- dovecot - dovecot.org

[Dovecot] patch for ssl_prefer_server_ciphers in dovecot 2.1
by Adi Kriegisch 20 Oct '13

20 Oct '13

Dear all, I tried to do a backport of 'ssl_prefer_server_ciphers' (http://hg.dovecot.org/dovecot-2.2/rev/897484f45a87/) to Dovecot 2.1 (namely the Debian version of Dovecot) and wanted to ask if there is any chance to integrate this feature into Dovecot 2.1 'upstream' as well. As the code structure changed quite a bit, I am not sure if my patch is complete. I tested it with pop3s and imaps in my test environment and it works just as expected and seemed to not have any unwanted effects. (Dovecot code is probably the most beautiful and easy to read C code I've seen, but there might also be some pitfalls I missed.) best regards, Adi Kriegisch PS: I need that feature to enable PFS while allowing Outlook to still connect and the others not to fall back to a different cipher; I was unable to find a PFS cipher that is supported by Outlook and OpenSSL.

3 7

[Dovecot] dovecot-metadata-plugin v14 patches
by Sergey Sidlyarenko 19 Oct '13

19 Oct '13

Please apply patches for dovecot-metadata-plugin v14. 1. dovecot-metadata-plugin-value_nil - fix plugin crach if entry->value == NULL (strlen(NULL) - segfault). 2. dovecot-metadata-plugin-utf7_support - add support metadata for UTF8 mailfolder. -- Sidlyarenko Sergey https://github.com/lefoyer

2 1

[Dovecot] Issues with configure script / Makefile
by Bret Jordan 19 Oct '13

19 Oct '13

Dear Dovecot, I have noticed that when you pass a --prefix in to the configure script and say specify a path of /local/dovecot-2.2.6 that when you install most of the subdirectories (etc, lib, include, libexec,etc) have a dovecot directory in them, like if you were installing to /. This is not typical of most *nix software. So I tried to specify the exact location with the following configure options, but they are not honored when it comes to installation. I have looked through the configure script to see if I can see where the problem is and can not see it. These are the ones that do not work. Some of the others, however to work. # Do not work --sysconfdir=/local/dovecot-2.2.6/etc \ --libdir=/local/dovecot-2.2.6/lib \ --includedir=/local/dovecot-2.2.6/include \ --libexecdir=/local/dovecot-2.2.6/libexec \ # Do work --docdir=/local/dovecot-2.2.6/share/doc \ --with-ssl=openssl --with-ssldir=/local/dovecot.2.2.6/ssl \ --with-statedir=/local/dovecot-2.2.6/lib \ --with-moduledir=/local/dovecot-2.2.6/lib \ --with-rundir=/run/dovecot Bret Bret Jordan CISSP | Sr Security Architect PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."

1 0

[Dovecot] Having problem that e-mails for all users are grouped in the same "sent" file (same for "drafts").
by SiR 18 Oct '13

18 Oct '13

This is an urgent problem for us. Is this expected? the problem is that when users access their e-mail through web-mail (roundcubemail) users see each others messages in unified "Sent" folder We have used: joe /etc/postfix/virtual to enable managing e-mails on multiple domains by same Postfix server. Thank you -- View this message in context: http://dovecot.2317879.n4.nabble.com/Having-problem-that-e-mails-for-all-us… Sent from the Dovecot mailing list archive at Nabble.com.

2 3

[Dovecot] Public dovecot namespace visible only to some users
by Joachim Breitner 17 Oct '13

17 Oct '13

Hi, I have a dovecot IMAP server (version 2.1.7) with Maildirs and a virtual user setup (e.g. all accounts are mapped to the same system user). I’d like to create a public namespace shared between users A and B, but not any other user. I tried to set up the namespace as follows: namespace { type = public separator = . prefix = INBOX.XFeeds. location = maildir:/var/vhosts/feeds:INDEX=~/Maildir/feeds/ subscriptions = no } together with a acl-file: /var/vhosts/feeds $ cat dovecot-acl user=A lrwstipekxa user=B lrwipk Now user C cannot access the contents of the XFeeds mailbox, but it still shows up in its IMAP client. How can I make sure that other users cannot observe that this namespace exists? Thanks, Joachim PS: If you collect serverfault reputation, feel free to answer on http://serverfault.com/questions/544061/public-dovecot-namespace-visible-on… as well :-) PPS: Relevant parts of my configuration: first_valid_uid = 109 last_valid_uid = 109 mail_gid = vhost mail_location = maildir:~/Maildir mail_privileged_group = mail mail_uid = vhost managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { location = maildir:/var/vhosts/feeds:INDEX=~/Maildir/feeds/ prefix = INBOX.XFeeds. separator = . subscriptions = no type = public } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . } passdb { args = /etc/vhosts/dovecot-userdb driver = passwd-file } plugin { acl = vfile sieve = ~/dovecot.sieve sieve_dir = ~/sieve } userdb { args = uid=vhost gid=vhost home=/var/vhosts/%d/%n driver = static } protocol imap { mail_plugins = " acl" } -- Joachim “nomeata” Breitner mail(a)joachim-breitner.de • http://www.joachim-breitner.de/ Jabber: nomeata(a)joachim-breitner.de • GPG-Key: 0x4743206C Debian Developer: nomeata(a)debian.org

2 3

Re: [Dovecot] Strange output from LIST command
by azurIt 17 Oct '13

17 Oct '13

> Od: Charles Sprickman <spork(a)bway.net> > Komu: azurIt <azurit(a)pobox.sk> > Dátum: 16.10.2013 23:20 > Predmet: Re: [Dovecot] Strange output from LIST command > >I just did a move from Courier to Dovecot 2.2, and also followed the namespace suggestions in the wiki. > >I've not had any issues, but if you want to drop me a note showing the IMAP commands and results you get for LIST, I'll compare locally and let you know if I see anything different… > >Charles >-- >Charles Sprickman >NetEng/SysAdmin >Bway.net - New York's Best Internet www.bway.net >spork(a)bway.net - 212.655.9344 > Thank you. I tried to upgrade to 2.1.17 just to see if it helps - it didn't. Looks like an unfixed bug in 2.1.. I will see tomorrow if i can rebuild Debian experimental packages so i can try version 2.2. azur

2 1

[Dovecot] "Perfect Forward Secrecy" on Redhat/Fedora
by Reindl Harald 16 Oct '13

16 Oct '13

RHEL/CentOS 6.5 will support ECDHE Fedora currently makes the turnaround no wonder that i burned down many hours: https://bugzilla.redhat.com/show_bug.cgi?id=1019390 https://bugzilla.redhat.com/show_bug.cgi?id=319901#c108 ______________________________ recent dovecot with also support older clients but perfer best possible encryption for modern ones ssl_prefer_server_ciphers = yes ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!SSLv2:@STRENGTH ______________________________ the same for Apache: SSLHonorCipherOrder On SSLCipherSuite EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS

1 0

[Dovecot] Using dovecot as LDA for postfix
by Farzad Mahdikhani 15 Oct '13

15 Oct '13

Hi Here is my environment: Red Hat Enterprise Linux Server release 5.7 (Tikanga) postfix-2.9.1-1.rhel5 dovecot 1.0.7 I want to config a complete postfix-dovecot mail server. First I configured postfix to use procmail, its default LDA and dovecot for pop3 and imap. I didn't changed main.cf a lot, just myhostname and a few other properties. I didn't set home_mailbox. About dovecot.conf here is the output of dovecot -n : # 1.0.7: /etc/dovecot.conf log_path: /var/log/dovecot.log protocols: imap pop3 login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd As you can see mail_location is not set. At this time everything was OK and working. I was able to send email using SquirrelMail and thunderbird. I got two users, user1 and user2, in my linux machine and when I sent an email from user1(a)software.com to user2(a)software.com the sent mail was saved in /home/user1/mail/Sent and the received email was in /var/mail/user2. The log file for dovecot had entries like this for user1 and user2: dovecot: Oct 14 14:44:52 Info: IMAP(user1): maildir: couldn't find root dir dovecot: Oct 14 14:44:52 Info: IMAP(user1): mbox: root exists (/home/user1/mail) dovecot: Oct 14 14:44:52 Info: IMAP(user1): mbox: INBOX exists (/var/mail/user1) dovecot: Oct 14 14:44:52 Info: IMAP(user1): mbox: root=/home/user1/mail, index=/home/user1/mail, inbox=/var/mail/user1 At this point I tried to change the LDA from procmail to dovecot by the following settings: I added/changed the following in the main.cf: mailbox_command = /usr/libexec/dovecot/deliver dovecot_destination_recipient_limit = 1 virtual_mailbox_domains = software.com virtual_transport = dovecot I added the following in the master.cf: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${recipient} But it didn't work. When I send email from from user2 to user1 the sent email is correctly saved in /home/user2/mail/Sent but it seems that user1 doesn't receive the incoming email. dovecot.log had entries like the following: dovecot: Oct 14 14:54:04 Info: imap-login: Login: user=<user1>, method=PLAIN, rip=::ffff:172.27.7.8, lip=::ffff:172.16.100.183, TLS dovecot: Oct 14 14:54:04 Info: IMAP(user1): Effective uid=504, gid=504, home=/home/user1 dovecot: Oct 14 14:54:04 Info: IMAP(user1): maildir: access(/home/user1/Maildir, rwx): failed: No such file or directory dovecot: Oct 14 14:54:04 Info: IMAP(user1): maildir: couldn't find root dir dovecot: Oct 14 14:54:04 Info: IMAP(user1): mbox: root exists (/home/user1/mail) dovecot: Oct 14 14:54:04 Info: IMAP(user1): mbox: INBOX exists (/var/mail/user1) dovecot: Oct 14 14:54:04 Info: IMAP(user1): mbox: root=/home/user1/mail, index=/home/user1/mail, inbox=/var/mail/user1 Setting home_mailbox = Maildir/ in main.cf and mail_location = maildir:~/Maildir in dovecot.cf didn't help. I have been googling and reading and testing for 4 or 5 days for this but there was no chance. Now, I am stuck and any help would be really really appreciated. Regards, Ferez

4 3

[Dovecot] how to handle logging
by Andreas Schulze 15 Oct '13

15 Oct '13

Hello, I plan a migration to dovecot and have concerns about the amount of logged data. On a testsystem dovecot produced 1TB syslog per day with a comparable amount of pop3 sessions. The current server log to STDOUT which is connected to multilog (circular buffer, http://cr.yp.to/daemontools/multilog.html) That way I can have a look at the last activities to any time. I like to have that in dovecot too. But since dovecot uses syslog it's not possible to adopt 1:1 Any ideas? Thanks -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Dipl.-Kfm. Dr. Robert Mayr Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

4 5

[Dovecot] POP3 Setup help - more info
by Thomas I Higgins 15 Oct '13

15 Oct '13

Well my last email went unaswered - I assume because I didn't provide enough detailed information. Not a surprise if that is the case. Anyway, I also noted that there is no dovecot/pop3 process like there is for IMAP. Not certain that is wrong, but I am guessing it is. I am enclosing the output from a doveconf -an query - hopefully you can see a screenshot, otherwise I have to figure out how to get it in text form (work disables cp & scp traffic). Hopefully this will provide information that will help define what I am missing? Thanks again, Thomas Higgins

5 4