May 2009 - dovecot - dovecot.org

[Dovecot] FTS Plugin design
by Rui Carneiro 26 May '09

26 May '09

Hi all, Currently I am developing some changes on the solr plugin. I want this plugin indexing also the attachment's content. I have already started to look on plugin's source but I am having some problems understanding how it works. I didn't understood yet what is the plugin's design and how the plugins are called from the core system and I was wondering if anyone could help me with that. Sorry if this doubts sound stupid but I am newcomer on Dovecot. Regards, Rui Carneiro

5 31

[Dovecot] Secure Sockets Layer client certificate authentication
by Stephen Feyrer 26 May '09

26 May '09

Hi everyone. Please note, I've asked a very similar question before and I apologize for sounding like a broken record. Well here it goes. What I want to do is authenticate my users using a certificate. Thereby authenticating both the user and server with strong tokens that are centrally managed. In the worst case scenario the user should only need to enter a password for the certificate store and then the certificate should trigger the appropriate level of access to their account. Is Dovecot the correct tool for the job? If yes then, how? Else if not, then what would you recommend? I have tried setting the auth mechanism to anonymous without any joy. My password file is set with nopassword. All my certificates work well with the Secure Sockets Layer system. This is the configuration I am currently running: # 1.2.beta1: /opt/etc/dovecot/dovecot.conf # OS: Linux 2.6.12.6-arm1 armv5tejl log_path: /opt/var/log/dovecot.log info_log_path: /opt/var/log/dovecot-info.log protocols: imaps ssl_ca_file: /opt/etc/ssl.ca/cacrl.pem ssl_cert_file: /opt/etc/ssl.ca/newcerts/imap.cer ssl_key_file: /opt/etc/ssl.ca/private/imap.key ssl_parameters_regenerate: 24 ssl_cipher_list: ALL:!LOW:!SSLv2 ssl_verify_client_cert: yes disable_plaintext_auth: yes verbose_ssl: yes login_dir: /opt/var/run/dovecot/login login_executable: /opt/libexec/dovecot/imap-login login_user: guest login_processes_count: 2 login_max_processes_count: 4 mbox_write_locks: fcntl mail_process_size: 512 imap_client_workarounds: outlook-idle tb-negative-fetch auth default: user: admin verbose: yes debug: yes ssl_require_client_cert: yes ssl_username_from_cert: yes passdb: driver: passwd-file args: /opt/etc/dovecot/h.org/passwd userdb: driver: passwd This is a log of a login attempt: dovecot: May 25 11:55:58 Info: auth(default): new auth connection: pid=22556 dovecot: May 25 11:56:08 Info: imap-login: Valid certificate: /O=home.org/emailAddress=admin(a)nas2.h.org/L=W/ST=C/C=G/CN=h.org dovecot: May 25 11:56:08 Info: imap-login: Valid certificate: /C=G/ST=C/O=h.org/OU=K F/CN=k dovecot: May 25 11:56:10 Info: auth(default): new auth connection: pid=22585 dovecot: May 25 11:56:16 Info: auth(default): client in: AUTH 1 PLAIN service=imap secured valid-client-cert cert_username=k lip=10.1.1.245 rip=10.1.1.1 lport=993 rport=53430 dovecot: May 25 11:56:16 Info: auth(default): client out: CONT 1 dovecot: May 25 11:56:16 Info: auth(default): client in: CONT<hidden> dovecot: May 25 11:56:16 Info: auth(default): passwd-file(k,10.1.1.1): lookup: user=k file=/opt/etc/dovecot/h.org/passwd dovecot: May 25 11:56:16 Info: auth(default): passwd-file(k,10.1.1.1): No password dovecot: May 25 11:56:16 Info: auth(default): client out: OK 1 user=k dovecot: May 25 11:56:16 Info: auth(default): master in: REQUEST 6 22164 1 dovecot: May 25 11:56:16 Info: auth(default): passwd(k,10.1.1.1): lookup dovecot: May 25 11:56:16 Info: auth(default): master out: USER 6 k system_user=k uid=500 gid=100 home=/ dovecot: May 25 11:56:16 Info: imap-login: Login: user=<k>, method=PLAIN, rip=10.1.1.1, lip=10.1.1.245, TLS With this configuration the client will connect over ssl and identify itself with a certificate but a client password is still required. -- Regards Stephen.

3 8

Re: [Dovecot] pop3 gives a permission denied error on chdir
by Kenneth Gonsalves 26 May '09

26 May '09

On Thursday 21 May 2009 12:40:00 you wrote: > exec "strace -f -o /tmp/access.log -etrace=file -p <pid_of_dovecot>" > then try to access pop3 when fail occurs send us /tmp/access.log > (gzipped) attached -- regards Kenneth Gonsalves Associate NRC-FOSS http://nrcfosshelpline.in/web/

3 7

[Dovecot] status=bounced (Command died with signal 11: "/usr/lib/dovecot/deliver"
by Chantal Rosmuller 26 May '09

26 May '09

Hi list, I use dovecot 1.1.11 on ubuntu 9.04, when I want to send a message to an email adres on this mailserver I get this error: status=bounced (Command died with signal 11: "/usr/lib/dovecot/deliver". The folders where the email should be delivered are created so it does not look like a permission problem. I connect to a mysql database where the email accoutn info is stored, this works. I use the same setup on an ubuntu 8.04 server with dovecot 1 and I have no problems on that server. What am I overlooking here? Here is my configuration: dovecot -n: base_dir: /var/run/dovecot/ log_path: /var/log/mail.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 imaps pop3s ssl_cert_file: /etc/ssl/certs/dovecot-cert.pem ssl_key_file: /etc/ssl/private/dovecot.pem disable_plaintext_auth: no login_dir: /var/run/dovecot-login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login first_valid_uid: 150 last_valid_uid: 150 mail_privileged_group: mail mail_location: mbox:/var/vmail/%2d/%d/%n mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail postconf -n: append_dot_mydomain = no biff = no config_directory = /etc/postfix/ disable_vrfy_command = no home_mailbox = Maildir/ inet_interfaces = all mailbox_size_limit = 0 message_size_limit = 25000000 mydestination = $myhostname, localhost.$mydomain mydomain = domain.com myhostname = server.domain.com mynetworks = 127.0.0.0/24, 10.0.11.248, 10.0.11.249 myorigin = $mydomain recipient_delimiter = + setgid_group = postdrop smtpd_banner = $myhostname smtpd_client_restrictions = permit_sasl_authenticated permit_mynetworks reject smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unknown_recipient_domain, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot virtual_alias_maps = mysql:$config_directory/mysql_catchall_workaround.cf mysql:$config_directory/mysql_virtual_alias_maps.cf mysql: $config_directory/mysql_domain_alias_maps2.cf mysql: $config_directory/mysql_domain_alias_maps.cf virtual_gid_maps = static:118 virtual_mailbox_base = /var/vmail virtual_mailbox_domains = mysql:$config_directory/mysql_virtual_domains_maps.cf virtual_mailbox_maps = mysql:$config_directory/mysql_virtual_mailbox_maps.cf virtual_minimum_uid = 150 virtual_transport = dovecot virtual_uid_maps = static:150

4 15

[Dovecot] "Panic: file client.c: line 354: unreached"
by Ralf Hildebrandt 26 May '09

26 May '09

>From my log today: May 22 07:38:48 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:39:29 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:39:50 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:39:50 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:39:50 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:39:50 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:45:29 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:45:29 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:45:29 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:45:29 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:45:37 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:45:37 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 and then: May 22 07:45:37 postamt dovecot: imap-login: Panic: file client.c: line 354: unreached May 22 07:45:37 postamt dovecot: dovecot: child 19726 (login) killed with signal 6 (core not dumped - add -D to login_executable) (latest ip=141.42.245.68) Using v1.2.rc4 -- Ralf Hildebrandt Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.computerbeschimpfung.de In our world, software has to be small, has to be debugged, has to ship as part of a major initiative, has to avoid compatibility problems, has to avoid end user calls. Bill Gates

2 3

[Dovecot] Dovecot 1.0.15, sieve fileinto subdirectory ?
by Karel Hendrych 26 May '09

26 May '09

Hi, does sieve plugin in 1.0.15 support fileinto subdirectory? There is a maildir .oss.dovecot and sieve rule: if envelope :contains "to" "k+dovecot" { fileinto "oss.dovecot"; } But I get LDA error: Couldn't open mailbox dovecot: Mailbox doesn't exist: dovecot Any suggestions? Delivery to non-subdirectories is working fine. Regards -- Karel

3 2

[Dovecot] libsieve problems / wishes
by Steffen Kaiser 26 May '09

26 May '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I'm trying libsieve (853:42e154b8792e) to cope with our current installation, the following issues arise: 1) vacation addresses are compared case-sensitivly, e.g.: vacation :addresses [ "Steffen.Kaiser(a)example.com" ] ""; it won't match "steffen.kaiser@...". attached patch makes a first shot about that problem, leaving: 1a) maybe one should lower-case :addresses argument at compile time and my_address at run-time and then use strcmp() again. 1b) duplicate checks are case-sensitive, too. This is probably no big issue, because if the same person uses different variants of his/her mail address for sending, s/he does not deserve better. 1c) Suppression of replies to own mails are case-sensitive, too. Well, many people I know test that "it just works" by sending themselves a mail. I would disable this check. 2) we have about 157 ways to write the domain part. Not all accounts are available in all of them, but it's close to it. The old vacation program we used prior to "cmusieve" didn't care about the domain unless explicitly given. It was quite painful. Attached patch adds a "domainless" variant of :addresses arguments in such way, that vacation :addresses [ "Steffen.Kaiser" ] ""; matches any domain. Ideally, it would be better to specify all valid domains, but perhaps one can leave that for another approach with a different syntax, e.g. with "@*" as domain? Maybe, there is a better approach. Now there is possibility that common local parts are matched from alien domains easily. If to specify a set of "default" domains would be an option for libsieve, what is the suggested way: - - as user-option via dovecot.conf? - - as admin-enforced Sieve-script that sets some internal variables? aka using the multi-script capability - - ??? 3) Because I try to migrate from cmusieve v1.0, I have a name issue with "imapflags". README sec "* Supports all extensions provided by the original CMUSieve plugin:" and sec "Implementation Status" explains that "imapflags" is available. This is not true entirly: "imapflags" is not, lib-sieve uses the name "imap4flags" as defined by RFC. So, it leaves me with two options: 3a) convert all user scripts and hack Horde-Ingo, or 3b) have libsieve accept the alias "imapflags" for the extension "imap4flags". Would it be worhtwhile for libsieve to implement aliases for extensions, so that they are available in require by more than one name? About Horde-Ingo, maybe they have an update to use "imap4flags", too, but it looks like that I upgrade Dovecot before Horde. Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBSYccg3WSIuGy1ktrAQLlaQf+NHtyBxMb3aqnaw58zapo3/5kgqMM4GA+ 68el9d1CK4URjuk9io3MBsSzEJ4lRy6VFHNLw0jyNEnZp7l0vv5UoiK/+af7LCW5 H2T/qYL+lG/ul870t0/3q5wHmtrriAGQqE215C1u5/trJRX/sQLzDq1tbOtV4/vQ xUa8P0TXvCsgGSzCCmNiU0AenTIRGnxo+sCiyxnDKhgmWph/t06GYHX77CKwumK8 O57rh3RD9hA5yjicTbEZVLzeDDPEmCFliiSR6qMukfxOwX6LIxqhfw8n3cmSm8+X QyK6d/pBxy6EC14XhRQ7Jjtse+gWraiVJ/kcXKuW8sNPphtrGM1fdQ== =uuB6 -----END PGP SIGNATURE-----

5 11

[Dovecot] Maildir with LAYOUT=fs not working
by Rich Wales 26 May '09

26 May '09

I'm considering converting a Cyrus system (managing my family's e-mail) to Dovecot. I'm trying Dovecot 1.1.15 on an Ubuntu 9.04 (2.6.28-11-server) system. My production server is currently running Cyrus 2.3.14. Since I have a huge number of folders and subfolders, I need to use LAYOUT=fs. However, it's not working consistently. I tried setting up a test account in Thunderbird (2.0.0.21), and I was able to create folders under the Inbox, and they showed up as nested subdirectories under my ~/Maildir on my mail server. So far, so good. However, when I tried a home-grown Perl script (an archival scheme for my work e-mail), Dovecot wouldn't create subfolders properly; instead of nesting them (as I thought LAYOUT=fs would do), it used a flat layout. Here is a trace (generated by my Perl script) of an IMAP session. This was supposed to log in as the user "stanford" (the name of my archival account); create a folder named "2009" if not already present; create (again, if not already there) a "2009-05" folder inside the "2009" folder; and, finally, save a message (marked as seen) inside the "2009-05" folder. 1 LOGIN XXXXXXXX XXXXXXXX1 OK Logged in. 2 STATUS user.stanford.2009 (MESSAGES)* STATUS "user.stanford.2009" (MESSAGES 0) 2 OK Status completed. 3 STATUS user.stanford.2009.2009-05 (MESSAGES)* STATUS "user.stanford.2009.2009-05" (MESSAGES 3) 3 OK Status completed. 4 APPEND user.stanford.2009.2009-05 (\Seen) {4043} + OK (message text here . . .) 4 OK [APPENDUID 1243306507 4] Append completed. 5 LOGOUT* BYE Logging out The above works perfectly when I'm talking to my Cyrus server. However, when I tried the same thing with Dovecot, I got a folder named "user.stanford.2009" in the "stanford" account's Maildir, and then another folder named "user.stanford.2009.2009-05" (again, in the Maildir -- NOT nested in the "user.stanford.2009" folder) -- and the message was stored in the "user.stanford.2009.2009-05" folder. I tried changing my Perl script to use "INBOX" instead of "user.stanford" -- but the result was basically the same, except I got new folders named "INBOX.2009" and "INBOX.2009.2009-05" directly in my archival account's Maildir. Finally, I tried omitting any prefix at all on the folder names, and I got new folders named "2009" and "2009.2009-05" -- again, directly in Maildir -- no nesting of one folder within another. I suppose I actually have two issues here -- the lack of folder nesting (even with LAYOUT=fs), and also Dovecot's failure to recognize a "user.XXX." prefix on a mailbox name as designating user XXX's inbox (something that seems to work fine on Cyrus). My Cyrus server currently has over 1,600 folders and subfolders, so I absolutely can't / won't consider switching it to Dovecot unless I can get the nested filesystem layout working. Any thoughts? -- Rich Wales / richw(a)richw.org / richw(a)stanford.edu Wikipedia: http://en.wikipedia.org/wiki/User:Richwales Facebook: http://www.new.facebook.com/profile.php?id=206680

2 1

[Dovecot] compile errors on latest hg trunk
by reg9009 26 May '09

26 May '09

Hi, I think there are some files missing (regarding auth mech-external): compile error (did fresh autogen.sh): gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-auth -I../../src/lib-sql -I../../src/lib-settings -I../../src/lib-ntlm -I../../src/lib-otp -I../../src/lib-master -DAUTH_MODULE_DIR=\""/opt/dovecot-2.0/lib/dovecot/auth"\" -DPKG_LIBEXECDIR=\""/opt/dovecot-2.0/libexec/dovecot"\" -DPKG_RUNDIR=\""/opt/dovecot-2.0/var/run/dovecot"\" -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wstrict-aliasing=2 -MT mech-digest-md5.o -MD -MP -MF .deps/mech-digest-md5.Tpo -c -o mech-digest-md5.o mech-digest-md5.c mv -f .deps/mech-digest-md5.Tpo .deps/mech-digest-md5.Po make[3]: *** Keine Regel vorhanden, um das Target Â»mech-external.oÂ«, benÃ¶tigt von Â»dovecot-authÂ«, zu erstellen. Schluss. make[3]: Verlasse Verzeichnis '/home/inst/dovecot-2.0/dovecot-2-0-304238bbd36c/src/auth' make[2]: *** [all-recursive] Fehler 1 make[2]: Verlasse Verzeichnis '/home/inst/dovecot-2.0/dovecot-2-0-304238bbd36c/src' make[1]: *** [all-recursive] Fehler 1 make[1]: Verlasse Verzeichnis '/home/inst/dovecot-2.0/dovecot-2-0-304238bbd36c' make: *** [all] Fehler 2 (It's german environment, but means there is no rule to make target mech-external.o, needed by dovecot-auth). root@171:/home/inst/dovecot-2.0/dovecot-2-0-304238bbd36c/src# find . -name mech-dig* ../auth/.deps/mech-digest-md5.Po ../auth/mech-digest-md5.c ../auth/mech-digest-md5.o root@171:/home/inst/dovecot-2.0/dovecot-2-0-304238bbd36c/src# find . -name "*exte*" ../auth/.deps/mech-external.Po and compile error: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-auth -I../../src/lib-sql -I../../src/lib-settings -I../../src/lib-ntlm -I../../src/lib-otp -I../../src/lib-master -DAUTH_MODULE_DIR=\""/opt/dovecot-2.0/lib/dovecot/auth"\" -DPKG_LIBEXECDIR=\""/opt/dovecot-2.0/libexec/dovecot"\" -DPKG_RUNDIR=\""/opt/dovecot-2.0/var/run/dovecot"\" -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wstrict-aliasing=2 -MT mech-digest-md5.o -MD -MP -MF .deps/mech-digest-md5.Tpo -c -o mech-digest-md5.o mech-digest-md5.c mv -f .deps/mech-digest-md5.Tpo .deps/mech-digest-md5.Po make[3]: *** Keine Regel vorhanden, um das Target »mech-external.o«, benÃ¶tigt von »dovecot-auth«, zu erstellen. Schluss. make[3]: Verlasse Verzeichnis '/home/inst/dovecot-2.0/dovecot-2-0-304238bbd36c/src/auth' make[2]: *** [all-recursive] Fehler 1 make[2]: Verlasse Verzeichnis '/home/inst/dovecot-2.0/dovecot-2-0-304238bbd36c/src' make[1]: *** [all-recursive] Fehler 1 make[1]: Verlasse Verzeichnis '/home/inst/dovecot-2.0/dovecot-2-0-304238bbd36c' make: *** [all] Fehler 2 (It's german environment, but means there is no rule to make target mech-external.o, needed by dovecot-auth). Regards, Sebastian

2 1

[Dovecot] Segfault with dovecot -n / dovecot 2.0
by ja nein 26 May '09

26 May '09

Hi all, and while trying to get some environmental stuff via dovecot -n, I got a segfault (dovecot is not in system path): /opt/dovecot-2.0/sbin/dovecot -c /etc/dovecot-2.0/sql/dovecot.conf -n # 2.0.UNSTABLE: /etc/dovecot-2.0/sql/dovecot.conf # OS: Linux 2.6.24-23-xen x86_64 Ubuntu 8.04.2 nfs Segmentation fault stat("/home/dovecot/mail/", {st_mode=S_IFDIR|0777, st_size=4096, ...}) = 0 open("/etc/mtab", O_RDONLY) = 6 fstat(6, {st_mode=S_IFREG|0644, st_size=480, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff654983000 read(6, "/dev/sda2 / ext3 rw,noatime,nodi"..., 4096) = 480 stat("/", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 stat("/proc", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 stat("/sys", {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 stat("/var/run", {st_mode=S_IFDIR|0755, st_size=400, ...}) = 0 stat("/var/lock", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=40, ...}) = 0 stat("/dev", {st_mode=S_IFDIR|0755, st_size=12820, ...}) = 0 stat("/dev/shm", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=40, ...}) = 0 stat("/dev/pts", {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 stat("/home/dovecot", {st_mode=S_IFDIR|0777, st_size=4096, ...}) = 0 close(6) = 0 munmap(0x7ff654983000, 4096) = 0 write(1, "# OS: Linux 2.6.24-23-xen x86_64"..., 51# OS: Linux 2.6.24-23-xen x86_64 Ubuntu 8.04.2 nfs ) = 51 lseek(1, 0, SEEK_CUR) = -1 ESPIPE (Illegal seek) getsockname(1, 0x7fff5c986f50, [18446744069414584348]) = -1 ENOTSOCK (Socket operation on non-socket) --- SIGSEGV (Segmentation fault) @ 0 (0) --- +++ killed by SIGSEGV +++ Process 30890 detached Version is still dovecot 2.0 hg latest. Regards, Sebastian

3 2