January 2010 - dovecot

[Dovecot] Dovecot Sieve: Vacation Recipient
by Lukas Kolbe 08 Jan '10

08 Jan '10

Hi! I tried to use the sieve vacation plugin, but we're facing a little problem: our user's addresses are <uid>@<domain>, and if they want to use imap and sieve, they can have a forward to <uid>@imap.<domain>. The return-path, and hence the address the vacation message is sent to, is then <uid>@<domain> and not the original sender of the message. Is there any way to circumvent this? Sending a vacation back to oneself doesn't really make sense here :) Oh, and happy new year and thank you all for this great piece of software! -- Lukas

2 2

Re: [Dovecot] auth, partially resolved
by Steffen Kaiser 08 Jan '10

08 Jan '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, 7 Jan 2010, Spyros Tsiolis wrote: >> signed certificate: >>> >> /C=GR/ST=Kerkyra/L=Kerkyra/O=Tourist Enterprizes/OU=IMAP >>> >> server/CN=webmail.domain.gr/emailAddress=postmaster(a)webmail.domain.gr >> >> You access the cert of webmail.domain.gr via a host named >> localhost. >> If Horde runs on the same host, just disable SSL :-) > > . . .because SSL is for remote hosts (clients) on the network anyway > right ? Well, there might be scenarios, when a local user other than root may sniff the connection on localhost, but I think you have no such one. So to encrypt a connection from localhost to localhost is a waste of ressources. In case of Dovecot you'll need one extra file descriptior (and depending on your settings one extra process as well), plus the CPU time to actually do the encryption. > Yeah. The certificate is there. Under "/etc/ssl/certs". > I was thinking that maybe because the system (and the certificate > issuer, horde and dovecot are on the same box. You ask me somewhere > about that) is all-in-one, I need to import the certificate somewhere ? see above for the reason. > The dovecot wiki says that importing the certificate is only applicable > to the client-side (evolution, thunderbird and so on). The webmail-frontend _is_ your client in the view of Dovecot. But since the cert is in /etc/ssl/certs, it should work, but if you validate the cert, the webmail may bark, because you access the SSL-cert with the CN "webmail.domain.gr" by another name "localhost". This is a sign of a man-in-the-middle attack, actually. BTW: Do your SSL IMAP/POP clients also use the name "webmail.domain.gr"? Otherwise they will get a warning as well, maybe each time they connect. Regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBS0bzDb+Vh58GPL/cAQJx9Af/egq1HW/M92tmivrAcBFCvyO6pL6cZcwr PDVfWTsQsHAhWOYNTfAuAe0kouFTnjCpGcTXKPAA3VCWvRWR37/RGseeAmKfRmEW BYfKPrkf6ltq+hfREi81rHIme0xIry5UG1oB2/1WfPHmWTckVWNRL0aRIZGM+ZR5 v40MuesoaMyY0EngEnaIfDbswG+vNWF60XZ71knAfVtl12LOe+twzLDEJ3M13SaV zw7qOGj4iUtZgML4LC042dGuF22yKAXElwp26oZVhk522J1VtdMuhi9Bma7YnVfU CfhUWqa3q+jL60fAKhWCP8IoRxxYJ/vsrWFjZaEamjCMCLx3FgeebQ== =IS0t -----END PGP SIGNATURE-----

1 0

[Dovecot] First time Dovecot user, really impressed so far. What is best IMAP enabled webmail package to go with Dovecot?
by Stan Hoeppner 08 Jan '10

08 Jan '10

Greetings everyone, I'm new to the list as of today. I just installed Dovecot a couple of days ago for the first time, Debian Lenny Dovecot v1.0.15-2.3. So far I'm pretty impressed. I'm using mbox format with Dovecot auto-deciding to place mail in user home directories, which is great. It works very well with the Win32 Thunderbird 3 client over a small basic 100FDX switched net. I've got one list mail folder with 10,600 messages and server side body searching that folder via T-Bird is very quick, on the order of 5 seconds. It would probably be quicker if Dovecot threaded the search to use both CPUs, but pegging just the one CPU the search is still very darn quick. And this is on a dual P2-550 class machine with only 384MB RAM and a single 500GB 7200RPM SATA drive. I'd like to install a webmail package on the same host. I used Squirrelmail for this purpose many years ago and I wasn't wholly impressed with the user interface. I'm also not impressed by the fact that I regularly receive spam from compromised Squirrelmail hosts/accounts. I really like the look/feel of the Scalix Web Access AJAX based interface, but I can't/won't use Scalix as it's not supported on Debian, it has more features than I need, and the system requirements are a bit steep. So, what's the best FOSS IMAP enabled web mail front end with a modern look/feel? I'd like to run it on lighttpd, which I'm already using, not apache. Thanks in advance for any advice. My apologies if my first post is a little OT, but I figured there's probably no better place to ask about the best webmail front end for Dovecot than here. -- Stan

14 24

[Dovecot] Does Dovecot Sieve plug-in support Dovecot 2.0?
by wenjie zheng 08 Jan '10

08 Jan '10

Does Dovecot Sieve plug-in support Dovecot 2.0? We have a few servers running Dovecot 2.0 beta1, but the Dovecot Sieve plug-in (version 0.1.4) won't compile against it. Is this on the Sieve TODO list? If so, when do you see it will happen? Thanks Wenjie

4 10

[Dovecot] Dovecot not delivering mail.
by Anthony Nedland 08 Jan '10

08 Jan '10

I get no errors when attempting to send or receive. However, my messages aren't showing up in the mailboxes. I am sending between users on the same server. This is my dovecot -n output ------------------------------------------------ # 1.1.11: /etc/dovecot/dovecot.conf Error: Error in configuration file /etc/dovecot/dovecot.conf line 1076: Unknown section type (section changed in /etc/dovecot/dovecot.conf at line 1038) Fatal: Invalid configuration in /etc/dovecot/dovecot.conf ----------------------------------------------- I was under the impression that this would be an irrelevant message, as my actual dovecot configuration file is dovecot-postfix.conf rather than dovecot.conf. The logging shows login/logout and no errors. Thanks.

11 31

[Dovecot] a dovecot / smtp / pop3 scenario
by Spyros Tsiolis 07 Jan '10

07 Jan '10

Hello again people, OK, could someone verify this ? One box, running linux CentOS. One instance of Dovecot running for Imap/Imaps only Another instance of a pop3/smtp server running to serve pop3/smtp . will this work ? Thank you kindly for your time, Spyros

2 1

[Dovecot] dovecot refuses to remove folders
by Harald Dunkel 07 Jan '10

07 Jan '10

Hi folks, I've got a problem between Thunderbird 3.0 and Dovecot imapd version 1.2.9. Configuration: # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32.2 x86_64 Debian squeeze/sid log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s managesieve login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve namespace: type: private separator: / location: maildir:~/Maildir:LAYOUT=fs inbox: yes list: yes subscriptions: yes auth default: passdb: driver: pam userdb: driver: passwd Please note the "LAYOUT=fs" and "seperator: /". AFAICS Dovecot refuses to remove a folder with '/' inside or at the end. Sample session (extracted from Thunderbird log file): 5 list "" "Trash/*" * LIST (\HasChildren) "/" "Trash/" * LIST (\HasNoChildren) "/" "Trash/subfolder2delete" 5 OK List completed. 6 list "" "Trash/subfolder2delete/*" * LIST (\HasNoChildren) "/" "Trash/subfolder2delete/" 6 OK List completed. 7 delete "Trash/subfolder2delete/" 7 NO [CANNOT] Invalid mailbox name I was pretty sure that this is a bug in Thunderbird, so I had created https://bugzilla.mozilla.org/show_bug.cgi?id=537626 . Unfortunately the Thunderbird developers are not convinced. Maybe somebody on this list can comment on this? Many thanx Harri

2 1

[Dovecot] auth, partially resolved
by Spyros Tsiolis 07 Jan '10

07 Jan '10

Hello people, After a lot of wading through the dovecot documentation (which btw, is excellent !, everything lies under "dovecot/doc/wiki"), I managed to authenticate a couple of accounts. For starters, I want dovecot to work as an imap/imaps box and nothing else. So , I went ahead and created a "passwd" file with two users. One user being my name (spyros) and plaintext password and the other user "postmaster" with encrypted password ("/etc/dovecot/passwd" shown) : --- spyros@webmail.domain.gr:{PLAIN}plainpassword postmaster@webmail.domain.gr:{SSHA}SSHAPassword --- Now, if I telnet to port 143 with both users, the system comes back with the following : --- [root@webmail dovecot]# telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN] Dovecot ready . login spyros(a)webmail.domain.gr password . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH] Logged in --- As I said, it allows login on port 143 for both users. So, the same for "postmaster". Now for port 993 : --- [root@webmail dovecot]# openssl s_client -connect webmail.domain.gr:993 [lots of SSL-related certificate information] * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN] Dovecot ready . login spyros(a)webmail.domain.gr password . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH] Logged in --- Again, the same for user "postmaster". I don't paste. So, everything is fine. However, I have an issue with the (?!) issued certificate. If I check the dovecot logs I find nothing. If on the other hand, I do the same check on the Horde application, It comes back with the following : --- * Trying protocol imap/notls, Port 143: SUCCESS - INBOX has 0 messages (0 new 0 recent) * Trying protocol imap/ssl, Port 993: ERROR - The server returned the following error message: SECURITY PROBLEM: insecure server advertised AUTH=PLAIN[SERVERBUG] Internal error occurred. Refer to server log for more information. [2010-01-05 13:30:12]Certificate failure for localhost: self signed certificate: /C=GR/ST=Kerkyra/L=Kerkyra/O=Tourist Enterprizes/OU=IMAP server/CN=webmail.domain.gr/emailAddress=postmaster(a)webmail.domain.gr * Trying protocol imap/ssl/novalidate-cert, Port 993: SUCCESS - INBOX has 0 messages (0 new 0 recent) * Trying protocol imap/tls/novalidate-cert, Port 143: SUCCESS - INBOX has 0 messages (0 new 0 recent) --- Now, I know I am not supposed to ask you chaps about this, but direct my questions to the horde mailing list. However, I would like an opinion before I go ahead and bug them with this. Certificate was created with "dovecot/doc/mkcert.sh" and the relevant certificate file (can't recall its name at the moment). Any help would be appreciated. On the other hand, If I went too far with this I apologize and I'll try to find another way to resolve this. Thank you people, s.

2 1

[Dovecot] Post-logoff script
by Aaron Roberts 07 Jan '10

07 Jan '10

Hi, Is it possible with dovecot to run a script on user logoff event - something like post-login script? What I want to achieve is updating a SQL table with online/offline status. Thanks in advance, Aaron

2 2

Re: [Dovecot] Oracle SQL driver
by Alexander Bukharov 06 Jan '10

06 Jan '10

> There wouldn't be any uncommitted statements. The only such statements are > sent inside commit(), the others are SELECTs and such that don't modify > anything. Ok. I made things this way. > Well, that also wastes memory :) I thought I remembered using VARCHAR > pointers about 10 years ago. I think I still have that code around, but I > currently don't have a computer where I could put that hard drive. Maybe in > a few days. No need for this. I found a way to handle VARCHAR pointers. Now all ok. There is always a time to learn =) > Does Oracle handle \ specially? I don't have Oracle installed currently or > access to any installations. No unless an escape clause is specified in SQL-statement. > I'll check the updated patch later. Here is a fixed one.

1 0