October 2009 - dovecot

[Dovecot] v1.1.19 released
by Timo Sirainen 04 Oct '09

04 Oct '09

http://dovecot.org/releases/1.1/dovecot-1.1.19.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.19.tar.gz.sig This is hopefully the last v1.1.x release. - file_set_size() was broken with OSes that didn't support posix_fallocate() (almost everyone except Linux), causing all kinds of index file errors. - ldap: Fixed hang when >128 requests were sent at once. - Fixed a crash in saving messages where message contained a CR character that wasn't followed by LF (and the CR happened to be the last character in an internal buffer). - deliver: Don't send rejects to any messages that have Auto-Submitted header. This avoids emails loops. - Message decoding fixes (mainly for IMAP SEARCH, Sieve).

2 1

[Dovecot] v1.2.5 released
by Timo Sirainen 04 Oct '09

04 Oct '09

http://dovecot.org/releases/1.2/dovecot-1.2.5.tar.gz http://dovecot.org/releases/1.2/dovecot-1.2.5.tar.gz.sig I'll be more or less gone for next two weeks. Tomorrow I'm heading to MacSysAdmin in Sweden to give a Dovecot talk, the next week I'll be in Finland on vacation. After that I'm hoping to get v2.0.alpha1 released in October. * Authentication: DIGEST-MD5 and RPA mechanisms no longer require user's login realm to be listed in auth_realms. It only made configuration more difficult without really providing extra security. * zlib plugin: Don't allow clients to save compressed data directly. This prevents users from exploiting (most of the) potential security holes in zlib/bzlib. + Added pop3_save_uidl setting. + dict quota: When updating quota and user isn't already in dict, recalculate and save the quota. - file_set_size() was broken with OSes that didn't support posix_fallocate() (almost everyone except Linux), causing all kinds of index file errors. - v1.2.4 index file handling could have caused an assert-crash - IMAP: Fixes to QRESYNC extension. - virtual plugin: Crashfix - deliver: Don't send rejects to any messages that have Auto-Submitted header. This avoids emails loops. - Maildir: Performance fixes, especially with maildir_very_dirty_syncs. - Maildir++ quota: Limits weren't read early enough from maildirsize file (when quota limits not enforced by Dovecot) - Message decoding fixes (mainly for IMAP SEARCH, Sieve).

4 3

[Dovecot] Configuring for virtual users in Postfix
by Jerry 03 Oct '09

03 Oct '09

FreeBSD-7.2 with Postfix-2.7x OK, this is my first attempt to configure Dovecot using Postfix and virtual users. In the LDA.Postfix.txt file, there is a reference to making the following setting: dovecot_destination_recipient_limit = 1 virtual_mailbox_domains = your.domain.here virtual_transport = dovecot However, Postfix does not recognize the dovecot_destination_recipient_limit = 1 setting. There is a "virtual_destination_recipient_limit =" setting in Postfix. Is that the setting that I should tweak? -- Jerry gesbbb(a)yahoo.com There is no TRUTH. There is no REALITY. There is no CONSISTENCY. There are no ABSOLUTE STATEMENTS. I'm very probably wrong.

4 4

[Dovecot] Mailbox locking problem with iphone and POP3
by Bill Dunn - VCI Internet Services 03 Oct '09

03 Oct '09

I have a problem I can't seem to fix. I have dovecot configured to do POP3 with plain text authentication using a MySQL database. I am using Dovecot 1.0.7 with fcntl locking. My problem has been when an iPhone/iPod checks email. The iPhone/iPod doesn't disconnect with a TCP FIN packet and it leaves the mailbox in a locked state and prevents the user's desktop from checking email. I have tried changing the file locking method and other config file options without any luck. Oddly, I am using the last version of cucipop on another server with fcntl and lockf file locking and it doesn't have this problem. If someone could clue me in I'd be very grateful. Bill

3 6

[Dovecot] Dovecot LDAP Auth & Usernames with dashes
by Chris Jones 02 Oct '09

02 Oct '09

Hi All, We're seeing an issue with LDAP auth when the username contains a - char. We're using 1.0.15 as packaged for Debian Lenny Oct 2 12:29:02 silver dovecot: auth(default): LDAP: binding failed (dn (none)): Protocol error Oct 2 12:29:03 silver dovecot: imap-login: Aborted login (1 authentication attempts): user=<sci-fi(a)sucs.org>, method=PLAIN, rip=::ffff:127.0.0.1, lip=::ffff:127.0.0.1, secured Setup works perfectly for the other 200 users, none of whom have a - in the username. Any suggestions? -- Chris Jones, SUCS Admin http://sucs.org Dovecot Conf dovecot -n # 1.0.15: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s listen: [::] ssl_cert_file: /usr/local/sucs-pki/certs/sucs+subCA.crt ssl_key_file: /usr/local/sucs-pki/private/sucs.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: passdb: driver: pam args: dovecot passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: passwd From /etc/dovecot/dovecot-ldap.conf hosts = localhost auth_bind = yes base = ou=People,dc=sucs,dc=org user_filter = (&(objectClass=posixAccount)(uid=%u))

2 1

[Dovecot] IMAP proxying for ALL users to internal mail server
by Vitaliy Vladimirovich 02 Oct '09

02 Oct '09

Hi! How must I adjust Dovecot for proxying all users from the Internet to the internal Exchange Mail Server? This is my config files (most important): dovecot.conf protocol imap { #listen = *:10143 ssl_listen = 194.0.148.10:993 auth default { mechanisms = plain login passdb passwd-file { args = /usr/local/etc/dovecot-%Ls.conf } } dovecot-imap.conf testmail1@example.org::0:0::::proxy host=10.0.10.3 port=143 nopassword With this configurations all works fine, but if I trying change dovecot-imap.conf as below %n@%d::0:0::::proxy host=10.0.10.3 port=143 nopassword I get an error: Oct 2 15:10:58 relay dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=199.10.149.10 rip=199.10.149.3 lport=993 rport=28316 resp=<hidden> Oct 2 15:10:58 relay dovecot: auth(default): passwd-file(testmail1(a)example.org,199.10.149.3): lookup: user=testmail1(a)example.org file=/usr/local/etc/dovecot-imap.conf Oct 2 15:10:58 relay dovecot: auth(default): passwd-file(testmail1(a)example.org,199.10.149.3): unknown user Oct 2 15:10:59 relay dovecot: auth(default): new auth connection: pid=62532 Oct 2 15:11:00 relay dovecot: auth(default): client out: FAIL 1 user=testmail1(a)example.org Any ideas??

4 10

[Dovecot] Problem with local pine after upgrade to 1.2.5
by Gerhard Wiesinger 02 Oct '09

02 Oct '09

Hello, I upgraded from dovecot 1.1.17 to 1.2.5. Works well so far with e.g. Thunderbird and SSL. One problem left: pine doesn't work any more with rsh: cat .pinerc (filtered): rsh-path= rsh-command=/usr/sbin/dovecot --exec-mail imap Starting pine: 1.) Opening INBOX 2.) [>SECURITY PROBLEM: insecure server advertised AUTH=PLAIN<] 3.) Afterwards I'm asked for a password: HOST: localhost (INSECURE) ENTER LOGIN NAME [user] : 3.) cancel: [IMAP protocol error: Authentication aborted by client.] Config: no changes at all. Any ideas why this is broken? Thnx. Ciao, Gerhard

2 2

[Dovecot] Folder Management Dovecot >1.2
by Carlos Candeias 02 Oct '09

02 Oct '09

Regardless of the mail client no user can modify, move, delete or subscribe an imap folder with Dovecot >1.2.1 (meanwhile 1.2.5). Dovecot apparently have some dotlock problems: (From dovecot.log) Oct 02 14:58:19 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:19 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:20 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:20 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:20 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:20 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:21 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:21 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:21 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:21 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted This was an attemt of changing a subscription. Another weird point: I can create an IMAP folder although it does not show up in the folder list. But the new folder is in the subscription list, just marked as unsubscribed and there is no way to change that. This problem is safely reproducible and I wonder whether I should be really the only person having this trouble. I'm using MAILDIR and simple plain test authentification (internal mail server). The location is mail_location: maildir:~/.mail/Maildir which means a subfolder in each user's home directory. All homes are exported to NFS, but the Dovecot is just on the same server and thus accesses locally. Downgrade to version 1.1.17 solves all problems. Archlinux x86_64, Linux 2.6.30 It would be really great if somebody could understand the cause and suggest a solution!

3 4

[Dovecot] Problem with LSUB and public namespace
by Julien Danjou 02 Oct '09

02 Oct '09

Hi, I'd like to know if the following is normal. I've a setup with 2 namespace (private/public) where each user can use subscriptions. This problem is triggered by claws-mail, which uses LSUB to get subscribed mailboxes: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN] Dovecot ready. . login user password . namespace * NAMESPACE (("INBOX." ".")) NIL (("public." ".")) . OK Namespace completed. . subscribe public.Admin . OK Subscribe completed. . LSUB "" "%" * LSUB () "." "INBOX" . OK Lsub completed. LSUB does not return "public" as namespace :-( Is this a bug in dovecot, a bug in Claws mail, or a misconfiguration of my dovecot server? I can provide more info if needed. Cheers, -- Julien Danjou // ᐰ <julien(a)danjou.info> http://julien.danjou.info // 9A0D 5FD9 EB42 22F6 8974 C95C A462 B51E C2FE E5CD // There is nothing under this line.

2 3

[Dovecot] Timeout waiting for handshake from auth server
by Frank Bonnet 02 Oct '09

02 Oct '09

Hello I have that kind of messages in dovecot.log anyone has those troubles ? the machine is Debian etch 64 bits dovecot 1.2.5 has been compiled on the machine it run NIS client to a YPLDAPD server thank you Oct 02 12:15:27 auth(default): Error: do_ypcall: clnt_call: RPC: Timed out Oct 02 12:15:33 pop3-login: Error: Timeout waiting for handshake from auth server. my pid=16755, input bytes=0 Oct 02 12:15:46 auth(default): Error: YPBINDPROC_DOMAIN: Domain not bound Oct 02 12:15:46 pop3-login: Error: Timeout waiting for handshake from auth server. my pid=16760, input bytes=0 Oct 02 12:15:51 imap-login: Error: Timeout waiting for handshake from auth server. my pid=16761, input bytes=0 Oct 02 12:15:51 imap-login: Error: Timeout waiting for handshake from auth server. my pid=16762, input bytes=0

2 2