- dovecot - dovecot.org

[Dovecot] migrating from uw imapd
by Craig 21 Jul '03

21 Jul '03

Hi, I'm trying to migrate from uw imapd to dovecot. I'm having two problems at the moment. 1. uw imapd grabs new mail from /var/mail/user and then shoves it into ~/mbox, is there any way to make dovecot handle this kind of setup or am I better off merging ~/mbox back into /var/mail/user? If merging is better are what tools are best for this? 2. While I did have have everything in ~/Mail coming up dovetail stopped working and logs the following error: syslog:Jul 19 23:01:07 epsilon3 imap-login: Login: haakon [192.168.0.107] syslog:Jul 19 23:01:07 epsilon3 imap(haakon): Failed to create storage with data: ~/Mail/:INBOX=/var/mail/haakon syslog:Jul 19 23:01:07 epsilon3 dovecot: child 10417 (imap) returned error 89 any idea what is causing this? Regards, Craig.

7 6

Re: [Dovecot] How to use SASL2?
by Matthew Reimer 19 Jul '03

19 Jul '03

Timo Sirainen wrote: > On Fri, 2003-07-18 at 02:02, grpmind+dovecot(a)boromir.vpop.net wrote: > >>How does one use SASL2 for authentication? I looked for docs but found >>none. > > There's some code for supporting Cyrus' SASL library, but it hasn't been > tested for a while and I doubt that it works. I don't really have plans > to make it work either. > > Why do you want it anyway? Dovecot supports PLAIN, DIGEST-MD5 and > ANONYMOUS SASL mechanisms internally. Most important missing one is > Kerberos 5 I think. I'm not really interested in using SASL for its own sake, but because it's a way to get dovecot to authenticate against my mysql users db. I might try to write a patch to implement mysql support for dovecot, hopefully good enough for you to commit. Matt

1 0

[Dovecot] Loadable module
by Maikel Verheijen 19 Jul '03

19 Jul '03

Hi List! I read a post about moving a .mailbixlist to a .subscriptionfile when a user did not have one, but did have a .mailboxlist file. Timo emailed a module for that purpose, so it could be done for this user. My question is: - Where and how does dovecot call this function? - Would it be easy to use a module to a) create a mailpath (can be done as the mailuser's id, I use one uid, and my path is all owned by that uid), and b) simply remove a quota file? Thank you for your time, Maikel Verheijen. Ps: the email I am referring to has: Subject: Re: [Dovecot] 0.99.10-rc3 Message-Id: <1056538261.8144.38.camel@hurina> Date: 25 Jun 2003 13:51:01 +0300

2 1

[Dovecot] Status of database integration / Willing to help
by Gregory Hartman 18 Jul '03

18 Jul '03

I a PhD student here at Carnegie Mellon. I have ten years of experience working in C in industry. I am working on a research project here at Carnegie Mellon that needs to integrate a database with mail clients. We are planning to use the IMAP protocol to communicate with the mail client. After I spent some time looking at the code of various IMAP server implementations, I got very interested in Dovecot. Then I noticed that you were planning to integrate Dovecot with a SQL database. Is this work in progress? Do you have a schema? Is there some way that I could help? -- Gregory Hartman <gghartma(a)cs.cmu.edu>

2 1

[Dovecot] How to use SASL2?
by grpmind+dovecot＠boromir.vpop.net 18 Jul '03

18 Jul '03

How does one use SASL2 for authentication? I looked for docs but found none. Thanks in advance. Matt

2 1

[Dovecot] Dovecot on Linux 2.6.0-test1-ac1
by Grahame Bowland 16 Jul '03

16 Jul '03

Hi all For various reasons I was looking into 2.6, so I installed a copy on my desktop. Everything works fine, except for dovecot - errors such as this appeared in the syslog: Jul 15 14:41:09 typhaon dovecot: Dovecot starting up Jul 15 14:41:12 typhaon imap-login: setuid(113) failed: Resource temporarily unavailable Jul 15 14:41:12 typhaon dovecot: Login process died too early - shutting down I can imagine why setuid() should ever fail, I've confirmed that the daemon is running as UID zero at the time it makes the call. However, the call succeeds if I comment out: restrict_process_size((unsigned int)-1, 1); on line 134 of src/login-common/main.c it starts to work again. It's very strange - I got the idea to try this from the list archives. I'm willing to track this down if anyone can suggest possible things in restrict_process_size() that might be causing this failure. All the other daemons that I run that need to drop root privileges work fine.. Cheers Grahame -- Grahame Bowland Email: grahame(a)ucs.uwa.edu.au University Communications Services Phone: +61 8 9380 1175 The University of Western Australia Fax: +61 8 9380 1109 CRICOS: 00126G

2 3

[Dovecot] Indexes again
by Timo Sirainen 16 Jul '03

16 Jul '03

A bit quiet here, so here's some more thoughts about indexes. Even though I was thinking only how to make them usable with NFS (I wrote it to doc/nfs.txt), it then occured to me that exactly the same tricks would help with local filesystem indexes as well. Especially the lockless reading would help with lock contention issues I was worrying about earlier with shared mailboxes. Also it occured to me that keeping maildir filenames fully synchronized in index file probably isn't very good idea from performance point of view.. BTW. I almost committed the .tree removal code to CVS today. Then I noticed that expunging ignores about half of the deleted messages. This could have been actually happening with the old code in some situations as well, although it probably would have skipped only a couple of messages. Anyway, fixing this properly takes some more time.. -------- Ideas how to make indexes work pretty well with NFS: Reading shouldn't require locks, so modifying should be done using only atomic operations. These include: - Replacing the file completely using rename() - We probably can't assume that writing more than one byte at a time is atomic. If we have to modify a larger dataset, we could do: - struct { bit_t use_first; dataset_t first; dataset_t second; } - when reading, we use first if use_first is set, second if it's unset - when writing, we first write to the non-used variable, only then we update the flag. - This of course requires twice the amount of space for dataset plus one extra bit, so it shouldn't be used too much - If data can be only set, but never changed, we need only one extra bit to specify if the data is set. - Appending new data to end of file. We'd have to have used_file_size variable in header, done like described above. - Each cached message record would have a pointer to next part, so more cached data could be appended to file. Message flags are the most commonly modified data. If we just modify them directly, a simultaneous read might catch the change only partially. But luckily for us, this is accepted behaviour so we can do it. Another commonly modified data is maildir filenames. We probably want to store only the base name in index and keep the full name synchronized only locally. Compressing unused data from index files would have to be done by rewriting the index into index.lock file and renaming it over the index file. All file operations should probably be done with lseek(), read() and write() to avoid extra network traffic. There should be some clever read-ahead caching however.

1 0

[Dovecot] New indexing code
by Timo Sirainen 14 Jul '03

14 Jul '03

If someone's interested, here's an explanation and test code how I was planning on replacing the current .imap.index.tree file's functionality. The .tree file will be removed so you'll save some disk/memory as well, something like 5-20% of whole indexes.

1 0

RE: [Dovecot] dovecot.procontrol.fi anonymous access fails?
by Maikel Verheijen 14 Jul '03

14 Jul '03

> On Mon, Jul 14, 2003 at 09:23:04AM +0200, Maikel Verheijen wrote: > > When I tried connecting using MS outlook express, it is complaining > > about the fact that the folders aren't subscribed. If they are not > > subscribed, you cannot read them... :( > > OK, added the subscriptions now. Ah great! :) Thanks, Maikel Verheijen.

1 0

RE: [Dovecot] dovecot.procontrol.fi anonymous access fails?
by Maikel Verheijen 14 Jul '03

14 Jul '03

Hi List, When I tried connecting using MS outlook express, it is complaining about the fact that the folders aren't subscribed. If they are not subscribed, you cannot read them... :( I did read through the archives using mutt though, that worked quite well! :) Regards, Maikel Verheijen. Ps: did not try it lately, maybe Timo changed the subscription status of the folders in between.... > -----Original Message----- > From: Timo Sirainen [mailto:tss@iki.fi] > Sent: Sunday, July 13, 2003 6:10 PM > To: dovecot(a)procontrol.fi > Subject: Re: [Dovecot] dovecot.procontrol.fi anonymous access fails? > > > On Sunday, Jul 13, 2003, at 18:47 Europe/Helsinki, Marco > Molteni wrote: > > > I was using a patched sylpheed that doesn't support ANONYMOUS > > authentication, so I gave anonymous as username and empty password, > > but it failed as shown in the following trace: > > > > 2 LOGIN anonymous > > 2 BAD Error in IMAP command received by server. > > Sylpheed is buggy and doesn't give password parameter. It should have > said: > > 2 login anonymous "" >

2 1

[Dovecot] mySQL user auth status?
by Jesse Peterson 14 Jul '03

14 Jul '03

Is this anywhere near consideration yet? (an alpha/beta/etc patch/module I can help test maybe?) Thanks, - Jesse

2 1

[Dovecot] dovecot.procontrol.fi anonymous access fails?
by Marco Molteni 13 Jul '03

13 Jul '03

Hi, just started using dovecot on FreeBSD. Nice and easy to configure :-) I then wanted to browse the dovecot mailing list, so, according to http://dovecot.procontrol.fi/mailinglists.html: IMAP archives available from dovecot.procontrol.fi, either use ANONYMOUS authentication or give anonymous as username and empty password. I was using a patched sylpheed that doesn't support ANONYMOUS authentication, so I gave anonymous as username and empty password, but it failed as shown in the following trace: 1 CAPABILITY * OK dovecot ready. * CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN LISTEXT LIST-SUBSCRIBED AUTH=PLAIN AUTH=ANONYMOUS 1 OK Capability completed. 2 LOGIN anonymous 2 BAD Error in IMAP command received by server. 3 LOGOUT * BYE Logging out 3 OK Logout completed. Anyway, I also tried a plain telnet and it failed in the same way. what's wrong? thanks marco

2 1

Re: [Dovecot] Permission denied
by Timo Sirainen 13 Jul '03

13 Jul '03

On Saturday, Jul 12, 2003, at 11:13 Europe/Helsinki, Jaime Medrano wrote: > That's the problem. The home dir is exported by nfs. Chdirs should be > done as the user, not as root. Right.. Well, I'll just ignore that error then: Index: mail-process.c =================================================================== RCS file: /home/cvs/dovecot/src/master/mail-process.c,v retrieving revision 1.25 retrieving revision 1.26 diff -u -r1.25 -r1.26 --- mail-process.c 10 Jul 2003 03:04:07 -0000 1.25 +++ mail-process.c 12 Jul 2003 15:45:19 -0000 1.26 @@ -168,7 +168,9 @@ if (*home_dir != '\0') { full_home_dir = *chroot_dir == '\0' ? home_dir : t_strconcat(chroot_dir, "/", home_dir, NULL); - if (chdir(full_home_dir) < 0) + /* NOTE: if home directory is NFS-mounted, we might not + have access to it as root. Ignore such errors. */ + if (chdir(full_home_dir) < 0 && errno != EACCES) i_fatal("chdir(%s) failed: %m", full_home_dir); }

3 6

[Dovecot] CVS state
by Timo Sirainen 13 Jul '03

13 Jul '03

Just a small note that if you upgrade to latest CVS, you'll have to delete old index files or you'll probably get wrong BODY or BODYSTRUCTURE replies. Next release will have index file's version number increased so it will automatically rebuild them when needed. I didn't raise it yet since several other changes are likely to come soon.

1 0

[Dovecot] Permission denied
by Jaime Medrano 12 Jul '03

12 Jul '03

Dovecot is faulting on an error about permissions that it shouldn't do. I've got an user with its home dir with permissions 700, and inside the mail directory with the mboxes. In the error log I can see: 'Can't chdir to /home/user. Permission denied' I wonder why it has to chdir to that directory and why it can't access. Shouldn't it be running as the user?

3 2

[Dovecot] FreeBSD /etc/passwd errors
by James Read 12 Jul '03

12 Jul '03

Hi there, I've currently compiled and running dovecot version 0.99.10 on my FreeBSD 4.8 system from the ports and am having problems with authenticating clients with the imap/pop3 service. The error message i get is: Jul 11 19:26:18 dev dovecot: Dovecot starting up Jul 11 19:27:23 dev dovecot-auth: passwd(james): invalid password field '*' Jul 11 19:27:23 dev imap-login: Disconnected [10.0.0.1] On the client system I am using Outlook Express 6 and the password dialog box keeps on comming up. Im sure its somthing to do with my conf file not being configured right, here are the main bits: default_mail_env = mbox:/var/mail/%u client_workarounds = oe6-fetch-no-newmail outlook-idle auth = default auth_userdb = passwd auth_passdb = passwd auth_user = dovecot-auth auth_username_chars = If its somthing simple please point me in the right direction as I feel increadbly dumb because im sure its something to do with the passwd file but just carnt get pass the last hurdle! Many thanks in advanced. James.

3 4

[Dovecot] Configuration file changes in CVS
by Timo Sirainen 12 Jul '03

12 Jul '03

OK, it's there now. Not much tested yet, so there's probably some bugs. I didn't yet add support for templates, but I probably will later. The new format is like in the two example config files I sent before: http://dovecot.procontrol.fi/list/dovecot/2003-July/001832.html dovecot-example.conf contains the simple configuration now. New code also tries to be backwards compatible with most settings. New code will also try to check that the configuration is valid after SIGHUP before actually using it, so the server won't die anymore if you made a typo somewhere. It doesn't check all the settings though. Namespace configuration comes probably next. Something like: namespace { prefix = INBOX type = private separator = / location = mbox:/var/mail/%u } namespace { prefix = type = private separator = . location = maildir:~/ } namespace { prefix = lists/ type = public separator = / location = mbox:/var/mail/lists/archives }

10 21

[Dovecot] Date sort-order ignoring timezone, and a few Q's.
by Stuart Henderson 11 Jul '03

11 Jul '03

Timo, thanks for writing and releasing Dovecot. I've recently discovered it and have been very impressed at the speed and balance between flexibility and simplicity. I had to make a packet-trace to be sure that encryption with OpenSSL was working correctly, since it all 'just worked' first time without complex configuration, which I don't think I've ever seen before ;-) LDAP too was quite straightforward (after I worked out where my virtual-domain schema differed from what was required). One small glitch I have noticed is that when the client requests a list of messages sorted by date, the timezone is ignored. For example, listed in descending order: 07/07/2003 00:01 +0300 (= 21:01 UT) 06/07/2003 23:15 +0100 (= 22:15 UT) 06/07/2003 19:03 +0100 (= 18:03 UT) I think that this should instead be... 06/07/2003 23:15 +0100 (= 22:15 UT) 07/07/2003 00:01 +0300 (= 21:01 UT) 06/07/2003 19:03 +0100 (= 18:03 UT) It's most noticable when the client (Mulberry in my case) is configured to display all times in the local timezone. (Mulberry has recently added custom flags which work perfectly with Dovecot - I was hoping this would be the case, and was one of the reasons I was looking for something to replace the version of Courier I previously had installed). Mulberry does like to have NAMESPACE otherwise it usually asks for folder locations on connecting, btw. No real problem, though. A little tip: if anyone is interested in having their MDA write Maildir with CR+LF so that sendfile(2) can be used on all messages (not just those created by Dovecot), Exim offers this natively by adding the "use_crlf" option to the appendfile transport which seems to work fine with 0.99.10 (though not 0.99.9.1, maybe because of 2003-06-04 17:39 in Changelog). It seems Dovecot is using the ,W= Maildir tag for some type of size instead of ,S= but I haven't traced far enough to work out what exactly W/virtual_size means, am I right in guessing that it might be 'wire size' i.e. message-size-with-CRLF-line-endings? (If so, use_crlf in exim.conf can be augmented with "maildir_tag = ,W=$message_size" to help keep overheads to a minimum). And, one final question: for a dual-stack machine to listen on both IPv6 and IPv4 sockets, is the currently preferred option simply to start two instances of Dovecot with their own dovecot.conf containing different *_listen parameters? --Stu

5 23

[Dovecot] Re: Uncaught bounce notification
by Timo Sirainen 10 Jul '03

10 Jul '03

Lots of bounces from you, I'm moving this subscription to new address.. On Wed, 2003-07-09 at 22:15, mailman-bounces(a)procontrol.fi wrote: > The attached message was received as a bounce, but either the bounce > format was not recognized, or no member addresses could be extracted > from it. This mailing list has been configured to send all > unrecognized bounce messages to the list administrator(s). > > For more information see: > http://procontrol.fi/cgi-bin/mailman/admin/dovecot/bounce > > > ______________________________________________________________________ > From: Joburg_Notes1 <Joburg_Notes1(a)icoc.org> > To: dovecot-bounces(a)procontrol.fi > Subject: Re: [Dovecot] LDAP bind questions > Date: 09 Jul 2003 21:13:31 +0200 > > Your email to Leslie Viljoen has been forwarded to his new email address: > lesliev(a)icoc.co.za. Please use this address in future! > > Thanks, > Leslie >

2 3

[Dovecot] Concerns switching from Courier to Dovecot
by marcotte＠panix.com 10 Jul '03

10 Jul '03

[ I'm posting this again since I wasn't subscribed to the list when I first posted. I'm sorry if this gets posted twice] I was considering replacing Courier-IMAP with dovecot in the future, but have some concerns. I realize that some things simply haven't been finished yet like quotas, but some other things may prevent me from using dovecot as a drop in replacement in the future. Subfolders have different names in the file system. A folder (INBOX.subfolder) is named ".subfolder" in Courier, but "INBOX.subfolder" in dovecot. I can't simply rename all the subfolders, because our customers have direct access to the maildirs, and write to it directly with procmail and mail clients like mutt. Certain files have different names, but contain the same information. For example, the subscription lists and UID files look the same to me but have different names. I suppose they could be converted, but this would make it difficult to run both IMAP servers side-by-side, which I'd like to do until dovecot has all the features I need. I also heard talk of the hierarchy separator being changed from "." to "/". Now, is it possible configuration options could be added to allow for better Courier compatibility? I would be willing to help with this. Thanks! -- - Brian

4 4

Re: [Dovecot] Date sort-order ignoring timezone, and a few Q's.
by Stuart Henderson 09 Jul '03

09 Jul '03

>> One small glitch I have noticed is that when the client requests a >> list of messages sorted by date, the timezone is ignored. > > It's not ignored, I just recently "fixed" it. Now it's properly fixed > :) Heheh.. Yes, I confirm that. (: >> It seems Dovecot is using the ,W= Maildir tag for some type of size >> instead of ,S= but I haven't traced far enough to work out what >> exactly W/virtual_size means, am I right in guessing that it might >> be 'wire size' >> i.e. message-size-with-CRLF-line-endings? > > Yes. S means the actual size of the file, W is the size with CRs. Thanks, that's good. >> And, one final question: for a dual-stack machine to listen on both >> IPv6 and IPv4 sockets, is the currently preferred option simply to >> start two instances of Dovecot with their own dovecot.conf >> containing different *_listen parameters? > > Currently, yes. I'll probably add support for multiple listening > sockets per server some day. There is no problem to have two instances running, though it might be more admin-friendly to allow the listen addresses to be supplied on the command-line, since it would save maintaining a second config file (and I imagine this would be easier for you than changing the socket code), but this is quite a low priority I think.

1 0

[Dovecot] search throwing "Sequence out of range"
by Stuart Henderson 09 Jul '03

09 Jul '03

Mulberry client-side message filtering can be persuaded to search for a nonexistent message ... <tag> UID SEARCH UNSEEN UNDELETED UNDRAFT 12 (OR FROM "Cron Daemon <sthen(a)eeyore.37.spacehopper.org>" SUBJECT "Cron <sthen@wide> /home/sthen/pingme") Dovecot 0.99.10 returns this ... <tag> NO Sequence out of range: 12 I *think* the correct behaviour here is to return a null set of search results and avoid the error message in the client. i.e. * SEARCH <tag> OK Certainly this is how other servers seem to work, and my understanding of the next paragraph from IMAP4REV1 RFC seems to backs this up (though the wording in the RFC isn't 100% clear to me) "Message set ranges are permitted; however, there is no guarantee that unique identifiers be contiguous. A non-existent unique identifier within a message set range is ignored without any error message generated." it's not Mulberry's fault that it sent this immediately after deleting message 12, since on closer investigation this is exactly what my filter rules are asking it to do because I forgot to set "stop if matched", however it would be helpful to change sometime since I'm sure I'm not the only person to have done that (-: of course I've fixed my filters now, so it isn't a high priority for me. Commented protocol log follows, it's not really any more information than above though. --> #4.364 Tue Jul 8 12:54:19 2003 A00448 STATUS INBOX (MESSAGES RECENT UNSEEN UIDVALIDITY UIDNEXT) * STATUS "INBOX" (MESSAGES 0 RECENT 0 UIDNEXT 1 UIDVALIDITY 1052370612 UNSEEN 0) A00448 OK Status completed. --> #2.364 Tue Jul 8 12:55:19 2003 A01259 NOOP * 12 EXISTS * 3 RECENT A01259 OK NOOP completed. ... incoming mail ... --> #2.364 Tue Jul 8 12:55:19 2003 A01260 FETCH 12 (FLAGS RFC822.SIZE UID INTERNALDATE ENVELOPE BODYSTRUCTURE) * 12 FETCH (UID 140 FLAGS (\Recent) INTERNALDATE "08-Jul-2003 12:54:36 +0100" RFC822.SIZE 2372 BODYSTRUCTURE ("text" "plain" ("charset" "us-ascii") NIL NIL "7bit" 0 0 NIL NIL NIL) ENVELOPE ("Tue, 08 Jul 2003 12:00:11 +0000" "***SPAM*** I wish I could be there" (("Kieth Hairston" NIL "kiethhairston_ji" "sedona.net")) (("Kieth Hairston" NIL "kiethhairston_ji" "sedona.net")) (("Kieth Hairston" NIL "kiethhairston_ji" "sedona.net")) ((NIL NIL "stu" "spacehopper.org")) NIL NIL NIL "<d1d801c34548$6364549c$6e8ec7ab@0aqdi32>")) A01260 OK Fetch completed. --> #2.364 Tue Jul 8 12:55:19 2003 A01261 SORT (DATE) us-ascii ALL * SORT 9 1 2 8 3 4 5 6 7 11 10 12 A01261 OK Sort completed. ... filter rule #1 ... --> #2.364 Tue Jul 8 12:55:19 2003 A01262 UID SEARCH UNSEEN UNDELETED UNDRAFT 12 SUBJECT "***SPAM***" * SEARCH 140 A01262 OK Search completed. ... ok, it's junk, we want it marked seen/deleted and placed in another folder ... --> #2.364 Tue Jul 8 12:55:19 2003 A01263 UID STORE 140 +FLAGS (\Seen) * 12 FETCH (FLAGS (\Seen \Recent) UID 140) A01263 OK Store completed. --> #2.364 Tue Jul 8 12:55:19 2003 A01264 UID STORE 140 +FLAGS (\Deleted) * 12 FETCH (FLAGS (\Deleted \Seen \Recent) UID 140) A01264 OK Store completed. --> #2.364 Tue Jul 8 12:55:19 2003 A01265 UID COPY 140 "ZZ spam" A01265 OK Copy completed. --> #1.364 Tue Jul 8 12:55:20 2003 A00087 STATUS "ZZ spam" (MESSAGES RECENT UNSEEN UIDVALIDITY UIDNEXT) * STATUS "ZZ spam" (MESSAGES 1 RECENT 1 UIDNEXT 2 UIDVALIDITY 1057513495 UNSEEN 0) A00087 OK Status completed. --> #2.364 Tue Jul 8 12:55:20 2003 A01266 UID STORE 140 +FLAGS (\Deleted) * 12 FETCH (FLAGS (\Deleted \Seen \Recent) UID 140) A01266 OK Store completed. ... and expunge this message (only) from the inbox: Mulberry checks so that it can keep any other deleted messages in the folder intact ... --> #2.364 Tue Jul 8 12:55:20 2003 A01267 UID SEARCH DELETED * SEARCH 140 A01267 OK Search completed. --> #2.364 Tue Jul 8 12:55:20 2003 A01268 EXPUNGE * 12 EXPUNGE A01268 OK Expunge completed. --> #2.364 Tue Jul 8 12:55:20 2003 A01269 SORT (DATE) us-ascii ALL * SORT 9 1 2 8 3 4 5 6 7 11 10 A01269 OK Sort completed. ... and on to filter rule #2 ... --> #2.364 Tue Jul 8 12:55:20 2003 A01270 UID SEARCH UNSEEN UNDELETED UNDRAFT 12 (OR FROM "Cron Daemon <sthen(a)eeyore.37.spacehopper.org>" SUBJECT "Cron <sthen@wide> /home/sthen/pingme") A01270 NO Sequence out of range: 12

2 2

[Dovecot] LDAP bind questions
by Jared 09 Jul '03

09 Jul '03

Hello, I've got dovecot set up to authenticate against our LDAP server. So far seems to work well. I have two concerns that I haven't been able to find answers for in the documentation or archives. Is there any intention to support "authentication binds" so you don't have to bind as a user with read privileges to everyone's userPassword attribute? For security purposes I'd like to see this functionality. And my next concern would become a non-issue if the above was supported, but is there a way to set the dnpass equal to a SSHA password? When I try setting it like this: dnpass = {SSHA}VhxqnmwCLVQj7g3rQV+g9F3XnaJ6bRXR in dovecot-ldap.conf It still tries to do a simple bind and fails. I get this error: dovecot-auth: LDAP: ldap_simple_bind_s() failed \ (dn cn=authadmin,ou=people,dc=domain,dc=com): Invalid credentials I'd prefer not to have the password for the authentication admin user stored in plain text in the conf file. Thanks, -jared

4 6

[Dovecot] Auth problems against Eudora
by Lars Clausen 06 Jul '03

06 Jul '03

Hi, I'm trying to set up dovecot to do pop3 from Eudora, but it keeps breaking on authentication attempts using plain auth. When I snoop the connection with tcpflow, here's what I see: 128.174.246.068.00110-062.107.004.050.49653: +OK dovecot ready. 128.174.246.068.00110-062.107.004.050.49653: +OK dovecot ready. 128.174.246.068.00110-062.107.004.050.49653: 062.107.004.050.49653-128.174.246.068.00110: CAPA 128.174.246.068.00110-062.107.004.050.49653: +OK CAPA TOP USER UIDL RESP-CODES STLS SASL PLAIN DIGEST-MD5 . 062.107.004.050.49653-128.174.246.068.00110: auth plain AG1p2YtlQBebz12YmXQ 128.174.246.068.00110-062.107.004.050.49653: -ERR Unsupported authentication mechanism. It seems to me that sending 'auth plain <MD5>' is against the RFCs (1734, 2195, 1939). What can be done about this? I'm also curious why MD5 auth is not allowed for shadow passwords whenthat has been standard on Linux for a while now. Or am I missing something? Thanks in advance, -Lars -- Lars Clausen (http://shasta.cs.uiuc.edu/~lrclause)| Hårdgrim of Numenor "I do not agree with a word that you say, but I |---------------------------- will defend to the death your right to say it." | Where are we going, and --Evelyn Beatrice Hall paraphrasing Voltaire | what's with the handbasket?

2 1

[Dovecot] "Internal Error" from maildirs (new user)
by Sean 'Shaleh' Perry 05 Jul '03

05 Jul '03

I decided to give dovecot a try this morning. To create a test system I copied mail from my wife and myself into /var/spool/imap. This mail was already in maildir format from our mail clients. I set the mail env to maildir:/var/spool/imap/%u. Below is a session (via telnet): <begin> . OK Logged in. . list "" * * LIST (\UnMarked) "." "blackbox" * LIST (\UnMarked) "." "blackbox-devel" * LIST (\UnMarked) "." "debian-devel" * LIST (\UnMarked) "." "debian-dpkg" * LIST (\UnMarked) "." "debian-ipv6" * LIST (\UnMarked) "." "debian-laptop" * LIST (\UnMarked) "." "debian-legal" * LIST (\UnMarked) "." "debian-lint" * LIST (\UnMarked) "." "debian-mentors" * LIST (\UnMarked) "." "debian-policy" * LIST (\UnMarked) "." "debian-private" * LIST (\UnMarked) "." "debian-publicity" * LIST (\UnMarked) "." "debian-python" * LIST (\UnMarked) "." "debian-qa" * LIST (\UnMarked) "." "debian-release" * LIST (\UnMarked) "." "debian-security" * LIST (\UnMarked) "." "debian-spi" * LIST (\UnMarked) "." "debian-testing" * LIST (\UnMarked) "." "debian-user" * LIST (\UnMarked) "." "debian-vote" * LIST (\UnMarked) "." "drafts" * LIST (\UnMarked) "." "lsb-impl" * LIST (\UnMarked) "." "bad" * LIST (\UnMarked) "." "lsb-test" * LIST (\UnMarked) "." "maradns" * LIST (\UnMarked) "." "narval" * LIST (\UnMarked) "." "python-list" * LIST (\UnMarked) "." "sent-mail" * LIST (\UnMarked) "." "spam" * LIST (\UnMarked) "." "storage" * LIST (\UnMarked) "." "trash" * LIST (\UnMarked) "." "xdg" * LIST (\UnMarked) "." "outbox" * LIST (\UnMarked) "." "bf-python" * LIST (\UnMarked) "." "debian-bug" * LIST (\UnMarked) "." "python-tutor" * LIST (\Marked) "." "INBOX" . OK List completed. . select inbox . NO Internal error [2003-07-04 10:50:51] . examine inbox . NO Internal error [2003-07-04 10:52:22] . examine bad * NO Couldn't use index files * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1057341147] UIDs valid * OK [UIDNEXT 1] Predicted next UID . OK [READ-ONLY] Select completed. <end> I can find no cause of the inbox error in any log. Suggestions? All of my sub folders come back as read only (even when I use select). I presume this is a permissions issue. What should the perms be? I am using 0.99.10 from Debian if it matters.

2 2