- dovecot - dovecot.org

dovecot imap auth method issue
by nobody73 10 Sep '14

10 Sep '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi List , I run Debian GNU/Linux 7 and i have followed the guide on workaround dot org and at the end of it i have authentications issues with thunderbird .On workaround there is a local test for authentication and it was successfull .Thunderbird says: "the IMAP server doesn't support the selected authentication method ,please change the authetntication method .... " I have tried all of clear, starttls and ssl/tls . dovecot 10-auth.conf is set: > disable_plaintext_auth = yes auth_mechanisms = plain login !include > auth-sql.conf.ext auth-sql.conf.ex has: > passdb { driver = sql > > # Path for SQL configuration file, see > example-config/dovecot-sql.conf.ext args = > /etc/dovecot/dovecot-sql.conf.ext } > userdb { driver = static args = uid=vmail gid=vmail > home=/var/vmail/%d/%n } My dovecot-sql.conf.ext content is: > driver = mysql connect = host=127.0.0.1 dbname=maildb user=userdb > password=123456789 default_pass_scheme = PLAIN-MD5 password_query > = SELECT email as user, password FROM virtual_users WHERE > email='%u'; and dovecot -n says: > # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 > Debian 7.6 ext3 auth_mechanisms = plain login mail_location = > maildir:/var/vmail/%d/%n/Maildir managesieve_notify_capability = > mailto managesieve_sieve_capability = fileinto reject envelope > encoded-character vacation subaddress comparator-i;ascii-numeric > relational regex imap4flags copy include variables body enotify > environment mailbox date ihave namespace inbox { inbox = yes > location = mailbox Drafts { special_use = \Drafts } mailbox Junk { > special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox > "Sent Messages" { special_use = \Sent } mailbox Trash { special_use > = \Trash } prefix = separator = } passdb { args = > /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = > ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap sieve > pop3" service auth { unix_listener /var/spool/postfix/private/auth > { group = postfix mode = 0660 user = postfix } } service imap-login > { inet_listener imap { port = 143 } inet_listener imaps { port = > 993 ssl = yes } } service pop3-login { inet_listener pop3 { port = > 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = > </etc/dovecot/ssl/cert.pem ssl_key = </etc/dovecot/ssl/key.pem > userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n driver = > static } protocol lda { mail_plugins = " sieve" } All help will be appreciated Regards Gab - -- Key fingerprint = D8E8 7374 49EA 8017 EC52 AD73 0294 F341 FF66 9495 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iF4EAREKAAYFAlQQ0xgACgkQApTzQf9mlJV/9AD9GI4J7CJ3bBgpDutdK9Zert/z 9PsbpN/BJQ0fB8APuBIA/RFD5s5D5aCR4QUnXLzG/e25Jb/4HwxJ+X4QZdm5Yr/Y =NPMR -----END PGP SIGNATURE-----

1 0

outlook 2013
by Bob Miller 10 Sep '14

10 Sep '14

I am trying really hard to wrap my head around why people insist on using this program... Where I have outlook 2013 users, I have had nothing but problems getting their mail to work with imap. my solution has been to set them up with pop, which works just like it always has. Or move them to a different program. recently, I have a customer who requires multiple machines, all using outlook 2013, to access the same email address, so pretty much have to use imap. if I set up just one of the machines with imap, it works more less as expected, with hiccups such as mail taking an hour or two or more to show up. But shortly after I connect a 2nd machine to the same account, one or both machines start to go wonky. Symptoms include deleted items returning, read messages becoming unread again, and duplicates being constantly created and deleted. The last I can confirm by watching in webmail and refreshing the inbox every few seconds; as mail shows up and deletes in outlook, so it does in webmail too. On my test machine connected to the same server, I have evolution, outlook and thunderbird all connecting to one account with no problems. Well, outlook hiccups, but it's not unusable. And I have other users on the system that share email accounts across a variety of other clients and platforms, including older versions of outlook. I have tried checking message rules, there are none; removing all folder subscriptions; running scanpst, which finds errors even before the account finishes syncing and ever time I run it after that; I have looked for viruses/malware; I have confirmed there is no forwarding or some trickery happening on the server; chkdsk and similar hardware checks all come up clean, the computers are only a couple of months old; I have got certs set up with SANs and the CA installed such that outlook does not error on the certificate; and I have tried just about every combination of settings that seem relevant. The one thing that does seem to work, at least for a few minutes or an hour or two, is deleting and recreating the accounts on one of the computers. But the problem inevitably returns in short order. Surely people have outlook 2013 connecting via imap to dovecot without problems; is there some special trick that google is hiding from me? -- Computerisms Bob Miller 867-334-7117 / 867-633-3760 http://computerisms.ca

6 9

Dovecot replication
by Hoggins! 10 Sep '14

10 Sep '14

Hello list, I'm trying to achieve very simple replication, but I'm not sure if I'm starting the good way. I have two Dovecot servers that use the same GlusterFS storage. Of course, the indexes get corrupted eventually, even if I apply an "NFS-like" configuration. So I'd like to synchronize my two servers with each other. I'm trying to follow this page : http://wiki2.dovecot.org/Replication, but I have to admit that it's not really self-explanatory. I got several errors, so I decided to start fresh, and that is why I'm not giving you any configuration, but I prefer asking if I have the prerequisites. The page states that my userdb should have "user listing", and that you can check it by issuing `doveadm user '*'`. But I don't know what it's supposed to produce, apart from my userlist (my userdb is the system passwd file). As my servers are located on the same private LAN, I decided I would not go with the SSH replication solution, but with the simple mutual TCP connection... Maybe this is a wrong start. Any help will be appreciated. Thanks in advance !

1 0

LDAP authentication
by John Oliver 10 Sep '14

10 Sep '14

CentOS 6.5, dovecot 2.0.9-7 I was using http://www.linuxmail.info/postfix-dovecot-ldap-centos-5/ to get LDAP auth working. And what's really annoying is, it worked... until I screwed something up and had to pull my work back from a backup. Now it doesn't work :-( [joliver@localhost ~]$ telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready. a1 LOGIN testuser1 password a1 NO [AUTHENTICATIONFAILED] Authentication failed. Turn on debugging and see: Sep 10 11:26:58 localhost dovecot: auth: Debug: pam(testuser1,127.0.0.1): lookup service=dovecot Sep 10 11:26:58 localhost dovecot: auth: Debug: pam(testuser1,127.0.0.1): #1/1 style=1 msg=Password: Sep 10 11:27:00 localhost dovecot: auth: pam(testuser1,127.0.0.1): pam_authenticate() failed: Permission denied Sep 10 11:27:00 localhost dovecot: auth: ldap(testuser1,127.0.0.1): invalid credentials Sep 10 11:27:02 localhost dovecot: auth: Debug: client out: FAIL#0111#011user=testuser1 So, I don't know what permission is being denied by PAM, or if that was there or not when this did work. I can access my LDAP server just fine. What else can I check? -- *********************************************************************** * John Oliver http://www.john-oliver.net/ * * * ***********************************************************************

2 4

dovecot 2.2.13: LMTP delivery with multiple recipients incorrectly mixes users
by Arkadiusz Miśkiewicz 10 Sep '14

10 Sep '14

Hi. I'm using exim that delivers email over LMTP to dovecot 2.2.13. I noticed that dovecot LMTP service is sometimes (reare but repeats) mixing users. Example below. There is one mail (msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>) that is going to be delivered to multiple local recipients. Some recipients are delivered properly: Sep 1 05:40:33 host dovecot: lmtp(3176): Connect from local Sep 1 05:40:34 host dovecot: lmtp(3176, gbuser1): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:40:34 host dovecot: lmtp(3176, jpuser2): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:40:34 host dovecot: lmtp(3176, rkuser3): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:40:34 host dovecot: lmtp(3176, gbruser4): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:40:34 host dovecot: lmtp(3176, pbauser5): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:40:34 host dovecot: lmtp(3176, mwauser6): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:40:34 host dovecot: lmtp(3176, mdyuser7): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX but some are not: Sep 1 05:40:34 host dovecot: lmtp(3176, lkrzyuser8): Error: lstat(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist.lock) failed: Permission denied Sep 1 05:40:34 host dovecot: lmtp(3176, lkrzyuser8): Error: file_dotlock_create(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist) failed: Permission denied (euid=28371(<unknown>) egid=17373(<unknown>) missing +x perm: /var/lib/dovecot/control/gbuser1, dir owned by 67593:17373 mode=0700) Notice it was trying to deliver to user "lkrzyuser8" but it tries to access some other user files (dovecot-uidlist). euid=28371 is indeed "lkrzyuser8" but why it tries to access "gbuser1" files? Sep 1 05:40:34 host dovecot: lmtp(3176, lkrzyuser8): Error: lstat(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist.lock) failed: Permission denied Sep 1 05:40:34 host dovecot: lmtp(3176, lkrzyuser8): Error: file_dotlock_create(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist) failed: Permission denied (euid=28371(<unknown>) egid=17373(<unknown>) missing +x perm: /var/lib/dovecot/control/gbuser1, dir owned by 67593:17373 mode=0700) Sep 1 05:40:34 host dovecot: lmtp(3176, lkrzyuser8): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: save failed to INBOX: BUG: Unknown internal error Above is again the same case. Sep 1 05:40:34 host dovecot: lmtp(3176, wm1user9): Error: lstat(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist.lock) failed: Permission denied Sep 1 05:40:34 host dovecot: lmtp(3176, wm1user9): Error: file_dotlock_create(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist) failed: Permission denied (euid=128065(<unknown>) egid=17373(<unknown>) missing +x perm: /var/lib/dovecot/control/gbuser1, dir owned by 67593:17373 mode=0700) Sep 1 05:40:34 host dovecot: lmtp(3176, wm1user9): Error: lstat(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist.lock) failed: Permission denied Sep 1 05:40:34 host dovecot: lmtp(3176, wm1user9): Error: file_dotlock_create(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist) failed: Permission denied (euid=128065(<unknown>) egid=17373(<unknown>) missing +x perm: /var/lib/dovecot/control/gbuser1, dir owned by 67593:17373 mode=0700) Sep 1 05:40:34 host dovecot: lmtp(3176, wm1user9): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: save failed to INBOX: BUG: Unknown internal error And here again the same problem but with user "wm1user9" Sep 1 05:40:34 host dovecot: lmtp(3176): Disconnect from local: Successful quit # doveadm user gbuser1 field value uid 67593 gid 17373 home /var/mail/gbuser1/ mail maildir:/var/mail/gbuser1/:CONTROL=/var/lib/dovecot/control/gbuser1 # doveadm user lkrzyuser8 field value uid 28371 gid 17373 home /var/mail/lkrzyuser8/ mail maildir:/var/mail/lkrzyuser8/:CONTROL=/var/lib/dovecot/control/lkrzyuser8 # doveadm user wm1user9 field value uid 128065 gid 17373 home /var/mail/wm1user9/ mail maildir:/var/mail/wm1user9/:CONTROL=/var/lib/dovecot/control/wm1user9 Later exim retries delivery and dovecot lmtp succeeds: Sep 1 05:41:34 host dovecot: lmtp(4737): Connect from local Sep 1 05:41:34 host dovecot: lmtp(4737, lkrzyuser8): b9F+OsHqA1SBEgAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:41:34 host dovecot: lmtp(4737, wm1user9): b9F+OsHqA1SBEgAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:41:34 host dovecot: lmtp(4737): Disconnect from local: Successful quit The problem is not reasily repeatable. It happens several times a day for different users each time (while thousands users are logging in), so I guess some race condition takes place. # dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=1000 } is lower than required under max. load (8000) doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (6003) # OS: Linux 3.14.17-1 x86_64 xfs auth_mechanisms = plain login auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@= auth_username_translation = @= auth_verbose = yes default_process_limit = 2000 default_vsz_limit = 512 M disable_plaintext_auth = no first_valid_gid = 1500 first_valid_uid = 1500 lda_mailbox_autocreate = yes lmtp_save_to_detail_mailbox = yes login_greeting = Mail server ready. mail_location = maildir:/var/mail/%Ln:CONTROL=/var/lib/dovecot/control/%Ln mail_log_prefix = "%s(%u): session=<%{session}>, " mail_plugins = zlib quota namespace { hidden = no inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename quota = fs:User quota:user quota2 = fs:Group quota:group } postmaster_address = postmaster(a)somwehere.pl service auth { unix_listener auth-userdb { mode = 0666 } } service imap { process_limit = 2048 } service pop3 { process_limit = 1024 } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { auth_username_format = %Ln auth_username_translation = } protocol imap { imap_logout_format = bytes=%i/%o mail_max_userip_connections = 20 mail_plugins = zlib quota imap_quota mail_log notify } protocol pop3 { mail_max_userip_connections = 20 mail_plugins = mail_log notify pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o pop3_uidl_format = %Mf } -- Arkadiusz Miśkiewicz, arekm / maven.pl

1 1

Replication problem
by Ve (HOME) 10 Sep '14

10 Sep '14

Hi, I'm using mdbox and replication. Due to configuration error synchronization was not able to be done last week. Since then the problem has been corrected but synchronisation for some mailbox always failed in I/O stalled timeout for 600 seconds. The link between the two servers is quite slow and multiple sync are done in parallel leading to congested link. I can't replicate with rsync as change in the mdbox has been done on the two servers to get back to a working state. What do you think could be done to resynchronized the two dovecot server. Another question is what is this timeout ? Timeout of communication i.e no data received during 600 seconds ( to me that looks unlikely ) or 600 seconds for doing the full sync or 600 seconds for one mail sync. Thanks for any help. Regards, Vincent

3 5

preserving flags for shared mailbox when migrating from cyrus to dovecot
by Jogi Hofmüller 10 Sep '14

10 Sep '14

Dear all, Despite all the progress we are making in our attempt to make the migration as smooth and transparent for our users there are still some important unsolved issues. One thing that I can't figure out is how to preserve a user's flags that s/he has for mail in a shared mailbox. So far we tried 'doveadm backup -R' as well as the cyrus2dovecot script from here [1]. Both work well for individual mailboxes but do not migrate subscriptions for shared mailboxes and -- more importantly -- flags for mail in a shared mailbox. Reconstructing subscriptions is quite easy but I have no clue on how to reconstruct a user's flags. Any hint is greatly appreciated! [1] http://cyrus2dovecot.sw.fu-berlin.de/index.html -- j.hofmüller mur.sat -- a space art project http://sat.mur.at/

3 5

master user in ldap?
by Francesco 10 Sep '14

10 Sep '14

Hello everyone, i was wondering if it was possible to add master user criteria in ldap backends. the idea is that the users, members of a specific group, should be able to login with their own credentials on behalf of other users. i've tried setting it up like this: hosts = localhost dn = CN=ldapuser,OU=someldapou,DC=domain,DC=tld dnpass = <password> auth_bind = yes ldap_version = 3 base = DC=domain,DC=tld user_attrs = sAMAccountName=home=/var/vmail/% $,skip=found,maxStorage=quota_rule=*:storage=% $M,quota_rule2=Trash:storage=+100M user_filter = (&(ObjectClass=person)(sAMAccountName=% u)(memberOf=CN=Domain Admins,CN=Users,DC=domain,DC=tld)) then i added a passdb as follows passdb { driver = ldap master = yes args = /etc/dovecot/dovecot-ldap-masteruser.conf.ext } and of course the separator. but when i try to login with realuser*userinadministratorsgroup passwordofuserinadministratorsgroup i get authentication failed. am i missing something? is it even possible to accomplish such thing? because i didn't see any example in the wiki, only plain passdb and sql. thanks in advance Francesco

1 0

Escape comma in the LDAP passdb subquery configuration
by Francesco Fiore 10 Sep '14

10 Sep '14

Hi I have to configure the LDAP passdb to execute a subquery defining dinamically the new DN to use. For example: pass_attrs = @mail=mail=%{login_user},dc=%{login_domain},dc=example,dc=com,\ =proxy=y,\ =host=%{ldap:mailHost@mail} In the previous example, the problem is the use of "," for DN representation, which is also the separator for the attribute template in the pass_attr parameter value. I tried to escape it with '\' or '%' but it doesn't work. Dovecot version is 2.2.13. How can I resolve this issue? Thanks in advance

3 3

"§"-sign in passwords
by InterNetworX | Pascal Heverhagen 09 Sep '14

09 Sep '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hey users, I've got a constellation with dovecot, postfix, froxlor and roundcube. My problem is, when a user has got a paragraph sign in his password, every mail client tells him, that he entered a wrong password. The log says as usually "password mismatch". did anyone else fixed this problem already? Hope you can help me :) Pascal -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJUD+SHAAoJEA3oZzzqW4iVobwH/0r/g9eP2inhqCNLqBBN3Ret gU9L9dXM8iqOBl3ylgTK1Fvf/7rhnPHhM43oS+KAoaOcrG4u9PI83hfKYqMGuZPB +1/PhMcEmydUl98mjT76tC/SuGAgRnWlnc6eA+LB1Zp8EgN0h4l8zLXvw2mv6nA5 dyEHUq6cW9oIg38jMe0rXAb5mqNROAGtKTaM7182Xxk5dnJAfb5ZdNPZ8Vbn0A3d ENE9hzdndNeQPkDIVmdD6Fv1kWVwCf7shAPgQ3yJoJxOUaEq9sl4BQRI/GcLU6RF lpQFsMQTjwDa9RWPYvOT33SHDiwYLAr9l65C5A1ReLNROSaTW5rE+lL9NiUWcD8= =jP+Y -----END PGP SIGNATURE-----

3 2