- dovecot - dovecot.org

[Dovecot] run POP3S + IMAPS simultaneously?
by darren david 19 Nov '03

19 Nov '03

a quick one: is it possible to run POP3S and IMAPS services through dovecot at the same time? would i just uncomment both "login = imap" and "login = pop3" in /etc/dovecot.conf? or can i only run one at a time? apologies if the answer is obvious, i'm just still trying to wrap my head around all of this. thanks, darren david

2 2

[Dovecot] error msgs about missing ssl/tls support
by Kai Vehmanen 18 Nov '03

18 Nov '03

Hi, I've been just testing 0.99.10.2 and had a really hard time getting the new Dovecot to start properly. First I thought it was an error in my old dovecot.conf, but the actual problem turned out to be simply that Dovecot was compiled without SSL/TLS support (I hadn't noticed this), but dovecot.conf on the other hand specified SSL/TLS ports. The error messages might be a bit more informative in this case. Currently I only got this to my logs: --cut-- Nov 18 18:17:00 dovecot: Dovecot starting up Nov 18 18:17:01 imap-login: BUG: SSL initialization parameters not given while they should have been Nov 18 18:17:01 imap-login: BUG: SSL initialization parameters not given while they should have been Nov 18 18:17:01 pop3-login: BUG: SSL initialization parameters not given while they should have been Nov 18 18:17:01 imap-login: BUG: SSL initialization parameters not given while they should have been Nov 18 18:17:01 dovecot: Login process died too early - shutting down Nov 18 18:17:01 dovecot: child 18482 (login) returned error 89 Nov 18 18:17:01 dovecot: child 18481 (login) returned error 89 Nov 18 18:17:01 dovecot: child 18480 (login) returned error 89 Nov 18 18:17:01 dovecot: child 18479 (login) returned error 89 --cut-- ... and Dovecot would exit. Running Dovecot under gdb would just exit (even with -F), and segfault if ran under strace. So it took a while before I realized that configure had not even detected SSL/TLS... Oh well, not a big thing, but still something to keep in mind. -- http://www.eca.cx Audio software for Linux!

1 0

Re: [Dovecot] Problem with DIGEST-MD5 authentication and plainte xt passwords
by Matthew Reimer 18 Nov '03

18 Nov '03

Maikel Verheijen wrote: > For what it's worth: > > We use postgres userlookups, and use an older version of dovecot (an old > cvs version of around 0.99.9.1), and we DO use digest-md5 password > encryption in the database and realms. It seems to work flawlessly in > our situation, I used kmail, evolution, apple-mail, entourage, outlook, > outlook-express and mutt. > > > Have there been changes in the digest-md5 code since 0.99.9.1 ? > > > Kind regards, > > > Maikel Verheijen > Ladot Nederland BV. The problem is not with passwords that are stored in the db in digest-md5 format (i.e., as an md5 hash of user:realm:password), but with dovecot's password_generate() that takes the username and password and hashes it on the fly. Matt

2 1

Re: [Dovecot] Problem with DIGEST-MD5 authentication and plaintext passwords
by Matthew Reimer 18 Nov '03

18 Nov '03

Timo Sirainen wrote: > On Wed, 2003-11-12 at 03:09, Matthew Reimer wrote: > >>I wasn't able to get DIGEST-MD5 authentication working with passwords >>stored as plaintext until I tweaked password_generate() to make it not >>use the domain portion of user(a)domain.com as the realm. Both evolution >>and kmail send the email address as the username with no realm; when >>dovecot tries to convert the username to user + realm, the hash is >>different and so DIGEST-MD5 authentication fails. Having >>password_generate() hash user@domain.com::password instead of >>user:domain.com:password fixes it. I need this to work because I need to >>support all of PLAIN, CRAM-MD5, and DIGEST-MD5 at the same time. >> >>Timo, do you think this is a proper fix, or are kmail and evolution broken? > > > Well .. Looks like most clients don't actually use realms, but I rather > wouldn't completely drop support for them which your change would do. > > Correct fix would be to separate realm and "@domain" handling in code, > that should work with both cases. I'll see if I can get that done. Thanks Timo. Send me a patch when you're done and I'll test it. Matt

1 0

[Dovecot] Children, HasChildren
by Miquel van Smoorenburg 17 Nov '03

17 Nov '03

Hello, I'm using dovecot 0.99.10.2 on a debian box. Mailstore is maildir. If I list the IMAP hierarchy in mutt (debian, 1.5.4+20031024-1) it shows all my plain mailboxes as having subfolders - while none of them have. I straced mutt and this is the IMAP exchange (a bit reformatted for readability): write(6, "a0001 LSUB \"\" \"%\"\r\n", 19) = 19 read(3, " * LSUB () \".\" \"Drafts\" * LSUB () \".\" \"INBOX\" * LSUB () \".\" \"Sent\" * LSUB () \".\" \"Trash\" * LSUB (\\Noselect \\Children) \".\" \"broadband\" * LSUB (\\Noselect \\Children) \".\" \"cistron\" * LSUB (\\Noselect \\Children) \".\" \"debian\" * LSUB (\\Noselect \\Children) \".\" \"ip\" * LSUB (\\Noselect \\Children) \".\" \"lists\" * LSUB (\\Noselect \\Children) \".\" \"prive\" a0001 OK Lsub completed. ", 1024) = 374 Now this is strange - I read RFC3348 and shouldn't \\Children be \\HasChildren, also shouldn't the plain mailboxes (first four) be listed with \\HasNoChildren ? Mike.

2 3

[Dovecot] Corrupted index files
by Tomi Hakala 17 Nov '03

17 Nov '03

Hi, I'm playing with Dovecot in a lab environment and got it in state where it crashes on every incoming connection. I moved mail spool from ext2 file system to a ReiserFS on a another disk, mount point changed from /var/vmail to /spool/vmail. After that I managed to open mailbox and I moved about 2000 messages from INBOX to a subfolder. Then I tried to open mailbox with POP3 and it didn't succeed, from that point pop3d and imapd died every time I logged in until I removed all index files by hand. This is what I have in logs. imap-login: Nov 17 13:30:53 Info: Login: tomi.hakala(a)xx.fi [xx.xx.xx.xx] pop3-login: Nov 17 13:32:04 Info: Login: tomi.hakala(a)xx.fi [xx.xx.xx.xx] pop3(tomi.hakala(a)xx.fi): Nov 17 13:32:04 Error: Corrupted index file /spool/vmail/xx.fi/tomi.hakala(a)xx.fi/Maildir/.INBOX/.imap.index: Sequence 1848 not found from binary tree (5398 msgs says header) pop3-login: Nov 17 13:32:12 Info: Login: tomi.hakala(a)xx.fi [xx.xx.xx.xx] pop3(tomi.hakala(a)xx.fi): Nov 17 13:32:21 Error: Couldn't lock created modify log file /spool/vmail/xx.fi/tomi.hakala(a)xx.fi/Maildir/.INBOX/.imap.index.log imap(tomi.hakala(a)xx.fi): Nov 17 14:09:32 Error: IndexID mismatch for modify log file /spool/vmail/xx.fi/tomi.hakala(a)xx.fi/Maildir/.INBOX/.imap.index.log imap(tomi.hakala(a)xx.fi): Nov 17 14:09:33 Panic: file mail-tree-redblack.c: line 187 (rb_left_rotate): assertion failed: (node[x].right != RBNULL) dovecot: Nov 17 14:09:33 Error: child 19984 (imap) killed with signal 6 imap-login: Nov 17 14:27:24 Info: Login: tomi.hakala(a)xx.fi [xx.xx.xx.xx] imap(tomi.hakala(a)xx.fi): Nov 17 14:27:24 Panic: file mail-tree-redblack.c: line 232 (rb_right_rotate): assertion failed: (node[y].left != RBNULL) dovecot: Nov 17 14:27:24 Error: child 10478 (imap) killed with signal 6 -- Tomi Hakala

1 0

[Dovecot] Problem with DIGEST-MD5 authentication and plaintext passwords
by Matthew Reimer 17 Nov '03

17 Nov '03

I wasn't able to get DIGEST-MD5 authentication working with passwords stored as plaintext until I tweaked password_generate() to make it not use the domain portion of user(a)domain.com as the realm. Both evolution and kmail send the email address as the username with no realm; when dovecot tries to convert the username to user + realm, the hash is different and so DIGEST-MD5 authentication fails. Having password_generate() hash user@domain.com::password instead of user:domain.com:password fixes it. I need this to work because I need to support all of PLAIN, CRAM-MD5, and DIGEST-MD5 at the same time. Timo, do you think this is a proper fix, or are kmail and evolution broken? Matt

3 2

[Dovecot] MySQL patch + Debian
by James Tyson 17 Nov '03

17 Nov '03

Hi folks. Sorry to post here about a patch that hasn't been officially integrated into Dovecot, however I am trying to get it going and seem to have hit a dead end. I downloaded the Debianised source for Dovecot (0.99.10-9) from sarge: > wedge:/usr/local/src# apt-get -t testing source dovecot then applied the latest MySQL patch that I could find on the list: > wedge:/usr/local/src/dovecot-0.99.10# cat ../dovecot-mysql.patch | > patch -p 2 and manually fixed a merge issue with src/auth/master-connection.c, fiddled with the debian changelog to indicate the patch and then used dpkg-buildpackage -b to compile the package. Everything looked to build alright and I grepped the output to make sure that it compiled userdb-mysql.o and passdb-mysql.o into dovecot-auth. Problem is that dovecot-auth says "Unknown userdb type 'mysql'" and an ldd of /src/auth/dovecot-auth shows no libmysqlclient10: > wedge:/usr/local/src/dovecot-0.99.10# ldd src/auth/dovecot-auth > libpam.so.0 => /lib/libpam.so.0 (0x4001a000) > libldap.so.2 => /usr/lib/libldap.so.2 (0x40022000) > libpq.so.3 => /usr/lib/libpq.so.3 (0x4005a000) > libcrypt.so.1 => /lib/libcrypt.so.1 (0x4006e000) > libdl.so.2 => /lib/libdl.so.2 (0x4009c000) > libc.so.6 => /lib/libc.so.6 (0x4009f000) > liblber.so.2 => /usr/lib/liblber.so.2 (0x401cd000) > libresolv.so.2 => /lib/libresolv.so.2 (0x401da000) > libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x401ec000) > libgnutls.so.7 => /usr/lib/libgnutls.so.7 (0x401fe000) > libssl.so.0.9.7 => /usr/lib/i686/cmov/libssl.so.0.9.7 > (0x40231000) > libcrypto.so.0.9.7 => /usr/lib/i686/cmov/libcrypto.so.0.9.7 > (0x40260000) > libkrb5.so.17 => /usr/lib/libkrb5.so.17 (0x40351000) > libnsl.so.1 => /lib/libnsl.so.1 (0x40387000) > /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000) > libtasn1.so.0 => /usr/lib/libtasn1.so.0 (0x4039c000) > libgcrypt.so.1 => /usr/lib/libgcrypt.so.1 (0x403aa000) > libz.so.1 => /usr/lib/libz.so.1 (0x403e8000) > libcom_err.so.1 => /usr/lib/libcom_err.so.1 (0x403f7000) > libkrb.so.1 => /usr/lib/libkrb.so.1 (0x403f9000) > libasn1.so.6 => /usr/lib/libasn1.so.6 (0x40415000) > libroken.so.16 => /usr/lib/libroken.so.16 (0x40435000) > libdb3.so.3 => /usr/lib/libdb3.so.3 (0x40445000) Anyone know what I'm missing? --- James Tyson Director, Giant Robot Ltd http://www.giantrobot.co.nz/

2 2

[Dovecot] Migrate from Courier-imap
by Jerry Chiu 16 Nov '03

16 Nov '03

Hi, I have a redhat server running courier-imap + squirrelmail webmail. I am migrating to dovecot... the problem is - the existing sub-folders are all disappear from the folder list. What can I do to fix this problem? Thanks, Jerry Chiu

2 1

[Dovecot] namesapce patch
by Farkas Levente 16 Nov '03

16 Nov '03

hi, where can I find the namspace patch? I remember there was an email on this list, that if I'd not like to open all sufolder's in mozilla's mailer on startup, but I'd like to start mozilla to open all subfolder I've to apply the namespace patch. now it getting more and more anoying so I'd like to apply, but I can't find it... thanks. -- Levente "Si vis pacem para bellum!"

2 1

[Dovecot] dovecot vs cyrus, uw, etc.
by Scott Klein 13 Nov '03

13 Nov '03

I've been doing research on switching our current e-mail server (qpopper, sendmail) to imap. The decision on which server to use is essentially down to Cyrus and Dovecot -- I like Cyrus' approach to a lot of things, but the "blackbox" nature of it makes some niceties like using spamassassin and procmail difficult, or at least counterintuitive. Dovecot seems to play nicer with other apps. I'm a bit concerned with stability, though. Although we don't have a lot of users (about 60) they're all very big e-mail users -- my users rely on their e-mail more than on their phones. We can't afford any downtime, and with our pop3 server, we haven't had any. Does anybody on this list use Dovecot to serve mission critical e-mail to an entire company? What kind of uptime can I expect? Is it genuinely ready for prime time? Has anybody here migrated from a recent release of Cyrus and can compare apples-to-apples? Many thanks, Scott Klein -- Scott Klein Web Publisher/Director of Technology The Nation Magazine http://www.thenation.com

8 8

[Dovecot] 0.99.10.2 for debian
by Jaldhar H. Vyas 12 Nov '03

12 Nov '03

I just uploaded it to sid. A woody backport is available from http://www.braincells.com/open/ I came across an error: giving --without-cyrus-sasl2 to the configure script doesn't work i.e. it looks for -lsasl anyway. Other than that, it seems to be working fine. -- Jaldhar H. Vyas <jaldhar(a)debian.org> La Salle Debain - http://www.braincells.com/debian/

1 0

Re: [Dovecot] Bug with partial IMAP fetches
by Matthew Reimer 11 Nov '03

11 Nov '03

--- message-send.c.orig Sun Jun 22 18:09:48 2003 +++ message-send.c Tue Nov 4 12:53:04 2003 @@ -31,12 +31,11 @@ if (msg_size->physical_size == msg_size->virtual_size && !fix_nuls) { /* no need to kludge with CRs, we can use sendfile() */ - i_stream_skip(input, virtual_skip); old_limit = input->v_limit; limit = input->v_offset + max_virtual_size; i_stream_set_read_limit(input, I_MIN(limit, old_limit)); - ret = o_stream_send_istream(output, input) > 0; + ret = o_stream_send_istream(output, input); i_stream_set_read_limit(input, old_limit); return ret;

2 2

[Dovecot] PATCH: CRAM-MD5 for Dovecot
by Joshua Goodall 11 Nov '03

11 Nov '03

Hi Timo, Mozilla 1.5 doesn't understand DIGEST-MD5; it only speaks CRAM-MD5 or PLAIN. Maybe other clients have the same problem. My users like Mozilla, so I wrote new code for Dovecot to speak CRAM-MD5, using your mech-digest-md5.c as a reference. Attached diff in two formats i) for current CVS ii) against last release both tested and working with Mozilla and KMail's CRAM-MD5. I don't know if I've caught precisely the coding style you use for Dovecot. I hope so, but I'm unsure if I've used your string and buffer libraries properly. Please enlighten me if you have time. Would you consider including this in the next release? Regards, Joshua -- Joshua Goodall joshua(a)roughtrade.net "Your object hit ratio is weak, old man" "If you cache me now, I will dump more core than you can possibly imagine"

2 4

[Dovecot] Problems with Linux 2.6
by Aredridel 10 Nov '03

10 Nov '03

I'm running Dovecot under PLD GNU/Linux, on two servers. Under kernel 2.4, it works wonderfully. Under 2.6, I get this in the log: Nov 9 21:36:38 polis dovecot: Dovecot starting up Nov 9 21:36:39 polis imap-login: setuid(97) failed: Resource temporarily unavailable Nov 9 21:36:39 polis imap-login: setuid(97) failed: Resource temporarily unavailable Nov 9 21:36:39 polis pop3-login: setuid(97) failed: Resource temporarily unavailable Nov 9 21:36:39 polis pop3-login: setuid(97) failed: Resource temporarily unavailable Nov 9 21:36:39 polis dovecot: Login process died too early - shutting down Nov 9 21:36:39 polis dovecot: child 32404 (login) returned error 89 Nov 9 21:36:39 polis dovecot: child 32405 (login) returned error 89 Nov 9 21:36:39 polis dovecot: child 32406 (login) returned error 89 Nov 9 21:36:39 polis dovecot: child 32408 (login) returned error 89 Nov 9 21:36:39 polis pop3-login: fd_send(-1) failed: Broken pipe Any ideas? the setuid32() call is returning EAGAIN, though I have no resource limits on user nobody (nor does it work as a dovecot user). Aredridel

2 1

[Dovecot] openssl decryption failed
by Tom Allison 09 Nov '03

09 Nov '03

I've got dovecot working on imap But when I try to run imaps I get: imap-login: Nove 08 19:11:19 Warning: SSL_accept() failed: error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac [192.168.1.103] Now I'm not sure if theres any difference here, but I don't have string for 'login = imaps' or 'login = pop3s' to match with my protocols string I also don't have any specific imaps_listen interface defined, but since there's something in the logs, I assume that this is not a problem. SETUP fluffy:~ # egrep "^\w" /usr/local/etc/dovecot.conf base_dir = /var/run/dovecot/ protocols = imap imaps pop3s log_path = /var/log/dovecot.log info_log_path = /var/log/dovecot.info login = imap login = pop3 verbose_ssl = yes auth = default auth_mechanisms = plain auth_userdb = passwd auth_passdb = pam auth_user = root auth_verbose = yes

2 2

[Dovecot] openssl config.
by Tom Allison 09 Nov '03

09 Nov '03

I checked and I do have the openssl-devel rpm installed SuSE 8.2 openssl-devel-0.9.6i-12 openssl-0.9.61-19 dovecot 0.99.10 ./configure --with-ssl-openssl At the end of the configuration it says ssl support == 'no' :(... I was able to get pam support by picking up the pam-devel modules as suggested. But I got stuck here. After reading up a bit on imap, it seems reasonable to have both imap and imap-ssl support. imap for localhost connections (like squirrelmail) and imap-ssl for everything else.

1 2

[Dovecot] 0.99.10.1 RC
by Timo Sirainen 08 Nov '03

08 Nov '03

Available from http://dovecot.fi/rc/ While still waiting for .11 with index file rewrites to stabilize, here's a release candidate for 0.99.10.1 which is basically 0.99.10 patched with most of the simple bugfixes from CVS. Some bugfixes such as LIST's children-flags were done with larger rewrites so I didn't try to apply them. All the changes are listed in ChangeLog. The important changes are: * mbox: \Draft and \Deleted flags used opposite flag chars in X-Status header. We were incompatible with other mbox accessing software. WARNING: Upgrading from previous version doesn't automatically swap the flags, so be careful not to accidentally expunge messages that had their \Draft flag changed to \Deleted. * Configuration file changes: - Whitespace at end of line is stripped, use quotes if you need it - # comments are supported after key=value lines. if you need '#' character, quote the value - Both " and ' quotes are supported. If you need to use them, '\' can be used for escaping. - mbox: COPY into same mailbox didn't work and could have corrupted the mailbox - Using Dovecot without index files would crash after using a while - Partial BODY[header] or BODY[part] fetches were buggy if client requested more data than was available in the header/part. - Partial BODY[...] fetches were buggy with messages that had CRLFs - Some BODY and BODYSTRUCTURE replies missed data for message/rfc822 MIME parts causing clients to break - SORT (SUBJECT) was buggy - Timezone fixes with Date-header

1 0

[Dovecot] [POP3] RFC2449 conformance?
by Matthias Andree 08 Nov '03

08 Nov '03

RFC2449 Section 5 ("Capabilities available in the AUTHORIZATION state MUST be announced in both states.") requires that POP3 extensions offered in Authentication state MUST be offered in Transaction state as well, this affects the "SASL" extension. This is a CVS version that is a couple of days old (the old 0.99.10 wouldn't run on Linux 2.6 because it has tighter resource limiting): +OK dovecot ready. capa +OK CAPA TOP USER UIDL RESP-CODES SASL PLAIN . user SECRET +OK pass VERYSECRET +OK Logged in. capa +OK CAPA TOP USER UIDL RESP-CODES . quit +OK Logging out. -- Matthias Andree

2 3

[Dovecot] evolution - folders not displayed correctly
by Terry 08 Nov '03

08 Nov '03

Hello, First, I used thunderbird, and everything looks great. I tried my account in evolution and all the folders appear in one level and not in several as they were in thunderbird. Inbox Inbox.foo Inbox.bar instead of Inbox foo bar What could be the problem? Thanks! ===== Terry __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com

2 7

[Dovecot] pop3s fails, imaps works great
by Darren David 08 Nov '03

08 Nov '03

hey all- i'm running dovecot-0.99.10p2 on OpenBSD 3.4-snapshot (installed from ports). i have had 0 problems with imaps -- it's been running like a charm! however, i'm trying to get pop3s set up for some of my users, but i can't seem to connect from ANY client. in /etc/dovecot.conf, i've got: protocols = imaps pop3s and i've also got pop3s_listen set up with the same IP as imaps. i'm using vpopmail for auth. nmap shows that port 995 is open, and netstat does show an established connection to pop3s when i attempt to connect, but i see no activity in the dovecot log, and the client just churns and churns and eventually i have to quit it since i get no response. any ideas what i could have wrong, or how to test? thanks in advance, darren david

1 0

[Dovecot] PATCH: make local IP address available to auth modules
by Matthew Reimer 04 Nov '03

04 Nov '03

The attached patch makes the local IP address to which the client connected available to the authentication modules; i.e., the local IP address is available for substitution as %i for the mysql and pgsql modules. We needed this feature to support thousands of our legacy accounts which are authenticated by username/local_part (not the full email address) and IP address (one per domain). Timo, would this be acceptable to commit? One further improvement would be to make the remote IP address available as well, in case one wanted to implement a tcpwrapper-like functionality. Matt diff -u -r work.patched/dovecot-0.99.10/src/auth/auth-login-interface.h work/dovecot-0.99.10/src/auth/auth-login-interface.h --- work.patched/dovecot-0.99.10/src/auth/auth-login-interface.h Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/auth-login-interface.h Fri Oct 24 13:57:18 2003 @@ -1,6 +1,8 @@ #ifndef __AUTH_LOGIN_INTERFACE_H #define __AUTH_LOGIN_INTERFACE_H +#include "network.h" + /* max. size for auth_login_request_continue.data[] */ #define AUTH_LOGIN_MAX_REQUEST_DATA_SIZE 4096 @@ -47,6 +49,7 @@ struct auth_login_request_new { enum auth_login_request_type type; /* AUTH_LOGIN_REQUEST_NEW */ unsigned int id; /* unique ID for the request */ + struct ip_addr ip_local; enum auth_mech mech; enum auth_protocol protocol; @@ -56,6 +59,7 @@ struct auth_login_request_continue { enum auth_login_request_type type; /* AUTH_LOGIN_REQUEST_CONTINUE */ unsigned int id; + struct ip_addr ip_local; size_t data_size; /* unsigned char data[]; */ diff -u -r work.patched/dovecot-0.99.10/src/auth/master-connection.c work/dovecot-0.99.10/src/auth/master-connection.c --- work.patched/dovecot-0.99.10/src/auth/master-connection.c Fri Aug 22 17:56:18 2003 +++ work/dovecot-0.99.10/src/auth/master-connection.c Fri Oct 24 13:57:35 2003 @@ -133,8 +133,9 @@ } send_reply(&failure_reply, sizeof(failure_reply), request->tag); } else { - userdb->lookup(auth_request->user, userdb_callback, - POINTER_CAST(request->tag)); + userdb->lookup(auth_request->user, + net_ip2addr(&auth_request->ip_local), + userdb_callback, POINTER_CAST(request->tag)); mech_request_free(login_conn, auth_request, request->id); } } diff -u -r work.patched/dovecot-0.99.10/src/auth/mech.c work/dovecot-0.99.10/src/auth/mech.c --- work.patched/dovecot-0.99.10/src/auth/mech.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/mech.c Fri Oct 24 13:57:51 2003 @@ -97,6 +97,7 @@ auth_request->created = ioloop_time; auth_request->conn = conn; auth_request->id = request->id; + auth_request->ip_local = request->ip_local; auth_request->protocol = request->protocol; hash_insert(conn->auth_requests, POINTER_CAST(request->id), diff -u -r work.patched/dovecot-0.99.10/src/auth/mech.h work/dovecot-0.99.10/src/auth/mech.h --- work.patched/dovecot-0.99.10/src/auth/mech.h Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/mech.h Fri Oct 24 13:58:02 2003 @@ -14,6 +14,7 @@ struct login_connection *conn; unsigned int id; + struct ip_addr ip_local; time_t created; enum auth_protocol protocol; diff -u -r work.patched/dovecot-0.99.10/src/auth/passdb-ldap.c work/dovecot-0.99.10/src/auth/passdb-ldap.c --- work.patched/dovecot-0.99.10/src/auth/passdb-ldap.c Thu Mar 20 09:55:57 2003 +++ work/dovecot-0.99.10/src/auth/passdb-ldap.c Fri Oct 24 13:58:20 2003 @@ -145,7 +145,8 @@ passdb_ldap_conn->attr_names[ATTR_VIRTUAL_USER], user); } else { str = t_str_new(512); - var_expand(str, conn->set.pass_filter, user, NULL); + var_expand(str, conn->set.pass_filter, user, NULL, + net_ip2addr(&auth_request->ip_local)); filter = str_c(str); } diff -u -r work.patched/dovecot-0.99.10/src/auth/passdb-mysql.c work/dovecot-0.99.10/src/auth/passdb-mysql.c --- work.patched/dovecot-0.99.10/src/auth/passdb-mysql.c Fri Aug 29 17:47:24 2003 +++ work/dovecot-0.99.10/src/auth/passdb-mysql.c Fri Oct 24 13:58:31 2003 @@ -109,7 +109,8 @@ str = t_str_new(512); var_expand(str, conn->set.password_query, - str_escape(auth_request->user), NULL); + str_escape(auth_request->user), NULL, + net_ip2addr(&auth_request->ip_local)); query = str_c(str); mysql_request->callback = mysql_handle_request; diff -u -r work.patched/dovecot-0.99.10/src/auth/passdb-pgsql.c work/dovecot-0.99.10/src/auth/passdb-pgsql.c --- work.patched/dovecot-0.99.10/src/auth/passdb-pgsql.c Fri Apr 4 06:17:25 2003 +++ work/dovecot-0.99.10/src/auth/passdb-pgsql.c Fri Oct 24 14:01:08 2003 @@ -105,7 +105,8 @@ str = t_str_new(512); var_expand(str, conn->set.password_query, - str_escape(auth_request->user), NULL); + str_escape(auth_request->user), NULL, + net_ip2addr(&auth_request->ip_local)); query = str_c(str); pgsql_request->callback = pgsql_handle_request; diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-ldap.c work/dovecot-0.99.10/src/auth/userdb-ldap.c --- work.patched/dovecot-0.99.10/src/auth/userdb-ldap.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/userdb-ldap.c Fri Oct 24 15:46:21 2003 @@ -142,8 +142,8 @@ t_pop(); } -static void userdb_ldap_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void userdb_ldap_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct ldap_connection *conn = userdb_ldap_conn->conn; struct userdb_ldap_request *request; @@ -156,7 +156,7 @@ userdb_ldap_conn->attr_names[ATTR_VIRTUAL_USER], user); } else { str = t_str_new(512); - var_expand(str, conn->set.user_filter, user, NULL); + var_expand(str, conn->set.user_filter, user, NULL, ip_local); filter = str_c(str); } diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-mysql.c work/dovecot-0.99.10/src/auth/userdb-mysql.c --- work.patched/dovecot-0.99.10/src/auth/userdb-mysql.c Fri Oct 24 15:07:12 2003 +++ work/dovecot-0.99.10/src/auth/userdb-mysql.c Fri Oct 24 14:58:08 2003 @@ -115,8 +115,8 @@ } } -static void userdb_mysql_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void userdb_mysql_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct mysql_connection *conn = userdb_mysql_conn->conn; struct userdb_mysql_request *request; @@ -124,7 +124,8 @@ string_t *str; str = t_str_new(512); - var_expand(str, conn->set.user_query, str_escape(user), NULL); + var_expand(str, conn->set.user_query, str_escape(user), NULL, + ip_local); query = str_c(str); request = i_malloc(sizeof(struct userdb_mysql_request) + strlen(user)); diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-passwd-file.c work/dovecot-0.99.10/src/auth/userdb-passwd-file.c --- work.patched/dovecot-0.99.10/src/auth/userdb-passwd-file.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/userdb-passwd-file.c Fri Oct 24 15:28:09 2003 @@ -11,8 +11,8 @@ struct passwd_file *userdb_pwf = NULL; -static void passwd_file_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void passwd_file_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct user_data data; struct passwd_user *pu; diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-passwd.c work/dovecot-0.99.10/src/auth/userdb-passwd.c --- work.patched/dovecot-0.99.10/src/auth/userdb-passwd.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/userdb-passwd.c Fri Oct 24 15:28:26 2003 @@ -10,8 +10,8 @@ #include <pwd.h> -static void passwd_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void passwd_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct user_data data; struct passwd *pw; diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-pgsql.c work/dovecot-0.99.10/src/auth/userdb-pgsql.c --- work.patched/dovecot-0.99.10/src/auth/userdb-pgsql.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/userdb-pgsql.c Fri Oct 24 15:45:51 2003 @@ -84,8 +84,8 @@ } } -static void userdb_pgsql_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void userdb_pgsql_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct pgsql_connection *conn = userdb_pgsql_conn->conn; struct userdb_pgsql_request *request; @@ -93,7 +93,7 @@ string_t *str; str = t_str_new(512); - var_expand(str, conn->set.user_query, str_escape(user), NULL); + var_expand(str, conn->set.user_query, str_escape(user), NULL, ip_local); query = str_c(str); request = i_malloc(sizeof(struct userdb_pgsql_request) + strlen(user)); diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-static.c work/dovecot-0.99.10/src/auth/userdb-static.c --- work.patched/dovecot-0.99.10/src/auth/userdb-static.c Wed Feb 19 18:46:51 2003 +++ work/dovecot-0.99.10/src/auth/userdb-static.c Fri Oct 24 15:30:40 2003 @@ -16,8 +16,8 @@ static gid_t static_gid; static char *static_home_template; -static void static_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void static_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct user_data data; string_t *str; @@ -29,7 +29,7 @@ data.virtual_user = data.system_user = user; str = t_str_new(256); - var_expand(str, static_home_template, user, NULL); + var_expand(str, static_home_template, user, NULL, ip_local); data.home = str_c(str); callback(&data, context); diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-vpopmail.c work/dovecot-0.99.10/src/auth/userdb-vpopmail.c --- work.patched/dovecot-0.99.10/src/auth/userdb-vpopmail.c Thu Mar 20 09:46:33 2003 +++ work/dovecot-0.99.10/src/auth/userdb-vpopmail.c Fri Oct 24 15:29:24 2003 @@ -46,8 +46,8 @@ #ifdef USERDB_VPOPMAIL -static void vpopmail_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void vpopmail_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { char vpop_user[VPOPMAIL_LIMIT], vpop_domain[VPOPMAIL_LIMIT]; struct vqpasswd *vpw; diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb.h work/dovecot-0.99.10/src/auth/userdb.h --- work.patched/dovecot-0.99.10/src/auth/userdb.h Fri Aug 22 13:07:53 2003 +++ work/dovecot-0.99.10/src/auth/userdb.h Fri Oct 24 15:47:11 2003 @@ -17,8 +17,8 @@ void (*init)(const char *args); void (*deinit)(void); - void (*lookup)(const char *user, userdb_callback_t *callback, - void *context); + void (*lookup)(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context); }; extern struct userdb_module *userdb; diff -u -r work.patched/dovecot-0.99.10/src/imap-login/client.c work/dovecot-0.99.10/src/imap-login/client.c --- work.patched/dovecot-0.99.10/src/imap-login/client.c Wed Jun 25 20:02:04 2003 +++ work/dovecot-0.99.10/src/imap-login/client.c Fri Oct 24 14:21:46 2003 @@ -49,7 +49,7 @@ if (!verbose_proctitle || !process_per_connection) return; - addr = net_ip2addr(&client->common.ip); + addr = net_ip2addr(&client->common.ip_remote); if (addr == NULL) addr = "??"; @@ -126,7 +126,7 @@ client->common.io = NULL; } - fd_ssl = ssl_proxy_new(client->common.fd, &client->common.ip); + fd_ssl = ssl_proxy_new(client->common.fd, &client->common.ip_remote); if (fd_ssl != -1) { client->tls = TRUE; client_set_title(client); @@ -338,7 +338,8 @@ } } -struct client *client_create(int fd, struct ip_addr *ip, int ssl) +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl) { struct imap_client *client; @@ -357,7 +358,8 @@ client->refcount = 1; client->tls = ssl; - client->common.ip = *ip; + client->common.ip_remote = *ip_remote; + client->common.ip_local = *ip_local; client->common.fd = fd; client_open_streams(client, fd); @@ -439,7 +441,7 @@ { const char *addr; - addr = net_ip2addr(&client->common.ip); + addr = net_ip2addr(&client->common.ip_remote); if (addr == NULL) addr = "??"; diff -u -r work.patched/dovecot-0.99.10/src/imap-login/client.h work/dovecot-0.99.10/src/imap-login/client.h --- work.patched/dovecot-0.99.10/src/imap-login/client.h Tue Mar 4 19:43:04 2003 +++ work/dovecot-0.99.10/src/imap-login/client.h Fri Oct 24 14:23:02 2003 @@ -30,7 +30,8 @@ unsigned int destroyed:1; }; -struct client *client_create(int fd, struct ip_addr *ip, int ssl); +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl); void client_destroy(struct imap_client *client, const char *reason); void client_ref(struct imap_client *client); diff -u -r work.patched/dovecot-0.99.10/src/lib/var-expand.c work/dovecot-0.99.10/src/lib/var-expand.c --- work.patched/dovecot-0.99.10/src/lib/var-expand.c Sun Jan 26 19:27:51 2003 +++ work/dovecot-0.99.10/src/lib/var-expand.c Fri Oct 17 13:12:51 2003 @@ -5,7 +5,7 @@ #include "var-expand.h" void var_expand(string_t *dest, const char *str, - const char *user, const char *home) + const char *user, const char *home, const char *ip) { const char *var; unsigned int width; @@ -36,6 +36,9 @@ case 'd': var = strchr(user, '@'); if (var != NULL) var++; + break; + case 'i': + var = ip; break; default: str_append_c(dest, '%'); diff -u -r work.patched/dovecot-0.99.10/src/lib/var-expand.h work/dovecot-0.99.10/src/lib/var-expand.h --- work.patched/dovecot-0.99.10/src/lib/var-expand.h Sun Jan 26 19:27:51 2003 +++ work/dovecot-0.99.10/src/lib/var-expand.h Fri Oct 17 13:13:08 2003 @@ -6,8 +6,9 @@ %u user or user@domain %h home %n user - %d domain */ + %d domain + %i ip */ void var_expand(string_t *dest, const char *str, - const char *user, const char *home); + const char *user, const char *home, const char *ip); #endif diff -u -r work.patched/dovecot-0.99.10/src/login-common/auth-connection.c work/dovecot-0.99.10/src/login-common/auth-connection.c --- work.patched/dovecot-0.99.10/src/login-common/auth-connection.c Mon May 26 10:27:13 2003 +++ work/dovecot-0.99.10/src/login-common/auth-connection.c Fri Oct 24 14:47:17 2003 @@ -325,6 +325,7 @@ auth_request.protocol = protocol; auth_request.mech = request->mech; auth_request.id = request->id; + auth_request.ip_local = ((struct client *) request->context)->ip_local; if (o_stream_send(request->conn->output, &auth_request, sizeof(auth_request)) < 0) { errno = request->conn->output->stream_errno; @@ -342,6 +343,7 @@ /* send continued request to auth */ auth_request.type = AUTH_LOGIN_REQUEST_CONTINUE; auth_request.id = request->id; + auth_request.ip_local = ((struct client *) request->context)->ip_local; auth_request.data_size = data_size; if (o_stream_send(request->conn->output, &auth_request, diff -u -r work.patched/dovecot-0.99.10/src/login-common/client-common.h work/dovecot-0.99.10/src/login-common/client-common.h --- work.patched/dovecot-0.99.10/src/login-common/client-common.h Tue Mar 4 19:43:04 2003 +++ work/dovecot-0.99.10/src/login-common/client-common.h Fri Oct 24 14:23:58 2003 @@ -5,7 +5,8 @@ #include "master.h" struct client { - struct ip_addr ip; + struct ip_addr ip_remote; + struct ip_addr ip_local; int fd; struct io *io; @@ -17,7 +18,8 @@ /* ... */ }; -struct client *client_create(int fd, struct ip_addr *ip, int ssl); +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl); unsigned int clients_get_count(void); void clients_notify_auth_process(void); diff -u -r work.patched/dovecot-0.99.10/src/login-common/main.c work/dovecot-0.99.10/src/login-common/main.c --- work.patched/dovecot-0.99.10/src/login-common/main.c Sun Jun 22 18:09:48 2003 +++ work/dovecot-0.99.10/src/login-common/main.c Fri Oct 24 14:25:02 2003 @@ -75,28 +75,30 @@ static void login_accept(void *context __attr_unused__) { - struct ip_addr ip; + struct ip_addr ip_remote, ip_local; int fd; - fd = net_accept(LOGIN_LISTEN_FD, &ip, NULL); + fd = net_accept(LOGIN_LISTEN_FD, &ip_remote, NULL); if (fd < 0) { if (fd < -1) i_fatal("accept() failed: %m"); return; } + net_getsockname(fd, &ip_local, NULL); + if (process_per_connection) main_close_listen(); - (void)client_create(fd, &ip, FALSE); + (void)client_create(fd, &ip_remote, &ip_local, FALSE); } static void login_accept_ssl(void *context __attr_unused__) { - struct ip_addr ip; + struct ip_addr ip_remote, ip_local; int fd, fd_ssl; - fd = net_accept(LOGIN_SSL_LISTEN_FD, &ip, NULL); + fd = net_accept(LOGIN_SSL_LISTEN_FD, &ip_remote, NULL); if (fd < 0) { if (fd < -1) i_fatal("accept() failed: %m"); @@ -106,11 +108,12 @@ if (process_per_connection) main_close_listen(); - fd_ssl = ssl_proxy_new(fd, &ip); + fd_ssl = ssl_proxy_new(fd, &ip_remote); if (fd_ssl == -1) net_disconnect(fd); - else - (void)client_create(fd_ssl, &ip, TRUE); + + net_getsockname(fd_ssl, &ip_local, NULL); + (void)client_create(fd_ssl, &ip_remote, &ip_local, TRUE); } static void open_logfile(const char *name) @@ -219,7 +222,7 @@ int main(int argc __attr_unused__, char *argv[], char *envp[]) { const char *name, *group_name; - struct ip_addr ip; + struct ip_addr ip_remote, ip_local; int i, fd = -1, master_fd = -1; is_inetd = getenv("DOVECOT_MASTER") == NULL; @@ -257,7 +260,7 @@ main_init(); if (is_inetd) { - if (net_getsockname(1, &ip, NULL) < 0) { + if (net_getsockname(1, &ip_remote, NULL) < 0) { i_fatal("%s can be started only through dovecot " "master process, inetd or equilevant", argv[0]); } @@ -265,7 +268,7 @@ fd = 1; for (i = 1; i < argc; i++) { if (strcmp(argv[i], "--ssl") == 0) { - fd = ssl_proxy_new(fd, &ip); + fd = ssl_proxy_new(fd, &ip_remote); if (fd == -1) i_fatal("SSL initialization failed"); } else if (strncmp(argv[i], "--group=", 8) != 0) @@ -276,8 +279,10 @@ closing_down = TRUE; } - if (fd != -1) - (void)client_create(fd, &ip, TRUE); + if (fd != -1) { + net_getsockname(fd, &ip_local, NULL); + (void)client_create(fd, &ip_remote, &ip_local, TRUE); + } io_loop_run(ioloop); main_deinit(); diff -u -r work.patched/dovecot-0.99.10/src/login-common/master.c work/dovecot-0.99.10/src/login-common/master.c --- work.patched/dovecot-0.99.10/src/login-common/master.c Tue Mar 4 19:43:04 2003 +++ work/dovecot-0.99.10/src/login-common/master.c Fri Oct 24 14:25:57 2003 @@ -44,7 +44,7 @@ req.tag = client->fd; req.auth_pid = auth_pid; req.auth_id = auth_id; - req.ip = client->ip; + req.ip = client->ip_remote; if (fd_send(master_fd, client->fd, &req, sizeof(req)) != sizeof(req)) i_fatal("fd_send(%d) failed: %m", client->fd); diff -u -r work.patched/dovecot-0.99.10/src/master/mail-process.c work/dovecot-0.99.10/src/master/mail-process.c --- work.patched/dovecot-0.99.10/src/master/mail-process.c Fri Aug 22 18:04:27 2003 +++ work/dovecot-0.99.10/src/master/mail-process.c Fri Oct 17 13:25:54 2003 @@ -91,7 +91,7 @@ } /* expand %vars */ - var_expand(str, env, user, home); + var_expand(str, env, user, home, NULL); return str_c(str); } diff -u -r work.patched/dovecot-0.99.10/src/pop3-login/client.c work/dovecot-0.99.10/src/pop3-login/client.c --- work.patched/dovecot-0.99.10/src/pop3-login/client.c Mon May 26 10:27:13 2003 +++ work/dovecot-0.99.10/src/pop3-login/client.c Fri Oct 24 14:27:50 2003 @@ -42,7 +42,7 @@ if (!verbose_proctitle || !process_per_connection) return; - addr = net_ip2addr(&client->common.ip); + addr = net_ip2addr(&client->common.ip_remote); if (addr == NULL) addr = "??"; @@ -80,7 +80,7 @@ client->common.io = NULL; } - fd_ssl = ssl_proxy_new(client->common.fd, &client->common.ip); + fd_ssl = ssl_proxy_new(client->common.fd, &client->common.ip_remote); if (fd_ssl != -1) { client->tls = TRUE; client_set_title(client); @@ -231,7 +231,8 @@ } } -struct client *client_create(int fd, struct ip_addr *ip, int ssl) +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl) { struct pop3_client *client; @@ -250,7 +251,8 @@ client->refcount = 1; client->tls = ssl; - client->common.ip = *ip; + client->common.ip_remote = *ip_remote; + client->common.ip_local = *ip_local; client->common.fd = fd; client->common.io = io_add(fd, IO_READ, client_input, client); client_open_streams(client, fd); @@ -322,7 +324,7 @@ { const char *addr; - addr = net_ip2addr(&client->common.ip); + addr = net_ip2addr(&client->common.ip_remote); if (addr == NULL) addr = "??"; diff -u -r work.patched/dovecot-0.99.10/src/pop3-login/client.h work/dovecot-0.99.10/src/pop3-login/client.h --- work.patched/dovecot-0.99.10/src/pop3-login/client.h Tue Mar 4 19:43:04 2003 +++ work/dovecot-0.99.10/src/pop3-login/client.h Fri Oct 24 14:28:05 2003 @@ -24,7 +24,8 @@ unsigned int destroyed:1; }; -struct client *client_create(int fd, struct ip_addr *ip, int ssl); +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl); void client_destroy(struct pop3_client *client, const char *reason); void client_ref(struct pop3_client *client);

1 0

Re: [Dovecot] dovecot vs cyrus, uw, etc.
by Scott Klein 04 Nov '03

04 Nov '03

Thanks, all. I'm definitely leaning toward Dovecot. Cyrus is just too big a pain for very little payoff.

1 0

[Dovecot] current CVS seems to have index problems.
by Andreas Jaekel 04 Nov '03

04 Nov '03

Hi Timo. I've checked out the current CVS version and tested it. There seems to be a problem when dovecot accesses mailboxes for the first time: I have a mailbox with 4 mails, and no special IMAP headers. (no X-IMAPBase, X-UID etc.) and it's in mbox format. I log in, SELECT the folder and do FETCH 2 BODY[] and receive only a snipplet of the mail from somewhere in the middle of it. After some debugging it seems like dovecot: 1. creates an index, for mbox_index_rewrite(), 2. rewrites the mbox, but then 3. forgets to update the index after the rewrite. and ends up in a state with a pre-rewrite index but a post-rewrite folder. Now, there are many ways to make dovecot rebuild the index after rewriting the folder, but some are ugly and some are not, some need extra code to avoid endless loops. I don't know how you would want this fixed. I attached a patch that worked for me. After that patch, I have more (new?) problems, which may or may not be related. Now, when I SELECT a folder and do a COPY within the folder (*smile*) I get this: A COPY 1 INBOX * BYE Mailbox is in inconsistent state, please relogin. Connection closed by foreign host. ... which is what I'm gonna start looking for right now. :) Regards, Andy

1 1

[Dovecot] -test8 & Mail.app
by Dan Sully 04 Nov '03

04 Nov '03

A user just tried to use OSX 10.3's Mail.app via imap. It caused the process to start eating CPU, and this in the logs. Any idea what could be happening here? What information should I get on his setup? imap-login: Nov 03 14:28:37 Info: Login: fenner [12.106.35.5] imap(fenner): Nov 03 14:30:37 Error: Timeout while waiting for release of exclusive fcntl() lock for index file /home/f/fenner/M>aildir/.INBOX/.imap.index imap(fenner): Nov 03 14:32:37 Error: Timeout while waiting for release of exclusive fcntl() lock for index file /home/f/fenner/M>aildir/.INBOX/.imap.index imap(fenner): Nov 03 14:32:37 Panic: file index-messageset.c: line 346 (index_messageset_next): assertion failed: (!(ctx->expung>es->uid1 <= mail->rec->uid && ctx->expunges->uid2 >= mail->rec->uid)) dovecot: Nov 03 14:32:37 Error: child 26371 (imap) killed with signal 6 Thanks. -D -- Ooo-Eee-Ooo-Ah-Ah-Ting-Tang-Walla-Walla-Bing-Bang

1 0