- dovecot - dovecot.org

[Dovecot] LDAP authentication blank password
by Matheus Antonio Oliveira 24 Oct '06

24 Oct '06

People, I have a situation: when use a passwd LDAP module against "microsoft active directory" and one user send a blank password the authentication module returns: "ERR [IN-USE] Internal login failure. Refer to server log for more information."; after this the authentication module never authenticate again "ERR Temporary authentication failure." Thanks in advanced. Trying 0.0.0.0... Connected to 0 (0.0.0.0). Escape character is '^]'. +OK Dovecot ready. user xyz@domain +OK pass <BLANK> -ERR [IN-USE] Internal login failure. Refer to server log for more information. Connection closed by foreign host. Trying 0.0.0.0... Connected to 0 (0.0.0.0). Escape character is '^]'. +OK Dovecot ready. user xyz@domain +OK pass correct-password -ERR Temporary authentication failure. -- Matheus Antonio Oliveira

3 2

[Dovecot] Creating MySQL db
by Gerard Seibert 24 Oct '06

24 Oct '06

I was just wondering if anyone was using or aware of a program to create MySQL Data Bases for use with Dovecot. For Postfix, there is the 'Postfixadmin' application. I have not seen anything similar for Dovecot and was wondering if one existed. My system consists of all virtual users. -- Gerard Never attribute to malice what can adequately be explained by incompetence.

2 1

[Dovecot] problems with authentication
by Paul Aguirre 24 Oct '06

24 Oct '06

Hi, I have some problems I'm using fetchmail to get my mail from the server to a local server, but the problem is that my user name of the mail is "user@virtualdomain" and I can't make a system user with "@" on centos. So, I want to know how can I tell to dovecot the user "user@virtualdomain" is associate to a sistem user "user.virtualdoman". Or if any one knows another solution. Thanks Paul __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

[Dovecot] Dovecot still failing with RC10...
by Brent Spencer 24 Oct '06

24 Oct '06

Are you getting a "chdir (null)" type of message just prior to the Error: Maximum number of mail processes exceeded"? Thanks, Brent Spencer XsiteDesigns _________________________________________________ This email has been scanned for viruses by ClamAV

1 0

[Dovecot] Proxy using passd file
by Clayton Epp 23 Oct '06

23 Oct '06

I'm trying to create a proxy using passwd files. Can I use the existing passwd files created by the system (ie passwd and shadow) or do I have to create new passwd files for the email proxy users? How would the passwd and shadow files for a proxy using passwd files look? I've tried the example on the wiki but I'm not getting anywhere, pop and imap requests are not getting sent to the other server.

3 4

Re: [Dovecot] any idea why the mail downloading is slow?
by LeVA 23 Oct '06

23 Oct '06

2006. October 23. 18:46, Ejay Hire: > What client are you using? I've found Outlook to be a huge > bottleneck compared to Tbird. I'm using KMail 1.9.5. Indeed, with Tbird, the download is faster with KMail. Any idea what could be the problem? I don't think this is a "bug" in KMail; maybe a configuration issue? Daniel > > -ejay > > -----Original Message----- > From: dovecot-bounces(a)dovecot.org > [mailto:dovecot-bounces@dovecot.org] On Behalf Of LeVA > Sent: Saturday, October 21, 2006 4:37 AM > To: dovecot(a)dovecot.org > Subject: [Dovecot] any idea why the mail downloading is slow? > > Hi! > > I'm using rc10, but had this problem with previous releases too. Not > sure if this is a dovecot problem, but I can not think of anything > else. The mail downloading with pop3 is ~very slow, approx. 20 Kbyte > / sec. no matter how many mails I've got in my mailbox, or how big > are the mails. My ISP provides me a dedicated 100mbit line, and > everything else works as fast as expected eg. http, ftp, scp... > The OS is OpenBSD 3.9-stable and the system is not under heavy load > at all. I've tried to turn off TLS but there was no change. > > Is the pop3 protocol this slow by design or there is something wrong > with my setup? > > Thanks! > > Daniel > > -- > LeVA -- LeVA

1 0

Re: [Dovecot] 1.0.rc10 status report
by "Αποστόλης Παπαγιαννάκη ς (Apostolis Papagiannakis)" 23 Oct '06

23 Oct '06

>> Axel Thimm wrote: >> >>> On Mon, Oct 23, 2006 at 11:04:18AM +0300, "????????? >>> ????????????? (Apostolis Papagiannakis)" wrote: >>> >>> >>>> I've had similar "User unknowns" with nscd in the past. I was using >>>> dovecot ->getpwent -> nscd -> nss_ldap -> LDAP. >>>> >>>> >>> Are you using ldapi? >>> >>> >> Oops, I think I sent my previous post with unreadable HTML formating. I >> hope this one is OK. >> >> In /etc/ldap.conf (nss_ldap conf file) I use two ldap servers as >> "ldaps" URIs. >> >> # /etc/ldap.conf >> uri ldaps://ldap1.auth.gr/ ldaps://ldap2.auth.gr/ >> >> apap >> >> > > You need to make sure that the user nscd is running as has proper > permissions to the required resources (r/w on ldapi sockets, read on > ldaps' ca certs and the like). Turn on the debug level in ldap.conf > (nss_ldap's, not openssl's) and sudo to the nscd user/group to test > the access. > > Also nscd doesn't use rootbinddn, it uses binddn. > I think file permissions have always been ok because nscd and nss_ldap usually work ok. The problem appears only when the ldap connection breaks (e.g. remote ldap server restart). We don't use rootbinddn at all. Anyway I just checked the latest version of nss_ldap and now I see interesting new relevant options are available (e.g. nss_connect_policy persist/oneshot). I will give it a try and respond back in a few days. Definately nss_ldap's bad behaviour is not really a dovecot problem. Dovecot has been rock solid here serving 30000 users (4000 different active users every day) on a single server. apap

1 0

Re: [Dovecot] 1.0.rc10 status report
by "Αποστόλης Παπαγιαννάκη ς (Apostolis Papagiannakis)" 23 Oct '06

23 Oct '06

dovecot-request(a)dovecot.org wrote: > Date: Fri, 20 Oct 2006 13:26:03 +0100 (BST) > From: David Lee <t.d.lee(a)durham.ac.uk> > Subject: [Dovecot] 1.0.rc10 status report > > > 1. "User unknown": We use NIS for our passwd information. On the earlier > rc8 test we had had several occurences of "User unknown" (from "deliver") > giving "dsn=5..." for perfectly valid users. So for this rc10 test I > applied a local patch so these were reduced to "EX_TEMPFAIL" (dsn=4...). > (This was triggered, as epected, a few times and subsequent delivery > attemtps succeeded.) I strongly suspect that this is some sort of issue > with FC5, probably "nscd" and nothing to do with dovecot. Hints would be > nice, but from the dovecot perspective you may probably ignore this item. > > I've had similar "User unknowns" with nscd in the past. I was using dovecot ->getpwent -> nscd -> nss_ldap -> LDAP. I found out that whenever the ldap server got restarted, nscd did not restart properly and immediately its permanent ldap connection, and was giving 'user unknown' replies at least for a few minutes. Restarting nscd would fix the problem immediately. Running without nscd would also fix the problem. There was no problem with pam_ldap authentication. As a result, the system got ignorant of its uncached users for a few moments. My workaround was a crontab that kept /etc/passwd up-to-date as well as an entry in the /etc/resolv.conf 'passwd: ldap files' (cat /etc/passwd ; getent passwd ) |sort -u >/etc/passwd.tmp && mv /etc/passwd.tmp /etc/passwd > So should I have the indexes on the fileserver (one instance), or should they > be on each cluster machine's private storage (possibly several instances; > one per cluster machine)? The suggestion is that if you need to have mailboxes over NFS, use local disk for indexes. If you read the complete list archive you will find too many people that have had troubles with indexes over NFS. Local indexes have a performance penalty, only when you have access from different imap servers (especially concurrent) . apap

3 4

[Dovecot] mysql-5.0.26 stored procedure authorization, take 2
by Chaos Engine 22 Oct '06

22 Oct '06

Last time I came up with a problem with concernin MySQL authorization with stored procedures. Timo helped me get going by with modified client_flags (MULTISTATEMENT keyword). Now all it happened again but from another way. My stored proce for MySQL is causing fillowing error: "Oct 21 12:39:22 haos dovecot: auth-worker(default): sql(user,192.168.X.X): Password query fai led: Commands out of sync; you can't run this command now" Looks like it is partly mysql-5.0.26 thing because of this: http://dev.mysql.com/doc/refman/5.0/en/commands-out-of-sync.html On the other hand with my previous mysql installation (mysql-5.0.24-r1) this error is gone (I checked by downgrading). My dovecot-sql.conf: driver = mysql connect = host=/var/run/mysqld/mysqld.sock dbname=mailbase user=mailuser password=******** client_flags=65536 #655536 is equivalent of CLIENT_MULTI_STATEMENTS flag #yes, I still insist on using stored proc for authorization. This gives me few usefull features I like. password_query = call Authenticat('%u', '%n', '%d') With this config on mysq-5.0.26 I get "...Commands out of sync; you can't run this command now..." but not on mysql-5.0.24-r1. Personally I think mysql guys changed something; I can't tell what and why (changelog review?) Maybe you guys know what it was? -- Chaos greets U

2 1

[Dovecot] Using saslauthd with dovecot
by Gerard Seibert 21 Oct '06

21 Oct '06

FreeBSD 6.1 STABLE Postfix-2.4-20061006 Dovecot-1.0.rc7 I am using 'saslauthd -a sasldb -c' for authentication with Postfix. Since Dovecot and Postfix are using the same users and passwords, I was wondering if it would be possible to use this mechanism with Dovecot also. -- Gerard "There is nothing wrong with making love with the light on. Just make sure the car door is closed." George Burns

2 3