- dovecot - dovecot.org

Re: [Dovecot] Concerned about Dovecot's new NTLM code
by Andrey Panin 30 Sep '04

30 Sep '04

> I'm pleased to see another project increasing compatibility with windows > clients, by the addition of NTLM login support, but I'm a bit worried > about a few implementation details, and hope to offer an alternate > approach. > > I mean no disrespect to those who have implemented to the code so far, > but I feel that the idea of 'everybody re-implement NTLM' is prone to > failure. > > Firstly, to bugs I've noticed by casual inspection of your > implementation: > > - Unicode support is by 'null padding' - there is no real support for > non-ascii characters. Does it really matter ? Do you know many people who use non-ascii characters in their email addresses and passwords ? :) > - NTLM2 (a negotiated scheme to avoid sending the LM response) is > unsupported Did you RTFS ? Or may be I missed something ? > - NTLMSSP is NDR, not 'C struct pushed to the wire', it needs to be > correctly marshaled and unmarshaled. Yes, it's not a C struct, so what ? Where is the actual bug ? > There are other missing features, some of which are rumoured to become > mandatory flags in future, but more importantly, because the > implementation is standalone, it has no ability to integrate into an > NT/Win2k/Samba domain. It can be directly integrated with password backends using NTLM password scheme. > As part of the Samba team, I have worked with other projects - Squid in > particular, to deliver server-side (and client-side) NTLMSSP > authentication, without the need to re-implement the NTLMSSP protocol. > > This is done by a callout to 'ntlm_auth', a Samba 3.0 utility designed > for this purpose, which in turn can contact domain controllers, allowing > for seamless single sign on. > > http://samba.org/samba/docs/man/ntlm_auth.1.html So you'll need Samba to run POP3/IMAP server. Doesn't look convinent to me. Many people have no windows domain infrastructure, but want to provide secure authentication for poor MS Outlook users. > I have recently completed reworking mod_ntlm_winbind for a similar > purpose, and have patches for cyrus-sasl in my 'lorikeet' subversion > repository. These should serve as good examples for the simple > fork()/exec() modal that is used, and also show the support for > GSS-SPNEGO (aka HTTP Negotiate) that ntlm_auth also provides. > > http://download.samba.org/ftp/unpacked/lorikeet/trunk/ > > My hope is that I can tempt a Dovecot developer to take on the challenge > of modifying the dovecot to use ntlm_auth, and am most willing to answer > any questions (here, by private mail or on the samba-technical list) > that you may have on the issue.

7 16

Re: [Dovecot] Concerned about Dovecot's new NTLM code (Modified by Timo Sirainen)
by Timo Sirainen 29 Sep '04

29 Sep '04

(resend) On 29.9.2004, at 20:37, Jonas Smedegaard wrote: > Have you considered also separating the Mailbox access routines? They are more or less separated already, but I don't know how useful it would be to create a separate library distribution from them. That is what takes most of the space in Dovecot distribution anyway.. Oh, and after v1.0 I'll probably start fixing the mailbox APIs too. lib-index and lib-storage needs to have different kind of relationship. > It would be marvelous if at some point being able to replace c-client > library to your optimized one for PHP, mailsync, postman, aolserver and > others - even if it means loosing support for odd mailbox formats. I'm not sure what kind of API PHP provides for c-client. I know it's commonly used for building IMAP webmails, but Dovecot doesn't have any IMAP client code and maybe never will.

1 0

[Dovecot] pgsql and default_pass_scheme
by eL gino 29 Sep '04

29 Sep '04

Hello list, I am running Dovecot 1.0-test46 on FreeBSD with PostgreSQL as backend, runs _very_ nice, but i can not set "default_pass_scheme = CRYPT" (only PLAIN) for PostgreSQL Auth in dovecot-pgsql.conf. I have a valid entry in pg_hba.conf (and reloaded/restarted): "local mail mail crypt" If i replace crypt in pg_hba.conf with md5 it works also with plain in dovecot-pgsql.conf? -- Christian. PS: sorry for my poore english.

2 2

Re: [Dovecot] Any way to disable imap on all but localhost ?
by Kim Culhan 29 Sep '04

29 Sep '04

--- michael(a)crosscode.org wrote: > It's still there, just chagned (and probably for the better - > less > confusing and I'd venture less code) in 1.0. > > I had: > > protocols = imap imaps > imap_listen = 127.0.0.1 > imaps_listen = * > > Now I have: > > protocols = imap imaps > protocol imap { > listen = 127.0.0.1 > ssl_listen = * > } > > However, after encountering the same problem you did I moved my > 0.99 > configuration file out of place and put the 1.0 > dovecot-example.conf file > into place and modified it, since that seemed like the easier thing > to do > (not that the imap section already exists in the new example > config., > it's just empty). Ok, just did the same, running dovecot-1.0-test46 dovecot is still listening on port 143 It appears dovecot imap listens on all the interfaces regardless This is running on FreeBSD 5.3-BETA4 -kim __________________________________ Do you Yahoo!? Yahoo! Mail is new and improved - Check it out! http://promotions.yahoo.com/new_mail

1 0

Re: [Dovecot] Any way to disable imap on all but localhost ?
by michael＠crosscode.org 29 Sep '04

29 Sep '04

It's still there, just chagned (and probably for the better - less confusing and I'd venture less code) in 1.0. I had: protocols = imap imaps imap_listen = 127.0.0.1 imaps_listen = * Now I have: protocols = imap imaps protocol imap { listen = 127.0.0.1 ssl_listen = * } However, after encountering the same problem you did I moved my 0.99 configuration file out of place and put the 1.0 dovecot-example.conf file into place and modified it, since that seemed like the easier thing to do (not that the imap section already exists in the new example config., it's just empty). - Michael On Tue, 28 Sep 2004, Kim Culhan wrote: > > Noticed that some configuration settings like > imap_listen appear to have been removed. > > Any way to accomplish this ? > > -kim > > > > > __________________________________ > Do you Yahoo!? > New and Improved Yahoo! Mail - Send 10MB messages! > http://promotions.yahoo.com/new_mail >

1 0

[Dovecot] Any way to disable imap on all but localhost ?
by Kim Culhan 29 Sep '04

29 Sep '04

Noticed that some configuration settings like imap_listen appear to have been removed. Any way to accomplish this ? -kim __________________________________ Do you Yahoo!? New and Improved Yahoo! Mail - Send 10MB messages! http://promotions.yahoo.com/new_mail

1 0

[Dovecot] Dovecot 1.0-test45 indexing issues
by dovecot＠spam.turbolink.net 28 Sep '04

28 Sep '04

We're currently on dovecot 0.99.10 with a few modifications (including one very nasty hack for the blank line at the beginning of the mailbox bug). We're using mbox all around. Everything works smoothly but we still ocasionally get corrupt mailboxes and indexes that need to be wiped out. I setup 1.0-test45 on one of our mailservers to start testing it and ran into a few issues. The first one is if I try to use mail_read_mmaped=yes I get this error: Error: POP3(sobo1): file istream-raw-mbox.c: line 410 (istream_raw_mbox_get_body_size): assertion failed: (rstream->mail_size != (uoff_t)-1) for every mailbox. If I switch to mail_read_mmaped=no everything works, but performance is extremely bad. I have a few test mailboxes with about 20k messages and if I toggle a message flag from unread to read, dovecot seems to re-read the entire mailbox up to that message (I saw this with strace). Is this how supposed to work?? I don't see behavior like this on 0.99.10, and on a mailbox with any substantial number of messages it really slows things down. Thanks for any input. - Mike

2 13

[Dovecot] Dovecot on Cygwin
by Andy Teijelo Pérez 28 Sep '04

28 Sep '04

Has anyone been able to run and use dovecot on Cygwin? Just to start asking, don't be affraid. Thanks in advance. Andy

1 0

RE: [Dovecot] Moving mail dirs
by Mark Lidstone 28 Sep '04

28 Sep '04

Ah! My ignorance is outshone only by your helpfulness. :) Many thanks, Mark Lidstone IT and Network Support Administrator BMT SeaTech Ltd Grove House, Meridians Cross, 7 Ocean Way Ocean Village, Southampton. SO14 3TJ. UK Tel: +44 (0)23 8063 5122 Fax: +44 (0)23 8063 5144 E-Mail: mailto:mark.lidstone@bmtseatech.co.uk Website: www.bmtseatech.co.uk ======================================================================== == Confidentiality Notice and Disclaimer: The contents of this e-mail and any attachments are intended only for the use of the e-mail addressee(s) shown. If you are not that person, or one of those persons, you are not allowed to take any action based upon it or to copy it, forward, distribute or disclose the contents of it and you should please delete it from your system. BMT SeaTech Limited does not accept liability for any errors or omissions in the context of this e-mail or its attachments which arise as a result of Internet transmission, nor accept liability for statements which are those of the author and not clearly made on behalf of BMT SeaTech Limited. ======================================================================== == -----Original Message----- From: Timo Sirainen [mailto:tss@iki.fi] Sent: 28 September 2004 16:14 To: Mark Lidstone Cc: dovecot(a)dovecot.org Subject: Re: [Dovecot] Moving mail dirs On 28.9.2004, at 16:08, Mark Lidstone wrote: > Sep 28 14:03:36 <hostname> imap(<user1>): stat() failed with file > /home/<user1>/.Maildir/new: No such file or directory > Sep 28 14:03:36 <hostname> imap(<user2>): utime() failed with index > file > /home/<user2>/.Maildir/.INBOX/.imap.index: No such file or directory > > What have I missed? Or am I not supposed to move maildirs once > they're in use? Restarting Dovecot doesn't kill the existing processes which are still using the old directories and since they're gone they begin complaining. Correct way to do moving would be: kill dovecot killall imap move directories start dovecot

1 0

[Dovecot] Moving mail dirs
by Mark Lidstone 28 Sep '04

28 Sep '04

Hi all, This is probably a silly question, but I have a problem. I've had to move my users maildirs from: maildir:/home/%u/.Maildir To maildir:/data/mail/%u I've updated the MTA to put mail to the correct place and it's working fine. I've also changed the dovecot.conf file and restarted dovecot and I thought that would be all I needed to do. However, the users are getting lots of error messages, and looking in the relevant logs shows lots of entries like: Sep 28 14:03:36 <hostname> imap(<user1>): stat() failed with file /home/<user1>/.Maildir/new: No such file or directory Sep 28 14:03:36 <hostname> imap(<user2>): utime() failed with index file /home/<user2>/.Maildir/.INBOX/.imap.index: No such file or directory (Sorry for changing usernames and hostname, but I'm neurotic about that kind of thing) What have I missed? Or am I not supposed to move maildirs once they're in use? Any help greatly appreciated, Mark Lidstone IT and Network Support Administrator BMT SeaTech Ltd Grove House, Meridians Cross, 7 Ocean Way Ocean Village, Southampton. SO14 3TJ. UK Tel: +44 (0)23 8063 5122 Fax: +44 (0)23 8063 5144 E-Mail: mailto:mark.lidstone@bmtseatech.co.uk Website: www.bmtseatech.co.uk ======================================================================== == Confidentiality Notice and Disclaimer: The contents of this e-mail and any attachments are intended only for the use of the e-mail addressee(s) shown. If you are not that person, or one of those persons, you are not allowed to take any action based upon it or to copy it, forward, distribute or disclose the contents of it and you should please delete it from your system. BMT SeaTech Limited does not accept liability for any errors or omissions in the context of this e-mail or its attachments which arise as a result of Internet transmission, nor accept liability for statements which are those of the author and not clearly made on behalf of BMT SeaTech Limited. ======================================================================== == -----Original Message----- From: Timo Sirainen [mailto:tss@iki.fi] Sent: 28 September 2004 00:09 To: dovecot(a)spam.turbolink.net Cc: dovecot(a)procontrol.fi Subject: [Dovecot] Re: More test46 feedback On 28.9.2004, at 00:29, dovecot(a)spam.turbolink.net wrote: > Here's another error message I just started getting with test46: > > Error: POP3(test2): file mbox-lock.c: line 493 (mbox_lock): assertion > failed: (lock_type == F_RDLCK ||ibox->mbox_lock_type != F_RDLCK) Could you get gdb backtrace from this? I know this happens when you try to copy a message into the same mbox, but why would anyone do that? > I haven't seen the combined X-Status/X-UID nor the other log > corruption "Append with UID xxx, but next_uid = xxx" that I saw > earlier. That's good.

2 1