- dovecot - dovecot.org

[Dovecot] LDAP and prefetch
by Jorgen Lundman 09 Apr '06

09 Apr '06

SunOS pop01.unix 5.10 Generic_118844-26 i86pc i386 i86pc dovecot-1.0.beta3 It is most likely something I am doing wrong, but could someone take a look at why I can not get LDAP prefetch to work? If I define things like this: dovecot.conf: ---------------------------------------------- passdb ldap { args = /usr/local/etc/dovecot-ldap.conf } userdb ldap { args = /usr/local/etc/dovecot-ldap.conf } ---------------------------------------------- dovecot-ldap.conf: ---------------------------------------------- base = uid=%n, o=%d, ou=mail, dc=example, dc=com user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=posixAccount)(mail=%u)) pass_attrs = mail=user,userPassword=password,homeDirectory=userdb_home,uidNumber =userdb_uid,gidNumber=userdb_gid pass_filter = (&(objectClass=posixAccount)(mail=%u)) ---------------------------------------------- This works correctly. Queries LDAP twice, but retrieves home, uid, gid and mail correctly. Authenticates well. If I replace the userdb line in dovecot.conf with: ---------------------------------------------- userdb prefetch { } ---------------------------------------------- It does no longer work. The passdb query is still correct, and it is followed by a second "empty" ldap query (as seen from snoop) with the following errors: Mar 20 15:58:06 pop01.unix dovecot: [ID 474965 mail.info] Dovecot v1.0.beta3 starting up Mar 20 15:58:14 pop01.unix dovecot: [ID 107833 mail.error] auth(default): prefetch(fred(a)uranus.com,172.20.12.12): userdb_uid not returned Mar 20 15:58:14 pop01.unix dovecot: [ID 107833 mail.error] auth(default): prefetch(fred(a)uranus.com,172.20.12.12): userdb_gid not returned Mar 20 15:58:14 pop01.unix dovecot: [ID 107833 mail.error] auth(default): userdb(fred(a)uranus.com,172.20.12.12): user not found from userdb Mar 20 15:58:14 pop01.unix dovecot: [ID 107833 mail.info] pop3-login: Internal login failure: user=<fred(a)uranus.com>, method=PLAIN, rip=172.20.12.12, lip=172.20.12.8 Snoop of failing lookup: LDAP: Operation *[APPL 3: Search Request] LDAP: [Base Object] LDAP: uid=fred, o=uranus.com, ou=mail, LDAP: dc=example, dc=com [snip] LDAP: And *[0] LDAP: Equality Match *[3] LDAP: [Attr Descr] LDAP: objectClass LDAP: [Value] LDAP: posixAccount LDAP: *[3] LDAP: [OctetString] LDAP: mail LDAP: [OctetString] LDAP: fred(a)uranus.com LDAP: *[Sequence] LDAP: [OctetString] LDAP: mail LDAP: [OctetString] LDAP: userPassword LDAP: [OctetString] LDAP: homeDirectory LDAP: [OctetString] LDAP: uidNumber LDAP: [OctetString] LDAP: gidNumber [snip] LDAP: Operation *[APPL 4: Search ResEntry] LDAP: [Object Name] LDAP: uid=fred,o=uranus.com,ou=mail,dc LDAP: =example,dc=com LDAP: *[Partial Attributes] LDAP: *[Attribute] LDAP: [Type] LDAP: uidNumber LDAP: *[Vals] LDAP: [Value] LDAP: 105 LDAP: *[Attribute] LDAP: [Type] LDAP: gidNumber LDAP: *[Vals] LDAP: [Value] LDAP: 200 LDAP: *[Attribute] LDAP: [Type] LDAP: homeDirectory LDAP: *[Vals] LDAP: [Value] LDAP: /export/nfs/mail/com/s/u/ur LDAP: anus/fred/ LDAP: *[Attribute] LDAP: [Type] LDAP: userPassword LDAP: *[Vals] LDAP: [Value] LDAP: {crypt}QAa3SPeYrDARs (its "test", no leak fun here) LDAP: *[Attribute] LDAP: [Type] LDAP: mail LDAP: *[Vals] LDAP: [Value] LDAP: fred(a)uranus.com [snip] TCP: Destination port = 389 (LDAP) LDAP: ----- LDAP: ----- LDAP: LDAP: "" LDAP: TCP: Destination port = 389 (LDAP) LDAP: ----- LDAP: ----- LDAP: LDAP: "" LDAP: Please advice! Lund -- Jorgen Lundman | <lundman(a)lundman.net> Unix Administrator | +81 (0)3 -5456-2687 ext 1017 (work) Shibuya-ku, Tokyo | +81 (0)90-5578-8500 (cell) Japan | +81 (0)3 -3375-1767 (home)

3 3

[Dovecot] POP (dot) locks
by Christian Balzer 09 Apr '06

09 Apr '06

Hello, just to soothe my paranoia from many years of qpopper usage, which enforces solitary access to a POP mailbox. Only one login per user is possible at the same time and if a session terminates w/o qpopper being properly notified it will remain locked for some time, 30 minutes by default. With dovecot (0.99.10.4) one can login multiple times (using POP, with IMAP of course this comes as no surprise :) and thus I presume this bit from the configuration: --- # Should we create dotlock file even when we want only a read-lock? Setting # this to yes hurts the performance when the mailbox is accessed simultaneously # by multiple processes, but it's needed for reliable reading if no other # locking methods are available. #mbox_read_dotlock = no --- means that if the only other reading accesses to a (mbox style in this case here) mailbox are via other dovecot processes everything will be fine? Regards, Christian Balzer -- Christian Balzer Network/Systems Engineer NOC chibi(a)gol.com Global OnLine Japan/Fusion Network Services http://www.gol.com/

5 10

[Dovecot] .'s in folder names
by Craig Whitmore 09 Apr '06

09 Apr '06

Hi there We are trying to move over from 1 IMAP server to another, but the problem is dovecot does not allow .'s in folder names (and we have quite a number of people who do have .'s in their folder names (ie "www.domain stuff") Is there anyway of allowing dovecot to allow .'s in folder names? Thanks Craig Whitmore

5 6

[Dovecot] problem with userdb_ on pgsql
by chester c young 09 Apr '06

09 Apr '06

# 1 password_query = SELECT login as user, passwd as password FROM mail.dovecot_passwd_v WHERE login = '%n' # 2 user_query = SELECT home, 5020 as uid, 5020 as gid FROM mail.dovecot_passwd_v WHERE login = '%n' # 3 # password_query = SELECT login as user, passwd as password, home as userdb_home, 5020 as userdb_uid, 5020 as userdb_gid FROM mail.dovecot_passwd_v WHERE login = '%n' when #3, instead of #1 and #2 is used, it still calls a default user_query. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

[Dovecot] How to use Master Users.
by Adam M. Dunn 09 Apr '06

09 Apr '06

Hi. I'm testing out the new 'master users' feature, and I'm not having any luck getting it to work. Anyone out there using it yet? Here's what I have so far: dovecot.conf: ------------ auth_master_user_separator = * auth default { passdb passwd-file { # Master users that can login as anyone else args = /etc/dovecot/dovecot.masterusers master = yes pass = yes } # LDAP database passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } ... ... } dovecot.masterusers: ------------------- testuser:{plain}testpass # telnet localhost imap Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK IMAP server ready. 1 login realuser*testuser "testpass" 1 NO Authentication failed. As you can see I get authentication failed. The log shows it fails for the 'realuser' that exists in ldap. Any ideas out there? I have the 'testuser' also setup in /etc/passwd. Thanks Adam

3 4

[Dovecot] Questions about differences to other mail servers
by Kai Schaetzl 09 Apr '06

09 Apr '06

I just transferred over my first server from Suse Linux with uw-imap(ipop3/imap2003) to CentOS with Dovecot (0.99). I didn't find any problems in the testing phase, but when the actual transfer into production happened I found a few problems crop up: 1. Dovecot wants to chdir in the user's home directory even when logging in via POP3. However, the mailboxes for POP3 are all in /var/spool/mail. What's the reason for this and can I stop this? 2. In addition I found that the home directories need additional permissions I did not need when using ipop3/imap2003, although this imap server needs to write/read in the same directories as dovecot. Specifically, I had to change the permissions on the directory right above the pop user directories from 750 to 755. Those directories are owned by the user and the primary group he belongs to. It seems that dovecot somehow doesn't "use" the primary group of the user and so can't traverse thru and the chdir fails. 3. Furthermore, Dovecot created an IMAP directory structure within the home directory of most users like "mail/.imap/INBOX" (on some it reused the existing Mail -uppercase- directory). Just on a simple first POP3 login. What's the reason for doing this? Maybe that user is never going to use IMAP? Does it test for both mail and Mail before it creates it's own structure or what does it do? I assume this is related to default_mail_env? 4. Dovecot supports "auth plain", does it also support "auth login"? If so, how do I enable it? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

3 6

[Dovecot] plugin problems.
by lenny＠edpausa.com 09 Apr '06

09 Apr '06

dovecot 1 beta 5. solaris 9, gcc, gnu make. trying to test imap quota plugin. Apr 4 09:44:59 frodo dovecot: [ID 107833 mail.error] imap(lenny): dlopen(/usr/local/dovecot/lib/dovecot/imap/lib02_imap_quota_plugin.so) failed: ld.so.1: imap: fatal: relocation error: file /usr/local/dovecot/lib/dovecot/imap/lib02_imap_quota_plugin.so: symbol quota: referenced symbol not found default_mail_env = mbox:~/:INBOX=~/mbox mail_plugins = imap_quota mail_plugin_dir = /usr/local/dovecot/lib/dovecot/imap quota = dirsize:%h:1024000 ------------------ trying to test convert plugin. ~/Maildir gets created with 3 subdirectories, but no mail is converted and this error comes up. Apr 4 10:48:03 frodo dovecot: [ID 107833 mail.error] imap(lenny): Mailbox conversion: Couldn't create mailbox directory Maildir/cur default_mail_env = maildir:~/Maildir:INDEX=~/ mail_plugins = convert mail_plugin_dir = /usr/local/dovecot/lib/dovecot/imap convert_mail = mbox:%h/:INBOX=%h/mbox

2 1

[Dovecot] LDA and Shared Mailboxes
by Timothy White 09 Apr '06

09 Apr '06

I'm hoping LDA has what I'm looking for, basically, I want to be able to deliver mail, to a shared mailbox. Ideally, I'd like a method of determining what address can send to the shared mailbox, and I don't like the idea of having to copy emails into the mailbox, to 'send' to it. I'd prefer to just send to an address, and if your permissions are correct, then the email is delivered to the shared mailbox. Any ideas? Thanks Tim -- Linux Counter user #273956

2 1

[Dovecot] preserving pop3 mail uids
by adcx＠server101.com 09 Apr '06

09 Apr '06

Is there some way that message uids can be preserved when converting uw-pop3 mbox mail to dovecot maildir format? We've tried perfect_maildir, mb2md and the convert-tool that comes with dovecot but so far have been unable to preserve the message uids, which for example go from 44333a8500000003 before the conversion to 4434621500000003 afterwards. The quantity of mailboxes involved means forcing users to re-pop old emails left on the server isn't an option. Any help appreciated.

3 3

[Dovecot] LDAP authentication via PAM
by Oscar A. Valdez 09 Apr '06

09 Apr '06

I've configured dovecot to authenticate against a Fedora Directory Server. The mail server on which dovecot is installed has the nss_ldap and pam_ldap packages installed, and /etc/dovecot.conf has the following two lines: auth_userdb = ldap /etc/dovecot-ldap.conf auth_passdb = pam In other words, I want dovecot to use LDAP to access the user database, but PAM for authentication. This part is working, since users authenticate and get their mails correctly through dovecot. /etc/dovecot-ldap.conf contains the following: hosts = 192.168.0.2 ldap_version = 3 base = ou=People, dc=duraflex, dc=com, dc=sv deref = never scope = subtree user_attrs = uid,homeDirectory,,,uidNumber,gidNumber user_filter = (&(objectClass=posixAccount)(uid=%u)) I haven't specified a dn or dnpass, since all I need is that dovecot perform an anonymous query for the uid, homeDirectory, uidNumber and gidNumber fields of its users, which are publically viewable. However, my FDS server's access log has entries like these: conn=3266227 fd=138 slot=138 connection from 192.168.0.100 to 192.168.0.2 conn=3266227 op=0 BIND dn="" method=128 version=3 conn=3266227 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="" conn=3266227 op=1 SRCH base="ou=People,dc=duraflex,dc=com,dc=sv" scope=1 filter="(&(objectClass=posixAccount)(uid=dovecot))" attrs=ALL conn=3266227 op=1 RESULT err=0 tag=101 nentries=0 etime=0 conn=3266227 op=2 SRCH base="ou=Groups,dc=duraflex,dc=com,dc=sv" scope=1 filter="(&(objectClass=posixGroup)(memberUid=dovecot))" attrs="gidNumber" conn=3266227 op=2 RESULT err=0 tag=101 nentries=0 etime=0 conn=3266227 op=-1 fd=138 closed - B1 Dovecot binds anonimously with an empty dn, then queries FDS for a user and a group called dovecot (which don't exist on the DS), and finds 0 entries. Is it possible to access the user database through PAM (auth_userdb = pam)? Since I'm running the nss_ldap and pam_ldap modules, it'd really be an LDAP query for users, and a query in /etc/passwd and /etc/group for dovecot (since it's a local user and group on the mail server). -- Oscar A. Valdez

2 1