- dovecot - dovecot.org

[Dovecot] Is it possible to authenticate against Active Direcotry using the whole e-mail?
by Δημήτριος Καραπιπέ ρης 07 Oct '09

07 Oct '09

Hi all! Is it possible to authenticate against Active Directory, using the whole e-mail address and not the user part (%n), so that if you support mutiple domains, all users should authenticate with their e-mail addresses. I use auth_bind_userdn = DOMAIN \ %u but somehow the *mail* attribute of Active/LDAP should be employed. thanks in advance Dimitrios Karapiperis

3 4

[Dovecot] Fwd: Re: "Time just moved backwards" in Dovecot in a Xen DomU
by Patrick Domack 07 Oct '09

07 Oct '09

Dunno, your email provider doesn't want to talk to me, heh, screw them :) They claim i'm on an rbl, no rbl checks verify this. Even tried to submit a request using their website, but it's broken and doesn't work (http://postmaster.ausics.net/pmg.php) ----- Forwarded message from patrickdk(a)patrickdk.com ----- Date: Tue, 06 Oct 2009 23:31:37 -0400 From: Patrick Domack <patrickdk(a)patrickdk.com> Subject: Re: [Dovecot] "Time just moved backwards" in Dovecot in a Xen DomU To: Noel Butler <noel.butler(a)ausics.net> yes, using a pool server for that isn't good. but atleast it will let us know if it's just an internet path, or ALL internet paths for him that is causing issues, as it should give a good random sampling. I have a few servers in the pool set to gigabit speeds. If people configure their settings correctly, the dsl/cable ones shouldn't get selected very often. And the pool servers aren't the cause of his issues, as he isn't using any pools servers. I think he has a network issue personally. Quoting Noel Butler <noel.butler(a)ausics.net>: > On Tue, 2009-10-06 at 23:08 -0400, Patrick Domack wrote: > > >> >> Jitter stops ntp from doing it's job properly. I'm not sure what is >> causing you jitter to be so bad, but it's caused by the delay amount >> changing from packet to packet. The delay should stay consistant (like >> a ping time). If it keeps bouncing all over the place, ntp can't >> figure out what time it really is, cause it doesn't know how long that >> packet was on the network. You can safely ignore offset, it is just >> how much different your clock is from what the other computer is. >> >> Try adding some of the pool servers in there, like: >> server 0.us.pool.ntp.org >> server 1.us.pool.ntp.org >> server 2.us.pool.ntp.org >> > > > this can also be the cause of it all, there is no QA on hosts in pools, > I've seen DSL and cable connected hosts in pools causing all sorts of > problems for some, I'm lucky enough to be in a position where we have > access to atomic servers so I can avoid all that, but most people are > not. > > > -- > Kind Regards, > Noel Butler > L.C.P #251002 (http://counter.li.org) > > ________________________________________________________________________ > This Email, including any attachments, may contain legally privileged > information, therefor remains strictly confidential and is protected > under Australian Laws and international treaties. You may not > disseminate or reveal any part to anyone without the authors express > written authority to do so. If you are not the intended recipient, > please notify the sender and delete all relevance of this message > including attachments immediately. Confidentiality and legal privilege > are not waived or lost by reason of the mistaken delivery of this > message. Only PDF or ODF documents are accepted, do not send Microsoft > proprietary formatted documents - see > http://www.gnu.org/philosophy/no-word-attachments.html > > ________________________________________________________________________ > ----- End forwarded message -----

2 1

Re: [Dovecot] Samba AD and Dovecot
by Timo Sirainen 07 Oct '09

07 Oct '09

Ccing mailing list, since I'm not all-knowing.. On Oct 7, 2009, at 12:49 AM, Trever L. Adams wrote: > Timo Sirainen wrote: >> On Oct 7, 2009, at 12:36 AM, Trever L. Adams wrote: >>> 1) I have seen how to configure for LDAP and Kerberos. AD uses both >>> together. All user information is in AD/LDAP and authentication is >>> AD/Kerberos. How can I configure Dovecot to use both appropriately? >> You could forget about the Kerberos part and just use AD as an LDAP >> server. > I really want to use kerberos/SPNEGO everywhere I can for various > reasons. The LDAP would be for the configuration. Do you actually want the IMAP/POP3 clients to use Kerberos? For plaintext auth I don't see any benefit in Dovecot using Kerberos rather than LDAP (and it doesn't support that, except via pam_kerberos or whatever I guess). But for clients to use Kerberos (GSSAPI) and authenticate against AD while Dovecot is in the middle... I've no idea. I guess that's possible somehow. >>> 2) For example if I have a directory /var/mail/domain/user. Can >>> I have Dovecot auto create (with proper permissions) the domain/user >>> part? These would be used for maildir. >> If you're using the same UNIX UID for all users, there's really >> nothing you need to do. Dovecot tries to create missing directories >> automatically. > No, I will be using the new Samba IDMAP stuff that hashes all the > parts > of the windows ID to a 32 bit UID. Anyway to do to this, or will I > need > to find another solution (not for mailing, but for directory > creation)? There's no great way to do this.. A couple of kludgy ways. Like chmod 01777 /var/mail. Or override mail_executable setting to a script that still runs as root and can create the directory with proper permissions. http://wiki.dovecot.org/PostLoginScripting

3 2

[Dovecot] Samba AD and Dovecot
by Trever L. Adams 07 Oct '09

07 Oct '09

Hello All, I haven't seen the answer to this, maybe I am just using the wrong searches. I have two queries related to this: 1) I have seen how to configure for LDAP and Kerberos. AD uses both together. All user information is in AD/LDAP and authentication is AD/Kerberos. How can I configure Dovecot to use both appropriately? 2) I can cause Samba to create certain directories on login, etc. However, I am needing to do this for Dovecot (and Postfix using Dovecot deliver). I would prefer to use Dovecot functionality for this, not Samba.This is not the autocreate folder/subscribe stuff, at least I think not. For example if I have a directory /var/mail/domain/user. Can I have Dovecot auto create (with proper permissions) the domain/user part? These would be used for maildir. Thank you, Trever Adams

2 1

[Dovecot] "Time just moved backwards" in Dovecot in a Xen DomU
by PGNet Dev 07 Oct '09

07 Oct '09

i've dovecot --version 1.2.5 hg log | grep changeset | head -n 1 changeset: 9407:a3e16df805e3 in my logs, i'm seeing ... Oct 05 16:51:40 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards Oct 05 17:07:22 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards Oct 05 17:23:15 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards Oct 05 17:38:23 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards ... i'm running Dovecot in a Xen DomU, uname -a Linux mail 2.6.27.29-0.1-xen #1 SMP 2009-08-15 17:53:59 +0200 x86_64 x86_64 x86_64 GNU/Linux reading @, http://wiki.dovecot.org/TimeMovedBackwards Bugs/Issues * With Xen you should run ntpd only in dom0. Other domains should synchronize time automatically (see this Xen FAQ). @ my Dom0, ps ax | grep ntp\.conf 5696 ? Ss 1:05 /usr/sbin/ntpd -p /var/run/ntp/ntpd.pid -g -u ntp:ntp -i /var/lib/ntp -c /etc/ntp.conf and, grep localtime /etc/xen/vm/mail.cfg localtime = 0 looking at my ntp logs around the same time(s). ... 5 Oct 16:41:17 ntpd[5696]: synchronized to 64.125.78.85, stratum 1 5 Oct 16:51:38 ntpd[5696]: time reset -2.140133 s 5 Oct 16:56:40 ntpd[5696]: synchronized to 66.220.9.122, stratum 1 5 Oct 17:01:28 ntpd[5696]: synchronized to 64.125.78.85, stratum 1 5 Oct 17:07:20 ntpd[5696]: time reset -2.137760 s 5 Oct 17:11:49 ntpd[5696]: synchronized to 204.152.184.72, stratum 1 5 Oct 17:15:01 ntpd[5696]: synchronized to 207.200.81.113, stratum 1 5 Oct 17:20:49 ntpd[5696]: synchronized to 66.220.9.122, stratum 1 5 Oct 17:23:14 ntpd[5696]: time reset -2.221749 s 5 Oct 17:27:57 ntpd[5696]: synchronized to 64.125.78.85, stratum 1 5 Oct 17:32:52 ntpd[5696]: synchronized to 207.200.81.113, stratum 1 5 Oct 17:38:22 ntpd[5696]: time reset -2.104476 s 5 Oct 17:42:48 ntpd[5696]: synchronized to 66.220.9.122, stratum 1 ... 1 second is not a terribly big deal, but it IS an error ... not clear to me as to what/where the problem actually is. i've not seen an other dameons report any time issues; of course, i'm not sure they're _checking_ :-/ any suggestions as to what/how to fix? thanks!

5 14

Re: [Dovecot] deliver stopped working
by vwc72283＠voicenet.com 07 Oct '09

07 Oct '09

Note to all: If you are running Dovecot on a system where any of the mailboxes are nfs v4 mounted from a RHEL (or derivative) server DO NOT upgrade that server to an unpatched 2.6.18-164 kernel, it is very broken at this time. Not only will Dovecot fail but you're likely to have a myriad of other problems. https://bugzilla.redhat.com/show_bug.cgi?id=523797 https://bugzilla.redhat.com/show_bug.cgi?id=524520 > On Mon, 2009-10-05 at 10:30 -0400, vwc72283(a)voicenet.com wrote: >> So, it is reproducible. Now, if you take O_EXCL out it works even for the user: > .. >> Why I suddenly get the behavior I don't know. Clearly its not deliver, but deliver >> tries >> to do something that behaves badly on this system. > > I've no idea. Never heard of O_EXCL failing in that way. You could > always just remove the O_EXCL uses from Dovecot sources, Dovecot doesn't > rely on them. > >

1 0

[Dovecot] OpenBSD and Dovecot (mysql support)
by jean-francois 06 Oct '09

06 Oct '09

Hello All, I am having difficulties in running dovecot with mysql accounts. The db worked but the config file is hardly something I could do to work properly as it should be, it does even not run saying various errors found in dovecot.conf Has anyone already built dovecot server to run with with a mysql base ? Could it be so that one sends me a conf file that shall work to help me ? Thanks. Jean-François

4 5

Re: [Dovecot] compiling issue 1.2.6 - Solaris
by Bruce Bodger 06 Oct '09

06 Oct '09

On Oct 6, 2009, at 8:26 AM, Bruce Bodger wrote: >>> >>> Same type of problem here on OS X 10.5.8 Server. >>> >>> Command line to configure: ./configure --with-ssldir=/System/ >>> Library/OpenSSL --with-ssl=openssl >>> >>> .. >>> Undefined symbols: >>> "_SSL_get_current_compression", referenced from: >>> _ssl_proxy_get_security_string in liblogin-common.a(ssl-proxy- >>> openssl.o) >>> "_SSL_COMP_get_name", referenced from: >>> _ssl_proxy_get_security_string in liblogin-common.a(ssl-proxy- >>> openssl.o) >> >> What OpenSSL version do you have? I thought those compression >> functions were new enough that everyone would have them by now.. > > > bash-3.2# /usr/bin/OpenSSL version > OpenSSL 0.9.7l 28 Sep 2006 A bit of oddity I just discovered by viewing source code at http://www.opensource.apple.com/ OS X 10.5.8 - OpenSSL 0.9.7l 28 Sep 2006 OS X 10.6.0 - OpenSSL 0.9.6l 04 Nov 2003 OS X 10.6.1 - OpenSSL 0.9.6l 04 Nov 2003 Looks like they moved back to 0.96l in later versions. B. Bodger

3 3

[Dovecot] Move messages marked as Spam
by Michel Bulgado 06 Oct '09

06 Oct '09

Hello I have implemented recently in my work bogofilter utility to mark messages as Spam or Ham, currently is working perfectly, but I want to move those messages marked as spam to a folder called spam. I installed dovecot-sieve with the intention of using fileinto to accomplish this. my question is: where I put this: require "fileinto"; if header :contains "X-Bogosity" "Spam" { fileinto "Spam"; } so that all messages that come to my users go into the spam folder? and how i handle messages that are marked as "Unsure" X-Bogosity: Unsure Thanks Michel

1 0

[Dovecot] Dovecot 1.2.4 - assertion crash in view_lookup_seq_range
by Brandon Davidson 06 Oct '09

06 Oct '09

Hi all, We have a number of machines running Dovecot 1.2.4 that have been assert crashing occasionally. It looks like it's occurring when the users expunge their mailboxes, but I'm not sure as I can't reproduce it myself. The error in the logs is: Oct 6 07:33:09 oh-popmap3p dovecot: imap: user=<YYYY>, rip=XXXX, pid=11931: Panic: file mail-index-view.c: line 264 (view_lookup_seq_range): assertion failed: (first_uid > 0) Oct 6 07:33:09 oh-popmap3p dovecot: imap: user=<YYYY>, rip=XXXX, pid=11931: Raw backtrace: imap [0x49e130] -> imap [0x49e193] -> imap [0x49d816] -> imap [0x47e462] -> imap(mail_index_lookup_seq+0x12) [0x47e022] -> imap(mail_index_view_sync_begin+0x36a) [0x47ffba] -> imap(index_mailbox_sync_init+0x7f) [0x45e56f] -> imap(maildir_storage_sync_init+0x100) [0x43cb70] -> imap(imap_sync_init+0x67) [0x428177] -> imap(cmd_sync_delayed+0x174) [0x4283c4] -> imap(client_handle_input+0x19e) [0x420a0e] -> imap(client_input+0x5f) [0x4213ff] -> imap(io_loop_handler_run+0xf8) [0x4a5e98] -> imap(io_loop_run+0x1d) [0x4a4fad] -> imap(main+0x620) [0x428cc0] -> /lib64/libc.so.6(__libc_start_main+0xf4) [0x323dc1d994] -> imap [0x4199f9] Oct 6 07:33:09 oh-popmap3p dovecot: dovecot: child 11931 (imap) killed with signal 6 (core dumped) GDB stack information and some additional details are available here: http://uoregon.edu/~brandond/dovecot-1.2.4/stack.txt We are planning to go to 1.2.6 sometime in the next week or two, but I thought I'd try to track this particular error down just in case it's still an issue after the upgrade. -Brad

2 1