June 2010 - dovecot - dovecot.org

[Dovecot] dovecot ldap search result ordering?
by chasye 02 Jul '10

02 Jul '10

I use openLDAP as dovecot pass/user db. here is main part of dovecot-ldap.conf: pass_attrs = mail=user, uid=userdb_home=/home/xadmin/%d/%$,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%u)) default_pass_scheme = SSHA user_attrs = mail=user, uid=home=/home/xadmin/%d/%$ user_filter = (&(objectClass=posixAccount)(|(mail=%u)(mailAlias=%u))) It works fine, but some account failed to get their domain in pass_attrs. I check the log. when it success, the result order is "mail, uid, userPassword" when it failed, the order is "userPassword, uid, mail" we just use a username to login. I think dovecot cant get the domain before username changed to "username@domain". So can dovecot sort the result order and How? -- 　　多情卻似總無情，　　唯覺尊前笑不成。　　蠟燭有心還惜別，　　替人垂淚到天明。

3 4

[Dovecot] Dovecot LDA/LDAP
by Frank den Hartog 01 Jul '10

01 Jul '10

I'm a total newbie with Dovecot LDA and LDAP. To be honoust, I don't know what I'm doing. My system runs CentOS 5.5, Postfix 2.3.3 and Dovecot 1.2.11. I try to set up Dovecot LDA. But whatever I'm trying, I fail. 2010-06-30T18:28:12.585128+02:00 h1690641 postfix/pipe[26443]: 84F012A00A55: to=<test(a)domain.com>, relay=dovecot, delay=0.07, delays=0.03/0.01/0/0.02, dsn=5.1.1, status=bounced (user unknown) My current situation: I'm using at the current server OpenLDAP, Postfix and Dovecot with the Postfix LDA. It works fine, but I want to use sieve. I've setup a second server. I'm using my current OpenLDAP directory. The configurations: /etc/dovecot.conf # 1.2.11: /etc/dovecot.conf # OS: Linux 2.6.18-028stab064.7 i686 CentOS release 5.5 (Final) reiserfs login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:/home/vmail/%i/Maildir/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / location: maildir:/home/vmail/%i/Maildir/ inbox: yes hidden: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)cocamsterdam.net sendmail_path: /usr/lib/sendmail auth_socket_path: /var/run/dovecot/auth-master auth default: passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail /etc/dovecot-ldap.conf hosts = host.server.com dn = cn=Manager,dc=domain,dc=com dnpass = blabla ldap_version = 3 base = dc=domain,dc=com user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password,\ homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid pass_filter = (&(objectClass=posixAccount)(uid=%u)) /etc/postfix/main.cf (Virtual settings) virtual_alias_domains = $virtual_alias_maps virtual_alias_expansion_limit = 1000 virtual_alias_maps = $virtual_maps virtual_alias_recursion_limit = 1000 virtual_destination_concurrency_limit = $default_destination_concurrency_limit virtual_destination_recipient_limit = $default_destination_recipient_limit virtual_gid_maps = static:12 virtual_mailbox_base = /home/vmail/ virtual_mailbox_domains = /etc/postfix/domains.cf virtual_mailbox_limit = 51200000 virtual_mailbox_lock = fcntl virtual_mailbox_maps = ldap:/etc/postfix/ldap-users.cf virtual_minimum_uid = 100 virtual_transport = dovecot virtual_uid_maps = static:500 /etc/postfix/master.cf (Dovecot settings) dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${recipient} /etc/postfix/domains.cf domain.com /etc/postfix/ldap-users.cf server_host = host.domain.com search_base = dc=domain,dc=com version = 3 query_filter = (&(objectclass=person)(mail=%s)) result_attribute = uid result_format = %s/Maildir/ I've used http://www.linuxmail.info as an example. That works fine, but I want more.

2 1

[Dovecot] Can't establish Dovecot authorization in Exim.
by 秋元亮二 30 Jun '10

30 Jun '10

Hi, I have some problem in Dovecot authorization in Exim for outgoing SMTP. Version of Exim is 4.69 and the Exim was compiled with "AUTH_DOVECOT=yes" and "AUTH_PLAINTEXT=yes". Version of Dovecot is 1.2.12. I use SSL for IMAP. Is Exim neccesary to use SSL(TLS) for authorization of outgoing SMTP? Configuration files is as follows; - Exim ---------------------------------------------------------- dovecot_login: driver = dovecot public_name = LOGIN server_socket = /var/run/dovecot/auth-client server_set_id = $auth1 dovecot_plain: driver = dovecot public_name = PLAIN server_socket = /var/run/dovecot/auth-client server_set_id = $auth2 ---------------------------------------------------------- - Dovecot ---------------------------------------------------------- auth default { mechanisms = plain login passdb pam { args = cache_key=%u dovecot } userdb passwd { } socket listen { #master { #} client { path = /var/run/dovecot/auth-client mode = 0666 } } } ---------------------------------------------------------- Do I have to set other than that, like TLS for Exim? Thanks in advance. _________________________________________________________________ Hotmailがサクサク動く！フィッシング詐欺も怖くない http://o.jp.msn.com/ie8/

3 4

[Dovecot] "forgot my password" feature
by Mustafa Cagatayli 30 Jun '10

30 Jun '10

Hi, We have a mail server with the postfix/Squirrelmail/Dovecot(v.1.1.11) combination which we have user data on MySQL through virtual users. We have configured the SquirrelMail interface so that users can now change their own passwords. Is there any opensource solution to provide "self service password management" which would allow us to add the "I forgot my password. Lets reset it" feature which would do the authentication with the help of some random personal data or personal question/answer combination ? Regards. -- Mustafa Çağataylı BİM

2 1

[Dovecot] Work with auth socket
by Неворотин Вадим 30 Jun '10

30 Jun '10

---------- Forwarded message ---------- From: Неворотин Вадим <nevorotin(a)gmail.com> Date: 2010/6/29 Subject: Re: [Dovecot] Work with auth socket To: Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> Hmm, I have some problems with realization of authentication throw dovecot socket. I've wrote such script: #!/usr/bin/perl $login = "test"; $passwd = "test"; #utf8::encode($login); # I don't know are we really need it #utf8::encode($passwd); my $service = "ejabberd"; my $timeout = 1; my $socket = '/var/spool/postfix/private/auth-client'; my $sock = new IO::Socket::UNIX(Type => SOCK_STREAM, Peer => $socket) or die "Can't open socket."; my $sel = new IO::Select($sock); while (1) { $sel->can_read($timeout) or last; defined recv($sock, my $buf, 256, 0) or warn 'Error while reading response'; print $buf; } send($sock,"VERSION\t1\t0\nCPID\t$$\n",0) or die "Can't write to $socket"; my $base64 = encode_base64("\0$login\0$passwd"); $sock->send("AUTH\t1\tPLAIN\tservice=$service\tsecured\tresp=$base64\n") or die "Can't write to $socket"; my $i = 10; while ($i--) { $sel->can_read($timeout) or last; # "Timed out while waiting for response"; defined recv($sock, my $buf, 256, 0) or warn 'Error while reading response'; print $buf; } And has such log: # ./test.pl MECH PLAIN plaintext MECH LOGIN plaintext VERSION 1 0 SPID 26023 CUID 1818 DONE So dovecot doesn't answer anything after AUTH command. May be http://wiki.dovecot.org/Authentication%20Protocol is not fully describe auth protocol? 2010/6/24 Неворотин Вадим <nevorotin(a)gmail.com> Thank you! > > > 2010/6/24 Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> > > -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> On Thu, 24 Jun 2010, Неворотин Вадим wrote: >> >> >> I need to use Dovecot auth socket from my perl script to validate user's >>> passwords (for jabber server). Is there any information about how to >>> communicate with dovecot auth socket? >>> >>> >> >> http://search.cpan.org/~sasha/Authen-SASL-Authd-0.04/lib/Authen/SASL/Authd.… >> >> "NAME >> >> Authen::SASL::Authd - Client authentication via Cyrus saslauthd or Dovecot >> authentication daemon." >> >> http://wiki.dovecot.org/Authentication+Protocol >> >> Regards, >> >> - -- Steffen Kaiser >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v1.4.6 (GNU/Linux) >> >> iQEVAwUBTCNOy7+Vh58GPL/cAQJXEQf/SHlQTrUo/OiNFSLteEuF6kGGY/iYGYZ2 >> CUEKLJQtE92yyGJqt7CYun3Z64llrkzYUGoJDnyPtEFgP2a1uqaEUyusilobuYfB >> E/B7zdRbHOD2+4afdwHocGundcfWB2GxZi+j454rCDWt5haX+cSd5Be561WdpyE0 >> yUc3raXLRz6qeRC/A+vmpbA4sbmm+Fd1fCHtwcQhOVvk+X7fJRLb30HUq1wRjyMi >> LBTv5TxCib+O34MPYpA6xLyrNCkjwAuhdshiw6KihVBx29U9HcoNtUIjfSqL6/gG >> vhKt6RfgahpytJm97LuDwE7GNf6/3oDeHlTJfAS5EfYdSqcnxxyfLw== >> =1C+5 >> -----END PGP SIGNATURE----- >> > >

3 4

[Dovecot] Expunge email Plugin
by Alex Baule 30 Jun '10

30 Jun '10

Hello everyone..... I Need to know when a email is expunge, but i don't need change this action. I Need to call another action + the default action. There is a plugin to do this ?

5 11

[Dovecot] Error that I don't understand
by Andre 29 Jun '10

29 Jun '10

I’ve noticed lines like this in error log: IMAP(username(a)cubeholding.com): Error: read(mail, uid=58284) failed: Is a directory I’ve looked at sources and found this message in src/lib-storage/index/index-mail.c, function static int index_mail_stream_check_failure(struct index_mail *mail) but I don’t understand where it come from, I understand it is something about indexes, anyone can explain me more, please? Dovecot 1.2.12 TIA Andrea

2 3

[Dovecot] Use both SQL and LDAP
by Shayne Jellesma 29 Jun '10

29 Jun '10

Hey guys, I am just wondering if it is possible to use both SQL and LDAP queries at the same time to get information. Example on why I want to do this: I work at a school where we have the need for 2 separate types of mailbox configuration (better wording is eluding me at the moment). Staff and Students currently share the same email server. I would like to be able to give staff a bigger inbox (eg: 500MB) than students (eg: 50MB). The way I am thinking, if this is even possible, to pull username and group membership from Active Directory. Check the groups against a SQL query to give the user the appropriate mailbox size. Also, having email is a privilege, not a right at my school so is it also possible to check if a user is part of a BannedEmailUsers or AllowedEmailUser group so I could quickly and effectively disable accounts as needed. I apologise if this is a little hard to follow. Writing what I want has never been a strongpoint for me J I also apologise if this has been asked, or information is available somewhere. I did search and didn't come up with much. Regards, Shayne Jellesma Network Administrator / ICT Support St Martins Lutheran College

2 1

[Dovecot] system_groups_user=%u seem not to be considered by deliver
by Matthias Rieber 29 Jun '10

29 Jun '10

Hi, while trying to deliver a mail I got the following error: Jun 20 21:57:09 shrike dovecot: lda(matthias): Error: user matthias: Initialization failed: Namespace 'shared.': stat(/home/sharedbox/Maildir) failed: Permission denied (euid=1014(matthias) egid=1022(scheff32) missing +x perm: /home/sharedbox, euid is not dir owner) Jun 20 21:57:09 shrike dovecot: lda(matthias): Fatal: Invalid user settings. Refer to server log for more information. The shared mailbox works without any problems when I access it with imap. Regards, Matthias

2 1

[Dovecot] %d/%n doesn't work... why?
by William Ottley 29 Jun '10

29 Jun '10

Hello all, I've been trying to setup my postfix and dovecot to AUTH with mysql, and I'm almost there! BUT, for some reason, dovecot won't create the folders in their proper location. For some reason, instead of going into /var/vmail/pplsnet.com/{username}location, where the postfix put all the emails, dovecot creates a whole new set of folders in /var/vmail/{username} I have attempted to force dovecot to put into a sub directly, without using the %d, but that doesn't work either: #mail_location = mbox:/var/vmail/%d/%n mail_location = mbox:/var/vmail/pplsnet.com/%n Where do I look to figure out why its not putting it into the %d/%n location? does it have to do with the fact that AUTH graps the username, and NOT the domain name? (via mysql)? I have included dovecot -n and postconf -n.. can anyone take a quick guess and figure out what I should be doing? thanks! *dovecot -n* # 1.0.7: /etc/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot log_timestamp: %Y-%m-%d %H:%M:%S protocols: pop3 pop3s login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/pop3-login first_valid_uid: 150 last_valid_uid: 150 mail_extra_groups: mail mail_access_groups: mail mail_location: mbox:/var/vmail/pplsnet.com/%n maildir_copy_with_hardlinks: yes mail_executable: /usr/libexec/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/pop3 auth default: mechanisms: plain login digest-md5 cram-md5 passdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail *postconf -n: *alias_database = hash:/etc/postfix/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 2 disable_vrfy_command = no html_directory = no inet_interfaces = all mail_owner = postfix mail_spool_directory = /var/spool/mail mailbox_size_limit = 500000 mailq_path = /usr/bin/mailq manpage_directory = /usr/share/man message_size_limit = 10000 mydomain = rnd myhostname = mail.pplsnet.com mynetworks = 174.xx.xx.0/24 myorigin = $myhostname newaliases_path = /usr/bin/newaliases queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.2.10/README_FILES recipient_delimiter = + relayhost = sample_directory = /usr/share/doc/postfix-2.2.10/samples sendmail_path = /usr/sbin/sendmail setgid_group = postdrop smtp_tls_note_starttls_offer = yes smtp_use_tls = yes smtpd_banner = $myhostname smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_tls_CAfile = /etc/postfix/gd_bundle.crt smtpd_tls_cert_file = /etc/postfix/pplsnet.com.crt smtpd_tls_key_file = /etc/postfix/www.pplsnet.com.key smtpd_tls_loglevel = 1 smtpd_tls_received_header = no smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 450 virtual_alias_maps = mysql:$config_directory/mysql_virtual_alias_maps.cf virtual_gid_maps = static:12 virtual_mailbox_base = /var/vmail virtual_mailbox_domains = mysql:$config_directory/ mysql_virtual_domains_maps.cf virtual_mailbox_maps = mysql:$config_directory/mysql_virtual_mailbox_maps.cf virtual_minimum_uid = 150 virtual_uid_maps = static:150 * *

4 4