- dovecot - dovecot.org

[Dovecot] Compile error introduced in b13 (Solaris 10)
by mikkel＠euro123.dk 04 Jan '08

04 Jan '08

Any news on the b13 compile issue on Solaris 10 (both Sparc and X86)? Would be nice to know whether it's our own headache or something thats not supposed to be and thus expected to be fixed in the next release. Just to be clear this didn't occur in any other release (I've compiled all previous v1.1 betas on the same setup including b12). Ref.: http://dovecot.org/list/dovecot/2007-December/027702.html http://dovecot.org/list/dovecot/2007-December/027704.html Regards, Mikkel

1 1

[Dovecot] latest 1.1 betas and quota warning
by arvids 03 Jan '08

03 Jan '08

Hello, I noticed that quota warning is not executed with latest 1.1 betas and I looked at the code that implements quota warning. Here it is (line 657 in quota.c): if ((bytes_current < warnings[i].bytes_limit && bytes_current >= warnings[i].bytes_limit) || (count_current < warnings[i].count_limit && count_current >= warnings[i].count_limit)) { quota_warning_execute(warnings[i].command); break; } It seems to me that quota_warning_execute function will never be executed. Timo, can you look at this code? Regards, Arvids

1 0

Re: [Dovecot] [Fwd: Re: Building path to maildir]
by Michel Bulgado 03 Jan '08

03 Jan '08

Hi Charles I receive the Timo's reply. thanks for send me again Use the option that i said, but the problem persists. userdb static { args = uid=500 gid=500 } userdb prefetch { } Jan 2 23:50:08 michel dovecot: auth(default): new auth connection: pid=18374 Jan 2 23:50:20 michel dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=127.0.0.1 rip=127.0.0.1 resp=<hidden> Jan 2 23:50:20 michel dovecot: auth(default): pam(michel,127.0.0.1): lookup service=dovecot Jan 2 23:50:20 michel dovecot: auth(default): client out: OK 1 user=michel Jan 2 23:50:20 michel dovecot: auth(default): master in: REQUEST 1 18306 1 Jan 2 23:50:20 michel dovecot: auth(default): master out: USER 1 michel uid=503 gid=503 Jan 2 23:50:20 michel dovecot: POP3(michel): Loading modules from directory: /usr/lib64/dovecot/pop3 Jan 2 23:50:20 michel dovecot: pop3-login: Login: user=<michel>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 2 23:50:20 michel dovecot: POP3(michel): Module loaded: /usr/lib64/dovecot/pop3/lib10_quota_plugin.so Jan 2 23:50:20 michel dovecot: POP3(michel): Effective uid=503, gid=503 Jan 2 23:50:20 michel dovecot: POP3(michel): maildir: data=/var/spool/virtualmail//michel Jan 2 23:50:20 michel dovecot: POP3(michel): maildir: root=/var/spool/virtualmail//michel, index=/var/spool/virtualmail//michel, control=, inbox= Dovecot detect the username , but no detect the part domain that i need to build the path to maildir. Use ldap (active directory) to retrieve the mail attribute which specifies the address of my mail users. I ask, as I could do with pam. As I get the attribute mail with pam mail_location = maildir:/var/storage/virtualmail/%d/%n So must be /var/spool/virtualmail/casa.co.cu/michel not /var/spool/virtualmail//michel ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

3 2

[Dovecot] Building path to maildir
by Michel Bulgado 03 Jan '08

03 Jan '08

I have the following situation and I need help from all you people I have dovecot 0.99.11 and i want to migrate to a superior version like dovecot 1.0 looking forward to implement quotas in my system , and use the function deliver with postfix. My Scenario is as follow Dovecot + LDAP (ADS) + postfix My actual version is : 0.99.11 This is my actual configuration: Protocols = imap pop3 imap_listen = * pop3_listen = * login_dir = /var/run/dovecot-login login = imap login = pop3 default_mail_env = maildir:/var/spool/virtualmail/%d/%n mbox_locks = fcntl auth = dovecot-auth auth_mechanisms = plain auth_default_realm = CASA.CULT.CU auth_userdb = ldap /etc/dovecot-ldap.conf auth_passdb = pam dovecot auth_user = root auth_verbose = yes auth_debug = yes dovecot-ldap.conf hosts = ldap.casa.cult.cu base = ou=CASA,dc=casa,dc=cult,dc=cu dn = cn=unix-conector,cn=Users,dc=casa,dc=cult,dc=cu dnpass = ***** ldap_version = 3 deref = never scope = subtree user_global_uid = 500 user_global_gid = 500 user_attrs = mail,/var/spool/virtualmail/%d/%n,,,, user_filter = (&(objectClass=user)(!(objectClass=computer))(sAMAccountName=%n)) I see many changes in this new version. One of them is : -Renamed default_mail_env to mail_location - many changes in ldap queries With the new version my problem is when to dovecot tries to detect or builds the way where it´s stored the mailbox of my users. In /var/spool/virtualmail/%d/%u , it does not detect the domain when asking to my active directory (w2k) and consequently takes a value of my default realm = casa.cult.cu in this case the default domain where authenticate my users. My configuration in the new version of dovecot: protocols = imap pop3 protocol imap { listen = * } protocol pop3 { listen = * } login_dir = /var/run/dovecot/login login_chroot = yes login_greeting = Dovecot ready. mail_location = maildir:/var/spool/virtualmail/%d/%u mail_debug = yes mbox_read_locks = fcntl mbox_write_locks = fcntl protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } protocol lda { postmaster_address = postmaster(a)example.com mail_plugins = quota auth_socket_path = /var/run/dovecot/auth-master } auth_executable = /usr/libexec/dovecot/dovecot-auth auth_verbose = yes auth_debug = yes auth default { mechanisms = plain passdb pam { args = dovecot } userdb ldap { args = /etc/dovecot-ldap.conf } userdb prefetch { } user = root socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = virtualmail group = virtualmail } } } dict { } plugin { quota = maildir:storage=10240 } user_attrs = mail,/var/spool/virtualmail/%d/%n,,,, The attribute mail in the old version returns to me user(a)casa.com or user(a)casa.cult.cu this way dovecot can build the way with no problems at all. But in this late version something is happening, it only takes the value %n= user , but not %d = domain . It´s not working. do you have any idea how I can solve this I beg your pardon for my poor English. ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

2 1

[Dovecot] Trying to build the maildir path
by Michel Bulgado 03 Jan '08

03 Jan '08

I use ldap because is where are store the users and his make place the authentication . In my LDAP I have a attribute mail. like this = mail: pepe(a)casa.com I Have more that one domain This atribute return to me something like : pepe(a)casa.com where i use tu build the path to maildir, using %d and %n variables . /var/spool/vmail/%d/%n = /var/spool/vmail/casa.com/pepe this work in 0.99.11 but no in the latest version of dovecot. ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

2 1

[Dovecot] Permanent roadmap page on web
by Timo Sirainen 02 Jan '08

02 Jan '08

http://dovecot.org/roadmap.html I'll try to keep it updated.

7 11

[Dovecot] Dovecot on OpenWRT
by Dirk Aust 02 Jan '08

02 Jan '08

Hello, does anybody has a patch so that I can compile for the OpenWRT, currently the configure script can't be used for cross-compiling. Best Regards, Dirk Aust

1 0

[Dovecot] dovecot-auth consumes 100% CPU time on Solaris 10
by KOT MATPOCKuH 02 Jan '08

02 Jan '08

Is problem with CPU load solved? I have same problem - dovecot-auth eats one of my cores. I'm using dovecot 1.0.7 on Solaris 10 Sparc. I tried to use auth-bind and standard scheme with separate user for bind and have same result. Problem occupts only with LDAP authentication, on some other systems I use PostgreQSL and MySQL authentication and doesn't have this problem. Using PAM authentication is not possible, because dovecot run in chroot'ed environment and I planing to move it to separate system or zone without ldap client. -- MATPOCKuH

7 20

[Dovecot] Delay on failed pw attempts
by Dean Brooks 02 Jan '08

02 Jan '08

Hi, Is there a way, or can a way be added, to add an "auth_failed_delay=10s" style option that would put in an artificial delay after a failed password attempt? As it stands now, Dovecot seems highly vulnerable to widescale brute-force password dictionary scans. Even if it's not configurable, can a delay be hardcoded to something like, say, 10 or 15 seconds? -- Dean Brooks dean(a)iglou.com

10 18

[Dovecot] deliver triggering SELinux AVC denials
by Gerry Reno 02 Jan '08

02 Jan '08

I setup postfix/dovecot on a new machine and now all works well with the small exception of dovecot triggering selinux avc denials on some temp... files here is a sample alert: Summary SELinux is preventing /usr/libexec/dovecot/deliver (dovecot_deliver_t) "link" to temp.localhost.678.40caaf5592891c46 (user_home_dir_t). Detailed Description SELinux denied access requested by /usr/libexec/dovecot/deliver. It is not expected that this access is required by /usr/libexec/dovecot/deliver and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access Sometimes labeling problems can cause SELinux denials. You could try to restore the default system file context for temp.localhost.678.40caaf5592891c46, restorecon -v temp.localhost.678.40caaf5592891c46 If this does not work, there is currently no automatic way to allow this access. Instead, you can generate a local policy module to allow this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable SELinux protection altogether. Disabling SELinux protection is not recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. Additional Information Source Context user_u:system_r:dovecot_deliver_t Target Context user_u:object_r:user_home_dir_t Target Objects temp.localhost.678.40caaf5592891c46 [ file ] Affected RPM Packages dovecot-1.0.7-16.fc7 [application] Policy RPM selinux-policy-2.6.4-63.fc7 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Permissive Plugin Name plugins.catchall_file Host Name localhost Platform Linux localhost 2.6.23.8-34.fc7 #1 SMP Thu Nov 22 23:05:33 EST 2007 i686 athlon Alert Count 1 First Seen Tue 01 Jan 2008 09:29:35 PM EST Last Seen Tue 01 Jan 2008 09:29:35 PM EST Local ID 507dd6a2-da46-4541-8c10-a0771bc85042 Line Numbers Raw Audit Messages avc: denied { link } for comm="deliver" dev=dm-0 egid=5000 euid=5000 exe="/usr/libexec/dovecot/deliver" exit=0 fsgid=5000 fsuid=5000 gid=5000 items=0 name="temp.localhost.678.40caaf5592891c46" pid=678 scontext=user_u:system_r:dovecot_deliver_t:s0 sgid=5000 subj=user_u:system_r:dovecot_deliver_t:s0 suid=5000 tclass=file tcontext=user_u:object_r:user_home_dir_t:s0 tty=(none) uid=5000 and 5000 is user vmail. When I look for these files that it is complaining about they are never in the filesystem. I get about 8 alerts with every email that is delivered. Right now I have SELinux set to permissive so that the mail gets delivered but I would like to find the cause of this problem so that I can set it back to enforcing. ???? Gerry

2 1