- dovecot - dovecot.org

Re: [Dovecot] dovecot Digest, Vol 45, Issue 18
by subscriber＠viliar.net.ru 19 Jan '07

19 Jan '07

> > I use postfx 2.3.5 + dovecot (pop3/imap/lda/auth daemon for postfix) rc15. > > root@post /etc/postfix# grep dovecot main.cf > smtpd_sasl_type = dovecot > virtual_transport = dovecot > dovecot_destination_recipient_limit = 1 > > root@post /etc/dovecot# grep password_query dovecot-sql.conf > password_query = SELECT mail as user, cryptp as password, > CONCAT('/home/vmail/',homedir,'/',maildir,'/') as userdb_home, uid as userdb_uid, gid as > userdb_gid, CONCAT('dirsize:/home/vmail/',homedir,'/',maildir,'/',':storage=',quota/1024) as > userdb_quota, nice as userdb_nice, hosts as allow_nets FROM users WHERE mail = '%u' and access = > 'Y' and %Ls = 'Y'; > > > When I insert allow_nets (and it should be used without userdb_ prefix) into password_query I could > not send any more letters. In logs next: > > Dec 19 11:25:30 post dovecot: auth-worker(default): sql(mail(a)example.com): query: SELECT mail as > user, cryptp as password, CONCAT('/home/vmail/',homedir,'/',maildir,'/' > ) as userdb_home, uid as userdb_uid, gid as userdb_gid, > CONCAT('dirsize:/home/vmail/',homedir,'/',maildir,'/',':storage=',quota/1024) as userdb_quota, nice > as userdb_nice > , hosts as allow_nets FROM users WHERE mail = 'mail(a)example.com' and access = 'Y' and smtp = 'Y'; > Dec 19 11:25:30 post dovecot: auth-worker(default): passdb(mail(a)example.com): allow_nets check > failed: Remote IP not known > > As I understand, postfix does not transfer to dovecot auth daemon rip ( remote ip ). And it is > looks like allow_nets it is impossible to use together with dovecot sasl auth in postfix. > > Do we have any workaround on it? > > Hello again. As I think, this problem is realy about dovecot. Probably it should not doing looking at allow_net then it using for external auh, or then %Ls = smtp ? Just another trap/check to prevent problem like this? Or am I wrong? Thanks.

2 1

[Dovecot] Build problems with non-standard location of mysql libs
by Bob 19 Jan '07

19 Jan '07

Overall the build process for dovecot is very clean. I did however run into a significant problem when it came to locating the mysql libraries, especially when building a 64 bit executable but similar problems occured building a 32 bit executable. I am describing the 64 bit build issues below since that is the worst case scenario. Fixing the 64 bit build will automatically fix the 32 bit build. In the Solaris world it is fairly common for software packages to be installed in the /opt tree rather than under /usr or /usr/local. In addition 64 bit libs are typically located under a path like /opt/lib/64 or /opt/lib/sparcv9 and of course mysql libs are under /opt/lib/mysql or /opt/lib/sparcv9 | 64/mysql. The configure script for dovecot tries only a lib64 or /usr/lib64 path I suggest that the conifgure script for dovecot offer a --with-mysql[=DIR] option so that it would be possible to provide the base location of the mysql installation as --with-mysql=/opt in the same manner that it is done for php. I patched the configure script to search the /opt tree for mysql but unfortunately a side effect occured during the build which was compiled as 64 bit with the necessary CFLAGS and LDFLAGS input to the configure script. Here is the configure. Note that the library search paths also include the Solaris specific sparcv9 paths so nothing special is required in the configure script to account for these platform specific paths. This is exactly the same method the we use to build php as a 64 bit app successfully. However, the configrue script needs to locate the /opt/include/mysql directory and also needs to find /opt/lib/mysql to at least trigger that it found the mysql installation. Even though /opt/lib/mysql is the path to the 32 bit library, the link tests will pass because the supplied LDFLAGS contain the path to the 64 bit library. CFLAGS="-O3 -m64 -mcpu=ultrasparc -L/opt/lib/sparcv9 -L/opt/lib/sparcv9/mysql -R/opt/lib/sparcv9 -R/opt/lib/sparcv9/mysql" \ CXXFLAGS="-O3 -m64 -mcpu=ultrasparc -L/opt/lib/sparcv9 -L/opt/lib/sparcv9/mysql -R/opt/lib/sparcv9 -R/opt/lib/sparcv9/mysql" \ LDFLAGS="-O3 -m64 -mcpu=ultrasparc -L/opt/lib/sparcv9 -L/opt/lib/sparcv9/mysql -R/opt/lib/sparcv9 -R/opt/lib/sparcv9/mysql" \ ./configure --prefix=/opt \ --localstatedir=/var \ --enable-shared \ --disable-static \ --libdir=/opt/lib/sparcv9 \ --with-ssldir=/opt/ssl \ --with-ssl=openssl \ --with-storages=maildir,mbox \ --with-mysql The next problem was that dovecot-auth failed to link: /bin/bash ../../libtool --tag=CC --mode=link gcc -std=gnu99 -O3 -m64 -mcpu=ultrasparc -L/opt/lib/sparcv9 -R/opt/lib/sparcv9 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/opt/include -export-dynamic -O3 -m64 -mcpu=ultrasparc -L/opt/lib/sparcv9 -R/opt/lib/sparcv9 -o dovecot-auth auth.o auth-cache.o auth-client-connection.o auth-master-connection.o auth-master-listener.o auth-module.o auth-request.o auth-request-handler.o auth-stream.o auth-worker-client.o auth-worker-server.o db-ldap.o db-sql.o db-passwd-file.o main.o mech.o mech-anonymous.o mech-plain.o mech-login.o mech-cram-md5.o mech-digest-md5.o mech-ntlm.o mech-gssapi.o mech-rpa.o mech-apop.o passdb.o passdb-blocking.o passdb-bsdauth.o passdb-cache.o passdb-ldap.o passdb-passwd.o passdb-passwd-file.o passdb-pam.o passdb-checkpassword.o passdb-shadow.o passdb-sia.o passdb-vpopmail.o passdb-sql.o userdb.o userdb-blocking.o userdb-ldap.o userdb-passwd.o userdb-passwd-file.o userdb-prefetch.o userdb-static.o userdb-vpopmail.o userdb-sql.o libpassword.a ../lib-settings/libsettings.a ../lib-ntlm/libntlm.a ../lib-sql/libsql.a ../lib/liblib.a -lpam -L -L/opt/lib/mysql -L/opt/lib/sparcv9/mysql -lmysqlclient -lz -lm -export-dynamic -ldl -lsocket -lnsl -lrt mkdir .libs gcc -std=gnu99 -O3 -m64 -mcpu=ultrasparc -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/opt/include -O3 -m64 -mcpu=ultrasparc -o dovecot-auth auth.o auth-cache.o auth-client-connection.o auth-master-connection.o auth-master-listener.o auth-module.o auth-request.o auth-request-handler.o auth-stream.o auth-worker-client.o auth-worker-server.o db-ldap.o db-sql.o db-passwd-file.o main.o mech.o mech-anonymous.o mech-plain.o mech-login.o mech-cram-md5.o mech-digest-md5.o mech-ntlm.o mech-gssapi.o mech-rpa.o mech-apop.o passdb.o passdb-blocking.o passdb-bsdauth.o passdb-cache.o passdb-ldap.o passdb-passwd.o passdb-passwd-file.o passdb-pam.o passdb-checkpassword.o passdb-shadow.o passdb-sia.o passdb-vpopmail.o passdb-sql.o userdb.o userdb-blocking.o userdb-ldap.o userdb-passwd.o userdb-passwd-file.o userdb-prefetch.o userdb-static.o userdb-vpopmail.o userdb-sql.o -L/opt/lib/sparcv9 libpassword.a ../lib-settings/libsettings.a ../lib-ntlm/libntlm.a ../lib-sql/libsql.a ../lib/liblib.a -lpam -L/db/src/dovecot/dovecot-1.0.rc17_64bit/src/auth -L/opt/lib/mysql -L/opt/lib/sparcv9/mysql /opt/lib/mysql/libmysqlclient.so -L/opt/lib -lposix4 -lgen -lssl -lcrypto -lz -lm -ldl -lsocket -lnsl -lrt -R/opt/lib/mysql -R/opt/lib/mysql -R/opt/lib/sparcv9 ld: fatal: file /opt/lib/mysql/libmysqlclient.so: wrong ELF class: ELFCLASS32 ld: fatal: File processing errors. No output written to dovecot-auth What is odd about the above is that the input to libtool is completely correct but the resulting gcc command converted -lmysqlclient to an absolute path of /opt/lib/mysql/libmysqlclient.so which is wrong for a 64 bit build - hence the link failure. Why this happened is a mystery to me? If it had been left alone as -lmysqlclient the link would have been successful because the correct 64 bit library would have been found automatically. To get around this problem I added -lmysqlclient to the LDFLAGS input to the configure script which works but isn't very conventional. It would be much cleaner if the --with-mysql had a [=DIR] option and the configure script used the same basic logic that is used in the php configure script for locating the mysql stuff. In addition it is essential that hard paths, especially to shared objects don't get generated during the build since that will block the automatic searching of libraries. -- *Bob Atkins * /President/CEO/ *DigiLink, Inc. <http://www.digilink.net>* Business Inter-net-working */The Cure for the Common ISP!/* Phone: (310) 577-9450 Fax: (310) 577-3360 eMail: bob(a)digilink.net

2 1

[Dovecot] Vpopmail auth with vchkpw
by Rick Romero 19 Jan '07

19 Jan '07

Hey Guys, I'm using vpopmail, and was told here that I need to use the vchkpw passwd module to authenticate AND get my lastauth data updated. It works like a charm, but I've come across another minor issue. vchkpw sets the 'connection-type' based on the variable TCPLOCALPORT If that's not set, it defaults to pop. What this does in my environment is cause someone who is denied POP access to also not be able to use IMAP (or webmail) because that variable is not set. Is it possible to have Dovecot set that variable, based on the port the user connected to, prior to calling vchkpw? Or can I Set that in here somehow? passdb checkpassword { args = /usr/local/vpopmail/bin/vchkpw } userdb prefetch { } } Thanks Rick

2 1

[Dovecot] patch for serdb-ldap which allows set user_global_mail variable
by Taras 19 Jan '07

19 Jan '07

--- dovecot-1.0.rc17/src/auth/db-ldap.~h 2007-01-15 03:23:09.000000000 +0200 +++ dovecot-1.0.rc17/src/auth/db-ldap.h 2006-11-07 18:47:00.000000000 +0200 @@ -38,6 +38,7 @@ const char *default_pass_scheme; const char *user_global_uid; const char *user_global_gid; + const char *user_global_mail; /* ... */ int ldap_deref, ldap_scope; --- dovecot-1.0.rc17/src/auth/db-ldap.~c 2007-01-15 03:23:09.000000000 +0200 +++ dovecot-1.0.rc17/src/auth/db-ldap.c 2006-11-19 15:42:41.000000000 +0200 @@ -67,6 +67,7 @@ DEF(SET_STR, default_pass_scheme), DEF(SET_STR, user_global_uid), DEF(SET_STR, user_global_gid), + DEF(SET_STR, user_global_mail), { 0, NULL, 0 } }; @@ -93,7 +94,8 @@ MEMBER(pass_filter) "(&(objectClass=posixAccount)(uid=%u))", MEMBER(default_pass_scheme) "crypt", MEMBER(user_global_uid) "", - MEMBER(user_global_gid) "" + MEMBER(user_global_gid) "", + MEMBER(user_global_mail) NULL }; static struct ldap_connection *ldap_connections = NULL; --- dovecot-1.0.rc17/src/auth/userdb-ldap.~c 2007-01-15 03:23:09.000000000 +0200 +++ dovecot-1.0.rc17/src/auth/userdb-ldap.c 2006-12-21 18:06:28.000000000 +0200 @@ -72,7 +72,7 @@ const char *name; char *attr, **vals; unsigned int i; - bool seen_uid = FALSE, seen_gid = FALSE; + bool seen_uid = FALSE, seen_gid = FALSE, seen_mail = FALSE ; reply = auth_stream_reply_init(auth_request); auth_stream_reply_add(reply, NULL, auth_request->user); @@ -94,6 +94,7 @@ return NULL; seen_gid = TRUE; } else if (*name != '\0') { + if (strcmp(name, "mail") == 0) {seen_mail = TRUE;} for (i = 0; vals[i] != NULL; i++) { auth_stream_reply_add(reply, name, vals[i]); @@ -126,6 +127,16 @@ auth_stream_reply_add(reply, "gid", dec2str(conn->set.gid)); } + if (!seen_mail) { + if (*conn->set.user_global_mail != '\0') { + const struct var_expand_table *vars; + vars = auth_request_get_var_expand_table(auth_request, auth_request_str_escape); + string_t *str; + str = t_str_new(512); + var_expand(str, conn->set.user_global_mail, vars); + auth_stream_reply_add(reply, "mail", str_c(str)); + } + } return reply; } --- dovecot-1.0.rc17/doc/dovecot-ldap.~conf 2007-01-15 03:23:09.000000000 +0200 +++ dovecot-1.0.rc17/doc/dovecot-ldap.conf 2006-11-07 18:47:00.000000000 +0200 @@ -114,3 +114,9 @@ # If the UID/GID is still found from LDAP reply, it overrides these values. #user_global_uid = #user_global_gid = + +# You can use same mail path all user accounts if you really want to. +# Same variables can be used as for filter, see user_filter +# If the 'mail' variable is still found from LDAP reply, it overrides these value. +#user_global_mail = +

2 2

[Dovecot] LDAPS
by Osvaldo Sarubbi 19 Jan '07

19 Jan '07

Hello...what's hap with LDAPS?...with the "hosts" parameter of dovecot-ldap.conf, don't work Thanks... kenobi

2 1

[Dovecot] Shared folder
by Stefan Klatt 19 Jan '07

19 Jan '07

Hi, first.. i'm new on this list :-) and use dovecot 1.01rc17 under fedora core 5. And i read the list of the last 4 moth and didn't found answers to my questions........ now i work with shared folders and got it running on the following configuration: namespace private { seperator = . prefix = location = maildir:/srv/imapd/user/%u/maildir inbox = yes } namespace public { seperator = . prefix = Public. location = maildir:/imapd/shared/public/maildir:CONTROL=/imapd/user/%u/shared-settings/public/control:INDEX=/imapd/user/%u/shared-settings/public/index hidden = no } location is one line :-) I have different questions to this configuration: if i use "hidden = no" at the private namespace, the complete namespace isn't viewable, if i use "hidden = yes" i see the prefix "private" at the foldernames in my emailclient. Shouldn't be a non existing hidden option the same like "hidden = no"? if use / as the seperator like dokumented at the wiki it doesn't work. with a dot like the seperator at the directories for the emailfolder it works. is there a way to implement ACL for virtuell user in this configuration? The namespace could be a very interesting idea to give other user access to the own mailbox (e.g. for holiday), but for this each user need it's own acl-file which he can change.... And the special folder like Inbox must be viewable from another user. The both last could be realized with an option like "ACL = /imapd/user/%u/rights" to include an file with acldefinition at the namespacedefiniton. Another way could be a option like "ACL_R = user, user, group, group" inside of the namespacedefinition with definition of user and group outside of the namespacedefintion. For me a LDAP request would the best way :-) i realize the complete emailconfiguration with ldap. Stefan

3 4

[Dovecot] How change the order POP checks mail.
by Andreas Andersson 19 Jan '07

19 Jan '07

Hello! I have a problem with the POP when I want to use mbox and Maildirs. The old users are now using uw-imap, but in the future should theres old e-mail be in mbox format and the new e-mails in maildirs. I'am using this code and its worked fine in Squirrelmail and IMAP. namespace private { separator = / inbox = yes hidden = no prefix = "mbox/" location = mbox:~/mail:INBOX=/var/mail/%u } namespace private { separator = / prefix = location = maildir:~/Maildir } but not with POP, I can't find any mail. When I only searching for mbox mail, it worked great. I think thats the problem are the pop who first searching for Maildirs and then mailboxes. So how could I get the Dovecot POP server to first check the mailboxes and then the maildirs? Or how should I go around this problem? Thanks! Andreas Andersson

3 2

[Dovecot] Shared folder doesn't work!
by Brian Lavender 19 Jan '07

19 Jan '07

I can't seem to get a shared folder working properly. I am authenticating using pam, and the users have a shell account on the system. Problem is, the permissions on the messages moved into the folder don't maintain properly, and other users can't read the share. I have the following in /etc/dovecot/dovecot.conf namespace public { separator = / prefix = Public/ location = maildir:/var/mail/public } # If you create a "namespace public" section, then you need to create # a "namespace private" section namespace private { separator = / prefix = location = maildir:/home/%u/Maildir # There can be only one INBOX, and this setting defines # which namespace has it. inbox = yes } umask = 0007 I am running rc15 from backports on Debian stable. dovecot (1.0.rc15-1~bpo1) sarge-backports; urgency=low * Rebuilt for sarge. * Only changes needed were build dependency on libpq-dev changed back to postgresql-dev, libmysqlclient15-dev changed back to libmysqlclient12-dev, kernel-headers versioned build-dependency removed and debhelper version relaxed to 4. -- Jaldhar H. Vyas <jaldhar(a)debian.org> Mon, 4 Dec 2006 00:48:28 -0500 And here is the share. Two users are accessing it: brian and fred which are both in the colab group. See how the one message doesn't have group read or write. # cd /var/mail # find public -ls 232465 1 drwxrws--- 6 fred colab 1024 Jan 16 00:50 public/ 232466 1 drwxrws--- 2 fred colab 1024 Jan 16 00:13 public/cur 232467 1 drwxrws--- 2 fred colab 1024 Jan 16 00:13 public/new 232468 1 drwxrws--- 2 fred colab 1024 Jan 16 00:13 public/tmp 228051 1 drwxrws--- 5 fred colab 1024 Jan 16 04:32 public/.notices 228100 1 drwxrws--- 2 fred colab 1024 Jan 16 04:30 public/.notices/cur 228104 1 -rw-rw---- 1 fred colab 477 Jan 15 23:05 public/.notices/cur/1168937439.P1214Q0M467971.debian:2,S 228262 1 -rw-rw---- 1 brian colab 812 Jan 15 22:58 public/.notices/cur/1168949589.P1006Q0M317215.debian:2,S 228105 1 -rw-rw---- 1 fred colab 819 Jan 15 21:22 public/.notices/cur/1168950176.P1101Q0M673976.debian:2,S 228263 1 -rw------- 1 fred colab 620 Jan 15 22:57 public/.notices/cur/1168950649.P1171Q0M862818.debian:2,RS 228101 1 drwxrws--- 2 fred colab 1024 Jan 16 00:20 public/.notices/new 228102 1 drwxrws--- 2 fred colab 1024 Jan 16 04:30 public/.notices/tmp 228103 1 -rw-rwx--- 1 fred colab 636 Jan 16 04:30 public/.notices/dovecot.index.log 228266 0 -rw------- 1 brian colab 0 Jan 16 04:32 public/.notices/dovecot-uidlist.lock 228107 1 -rw-rwx--- 1 fred colab 192 Jan 16 04:30 public/.notices/dovecot.index 228106 17 -rw-rwx--- 1 fred colab 16384 Jan 16 04:30 public/.notices/dovecot.index.cache 228265 1 -rw------- 1 fred colab 172 Jan 16 04:30 public/.notices/dovecot-uidlist 232470 1 -rw-rw---- 1 fred colab 8 Jan 16 00:50 public/subscriptions -- Brian Lavender http://www.brie.com/brian/

3 5

[Dovecot] Dovecot deliver and syslog
by Bill Milford 19 Jan '07

19 Jan '07

Can syslog be used to log dovecot's LDA deliver? Bill

2 1

[Dovecot] rc17: child 15802 (auth) killed with signal 6
by Chris Laif 19 Jan '07

19 Jan '07

I'm using dovecot (rc17) in POP3/IMAP server _and_ proxy mode (pgsql backend). Everything works fine but occasionally I get these messages in the log: dovecot: auth(default): file passdb.c: line 126 (passdb_handle_credentials): assertion failed: (password != NULL) dovecot: auth(default): Raw backtrace: dovecot-auth [0x8062b2b] -> dovecot-auth [0x8062599] -> dovecot-auth [0x805a6ae] -> dovecot-auth [0x805b3b8] -> dovecot-auth [0x8060350] -> dovecot-auth(io_loop_handler_run+0x118) [0x8066458] -> dovecot-auth(io_loop_run+0x28) [0x80658e8] -> dovecot-auth(main+0x78) [0x8057028] -> /lib/libc.so.6(__libc_start_main+0xc6) [0x4007ee36] -> dovecot-auth [0x804f591] dovecot: child 15802 (auth) killed with signal 6 I seems (!) that these messages only appear when someone uses dovecot in in IMAP proxy mode. As I said before, everything works fine -- even reading emails via IMAP-proxy works. Chris

1 0