- dovecot - dovecot.org

[Dovecot] Dovecot 2.1.4 and client certificates
by Бранко Мајић 14 Apr '12

14 Apr '12

Version: 2.1.4 OS: Gentoo stable/amd64 OpenSSL version: 1.0.0h I'm having a slight problem with the client certificates in Dovecot 2.1.4. I've set-up the client certificate verification/authentication, and it seems that Dovecot is choking on the trustchain with CRL's that I'm providing to it (attached to this mail). When I enable the client authentication using certificates, and pick the certificate from my client (I've also tried it out with gnutls-cli as well), I get the following errors in Dovecot's log: imap-login: Info: Invalid certificate: Different CRL scope: /CN=Example Root CA/O=Example Inc./C=RS As per the wiki2 configuration page, I've set up the truststore in the following order (everything PEM-encoded): Example Person CA Certificate Example Person CA CRL Example Root CA Certificate Example Root CA CRL Person CA is the one issuing the end-entity certificates, of course. I'm also attaching the certificate I've used for testing. On additional note, the imap-login process also got stuck writing out the error message to the log file, refusing to die when receiving the SIGTERM (had to send SIGKILL). A similar set-up used to work under Dovecot in Debian Squeeze (version 1.2.15). The same file copied over to Dovecot 2.1.4's configuration won't work. I've compiled Dovecot by hand, and I'm not running it in any kind of chroot (this is a developer set-up so I could add support for rfc822Name username extraction I mentioned a week or so ago without messing around as root). Best regards -- Branko Majic Jabber: branko(a)majic.rs Please use only Free formats when sending attachments to me. Бранко Мајић Џабер: branko(a)majic.rs Молим вас да додатке шаљете искључиво у слободним форматима.

1 0

[Dovecot] Compressed mbox - patch
by kjonca＠o2.pl 14 Apr '12

14 Apr '12

Some time ago I complained about very slow access to compressed mboxes. Unfortunately it looks like that it is very little interest in it, so I have to investigate some things by myself. Firstly: some rationale. Why do I prefer use mbox/maildir over mdbox. Short answer "bus factor" for support mdbox (not only dovecot) Longer answer: if something goes wrong withm maildir/mbox i can use other tools (mutt, or formail or even text editor) and with mdbox ... I am not ISP, I use dovecot as a "gateway" to my (rather huge) mail archive. Most of these mails are rather valuable for me, so I prefer use something "well-known-and-tested". (I can't do like most ISP's do: write in "Terms of Service" that mail can be lost or damaged and we give no warranty :) ) So then: Below my patch. It contains 2 changes: 1. when buffer is compressed, we try to save last marked offset. 2. Increase temporary buffer for decompression. without these changes 1.5 GB of bzip compressed mbox with ~20K messages can't be open in 1.5 day After applying 1. change it can be open in ~1.5 h With both changes it was a few minutes. Maybe it is a good idea to add config parameter to specify size of decompress buffer? Patch is against v2.0.18 -- Gdyby ktoś miał zbędny Toshiba G450 - to chętnie przejmę ;) < asuffield> a workstation is anything you can stick on somebodies desk and con them into using -- in #debian-devel

1 0

Re: [Dovecot] Dovecot 2.1 with custom OpenSSL fails to build
by Andreas M. Kirchwitz 14 Apr '12

14 Apr '12

Timo Sirainen <tss(a)iki.fi> wrote: >> $ patch -p1 -s < ../dovecot-20120303-e540404debb7.patch >> $ env SSL_CFLAGS="-I/usr/local/ssl/include" SSL_LIBS="-L/usr/local/ssl/lib -Wl,-R/usr/local/ssl/lib -lcrypto -lssl" ./configure --prefix=/usr/local/Dovecot-20120303 --with-ssl=openssl --with-ssldir=/usr/local/Dovecot-20120303/etc/dovecot/certs && make && make install > > You would have needed to run autogen.sh again. It works with me now that > I tried in a test server with OpenSSL in non-standard dir. Sorry, I didn't know that with "autogen.sh". Just grabbed Dovecot 2.1.2 (which is all properly set up - so I couldn't do anything wrong ;-) and compiled it. Compilation works. Great! The binaries find all their libraries. But two libraries are not quite okay. They don't find their SSL libs: libdovecot-lda.so libdovecot-storage.so Since libdovecot-lda.so doesn't contain the words libssl or libcrypto, I guess that ldd just complains because it uses libdovecot-storage.so. Thus, libdovecot-storage.so is the (only) one left with an incomplete library search path. Luckily, all binaries use some additional libraries which come with a proper library path. So the whole things works, but it's more like some kind of magic. It would be great if libdovecot-storage.so could be fixed as well to make things finally perfect. Thanks for all your effort. (I know this isn't top priority as most people use precompiled stuff and never run into such kind of things.) Greetings, Andreas

2 2

[Dovecot] [OT] Outlook identities
by Michael Orlitzky 14 Apr '12

14 Apr '12

Nothing to do with Dovecot, but I figured this is the best place to ask. Do any of the newer versions of Outlook have proper identities support like Thunderbird, mutt, Roundcube, i.e. every other mail client on Earth? We have customers who set up ten different mailboxes for one person because otherwise Outlook won't Do the Right Thing. Is there some way to make it behave like the others? * When sending new mail, you can choose which address to use. * When replying to mail, it sends from the address that the message was sent to by default. * All mail winds up in one inbox. Outlook (2003, 2007) does do this if you set up different mail accounts, but we shouldn't have to do that.

5 6

[Dovecot] Unseen messages question
by Antoine Nguyen 14 Apr '12

14 Apr '12

Hi list, this question is related to the IMAP protocol itself, not really to Dovecot. I'm trying to understand what is the more efficient way to maintain the number of unseen messages of the currently selected mailbox. RFC3501 says a client must not issue a STATUS command to the selected mailbox and that information sent by a SELECT is enough. My current idea follows these steps : * Issue a STATUS before the mailbox is selected => I know how many unseen messages it contains * SELECT the mailbox => I got the eventual first unseen message in this mailbox but I don't understand how this info can be useful * Maintain the unseen counter (on client side) according to what the user do * Send a NOOP command every X minutes and look at the RECENT response to see if there are new messages I think it works pretty well when the mailbox is opened only once. Let's imagine this mailbox is opened twice, by different clients. If one client marks a message as \Seen, how can the second client know about this change? Thanks for your help, Antoine Nguyen http://modoboa.org/

1 0

[Dovecot] How do I test if the anti spam plugin is working?
by Dr Josef Karthauser 14 Apr '12

14 Apr '12

I've configured the dspam anti spam plugin, but it doesn't appear to be doing anything when I move mail between mailboxes. Can anyone help me determine what's going on? The plugin appears to be loading; at least if I don't define all the required configuration options I get a complaint in the log file. But beyond that I don't see any activity. Here's the config: babel# dovecot --version 2.1.3 The dovecot anti spam plugin config is: protocol imap { mail_plugins = $mail_plugins antispam } and plugin { antispam_debug_target = syslog antispam_verbose_debug = 1 antispam_backend = dspam antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_trash_pattern_ignorecase = trash;Deleted * antispam_spam_pattern = SPAM antispam_dspam_binary = /usr/local/bin/dspam antispam_dspam_args = --deliver=;--user;%n@_%d } I don't even appear to be seeing any log entries from the plugin. I've moving an email from my main mailbox into a mailbox called 'SPAM', which is how I thought that it was supposed to be triggered. Cheers, Joe

1 1

[Dovecot] sieve pipe gpg archive mails
by Robert Schetterer 13 Apr '12

13 Apr '12

hi @ll would it be possible to use http://wiki2.dovecot.org/Pigeonhole/Sieve/Plugins/Pipe to gpg sign archived mail, incoming via lmtp the intention is to store all archived mail gpg signed to notice some changes the mails at possible restore case has anyone done it bevor , or something equal ? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 1

Re: [Dovecot] Problems with master user
by Andrea Mistrali 12 Apr '12

12 Apr '12

Il giorno 12/apr/2012, alle ore 17.35, Andrea Mistrali ha scritto: > Hi to all! > I’m trying to setup master users, but I have some problems. Namely I can authenticate, but after it I cannot access INBOX or other mailboxes of the user. > snip > Can someone tell me what is wrong in my setup? Solved! It is a problem of ACL as stated at http://master.wiki2.dovecot.org/Authentication/MasterUsers#ACLs Sorry A.

1 0

[Dovecot] Problems with master user
by Andrea Mistrali 12 Apr '12

12 Apr '12

Hi to all! I’m trying to setup master users, but I have some problems. Namely I can authenticate, but after it I cannot access INBOX or other mailboxes of the user. My configuration is: passdb { driver = ldap args = /etc/dovecot/ldap-passdb.conf } passdb { driver = sql args = /etc/dovecot/sql.conf } passdb { driver = passwd-file args = /etc/dovecot/passwd.masterusers master = yes pass = yes } userdb { driver = sql args = /etc/dovecot/sql.conf } (I look up for auth in LDAP server first, if it fails I look up in DB, else I check for master user) and relevant files are /etc/dovecot/sql.conf —————————— password_query = SELECT fullusername as user, \ password, \ uid AS userdb_uid, \ gid AS userdb_gid, \ home AS userdb_home, \ mail AS userdb_mail, \ groups as userdb_acl_groups, \ quota_rule as userdb_quota_rule \ FROM pd_users_full WHERE \ username = '%n' AND \ domain = '%d' AND \ external_auth IS FALSE AND \ master_user IS FALSE AND \ %Ls_ok IS TRUE user_query = SELECT fullusername as user, \ uid, \ gid, \ home, \ mail, \ groups as acl_groups, \ quota_rule \ FROM pd_users_full WHERE \ username = '%n' AND \ domain = '%d' AND \ master_user IS FALSE iterate_query = SELECT fullusername as username, fullusername as user \ FROM pd_users_full where master_user IS FALSE ORDER BY domain,username /etc/dovecot/ldap-passdb.conf —————————————— uris = ldap://dioniso.cube.lan base = cn=users,dc=cube,dc=lan auth_bind = yes auth_bind_userdn = uid=%n,cn=users,dc=cube,dc=lan pass_attrs = uid=username, \ userPassword=password, \ # uidNumber=userdb_uid, \ # =userdb_home=/var/mail/cubeholding.com/%Lu, \ # =userdb_domain=cubeholding.com, \ # =userdb_mail=maildir:~/maildir/:INBOX=~/maildir/INBOX:LAYOUT=fs:INDEX=~/indexes/ pass_filter = (&(objectClass=posixAccount)(uid=%n)(mail=*@%d)) # Attributes and filter to get a list of all users # iterate_attrs = uid=username iterate_attrs = uid=user iterate_filter = (&(objectClass=posixAccount)(mail=*@%d)) If I test with doveadm auth and doveadm user I receive this: # doveadm auth -x service=imap andre@am.cx\*master@am.cx XXXXXX passdb: andre@am.cx*master@am.cx auth succeeded extra fields: user=andre(a)am.cx # doveadm user andre(a)am.cx userdb: andre(a)am.cx uid : 10010 gid : 8 home : /var/mail/am.cx/andre mail : maildir:~/maildir:INBOX=~/maildir/INBOX:LAYOUT=fs:INDEX=~/indexes/ acl_groups: quota_rule: *:storage=10G and in log files I see: 20120412 17:31:26 auth: Info: passdb(master(a)am.cx,master): Master user logging in as andre(a)am.cx 20120412 17:31:26 auth: Info: ldap(andre(a)am.cx): invalid credentials (given password: XXXXXX) but if I try the real thing: # telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE ACL QUOTA NAMESPACE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=GSSAPI] Dovecot ready. 0 login andre@am.cx*master@am.cx XXXXXX 0 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE ACL QUOTA NAMESPACE COMPRESS=DEFLATE QUOTA ACL RIGHTS=texk] Logged in 0 select INBOX 0 NO [SERVERBUG] Internal error occurred. Refer to server log for more information. [2012-04-12 17:33:15] and in log file I have: 20120412 17:34:25 auth: Info: passdb(master(a)am.cx,127.0.0.1,master): Master user logging in as andre(a)am.cx 20120412 17:34:25 auth: Info: ldap(andre(a)am.cx,127.0.0.1): invalid credentials (given password: silmaril) 20120412 17:34:25 imap-login: Info: Login: pid=1673, <andre(a)am.cx>, 127.0.0.1/127.0.0.1, PLAIN, secured 20120412 17:34:47 imap(andre(a)am.cx): Error: Opening INBOX failed: Mailbox doesn't exist: INBOX Can someone tell me what is wrong in my setup? TIA A.

1 0

[Dovecot] Problems with Apple Mail and attachments
by Helga Mayer 12 Apr '12

12 Apr '12

Hello, has anyone experiences with the Apple mail client, to be precise : Mail 5.2? When I copy a message with an attachment from the inbox to a different folder using 'move' or 'copy' , Apple Mail does not properly display the attachment in the new folder. When I copy the same message using 'archive' the attachment shows up properly. There is no difference on the server side. We are using maildirs. The raw messages in the various folders are identical. Deleting plist on the Mac didn't help. After removing and recreation of the account (client side) the attachments are displayed correctly again. Is this an apple problem or has it got anything to do with dovecot.index.cache ? Kind Regards Helga Mayer

3 3