- dovecot - dovecot.org

[Dovecot] Dovecot 1.0.14 + osx 10.6 and authentication PAM
by Maarten Koster 30 Aug '09

30 Aug '09

Howdy, Today I installed the new version of Apple OSX 10.6. Besides that it deleted the dovecot user, things went quite smooth. As far as I can tell it is running as it used to. However, I can't login to my account. It used to work fine with PAM taking the username and password from my osx installation. Now it doesn't allow me to login anymore. I have read on a website that apple changed from Linux-Pam to Open-Pam. If this is true, how would I need to change the PAM entry file? Right now it is as follows: /etc/pam.d/dovecot: # dovecot: auth account password session auth required pam_nologin.so auth sufficient pam_securityserver.so auth sufficient pam_unix.so auth required pam_deny.so account required pam_permit.so password required pam_deny.so session required pam_uwtmp.so Here is a list with all dovecot processes Maarten-2:sbin maarten$ ps auxw|grep "dovecot\|imap\|pop3" maarten 249 1,1 0,0 2435032 528 s000 S+ 3:21pm 0:00.00 grep dovecot\|imap\|pop3 dovecot 218 0,0 0,0 602248 660 ?? S 3:06pm 0:00.08 imap-login root 215 0,0 0,0 601144 636 ?? S 3:06pm 0:00.08 dovecot-auth root 214 0,0 0,0 599940 356 ?? Ss 3:06pm 0:00.11 ./dovecot dovecot 238 0,0 0,0 602248 660 ?? S 3:17pm 0:00.03 imap-login dovecot 221 0,0 0,0 602248 660 ?? S 3:06pm 0:00.08 imap-login and here is my Dovecot configuration: # 1.0.14: /opt/etc/dovecot.conf Warning: mail_extra_groups setting was often used insecurely so it is now deprecated, use mail_access_groups or mail_privileged_group instead base_dir: /var/run/dovecot/ protocols: imap ssl_disable: yes login_dir: /var/run/dovecot//login login_executable: /opt/libexec/dovecot/imap-login mail_extra_groups: mail mail_access_groups: mail default_mail_env: maildir:~/Maildir mail_location: maildir:~/Maildir auth default: passdb: driver: pam userdb: driver: passwd Thanks in advance, Maarten

2 1

[Dovecot] Lazy expunge? URGENT
by Erik Janson 29 Aug '09

29 Aug '09

I have configured Dovecot namespace alike Courier has: mail_location = maildir:~/.Maildir namespace private { separator = . prefix = INBOX. inbox = yes } Question: How should I configure lazy expunge for it? br, erik

2 1

[Dovecot] PAM Authentication with OSX Snow Leopard
by Nicola Tiling 29 Aug '09

29 Aug '09

Hi Apple changed from Linux PAM to OpenPAM and the dovecot pam file (dovecot installed from macports) doesn't work anymore. Installed pam modules are: -r--r--r-- 1 root wheel 76640 31 Jul 09:15 pam_env.so.2 -r--r--r-- 1 root wheel 51024 31 Jul 09:15 pam_group.so.2 -r--r--r-- 1 root wheel 99776 31 Jul 09:15 pam_krb5.so.2 -r--r--r-- 1 root wheel 51552 31 Jul 09:15 pam_launchd.so.2 -r--r--r-- 1 root wheel 68800 31 Jul 09:15 pam_mount.so.2 -r--r--r-- 1 root wheel 50896 31 Jul 09:15 pam_nologin.so.2 -r--r--r-- 1 root wheel 64272 31 Jul 09:15 pam_opendirectory.so.2 -r--r--r-- 1 root wheel 51008 31 Jul 09:15 pam_sacl.so.2 -r--r--r-- 1 root wheel 50608 31 Jul 09:15 pam_self.so.2 -r--r--r-- 1 root wheel 60448 31 Jul 09:15 pam_serialnumber.so.2 -r--r--r-- 1 root wheel 50880 31 Jul 09:15 pam_uwtmp.so.2 Does anyone know to get dovecot with this modules work? Nicola

1 1

[Dovecot] Quota question.
by Tom Diehl 29 Aug '09

29 Aug '09

Hi, I am trying to get quota working properly on dovecot 1.2.3 with postfix admin, amavisd-new, mysql, and postfix. So far I can see the db getting updated when messages are added and deleted from the mailbox. The problem I am having is that I have imported a bunch of messages from the old mail server that was running uw-imap and mbox to the doevcot machine using maildir++. As a result the quotas used only reflects what has been added and deleted since the import was done. What is the proper way to get the quota in the database to reflect what is actually in the users mailbox? Google and the wiki have not been helpful to me in figuring this out. I do not really think this is a config problem but in case it is below is the output of dovecot-n: (vfoggy pts7) # dovecot -n # 1.2.3: /etc/dovecot.conf # OS: Linux 2.6.18-128.4.1.el5xen x86_64 CentOS release 5.3 (Final) protocols: imap imaps pop3 pop3sa managesieve listen: * login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login first_valid_uid: 512 last_valid_uid: 512 first_valid_gid: 512 last_valid_gid: 512 mail_location: maildir:~/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugins(default): quota mail_plugins(imap): quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 mail_plugin_dir(managesieve): /usr/lib64/dovecot/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): lda: postmaster_address: postmaster(a)tntechs.com mail_plugins: sieve quota auth default: mechanisms: plain login user: nobody worker_max_count: 50 passdb: driver: sql args: /etc/dovecot/sql.conf userdb: driver: static args: uid=512 gid=512 home=/var/spool/vmail/domains/%d/%n userdb: driver: sql args: /etc/dovecot/sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: vmail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail plugin: quota: dict:user::proxy::quotadict sieve: ~/.dovecot.sieve sieve_storage: ~/sieve acl: vfile:/etc/dovecot/acls trash: /etc/dovecot/trash.conf dict: quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf (vfoggy pts7) # In addition below is what I have in dovecot-dict-quota.conf: map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } -- Regards, Tom Diehl tdiehl(a)rogueind.com Spamtrap address mtd123(a)rogueind.com

3 11

[Dovecot] GSSAPI Authentication Broke with Dovecot 1.1.16 -> 1.2.4 Upgrade
by John Marshall 29 Aug '09

29 Aug '09

This morning I upgraded a dovecot installation from 1.1.16 to 1.2.4 on a FreeBSD 7.2 server, and then spent 3 hours trying to figure out why GSSAPI authentication had broken. It turned out to be a recent change in Dovecot's mech-gssapi.c to do with checking for NULs in usernames: everything worked fine when I disabled that test. <http://hg.dovecot.org/dovecot-1.2/rev/5d53b1d66d1b> This is what I was seeing in the log file with auth_debug enabled: ------------------------ auth(default): client in: AUTH 1 GSSAPI service=imap secured lip=192.0.2.36 rip=192.0.2.168 lport=143 rport=51168 auth(default): gssapi(?,192.0.2.168): Obtaining credentials for imap(a)mail1.example.com auth(default): client out: CONT 1 auth(default): client in: CONT<hidden> auth(default): gssapi(john(a)EXAMPLE.COM,192.0.2.168): security context state completed. auth(default): client out: CONT 1 YGwGCSqGSIb3EgECAgIAb10wW6ADAgEFoQMCAQ+iTzBNoAMCARCiRgREIuGJR3fqiMdvWjEg6utI7bt3fZuI8Ulk4LoFu59aMgnX+Kivdohxin2A71UCEC7oG0sVYe7vrTjg2N9s27D1BLRuJbQ= auth(default): client in: CONT<hidden> auth(default): gssapi(john(a)EXAMPLE.COM,192.0.2.168): Negotiated security layer auth(default): client out: CONT 1 YD8GCSqGSIb3EgECAgIBBAD/////MINNkeu5LVS8fiZNSnb8j8iKBuHArr/sHec++VYV+9SSc+RkAf///wQEBAQ= auth(default): client in: CONT<hidden> auth(default): gssapi(john(a)EXAMPLE.COM,192.0.2.168): authz_name has NULs auth(default): client out: FAIL 1 user=john(a)EXAMPLE.COM imap-login: Disconnected (auth failed, 1 attempts): user=<john(a)EXAMPLE.COM>, method=GSSAPI, rip=192.0.2.168, lip=192.0.2.36, TLS: Disconnected ------------------------ I commented out the 'return -1;' at the end of the if(data_has_nuls) block (to preserve the log message but fall through), rebuilt, and everything works again. ------------------------ auth(default): gssapi(john(a)EXAMPLE.COM,192.0.2.168): authz_name has NULs auth(default): client out: OK 1 user=john(a)EXAMPLE.COM ------------------------ I tried building dovecot 1.2.4 with Heimdal 0.6.3, 1.0.1 and 1.2.1 and all gave the same result. Is it possible that the data_has_nuls test doesn't work as intended or that it only works with MIT Kerberos? Thank you. -- John Marshall

2 4

[Dovecot] [Fwd: Re: Question about ACL/flags]
by Timo Sirainen 28 Aug '09

28 Aug '09

Your To: field was interesting.. Shouldn't mailman have changed it? Oh well.

1 0

[Dovecot] ACL in public folders
by Keith Edmunds 28 Aug '09

28 Aug '09

# dovecot --version 1.2.1 I'm trying to configure ACLs for public folders. I have: -------------------------------------------------------------------------------- namespace public { separator = / prefix = shared2/ location = maildir:/home/pubfolders2:INDEX=~/Maildir/public2 subscriptions = no list = children } protocol imap { mail_plugins = acl } plugin { acl = vfile } -------------------------------------------------------------------------------- I have /home/pubfolders2/dovecot-acl containing: user=xyz lrwstiekxa I've also hardlinked the file to /home/pubfolders2/.info (one of the public folders: that dir contains cur,tmp,new). Since enabling ACLs in dovecot.conf, none of the users see the 'shared2' namespace. I've clearly misunderstood something. I'm expecting user xyz to be able to see the public folder. Grateful for any pointers. Thanks, Keith

2 7

[Dovecot] Authentication failed, failure to login after changed password
by Vinit Jain 28 Aug '09

28 Aug '09

Hi, I have installed dovecot 1.0 mail server on debian linux. I am using unix authentication to login the mail accounts. We developed one web mail application whcih use imap protocol and send mail fro sending the mail. We are creating unix user through our application and able to login to the mail account succesfully and do all opeartion on that. But once user change password through our application or directly on unix commaqnd prompt then we are unable to login to mail application it gives authentication failed error. Even user can use ssh, sftp after changing password. Everything works except mail account. Here is the error excerpt from log files (mail.log and auth.log ) respectively. Aug 26 10:58:37 digibeanz dovecot: imap-login: Aborted login (1 authentication attempts): user=<child2>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, TLS Aug 26 12:22:00 digibeanz dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=child2 rhost=127.0.0.1 user=child2 Please help me. This is very urgent Regards, linuxvinit _________________________________________________________________ Log on to MSN India for a lowdown on what’s hot in the world today http://in.msn.com

3 2

[Dovecot] Question about ACL/flags
by Eric Jon Rostetter 28 Aug '09

28 Aug '09

Okay, I'm cruising the wiki, and it is at best confusing to me. Maybe someone on the list can help me out quickly? Here is what I have: dovecot 1.1.18, mbox format, currently no acl/namespace/etc. All works great. What I want to be able to do: Have an email account (or folder or mailbox) which can be accessed by several people (say 3) with per-user seen flags. That is, say 3 people all access the mail but each user has their own seen flag for the messages. This would hopefully be done with mbox still, if possible, but I'm willing to try a mixed mbox/maildir setup if required to accomplish the goal. Questions: 1) Can I do this with 1.1.18, or do I need to upgrade? 2) Do I need to set :CONTROL in mail_location, and if so, what should I set it to, and what does this control exactly (more precisely, does this info need to be HA or not, etc) Is this where the seen flag info will be stored (or is that in INDEXES)? 3) Can I do this with mbox only, or do I need maildir, or does it depend on dovecot version? 4) Any additional help you can give me... I basically understand the ideas behind it all, but from the wiki I'm confused exactly what I need to do, and what version I might need. (If the wiki example is for dovecot 1.2+, does that mean it won't work in 1.1, or just that it has to be done differently, etc). Any help (clearing up my obvious confusion) would be appreciated... Step by step directions would be even better! :) -- Eric Rostetter The Department of Physics The University of Texas at Austin This message is provided "AS IS" without warranty of any kind, either expressed or implied. Use this message at your own risk.

1 0

[Dovecot] runaway imap processes
by rpyne＠kinfolk.org 27 Aug '09

27 Aug '09

I am running dovecot (1.2.3) with postfix (2.6.3), postfixadmin (2.1.0), maia mailguard (1.0.2) and squirrelmail (1.4.19) on Linux (kernel 2.6.27.8). I have an ongoing problem with imap processes that hang and eat all available cpu. I try killing them and they won't die. The only way to get rid of them is to reboot the server. Any help with this will be greatly appreciated. I really need to get this solved as it has been an ongoing problem for more than a year.

2 1