- dovecot - dovecot.org

[Dovecot] imap permission denied
by Roland Schmid 13 Mar '06

13 Mar '06

Hello, we have problems to access our users mailboxes with SquirrelMail. The log file /var/log/mail.log says permission denied, only one user is allowed to read his mail with SquirrelMail. We are running Debian Sarge, Mailserver is Postfix, imap server is dovecot. Our Mailboxes are stored in the mbox format. Folder of the mbox files is /var/mail/ the users are unix system accounts. Normally we read are mail with the POP-Client Outlook, this works well. But we also want to be able to read our mail (each user his own mails) via SquirrelMail /var/log/mail.log says: Mar 13 10:54:40 webserver dovecot: imap(unix-system-account): mkdir_parents(/var/mail/.imap/INBOX) failed: Permission denied In the folder where the mbox files are stored exists 3 folders called INBOX.drafts INBOX.sent INBOX.trash These folders are owned by the user who is able to read his mail via SquirrelMail and owned by the group mail. Only the user has read and write permissions. Does each user need to have his own INBOX Files? Could you please help me Kind regards, Roland

1 0

[Dovecot] Help please: Error: net_connect
by Brad 13 Mar '06

13 Mar '06

Having some issues with having the deliver lda deliver properly. Here are the vitals of the config : ============================= socket listen { master { path = /var/run/dovecot-auth-master mode = 0660 user = maildir group = maildir } } protocol lda { module_dir = /usr/local/lib/dovecot/lda postmaster_address = postmaster(a)bradphinney.com auth_socket_path = /var/run/dovecot-auth-master } passdb passwd-file { # Path for passwd-file args = /etc/dovecot-passdb } userdb static { # Template for settings. Can return anything a userdb could normally # return, eg.: uid, gid, home, mail, nice # # A few examples: # args = uid=600 gid=600 home=/export/mail/maildir/%u mail=maildir:/export/mail/maildir/%u ==================================== The deliver program is setuid and setgid maildir. The passdb seems to be working fine since I can log in fine using a client. When I try to deliver mail however .. I get this dovecot: Mar 12 20:42:02 Info: auth(default): master out: USER 1 superduper uid=600 gid=600 home=/export/mail/maildir/superduper mail=maildir:/export/mail/maildir/superduper dovecot: Mar 12 20:42:02 Error: auth(default): and then after a while .. this appears deliver: Error: net_connect(/var/run/dovecot-auth-master) failed: Permission denied And the really odd thing is that the mail seems to be delivered and placed in the maildir. Any help would be appreciated ..

1 0

[Dovecot] Limiting Dovecot access by user-spesific ip addresses?
by Timo Neuvonen 13 Mar '06

13 Mar '06

Hi, Is there any possibility to limit access to mailboxes by user-spesific ip addresses? So, I'd like to have a configuration which by default restricts reading emails to company's own ip-address range. So far, this could be achieved by a basic firewall rule, but not any more the following: However, there is need for a few users to access their emails from world-wide internet, so there should be a possibility to define for certain users an option to skip the allowed address range check. Regards, Timo

3 5

Re: [Dovecot] How to substitute colon `:' for another character in Maildir message files?
by Timo Sirainen 12 Mar '06

12 Mar '06

On Sat, 2006-03-11 at 17:05 -0500, My BSD wrote: > Need to back Maildirs to a smb share as a nightly Cron job (NFS is not > an option). > > Unfortunately, because Dovecot (1.0.beta2) adds a colon `:' to the name > of the message file, Samba (actually "mount_smbfs") truncates the file > names. As a result, files with truncated duplicate file names are > overwritten. > > Would prefer a build option or configuration parameter (a hack is O.K. > if nothing else is available). src/lib-storage/maildir/maildir-storage.h MAILDIR_INFO_SEP MAILDIR_INFO_SEP_S Changing that breaks maildir standard, so I don't want to make it any easier to change it.

1 0

[Dovecot] dovecot-1.0b3 kevent error/warning message
by John Wong 12 Mar '06

12 Mar '06

i use openbsd/i386, dovecot-1.0b3, i see some kevent error/warning message in maillog like this: -------------------------------------------------------- imap(username): kevent(1) in io_loop_handle_add() failed: Bad file descriptor imap(username): kevent(1) in io_loop_handle_remove failed: Bad file descriptor --------------------------------------------------------

5 4

[Dovecot] Suggested patch: retain user's group privileges after logging into IMAP
by Lior Okman 11 Mar '06

11 Mar '06

Hi, I'm attaching a suggested patch that lets an authenticated user access shared IMAP folders even if the user doesn't directly own the storage, but is a part of a group that has permissions on the storage. This allows for the administrator to setup a shared mailbox with permissions given to a group instead of a user, and allow all of the users that belong to the group to access the mail according to the file-system permissions. What do you think? Is this the right way to do this, or am I missing something security-wise? I'm also attaching a bug fix for the LDAP passdb, where if the password scheme wasn't PLAIN, the password would be cleared from memory before being used to authenticate the user, and the authentication would fail. Regards, Lior

1 0

[Dovecot] Segfault problem when using TWO dovecot servers!
by Adam M. Dunn 10 Mar '06

10 Mar '06

Forgive me if this gets submitted twice. I had issues signing up for the listserv but I think I'm strait now. Hi all, I just started working with Dovecot and I'd like to use it for my organization, but I've run into a little problem. So far I love it and it does what I need. One thing we need is to be able to write to multiple mailbox formats on a per user basis (mbox or Maildir), and it does just that. I want users to be able to choose their format, and I can let it autodetect for me. The way I do that is I have Maildrop filters check for the presence of a ~Maildir, and if it finds that it writes to it, otherwise it writes to ~mbox. Dovecot is the only IMAP server I've found to read either or without hard coding one or the other in the config file. The problem: We also want failover. Mail/home directories are NFS mounted. I was planning to setup two dovecot servers, and noticed that whenever one server writes its temp files to the mail directory, if another server tries to read it you get a segfault and the child process fails and dies. So it basically looks like only one server can own the files, and it won't share. I considered trying to set the INDEX option on the mail boxes to write local indexes, but if I try to specify something like: default_mail_env = INDEX=/var/indexes/%d/%n, it doesn't work. Sure I can make it work by putting in a mailbox format before the INDEX, but then I can't use the autodetect which I need. Here's the syslog error: kernel: imap[13689]: segfault at 00007fffffe38000 rip 00002aaaaad3823f rsp 00007fffffe351f0 error 4 Any solutions? I really need this to work badly, or we may have to rethink our entire mail strategy. I'm also using the latest version 1.0beta3. I considered namespaces, but correct me if I'm wrong, you can't setup two namespaces and have it pick the first mailbox format available like the autodetect feature does. I tried seting up namespaces for both mbox and Maildir, but it just creates both. Please help someone. I need a solution to present to my boss, even if that means we have to run one server until the bug is fixed in the next version. Thanks, Adam

2 2

[Dovecot] Setup Dovecot on os X
by Martin Kvapil 10 Mar '06

10 Mar '06

Hey, can anybody help me with this? i get it to work but i get errors when i try to login a client, i guess it is because the authentication part is messed up. What methods should i use? PAM for password i guess but for account? /martin

1 0

[Dovecot] Error question?
by Matt Juszczak 10 Mar '06

10 Mar '06

Mar 9 16:15:19 bob dovecot: imap(username): file mbox-sync-rewrite.c: line 106(mbox_sync_headers_add_space): assertion failed: (start_pos < data_size) Getting these errors like crazy. Any ideas? Thanks! Regards, Matt Juszczak

2 1

[Dovecot] ssl certs
by lenny＠edpausa.com 10 Mar '06

10 Mar '06

is it possible to use 2 different sets of ssl certificates, for 2 different hostnames ( e.g. pop.domain.com and imap.domain.com ) ? thank you

4 3