- dovecot - dovecot.org

[Dovecot] Vacation message with Sieve
by Rene Bakkum 02 Dec '09

02 Dec '09

Hello all, I am trying to get my vacation messages to work correctly. In general it works like how I want, and replies when a message is arived to for example info(a)domain.com, but I have some problems to get my vacation message to work on catch-all boxes. Is there an option to for example auto-reply on every mail that is sendto @domain.com? I am using Ubuntu 9.10 default packages, which are the following versions: dovecot -n # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.31-14-server x86_64 Ubuntu 9.10 ext4 mail_plugins = cmusieve My example file of the vacation message I use is: require ["vacation"]; vacation # Reply at most once a day to a same sender :days [vacationmessage_delay_days] :subject "Autorespond: [vacationmessage_subject]" # List of recipient addresses which are included in the auto replying. # If a mail's recipient is not on this list, no vacation reply is sent for it. :addresses ["[username]@[domain]"] "[vacationmessage_message]"; I tried changing [username]@[domain] into @[domain] or *@[domain], but that is giving me errors. Anyone has any pointers how to achieve this (if its possible at all)... Regards, Rene

10 24

[Dovecot] dovecot-1.2.8 imap crash (with backtrace)
by Ralf Hildebrandt 01 Dec '09

01 Dec '09

In the log: Dec 1 17:24:00 postamt dovecot: IMAP(scxxxxx): /home/s/c/scxxxxx/Maildir/dovecot-uidlist: Duplicate file entry at line 1: 1259679049.M329485P1617.postamt.charite.de,S=142073,W=143959:2,Sb (uid 3157 -> 3159) Dec 1 17:24:00 postamt dovecot: IMAP(scxxxxx): Panic: file maildir-uidlist.c: line 403 (maildir_uidlist_records_array_delete): assertion failed: (pos != NULL) Dec 1 17:24:00 postamt dovecot: IMAP(scxxxxx): Raw backtrace: imap [0x80f13d1] -> imap [0x80f1442] -> imap [0x80f0db9] -> imap [0x8088e76] -> imap(maildir_uidlist_refresh+0x9e9) [0x8089e99] -> imap [0x80865d4] -> imap(maildir_storage_sync_init+0x125) [0x8086ab5] -> imap(imap_sync_init+0x54) [0x8070304] -> imap [0x8062aa2] -> imap [0x80a604c] -> imap(io_loop_handle_timeouts+0xe9) [0x80f96f9] -> imap(io_loop_handler_run+0x82) [0x80f9fc2] -> imap(io_loop_run+0x20) [0x80f9490] -> imap(main+0x5d2) [0x8070e22] -> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe5) [0xb7f17b35] -> imap [0x80602d1] The backtrace: GNU gdb (GDB) 7.0-debian Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/local/libexec/dovecot/imap...done. Reading symbols from /lib/i686/cmov/libdl.so.2...Reading symbols from /usr/lib/debug/lib/i686/cmov/libdl-2.10.1.so...done. (no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libdl.so.2 Reading symbols from /lib/i686/cmov/librt.so.1...Reading symbols from /usr/lib/debug/lib/i686/cmov/librt-2.10.1.so...done. (no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/librt.so.1 Reading symbols from /lib/i686/cmov/libc.so.6...Reading symbols from /usr/lib/debug/lib/i686/cmov/libc-2.10.1.so...done. (no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libc.so.6 Reading symbols from /lib/ld-linux.so.2...Reading symbols from /usr/lib/debug/lib/ld-2.10.1.so...done. (no debugging symbols found)...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /lib/i686/cmov/libpthread.so.0...Reading symbols from /usr/lib/debug/lib/i686/cmov/libpthread-2.10.1.so...done. (no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libpthread.so.0 Reading symbols from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_trash_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_trash_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_autocreate_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_autocreate_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_fts_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_fts_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_zlib_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_zlib_plugin.so Reading symbols from /usr/lib/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libz.so.1 Reading symbols from /lib/libbz2.so.1.0...(no debugging symbols found)...done. Loaded symbols for /lib/libbz2.so.1.0 Reading symbols from /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so Reading symbols from /lib/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/libgcc_s.so.1 Core was generated by `imap [scxxxxx 88.73.137.113]'. Program terminated with signal 6, Aborted. #0 0xb8064424 in __kernel_vsyscall () #0 0xb8064424 in __kernel_vsyscall () No symbol table info available. #1 0xb7f2b8c0 in *__GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 resultvar = <value optimized out> pid = -1207676940 selftid = 7704 #2 0xb7f2edf5 in *__GI_abort () at abort.c:88 act = {__sigaction_handler = {sa_handler = 0x8723738, sa_sigaction = 0x8723738}, sa_mask = {__val = {3216510312, 135196426, 3087288032, 0, 3216510432, 3216510420, 128, 0, 0, 3216510496, 3087541872, 134566866, 549, 0, 0, 0, 1, 135269694, 128, 1, 3216510420, 141702936, 69, 3216510548, 3216510392, 135198022, 141703517, 3216510420, 3216510424, 550, 141702968, 3086750483}}, sa_flags = 550, sa_restorer = 0x8106b49 <write_full+57>} sigs = {__val = {32, 0 <repeats 31 times>}} #3 0x080f13e5 in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:160 backtrace = 0x8723308 "imap [0x80f13d1] -> imap [0x80f1442] -> imap [0x80f0db9] -> imap [0x8088e76] -> imap(maildir_uidlist_refresh+0x9e9) [0x8089e99] -> imap [0x80865d4] -> imap(maildir_storage_sync_init+0x125) [0x8086ab5]"... #4 0x080f1442 in i_internal_fatal_handler (type=LOG_TYPE_PANIC, status=0, fmt=0x8109b8c "file %s: line %d (%s): assertion failed: (%s)", args=0xbfb80eb4 "\232\352\020\b\223\001") at failures.c:443 No locals. #5 0x080f0db9 in i_panic ( format=0x8109b8c "file %s: line %d (%s): assertion failed: (%s)") at failures.c:207 No locals. #6 0x08088e76 in maildir_uidlist_records_array_delete (uidlist=0x8739cd8, rec=0x8758228) at maildir-uidlist.c:403 recs = 0x8757428 __PRETTY_FUNCTION__ = "maildir_uidlist_records_array_delete" #7 0x08089e99 in maildir_uidlist_next (uidlist=0x8739cd8) at maildir-uidlist.c:544 rec = 0x8758308 uid = 3159 #8 maildir_uidlist_update_read (uidlist=0x8739cd8) at maildir-uidlist.c:741 storage = 0x872d4b8 orig_uid_validity = 1214127123 fd = 10 orig_next_uid = 3159 input = 0x8757f20 st = {st_dev = 65024, __pad1 = 0, __st_ino = 7668251, st_mode = 33152, st_nlink = 1, st_uid = 58166, st_gid = 100, st_rdev = 0, __pad2 = 0, st_size = 10622, st_blksize = 4096, st_blocks = 24, st_atim = { tv_sec = 1259684618, tv_nsec = 893433866}, st_mtim = { tv_sec = 1259684639, tv_nsec = 641099786}, st_ctim = { tv_sec = 1259684639, tv_nsec = 641099786}, st_ino = 7668251} last_read_offset = 10550 #9 maildir_uidlist_refresh (uidlist=0x8739cd8) at maildir-uidlist.c:889 i = 0 retry = <value optimized out> ret = <value optimized out> #10 0x080865d4 in have_recent_messages (ctx=0x8723240, forced=false, find_uid=0x0, lost_files_r=0xbfb8106b) at maildir-sync.c:659 hdr = <value optimized out> #11 maildir_sync_get_changes (ctx=0x8723240, forced=false, find_uid=0x0, lost_files_r=0xbfb8106b) at maildir-sync.c:679 flags = <value optimized out> #12 maildir_sync_context (ctx=0x8723240, forced=false, find_uid=0x0, lost_files_r=0xbfb8106b) at maildir-sync.c:714 sync_flags = <value optimized out> flags = 135324992 new_changed = <value optimized out> cur_changed = <value optimized out> lock_failure = <value optimized out> fname = 0x8733030 "/home/s/c/scxxxxx/Maildir" ret = <value optimized out> __PRETTY_FUNCTION__ = "maildir_sync_context" #13 0x08086ab5 in maildir_storage_sync_init (box=0x8732e98, flags=0) at maildir-sync.c:924 _data_stack_cur_id = 4 ctx = 0x8723240 lost_files = <value optimized out> ret = 0 __PRETTY_FUNCTION__ = "maildir_storage_sync_init" #14 0x08070304 in imap_sync_init (client=0x872dba0, box=0x8732e98, imap_flags=0, flags=0) at imap-sync.c:146 ctx = 0x8762138 __PRETTY_FUNCTION__ = "imap_sync_init" #15 0x08062aa2 in idle_sync_now (box=<value optimized out>, ctx=0x872deb8) at cmd-idle.c:127 __PRETTY_FUNCTION__ = "idle_sync_now" #16 0x080a604c in notify_delay_callback (ibox=0x8732e98) at index-mailbox-check.c:49 No locals. #17 0x080f96f9 in io_loop_handle_timeouts_real (ioloop=0x872b9b0) at ioloop.c:313 item = 0x8764e78 tv = {tv_sec = 0, tv_usec = 0} tv_call = {tv_sec = 1259684640, tv_usec = 146065} t_id = 3 #18 io_loop_handle_timeouts (ioloop=0x872b9b0) at ioloop.c:324 _data_stack_cur_id = 2 #19 0x080f9fc2 in io_loop_handler_run (ioloop=0x872b9b0) at ioloop-epoll.c:180 ctx = 0x872bab8 event = <value optimized out> list = <value optimized out> io = <value optimized out> tv = {tv_sec = 0, tv_usec = 3024} t_id = <value optimized out> msecs = 4 ret = 0 i = <value optimized out> j = <value optimized out> call = <value optimized out> #20 0x080f9490 in io_loop_run (ioloop=0x872b9b0) at ioloop.c:335 No locals. #21 0x08070e22 in main (argc=) at main.c:327 No locals. $1 = {prev = 0x0, next = 0x0, client = 0x872dba0, pool = 0x872de18, tag = 0x872dea8 "22.4", name = 0x872deb0 "IDLE", args = 0x0, cmd_flags = 10, func = 0x80628b0 <cmd_idle_continue>, context = 0x872deb8, module_contexts = {arr = {buffer = 0x872de70, element_size = 4}, v = 0x872de70, v_modifiable = 0x872de70}, parser = 0x8730620, state = CLIENT_COMMAND_STATE_WAIT_INPUT, sync = 0x0, uid = 0, cancel = 0, param_error = 0, search_save_result = 0, temp_executed = 0} (gdb) quit -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

1 0

[Dovecot] Can't start dovecot from heartbeat
by John Gray 01 Dec '09

01 Dec '09

I get the following error: Fatal: epoll_create(): Too many open files (you may need to increase /proc/sys/fs/epoll/max_user_instances) Works fine if I start it by hand, I'm guessing it has to due with the environment heart starts it in? My first thought was to do exactly what the message suggests, but my kernel doesn't appear to define max_user_instances, but there is a max_user_watches. I'm running 1.2.8, by the way. But I had a similar problem with earlier version too. John

2 2

[Dovecot] Managesieve RC with dovecot 1.2.8 from atrpm
by Oli Schacher 01 Dec '09

01 Dec '09

Hi list I'm trying to get managesieve running (which seem to include the managesieve patches) on centos5, but compilation fails. What I did: mkdir /work cd /work wget http://dl.atrpms.net/all/dovecot-devel-1.2.8-0_103.el5.x86_64.rpm wget http://dl.atrpms.net/all/dovecot-1.2.8-0_103.el5.x86_64.rpm wget http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.14pre.tar.gz wget http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.10pre.tar.… rpm -ivh dovecot-*.rpm tar -xzf dovecot-1.2-sieve-0.1.14pre.tar.gz cd dovecot-1.2-sieve-0.1.13/ ./configure --with-dovecot=/usr/lib64/dovecot/ make && make install cd /work tar -xf dovecot-1.2-managesieve-0.11.10pre.tar.gz cd dovecot-1.2-managesieve-0.11.9/ ./configure --with-dovecot=/usr/lib64/dovecot/ --with-dovecot-sieve=/work/dovecot-1.2-sieve-0.1.13/ (no errors so far) make [...] gcc -DHAVE_CONFIG_H -I. -I../.. -I/usr/include/dovecot -I/usr/include/dovecot/src/lib -I/usr/include/dovecot/src/lib-dict -I/usr/include/dovecot/src/lib-mail -I/usr/include/dovecot/src/lib-auth -I/usr/include/dovecot/src/lib-index -I/usr/include/dovecot/src/lib-storage -DMODULEDIR=\""/usr/lib64/dovecot"\" -I../../src/lib-managesieve -I../../src/lib-sievestorage -I/work/dovecot-1.2-sieve-0.1.13 -I/work/dovecot-1.2-sieve-0.1.13/src/lib-sieve -std=gnu99 -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wstrict-aliasing=2 -I/usr/kerberos/include -MT main.o -MD -MP -MF .deps/main.Tpo -c -o main.o main.c mv -f .deps/main.Tpo .deps/main.Po make[3]: *** No rule to make target `/usr/include/dovecot/src/lib-storage/libstorage.a', needed by `managesieve'. Stop. make[3]: Leaving directory `/work/dovecot-1.2-managesieve-0.11.9/src/managesieve' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/work/dovecot-1.2-managesieve-0.11.9/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/work/dovecot-1.2-managesieve-0.11.9' make: *** [all] Error 2 Did I pass a wrong argument to configure like in my last post or is this a different problem? Thanks in advance Oli

1 0

[Dovecot] Problem with dovecot configuration + mysql (I think)
by Joss Red 01 Dec '09

01 Dec '09

Hi everybody, I have a problem after configuring dovecot to work with mysql (Debian Etch System). When i send an email from outside, i have an undelivred mail returned to sender saying : Relay access denied (in reply to RCPT TO command) In my dovecot log file i have these errors : --------------------- Nov 28 20:08:27 myhost postfix/smtpd[5087]: connect from smtp5-g21.toto.com [1.2.3.4] Nov 28 20:08:27 myhost postfix/smtpd[5087]: NOQUEUE: reject: RCPT from smtp5-g21.toto.com [1.2.3.4]: 554 5.7.1 <mymail(a)test.com>: Relay access denied; from=<outside-mail(a)toto.com> to=<mymail(a)test.com> proto=ESMTP helo=<smtp5-g21.toto.com> Nov 28 20:08:28 myhost postfix/smtpd[5087]: disconnect from smtp5-g21.toto.com [1.2.3.4] ---------------------- What do you think is the problem ? Thanks,

3 4

[Dovecot] Postfix issue but I want to fix it here...
by david＠davidwbrown.name 01 Dec '09

01 Dec '09

Hello, Dovecot bunch and Timo. I am using Sylpheed as my Dovecot/IMAP client. At home behind my LAN Sylpheed can send email because the Postfix SMTPd views my LAN as a trusted network. No such luck when I'm away from home. I know it has something to do with configuring the relay access elements but what I have tried so far does not work. I'm sure someone has had this simple issue previously. The error condition and other particulars follow: OS: CentOS, Windows XP SMTPd: Postfix 2.3.3 IMAP: Dovecot 1.2 Mail client: Sylpheed 2.7.1 Error condition: Error occurred while sending the message: 554 5.7.1 <messages-noreply(a)linkedin.com>: Relay access denied

4 3

[Dovecot] Dovecot SSL limitations
by Thomas Hummel 01 Dec '09

01 Dec '09

Hello Timo, I'd like to check if my understanding of dovecot-1.2.x's SSL certificate handling is correct : SSL does not provide the server any mechanism to choose which certificate it must send relatively to the name the client is using. Thus, if you want to use different certificates, you have to listen to different addresses. This is an SSL limitation, not a dovecot nor IMAP limitation. This is the reason why it's possible to use different certificates for IMAP and POP3. But it seems to work only with those two : As a matter of fact, even if you listen to different addresses, how would you tell dovecot to send this certificate for this address and that certificate for that address, since there is no IP dependent section (as in apache IP-based virtual host for instance) ? It seems the only way would be to have more than one instance of dovecot (several dovecot with different config files). The problem is that some clients may be configured with mail.my.domain, some others with imap.my.domain, ...etc... Hence the need to have different certificates with those different names as cn. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

4 5

Re: [Dovecot] Dovecot 1.2.x masteruser proxy problem
by Tom Mihalicek 30 Nov '09

30 Nov '09

The problem was in auth_bind=yes in dovecot-ldap.conf i didnt read thoroughly the http://wiki.dovecot.org/Authentication/MasterUsers?action=show&redirect=Mas… You should also add the pass=yes setting to the master passdb if possible. It means that Dovecot verifies that the login user really exists before allowing the master user to log in. Without the setting if a non-existing login username is given, depending on the configuration, it could either return an internal login error (the userdb lookup failed) or create a whole new user (with eg. static userdb). pass=yes doesn't work with PAM or LDAP with auth_bind=yes, because both of them require knowing the user's password. Tom Mihalicek wrote: > > Greetings to all > > I need a masteruser/proxy account for some applications to be implemented > and i am having some problems. Normal users are proxyied through > ldap queries to the remote machine and this is working like it sopose to, > but i can't make the master user to work. Below are both the dovecot.conf > and dovecot-ldap.conf and verbose logs on the proxy machine. > > If i log directly on the remote machine that should be proxied everything > is working normal ... > > ### dovecot.conf > > protocols = pop3 imap managesieve > > mail_uid = 10021 > mail_gid = 10021 > mail_privileged_group = vmail > mail_access_groups = vmail > > log_path = > info_log_path = > log_timestamp = "%b %d %H:%M:%S " > login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c > login_log_format = %$: %s > mail_log_prefix = "%Us(%u): " > > disable_plaintext_auth = no > login_process_per_connection=yes > auth_default_realm = example.com > login_processes_count = 8 > login_max_processes_count = 128 > login_max_connections = 256 > verbose_proctitle = yes > max_mail_processes = 512 > > mail_debug = yes > auth_verbose = yes > auth_debug = yes > auth_debug_passwords = yes > > auth_master_user_separator = * > login_chroot = yes > > ssl = no > protocol imap { > imap_client_workarounds = delay-newmail outlook-idle netscape-eoh > tb-extra-mailbox-sep > listen = xx.xx.xx.xx:143 > imap_max_line_length = 65536 > imap_logout_format = bytes=%i/%o > mail_max_userip_connections = 10 > } > > protocol pop3 { > pop3_uidl_format = %08Xu%08Xv > pop3_client_workarounds = outlook-no-nuls oe-ns-eoh > pop3_enable_last = yes > pop3_uidl_format = %08Xu%08Xv > listen = xx.xx.xx.xx:110 > mail_max_userip_connections = 10 > } > > protocol managesieve { > listen = xx.xx.xx.xx:2000 > login_executable = > /usr/local/dovecot/libexec/dovecot/managesieve-login > mail_executable = /usr/local/dovecot/libexec/dovecot/managesieve > managesieve_max_line_length = 65536 > managesieve_implementation_string = dovecot > managesieve_logout_format = bytes ( in=%i : out=%o ) > } > > auth default { > mechanisms = plain login > user = vmail > > passdb passwd-file { > args = /etc/dovecot/passwd.masterusers > master = yes > pass = yes > } > > passdb ldap { > args = /etc/dovecot/dovecot-ldap.conf > } > > userdb ldap { > args = /etc/dovecot/dovecot-ldap.conf > } > > socket listen { > master { > path = /var/run/dovecot/auth-master > mode = 0600 > user = vmail > group = vmail > } > client { > path = /var/spool/postfix/dovecot-auth > mode = 0660 > user = postfix > group = postfix > } > } > } > > ### dovecot-ldap.conf > > hosts = ldap.example.com > ldap_version = 3 > auth_bind = yes > dn = cn=vmail,dc=example,dc=com > dnpass = secret_pass > base = ou=Users,domainName=%d,o=domains,dc=example,dc=com > scope = subtree > deref = never > user_filter = > (&(mail=%u)(objectClass=mailUser)(accountStatus=active)(enabledService=mail)(enabledService=%Ls)) > user_attrs = > storageBaseDirectory=home,mailHost=host,=proxy=yes,=nologin=yes,=nodelay=yes > pass_filter = > (&(mail=%u)(objectClass=mailUser)(accountStatus=active)(enabledService=mail)(enabledService=%Ls)) > pass_attrs = > userPassword=password,mailHost=host,=proxy=yes,=nologin=yes,=nodelay=yes > default_pass_scheme = CRYPT > > ### /var/log/mail/dovecot.info > > Nov 30 14:26:59 dougie dovecot: auth(default): new auth connection: > pid=5873 > Nov 30 14:27:28 dougie dovecot: auth(default): client in: AUTH 1 PLAIN > service=pop3 lip=xx.xx.xx.xx rip=192.168.22.222 > lport=110 rport=36639 > resp=AHRtaWhhbGljZWtAeG5ldC5sYW4qbWlncmF0aW9uQHhuZXQuaHIAbTFncjR0MTBu > Nov 30 14:27:28 dougie dovecot: auth(default): > passwd-file(migration(a)example.com,192.168.22.222,master): lookup: > user=master_user(a)example.com > file=/etc/dovecot/passwd.masterusers > Nov 30 14:27:28 dougie dovecot: auth(default): > passdb(master_user(a)example.com,192.168.22.222,master): Master user logging > in as some_user(a)example.com > Nov 30 14:27:28 dougie dovecot: auth(default): > ldap(some_user(a)example.com,192.168.22.222): bind search: > base=ou=Users,domainName=example.com,o=domains,dc=example,dc=com > filter=(&(mail=some_user@example.com)(objectClass=mailUser)(accountStatus=active)(enabledService=mail)(enabledService=pop3)) > Nov 30 14:27:28 dougie dovecot: auth(default): > ldap(some_user(a)example.com,192.168.22.222): result: > mailHost(host)=xx.xx.xx.xx > Nov 30 14:27:28 dougie dovecot: auth(default): > ldap(some_user(a)example.com,192.168.22.222): invalid credentials (given > password: master_password) > Nov 30 14:27:28 dougie dovecot: auth(default): client out: FAIL 1 > user=some_user(a)example.com authz nodelay host=xx.xx.xx.xx > proxynologin pass=master_password master=master_user(a)example.com > Nov 30 14:27:28 dougie dovecot: pop3-login: Ignoring unknown passdb extra > field: authz > > > -- View this message in context: http://old.nabble.com/Dovecot-1.2.x-masteruser-proxy-problem-tp26574804p265… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] Dovecot 1.2.x masteruser proxy problem
by Tom Mihalicek 30 Nov '09

30 Nov '09

Greetings to all I need a masteruser/proxy account for some applications to be implemented and i am having some problems. Normal users are proxyied through ldap queries to the remote machine and this is working like it sopose to, but i can't make the master user to work. Below are both the dovecot.conf and dovecot-ldap.conf and verbose logs on the proxy machine. If i log directly on the remote machine that should be proxied everything is working normal ... ### dovecot.conf protocols = pop3 imap managesieve mail_uid = 10021 mail_gid = 10021 mail_privileged_group = vmail mail_access_groups = vmail log_path = info_log_path = log_timestamp = "%b %d %H:%M:%S " login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c login_log_format = %$: %s mail_log_prefix = "%Us(%u): " disable_plaintext_auth = no login_process_per_connection=yes auth_default_realm = example.com login_processes_count = 8 login_max_processes_count = 128 login_max_connections = 256 verbose_proctitle = yes max_mail_processes = 512 mail_debug = yes auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * login_chroot = yes ssl = no protocol imap { imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep listen = xx.xx.xx.xx:143 imap_max_line_length = 65536 imap_logout_format = bytes=%i/%o mail_max_userip_connections = 10 } protocol pop3 { pop3_uidl_format = %08Xu%08Xv pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes pop3_uidl_format = %08Xu%08Xv listen = xx.xx.xx.xx:110 mail_max_userip_connections = 10 } protocol managesieve { listen = xx.xx.xx.xx:2000 login_executable = /usr/local/dovecot/libexec/dovecot/managesieve-login mail_executable = /usr/local/dovecot/libexec/dovecot/managesieve managesieve_max_line_length = 65536 managesieve_implementation_string = dovecot managesieve_logout_format = bytes ( in=%i : out=%o ) } auth default { mechanisms = plain login user = vmail passdb passwd-file { args = /etc/dovecot/passwd.masterusers master = yes pass = yes } passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail group = vmail } client { path = /var/spool/postfix/dovecot-auth mode = 0660 user = postfix group = postfix } } } ### dovecot-ldap.conf hosts = ldap.example.com ldap_version = 3 auth_bind = yes dn = cn=vmail,dc=example,dc=com dnpass = secret_pass base = ou=Users,domainName=%d,o=domains,dc=example,dc=com scope = subtree deref = never user_filter = (&(mail=%u)(objectClass=mailUser)(accountStatus=active)(enabledService=mail)(enabledService=%Ls)) user_attrs = storageBaseDirectory=home,mailHost=host,=proxy=yes,=nologin=yes,=nodelay=yes pass_filter = (&(mail=%u)(objectClass=mailUser)(accountStatus=active)(enabledService=mail)(enabledService=%Ls)) pass_attrs = userPassword=password,mailHost=host,=proxy=yes,=nologin=yes,=nodelay=yes default_pass_scheme = CRYPT ### /var/log/mail/dovecot.info Nov 30 14:26:59 dougie dovecot: auth(default): new auth connection: pid=5873 Nov 30 14:27:28 dougie dovecot: auth(default): client in: AUTH 1 PLAIN service=pop3 lip=xx.xx.xx.xx rip=192.168.22.222 lport=110 rport=36639 resp=AHRtaWhhbGljZWtAeG5ldC5sYW4qbWlncmF0aW9uQHhuZXQuaHIAbTFncjR0MTBu Nov 30 14:27:28 dougie dovecot: auth(default): passwd-file(migration(a)example.com,192.168.22.222,master): lookup: user=master_user(a)example.com file=/etc/dovecot/passwd.masterusers Nov 30 14:27:28 dougie dovecot: auth(default): passdb(master_user(a)example.com,192.168.22.222,master): Master user logging in as some_user(a)example.com Nov 30 14:27:28 dougie dovecot: auth(default): ldap(some_user(a)example.com,192.168.22.222): bind search: base=ou=Users,domainName=example.com,o=domains,dc=example,dc=com filter=(&(mail=some_user@example.com)(objectClass=mailUser)(accountStatus=active)(enabledService=mail)(enabledService=pop3)) Nov 30 14:27:28 dougie dovecot: auth(default): ldap(some_user(a)example.com,192.168.22.222): result: mailHost(host)=xx.xx.xx.xx Nov 30 14:27:28 dougie dovecot: auth(default): ldap(some_user(a)example.com,192.168.22.222): invalid credentials (given password: master_password) Nov 30 14:27:28 dougie dovecot: auth(default): client out: FAIL 1 user=some_user(a)example.com authz nodelay host=xx.xx.xx.xx proxynologin pass=master_password master=master_user(a)example.com Nov 30 14:27:28 dougie dovecot: pop3-login: Ignoring unknown passdb extra field: authz -- View this message in context: http://old.nabble.com/Dovecot-1.2.x-masteruser-proxy-problem-tp26574804p265… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] /var/run/dovecot mode 750 too tight
by Frank Cusack 30 Nov '09

30 Nov '09

dovecot-1.2.8 creates /var/run/dovecot mode 750. I run postfix+dovecot in a virtual user setup. Postfix calls deliver as user vmail group vmail. Nov 29 12:53:04 imap.invalid dovecot: [ID 583609 mail.error] deliver(frank): userdb lookup: connect(/var/run/dovecot/auth-master) failed: Permission denied (euid=500(vmail) egid=500(vmail) missing +x perm: /var/run/dovecot) I will say this: dovecot's error reporting in general is head and shoulders above the norm. Makes tracking down problems sooo much easier. Something else I noticed, should the dict-server socket really be mode 777? At least a-x I would think. -frank

3 6