November 2009 - dovecot

[Dovecot] LDA: handling non-existent mail dirs
by Edgar Fuß 09 Dec '09

09 Dec '09

We have users existing in LDAP but not supposed to receive mail. We used to handle that (somewhat ungracefully) by simply not creating the top mail directory for those accounts. Since switching to Dovecots LDA, these non-existing dirs are considered temporary failures and so the junk mails pile up in postfix' queue Would it be possible for deliver to optionally treat this as a permanent error? I know the clean solution woud be checking for an LDAP attribute in postfix before even accepting the mail.

3 2

[Dovecot] FTBFS with binutils-gold
by Marco Nenciarini 09 Dec '09

09 Dec '09

As reported in debian bug #554306 [1] dovecot fails to build with GNU binutils-gold or setting LDFLAGS=-Wl,--no-add-needed http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=554306 The problem is that liblber isn't explicitly declared as a dependence when dovecot is compiled with ldap support. The attached patch fixes this little error. Regards, Marco -- --------------------------------------------------------------------- | Marco Nenciarini | Debian/GNU Linux Developer - Plug Member | | mnencia(a)prato.linux.it | http://www.prato.linux.it/~mnencia | --------------------------------------------------------------------- Key fingerprint = FED9 69C7 9E67 21F5 7D95 5270 6864 730D F095 E5E4

2 1

[Dovecot] dovecot v 1.28 and virtual folders
by Jim Richard 09 Dec '09

09 Dec '09

I haven't been able to make this work. I've experimented with different settings in my dovecot.conf for hours. I have a simple single user ubuntu setup, nothing fancy and would just like to have a virtual "unread" folder of my main INBOX, for use with Squirrelmail So, with just this, all good... subfolders look like .INBOX.duplicates for example in the file system namespace private { separator = . location = maildir:~/Maildir inbox = yes } now, when I try to add a virtual namespace namespace private { subscriptions = yes list = yes inbox = no prefix = virtual. separator = . location = virtual:~/Maildir/virtual } ~/Maildir/virtual does exist in the filesystem, I can "subscribe" to virtual but if I try to create a sub folder of it I get ERROR: Could not complete request. Query: CREATE "virtual.test" Reason Given: [CANNOT] Can't create virtual mailboxes Squirrelmail is great because it has some nice IMAP testing tools, so for example, with my current dovecot config I can test the NAMESPACE command, is that the correct response? Request: A003 NAMESPACE Response: * NAMESPACE (("" ".")("virtual." ".")) NIL NIL Namespace completed. I'm sure the issue is a fundamental lack of understanding of a concept here ... Any help would be appreciated. thank you, -Jim

2 1

[Dovecot] quote warning not being triggered (yet again)
by Ralf Hildebrandt 09 Dec '09

09 Dec '09

I'm using 1.2.6 with the managesieve patch and maildir++ quotas (via the maildirsite file). Again, I found that the quota warning is not bering triggered. Testing via: smtp-source -4 -f sender(a)charite.de -t recipient(a)charite.de -m 1 -l 1000000 -C 1 mail.charite.de:submission recipient(a)charite.de being a mailbox with a 10.0 MB limit. I attached dovecot -n and the quota warn script. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

2 9

[Dovecot] Vacation message with Sieve
by Rene Bakkum 02 Dec '09

02 Dec '09

Hello all, I am trying to get my vacation messages to work correctly. In general it works like how I want, and replies when a message is arived to for example info(a)domain.com, but I have some problems to get my vacation message to work on catch-all boxes. Is there an option to for example auto-reply on every mail that is sendto @domain.com? I am using Ubuntu 9.10 default packages, which are the following versions: dovecot -n # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.31-14-server x86_64 Ubuntu 9.10 ext4 mail_plugins = cmusieve My example file of the vacation message I use is: require ["vacation"]; vacation # Reply at most once a day to a same sender :days [vacationmessage_delay_days] :subject "Autorespond: [vacationmessage_subject]" # List of recipient addresses which are included in the auto replying. # If a mail's recipient is not on this list, no vacation reply is sent for it. :addresses ["[username]@[domain]"] "[vacationmessage_message]"; I tried changing [username]@[domain] into @[domain] or *@[domain], but that is giving me errors. Anyone has any pointers how to achieve this (if its possible at all)... Regards, Rene

10 24

[Dovecot] Can't start dovecot from heartbeat
by John Gray 01 Dec '09

01 Dec '09

I get the following error: Fatal: epoll_create(): Too many open files (you may need to increase /proc/sys/fs/epoll/max_user_instances) Works fine if I start it by hand, I'm guessing it has to due with the environment heart starts it in? My first thought was to do exactly what the message suggests, but my kernel doesn't appear to define max_user_instances, but there is a max_user_watches. I'm running 1.2.8, by the way. But I had a similar problem with earlier version too. John

2 2

[Dovecot] Problem with dovecot configuration + mysql (I think)
by Joss Red 01 Dec '09

01 Dec '09

Hi everybody, I have a problem after configuring dovecot to work with mysql (Debian Etch System). When i send an email from outside, i have an undelivred mail returned to sender saying : Relay access denied (in reply to RCPT TO command) In my dovecot log file i have these errors : --------------------- Nov 28 20:08:27 myhost postfix/smtpd[5087]: connect from smtp5-g21.toto.com [1.2.3.4] Nov 28 20:08:27 myhost postfix/smtpd[5087]: NOQUEUE: reject: RCPT from smtp5-g21.toto.com [1.2.3.4]: 554 5.7.1 <mymail(a)test.com>: Relay access denied; from=<outside-mail(a)toto.com> to=<mymail(a)test.com> proto=ESMTP helo=<smtp5-g21.toto.com> Nov 28 20:08:28 myhost postfix/smtpd[5087]: disconnect from smtp5-g21.toto.com [1.2.3.4] ---------------------- What do you think is the problem ? Thanks,

3 4

[Dovecot] Postfix issue but I want to fix it here...
by david＠davidwbrown.name 01 Dec '09

01 Dec '09

Hello, Dovecot bunch and Timo. I am using Sylpheed as my Dovecot/IMAP client. At home behind my LAN Sylpheed can send email because the Postfix SMTPd views my LAN as a trusted network. No such luck when I'm away from home. I know it has something to do with configuring the relay access elements but what I have tried so far does not work. I'm sure someone has had this simple issue previously. The error condition and other particulars follow: OS: CentOS, Windows XP SMTPd: Postfix 2.3.3 IMAP: Dovecot 1.2 Mail client: Sylpheed 2.7.1 Error condition: Error occurred while sending the message: 554 5.7.1 <messages-noreply(a)linkedin.com>: Relay access denied

4 3

[Dovecot] Dovecot SSL limitations
by Thomas Hummel 01 Dec '09

01 Dec '09

Hello Timo, I'd like to check if my understanding of dovecot-1.2.x's SSL certificate handling is correct : SSL does not provide the server any mechanism to choose which certificate it must send relatively to the name the client is using. Thus, if you want to use different certificates, you have to listen to different addresses. This is an SSL limitation, not a dovecot nor IMAP limitation. This is the reason why it's possible to use different certificates for IMAP and POP3. But it seems to work only with those two : As a matter of fact, even if you listen to different addresses, how would you tell dovecot to send this certificate for this address and that certificate for that address, since there is no IP dependent section (as in apache IP-based virtual host for instance) ? It seems the only way would be to have more than one instance of dovecot (several dovecot with different config files). The problem is that some clients may be configured with mail.my.domain, some others with imap.my.domain, ...etc... Hence the need to have different certificates with those different names as cn. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

4 5

Re: [Dovecot] Dovecot 1.2.x masteruser proxy problem
by Tom Mihalicek 30 Nov '09

30 Nov '09

The problem was in auth_bind=yes in dovecot-ldap.conf i didnt read thoroughly the http://wiki.dovecot.org/Authentication/MasterUsers?action=show&redirect=Mas… You should also add the pass=yes setting to the master passdb if possible. It means that Dovecot verifies that the login user really exists before allowing the master user to log in. Without the setting if a non-existing login username is given, depending on the configuration, it could either return an internal login error (the userdb lookup failed) or create a whole new user (with eg. static userdb). pass=yes doesn't work with PAM or LDAP with auth_bind=yes, because both of them require knowing the user's password. Tom Mihalicek wrote: > > Greetings to all > > I need a masteruser/proxy account for some applications to be implemented > and i am having some problems. Normal users are proxyied through > ldap queries to the remote machine and this is working like it sopose to, > but i can't make the master user to work. Below are both the dovecot.conf > and dovecot-ldap.conf and verbose logs on the proxy machine. > > If i log directly on the remote machine that should be proxied everything > is working normal ... > > ### dovecot.conf > > protocols = pop3 imap managesieve > > mail_uid = 10021 > mail_gid = 10021 > mail_privileged_group = vmail > mail_access_groups = vmail > > log_path = > info_log_path = > log_timestamp = "%b %d %H:%M:%S " > login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c > login_log_format = %$: %s > mail_log_prefix = "%Us(%u): " > > disable_plaintext_auth = no > login_process_per_connection=yes > auth_default_realm = example.com > login_processes_count = 8 > login_max_processes_count = 128 > login_max_connections = 256 > verbose_proctitle = yes > max_mail_processes = 512 > > mail_debug = yes > auth_verbose = yes > auth_debug = yes > auth_debug_passwords = yes > > auth_master_user_separator = * > login_chroot = yes > > ssl = no > protocol imap { > imap_client_workarounds = delay-newmail outlook-idle netscape-eoh > tb-extra-mailbox-sep > listen = xx.xx.xx.xx:143 > imap_max_line_length = 65536 > imap_logout_format = bytes=%i/%o > mail_max_userip_connections = 10 > } > > protocol pop3 { > pop3_uidl_format = %08Xu%08Xv > pop3_client_workarounds = outlook-no-nuls oe-ns-eoh > pop3_enable_last = yes > pop3_uidl_format = %08Xu%08Xv > listen = xx.xx.xx.xx:110 > mail_max_userip_connections = 10 > } > > protocol managesieve { > listen = xx.xx.xx.xx:2000 > login_executable = > /usr/local/dovecot/libexec/dovecot/managesieve-login > mail_executable = /usr/local/dovecot/libexec/dovecot/managesieve > managesieve_max_line_length = 65536 > managesieve_implementation_string = dovecot > managesieve_logout_format = bytes ( in=%i : out=%o ) > } > > auth default { > mechanisms = plain login > user = vmail > > passdb passwd-file { > args = /etc/dovecot/passwd.masterusers > master = yes > pass = yes > } > > passdb ldap { > args = /etc/dovecot/dovecot-ldap.conf > } > > userdb ldap { > args = /etc/dovecot/dovecot-ldap.conf > } > > socket listen { > master { > path = /var/run/dovecot/auth-master > mode = 0600 > user = vmail > group = vmail > } > client { > path = /var/spool/postfix/dovecot-auth > mode = 0660 > user = postfix > group = postfix > } > } > } > > ### dovecot-ldap.conf > > hosts = ldap.example.com > ldap_version = 3 > auth_bind = yes > dn = cn=vmail,dc=example,dc=com > dnpass = secret_pass > base = ou=Users,domainName=%d,o=domains,dc=example,dc=com > scope = subtree > deref = never > user_filter = > (&(mail=%u)(objectClass=mailUser)(accountStatus=active)(enabledService=mail)(enabledService=%Ls)) > user_attrs = > storageBaseDirectory=home,mailHost=host,=proxy=yes,=nologin=yes,=nodelay=yes > pass_filter = > (&(mail=%u)(objectClass=mailUser)(accountStatus=active)(enabledService=mail)(enabledService=%Ls)) > pass_attrs = > userPassword=password,mailHost=host,=proxy=yes,=nologin=yes,=nodelay=yes > default_pass_scheme = CRYPT > > ### /var/log/mail/dovecot.info > > Nov 30 14:26:59 dougie dovecot: auth(default): new auth connection: > pid=5873 > Nov 30 14:27:28 dougie dovecot: auth(default): client in: AUTH 1 PLAIN > service=pop3 lip=xx.xx.xx.xx rip=192.168.22.222 > lport=110 rport=36639 > resp=AHRtaWhhbGljZWtAeG5ldC5sYW4qbWlncmF0aW9uQHhuZXQuaHIAbTFncjR0MTBu > Nov 30 14:27:28 dougie dovecot: auth(default): > passwd-file(migration(a)example.com,192.168.22.222,master): lookup: > user=master_user(a)example.com > file=/etc/dovecot/passwd.masterusers > Nov 30 14:27:28 dougie dovecot: auth(default): > passdb(master_user(a)example.com,192.168.22.222,master): Master user logging > in as some_user(a)example.com > Nov 30 14:27:28 dougie dovecot: auth(default): > ldap(some_user(a)example.com,192.168.22.222): bind search: > base=ou=Users,domainName=example.com,o=domains,dc=example,dc=com > filter=(&(mail=some_user@example.com)(objectClass=mailUser)(accountStatus=active)(enabledService=mail)(enabledService=pop3)) > Nov 30 14:27:28 dougie dovecot: auth(default): > ldap(some_user(a)example.com,192.168.22.222): result: > mailHost(host)=xx.xx.xx.xx > Nov 30 14:27:28 dougie dovecot: auth(default): > ldap(some_user(a)example.com,192.168.22.222): invalid credentials (given > password: master_password) > Nov 30 14:27:28 dougie dovecot: auth(default): client out: FAIL 1 > user=some_user(a)example.com authz nodelay host=xx.xx.xx.xx > proxynologin pass=master_password master=master_user(a)example.com > Nov 30 14:27:28 dougie dovecot: pop3-login: Ignoring unknown passdb extra > field: authz > > > -- View this message in context: http://old.nabble.com/Dovecot-1.2.x-masteruser-proxy-problem-tp26574804p265… Sent from the Dovecot mailing list archive at Nabble.com.

1 0