June 2013 - dovecot - dovecot.org

[Dovecot] Fw: Cannot Authenticate via LDAP
by Christian Wiese 04 Jun '13

04 Jun '13

Hello Christian, I tried what you suggested by adding "REFERALS off" to /etc/ldap/ldap.conf and restarting slapd and dovecot, but the error persists. On Tue, Jun 4, 2013 at 7:56 AM, Christian Wiese < christian.wiese(a)securepoint.de> wrote: > Hi Ron, > > I didn't had the time to check all logs but the error log. > First thing you should check if there are LDAP REFFERALS enabled in > the systems ldap.conf. > I had a similar looking issue and it took me a good amount of time to > figure out that I had to disable LDAP REFFERALS globally. > This happened when using an AD as LDAP backend, but also applies to > Samba4 as you can see in the following mailing list thread: > > > http://dovecot.markmail.org/message/mjurv4fp4w65u2ib?q=Dovecot+LDA+LDAP+loo… > > The settings within the systems ldap.conf might influence dovecot, > because libldap (openldap) functions might read the global ldap.conf > settings. > > Hope that helps. > > Cheers, > Chris > > Am Tue, 4 Jun 2013 05:50:16 -0400 > schrieb Ron Scott-Adams <ron(a)tohuw.net>: > > > a login tohuw [myPassword] returns "NO [AUTHENTICATIONFAILED] > > Authentication failed." I believe I'm missing a configuration > > detail, but what? > > > > > > info.log: http://pastebin.ca/2388873 > > > > debug.log: http://pastebin.ca/2388872 > > > > error.log: http://pastebin.ca/2388871 > > > > dovecot -n: http://pastebin.ca/2388870 > > > > dovecot-ldap.conf.ext summary: http://pastebin.ca/2388867 > >

3 5

[Dovecot] Administrative mailbox deletions
by Alan Brown 04 Jun '13

04 Jun '13

I'm in the process of nuking a bunch of dead mailboxes after they've been migrated to other servers - but the accounts have been kept. A simple shell script takes care of most of it, BUT.... (there's always a "but" isn't there?) One user has named all his mailboxes with leading hyphens. ie: -foo -bar -bazz and "doveadm mailbox delete" doesn't like it. Does anyone have the magic sauce needed to escape the - character? Thanks in advance Alan

3 2

[Dovecot] Cannot Authenticate via LDAP
by Ron Scott-Adams 04 Jun '13

04 Jun '13

a login tohuw [myPassword] returns "NO [AUTHENTICATIONFAILED] Authentication failed." I believe I'm missing a configuration detail, but what? info.log: http://pastebin.ca/2388873 debug.log: http://pastebin.ca/2388872 error.log: http://pastebin.ca/2388871 dovecot -n: http://pastebin.ca/2388870 dovecot-ldap.conf.ext summary: http://pastebin.ca/2388867

2 1

Re: [Dovecot] Administrative mailbox deletions
by Alan Brown 04 Jun '13

04 Jun '13

>> and "doveadm mailbox delete" doesn't like it. >> >> Does anyone have the magic sauce needed to escape the - character? > > An "escaping" that works at the *nix level (not necessarily with > doveadm, but I would assume it works there too) is, e.g., > > rm -- -foo > > i.e., double dashes to nullify the "-" option flag, followed by the > filename. That does work. Thanks. Alan

1 0

[Dovecot] Imap Server as storage backend for dovecot
by Micha Krause 04 Jun '13

04 Jun '13

Hi, I remember reading about the possibility to configure a namespace to point to another imap server (not dovecot) and use it as a backend for storing mails. However, I could not find any documentation about this, so Im not sure if I remember correctly. Micha Krause

1 0

[Dovecot] recursive mail_location?
by Eric Abrahamsen 03 Jun '13

03 Jun '13

Forgive what may be a newby question, but I'm trying to get a new setup working, and there are many different things confusing me. I'm trying for a gnus + dovecot + mbsync arrangement, with mbsync writing to maildirs, and gnus reading from those dirs with a dovecot invocation. Fairly standard, I think. I have multiple email accounts I'm trying to sync, all of them gmail. My problem is that mbsync creates one maildir structure for each mailbox in each account. So I end up with: ~/mail ├── acc1 │ ├── INBOX │ │ ├── cur │ │ ├── new │ │ └── tmp │ └── OTHERBOX │ ├── cur │ ├── new │ └── tmp └── acc2 ├── INBOX │ ├── cur │ ├── new │ └── tmp └── OTHERBOX ├── cur ├── new └── tmp And so on, for many accounts, and many mailboxes. I believe there's something I can configure in mbsync to collapse this a little, but there's still going to be quite a bit of nesting. Gnus, meanwhile, is meant to invoke dovecot with the "-o mail_location" switch, and as far as I can tell that needs to be pointed at a maildir structure, which means I would need a separate gnus server for each mailbox in each account. Does anyone have a recommended way of handling this? Is it possible to either "flatten" the structure further, or somehow tell dovecot to recurse into directories? I don't mind having a separate gnus server for each mail account, but I'd hate to have to do one per mailbox. I'm only just getting started and haven't invested myself in any particular setup, so if the answer is "you're doing it all wrong", I would love to hear that. Thanks! Eric

3 5

[Dovecot] Configuration advice needed.
by Olivier Girard 03 Jun '13

03 Jun '13

Hello, First, thanks for this great piece of software. I'm new to dovecot and i've just converted my old courier configuration on pop/imap server side, everithing is working just fine on this side and speed gain expected was found (not enough for our busy servers :). Setup is done with 3 dovecot virtual servers load balanced with a Hardware load balancer (this part is a big point of the question). Postfix and dovecot servers use an NFS share on a NetApp for mail, Postfix servers are writting directly to inbox maildirs. Load balanced is maintaining afinity betwen client and server so i've got no problem with this for the moment. Now, i want to setup postfix (3 HW load balanced) for local delivery with LMTP on deovecot servers, and here come my questions. Afinity can't be maintained between IMAP and LMTP for a user with my load balancer so mail can be delivered on dovecot01 and read on dovecot02, from what i've read this can be an issue with indexes. I think i need to setup a director to maintain LMTP and IMAP afinity between users and servers but on imap servers i'm identifying user with their UID, and LMTP need to see emails. Does dovecot see the same user or 2 users with the same homedir? So my question is: could you point me to the right direction with this setup, do you have any advice on this config. Actual configurations: (postlogin not in real use, just a touch on (imap/pop3)_last_login) POP/IMAP server: dovecot01# doveconf -n # 2.1.15: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.3-RELEASE-p3 amd64 auth_cache_negative_ttl = 0 auth_cache_size = 10 M auth_mechanisms = plain login auth_verbose = yes default_client_limit = 1500 default_process_limit = 500 default_vsz_limit = 1 G disable_plaintext_auth = no dotlock_use_excl = no lock_method = dotlock mail_fsync = always mail_gid = vmail mail_location = maildir:%h/Maildir:INDEX=/mail_index%h mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " stats" mail_uid = vmail mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. separator = . } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { stats_refresh = 30 secs stats_track_cmds = yes } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } user = $default_internal_user } service imap-postlogin { executable = script-login /usr/local/bin/imap-postlogin.sh user = vmail } service imap { executable = imap imap-postlogin process_limit = 1024 } service pop3-postlogin { executable = script-login /usr/local/bin/pop3-postlogin.sh user = vmail } service pop3 { executable = pop3 pop3-postlogin process_limit = 1024 } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_cert = </etc/ssl/cert/mail.univ-angers.fr.pem ssl_key = </etc/ssl/cert/mail.univ-angers.fr.key userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { mail_plugins = " stats imap_stats" } Postfix Test Server: %doveconf -n # 2.1.15: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.3-RELEASE-p3 amd64 auth_debug = yes auth_mechanisms = plain login auth_verbose = yes default_client_limit = 1500 default_process_limit = 500 default_vsz_limit = 512 M disable_plaintext_auth = no dotlock_use_excl = no lock_method = dotlock mail_fsync = always mail_gid = vmail mail_location = maildir:%h/Maildir:INDEX=/mail_index%h mail_nfs_index = yes mail_nfs_storage = yes mail_uid = vmail mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. separator = . } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = lmtp service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { user = vmail } user = $default_internal_user } service imap-postlogin { executable = script-login /usr/local/bin/imap-postlogin.sh user = vmail } service imap { executable = imap imap-postlogin process_limit = 1024 } service lmtp { inet_listener lmtp { address = * :: port = 24 } process_min_avail = 20 user = vmail } service pop3-postlogin { executable = script-login /usr/local/bin/pop3-postlogin.sh user = vmail } service pop3 { executable = pop3 pop3-postlogin process_limit = 1024 } ssl_cert = </etc/ssl/cert/mail.univ-angers.fr.pem ssl_key = </etc/ssl/cert/mail.univ-angers.fr.key userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } File dovecot-ldap.conf.ext uris = ldap://ldap.uang dn = cn=acces-smtp, ou=access, dc=univ-angers, dc=fr dnpass = ********** base = ou=people, dc=univ-angers, dc=fr user_attrs = homeDirectory=home user_filter = (&(|(uid=%u) (mail=%u) (auaAliasEmail=%u))(|(auaStatut=etu)(auaStatut=etu-sortant)(auaStatut=perso)(auaStatut=perso-sortant))) pass_attrs = uid=user,userPassword=password pass_filter = (&(|(uid=%u) (mail=%u) (auaAliasEmail=%u)) (|(auaStatut=etu)(auaStatut=etu-sortant)(auaStatut=perso) (auaStatut=perso-sortant))) iterate_attrs = uid=user iterate_filter = (|(auaStatut=etu)(auaStatut=etu-sortant)(auaStatut=perso)(auaStatut=perso-sortant)) default_pass_scheme = MD5-CRYPT

2 2

[Dovecot] An unconstructive grumble
by dd 03 Jun '13

03 Jun '13

5 hours of configuration attempts, error after confusing error, documentation with examples that only show extracts of working configurations. I really feel like throwing in the towel with dovecot. It should not be this hard and frankly almost impossible to understand and configure for such an incedibly simple configuration. /home/vmail/domain.name/username/cur /home/vmail/domain.name/username/new /home/vmail/domain.name/username/tmp 3 virtual users. All I want is a username and password to access my email. I have to have hit every error and problem there can be. No response at all from server, unable to find password file, unable to recognise user, invalid password. God it went on and on and on for five or more hours. For such a simple config. I know this is a totally unconstructive complaint and I should be taking the time to set out a careful explanation of my problem along with errors and logfiles but I just can't be bothered. I've tried so many many configurations and options and nothing works. How can it possibly be this hard to ghet some emails off the server with simple username/password configurations. Go ahead and flame me to a crisp. -- View this message in context: http://dovecot.2317879.n4.nabble.com/An-unconstructive-grumble-tp42598.html Sent from the Dovecot mailing list archive at Nabble.com.

7 7

[Dovecot] Settings: Dovecot + NTLM + Single Sing On + Windows + Outlook or Thunderbird.
by Maria Jose Yañez Dacosta 02 Jun '13

02 Jun '13

I am following the steps listed in: http://wiki.dovecot.org/HowTo/ActiveDirectoryNtlm My goal is to have single sign-on for Microsoft Outlook applications. I working and I have some doubts since I never set up an imap server, hope I can help :). The version that I have installed is devecot 2.0.9. "dovecot -n" shows the following: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_use_winbind = yes mbox_write_locks = fcntl passdb { driver = pam } protocols = imap pop3 ssl = no userdb { args = uid=10000 gid=10000 home=/mail/%d/%n driver = static } I show what I have in /etc/samba/smb.conf [global] workgroup = EJEMPLO realm = EJEMPLO.COM.UY server string = %h (Samba %v) security = ADS password server = ad.domain.dom username map = /etc/samba/mapeousuarios map untrusted to domain = Yes syslog = 0 log file = /var/log/samba/log.%m max log size = 1000 name resolve order = wins host bcast local master = No domain master = No dns proxy = No wins server = here active directory ip panic action = /usr/share/samba/panic-action %d winbind separator = + winbind use default domain = Yes winbind rpc only = Yes idmap config * : range = 1200-3000 idmap config * : backend = tdb [usuarios3] path = /exports/archivos-usuarios read only = No map acl inherit = Yes store dos attributes = Yes "wbinfo -g" and "wbinfo -u" work well. kinit Administrator work well also. Some steps of the configuration in dovecot.conf does not recognize: 1) "protocols = imap imaps pop3 pop3s". 2) "mechanisms = plain ntlm login". 3) "allow_all_users=yes" y "mail=maildir:/home/vmail/%d/%1Ln/%Ln:INBOX=/home/vmail/%d/%1Ln/%Ln". I'm not sure I should put in place. I also have some doubts: 1) I have to create a keytab file containing the principal for imap and pop?, as it would indicate Dovecot?. 2) That should indicate values uid y el gid? 3) I have to set something in pam? if I make "telnet localhost imap" shows the following: OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready NTLM not appears in the options. I hope I can shed some light on the subject :) Thanks and greetings. -- Maria José

2 5

[Dovecot] =Davide Pasquale=
by Davide Pasquale 02 Jun '13

02 Jun '13

http://archiv.isusice.eu/ewcyozyg/fltdigdpmijtefzkeuuepzdutvxu.hnfzuk

1 0