteristics) from cyrus-imapd-2.2.12 in cyrus format to dovecot 1.1.3 in courrier format. I've tried those 3 tools : cyrus2courrier.1.5.ts cyrus2courier-1.3z4 imapsync (works well but very slow and should not be a true solution) But nothing is working to keep the seen/unseen flag (expect imapsync) ! I know my cyrus version is too "recent" but do you have any idea how could I do this migration ? A second problem is that I have 600 Go of imap account to migrate, if you've any clue on how to do a migration without loosing a lot of availability, I would be happy to read you ! Tanks in advance.

6 12

[Dovecot] Bug? Expunging Symlinked Maildir w/ Lazy_expunge Enabled
by Rich at Whidbey Telecom 05 Oct '08

05 Oct '08

Hi all, Using Dovecot 1.0.3 on RedHat Enterprise 5 (kernel 2.6.18-8.1.6.el5PAE), and NFS storage, we symlinked a Maildir folder: /mailstore/user/Maildir/.Junk -> /junkstore/user/Junkmaildir Everything works fine, until we try to expunge, which produces: A04 NO BUG: Unknown internal error This only happens if "lazy_expunge" is enabled: mail_plugins = quota imap_quota acl lazy_expunge lazy_expunge = .EXPUNGED/ .EXPUNGED/ .EXPUNGED/ Lazy_expunge works great on non-symlinked folders. We tried version 1.1 alpha2, which actually crashes in this scenario. The only fix we've found is to disable "lazy_expunge". Attached is our "dovecot -n" config. Anyone have an idea what might be causing this or a workaround? Thanks! Rich richs(a)whidbey.net # 1.0.3: /shared/dovecot.conf base_dir: /var/dovecot-mail/ log_path: /var/dovecot-mail/dovecot.log protocols: imap imaps pop3 pop3s ssl_ca_file: /adminstore/exim/ssl/instantsslroot.crt ssl_cert_file: /adminstore/exim/ssl/public-mail.crt ssl_key_file: /adminstore/exim/ssl/private-mail.key disable_plaintext_auth: no shutdown_clients: no login_dir: /var/dovecot-mail//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_user: exim login_greeting: System ready. login_processes_count: 32 login_max_processes_count: 400 verbose_proctitle: yes mail_location: maildir:/mailstore/%Lu/Maildir:INDEX=MEMORY mail_cache_fields: mail_cache_min_mail_count: 65536 mailbox_idle_check_interval: 10 mmap_disable: yes lock_method: dotlock maildir_stat_dirs: yes maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota acl lazy_expunge mail_plugins(imap): quota imap_quota acl lazy_expunge mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle imap_client_workarounds(imap): delay-newmail outlook-idle imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %Mf pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: . inbox: yes namespace: type: private separator: . prefix: .EXPUNGED/ location: maildir:/mailstore/%u/Expunged:INDEX=MEMORY hidden: yes auth default: mechanisms: plain login passdb: driver: pam args: exim userdb: driver: ldap args: /adminstore/configs/dovecot-ldap.conf plugin: quota: maildir:storage=250000:ignore=Junk acl: vfile:/adminstore/configs/dovecot-acls

3 5

[Dovecot] Corrupted transaction log file / record size too small
by Steven Winikoff 05 Oct '08

05 Oct '08

I recently upgradeded dovecot on one of our servers from version 1.0.10 to version 1.1.3. Ever since, we've been seeing occasional errors similar to this sequence (with the username and IP addresses elided): Sep 30 00:09:56 alcor dovecot: pop3-login: Login: [4954], XXXX, NNN.NNN.NN.NNN Sep 30 00:09:56 alcor dovecot: wrapper[5006]: pop3, XXXX, NNN.NNN.NN.NNN Sep 30 00:09:56 alcor dovecot: pop3[5006] XXXX, NNN.NNN.NN.NNN: Corrupted transaction log file /home/XXXX/.imap/INBOX/dovecot.index.log: record size too small (type=0x40, offset=12224, size=0) Sep 30 00:09:56 alcor dovecot: pop3[5006] XXXX, NNN.NNN.NN.NNN: Couldn't init INBOX: Internal error occurred. Refer to server log for more information. [2008-09-30 00:09:56] Sep 30 00:09:56 alcor dovecot: pop3[5006] XXXX, NNN.NNN.NN.NNN: Mailbox init failed top=0/0, retr=0/0, del=0/0, size=0, xfer=0/95 System and dovecot configuration details are appended. I saw an archived mailing list message from January 2007 which may be relevant (www.mailinglistarchive.com/dovecot@dovecot.org/msg07908.html) in which the original poster's symptoms disappeared when he recompiled dovecot with gcc-3.4.0 instead of using gcc-3.1. In my case I used gcc-4.1.2, so I don't know if that's still relevant (and if so, what other version to use instead). In the output of `dovecot -n` which follows, /local/pkg/dovecot/localmods/wrapper.imap is a locally written program which registers the user's IMAP or POP connection in the lastlog file and also ensures that the user's shell is considered valid. I'd be surprised if this is relevant, but I've appended the source code in case it may be (and/or in case anyone else may find it useful!). I've been working around the problem by deleting the contents of ~user/.imap for affected users, but I'd really prefer to fix it properly. :-) Any suggestions would be gratefully received. Thanks, - Steven # server type = SunFire X4100 (two dual-core Opteron CPUs) # OS = Linux (Slamd64 12.0) # file system type = XFS # uname -a Linux alcor 2.6.25.2 #1 SMP Fri May 16 07:06:34 EDT 2008 x86_64 x86_64 x86_64 GNU/Linux # dovecot --version 1.1.3 # (limit descriptors 4096; dovecot -n) # 1.1.3: /local/pkg/dovecot/root-dovecot-1.1.3/etc/dovecot.conf base_dir: /local/pkg/dovecot/data/var/run/dovecot syslog_facility: local0 protocols: imap imaps pop3 pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_cert_file: /public/apache/ssl/combined.cert ssl_key_file: /public/apache/ssl/key.pem disable_plaintext_auth: no login_dir: /local/pkg/dovecot/data/var/run login_executable(default): /local/pkg/dovecot/root-dovecot-1.1.3/libexec/dovecot/imap-login login_executable(imap): /local/pkg/dovecot/root-dovecot-1.1.3/libexec/dovecot/imap-login login_executable(pop3): /local/pkg/dovecot/root-dovecot-1.1.3/libexec/dovecot/pop3-login login_user: nul-mail login_log_format_elements: [%p] %u %r %c login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no login_processes_count: 6 login_max_processes_count: 512 max_mail_processes: 1024 verbose_proctitle: yes first_valid_uid: 111 mail_location: mbox:~/:INBOX=/var/spool/mail/%u mail_full_filesystem_access: yes mail_executable(default): /local/pkg/dovecot/localmods/wrapper.imap mail_executable(imap): /local/pkg/dovecot/localmods/wrapper.imap mail_executable(pop3): /local/pkg/dovecot/localmods/wrapper.pop3 mail_plugin_dir(default): /local/pkg/dovecot/root-dovecot-1.1.3/lib/dovecot/imap mail_plugin_dir(imap): /local/pkg/dovecot/root-dovecot-1.1.3/lib/dovecot/imap mail_plugin_dir(pop3): /local/pkg/dovecot/root-dovecot-1.1.3/lib/dovecot/pop3 mail_log_prefix: %Ls[%p] %u, %r: imap_capability(default): IMAP4rev1 QUOTA SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS imap_capability(imap): IMAP4rev1 QUOTA SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS imap_capability(pop3): imap_client_workarounds(default): delay-newmail tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_logout_format(default): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_logout_format(imap): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_logout_format(pop3): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, xfer=%i/%o auth default: cache_negative_ttl: 0 passdb: driver: shadow userdb: driver: passwd # source code for /local/pkg/dovecot/localmods/wrapper.imap # and /local/pkg/dovecot/localmods/wrapper.pop3 # follows: 8<---------------------------- cut here -------------------------->8 /* * wrapper.c -- login wrapper program for dovecot * * Steven Winikoff * 2008/01/31 * * Part of this program is based on code written by Sylvain Robitaille. * * The intention is twofold: * * 1) ensure that IMAP and POP sessions are registered in the * system's lastlog file * * 2) ensure that all IMAP and POP users have a valid login shell * * Rather than hack the code for the dovecot server directly, this use * of a wrapper is based on dovecot's intrinsic "post-login scripting" * facility; for details, see http://wiki.dovecot.org/PostLoginScripting */ #include <unistd.h> #include <stdlib.h> #include <string.h> #include <sys/types.h> #include <sys/stat.h> #include <lastlog.h> #include <fcntl.h> #include <pwd.h> #include <syslog.h> #include <errno.h> #include <time.h> #define STRLEN 1024+1 #define LASTLOG "/var/adm/lastlog" #define NEWSHELL "/local/paths/newshell" #define BLOCKSHELL "/local/paths/blocksh" #define REAL_IMAP_SERVER "/local/paths/dovecot-imap" #define REAL_POP3_SERVER "/local/paths/dovecot-pop3" #define REAL_IMAP_NAME "dovecot-imap" #define REAL_POP3_NAME "dovecot-pop3" #define LOGNAME "dovecot: wrapper" int valid_shell(char *); void update_lastlog(uid_t, char *, char *); /*-----------------------------------------------------------------------*/ int main(int argc, char **argv) { char service[STRLEN]; char server[STRLEN], server_name[STRLEN], *u, *rh; int unknown_service = 0, len; struct passwd *p; /** the service name we've been invoked to wrap is determined **/ /** by the last four characters of our own basename ("imap" or **/ /** "pop3"): **/ len = strlen(argv[0]); (void)strcpy(service, argv[0] + (len-4)); if (strcmp(service, "imap") == 0) { (void)strcpy(server, REAL_IMAP_SERVER); (void)strcpy(server_name, REAL_IMAP_NAME); } else if (strcmp(service, "pop3") == 0) { (void)strcpy(server, REAL_POP3_SERVER); (void)strcpy(server_name, REAL_POP3_NAME); } else { unknown_service = 1; } /** prepare to log: **/ openlog(LOGNAME, LOG_PID, LOG_LOCAL0); if (unknown_service) { syslog(LOG_INFO, "can't handle unknown service '%s'", service); exit(1); } /** $USER is the only way we can determine who called us: **/ if (! (u = getenv("USER"))) { syslog(LOG_INFO, "aborting: no value supplied for $USER"); exit(2); } /** likewise, $IP is our only source for the host we were called **/ /** from: **/ if (! (rh = getenv("IP"))) { syslog(LOG_INFO, "aborting: no value supplied for (remote host) $IP"); exit(3); } /** grab $USER's password file entry: **/ if (! (p = getpwnam(u))) { syslog(LOG_INFO, "aborting: can't find a passwd entry for %s", u); exit(4); } /** is this user blocked? **/ if (strcmp(p->pw_shell, BLOCKSHELL) == 0) { /** yes, so we're out of here: **/ syslog(LOG_INFO, "aborting: %s is blocked", u); exit(5); } /** okay, but is the user's shell recognized? **/ if (! valid_shell(p->pw_shell)) { syslog(LOG_INFO, "aborting: %s has invalid shell %s", u, p->pw_shell); exit(6); } /** update the user's lastlog entry: **/ update_lastlog(p->pw_uid, service, rh); /** now run the real program for the requested service: **/ syslog(LOG_INFO, "%s, %s, %s", service, u, rh); argv[0] = server_name; (void) execv(server, argv); /** if we're still here, execv() failed: **/ syslog(LOG_INFO, "execv(%s) FAILED (%s), %s, %s", server_name, strerror(errno), u, rh); return(7); } /*-----------------------------------------------------------------------*/ int valid_shell(char *s) /* * return 1 if s represents a valid login shell, or 0 otherwise * * for our purposes, "valid" means anything returned by getusershell(3), * or NEWSHELL as a special case */ { char *next_shell; /** a NULL pointer can't be a valid shell: **/ if (! s) return(0); /** NEWSHELL is always valid: **/ if (strcmp(s, NEWSHELL) == 0) return(1); /** okay, we have to consult /etc/shells: **/ while ((next_shell = getusershell()) != NULL) { if (strcmp(s, next_shell) == 0) { endusershell(); return(1); } } /** if we're still here, we don't have a valid shell: **/ endusershell(); return(0); } /*-----------------------------------------------------------------------*/ void update_lastlog(uid_t uid, char *service, char *remote_system) /* * records the user's activity in the system lastlog file. * * Sylvain Robitaille (using code borrowed from the ssh source) * * 1997/11/21 * 2000/07/31 (call with the uid as a parameter) * */ { int fd; struct lastlog ll; const char *lastlog = LASTLOG; /** initialize the lastlog structure: **/ memset(&ll, 0, sizeof(ll)); /** fill in the data: **/ ll.ll_time = time(NULL); strncpy(ll.ll_line, service, sizeof(ll.ll_line)); strncpy(ll.ll_host, remote_system, sizeof(ll.ll_host)); /** update the lastlog file: **/ if ((fd = open(lastlog, O_RDWR)) >= 0) { lseek(fd, (off_t)(uid * sizeof(ll)), 0); if(write(fd, &ll, sizeof(ll)) != sizeof(ll)) { syslog(LOG_INFO, "Could not write %.100s: %.100s", lastlog, strerror(errno)); } close(fd); } else { syslog(LOG_INFO, "Could not open %.100s: %.100s", lastlog, strerror(errno)); } } 8<---------------------------- cut here -------------------------->8 ________________________________________________________________________ Steven Winikoff | Concordia University | Doyle's Law: Montreal, QC, Canada | Expenditures shall rise smw(a)alcor.concordia.ca | automatically to absorb any http://alcor.concordia.ca/~smw | increased income.

2 1

[Dovecot] Expunge working on folders, but not main mailbox
by Xev Gittler 05 Oct '08

05 Oct '08

I've recently installed dovecot, and while the behavior on folders is correct, the inbox cannot be expunged. This is 1.1.3 running on Fedora release 8 (Werewolf) on ext3 filesystems, using both thunderbird and squirrel clients. Any assistance would be appreciated. X # 1.1.3: /usr/local/etc/dovecot.conf info_log_path: /tmp/dovecot.log protocols: imap imaps pop3 pop3s disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login mail_location: mbox:~/Mail:INBOX=/var/spool/mail/%u mail_debug: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 auth default: verbose: yes passdb: driver: pam userdb: driver: passwd plugin: mail_log_events: all

3 3

[Dovecot] create folder automatically
by Nicolas Letellier 03 Oct '08

03 Oct '08

Hello. I install a sieve rule automatically when a mailbox is created, like: if exists "X-Spam-Flag" { fileinto "Junk"; stop; } However, sometimes, this folder does not exist. How create it automatically? Thanks! Regards, -- -Nicolas.

5 8

[Dovecot] dovecot-ldap.conf and gosaMailAlternateAddress
by william Famy 02 Oct '08

02 Oct '08

Hi. I am looking how to allow gosaMailAlternateAddress connection. I use postfix mail server under debian computer. this is my dovecot-ldap.conf hosts = 192.168.0.3 auth_bind = yes ldap_version = 3 base = dc=mydc user_attrs = gosaMailServer=postfix #user_filter = (&(objectClass=gosaMailAccount)(mail=%s)) user_filter = (&(objectClass=gosaMailAccount)(|(mail=%u)(gosaMailAlternateAddress=%u))) #(&(objectClass=gosaMailAccount)(mail=%u)) pass_attrs = mail=user,userPassword=password #pass_filter = (&(objectClass=gosaMailAccount)(mail=%s)) pass_filter = (&(objectClass=gosaMailAccount)(|(mail=%u)(gosaMailAlternateAddress=%u))) #(&(objectClass=gosaMailAccount)(mail=%u)) default_pass_scheme = CRYPT user_global_uid = vmail user_global_gid = vmail i can receveil mail to gosaMailAlternateAddress the filter is OK. But when i connect to imap to alternateadresse(a)myserver.org i try to connect with my mail mail(a)server2.org instead of alternate(a)server.org So how to change my dovecot-ldap.conf pass_attrs = mail=user,userPassword=password to allow alternate IMAP connection? regards. vs_ldap:/# ldapsearch -v -h 192.168.0.3 -x -W -D "cn=ldap, dc=mydc" -b dc=mydc "(&(objectClass=gosaMailAccount)(|(mail=mail@server2.org)(gosaMailAlternateAddress=alternate@server.org)))" ldap_initialize( ldap://192.168.0.3 ) Enter LDAP Password: filter: (&(objectClass=gosaMailAccount)(|(mail=alternate@server.org)(gosaMailAlternateAddress=alternate@server.org))) requesting: All userApplication attributes # extended LDIF # # LDAPv3 # base <dc=mydc> with scope subtree # filter: (&(objectClass=gosaMailAccount)(|(mail=alternate@server.org)(gosaMailAlternateAddress=alternate@server.org))) # requesting: ALL # # william famy, people, mydc dn: cn=william famy,ou=people,dc=mydc sn: famy givenName: william uid: wfamy cn: william famy gosaMailServer: postfix gosaMailQuota: 0 gosaMailDeliveryMode: [L] gosaSpamSortLevel: 0 gosaSpamMailbox: INBOX objectClass: gosaMailAccount objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: gosaAccount mail: mail(a)server2.org gosaMailAlternateAddress: alternate(a)server.org sambaLMPassword: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx sambaNTPassword: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx sambaPwdLastSet: xxxxxxxxxxxxx sambaBadPasswordCount: 0 sambaBadPasswordTime: 0 userPassword:: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1

1 1

Re: [Dovecot] disbale to responded to an unrequested SSL Certificate
by Andre Hübner 02 Oct '08

02 Oct '08

Hi List, > Hi dovecot-list, > > just a easy question today ;) > > Customer did on Server a PCI-Test to test security to fit worldpay > requirements. > > They found a critical risk at pop3s. (and some other things) > > This is the Textmesage: > ############ > Family: Remote Shell Access Critical 993/tcp 11875 > Description: > The remote host responded to an unrequested SSL Certificate. The remote > SSL server should have > sent back an Error message. This may indicate that the server is > vulnerable to a remote > flaw in the way that it handles unrequested certificates. You should > manually inspect the > SSL Server's configuration > ############ > > Background is that we use a wildcard-cert which is installed on ervery > machine and fits to servername. So you have to use the accredited > Hostname/Servername to make clean ssl connection pop3s/imaps without > warnings etc. > Problem should be that server sends no error when requested with other > hostname. This is significant part from dovecot.conf > > protocols = imap imaps pop3 pop3s > ssl_disable = no > ssl_cert_file = "/path/to/*.myhost.com.crt" > ssl_key_file = "/path/to/*.myhost.com.key" > ssl_ca_file = "/path/to/*.myhost.com.bundle.crt" > > Is there a Config-Option to send error when ssl-connect ist not > established to in cert accredited Hostname/Servername ? Did not found > something like this or did not really understand function of the options. > > I do not know backgrounds to this issue. Cant decide if it would be a > security risk or disproportionated wishes of securityexperts but i want to > satisfy this costumer. > How to handle thos? > > Thank you > Andre could be the solution to set ssl_listen to hostname where dovecot is running? pretty easy... O.o my tests were successful but would like to obtain other opinions.. Thanks Andre

2 1

[Dovecot] Annotation plugin for dovecot
by Bernhard Herzog 02 Oct '08

02 Oct '08

Hi, as part of an effort to make dovecot usable as the IMAP component in the Kolab Groupware system <http://kolab.org/>, we've started to develop a plugin that implements the IMAP METADATA extension. The plugin is still under development and development is focused on the plugin's use in Kolab, so it will at first only implement what's immediately needed to achieve that goal. The plugin is available as a mercurial repository at http://hg.intevation.org/kolab/dovecot-metadata-plugin/ More information about the current status of the plugin is available in the README file in the sources. Regards, Bernhard

3 3