January 2009 - dovecot

[Dovecot] allow_nets overridden by cache
by Guy 08 Jan '09

08 Jan '09

Hi, I've just started trying allow_nets on one of my servers. I have auth_debug and auth_verbose both enabled and the output is as follows: Oct 28 13:05:48 mink dovecot: auth-worker(default): auth(user(a)domain.net,x.x.x.x): allow_nets: Matching for network 127.0.0.1/8 Oct 28 13:05:48 mink dovecot: auth-worker(default): auth(user(a)domain.net,x.x.x.x): allow_nets: Matching for network 10.0.7.176/28 Oct 28 13:05:48 mink dovecot: auth-worker(default): passdb(user(a)domain.net,x.x.x.x): allow_nets check failed: IP not in allowed networks Oct 28 13:05:50 mink dovecot: auth(default): client out: FAIL 1265 user=username(a)aluminati.net Oct 28 13:05:50 mink dovecot: auth(default): cache(user(a)domain.net,x.x.x.x): hit: <hidden> user=user(a)domain.net Oct 28 13:05:50 mink dovecot: auth(default): client out: OK 1266 user=user(a)domain.net auth_cache_ttl is set to 300. If I set it to 1 then the allow_nets successfully rejects. Once I set it back up to 300 the cache overrides the result from the allow_nets check and let's the account log in even though the allow_nets check fails. I've tried waiting for longer than the 300 seconds and then logged in again, but I still get the same result as above. Is there a gotcha that I'm unaware of or have I done something stupid (which seems the most likely :P)? Thanks Guy -- Don't just do something...sit there!

2 4

[Dovecot] Setting IMAP keywords/flags on delivery
by Matt Doran 08 Jan '09

08 Jan '09

Hi there, We've been long time users of Dovecot, and have found it a great IMAP server. I don't think we've had any serious problems in the 3-4 years of use. So great work. :) We have a IMAP inbox that is accessed by a number of different users from Thunderbird. We have a rule in Thunderbird to flag new emails as "TO DO", so someone can unflag the email once it has been actioned. This process works fairly well for a simple workflow, but problems arise when someone connects to the inbox with a Thunderbird instance that doesn't have the "TO DO" rule configured. The email will not be flagged properly. :( I'd like to be able to set this flag/keyword when the mail is delivered to the inbox, on the server side. That way the flag will be set no matter which client accesses the Inbox first. We currently use mail drop for our server-side mail filtering .... and would like to do a similar thing with this flagging process. We're using Dovecot 1.0.15 on Debian Testing, and use Maildir storage and maildrop as our delivery agent. I've read about how the keywords and Thunderbird labels work in the wiki article here (http://wiki.dovecot.org/MailboxFormat/Maildir) So I could probably write some sort of script to query the "dovecot-keywords" file, and rename the Maildir file to set the appropriate flag. But this sounds a like a bit of a hack, and maybe a little dangerous. Does anyone have any recommendations as to how I could achieve something like this? I'm keen to hear any ideas, whether it's through scripting, or some sort of scriptable/command-line IMAP client. Ideally, we'd have a way to set the flag at the time when the mail is delivered.... or when the first client retrieves any new mail? Thanks in advance!! -- Matt Doran PaperCut Software International Pty. Ltd. Phone: +61 (3) 9807 5767 E-mail: matt.doran(a)papercut.com Profile: http://www.papercut.com/about/#matt Blog: http://www.papercut.com/blog/

2 3

[Dovecot] Default dirs in ./configure?
by Peter Lindgren 08 Jan '09

08 Jan '09

Hi! I try to build a new 1.1.7 installation. Since I'm not a large sysadmin, just my own private mail server admin, I just wonder why the sysconf and state dirs defaults to $prefix? Maybe I'm old-school, but isn't /etc and /var, respectively, a better default than /usr/local? Should require two new variables in the configure script, though. (and yes, I know I set them with --sysconfdir=/etc --localstatedir=/var --sharedstatestatedir=/var ) /Peter -- Peter Lindgren http://www.norrskenkonsult.com

6 6

Re: [Dovecot] login fails when username has apostrophe
by Karl Latiss 07 Jan '09

07 Jan '09

Sorry to bump so quickly but I have a handful of users who can't log in at the moment and would like to get this fixed. Am I missing a config option or is this a bug? The only reference I can find in the mailing list archives is that this configuration should be supported. Karl. -------------------------------------------------------------- Hi I've added the apostrophe character to auth_username_chars however authentication still fails. I'm using LDAP with the following details: dovecot version 1.1.7 openldap client library 2.4.11 With auth_verbose = yes and auth_debug = yes set I see the following in the logs. Note the initial escaped apostrophe and the subsequent escaped escape in the filter! ----- start log ----- Jan 5 16:15:05 www-example1 dovecot: auth(default): client in: AUTH 1 PLAIN service=imap lip=10.1.1.180 rip=10.3.96.60 lport=143 rport=48733 resp=<hidden> Jan 5 16:15:05 www-example1 dovecot: auth(default): ldap(julie.o \'reilly(a)example.com,10.3.96.60) pass search: base=dc=example, dc=com scope=subtree filter=(&(objectClass=qmailUser)(uid=julie.o\\'reilly)) field s=mail,userPassword Jan 5 16:15:05 www-example1 dovecot: auth(default): ldap(julie.o \'reilly(a)example.com,10.3.96.60) unknown user Jan 5 16:15:07 www-example1 dovecot: auth(default): client out: FAIL 1 user=julie.o\'reilly(a)example.com failed, 1 attempts): user=<julie.o\'reilly(a)example.com>, method=PLAIN, rip=10.3.96.60, lip=10.1.1.180 ----- end log ----- Users without apostrophes can authenticate successfully. If I've missed anything please let me know. # dovecot -n # 1.1.7: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.0-RELEASE amd64 ufs protocols: imap listen: 10.1.1.180 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login login_greeting_capability: yes verbose_proctitle: yes first_valid_uid: 999 first_valid_gid: 999 mail_privileged_group: mail mail_uid: 999 mail_gid: 999 mail_location: maildir:/usr/home/vmail/%Ld/%Ln imap_client_workarounds: delay-newmail netscape-eoh tb-extra-mailbox-sep auth default: mechanisms: plain login username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@' username_format: %Lu passdb: driver: ldap args: /usr/local/etc/dovecot-ldap.conf userdb: driver: ldap args: /usr/local/etc/dovecot-ldap.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 user: vmail # grep -v '^ *$#.*$\?$' dovecot-ldap.conf uris = ldap://www-example1:389 dn = uid=xxxx,dc=example,dc=com dnpass = xxxx sasl_bind = no tls = no auth_bind = no ldap_version = 3 base = dc=example, dc=com user_attrs = homeDirectory=home=/usr/home/vmail/%L $,mailMessageStore=mail=maildir:/usr/home/vmail/%L$,=uid=999,=gid=999 user_filter = (&(objectClass=qmailUser)(uid=%n)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=qmailUser)(uid=%n)) default_pass_scheme = PLAIN -- Karl Latiss <klatiss(a)nextdigital.com> Next Digital

5 19

[Dovecot] Problem with opening ports in alpha5 ?
by Bruce A. Mallett 07 Jan '09

07 Jan '09

If I leave the "listen" value as the default in /etc/dovecot.conf I'll get a message similar to the following on each port that it tries to open during startup: # dovecot -F Fatal: listen(::, 143) failed: Address already in use If I set either: listen = * or listen = [::] then it will start up fine. Perhaps it is as though the code tries to open the port twice for both ip4 and ip6? - Bruce

2 6

[Dovecot] Apple patches 11-14
by Mike Abbott 07 Jan '09

07 Jan '09

These are the last patches for now, and they're small. The base for each of them is dovecot-1.1.7 + Apple patches 9 and 10, again not because of a logical dependency but just because these patches change parts of the earlier patches. Patch #11 adds a few dtrace providers to key points in the code. We are still validating the correct placement and usefulness of these. One cool thing about dtrace is that when not in use the hooks literally are just a couple of no-op instructions. Patch #12 increases many listen queue sizes to handle high loads better. The new values are not necessarily the best possible values but they do allow more throughput. Patch #13 makes dovecot adapt to dynamic host identity changes upon config reload. Patch #14 covers three miscellaneous changes, to support more file descriptors and an "unlimited" number of mail processes, and a different default mail user. That's all our patches for now!

3 5

[Dovecot] Obtaining the chroot-cage directory of the mailstore
by Stefan Jurisch 07 Jan '09

07 Jan '09

Hello, I'd like to find a function in the sourcecode which enables me to get the chroot-path of the mailstore, so I can concatenate it with the result of mail_storage_get_mailbox_path to get the full path of a mailbox within the filesystem. Does such a function exist? Who can help me? Thanks in advance. Stefan -- SIEGNETZ.IT GmbH { w3o-services } Schneppenkauten 1a D-57076 Siegen Tel.: 0271 68193-0 Fax: 0271 68193-29 Geschäftsführer: Oliver Seitz Handelsregister-Nummer: HRB4838 Registergericht: Amtsgericht Siegen -------------------------------- Das Wort “WINDOWS” stammt aus einem alten Sioux-Dialekt und bedeutet: “Weißer Mann starrt durch Glasscheibe auf Sanduhr.” -------------------------------- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 2

[Dovecot] Bug Report on Expire PlugIn (update)
by Jörg Leis 07 Jan '09

07 Jan '09

I did the same thing on the console and this is what happens: bash-3.2$ openssl s_client -connect example.com:993 CONNECTED(00000003) [...] Server certificate -----BEGIN CERTIFICATE----- [...] -----END CERTIFICATE----- [...] CA --- No client certificate CA names sent --- SSL handshake has read 4595 bytes and written 322 bytes --- New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA Server public key is 2048 bit Compression: NONE Expansion: NONE SSL-Session: [...] --- * OK Dovecot ready . login admin(a)example.com secret . OK Logged in. . select INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft KMAILFORWARDED KMAILTODO KMAILWATCHED KMAILIGNORED $FORWARDED $TODO $WATCHED $IGNORED NonJunk) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft KMAILFORWARDED KMAILTODO KMAILWATCHED KMAILIGNORED $FORWARDED $TODO $WATCHED $IGNORED NonJunk \*)] Flags permitted. * 4 EXISTS * 0 RECENT * OK [UNSEEN 1] First unseen. * OK [UIDVALIDITY 1230136990] UIDs valid * OK [UIDNEXT 77] Predicted next UID . OK [READ-WRITE] Select completed. . copy 1 Trash closed

1 0

[Dovecot] IMAP Folder permissions
by Stuart Gall 07 Jan '09

07 Jan '09

Hello, Happy new year. I have a dovecot with exim installation. I am using virtual users for mail and IMAP. When dovecot creates a folder from imap user the permissions are rwx------ I need them to be rwxrwx--- Is there a way to change this in the configuration file ? TIA Stuart Stuart Gall ------------------------------------------------------------------------ ---------- There are three sorts of mathematician: those that can count and those that can't. ------------------------------------------------------------------------ ----------

2 1

[Dovecot] writing a dovecot plugin / segfault
by Stefan Jurisch 07 Jan '09

07 Jan '09

Hi together, I am new to this list and new to dovecot itself. I have to write a plugin that implements some ACL-voodoo to be used instead of the standard ACL stuff of dovecot (it shall allow just application-driven folder-sharing - no more, no less). Though I started programming with C, my last experiences are some days old, but now I have written the function sekeletons and the registration function with the 'register-command"-calls etc. The makefile-stuff I copied from the imap-quota-plugin and modified it, so all appearances of "lib11_imap_quota_plugin..." and similar are now found as "lib11_folderacl_plugin..." and so on. In short words: I think I have done all nessessary mods to the source (I tried it some days ago with a slightly older version of dovecot, and until I did some unknown thing, it worked quite well...) to make the whole thing work. One example function is (just testing at the moment): /* MYRIGHTS <folder>: retreive the rights of the current folder */ static bool cmd_myrights(struct client_command_context *cmd) { struct mail_storage *storage; struct mailbox *folder; const char *folder_name; string_t *response; /* read argument: <folder> */ if (!client_read_string_args(cmd, 1, &folder_name)) return FALSE; /* work done from here... */ /* for the moment, do a dummy response */ str_append(response, "* MYRIGHTS "); str_append(response, folder_name); str_append(response, " lrswipcda"); client_send_line(cmd->client, str_c(response)); client_send_tagline(cmd, "OK Completed."); return TRUE; } But when testing via "telnet localhost 143" and doing a "20 myrights INBOX" the imap thread just crashes and does not give any answer. in /var/log/messages I only find something like the following entry: Jan 5 13:40:12 kungfu kernel: imap[8991]: segfault at 4 ip 080d5c67 sp bf82b040 error 4 in imap[8048000+b8000] Maybe somebody can tell me, what this is? If needed, I also post the complete code itself somewhere. Thanks in advance. Stefan -- SIEGNETZ.IT GmbH { w3o-services } Schneppenkauten 1a D-57076 Siegen Tel.: 0271 68193-0 Fax: 0271 68193-29 Geschäftsführer: Oliver Seitz Handelsregister-Nummer: HRB4838 Registergericht: Amtsgericht Siegen -------------------------------- Das Wort “WINDOWS” stammt aus einem alten Sioux-Dialekt und bedeutet: “Weißer Mann starrt durch Glasscheibe auf Sanduhr.” -------------------------------- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 1