- dovecot - dovecot.org

Re: [Dovecot] dovecot/Active Directory/KRB client (OT)
by Lisandro Grullon 29 Aug '05

29 Aug '05

Interesting, Thanks for sharing the info. ----------------------------------------------------------------------------------------------------------------------- Lisandro Grullon New York City College of Technology Division of Continuing Education Director of Network Operations Lisandro Office: 1718-552-1178 Lisandro E-mail: lgrullon(a)citytech.cuny.edu "Unix is user-friendly. It's just very selective about who its friends are." >>> "Jeff A. Earickson" <jaearick(a)colby.edu> 08/29/05 9:59 AM >>> Gang, For those who asked about making a Solaris system a Kerberos client to Active Directory, the magic document to have is: http://www.connectathon.org/seam1.0/files/c0101.htm See the section "How to Configure a SEAM Client Using a Windows 2000 KDC". SEAM was Sun's Kerberos client stuff in Solaris 8; it is just there as part of Solaris 9 and 10. These instructions apply if one is using Solaris 9, 10, or a Windows 2003 KDC. The instructions probably give insight for other UNIX versions. The hard part is configuring the pam.conf file, and there are significant differences between Solaris 9 and 10. For dovecot, I use the "other" service, in Solaris 9 pam.conf looks like: other auth sufficient /usr/lib/security/pam_unix.so.1 debug other auth sufficient /usr/lib/security/pam_krb5.so.1 try_first_pass debug other account optional /usr/lib/security/pam_unix.so.1 other account optional /usr/lib/security/pam_krb5.so.1 debug other session required /usr/lib/security/pam_unix.so.1 other session optional /usr/lib/security/pam_krb5.so.1 debug other password required /usr/lib/security/pam_unix.so.1 For Solaris 10, it looks like: other auth requisite pam_authtok_get.so.1 debug other auth required pam_dhkeys.so.1 debug other auth required pam_unix_cred.so.1 debug other auth sufficient pam_krb5.so.1 debug other auth required pam_unix_auth.so.1 debug other account requisite pam_roles.so.1 debug other account required pam_unix_account.so.1 debug other account required pam_krb5.so.1 debug other session required pam_unix_session.so.1 debug other password required pam_dhkeys.so.1 other password requisite pam_authtok_get.so.1 other password requisite pam_authtok_check.so.1 other password sufficient pam_krb5.so.1 other password required pam_authtok_store.so.1 I hope this helps. Jeff Earickson Colby College

1 0

[Dovecot] dovecot/Active Directory/KRB client (OT)
by Jeff A. Earickson 29 Aug '05

29 Aug '05

Gang, For those who asked about making a Solaris system a Kerberos client to Active Directory, the magic document to have is: http://www.connectathon.org/seam1.0/files/c0101.htm See the section "How to Configure a SEAM Client Using a Windows 2000 KDC". SEAM was Sun's Kerberos client stuff in Solaris 8; it is just there as part of Solaris 9 and 10. These instructions apply if one is using Solaris 9, 10, or a Windows 2003 KDC. The instructions probably give insight for other UNIX versions. The hard part is configuring the pam.conf file, and there are significant differences between Solaris 9 and 10. For dovecot, I use the "other" service, in Solaris 9 pam.conf looks like: other auth sufficient /usr/lib/security/pam_unix.so.1 debug other auth sufficient /usr/lib/security/pam_krb5.so.1 try_first_pass debug other account optional /usr/lib/security/pam_unix.so.1 other account optional /usr/lib/security/pam_krb5.so.1 debug other session required /usr/lib/security/pam_unix.so.1 other session optional /usr/lib/security/pam_krb5.so.1 debug other password required /usr/lib/security/pam_unix.so.1 For Solaris 10, it looks like: other auth requisite pam_authtok_get.so.1 debug other auth required pam_dhkeys.so.1 debug other auth required pam_unix_cred.so.1 debug other auth sufficient pam_krb5.so.1 debug other auth required pam_unix_auth.so.1 debug other account requisite pam_roles.so.1 debug other account required pam_unix_account.so.1 debug other account required pam_krb5.so.1 debug other session required pam_unix_session.so.1 debug other password required pam_dhkeys.so.1 other password requisite pam_authtok_get.so.1 other password requisite pam_authtok_check.so.1 other password sufficient pam_krb5.so.1 other password required pam_authtok_store.so.1 I hope this helps. Jeff Earickson Colby College

1 0

[Dovecot] MySQL user cant log in
by Marvin Stark 29 Aug '05

29 Aug '05

Hi, I configured dovecot IMAP for MySQL authentification. --- start dovecot.conf --- auth_userdb = mysql /etc/dovecot/dovecot-mysql.conf auth_passdb = mysql /etc/dovecot/dovecot-mysql.conf --- end dovecot.conf --- --- start dovecot-mysql.conf --- db_host = localhost db_port = 3306 db_unix_socket = /var/run/mysqld/mysqld.sock db = users db_user = users db_passwd = xxx db_client_flags = 0 password_query = SELECT password FROM users WHERE userid = '%n' AND active = 'Y' user_query = SELECT home, uid, gid FROM users WHERE userid = '%u' --- end dovecot-mysql.conf -- /var/log/mail.log looks fine: --- start mail.log --- Aug 29 14:40:43 vs6020 dovecot: Dovecot starting up Aug 29 14:40:44 vs6020 dovecot-auth: MySQL: connected to localhost --- end mail.log --- But if i try to log in authentification failed. I added the user test to the database and set the user test in my mail client(evolution) I dont know what it could be.. because connecting to mysql worked fine... best regards, Marvin Stark

1 0

[Dovecot] Running pop3 on more than one port
by Andrew Gargan 29 Aug '05

29 Aug '05

Hi All This is possibly a silly question but after reading some of the docs and hunting a bit I could not find an answer. I need to run my pop3 service on both the standard 110 port and another (not really sure which yet) port. My ISP is doing shaping on port 110 destined traffic causing a nightmare with some of my machines pulling only some of their mail then crashing (and no its not anything else it is the ISP). How do I get pop3 of dovecot to bind to two ports? Regards Andrew Gargan Developer Interface Media (PTY) Ltd. Tel: 011 507 3003

3 2

[Dovecot] mail directory error solved!
by Micah Stevens 29 Aug '05

29 Aug '05

Hi, I figured out my issue, in my database query for the mail dir, I was grabbing the home column instead of the mail column. Once I changed the name of the column returned it started working. Currently my queries are like such: password_query = SELECT `passwd` FROM users WHERE userid = '%u' and user_query = SELECT concat('/usr/local/virtual/',maildir, '.INBOX') as mail, 101 as uid, 103 as gid FROM users WHERE userid = '%u' My question now is currently I'm saving mail like this: mailroot/domain/user/.INBOX I assume I should be able to save it as: mailroot/domain/user/ the .INBOX is superfluous, is that correct, or will imap want to make directories at the same level at inbox? Thanks, -Micah

1 0

[Dovecot] Increase logging?
by Micah Stevens 29 Aug '05

29 Aug '05

Is there a way to increase the log level of the dovecot logs? I'm having a real hard time getting an worthwhile information out of the logs. It would be nice if it would display more of the actions it's taking. Thanks, -Micah

1 0

[Dovecot] Success: MySQL Works on 0.99 But Not 1.0alpha
by Tim Schaefer 29 Aug '05

29 Aug '05

Great news! yay! I downshifted to dovecot 0.99-14 and pop server is working! Finally a pop-server and postfix and all! And no Courier! or Qmail! Whatever changed in the 1.0 release regarding MySQL is broken, and is working in the .99-14 release. I can finally use my mail server! :-) I'll keep an eye out for the 1.x stable release, hopefully it will have MySQL support working. Maybe by then I'll be brave enough to get IMAP working and maybe even ( gulp ) LDAP. Good Luck to all of you! Timo go go go ! Tim

3 5

[Dovecot] Authenticate user thru PAM
by Adrian Mak 28 Aug '05

28 Aug '05

my mailsystem is using postfix and virtual mailbox which stored in mysql db. SMTP AUTH is using PAM, pam-mysql to authenticate against a mysql db. I installed dovecot 0.99-14. In the dovecot example config file it mentioned that auth_passdb can check against thru PAM but auth_userdb didn't Does it mean that auth_userdb should use other means e.g. /etc/passwd, shadow, vpopmail, etc and in my case it is mysql. Right ?

2 1

[Dovecot] Master Password
by Marc Perkel 28 Aug '05

28 Aug '05

I want to set up a Master Password that will authenticate to any account. How would I do that? (Don't need to hear about why I shouldn't so don't waste my time replying with a security lecture)

3 2

[Dovecot] mbox of list archives?
by Ted Kaczmarek 28 Aug '05

28 Aug '05

Is their an mbox kicking around somewhere of all the list archives? Ted

3 2