- dovecot - dovecot.org

[Dovecot] dovecot-dspam-plugin not launching dspam
by Stefan Schmidt 13 Apr '06

13 Apr '06

hello, i added the dovecot-dspam-plugin [1] to my dovecot-installation. when trying to move a mail out of or into the predefined spamfolder with thunderbird a messagebox shows : "dspam failed" and the message remains in its original position. i am using virtual mail users contained in a postgresql-database [2]. normal imap access and dspam training from the commandline works fine. a posting concerning probably the same issue has been posted on the dspam-mailinglist [3], but there haven't been any helpful replies so far. furthermore i suspect the plugin is missing the --user option when calling dspam, since this seems to be mandatory [4,5], but unfortunately adding this option in the plugin doesn't change its behavior. i am working on a debian system and currently using dovecot 1.0.beta3-3, dspam 3.6.4-2+b1 and the dspam-plugin "for dovecot beta 2 and 3". 1) calling dspam from the commandline with the same parameters as in the (slightly modified) plugin works fine :/# su virtual :/$ /usr/bin/dspam --user retrain --source=error --stdout --class=spam --signature=4,4434846e237406491211187 --debug -> /var/log/dspam.debug No QuarantineAgent option found. Using standard quarantine. DSPAM Instance Startup input args: /usr/bin/dspam --debug --user retrain --source=error --stdout --class=spam --signature=4,4434846e237406491211187 pass-thru args: processing user retrain uid = 0, euid = 0, gid = 0, egid = 101 loading preferences for user retrain Loading preferences for uid 7 Loading preferences for uid 0 Loading preferences for uid 0 default preferences empty. reverting to dspam.conf preferences. Loading preferences from dspam.conf using /var/spool/dspam/opt-in/local/retrain.dspam as path using /var/spool/dspam/opt-out/local/retrain.nodspam as path sedation level set to: 0 loading preferences for user some_virtual_account(a)mydomain.com Loading preferences for uid 4 Loading preferences for uid 0 Loading preferences for uid 0 default preferences empty. reverting to dspam.conf preferences. Loading preferences from dspam.conf processing signature. length: 1344 reversing 112 tokens Control: [10 10] [11 9] Delta: [1 -1] reclassifying iteration 1 result: 0 libdspam returned probability of 1.000000 message result: SPAM DSPAM Instance Shutdown. Exit Code: 0 2) when dspam is called via the (slightly modified) dovecot-dspam-plugin it aborts (the unmodified version aborts the same way) -> /var/log/mail.err dovecot: imap-login: Login: user=<someuser(a)mydomain.com>, method=plain, rip=123.123.123.123, lip=123.123.123.123 imap: /usr/bin/dspam --user retrain --source=error --stdout --class=spam --signature=4,4434846e237406491211187 dspam[25157]: Unable to determine the destination user dspam[25157]: DSPAM agent misconfigured: aborting -> /etc/dspam/dspam.conf [extract] Home /var/spool/dspam StorageDriver /usr/lib/dspam/libpgsql_drv.so TrustedDeliveryAgent "/usr/bin/procmail" OnFail error Trust root Trust dspam Trust mail Trust mailnull Trust smmsp Trust daemon Trust virtual TrainingMode teft TestConditionalTraining on Feature chained Feature whitelist Algorithm graham burton PValue graham Preference "spamAction=deliver" Preference "signatureLocation=headers" AllowOverride trainingMode AllowOverride spamAction spamSubject AllowOverride statisticalSedation AllowOverride enableBNR AllowOverride enableWhitelist AllowOverride signatureLocation AllowOverride showFactors AllowOverride optIn optOut AllowOverride whitelistThreshold HashRecMax 98317 HashAutoExtend on HashMaxExtents 0 HashExtentSize 49157 HashMaxSeek 100 HashConnectionCache 10 Notifications off PurgeSignatures 14 PurgeNeutral 90 PurgeUnused 90 PurgeHapaxes 30 PurgeHits1S 15 PurgeHits1I 15 LocalMX 127.0.0.1 SystemLog on UserLog on Opt out ProcessorBias on Include /etc/dspam/dspam.d/ -> /etc/dspam/dspam.d/pgsql.conf [extract] PgSQLServer 127.0.0.1 PgSQLPort 5432 PgSQLUser dspam PgSQLPass mypassword PgSQLDb libdspam7drvpgsql PgSQLVirtualTable dspam_virtual_uids PgSQLVirtualUIDField uid PgSQLVirtualUsernameField username -> dspam-headers from samples message X-DSPAM-Result: Innocent X-DSPAM-Processed: Thu Apr 6 03:32:07 2006 X-DSPAM-Confidence: 0.7524 X-DSPAM-Probability: 0.0000 X-DSPAM-Signature: 44346f97188755315134984 ciao, stefan [1] http://johannes.sipsolutions.net/Projects/dovecot-dspam-integration [2] http://www.gjdv.at/snippets/linux/virtual_mail_hosting [3] http://www.nuclearelephant.com/projects/dspam/dspam-users/2872.html [4] http://www.nuclearelephant.com/projects/dspam/dspam-users/2852.html [5] http://www.nuclearelephant.com/projects/dspam/dspam-users/2850.html

4 11

[Dovecot] Master Password
by Marc Perkel 13 Apr '06

13 Apr '06

OK - I'm confused. Trying to use the master password feature. What do I need to do to generate the password? What do I do to make the /etc/dovecot.masterusers file? thanks in advance. When I get this to work I will update the Wiki so that someone like me can understand it. auth_master_user_separator=* passdb passwd-file { # Master users that can log in as anyone args = /etc/dovecot.masterusers master = yes #pass =yes }

1 0

[Dovecot] BAD Error in IMAP Command
by Adam L 13 Apr '06

13 Apr '06

Hello. I have dovecot .99.14, sendmail, squirrelmail installed. Squirrelmail logins in fine and works with the IMAP server. I set up Outlook to connect to the imap server and it hangs. I telneted to the IMAP port and receive the following: * OK dovecot ready. a1 login aalang a1 BAD Error in IMAP command received by server. BYE BYE BAD Error in IMAP command received by server. I try STATUS and same thing happens. I searched the Internet for a bit and I didn't find anything that seemed helpful. Any ideas?

2 1

[Dovecot] Dovecot-LDA & permissions
by Duncan Hutty 12 Apr '06

12 Apr '06

I set up postfix/dovecot with the dovecot-LDA according to the dovecot wiki, in particular: http://wiki.dovecot.org/LDA#head-dacb9b9a1f19c3ea86bb6f8caa3d64e3ddad9ef8 For separation of privileges, I want to have one uid per virtual domain rather than have the vmail user own all directories under the mailstore. Therefore the LDA, deliver, in order to deliver must fulfill one of the following: a) it must be started as root b) it must be setuid c) it must have write access to the user's mailstore even as an unprivileged user itself. But a) postfix declines to this: postfix/pipe[26267]: fatal: user= command-line attribute specifies root privileges which is probably a good thing. b) will work, but I'm really wary of making anything setuid c) could be done if the group that deliver runs as (as defined in the user= attribute in master.cf) is the same as the group of each mailstore directory and that this group has write permissions *and* the sticky bit of each mailstore directory is set so that the file created by deliver is owned by the uid of the mailstore owner not deliver's uid. This is not exactly a question as such because I believe, subject to a little testing, that I have a working mail setup. However, I believe in doing things the right way wherever possible and I'm sure someone must have come across this before, so I'm submitting to the list inviting comment. How are most of you doing this? Are you just using a single uid for all virtual users? -- Duncan Hutty System Administrator, ECE Carnegie Mellon University Please use informative subject lines

1 0

[Dovecot] password length
by Mark Richards 12 Apr '06

12 Apr '06

After setting up a very sweet Dovecot installation (with OpenLDAP) we're finding something strange: passwords are accepted but only the first 8 characters and anything less than 8 characters is an invalid password For several reasons, including allowing longer passwords to make them more difficult to crack, I'd rather be able to use longer passwords. LDAP seems to have attributes for minimum and maximum password lengths. Ours is set currently at 256 char maximum. So my guess is that Dovecot may be doing something, or there's a configuration item I missed. Checked all the docs and the wiki. Anyone? Mark Richards

1 0

[Dovecot] strip domains
by Netlink Tech 12 Apr '06

12 Apr '06

Hello, Running FC5 x86_64 with dovecot-1.0-0_8.beta3.rhfc5.at Using system user/passwds for 99.99% of users...have sql user/pass enabled to test virtual users from mysql. How do I strip off the domain when users provide user(a)domain.com so that my userdb and passdb use just 'user'? (disregarding sql auth...I'm not concerned with that right now). My dovecot.conf auth config: passdb pam { args = dovecot } passdb sql { args = /etc/dovecot-sql.conf } userdb passwd { } userdb sql { args = /etc/dovecot-sql.conf } Can I just pass userdb the 'user' using an args= statement? %d? ...and then also to the passdb? Thanks, Curt

6 13

[Dovecot] Master Login
by Marc Perkel 12 Apr '06

12 Apr '06

How do you make the master login work?

2 1

[Dovecot] Re: strip domains
by Roger Weeks 12 Apr '06

12 Apr '06

So if I understand this correctly, %u matches the whole username in the sql database, but %n only matches the name before @? One thing we discovered in migrating from courier-imap to Dovecot is that courier-imap supported user@domain as a valid login name, where by default using %u in the SQL query, Dovecot does not. So it would have been useful for us to avoid a number of tech support calls for users who have user@domain configured in their mail clients. -- Roger J. Weeks Systems & Network Administrator Mendocino Community Network On Apr 12, 2006, at 7:16 AM, dovecot-request(a)dovecot.org wrote: > Date: Wed, 12 Apr 2006 16:05:24 +0300 > From: Timo Sirainen <tss(a)iki.fi> > Subject: Re: [Dovecot] strip domains > To: Netlink Tech <tech(a)netlinkcom.com> > Cc: dovecot(a)dovecot.org > > On Tue, 2006-04-11 at 09:36 -0500, Netlink Tech wrote: > In general I don't see this as very useful feature. Why are your users > logging in with @domain? Or why not change your passdbs/userdbs to > just > contain the domain, and set auth_default_realm so everyone always logs > in with domains? > > > Here you can modify your SQL command to use %n instead of %u. > > >> userdb passwd { >> } >> > >> userdb sql { >> args = /etc/dovecot-sql.conf >> } >> > > And here again you can use %n. >

1 0

[Dovecot] Scheduled Outages
by Roger Weeks 12 Apr '06

12 Apr '06

What's "after hours" for an ISP with customers all over the world? That's why we have regular once-per-month scheduled outages. Same time, every month. Email reminders go out to customers and are announced on our web pages. People can't argue with a month's advance notice. -- Roger J. Weeks Systems & Network Administrator Mendocino Community Network On Apr 12, 2006, at 5:49 AM, dovecot-request(a)dovecot.org wrote: > Date: Wed, 12 Apr 2006 07:27:36 -0500 > From: Les Mikesell <lesmikesell(a)gmail.com> > Subject: Re: [Dovecot] 1.0.beta6 released > To: Reuben Farrelly <reuben-dovecot(a)reub.net> > Cc: Timo Sirainen <tss(a)iki.fi>, Chris Wakelin > <c.d.wakelin(a)reading.ac.uk>, Jens Laas <jens.laas(a)data.slu.se>, > dovecot(a)dovecot.org > Message-ID: <1144844856.24974.1.camel(a)les-home.futuresource.com> > Content-Type: text/plain > > On Wed, 2006-04-12 at 06:51, Reuben Farrelly wrote: > >> That's why there's "scheduled downtime" and "after hours" to do >> these things, in >> case stuff goes wrong, as some users of horde with dovecot have >> found out lately ;) > > What's 'after hours' for a company with users all around the world? > Interesting concept, though... > -- > Les Mikesell > lesmikesell(a)gmail.com

1 0

[Dovecot] http://wiki.dovecot.org/ IS NOT RUNNING
by Alexandre Busquets 12 Apr '06

12 Apr '06

3 2