- dovecot - dovecot.org

[Dovecot] General performance of RC5
by Joan 08 Jun '09

08 Jun '09

Hi all, Switiching to RC5, there is a visible decrease in performance to access via IMAP large accounts (>1G) with mutiple mailboxes per accounts. In RC4, there was no delay visible by a human when accessing locally. Now it takes up to 4 or 5 secs. (running on OpenSuse, mysql 5.1.35 for auth, dbox as back end) Anybody experienced also this ? Thanks Joan

2 2

[Dovecot] Dovecot 1.2 + AIX setups
by Jonathan Siegle 08 Jun '09

08 Jun '09

Is anyone running Dovecot on AIX? I'm trying to debug the "Corrupted index cache file... record points outside file" problem. I can give gory details about what I've tried, but for now I would just like to see setups on AIX. Thanks, Jonathan

1 0

[Dovecot] Dovecot + FreeBSD-7.2 + ZFS ?
by Frank Bonnet 08 Jun '09

08 Jun '09

Hello Anyons has tested this configuration with success ? I'll test it in few days and I am wondering if I am alone :-) Thanks

3 3

Re: [Dovecot] Password environment variable - logging the password
by Donovan Craig 07 Jun '09

07 Jun '09

Timo Sirainen wrote: > Hmm. I guess it's possible that the password is lost by then.. Then > another possibility would be to use passdb sql + userdb prefetch and: > > password_query = SELECT .., '%w' as userdb_plain_pass, .. That did the trick. Thanks so much for your help.

1 0

Re: [Dovecot] Password environment variable - logging the password
by Donovan Craig 07 Jun '09

07 Jun '09

>> On Jun 6, 2009, at 5:19 AM, Donovan Craig wrote: >> Im using the mysql userdb, but the passwords are stored in MD5. >> I want to be able to get the password within the post login script, >> not from >> the log file. >> >> Is there any way to do this? > Timo Sirainen wrote: > user_query = SELECT '%w' as plain_pass, ... > then it should be in $PLAIN_PASS environment in post-login script. This would be great if it worked, but unfortunately this %w is empty when I try to use it. >From the documentation, it seems that this variable is only available during auth. http://wiki.dovecot.org/Variables Is there any other way I can get the plain password within the postloginscripting? Thanks again. Donovan

2 1

Re: [Dovecot] Password environment variable - logging the password
by Donovan Craig 06 Jun '09

06 Jun '09

> look at the setting: > > # In case of password mismatches, log the passwords and used scheme so the # problem can be debugged. Requires auth_debug=yes to be set. > #auth_debug_passwords = no Thanks for your replies so far. As mentioned, I¹d like to be able to log the username and password in plain text after successful login. I¹m using the mysql userdb, but the passwords are stored in MD5. I want to be able to get the password within the post login script, not from the log file. Is there any way to do this? Thanks. Donovan

2 1

[Dovecot] Multiple Dovecot instances over single mail store
by Zohan 06 Jun '09

06 Jun '09

Hi, I need to run two Dovecot instances with totally different authentication configs: first - passwordless, based on client SSL certificate; and second - regular password based (LDAP, passwd etc.). (As far as I know this cannot be achieved with single Dovecot instance; if I'm mistaken, please correct me). My intention is to give clients dual access to their mailboxes: some do own a SSL cert, others do not. I want to know whether it is possible at all. If possible, how do we implement proper concurrent access (locking, etc.) between the two instances to a single maildir-based store? I guess this should be possible since I know Dovecot can operate NFS-backed mail stores, e.g. in a load-balancing cluster setup. Second, is it OK to run the second instance in the same OS (we use Linux)? or chroot'ed or even virtualized solution will work better? Thank you! Zohan

2 1

[Dovecot] sieve/dovecot folder separator inconsistency
by Daniel Mayer 06 Jun '09

06 Jun '09

Hi, I'm running dovecot 1.0.15 and ran recently into a problem with the folder separators when using sieve scripts. The server is set to use a slash as a folder separator for all namespaces and announces this correctly when issuing the NAMESPACE command. We are using Ingo (http://www.horde.org/ingo/) of the horde framework to manage our sieve scripts. It creates the folder name / folder path to be used in the sieve scripts based on the result of the NAMESPACE given by the IMAP Server. It therefore created the path separated by slashes ("/"). According to my tests, the delivery agent along with sieve expects the folders to be separated by dots (".") instead of slashes. Is this a correct observation or can this be set using a parameter or something similar? The result of this otherwise inconsistent behavior is that a client who sticks to the provided namespace creates a folder path which cannot be understood by the deliver process. Please let me know if you need any additional information. Thanks, Daniel

3 5

[Dovecot] Dovecot under brute force attack - nice attacker
by henry ritzlmayr 05 Jun '09

05 Jun '09

Hi List, optimizing the configuration on one of our servers (which was hit by a brute force attack on dovecot) showed an odd behavior. Dovecot Version 1.0.7 (CentOS 5.2) The short story: On one of our servers an attacker did a brute force attack on dovecot (pop3). Since the attacker closed and reopened the connection after every user/password combination the logs showed many lines like this: dovecot: pop3-login: Aborted login: user=<test>,...... The problem: If the attacker wouldn't have closed and reopened the connection no log would have been generated and he/she would have endless tries. Not even an iptables/hashlimit or fail2ban would have kicked in. How to reproduce: telnet dovecot-server pop3 user test pass test1 user test pass test2 ... QUIT ->Only the last try gets logged. If I enable auth_verbose every attempt gets logged, but if I read the docs correctly this option should only be used for figuring out why authentication isn't working. Question: Is there any way to close the connection after the first wrong user/pass combination. So an attacker would be forced to reopen it? This would be perfect since an easy iptables/hashlimit would avoid such a brute force attack. Any other Ideas? Henry

8 21

[Dovecot] v1.2.rc5 released
by Timo Sirainen 05 Jun '09

05 Jun '09

http://dovecot.org/releases/1.2/rc/dovecot-1.2.rc5.tar.gz http://dovecot.org/releases/1.2/rc/dovecot-1.2.rc5.tar.gz.sig Some small fixes mainly. I guess I'll still have to release rc6 and rc7 after all. I've been a bit busy with v2.0 changes recently. BTW. I'm leaving tomorrow to San Francisco and I'm going to check out what's happening in Apple WWDC next week. * auth_cache_negative_ttl is now used also for password mismatches (currently only with plaintext authentication mechanisms). + Added support for EXTERNAL SASL mechanism. + FETCH X-SAVEDATE can now be used to get messages' save timestamps + deliver_log_format: %s is now in UTF8 - If message body started with a space, some operations could have assert-crashed. - Fixed using LDAP support as a plugin - Fixes to virtual mailboxes.

2 2