January 2013 - dovecot

[Dovecot] help with public namespace/mailbox
by michael＠los-pollos.co 30 Jan '13

30 Jan '13

Dear all, I am hoping someone can help me with a problem that I have been trying to fix for days. Using postfix and dovecot 2.0.19 on Ubuntu 12.04 with LDAP authentication and virtual users and domains. Basically I want to setup both shared and public mailboxes. The shared part is working fine, ie I can share folders successfully and other uses can see them. However when I try and create sub folders in the public folder they don't show up in the client. I have tried creating them in manually in the filesystem ie mkdir .folder and also via thunderbird. I have read through the dovecot wiki's several times over and still cannot see why it won't work. I have debug turned on and these are the log messages I get in syslog when I start up thunderbird: acl: No lookup right to mailbox: public/folder acl vfile: file /home/example.com/public/.folder/dovecot-acl not found acl vfile: file /home/example.com/public/dovecot-acl not found So I create the dovecot-acl file manually in public and set the right file system permissions and the errors go away, yet the folder still doesn't get created despite the following getting logged in syslog. Jan 29 23:43:57 alpha dovecot: imap(testuser(a)example.com): Debug: Namespace public/: /home/example.com/public/.folder2 doesn't exist yet, using default permissions Jan 29 23:43:57 alpha dovecot: imap(testuser(a)example.com): Debug: Namespace public/: Using permissions from /home/example.com/public: mode=0777 gid=-1 Right now I am thinking the problem might be that I am trying to setup both shared and public namespaces within the same configuration and therefore dovecot is looking for acl's for the public when it shouldn't be? Feel like I am stabbing in the dark with this though. Any help anyone can offer will be greatly appreciated! Thanks in advance. Regards, Michael. Here is my dovecot.conf # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab072.10 i686 Ubuntu 12.04.1 LTS auth_debug_passwords = yes auth_socket_path = /var/run/dovecot/auth-master auth_verbose = yes disable_plaintext_auth = no lda_mailbox_autocreate = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_plugins = quota acl mail_privileged_group = mail mail_uid = vmail namespace { inbox = yes location = prefix = separator = / type = private } namespace { hidden = no inbox = no list = yes location = maildir:/home/%%d/%%n/Maildir:INDEX=/home/%d/%n/Maildir/Shared/%%n prefix = Shared/%%n/ separator = / subscriptions = no type = shared } namespace { hidden = no list = yes location = maildir:/home/%d/public prefix = public/ separator = / subscriptions = no type = public } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } passdb { driver = pam } plugin { acl = vfile acl_anyone = allow acl_shared_dict = file:/home/%d/shared-mailboxes.db quota = maildir quota_rule = *:storage=25GB quota_rule2 = Trash:storage=+10%% quota_warning = storage=95%% /usr/local/bin/quota-warning.sh 95 } postmaster_address = postmaster(a)example.com protocols = imap pop3 quota_full_tempfail = yes sendmail_path = /usr/lib/sendmail service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0600 user = vmail } user = root } service imap-login { chroot = login executable = /usr/lib/dovecot/imap-login inet_listener imap { address = * port = 143 } inet_listener imaps { address = * port = 993 ssl = yes } user = dovecot } service imap { executable = /usr/lib/dovecot/imap } service pop3-login { chroot = login inet_listener pop3 { address = * port = 110 } inet_listener pop3s { address = * port = 995 ssl = yes } user = dovecot } ssl_cert = </etc/ssl/certs/alpha.example.com.crt ssl_key = </etc/ssl/private/alpha.example.com.key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { driver = passwd } protocol imap { mail_plugins = quota imap_quota acl imap_acl } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = quota postmaster_address = postmaster(a)example.com sendmail_path = /usr/lib/sendmail }

3 2

[Dovecot] Duplicate supression mechanism
by 3.listas＠adminlinux.com.br 30 Jan '13

30 Jan '13

Hello, In a Dovecot 2.0.6 server I have an account x@domain and an alias y@domain -> x@domain. When I send an email to x@domain with carbon copy to y@domain, X receives two messages on mailbox. Dovecot2 has any feature of duplicate suppression ? Thanks -- Thiago Henrique adminlinux.com.br

5 7

[Dovecot] dovecot.index is missing
by Alexandr Sabitov 30 Jan '13

30 Jan '13

Dear All, I have noticed that dovecot.index is not generated straight away if you have just a few emails in the mailbox. Instead of that dovecot.index.log is modified and accessed by clients. Only if the number of email reaches some level then it creates dovecot.index in user mailboxes. Can somebody please tell me when (in my understanding of the process) the index log file drops all data into the mail index file. What does trigger that ? Sorry I couldn't find any info on that in the wiki. Best Regards, Alexandr Sabitov

3 3

[Dovecot] doveadm migration: Warning: I/O leak
by Gedalya 29 Jan '13

29 Jan '13

This seems to be happening only when using the pop3c plugin. Any advice? root@imap01:/etc/dovecot# doveadm -D -o imapc_user=chat_logs(a)xxxxxx.com -o 'imapc_password=*******' -o pop3c_user=chat_logs(a)xxxxxx.com -o 'pop3c_password=*****' backup -u chat_logs(a)xxxxxx.com -R imapc: doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_expire_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_listescape_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually intentional, so just ignore this message) doveadm(chat_logs(a)xxxxxx.com): Debug: Added userdb setting: mail=maildir:/stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir doveadm(chat_logs(a)xxxxxx.com): Debug: Added userdb setting: plugin/quota_rule=*:storage=5120M doveadm(chat_logs(a)xxxxxx.com): Debug: Effective uid=1001, gid=1001, home=/stor/real/domains/xxxxxx.com/ch/chat_logs doveadm(chat_logs(a)xxxxxx.com): Debug: Home dir not found: /stor/real/domains/xxxxxx.com/ch/chat_logs doveadm(chat_logs(a)xxxxxx.com): Debug: Namespace : type=private, prefix=POP3-MIGRATION-NS/, sep=, inbox=no, hidden=yes, list=no, subscriptions=yes location=pop3c: doveadm(chat_logs(a)xxxxxx.com): Debug: fs: root=, index=, control=, inbox=, alt= doveadm(chat_logs(a)xxxxxx.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir doveadm(chat_logs(a)xxxxxx.com): Debug: maildir++: root=/stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir, index=, control=, inbox=/stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir, alt= doveadm(chat_logs(a)xxxxxx.com): Debug: Namespace : /stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir doesn't exist yet, using default permissions doveadm(chat_logs(a)xxxxxx.com): Debug: Namespace : Using permissions from /stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir: mode=0700 gid=-1 dsync(chat_logs(a)xxxxxx.com): Debug: Effective uid=1001, gid=1001, home=/stor/real/domains/xxxxxx.com/ch/chat_logs dsync(chat_logs(a)xxxxxx.com): Debug: Namespace : type=private, prefix=POP3-MIGRATION-NS/, sep=, inbox=no, hidden=yes, list=no, subscriptions=yes location=pop3c: dsync(chat_logs(a)xxxxxx.com): Debug: fs: root=, index=, control=, inbox=, alt= dsync(chat_logs(a)xxxxxx.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc: dsync(chat_logs(a)xxxxxx.com): Debug: imapc: root=, index=, control=, inbox=, alt= dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Looking up IP address dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Connecting to 111.111.111.111:143 dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Server capabilities: IMAP4rev1 NAMESPACE LITERAL+ UIDPLUS IDLE COMPARATOR AUTH=LOGIN AUTH=NTLM AUTH=SCRAM-MD5 AUTH=CRAM-MD5 dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Authenticating as chat_logs(a)xxxxxx.com dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Authenticated successfully dsync(chat_logs(a)xxxxxx.com): Debug: Namespace : /stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir/.Sent Items doesn't exist yet, using default permissions dsync(chat_logs(a)xxxxxx.com): Debug: Namespace : Using permissions from /stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir: mode=0700 gid=-1 dsync(chat_logs(a)xxxxxx.com): Info: Sent Items: only in source (guid=34b8141947b9372e94589bd35a54dac5) dsync(chat_logs(a)xxxxxx.com): Info: INBOX: only in source (guid=c92f64f79f0d1ed01e6d5b314f04886c) dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Looking up IP address dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Connecting to 111.111.111.111:143 dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Server capabilities: IMAP4rev1 NAMESPACE LITERAL+ UIDPLUS IDLE COMPARATOR AUTH=LOGIN AUTH=NTLM AUTH=SCRAM-MD5 AUTH=CRAM-MD5 dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Authenticating as chat_logs(a)xxxxxx.com dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Authenticated successfully dsync(chat_logs(a)xxxxxx.com): Debug: pop3c(111.111.111.111): Looking up IP address dsync(chat_logs(a)xxxxxx.com): Debug: pop3c(111.111.111.111): Connecting to 111.111.111.111:110 dsync(chat_logs(a)xxxxxx.com): Debug: pop3c(111.111.111.111): Authenticating as chat_logs(a)xxxxxx.com dsync(chat_logs(a)xxxxxx.com): Warning: I/O leak: 0xb769a340 (line 1229, fd 14) dsync(chat_logs(a)xxxxxx.com): Warning: I/O leak: 0xb769a340 (line 1229, fd 10) dsync(chat_logs(a)xxxxxx.com): Warning: Timeout leak: 0xb769a5a0 (line 1316) dsync(chat_logs(a)xxxxxx.com): Warning: Timeout leak: 0xb769a5a0 (line 1316)

1 2

[Dovecot] password schemes in dovecot
by Public 28 Jan '13

28 Jan '13

Hey there, I'm using the latest dovecot 2.1.13 In the wiki http://wiki2.dovecot.org/Authentication/PasswordSchemes BLF-CRYPT is listed, but i can't use it. "doveadm pw -l" doesn't show it. And i'm unsure about how I am supposed to use the different SHA schemes, since they always output different hashes for the same password. MD5 is working fine, but I'd rather not use it. Is the wiki outdated or how do i get BLF-CRYPT working? thanks, simon

3 3

[Dovecot] From Sendmail to Dovecot mdbox, what is missing.
by Torpey List 27 Jan '13

27 Jan '13

Sendmail 8.14.4 dovecot 2.0.9 I have sendmail working and it is sending mail to /var/mail/%u. I have dovecot working in that I can move emails into IMAP folders and I can send email through IMAP. I have set up dovecot to use mdbox based on the following: mail_location = mdbox:~/mail However, I seem to be lacking a key piece of information. Sendmail is sending the mail to /var/mail/%u as a mbox (single file for all emails) format. Dovecot wants to read the mail in mdbox (Multiple messages per file, but unlike mbox multiple files per mailbox.) So the two programs are not working together. So, I cannot get dovecot to read new emails at /var/mail/%u. So I tried changing to the following: mail_location = mdbox:~/mail:INBOX=/var/mail/%u However, dovecot complains that it is NOT a directory. That is because sendmail is sending as mbox format. I have tried two lines of “mail_location” but that did not work. example mail_location = mdbox:~/mail ----> for dovecot mail_location = mbox:INBOX=/var/mail/%u -----> for sendmail I have tried LMTP and dovecot-lda. LMTP – I could not see any difference with this added or not. Dovecot-lda – I have had issues getting it configured. Thanks for any help! Sendmail changes FEATURE(`local_procmail', `/usr/libexec/dovecot/dovecot-lda',`/usr/libexec/dovecot/dovecot-lda -d $u') MODIFY_MAILER_FLAGS(`LOCAL', `-f') MAILER(procmail)dnl Here is dovecot configuration [root@nala mail]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.14.1.el6.x86_64 x86_64 Scientific Linux release 6.3 (Carbon) auth_mechanisms = plain login mail_gid = mail mail_location = mdbox:~/mail mail_uid = mail mbox_write_locks = fcntl passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_group_events = yes } service auth { unix_listener auth-userdb { mode = 0600 user = mail } } service lmtp { inet_listener lmtp { address = 192.168.1.185 127.0.0.1 ::1 port = 24 } user = mail } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol lda { info_log_path = /var/log/maillog log_path = /var/log/maillog postmaster_address = postmaster(a)torpey.org }

5 11

[Dovecot] mbox INBOX out of sync (?)
by Tinguaro Barreno Delgado 26 Jan '13

26 Jan '13

Hello all, I've running a Dovecot's installation for several years without problems but since last system upgrade (Dec 26) I'm facing a kind of sync issue with the /var/mail/ inbox files. We have got mobile and desktops IMAP clients (mostly Mozilla Thunderbird). The problem is that /var/mail/ files (mbox) aren't updated: we can delete mail from clients but they persist in de /var/mail, so the same user can see the mail again from other IMAP client. Logs seems to be correct. Many thanks in advance. Best wishes, Tinguaro Barreno -- logs -- Jan 11 21:58:19 master: Info: Dovecot v2.1.7 starting up (core dumps disabled) Jan 11 21:58:33 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Jan 11 21:58:33 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Jan 11 21:58:33 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Jan 11 21:58:33 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_sqlite.so Jan 11 21:58:33 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Jan 11 21:58:33 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Jan 11 21:58:33 auth: Debug: auth client connected (pid=8658) Jan 11 21:58:33 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=1oL4jgnTGgDAqAwf lip=192.168.12.2 rip=192.168.12.31 lport=10103 rport=46874 resp=<hidden> Jan 11 21:58:33 auth: Debug: client out: OK 1 user=tbarreno Jan 11 21:58:33 auth: Debug: master in: REQUEST 3219783681 8658 1 38bcc0e7465cbb3aace197fa29f9319e Jan 11 21:58:33 auth: Debug: ldap(tbarreno,192.168.12.31,<1oL4jgnTGgDAqAwf>): user search: base=dc=alameda,dc=inet scope=subtree filter=(&(objectClass=usuarioLocal)(username=tbarreno)) fields=homeDirectory,uidNumber,gidNumber Jan 11 21:58:33 auth: Debug: ldap(tbarreno,192.168.12.31,<1oL4jgnTGgDAqAwf>): result: uidNumber=1004 gidNumber=1004 homeDirectory=/home/tbarreno Jan 11 21:58:33 auth: Debug: master out: USER 3219783681 tbarreno home=/home/tbarreno uid=1004 gid=1004 Jan 11 21:58:33 imap-login: Info: Login: user=<tbarreno>, method=PLAIN, rip=192.168.12.31, lip=192.168.12.2, mpid=8661, TLS Jan 11 21:58:33 imap(tbarreno): Debug: Effective uid=1004, gid=1004, home=/home/tbarreno Jan 11 21:58:33 imap(tbarreno): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=no, hidden=no, list=yes, subscriptions=yes location=mbox:~/Mail:INBOX=/var/mail/tbarreno Jan 11 21:58:33 imap(tbarreno): Debug: fs: root=/home/tbarreno/Mail, index=, control=, inbox=/var/mail/tbarreno, alt= Jan 11 21:58:42 auth: Debug: auth client connected (pid=8663) Jan 11 21:58:42 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=EWyAjwnTGwDAqAwf lip=192.168.12.2 rip=192.168.12.31 lport=10103 rport=46875 resp=<hidden> Jan 11 21:58:42 auth: Debug: client out: OK 1 user=tbarreno Jan 11 21:58:42 auth: Debug: master in: REQUEST 1092354049 8663 1 13780b9ee679fecc08e3abdcd334049f Jan 11 21:58:42 auth: Debug: ldap(tbarreno,192.168.12.31,<EWyAjwnTGwDAqAwf>): user search: base=dc=alameda,dc=inet scope=subtree filter=(&(objectClass=usuarioLocal)(username=tbarreno)) fields=homeDirectory,uidNumber,gidNumber Jan 11 21:58:42 auth: Debug: ldap(tbarreno,192.168.12.31,<EWyAjwnTGwDAqAwf>): result: uidNumber=1004 gidNumber=1004 homeDirectory=/home/tbarreno Jan 11 21:58:42 auth: Debug: master out: USER 1092354049 tbarreno home=/home/tbarreno uid=1004 gid=1004 Jan 11 21:58:42 imap-login: Info: Login: user=<tbarreno>, method=PLAIN, rip=192.168.12.31, lip=192.168.12.2, mpid=8664, TLS Jan 11 21:58:42 imap(tbarreno): Debug: Effective uid=1004, gid=1004, home=/home/tbarreno Jan 11 21:58:42 imap(tbarreno): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=no, hidden=no, list=yes, subscriptions=yes location=mbox:~/Mail:INBOX=/var/mail/tbarreno Jan 11 21:58:42 imap(tbarreno): Debug: fs: root=/home/tbarreno/Mail, index=, control=, inbox=/var/mail/tbarreno, alt= ---- ---- # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-3-amd64 x86_64 Debian 7.0 auth_debug = yes auth_verbose = yes debug_log_path = /tmp/dovecot.log info_log_path = /tmp/dovecot.log login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_debug = yes mail_location = mbox:~/Mail:INBOX=/var/mail/%u namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imapz { port = 10103 } } ssl_ca = </etc/local/certs/CA-Alameda_cert.pem ssl_cert = </etc/local/certs/alameda.homeip.net_cert.pem ssl_key = </etc/local/certs/alameda.homeip.net_key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_ssl = yes ---------- -- Tinguaro Barreno Delgado <tbarreno(a)alameda.homeip.net>

2 4

[Dovecot] (no subject)
by Lauryca Puyulik 26 Jan '13

26 Jan '13

http://www.das-gute-weine-haus.de/tmp/wtlss.html Lauryca Puyulik

1 0

[Dovecot] Dovecot unable to access the shadow file
by kenwood 25 Jan '13

25 Jan '13

I am installing Dovecot-2.1.13 on Slackware 13.37.0 for the first time to replace ipop3d and I have overcome all of the roadblocks as they have developed except this last one and I finally have to say “uncle”. The error messages that are showing up in the dovecot.log are as follows. Jan 24 12:27:27 tux2 dovecot: auth: Error: passwd-file /etc/shadow: open(/etc/shadow) failed: Permission denied (euid=202(dovecot) egid=202(dovecot) missing +r perm: /etc/shadow, we're not in group 43(shadow), dir owned by 0:0 mode=0755) Jan 24 12:27:27 tux2 dovecot: auth: passwd-file(user,192.168.10.2,<pw3xHwzUSQDAqAoC>): no passwd file: /etc/shadow Jan 24 12:27:29 tux2 dovecot: pop3-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [192.168.10.2] Jan 24 12:27:29 tux2 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<user>, method=PLAIN, rip=192.168.10.2, lip=192.168.10.100, TLS: Disconnected, session=<pw3xHwzUSQDAqAoC> Based on what I have read the only user that should access the shadow file is root. With that in mind I looked at all the configuration and .ext files and the only file I could find that would indicate that root should be checking the shadow file is 10-master.conf. In that file it said the default service auth-worker was root but since it was apparently not working I removed the hash mark and made it explicit. It still didn’t work. As a last resort even though it was not good practice I tried adding user dovecot to the group shadow but that did not work either. It still says dovecot is not in the group shadow even though it is. Any suggestions? -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecot-unable-to-access-the-shadow-fi… Sent from the Dovecot mailing list archive at Nabble.com.

4 5

[Dovecot] dovecot 2.1.13, proxy and nologin extras field
by Marco Giunta 24 Jan '13

24 Jan '13

Hi at all, in our test environment, I'm playing with dovecot 2.1.13 configured as imap/pop/managesieve proxy. It is configured to authenticate users with ldap and it works very well. Now, I'd like to temporary disable some users's login, because we are moving to another storage, and I wouldn't stop imap service at all. I've found on Dovecot wiki that I could use 'nologin' extra field, but I wasn't been able to get it work. My dovecot configuration is: # 2.1.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.19.1.el6.x86_64 x86_64 ... auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no listen = * mail_debug = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = prefetch } and my 'dovecot-ldap.conf.ext' is: uris = ldap://ldap.example.it/ dn = "cn=Reader,dc=example,dc=it" dnpass = password base = ou=People,dc=example,dc=it pass_attrs = uid=user,userPassword=password,\ =userdb_home=/var/spool/mail/%1u/%u,uidNumber=userdb_uid,gidNumber=userdb_gid,\ =proxy=y,=host=imap.example.it,\ =nologin=y pass_filter = (&(objectClass=qmailUser)(uid=%u)(accountStatus=active)) With this configuration, all users can login, and log said: Jan 23 09:16:18 localhost dovecot: master: Dovecot v2.1.13 starting up (core dumps disabled) Jan 23 09:16:33 localhost dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jan 23 09:16:33 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jan 23 09:16:33 localhost dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jan 23 09:16:33 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jan 23 09:16:33 localhost dovecot: auth: Debug: auth client connected (pid=3660) Jan 23 09:16:33 localhost dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011session=PsbzT/DT+gCTeiwf#011lip=192.168.129.109#011rip=192.168.44.31#011lport=143#011rport=53754 Jan 23 09:16:33 localhost dovecot: auth: Debug: client passdb out: CONT#0111#011 Jan 23 09:16:33 localhost dovecot: auth: Debug: client in: CONT#0111#011AHByb3ZhZm0AY2hlcGFsbGU= Jan 23 09:16:33 localhost dovecot: auth: Debug: ldap(prova,147.122.44.31,<PsbzT/DT+gCTeiwf>): pass search: base=ou=People,dc=example,dc=it scope=subtree filter=(&(objectClass=qmailUser)(uid=prova)(accountStatus=active)) fields=uid,userPassword,uidNumber,gidNumber,uid,uid Jan 23 09:16:33 localhost dovecot: auth: Debug: ldap(prova,192.168.44.31,<PsbzT/DT+gCTeiwf>): result: uid=prova uidNumber=2944 gidNumber=650 userPassword={MD5}BjbsTtSovVAs1csswBTI7Q== Jan 23 09:16:33 localhost dovecot: auth: Debug: client passdb out: OK#0111#011user=prova#011proxy#011host=imap.example.it#011nologin#011hostip=192.168.11.136#011pass=password Jan 23 09:16:33 localhost dovecot: imap-login: proxy(prova): started proxying to imap.example.it:143: user=<prova>, method=PLAIN, rip=192.168.44.31, lip=192.168.129.109, session=<PsbzT/DT+gCTeiwf> As you can see 'nologin' field is present in 'passdb' answer, but it doesn't seem to work. If instead I try to disable login with 'allow_nets' extra field, it works as expected: 'dovecot-ldap.conf.ext': ... pass_attrs = uid=user,userPassword=password,\ =userdb_home=/var/spool/mail/%1u/%u,uidNumber=userdb_uid,gidNumber=userdb_gid,\ =proxy=y,=host=imap.example.it,\ =allow_nets=127.0.0.0/8 dovecot log: Jan 22 18:28:19 localhost dovecot: master: Dovecot v2.1.13 starting up (core dumps disabled) Jan 22 18:28:32 localhost dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jan 22 18:28:32 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Jan 22 18:28:32 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Jan 22 18:28:32 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jan 22 18:28:32 localhost dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jan 22 18:28:32 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jan 22 18:28:32 localhost dovecot: auth: Debug: auth client connected (pid=3178) Jan 22 18:28:32 localhost dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011lip=192.168.129.109#011rip=192.168.44.31# 011lport=143#011rport=53218 Jan 22 18:28:32 localhost dovecot: auth: Debug: client out: CONT#0111#011 Jan 22 18:28:32 localhost dovecot: auth: Debug: client in: CONT#0111#011AHByb3ZhZm0AY2hlcGFsbGU= Jan 22 18:28:32 localhost dovecot: auth: Debug: ldap(prova,192.168.44.31): pass search: base=ou=People,dc=example,dc=it scope=subtree filt er=(&(objectClass=qmailUser)(uid=prova)(accountStatus=active)) fields=uid,userPassword,uidNumber,gidNumber Jan 22 18:28:32 localhost dovecot: auth: Debug: auth(prova,192.168.44.31): allow_nets: Matching for network 127.0.0.0/8 Jan 22 18:28:32 localhost dovecot: auth: passdb(prova,192.168.44.31): allow_nets check failed: IP not in allowed networks Jan 22 18:28:32 localhost dovecot: auth: Debug: ldap(prova,192.168.44.31): result: uid=prova uidNumber=2944 gidNumber=650 userPassword={MD5}BjbsTtSovGGs1csswBTI7Q== Jan 22 18:28:34 localhost dovecot: auth: Debug: client out: FAIL#0111#011user=prova I don't understand what is wrong with my configuration with 'nologin'. Do someone have any clue ?? Cheers, Marco

3 4