- dovecot - dovecot.org

[Dovecot] DSA support for TLS?
by OpenMacNews 25 Sep '05

25 Sep '05

hi all, i've dovecot TLS working correctly w/ locally generated *RSA* CA cert, domain privkey & self-signed domain cert. to that end, my dovecot.conf includes: ssl_key_file = /var/Security/mail.testdomain.com.privkey.rsa.pem ssl_cert_file = /var/Security/mail.testdomain.com.cert.rsa.pem ssl_ca_file = /var/Security/MyCertificateAuthority.CA.cert.rsa.pem ssl_verify_client_cert = no ssl_cipher_list = ALL:!SSLv2:!aNULL:!NULL:!EXPORT:!DES:!LOW:@STRENGTH however, if I try to setup for DSA use: ssl_key_file = /var/Security/mail.testdomain.com.privkey.dsa.pem ssl_cert_file = /var/Security/mail.testdomain.com.cert.dsa.pem ssl_ca_file = /var/Security/MyCertificateAuthority.CA.cert.dsa.pem ssl_verify_client_cert = no ssl_parameters_file = /var/Security/dsaparam.pem ssl_parameters_regenerate = 0 an attempt @ dovecot launch results in a logged error of: dovecot: Sep 11 11:58:43 Error: imap-login: Can't load private key file /var/Security/mail.testdomain.com.privkey.dsa.pem: error:0607907F:digital envelope routines:EVP_PKEY_get1_RSA:expecting an rsa key wherein it looks like dovecot is _still_ seeking an RSA key. fwiw, % cat /var/Security/mail.testdomain.com.privkey.dsa.pem -----BEGIN DSA PRIVATE KEY----- ... i've searched the dovecot wiki, and although the _only_ reference i find to dsa/diffie is @: http://wiki.dovecot.org/moin.cgi/MainConfig " ... SSL parameter file. Master process generates this file for login processes. It contains Diffie Hellman and RSA parameters. ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat ... " it does seem to imply that DSA certs are, at least, supported. comments? cheers, richard

2 4

Re: [Dovecot] ManageSIEVE services with Dovecot cvs-LDA?
by OpenMacNews 25 Sep '05

25 Sep '05

i can't find a trace of any sieve mgmt services in dovecot as yet, and haven't found anything in this list ... so, if i *am* missing it, if someone would be kind enuf to point me in the right direction, i'd appreciate it! 8-} in the meantime, a little more info for those interested ... the latest spec for sieve management, "A Protocol for Remotely Managing Sieve Scripts", can be found at: <http://www.ietf.org/internet-drafts/draft-martin-managesieve-05.txt> iiuc, one of the authors, Tim Martin / Mirapoint Inc., is the "Tim" of "timsieved" -- Cyrus' ManageSIEVE 'server' bundled with cyrus-imap. i can strip timesieved it out of a successful build of cyrus-imap, but it seems to be dependent on cyrus-sasl ... as such, i'm not sure how to integrate it with dovecot's SASL auth methods. i have a feeling that such fuctionality would have to be re-implemented in dovecot alongside of sieve itself ... and probably should, if it were to be included. the courier-imap mailing lists also have folks searching for an alternative to timsieved ... richard

1 0

[Dovecot] redirect and sieve
by Rudy Gevaert 24 Sep '05

24 Sep '05

Hello, I have set up postfix to use dove-cot lda. This works perfect. Sieve works a bit... I would like to user the redirect feature of sieve. Having followed the wiki I added the following in my .dovecot.sieve : require "redirect"; if header :contains "subject" ["order", "buy"] { redirect "orders(a)company.dom"; } With this setup I get the following error: Sep 22 11:25:38 zalm deliver: sieve parse error for rgevaert: line 1: unsupported feature Remove the require line makes a forward. But this doesn't forward the message I set, but makes a new empty message... : - From Rudy.Gevaert(a)UGent.be Thu Sep 22 14:31:46 2005 - Date: Thu, 22 Sep 2005 14:29:01 +0200 (CEST) - From: Rudy.Gevaert(a)UGent.be (Rudy Gevaert) - To: undisclosed-recipients: ; Is this a bug? Or have i missed something? Thanks in advance, -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Rudy Gevaert e-mail: Rudy.Gevaert(a)UGent.be Directie ICT, Afdeling Infrastructuur Groep Systemen tel: +32 9 264 4734 Universiteit Gent fax: +32 9 264 4994 Krijgslaan 281, gebouw S9, 9000 Gent, Belgie www.UGent.be -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

2 4

[Dovecot] v1.0.alpha2, virtual domain authentication
by Jean-Marc Pigeon 24 Sep '05

24 Sep '05

Bonjour a tous, In Dovecot v1.0.alpha2, authentication according domain seems not working passdb = passwd-file /etc/vmail/test.%d %d is not resolved as "domain.name" I browsed on mailing list post and found the problem already reported... What I can't figure out is the answer about it... > Timo Sirainen tss at iki.fi > Fri Jul 22 15:44:02 EEST 2005 > > Trying this and it doesn't work: > > > > passdb = passwd-file /etc/vmail/test.%d > > > > Apparently it doesn't expand the %d according to the log file. > > This has been asked enough now so I just implemented it in CVS. Could be > still optimized a bit, but I think it's fast enough. Could somebody on the list be kind enough to give me some light about this? (is code to do this already implemented (CVS) but not tested yet????) Thanks for your help. A bientot -- ========================================================================== Jean-Marc Pigeon Internet: Jean-Marc.Pigeon(a)safe.ca SAFE Inc. Phone: (514) 493-4280 Fax: (514) 493-1946 REGULUS, a real time accounting/billing package for ISP REGULUS' Home base <"http://www.regulus.safe.ca"> ==========================================================================

2 4

[Dovecot] Dovecot LDAP authentication not working
by Kondwani Masiye 24 Sep '05

24 Sep '05

Hie all, I am new to both Dovecot and this list. I am trying to set up a Dovecot and Sendmail mail server with OpenLDAP user database for authentication. The sendmail setup is working fine, but authentication for Dovemail is not working. When I try to authenticate using POP3, I get an "authentication failed" error, and the logs show the following: Sep 19 16:53:21 tempo slapd[6316]: conn=74 op=2 SRCH base="dc=domain,dc=net" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=kondie))" Sep 19 16:53:21 tempo slapd[6316]: conn=74 op=2 SRCH attr=uid userPassword Sep 19 16:53:21 tempo slapd[6316]: <= bdb_equality_candidates: (uid) index_param failed (18) Sep 19 16:53:21 tempo slapd[6316]: conn=74 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 19 16:53:21 tempo dovecot: auth(default): ldap(kondie,127.0.0.1): password mismatch Sep 19 16:53:25 tempo dovecot: pop3-login: Aborted login [127.0.0.1] Sep 19 16:53:25 tempo slapd[6313]: conn=72 fd=14 closed I know the password is correct because I am using the same LDAP database from a different server using UW Imap and it works. My dovecot-ldap.conf file below: hosts = localhost dn = cn=dovecot,dc=domain,dc=net ldap_version = 3 base = dc=domain,dc=net deref = never scope = subtree user_attrs = uid,homeDirectory user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid,userPassword pass_filter = (&(objectClass=posixAccount)(uid=%u)) default_pass_scheme = CRYPT And the relevant parts (I think) from dovecot.conf file: I have googled all over and also the archives of this list for the last few months but I have not been able to work out what the problem is. As a matter of fact, I have tried to set it up the way it is described here: http://wiki.dovecot.org/moin.cgi/DovecotOpenLdap - but no luck. Could someone please assist in resolving this problem. Any pointers are welcome. Regards, Kondie Masiye -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.11.1/104 - Release Date: 16/09/2005 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.11.1/104 - Release Date: 16/09/2005

2 1

[Dovecot] Fatal: EOF reading environment from master
by Marcathian Alexander 24 Sep '05

24 Sep '05

I have been running dovecot as an imap server since 22nd July 2005. The server was started from xinetd using /usr/local/libexec/dovecot/imap-auth The sever run successfully until the machine was shut down in a power outage on 12 Aug 2005. Dovecot has failed to start since the reboot. When starting it with the imap-auth it gives the following error: fatal: EOF reading environment from master I have uninstalled dovecot, downloaded, compiled, and installed the stable of 14Aug 2005 and got the same error. I then installed the 0.99.14 version ang got the same error. Can i have assistance in solving and/or diagnosing the problem? -- Marcathian Alexander SDE Assistant Sustainable Development and Environment Section Ministry of Physical Development, Environment & Housing Open Source Software Evaluation Project - WebMail/Groupware/Collaboaration [Open WebMail Project (http://openwebmail.org)

6 7

[Dovecot] LDA with postfix lock problem
by Rudy Gevaert 24 Sep '05

24 Sep '05

Hello, I'm trying to set up dovecot as the delivery agent for postfix. I configured postfix with: mailbox_command = = /usr/local/libexec/dovecot/deliver In the logs I see the following error: Sep 20 17:19:26 zalm deliver: open(/var/mail/.temp.zalm.8045.65c09c28953ea20c) failed: Permission denied Sep 20 17:19:26 zalm deliver: file_lock_dotlock() failed with mbox file /var/mail/rgevaert: Permission denied Sep 20 17:19:26 zalm postfix/local[8044]: 9790BBE4A: to=<rgevaert(a)zalm.ugent.be>, relay=local, delay=0, status=deferred (temporary failure) Info: zalm:~# ls -ld /var/mail drwxrwsr-x 2 root mail 4096 Sep 20 16:56 /var/mail Giving o write access to the folder fixed it, but not in a way it has to be :) I already added mail_extra_groups = mail to dovecot.conf But this doesn't help. What have I missed. Thanks in advance, -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Rudy Gevaert e-mail: Rudy.Gevaert(a)UGent.be Directie ICT, Afdeling Infrastructuur Groep Systemen tel: +32 9 264 4734 Universiteit Gent fax: +32 9 264 4994 Krijgslaan 281, gebouw S9, 9000 Gent, Belgie www.UGent.be -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

2 1

[Dovecot] auth protocol, buffers
by Thomas Hummel 24 Sep '05

24 Sep '05

Hello Timo, I'm curious about 2 points (I'm using alpha2 but these are general questions) : Background : . I connect to dovecot-1.0.alpha2 through thunderbird . I use ldap pass/userdb and PLAIN mech . I've only got one auth block in dovecot.conf (all pass/userdb/mech except ldap/PLAIN are commented) 1) I notice that, for one thunderbird connection trial, imap-login issues 2 AUTH messages. Why ? What info does the "resp=" hold the second time ? It goes like this : Info: Dovecot v1.0.alpha2 starting up Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip=xxx.xxx.xxx.xxx rip=xxx.xxx.xxx.xxx Info: auth(default): client out: CONT 1 Info: auth(default): client in: CONT 1 AGRvdmV0ZXN0AGZvbw== Info: auth(default): ldap(dovetest,xxx.xxx.xxx.xxx): base=ou=personnes, dc=pasteur, dc=fr scope=subtree filter=(&(objectClass=posixAccount)(uid=dovetest)) fields=uid,userPassword Info: auth(default): ldap(dovetest,xxx.xxx.xxx.xxx): userPassword(password)={CRYPT}sa8ufSVwLUHVU uid(user)=dovetest Info: auth(default): client out: FAIL 1 user=dovetest Info: auth(default): client in: AUTH 2 PLAIN service=IMAP lip=xxx.xxx.xxx.xxx rip=xxx.xxx.xxx.xxx resp=AGRvdmV0ZXN0AGZvbw== Info: auth(default): ldap(dovetest,157.99.64.42): base=ou=personnes, dc=pasteur, dc=fr scope=subtree filter=(&(objectClass=posixAccount)(uid=dovetest)) fields=uid,userPassword Info: auth(default): ldap(dovetest,157.99.64.42): userPassword(password)={CRYPT}sa8ufSVwLUHVU uid(user)=dovetest dovecot: Sep 20 17:58:27 Info: auth(default): client out: FAIL 2 user=dovetest 2) Which buffer/string handling function (among those in your lib) should I use to safely allocate a string and/or copy a string into another ? (instead of using str[n|l]cpy for instance) ? Thank you. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] 1.0 alpha3 released
by Timo Sirainen 24 Sep '05

24 Sep '05

I'm a bit too busy nowadays because of school so I haven't had time to look at everyone's bug reports and some other mails. They're still marked as unread in my mailbox, so hopefully I'll get to them soon. And I don't mind you resend them if I don't answer in a few weeks :) Changes: - Fixed maildir syncing errors about wrong UIDs - Maildir was re-read all the time, even if we knew nothing had changed there - SSL/TLS connections used to have extra ~0.2s latencies because kernel was waiting for more data before sending it (at least with Linux). Fixed it by corking/uncorking before/after sending. I don't think the socket latencies are this bad normally though, I should probably look more into it if we're setting some socket flags badly (or does it happen specifically because we were using corking for the socket before SSL and kernel increased the timeouts because it thinks we're going to be using corking?). - Marking index file corrupted caused its recreation to still use old transaction log file, which usually caused the index to get corrupted again - Added --build-options parameter to dovecot binary (by Andrey Panin) - Parse obs-phrase correctly in mail address parser (by Chris Wakelin)

5 6

[Dovecot] dovecot with ssl only works on foreground mode
by blaq b0x 24 Sep '05

24 Sep '05

Hi, I've set up dovecot to use imaps/pops with certificates that I signed with my own CA. When I try to start it using service dovecot start it fails. I've tried disabling imaps in the config file and it starts fine so it seems it's the certificate part of the config. If,however, I start it with '/usr/sbin/dovecot -F' or even '/usr/sbin/dovecot' it starts! I've looked over the dovecot startup script but, can't seem to see anything that would hinder startup. I didn't have this problem with self-signed certs??? Can anyone shed some light on this? Thanks, __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1