- dovecot - dovecot.org

[Dovecot] IMAP proxying for ALL users to internal mail server
by Vitaliy Vladimirovich 02 Oct '09

02 Oct '09

Hi! How must I adjust Dovecot for proxying all users from the Internet to the internal Exchange Mail Server? This is my config files (most important): dovecot.conf protocol imap { #listen = *:10143 ssl_listen = 194.0.148.10:993 auth default { mechanisms = plain login passdb passwd-file { args = /usr/local/etc/dovecot-%Ls.conf } } dovecot-imap.conf testmail1@example.org::0:0::::proxy host=10.0.10.3 port=143 nopassword With this configurations all works fine, but if I trying change dovecot-imap.conf as below %n@%d::0:0::::proxy host=10.0.10.3 port=143 nopassword I get an error: Oct 2 15:10:58 relay dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=199.10.149.10 rip=199.10.149.3 lport=993 rport=28316 resp=<hidden> Oct 2 15:10:58 relay dovecot: auth(default): passwd-file(testmail1(a)example.org,199.10.149.3): lookup: user=testmail1(a)example.org file=/usr/local/etc/dovecot-imap.conf Oct 2 15:10:58 relay dovecot: auth(default): passwd-file(testmail1(a)example.org,199.10.149.3): unknown user Oct 2 15:10:59 relay dovecot: auth(default): new auth connection: pid=62532 Oct 2 15:11:00 relay dovecot: auth(default): client out: FAIL 1 user=testmail1(a)example.org Any ideas??

4 10

[Dovecot] Problem with local pine after upgrade to 1.2.5
by Gerhard Wiesinger 02 Oct '09

02 Oct '09

Hello, I upgraded from dovecot 1.1.17 to 1.2.5. Works well so far with e.g. Thunderbird and SSL. One problem left: pine doesn't work any more with rsh: cat .pinerc (filtered): rsh-path= rsh-command=/usr/sbin/dovecot --exec-mail imap Starting pine: 1.) Opening INBOX 2.) [>SECURITY PROBLEM: insecure server advertised AUTH=PLAIN<] 3.) Afterwards I'm asked for a password: HOST: localhost (INSECURE) ENTER LOGIN NAME [user] : 3.) cancel: [IMAP protocol error: Authentication aborted by client.] Config: no changes at all. Any ideas why this is broken? Thnx. Ciao, Gerhard

2 2

[Dovecot] Folder Management Dovecot >1.2
by Carlos Candeias 02 Oct '09

02 Oct '09

Regardless of the mail client no user can modify, move, delete or subscribe an imap folder with Dovecot >1.2.1 (meanwhile 1.2.5). Dovecot apparently have some dotlock problems: (From dovecot.log) Oct 02 14:58:19 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:19 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:20 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:20 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:20 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:20 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:21 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:21 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:21 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:21 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted This was an attemt of changing a subscription. Another weird point: I can create an IMAP folder although it does not show up in the folder list. But the new folder is in the subscription list, just marked as unsubscribed and there is no way to change that. This problem is safely reproducible and I wonder whether I should be really the only person having this trouble. I'm using MAILDIR and simple plain test authentification (internal mail server). The location is mail_location: maildir:~/.mail/Maildir which means a subfolder in each user's home directory. All homes are exported to NFS, but the Dovecot is just on the same server and thus accesses locally. Downgrade to version 1.1.17 solves all problems. Archlinux x86_64, Linux 2.6.30 It would be really great if somebody could understand the cause and suggest a solution!

3 4

[Dovecot] Problem with LSUB and public namespace
by Julien Danjou 02 Oct '09

02 Oct '09

Hi, I'd like to know if the following is normal. I've a setup with 2 namespace (private/public) where each user can use subscriptions. This problem is triggered by claws-mail, which uses LSUB to get subscribed mailboxes: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN] Dovecot ready. . login user password . namespace * NAMESPACE (("INBOX." ".")) NIL (("public." ".")) . OK Namespace completed. . subscribe public.Admin . OK Subscribe completed. . LSUB "" "%" * LSUB () "." "INBOX" . OK Lsub completed. LSUB does not return "public" as namespace :-( Is this a bug in dovecot, a bug in Claws mail, or a misconfiguration of my dovecot server? I can provide more info if needed. Cheers, -- Julien Danjou // ᐰ <julien(a)danjou.info> http://julien.danjou.info // 9A0D 5FD9 EB42 22F6 8974 C95C A462 B51E C2FE E5CD // There is nothing under this line.

2 3

[Dovecot] Timeout waiting for handshake from auth server
by Frank Bonnet 02 Oct '09

02 Oct '09

Hello I have that kind of messages in dovecot.log anyone has those troubles ? the machine is Debian etch 64 bits dovecot 1.2.5 has been compiled on the machine it run NIS client to a YPLDAPD server thank you Oct 02 12:15:27 auth(default): Error: do_ypcall: clnt_call: RPC: Timed out Oct 02 12:15:33 pop3-login: Error: Timeout waiting for handshake from auth server. my pid=16755, input bytes=0 Oct 02 12:15:46 auth(default): Error: YPBINDPROC_DOMAIN: Domain not bound Oct 02 12:15:46 pop3-login: Error: Timeout waiting for handshake from auth server. my pid=16760, input bytes=0 Oct 02 12:15:51 imap-login: Error: Timeout waiting for handshake from auth server. my pid=16761, input bytes=0 Oct 02 12:15:51 imap-login: Error: Timeout waiting for handshake from auth server. my pid=16762, input bytes=0

2 2

[Dovecot] Disconnected: Too many invalid IMAP commands
by Gabriele 02 Oct '09

02 Oct '09

Greetings, I'm having big issues here, hope you can help me… Ubuntu Server 8.04, postfix 2.5.1, dovecot 1.0.10, postfixadmin (MySQL+ virtual users)… I am trying to move e-mails from an old IMAP account to my new dovecot IMAP server accounts. The old server is EIMS (Eudora Internet Mail Server, so a sort of mbox format)… I move messages by drag 'n' dropping in Mozilla Thunderbird. No problems with messages under 4MB size (there are huge messages, up to 25MB), but as soon as I try to move messages from 4MB and up, the connection hangs, nothing happens, the application becomes barely responsive, I have quit and re-open it to make it behave properly. In the logs, I read (user and IPs are fake, here): Sep 18 07:52:06 in dovecot: imap-login: Login: user=<user@my-domain>, method=PLAIN, rip=123.123.123.123, lip=123.123.123.123 Sep 18 07:52:06 in dovecot: IMAP(user@my-domain): Disconnected: Too many invalid IMAP commands. Could it be a client (Thunderbird) issue? I have tried with Apple Mail 4.1, same problem, same logs. Could it be a quota limit (googling around, I read that sometimes the error may be triggered by dovecot when exceeding the quota limit) Accout usage is actually at 1%… Could drag 'n' drop be the wrong way to have things done? I have also downloaded the huge e-mails from EIMS to Thunderbird Local Folders, the problem arises when I try to upload, so the culprit seems to be the new "system". I really need help at this point… any hints? Thanks in advance for any help you will offer. Gabriele

7 24

[Dovecot] Password and special caracter
by Gilles Albusac 02 Oct '09

02 Oct '09

Problem : I have a problem with special character in the password. Character like ! * é are deleted My configuration : - a smtp server with Postfix 2.6 and Dovcot 1.1.11. - a windows 2003 server with active directory for accounts and boxes I use SMTP / SASL on my postfix 2.6 to authenticate my remote laptop users (allow legitimate users to relay mail). To do that, I use SASL Dovecot fonctionnality and ldap request to verify login/password who are declared on a server in Windows 2003 (Active Directory). It works fine with simple password but not with complex password. I have a problem with special character in the password. Character like ! * é are deleted before comparaison. Any idea ? Regards

5 6

[Dovecot] I can acces my pop3 account but I can't send an email trough smtp
by Ricky Tompu Breaky 01 Oct '09

01 Oct '09

Dear my friends.... I use OpenSuSE 11.1, KMail and DoveCot version: " sussy:/etc/ssl/certs # dovecot --version 1.1.7 ". This is the configuration of my DoveCot: " sussy:/etc/ssl/certs # dovecot -n # 1.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27.29-0.1-default i686 openSUSE 11.1 (i586) base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log protocols: imap imaps pop3 listen(default): * listen(imap): * listen(pop3): *:110 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_greeting: Dovecot of MyGoogle.Com ready. mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 auth default: debug_passwords: yes passdb: driver: pam userdb: driver: passwd ". I have created local linux user account on my Postfix+DoveCot server. I also can access the content of my mailbox from my KMail. I am so happy but once I try to send email (testing the smtp) than I realize that I can't send an email from my email client (KMail). I use this setting on my email client: 1. 'incoming mailserver' == 'outgoing mailserver' == 'mail.mygoogle.com' (pseudonome). Also username and password are all the same between incoming/outgoing mailserver, namely the local userlogin of LINUX. As the username, I put 'ricky' (but not 'ricky(a)mygoogle.com'). 2. smtp authentication: No encryption and plaintext. The error message on my KMail is: " Sending failed: Your SMTP server does not support The server responded: "5.7.8 Error: authentication failed: generic failure". Choose a different authentication method. The server responded: "5.7.8 Error: authentication failed: generic failure" The message will stay in the 'outbox' folder until you either fix the problem (e.g. a broken address) or remove the message from the 'outbox' folder. The following transport was used: mygoogle.com Do you want me to continue sending the remaining messages? " and also: " Sending failed: Your SMTP server does not support The server responded: "5.7.8 Error: authentication failed: generic failure". Choose a different authentication method. The server responded: "5.7.8 Error: authentication failed: generic failure" The message will stay in the 'outbox' folder until you either fix the problem (e.g. a broken address) or remove the message from the 'outbox' folder. The following transport was used: mygoogle.com ". I'm stucked again. Please help me. Tell me where my mistake. Thank you very much in advance.

2 2

[Dovecot] Encryption Plugin
by Patrick McLean 01 Oct '09

01 Oct '09

Hi, There was a discussion a few months ago about a plugin for encrypting email before it hit the disk on the server, and doing transparent decryption while serving data to the client, see: http://www.dovecot.org/list/dovecot/2009-July/041262.html We have a client/user who is interested in such a plugin, and I was wondering if there has been any progress on it yet. In our particular case, server-side on-the-fly decryption would be acceptable. This service is useful in the case of a somewhat paranoid user who does not want the IT staff to have direct access to their email, without going through some major hoops (http://hushmail.com actually offers both server and client side decryption for these reasons). The way I would imagine the plugin working is public-key encryption being done on the message as it was being delivered (plug in to dovecot's deliver). Then when a client connects, the private key is decrypted with the user's password and used to decrypt the messages on the fly. Depending on performance, it may be an idea to convert messages to use symmetric with rotating keys encrypted with the public key encryption. If this were going to be done, I would think an IMAP protocol extension may be an idea so client-side encryption would be an option as well, so there would be end-to-end security.

2 1

[Dovecot] OT: IMAP folder aliases
by Patrick Ben Koetter 01 Oct '09

01 Oct '09

It seems that there is no standard for folder names that deal with typical message classes such as drafts, outbox, sent, spam etc. At least there's no common sense on a naming convention that tells how client should handle this. Worse than this, most IMAP clients auto-create folders according to their own naming convention if they don't exist. Every client introduces its own view. Users OTOH expect a single view that makes it easy for them to find their messages. They are unwilling to search in "sent", "sent-mail" or "Sent items" for "messages that have been sent". I doubt that software producers will adopt a standard naming convention if it was introduced within a useful time span. Has anyone seen an approach or a solution that solves the problem from a users point of view? A server side alias list that maps to a server standard? p@rick -- state of mind Digitale Kommunikation http://www.state-of-mind.de Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München Telefax +49 89 3090 4666 Amtsgericht München Partnerschaftsregister PR 563

9 28