- dovecot - dovecot.org

[Dovecot] New mail not appearing consistently in Outlook 2003
by Karl von Randow 29 Mar '07

29 Mar '07

Hi all, I have continuously experienced a new mail not appearing problem in Outlook 2003 on Windows XP. Using Dovecot 0.99.14 on Debian Sarge and now in 1.0rc26 and rc27. The problem exhibits itself as: Some new mail is randomly(?) not shown in my mailbox. More new mail does appear, so it's difficult to know when a message has been missed. If I restart Outlook the missed new messages will appear as unread in the order where they should have been received in my inbox. I use secure imap. I get email through my inbox (receipts from a website we're testing, at its peak maybe 2-3 a minute) that are moved into another mailbox using a rule in Outlook. These are often the messages that are missed as above, but it often includes other email as well. The mail box format is mbox on the server. The mail delivery is by exim4 from Debian Sarge. I wondered if there was a locking problem between exim4 and dovecot? My transport in exim4 for delivering the mail is: mail_spool_home: debug_print = "T: appendfile for $local_part@$domain" driver = appendfile file = /home/vmail/$domain/$local_part/INBOX delivery_date_add envelope_to_add return_path_add group = mail mode = 0660 mode_fail_narrower = false The problem is reproducable in that I see the problem occur everyday. I am about to compile and install rc28 to see if that improves matters. I'd appreciate any help resolving the problem! Here is my dovecot.conf: # /usr/local/etc/dovecot.conf protocols: pop3 imap imaps disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login mail_extra_groups: mail mail_location: mbox:/home/vmail/%d/%n/mail/:INBOX=/home/vmail/%d/%n/INBOX mbox_dirty_syncs: no mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: passdb: driver: passwd-file args: /etc/vmail.passwd userdb: driver: static args: uid=1064 gid=1001 home=/home/vmail/%d/%u

5 16

[Dovecot] Bug-report for rc28: Mailbox isn't a valid mbox file
by Erik van Oosten 29 Mar '07

29 Mar '07

Hi, When I try to open the attached mbox file I get the following warning in Thunderbird 1.5.0.10: 'The current command failed. The e-mail server responded: Mailbox isn't a valid mbox file'. I also tried this with squirrelmail, with the same result. The Dovecot version is dovecot-1.0.rc28, compiled from source. The attached mbox was correctly read from, and written to in earlier versions (either rc15 or rc22, I am not sure). The initial import was done (a long time ago) by copying a file from my Thunderbird profile directory. OS: SuSE 10.0, x86 Filesystem: ext3, (no NFS) Output of dovecot -n: ------------------------------------ # /usr/local/etc/dovecot.conf disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u auth default: passdb: driver: pam userdb: driver: passwd ------------------------------------- Can I somehow recover the data in this mbox? Regards, Erik. -- Erik van Oosten http://day-to-day-stuff.blogspot.com/

2 1

[Dovecot] odd behavior with Dovecot LDA
by Steven F Siirila 29 Mar '07

29 Mar '07

Okay, to convince myself that quota handling was working okay with Dovecot 1.0-rc27 on Solaris 10, I tested sending a message to an account that was purposely over-quota. The account in question had a vacation message set up. For the first test, there was no $HOME/.imap directory at all. I received the vacation message, but the message which was supposed to be delivered locally queued in Postfix (temporary failure). For the second test, I created $HOME/.imap and $HOME/.imap/INBOX directories with the owner and group set to that of the user (just to make sure the code handled things the same). Again, I received the vacation message, but the message which was supposed to be delivered locally bounced back to me after Dovecot LDA crashed: <syst0005(a)peridot.tc.umn.edu>: Command died with status 139: "/opt/dovecot/libexec/dovecot/deliver -f "$SENDER"". Command output: Segmentation Fault It appears that Dovecot LDA assumes that if .imap/FOLDERNAME exists that the index files must also exist.. I wonder what other assumptions might cause segfaults. -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 7

[Dovecot] How do I check the release #?
by Randolph Kahle 29 Mar '07

29 Mar '07

I am a dovecot newbie and I am setting up a machine that already has dovecot installed. Since bugs are being resolved rapidly, it appears that I need to know the release version of dovecot I am running. Is there a command I can issue or a file I can examine to determine the release version of my installation? -- Randy

3 2

[Dovecot] transfer files from Plesk qmail to Dovecot and Postfix
by Frank Church 29 Mar '07

29 Mar '07

I have some files I want to transfer from Plesk qmail to Postfix with virtual mailboxes, MySQL, Maildir etc. I can add the accounts to the database manually as there are only a few of them. In the case of the mail folders, is it merely a matter of copying the mail files over, or are there some adjustments to be made to the files? I have noticed the thread about the Courier to Dovecot script and I wonder whether it may have a role in this process.

1 1

[Dovecot] auth server refusing connections intermittently
by Steven F Siirila 28 Mar '07

28 Mar '07

Running Dovecot 1.0-rc27 on Solaris 10.. We have been noticing intermittent messages of this sort and wondered if this indicates whether we need to add more dovecot-auth worker processes: Mar 28 03:15:41 myhost dovecot: pop3-login: Can't connect to auth server at default: Connection refused Mar 28 08:10:20 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 28 09:08:13 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 28 10:23:38 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 28 10:35:37 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 28 10:50:59 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 28 12:00:44 myhost dovecot: pop3-login: Can't connect to auth server at default: Connection refused Mar 28 12:07:31 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 28 14:44:57 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused However, this system has over 7,000 users and 1,500 simultaneous IMAP and POP3 connections, and we only see one dovecot-auth process running. By contrast, another server has over 11,000 users and 3,000 simultaneous IMAP and POP3 connections (but is currently running rc24), and we only have seen 3 of the above error messages there -- and there is only one dovecot-auth process there as well. Does this sound right? Also, how many times are these connections retried (and at what sleep interval, if any) before it gives up? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 1

Re: [Dovecot] Building problem on FreeBSD with GSSAPI
by pod 28 Mar '07

28 Mar '07

>>>>> "TS" == Taras Savchuk <taras(a)elantech.ru> writes: TS> gw# krb5-config --version TS> FreeBSD heimdal 0.6.3 $Id: krb5-config.in,v 1.9 2002/09/09 22:29:06 joda Exp $ TS> gw# krb5-config --libs gssapi TS> -L/usr/lib -lgssapi -lkrb5 -lasn1 -lcrypto -lroken -lcrypt -lcom_err I'm not sure how much further I can help you since I don't have access to any FreeBSD compilation environments. Maybe someone else on this list can at least either confirm success or report similar problems building dovecot on FreeBSD 6.2. Are you able to compile and link the appended C without error? cc $(krb5-config --cflags gssapi) -o gssapi.o -c gssapi.c cc $(krb5-config --libs gssapi) -o gssapi gssapi.o If not then it's probably not a dovecot specific problem. -------------------- #include <stdlib.h> #include <gssapi/gssapi.h> int main(int argc, char *argv[]) { OM_uint32 rc_major, rc_minor; gss_name_t name; rc_major=gss_import_name(&rc_minor, GSS_C_NO_BUFFER, GSS_C_NO_OID, &name); return EXIT_SUCCESS; }

1 0

[Dovecot] Removing users maildir DOVECOT+LDAP
by Venilton Junior 28 Mar '07

28 Mar '07

Hi all, Does anyone have an idea how can I remove(delete) my virtual mail users' maildir? I have Dovecot + LDAP and I would like to do something like this: When I remove an user entry in my ldap server, it should remove my user directory information. Does anyone has this implemented? Or have an idea? I can remove users entry in my ldap server remotely, is there some way in dovecot? I'm asking this, cause I'm very familiar with Cyrus and I can do this with it. Tnx for now Regards, Venilton C. Junior HP Certified Professional Sercompe Computadores Ltda. Office: +55 47 3431-9700 Fax: +55 47 3431-9747 Mobile: +55 47 9653-5872 www.sercompe.com.br <http://www.sercompe.com.br/>

1 0

[Dovecot] Deliverm, vpopmail, and valias
by John Peacock 28 Mar '07

28 Mar '07

I'm in the final stages of testing my e-mail server to come and I seem to have hit a roadblock. One option of current vpopmail is to store all aliases in a valias table, that looks like this: +-------------+----------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +-------------+----------+------+-----+---------+-------+ | alias | char(32) | NO | MUL | | | | domain | char(64) | NO | | | | | valias_line | text | NO | | | | +-------------+----------+------+-----+---------+-------+ where valias_line could be either an e-mail address (preceded by an ampersand) or a command (piped to vacation for example). I have already accepted a message for an aliased address, but the MTA isn't going to be rewriting the envelope address, so how can I get dovecot's deliver to dereference the alias and deliver to the correct Inbox? Because of the number of other hops[1] that the message is going through, I don't want to rewrite the destination address unless I really have to, but if that is the only option, that is what I'll have to do. Thoughts? John 1) inbound e-mail hits a qpsmtpd instance which validates e-mails using several different filtering techniques. Next the mail gets fed to a dspam appliance running two Postfix queues (one before dspam and one after). Mail that isn't quarantine by dspam gets sent to the delivery server (currently running qmail) and delivered to the final destination (modulo sieve rules under deliver). The only place I could conceivably rewrite the address would be the second Postfix queue. -- John Peacock Director of Information Research and Technology Rowman & Littlefield Publishing Group 4501 Forbes Boulevard Suite H Lanham, MD 20706 301-459-3366 x.5010 fax 301-429-5748

1 1

Re: [Dovecot] Building problem on FreeBSD with GSSAPI
by Ed Lucero 28 Mar '07

28 Mar '07

> -----Original Message----- > From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] > On Behalf Of Taras Savchuk > Sent: Tuesday, March 27, 2007 11:41 PM > To: pod > Subject: Re: [Dovecot] Building problem on FreeBSD with GSSAPI > > > gw# krb5-config --version > FreeBSD heimdal 0.6.3 > $Id: krb5-config.in,v 1.9 2002/09/09 22:29:06 joda Exp $ > gw# krb5-config --libs gssapi > -L/usr/lib -lgssapi -lkrb5 -lasn1 -lcrypto -lroken -lcrypt -lcom_err > > > pod ÐÉÛÅÔ: > >>>>>> "TS" == Taras Savchuk <taras(a)elantech.ru> writes: > > > > TS> I have error while compiling dovecot with GSSAPI under > FreeBSD > > TS> 6.2: Is this dovecot-related or not? > > > > One suspects not since none of the dovecot code directly calls into > the > > krb5 API. It looks like a linkage problem with > /usr/lib/libgssapi.so. Do > > you have a 'krb5-config' and if so what is the output of > > > > krb5-config --version > > krb5-config --libs gssapi > > > > -- > ó Õ×ÁÖÅÎÉÅÍ, óÁ×ÞÕË ôÁÒÁÓ > ïïï "üÌÁÎÔÅË" : áÕÔÓÏÒÓÉÎÇ éô, WEB-ÒÁÚÒÁÂÏÔËÁ > http://www.elantech.ru > +7 (495) 589 68 81 > +7 (926) 575 22 11 Are you using the FreeBSD port for dovecot. I recently installed rc28 using the port on 6.2. No problems. Ed

1 0

[Dovecot] ssl with openwrt OS
by burolib 28 Mar '07

28 Mar '07

Hi. I'm still facing troubles on my way. This time concerning ssl encryption. only dovecot-auth starts... imap and pop3 go down with this log dovecot: Mar 23 18:34:19 Info: Dovecot v1.0.rc27 starting up dovecot: Mar 23 18:34:20 Error: Temporary failure in creating login processes, slowing down for now dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: child 849 (login) returned error 89 dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: child 847 (login) returned error 89 dovecot: Mar 23 18:34:20 Error: child 848 (login) returned error 89 I attemped with makecert.sh, myown certificate which works with qmail-pop3d/stunnel, and cacert.org. All the times i get the same error. my dovecot.conf says: ## ## SSL settings ## #ssl_listen = #ssl_disable = no ssl_cert_file = /etc/ssl/certs/server.pem ssl_key_file = /etc/ssl/private/private.key #ssl_key_password = #ssl_ca_file = #ssl_verify_client_cert = no ssl_parameters_regenerate = 128 ssl_cipher_list = ALL:!LOW verbose_ssl = yes I spent a week trying to solve this out. Any ideas? ------------------------------------------------------ Leggi GRATIS le tue mail con il telefonino i-mode di Wind http://click.libero.it/imode ------------------------------------------------------ Passa a Infostrada. ADSL e Telefono senza limiti e senza canone Telecom http://click.libero.it/infostrada

3 2

[Dovecot] ignoring some subfolders [potential wishlist]
by Arkadiusz Miskiewicz 28 Mar '07

28 Mar '07

Hello I'm looking at migration path from my current setup (tpop3d/courier-imap) and I seem to miss one feature - ability to ignore some subfolders for pop3. tpop3d allows me to say: maildir-ignore-folders: Spam Trash trash Sent sent-mail POP3-Invisible (would be stupid to fetch own sent-mail via pop3 again 8-) In recent tpop3d cvs version I can also use regexps like maildir-ignore-folders: ^IMAP-Only.*$. Is it possible to ignore some subfolders in dovecot per protocol (like for pop3 only and not imap) ? If not then please consider this as wishlist, maybe in form of location negation like: mail_location = \ maildir:/var/mail/%Lu:!maildir:/var/mail/%Lu/.Something (which doesn't look sane) or with separate config directive like in tpop3d -- Arkadiusz Miśkiewicz PLD/Linux Team arekm / maven.pl http://ftp.pld-linux.org/

2 2

[Dovecot] PAM auth problem
by Taras Savchuk 28 Mar '07

28 Mar '07

Pam auth don't work when I add pam_group: gw# id test2 uid=10001(test2) gid=11111(adusers) groups=11111(adusers), 10000(group1), 10001(group2), 10002(test10) gw# getent passwd test2 test2:*:10001:11111:Our AD-Unix Test Account:/home/test2:/bin/sh gw# cat /etc/pam.d/dovecot auth required pam_group.so group=adusers auth required pam_krb5.so debug try_first_pass All works fine with only pam_krb5 module. -- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11

2 3

[Dovecot] problem with POP3 mail location when using namespaces
by Lutz Preßler 28 Mar '07

28 Mar '07

Hello, I have a problem (at least with 1.0rc28 and 1.0rc27) when using the following namespace definitions: namespace private { separator = "/" inbox = yes location = mbox:~/Mail:INBOX=/var/spool/mail/%u } namespace public { separator = / prefix = 0-LISTS/ location = mbox:/var/mail/lists:INDEX=~/.sharedMail/lists/index } namespace private { separator = "/" prefix = "0-MAILDIR-FOLDERS/" location = maildir:~/Maildir } IMAP access is working as expected, but when connecting with POP3(s), the (mostly empty in our case) ~/Maildir is used as mail location when it has been created (including index files) by IMAP access. If ~/Maildir does not exist/has been deleted again, POP3 uses /var/spool/mail/%u. This is independent of the private namespace section order and also an explicit "inbox = no" in 0-MAILDIR-FOLDERS namespace. Any idea if this is an configuration issue I don't understand yet or a bug? Thanks, Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 1

[Dovecot] Allow/disallow mail access based on group membership
by Taras Savchuk 28 Mar '07

28 Mar '07

I'm just finished FreeBSD/AD integration via Kerberos/LDAP and now I can manage unix users/groups from AD. I want to grant access to IMAP based on user membership in certain group. Is it possible? Can you give me some hints? Thanks in advance! -- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11

2 3

[Dovecot] LDAP group quota support
by Ioannis Zachariadis 28 Mar '07

28 Mar '07

Is there a plan to support LDAP group quotas in the future releases ? Just like the ldap quota plugin for users but with additional support for a unified quota for a group users. -- giannis.

2 2

[Dovecot] Building problem on FreeBSD with GSSAPI
by Taras Savchuk 28 Mar '07

28 Mar '07

I have error while compiling dovecot with GSSAPI under FreeBSD 6.2: Is this dovecot-related or not? cc -std=gnu99 -O2 -fno-strict-aliasing -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o dovecot-auth auth.o auth-cache.o auth-client-connection.o auth-master-connection.o auth-master-listener.o auth-module.o auth-request.o auth-request-handler.o auth-stream.o auth-worker-client.o auth-worker-server.o db-ldap.o db-sql.o db-passwd-file.o main.o mech.o mech-anonymous.o mech-plain.o mech-login.o mech-cram-md5.o mech-digest-md5.o mech-ntlm.o mech-gssapi.o mech-rpa.o mech-apop.o passdb.o passdb-blocking.o passdb-bsdauth.o passdb-cache.o passdb-ldap.o passdb-passwd.o passdb-passwd-file.o passdb-pam.o passdb-checkpassword.o passdb-shadow.o passdb-sia.o passdb-vpopmail.o passdb-sql.o userdb.o userdb-blocking.o userdb-ldap.o userdb-passwd.o userdb-passwd-file.o userdb-prefetch.o userdb-static.o userdb-vpopmail.o userdb-sql.o -Wl,--export-dynamic -L/usr/local/lib libpassword.a ../lib-settings/libsettings.a ../lib-ntlm/libntlm.a ../lib-sql/libsql.a ../lib/liblib.a -lpam -L/usr/lib -lgssapi -lkrb5 -lasn1 -lroken -lcrypt -lcom_err /usr/local/lib/libldap.so /usr/local/lib/liblber.so /usr/local/lib/libsasl2.so -lssl -lcrypto -Wl,--rpath -Wl,/usr/local/lib -Wl,--rpath -Wl,/usr/local/lib /usr/lib/libgssapi.so: undefined reference to `krb5_rd_cred2' /usr/lib/libgssapi.so: undefined reference to `krb5_crypto_destroy' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_address' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_data' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_keyblock' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setremotesubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_data_free' /usr/lib/libgssapi.so: undefined reference to `krb5_config_get_strings' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalsubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_generatelocalsubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_sockaddr2address' /usr/lib/libgssapi.so: undefined reference to `krb5_cc_get_ops' /usr/lib/libgssapi.so: undefined reference to `krb5_get_default_principal' /usr/lib/libgssapi.so: undefined reference to `krb5_cc_copy_cache' /usr/lib/libasn1.so: undefined reference to `init_error_table' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setkey' /usr/lib/libgssapi.so: undefined reference to `krb5_get_forwarded_creds' /usr/lib/libgssapi.so: undefined reference to `krb5_get_err_text' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int32' /usr/lib/libgssapi.so: undefined reference to `krb5_h_addr2sockaddr' /usr/lib/libgssapi.so: undefined reference to `krb5_build_authenticator' /usr/lib/libgssapi.so: undefined reference to `krb5_build_ap_req' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_getremoteseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_data_zero' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_free' /usr/lib/libgssapi.so: undefined reference to `krb5_config_free_strings' /usr/lib/libgssapi.so: undefined reference to `krb5_create_checksum' /usr/lib/libgssapi.so: undefined reference to `krb5_generate_random_block' /usr/lib/libgssapi.so: undefined reference to `krb5_crypto_init' /usr/lib/libgssapi.so: undefined reference to `krb5_enctype_to_keytype' /usr/lib/libgssapi.so: undefined reference to `krb5_free_creds_contents' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_from_mem' /usr/lib/libgssapi.so: undefined reference to `krb5_store_address' /usr/lib/libgssapi.so: undefined reference to `krb5_decrypt_ivec' /usr/lib/libasn1.so: undefined reference to `initialize_error_table_r' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_get_error_string' /usr/lib/libgssapi.so: undefined reference to `krb5_principal_match' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_to_data' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int32' /usr/lib/libgssapi.so: undefined reference to `krb5_encrypt_ivec' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_emem' /usr/lib/libgssapi.so: undefined reference to `krb5_store_data' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setremoteseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_principal_get_realm' /usr/lib/libgssapi.so: undefined reference to `krb5_set_error_string' /usr/lib/libgssapi.so: undefined reference to `krb5_make_principal' /usr/lib/libgssapi.so: undefined reference to `krb5_store_keyblock' *** Error code 1 Stop in /usr/ports/mail/dovecot/work/dovecot-1.0.rc28/src/auth. *** Error code 1 Stop in /usr/ports/mail/dovecot/work/dovecot-1.0.rc28/src. *** Error code 1 Stop in /usr/ports/mail/dovecot/work/dovecot-1.0.rc28. *** Error code 1 Stop in /usr/ports/mail/dovecot/work/dovecot-1.0.rc28. *** Error code 1 Stop in /usr/ports/mail/dovecot. *** Error code 1 Stop in /usr/ports/mail/dovecot. ** Command failed [exit code 1]: /usr/bin/script -qa /tmp/portupgrade.29635.0 env UPGRADE_TOOL=portupgrade UPGRADE_PORT=dovecot-1.0.r28 UPGRADE_PORT_VER=1.0.r28 make ** Fix the problem and try again. ** Listing the failed packages (*:skipped / !:failed) ! mail/dovecot (dovecot-1.0.r28) (linker error) ---> Packages processed: 0 done, 0 ignored, 0 skipped and 1 failed -- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11

2 2

[Dovecot] proxy host specified as fqdn in userdb
by Apostolos Papayanakis 28 Mar '07

28 Mar '07

Abstract from http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy > > host=s: The destination server's *IP address*. This field is required. > Note that currently it's required to use an IP address since no DNS > resolving is done. > Hello Timo, Here goes one more item for the v2.0 wishlist: Will it become possible to do dovecot imap proxying based on a "host" userdb attribute that is an FQDN (instead of a numeric IP as it is now)? It would simplify things for large smtp clusters that already do LDAP mail routing, based on per user "mailHost" attribute containg mail server FQDNs (according to "IETF Internet Draft LDAP Schema for Intranet Mail Routing", http://www.sendmail.org/m4/laser.txt) It is kinda redundunt to keep an extra LDAP attribute for "host" that contains essentially the same information as "mailHost" attribute, but in numeric form. I know the proposed change is not that important for many people, so don't really bother unless it is trivial to implement. apap

3 7

[Dovecot] rc2x seems to break Pegasus Mail
by Rick Romero 28 Mar '07

28 Mar '07

Hi guys, I upgraded from rc7 to rc24 a couple weeks ago, and noticed today that Pegasus Mail's IMAP no longer connects. So I put rc27 in, and it worked, but only for a little while... I'm not sure what the problem might be, the logs look fine, and I can still use Horde and Evolution without a problem. Pegasus Mail's error is unfortunately not helpful. Restarting rc27 didn't 'bring it back' for Pegasus. I turned on debugging, but I don't know what to look for because other clients work :/ dovecot: Mar 22 09:55:58 Info: imap-login: Login: user=<rick>, method=PLAIN, rip=172.16.100.20, lip=172.16.100.10, TLS dovecot: Mar 22 09:55:58 Info: IMAP(rick): Loading modules from directory: /usr/local/lib/dovecot/imap dovecot: Mar 22 09:55:58 Info: IMAP(rick): Module loaded: /usr/local/lib/dovecot/imap/lib10_quota_plugin.so dovecot: Mar 22 09:55:58 Info: IMAP(rick): Module loaded: /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so dovecot: Mar 22 09:55:58 Info: IMAP(rick): Effective uid=89, gid=89, home=/usr/home/vpopmail/domains/havokmon.com/rick dovecot: Mar 22 09:55:58 Info: IMAP(rick): Namespace: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, subscriptions=no dovecot: Mar 22 09:55:58 Info: IMAP(rick): maildir: root exists (/usr/home/vpopmail/domains/havokmon.com/rick/Maildir) dovecot: Mar 22 09:55:58 Info: IMAP(rick): maildir: root=/usr/home/vpopmail/domains/havokmon.com/rick/Maildir, index=/usr/home/vpopmail/domains/havokmon.com/rick/Maildir, control=, inbox= dovecot: Mar 22 09:56:03 Info: imap-login: Login: user=<rick>, method=PLAIN, rip=172.16.100.20, lip=172.16.100.10, TLS dovecot: Mar 22 09:56:03 Info: IMAP(rick): Loading modules from directory: /usr/local/lib/dovecot/imap dovecot: Mar 22 09:56:03 Info: IMAP(rick): Module loaded: /usr/local/lib/dovecot/imap/lib10_quota_plugin.so dovecot: Mar 22 09:56:03 Info: IMAP(rick): Module loaded: /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so dovecot: Mar 22 09:56:03 Info: IMAP(rick): Effective uid=89, gid=89, home=/usr/home/vpopmail/domains/havokmon.com/rick dovecot: Mar 22 09:56:03 Info: IMAP(rick): Namespace: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, subscriptions=no dovecot: Mar 22 09:56:03 Info: IMAP(rick): maildir: root exists (/usr/home/vpopmail/domains/havokmon.com/rick/Maildir) dovecot: Mar 22 09:56:03 Info: IMAP(rick): maildir: root=/usr/home/vpopmail/domains/havokmon.com/rick/Maildir, index=/usr/home/vpopmail/domains/havokmon.com/rick/Maildir, control=, inbox= dovecot: Mar 22 09:56:03 Info: IMAP(rick): Disconnected: Logged out Config: base_dir = /var/run/dovecot/ protocols = imap imaps listen = * disable_plaintext_auth = no shutdown_clients = yes log_path = /var/log/dovecot/dovecot.log info_log_path = /var/log/dovecot/dovecot_info.log log_timestamp = "%b %d %H:%M:%S " ssl_cert_file = /usr/local/share/courier-imap/mail-vfemail-godaddy.crt ssl_key_file = /usr/local/share/courier-imap/mail-vfemail-godaddy.key ssl_key_password = verbose_ssl = no login_dir = /var/run/dovecot/login login_user = nobody login_process_size = 64 login_process_per_connection = yes login_processes_count = 15 login_max_processes_count = 512 login_greeting = VFEmail IMAP Dovecot ready. namespace private { separator = . prefix = INBOX. inbox = yes } mail_debug = no mmap_disable = yes verbose_proctitle = yes first_valid_uid = 89 last_valid_uid = 0 protocol imap { mail_plugins = quota imap_quota imap_client_workarounds = outlook-idle } protocol pop3 { } protocol lda { postmaster_address = admin(a)vfemail.net } auth_verbose = no auth_debug = no auth default { mechanisms = plain passdb checkpassword { args = /usr/local/vpopmail/bin/vchkpw } userdb prefetch { } user = vpopmail } dict { } plugin { quota = maildir } I compiled both rc2x's with just ./configure Install prefix ...................... : /usr/local File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : none Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with mail delivery agent .. : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword vpopmail (modules) Building with password lookup modules : passwd passwd-file pam checkpassword vpopmail (modules) Building with SQL drivers ............: Though - for rc27, I had to disable vpopmail because it wouldn't build. Since I use checkpassword, it didn't matter. Rick

4 13

[Dovecot] rc29 and documentation changes
by Timo Sirainen 28 Mar '07

28 Mar '07

http://dovecot.org/nightly/dovecot-latest.tar.gz Any comments about the doc/wiki/ contents? doc/documentation.txt? dovecot-example.conf's doc/wiki/ pointers? ./autogen.sh now updates the wiki from http://www.dovecot.org/tmp/wiki-export.tar.gz (updated each night) if doc/wiki/Authentication.txt doesn't exist. I guess I'll release rc29 tomorrow. The current changes are: + Added auth_gssapi_hostname setting. - IMAP: LIST "" "" didn't return anything if there didn't exist a namespace with empty prefix. This broke some clients. - If Dovecot is tried to be started when it's already running, don't delete existing auth sockets and break the running Dovecot - If deliver failed too early it still returned exit code 89 instead of EX_TEMPFAIL. - deliver: INBOX fallbacking with -n parameter wasn't working. - passdb passwd and shadow couldn't be used as master or deny databases - IDLE: inotify didn't notice changes in mbox file - If index file directory couldn't be created, disable indexes instead of failing to open the mailbox. - Several other minor fixes

1 0

[Dovecot] MANAGESIEVE patch v3 for dovecot 1.0.rc28
by Stephan Bosch 28 Mar '07

28 Mar '07

Hello dovecot users, I have updated the MANAGESIEVE patch to apply and compile against dovecot 1.0.rc28. Not much has changed with respect to the functionality of the previous version however: ChangeLog vs v2 - Updated source to compile with dovecot 1.0.rc28, tested with rc27 (debian package) - Daemon now uses the same location for .dovecot.sieve as dovecot-lda This is typically ~/.dovecot.sieve. - If .dovecot.sieve is a regular file, it is now moved into the script storage as dovecot.orig.sieve, preventing deletion of (important) active scripts upon managesieve installation. Otherwise, it would simply be replaced by a symlink to the new active script. - Changed error handling to yield a BYE message when the managesieve daemon exits unexpectedly (upon login) before any commands are entered. Horde-ingo would wait indefinitely for a response. This patch still includes (yet another) instance of the CMU Sieve source, as explained in my previous mail (http://dovecot.org/list/dovecot/2006-July/015016.html) It can be downloaded at: http://sinas.rename-it.nl/~sirius/dovecot-1.0.rc28-MANAGESIEVE-v3.diff.gz Have fun testing the patch. Notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl IRC: Freenode, #dovecot, S[r]us

10 20

[Dovecot] gssapi auth issue...
by Dan Price 28 Mar '07

28 Mar '07

Hi all-- been away from the list for a few weeks so forgive me if this problem has been reported-- with the help of some of our Kerberos engineers, we tracked down why we can't authenticate our Solaris kerberos clients to Dovecot. Here's the deal: Our IT organization issued us kerberos tickets of the form imap(a)foobar.sfbay.sun.com Which I presume is their standard-- and probably not negotiable. However, the hostname of the machine is: "foobar", not foobar.sfbay.sun.com (as reported by gethostname(3c)). So when dovecot does this: mech-gssapi.c: principal_name = t_str_new(128); str_append(principal_name, service_name); str_append_c(principal_name, '@'); ---> str_append(principal_name, my_hostname); We wind up asking kerberos to look for a ticket for imap@foobar, instead of imap(a)foobar.sfbay.sun.com. Obviously we can patch the source, but I was wondering if we could have a gssapi_hostname setting in the config file? Or perhaps we could have a knob letting us globally override my_hostname? Although I don't know what side effects that could have. We have some new cores I also need to report-- I'll get on that. Thanks in advance, -dp -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

3 2

[Dovecot] Custom Mail Directory for some users
by Patrick Kranz 27 Mar '07

27 Mar '07

Hi list, I'm new on this mailing list and I'm kind of stucked at the moment. I managed to get Postfix and Dovecot working together with Amavis, OpenLDAP und SASL on Ubuntu Linux Release "Dapper Drake". The Dovecot version shipped with Dapper is 1.0-beta3 (at least, that's what the package database tells me), I also tried this with a Debian Backport of version 1.0-rc15. And here is my problem: A customer of mine needs usernames different from the mail address for his third party software to work. In other words, I need the ability to login with the username foo to get access to the mailbox bar(a)example.com. So I tried to override the mail_location property for this user with a separate mailDirectory attribute in my LDAP tree. Speaking in dovecot.conf words: mail_location = maildir:/var/spool/dovecot/mail/%d/%n auth default { machanisms = plain passdb ldap { args = /etc/dovecot/dovecot-ldap.com } userdb ldap { args = /etc/dovecot/dovecot-ldap.com } userdb static { args = uid=vmail gid=vmail user = dovecot } and dovecot-ldap.conf: hosts = localhost dn = cn=admin,dc=ekits,dc=de dnpass = secret auth_bind = yes ldap_version = 3 base = ou=mailsystem,dc=ekits,dc=de scope = subtree user_attrs = mailDirectory=mail user_filter = (&(objectClass=ekitsMailAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=ekitsMailAccount)(uid=%u)) user_global_uid = vmail user_global_gid = vmail a typical ldap entry looks something like this: dn: cn=Patrick Kranz,o=EK IT-Solutions,ou=mailsystem,dc=ekits,dc=de ekitsMailDestination: patrick(a)ekits.de objectClass: ekitsMailAccount objectClass: top cn: Patrick Kranz structuralObjectClass: ekitsMailAccount entryUUID: b4ebb9e8-6d8d-102b-9dc9-9edb870845a4 creatorsName: cn=admin,dc=ekits,dc=de createTimestamp: 20070323132526Z userPassword:: YVBhc3M= mailDirectory: maildir:/var/spool/dovecot/mail/ekits.de/blubb uid: patrick As far as I can interpret the log of slapd, dovecot doesn't even ask for the attribute "mailDirectory". I also tried this with userdb prefetch. With this it did actually ask for the attribute but it still had no effect. With this configuration dovecot creates the directory /var/spool/spool/dovecot/mail/patrick if I login with the uid patrick but I wanted access to /var/spool/dovecot/mail/ekits.de/blubb If anybody has any clue what I did wrong or if I have a conceptional misunderstanding, I would appreciate every help. Thanks in advance. Greetings, Patrick

3 4

[Dovecot] recent master-settings.c and main.c changes breaks dovecot on my system
by Daniel 27 Mar '07

27 Mar '07

Hi! Compiled the latest cvs today, and noticed the changes in src/master/main.c and master-settings.c. With the versions 1.80.2.19 and 1.125.2.28 (respectively) I can not start dovecot, because it says: Fatal: dup2(stdin) failed: Bad file descriptor Error: imap dump-capability process returned 89 After reverting the patch: http://www.dovecot.org/list/dovecot-cvs/2007-March/008371.html everything is back to normal. My system is OpenBSD 4.0 and dovecot is recent cvs. Daniel

2 1

[Dovecot] Coredump in dovecot-auth on gss auth
by Dan Price 27 Mar '07

27 Mar '07

I've enabled the GSS code in dovecot, but our Kerberos nerds are complaining that it doesn't work :) I probably have the thing totally misconfigured (so don't worry about that part for now), but I do have a crash: Info: imap-login: Disconnected: rip=XXX.YYY.229.8, lip= XXX.YYY.17.59, TLS handshake Error: auth(default): gssapi(?,XXX.YYY.229.8): While acquiring service credentials: No credentials were supplied, or the credentials were unavailable or inaccessible Error: auth(default): gssapi(?,XXX.YYY.229.8): While acquiring service credentials: No principal in keytab matches desired name Info: imap-login: Disconnected: method=GSSAPI, rip=129.146.229.8, lip=XXX.YYY.17.59 Error: child 188558 (auth) killed with signal 11 Info: imap-login: Disconnected: method=PLAIN, rip=129.146.229.8, lip=XXX.YYY.17.59 The dovecot auth process SIGSEGV's and dies at login time (I think). Here's the backtrace: (gdb) bt full #0 0xfef25e1a in gss_release_name () from /usr/lib/libgss.so.1 No symbol table info available. #1 0x08064ccf in mech_gssapi_auth_free (request=0xfef3c000) at mech-gssapi.c:394 minor_status = 0 #2 0x08060551 in auth_request_handler_flush_failures () at auth-request-handler.c:493 auth_request = (struct auth_request **) 0x8047b5c i = 1 size = 1 __PRETTY_FUNCTION__ = "auth_request_handler_flush_failures" #3 0x0806f54a in io_loop_handle_timeouts (ioloop=0x8096f78) at ioloop.c:276 t = (struct timeout *) 0x8098048 called_timeouts = (struct timeout *) 0x8098048 tv = {tv_sec = 134852200, tv_usec = 0} t_id = 2 #4 0x0806fb42 in io_loop_handler_run (ioloop=0x8096f78) at ioloop-poll.c:159 ctx = (struct ioloop_handler_context *) 0x8096fb0 pollfd = (struct pollfd *) 0x8096f78 tv = {tv_sec = 0, tv_usec = 0} io = (struct io *) 0x8047f99 t_id = 134836088 msecs = 134894204 ret = 0 call = true #5 0x0806f65d in io_loop_run (ioloop=0x8096f78) at ioloop.c:311 No locals. #6 0x08062bb2 in main (argc=1, argv=0x809ae68) at main.c:321 foreground = false Thanks, -dp -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

3 2