- dovecot - dovecot.org

[Dovecot] sha-512 ... shadow blended with database
by WJCarpenter 31 Jan '10

31 Jan '10

The cryptic subject is the outcome of my looking into how to do a particular thing. I wonder if anyone else has solved this problem in a way that hasn't occurred to me. I'm using dovecot 1.1.11 on Ubuntu Server 9.10. I could consider upgrading to my own install of a newer dovecot if it made a difference to this problem. I have two populations of dovecot users. Some users have Unix accounts (with logins disabled), and so their password hashes are stored in /etc/shadow. These days, the default configuration for that is salted SHA-512. It's easy for me to change that scheme to something else if I want to, but the important fact is that I already have some users with passwords in salted SHA-512. The other population of users is purely virtual, and their password hashes are stored in a MySQL database in SHA-1 format (unsalted, but moving to salted wouldn't be a big deal). The database also has a column identifying the hash scheme, so SHA-1 isn't some assumption. I know that I have have multiple passdb in my dovecot config, but I'm looking to unify my two user populations and put them all in the MySQL database. As far as I can tell from the wiki, there is no SHA-512 in any version of dovecot. MySQL also doesn't have SHA-512. So, I don't see a way of reworking my password checking to accomodate the salted SHA-512 values currently in /etc/shadow. I'd prefer to not ask the SHA-512 users to update their passwords for this administrative reason if I can avoid it (but so far, that looks like the only answer). Any ideas?

3 3

[Dovecot] LSUB output format != LIST output format
by Martin 31 Jan '10

31 Jan '10

Hi, I have a problem with my hanging claws-mail. I first subscribed to their bug tracker, described the problem and before I pressed on submit in their bugtracker, I realized it might be a problem with dovecot. I'm using dovecot for internal purposes only (catching all my external boxes and storing locally): # 1.2.8: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.2-RELEASE-p5 i386 listen: *, [::] ssl: required disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: maildir:~/.mails imap_client_workarounds: delay-newmail netscape-eoh tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)example.com sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain login username_format: %Lu passdb: driver: pam args: session=yes dovecot userdb: driver: passwd args: blocking=yes socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 The mailboxes are on simple UFS2 file system. Here is what I get when listing subscribed folders, like claws-mail does: . LSUB "" "*" * LSUB () "." "Trash" * LSUB () "." "Queue" * LSUB () "." "Sent" * LSUB () "." "Drafts" * LSUB () "." "INBOX" * LSUB () "." "INBOX.FreeBSD." * LSUB () "." "INBOX.Spam" * LSUB () "." "INBOX.Spam.LearnHam" * LSUB () "." "INBOX.Spam.LearnSpam" * LSUB () "." "INBOX.Steno" * LSUB () "." "INBOX.Gentoo" * LSUB () "." "INBOX.Notifications" . OK Lsub completed. Please notice the "INBOX.FreeBSD." with the dot at the end of the folder name. Here the output of LIST: . LIST "" "*" * LIST (\HasNoChildren) "." "Trash" * LIST (\HasNoChildren) "." "Queue" * LIST (\HasNoChildren) "." "Sent" * LIST (\HasNoChildren) "." "Drafts" * LIST (\HasChildren) "." "INBOX" * LIST (\HasChildren) "." "INBOX.FreeBSD" * LIST (\HasNoChildren) "." "INBOX.FreeBSD.current" * LIST (\HasNoChildren) "." "INBOX.FreeBSD.Foren" * LIST (\HasNoChildren) "." "INBOX.FreeBSD.announce" * LIST (\HasNoChildren) "." "INBOX.FreeBSD.stable" * LIST (\HasChildren) "." "INBOX.Spam" * LIST (\HasNoChildren) "." "INBOX.Spam.LearnHam" * LIST (\HasNoChildren) "." "INBOX.Spam.LearnSpam" * LIST (\HasNoChildren) "." "INBOX.Gentoo" * LIST (\HasNoChildren) "." "INBOX.Steno" * LIST (\HasNoChildren) "." "INBOX.Notifications" . OK List completed. The folder name here does not have the dot at the end? Why is this happening? The RFC says the output should not differ, as far as I understood it. I think it might be the dot in LSUB causing claws-mail loop indefinitely when refreshing the folder structure. Annoying!! I hope, you can help me. Thanks in advance. -- Martin Sugioarto

2 4

[Dovecot] Recommended method?
by Brandon Lamb 30 Jan '10

30 Jan '10

Hopefully this isnt TOO general of a question. I have a raid server that runs dovecot and exports via nfs the maildir format store. I have 4 mail servers running exim that use dovecot to deliver over nfs I have been examing our entire setup and had the thought, would it be recommended to instead have another exim process running directly on the raid server and have my mail servers deliver mail to that rather than over nfs, if that makes sense? So mail would go from our postini frontend => mail cluster => final delivery via exim on raid server. Seems like this way I could make all the nfs config options go away and such. Thoughts?

3 3

[Dovecot] Dovecot version 2 and multiple SSL certificates
by Δημήτριος Καραπιπέ ρης 30 Jan '10

30 Jan '10

Hi there! Is it possible on Dovecot version 2 (single instance) to include 2 different SSL certificates and use the appropriate one based on the client request? Thanks in advance Dimitrios

3 4

[Dovecot] failed: Cannot allocate memory
by Philipp Snizek 30 Jan '10

30 Jan '10

Hi when I try to index messages using squat on a 26'000 emails mailbox I get the below errors at the point dovecot says "* OK Mailbox indexing finished". 2010-01-30 08:12:50 sleipnir local7.err dovecot IMAP(spam(a)dom.com): read(/var/tmp/dovecot/spam/indexes/.INBOX_score20/dovecot.index.search.uids) failed: Cannot allocate memory 2010-01-30 08:12:50 sleipnir local7.err dovecot IMAP(spam(a)dom.com): mremap_anon(44609536) failed: Invalid argument 2010-01-30 08:12:50 sleipnir local7.err dovecot IMAP(spam(a)dom.com): read(/var/tmp/dovecot/spam/indexes/.INBOX_score20/dovecot.index.search.uids) failed: Invalid argument 2010-01-30 08:17:32 sleipnir local7.err dovecot IMAP(spam(a)dom.com): munmap_anon() failed: Invalid argument This is the configuration I use for squat: fts = squat fts_squat = partial=4 full=10 Dovecot version is 1.2.10, patched with sieve. Thanks for any answers, best, Philippp

3 3

[Dovecot] Pigeon hole sieve binaries and dovecot header install
by Mark Washenberger 30 Jan '10

30 Jan '10

Stephan, I've recently been playing around with packaging dovecot 2.0 and dovecot-2.0-pigeonhole, as well as the --enable-header-install configure options of both. This lead me to the following question. Should pigeonhole's sieve binaries rely on static libstorage / other dovecot libraries? It seems like they should instead use shared libraries, but I couldn't find a configure option to make this happen. That way, I could break my packages up like so: dovecot dovecot-devel libdovecot dovecot-pigeonhole dovecot-pigeonhole-devel And while pigeonhole/sieve might require libdovecot to run, it shouldn't require it to compile. Thoughts? I can provide a lot more detail about my compilation errors if you think its necessary.

1 0

[Dovecot] Does anyone know a good Dovecot hoster in europe?
by Johannes 30 Jan '10

30 Jan '10

Hi, though I am not sure this is the right place to ask, but I just try. I am looking for a better e-mail hoster providing me with a dovecot server (I don't want to do all the admin stuff and backup myself, if possible). I already googled a bit, searched the archives and had a look at dovecot.org but could not find an answer to this question. Since dovecot seems to get a fair amount of funding from finnish companies I thought there should be a good hoster among them. Any hints? Thanks Johannes

3 2

[Dovecot] Authentication failure (password mismatch?)
by Wade Smart 30 Jan '10

30 Jan '10

I setup dovecot on my laptop to practice on. I was following some of the information on this page: https://help.ubuntu.com/community/PostfixVirtualMailBoxClamSmtpHowto#Testing Your Setup I created the in this format: user:{plain}pass:1000:1000::/home/user::userdb_mail=maildir:~/Maildir for userdb passwd-file. I used smart for the user and wade for the password (its just for testing) and then attempted to log into the system. Im getting these errors: auth-worker(default): pam(smart,127.0.1.1): lookup service=dovecot auth-worker(default): pam(smart,127.0.1.1): #1/1 style=1 msg=Password; auth-worker(default): pam(smart,127.0.1.1): pam_authenticate() failed: Authentication failure( password mismatch?) auth-worker(default): passwd-file /etc/dovecot/passwd.dovecot: Read 1 users auth-worker(default): passwd-file(smart,127.0.1.1): lookup: user=smart file=/etc/dovecot/passwd.dovecot Its reading the file but the password is incorrect. Im not understanding that part. Wade Smart -- Registered Linux User: #480675 Registered Linux Machine: #408606 Linux since June 2005

1 0

[Dovecot] How do I make dovecot not use sslv2 for pop?
by Patrick Horgan 30 Jan '10

30 Jan '10

From nmap: 995/tcp open ssl/pop3 Dovecot pop3d |_ sslv2: server still supports SSLv2 |_ pop3-capabilities: USER CAPA UIDL PIPELINING RESP-CODES TOP SASL(PLAIN LOGIN) pop3 allows SSLv2, imap doesn't. In my dovecot.conf I have: ssl_cipher_list = ALL:!LOW:!SSLv2 at the global level. Do I need to put it inside the protocol pop3{} section? Patrick

3 4

[Dovecot] Dovecot SSL issues
by Spyros Tsiolis 29 Jan '10

29 Jan '10

Hello all, successfully managed to make dovecot work with horde (http://www.horde.org) and another MTA (SMTP/POP3). I have this nagging issue with dovecot though (I suspect - it's dovecot and not the rest of the packages, please read on): There is this special page one goes, that check if everything is ok with all the relevant software running along Horde. It's a php file called "test.php". Now, this file shows almost everything that happens in the box. Here's a transcript of what shows when it comes to dovecot and SSL : --------------------------- * Trying protocol imap/ssl, Port 993: ERROR - The server returned the following error message: SECURITY PROBLEM: insecure server advertised AUTH=PLAINCertificate failure for localhost: self signed certificate: /C=GR/ST=Kerkyra/L=Kerkyra/O=The Company Name/OU=IMAP server/CN=webmail.thecompanyname.gr/emailAddress=postmaster(a)webmail.thecompanyname.gr --------------------------- From what I understand, it doesn't like the certificate. However, I've followed a howto document step-by-step and did what is documented. Does anyone have any pointers on how to make secure imap for dovecot ? E.G. on ThunderBird, the settings are the following : Tools -> Account Settings -> Server Settings : Server Name : (the server or its ip address) Username : (the username) Port : (I've manually entered "993", because by default goes to "143") Security Settings -> Connection Security : SSL/TLS (again manually entered) CHECK_ON : Use secure authentication Now, if I click on "Get Mail" button on top of the TB window, I get a pop-up window with the following message : ------ Server : Location : <Servers' IP Address>:993 Certificate Status : This site attempts to identify itself with invalid information. Wrong Site : Certificate belongs to a different site, which could indicate an identity theft. Unknown Identity : Certificate is not trusted, because it hasn't been verified by a recognized authority. ------ After that, the users accepts the above by pressing ok twice. However, there's a third pop-up window with a message shown below : ------ You cannot log in to <servers' ip address> because you have enabled secure authentication and this serer does not support it. To log in, turn off secure authentication for this account. ------ Any help would be appreciated.. Thank you all for your patience, S. Tsiolis

3 2