July 2010 - dovecot - dovecot.org

Re: [Dovecot] salted passwords
by Leonardo Rodrigues 01 Aug '10

01 Aug '10

Em 31/07/2010 18:51, Patrick Westenberg escreveu: > Leonardo Rodrigues schrieb: >> >> that's all because i already have a account manager system, >> written on PHP, which i had to kept. So i was trying to understand >> how that's work to make it work on my system i couldnt stop using. >> >> but after some tryings i got everything running. All my passwords >> were already migrated from plaintext to Salted-SHA2-256. > > Hi Leonardo, > > can you tell me how you solved your problem with creating salted > passwords via PHP? > Hi .... yes i've acchieved some PHP routines for creating the salted SHA256 password with random salt and also comparing a stored hashed password with a plaintext supplied one. encoded passwords will be exited as: {SSHA256.HEX}acf5ce0f51cca2077e27884a7cec385c430bb402c2f961b02bfa779c18aaf9a373772d99 encoded password strings is 85-char length with the SSHA.256 prefix and 72 without it as i'm storing passwords with the SSHA256.HEX prefix, my dovecot conf has: default_pass_scheme = PLAIN so i can have any dovecot-supported encoded password on the database as well as plaintext ones code may not be very beautiful, i do admit that i'm not good on making beautiful codes .... but its working nice in several places :) http://pastebin.com/fzDGE561 the VerifyHashedPassword routine can receive passwords with the {SSHA256.HEX} string and without as well. That makes easier to just compare database stored passwords as well as the newly generated ones to compare with newly encoded ones based on the plaintext supplied. usage is pretty simple .... something like: $hashedpwd = HashedPassword($plainpwd); and store $hashedpwd whatever you want to store it checking the stored password against a supplied password would be something like: if ( VerifyHashedPassword($hashedpwd,$plainpwd) ) { // supplied plaintext password MATCH with supplied hashed password do whatever you want if passwords matches } else { // supplied plaintext password DO NOT MATCH with supplied hashed password do whatever you want if passwords DO NOT match } Hope this helps you :) -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

1 0

Re: [Dovecot] SSHA256 scheme
by Daniel Luttermann 31 Jul '10

31 Jul '10

Patrick Westenberg wrote on 31.07.2010: > Hallo, > Daniel Luttermann schrieb: >> Your PHP application generates the password with the given scheme and >> write it to the password field. > wie soll ich denn via PHP dass Passwort generieren, wenn ich nicht weis > in welcher Art und Weise Passwort und Salt miteinander kombiniert werden > müssen damit Dovecot es versteht. > Gruß > Patrick I'm not familiar with this but there were a thread in February this year about salted passwords: http://www.dovecot.org/list/dovecot/2010-February/046715.html As far as I know dovecotpw or doveadm creates a random salt on every run so when you use PHP it should be possible to use standard routines with a random salt. -- Daniel

1 0

[Dovecot] need convert-tool advice
by Dave McGuire 31 Jul '10

31 Jul '10

Hi folks, I've got a few thousand accounts that I'd like to convert from mbox to maildir. I'm looking at using convert-tool from the command line to do this, but I'm uncertain about the command line syntax, so I hope someone can take a moment to go over this with me. I'm running dovecot 1.1.6 on this system. Mail accounts are not tied to UNIX system accounts, I'm using the dovecot LDA, users do not have home directories, everything is controlled from a database, and mail directories take the form of: /var/spool/mail/<domainname>/<username>/... The mail directories contain mbox-style spool files, including "inbox" and any user-created mbox-format folders. The entire hierarchy is owned by vmail.vmail. I'd like to batch-convert these offline in such a way that it's transparent to users. Here's what I have so far: ------------------------------------------------------------ mv ${user} ${user}-mbox convert_tool ${user} \ /var/spool/mail/${domain}/${user} \ mbox:/var/spool/mail/${domain}/${user}-mbox:\ INBOX=/var/spool/mail/${domain}/${user}-mbox/inbox \ maildir:/var/spool/mail/${domain}/${user} ------------------------------------------------------------ (sorry about that incomprehensibly long command line, I tried to break it intelligently) ...then I'll change the "mail" field returned by the database query to include maildir instead of mbox. I'll wrap the whole thing in a script and do it in one run. Is this correct usage of convert_tool's command line options? The thing that confuses me is the "home directory" command line option, not sure what that's for, as my mail users don't have home directories...at least not in the UNIX sense, does it mean something else? Will the users notice anything different here, with respect to UIDs, indices, or anything like that? If this is completely the wrong way to do it, I'm not opposed to using a different tool like mb2md.pl, but I looked at that and couldn't quite figure out how to make it work within my current directory structure. Thanks, -Dave -- Dave McGuire Port Charlotte, FL

2 1

[Dovecot] performance problems with {s,m}dbox
by Jake Johnson 31 Jul '10

31 Jul '10

using rc3 and with the latest pigeonhole, I had problems with dovecot (deliver) keeping up with high volumes of E-mail. I tried sdbox, mdbox, and cyrdir all with similar (failed) result. using the default Maildir I had no problems. I did not try mbox. The problems seemed to happen when there were multiple deliver's running to the same folder I had defined in my sieve rules, either it would timeout and fail, or timeout and get delivered to my inbox, crash, or eventually halt because the queue would reach 20,000 messages which is the maximum with my postfix configuration. Everything was fine when I was using Maildir, no errors and no sieve errors/timeouts. perhaps it is more of an issue with pigeonhole than sieve, but thought I would post my experience using dbox, since it sounded like it was a winner based on performance. Jul 29 06:59:12 db1 dovecot: lda(XXXX): Error: Timeout while waiting for lock for transaction log file /home/XXXX/Maildir.mdbox/storage/dovecot.map .index.log Jul 29 06:59:12 db1 dovecot: lda(XXXX): Error: sieve: msgid=< 20100729135337.D7BBA3A03B3(a)db1.XXXXXXX.COM>: failed to store into mailbox 'XXXX': Internal error occurred. Refer to server log for more information. [2010-07-29 06:56:12] Jul 29 06:59:27 db1 dovecot: lda(XXXX): Error: sieve: execution of script /home/XXXX/.dovecot.sieve failed, but implicit keep was successful Jul 29 07:13:53 db1 dovecot: lda(XXXX): Error: Timeout while waiting for lock for transaction log file /home/XXXX/Maildir.mdbox/storage/dovecot.map .index.log Jul 29 07:13:53 db1 dovecot: lda(XXXX): Error: sieve: msgid=< 20100729140329.9CBD73A0334(a)db1.XXXXXxxxxXXXX.com>: failed to store into mailbox 'XXXX': Internal error occurred. Refer to server log for more information. [2010-07-29 07:10:53] Jul 29 07:14:18 db1 dovecot: lda(XXXX): Error: sieve: execution of script /home/XXXX/.dovecot.sieve failed, but implicit keep was successful Jul 29 07:14:18 db1 dovecot: lda(XXXX): Panic: file dbox-file.c: line 76 (dbox_file_free): assertion failed: (file->refcount == 0) Jul 29 07:14:18 db1 dovecot: lda(XXXX): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x39bba) [0x7f40bf715bba] -> /usr/lib/dovecot/libdo vecot.so.0(i_syslog_fatal_handler+0x2b) [0x7f40bf715c4b] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f40bf6f31a6] -> /usr/lib/dovecot/libdov ecot-storage.so.0(+0x794ac) [0x7f40bfbd74ac] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_files_free+0x40) [0x7f40bfbd30b0] -> /usr/lib/doveco t/libdovecot-storage.so.0(+0x77f89) [0x7f40bfbd5f89] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_storage_unref+0x7d) [0x7f40bfb87d4d] -> /usr/ lib/dovecot/libdovecot-storage.so.0(+0x23bf9) [0x7f40bfb81bf9] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_namespaces_deinit+0x23) [0x7f40bfb8 1cd3] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x2bd3d) [0x7f40bfb89d3d] -> /usr/libexec/dovecot/deliver(main+0x688) [0x402ea8] -> /lib/libc.so .6(__libc_start_main+0xfd) [0x7f40bef6bc4d] -> /usr/libexec/dovecot/deliver() [0x4025f9]

2 2

[Dovecot] Dovecot 2.0 - expire with flat file?
by Bernd Schmelter 30 Jul '10

30 Jul '10

I`m using Dovecot 2.0 with only one lokal user, so it`s imho overkill to use mysql. plugin quota with flat file running fine. It's possible expire also running with flat file? What's syntax in dovecot.conf (expire = file:??? and expire_dict?) Benn

3 2

[Dovecot] Dovecot and SSD
by Bryan Vyhmeister 30 Jul '10

30 Jul '10

I'm considering setting up my own mailserver with Dovecot 2.0 (as soon as it's out) and SSD. I'm debating whether it's worth it or not. I have been running a mailserver with the Dovecot 1.1 train for a couple of years and it's been flawless and amazing. I'm thinking about using either FreeBSD 8.1 w/ZFS or OpenBSD 4.8-beta on a 64 GB or 80 GB SSD (Corsair or Intel) using Dovecot 2.0 and mdbox. It seems like mdbox would benefit the most from an SSD because reads would be extremely fast while minimal writes (comparatively) take place due to the way mdbox is structured. I guess what I'm saying is that even if the SSD has average to slow write speeds the fast read speeds would make a big difference in many operations. Any thoughts? Alternately, run either option on a hard drive with indexes on fast flash memory. Anyone tried something like that? Thank you. Bryan

8 16

[Dovecot] permisions problems to setup dovecot lda in postfix with sieve
by maximatt 30 Jul '10

30 Jul '10

hi... i can setup dovecot lda in postfix with sieve in testing enviroment using dovecot 1.2.10 and dovecot-1.2-sieve-0.0.15 but now i want to setup them in producction so i reproduce the steps to do them but i receive the following errors: log dovecot-deliver-errors.log: Jul 29 11:48:26 deliver(xxxx@xxxx): Error: userdb lookup: connect(/var/spool/postfix/private/auth-master) failed: Permission denied (euid=500(xmail) egid=500(xmail) missing +x perm: /var/spool/postfix/private) log maillog: : : Jul 29 15:19:33 xxxx postfix/pipe[18600]: deliver_request_get: file active/7CF98168230 Jul 29 15:19:33 xxxx postfix/pipe[18600]: deliver_message: from <xxxxx@xxxxxxxxx> Jul 29 15:19:33 xxxx postfix/pipe[18600]: dict_eval: const /etc/dovecot/libexec/deliver Jul 29 15:19:33 xxxx postfix/pipe[18600]: dict_eval: const -f Jul 29 15:19:33 xxxx postfix/pipe[18600]: dict_eval: expand ${sender} -> xxxxx@xxxxxxxx Jul 29 15:19:33 xxxx postfix/pipe[18600]: dict_eval: const -d Jul 29 15:19:33 xxxx postfix/pipe[18600]: dict_eval: expand ${recipient} -> xxxxxxx@xxxxxx Jul 29 15:19:33 xxxx postfix/pipe[18600]: connect to subsystem private/defer Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr nrequest = 0 Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr flags = 0 Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr queue_id = 7CF98168230 Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr original_recipient = xxxxxx@xxxxxxx Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr recipient = xxxxx@xxxxx Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr offset = 4294967295 Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr dsn_orig_rcpt = rfc822;xxxxxxx@xxxxxxxx Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr notify_flags = 0 Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr status = 4.3.0 Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr diag_type = x-unix Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr diag_text = temporary failure Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr mta_type = Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr mta_mname = Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr action = delayed Jul 29 15:19:33 xxxx postfix/pipe[18600]: send attr reason = temporary failure Jul 29 15:19:33 xxxx postfix/pipe[18600]: private/defer socket: wanted attribute: status Jul 29 15:19:33 xxxx postfix/pipe[18600]: input attribute name: status Jul 29 15:19:33 xxxx postfix/pipe[18600]: input attribute value: 0 Jul 29 15:19:33 xxxx postfix/pipe[18600]: private/defer socket: wanted attribute: (list terminator) Jul 29 15:19:33 xxxx postfix/pipe[18600]: input attribute name: (end) Jul 29 15:19:33 xxxx postfix/pipe[18600]: 7CF98168230: to=<xxxxx@xxxxxxx>, relay=dovecot, delay=0.24, delays=0.2/0.01/0/0.03, dsn=4.3.0, status=deferred (temporary failure) : : these are the configurations that i set: config in dovecot: # 1.2.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.9-67.0.4.ELsmp i686 CentOS 4 : : lda: postmaster_address: postmaster@xxxxxx mail_plugins: sieve auth_socket_path: /var/spool/postfix/private/auth-master log_path: /var/log/dovecot-deliver-errors.log info_log_path: /var/log/dovecot-deliver.log auth default: : : passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: nss args: service=ldap blocking=yes socket: type: listen client: path: /var/spool/postfix/private/authldap mode: 432 user: postfix group: postdrop master: path: /var/spool/postfix/private/auth-master mode: 432 user: xmail group: xmail plugin: sieve: /etc/dovecot/sieve/scripts/%n.sieve sieve_global_dir: /etc/dovecot/sieve/scripts/ sieve_global_path: /etc/dovecot/sieve/scripts/default.sieve sieve_after: /etc/dovecot/sieve/scripts/default.sieve i cannot set the apropiate permisions without broke the service... and i cant find the mistake yet... :( ¿whats could be happend? :( Thanks in advance! -- *Salu2 ;)*

2 2

[Dovecot] relay access denied problem thru iphone imap auth
by Allen Walker 30 Jul '10

30 Jul '10

I'm using postfix smtpd / dovecot. Running imaps, imap, pop3s, pop3. I have a ssl certificate setup. Everything works fine via IMAP except sending to an email from outside the network to a recipient outside the network. The problem is when someone (and this is being tested thru the iphone email client configured to use imap) logs in, they can read messages but cannot send to an address outside my network, assuming they are logged in outside the network. If you they are logged in inside the network, they can send to anyone just fine. The Log: Jul 29 20:09:41 ubuntu dovecot: imap-login: Login: user=<amit>, method=PLAIN, rip=166.205.142.84, l ip=192.168.1.68, TLS Jul 29 20:10:02 ubuntu postfix/smtpd[28892]: warning: 166.205.142.84: hostname 166-205-142-084.mobi le.mymmode.com verification failed: No address associated with hostname Jul 29 20:10:02 ubuntu postfix/smtpd[28892]: connect from unknown[166.205.142.84] Jul 29 20:10:06 ubuntu postfix/smtpd[28892]: NOQUEUE: reject: RCPT from unknown[166.205.142.84]: 55 4 5.7.1 <xxx(a)gmail.com>: Relay access denied; from=<amit(a)outsidedomain.com> to=<xxx(a)gmail.c om> proto=ESMTP helo=<[10.67.168.110]> Jul 29 20:10:06 ubuntu postfix/smtpd[28892]: disconnect from unknown[166.205.142.84] */etc/postfix/main.cf:* smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) biff = no # appending .domain is the MUA's job. append_dot_mydomain = no # Uncomment the next line to generate "delayed mail" warnings #delay_warning_time = 4h readme_directory = no # TLS parameters smtpd_tls_cert_file = /etc/ssl/certs/server.crt smtpd_tls_key_file = /etc/ssl/private/server.key smtpd_use_tls=yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for # information on enabling SSL in the smtp client. myhostname = mydomain.com alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases alias_database = hash:/etc/aliases myorigin = /etc/mailname mydestination = mydomain.com, localhost mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 mailbox_command = procmail -a "$EXTENSION" mailbox_size_limit = 0 recipient_delimiter = + inet_interfaces = all relay_domains = lists.mydomain.com # I use this as I have mailman also running transport_maps = hash:/etc/postfix/transport mailman_destination_recipient_limit = 1 relayhost = inet_protocols = ipv4 smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth-client smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination

4 5

[Dovecot] Dovecot LDA
by Daminto Lie 30 Jul '10

30 Jul '10

Hi, I was wondering if I could get some help with Dovecot. I have just recently set up a mail server that runs on Ubuntu Server 10.04. It has got the current version of postfix and Dovecot. I have also got the squirrelmail set up as my webmail. Everything is fine. However, I have been reading some emails posted by Dovecot users regarding Dovecot LDA. I wonder if anyone might be able to let me know the benefits it might offer so that i could make a decision as to whether I need it or not. Thank you very much in advance

3 2

[Dovecot] Debugging Plug-In
by John O'Brien 30 Jul '10

30 Jul '10

Hi, I'm very new to Dovecot plug-in development. Is there a simple way to do so some simple logging. I want and equivalent of printf to be able stick strings in /var/log/maillog. Regards, John

2 1