October 2012 - dovecot

[Dovecot] Active Directory 2003 user database and passwords with special characters
by Boris PINON 29 Oct '12

29 Oct '12

Hello everybody, As explained in the topic, i have troubles with authentication of my users. First of all, sorry for my poor english... I'm running dovecot v1.2.15 on a Debian 6 64bits server up to date. My users database is an Active Directory 2003 (it's important to know that because Active Directory can't retrieve users passwords, you have to bind LDAP with a domain administrator). So, i'm using userdb ldap for authenticated my users and it works ! BUT... When an user having a password with special characters like " ² ° § µ à é è ç à â ê î ô û ù ä ë ï ö ü ", authentication does not work. And in my log file : MY_SERVER | mail/info | dovecot | 2012/08/27 10:42:14 | auth(default): cache(my_user,192.168.7.127): plain(RU0975é*) != 'RU0975Ã©*' As you can see, the character é has been replaced by Ã©. My dovecot.conf : protocols = imap imaps pop3 pop3s managesieve shutdown_clients = yes protocol imap { listen = 192.168.7.1:143 ssl_listen = 192.168.7.1:993 mail_plugins = quota imap_quota autocreate imap_client_workarounds = outlook-idle delay-newmail tb-extra-mailbox-sep } protocol pop3 { listen = 192.168.7.1:110 ssl_listen = 192.168.7.1:995 mail_plugins = quota pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_lock_session = no pop3_uidl_format = %08Xu%08Xv pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol managesieve { listen = 192.168.7.1:4190 login_executable = /usr/lib/dovecot/managesieve-login mail_executable = /usr/lib/dovecot/managesieve managesieve_implementation_string = dovecot } protocol lda { mail_plugins = sieve quota postmaster_address = postmaster(a)contoso.fr hostname = webmail.contoso.fr sendmail_path = /usr/sbin/sendmail quota_full_tempfail = no auth_socket_path = /var/run/dovecot/auth-master } log_timestamp = "%Y-%m-%d %H:%M:%S " syslog_facility = mail mail_debug = no auth_debug = no auth_debug_passwords = no ssl = required ssl_cert_file = /etc/ssl/certs/webmail.contoso.fr.pem ssl_key_file = /etc/ssl/private/webmail.contoso.fr.key ssl_ca_file = /etc/ssl/certs/VERYSIGN.pem ssl_verify_client_cert = no mail_location = maildir:%h mail_full_filesystem_access = no mail_uid = 500 mail_gid = 8 mail_privileged_group = mail first_valid_uid = 500 last_valid_uid = 500 first_valid_gid = 8 last_valid_gid = 8 login_greeting = Webmail CONTOSO login_process_size = 256 login_process_per_connection = no login_processes_count = 2 login_max_processes_count = 128 login_max_connections = 512 max_mail_processes = 1024 mail_process_size = 256 mail_max_keyword_length = 50 disable_plaintext_auth = yes auth_failure_delay = 2 auth_process_size = 256 auth_username_format = %Lu auth default { mechanisms = plain login auth_cache_size = 2048 passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } user = vmail count = 1 socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail group = mail } client { path = /var/run/dovecot/auth-client mode = 0666 user = vmail group = mail } } } dict { } plugin { quota = maildir:User quota quota_warning = bytes=80%% /usr/lib/dovecot/quota-warning 80 quota_warning2 = bytes=95%% /usr/lib/dovecot/quota-warning 95 quota_warning3 = bytes=99%% /usr/lib/dovecot/quota-warning 99 sieve=dovecot.sieve sieve_dir=~/.Sieve sieve_extensions=+imapflags autocreate = Spam autocreate2 = Trash autosubscribe = Spam autosubscribe2 = Trash autosubscribe3 = Sent autosubscribe4 = Drafts } And my dovecot-ldap.conf : # My domain controller uris = ldap://192.168.1.1:3268 dn = CN=ServerOperator,CN=Users,DC=contoso,DC=fr dnpass = MyPassword debug_level = 0 auth_bind = yes ldap_version = 3 base = CN=Users,DC=contoso,DC=fr deref = never scope = subtree user_attrs = mailDirectory=home=/var/spool/mail/%$,mailQuota=quota_rule=*:bytes=%$,=quota_rule2=Trash:storage=100%% user_filter = (&(|(sAMAccountName=%n)(mailAcceptingGeneralID=%u)(mail=%u))(!(|(mailDrop="*|*")(mailDrop="*:*")(mailDrop="*/*")(userParams=noMail)))) pass_filter = (&(sAMAccountName=%n)(!(|(mailDrop="*|*")(mailDrop="*:*")(mailDrop="*/*")(userParams=noMail)))) default_pass_scheme = CRYPT Does anyone else have this problem? If yes, how to solve? Thank you in advance.

1 0

[Dovecot] Problem with sieve. dovecot 2.0.17
by Eliezer Croitoru 28 Oct '12

28 Oct '12

Since I have lots of filtering rules in thunderbird I was thinking of using sieve instead. I want to filter incoming mail into subdirectories. like "from" store at folder "old". the script is: require ["fileinto", "envelope"]; if envelope :is "from" "eliezer(a)test.dom" { fileinto "old"; } else { # The rest goes into INBOX # default is "implicit keep", we do it explicitly here keep; } the result is that the mail is stored in two folders instead of just one, INBOX and old. the logs shows: Oct 23 17:12:26 lda(eliezer(a)ngtech.co.il): Debug: sieve: executing script from /home/vmail/domain/eliezer/home/.dovecot.svbin Oct 23 17:12:26 lda(eliezer(a)test1.dom): Info: sieve: msgid=<5086B3C9.5030909(a)test.dom>: stored mail into mailbox 'INBOX' Oct 23 17:12:26 lda(eliezer(a)test1.dom): Info: sieve: msgid=<5086B3C9.5030909(a)test.dom>: stored mail into mailbox 'old' from unknown reason(or I didnt understood how sieve works?) plugin section from dovecot -n plugin { ... sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +vnd.dovecot.debug +imapflags +relational +comparator-i;ascii-numeric } Thanks, Eliezer

4 6

[Dovecot] How to activate antispam plugin
by Xavier Claude 28 Oct '12

28 Oct '12

Hello, I'm using dovecot 2.1.7 from the Debian backports package and I'm trying to get working the antispam plugin with dspam. I have followed the documentation http://wiki2.dovecot.org/Plugins/Antispam but it does not seem to work. The /var/log/dspam folder is empty even after I put mail in the Spam folder. How can I see if the plugin is working and what config option am I missing ? Thank in advance for your help. Here is my config from dovecot -n: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-xenU-6887-i386 i686 Debian 6.0.6 mail_location = maildir:~/Maildir namespace inbox { inbox = yes location = prefix = } passdb { driver = pam } plugin { antispam_backend = dspam antispam_dspam_args = --mode=teft;--deliver=;--user;%u antispam_dspam_binary = /usr/bin/dspam antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_spam = Spam antispam_trash = trash;Corbeille;Trash;Deleted Items; Deleted Messages sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap pop3" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = antispam } -- Xavier Claude claude.xavier(a)gmail.com

1 0

[Dovecot] Locking /var/mail/user issue with postfix and dovecot
by Robert JR 27 Oct '12

27 Oct '12

Hello, I have a question regarding mailbox locking and hope any one can help me to better understanding the locking of mbox My Postfix lock option is fcntl dotlock mailbox_delivery_lock = fcntl, dotlock virtual_mailbox_lock = fcntl, dotlock My Dovecot lock option is fcntl only mbox_write_locks = fcntl mbox_read_locks = fcntl now, when user is download a large mail (20 MB) for example, dovecot locks /var/mail/user with fcntl until the users finish downloading the mail ok here comes my question. While the user is downloading the mail , a mail arrives so postfix make some thing weird 1- Postfix creates /var/mail/user.lock for 5 secs , then postfix defer the mail with reason that the /var/mail/user is locked and then delete the /var/mail/user.lock (after 5 secs) My question is ? why postfix create user.lock although it shouldn't because already dovecot fcntl it … 1- Dovecot locks /var/mail/user using FCNTL 2- Posttix at the same time tries to FCNTL /var/mail/user .. but it fail since dovecot already fcnl it. 3- Postfix at the same time add dot lock /var/mail/user for 5 secs then remove the lock. the question is how come postfix dot lock /var/mail although it couldn't FCNTL the file in the first place ??????? what i was expecting is 1- Dovecot locks /var/mail/user using FCNTL 2- Postfix tries to FCNTL /var/mail/user 3- POSTFIX WILL NOT CREATE DOTLOCK file unless the FCNTL is released by dovecot!!!! Please advise if postfix will dot lock the file even if it couldn't FCNTL the file in the first place…… Regards

5 23

Re: [Dovecot] Changing password for users
by Mike John 27 Oct '12

27 Oct '12

> Hello, > > I am using dovecot (2.0.9) and using virtual users using > > passdb { > args = /etc/dovecot/dovecotpasswd > driver = passwd-file > } > > How can i make my virtual users change their passwords using web > interface ? > > My users already uses squirrelmail to access their mail. is there a > program to add to squirrelmail to add this function to the clients ? > or should i user different separate website for password changing ? > and what program/tool can help me with this ? > > Any ideas is greatly appreciated. > > Mike. >Mike, >I don't know about forcing users to change their passwords however > with >Squirrelmail there are several password change plugins available that >use "poppasswd" to actually change the password. >Of course poppasswd will probably need to be modified to go against > your >password data base, in my case it simply uses PAM. The version I use > is >poppassd version 1.8.5. >Oh you probably want to restrict access to the port from the local > host >only since passwords are transmitted in clear text. >Jeff I know about poppassd , but it works only for /etc/passwd , /etc/shadow, but my dovecot virtual users password files are in different location and i do not know how to modify poppassd, any idea how can i do that? and is there another way other than poppassd?

4 4

Re: [Dovecot] Changing password for users
by Joseph Tam 27 Oct '12

27 Oct '12

> From: Mike John <mike(a)alaadin.org> > >> I know about poppassd , but it works only for /etc/passwd , >> /etc/shadow, but my dovecot virtual users password files >> are in different location and i do not know how to modify poppassd, >> any idea how can i do that? I downloaded and examined it; it's just a wrapper for /usr/bin/passwd, and there doesn't seem an easy way to modify it to use something other than the system password file. Maybe replace "/usr/bin/passwd" with htpasswd? > and is there another way other than poppassd? Write your own PHP script -- it couldn't be more than a few dozen lines of code for a working skeleton. Or Google "php change password htpasswd". Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] public mailbox not showing up in web client
by David Mehler 26 Oct '12

26 Oct '12

Hello, I'm trying to set up a public mailbox where users can receive notifications out of. I'm not getting any errors from Dovecot 2.1, but nothing is showing up in my user's web clients. In each /home/vmail/public/mailbox folder right now I just have one called testbox I have a dovecot-acl file with: user=testuser1 lr user=user1 lr etc. I'd appreciate any suggestions. Thanks. Dave. # 2.1.10: /etc/dovecot/dovecot.conf # OS: Linux dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_gid = 5000 first_valid_uid = 5000 hostname = xxx last_valid_gid = 5000 last_valid_uid = 5000 log_path = /var/log/dovecot.error mail_gid = vmail mail_home = /home/vmail/%d/%n/home mail_location = maildir:/home/vmail/%d/%n:LAYOUT=fs mail_plugins = " acl quota zlib" mail_uid = vmail maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = yes location = maildir:/home/vmail/public:LAYOUT=fs prefix = Public/ separator = / subscriptions = yes type = public } namespace inbox { hidden = no inbox = yes list = yes location = prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile autocreate = Spam autosubscribe = Spam quota = dict:User quota::proxy::quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } postmaster_address = postmaster@xxx protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { inet_listener imap { address = 127.0.0.1 ::1 } inet_listener imaps { address = xxx xxx ssl = yes } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = vmail } ssl_cert = </etc/ssl/certs/server.crt ssl_key = </etc/ssl/private/server.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " acl quota zlib" } protocol imap { mail_plugins = " acl quota zlib autocreate imap_acl imap_quota imap_zlib" }

1 0

[Dovecot] dovecot-lda delivery to Maildir/cur as 'seen'?
by Dale Gallagher 26 Oct '12

26 Oct '12

Hi I've added a server-side feature where authenticated customers sending through our SMTP server have their outbound mail copied to their Sent folder (like Gmail does). The delivery script called by qmail calls dovecot-lda to deliver it to the user's Sent folder. The problem now, is that the Sent folder shows the mail as unread, which MUAs flag (and notify, in the case of some). I've searched the docs and mailing list, but can't find an option to tell dovecot-lda to mark the mail being delivered, as seen/read. If I've missed something, please let me know. If not, then I think it might be a good idea to add a feature to dovecot-lda permitting one to specify delivery to the ./cur subfolder of a Maildir, instead of ./new. Thanks

2 1

[Dovecot] Shared folders not shown if "INBOX.shared.%.%" is used with dovecot 2.1.10
by Christoph Bußenius 26 Oct '12

26 Oct '12

Hi, Thunderbird uses the following IMAP command to list shared folders: . list "" INBOX.shared.%.% Dovecot 2.1.10 does not list any folders in response to this command. Dovecot 2.0.21 does list them: * LIST (\HasNoChildren) "." "INBOX.shared.user1.folder" . OK List completed. Both versions list the folders if "*" is used instead of "INBOX.shared.%.%". Because of this issue, shared folders are not shown in Thunderbird. The ACL of the folder in question is ACL "keilrwtscd" for user1 (who is trying to access them using Thunderbird). config: # 2.1.10: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-42-server x86_64 Ubuntu 10.04.4 LTS disable_plaintext_auth = no mail_gid = vmail mail_location = mdbox:~/mail mail_plugins = acl mail_uid = vmail namespace { inbox = no list = children location = mdbox:%%h/mail prefix = INBOX.shared.%%u. separator = . subscriptions = no type = shared } namespace default { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = scheme=CRYPT username_format=%u /usr/local/dovecot/etc/dovecot/users driver = passwd-file } plugin { acl = vfile acl_shared_dict = file:/mail/shared-mailboxes } protocols = imap pop3 service auth { unix_listener auth-userdb { group = vmail mode = 0660 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/local/dovecot/etc/dovecot/users driver = passwd-file } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 20 mail_plugins = acl imap_acl acl } Cheers, Christoph -- Christoph Bußenius Rechnerbetriebsgruppe der Fakultäten Informatik und Mathematik Technische Universität München +49 89-289-18519 <> Raum 00.05.040 <> Boltzmannstr. 3 <> Garching

2 3

[Dovecot] Small issue with "submission host"
by Raphael Ordinas 26 Oct '12

26 Oct '12

Hi everyone, I'm facing a small issue with the lda/lmtp "submission_host" feature in dovecot 2.0.14. When sending mail to MTA (in case of sieve filter forwarding for example), dovecot pass a RCPT TO command just after the EHLO. He's missing the MAIL FROM command. Therefore, my MTA show me a warning like this : "improper command pipelining after EHLO". How can i solve that ? Regards, Raphael

2 5