December 2010 - dovecot

[Dovecot] Passwords not returned without auth_bind ?
by Mohit Chawla 04 Dec '10

04 Dec '10

Hi, Maybe I am missing something simple, but I can't get users authenticated using password lookups, as opposed to auth_bind. This is how the log looks like when using password lookup: dovecot: auth(default): new auth connection: pid=2449 dovecot: auth(default): client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=43458#011resp=<hidden> dovecot: auth(default): ldap(foo,127.0.0.1): pass search: base=uid=foo,ou=people,dc=djb,dc=hell,dc=qua scope=base filter=(accountStatus=noaccess) fields=(none) slapd[1834]: conn=1083 op=1 SRCH base="uid=foo,ou=people,dc=djb,dc=hell,dc=qua" scope=0 deref=0 filter="(accountStatus=noaccess)" slapd[1834]: conn=1083 op=1 SRCH attr=(none) slapd[1834]: conn=1083 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text= dovecot: auth(default): ldap(foo,127.0.0.1): unknown user dovecot: auth(default): ldap(foo,127.0.0.1): pass search: base=ou=people,dc=djb,dc=hell,dc=qua scope=subtree filter=(accountStatus=active) fields=uid,userPassword,homeDirectory,uidNumber,gidNumber,mailQuotaSize slapd[1834]: conn=1084 op=1 SRCH base="ou=people,dc=djb,dc=hell,dc=qua" scope=2 deref=0 filter="(accountStatus=active)" slapd[1834]: conn=1084 op=1 SRCH attr=uid userPassword homeDirectory uidNumber gidNumber mailQuotaSize dovecot: auth(default): ldap(foo,127.0.0.1): result: uid(user)=foo uidNumber(userdb_uid)=1008 gidNumber(userdb_gid)=1008 homeDirectory(userdb_home)=/home/foo mailQuotaSize(userdb_quota_rule=*:bytes=%$)=*:bytes=10000000 dovecot: auth(default): ldap(foo,127.0.0.1): No password returned (and no nopassword) slapd[1834]: conn=1084 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= dovecot: auth(default): client out: FAIL#0111#011user=foo *dovecot-ldap.pass* uris = ldap://10.5.3.101 dn = uid=dove,ou=people,dc=djb,dc=hell,dc=qua dnpass = debian auth_bind = no ldap_version = 3 base = ou=people,dc=djb,dc=hell,dc=qua scope = subtree pass_filter = (accountStatus=active) pass_attrs = uid=user,userPassword=password,\ homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid,mailQuotaSize=userdb_quota_rule=*:bytes=%$ *dovecot-ldap.deny* uris = ldap://10.5.3.101 ldap_version = 3 base = uid=%u,ou=people,dc=djb,dc=hell,dc=qua scope = base auth_bind = no pass_filter = (accountStatus=noaccess) pass_attrs = (none) *dovecot.conf* # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-3-686 i686 Debian squeeze/sid log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap managesieve listen(default): * listen(imap): * listen(managesieve): *:2000 ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota mail_plugins(imap): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(managesieve): bytes=%i%o lda: postmaster_address: bar(a)djb.hell.qua mail_plugins: quota sieve deliver_log_format: msgid=%m: %$ sendmail_path: /usr/lib/sendmail log_path: /var/log/ldaone info_log_path: /var/log/ldatwo debug: yes auth default: debug: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.deny deny: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.pass userdb: driver: prefetch userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.user socket: type: listen master: path: /var/run/dovecot/auth-master mode: 438 plugin: quota: maildir sieve: ~/.dovecot.sieve sieve_dir: ~/sieve

2 5

[Dovecot] SIS errors - was Error from mobile client (Palm Pre)
by Daniel L. Miller 04 Dec '10

04 Dec '10

Continuing to see errors on this with some new messages. Is it possible this has anything to do with zlib plugin, or possibly having a mix of zlib compressed & uncompressed messages with mdbox? I recently added zlib to deliver plugin list. -- Daniel L. Miller, VP - Engineering, SET AM Fire & Electronic Services, Inc. [AMFES] dmiller(a)amfes.com 702-312-5276

2 15

[Dovecot] typo
by Mike Abbott 04 Dec '10

04 Dec '10

Typo on line 292 of src/lib-master/master-login-auth.c in 2.0.8: tuah.

2 1

[Dovecot] thunderbird crashed-mail_max_userip
by Paul Cartwright 04 Dec '10

04 Dec '10

thunderbird just crashed, and I've never seen this before. Any idea what happened? this was in the dovecot log: 2010-12-02 13:06:40 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:40 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:40 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:40 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:41 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:41 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:41 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:41 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:42 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:42 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured -- Paul Cartwright Registered Linux user # 367800

4 5

[Dovecot] v2.0.8 released
by Timo Sirainen 03 Dec '10

03 Dec '10

http://dovecot.org/releases/2.0/dovecot-2.0.8.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.8.tar.gz.sig There are many small fixes all around, plus some more noticeable changes: * Services' default vsz_limits weren't being enforced correctly in earlier v2.0 releases. Now that they are enforced, you might notice that the default limits are too low and you need to increase them. This problem will show up in logs as "out of memory" errors. See default_vsz_limit and service { vsz_limit } settings. * LMTP: In earlier versions if mail was delivered to user+detail@domain address, LMTP server always attempted to deliver the mail to mailbox named "detail". This was rather unintentional and shouldn't have been the default. lmtp_save_to_detail_mailbox=yes setting now preserves this behavior (default is no). + Added systemd support (configure --with-systemdsystemunitdir). Based on patch by Christophe Fergeau. + Replaced broken mbox-snarf plugin with a new more generic snarf plugin. - dbox: Fixes to handling external mail attachments - verbose_proctitle=yes didn't work for all processes in v2.0.7 - imap, pop3: When service { client_count } was larger than 1, the log messages didn't use the correct prefix. Last logged in user's prefix was always used, regardless of what user's session actually logged it. Now the proper log prefix is always used. - MySQL: Only the first specified host was ever used

1 0

[Dovecot] Debian Dovecot Repo and Lenny
by Stephan Jauernick 03 Dec '10

03 Dec '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I am running a Debian Lenny and i want to install/update Dovecot but i am getting these Dependency Problems: dovecot-common: Depends: libc6 (>= 2.10) but 2.7-18lenny6 is to be installed Depends: libgssapi-krb5-2 (>= 1.6.dfsg.2) but it is not installable Depends: libk5crypto3 (>= 1.6.dfsg.2) but it is not installable Depends: libkrb5-3 (>= 1.6.dfsg.2) but it is not installable Depends: libmysqlclient16 (>= 5.1.21-1) but it is not going to be installed Depends: libpq5 (>= 8.4~0cvs20090328) but 8.3.12-0lenny1 is to be installed Depends: libsqlite3-0 (>= 3.6.22) but 3.5.9-6 is to be installed Depends: libssl0.9.8 (>= 0.9.8m-1) but 0.9.8g-15+lenny9 is to be installed dovecot-imapd: Depends: libssl0.9.8 (>= 0.9.8m-1) but 0.9.8g-15+lenny9 is to be installed dovecot-pop3d: Depends: libssl0.9.8 (>= 0.9.8m-1) but 0.9.8g-15+lenny9 is to be installed This are my sources.list entries for dovecot: deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.0 main deb-src http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.0 main Also when could i expect a release/deb package which includes this Commit(or how can in package it myself)? * src/lib/askpass.c: askpass: Allow reading password from stdin even if it's not a tty. [719ce27f9955] I need it because postfixadmin fails otherwise while using the doveadm tool. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (MingW32) Comment: Protect messages and files using GnuPG and OpenSSL! Comment: GnuPG-Pack: http://home.arcor.de/rose-indorf Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEVAwUBTPjoyOlWJjWCxiMpAQLpWQf6Axy22rqAEKGGyWK7eR/eBViFrtIgVP7R SNXnNe/b9QfbsSKsvBaZFtueiOm2GtfLC/8kQefzEfNoGHPqGPlSbJ5PQNZjgI9C wAkfFRD4dxH8YeACKk36HTPUJZOCHnxXXxBhdA39/ba8s+CNp0n6ct9ShG7tnmQe 382jYcxQMw1SOeXkf4sq4TPxqwR60Ij4ocUkzI2fHHoRXfIrlBsl/dsmyjhaJKt8 qElk2NK8IRSb7qMZSeV6a2y56QD9kgoBE7UDjGnwZ6SlMWXZ1L7rC3SvtJ8serkO vno3pzsG7dNwSVIyD4QkNneqH6OR+xZ8j6jHhOfg62W/xPdMxOZwRA== =1BUd -----END PGP SIGNATURE-----

3 4

Re: [Dovecot] how do I fix this
by donovan jeffrey j 03 Dec '10

03 Dec '10

On Dec 3, 2010, at 11:20 AM, Timo Sirainen wrote: > On 3.12.2010, at 13.31, donovan jeffrey j wrote: > >> so i can just take the files from /cur and copy them into the other directory ? >> >> like >> >> cd /Volumes/x/var/spool/imap/dovecot/9EE12CA8-CC7B-4889-ABBA-525E5D522831/cur >> >> cp -Rf * /Volumes/x/var/spool/imap/dovecot/330CE746-6F8D-4708-8877-A97FAFB9AAD/cur > > Yes. > >> what a bout syncing or index do I have to do anything like a restart or will dovecot pickup on the fly? > > Dovecot picks them up automatically. > thanks there was a little change perms that i needed to do, the cp made the owner of *.files root :) a mv should have been my choice but I did not want to risk loosing to some index land. thanks for your help. -j

1 0

[Dovecot] Indexes.
by Henrique Fernandes 03 Dec '10

03 Dec '10

Hello people! I have huge problems with IO wait becase dovecot configured to use maildir is under OCFS2 1.4. Now i have an question to OCFS2 each disk action is really heavy becaue it has no index. Now i am thinking in what can be done to heltp my system to use less disk. Looking for index and etc in dovecot i found this, this disables the index file on disk and leave it on ram or it disable the index files ? If you really want to, you can also disable the index files completely by appending :INDEX=MEMORY I am only trying to get dovecot to work faster. Right now we have to waing some seconds to dovecot list all emails or read an email. I am also thinking in right index to an NFS but i don't know if this makes any diferences in performance. Thanks to all! I use 3 servres wrinting on OCFS2 one is mailman, and other two are to email, I have ipvs to load balance the conections. []'sf.rique

3 5

[Dovecot] Dovecot lmtp
by Benedetto Vassallo 03 Dec '10

03 Dec '10

Hello to all, I am setting up a mail server using sendmail and dovecot 2.0.7 with maildir storage. I want to use dovecot lmtp as local mail delivery agent becouse when I send a message to multiple recipients it deliver the message to all recipients with hard links instead of store n copies of the message. The only think I can't set up is make dovecot-lmtp reading the .forward file in the user's home directory. I think I am missing something, becouse dovecot-lda read that file but don't do hard links when deliver the mail. What I am missing? Thank you -- Benedetto Vassallo Sistema Informativo di Ateneo Settore Gestione Reti Hardware e Software U.O. Sviluppo e manutenzione dei sistemi Università degli studi di Palermo Red Hat Certified Engineer Certificate Number: 804007793324656 Phone: +3909123860056 Fax: +390916529124 ------------------------------------------------------------------------- This message was sent using the University of Palermo web mail interface.

2 2

[Dovecot] SSL issues on separate IPs
by Tim Traver 03 Dec '10

03 Dec '10

Hi Timo, I have set up 2.07 to answer on several different IP's with different SSL certs, like the following : local 209.132.xx.4 { ssl_cert = </shared/templates/res/1040/certs/*.xxxxx.com.crt-pem-298 ssl_key = </shared/templates/res/1040/certs/*.xxxxx.com.key-298 } I have several of these, and there appears to be a problem with one in particular that is dropping connections, and I'm not sure why. In this case it is a wildcard cert issued from godaddy, and I have the cert file in pem format with the chain on it. I have another completely separate local IP setup with a different cert on it that works without any problems. This particular one drops the connection when I try to connect to IMAP using TLS on port 143, or using the IMAP SSL port of 993. When I try it using Thunderbird, I am using the default settings for both tests. The Thunderbird error I get is "The server has disconnected. The server may have gone down or there may be a network problem." I don't see any errors in the dovecot error log or the system error log, and when using doveadm who to view the current connections, it does not show a connection. I tried enabling the logs for SSL errors, but nothing appears for my IP when attempting to connect. FreeBSD 8.1 with openssl 0.9.8n. The IP's are on the box and are on the loopback interface if that makes any difference for a direct server return load balancing system. But, I don't know how that would make a difference since one of the separated IP's works with its cert, and the other one disconnects. Thanks, Tim. Here is my dovecot -n output : # 2.0.7: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.1-STABLE i386 auth_username_format = %Lu auth_username_translation = %@ auth_verbose = yes disable_plaintext_auth = no dotlock_use_excl = yes first_valid_uid = 100 listen = * lock_method = dotlock log_path = /local/logs/dovecot.errors mail_fsync = always mail_gid = 100 mail_location = maildir:%h/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota" mail_uid = 100 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags notify mmap_disable = yes passdb { args = /bin/checkpassword_dovecot_auth driver = checkpassword } plugin { quota = maildir:User quota quota_rule = Trash:storage=+100M sieve = ~/.dovecot.sieve sieve_after = /home/mailboxes/sieve/to_spam_folder.sieve sieve_dir = ~/Maildir/sieve sieve_extensions = +notify +imapflags } protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = sn mode = 0600 user = sn } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /bin/checkpassword_dovecot_deliver driver = checkpassword } verbose_proctitle = yes verbose_ssl = yes protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { info_log_path = /local/logs/dovecot-deliver.log log_path = /local/logs/dovecot-deliver-errors.log mail_plugins = " quota sieve" } protocol imap { mail_plugins = " quota imap_quota" } protocol sieve { managesieve_sieve_capability = comparator-i;ascii-numeric fileinto reject vacation imap4flags notify include envelope body relational regex subaddress copy } local 209.132.77.4 { ssl_cert = </shared/templates/res/1040/certs/*.xxxxx.com.crt-pem-298 ssl_key = </shared/templates/res/1040/certs/*.xxxxx.com.key-298 } local 209.132.79.1 { ssl_cert = </shared/templates/res/1000/certs/*.ssl.xxxxx.com.crt-278 ssl_key = </shared/templates/res/1000/certs/*.ssl.xxxxx.com.key-278 }

3 7