- dovecot - dovecot.org

[Dovecot] Thinking about switching from courier-imap to Dovecot: 2 simple questions
by kadafax 23 Dec '05

23 Dec '05

Hi, I'm using RHEL4 and since the dovecot RPM is present in the main repository, I'm thinking about switching from courier-imap (with whom I've got trouble to update) to Dovecot. Here are two questions about Dovecot (google didn't answer me): 1. Is it possible for dovecot to use the bind mecanism against ldap for authentification purpose. My main concern is to avoid the clear-text password in the dovecot-ldap.conf file. With courier-imap, the process simply bind to the ldap tree with the users's supplied login/password. No need for a special authentification purpose user. 2. Does imap's dovecot implementation support folders imbrication (more than one level folders) ? Thanks, kfx.

3 3

RE: [Dovecot] Vacation Message HOWTO
by Joshua Goodall 23 Dec '05

23 Dec '05

John Peacock wrote: > It's probably possible to use with any LDA which support delivery > scripts (e.g. .forward files). The CVS version of dovecot-lda has Sieve script support, and it works well. http://wiki.dovecot.org/moin.cgi/LDA - Joshua.

1 0

[Dovecot] Dovecot & pam_mkhomedir
by Stroller 22 Dec '05

22 Dec '05

Hi there, Does anyone have Dovecot working correctly with pam_mkhomedir, please? I seem to be going through quite a number of IMAP servers this week, trying to find one that will not only authenticate against a Windows domain but which will also create home directories for users the first time they log in. I'm using winbind to do the authentication & that seems to be doing the trick in the first instance - if I log in using Squirrelmail I see entries written to the system log saying: Dec 16 11:58:35 baby pam_winbind[9319]: user 'ned' granted access I have set Dovecot to log to /var/log/mail and in that I see only three entries saying: imap-login: Dec 16 11:58:36 Info: Login: ned [127.0.0.1] But Squirrelmail gives: ERROR: Could not complete request. Query: SELECT "INBOX" Reason Given: /etc/pam.d/imap says: #%PAM-1.0 auth required /lib/security/pam_winbind.so account required /lib/security/pam_winbind.so session required /lib/security/pam_mkhomedir.so skel=/etc/skel umask=0022 If I use the same configuration for SSH then the user's home directory is created upon authenticaton, but not with Dovecot. I chose to try Dovecot because I understood it handled PAM session wossisnames, which Courier-IMAP doesn't. My dovecot.conf is attached - I'm wondering if the problem could be with the "auth_userdb" setting, but `getent passwd` does show an entry for the user: # grep ned /etc/passwd # getent passwd | grep ned ned:x:10012:10000:Ned Nedbody:/home/DOMAIN/ned:/bin/false # Many thanks in advance for any advice or suggestions - I'd really like to understand what's going on here. I believe I can authenticate against the domain using LDAP / Active Directory, but since I don't know if that'll help I'd rather not go that route yet. If I first try to log in using ssh with pam_mkhomedir enabled then the users' home directory is created successfully & I can subsequently log on in Squirrelmail. But it's important to me that I shouldn't have to create users' home dirs for them - I should be able to add them on the Windows domain controller & just tell them to log in to their email - the home dir on the mailserver should be created automagically when they authenticate against the domain. Stroller.

7 13

[Dovecot] Authentication trouble.
by Michael Peters 22 Dec '05

22 Dec '05

I am not having much luck with resolving my authentication issue. The environment is "SunOS 5.10 Generic_118822-11 sun4u sparc SUNW,UltraSPARC-IIi-cEngine". dovecot-1.0.alpha5 ./configure --with-passwd --with-shadow --with-pam --with-checkpassword --with-mysql --with-storages=maildir # telnet 172.16.0.40 143 Trying 172.16.0.40... Connected to 172.16.0.40. Escape character is '^]'. * OK mailhub is for business purposes only. Usage is monitored. A01 login username mypassword * BAD [ALERT] Plaintext authentication is disabled, but your client sent password in plaintext anyway. If anyone was listening, the password was exposed. A01 NO Plaintext authentication disabled. A04 Logout * BYE Logging out A04 OK Logout completed. Connection to 172.16.0.40 closed by foreign host. *I have tried adding digest-md5 cram-md5 and shadow but Dovecot will not start.* auth default { # Space separated list of wanted authentication mechanisms: # plain digest-md5 cram-md5 apop anonymous gssapi mechanisms = plain *Dovecot will not start when I tried these options. Maybe I am entering this wrong?* passdb shadow { /etc/shadow } passdb passwd { /etc/passwd } Any assistance would be appreciated. -- Best regards, Michael

2 1

[Dovecot] dovecot -CVS and epoll and cvs not building
by Reuben Farrelly 22 Dec '05

22 Dec '05

Hi, After reviewing my dovecot ./configure options I thought I'd give --with-ioloop=epoll a go again (as opposed to just using =poll) but I'm seeing some errors appearing in the maillog that aren't there with standard poll: Dec 23 02:34:47 tornado dovecot: imap-login: Login: user=<reuben>, auth-method=plain, remote=220.237.24.149, TLS Dec 23 02:34:48 tornado dovecot: imap-login: io_loop_handle_add: epoll_ctl(3, 9): No such file or directory Dec 23 02:34:48 tornado dovecot: child 16524 (login) returned error 89 They're appearing fairly frequently, ie within a few mins of starting up and then the message won't go away until the client is restarted. So it's easy to reproduce but I'm not sure how to go about debugging it. Can anyone help with this? It's a very recent Linux-2.6 system so epoll support should not be an issue. Additionally -CVS won't compile for me right now, it bails out when compiling the 'quota' plugin. Workaround is to manually edit the dovecot/src/plugins/Makefile and not build this plugin.. Timo - is there a file/commit missing from -CVS at the moment for this plugin? I see no other reference anywhere for dqb_curblocks in the code. gcc -DHAVE_CONFIG_H -I. -I. -I../../.. -I../../../src/lib -I../../../src/lib-dict -I../../../src/lib-mail -I../../../src/lib-storage -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/kerberos/include -MT quota-fs.lo -MD -MP -MF .deps/quota-fs.Tpo -c quota-fs.c -fPIC -DPIC -o .libs/quota-fs.o quota-fs.c: In function 'fs_quota_get_resource': quota-fs.c:208: error: 'struct dqblk' has no member named 'dqb_curblocks' make[1]: *** [quota-fs.lo] Error 1 reuben

2 1

[Dovecot] Migrating from mbox to maildir, which converter is compatible with dovecot
by Oliver Schulze L. 22 Dec '05

22 Dec '05

Hi, I'm testing/debuging the migration from mbox to maildir in a mailserver running Dovecot 1.0alpha5. I migrated all 472715 emails(in a test server) and later noted that dovecot could not get the same flags/status of the emails as in the mbox. I was using perfect_maildir.pl and I think its not dovecot fault. Seems to me that perfect_maildir.pl convert the emails in a way that dovecot could not understand completelly. So, my cuestion is, which mbox to maildir converter can I use that is compatible with dovecot 1.0alpha5 ? Thanks Oliver -- Oliver Schulze L. <oliver(a)samera.com.py>

2 2

[Dovecot] mailbox from ldap and indexes
by Stian Jordet 21 Dec '05

21 Dec '05

Hi, because of quota, I would like to have indexes on another filesystem then user's maildir. This I can do with "default_mail_env= maildir:/% h/Maildir:INDEX=/var/indexes/%u" or something. But when I get the users mailbox location from ldap, there is no way to set the index? I guess I can make the ldap entry contain the INDEX as well, but I would like to use the ldap entry in the exim conf as well, to tell exim where to write the mails... Is there a way I haven't thought of yet? I have this in dovecot-ldap.conf now: user_attrs = uid,homeDirectory,mailbox,uid,uidNumber,gidNumber If I could do something like: user_attrs = uid,..,"maildir:" . mailbox . ":INDEX=var/indexes/%u",... that would have been awesome. Best regards, Stian

2 1

[Dovecot] Another "Too many files open" post
by Andy Cravens 21 Dec '05

21 Dec '05

I'm running Solaris 9 Sparc with Dovecot alpha 5 and using maildir format.. I noticed in the log file the following error: dovecot: Dec 20 15:54:18 Error: imap(xxxxxxxx): open(/export/home/xxxxxxxx/mail/.Sent Messages/cur/1135013649.002916.mbox:2,Sab) failed: Too many open files I called the guy and asked him what he was doing... synching his folders. It hung for a while but finally finished. I searched the archives and found some related info from Jeff Ballard: >Actually on Solaris 9 you want to put something like this in >/etc/system: > >set rlim_fd_cur = 32768 >set rlim_fd_max = 65536 > >That sets the current fd's to 32k and max to 64k. Unfortunately, to >take effect you'll need to reboot. After the reboot, ulimit -a should >show that nofiles(descriptors) is 32768. > >-Jeff And I found this from Jeff Earickson: >I ran into this problem with alpha4 on Solaris 9. I doubled the >following dovecot settings: > >login_max_processes_count = 256 (was 128) >login_max_logging_users = 512 (was 256) > >and the problem went away. I carried these numbers forward intoalpha5, >and it has been working fine. I changed my /etc/system file but have not rebooted yet. Also, on Jeff Earickson's post, I looked at my dovecot.conf settings and they're basically default which means everything in the "Login processes" section is commented out. I have 10 users on this system and will hold off migrating any more until I can resolve this problem. By the way, my "ulimit -a" shows "open files" at 256 which seems low. # ulimit -a core file size (blocks) 0 data seg size (kbytes) unlimited file size (blocks) unlimited open files 256 pipe size (512 bytes) 10 stack size (kbytes) 8192 cpu time (seconds) unlimited max user processes 29995 virtual memory (kbytes) unlimited Any advice would be appreciated. I can't reboot for a few more days.

8 9

[Dovecot] 1.0 alpha5: Plugin woes: quota/trash
by Jan-Piet Mens 21 Dec '05

21 Dec '05

Hello, I'm running Dovecot v1.0.alpha5 and I'm trying to get the quota plugins to work. I've enabled modules in dovecot.conf, but when the IMAP connection is opened, the log shows undefined symbols. : Loading modules from directory: /usr/local/lib/dovecot/imap : dlopen(/usr/local/lib/dovecot/imap/libtrash_plugin.so) failed: /usr/local/lib/dovecot/imap/libtrash_plugin.so: undefined symbol: quota : dlopen(/usr/local/lib/dovecot/imap/libimap_quota_plugin.so) failed: /usr/local/lib/dovecot/imap/libimap_quota_plugin.so: undefined symbol: quota : dlopen(/usr/local/lib/dovecot/imap/libquota_plugin.so) failed: /usr/local/lib/dovecot/imap/libquota_plugin.so: undefined symbol: dict_transaction_commit The source shows that the modules are read by reading the module directory and loading each of the found .so files. Supposing that the ordering of the files in the directory is wrong, I've even recreated the module directory manually, copying the libs into it in different orders; no change. It seems to me as though there are cross-dependencies in the shared libs that cannot be resolved. Has anybody found it to work or could anyone give me a hint on how to get it working? Thanks & regards, -JP

1 0

Re: [Dovecot] Quota usage
by Robin Breathe 20 Dec '05

20 Dec '05

> Stewart Dean wrote: > (from someone other than the original appender) > I'm looking to report the O/S (Berkeley BSD-originated, though on AIX) > derived quota > > Timo Sirainen wrote: >> On Fri, 2005-12-09 at 20:23 -0200, Clovis Tristão wrote: >>> How I enable the quota using in Dovecot. >>> Necessary to have access the quota of the users through the >>> SquirrelMail checkquota plugin. Thanks a lot, >> >> Currently not possible, but I just added the quota plugin to CVS, >> so it >> comes to alpha5 release. But that doesn't mean it necessarily works >> exactly how you want it, since there is no standard way to do quota.. >> Did you want it to show user's filesystem quota or something else? I wrote a filesystem quota plugin for use with dovecot-0.99.x some time ago. It's been tested with both Solaris and FreeBSD, and is currently used on a production Solaris server with 20k users for exactly the purpose you describe - SquirrelMail quota display. If anyone's interested in looking at the code with an eye to extending OS support or accelerating conversion to the 1.0-alpha codebase, let me know and I'll get around to making it available somewhere. On the other hand, Timo made some noises about committing something similar to CVS, so it may be worth waiting. Robin

1 0