- dovecot - dovecot.org

[Dovecot] LDAP as password database - some problems / suggestions
by Stefan Palme 18 Feb '10

18 Feb '10

Hi all, Using dovecot-1.2.6, I use dovecot with an LDAP backend for user authentication. In general this works ok, but I have some issues with this... In LDAP, I have users like this: dn:cn=user1,ou=users,dc=kapott,dc=org dn:cn=user2,ou=users,dc=kapott,dc=org etc. When authenticating users, I explicitely want to use the AUTH_BIND feature (and NOT lookup passwords). My problem: not ALL users from the LDAP system should be allowed to use the IMAP server. Currently, I have defined an auth_bind_userdn of "cn=%u,ou=users,dc=kapott,dc=org" in dovecot-ldap.conf, but with this, user1 AND user2 could login (but I don't want user2 to be able to use dovecot). Because the LDAP system is used in a larger environment, it is NOT possible to re-arrange the users like this: cn=user1,ou=dovecot,ou=users,dc=kapott,dc=org cn=user2,ou=not_dovecot,ou=users,dc=kapott,dc=org So my question: are there any plans to support group-based LDAP authentication? For several other application, I have something like this: dn:cn=dovecot,ou=groups,dc=kapott,dc=org objectclass:groupOfNames member:cn=user1,ou=users,dc=kapott,dc=org So I can define groups of user accounts - one group per application. A nice solution for this in dovecot would be, if I could "mix" password lookup and authentication bind: First, a search query should be used to find a valid DN to bind as. In my case, the search query could look like this: base="ou=groups,dc=kapott.org" filter="(&(cn=dovecot)(member=cn=%u,ou=users,dc=kapott,dc=org))" result_attribute="member" After finding a DN this way (via attribute "member"), I want to use auth_bind to use this DN for password verification... Any hints how to solve this? Any plans to support this in the future? Thanks and regards -stefan-

4 7

[Dovecot] improved create dovecot certificate script
by Roger Oot 18 Feb '10

18 Feb '10

If anybody is interested, which they are probably not, here is an improved and more rigorous version of mkcert.sh #! /bin/sh #*****************************************************************************# #| #| file : /root/apps/share/sh/create_dovecot_certificate #| #*---------------------------------------------------------------------------*# BELL="\007" DOVECOT_DIR="${DOVECOT_DIR-/var/lib/dovecot}" OPENSSL="${OPENSSL-openssl}" OPENSSL_CONF="${OPENSSL_CONF-/etc/dovecot/dovecot-openssl.cnf}" #.............................................................................# certificates_dir="${DOVECOT_DIR}/certificates" echo="/bin/echo -e" error="${BELL}%ERROR -" #*---------------------------------------------------------------------------*# check_directory () { directory="${1}" #.............................................................................# if [ $ ! \( -d "${directory}" $ \) ] then mkdir -m 700 "${directory}" 2> /dev/null status=${?} if [ ${status} -ne 0 ] then ${echo} "${error} directory ${directory} cannot be created!" >&2 exit 2 fi chgrp dovecot "${directory}" fi #.............................................................................# return 0 } #*---------------------------------------------------------------------------*# check_executable () { executable="${1}" #.............................................................................# if [ $ ! \( -x "`which ${executable} 2> /dev/null`" $ \) ] then ${echo} "${error} executable ${executable} could not be found!" >&2 exit 1 fi #.............................................................................# return 0 } #*---------------------------------------------------------------------------*# check_exists () { file="${1}" description="${2}" #.............................................................................# if [ -e "${file}" ] then test "${description}" = "public certificate" && echo ${echo} \ "${error} ${description} file ${file} already exists!" >&2 test "${description}" = "public certificate" && \ show_certificate "${certificate}" exit 6 fi #.............................................................................# return 0 } #*---------------------------------------------------------------------------*# check_file () { file="${1}" description="${2}" #.............................................................................# if [ $ ! \( -e "${file}" $ \) ] then ${echo} "${error} ${description} file ${file} does not exist!" >&2 exit 3 fi if [ $ ! \( -f "${file}" $ \) ] then ${echo} "${error} ${description} ${file} is not a file!" >&2 exit 4 fi if [ $ ! \( -s "${file}" $ \) ] then ${echo} "${error} ${description} file ${file} is empty!" >&2 exit 5 fi #.............................................................................# return 0 } #*---------------------------------------------------------------------------*# create_certificate () { configuration="${1}" directory="${2}" #.............................................................................# name="`hostname -f | tr '[A-Z]' '[a-z]' | tr '.' '_'`-dovecot" certificate="${directory}/${name}.crt" check_exists "${certificate}" "public certificate" key="${directory}/${name}.pem" check_exists "${key}" "private key" #.............................................................................# ${echo} "\nCreating new X509 certificate\n\ with configuration ${configuration}\nfor ${name} ...\n" ${OPENSSL} req -new -x509 -nodes -config "${configuration}" \ -days 365 -out "${certificate}" -keyout "${key}" status=${?} if [ ${status} -ne 0 ] then ${echo} "${error} ${OPENSSL} failed with exit status ${status}!" >&2 exit 7 fi #.............................................................................# chmod 0400 "${key}" chmod 0444 "${certificate}" #.............................................................................# return 0 } #*---------------------------------------------------------------------------*# show_certificate () { certificate="${1}" #.............................................................................# echo ${OPENSSL} x509 -in "${certificate}" -noout -dates echo ${OPENSSL} x509 -in "${certificate}" -noout -serial echo ${OPENSSL} x509 -in "${certificate}" -noout -subject echo #.............................................................................# return 0 } #*---------------------------------------------------------------------------*# check_executable "${OPENSSL}" check_file "${OPENSSL_CONF}" "openssl configuration" check_directory "${DOVECOT_DIR}" check_directory "${certificates_dir}" create_certificate "${OPENSSL_CONF}" "${certificates_dir}" #.............................................................................# exit 0 #*****************************************************************************#

1 0

[Dovecot] dovecot-sieve and ldap user
by spamvoll＠googlemail.com 18 Feb '10

18 Feb '10

hi.. im running dovecor 1.2.10 and dovecot-sieve 0.1.15 protocol lda { .. mail_plugins = sieve } plugin { ... sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } cat .dovecot.sieve require "fileinto"; if header :contains "subject" ["VIRUS"] { fileinto "VIRUS"; } else { keep; } But mails dont get moved. I use the master.cf to get postfix to use deliver dovecot unix - n n - 10 pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -d ${recipient} dovecot -n # 1.2.10: /etc/dovecot.conf # OS: Linux 2.6.18-164.10.1.el5 i686 CentOS release 5.4 (Final) protocols: imaps ssl: required login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login first_valid_uid: 10000 last_valid_uid: 10000 first_valid_gid: 10000 last_valid_gid: 10000 mail_uid: vmail mail_gid: vmail lda: postmaster_address: postmaster(a)example.com mail_plugins: sieve auth_socket_path: /var/run/dovecot/auth-master auth default: passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: passwd userdb: driver: ldap args: /etc/dovecot-ldap.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve Does the sieve plugin use the home_dir returned from the ldap ? And is it ok to use the deliver in master.cf and or do i have to set mailbox_command = /usr/lib/dovecot/deliver ?

2 1

[Dovecot] Disabling Keywords
by Tony Rutherford 18 Feb '10

18 Feb '10

Is there a correct way to tell the client we don't want, and don't support Keywords via a configuration option? If there's no configuration option, would I override "allow_new_keywords" to just return FALSE? Thanks, Tony

2 3

[Dovecot] Courier->Dovecot Migration Issue
by Tony Rutherford 18 Feb '10

18 Feb '10

For testing purposes, on a small set of users, we've run the courier-dovecot-migrate.pl script. We are converting from Courier 0.43 to Dovecot 1.2.9. For the most part, things seem to be ok. However, an iPhone IMAP client user is reporting a problem where some of her messages don't show up. Even stranger is the fact that these same messages do appear when using Outlook 2k7 for instance. The common denominator for when the messages are missing seems to be whether or not the message appeared in both the Courier IMAP and Courier POP3 uid files. The missing messages appear in the CourierIMAP file, but NOT the Courier POP file. Here is a snippet from the resulting Dovecot-uidlist file: 3 V1141844265 N12392 9338 P00cf2eb6_fadc_4992_ad3a_57cc83a16eab W5146 :00cf2eb6_fadc_4992_ad3a_57cc83a16eab:2,S 9788 P0b18a2d6_97dd_4712_a09c_23c7a3d59467 W4055 :0b18a2d6_97dd_4712_a09c_23c7a3d59467:2,S 9942 P0b3cfd0b_1fc7_47b3_805f_b369a3bb6c65 W4359 :0b3cfd0b_1fc7_47b3_805f_b369a3bb6c65:2,S 10100 Pe178f1ed_d648_47e8_807a_3e2d655d7f84 W12028 :e178f1ed_d648_47e8_807a_3e2d655d7f84:2,S 10101 Pe3f28a53_a4d4_4f3d_babe_5df72bc35b47 W13974 :e3f28a53_a4d4_4f3d_babe_5df72bc35b47:2,S 10102 Pf3c3024b_2850_43ef_a397_d5cae5c8f537 W7177 :f3c3024b_2850_43ef_a397_d5cae5c8f537:2,S 10104 P6e808a68_0a7b_4528_aa67_4cc16361c56b W10817 :6e808a68_0a7b_4528_aa67_4cc16361c56b:2,S 10105 P65c8218d_7b2a_43b7_82a4_2743025bd954 W3579 :65c8218d_7b2a_43b7_82a4_2743025bd954:2,S 10106 P963cc43e_0355_481e_99d5_5468708bc28f W6410 :963cc43e_0355_481e_99d5_5468708bc28f:2,S 10107 P1405aefc_b98b_4a35_a7dd_a69199f724d0 W4703 :1405aefc_b98b_4a35_a7dd_a69199f724d0:2,S 10108 P67908fad_ec0a_4786_b0f1_c7cfaa23d09a W127288 :67908fad_ec0a_4786_b0f1_c7cfaa23d09a:2,S 10109 :9176f3b2_1927_4657_baa8_bfe4c39e89d4:2,S 10110 :79047185_aef7_48ec_aff2_6b71bd566acd:2,S 10111 :efe275a0_a7a8_4f47_b638_45a18bc0b108:2,S The last three entries exist in the Courier IMAP file, but NOT the Courier POP file. The resulting dovecot-uidlist format is different, but to be honest, I haven't been able to find the exact specification for the format of the dovecot-uidlist file (if it exists). What is really strange to me is: If there was a problem with the migration script and resulting dovecot-uidlist file, why would these messages show up fine in some client (ex. Outlook) and not others (ex. iPhone). Regards, Tony

2 6

[Dovecot] Virtual mailboxes show up twice
by Matthijs Kooijman 18 Feb '10

18 Feb '10

Hi all, I've been struggling a bit getting Hastymail webmail to work with my virtual mailboxes. After a while, I discovered that my virtual mailboxes are listed twice: Once with \NoSelect and once without. See the following (partial) LIST reponse: * LIST (\Noselect \HasChildren) "/" "virtual" * LIST (\Noselect \HasNoChildren) "/" "virtual/foo" ... * LIST (\HasNoChildren) "/" "virtual/foo" This makes somewhat sense, since my "virtual" namespace is a subdir of my default namespace: mail_location = Maildir:~/Mail:LAYOUT=fs # Default namespace, uses mail_location above namespace private { prefix = separator = / inbox = yes } # Virtual mailboxes namespace private { prefix = virtual/ separator = / # Store virtual mailbox in a "virtual" subdirectory. We use the fs layout, # so nesting of mailboxes is done using normal filesystem nesting. location = virtual:~/Mail/virtual:LAYOUT=fs } Now, should dovecot handle this configuration transparently by hiding the virtual directory from the default namespace, or is this configuration just not supported and should the virtual directory be outside of ~/Mail? The current wiki documentation on the virtual plugin currently does suggest this configuration, its examples point to ~/Maildir/virtual. Gr. Matthijs

2 1

[Dovecot] configuring overquota message
by Leonardo Rodrigues 18 Feb '10

18 Feb '10

From dovecot 1.2.10 sources i have: src/plugins/quota/quota.c #define DEFAULT_QUOTA_EXCEEDED_MSG \ "Quota exceeded (mailbox for user is full)" struct quota_settings *quota_settings_init(void) { [ .... ] quota_set->quota_exceeded_msg = getenv("QUOTA_EXCEEDED_MESSAGE"); if (quota_set->quota_exceeded_msg == NULL) quota_set->quota_exceeded_msg = DEFAULT_QUOTA_EXCEEDED_MSG; [ .... ] but i havent found, in all the sources, where the QUOTA_EXCEEDED_MESSAGE is feeded by something from dovecot.conf or anywhere else. question is: isnt it possible to configure the quota exceeded message from dovecot.conf ?? Do i really need to rebuild dovecot changing the message on quota.c for acchieving that ? -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

2 2

[Dovecot] Get some headers Variables
by Alex Baule 18 Feb '10

18 Feb '10

Hello Everyone again !! I'm putting more functions in my plugin, and would need to access a value of one variable that is going to put in the header, how can I get this value by dovecot? example, I have the header: X-ThereisMy: yes How can I get this value inside a plugin ? There is something like getHeaderVar("X-ThereisMy") ?

2 1

[Dovecot] How to configure Lazyexpunge plugin?
by CoolAtt NNA 18 Feb '10

18 Feb '10

Hi, I tried the plugin but it is not working. Am using virtual mailboxes. I added the following in dovecot.conf then restarted dovecot. Please guide me to the correct configuration. ############################## namespace private { prefix = separator = / inbox = yes } # namespace for lazy_expunge plugin: namespace private { prefix = .EXPUNGED/ separator = / location = maildir:~/Maildir/expunged } protocol imap { mail_plugins = lazy_expunge } plugin { lazy_expunge = .EXPUNGED/ }################################# _________________________________________________________________ Hotmail: Powerful Free email with security by Microsoft. https://signup.live.com/signup.aspx?id=60969

2 1

[Dovecot] 1.2 , mail_location & mbox_snarf
by Laurent Moineau 18 Feb '10

18 Feb '10

Hello, I'm currently running 1.1.20 and I'm planning to upgrade to 1.2.10 I've read carefully the wiki page "Upgrading Dovecot v1.1 to v1.2" and a few messages concerning mail_location parameter but I still don't know what to change in my configuration in order to keep it working after the upgrade. I'm using mbox format and mbox_snarf plugin. dovecot -n : protocols: imaps pop3 pop3s listen: * ssl_cert_file: /etc/pki/tls/certs/ipop3d.pem ssl_key_file: /etc/pki/tls/certs/ipop3d.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_privileged_group: mail mail_gid: 12 mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u mbox_lazy_writes: no mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): mbox_snarf mail_plugins(imap): mbox_snarf mail_plugins(pop3): mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 lda: postmaster_address: postmaster(a)example.com auth default: debug: yes passdb: driver: pam userdb: driver: passwd plugin: mbox_snarf: %h/mail/INBOX Any help would be appreciated. Thanx. Laurent Moineau

2 1