- dovecot - dovecot.org

[Dovecot] file permissions help!
by smk 26 Apr '04

26 Apr '04

Hi all! Ran into a problem and hopefully i can get some help. OK here is my set up: - dovecot-0.99.10.4 + MySQL patch. - Redhat 9 The authentication part works just fine. It gives me the following entry in the log file: imap-login: "Apr 12 22:15:10 "Info: Login: USER(a)DOMAIN.com [127.0.0.1] But there is a problem with dovecot reading the mbox file (I think). In the error file I get this entry: imap(USER(a)DOMAIN.com): "Apr 12 22:15:10 "Fatal: Failed to create storage with data: /export/htdocs/DOMAIN.com/mail/USER dovecot: "Apr 12 22:15:11 "Error: child 18613 (imap) returned error 89 Of course the user and domain info was changed. I am out of ideas but thats not to say its something easy or something I completely looked over. This is how I compiled dovecot: CPPFLAGS="-I/usr/local/mysql/include/mysql -DPASSDB_MYSQL -DUSERDB_MYSQL" \ LDFLAGS="-L/usr/local/mysql/lib/mysql/ -lmysqlclient" \ \ ./configure \ --prefix=/usr/local/imapd \ --disable-ipv6 \ --without-pop3d \ --without-ssl \ --with-storages=mbox \ --enable-debug thanks in advance. Scott

2 1

[Dovecot] Problem with flags
by Jeff Hoskinson 26 Apr '04

26 Apr '04

Greetings! I'm having a problem with flags not working correctly. I'm using Mozilla Thunderbird as my mail client, and Dovecot 0.99.10.4 as part of Debian on a Sparc box. The thing that doesn't seem to be working right is Thunderbird's Label feature, which uses custom IMAP flags. I noticed that once I labeled a message, I couldn't un-label it. I recorded this exchange between Thunderbird and Dovecot while using the Label/None command on a message: 5235 uid store 35 -Flags ($Label1 $Label2 $Label3 $Label4 $Label5) * 35 FETCH (FLAGS (\Answered \Seen NonJunk $Label4 $Label5) UID 35) 5235 OK Store completed. Even though Thunderbird is sending the -Flags command for all its custom flags, the message is still retaining two of those flags. Just out of curiousity, I tried changing the flag of that same message to something different, and recorded this exchange: 5259 uid store 35 +Flags ($Label2) * 35 FETCH (FLAGS (\Answered \Seen NonJunk $Label4 $Label2 $Label5) UID 35) 5259 OK Store completed. 5260 uid store 35 -Flags ($Label1 $Label3 $Label4 $Label5) * 35 FETCH (FLAGS (\Answered \Seen NonJunk $Label4 $Label2 $Label5) UID 35) 5260 OK Store completed. So it seems the +Flags command works, but not the -Flags? Or does it have something to do with sending more than one flag at a time? Any help would be appreciated. Thanks, -- Jeff

2 1

[Dovecot] [OT] Is there a secure reverse IMAP proxy
by Sven Kirmess 26 Apr '04

26 Apr '04

This question is off topic. I ask this list because the question is related to security and IMAP and I guess the people in this list know a lot about both of that. Is there a secure reverse proxy for the IMAP protocol? Something you can install on a bastion host which checks the IMAP traffic before forwarding it to the internal IMAP server? There are these proxies for WebMail to IMAP connections but as far as I can tell they were not created for security reasons and not with security as primary goal. Sven

3 2

[Dovecot] SSL Ciphers
by John Wentworth 26 Apr '04

26 Apr '04

I have dovecot running as a pop3s server on port 995 it works great with sendmail and I run nessus to check security issues nessus reports this The SSLv2 server offers 3 strong ciphers, but also 0 medium strength and 2 weak "export class" ciphers. The weak/medium ciphers may be chosen by an export-grade or badly configured client software. They only offer a limited protection against a brute force attack Solution: disable those ciphers and upgrade your client software if necessary I have previously disabled weak ciphers in apache but cannot figure out how to disable the weak ciphers in dovecot Any help would be appreciated john

2 1

[Dovecot] problems with squirrelmail and TLS (debian unstable)
by Amelia A Lewis 26 Apr '04

26 Apr '04

Heylas, So, okay, I've had this lovely IMAP server running, and adore the ease of configuration, among other things. Problem, though. I'm trying to set up SquirrelMail, so that some folks with accounts on my box can use it without having to set up a proper imap client (or can check mail when they're at a cafe, or like that). However, I *won't* turn off the disable_plaintext_auth, 'cause I'm damned if I'll set up a box that asks people to send passwords in the clear, and there *are* people using imap. Dovecot cannot, currently, be configured to permit plaintext on localhost while requiring Something Better from the rest of the world. This becomes a problem with SquirrelMail, which can't cope with TLS. It just barfs. Looking at bug reports in debian, this has already been noticed, and the maintainer there (and the maintainers of SquirrelMail) considers this a non-problem, 'cause, they say, you shouldn't be using TLS with webmail. Is there a way to set up, for instance, two instances of dovecot, running on different ports, so that one listens to the external interface and the other listens to localhost? I don't much like the idea, but how would I go about doing this? Two copies of dovecot.conf and a command-line switch? Amy! -- Amelia A. Lewis amyzing {at} talsever.com Yankees are compelled by some mysterious force to imitate Southern accents and they're so damn dumb they don't know the difference beween a Tennessee drawl and a Charleston clip. -- Rita Mae Brown, "Rubyfruit Jungle"

4 4

[Dovecot] error dropping root group priv
by Thomas Abthorpe 24 Apr '04

24 Apr '04

Good morning all, I am new to this list. I have been running FreeBSD 5.1 with dovecot successfully for about a year. Just recently, I built a new machine with 5.2.1-p5 on the Intel platform with dovecot-0.99.10.4_2. When I use the same configuration options on the new machine, I get Apr 24 10:53:59 standrew pop3-login: Login: tabthorpe [172.16.1.100] Apr 24 10:53:59 standrew pop3(tabthorpe): We couldn't drop root group privileges Apr 24 10:53:59 standrew dovecot: child 44134 (pop3) returned error 89 Any suggestion? Thanks in advance. Thomas -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. Postmaster http://www.stthomasanglican.org

1 0

[Dovecot] SSL Ciphers
by John Wentworth 23 Apr '04

23 Apr '04

I have dovecot running as a pop3s server on port 995 it works great with sendmail and I run nessus to check security issues nessus reports this The SSLv2 server offers 3 strong ciphers, but also 0 medium strength and 2 weak "export class" ciphers. The weak/medium ciphers may be chosen by an export-grade or badly configured client software. They only offer a limited protection against a brute force attack Solution: disable those ciphers and upgrade your client software if necessary I have previously disabled weak ciphers in apache but cannot figure out how to disable the weak ciphers in dovecot Any help would be appreciated john

1 0

[Dovecot] SSL Ciphers
by John Wentworth 23 Apr '04

23 Apr '04

I have dovecot running as a pop3s server on port 995 it works great with sendmail and I run nessus to check security issues nessus reports this The SSLv2 server offers 3 strong ciphers, but also 0 medium strength and 2 weak "export class" ciphers. The weak/medium ciphers may be chosen by an export-grade or badly configured client software. They only offer a limited protection against a brute force attack Solution: disable those ciphers and upgrade your client software if necessary I have previously disabled weak ciphers in apache but cannot figure out how to disable the weak ciphers in dovecot Any help would be appreciated john

1 0

[Dovecot] Is dovecot distributed with RHEL 3.0
by Avery 20 Apr '04

20 Apr '04

I can't seem to find out if dovecot is packaged with RHEL 3.0. It seems redhat makes it hard to find what packages you get when you purchase their RHEL. Does anyone know if dovecot is disributed with Red Hat Enterprise Linux ES 3.0? I know dovecot is distribured with redhat 9.0 and fedora. Thanks, -- Avery

4 3

[Dovecot] configuring dovecot for NIS (w/ pam)
by Yedidia Klein 20 Apr '04

20 Apr '04

Hi, I am trying to start using dovecot on a linux machine. I config it to auth w/ my passwd/shadow and it worked perefectly. I'm not getting to config it to work with my SUN NIS (not +) As I understood I must use PAM for this, I tried to config it w/o any success... do someone has a config file/ pam config for this ? thanks --Yedidia

1 0

[Dovecot] RE: dovecot Digest, Vol 12, Issue 21
by Alban Dani 20 Apr '04

20 Apr '04

Hi Adrian, You are right. I had a space after the .1. Now dovecot is listening fine on 127.0.0.1. Thanks a lot. I would have never thought of it. Alban Date: Tue, 20 Apr 2004 08:37:21 +0200 From: Adrian Ulrich <dovecot(a)blinkenlights.ch> Subject: Re: [Dovecot] Can't resolve address 127.0.0.1 To: dovecot(a)dovecot.org Message-ID: <20040420083721.1d1a4323.dovecot(a)blinkenlights.ch> Content-Type: text/plain; charset=US-ASCII Hello, > imap_listen = 127.0.0.1 Check if you have a space after .1: 'imap_listen = 127.0.0.1' maybe not the same as 'imap_listen = 127.0.0.1 ' bye

1 0

Re: [Dovecot] Can't resolve address 127.0.0.1
by Alban Dani 20 Apr '04

20 Apr '04

Rick thanks for the message, -I have not done any changes to the default nsswitch.conf. I checked and the entry hosts: files dns is there -127.0.0.1 localhost entry is in the /etc/hosts file. -ifconfig shows that the interface is up and I can successfully ping it by name ( ping localhost ). What else can be wrong. I am totally lost here. Alban Rick Johnson wrote: >Alban Dani wrote: >> Hi , >> >> I recently installed Fedora Core 1. >> >> Installed postfix on it and that is running fine. >> >> I am trying to get dovecot to run and I have changed only the following >> line from the default dovecot.conf : >> >> imap_listen = 127.0.0.1 since I'd like to install squirrelmail later on. >> >> Now when I try to start dovecot I get "Starting Dovecot Imap: Fatal: >> Can't resolve address 127.0.0.1 : Name or service not known" > >Does /etc/hosts still contain an entry for localhost? > >Does /etc/nsswitch.conf still reference files for name resolution? > >Is the interface lo active? (run ifconfig to find out) > >-Rick > >-- >Rick Johnson, RHCE #807302311706007 - rjohnson(a)medata.com >Linux/Network Administrator - Medata, Inc. >PGP Public Key: https://mail.medata.com/pgp/rjohnson.asc >

2 1

[Dovecot] Wiki: virutal user with Sendmail and OpenLDAP
by Zoong Pham 20 Apr '04

20 Apr '04

In the Wiki, section 2, "Virtual user support with OpenLDAP", does the example apply to non Sendmail? If that's the case, can someone post a quick guide about setup virtual user with Sendmail. I use OpenBSD-3.4, BTW. TIA, Zoong

1 0

[Dovecot] Can't resolve address 127.0.0.1
by Alban Dani 20 Apr '04

20 Apr '04

Hi , I recently installed Fedora Core 1. Installed postfix on it and that is running fine. I am trying to get dovecot to run and I have changed only the following line from the default dovecot.conf : imap_listen = 127.0.0.1 since I'd like to install squirrelmail later on. Now when I try to start dovecot I get "Starting Dovecot Imap: Fatal: Can't resolve address 127.0.0.1 : Name or service not known" Can anybody help me? Alban

2 1

[Dovecot] configuration problem.. with passwd
by Kartik Vaidyanathan 19 Apr '04

19 Apr '04

Hi i was trying to configure dovecot. Under the authentication section i have set the auth_passdb=/etc/passwd auth_user=root auth_userdb=/etc/passwd But it gives Error in configuration file /etc/dovecot.conf line 398 :missing value which points to auth_passdb=/etc/passwd in the file. Firstly do i need setup some other parameters I want to follow the most simple authentication process. Please advice. thanks

2 1

[Dovecot] adding new user to dovecot
by Kartik Vaidyanathan 18 Apr '04

18 Apr '04

Hi, Your mail was very insightful. You have stated in you mail as follows .. "But I think they create virtual users in database systems for email, I can't imagine all of the users they have are in one passwd file on one tiny machine." a. What do you mean by virtual users. b. How does one link them to a mailbox. Very frankly i am confused... 1.Well lets say i have a user who wants to create a new group say GROUP1.Lets say i have users who want to create GROUP1(a)pigeonhole.com or GROUP2(a)pigeonhole.com .This group name will be entered in my JSP page, now what do i have to do to create the group. 2.How do i see to that anyone who sends a mail to GROUP2@pigeonhole receives it in it mailbox( Firstly does the group have a mails box in the groups name).Will one create a account(mailbox) for the group or how is it done. 3.Lastly I actually want to create a mailing List manager. Please advice on how to go about it. Regards Kartik On Sun, 18 Apr 2004 Wouter Van Hemel wrote : >On Fri, 16 Apr 2004, Kartik Vaidyanathan wrote: > > > Hi, > > > > I have actually configured dovecot because i required a mail server in > > order to build a mailing list manager.A mail list manager is something > > in the likes of yahoogroups, where each group in my case must have a > > mailbox. > > > >You need a MTA, such as postfix, qmail, sendmail, exim, etc. It's more >important than an imap server for what you want to do. > >Actually, I don't really understand why you need an imap server when >making a mailinglist manager. > > > 1. I am using Debian OS. > > The software that i am creating , which is going developed in JSP, will > > take a new users name and password and create a account for him by > > executing a shell script in my linux machine.I assume yahoo also does > > something similar to this to create new mail boxes for any new > > user.Please correct me if i am wrong. > > > >I don't know, I don't work at yahoo. But I think they create virtual users >in database systems for email, I can't imagine all of the users they have >are in one passwd file on one tiny machine. > > > In fact this very mail that i have received from you is because i have > > subscribed to the dovecott mailing list. How do you think dovecott has > > been able to accomplish this. Is it not because that dovecott has a > > mailbox in the group name "dovecott" in some system, that internally > > does the sending of mails to all those in the groups refering to some > > database. > > > >Dovecot doesn't have anything to do with that. It's mostly the MTA, aided >by the mailing list manager. > >Here's how majordomo (popular mailinglist manager) works: > >Bob wants to subscribe to the pigeonhole mailinglist. He emails or enters >his email address in a web form so it ends up in a database file with all >the other users on that list. The mailinglist manager's job is to take >care of adding (or removing) email addresses to (from) that file; it adds >Bob's address. > >When an email is sent to pigeonhole(a)pigeonhole.org, the mailer daemon >(MTA) receives this email, and instead of delivering it to a local user, >either it (1) delivers it to a pipe - it passes the email to the >mailinglist software, which then just generates an email that replaces the >original destination with the list of email addresses; or (2) the mailer >daemon itself forwards the email by alias expansion to the list of email >addresses the mailinglist software made. > >In the former case, the mailinglist manager reads the original message and >replaces the address with all those in the list's database; in the latter >case, basically the only thing a mailinglist manager does, is taking care >of an error-free database file with email addresses so the MTA can forward >the email to the addresses in this file. > >Because Bob's email address is in this file, his address will be inserted >in the headers of the message, and he will receive the email. > > > 2.Will the mail server support me in anyway by giving me some > > functionality to add users, thereby creating maildir's (imap) for the > > users. > > > >No, adding users is not the job of a mail server daemon. Or of an imap >server. Usually, you don't allow people to add users to your system, for >obvious reasons. > >If you want to add users to a mailing list, you don't need accounts for >those users, only when you also want to provide them with an email address. > >What do you want to do: provide email addresses, or a mailinglist manager? > > > 3.Dont I need to know the admin login and passwd, to create users? > > > >Yes, ofcourse. Unless your users are in a database server, in that case >you need the ability to add records to that database. > >(Shared webhosting accounts usually allow adding virtual users, if that's >the reasoning behind your question.) > > > 3.Lastly i know this is not that prevalent a question -> I was told mail > > man does a similar job as to what my software will do.Do you know how > > mailman works (or even yahoogroups)?. > > > >Not precisely, but pretty much like I said above. You can check out the >documentation and source code of said software. > >Yahoogroups probably uses custom written software, but still based on the >simple approach of a mailinglist manager taking care of a list of >subscribers, and the mailer daemon either itself or by aid of an external >program multiplicating the recipients. > > >A mailinglist manager has nothing to do with Dovecot. Dovecot has nothing >to do with *sending* email, only with retrieving it from a system with >IMAP of POP. It's the end-of-the-line for emails, delivery to final >destination; it does not forward or duplicate. > > > Please enlighten me on the above issues. > > Thanks a lot for you time. > > > >I'll send you the bill later. ;) > > > Regards > > Kartik > > > > > > > > >

2 1

Re: Re: [Dovecot] adding new user to dovecot
by Kartik Vaidyanathan 18 Apr '04

18 Apr '04

Hi, Thanks a lot for the mails.Well one major doubt that was prevailing was that do i need to create a system account for each person in order to send/receive mails, and from both(Sven Kirmess & Johannes Berg ) your mails i gather it is a must. But Is there a workaround to this? I have actually configured dovecot because i required a mail server in order to build a mailing list manager.A mail list manager is something in the likes of yahoogroups, where each group in my case must have a mailbox. 1. I am using Debian OS. The software that i am creating , which is going developed in JSP, will take a new users name and password and create a account for him by executing a shell script in my linux machine.I assume yahoo also does something similar to this to create new mail boxes for any new user.Please correct me if i am wrong. In fact this very mail that i have received from you is because i have subscribed to the dovecott mailing list. How do you think dovecott has been able to accomplish this. Is it not because that dovecott has a mailbox in the group name "dovecott" in some system, that internally does the sending of mails to all those in the groups refering to some database. 2.Will the mail server support me in anyway by giving me some functionality to add users, thereby creating maildir's (imap) for the users. 3.Dont I need to know the admin login and passwd, to create users? 3.Lastly i know this is not that prevalent a question -> I was told mail man does a similar job as to what my software will do.Do you know how mailman works (or even yahoogroups)?. Please enlighten me on the above issues. Thanks a lot for you time. Regards Kartik

3 3

[Dovecot] adding new user to dovecot
by Kartik Vaidyanathan 16 Apr '04

16 Apr '04

Hi, This is from your documentation Creating new users ------------------ Dovecot is interested in only one thing - being able to find the user's mail directory. With maildir you need to do mkdir ~user/Maildir, with mbox mkdir ~user/mail. what does ~ refer to. Pardon my ignorance in unix, i am relatively new to unix. Does not ~ refer to the user account in which you have logged in. So does that mean that maildir folder exist for only user accounts that already exist.My intention for asking the above is that i have a java program running, that will take a new users name and password, so with that can i create a mailbox for that person , or does the admin have to create an user account for that person , so that his maildir folder can be created. Please clarify my understanding of how it workds.. Thanks

3 2

RE: [Dovecot] I added a "SQ and Dovecot FAQ" on the SQ website
by Avery Day 14 Apr '04

14 Apr '04

<quote who="Julian Melville"> >> Maybe someone can verify my setup procedure really quick. > > Looks the same as mine except for saying that the server is like > Courier... I left that bit blank and haven't had any hassles. What does > that change I wonder? > > Cheers, > > Julian. > > Actually I stole alot of the procedure from some website. Im not taking credit for anything I'm just doing the dirty work :) If you do perl conf.pl and change the IMAP server to courier it tells you everything that it changes --------------------------------------------------------- Please select your IMAP server: cyrus = Cyrus IMAP server uw = University of Washington's IMAP server exchange = Microsoft Exchange IMAP server courier = Courier IMAP server macosx = Mac OS X Mailserver quit = Do not change anything Command >> courier imap_server_type = courier default_folder_prefix = INBOX. trash_folder = Trash sent_folder = Sent draft_folder = Drafts show_prefix_option = false default_sub_of_inbox = false show_contain_subfolders_option = false optional_delimiter = . delete_folder = true ---------------------------------------------------------- -- Avery

1 0

RE: [Dovecot] I added a "SQ and Dovecot FAQ" on the SQ website
by Julian Melville 13 Apr '04

13 Apr '04

> Maybe someone can verify my setup procedure really quick. Looks the same as mine except for saying that the server is like Courier... I left that bit blank and haven't had any hassles. What does that change I wonder? Cheers, Julian.

1 0

[Dovecot] Calling gentoo maintainers
by Zach Bagnall 13 Apr '04

13 Apr '04

If anyone knows someone with CVS access can they please take another look at http://bugs.gentoo.org/show_bug.cgi?id=22080. It has been in bugzilla for nearly nine months. Would like to see this in portage - masked is fine - so at least everyone is working off the same file. Cheers Zach.

2 2

RE: [Dovecot] I added a "SQ and Dovecot FAQ" on the SQ website
by Zoong Pham 13 Apr '04

13 Apr '04

Is that dovecot in your FAQ serving mbox or mdir format? Thanks, Zoong -----Original Message----- From: Avery Day [mailto:schrock@dayzed.com] Sent: Tuesday, 13 April 2004 12:07 PM To: dovecot(a)dovecot.org Subject: [Dovecot] I added a "SQ and Dovecot FAQ" on the SQ website On the Squirrelmail website I setup in the FAQ a quick install guid on how to get squirrelmail to work with Dovecot. Maybe someone can verify my setup procedure really quick. Maybe someone thinks this is wrong. Also if you have something to add please do so. No one has bothered to do this before so I took it upon my self. Here is the link in the FAQ its about 8 lines down http://www.squirrelmail.org/wiki/en_US/InstallingSquirrelMail Here is where the link takes you http://www.squirrelmail.org/wiki/en_US/SquirrelMailAndDovecotIMAP Thanks -- Avery

2 1

[Dovecot] I added a "SQ and Dovecot FAQ" on the SQ website
by Avery Day 13 Apr '04

13 Apr '04

On the Squirrelmail website I setup in the FAQ a quick install guid on how to get squirrelmail to work with Dovecot. Maybe someone can verify my setup procedure really quick. Maybe someone thinks this is wrong. Also if you have something to add please do so. No one has bothered to do this before so I took it upon my self. Here is the link in the FAQ its about 8 lines down http://www.squirrelmail.org/wiki/en_US/InstallingSquirrelMail Here is where the link takes you http://www.squirrelmail.org/wiki/en_US/SquirrelMailAndDovecotIMAP Thanks -- Avery

1 0

[Dovecot] Dovecot for production environment
by Avery Day 11 Apr '04

11 Apr '04

Sorry if this question has been asked before I looked through some of the archives before posting this. I am considering using dovecot on a small 35 user environment (only around 6 gigs of email) that will be primarly be used with squirrelmail for the MUA. I have been using dovecot for a few weeks now and really like it. It is a big improvement over uw-imap thats for sure. I was wondering how many people in this mailing list are using dovecot for a production email server, and why you chose to use dovecot over cyrus or courier. Or maybe someone feels that dovecot isnt ready for this type of thing just yet. I am all ears so please feel free. Thanks -- Avery -- Avery Day

10 18

[Dovecot] Missing mail file - Internal Error
by James Moser 10 Apr '04

10 Apr '04

I have noticed that if the user does not already have a mail file, for instance in /var/mail, the IMAP server responds with Internal Error, and the pop server imediately terminates the connection. Is this something I have configuered wrong? Are there any work arounds for this... /var/mail is owned by root:mail with permissions 0775... -- James L Moser james(a)powweb.com PowWeb Hosting http://www.powweb.com /(bb|[^b]{2})/, that is the Question. mysql>SELECT * FROM user WHERE clue > 0; Empty set (0.03 sec) Health is merely the slowest possible rate at which one can die... Health nuts are going to feel stupid someday, lying in hospitals dying of nothing...

1 0