January 2013 - dovecot

[Dovecot] imap: Error: net_connect_unix(/.../auth-master) failed: Invalid argument
by Joan Picanyol i Puig 08 Jan '13

08 Jan '13

Hi, I'm unable to get past the subject error trying to setup dovecot 2.1.10 on FreeBSD 6.4: right after login the server closes the connection (testing with telnet) I've tried manualy chown()ing auth-master to 666, so permission issues should be ruled out. I'm attaching logs, config and excerpt of ktrace -id. I've built a version with debug symbols, but I don't seem to hit a breakpoint in net_connect_unix on lib/network.c What can I look at? tks -- pica

2 3

[Dovecot] Access to deleted mails in mdbox storage
by Wolfgang.Friebel＠desy.de 08 Jan '13

08 Jan '13

Hi Timo, we are currently running dovecot 2.1.10 using mdbox storage. Sometimes we get requests from users to restore accidentally deleted mails. If the mails got deleted before a backup was made, such mails could of course not be restored from backup. One option to help users in this respect would be to use the lazy expunge plugin. On the other hand I have seen, that the deleted mails stay intact in the mdbox storage until a doveadm purge has been performed. Therefore without using the plugin it is in principle possible to get access to any deleted mails. As in our case the expunge runs once a week while the backup is done daily we can basically recover all mails ever received. My question: doveadm has currently no command similar to doveadm search or fetch to get to deleted mails. Would it be useful to have such a command? As a proof of concept I wrote a little script to mimic the doveadm fetch as closely as possible given the limited amount of information in the mdbox/storage/m.* files and could indeed get access to deleted mails. Do you regard such a procedure (within doveadm) useful or would you recommend nevertheless using the lazy expunge plugin? I am aware of the fact that this is a solution for mdbox storage only. -- Wolfgang Friebel Deutsches Elektronen-Synchrotron DESY Phone/Fax: +49 33762 77372/216 Platanenallee 6 Mail: Wolfgang.Friebel AT desy.de D-15738 Zeuthen Germany

2 1

[Dovecot] 2 node dovecot
by Lazy 08 Jan '13

08 Jan '13

Hi, We run dovecot 2.1 on 2 nodes with shared nfs storage. Index files are kept on local disk. Second node is usually used only for email snapshots access. If primary node fails it is configured to take place of the primary imap server. Snapshots are additional namespaces with mail from various points in time. We need a way to easly copy multiple messages from snapshots to current mailboxes. It would be best to make current mailbox available as another namespace so one would simply copy messages from one folder to another. Is it safe ? There will be times when given user is writing to the same nfs based Maildir mailbox from 2 nodes both of them having separate index files. What will happen if already present message gets copied back from the snapshot ? Regards, Michał Grzędzicki

2 2

[Dovecot] lda crash?
by kjonca＠o2.pl 08 Jan '13

08 Jan '13

When I try to refilter some messages lda crash: Dec 29 16:07:34 LDA(kjonca): Info: sieve: msgid=<003a01bf6d8f$c9d69f20$9c2dcdc3(a)tiger.com.pl>: stored mail into mailbox 'scott/Sent' Dec 29 16:08:02 lda: Debug: Loading modules from directory: /usr/lib/dovecot/modules Dec 29 16:08:02 lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_sieve_plugin.so Dec 29 16:08:02 LDA(kjonca): Debug: Effective uid=1000, gid=1000, home=/home/kjonca Dec 29 16:08:02 LDA(kjonca): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Mail/0:LAYOUT=fs:INBOX=~/Mail/0/INBOX Dec 29 16:08:02 LDA(kjonca): Debug: fs: root=/home/kjonca/Mail/0, index=, control=, inbox=/home/kjonca/Mail/0/INBOX, alt= Dec 29 16:08:02 LDA(kjonca): Debug: userdb lookup skipped, username taken from USER environment Dec 29 16:08:02 LDA(kjonca): Debug: none: root=, index=, control=, inbox=, alt= Dec 29 16:08:02 LDA(kjonca): Debug: Destination address: kjonca(a)alfa.kjonca (source: user@hostname) Dec 29 16:08:02 LDA(kjonca): Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. Dec 29 16:08:02 LDA(kjonca): Debug: sieve: Pigeonhole Sieve Extprograms plugin version 0.1.0 loaded Dec 29 16:08:02 LDA(kjonca): Debug: sieve: using the following location for user's Sieve script: /home/kjonca/.dovecot.sieve Dec 29 16:08:02 LDA(kjonca): Debug: sieve: opening script /home/kjonca/.dovecot.sieve Dec 29 16:08:02 LDA(kjonca): Debug: sieve: script binary /home/kjonca/.dovecot.svbin successfully loaded Dec 29 16:08:02 LDA(kjonca): Debug: sieve: binary save: not saving binary /home/kjonca/.dovecot.svbin, because it is already stored Dec 29 16:08:02 LDA(kjonca): Debug: sieve: executing script from /home/kjonca/.dovecot.svbin Dec 29 16:08:02 LDA(kjonca): Info: sieve: msgid=<001b01bf7227$18649840$9c2dcdc3(a)tiger.com.pl>: stored mail into mailbox 'scott/Sent' doveconf -n output KJ -- http://sporothrix.wordpress.com/2011/01/16/usa-sie-krztusza-kto-nastepny/ Little known fact about Middle Earth: The Hobbits had a very sophisticated computer network! It was a Tolkien Ring...

3 6

[Dovecot] Director and forwarding LDAP user as Master user
by Alexandr Sabitov 08 Jan '13

08 Jan '13

Hello guys, Would you be able to help me with this little issue. I bet someone has the same config so if you can copy-paste it I will very appreciate it. So main idea is to enable Dovecot director to authenticate a LDAP user with plain or encrypted password and send the user to back-end Dovecot server after the authentication. According to Wiki it is only possible if we use the master user to communicate to the back-end server. On the back-end Dovecot server it is working fine, I can log in as normal user/user_password or as user*masteruser/master_password. The back-end config is: auth_master_user_separator = * passdb { driver = passwd-file args = /usr/local/dovecot/etc/dovecot/passwd.masterusers master = yes pass = yes } passdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } Now front-end: how to get director forward the user to the back-end after authentication on the director? With my director config the user stays on the director all the time: passdb { driver = static args = proxy=y master=masteruser pass=master_password destuser=%u*masteruser } passdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } The only way to forward the user is to setup nopassword=y in args of static passdb but in that case the user will be authenticated on the backend but not on the director... What do I missing ? Please help me Best Regards, Alexandr Sabitov

2 2

Re: [Dovecot] Problem setting up dovecot on Debian: "telnet: Unable to connect to remote host: Connection refused"
by Joseph Tam 08 Jan '13

08 Jan '13

Noel Butler writes: > I build from sources all key daemon software anyway, package maintainers > can only account for so many configurations. Its not so critical with > dovecot now since v2, because, regrettably, Timo removed a lot of fine > tune config options that allowed us to only build in what we wanted, > now, tuff, most the auth methods and stuff must be built even if we dont > want them. That hasn't been my experience, but maybe because the non-optional stuff are what I need. For example, my configure for v2.1.x summarizes Install prefix . : /opt/dovecot File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file checkpassword : -shadow -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword : -ldap -sql -vpopmail -nss SQL drivers .... : : -pgsql -mysql -sqlite Full text search : squat : -lucene -solr A few auth methods, which even if you don't use, is a nice fallback for exceptions or niche caches, no dbs, one mandatory text search method. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] BLF-CRYPT
by Kristof Bajnok 07 Jan '13

07 Jan '13

Hi, I get "Unknown scheme: BLF-CRYPT" messages if I try to use Blowfish-encrypted passwords, even though it is supposed to be supported. I'm on 2.1.7, Debian Squeeze backports. Do you have any information whether Blowfish is supported with Debian Squeeze crypt(), or is there any other knobs I can turn on to make this algorithm available? Thanks, Kristof

2 1

[Dovecot] Problem setting up dovecot on Debian: "telnet: Unable to connect to remote host: Connection refused"
by Chris Evans 07 Jan '13

07 Jan '13

I would like to get dovecot running on my laptop so I can transfer a lot of old Email from Thunderbird mailbox files to a hosted zimbra service. However I'm falling at the first hurdle. I'm running Debian squeeze i386 (kernel 2.6.32-5-686) and have installed dovecot-imapd and dovecot-common with synaptic and edited /etc/dovecot/dovecot.conf to make sure it has the right protocols and listen instructions. Here's dovecot -n root@delldeb:/etc/dovecot# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.6 log_timestamp: %Y-%m-%d %H:%M:%S listen: 143 993 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mbox_write_locks: fcntl dotlock auth default: passdb: driver: pam userdb: driver: passwd Here's ps: root@delldeb:/etc/dovecot# ps aux | grep dove root 10353 0.0 0.0 3944 792 ? Ss 15:32 0:00 /usr/sbin/dovecot -c /etc/dovecot/dovecot.conf root 10356 0.0 0.0 10008 2420 ? S 15:32 0:00 dovecot-auth root 10360 0.0 0.0 10008 2372 ? S 15:32 0:00 dovecot-auth -w dovecot 10361 0.0 0.0 5412 2024 ? S 15:32 0:00 imap-login dovecot 10362 0.0 0.0 5412 2024 ? S 15:32 0:00 imap-login dovecot 10363 0.0 0.0 5412 2028 ? S 15:32 0:00 imap-login root 10393 0.0 0.0 3304 772 pts/2 S+ 15:33 0:00 grep dove Here's netstat: root@delldeb:/etc/dovecot# netstat -tap | grep 143 tcp 0 0 0.0.0.143:imap2 *:* LISTEN 9178/dovecot tcp 0 0 0.0.0.143:imaps *:* LISTEN 9178/dovecot I can telnet into SMTP OK with telnet localhost 25 but telnet localhost 143 gets me the "Connection refused" message. I've changed auth_debug to "yes" and now /var/log/mail.info says: Jan 5 15:32:13 delldeb dovecot: Dovecot v1.2.15 starting up (core dumps disabled) Jan 5 15:32:14 delldeb dovecot: auth(default): new auth connection: pid=10361 Jan 5 15:32:14 delldeb dovecot: auth(default): new auth connection: pid=10362 Jan 5 15:32:14 delldeb dovecot: auth(default): new auth connection: pid=10363 That doesn't change after I try the telnet login again so I think that's just telling me that the dovecot daemon started and launched it's listeners (but I know I don't know how to read this so correction welcome). My reading of all of this is that the dovecot daemon is up and running, that it's listening correctly on 143 and 993 and that I have to do something else to get authorisation even to start the IMAP dialogue with the server. I would like to get it working and locked to SSL only but thought I should start with both unencrypted and encrypted. Can someone help me or point me to the bits of documentation or good web howto or the like that I've missed? TIA, Chris (long term Debian user but it's some years since I last ran my own mail server and I'm a total newby to imap and dovecot)

4 9

[Dovecot] v2.1.13 released
by Timo Sirainen 07 Jan '13

07 Jan '13

http://dovecot.org/releases/2.1/dovecot-2.1.13.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.13.tar.gz.sig - Some fixes to cache file changes in v2.1.11. - fts-solr: Overlong UTF8 sequences in mails were rejected by Solr and caused the mails to not be indexed. - virtual storage: Sorting mailbox by from/to/cc/bcc didn't work.

1 0

[Dovecot] wrong authentication for local delivery
by Averlon 06 Jan '13

06 Jan '13

Hi all there, I have a postfix/dovecot environment running with ldap authentication. I am able to deliver e-Mails to the internet and also receive them via fetchmail. I have a pure local domain (av.loc). Just for internal purpuse. For all mails where destination is a local mailbox, as for all of the local domain, delivery does not work. Here I can show some logs of such a process: +++ Here the process starts (I have sent an e-Mail to myself). Jan 6 17:31:06 f42252se dovecot: auth: Debug: auth client connected (pid=13250) Jan 6 17:31:06 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.110.150#011rip=192.168.110.165#011secured#011resp=<hidden> Jan 6 17:31:06 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=mail,userPassword *Jan 6 17:31:06 f42252se dovecot: auth: Debug: auth(avadmin,192.168.110.165): username changed avadmin -> avadmin(a)av.loc* Jan 6 17:31:06 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc,192.168.110.165): result: userPassword(password)=<hidden> mail(user)=avadmin(a)av.loc Jan 6 17:31:06 f42252se dovecot: auth: Debug: client out: OK#0111#011user=avadmin(a)av.loc#011mail=/home/vmail/avadmin/Maildir/ Jan 6 17:31:06 f42252se postfix/smtpd[13250]: 69FDB30007C: client=f42252ud.averlon.loc[192.168.110.165], sasl_method=PLAIN, sasl_username=avadmin(a)av.loc Jan 6 17:31:06 f42252se postfix/cleanup[13251]: 69FDB30007C: message-id=<50E9A6C8.1090805(a)av.loc> Jan 6 17:31:06 f42252se postfix/qmgr[11960]: 69FDB30007C: from=<avadmin(a)av.loc>, size=1224, nrcpt=1 (queue active) Jan 6 17:31:06 f42252se postfix/smtpd[13250]: disconnect from f42252ud.averlon.loc[192.168.110.165] Jan 6 17:31:09 f42252se postfix/pickup[11959]: 19A2E30007F: uid=5002 from=<avadmin(a)av.loc> Jan 6 17:31:09 f42252se postfix/cleanup[13251]: 19A2E30007F: message-id=<50E9A6C8.1090805(a)av.loc> Jan 6 17:31:09 f42252se postfix/qmgr[11960]: 19A2E30007F: from=<avadmin(a)av.loc>, size=1531, nrcpt=1 (queue active) Jan 6 17:31:09 f42252se postfix/pipe[13252]: 69FDB30007C: to=<avadmin(a)av.loc>, relay=spamassassin, delay=2.7, delays=0.01/0/0/2.7, dsn=2.0.0, status=sent (delivered via spamassassin service) Jan 6 17:31:09 f42252se postfix/qmgr[11960]: 69FDB30007C: removed Jan 6 17:31:09 f42252se dovecot: auth: Debug: master in: USER#0111#011avadmin(a)av.loc#011service=lda *Jan 6 17:31:09 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin(a)av.loc)) fields=mail,userPassword* Jan 6 17:31:09 f42252se dovecot: auth: ldap(avadmin(a)av.loc): unknown user Jan 6 17:31:09 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111 +++ I have configured my thunderbird to have a username to authenticate against ldap. In the first steps above the authentication of the sender works. But then, when delivering to the receiver, dovecot uses the e-Mail address of the receiver to check the password. I do not know why dovecot chechs the password of the receiver before delivery. I do neither know where to switch that off or set some changes in the configuration to avoid that process. Probably it is correct? But anyhow, the setup ldap-procedure just checks the username and no e-Mail address. Dovecot konfig: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login cram-md5 auth_username_format = %Lu auth_verbose = yes hostname = mail.av.loc mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = avdove userdb { args = uid=vmail gid=vmail home=/home/vmail/%n driver = static } protocol lda { sendmail_path = /usr/sbin/sendmail } +++ As always, I would appreciate some hints. Thanks in advance. -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

1 0