- dovecot - dovecot.org

[Dovecot] catching authentication failures with LDAP backend
by Udo Rader 06 Dec '08

06 Dec '08

Hi, we have recently been hit by a couple of brute force password attacks against dovecot. So what I want to do now is to add dovecot to fail2ban in order to block further attacks. However, I don't seem to be able to find out password verifification failures for our LDAP based user data. The only thing I see are loads of lines like these in the logfiles: -------CUT------- dovecot: Nov 30 09:09:51 Info: pop3-login: Disconnected: user=<ludovic>, method=PLAIN, rip=217.147.235.52, lip=81.16.98.99 dovecot: Nov 30 09:09:51 Info: pop3-login: Disconnected: user=<luna>, method=PLAIN, rip=217.147.235.52, lip=81.16.98.99 dovecot: Nov 30 09:09:51 Info: pop3-login: Disconnected: user=<luke>, method=PLAIN, rip=217.147.235.52, lip=81.16.98.99 -------CUT------- Googling the web I found that PAM based authentication obviously gives a matchable error message, but for some reasons the ldap backend does not - or does it? Any pointers highly appreciated :-) dovecot -n says this: -------CUT------- # 1.0.15: /etc/dovecot/dovecot.conf log_path: /var/log/dovecot.log protocols: imaps imap pop3 listen: 81.16.98.99 ssl_listen(default): 81.16.98.99 ssl_listen(imap): 81.16.98.99 ssl_listen(pop3): ssl_cert_file: /etc/bestsolution/ssl/mail.bestsolution.at-cert.pem ssl_key_file: /etc/bestsolution/ssl/mail.bestsolution.at-key.pem ssl_parameters_regenerate: 24 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login first_valid_uid: 9 mail_access_groups: mail mail_privileged_group: mail default_mail_env: mbox:~/mail/:INBOX=/var/mail/%u mail_location: mbox:~/mail/:INBOX=/var/mail/%u mmap_disable: yes lock_method: dotlock maildir_copy_with_hardlinks: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %v.%u auth default: mechanisms: plain digest-md5 cram-md5 login passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix -------CUT------- -- Udo Rader, CTO http://www.bestsolution.at

2 6

Re: [Dovecot] Max OS X 10.5 Mail + Dovecot
by Peter Giessel 05 Dec '08

05 Dec '08

On Friday, December 05, 2008, at 10:45AM, "Chris Cappuccio" <chris(a)nmedia.net> wrote: >People using the new OS X mail client are unable to connect to the unsigned dovecot-mkcert.sh certificate on my Dovecot installations. Turning off SSL fixes the problem. Is there any way to make it work automatically, or do I just have to get the certificates signed? Has anyone figured this one out before? I have an unsigned SSL certificate with Dovecot and connect fine using OSX.5's Mail.app. What do you mean, "unable to connect"? Do you really mean "unable to connect", or do you mean, "an error message comes up every time they try to connect"? If its the latter complaint, please see this document: http://support.apple.com/kb/TA22383 I know it says 10.3 Mail, but the steps to follow are essentially unchanged between 10.3 and 10.5.

2 1

[Dovecot] Max OS X 10.5 Mail + Dovecot
by Chris Cappuccio 05 Dec '08

05 Dec '08

Hi, People using the new OS X mail client are unable to connect to the unsigned dovecot-mkcert.sh certificate on my Dovecot installations. Turning off SSL fixes the problem. Is there any way to make it work automatically, or do I just have to get the certificates signed? Has anyone figured this one out before? Thanks, Chris

1 0

[Dovecot] quota warning for fs quota
by Florian Effenberger 05 Dec '08

05 Dec '08

Hello, I configured my Dovecot to use filesystem (fs) quota. It works fine, the correct free/used space and percentage is being shown to the client. However, the warning feature doesn't seem to work, no mail is being sent, although executing the script standalone works fine. Is quota warning for fs quota supported? I use Dovecot 1.0.10 (Ubuntu package). Thanks, Florian

2 2

[Dovecot] Username changed by dovecot..?
by Romer Ventura 05 Dec '08

05 Dec '08

Hello, I have postfix+dovecot authenticating via LDAP to Active directory and everything is working fine except that some user names get changed by dovecot. # cat dovecot/dovecot-ldap.conf hosts = 192.168.50.30 192.168.50.31 base = ou=HST-Users,dc=h-st,dc=com ldap_version = 3 auth_bind = yes dn = cn=<account>,cn=Users,dc=h-st,dc=com dnpass = <password> user_attrs = sAMAccountName=mail=maildir:/home/vmail/%Ud/%Ln,=gid=1000,=uid=1001 user_filter = (&(objectClass=person)(mail=%u)) pass_filter = (&(objectClass=person)(mail=%u)) I am using the value of ³mail² field from active directory as user name. So here are test users: test1: mail=test1(a)h-st.com test3: mail=test3(a)housigma20.h-st.com test5: mail=test5(a)yomama.com USER TEST1: # telnet localhost pop3 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user test1(a)h-st.com +OK pass houston +OK Logged in. Logs show: dovecot: auth(default): client in: AUTH 1 PLAIN service=pop3 secured lip=127.0.0.1 rip=127.0.0.1 lport=110 rport=43073 resp=<hidden> dovecot: auth(default): ldap(test1(a)h-st.com,127.0.0.1): bind search: base=ou=HST-Users,dc=h-st,dc=com filter=(&(objectClass=person)(mail=test1(a)h-st.com)) dovecot: auth(default): ldap(test1(a)h-st.com,127.0.0.1): no fields returned by the server dovecot: auth(default): client out: OK 1 user=test1(a)h-st.com dovecot: auth(default): master in: REQUEST 7 3526 1 dovecot: auth(default): ldap(test1(a)h-st.com,127.0.0.1): user search: base=ou=HST-Users,dc=h-st,dc=com scope=subtree filter=(&(objectClass=person)(mail=test1(a)h-st.com)) fields=sAMAccountName dovecot: auth(default): ldap(test1(a)h-st.com,127.0.0.1): result: sAMAccountName(mail=maildir:/home/vmail/%Ud/%Ln)=maildir:/home/vmail/H-ST.CO M/test1 dovecot: auth(default): master out: USER 7 test1(a)h-st.com mail=maildir:/home/vmail/H-ST.COM/test1 gid=1000 uid=1001 dovecot: pop3-login: Login: user=<test1(a)h-st.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured The directory was created and everything is fine. USER TEST3: # telnet localhost pop3 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user test3(a)housigma20.h-st.com +OK pass houston -ERR [IN-USE] Internal login failure. Refer to server log for more information. Connection closed by foreign host. Logs show: dovecot: auth(default): client in: AUTH 1 PLAIN service=pop3 secured lip=127.0.0.1 rip=127.0.0.1 lport=110 rport=34057 resp=<hidden> dovecot: auth(default): ldap(test3(a)housigma20.h-st.com,127.0.0.1): bind search: base=ou=HST-Users,dc=h-st,dc=com filter=(&(objectClass=person)(mail=test3(a)housigma20.h-st.com)) dovecot: auth(default): auth(test3(a)housigma20.h-st.com,127.0.0.1): username changed test3(a)housigma20.h-st.com -> test3 dovecot: auth(default): ldap(test3,127.0.0.1): result: uid(user)=test3 dovecot: auth(default): client out: OK 1 user=test3 dovecot: auth(default): master in: REQUEST 8 3859 1 dovecot: auth(default): ldap(test3,127.0.0.1): user search: base=ou=HST-Users,dc=h-st,dc=com scope=subtree filter=(&(objectClass=person)(mail=test3)) fields=sAMAccountName dovecot: auth(default): ldap(test3,127.0.0.1): Unknown user dovecot: auth(default): userdb(test3,127.0.0.1): user not found from userdb ldap dovecot: auth(default): master out: NOTFOUND 8 dovecot: pop3-login: Internal login failure (auth failed, 1 attempts): user=<test3>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured It obvously fails because the username was changed to only %u. Why does it get changed...? Any ideas...? Thanks.. # dovecot -n # 1.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.16.60-0.21-xenpae i686 SUSE Linux Enterprise Server 10 (i586) protocols: imap imaps pop3 pop3s login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_uid: vmail mail_gid: vmail mail_location: maildir:~/Maildir/ mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): acl mail_plugins(imap): acl mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail

2 1

[Dovecot] UID/GID changed
by Albert E. Whale 05 Dec '08

05 Dec '08

I have a problem with Dovecot 1.1.6 after having reset the UID/GID information for a few email accounts. I get the following error: Dec 5 12:26:03 ns6 dovecot: POP3(mike): stat(/home/popuser_mike/Maildir/tmp) failed: Permission denied (euid=1366 egid=1366 missing +x perm: /home/popuser_mike/Maildir) Dec 5 12:26:03 ns6 dovecot: POP3(mike): Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2008-12-05 12:26:03] Dec 5 12:27:40 ns6 dovecot: POP3(mike): stat(/home/popuser_mike/Maildir/tmp) failed: Permission denied (euid=1366 egid=1366 missing +x perm: /home/popuser_mike/Maildir) Dec 5 12:27:40 ns6 dovecot: POP3(mike): Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2008-12-05 12:27:40] Permissions are: [/home/popuser_mike/Maildir] ls -la total 40 drwxrws--- 5 mike mail 4096 Dec 5 12:23 ./ drwxr-xr-x 6 mike mike 4096 Nov 5 14:34 ../ drwx--S--- 2 mike mail 4096 Dec 3 21:20 cur/ -rw-rw---- 1 mike mail 7560 Dec 4 08:02 dovecot.index.log.save -rw-rw---- 1 mike mail 184 Dec 4 08:02 dovecot.index.save -rw-rw---- 1 660 mail 18 Dec 4 08:02 dovecot-uidlist.save -rw-rw---- 1 mike mail 8 Nov 5 19:00 dovecot-uidvalidity -rw-rw---- 1 mike mail 0 Nov 5 19:00 dovecot-uidvalidity.4912338c drwx--S--- 2 mike mail 4096 Dec 5 11:46 new/ drwx--S--- 2 mike mail 4096 Dec 5 11:46 tmp/ What am I missing? -- Albert E. Whale, CHS CISA CISSP Sr. Security, Network and Systems Consultant ------------------------------------------------------------------------ ABS Computer Technology, Inc. <http://www.ABS-CompTech.com> - Email, Internet and Security Consultants

2 1

[Dovecot] Backtrace:/usr/local/libexec/dovecot/imap
by Ralf Hildebrandt 05 Dec '08

05 Dec '08

GNU gdb 6.8-debian Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu"... Reading symbols from /lib/i686/cmov/libdl.so.2...Reading symbols from /usr/lib/debug/lib/i686/cmov/libdl-2.7.so...done. done. Loaded symbols for /lib/i686/cmov/libdl.so.2 Reading symbols from /lib/i686/cmov/libc.so.6...Reading symbols from /usr/lib/debug/lib/i686/cmov/libc-2.7.so...done. done. Loaded symbols for /lib/i686/cmov/libc.so.6 Reading symbols from /lib/ld-linux.so.2...Reading symbols from /usr/lib/debug/lib/ld-2.7.so...done. done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_trash_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_trash_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_fts_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_fts_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_zlib_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_zlib_plugin.so Reading symbols from /usr/lib/libz.so.1...done. Loaded symbols for /usr/lib/libz.so.1 Reading symbols from /lib/libbz2.so.1.0...done. Loaded symbols for /lib/libbz2.so.1.0 Reading symbols from /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so Reading symbols from /usr/lib/gconv/ISO8859-1.so...Reading symbols from /usr/lib/debug/usr/lib/gconv/ISO8859-1.so...done. done. Loaded symbols for /usr/lib/gconv/ISO8859-1.so Reading symbols from /lib/libgcc_s.so.1...done. Loaded symbols for /lib/libgcc_s.so.1 Core was generated by `/usr/local/libexec/dovecot/imap'. Program terminated with signal 6, Aborted. [New process 11111] #0 0xb7ff2424 in __kernel_vsyscall () #0 0xb7ff2424 in __kernel_vsyscall () No symbol table info available. #1 0xb7eb3640 in raise () from /lib/i686/cmov/libc.so.6 No symbol table info available. #2 0xb7eb5018 in abort () from /lib/i686/cmov/libc.so.6 No symbol table info available. #3 0x080d7235 in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:150 backtrace = 0x9611888 "/usr/local/libexec/dovecot/imap [0x80d7221] -> /usr/local/libexec/dovecot/imap [0x80d72a2] -> /usr/local/libexec/dovecot/imap [0x80d6c39] -> /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so [0xb7"... #4 0x080d72a2 in i_internal_fatal_handler (type=LOG_TYPE_PANIC, status=0, fmt=0xb7e3cf50 "file %s: line %d (%s): assertion failed: (%s)", args=0xbfa0dcf4 "N��\231") at failures.c:430 No locals. #5 0x080d6c39 in i_panic ( format=0xb7e3cf50 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:197 No locals. #6 0xb7e39a82 in uidlist_write_array (output=0x965c9bc, uid_list=0xb79cae0c, uid_count=31, packed_flags=<value optimized out>, offset=0, write_size=true, size_r=0xbfa0ddd8) at squat-uidlist.c:153 uidbuf = (uint8_t *) 0x96117b8 "�\030=" bufp = (uint8_t *) 0x96117ba "=" sizebuf = "�hݠ�" sizebufp = <value optimized out> listbuf = "��" listbufp = (uint8_t *) 0xbfa0dd52 "��hݠ��" uid = 6 uid2 = 5 prev = <value optimized out> base_uid = 3112 size_value = <value optimized out> i = 4 bitmask_len = 7 uid_list_len = 1008 idx = 1008 max_idx = <value optimized out> mask = <value optimized out> datastack = true num = <value optimized out> __PRETTY_FUNCTION__ = "uidlist_write_array" #7 0xb7e39d78 in uidlist_write (output=0x965c9bc, list=<value optimized out>, write_size=<value optimized out>, size_r=0xbfa0ddd8) at squat-uidlist.c:270 _data_stack_cur_id = 6 uid_list = (const uint32_t *) 0xb79cae0c buf = "��" bufp = <value optimized out> uid_count = 31 packed_flags = <value optimized out> offset = 0 ret = <value optimized out> __PRETTY_FUNCTION__ = "uidlist_write" #8 0xb7e39eaf in uidlist_flush (ctx=0x965c948, list=0xb79cae08, uid=3149) at squat-uidlist.c:1104 size = 128 #9 0xb7e3a236 in squat_uidlist_build_add_uid (ctx=0x965c948, uid_list_idx=<value optimized out>, uid=3149) at squat-uidlist.c:1219 list = <value optimized out> idx = <value optimized out> mask = <value optimized out> p = (uint32_t *) 0xb79cae84 __PRETTY_FUNCTION__ = "squat_uidlist_build_add_uid" #10 0xb7e3721d in squat_build_add (ctx=0x965cc80, uid=3149, data=0x961126d "\001\a\t'\003\002\020\004\b", size=4) at squat-trie.c:643 trie = (struct squat_trie *) 0x965bc50 node = (struct squat_node *) 0x9648284 end = (const unsigned char *) 0x961126f "\t'\003\002\020\004\b" idx = <value optimized out> level = 2 __PRETTY_FUNCTION__ = "squat_build_add" #11 0xb7e37527 in squat_build_word (ctx=0x965cc80, uid=12733, data=0x961126a "\003\021\005\001\a\t'\003\002\020\004\b", char_lengths=0x0, size=12) at squat-trie.c:839 trie = (struct squat_trie *) 0x965bc50 i = <value optimized out> j = <value optimized out> bytelen = <value optimized out> __PRETTY_FUNCTION__ = "squat_build_word" #12 0xb7e376b1 in squat_trie_build_more (ctx=0x965cc80, uid=6366, type=SQUAT_INDEX_TYPE_HEADER, input=0x9631c98 "RETURN-PATH: <RUNDMAIL-CCBMDC-BOUNCES+HEDA.KVAKAN=CHARITE.DE(a)CHARITE.DE>\nX-ORIGINAL-TO: HKVAKAN(a)POSTAMT.CHARITE.DE\nDELIVERED-TO: HKVAKAN(a)POSTAMT.CHARITE.DE\nRECEIVED: FROM WEBMAIL.CHARITE.DE (WEBMAIL.C"..., size=4790) at squat-trie.c:935 _data_stack_cur_id = 5 ret = <value optimized out> #13 0xb7e34984 in fts_backend_squat_build_more (_ctx=0x965cca0, uid=6366, data=0x9631c98 "RETURN-PATH: <RUNDMAIL-CCBMDC-BOUNCES+HEDA.KVAKAN=CHARITE.DE(a)CHARITE.DE>\nX-ORIGINAL-TO: HKVAKAN(a)POSTAMT.CHARITE.DE\nDELIVERED-TO: HKVAKAN(a)POSTAMT.CHARITE.DE\nRECEIVED: FROM WEBMAIL.CHARITE.DE (WEBMAIL.C"..., size=4790, headers=true) at fts-backend-squat.c:139 squat_type = 6 #14 0xb7e76ace in fts_backend_build_more (ctx=0x965cca0, uid=6366, data=0x9631c98 "RETURN-PATH: <RUNDMAIL-CCBMDC-BOUNCES+HEDA.KVAKAN=CHARITE.DE(a)CHARITE.DE>\nX-ORIGINAL-TO: HKVAKAN(a)POSTAMT.CHARITE.DE\nDELIVERED-TO: HKVAKAN(a)POSTAMT.CHARITE.DE\nRECEIVED: FROM WEBMAIL.CHARITE.DE (WEBMAIL.C"..., size=4790, headers=<value optimized out>) at fts-api.c:99 No locals. #15 0xb7e78fba in fts_mailbox_search_next_nonblock (ctx=0x965c378, mail=0x9664f90, tryagain_r=0xbfa0e05b) at fts-storage.c:81 fctx = (struct fts_search_context *) 0x965c400 ret = <value optimized out> #16 0x08060896 in cmd_search_more (cmd=0x961c090) at cmd-search.c:83 ctx = (struct imap_search_context *) 0x961c158 end_time = {tv_sec = 3, tv_usec = 157864728} tryagain = <value optimized out> ret = 3 #17 0x08060ce6 in cmd_search_more_callback (cmd=0x961c090) at cmd-search.c:132 client = (struct client *) 0x961be40 finished = <value optimized out> #18 0x080de769 in io_loop_handle_timeouts (ioloop=0x96179b0) at ioloop.c:298 _data_stack_cur_id = 2 #19 0x080df042 in io_loop_handler_run (ioloop=0x96179b0) at ioloop-epoll.c:175 ctx = (struct ioloop_handler_context *) 0x9617aa8 event = <value optimized out> list = <value optimized out> io = <value optimized out> tv = {tv_sec = 0, tv_usec = 0} t_id = <value optimized out> msecs = 0 ret = 0 i = <value optimized out> j = <value optimized out> call = <value optimized out> #20 0x080de510 in io_loop_run (ioloop=0x96179b0) at ioloop.c:320 No locals. #21 0x0806b4da in main (argc=) at main.c:293 No locals. $1 = {prev = 0x0, next = 0x0, client = 0x961be40, pool = 0x961c078, tag = 0x961c0c8 "82", name = 0x961c0d0 "uid", cmd_flags = COMMAND_FLAG_BREAKS_SEQS, func = 0x8060840 <cmd_search_more>, context = 0x961c158, parser = 0x9620078, state = CLIENT_COMMAND_STATE_WAIT_INPUT, sync = 0x0, uid = 1, cancel = 0, param_error = 0, temp_executed = 0} (gdb) quit -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) snickebo(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de I'm looking for a job Windows has poisoned your finger muscle memory, don't confuse "\" with "/".

1 0

[Dovecot] Auth_username_format question
by Romer Ventura 05 Dec '08

05 Dec '08

Hello again, I have change authentication to LDAP from Kerberos due to recent changes to my plans and I am having a little problem getting the malbox created in desired path. At the moment the home folders are being created in: /home/vmail/DOMAIN.COM/%Ln and it worked great with kerberos, but with LDAP the domain part is missing so I did the following: Auth_username_format = %Ln Then I did: # telnet localhost pop3 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user test4(a)domain.com +OK pass password +OK Logged in. But I saw in the logs the following: dovecot: auth(default): master out: USER 1 test4 uid=1001 gid=1000 home=/home/vmail//test4 The domain was missing.. So does it mean that auth_username_format dictates what dovecot will use, not only for the authentication part, but for everything else as well..? To me it seems that once the username has been formatted it forgets everything that doesn¹t constitute part of the specified format. Or am I misunderstanding the entire concept..? How cant I preserve the domain part so that the homes can be placed in the desired location: /home/vmail/%d/%u...? Thanks

2 1

[Dovecot] Dovecot Proxy with MySQL auth
by Justin Krejci 05 Dec '08

05 Dec '08

We are looking at deploying several pop/imap servers to house the mail for 15,000 or more mailbox accounts. We are contemplating on the design and are looking at using MySQL auth (we already have a MySQL environment in place for our user auth to live) and proxy_maybe so each server can proxy for all the others and we just have a network load balancer distribute the incoming connections to all of the Dovecot servers. Each server would have its own local maildir storage for the users local to that server and all of the authentication and target backend pop/imap server data would be stored in the same MySQL database. The problem we are running into is the documentation is not very clear on this type of scenario. http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy At the bottom of this page it gives a query example of "SELECT NULL AS password, ." but that does not seem to allow for us to use the proxy_maybe if the destination server is localhost (and therefore do not proxy) it does not seem that the above query will actually send the real password for authentication. Is this a misunderstanding on our part or is the use of mysql auth + proxy_maybe not feasible? Assuming the latter we surmised using a separate instance of Dovecot on each machine to act solely as a proxy front end (use proxy instead of proxy_maybe) then on the second instance there is no proxy config and it listens on a separate TCP port like 80143 or whatever. Any input or suggestions would be appreciated. Justin Krejci

2 4

[Dovecot] Roadmap
by Jonathan Siegle 05 Dec '08

05 Dec '08

I've been running 1.2alpha3 for weeks now without issue. However, some people in my testing department object to even testing "alpha" code. Are there specific features/bugs that need resolved before alpha reaches beta? Thanks, Jonathan

2 1