- dovecot - dovecot.org

[Dovecot] Corrected permissions for login directory message
by Nicolas Letellier 14 Sep '08

14 Sep '08

Hello. I already have this warn message when I start dovecot (1.1.3). I saw some message in mailing list about this warning, but nothing which solve my problem. See the message: root@machine dovecot $ /usr/local/etc/rc.d/dovecot restart Stopping dovecot. Waiting for PIDS: 47494. Starting dovecot. Warning: Corrected permissions for login directory /var/run/dovecot/login See the permissions: ls -l /var/rundrwxr-xr-x 3 root wheel 512 Sep 11 15:42 dovecot ls -l /var/run/dovecot/ srw-rw---- 1 dovecot mail 0 Sep 11 15:42 auth-master srw------- 1 root wheel 0 Sep 11 15:42 auth-worker.47529 srwxrwxrwx 1 root wheel 0 Sep 11 15:42 dict-server drwxr-x--- 2 root dovecot-auth 512 Sep 11 15:42 login -rw------- 1 root wheel 6 Sep 11 15:42 master.pid ls -l /var/run/dovecot/login/ srw-rw---- 1 root dovecot-auth 0 Sep 11 15:42 default -rw-r--r-- 2 root wheel 230 Sep 11 15:41 ssl-parameters.dat And the dovecot conf: # 1.1.3: /usr/local/etc/dovecot.conf syslog_facility: local6 ssl_cert_file: /etc/ssl/mail/mail.nicoelro.net.cert ssl_key_file: /etc/ssl/mail/mail.nicoelro.net.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login login_user: dovecot-auth login_greeting: Mail Server login_processes_count: 2 verbose_proctitle: yes first_valid_uid: 143 last_valid_uid: 143 first_valid_gid: 143 last_valid_gid: 143 mail_access_groups: mail mail_location: maildir:/var/mail/vmail/%u/ mail_plugins: quota imap_quota imap_client_workarounds: delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep auth default: mechanisms: plain login passdb: driver: sql args: /usr/local/etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: dovecot group: mail plugin: quota: maildir sieve: /var/mail/vmail/%u/sieve Thanks for your informations. -- - Nicolas.

2 4

[Dovecot] cram-md5 and users maintaining their own passwords?
by Steinar Bang 13 Sep '08

13 Sep '08

Is there any other mechanism than using passwd files with md5-hashed passwords created by dovecotpw that will support cram-md5 authentication? Has anyone created setups where the passwd databases reside in the individual users home directories? Is it possible to persuade dovecotpw to update the passwd databases automatically. Having to use a text editor to paste in the passwords sets a high user treshold on using the cram-md5 authentication mechanism. Thanx! - Steinar

2 7

[Dovecot] Questions about using sieve
by Robin Atwood 13 Sep '08

13 Sep '08

I am trying to filter my imap mail sent to my phone by using sieve. Currently everything is set up and works well using mbox and sendmail as the lda. I have re-installed dovecot with sieve included and updated dovecot.conf, which gives # dovecot -n # 1.1.3: /etc/dovecot/dovecot.conf ssl_cert_file: /etc/ssl/dovecot/server.pem ssl_key_file: /etc/ssl/dovecot/server.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login mail_privileged_group: mail mail_location: mbox:~/mail:INBOX=/var/mail/%u auth default: passdb: driver: pam args: * userdb: driver: passwd and I have added "mail_plugins = cmusieve" to protocol lda{}. I then created a ".dovecot.sieve" script but am not sure where to place it. I tried ~/ and ~/.imap but it never seems to get compiled. Dovecot is running as a root service so it should have access. Setting mail_debug=yes produces no clues, so what should I be looking at? TIA -Robin -- ---------------------------------------------------------------------- Robin Atwood. "Ship me somewheres east of Suez, where the best is like the worst, Where there ain't no Ten Commandments an' a man can raise a thirst" from "Mandalay" by Rudyard Kipling ----------------------------------------------------------------------

3 3

[Dovecot] Dovecot Ldap Logs
by Proskurin Kirill 13 Sep '08

13 Sep '08

Hello all! One question about ldap. In my logs im see this: Info: auth(default): ldap(sysadmin(a)domain.off,172.16.1.80): user search: base=dc=CAS scope=subtree filter=(&(objectClass=mailUser)(mail=sysadmin(a)domain.off)) fields=(all) Info: auth(default): ldap(sysadmin(a)domain.off,172.16.1.80): result: accountStatus(?unknown?)= cn(?unknown?)= givenName(?unknown?)= initials(?unknown?)= l(?unknown?)= o(?unknown?)= objectClass(?unknown?)= telephoneNumber(?unknown?)= sn(?unknown?)= title(?unknown?)= uid(?unknown?)= userPassword(?unknown?)= mail(?unknown?)= --- What is that mean? And how can im get a rid of this? -- Best regards, Proskurin Kirill

2 3

[Dovecot] API Examples?
by tcowin 13 Sep '08

13 Sep '08

I need to write a little client to just get the 5 most recent email headers (and \Seen status) from the INBOX of a given user. Are there any API examples anywhere that would speed this process along, or any spots in the source that would give me a jump start? or would it be better to act as an IMAP client? Many Thanks In Advance, Tom -- View this message in context: http://www.nabble.com/API-Examples--tp19444931p19444931.html Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] version 1.1.3 assertion on index-sort-string
by Nuno Lopes 13 Sep '08

13 Sep '08

Hi, I am seeing the following log lines on some accounts on my setup: Sep 11 01:42:36 xxxx dovecot: Panic: IMAP(xxxxxxxxxxxxxxxx): file index-sort-string.c: line 610 (index_sort_add_ids_range): assertion failed: (skip > 0) Sep 11 01:42:36 xxxx dovecot: IMAP(xxxxxxxxxxxxxx): Raw backtrace: imap [0x5555555d3690] -> imap [0x5555555d36f7] -> imap [0x5555555d2d58] -> imap(index_sort_list_finish_string+0xf13) [0x5555555a04b3] -> imap(index_storage_search_next_nonblock+0x432) [0x55555559cd22] -> imap(mailbox_search_next+0x21) [0x5555555a42b1] -> imap(imap_sort+0xdc) [0x555555577ddc] -> imap(cmd_sort+0x33d) [0x555555570ead] -> imap(cmd_uid+0x54) [0x555555571934] -> imap [0x55555557234c] -> imap [0x555555572402] -> imap [0x555555572c1f] -> imap(client_input+0x62) [0x555555572e42] -> imap(io_loop_handler_run+0xf8) [0x5555555da6d8] -> imap(io_loop_run+0x1d) [0x5555555d972d] -> imap(main+0x462) [0x55555557a5f2] -> /lib64/libc.so.6(__libc_start_main+0xf4) [0x2b7c871d8154] -> imap [0x55555556c8c9] these assertions happen when ordering by from and go away by deleting index files. As usual if you wish I can send you the index files as they were when this error happened. Thanks, -- Nuno Lopes

2 2

[Dovecot] Dovecot 1.1.3 Kerberos5 GSSAPI bug (with patch)
by Matthew Wesley 12 Sep '08

12 Sep '08

The functionality added in changeset 818a638fa9a3 has a bug for x86_64 on line 103. The src/auth/mech-gssapi.c file must now include stdlib.h to have the declaration for getenv(). Otherwise, the compiler uses the implicit return type (int), which truncates the 8-byte pointer getenv() returns to a 4-byte value. This causes a segfault on subsequent reads. Here is debugger output illustrating the problem: (gdb) list 106 101 const char *path; 102 103 path = getenv("KRB5_KTNAME"); 104 if (path != NULL) { 105 #ifdef HAVE_GSSKRB5_REGISTER_ACCEPTOR_IDENTITY 106 gsskrb5_register_acceptor_identity(path); 107 #elif defined (HAVE_KRB5_GSS_REGISTER_ACCEPTOR_IDENTITY) 108 krb5_gss_register_acceptor_identity(path); 109 #endif 110 } (gdb) p/x getenv("KRB5_KTNAME") $32 = 0xb0d7aef7 (gdb) x/s 0xb0d7aef7 0xb0d7aef7: <Address 0xb0d7aef7 out of bounds> (gdb) x/s 0x7fffb0d7aef7 0x7fffb0d7aef7: "/etc/dovecot/dovecot.keytab" A Mercurial bundle with a fix is attached, and here is the trivial patch to put in the needed #include: diff -r 43e55b9af85b src/auth/mech-gssapi.c --- a/src/auth/mech-gssapi.c Mon Sep 01 15:02:49 2008 +0300 +++ b/src/auth/mech-gssapi.c Wed Sep 03 11:37:33 2008 -0400 @@ -22,6 +22,8 @@ #include "safe-memset.h" #ifdef HAVE_GSSAPI + +#include <stdlib.h> #ifndef HAVE___GSS_USEROK # define USE_KRB5_USEROK -- UNIX was not designed to stop you from doing stupid things, because that would also stop you from doing clever things. -- Doug Gwyn

2 2

[Dovecot] error in 1.1.2
by Cor Bosman 12 Sep '08

12 Sep '08

Ive been getting a LOT of these errors since 1.1.2: So far ive seen this with 1800 customers, and we're getting active complaints about errors in imap clients. When I check the users log I always see this error.. This always happens with COPY commands in Squirrelmail. Sep 2 20:09:35 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): rename(/var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache.lock, /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache) failed: No such file or directory Sep 2 20:09:35 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): rename(/var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache.lock, /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache) failed: No such file or directory Sep 2 20:09:35 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): file_dotlock_replace() failed with index cache file /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache: No such file or directory Sep 2 20:09:35 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): file_dotlock_replace() failed with index cache file /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache: No such file or directory Sep 1 20:14:06 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): rename(/var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache.lock, /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache) failed: No such file or directory Sep 1 20:14:06 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): rename(/var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache.lock, /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache) failed: No such file or directory Sep 1 20:14:06 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): file_dotlock_replace() failed with index cache file /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache: No such file or directory Sep 1 20:14:06 userimap4.xs4all.nl dovecot: IMAP(xxxxxxx): file_dotlock_replace() failed with index cache file /var/spool/mail/dovecot-control/indexes/j/jd/xxxxxxx/.Inveztor/dovecot.index.cache: No such file or directory FreeBSD 6.2, NFS storage for everything. Any idea? Cor

6 41

[Dovecot] Dovecot 1.1.12 ignores auth_krb5_keytab settings
by christop 12 Sep '08

12 Sep '08

Hello, i am using here a FreeBSD 7.0 amd64 with latest dovecot from ports. It ignores the krb5_keytab settings, which looks like this in the logs: dovecot: Aug 02 18:56:54 Error: auth(default): gssapi(?,130.149.58.145): While processing incoming data: Miscellaneous failure (see text) dovecot: Aug 02 18:56:54 Error: auth(default): gssapi(?,130.149.58.145): While processing incoming data: /etc/krb5.keytab: No such file or directory dovecot: Aug 02 18:56:59 Info: imap-login: Aborted login (auth failed, 1 attempts): method=GSSAPI, rip=130.149.58.145, lip=130.149.58.162, TLS It is the same errror i got with dovecot 1.0.13. MfG Christoph Below my config: # 1.1.2: /usr/local/etc/dovecot.conf log_path: /var/log/dovecot.log protocols: imaps managesieve listen: mail2.physik-pool.tu-berlin.de ssl_cert_file: /etc/CERT ssl_key_file: /etc/KEY login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login verbose_proctitle: yes first_valid_uid: 200 mail_privileged_group: mail mail_location: maildir:~/maildir:INDEX=/var/dovecot/%1n/%n mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(managesieve): sieve_storage(default): sieve_storage(imap): sieve_storage(managesieve): ~/sieve sieve(default): sieve(imap): sieve(managesieve): ~/.dovecot.sieve namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/ location: mbox:~/mail list: yes subscriptions: yes auth default: mechanisms: gssapi plain login krb5_keytab: /etc/mail2.krb5.keytab worker_max_count: 120 passdb: driver: pam userdb: driver: passwd args: [blocking=yes]

2 4

[Dovecot] Public (Shared Folders) ACL Questions
by Mailing List 11 Sep '08

11 Sep '08

I'm trying to set up a public namespace so that a set of IMAP folders are available to all staff - similar to MS Exchange Public Folders. I've managed to set up the namespace correctly but I'm having trouble with the ACLs. The global ACL file is the only method I can get to work. All I want to do is to allow 1 user admin privileges to create & delete anything but all other users should only be able to create not delete. Reading through the mailing list I thought a /etc/dovecot-acls/.DEFAULT file would be suitable but what should be put in here to achieve what I want? Are you able to use wildcards somehow within this file, i.e.: ---------------------------------------- owner lrwstiekxa user=admin(a)domain.com lrwstiekxa user=*(a)domain.com lrw ---------------------------------------- Does this .DEFAULT file only apply to the public (shared) namespace or will it effect private mailboxes also? If I was to create a specific global acl file for a specific folder which would take precedence, the .DEFAULT acls or the specific folder acls? Also an "INBOX" is shown within the public folders namespace but no folder exists in the public folders maildir hierarchy - any ideas how I can stop this? Any help would be greatly appreciated. Gavin

2 1