- dovecot - dovecot.org

[Dovecot] gssapi auth issue...
by Dan Price 27 Mar '07

27 Mar '07

Hi all-- been away from the list for a few weeks so forgive me if this problem has been reported-- with the help of some of our Kerberos engineers, we tracked down why we can't authenticate our Solaris kerberos clients to Dovecot. Here's the deal: Our IT organization issued us kerberos tickets of the form imap(a)foobar.sfbay.sun.com Which I presume is their standard-- and probably not negotiable. However, the hostname of the machine is: "foobar", not foobar.sfbay.sun.com (as reported by gethostname(3c)). So when dovecot does this: mech-gssapi.c: principal_name = t_str_new(128); str_append(principal_name, service_name); str_append_c(principal_name, '@'); ---> str_append(principal_name, my_hostname); We wind up asking kerberos to look for a ticket for imap@foobar, instead of imap(a)foobar.sfbay.sun.com. Obviously we can patch the source, but I was wondering if we could have a gssapi_hostname setting in the config file? Or perhaps we could have a knob letting us globally override my_hostname? Although I don't know what side effects that could have. We have some new cores I also need to report-- I'll get on that. Thanks in advance, -dp -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

3 2

[Dovecot] Custom Mail Directory for some users
by Patrick Kranz 27 Mar '07

27 Mar '07

Hi list, I'm new on this mailing list and I'm kind of stucked at the moment. I managed to get Postfix and Dovecot working together with Amavis, OpenLDAP und SASL on Ubuntu Linux Release "Dapper Drake". The Dovecot version shipped with Dapper is 1.0-beta3 (at least, that's what the package database tells me), I also tried this with a Debian Backport of version 1.0-rc15. And here is my problem: A customer of mine needs usernames different from the mail address for his third party software to work. In other words, I need the ability to login with the username foo to get access to the mailbox bar(a)example.com. So I tried to override the mail_location property for this user with a separate mailDirectory attribute in my LDAP tree. Speaking in dovecot.conf words: mail_location = maildir:/var/spool/dovecot/mail/%d/%n auth default { machanisms = plain passdb ldap { args = /etc/dovecot/dovecot-ldap.com } userdb ldap { args = /etc/dovecot/dovecot-ldap.com } userdb static { args = uid=vmail gid=vmail user = dovecot } and dovecot-ldap.conf: hosts = localhost dn = cn=admin,dc=ekits,dc=de dnpass = secret auth_bind = yes ldap_version = 3 base = ou=mailsystem,dc=ekits,dc=de scope = subtree user_attrs = mailDirectory=mail user_filter = (&(objectClass=ekitsMailAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=ekitsMailAccount)(uid=%u)) user_global_uid = vmail user_global_gid = vmail a typical ldap entry looks something like this: dn: cn=Patrick Kranz,o=EK IT-Solutions,ou=mailsystem,dc=ekits,dc=de ekitsMailDestination: patrick(a)ekits.de objectClass: ekitsMailAccount objectClass: top cn: Patrick Kranz structuralObjectClass: ekitsMailAccount entryUUID: b4ebb9e8-6d8d-102b-9dc9-9edb870845a4 creatorsName: cn=admin,dc=ekits,dc=de createTimestamp: 20070323132526Z userPassword:: YVBhc3M= mailDirectory: maildir:/var/spool/dovecot/mail/ekits.de/blubb uid: patrick As far as I can interpret the log of slapd, dovecot doesn't even ask for the attribute "mailDirectory". I also tried this with userdb prefetch. With this it did actually ask for the attribute but it still had no effect. With this configuration dovecot creates the directory /var/spool/spool/dovecot/mail/patrick if I login with the uid patrick but I wanted access to /var/spool/dovecot/mail/ekits.de/blubb If anybody has any clue what I did wrong or if I have a conceptional misunderstanding, I would appreciate every help. Thanks in advance. Greetings, Patrick

3 4

[Dovecot] recent master-settings.c and main.c changes breaks dovecot on my system
by Daniel 27 Mar '07

27 Mar '07

Hi! Compiled the latest cvs today, and noticed the changes in src/master/main.c and master-settings.c. With the versions 1.80.2.19 and 1.125.2.28 (respectively) I can not start dovecot, because it says: Fatal: dup2(stdin) failed: Bad file descriptor Error: imap dump-capability process returned 89 After reverting the patch: http://www.dovecot.org/list/dovecot-cvs/2007-March/008371.html everything is back to normal. My system is OpenBSD 4.0 and dovecot is recent cvs. Daniel

2 1

[Dovecot] Coredump in dovecot-auth on gss auth
by Dan Price 27 Mar '07

27 Mar '07

I've enabled the GSS code in dovecot, but our Kerberos nerds are complaining that it doesn't work :) I probably have the thing totally misconfigured (so don't worry about that part for now), but I do have a crash: Info: imap-login: Disconnected: rip=XXX.YYY.229.8, lip= XXX.YYY.17.59, TLS handshake Error: auth(default): gssapi(?,XXX.YYY.229.8): While acquiring service credentials: No credentials were supplied, or the credentials were unavailable or inaccessible Error: auth(default): gssapi(?,XXX.YYY.229.8): While acquiring service credentials: No principal in keytab matches desired name Info: imap-login: Disconnected: method=GSSAPI, rip=129.146.229.8, lip=XXX.YYY.17.59 Error: child 188558 (auth) killed with signal 11 Info: imap-login: Disconnected: method=PLAIN, rip=129.146.229.8, lip=XXX.YYY.17.59 The dovecot auth process SIGSEGV's and dies at login time (I think). Here's the backtrace: (gdb) bt full #0 0xfef25e1a in gss_release_name () from /usr/lib/libgss.so.1 No symbol table info available. #1 0x08064ccf in mech_gssapi_auth_free (request=0xfef3c000) at mech-gssapi.c:394 minor_status = 0 #2 0x08060551 in auth_request_handler_flush_failures () at auth-request-handler.c:493 auth_request = (struct auth_request **) 0x8047b5c i = 1 size = 1 __PRETTY_FUNCTION__ = "auth_request_handler_flush_failures" #3 0x0806f54a in io_loop_handle_timeouts (ioloop=0x8096f78) at ioloop.c:276 t = (struct timeout *) 0x8098048 called_timeouts = (struct timeout *) 0x8098048 tv = {tv_sec = 134852200, tv_usec = 0} t_id = 2 #4 0x0806fb42 in io_loop_handler_run (ioloop=0x8096f78) at ioloop-poll.c:159 ctx = (struct ioloop_handler_context *) 0x8096fb0 pollfd = (struct pollfd *) 0x8096f78 tv = {tv_sec = 0, tv_usec = 0} io = (struct io *) 0x8047f99 t_id = 134836088 msecs = 134894204 ret = 0 call = true #5 0x0806f65d in io_loop_run (ioloop=0x8096f78) at ioloop.c:311 No locals. #6 0x08062bb2 in main (argc=1, argv=0x809ae68) at main.c:321 foreground = false Thanks, -dp -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

3 2

[Dovecot] Sync of read message status between squirrelmail and outlook express
by Mohd Ikhwan Abdullah 27 Mar '07

27 Mar '07

Hi, We have a Linux email server running CentOS 4.4. I have a scenario here. The users here use a mixture of outlook express and squirrel mail as their email client. The users download their mail into outlook express via pop3 but the have configured outlook express to leave a copy on the server for 7 days. 1. After downloading the mail into outlook express the users would read the mail and the mail would be set as 'READ' in outlook express. 2. Is there a way to configure dovecot so that the 'READ' status in outlook express is reflected on the message still stored on the server as well. Cause when they access via squirrel mail the message is still mark as 'UNREAD'. Any suggestions is very much appreciated. Thanks in advance.

3 3

[Dovecot] compiling dovecot on aix gcc 3.3.2
by funkypunky drunky 27 Mar '07

27 Mar '07

I try to compile the dovecot with gcc version 3.3.2 on aix. It seemed it was okay. It was working but when i try to use quota dynamic modules i get error. Edlopen(/usr/local/lib/dovecot/imap/lib10_quota_plugin.so) failed: Could not load module /usr/local/lib/dovecot/imap/lib10_quota_plugin.so. System error: No such file or directory Error: imap dump-capability process returned 89 When i check the /usr/local/lib/dovecot/imap/lib10_quota_plugin.so i see that it is a link which is pointing /usr/local/lib/dovecot/lib10_quota_plugin.so . But there is no lib10_quota_plugin.so . I try compiling it on linux debian. I see that lib10_quota_plugin.so in it is proper place. I dont know what to do. Did i something wrong? I need help Best regards

4 9

[Dovecot] LDA bouncing mails after upgrade
by Milan Holzäpfel 26 Mar '07

26 Mar '07

Hello, on my system, I have a copy of /usr/libexec/dovecot/deliver located in /usr/libexec/dovecot/postfix-deliver/deliver (only accessible to postfix and with SUID root permissions). If I happen to forget to update this copy after an upgrade of dovecot, the deliver LDA bounces mails: | Mar 22 20:29:20 host.example.org deliver(user(a)example.org): Module is for different version 1.0.rc27: /usr/lib/dovecot/lda/lib10_quota_plugin.so | Mar 22 20:29:20 host.example.org postfix/pipe[17344]: <ID>: to=<user(a)example.org>, relay=dovecot, delay=1.9, delays=1.5/0/0/0.35, dsn=5.3.0, status=bounced (Command died with status 89: "/usr/libexec/dovecot/postfix-deliver/deliver") Should I just set version_ignore=yes and remember myself to upgrade it, or could deliver return a code signaling "temporary failure", or should I rather make postfix interpret 89 as temporary failure? (don't know by heart whether that's possible). Regards, Milan -- Milan Holzaepfel <mail(a)mjh(d)name> <URL:http://mjh.name/> pub 4096R/C790FC23 EB8E 5E81 81E3 53A9 9B74 B895 5179 54C0 C790 FC23

4 3

[Dovecot] Odd error message
by Steven F Siirila 26 Mar '07

26 Mar '07

We are running Dovecot 1.0-rc27 and have run across what seems to be a fatal error (SIGSEGV) in the past few days (4 times total in past 6 days). It appears to have been 5 separate users, 5 separate remote IP addresses. Two of these have this format: Mar 26 15:13:10 myhostname dovecot: imap-login: Authenticate PLAIN failed: Don't send unrequested data: user=<rmtuser>, method=PLAIN, rip=10.9.9.9, lip=10.1.1.1, TLS The other three have this format: Mar 26 09:41:45 myhostname dovecot: imap-login: Authenticate PLAIN failed: Don't send unrequested data: method=PLAIN, rip=10.9.9.9, lip=10.1.1.1, TLS Here's the first one a bit more expanded, showing the SIGSEGV (signal 11): Mar 26 15:13:10 myhostname dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=10.1.1.1 rip=10.9.9.9 Mar 26 15:13:10 myhostname dovecot: auth(default): client out: CONT 1 Mar 26 15:13:10 myhostname dovecot: auth(default): client in: CONT<hidden> Mar 26 15:13:10 myhostname dovecot: auth(default): pam(rmtuser,10.9.9.9): lookup service=IMAP Mar 26 15:13:10 myhostname dovecot: auth(default): client out: OK 1 user=rmtuser Mar 26 15:13:10 myhostname dovecot: auth(default): master in: REQUEST 675645 3333 1 Mar 26 15:13:10 myhostname dovecot: auth(default): passwd(rmtuser,10.9.9.9): lookup Mar 26 15:13:10 myhostname dovecot: auth(default): master out: USER 675645 rmtuser system_user=rmtuser uid=99999 gid=9999 home=/home/r/rmtuser Mar 26 15:13:10 myhostname dovecot: imap-login: Authenticate PLAIN failed: Don't send unrequested data: user=<rmtuser>, method=PLAIN, rip=10.9.9.9, lip=10.1.1.1, TLS Mar 26 15:13:10 myhostname dovecot: imap-login: Disconnected: user=<rmtuser>, method=PLAIN, rip=10.9.9.9, lip=10.1.1.1, TLS Mar 26 15:13:10 myhostname dovecot: child 3333 (login) killed with signal 11 What can I do to further diagnose this problem? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 1

[Dovecot] imaps listen only at localhost
by Dirk Schleicher 26 Mar '07

26 Mar '07

Hello list, I try to get dovecot listen only at localhost. I try listen localhost:993 and it did not work. The installation I made from http://holl.co.at/howto-email/ How it is possible that dovecot with imaps only work on localhost? Thanks for the help. Best regards Dirk

2 2

[Dovecot] netapp/maildir/dovecot performance
by bofh list 26 Mar '07

26 Mar '07

We are seeing some poor performance recently that is focused around users with large mailboxes (100,000 message /INBOX, 80,000 message subfolders, etc). The performance problem manifests as very high system% utilization - basically iowait for NFS. There are two imap servers with plenty of horsepower/memory/etc. They are connected to a 3050c cluster via gig-e. Here are the mount options: rw,tcp,nfsvers=3,rsize=8192,wsize=8192,nosuid,nodev,soft,intr,noac,actimeo=0 I need to get this system% utilization brought down because it is starting to slowdown imap performance for other users (it goes up to 95% on a regular basis, with users that have folders with many messages). My thought is to try removing the noac option and bump up the actimeo value from 0 to 30. Unfortunately I don't have access to use a SLB to direct traffic to individual servers. My understanding is that the worst that can happen is index corruption (which will result in rebuilding them when it happens). Any thoughts? I'm running RC24.

3 5