- dovecot - dovecot.org

[Dovecot] Site down?
by Michael Blinn 05 Oct '06

05 Oct '06

I'm getting a 'Forbidden' when accessing dovecot.org.. Have we been rooted, or is this scheduled maintenance, or..? -Michael

2 1

[Dovecot] Website down? SSL2?
by Rick Romero 05 Oct '06

05 Oct '06

I think the website is down.. I can't get to the root, or any of the 'previously visited' links I still have in my browser. How do I turn off SSLv2 support?

1 0

[Dovecot] bug with rsh/ssh connections
by David Lee 05 Oct '06

05 Oct '06

(Using rc7 code) There seems to be a bug in rsh/ssh-style connections. For reference, on a normal imap connection (port 143, 993, etc.) things are OK. The imap session ends (from a client-end command "a logout") thus: --- a logout * BYE Logging out a OK Logout completed. Connection closed by foreign host. unix-prompt% --- But when the connection had been established using rsh or ssh to the servers's "/etc/rimapd" which contains: exec /usr/dovecot/sbin/dovecot --exec-mail imap the session ends thus: --- a logout * BYE Logging out a OK Logout completed. imap(<username>): Info: Disconnected: Logged out unix-prompt% --- Note that additional, protocol-breaking, "imap(...): Info ..." line. This seems to be coming from "imap/cmd-logout.c" calling: client_disconnect(client, "Logged out"); which in turn ("imap/client.c") does: i_info("Disconnected: %s", reason); On the imap connection, this "i_info(...)" output goes (correctly) to syslog, but on the rsh/ssh connection this output seems to go to something like stdout. This strongly suggests a bug: an inconsistency between the two connection types, possibly regarding the way that stdout, stderr, syslog etc. are initialised, assigned, adjusted, etc. -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : Durham University : : http://www.dur.ac.uk/t.d.lee/ South Road : : Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. :

1 0

[Dovecot] Bug: auth_cache breaks master password feature
by Bill Boebel 05 Oct '06

05 Oct '06

When you set auth_cache_size to a value greater than zero, it breaks the master password feature in Dovecot. It appears that during a cache hit, Dovecot attempts to query the userdb for use the master user's home directory and other settings, rather than querying for the userdb settings of the user that the master was trying to log in for... causing the login to fail. Perhaps caching the userdb settings in addition to the passdb settings (since that is on the TODO list) would indirectly fix this problem. Bill

2 1

[Dovecot] dovecot with vpopmail
by nq525＠singnet.com.sg 05 Oct '06

05 Oct '06

I have been using bincimap with vpopmail for awhile and would like to give dovecot a try. Does anyone has any success configuring dovecot with vpopmail? I have installed dovecot but didn't manage to get it up with vpopmail. It will be good if someone can share their settings on dovecot.conf with me. Thanks

1 0

[Dovecot] Can't load certificate file: cert already in hash table
by Peter Abrahamsen 05 Oct '06

05 Oct '06

Hi, I've searched for this error and found nothing. When I switch on SSL, I get the following errors: >>> Oct 3 20:05:23 [dovecot] Dovecot v1.0.rc7 starting up Oct 3 20:05:24 [dovecot] Login process died too early - shutting down Oct 3 20:05:24 [dovecot] imap-login: Can't load certificate file /etc/ssl/certs/dovecot.crt: error:0B07C065:x509 certificate routines:X509_STORE_add_cert:cert already in hash table Oct 3 20:05:24 [dovecot] pop3-login: Can't load certificate file /etc/ssl/certs/dovecot.crt: error:0B07C065:x509 certificate routines:X509_STORE_add_cert:cert already in hash table - Last output repeated twice - Oct 3 20:05:24 [dovecot] child 13344 (login) returned error 89 Oct 3 20:05:24 [dovecot] child 13345 (login) returned error 89 Oct 3 20:05:24 [dovecot] child 13346 (login) returned error 89 Oct 3 20:05:24 [dovecot] child 13347 (login) returned error 89 <<< This is Gentoo on amd64 with openssl 0.9.8d. The cert and key were generated with tinyca and openssl 0.9.8c (I know, I know, it's upgrading now). I made 'em the same way I made my ldap and apache certs, which work fine. Any pointers? Also, why am I given a numeric error code? Thanks, Peter

2 1

[Dovecot] Whatever happened to rc8?
by Charles Marcus 04 Oct '06

04 Oct '06

It sounded like there was going to be one, so that some of the fixes that didn't make it into rc7 could be easily tested before releasing 1.0? -- Best regards, Charles

2 2

[Dovecot] No inbox for user error
by Ron 04 Oct '06

04 Oct '06

Hi, I'm getting 'no inbox for user' error. Set up sendmail, and can send and receive mail using Webmin/Usermin both to internal addresses and external ones. But Dovecot gives the no inbox error. I've tried telnetting in and get: +OK dovecot ready. USER myob -ERR Unknown command USER myob +UK PASS <password> +OK Logged in. -ERR No INBOX for user. No idea why the first USER command gives an error. And, of course, when I try using Evolution I get 'Cannot get POP summary'. The Dovecot config file, less all the commented out bits is: imap_listen = [::] pop3_listen = [::] imaps_listen = [::] pop3s_listen = [::] ssl_cert_file = /etc/pki/dovecot/dovecot.pem ssl_key_file = /etc/pki/dovecot/private/dovecot.pem login_dir = /var/run/dovecot-login login_chroot = yes login = imap login_user = dovecot login = pop3 default_mail_env = mbox_locks = fcntl auth = default auth_mechanisms = plain auth_userdb = passwd auth_passdb = pam auth_user = root Any and all ideas very welcome. I'm a total newbie at this server business... Thanks in advance. Ron

1 0

[Dovecot] Hooks API
by Boris Ivanov 04 Oct '06

04 Oct '06

Hi Is it possible to make hook api? I mean universal hooks any commands of pop3/imap which can trigger your modules. Not just quota etc,,, Boris

3 4

Re: [Dovecot] Errors while doing make on Solaris 9 for dovecot-1.0.rc7
by Agarwal, Lalit 03 Oct '06

03 Oct '06

Thanks. make AR=ar works -----Original Message----- From: Timo Sirainen [mailto:tss@iki.fi] Sent: Monday, September 25, 2006 1:18 PM To: Agarwal, Lalit Cc: dovecot(a)dovecot.org Subject: Re: [Dovecot] Errors while doing make on Solaris 9 for dovecot-1.0.rc7 On 25.9.2006, at 16.41, Agarwal, Lalit wrote: > rm -f liblib.a > false cru configure has detected your "ar" binary to be "false", which really doesn't work. I'm not sure what the right way to fix this would be (see what config.log says about it), but one workaround at least would be if you ran make as: make AR=ar Of course if you don't have ar at all in the path, that's your problem. :) Looks like it exists in /usr/ccs/bin/.

1 0

[Dovecot] Dovecot as LDA
by Gerard Seibert 03 Oct '06

03 Oct '06

FreeBSD 6.1-RELEASE-p8 postfix-current-2.4.20060903,3 dovecot-1.0.r7 I am experiencing a problem with dovecot as an LDA. It will not deliver mail unless the mail directory is chmod'd to 1777. Below is an example of the log file output. The dovecot.log file had over a hundred entries similar to this: deliver(gerard): Error: open(/var/mail/.temp.scorpio.seibercom.net.1123.cd38cd4d82e1368f) failed: Permission denied deliver(gerard): Error: file_lock_dotlock() failed with mbox file /var/mail/gerard: Permission denied Obviously the /var/log/maillog had similar fail warnings. By changing the permission to 1777 on the /var/mail directory and running postsuper -r ALL, I was able to get the mail delivered. What I am trying to determine is if I really should have those settings on the directory, or if I have something configured wrong in either postfix or dovecot. Postfix will deliver mail without any problem so I think it has to do with dovecot although I am not sure what. -- Gerard

3 4

[Dovecot] Quota with quota dict and peruser quota, dovecot LDA needed?
by Peter Veerman 03 Oct '06

03 Oct '06

Hi, This mail sources from the thread with this topic title: Re: [Dovecot] [SOLVED] quota with: postfixadmin, postfix, mysql & dovecot As this title does no longer cover the topic i decided to start a new thread. I have set up quota:dict with the proxy::quotadict option and i'm not using dovecot LDA. My quota table is filled with records like username: pveerman(a)nemo.kabelfoon.net path: 0 current: 0 and the personal max-quota reported by the client is okay, but the current-quota is 0. What am I doing wrong here? Peter

1 1

[Dovecot] Dovecot accepts squirrelmail, rejects fetchmail
by M. Fioretti 01 Oct '06

01 Oct '06

Hello, this is a follow-up to the thread "Fetchmail can't talk to dovecot" http://www.dovecot.org/list/dovecot/2006-September/016477.html Increasing the log level I get this in the log filed: Sep 30 15:04:19 fm dovecot: Dovecot v1.0.rc7 starting up Sep 30 15:04:22 fm dovecot: auth(default): passwd-file /etc/dovecot_user_file: Read 1 users Sep 30 15:05:05 fm dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAPsecured +lip=::ffff:SERVER_IP_HERE rip=::ffff:CLient_IP_HERE resp=LONG_STRING_HERE VDBB Sep 30 15:05:05 fm dovecot: auth(default): passwd-file(user_name,::ffff:CLIENT_IP_HERE): unknown user Sep 30 15:05:07 fm dovecot: auth(default): client out: FAIL 1 user=user_name Sep 30 15:05:07 fm dovecot: imap-login: Aborted login: user=<user_name>, method=PLAIN, rip=::ffff:CLIENT_IP_HERE, +lip=::ffff:SERVER_IP_HERE, TLS Remember that when the same user name and password come from Squirrelmail on the same host where dovecot runs, everything works. Why does it fail with fetchmail? what does that message "unknown user" exactly mean? Thank you in advance for any help, Marco

3 3

[Dovecot] [SOLVED] quota with: postfixadmin, postfix, mysql & dovecot
by Peter Veerman 01 Oct '06

01 Oct '06

Hi, I'm quite new to dovecot but already quite satisfied. Your documentation in the wiki is great but on quota + mysql it is not very clear. Because of the previously mentioned I have got the following note to make which you will hopefully use to adjust your wiki documentation on per-user-quota + mysql. I've searched your mail archive as good as possible and found no messages on this. If already messages have been exactly on this topic I want to apologize for sending this one. The notes I want to make is about this page: http://wiki.dovecot.org/Quota I'm using postfix + postfixadmin & mysql and dovecot (previously I used courier-imap instead of dovecot). The problems I ran in to was with setting up the per-user quota, as the explanation at the wiki is quite vague. For instance, the dict plugin is used to keep the quota counters in the mysql backend but only one single line shows how to set-up a per user quota. Setting up a per user quota where the max-quota is stored in mysql should be made making use of this setting: ========== user_query = SELECT home, uid, gid, 'dirsize:storage=' || quota_bytes AS quota FROM users WHERE userid = '%u' ========== nowhere is mentioned that this should also! be set: =========== protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } =========== the second point I want to make is that the mysqlquery is incorrect as || does not do the job of joining the two strings. Secondly is dovecot making use of kilobytes instead of bytes like postfix (and postfixadmin) does. For this I have found the following solution: ========== user_query = SELECT maildir, 125 AS uid, 125 AS gid,\ CONCAT('dirsize:storage=', ROUND( mailbox.quota / 1024 ) ) AS quota \ FROM mailbox WHERE username = '%u' AND active = '1' ========== Here I select the quota field from the mailbox table. This is then divided by 1024 (1Kbyte) and ROUNDED off in order to get rid of the .00 that results from this division. Greetz, Peter Veerman pveerman NO-SPAM at NO-SPAM hackwerk DOT net

6 7

[Dovecot] fetchmail can't talk to dovecot
by M. Fioretti 30 Sep '06

30 Sep '06

Hello, I have dovecot q1.0-0_22.rc7 up and running on a server: I can read email from squirrelmail just fine. When I try to download email with fetchmail, however, I get the result below. Why is that happening? In dovecot.conf I have: protocols = imap imaps pop3, so why should pop3 or imap fail? Where should I look? (I'll fix the certificates problem after I've managed to get in successfully with plain imap or pop3) Thanks, Marco fetchmail: 6.3.2 querying my.server (protocol POP3) at Wed 27 Sep 2006 12:15:17 AM CEST: poll started fetchmail: POP3< +OK Dovecot ready. fetchmail: POP3> CAPA fetchmail: POP3< +OK fetchmail: POP3< CAPA fetchmail: POP3< TOP fetchmail: POP3< UIDL fetchmail: POP3< RESP-CODES fetchmail: POP3< PIPELINING fetchmail: POP3< STLS fetchmail: POP3< USER fetchmail: POP3< SASL PLAIN DIGEST-MD5 fetchmail: POP3< . fetchmail: POP3> STLS fetchmail: POP3< +OK Begin TLS negotiation now. fetchmail: Issuer Organization: SomeOrganization fetchmail: Issuer CommonName: localhost.localdomain fetchmail: Server CommonName: localhost.localdomain fetchmail: Server CommonName mismatch: localhost.localdomain != my.server fetchmail: my.server key fingerprint: ... fetchmail: Server certificate verification error: self signed certificate fetchmail: POP3> CAPA fetchmail: POP3< +OK fetchmail: POP3< CAPA fetchmail: POP3< TOP fetchmail: POP3< UIDL fetchmail: POP3< RESP-CODES fetchmail: POP3< PIPELINING fetchmail: POP3< USER fetchmail: POP3< SASL PLAIN DIGEST-MD5 fetchmail: POP3< . fetchmail: POP3> USER user_name fetchmail: POP3< +OK fetchmail: POP3> PASS * fetchmail: POP3< -ERR Authentication failed. fetchmail: Authentication failed. fetchmail: Authorization failure on user_name(a)my.server fetchmail: POP3> QUIT fetchmail: POP3< +OK Logging out fetchmail: 6.3.2 querying my.server (protocol POP3) at Wed 27 Sep 2006 12:15:21 AM CEST: poll completed fetchmail: Query status=3 (AUTHFAIL) fetchmail: Writing fetchids file. fetchmail: normal termination, status 3 fetchmail: Writing fetchids file. if I try with IMAP the part after the certificate verification error is: fetchmail: IMAP> A0003 CAPABILITY fetchmail: IMAP< * CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDRE N NAMESPACE LOGIN-REFERRALS AUTH=PLAIN AUTH=DIGEST-MD5 fetchmail: IMAP< A0003 OK Capability completed. fetchmail: Protocol identified as IMAP4 rev 1 fetchmail: IMAP> A0004 LOGIN "user_name" * fetchmail: IMAP< A0004 NO Authentication failed. fetchmail: IMAP> A0005 * fetchmail: Authorization failure on user_name(a)my.server fetchmail: IMAP> A0006 LOGOUT fetchmail: IMAP< A0005 BAD Error in IMAP command received by server. fetchmail: IMAP< * BYE Logging out and I don't see any error message related to this in the server log.

2 3

Re: [Dovecot] SSL errors
by Bill Boebel 29 Sep '06

29 Sep '06

On Fri, September 29, 2006 11:47 am, Charles Marcus <CMarcus(a)Media-Brokers.com> said: > Bill Boebel wrote: >> I have a Dovecot server set up as a proxy and getting a ton of these >> errors, but I'm not sure where to begin troubleshooting it. I'm >> hearing frequently that Outlook users who use IMAP with SSL are >> getting disconnected often as a result. Any suggestions?... > > Need more details... Dovecot version? Platform? > Sorry... Red Hat ES4 (2.6.9-42.0.2.EL), latest dovecot CVS 20060926. login_process_per_connection = no login_processes_count = 3 login_max_processes_count = 10 login_max_connections = 4000 login_process_size = 64 Also added this to the dovecot init script to allocate more file descriptors to dovecot: start() { echo -n $"Starting $prog: " + ulimit -n 16384 daemon /usr/sbin/dovecot Also, seeing this error occasionally... Sep 29 11:34:15 director4 dovecot: imap-login: SSL_write() syscall failed: Bad file descriptor [166.137.221.91] Maybe nothing to worry about now that I have increased "login_process_size". Checking with customers to see if the Outlook IMAP SSL disconnects are still frequently occurring. Thanks, Bill

1 0

[Dovecot] SSL errors
by Bill Boebel 29 Sep '06

29 Sep '06

I have a Dovecot server set up as a proxy and getting a ton of these errors, but I'm not sure where to begin troubleshooting it. I'm hearing frequently that Outlook users who use IMAP with SSL are getting disconnected often as a result. Any suggestions?... Sep 29 11:12:07 director4 dovecot: imap-login: SSL_accept() failed: error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure [64.81.197.28] Sep 29 11:12:07 director4 dovecot: imap-login: SSL_accept() syscall failed: EOF [24.236.204.154] Bill

2 1

Re: [Dovecot] SSL errors
by Bill Boebel 29 Sep '06

29 Sep '06

On Fri, September 29, 2006 11:23 am, Bill Boebel <bill(a)webmail.us> said: > I have a Dovecot server set up as a proxy and getting a ton of these errors, but > I'm not sure where to begin troubleshooting it. I'm hearing frequently that > Outlook users who use IMAP with SSL are getting disconnected often as a result. > Any suggestions?... > > Sep 29 11:12:07 director4 dovecot: imap-login: SSL_accept() failed: > error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure [64.81.197.28] > > Sep 29 11:12:07 director4 dovecot: imap-login: SSL_accept() syscall failed: EOF > [24.236.204.154] > Actually, I found in the archives that I should increase login_process_size if I'm not running with login_process_per_connection. I have done this and that seems to have taken care of the malloc failure. However I am still getting a ton of these every few seconds: Sep 29 11:30:06 director4 dovecot: imap-login: SSL_read() syscall failed: EOF [70.171.61.190] Sep 29 11:30:06 director4 dovecot: imap-login: SSL_read() syscall failed: EOF [24.236.204.154] Sep 29 11:30:06 director4 dovecot: imap-login: SSL_read() syscall failed: EOF [70.171.61.190] Sep 29 11:30:08 director4 dovecot: imap-login: SSL_read() syscall failed: EOF [65.242.19.3]

2 1

[Dovecot] Passdb passwd on FreeBSD
by Jim Flowers 29 Sep '06

29 Sep '06

I am trying to use dovecot for both virtual and local pop3 mailboxes. When I try to access a local account, I get an "unknown user" reject from 'passdb sql', as expected. However, I also get a reject from 'passdb pam' with the message: dovecot: auth(default_with_listener): pam(username(a)domain.tld,###.###.###.###): pam_authenticate() failed: authentication error. Is this because it is trying to authenticate username(a)domain.tld instead of just username? What can I do about it? Although I have a block for 'passdb passwd' following the 'passdb pam' block, there is nothing in the log. Why is this, I wonder? Any help to point me in the right direction will be appreciated. Thanks. -- Jim Flowers <jflowers(a)ezo.net> -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

[Dovecot] Quota plugin rewrite
by Timo Sirainen 28 Sep '06

28 Sep '06

Backported from CVS HEAD to branch_1_0. You can get it as a patch from http://dovecot.org/patches/1.0/quota-rewrite.diff New features include support for multiple quota roots, so you could have eg. per-user quota and a larger domain quota (although no backend actually supports this yet..). The more important feature is that you can configure specific mailboxes to have a bit more space available for them, such as Trash or Spam. The configuration has also changed. Normally you'd use something like this: quota = maildir # 1GB quota in general quota_rule = *:storage=1048576 # Trash mailbox gets 100MB more (so max. 1,1GB) quota_rule2 = Trash:storage=102400 # Spam mailbox gets also +100MB (still maxes at 1,1GB, not 1,2GB) quota_rule3 = Spam:storage=102400 You can place all the above into plugin { .. } section in dovecot.conf. In userdb if users have different quotas you'd then need to override only quota_rule (not quota, quota_rule2 and quota_rule3). I tested quickly that this seemed to work as described above. Please test and report. :)

2 6

[Dovecot] [BUG(let)] Dovecot does not recognize threaded/reentrant mysql libs
by OpenMacNews 28 Sep '06

28 Sep '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hi, i build mysql (currently v5.0.22) on OSX 10.4.7 w/ threading enabled. i.e., i build the reentrant libs: libmysqlclient_r.dylib rather than the 'usual': libmysqlclient.dylib currently, to make Dovecot 'play nice' and recognize the reentrant libs, I: perl -pi -e 's/AC_CHECK_LIB\(mysqlclient,/AC_CHECK_LIB\(mysqlclient_r,/g' configure.in perl -pi -e 's/mysql_lib=\"\-lmysqlclient \-lz \-lm"/mysql_lib=\"\-lmysqlclient_r \-lz \-lm\"/g' configure.in then: autoreconf -i -f before configure, etc. subsquent build/exec/function all seem OK with this mod, and the linked, reentrant mysql lib: ls -al /usr/local/dovecot/libexec/dovecot/dovecot-auth -rwxr-xr-x 1 root wheel 950616 Sep 28 09:59 /usr/local/dovecot/libexec/dovecot/dovecot-auth otool -L /usr/local/dovecot/libexec/dovecot/dovecot-auth /usr/local/lib/libiconv.2.dylib (compatibility version 7.0.0, current version 7.0.0) /usr/lib/libpam.1.dylib (compatibility version 1.0.0, current version 1.0.0) /usr/local/mysql/lib/mysql/libmysqlclient_r.15.dylib (compatibility version 16.0.0, current version 16.0.0) /usr/local/lib/libreadline.5.1.dylib (compatibility version 5.0.0, current version 5.1.0) /usr/local/ncurses/lib/libncurses.5.5.dylib (compatibility version 5.5.0, current version 5.5.0) /usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 88.1.6) /usr/local/ssl/lib/libssl.0.9.8.dylib (compatibility version 0.9.8, current version 0.9.8) /usr/local/ssl/lib/libcrypto.0.9.8.dylib (compatibility version 0.9.8, current version 0.9.8) /usr/local/lib/libz.1.dylib (compatibility version 1.0.0, current version 1.2.3) /usr/lib/libgcc_s.1.dylib (compatibility version 1.0.0, current version 1.0.0) once verified that these changes are sufficient (anybody else got eyeballs on this?), a conditional in configure should do ... richard - -- /"\ \ / ASCII Ribbon Campaign X against HTML email, vCards / \ & micro$oft attachments [GPG] OpenMacNews at gmail dot com fingerprint: 50C9 1C46 2F8F DE42 2EDB D460 95F7 DDBD 3671 08C6 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iEYEARECAAYFAkUcAcUACgkQlffdvTZxCMYQXACgustNRKkqu97hWI88CTQwxZG7 q10AniSAcnhYesxf68x4y5Z7pg6uf/2f =py2/ -----END PGP SIGNATURE-----

1 0

[Dovecot] LDA and chroot
by Uldis Pakuls 28 Sep '06

28 Sep '06

Hi, I'd like to ask: is it possible to use Dovecot's LDA with mail_chroot variable set, e.g. "mail_chroot = /serv/storage19/vmail"? Without "mail_chroot" set all works fine. If mail_chroot is set and user database contains relative paths to home directory (without chroot part like "domain.net/user") deliver ignores this and tries to work at real root, while imap and pop3 processes founds home directory correctly. If users database contains full paths deliver works correctly, but imap/pop3 processes tries to access chroot directory + full path (and fails). Home directory in form "/chroot/path/./domain.net/user" solves the problem..., but as I understand, it is jut form to override default. Thus I can't find a way to correctly set default chroot path. Any suggestions? Tnx, Uldis

1 0

[Dovecot] LDA directly to Maildir/cur
by Scott Murman 28 Sep '06

28 Sep '06

i'm tired of dealing with buggy clients so i'm moving more processing into the server-side. i configured procmail as LDA with maildir-style mailboxes. i would like to simulate an automatic "mark as read" feature during procmail processing. simplest way looks to be forcing delivery directly to Maildir/cur instead of Maildir/new, but i suspect this may screw up dovecot. will this work? is there another (better) method? -SM-

3 3

[Dovecot] dovecot checkpassword passdb and vmailmgr
by Mij 28 Sep '06

28 Sep '06

hello some times ago I posted some patches to workaround vmailmgr not fitting into dovecot's passdb-checkpassword authentication module. Yesterday I spent some spare time for carrying out a cleaner solution for this problem. Check out these patches. If you're not interested in merging them, I will make them available at the same page I used for the former solution [ http://mij.oltrelinux.com/net/dovecot-qmail-vmailmgr ]; there were some 20 people/month that checked it out. This is a brief explanation of the patches: The root of all evil is that the checkpassword interface [ http://cr.yp.to/checkpwd/interface.html ] leaves room to interpretation when the scope is not system login. Vmailmgr and vpopmail, for example, collapse many mail users on the same system account. So, what "home" is here is not specified. In the case of vmailmgr, it's "checkvpw" sets HOME to the system user's home, and returns the path of the actual mail user differently. The solution I applied for this problem is to generalize the process that fetches authentication data (what currently is "checkpassword- reply"). I was set up for a specific passdb-vmailmgr module, but this would have seen a lot of code replication. Similarly (but I did not inspect further), I guess vpopmail can fit in this solution as well. So 1) provide a module "vmailmgr-reply", with the same behavior as checkpassword-reply, that's aware of the way checkvpw returns accounting information and pass this back to dovecot transparently so, this patch ships vmailmgr-reply along with checkpassword-reply (name them "fetcher"s for brevity) The idea is that every checkpassword-compatible module may have its own fetcher for passing correct info back to dovecot. Now with this generalization, the user must be able to specify if its checkpassword module needs a custom fetcher, and if it does, what's its path. So 2) modify auth/passdb-checkpassword.c and pump "args =". By default it takes the path of the checkpassword module (e.g. "checkvpw"), now it can be appended another field, that is the path of the custom fetcher. If this optional is omitted, the default checkpassword-reply will be used, and the cp module is supposed to behave like dovecot expects from it. Otherwise, a comma appear after the first path. e.g. passdb checkpassword { args = /xyz/checkvpw,/libexec/vmailmgr-reply } if one needs to specify paths with commas in the first one, commas can be escaped with \ (eg args=first\,path,second_path) Last but not least, the patch addresses again the problem with colons in paths. Currently, dovecot dictates no colons can exist in mailbox path names. In UNIX, no such constraint exist. Moreover, paths with colons are common when working specifically with qmail (see dot-qmail). When dovecot encounters ':', it truncates the path. This way, for example, if the authentication module returned home "/ path/name:surname", dovecot will truncante it to "/path/name". If name exist, name:surname will browse his mail without effort. All this comes from dovecot parsing params on MAIL environment (INDEX, INBOX, CONTROL), but it also happens if none of them was actually specified. So 3) modify lib-storage/index/maildir/maildir-storage.c for fixing the parsing problem with the mail environment. [ I did not provide the same fix for the remaining storages, but this can easily be done by copy/paste if convenient ]. For simplification and without loss of generality, this fix mandates ":INBOX=", ":INDEX=" and ":CONTROL=" params to follow in this order, if they appear. [ a minor patch agains auth/Makefile.am is provided for including vmailmgr-reply when building the rest of the auth stuff ] Any comment on this is welcome for discussion. bye

1 0

[Dovecot] Big sites using Dovecot
by Jonathan 28 Sep '06

28 Sep '06

Hi, Are there any big Dovecot sites (say 50,000-100,000) users on this list? What sort of hardware do you use. What sort of problems do you see? Many thanks, Jonathan.

14 22