- dovecot - dovecot.org

[Dovecot] Panic: file mempool-system.c: line 104
by Martins Lazdans 09 Apr '09

09 Apr '09

Hello! I have used Dovecot for more than a year without problems, but today it just crashed with this message: dovecot: Apr 09 21:23:38 Panic: file mempool-system.c: line 104 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) dovecot: Apr 09 21:23:38 Error: Raw backtrace: /usr/local/sbin/dovecot [0x805757c] -> /usr/local/sbin/dovecot [0x8057664] -> /usr/local/sbin/dovecot [0x80514e9] -> /usr/local/sbin/dovecot [0x8056edb] -> /usr/local/sbin/dovecot [0x805bcc1] -> /usr/local/sbin/dovecot [0x8055bbf] -> /usr/local/sbin/dovecot [0x8055d3b] -> /usr/local/sbin/dovecot [0x8055d87] -> /usr/local/sbin/dovecot [0x8062448] -> /usr/local/sbin/dovecot [0x805aadf] -> /usr/local/sbin/dovecot [0x805a5a7] -> /usr/local/sbin/dovecot [0x804d63a] -> /usr/local/sbin/dovecot [0x804da67] -> /usr/local/sbin/dovecot [0x804e4ce] -> /usr/local/sbin/dovecot [0x805a17a] -> /usr/local/sbin/dovecot [0x805adac] -> /usr/local/sbin/dovecot [0x8059f89] -> /usr/local/sbin/dovecot [0x8051b43] -> /lib/libc.so.6(__libc_start_main+0xd8) [0xb7e49df8] -> /usr/local/sbin/dovecot [0x804a451] dovecot --version 1.1.7 It seems, than some brute force attack caused this, here some more log: > dovecot: Apr 09 21:23:36 Info: auth(default): client out: FAIL 1 user=jennie > dovecot: Apr 09 21:23:36 Info: auth(default): client out: FAIL 1 user=jeffrey > dovecot: Apr 09 21:23:36 Info: auth(default): client out: FAIL 1 user=job > dovecot: Apr 09 21:23:36 Info: auth-worker(default): sql(jimmy,81.149.214.201): query: SELECT password FROM mailbox WHERE username = 'jimmy' AND active = '1' > dovecot: Apr 09 21:23:36 Info: auth(default): client in: AUTH 1 PLAIN service=pop3 lip=195.3.144.29 rip=81.149.214.201 lport=110 rport=34646 resp=<hidden> > dovecot: Apr 09 21:23:36 Info: auth-worker(default): sql(jimmy,81.149.214.201): unknown user For now I blocked this one IP (81.149.214.201), but wondering if this could happen again in the future? Don`t really understand what`s the problem. I have ~2Gb of memory free, so it can not be a out of memory issue. Any ideas? Thank you! -- Martins Lazdans

2 5

[Dovecot] dbox problem
by Xueron Nee 09 Apr '09

09 Apr '09

Hi, I have just tested the dbox format mailbox, it works fine. But when I create dir through imap with `create` command, it only creates the dir onder ~/dbox/mailboxes, such as ~/dbox/mailboxes/newfolder. There was no `dbox-Mails` dir created. So the newfolder was 'noselect'. But the new folders created by `autocreate` plugin was correct. -- Xueron Nee http://www.xueron.com

2 7

[Dovecot] Indexing of mails to speed up the IMAP SEARCH command
by Tassilo Horn 09 Apr '09

09 Apr '09

Hi all, I use a local dovecot server which is synchronized with my two imap accounts using OfflineIMAP. This works very nice and is highly usable. But one thing I'd like to improve is the slow IMAP search. When I search for a string in the subjects of all messages in a mailbox using some mail client, dovecot seems to grep all the messages in there. Is there a way to let dovecot index more informations which are then used to speed up the SEARCH command? Bye, Tassilo

5 9

[Dovecot] Moving IMAP folders to NFS volume.
by Frank Bonnet 09 Apr '09

09 Apr '09

Hello Due to lack of disk space on local disks I need to move all our imap folders to a NFS volume ( NetAPP filer ) I have a question about Dovecot indexes , is it better to remove all of them before copying folders to the NFS volume and let Dovecot rebuild all indexes when users restart to access to their imap folders ? Thanks a lot.

2 1

[Dovecot] Strange behavior of header_filter_callback
by Konstantin Lepa 09 Apr '09

09 Apr '09

Hello. I asked about the problem in http://markmail.org/message/zsry62fcig5hqka3 . And I created simple example plug-in for deliver. It is attached (I don't want to paste so much code) For compile in command-line run: # DOVECOT=<path to dovecot> gmake ...send mail... ...view dovecot lda log... # gmake clean # WITH_ONLY_HEADERS=1 DOVECOT=<path to dovecot> gmake ...send mail... ...view dovecot lda log... My log (notice strings start with #): deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: Loading modules from directory: /usr/local/lib/dovecot/lda deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: Module loaded: /usr/local/lib/dovecot/lda/lib90_example_plugin.so deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: auth input: uid=1002 deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: auth input: gid=1002 deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: auth input: home=/var/spool/mail/pitman(a)virtualworld.com deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func example_plugin_init is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: mbox: data=/var/spool/mail/pitman(a)virtualworld.com :INDEX=/var/indexes/pitman@virtualworld.com deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: mbox: INBOX defaulted to /var/spool/mail/pitman(a)virtualworld.com/inbox deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: fs: root=/var/spool/mail/pitman(a)virtualworld.com , index=/var/indexes/pitman(a)virtualworld.com, control=, inbox=/var/spool/mail/pitman(a)virtualworld.com /inbox deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func example_deliver_mail is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func example_get_stream is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func make_header_filter is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func create_header_stream is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func create_stream_for_msgbody is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: #Message 1: deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func example_get_stream is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func make_header_filter is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func create_header_stream is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func create_stream_for_msgbody is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: #Message 1: deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: msgid=: saved mail to INBOX deliver(pitman(a)virtualworld.com): Apr 08 13:52:39 Info: example: func example_plugin_deinit is called My log (WITH_ONLY_HEADERS=1): deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: Loading modules from directory: /usr/local/lib/dovecot/lda deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: Module loaded: /usr/local/lib/dovecot/lda/lib90_example_plugin.so deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: auth input: uid=1002 deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: auth input: gid=1002 deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: auth input: home=/var/spool/mail/pitman(a)virtualworld.com deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_plugin_init is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: mbox: data=/var/spool/mail/pitman(a)virtualworld.com :INDEX=/var/indexes/pitman@virtualworld.com deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: mbox: INBOX defaulted to /var/spool/mail/pitman(a)virtualworld.com/inbox deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: fs: root=/var/spool/mail/pitman(a)virtualworld.com , index=/var/indexes/pitman(a)virtualworld.com, control=, inbox=/var/spool/mail/pitman(a)virtualworld.com /inbox deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_deliver_mail is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_get_stream is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func make_header_filter is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #Return-Path: <pupkin(a)virtualworld.com > deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #Delivered-To: pitman(a)virtualworld.comm > deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #Received: from localhost.virtualworld.com (localhost [127.0.0.1]) deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #Received: by bsdman.virtualworld.com (Postfix) with ESMTP id 3B3E11FE for <pitman(a)virtualworld.com>; Wed, 8 Apr 2009 13:53:51 +0400 (MSD) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: 2009-04-08T13:53:51.199182+1 From: pupkin(a)virtualworld.com Reply-to: Konstantin(a)bsdman.virtualworld.com, Lepa(a)bsdman.virtualworld.com To: pitman(a)virtualworld.com Message-Id: <20090408095351.3B3E11FE(a)bsdman.virtualworld.com> Date: Wed, 8 Apr 2009 13:53:51 +0400 (MSD) Message 1 deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #Received: for <pitman(a)virtualworld.com>; Wed, 8 Apr 2009 13:53:51 +0400 (MSD) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: 2009-04-08T13:53:51.199182+1 From: pupkin(a)virtualworld.com Reply-to: Konstantin(a)bsdman.virtualworld.com, Lepa(a)bsdman.virtualworld.com To: pitman(a)virtualworld.com Message-Id: <20090408095351.3B3E11FE(a)bsdman.virtualworld.com> Date: Wed, 8 Apr 2009 13:53:51 +0400 (MSD) Message 1 deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #Content-Type: text/plain; charset="us-ascii"m (localhost [127.0.0.1]) deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #MIME-Version: 1.0t/plain; charset="us-ascii"m (localhost [127.0.0.1]) deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #Content- Transfer-Encoding: 7bit/plain; charset="us-ascii"m (localhost [127.0.0.1]) deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #Subject: 2009-04-08T13:53:51.199182+1i"m (localhost [127.0.0.1]) deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #From: pupkin(a)virtualworld.com182+1i "m (localhost [127.0.0.1]) deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #Reply-to: Konstantin(a)bsdman.virtualworld.com ,calhost [127.0.0.1]) deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #Reply- to: Lepa(a)bsdman.virtualworld.com To: pitman(a)virtualworld.com Message-Id: <20090408095351.3B3E11FE(a)bsdman.virtualworld.com> Date: Wed, 8 Apr 2009 13:53:51 +0400 (MSD) Message 1 deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #To: pitman(a)virtualworld.comalworld.com ,calhost [127.0.0.1]) deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #Message-Id: <20090408095351.3B3E11FE(a)bsdman.virtualworld.com >.0.1]) deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #Date: Wed, 8 Apr 2009 13:53:51 +0400 (MSD)alworld.com>.0.1]) deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: #: Wed, 8 Apr 2009 13:53:51 +0400 (MSD)alworld.com>.0.1]) deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_header_filter_callback is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_get_stream is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func make_header_filter is called deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: msgid=<20090408095351.3B3E11FE(a)bsdman.virtualworld.com >: saved mail to INBOX deliver(pitman(a)virtualworld.com): Apr 08 13:53:51 Info: example: func example_plugin_deinit is called

2 3

[Dovecot] dovecot 1.2-rc2 doesn't build on Solaris 10
by Laurent Blume 09 Apr '09

09 Apr '09

Hi all, Timo, When trying to build 1.2 rc2 on Solaris 10, with the same options and compiler as what works for 1.1.13, I get the following error: libtool: compile: cc -DHAVE_CONFIG_H -I. -I../../.. -I../../../src/lib -I../../../src/lib-dict -I../../../src/lib-index -I../../../src/lib-mail -I../../../src/lib-storage -I../../../src/lib-storage/index -I../../../src/lib-storage/index/maildir -O -m64 -I/usr/sfw/include -c quota-fs.c -KPIC -DPIC -o .libs/quota-fs.o "quota-fs.c", line 436: undefined symbol: GRPQUOTA cc: acomp failed for quota-fs.c *** Error code 1 make: Fatal error: Command failed for target `quota-fs.lo' Current working directory /export/espace/apps/src/network/dovecot-1.2.rc2/src/plugins/quota *** Error code 1 The compiler is Studio 12 patched, and the options used were: CFLAGS='-O -m64' \ SSL_LIBS="-R/usr/sfw/lib/64 -L/usr/sfw/lib/64 -lssl -lcrypto" \ ./configure --prefix=/opt/dovecot-1.2-rc2 \ --sysconfdir=/etc/opt/dovecot-rc \ --localstatedir=/var/dovecot-rc \ --with-rundir=/var/run/dovecot-rc \ --with-statedir=/var/dovecot-rc/lib \ --with-ioloop=best \ --with-zlib \ --with-bzlib \ --with-ssl=openssl \ --with-ssldir=/etc/certs \ --with-shadow \ --with-pam \ --with-ldap \ --enable-header-install Thanks, Laurent -- / Leader de Projet & Communauté | I'm working, but not speaking for \ G11N http://fr.opensolaris.org | Bull Services http://www.bull.com / FOSUG http://guses.org |

2 2

[Dovecot] Upgrade from 0.99.x to 1.1.x
by Wolfram Schlich 09 Apr '09

09 Apr '09

Hi! I want to upgrade a Dovecot installation from 0.99.14 to 1.1.15, so I had a look at the following wiki article: http://wiki.dovecot.org/Upgrading?action=show&redirect=UpgradingDovecot The article http://wiki.dovecot.org/Upgrading/1.0 says something about .customflags -> dovecot-keywords and .subscriptions -> subscriptions change/conversion: http://wiki.dovecot.org/Upgrading/1.0#Subscriptions http://wiki.dovecot.org/Upgrading/1.0#Keywords Do I understand it correctly that when directly upgrading from 0.99 to 1.1, Dovecot does the subscriptions renaming but not the keywords renaming and conversion, but that when I manually rename all .customflags files to dovecot-keywords, it does the format conversion of that file automatically? Is there anything else what's important to note for such an upgrade? The system is using Maildir as the mailbox format and only local storage (no NFS etc.). -- Regards, Wolfram Schlich <wschlich(a)gentoo.org> Gentoo Linux * http://dev.gentoo.org/~wschlich/

4 5

[Dovecot] crashed with shared namespace
by Xueron Nee 09 Apr '09

09 Apr '09

Hi, I have a shared namespace, which works fine yesterday. Today I have just updated my dovecot to the newest from hg.dovecot.org, and it crashed when list the shared namespace. namespace shared { separator = / prefix = shared/%%u/ location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u list = children subscriptions = no } cmd: # telnet localhost 143 Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN AUTH=LOGIN] AMOS READY a1 login test1(a)xueron.com ****** a1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH ACL RIGHTS=texk] Logged in a1 list "" "*" * LIST (\HasNoChildren) "/" "Sent" * LIST (\HasNoChildren) "/" "Spam" * LIST (\HasChildren) "/" "virtual" * LIST (\HasChildren) "/" "aaaaa" * LIST (\HasNoChildren) "/" "aaaaa/aaa" * LIST (\HasNoChildren) "/" "Junk" * LIST (\HasNoChildren) "/" "Draft" * LIST (\HasNoChildren) "/" "Trash" * LIST (\HasNoChildren) "/" "INBOX" * LIST (\Noselect \HasChildren) "/" "shared/xueron(a)xueron.com" * LIST (\HasNoChildren) "/" "public/test2" * LIST (\HasNoChildren) "/" "public/test4" * LIST (\HasNoChildren) "/" "public/test1" * LIST (\HasNoChildren) "/" "public/test3" * LIST (\HasChildren) "/" "shared/xueron(a)xueron.com/mydir" * LIST (\HasNoChildren) "/" "shared/xueron(a)xueron.com/mydir/subdir" * LIST (\HasNoChildren) "/" "shared/xueron(a)xueron.com/newdir" a1 OK List completed. a1 list "shared/" "*" Connection closed by foreign host. maillog: Apr 9 12:31:27 mail dovecot: Panic: IMAP(test1(a)xueron.com): file mail-user.c: line 30 (mail_user_init): assertion failed: (*username != '\0') Apr 9 12:31:27 mail dovecot: IMAP(test1(a)xueron.com): Raw backtrace: imap [0x80e7800] -> imap [0x80e785a] -> imap [0x80e711c] -> imap [0x80af7ab] -> imap(shared_storage_get_namespace+0x298) [0x8072708] -> imap [0x8071eef] -> imap [0x80601ec] -> imap(cmd_list_full+0x4ad) [0x8060bcd] -> imap(cmd_list+0x19) [0x8060ec9] -> imap [0x8063f9c] -> imap [0x806404b] -> imap(client_handle_input+0x2f) [0x8064aff] -> imap(client_input+0x63) [0x8064d33] -> imap(io_loop_handler_run+0x107) [0x80effc7] -> imap(io_loop_run+0x28) [0x80ef0d8] -> imap(main+0x754) [0x806d044] -> /lib/libc.so.6(__libc_start_main+0xdc) [0x901dec] -> imap [0x805cf11] Apr 9 12:31:27 mail dovecot: child 14971 (imap) killed with signal 6 (core dumps disabled btw: yesterday, there was such logs when 'list "shared/" "*"': Apr 8 17:03:37 mail dovecot: IMAP(test1(a)xueron.com): Invalid namespace prefix %u/ vs but no crash. Thanks :) -- Xueron Nee http://www.xueron.com

1 0

[Dovecot] Multiple use of the same LDAP attribute
by Bernhard Schmidt 09 Apr '09

09 Apr '09

Hi, we've found a weird bug (?) in Dovecot 1.1.11. Since day and age we've been running dovecot for our student mailserver, getting the location of the mailbox from a LDAP directory. We allow login and LDA with both full mail address and an internal username, so the mailbox directory is based on a LDAP attribute user_attrs = xxxMailbox=mail=maildir:/home/mailstore/%U$/Maildir:INDEX=/home/mailstore/indexes/%1U$/%U$, uidNumber=vmail, gidNumber=vmail, xxxMailQuota=quota_rule2=*:storage=%$B this worked just fine until we introduced sieve, which made us realize we did not have the home directory set at all. The obvious and easy fix (we thought) was to set the home directory based on the xxxMailbox variable as well: user_attrs = xxxMailbox=mail=maildir:/home/mailstore/%U$/Maildir:INDEX=/home/mailstore/indexes/%1U$/%U$, uidNumber=vmail, gidNumber=vmail, xxxMailQuota=quota_rule2=*:storage=%$B, xxxMailbox=home=/home/mailstore/%U$ unfortunately, after this trivial change hell froze over, because suddenly the mail variable was not set at all anymore, and since we had set mail_location = maildir:/home/mailstore/%Uu/Maildir:INDEX=/home/mailstore/indexes/%1Un/%Un (based on username) it was suddenly delivered into the wrong folder (based on the supplied username, not on the LDAP attribute). Debug from after the change: Apr 8 13:53:39 lxmhs23 dovecot: auth(default): ldap(username(a)xxx.de): user search: base=<deleted> scope=onelevel filter=<deleted> fields=xxxMailbox,uidNumber,gidNumber,xxxMailQuota,xxxMailbox Apr 8 13:53:39 lxmhs23 dovecot: auth(default): ldap(username(a)xxx.de): result: xxxMailQuota(quota_rule2=*:storage=%$B)=*:storage=1073741824B xxxMailbox(home=/home/mailstore/%U$)=/home/mailstore/1636D8B1D7916DEA/ [...] Apr 8 13:53:39 lxmhs23 deliver(username(a)xxx.de): maildir: data=/home/mailstore/USERNAME@XXX.DE/Maildir:INDEX=/home/mailstore/indexes/U/USERNAME As you can see the mail variable wasn't set by LDAP at all. We did some more tests and found a workaround, when using another LDAP (mwnid) attribute that contains the same information it works just fine user_attrs = xxxMailbox=mail=maildir:/home/mailstore/%U$/Maildir:INDEX=/home/mailstore/indexes/%1U$/%U$, uidNumber=vmail, gidNumber=vmail, xxxMailQuota=quota_rule2=*:storage=%$B, mwnid=home=/home/mailstore/%U$ Apr 8 14:18:06 lxmhs23 dovecot: auth(default): ldap(username(a)xxx.de): user search: base=<deleted> scope=onelevel filter=<deleted> fields=xxxMailbox,uidNumber,gidNumber,xxxMailQuota,mwnid Apr 8 14:18:06 lxmhs23 dovecot: auth(default): ldap(username(a)xxx.de): result: xxxMailQuota(quota_rule2=*:storage=%$B)=*:storage=1073741824B xxxMailbox(mail=maildir:/home/mailstore/%U$/Maildir:INDEX=/home/mailstore/indexes/%1U$/%U$)=maildir:/home/mailstore/1636D8B1D7916DEA//Maildir:INDEX=/home/mailstore/indexes/1/1636D8B1D7916DEA/ mwnid(home=/home/mailstore/%U$)=/home/mailstore/1636D8B1D7916DEA Apr 8 14:18:06 lxmhs23 deliver(username(a)xxx.de): maildir: data=/home/mailstore/1636D8B1D7916DEA//Maildir:INDEX=/home/mailstore/indexes/1/1636D8B1D7916DEA/ So, it looks like there is an issue using the same LDAP attribute (xxxMailbox in this case) twice in variable expansion. Is this a known issue? Of course there are several viable workarounds (base mail location on home directory, use the second attribute), but this problem was pretty surprising. Bernhard

4 6

[Dovecot] Trying nonplaintext mech with LDAP password-hash
by dovecotlist＠encambio.com 09 Apr '09

09 Apr '09

Hello List, The only passdb block in /pfx/etc/dovecot/dovecot.conf is: passdb ldap { args = /pfx/etc/dovecot/dovecot-ldap.conf } In /pfx/etc/dovecot/dovecot-ldap.conf: auth_bind = no dn = cn=mymgr,dc=host,dc=tld dnpass = ******** default_pass_scheme = LDAP-MD5 In /pfx/etc/openldap/slapd.conf: password-hash {MD5} If I try: $ /pfx/bin/ldapsearch <...> \ | grep '^userPassword' \ | sed -e 's;.*:: $.*$$;\1;' \ | mimencode -u ...I get the correct password (MD5 hashed.) According to wiki.dovecot.org/AuthDatabase/LDAP/PasswordLookups this should work, and indeed when starting dovecot it does not complain about: 'CRAM-MD5 mechanism can't be supported with given passdbs' Instead it starts right up, but when a thunderbird client connects and tries authenticating with CRAM-MD5 it fails. In the wiki page 'PasswordLookups' it mentions: Supports non-plaintext authentication mechanisms (if returning plaintext/properly hashed passwords). I've already verified that this works correctly with plaintext (CLEARTEXT in slapd.conf), but I really want to store the passwords in LDAP using some hash. Why doesn't LDAP-MD5 work as advertised? What did the author mean by 'properly hashed passwords'? Thanks. -- Eduard

2 2