- dovecot - dovecot.org

Re: [Dovecot] deliver triggering SELinux AVC denials
by greno＠verizon.net 11 Jan '08

11 Jan '08

>From: Timo Sirainen <tss(a)iki.fi> >Date: 2008/01/01 Tue PM 09:18:05 CST >To: Gerry Reno <greno(a)verizon.net> >Cc: dovecot(a)dovecot.org >Subject: Re: [Dovecot] deliver triggering SELinux AVC denials ... >Set dotlock_use_excl=yes to see what file it's really wanting to create. Ok, did that. And looking at all the alerts it appears to be any file that deliver is trying to write under /home/vmail. My users are all virtual and they all exist like: /home/vmail/example.com/john typical permissions: -rw------- 1 vmail vmail 464 2008-01-01 20:06 dovecot.index.log but for some reason even though deliver is setup to run as vmail:vmail it is still having permission problems. dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -d ${recipient} ???? Gerry

2 1

[Dovecot] number of auth process
by Jorge Salamero Sanz 11 Jan '08

11 Jan '08

hi there, what are exactly the differences between auth_worker_max_count = 30 and auth default { count = 1 } ? first are threads (for threaded auth methods) and second the number of process ?

3 2

[Dovecot] [dovecot][configure] docdir option lost
by Guth 11 Jan '08

11 Jan '08

Hi, While building dovecot-1.0.10 i've a trouble with --docdir configure option. It seems this option overload is "lost" during makefiles recurse generation (i didn't check others overload). Following are config.log and Makefiles cuts : ------------------- $ grep docdir dovecot-1.0.10/config.log dovecot-1.0.10/Makefile dovecot-1.0.10/doc/Makefile dovecot-1.0.10/doc/wiki/Makefile dovecot-1.0.10/config.log: $ ./configure --prefix=/usr --with-gssapi --with-ldap --with-sql --with-mysql --sysconfdir=/etc --localstatedir=/var --mandir=/usr/man --with-docs --docdir=/usr/doc/dovecot-1.0.10 dovecot-1.0.10/config.log:docdir='/usr/doc/dovecot-1.0.10' dovecot-1.0.10/Makefile:docdir = /usr/doc/dovecot-1.0.10 dovecot-1.0.10/doc/Makefile:docdir = $(datadir)/doc/dovecot dovecot-1.0.10/doc/wiki/Makefile:docdir = $(datadir)/doc/dovecot ------------------- I'll correct it in a dirty way (sed is my friend after Makefiles creation) because i want it built quickly, but i guess it shouldn't be hard to avoid this problem in futures releases. -- Guth

2 1

[Dovecot] virtual domains/users and LDAP
by Anil 11 Jan '08

11 Jan '08

I have two suffixes in LDAP with users, e.g. ou=People, o=example.com ou=People, o=somethingelse.com I have the following two users: dn: uid=test1, ou=People, o=example.com uid: test1 mail: test(a)gmail.com dn: uid=test2, ou=People, o=somethingelse.com mail: test(a)yahoo.com uid: test2 The users login to IMAP as: test1(a)examle.com and test2(a)somethingelse.com. Here's an (excerpt) of the dovecot.conf file I am using: auth_bind = yes base = ou=People,o=%d scope = onelevel pass_attrs = mail=user pass_filter = (uid=%n) userdb static { args = uid=vmail gid=vmail home=/var/mail/apps/%d/%n } The problem I am seeing when the user logs in, the home dir is getting created incorrectly: Jan 3 14:08:12 vds5 dovecot: [ID 107833 mail.info] imap-login: Login: user=<test(a)gmail.com>, method=PLAIN, rip=, lip= Jan 3 14:08:12 vds5 dovecot: [ID 107833 mail.info] IMAP(test(a)gmail.com): Effective uid=500, gid=500, home=/var/mail/apps/gmail.com/test Jan 3 14:08:12 vds5 dovecot: [ID 107833 mail.info] IMAP(test(a)gmail.com): maildir: data=/var/mail/apps/gmail.com/test/Maildir ... I was expecting it to create the home dir under: /var/mail/apps/example.com/test1, since that is what they are logging in with. Any ideas? I am actually surprised that it even let me login with this configuration, something looks odd in this setup. :) Thanks, Anil

2 1

[Dovecot] %d not recognized with LDAP
by Anil 11 Jan '08

11 Jan '08

I saw the recent threads but didn't help for me. Here's my configuration: The domain isn't getting expanded as per logs: Jan 4 08:06:40 vds5 dovecot: [ID 107833 mail.info] IMAP(admin): maildir: data=/var/mail/apps//admin/Maildir # 20080102: /usr/local/dovecot/etc/dovecot.conf listen: *:143 ssl_disable: yes disable_plaintext_auth: no login_dir: /usr/local/dovecot/var/run/dovecot/login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_log_format_elements: user=<%n@%d> method=%m rip=%r lip=%l %c login_max_connections: 64 max_mail_processes: 128 mail_location: maildir:/var/mail/apps/%d/%n/Maildir mail_debug: yes auth default: passdb: driver: ldap args: /usr/local/dovecot/etc/dovecot-ldap.conf userdb: driver: static args: uid=vmail gid=vmail home=/var/mail/apps/%d/%n Here's the relevant LDAP configuration: auth_bind = yes pass_attrs = uid=user pass_filter = uid=%n I tried setting the mail_location to: maildir:~/Maildir and explicitly specifying the full path, but still the Maildir is getting created with out the %d. Of course, the user is logging in with "admin(a)domain.com". Any ideas?

4 5

[Dovecot] Problems with AUTH=PLAIN in pop3
by Maykel Moya 11 Jan '08

11 Jan '08

I'm using Dovecot (1.0.10) locally to test SugarCRM. When I tried to set up a mail account in Sugar, it complains with -- SECURITY PROBLEM: insecure server advertised AUTH=PLAIN Please check your settings and try again. -- don't know if that behaviour is a bug or a feature of php-imap. The case is that I'm unable to set up the mail account in Sugar. Timo answered to me on IRC about Dovecot assuming that a connection from the same ip is considered secured. I'd rebuild Dovecot with the following patch: --- dovecot-1.0.10/src/pop3-login/client.c.orig 2008-01-05 00:44:14.000000000 -0500 +++ dovecot-1.0.10/src/pop3-login/client.c 2008-01-05 00:44:30.000000000 -0500 @@ -331,7 +331,7 @@ client->created = ioloop_time; client->refcount = 1; client->common.tls = ssl; - client->common.secured = ssl || net_ip_compare(ip, local_ip); + client->common.secured = ssl; client->common.local_ip = *local_ip; client->common.ip = *ip; --- but still not able to make it not accept AUTH PLAIN authentication from the same ip. I'm missing something? On the other hand, if I set disable_plaintext_auth to yes I cannot use the classic USER/PASS pop3 verbs. I'm not sure what the POP3 related RFCs mandates with respect to this. Regards, maykel

2 1

[Dovecot] Imap assertion (dovecot-1.1.beta13)
by Nuno Lopes 11 Jan '08

11 Jan '08

Hi, I continue testing the beta versions and have seen a great improvement over the last few ones. On beta13 I'm seeing the following assert on some client folders: file index-mail.c: line 759 (index_mail_stream_destroy_callback): assertion failed: (mail->data.destroying_stream) If you need I can try and reproduce this in a more controled environment to pinpoint the problem. Thanks, -- Nuno Lopes

2 4

[Dovecot] [debian] Etch Packages Available for v1.0.10
by Brian T Glenn 10 Jan '08

10 Jan '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Compiled only for i386 with source package available. deb http://debian.delink.net/ etch-delink main deb-src http://debian.delink.net/ etch-delink main Cheers, - -- Brian T Glenn http://www.delink.net/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHfcGYFy/L+4MovqIRAgJUAJ4/fcaLb/Cyeo8s42EnAOu5MZr4CgCdGgBK 2RuF/zkrGBsQzElZSBJBCaI= =dGHp -----END PGP SIGNATURE-----

3 3

[Dovecot] Too many open files
by Andrew Hutchings 10 Jan '08

10 Jan '08

Hi Guys, Just got this on one of my test72 dovecot servers: - Jun 10 12:40:28 svr21 dovecot: auth(default): net_connect_unix(/var/run/dovecot/auth-worker.18818) failed: Too many open files Jun 10 12:40:28 svr21 dovecot: pop3-login: Disconnected: method=PLAIN, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx Jun 10 12:40:28 svr21 dovecot: pop3-login: Disconnected: method=PLAIN, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx Jun 10 12:40:28 svr21 dovecot: child 18818 (auth) returned error 89 Jun 10 12:40:29 svr21 dovecot: Auth process died too early - shutting down Jun 10 12:40:29 svr21 dovecot: auth(default): mysql: Connected to localhost (maildb) Jun 10 12:40:29 svr21 dovecot: auth(default): net_connect_unix(/var/run/dovecot/auth-worker.13784) failed: No such file or directory Jun 10 12:40:29 svr21 dovecot: child 13784 (auth) returned error 89 - Is dovecot leaving files open? Or is it a large mailbox? Regards Andrew -- Andrew Hutchings (A-Wing) Linux Guru - Netserve Consultants Ltd. - http://www.domaincity.co.uk/ Admin - North Wales Linux User Group - http://www.nwlug.org.uk/ BOFH excuse 122: because Bill Gates is a Jehovah's witness and so nothing can work on St. Swithin's day.

5 5

[Dovecot] Switch from courier to dovecot
by Richard G Riley 10 Jan '08

10 Jan '08

I have an courier IMAP server running. To get sib dirs working I had to rename them all to begin with a period ".". e.g Maildir Maildir/{cur,new,tmp} Maildir/.account1/{cur,new,tmp} Maildir/.account2/{cur,new,tmp} Maildir/.account3/{cur,new,tmp} etc If I uninstall Courier and install dovecot, will these "period" dirs be seen by default? I am fairly new to this and sometimes it seems that Maildir format requirements vary a lot depending on client or server. Thank you for your help.

3 2