March 2014 - dovecot - dovecot.org

Re: [Dovecot] Can't get authentication for masterusers on Mac OS X Server 10.6.8
by Joseph Tam 05 Mar '14

05 Mar '14

On Tue, 4 Mar 2014, dovecot-request(a)dovecot.org wrote: > #telnet mailserv.example.com 143 > Connected to mailserv.example.com. > Escape character is '^]'. > * OK Dovecot ready. > 1 login myusername myPassword > 1 OK Logged in. > 1 logout > * BYE Logging out > 1 OK Logout completed. > Connection closed by foreign host. This does not test what you want, which is trying to authenticate the master user, not the regular user. From what I remember of your config, you have another passdb which holds the credentials of your master user: you need to check that file to make sure the master user's password (hash) matches what you think the master password ought to be. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Hidden virtual folder
by Moritz Augsburger 04 Mar '14

04 Mar '14

Hi, I wanted to create a virtual folder containing all unread messages and the threads they belong to, and this config works really fine: > dovecot.conf: namespace { type = private prefix = virtual/ separator = / location = virtual:~/Maildir/virtual:INDEX=MEMORY list = children subscriptions = no } > virtual/All/dovecot-virtual: * -Trash -Trash/* -Junk -Junk/* -Drafts -Drafts/* -virtual -virtual/* all > virtual/New/dovecot-virtual: virtual/All inthread refs or unseen recent The only problem I got is that scanning all files for the virtual/All mailbox takes too long, and I would like to keep them cached (no INDEX=MEMORY), so I thought I'll just put virtual/All inside a second virtual namespace. As it's a bad idea to open the All directory manually, I could also hide the complete namespace to the user. So I added the following to my config: namespace { type = private prefix = virtual-all/ separator = / location = virtual:~/Maildir/virtual-all/ hidden = yes list = no subscriptions = no } But sadly it didn't work, a directory virtual-all/ pops up inside my client (thunderbird/icedove). Is hidden=yes/list=no unsupported for virtual locations, or is it me misconfiguring dovecot? If it should matter, it's version 2.2.9, or more specific debian 1:2.2.9-1~bpo70+1. Thanks Moritz

1 0

[Dovecot] No email since Feb 6
by Steve Campbell 04 Mar '14

04 Mar '14

Is the list down or have I been blocked.

2 1

[Dovecot] cyrus2dovecot and doveadm search,expunge
by Lanore Ronan 04 Mar '14

04 Mar '14

hi list, i'am doing a migration from cyrus ( 2.1.17 ) to dovecot ( 2.1.7). for mailbox migration i'am using this script : http://cyrus2dovecot.sw.fu-berlin.de/ To migrate a mailbox : /usr/local/sbin/cyrus2dovecot.pl -C /data/migration/spool/%h/user/%u -D /data/mail/foo.bar/%u(a)foo.bar -U /data/migration/flags/%h/%u.sub -S /data/migration/flags/%h/%u.seen test Directories /data/migration/spool /data/migration/flags are rsynced with rsync -av --delete ... .... .... After mailbox end to migrate, i want to search all message savedbefore some days but this don't work doveadm search -u test(a)foo.bar mailbox inbox savedbefore 1d i'm sure this mailbox have mail before this days. ls into mailbox dir: -rw-r--r-- 1 siadmin siadmin 21662 Mar 3 15:54 1393858496.R2cdf6e55Q2902.server.foo.bar,S=21662,W=22160:2,a I don't understand why this message isn't printer by savedbefore 1d what i'm doing wrong thanks -- Ronan Lanore

1 0

[Dovecot] IMAP native METADATA already implemented?
by Aleve Sicofante 04 Mar '14

04 Mar '14

A year ago, more or less, I was told "Dovecot is getting close to having native METADATA support." How's this going? Thanks.

3 2

[Dovecot] Error "Initializing mail storage ..." after upgrading to 2.2.10
by Götz Reinicke - IT Koordinator 04 Mar '14

04 Mar '14

Hi, I did the upgrade frpom 1.2.x to 2.2.10 and had some warnings/errors on a very few accounts/mailboxes. All of them where permission related and solved. Dovecot rocks again. But on one mailbox I do get an error: Error: user rechnnugseingang-animationsinstitut: Initialization failed: Initializing mail storage from mail_location setting failed Error: Invalid user settings. Refer to server log for more information. There is a homedirectory and the permissions are set like on all other accounts. The username is quite long (35 characters) but an other one with 34 is working fine. And before the upgrade there was no error. Thnaks for any help or hint. Regards . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

5 11

Re: [Dovecot] Windows 8 issues (using Live/Outlook)
by Eriberto 04 Mar '14

04 Mar '14

Yes, I imported the cacert. This not solved the problem. Thanks, Eriberto 2014-03-04 4:18 GMT-03:00 Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de>: > > > Does Windows trust your CA? >

1 0

[Dovecot] Windows 8 issues (using Live/Outlook)
by Eriberto 04 Mar '14

04 Mar '14

Hi! I am trying to make Windows 8 using Live 2012 and Outlook 2010 login in Dovecot POP3s. However, I receive this message in log: Feb 28 07:32:05 ipanema dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=10.0.0.10, lip=10.0.0.1, TLS handshaking: Disconnected, session=<joP78nTz9ACsFQAF> Note that user is sent as blank and this is the only log line. I used debug mode too: Feb 28 09:07:07 ipanema dovecot: pop3-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Feb 28 09:07:07 ipanema dovecot: pop3-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Feb 28 09:07:07 ipanema dovecot: pop3-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [10.0.0.10] Feb 28 09:07:07 ipanema dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [10.0.0.10] Feb 28 09:07:07 ipanema dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [10.0.0.10] Feb 28 09:07:07 ipanema dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [10.0.0.10] Feb 28 09:07:07 ipanema dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [10.0.0.10] Feb 28 09:07:07 ipanema dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [10.0.0.10] Feb 28 09:07:07 ipanema dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [10.0.0.10] Feb 28 09:07:07 ipanema dovecot: pop3-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [10.0.0.10] Feb 28 09:07:07 ipanema dovecot: pop3-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [10.0.0.10] Feb 28 09:07:07 ipanema dovecot: pop3-login: Warning: SSL failed: where=0x2002: SSLv3 read client certificate A [10.0.0.10] Feb 28 09:07:07 ipanema dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Feb 28 09:07:07 ipanema dovecot: auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Feb 28 09:07:07 ipanema dovecot: auth: Debug: auth client connected (pid=8138) Feb 28 09:07:07 ipanema dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=10.0.0.10, lip=10.0.0.1, TLS handshaking: Disconnected, session=<QDraRnbzMwCsFQAF> Analysing the traffic with tshark, I can see: 0.007163 10.0.0.10 -> 10.0.0.1 TLSv1.2 331 Certificate, Server Hello Done I am using Dovecot 2.2.9 and I think it is TLS compatible. External (non-MS) clients, as Mozilla Thunderbird and Sylpheed, are working fine. Can someone point me a light? # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.4 ext4 Thanks in advanced. Regards, Eriberto

2 1

[Dovecot] Dovecot, AD and authenticated binds...
by Jeroen Scheerder 03 Mar '14

03 Mar '14

I posted earlier with reports of less than stellar success in using Active Directory for dovecot authentication. My approach is to using the two-step approach of - obtaining the user DN by a search using an authenticated bind (using a service account) - then binding as that DN, and returning the relevant user attributes This hasn't been succesful. Dovecot's authentication process does perform the (first) authenticated bind successfully, it does obtain the right DN, than just sits there doing nothing as far as I can tell, and after a long delay concludes authentication failure - shortly before deciding to perform the bind with the user-supplied credentials, successfully. Source inspection has not resulted in a glorious eureka yet. So I thought, why not handle it myself? And I wrote a little script, using the checkpassword interface. I've enclosed it. The script is based on <http://wiki2.dovecot.org/AuthDatabase/CheckPassword>, but somehow the userdb_uid and userdb_gid I've passed back in the "EXTRA" environment variable get lost along the way. It syslogs, and the syslogs show that the LDAP parts working as expected: Mar 3 14:49:09 <mail.info> ponyboy checkpassword: successful authenticated bind and DN(js) lookup Mar 3 14:49:09 <mail.info> ponyboy checkpassword: DN(js) is CN=Jeroen Scheerder,OU=Users,OU=Netherlands,OU=ON2IT,DC=office,DC=on2it,DC=net Mar 3 14:49:09 <mail.info> ponyboy checkpassword: js authenticated In dovecot's log, simultaneously, I see basically a successful login, except that the (user_)uid and (userdb_)gid work - unless I disable prefetch, and use a static userdb: Mar 03 14:49:04 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Mar 03 14:49:04 auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Mar 03 14:49:04 auth: Debug: auth client connected (pid=90856) Mar 03 14:49:09 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=+qFODbTzDgB/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=63246 resp=<hidden> Mar 03 14:49:09 auth: Debug: checkpassword(js,127.0.0.1,<+qFODbTzDgB/AAAB>): execute: /usr/local/etc/dovecot/checkpassword-on2it /usr/local/libexec/dovecot/checkpassword-reply Mar 03 14:49:09 auth: Debug: checkpassword(js,127.0.0.1,<+qFODbTzDgB/AAAB>): Received input: userdb_uid=143 userdb_gid=143 Mar 03 14:49:09 auth: Debug: checkpassword(js,127.0.0.1,<+qFODbTzDgB/AAAB>): exit_status=0 Mar 03 14:49:09 auth: Debug: client passdb out: OK 1 user=js Mar 03 14:49:09 auth: Debug: master in: REQUEST 4007395329 90856 1 29571963894e557ab643d2e51872ba55 session_pid=90899 request_auth_token Mar 03 14:49:09 auth: Debug: prefetch(js,127.0.0.1,<+qFODbTzDgB/AAAB>): success Mar 03 14:49:09 auth: Debug: master userdb out: USER 4007395329 js uid=143 gid=143 auth_token=e2d7c2463dd4c039010e904afb4ea45214cb7de5 Mar 03 14:49:09 imap-login: Info: Login: user=<js>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=90899, secured, session=<+qFODbTzDgB/AAAB> Mar 03 14:49:09 imap: Error: user js: Mail access for users with UID 143 not permitted (see first_valid_uid in config file, uid from userdb lookup). Mar 03 14:49:09 imap: Error: Invalid user settings. Refer to server log for more information. With a static userdb (as shown in the config below): behold, everything works: Mar 03 14:52:49 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=R0plGrTzGAB/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=40984 resp=<hidden> Mar 03 14:52:49 auth: Debug: checkpassword(js,127.0.0.1,<R0plGrTzGAB/AAAB>): execute: /usr/local/etc/dovecot/checkpassword-on2it /usr/local/libexec/dovecot/checkpassword-reply Mar 03 14:52:49 auth: Debug: checkpassword(js,127.0.0.1,<R0plGrTzGAB/AAAB>): Received input: userdb_uid=143 userdb_gid=143 Mar 03 14:52:49 auth: Debug: checkpassword(js,127.0.0.1,<R0plGrTzGAB/AAAB>): exit_status=0 Mar 03 14:52:49 auth: Debug: client passdb out: OK 1 user=js Mar 03 14:52:49 auth: Debug: master in: REQUEST 2818310145 90960 1 1b6ea6c4e6b90fd49a87195c35fa34ef session_pid=91002 request_auth_token Mar 03 14:52:49 auth: Debug: master userdb out: USER 2818310145 js uid=1000 gid=1000 home=/var/mail/on2it/js auth_token=21609f5f149bf80dec701dce9f288824cdf52c60 Mar 03 14:52:49 imap-login: Info: Login: user=<js>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=91002, secured, session=<R0plGrTzGAB/AAAB> Mar 03 14:53:04 imap(js): Info: Connection closed in=0 out=352 So it's working for me now. This is clearly not the way things ought to work... but the stock LDAP interaction seems broken to my limited mind. So who would be so friendly as to point out the fallacies I've been pursuing? Regards, Jeroen. $ dovecot -n # 2.2.10: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.0-RELEASE amd64 ufs auth_debug = yes auth_mechanisms = plain login auth_username_format = %Ln auth_verbose = yes first_valid_gid = 1000 first_valid_uid = 1000 imap_client_workarounds = delay-newmail last_valid_gid = 1000 last_valid_uid = 1000 log_path = /tmp/dovecot mail_gid = 1000 mail_location = maildir:/var/mail/on2it/%Ln mail_uid = 1000 maildir_very_dirty_syncs = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /usr/local/etc/dovecot/checkpassword-on2it driver = checkpassword } protocols = imap service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imap { port = 143 } } shutdown_clients = no ssl = no userdb { args = uid=1000 gid=1000 home=/var/mail/on2it/%Ln driver = static } valid_chroot_dirs = /var/mail/on2itn2it

1 1

[Dovecot] Tracking logins
by Alex 03 Mar '14

03 Mar '14

Hi, I'm using dovecot-2.1.17 on fc18 and wondered if there is some mechanism, perhaps a database, that can store the logins/logouts for each user? I realize there's something already logged to syslog, but I'd like more of a history. While lastlog is great for users that actually login, my dovecot users don't login, just check email via pop and imap. Any ideas greatly appreciated. Thanks, Alex

3 5