November 2013 - dovecot

[Dovecot] Checkpassword interface for custom password check and home mounting
by Jouko Nikula 25 Nov '13

25 Nov '13

Hi, I'm trying to use the checkpassword interface to do a password check and if the check succeeds I mount the user home directory (including mail) using the users login password and uid. Things work well if I do the mount manually, but when I add the home directory mounting to checkpassword things seem to stop. Dovecot logs the result of the password check, but doesn't send the result to client. Here's the log: Nov 25 10:32:05 jlaptop dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Nov 25 10:32:05 jlaptop dovecot: auth: Debug: auth client connected (pid=27551) Nov 25 10:32:05 jlaptop dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011session=8HsMAvjrvgB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=39614 Nov 25 10:32:05 jlaptop dovecot: auth: Debug: client out: CONT#0111#011 Nov 25 10:32:05 jlaptop dovecot: auth: Debug: client in: CONT<hidden> Nov 25 10:32:05 jlaptop dovecot: auth: Debug: checkpassword(jouko.nikula,127.0.0.1,<8HsMAvjrvgB/AAAB>): execute: /usr/sbin/gpgfusemount /usr/lib/dovecot/checkpassword-reply Nov 25 10:32:05 jlaptop dovecot: auth: Debug: checkpassword(jouko.nikula,127.0.0.1,<8HsMAvjrvgB/AAAB>): exit_status=0 My dovecot version is 2.1.7. My checkpassword is a setuid binary and the mount is a self made fuse-fs. Any ideas what happens? Are there better ways to do this? Thanks, - Jouko

1 0

[Dovecot] quota warning by script fails
by Jimmy Koerting 24 Nov '13

24 Nov '13

Hello! I looked around all online resources I found, but I'm not able to find my failure. So any help would be welcome! The problem arises with an dovecot 2.2.6 on a 9.2 FreeBSD RELEASE in a jailed environment. I have the following config settings regarding quota (which works in general, but just without calling the script): /etc/dovecot/conf.d/90-quota.conf: ... plugin { quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } service quota-warning { executable = script /usr/sbin/quota-warning.sh unix_listener quota-warning { mode = 0666 } } ... script: -rwxrwxrwx 1 root wheel 580 23 Nov 17:14 /usr/sbin/quota-warning.sh* socket: [root@testfbsd ~]# ll /var/run/dovecot/quota-warning srw-rw-rw- 1 root wheel 0 23 Nov 17:06 /var/run/dovecot/quota-warning= Calling the 'quota-warning.sh' script from the console works: Nov 23 17:00:42 testfbsd dovecot: lda(admin(a)testfbsd.XXXXXXXXX.net): msgid=<Ne509YyBcF4pRuYBSyaSfTuUquS9YW@testfbsd>: saved mail to INBOX But when I force dovecot to call it with sending to much mails to the server, the following log comes up (which show, that dovecot at least wants to call the script :"Debug: quota: Executing warning: quota-warning 95 admin@testfbxxxxxxxxxxxxnet" in my understanding): (no further errors or messages about non existing sockets or wrong perms etc. comes up) ==> /var/log/maillog <== Nov 23 18:19:15 testfbsd sm-mta[75486]: STARTTLS=server, relay= mail-wi0-f196.google.com [209.85.212.196], version=TLSv1/SSLv3, verify=NOT, cipher=RC4-SHA, bits=128/128 Nov 23 18:19:15 testfbsd sm-mta[75486]: rANHJEOP075486: from=< jtxxxxxxxx(a)gmail.com>, size=288072, class=0, nrcpts=1, msgid=<CAJeXgQBj7VvTqKGDTNE-PCXKf28X3fSQ3R=zp+L2cPEjVLN-7g(a)mail.gmail.com>, proto=ESMTP, daemon=MTA, relay=mail-wi0-f196.google.com [209.85.212.196] ==> /var/log/debug.log <== Nov 23 18:19:17 testfbsd dovecot: lda: Debug: Loading modules from directory: /usr/iports/lib/dovecot Nov 23 18:19:17 testfbsd dovecot: lda: Debug: Module loaded: /usr/iports/lib/dovecot/lib10_quota_plugin.so Nov 23 18:19:17 testfbsd dovecot: auth: Debug: master in: USER 1 admin@testfbxxxxxxxxxxxxnet service=lda Nov 23 18:19:17 testfbsd dovecot: auth: Debug: passwd-file(admin@testfbxxxxxxxxxxxxnet): lookup: user=admin@testfbxxxxxxxxxxxxnet file=/etc/mail/mailuser Nov 23 18:19:17 testfbsd dovecot: auth: Debug: userdb out: USER 1 admin@testfbxxxxxxxxxxxxnet uid=1000 gid=1000 home=/home/admin@testfbxxxxxxxxxxxxnet quota_rule=*:storage=2M Nov 23 18:19:17 testfbsd dovecot: lda: Debug: auth input: admin@testfbxxxxxxxxxxxxnet uid=1000 gid=1000 home=/home/admin@testfbxxxxxxxxxxxxnet quota_rule=*:storage=2M Nov 23 18:19:17 testfbsd dovecot: lda: Debug: Added userdb setting: plugin/quota_rule=*:storage=2M Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Effective uid=1000, gid=1000, home=/home/admin@testfbxxxxxxxxxxxxnet Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota root: name=User quota backend=maildir args= Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota rule: root=User quota mailbox=* bytes=2097152 messages=0 Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota rule: root=User quota mailbox=Trash bytes=+10485760 messages=0 Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota rule: root=User quota mailbox=Deleted Messages bytes=+10485760 messages=0 Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=1992294 (95%) messages=0 reverse=no command=quota-warning 95 admin@testfbxxxxxxxxxxxxnet Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=1677721 (80%) messages=0 reverse=no command=quota-warning 80 admin@testfbxxxxxxxxxxxxnet Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=1048576 (50%) messages=0 reverse=no command=quota-warning 50 admin@testfbxxxxxxxxxxxxnet Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota grace: root=User quota bytes=209715 (10%) Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/admin@testfbxxxxxxxxxxxxnet/mail Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: maildir++: root=/home/admin@testfbxxxxxxxxxxxxnet/mail, index=, indexpvt=, control=, inbox=/home/admin@testfbxxxxxxxxxxxxnet/mail, alt= Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota root: name=User quota backend=maildir args= Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=0 (95%) messages=0 reverse=no command=quota-warning 95 raw mail user Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=0 (80%) messages=0 reverse=no command=quota-warning 80 raw mail user Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=0 (50%) messages=0 reverse=no command=quota-warning 50 raw mail user Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota grace: root=User quota bytes=0 (10%) Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Destination address: admin@testfbxxxxxxxxxxxxnet (source: user@hostname) Nov 23 18:19:18 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Namespace : Using permissions from /home/admin@testfbxxxxxxxxxxxxnet/mail: mode=0700 gid=default Nov 23 18:19:18 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: quota: Executing warning: quota-warning 95 admin@testfbxxxxxxxxxxxxnet ==> /var/log/maillog <== Nov 23 18:19:18 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): msgid=<CAJeXgQBj7VvTqKGDTNE-PCXKf28X3fSQ3R=zp+L2cPEjVLN-7g(a)mail.gmail.com>: saved mail to INBOX Nov 23 18:19:18 testfbsd sm-mta[75487]: rANHJEOP075486: to=<admin@testfbxxxxxxxxxxxxnet>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=318436, dsn=2.0.0, stat=Sent So, please advice, what I miss here! Thanks a lot! Kind regards, jimmy

1 1

[Dovecot] dovecot patch: do scanf correctly
by Jann Horn 24 Nov '13

24 Nov '13

As far as I can tell, there are two places in which dovecot does not use scanf properly. This patch should fix that. -------------------------------------------------------------------------------- diff -r 8a3d0426f514 src/lib-dns/dns-lookup.c --- a/src/lib-dns/dns-lookup.c Sat Nov 23 23:22:09 2013 +0000 +++ b/src/lib-dns/dns-lookup.c Sun Nov 24 06:30:12 2013 +0100 @@ -102,7 +102,7 @@ } /* first line: <ret> <ip count> */ if (sscanf(line, "%d %u", &result->ret, - &result->ips_count) == 0) + &result->ips_count) != 2) return -1; if (result->ret != 0) { result->error = net_gethosterror(result->ret); diff -r 8a3d0426f514 src/lib-settings/settings.c --- a/src/lib-settings/settings.c Sat Nov 23 23:22:09 2013 +0000 +++ b/src/lib-settings/settings.c Sun Nov 24 06:30:12 2013 +0100 @@ -44,7 +44,7 @@ { int num; - if (!sscanf(value, "%i", &num) || num < 0) + if (sscanf(value, "%i", &num) != 1 || num < 0) return t_strconcat("Invalid number: ", value, NULL); *result = num; return NULL; -------------------------------------------------------------------------------- Specifically, both invocations disregard that sscanf("", "%d", &num) and similar make sscanf return EOF (-1 on my system) and the first invocation also does not account for the case that the second argument is not matched.

1 0

Re: [Dovecot] 2.2.9
by Rick Romero 23 Nov '13

23 Nov '13

Thanks for providing and maintaining a great piece of software. Rick

1 0

[Dovecot] Dict client unescaping sieve script
by Joshua Perry 22 Nov '13

22 Nov '13

I've created a dict service that listens on a unix socket and answers queries for sieve scripts (among other things). As I understand it (from the source code at http://hg.dovecot.org/dovecot-2.2/file/tip/src/lib-dict/dict-client.c) the dict client will unescape \001n, \001t, and \0011 to line feeds, tabs, and the \001 character respectively. In my service I am escaping those three characters in my response (if I don't escape them the line-oriented nature of the protocol causes a failure for multiline sieve scripts) but every time LDA attempts to process a sieve script I get an error in the logs (see below) showing sieve choking on \001 characters. Is there some configuration value I've missed or something? *dovecot log* Nov 8 23:04:54 www dovecot: lmtp(29940, josh(a)redacted.com) pxg7JxZufVL0dAAAPhZyyg: sieve: failed to compile script dict:proxy:/var/run/dovecot-auth.sock:sieve;name=main script (view user logfile /var/mail/vhosts/redacted.com/josh/.dovecot.sieve.log for more information) *.dovecot.sieve.log* sieve: info: started log at Nov 08 16:14:38. main script: line 1: error: unexpected character(s) starting with 0x01. main script: line 1: error: unexpected unknown characters found at (the presumed) end of file. main script: error: parse failed.

2 2

[Dovecot] dovecot + sieve redirect failed
by Tibor Korocz 22 Nov '13

22 Nov '13

Hi Guys, I have a strange problem and I couldn't find any solution, I hope somebody could help me. I'm using postfix+dovecot+sieve combination and I tried to set up redirect. .sieve: require ["fileinto", "regex", "date", "relational", "vacation"]; redirect "xxxx(a)gmail.com"; keep; But I get some error in the mail.log: sieve: msgid=<1562626302.336239.1385116787283>: failed to redirect message to <xxxxx(a)gmail.com> (refer to server log for more information) Nov 22 11:39:50 server dovecot: lda(xxx@xxxx): sieve: msgid=<1562626302.336239.1385116787283>: stored mail into mailbox 'INBOX' Nov 22 11:39:50 server dovecot: lda(xxx@xxxx): Error: sieve: execution of script /var/vmail/xxxx/.sieve failed, but implicit keep was successful (user logfile /var/vmail/xxxx/.sieve.log may reveal additional details) .sieve.log: error: msgid=<1562626302.336239.1385116787283>: failed to redirect message to <xxxx(a)gmail.com> (refer to server log for more information). I couldn't find any other details in the logs. Any idea what is the problem and what is the solution? Thanks, Tibi

2 1

[Dovecot] removing html via dovecot/sieve
by Bonz 22 Nov '13

22 Nov '13

is there a howto or similar for configuring dovecot as a user to strip mime. ideally i would like all html copies deleted, but graphics, etc dumped to ~/public_html and replaced with a url. i have a super crappy link so html, etc usually jams my spool. i can usually wget things however hence this desired approach. bonz.

2 1

[Dovecot] Personal Sieve Resieving Default Sieve?
by Jim McNamara 22 Nov '13

22 Nov '13

Hello all. In my dovecot install we have a default.sieve script which filters incoming mail based on the subdomain of our main domain. All it does is if the mail comes from A.domain.com move in to folder A in inbox, and if it comes from B.domain.com, move to folder B also in inbox. In my personal sieve script, I'd like to grab a particular email each day that the default.sieve saw coming from A.domain.com and moved it to folder A, and either copy or move it to another folder, C. My google-fu was weak while looking for second sieve passes undoing the first, so I thought it best to ask here. Thanks for your time.

2 1

[Dovecot] Pigeonhole make check fails with Dovecot 2.2.8
by Tamsy 22 Nov '13

22 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Is it just here? When compiling dovecot-2.2-pigeonhole-0.4.2 at the stage "make check" Pigeonhole is throwing the following message and stops: Test case: ./tests/test-header.svtest: 1: Test 'Basic functionality' SUCCEEDED 2: Test 'Matching empty key' SUCCEEDED 3: Test 'Ignoring whitespace' FAILED: header test does not strip leading whitespace 4: Test 'Absent or empty header' SUCCEEDED 5: Test 'Invalid header name' SUCCEEDED 6: Test 'Folded header' SUCCEEDED I have tried to compile Pigeonhole 0.4.2 and also the latest dovecot-2-2-pigeonhole-b7434a02fc51 from the Mercurial repository but the outcome at "make test" is always the same: 3: Test 'Ignoring whitespace' FAILED: header test does not strip leading whitespace Cheers, Tamsy -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJSjC2QAAoJEKYXVM1dyOfZ9xsIAKDC7goLP3N2rr90Lf0P6gam wQFmYY3HUMIKi3FKWcCy6DQBN6Qr33QWTk/b4OY1LDMOETolZTWIEwvlix+YdI8x oRdKQXWHR9k+jd9etWkNuuk2xUnbjz353IOMZ3Yc+spuv0JyUvYhef6pfq3MLTYQ R+YW4aoNp3XstAKcknnkduNwrfRXoZoFT/YOU3VQyDUwUa6u07JhuL+onZtb0mO+ HsdD4NNY28YqHY1/eoT3YNRbgtRxyOfzxh3f17ITbquM0ZgiPJucWX7HpIiwNJFu 3gqkceDLqqAL9DKUjDapSyR2IjxJlRSGcxQckxlkGXzcaTNNWqAn7mMxSr3hEaY= =EY7D -----END PGP SIGNATURE-----

5 12

[Dovecot] (no subject)
by Axel Reinhold 22 Nov '13

22 Nov '13

Subject: dovecot-2.2.8 does no more quit correctly after update to dovecot-2.2.8 monit is no more validating pop3 server due to dovecot mo more logging out correctly "+OK Logging out" is missing With 2.2.7: [root@pie ~]# telnet glen 110 Trying 188.138.31.225... Connected to glen. Escape character is '^]'. +OK Dovecot ready. <1da9.1.528e3113.qpIWrdBNJbF3qp/tA9R+sQ==(a)glen.ypack.de> quit +OK Logging out Connection closed by foreign host. with 2.2.8: [root@pie ~]# telnet glen 110 Trying 188.138.31.225... Connected to glen. Escape character is '^]'. +OK Dovecot ready. <1fc9.1.528e31b1.W4FN6a7gzBMYNOBoxP43OQ==(a)glen.ypack.de> quit Connection closed by foreign host. After quit the "+OK Logging out" is missing! New option? Or bug? Regards Axel

2 1