- dovecot - dovecot.org

[Dovecot] PLAIN-MD5 passwords?
by Peter Clark 03 Jan '05

03 Jan '05

After I found out that {CRYPT} doesn't support passwords longer than 8 characters, I decided to switch over to MD5 for user passwords in my LDAP database. However, while I have no problem with Postfix + SASL, Dovecot fails to authenticate. Relevant bits from /etc/dovecot-ldap.conf: user_attrs = mailAddress,,,,, # The search string is identical to what's found in /etc/saslauthd.conf: user_filter = (&(|(uid=%u)(mailAddress=%u))(status=active)) pass_attrs = mailAddress,userPassword pass_filter = (&(|(uid=%u)(mailAddress=%u))(status=active)) default_pass_scheme = PLAIN-MD5 When I try to connect using either KMail or SquirrelMail (which worked just fine before I switched schemes), the following error appears in /var/log/syslog: ldap(user(a)mydomain.tld): password mismatch But when I try 'testsaslauthd -u user(a)mydomain.tld -p longpassword' it authenticates just fine. I have the line 'password-hash {MD5}' in /etc/ldap/slapd.conf, and I used 'slappasswd -h {MD5}' to create the MD5 versions of the passwords. Dovecot is v. 0.99.11. If I can't figure out how to get it to work with MD5, I guess I'll have to go back to CRYPT, but it would be nice to have longer passwords... :Peter

5 5

[Dovecot] Wanted: gnutls11 support
by Jaldhar H. Vyas 03 Jan '05

03 Jan '05

I talked to Timo about this before and even provided the beginnings of a patch but don't have enough time to really do a proper job. Anyway, dovecot doesn't work with recent versions of the GNU TLS library. As a result, I compile the Debian package with OpenSSL. However some of the other libraries used, such as OpenLDAP are linked against GNU TLS so Dovecot is linked against both. And it is suspected this is leading to bugs. So could some kind soul provide Timo with a patch he can include in 0.99.13? -- Jaldhar H. Vyas <jaldhar(a)debian.org> La Salle Debain - http://www.braincells.com/debian/

1 0

Re: [Dovecot] Maildir owner importance
by Roi Efrati 02 Jan '05

02 Jan '05

That last line actually made it possible for me to be able to log into the server :) I am still getting errors from PAM but it starting to look good. Is there a good HowTo on setting Dovecot to comunicate directly to MySql without using PAM in the middle ? Also, Since Postfix is still not working on my server, I can't actually recive Emails. Is there somewere an example of the files that need to be in the maildir that I can put them in there and test that the email client get's the mail out ? On Wed, 29 Dec 2004 18:36:34 +0200, Timo Sirainen <tss(a)iki.fi> wrote: > > If you have passwords in Mysql, you probably don't want to use > passwd-file as your auth_userdb. Rather just use: > > auth_userdb = static uid=100 gid=101 home=/var/local/virtualdir/%d/%u >

4 7

[Dovecot] SASL AUTH
by Tom Allison 02 Jan '05

02 Jan '05

I'm reading through the dovecot wiki pages for virtual hosting with postgresql/postfix/dovecot/debian and it looks pretty nice but I think I'm going to skip the SASL authentication since I'm in a trusted network. I think all I need to do is skip section 5 entirely and bypass all the sasl references in the postfix section. Technically, I don't think any of the SASL has much to do with the dovecot configuration.

2 1

[Dovecot] random pool depletion
by Johannes Berg 31 Dec '04

31 Dec '04

I'm facing a problem with dovecot 1.0 test-59; ever since I installed it and use it my random pool is always depleted whenever someone opens an imap connection. This wouldn't be too bad if the machine was used interactively, but since it is not and other services read directly from /dev/random those are sometimes blocked due to dovecot depleting the pool by reading /dev/urandom. Thus my question: is it really necessary to use random numbers from /dev/urandom for temporary filenames? And even if, couldn't it use less? It apparently uses 8 bytes every time. johannes

2 3

[Dovecot] delivery agent in 1.0?
by "Branko F. Gračnar" 31 Dec '04

31 Dec '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi :) Is there any plan to include delivery agent in 1.x? I would be very happy, if there would be lmtp delivery agent included with dovecot 1.x... This would make creating large mailsystem cluster creation very simple + indexes would be always up2date. Brane -----BEGIN PGP SIGNATURE----- iD8DBQFBytD9N7LHXgqRB4IRAi67AKCn/A1t3tCsMX0nhL8l4sgzTfDhlACgj1j5 NdgMzA3v0dLx6Bnui62rLRc= =4UGm -----END PGP SIGNATURE-----

9 18

[Dovecot] Authentication difficulties
by Timo Sirainen 30 Dec '04

30 Dec '04

There are constantly pretty basic questions in this list (and in my inbox) about how to get user authentication work correctly. This means that the documentation how it all works is either bad, or people don't find it easily. Any ideas how to improve it? I did this now: - Documentation link in dovecot.org now points directly to Wiki, so people don't go read the outdated documents - Upcoming 1.0-tests and 0.99.13 will contain doc/USE-WIKI-INSTEAD file pointing to Wiki: http://dovecot.org/list/dovecot-cvs/2004-December/003928.html - Updated comments in dovecot-example.conf: http://dovecot.org/list/dovecot-cvs/2004-December/003924.html - Added pointers to Wiki in dovecot-example.conf: http://dovecot.org/list/dovecot-cvs/2004-December/003927.html How good are the Wiki documents about user authentication in general? The content should probably be split somehow to "getting started" vs. "everything there is to know about it" and "system users" vs. "virtual users". I'm not really sure how to best do that though. I think the Wiki in general could be better organized. Wish I knew how.

3 2

[Dovecot] Maildir owner importance
by Roi Efrati 29 Dec '04

29 Dec '04

I have set up a directory (/var/local/virtualdir/) as the maildir with a special user/group (virtualmail) and in it I create directories for each domain (example1.tld, example2.tld etc) and sub dir's for each mailbox). Only at the moment, apart from the first one, they are all created as with user root as the owner. How important is to have all the directory tree owned by the same user group (virtualmail:virtualmail) ?

4 11

[Dovecot] bug in 99.13-rc2 in ldap md5 patch
by Farkas Levente 29 Dec '04

29 Dec '04

hi, it takes me another hour do debug it again, although i already report it for both joshua and timo. the original patch for openldap's md5 crypt has a small bug. in passdb-ldap.c the schema is already PLAIN-MD5 since that was set in the other part of the original patch in password-scheme.c. do anybody use dovecot with ldap and md5 password? i don't think so:-( this patch would be useful to apply before the final 0.99.13. anyway in the current 1.0 series the PLAIN-MD5 and LDAP-MD5 schema are different. at least plain_md5_verify and plain_md5_generate differ from ldap_md5_verify and ldap_md5_generate. why? -- Levente "Si vis pacem para bellum!" --- dovecot-0.99.13/src/auth/passdb-ldap.c.lfarkas 2004-12-22 17:06:25.000000000 +0100 +++ dovecot-0.99.13/src/auth/passdb-ldap.c 2004-12-22 17:06:56.000000000 +0100 @@ -109,12 +109,11 @@ } /* Special case for OpenLDAP's MD5 type */ - if (strcasecmp(scheme, "MD5") == 0) { + if (strcasecmp(scheme, "PLAIN-MD5") == 0) { buf = buffer_create_static(data_stack_pool, 16); if (base64_decode(password, strlen(password), NULL, buf) == 1 && buffer_get_used_size(buf) == 16) { password = binary_to_hex(buffer_get_data(buf, NULL), 16); - scheme = "PLAIN-MD5"; } }

2 4

[Dovecot] 0.99.13-rc3
by Timo Sirainen 29 Dec '04

29 Dec '04

http://dovecot.org/rc/ One more. Added LDAP-MD5 password scheme and changed non-$1$-MD5 passwords to use it. This is how it's done in 1.0-tests.

1 0