July 2009 - dovecot - dovecot.org

[Dovecot] Dovecot with SSL Client Certification
by Evaggelos Balaskas 03 Aug '09

03 Aug '09

Hi, i am trying to setup dovecot over ssl in the last couple days unsuccessfully My notes are from here: http://wiki.dovecot.org/SSL My OpenSSL commands are: mkdir -pv /opt/certificates/dovecot/ cd !$ (just to prevent questions about Common Name) [ebal@myhome:~]€ hostname myhome openssl req -new -x509 -nodes -out dovecot.crt -keyout dovecot.key -days 1825 # Country Name (2 letter code) [AU]:GR # State or Province Name (full name) [Some-State]:Athens # Locality Name (eg, city) []:Aigaleo # Organization Name (eg, company) [Internet Widgits Pty Ltd]:Ebalaskas.Gr # Organizational Unit Name (eg, section) []:Mail Apps # Common Name (eg, YOUR name) []:myhome # Email Address []:ebalaskas@ebalaskas.gr openssl pkcs12 -export -in dovecot.crt -inkey dovecot.key \ -name "dovecot Certificate Client" -out dovecot.p12 openssl ca -gencrl -keyfile dovecot.key -cert dovecot.crt -out dovecot.crl -selfsign I've imported the dovecot.p12 to thunderbird certificates and dovecot.crt to thunderbird authorities (i've tried claws mail too - same errors) My dovecot.conf is this: [root@myhome dovecot]# dovecot -n # 1.2.2: /usr/local/etc/dovecot.conf # OS: Linux 2.6.30-ARCH i686 ext4 info_log_path: /var/log/dovecot.log protocols: imaps ssl: required ssl_ca_file: /opt/certificates/dovecot/dovecot.crl ssl_cert_file: /opt/certificates/dovecot/dovecot.crt ssl_key_file: /opt/certificates/dovecot/dovecot.key ssl_cipher_list: ALL:!LOW:!SSLv2 ssl_verify_client_cert: yes verbose_ssl: yes login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login first_valid_uid: 300 mail_location: maildir:/var/spool/mail/%u:INBOX=/var/spool/mail/%u/.INBOX mail_debug: yes lda: postmaster_address: ebalaskas(a)ebalaskas.gr auth default: verbose: yes debug: yes debug_passwords: yes ssl_require_client_cert: yes passdb: driver: pam userdb: driver: passwd My /var/log/dovecot.log: Jul 30 20:14:52 Info: Dovecot v1.2.2 starting up (core dumps disabled) Jul 30 20:14:52 Info: Generating Diffie-Hellman parameters for the first time. This may take a while.. Jul 30 20:14:53 auth(default): Info: new auth connection: pid=5872 Jul 30 20:14:53 auth(default): Info: new auth connection: pid=5873 Jul 30 20:14:53 auth(default): Info: new auth connection: pid=5874 Jul 30 20:15:16 ssl-build-param: Info: SSL parameters regeneration completed Jul 30 20:15:17 auth(default): Info: new auth connection: pid=5898 Jul 30 20:15:18 imap-login: Info: Disconnected (client didn't send a cert): rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:14094419:SSL routines:SSL3_READ_BYTES:tlsv1 alert access denied Any ideas? Evaggelos Balaskas Unix System Engineer - http://ebalaskas.gr/wiki Informatics Engineer Technological Education

2 2

Re: [Dovecot] Stuck with dovecot-sieve and horde-ingo ...
by Robert Schetterer 03 Aug '09

03 Aug '09

Stefan G. Weichinger schrieb: > Robert Schetterer schrieb: >> Stefan G. Weichinger schrieb: >>> Robert Schetterer schrieb: >>> >>>> if you get problems with sieve dovecot >>>> try http://www.woozle.org/~neale/src/pysieved/ >>> exactly the same behavior: ingo complains "driver not in transaction >>> state" ... >>> >>> Seems as if ingo fails to even contact port 2000 ... any idea on how to >>> debug ingo itself? >>> >>> Stefan >> there is somewhere in the horde doku >> how to setup verbose php debug logging >> sorry i couldnt remember where , but i used it allready >> during testing >> > > done already, see my last mail to horde-ml ... > > danke ;-) i will retest tonight horde ingo sieve with latest dovecot perhaps i will see equal problems so i will report to you -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 1

[Dovecot] Spaces in user or group-names
by Sven Strickroth 03 Aug '09

03 Aug '09

Hi, how it is possible to use group names with spaces (like "Domain Admins") in dovecot-acl files? -- Best regards, Sven mailto:sven@clamav.net ClamAV, a GPL anti-virus toolkit http://www.clamav.net

2 4

[Dovecot] Subfolders not listed in Dovecot-1.2.2 with listescape
by Petter Urkedal 03 Aug '09

03 Aug '09

After upgrading to Dovecot-1.2.2 from 1.1* subfolders disappeared, though it was possible to access them directly, e.g. with "mutt -f =lists/dovecot". The problem only occurs if the listescape plugin is enabled. Some relevant bits from the configuration: namespace private { # The only namespace. separator = / prefix = inbox = yes } protocol imap { mail_plugins = fts fts_squat listescape }

2 2

[Dovecot] Client Cert Auth Problem
by Christian Felsing 03 Aug '09

03 Aug '09

Hello, is there a config possible which supports both of following authentication schemes ? 1st: If user presents a client certificate, he can log in w/o username/password, where user id comes from CN. Accepting any password is not the right solution. 2nd: If user does not present a client certificate, he have to authenticate by username/password. In both cases user data is read from userdb LDAP, which is already working. I was not able to get both auth schemes working at same time. With Postfix such a config is fully operable. regards Christian

2 1

[Dovecot] Public folders, individual SEEN flags
by Keith Edmunds 03 Aug '09

03 Aug '09

Hi list I'm trying to set up shared public folders with individual SEEN flags. I've set up three test users, but as soon as one of them marks a mail in the public folder as seen or unseen, that change is propagated to all three users. If I watch the dovecot.index.log file in each user's directory for the public folder, I see all three change their last access time as soon as one user changes the SEEN status of a mail. Any hints as to what I'm doing wrong gratefully received, thanks. -------------------------------------------------------------------------------- # dovecot --version 1.2.1 -------------------------------------------------------------------------------- # dovecot -n # 1.2.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-686 i686 Debian 5.0.2 log_timestamp: %Y-%m-%d %H:%M:%S disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: public separator: / prefix: shared/ location: maildir:/home/publicfolders:INDEX=~/Maildir/public list: yes auth default: passdb: driver: pam userdb: driver: passwd -------------------------------------------------------------------------------- # ls -l /home/publicfolders/dovecot-shared -rw-rw-r-- 1 publicfolders publicfolders 0 2009-07-27 15:01 /home/publicfolders/dovecot-shared --------------------------------------------------------------------------------

2 3

[Dovecot] parameter "mail_location" and variables
by maximatt 03 Aug '09

03 Aug '09

hi.... i have virtual users stored in ldap server and i must to do some modifications that requiere to chage mail_location value... the solution comes to use the "uid" value stored in ldap server for users on mail_location parameter... i can see in http://wiki.dovecot.org/Variables that i can't do them (i uses sasl authentication) so.. ¿exist any way to get a value from ldap server and use them in mail_location parameter? thanks in advance!!! -- Salu2 ;)

2 3

[Dovecot] expire plugin no delete 1.2.1
by Robert Schetterer 03 Aug '09

03 Aug '09

Hi Timo, all of my tests fail with expire plugin, mail simply not get deleted i cant find any stuff in the logs why it does not or should not work. My guess that there is a problem with virtual plugin and/or shared namespace. It shouldnt be a problem with acl starting the script over cron as root am i right ? do you have any idea why it fails, is there a way to ignore all unneeded shared or virtual namespaces ? should there be a entry in the log when expire time is reached and deletion is unsuccessfull ? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 5

[Dovecot] Shared mailboxes and INBOX
by Keith Edmunds 03 Aug '09

03 Aug '09

I'm trying to implement a shared mailbox: in other words, we have a generic email address ("security@") which we want a number of users to be able to monitor. The problem I have is that users can see folders under that shared mailbox but can't see the INBOX. All the users in question have their own INBOX in their private namespace, so does this raise a conflict with monitoring another mailbox's INBOX? Configuration: -------------------------------------------------------------------------------- # dovecot -n # 1.2.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-686 i686 Debian 5.0.2 log_timestamp: %Y-%m-%d %H:%M:%S disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: public separator: / prefix: shared/ location: maildir:/home/publicfolders:INDEX=~/Maildir/public list: yes namespace: type: shared separator: / prefix: security/ location: maildir:/home/securitymailbox/Maildir:INDEX=~/Maildir/securitymailbox list: yes auth default: passdb: driver: pam userdb: driver: passwd -------------------------------------------------------------------------------- Thanks, Keith

2 1

[Dovecot] sieve filtering setup
by Jonathan Siegle 02 Aug '09

02 Aug '09

I'm looking at implementing sieve in my environment. Software is: dovecot-1.2-sieve revision 1022:3c9a22c28156 dovecot-1.2 revision 9269:a303bb82c1c9 AIX 5.3 with sendmail mta using prescribed deliver lda. I have a few questions. I'll have 110k sieve files(1 for each user). Does sieve read the file each time a new message is accepted by sendmail? Are there any measurements on cpu load for sieve filters? Thanks, Jonathan

3 6