- dovecot - dovecot.org

[Dovecot] Using dovecot auth with Postfix
by Kim Culhan 01 Jan '06

01 Jan '06

Attempting to setup smtpd auth for Postfix using the Dovecot authorization unix socket. Some info is at: http://www.postfix.org/SASL_README.html To enable operation when Postfix is chrooted, a method from the reference above is to locate the socket at: /var/spool/postfix/private/auth To do this, I have this configuration in dovecot.conf: # listener sockets will be created by Dovecot's master process using the # settings given inside the auth section auth default_with_listener { mechanisms = plain passdb passwd { } userdb pam { } socket listen { master { path = /var/spool/postfix/private/dovecot-auth-master # WARNING: Giving untrusted users access to master socket may be a # security risk, don't give too wide permissions to it! mode = 0600 # Default user/group is the one who started dovecot-auth (root) user = group = } client { path = /var/spool/postfix/private/dovecot-auth-master mode = 0660 } } } With this configuration Dovecot writes this to the log at startup: dovecot: Dec 31 17:04:32 Error: child 3536 (auth) returned error 89 dovecot: Dec 31 17:25:34 Error: Auth process died too early - shutting down dovecot: Dec 31 17:25:34 Error: auth(default_with_listener): Unknown userdb driver 'pam' (typo, or Dovecot was built without support for it? Check with dovecot --build-options) Before modifying the setup for this auth function, pam authentication was working fine. Also, Dovecot will make /auth owned by root which Postfix considers a 'fatal' problem. Should it be setup to run as user Postfix ? Any help here is vy appreciated -kim -- w8hdkim(a)gmail.com

4 4

[Dovecot] LDAP - authentication with bind vs. password attribute read
by Geff 01 Jan '06

01 Jan '06

Any word on this patch? http://www.dovecot.org/list/dovecot/2004-June/003867.html If not, I'll take a stab at it. Geff

2 3

[Dovecot] invalid mbox files
by Harout S. Hedeshian 31 Dec '05

31 Dec '05

Hello! I recently upgraded from dovecot 0.9x to 1.0.5-Aplha and now when ever folders are opened (in IMAP), it keeps saying invalid mbox files. It worked fine in 0.99.x. It is detecting the right mbox files because it lists the folders and the subscriptions correctly. I am using "default_mail_env = mbox:~/mail/:INBOX=/var/mail/%u" in the config file, but I get the same error with "Detect automatically". It generates nothing in the log files so I am lost!! I tried both outlook and thunderbird but same results. Thanks for the help, Harout S. Hedeshian

2 2

[Dovecot] alpha5: (message_body_search_ctx) assert
by Jeff A. Earickson 31 Dec '05

31 Dec '05

Hi, My second case of this assert, gdb analysis of the core dump attached. My setup: Solaris 9, dovecot built with gcc 4.0.2, mbox format, imap usage only. INBOX is NFS mounted from another Solaris 9 system, index files are local. Syslog complaint is: imap(user): file message-body-search.c: line 414 (message_body_search_ctx): assertion failed: (input->v_offset == part->physical_pos + part->header_size.physical_size) Jeff Earickson Colby College

2 5

[Dovecot] 1.0alpha5: fcntl() locking problem
by Jeff A. Earickson 31 Dec '05

31 Dec '05

Hi, My setup: Solaris 9, /var/mail is NFS mounted from another Solaris 9 box, home directories and dovecot index stuff is on local ufs filesystems. I upgraded from alpha4 to a5 about 36 hours ago. Dovecot is configured like so during the build: VERSION=1.0.alpha5 CC=gcc CFLAGS="-g -O" CPPFLAGS=-I/opt/openssl/include LDFLAGS=-L/opt/openssl/lib \ ./configure --prefix=/opt/dovecot.$VERSION --with-ssl=openssl \ --with-ssldir=/opt/openssl/ssl > configure.out This afternoon dovecot basically locked up where a lot of people (including me) were getting: imap(user): fcntl() failed with mbox file /var/mail/user: No record locks available for syslog messages, and their mailbox operations would fail. In my case pine just closed the mailbox with an internal error. I did a quick fix by stopping dovecot, killing all dovecot processes, killing /usr/lib/nfs/lockd on the dovecot server, and restarting lockd. Ideas? Suggestions? Jeff Earickson Colby College

3 3

[Dovecot] Bug with userdb prefetch
by Stian Jordet 31 Dec '05

31 Dec '05

Hi, when I'm (trying) to use userdb prefetch with ldap, it works fine for system users, but for virtual users without their own uid and gid, it won't work. I get in the log: Dec 31 01:34:47 buick dovecot: auth(default): prefetch(oddrun,127.0.0.1): userdb_uid not returned Dec 31 01:34:47 buick dovecot: auth(default): prefetch(oddrun,127.0.0.1): userdb_gid not returned Which means that the problem is that user_global_uid and user_global_gid is not used when using prefetch. That must be a bug? Best regards, Stian

1 0

[Dovecot] can't switch off login debuggin
by Sebastian Bauer 31 Dec '05

31 Dec '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi there, I tried the change from cyrus to dovecot. This was just some days ago and I'm really happy. Just a little problem. For testing I switched on some login debugging. Now I can't switch it off. Dovecot seems to ignore the "no" in the config file. <snip> auth_verbose = no auth_debug = no </snip> That is what I get in maillog: <snip> dovecot-auth: pam_sm_authenticate called. dovecot-auth: dbuser changed. dovecot-auth: dbpasswd changed. dovecot-auth: host changed. dovecot-auth: database changed. dovecot-auth: table changed. dovecot-auth: usercolumn changed. dovecot-auth: passwdcolumn changed. dovecot-auth: crypt changed. dovecot-auth: logtable changed. dovecot-auth: logmsgcolumn changed. dovecot-auth: logusercolumn changed. dovecot-auth: loghostcolumn changed. dovecot-auth: logpidcolumn changed. dovecot-auth: logtimecolumn changed. dovecot-auth: db_connect called. dovecot-auth: returning 0 . dovecot-auth: db_checkpasswd called. dovecot-auth: pam_mysql: where clause = dovecot-auth: SELECT password FROM accountuser WHERE username='XXXX' dovecot-auth: sqlLog called. dovecot-auth: insert into log (msg, user, host, pid, time) values('AUTH SUCCESSFUL', 'XXXX', '', '14813' , NOW()) dovecot-auth: Returning 0 dovecot-auth: returning 0 . dovecot-auth: returning 0. dovecot-auth: pam_mysql: setcred called but not implemented. dovecot-auth: pam_mysql: acct_mgmt called but not implemented. Dont panic though :) </snip> I use dovecot-0.99.11-2.EL4.1 on CentOS. Hope someone can help me to stop these messages. Regards, Sebstian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFDtcI90IZnttJ61yYRAhqYAKDC5DUvlNHR2o70gMWayBbJFr6oewCg8r5u hWlfTfsff1k67RLKq/P/xEM= =rlmj -----END PGP SIGNATURE-----

2 2

[Dovecot] a problem in building dovecot @ opensolaris
by Sergey Ivanov 31 Dec '05

31 Dec '05

Hi, I'm trying to build dovecot from snapshot dovecot-20051215.tar.gz on OpenSolaris Nevada build 28. I have added to the PATH directories for make, gcc and automake/autoconf (in BASH): $ export PATH=/opt/sfw/bin:/usr/ccs/bin:/usr/sfw/bin:$PATH then executed --- $ aclocal $ libtoolize --force $ automake --add-missing $ autoheader $ autoconf --- And then make finished with --- Install prefix ...................... : /usr/local File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : none Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with mail delivery agent .. : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword (modules) Building with password lookup modules : passwd passwd-file shadow pam checkpassword (modules) --- But make fails, the first error is: --- Making all in quota if /bin/bash ../../../libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I../../.. -I../../../src/lib -I../../../src/lib-dict -I../../../src/lib-mail -I../../../src/lib-storage -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/sfw/include -MT quota.lo -MD -MP -MF ".deps/quota.Tpo" -c -o quota.lo quota.c; \ then mv -f ".deps/quota.Tpo" ".deps/quota.Plo"; else rm -f ".deps/quota.Tpo"; exit 1; fi gcc -DHAVE_CONFIG_H -I. -I. -I../../.. -I../../../src/lib -I../../../src/lib-dict -I../../../src/lib-mail -I../../../src/lib-storage -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/sfw/include -MT quota.lo -MD -MP -MF .deps/quota.Tpo -c quota.c -fPIC -DPIC -o .libs/quota.o In file included from quota-fs.h:22, from quota.c:6: /usr/include/sys/mnttab.h:81: error: parse error before '*' token /usr/include/sys/mnttab.h:82: error: parse error before '*' token /usr/include/sys/mnttab.h:83: error: parse error before '*' token /usr/include/sys/mnttab.h:84: error: parse error before '*' token *** Error code 1 make: Fatal error: Command failed for target `quota.lo' Current working directory /home/seriv/dovecot/dovecot-1.0.alpha5/src/plugins/quota *** Error code 1 The following command caused the error: set fnord $MAKEFLAGS; amf=$2; \ dot_seen=no; \ target=`echo all-recursive | sed s/-recursive//`; \ list='quota imap-quota trash'; for subdir in $list; do \ echo "Making $target in $subdir"; \ if test "$subdir" = "."; then \ dot_seen=yes; \ local_target="$target-am"; \ else \ local_target="$target"; \ fi; \ (cd $subdir && make $local_target) \ || case "$amf" in *=*) exit 1;; *k*) fail=yes;; *) exit 1;; esac; \ done; \ if test "$dot_seen" = "no"; then \ make "$target-am" || exit 1; \ fi; test -z "$fail" make: Fatal error: Command failed for target `all-recursive' --- Please, help. -- Sergey Ivanov

3 2

[Dovecot] dovecot and ldaps://
by David Coppa 31 Dec '05

31 Dec '05

Hi all, I've managed to get dovecot running with ldaps (ssl over port 636, not starttls). Btw, it's working right only if i specify "TLSVerifyClient never" in my slapd.conf. With any other parameter (like "TLSVerifyClient demand"), the bind fails with: connection_get(12) connection_get(12): got connid=0 connection_read(12): checking for input on id=0 TLS trace: SSL_accept:before/accept initialization TLS trace: SSL_accept:SSLv3 read client hello A TLS trace: SSL_accept:SSLv3 write server hello A TLS trace: SSL_accept:SSLv3 write certificate A TLS trace: SSL_accept:SSLv3 write certificate request A TLS trace: SSL_accept:SSLv3 flush data TLS trace: SSL_accept:error in SSLv3 read client certificate A TLS trace: SSL_accept:error in SSLv3 read client certificate A connection_get(12) connection_get(12): got connid=0 connection_read(12): checking for input on id=0 TLS trace: SSL3 alert write:fatal:handshake failure TLS trace: SSL_accept:error in SSLv3 read client certificate B TLS: can't accept. TLS: error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate +/usr/src/lib/libssl/src/ssl/s3_srvr.c:2004 connection_read(12): TLS accept error error=-1 id=0, closing connection_closing: readying conn=0 sd=12 for close connection_close: conn=0 sd=12 Is there a way to specify, in the dovecot-ldap.conf file, where to look for the client certificate and key files? Or maybe make dovecot parse the ldaprc file under /etc? Best Regards, David

3 2

[Dovecot] How to disable keywords?
by Sebastjan Trepca 31 Dec '05

31 Dec '05

Hi, is there a quick way to disable keyword feature in dovecot? Thanks, Sebastjan

2 4