- dovecot - dovecot.org

[Dovecot] why dovecot try to access the uses's home?
by Farkas Levente 06 Jan '05

06 Jan '05

hi, after i try to use dovecot with ldap i configure dovecot as: ------------------------ first_valid_uid = 499 last_valid_uid = 499 first_valid_gid = 499 last_valid_gid = 499 default_mail_env = maildir:/home/mail/%d/%n auth_userdb = static uid=499 gid=499 home=/home/users/%d/%n auth_passdb = ldap /etc/dovecot-ldap.conf ------------------------ but after this i've got the error in imap.log: ------------------------ dovecot: Dec 29 14:39:14 Fatal: chdir(/home/users/<username>) failed with uid 499: Permission denied ------------------------ i see the reason since each user has it's own uid and uid 499 can't access to the users home which has 0700 access right. but why dovecot would like to access the user's home? does it nessesary? since in this case one static uid can be usable or this uid has to be read (write?) access to all user's home. is there any usage of static uid in this case? yours. -- Levente "Si vis pacem para bellum!"

2 5

[Dovecot] Outlook can't download messages with no subject and empty body
by Bob 06 Jan '05

06 Jan '05

My Outlook POP3 clients can't download messages that have empty subjects and bodies. I'm running 0.99.11-1.1.fc2 and have added the following line to dovecot.conf client_workarounds = outlook-pop3-no-nuls This didn't help. Any help would be appreciated, Bob

2 1

[Dovecot] Debugging msync() failed errors
by Doug Luce 06 Jan '05

06 Jan '05

>From today's maillog: maillog:Dec 28 09:29:40 aurora dovecot: IMAP(doug): msync() failed with index file /home/doug/Maildir/.projects.job591/dovecot.index: Invalid argument maillog:Dec 28 09:30:21 aurora dovecot: IMAP(doug): msync() failed with index file /home/doug/Maildir/dovecot.index: Invalid argument maillog:Dec 28 09:30:22 aurora dovecot: IMAP(doug): msync() failed with index file /home/doug/Maildir/dovecot.index: Invalid argument maillog:Dec 28 09:30:28 aurora dovecot: IMAP(doug): msync() failed with index file /home/doug/Maildir/dovecot.index: Invalid argument maillog:Dec 28 09:44:46 aurora dovecot: IMAP(doug): msync() failed with index file /home/doug/Maildir/.projects.job591/dovecot.index: Invalid argument maillog:Dec 28 09:44:47 aurora dovecot: IMAP(doug): msync() failed with index file /home/doug/Maildir/dovecot.index: Invalid argument maillog:Dec 28 09:49:10 aurora dovecot: IMAP(doug): msync() failed with index file /home/doug/Maildir/dovecot.index: Invalid argument Can anyone slip me some advice on how to properly go about debugging this problem? Is there a way to check the .index file? Can anyone make an educated guess as to what section of code is the likely culprit? Thanks, Doug

2 1

[Dovecot] Assistant access
by Doug Luce 06 Jan '05

06 Jan '05

Does anyone have a clue how I might set Dovecot up to allow another account to have read/write access to my INBOX and one other folder? I want to set things up so my assistant can pre-scan my post-Spamassassed email to remove more spam from it. Thanks! Doug

3 3

[Dovecot] 0.99.1[12] IMAP problems with Apple Mail.app?
by Jim Tittsler 06 Jan '05

06 Jan '05

Is anyone else having trouble using the Apple OS X Mail.app with a Dovecot IMAP server? With 0.99.11 and 0.99.12 attempting to read certain messages using IMAP or IMAPS seems to put Mail.app into spinning pizza of death mode. Sniffing the connection, it looks like it happens after the client issues a BODY.PEEK[] and the server has responded with the (UID XXXX BODY[] {YYYY}...) and OK Fetch completed. I've only been able to catch it happening with messages that are either (a) Base64 encoded or (b) those that claim to be multi-part/alternative, but only seem to contain a single part. The client acts like it has received the message, since if I kill Mail.app and restart it, I am able to read the problem message from its cache. Is this a Mail.app bug? Is it something about the way Dovecot is responding to the BODY.PEEK[] in these cases? Using Mail.app with the Novell myrealbox.com IMAP I haven't seen problem, even with a test problematic message I redirected there, although admittedly I'm changing the headers by doing the redirection. I haven't gotten 0.99.13rc3 to get past the autotools stage of complaining about AM_ICONV (and a number of AC_ warnings), so I've yet to try it.

3 2

[Dovecot] failed with uid Permission denied
by Rein Laaneser 06 Jan '05

06 Jan '05

Hi Does somebody know the workaround I have some users, who are able to log in to dovecot but others not.... even the failpermissions in directories are same. Also mbox folder is excatly same mail Some settings in /etc/dovecot.conf first_valid_uid = 500 last_valid_uid = 1500 first_valid_gid = 500 last_valid_gid = 515 default_mail_env = mbox:~/mail:INBOX=/var/spool/mail/%u So the "someuser" is able to log in but "testuser" not log from testuser logging in somehost imap-login: Login: testuser [193.x.x.x] somehost dovecot: chdir(/home/guest/testuser) failed with uid 893: Permission denied somehost dovecot: child 8729 (imap) returned error 89 Any idea???

2 1

[Dovecot] Mozilla/Thunderbird secure authentication
by Stewart Dean 06 Jan '05

06 Jan '05

I am finishing up getting SSL/IMAP working on our mail server and I notice the Use secure authentication box....very little I can find out about it, except that everyone says NOT to use it and maybe it's only for POP, not IMAP. Can you confirm?...googled you on this. Also, isn't authentication secure with SSL/IMAP anyway????? -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

2 1

[Dovecot] pop3 and home directory
by Shane Kerschtien 06 Jan '05

06 Jan '05

I have a question regarding dovecot (1.0-test52) and pop3. I have users that do not have home directories, they only have an inbox in /var/mail. When they try to pop their email, dovecot tries to create ~/mail and then fails. Is there a way around this or will all email users need to have a home directory? Cheers, Shane Kerschtien dovecot: Jan 04 09:37:58 Error: POP3(fran): mkdir_parents(/none/mail) failed: Permission denied dovecot: Jan 04 09:37:58 Error: POP3(fran): Failed to create storage with data: mbox:/none/mail/:INBOX=/mail/boxes/fran

2 1

[Dovecot] 0.99.13 released
by Timo Sirainen 06 Jan '05

06 Jan '05

v0.99.13 2005-01-06 Timo Sirainen <tss(a)iki.fi> * GNUTLS support hasn't been working for a while, so it's not even tried to be used anymore unless explicitly wanted. + Added CRAM-MD5 authentication mechanism. Patch by Joshua Goodall + Added SMD5 and LDAP-MD5 password schemes and changed MD5 scheme to use LDAP-MD5 if the password isn't in MD5crypt format. Patch by Joshua Goodall + Workaround for some POP3 client bugs: if message doesn't contain the "end of headers" empty line, add it automatically. + vpopmail supports now all password schemes, most importantly MD5crypt works now without support from libc's crypt() - SQL and LDAP authentication was broken - SEARCH UNKEYWORD wasn't working

1 0

[Dovecot] Dovecot Crashing after MySQL Auth
by 'Donovan Craig' 06 Jan '05

06 Jan '05

Hi, I'm running a mixed Debian Woody/Sarge system with Dovecot version: (0.99.12-1) I can't seem to be able to get dovecot working with mysql. It seems to authenticate successfully then crash. This happens when I use the Debian package and also when I've compiled from source. dovecot: Jan 06 12:21:14 Info: Dovecot starting up dovecot-auth: Jan 06 12:21:15 Info: MySQL: connected to localhost dovecot-auth: Jan 06 12:21:15 Info: Login process 8 connected dovecot-auth: Jan 06 12:21:15 Info: Login process 8 sent handshake: PID 11587 dovecot-auth: Jan 06 12:21:16 Info: Login process 9 connected dovecot-auth: Jan 06 12:21:16 Info: Login process 9 sent handshake: PID 11589 dovecot-auth: Jan 06 12:21:17 Info: Login process 10 connected dovecot-auth: Jan 06 12:21:17 Info: Login process 10 sent handshake: PID 11590 dovecot-auth: Jan 06 12:21:32 Info: MySQL: Performing query: SELECT substring(password_hash, 6) AS password FROM popbox WHERE local_part = 'donovan' AND domain_name = 'somedomain.com' dovecot: Jan 06 12:21:32 Error: login: Authentication process 11585 doesn't exist imap-login: Jan 06 12:21:32 Info: Internal login failure: donovan(a)somedomain.com [127.0.0.1] dovecot: Jan 06 12:21:32 Error: child 11585 (auth) killed with signal 11 dovecot-auth: Jan 06 12:21:32 Info: MySQL: connected to localhost dovecot-auth: Jan 06 12:21:33 Info: Login process 8 connected dovecot-auth: Jan 06 12:21:33 Info: Login process 8 sent handshake: PID 11587 dovecot-auth: Jan 06 12:21:33 Info: Login process 9 connected dovecot-auth: Jan 06 12:21:33 Info: Login process 9 sent handshake: PID 11589 dovecot-auth: Jan 06 12:21:33 Info: Login process 10 connected dovecot-auth: Jan 06 12:21:33 Info: Login process 10 sent handshake: PID 11590 ---- Core was generated by `dovecot-auth'. Program terminated with signal 11, Segmentation fault. #0 0x402c0284 in mallopt () from /lib/libc.so.6 dovecot.conf base_dir = /var/run/dovecot # Protocols we want to be serving: # imap imaps pop3 pop3s protocols = imap disable_plaintext_auth = no log_path = /var/log/dovecot.log info_log_path = /var/log/dovecot.log login_chroot = no login = imap login_user = dovecot login_process_per_connection = no login = pop3 first_valid_uid = 20 mail_extra_groups = vmail default_mail_env = client_workarounds = outlook-idle outlook-pop3-no-nuls mail_drop_priv_before_exec = no auth = default auth_mechanisms = plain auth_userdb = mysql /usr/local/etc/dovecot-mysql.conf auth_passdb = mysql /usr/local/etc/dovecot-mysql.conf auth_user = root auth_verbose = yes auth_debug = yes dovecot-mysql.conf db_host = localhost db_port = 3306 # db_unix_socket = /var/tmp/mysql.sock db_unix_socket = /var/run/mysqld/mysqld.sock db = vmail db_user = vmail db_passwd = xxxxx db_client_flags = 0 # Default password scheme. # # Currently supported schemes include PLAIN, PLAIN-MD5, DIGEST-MD5, and # CRYPT. # default_pass_scheme = PLAIN-MD5 # Query to retrieve the password. # # The query should return one row, one column. If more than one row or # column # is returned, authentication will automatically fail. # password_query = SELECT substring(password_hash, 6) AS password FROM popbox WHERE local_part = '%n' AND domain_name = '%d' # user_query = SELECT CONCAT('maildir:',domain.path,'/', # popbox.mbox_name) AS home, '508' AS uid, '508' AS gid FROM popbox, # domain WHERE popbox.local_part = '%n' AND popbox.domain_name = '%d' # AND popbox.domain_name = domain.domain_name user_query = SELECT CONCAT(domain.path,'/', popbox.mbox_name) AS home, '508' AS uid, '508' AS gid FROM popbox, domain WHERE popbox.local_part = '%n' AND popbox.domain_name = '%d' AND popbox.domain_name = domain.domain_name Any ideas? The spool directories are maildir and are set with 700 permissions as 508.508 (vmail). Regards, Donovan Donovan Craig Go4 Multimedia Phone : +61 3 95 306 658 Fax : +61 3 95 306 435 Mobile : 0414 666 518 Web : http://www.go4.com.au/ 14B Warleigh Grv, Brighton VIC 3186 GnuPG Key : http://bilby.snapfrozen.com/gpg/dcraig.asc Fingerprint: 3E73 E01A D24F 3737 9427 58A7 90F4 9671 ADAB CA76 "Well, let's just say, 'if your VCR is still blinking 12:00, you don't want Linux'". --- Bruce Perens, Debian's Fearless Leader

2 1

[Dovecot] Internal login failure
by Peter Clark 06 Jan '05

06 Jan '05

I have discovered an odd problem; some users are able to connect to Dovecot either via pop3 or imap without any problems. Other users, however, aren't, and the following message appears in /var/log/mail.log: --- dovecot-auth: Login process 13 connected dovecot-auth: Login process 13 sent handshake: PID 1313 pop3-login: Internal login failure: user(a)mydomain.tld [195.242.16.30] dovecot: child 1311 (auth) killed with signal 11 --- I'm using Dovecot 0.99.11 (Debian Sarge), and all user information is stored in an LDAP database. Any suggestions? Thanks, :Peter

2 7

[Dovecot] imap client library.
by Oon Arfiandwi M. 06 Jan '05

06 Jan '05

Dear Dovecot developers, I have several question about imap client: - Is there any difference if we want to create imap client that connect to Imap server with user mail format Mailbox or Maildir? Dovecot support both of them, are we need to create different imap client to support both of them? - Does anyone have imap client library other than UW's c-client? thanks for your information, -- Oon Arfiandwi M.

2 1

[Dovecot] authenticate authenticated users
by Tzafrir Cohen 05 Jan '05

05 Jan '05

Hi I'm using dovecot on a LAN server. I sometimes read mail from the server itself locally with mutt and sometimes remotely with mutt or mozilla . I would like to avoid typing my password whenever necessary but without writing a plain-text equivalent copy of it locally. It feels quite silly to have to type the password locally becase the imapd does not know that the process is indeed a process of the user tzafrir. It has all the information it neeeds to check that. wu-imapd has something called "pre-authentication": the imapd is run by the user unpriviliged to access mail in the user's home directory. As a bonus this works quite nicely with ssh public key authentication. I know that at least mutt and pine support running a custom command for creating an imap connection. But then again, wu-imapd is built quite, well, differently. Any ideas? -- Tzafrir

3 3

[Dovecot] FW: Failed to create storage with data
by Christopher Cheng 04 Jan '05

04 Jan '05

I've found out the problem already. After postfix delivered the mail to my mailbox, I can login now... -----Original Message----- From: Christopher Cheng [mailto:mylist@chrishome.com] Sent: Tuesday, January 04, 2005 11:55 PM To: 'dovecot(a)dovecot.org' Subject: Failed to create storage with data I am trying to setup dovecot with postfix and postgres. After I got dovecot connected to postgres and use Outlook Express to try to login, I have the following problem: Jan 4 23:38:22 bluemountain imap-login: Login: chris [::ffff:192.168.1.2] Jan 4 23:38:22 bluemountain dovecot-auth: Login process 9 disconnected Jan 4 23:38:22 bluemountain imap(chris): Failed to create storage with data: /var/local/mail/mydomain.com/chris Jan 4 23:38:22 bluemountain dovecot: child 24616 (imap) returned error 89 The status of the directory /var/local/mail/mydomain.com/chris is 777, so I have no clue why it doesn't work.

1 0

[Dovecot] Failed to create storage with data
by Christopher Cheng 04 Jan '05

04 Jan '05

I am trying to setup dovecot with postfix and postgres. After I got dovecot connected to postgres and use Outlook Express to try to login, I have the following problem: Jan 4 23:38:22 bluemountain imap-login: Login: chris [::ffff:192.168.1.2] Jan 4 23:38:22 bluemountain dovecot-auth: Login process 9 disconnected Jan 4 23:38:22 bluemountain imap(chris): Failed to create storage with data: /var/local/mail/mydomain.com/chris Jan 4 23:38:22 bluemountain dovecot: child 24616 (imap) returned error 89 The status of the directory /var/local/mail/mydomain.com/chris is 777, so I have no clue why it doesn't work.

1 0

[Dovecot] compact folders, expunge, etc
by Mail Admin 04 Jan '05

04 Jan '05

Test58 and test59 breaks "compact folders" and "expunge" in thunderbird and evolution. Messages marked for deletion just sit there as if compacting folders or expunging have no effect. Thunderbird continues to behave erratically with dovecot test builds. I haven't been able to test the imap_client_workarounds=tb-negative-fetch option yet as I'm still running test52. Thunderbird displays blank messages when they are opened, but "Edit as new" shows the message contents. Thunderbird also displays messages that appear to be truncated like: > Hi Peter, > > I will not This body part will be downloaded on demand. Thanks, Derek

2 1

[Dovecot] PLAIN-MD5 passwords?
by Peter Clark 03 Jan '05

03 Jan '05

After I found out that {CRYPT} doesn't support passwords longer than 8 characters, I decided to switch over to MD5 for user passwords in my LDAP database. However, while I have no problem with Postfix + SASL, Dovecot fails to authenticate. Relevant bits from /etc/dovecot-ldap.conf: user_attrs = mailAddress,,,,, # The search string is identical to what's found in /etc/saslauthd.conf: user_filter = (&(|(uid=%u)(mailAddress=%u))(status=active)) pass_attrs = mailAddress,userPassword pass_filter = (&(|(uid=%u)(mailAddress=%u))(status=active)) default_pass_scheme = PLAIN-MD5 When I try to connect using either KMail or SquirrelMail (which worked just fine before I switched schemes), the following error appears in /var/log/syslog: ldap(user(a)mydomain.tld): password mismatch But when I try 'testsaslauthd -u user(a)mydomain.tld -p longpassword' it authenticates just fine. I have the line 'password-hash {MD5}' in /etc/ldap/slapd.conf, and I used 'slappasswd -h {MD5}' to create the MD5 versions of the passwords. Dovecot is v. 0.99.11. If I can't figure out how to get it to work with MD5, I guess I'll have to go back to CRYPT, but it would be nice to have longer passwords... :Peter

5 5

[Dovecot] Wanted: gnutls11 support
by Jaldhar H. Vyas 03 Jan '05

03 Jan '05

I talked to Timo about this before and even provided the beginnings of a patch but don't have enough time to really do a proper job. Anyway, dovecot doesn't work with recent versions of the GNU TLS library. As a result, I compile the Debian package with OpenSSL. However some of the other libraries used, such as OpenLDAP are linked against GNU TLS so Dovecot is linked against both. And it is suspected this is leading to bugs. So could some kind soul provide Timo with a patch he can include in 0.99.13? -- Jaldhar H. Vyas <jaldhar(a)debian.org> La Salle Debain - http://www.braincells.com/debian/

1 0

Re: [Dovecot] Maildir owner importance
by Roi Efrati 02 Jan '05

02 Jan '05

That last line actually made it possible for me to be able to log into the server :) I am still getting errors from PAM but it starting to look good. Is there a good HowTo on setting Dovecot to comunicate directly to MySql without using PAM in the middle ? Also, Since Postfix is still not working on my server, I can't actually recive Emails. Is there somewere an example of the files that need to be in the maildir that I can put them in there and test that the email client get's the mail out ? On Wed, 29 Dec 2004 18:36:34 +0200, Timo Sirainen <tss(a)iki.fi> wrote: > > If you have passwords in Mysql, you probably don't want to use > passwd-file as your auth_userdb. Rather just use: > > auth_userdb = static uid=100 gid=101 home=/var/local/virtualdir/%d/%u >

4 7

[Dovecot] SASL AUTH
by Tom Allison 02 Jan '05

02 Jan '05

I'm reading through the dovecot wiki pages for virtual hosting with postgresql/postfix/dovecot/debian and it looks pretty nice but I think I'm going to skip the SASL authentication since I'm in a trusted network. I think all I need to do is skip section 5 entirely and bypass all the sasl references in the postfix section. Technically, I don't think any of the SASL has much to do with the dovecot configuration.

2 1

[Dovecot] random pool depletion
by Johannes Berg 31 Dec '04

31 Dec '04

I'm facing a problem with dovecot 1.0 test-59; ever since I installed it and use it my random pool is always depleted whenever someone opens an imap connection. This wouldn't be too bad if the machine was used interactively, but since it is not and other services read directly from /dev/random those are sometimes blocked due to dovecot depleting the pool by reading /dev/urandom. Thus my question: is it really necessary to use random numbers from /dev/urandom for temporary filenames? And even if, couldn't it use less? It apparently uses 8 bytes every time. johannes

2 3

[Dovecot] delivery agent in 1.0?
by "Branko F. Gračnar" 31 Dec '04

31 Dec '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi :) Is there any plan to include delivery agent in 1.x? I would be very happy, if there would be lmtp delivery agent included with dovecot 1.x... This would make creating large mailsystem cluster creation very simple + indexes would be always up2date. Brane -----BEGIN PGP SIGNATURE----- iD8DBQFBytD9N7LHXgqRB4IRAi67AKCn/A1t3tCsMX0nhL8l4sgzTfDhlACgj1j5 NdgMzA3v0dLx6Bnui62rLRc= =4UGm -----END PGP SIGNATURE-----

9 18

[Dovecot] Authentication difficulties
by Timo Sirainen 30 Dec '04

30 Dec '04

There are constantly pretty basic questions in this list (and in my inbox) about how to get user authentication work correctly. This means that the documentation how it all works is either bad, or people don't find it easily. Any ideas how to improve it? I did this now: - Documentation link in dovecot.org now points directly to Wiki, so people don't go read the outdated documents - Upcoming 1.0-tests and 0.99.13 will contain doc/USE-WIKI-INSTEAD file pointing to Wiki: http://dovecot.org/list/dovecot-cvs/2004-December/003928.html - Updated comments in dovecot-example.conf: http://dovecot.org/list/dovecot-cvs/2004-December/003924.html - Added pointers to Wiki in dovecot-example.conf: http://dovecot.org/list/dovecot-cvs/2004-December/003927.html How good are the Wiki documents about user authentication in general? The content should probably be split somehow to "getting started" vs. "everything there is to know about it" and "system users" vs. "virtual users". I'm not really sure how to best do that though. I think the Wiki in general could be better organized. Wish I knew how.

3 2

[Dovecot] Maildir owner importance
by Roi Efrati 29 Dec '04

29 Dec '04

I have set up a directory (/var/local/virtualdir/) as the maildir with a special user/group (virtualmail) and in it I create directories for each domain (example1.tld, example2.tld etc) and sub dir's for each mailbox). Only at the moment, apart from the first one, they are all created as with user root as the owner. How important is to have all the directory tree owned by the same user group (virtualmail:virtualmail) ?

4 11

[Dovecot] bug in 99.13-rc2 in ldap md5 patch
by Farkas Levente 29 Dec '04

29 Dec '04

hi, it takes me another hour do debug it again, although i already report it for both joshua and timo. the original patch for openldap's md5 crypt has a small bug. in passdb-ldap.c the schema is already PLAIN-MD5 since that was set in the other part of the original patch in password-scheme.c. do anybody use dovecot with ldap and md5 password? i don't think so:-( this patch would be useful to apply before the final 0.99.13. anyway in the current 1.0 series the PLAIN-MD5 and LDAP-MD5 schema are different. at least plain_md5_verify and plain_md5_generate differ from ldap_md5_verify and ldap_md5_generate. why? -- Levente "Si vis pacem para bellum!" --- dovecot-0.99.13/src/auth/passdb-ldap.c.lfarkas 2004-12-22 17:06:25.000000000 +0100 +++ dovecot-0.99.13/src/auth/passdb-ldap.c 2004-12-22 17:06:56.000000000 +0100 @@ -109,12 +109,11 @@ } /* Special case for OpenLDAP's MD5 type */ - if (strcasecmp(scheme, "MD5") == 0) { + if (strcasecmp(scheme, "PLAIN-MD5") == 0) { buf = buffer_create_static(data_stack_pool, 16); if (base64_decode(password, strlen(password), NULL, buf) == 1 && buffer_get_used_size(buf) == 16) { password = binary_to_hex(buffer_get_data(buf, NULL), 16); - scheme = "PLAIN-MD5"; } }

2 4