February 2009 - dovecot

[Dovecot] TLS / Dovecot / POP3
by John Espiro 22 Feb '09

22 Feb '09

I am using Thunderbird 2.x as my client, Dovecot on the server (POP3 not IMAP). Currently I have in my conf file: protocols = pop3s pop3 ssl_disable = no ssl_cert_file = /usr/share/ssl/certs/dovecot.pem ssl_key_file = /usr/share/ssl/private/dovecot.pem ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat disable_plaintext_auth = yes login = pop3 In Thunderbird, I have the email server setup to: - Port 110 - TLS Here's my question: If I change protocols = pop3s pop3 to protocols = pop3s I can no longer connect to my mail server via Thunderbird unless I setup Thunderbird to use SSL. Am I doing something wrong? Thanks, John

2 1

[Dovecot] LDAP documentation cleanups
by Timo Sirainen 22 Feb '09

22 Feb '09

I remember some people also complained how the LDAP documentation was messy. Here's my attempt at cleaning it up: http://wiki.dovecot.org/AuthDatabase/LDAP Anything still unclear? (Other than SSL/TLS setup. Someone who knows how it really works should write something there.)

1 0

[Dovecot] Problem with v1.1.10
by Cyrus Rahman 22 Feb '09

22 Feb '09

I've been using 1.1.8 successfully but tried out 1.1.10 this morning. I have a combination of system and virtual users. The system users were unaffected by the change, but the virtual users all lost access to their mail because their home directories, as interpreted by dovecot, moved from user@domain to user@user@domain. The location of the home directory is given to dovecot for virtual users using the static db as uid=vmail gid=vmail home=/var/vmail/%u mail=maildir:~/Inboxdir Were there any changes in this area that might have caused the problem? Cyrus dovecot -n output: # 1.1.10: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.1-RELEASE-p2 amd64 protocols: imaps managesieve ssl_cert_file: /etc/ssl/dovecot/certs/dovecot.pem ssl_key_file: /etc/ssl/dovecot/private/dovecot.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(managesieve): no verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: mbox:~/.dovecot:INBOX=/var/mail/%u mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugins(default): expire quota imap_quota trash fts fts_squat antispam autocreate mail_plugins(imap): expire quota imap_quota trash fts fts_squat antispam autocreate mail_plugins(managesieve): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(managesieve): dict_db_config: /usr/local/etc/dovecot-db.conf sieve_storage(default): sieve_storage(imap): sieve_storage(managesieve): ~/.sieve sieve(default): sieve(imap): sieve(managesieve): ~/.dovecot.sieve namespace: type: private separator: / prefix: #mbox/ inbox: yes hidden: yes subscriptions: yes namespace: type: private separator: / location: maildir:~/Maildir list: yes subscriptions: yes auth default: mechanisms: plain login username_format: %Lu passdb: driver: pam args: session=yes dovecot passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: passwd args: blocking=yes userdb: driver: static args: uid=vmail gid=vmail home=/var/vmail/%u mail=maildir:~/Inboxdir socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail

4 6

[Dovecot] dovecot 1.2 virtual folders question
by Robert Schetterer 22 Feb '09

22 Feb '09

Hi Timo is this possible a possible setup ? for downloading imap folders ( including inbox ) with pop3 controlled by a a dovecot-virtual file in usr/local/virtual/%d/%u/ with content something like that * -Trash -Trash/* -Sent -Sent/* -Drafts -Drafts/* all namespace private { separator = / prefix = "" location=maildir:/usr/local/virtual/%d/%u/:CONTROL=/usr/local/virtual/%d/%u/:INDEX=/usr/local/virtual/%d/%u/ inbox = yes subscriptions = yes list = yes } namespace private { prefix = virtual/ separator = / location = virtual:/usr/local/virtual/%d/%u:LAYOUT=maildir++ inbox = no } it doesnt work yet, but i am nearly sure that i havent understand http://wiki.dovecot.org/Plugins/Virtual perhaps you might bring me on the way background : i want to include a global sieve rule which sorts marked spam mails in a subfolder of inbox called Junk, so that users never can overide it and set perhaps an autoreply by an Sieve rule by incomming mail to inbox to make it possible that pop3 users may fetch sorted Spam mails outta the Junk folder too, i wanna use virtual setup folders Trash , Sent , Drafts are standart folders are standart and should be ignored with that -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 11

[Dovecot] DIGEST-MD5 user/realm mismatch with Postfix
by Darren Pilgrim 22 Feb '09

22 Feb '09

This is a follow-on to the "SQL field format for digest-md5?" thread. After some additional debugging, I've found the problem is a mismatch in what Dovecot expects and Postfix uses for the user and realm. For a username "user(a)example.com" and password "sekret", Dovecot expects: username = "user" realm = "example.com" but Postfix sends the checksum of: username = "user(a)example.com" realm = "" How do I fix this?

2 1

Re: [Dovecot] Concurrent POP3 Sessions Issues
by Timo Sirainen 22 Feb '09

22 Feb '09

Did you already solve this? If not, just mail the strace output to me privately and I'll take a look at it. On Fri, 2009-01-30 at 09:39 -0300, Mauricio López Riffo wrote: > Timo, > > What messages should be see? I execute the commands and shows a lot > of messages, i dont know what it means, i m not a programmer :) > > > Thanks > > ---- > > Mauricio López Riffo > Red Hat Certified Engineer > 804006455319519 > Netline Telecomunicaciones Chile > Los Conquistadores 2430, Providencia, Santiago. > Codigo Postal: 7530041 > Fono: +562 6560600 > Móvil: +569 90992366 > > > -----Mensaje original----- > > De: Timo Sirainen [mailto:tss@iki.fi] > > Enviado el: jueves, 29 de enero de 2009 20:46 > > Para: mauricio.lopez(a)netline.net; Dovecot Mailing List > > Asunto: Re: [Dovecot] Concurrent POP3 Sessions Issues > > > > On Jan 29, 2009, at 1:17 PM, Mauricio López Riffo wrote: > > > > > I have problems with dovecot + ldap + nfs, we could't have more than > > > 20 concurrent sessions of pop3, when user 21 comes, the auth process > > > takes more than 1 sec and is incresing (while most users arrives, more > > > delay in > > > autenticacion exists) and my customers complaint about the service. > > > We need > > > support about 200 concurrents pop3 users, here is my details > > > > Someone else was recently complaining about the same thing. Or was it you? > Anyway, > > dovecot-auth doesn't know how many users are logged in so if the problem > really is 21 > > *concurrent users* instead of n logins/ second, I find it highly unlikely > that the problem is > > with authentication. > > > > My guess is that this has something to do with NFS. Perhaps start Dovecot > with strace -tt -f > > dovecot and then when it's slowing down see what syscall it says is > blocking. >

1 0

[Dovecot] One Dovecot serving 2 domains - possible?
by k bah 22 Feb '09

22 Feb '09

I'm talking about Dovecot 1.0.x, since 1.1.x showed some problems on some of my servers. -- Is it possible to have Dovecot on one machine serving two different domains? How can I set the mailboxes root to one domain to /dir1/ and to the other domain to /dir2/ ? I want all mailboxes from one domain to reside on a different mailbox root. I use Dovecot LDA. Is is possible to set a LDAP config to one domain and another LDAP config to the other (the auth part, I wan't users to reside on different bases on my LDAP tree, so search bases need to be different) thanks in advance = Scrublade Wipers New, Heavy Duty, wiper design to remove bugs and road slime. http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=2b9f0c9f1afcc5e7181028e… -- Powered by Outblaze

2 1

[Dovecot] auth-worker always opens PAM session
by Miguel Di Ciurcio Filho 21 Feb '09

21 Feb '09

I'm using Dovecot 1.1.7 on CentOS 5.2. I've changed my passdb from passwd to pam, it works fine, but I've found this messages on /var/log/secure: dovecot-auth: PAM adding faulty module: /lib64/security/pam_limits.so dovecot-auth: PAM unable to dlopen(/lib64/security/pam_limits.so) dovecot-auth: PAM [error: /lib64/security/pam_limits.so: failed to map segment from shared object: Cannot allocate memory] Latter I realized that my auth_process_size was 64. Changed it to 128 and problem solved. But I suspect that dovecot should not be opening sessions, because there is no session=yes on my passdb configuration. According to the docs: args = dovecot [session=yes] [setcred=yes] [failure_show_msg=yes] [cache_key=<key>] [<service name>] session=yes makes Dovecot open and immediately close PAM session. Some PAM plugins need this to work, such as pam_mkhomedir. I checked the source code in passdb-pam.c: struct pam_passdb_module { struct passdb_module module; const char *service_name, *pam_cache_key; unsigned int pam_setcred:1; unsigned int pam_session:1; unsigned int failure_show_msg:1; }; And this: /* -session for backwards compatibility */ if (strcmp(t_args[i], "-session") == 0 || strcmp(t_args[i], "session=yes") == 0) module->pam_session = TRUE; It seams to me that the session is going to be opened anyway, since pam_session is always TRUE. Regards, Miguel

2 3

[Dovecot] quota and dict quota
by Osvaldo Alvarez Pozo 21 Feb '09

21 Feb '09

Hi I am running dovecot with quota. as show in this part of dovecot.conf . protocols = imap pop3 protocol imap { mail_plugins = quota imap_quota imap_client_workarounds = outlook-idle delay-newmail } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = quota log_path = /var/log/dovecot-deliver.log info_log_path = /var/log/dovecot-deliver.log } Now I want to see the users's use of quota in postfixadmin, wich demende the use of dict quota. That is wath I do not understang. Can I have dict quota and mail_plugins=quota at the same time? How do I do? Thanks

2 5

[Dovecot] Dovecot 1.2.beta1 Backtrace POP3
by Steven King 21 Feb '09

21 Feb '09

I am testing out the new Dovecot 1.2.beta1 software. I am getting reports from people using POP3 that it randomly drops connections. Looking at the log file I see that the POP3 process they were connecting to panics and dumps a Raw bactrace. Below is a copy of the logs (IP addresses striped for security): dovecot: Feb 21 13:10:45 Info: auth(default): passwd-file(janna(a)jantics.com,x.x.x.x): lookup: user=janna(a)jantics.com file=/etc/postfix/passwd dovecot: Feb 21 13:10:45 Info: auth(default): master out: USER 3340 janna(a)jantics.com uid=1005 gid=102 home=/var/mail/vhosts/%d/%n quota=maildir quota_rule=*:storage=100M quota_rule2=Trash:storage=50M dovecot: Feb 21 13:10:45 Panic: POP3(janna(a)jantics.com): Trying to allocate 0 bytes dovecot: Feb 21 13:10:45 Error: POP3(janna(a)jantics.com): Raw backtrace: pop3 [0x80d18fc] -> pop3 [0x80d195a] -> pop3 [0x80d125b] -> pop3 [0x80db683] -> pop3(i_malloc+0x15) [0x80d5ee5] -> pop3(client_create+0x503) [0x805c573] -> pop3(main+0x3ce) [0x805e00e] -> /lib/libc.so.6(__libc_start_main+0xe0) [0xb7e39390] -> pop3 [0x805b7e1] dovecot: Feb 21 13:10:45 Error: child 26895 (pop3) killed with signal 6 dovecot: Feb 21 13:10:45 Info: pop3-login: Login: user=<janna(a)jantics.com>, method=PLAIN, rip=69.54.221.129, lip=x.x.x.x -- Steve King Network Engineer - Liquid Web, Inc. Cisco Certified Network Associate CompTIA Linux+ Certified Professional CompTIA A+ Certified Professional

2 2