- dovecot - dovecot.org

[Dovecot] (resolved) Re: Beginner Help with a fatal error in a first Basic Install
by Paul 20 Aug '06

20 Aug '06

Hello Richard, On 8/19/06, OpenMacNews <openmacnews(a)gmail.com> wrote: > > > dovecot: Aug 18 07:06:50 Error: IMAP(paulg): dyld: Library not loaded: > > /usr/local/ssl/lib/libssl.0.9.8.dylib > > i've had these same > can't-find-libssl-even-though-i'm-staring-right-at-it probelms in dovecot. > > after a little poking in code, i note that dovecot check first to get > its ssl lib/include link info from pkg-config, and seems to get > flustered by the presence of your own LDFLAGS/CPPFLAGS specification of > ssl location. > > that said, i've managed to work around it fairly simply. Thanks, thanks, thanks! This, apparently, was the problem, and, once I figure out where to find the pkg-config source (not bundled with OSX?), following your instructions cleared it up. Again. Thanks for your help! Paul

1 0

[Dovecot] Beginner Help with a fatal error in a first Basic Install
by Paul 20 Aug '06

20 Aug '06

dovecot(a)dovecot.org Hello, I have been doing my first BasicInstall of Dovecot, following the documentation for VirtualUsers, and piecing together suggestions from other on the list, and out on the web. In dovecot.conf, I have added, default_mail_env = maildir:/var/Dovecot/%d/Accounts/%1u/%u/Maildir:INDEX=/var/Dovecot/indexes/%d/%n auth default { mechanisms = plain user = pgnmail passdb passwd-file { args = /etc/imap.passwd } userdb static { args = static uid=99 gid=99 home=/var/Dovecot mail=maildir:%h/%d/Accounts/%1u/%u nice=10 } } My User+Passwd DB file is /etc/imap.passwd paulg:{PLAIN}testpass:99:99::/var/Dovecot/domain.com/Accounts/t/paulg::: On Dovecot startup, my log shows, dovecot: Aug 18 07:10:40 Info: Dovecot v1.1.UNSTABLE starting up dovecot: Aug 18 07:10:42 Info: auth(default): passwd-file /etc/imamp.passwd: Read 1 users When I telnet in, I see, Connected to domain.com. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS STARTTLS AUTH=PLAIN] domain.com Dovecot IMAP4 ready and when I login with, x login testuser testpass I see, dovecot: Aug 18 07:06:50 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=192.168.1.6 rip=192.168.1.6resp=<hidden> dovecot: Aug 18 07:06:50 Info: auth(default): client out: OK 1 user=paulg dovecot: Aug 18 07:06:50 Info: auth(default): master in: REQUEST 3 14946 1 dovecot: Aug 18 07:06:50 Info: auth(default): master out: USER 3 paulg static uid=99 gid=99 home=/var/Dovecot mail=maildir://Accounts/t/paulg nice=10 dovecot: Aug 18 07:06:50 Info: imap-login: Login: user=<paulg>, method=PLAIN, rip=192.168.1.6, lip=192.168.1.6, secured dovecot: Aug 18 07:06:50 Error: IMAP(paulg): dyld: Library not loaded: /usr/local/ssl/lib/libssl.0.9.8.dylib dovecot: Aug 18 07:06:50 Error: IMAP(paulg): Referenced from: /usr/local/dovecot/libexec/dovecot/imap dovecot: Aug 18 07:06:50 Error: IMAP(paulg): Reason: image not found dovecot: Aug 18 07:06:51 Error: child 14963 (imap) killed with signal 5 I'm concerned about the "//" in, mail=maildir://Accounts/t/paulg Is that correct? And, of course, the, dovecot: Aug 18 07:06:50 Error: IMAP(paulg): dyld: Library not loaded: /usr/local/ssl/lib/libssl.0.9.8.dylib which I have no idea about. Looking at the libraries linked into the "/usr/local/dovecot/libexec/dovecot/imap" executable, I see /usr/local/ssl/lib/libssl.0.9.8.dylib (compatibility version 0.9.8, current version 0.9.8) /usr/local/ssl/lib/libcrypto.0.9.8.dylib (compatibility version 0.9.8, current version 0.9.8) /usr/lib/libgcc_s.1.dylib (compatibility version 1.0.0, current version 1.0.0) /usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 88.1.6) And, seeing if "/usr/local/ssl/lib/libssl.0.9.8.dylib", exists, ls /usr/local/ssl/lib/libssl.0.9.8.dylib /usr/local/ssl/lib/libssl.0.9.8.dylib Can someone help? Thank you. Paul

2 1

[Dovecot] Acl, Namespace, User Confusion
by Jim Horner 19 Aug '06

19 Aug '06

I'm using dovecot RC6. I have a group named "cmpymail" with 2 users "jdoe(a)arinbe.com" and "jsmith(a)arinbe.com". I set up a mail folders like: drwxrwx--- 4 cmpymail cmpymail 4096 2006-08-13 02:21 cmpymail drwxrwx--- 3 jdoe users 4096 2005-11-21 13:34 jdoe drwxrwx--- 3 jsmith users 4096 2006-08-13 02:27 jsmith drwxrwx--- 3 fred users 4096 2006-08-13 02:27 fred drwxrwx--- 3 wilma users 4096 2006-08-13 02:27 wilma In dovecot.conf namespace public { separator = . prefix = COMPANY. location = maildir:/home/services/mail/arinbe.com/company/Maildir:CONTROL=%h/shared-se… hidden = no } I have a dovecot-shared file -rw-rw---- 1 cmpymail cmpymail 0 2006-08-13 13:24 dovecot-shared What I can not do is restrict access to cmpymail to -just- jdoe and jsmith. I've looked at http://www.dovecot.org/list/dovecot/2006-June/013683.html I've tried adding mail_plugin_dir = /usr/local/lib/dovecot/imap mail_plugins = acl and a dovecot-acl file owner user=jdoe(a)arinbe.com lrwstiekxa user=jsmith(a)arinbe.com lrwstiekxa user=jdoe rwstiekxa user=jsmith lrwstiekxa I am not exactly sure what username to use. All users are in LDAP. The "cmpymail" group shows # getent group cmpymail:*:5555:jdoe,jsmith Nothing I do seems to work. I either get errors that wilma and fred can't access cmpymail, for instance when wilma/fred try to subscribe to folders, or wilma and fred have complete access to cmpymail (if I change cmpymail's group to users instead of cmpymail). Is there a way to restrict access like I want? Thanks, Jim

2 3

Re: [Dovecot] dovecot Digest, Vol 40, Issue 65
by suranga de silva 18 Aug '06

18 Aug '06

Dear Tim Schafer, Take a look at my sample dovecot-ldap.conf hosts = localhost dn = cn=root,dc=ceylonlinux,dc=com dnpass = secret ldap_version = 3 base = dc=ceylonlinux,dc=com deref = never scope = subtree user_attrs = mail,homeDirectory=mailMessageStore,uidNumber=1003,gidNumber=1003 user_filter = (&(objectClass=user)(mail=%u)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=user)(mail=%u)) default_pass_scheme = CRYPT user_global_uid = 1003 user_global_gid = 1003 Here I am using my own schema called "user", but in your case change it to inetOrgPerson or the schema name you are using. I think the most common problem in this process is the ldap filter. Above in my configuration user_filter and pass_filter are used as ldap filters for querying user name and password. There I am using mail attribute. gid and uid are belong to the user vmail. May be this explanation will help you to figure out your problem You can refer my article in the following link for further reference http://www.ceylonlinux.com/pdf/openldap_backsql_postfix_maildir_cl.pdf Cheers!!! Suranga De Silva. CTO CEYLON LINUX On Thu, 2006-08-17 at 21:32 +0300, dovecot-request(a)dovecot.org wrote: > Send dovecot mailing list submissions to > dovecot(a)dovecot.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://dovecot.org/cgi-bin/mailman/listinfo/dovecot > or, via email, send a message with subject or body 'help' to > dovecot-request(a)dovecot.org > > You can reach the person managing the list at > dovecot-owner(a)dovecot.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of dovecot digest..." > > > Today's Topics: > > 1. Re: LDAP usernames with spaces (Tim Schafer) > 2. Supporting local and virtual LDAP users, with seperate > mail_env (Tim Schafer) > 3. Dovecot sometimes Down ! (kleiton(a)pcs.com.br) > 4. Re: dovecot mbox to dovecot maildir migration (Timo Sirainen) > 5. Re: Supporting local and virtual LDAP users, with seperate > mail_env (Timo Sirainen) > 6. Re: Supporting local and virtual LDAP users, with seperate > mail_env (Timo Sirainen) > 7. Re: Supporting local and virtual LDAP users, with seperate > mail_env (Tim Schafer) > 8. BSD kqueue testing, once more before 1.0rc7 (Timo Sirainen) > 9. Re: Supporting local and virtual LDAP users, with seperate > mail_env (Timo Sirainen) > 10. Re: BSD kqueue testing, once more before 1.0rc7 (Timo Sirainen) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 17 Aug 2006 10:00:37 -0700 > From: Tim Schafer <tim_schafer(a)shipfsp.com> > Subject: Re: [Dovecot] LDAP usernames with spaces > To: Johannes Berg <johannes(a)sipsolutions.net> > Cc: dovecot(a)dovecot.org > Message-ID: <44E4A0B5.50608(a)shipfsp.com> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Thank you Johannes, > > By modifying auth_username_chars in dovecot.conf > I was able to allow spaces in usernames. > > Regards, > Tim Schafer > > Johannes Berg said the following on 8/17/2006 12:24 AM: > > On Wed, 2006-08-16 at 18:14 -0700, Tim Schafer wrote: > > > > > I'm assuming it doesn't like the spaces. > > > Any way around this? > > > > You can set the allowed characters somehow. I forgot how, but check the > > annotated config file. > > > > > Also, I don't see any way to support the seperate username and userid > > > where the username is for authentication > > > and the userid is used for on disk pathname. > > > Anyway to support this? > > > > I know with SQL that's possible by just returning user= from the query, > > I guess LDAP as well. I think Timo just posted about this in some other > > ldap thread. Not quite sure though. > > > > Sorry to be so vague, I just happened to have skimmed some messages that > > seem to related to this recently. > > > > johannes > > > > > ------------------------------ > > Message: 2 > Date: Thu, 17 Aug 2006 10:20:03 -0700 > From: Tim Schafer <tim_schafer(a)shipfsp.com> > Subject: [Dovecot] Supporting local and virtual LDAP users, with > seperate mail_env > To: dovecot(a)dovecot.org > Message-ID: <44E4A543.3070100(a)shipfsp.com> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Is it possible to have local users with mail in > maildir:%h/.maildir > > and virutal users with mail in > maildir:/home/exim/%u/.maildir > > > I seem to have authentication working for both local users and LDAP users. > But I'm getting this error trying to access a virtual users mail. > > Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: > data=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir > Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: > root=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir, > index=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_B > Y_USERDB/.maildir, control=, inbox= > Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): > mkdir(/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir/cur) failed: > Permission denied > > -- > > > Regards, > Tim Schafer > Information Technology > Logistics Easier with Technology > > > Freight Solution Providers direct 916-376-6190 > 10453 Old Placerville Road fax 916-376-6156 > Sacramento, CA 95827 tim_schafer(a)shipfsp.com > > > > ------------------------------ > > Message: 3 > Date: Thu, 17 Aug 2006 14:26:48 -0300 (BRT) > From: kleiton(a)pcs.com.br > Subject: [Dovecot] Dovecot sometimes Down ! > To: dovecot(a)dovecot.org > Message-ID: > <34339.157.86.6.55.1155835608.squirrel(a)pcsoffice.dyndns.biz> > Content-Type: text/plain;charset=utf-8 > > > Please, my dovecot sometimes down ! > > Aug 17 14:20:01 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:02 netrasun last message repeated 3 times > Aug 17 14:20:03 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:20:04 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:16 netrasun last message repeated 19 times > Aug 17 14:20:16 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:20:16 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:21 netrasun last message repeated 6 times > Aug 17 14:20:21 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:20:21 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:24 netrasun last message repeated 4 times > Aug 17 14:20:25 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:20:25 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:38 netrasun last message repeated 13 times > Aug 17 14:20:39 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:20:39 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:47 netrasun last message repeated 9 times > Aug 17 14:20:48 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:20:49 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:57 netrasun last message repeated 7 times > Aug 17 14:20:58 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:21:00 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:21:08 netrasun last message repeated 7 times > > Please, Help-me ! > > > > ------------------------------ > > Message: 4 > Date: Thu, 17 Aug 2006 20:48:38 +0300 > From: Timo Sirainen <tss(a)iki.fi> > Subject: Re: [Dovecot] dovecot mbox to dovecot maildir migration > To: Michael Blancas <mblancas(a)mozcom.com> > Cc: dovecot(a)dovecot.org > Message-ID: <1155836918.9142.1.camel@hurina> > Content-Type: text/plain; charset="us-ascii" > > On Fri, 2006-08-18 at 00:05 +0800, Michael Blancas wrote: > > Hi, > > > > I'm migrating accounts from one server with dovecot mbox and pam > > nss-ldap authentication to a new server with dovecot maildir and mysql > > auth (no posix accounts). > > > > My problem is the pop3 uidl format on the two servers are different, > > even though I'm using pop3_uidl_format = %08Xu%08Xv in both configs, > > I'm always re-downloading left messages on my test runs. Is there a > > way I could reuse the X-UID and X-IMAPbase headers on the converted > > mails. Issuing the UIDL command via pop3 always give a different > > result for the mbox and maildir spools. > > > > The X-UID and X-IMAPbase headers are present in the converted mails. > > The first number of X-IMAPbase maps to the mail UIDVALIDITY and the > > second is the same as X-UID, the mail uid. > > You'll have to make your conversion script create dovecot-uidlist file > based on the X-IMAPbase and X-UID headers. There could be existing > scripts to do that, but I'm not sure. > >

1 0

[Dovecot] auth failure with digest-md5
by LeVA 18 Aug '06

18 Aug '06

Hi! I'm using: Dovecot 1.0.beta8 OpenBSD 3.9 KMail 1.9.3 My password file contains only one user now. I've changed its password to a dumb one: 'asd' (so this is not a wrong password failure :) I've configured the PLAIN and DIGEST-MD5 mechanisms in dovecot.conf, and I'm only using pop3. Also I've turned on the verbose auth logging, and I'm attaching the logs inline. My password db contains the {DIGEST-MD5} prefixed password. The problem is very simple but very weird. I start the dovecot server and try to log in. It succeeds, I'm happy. But after one (the first) success, all further logins fails. Yes this a sometimes working/sometimes not problem, which is rare in this business... Here is the log of the first success: 00:48:41 Info: auth(default): client in: AUTH 1 DIGEST-MD5 service=POP3 secured lip=192.168.0.202 rip=192.168.0.3 resp= <newline> 00:48:41 Info: auth(default): client out: CONT 1 cmVhbG09IiIsbm9uY2U9ImJua2tUaHBDVURJblFENWRJZlgyb1E9PSIscW9wPSJhdXRoIixjaGFyc2V0PSJ1dGYtOCIsYWxnb3JpdGhtPSJtZDUtc2VzcyI= <newline> 00:48:41 Info: auth(default): client in: CONT 1 dXNlcm5hbWU9ImxldmEiLHJlYWxtPSIiLG5vbmNlPSJibmtrVGhwQ1VESW5RRDVkSWZYMm9RPT0iLGNub25jZT0iTy9MYndLMVo1dWc4ZURiT2wzaWlhN2ZsTUVTV3MvN1JSc05HL3JPbzhpND0iLG5jPTAwMDAwMDAxLHFvcD1hdXRoLGRpZ2VzdC11cmk9InBvcC8xOTIuMTY4LjAuMjAyIixyZXNwb25zZT0wYTQ3ZmUyNmVlMDg0MWE4ZDgzNTM3NzI5MzUxZmE3YQ== <newline> 00:48:41 Info: auth(default): client out: CONT 1 cnNwYXV0aD01MmQ1YTRlNTVhNWNiYzA0NDk2YTg5ODcyMDMwMGUxYw== <newline> 00:48:41 Info: auth(default): client in: CONT 1 <newline> 00:48:41 Info: auth(default): client out: OK 1 user=username <newline> 00:48:41 Info: auth(default): master in: REQUEST 9 15718 1 <newline> 00:48:41 Info: auth(default): master out: USER 9 username uid=6000 gid=6000 home=/var/mail/virtual/username/./ <newline> 00:48:41 Info: pop3-login: Login: user=<username>, method=DIGEST-MD5, rip=192.168.0.3, lip=192.168.0.202, TLS <newline> 00:48:41 Info: POP3(username): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 And after that, every login fails: 00:49:28 Info: auth(default): client in: AUTH 1 DIGEST-MD5 service=POP3 secured lip=192.168.0.202 rip=192.168.0.3 resp=dXNlcm5hbWU9ImxldmEiLHJlYWxtPSIiLG5vbmNlPSJibmtrVGhwQ1VESW5RRDVkSWZYMm9RPT0iLGNub25jZT0iTy9MYndLMVo1dWc4ZURiT2wzaWlhN2ZsTUVTV3MvN1JSc05HL3JPbzhpND0iLG5jPTAwMDAwMDAyLHFvcD1hdXRoLGRpZ2VzdC11cmk9InBvcC8xOTIuMTY4LjAuMjAyIixyZXNwb25zZT0wMWRkMDNjYTcyMzBmMzM5YjRiY2NlM2VmMTcwMGU4Yw== <newline> 00:49:28 Info: pop3-login: Aborted login: method=DIGEST-MD5, rip=192.168.0.3, lip=192.168.0.202, TLS <newline> 00:49:28 Info: auth(default): passwd-file /etc/dovecot.passwd: Read 1 users I can notice that the second (the failure) log is shorter than the first (the success). Maybe something is missing from there. The PLAIN auth mechanism is working, even after a failed DIGEST-MD5 login. In fact the PLAIN login always works :) Thanks! Daniel -- LeVA

3 3

[Dovecot] Also in 1.0RC7, Beginner Help with a fatal error in a first Basic Install
by Paul 18 Aug '06

18 Aug '06

Thinking that the issue with libssl is an artifact of the unstable branch, I've just tried, a reproduced the problem with, v10.rc7. Thank you. Paul

1 0

[Dovecot] 1.0 RC7 released
by Netserve 18 Aug '06

18 Aug '06

>> | Can everyone now agree that there are no more hangs? :) > 100,000 logins since we upgraded, no problems at all Linux svr22 2.6.xx- FC4 #1 Fri Aug 26 20:35:25 EDT 2005 x86_64 x86_64 86_64 GNU/Linux Good work! Regards John Lyons ADSL £9.99 www.discountadsl.co.uk Netserve Consultants Ltd Unit 8 The Bungalow Offices St Asaph Business Park St Asaph LL17 0LQ T: 0845 6444194 F: 01745 582374 w: www.netserve.co.uk e: support(a)nsnoc.com

1 0

[Dovecot] LDAP Auth problems with auth_bind=yes
by Rob Coward 18 Aug '06

18 Aug '06

Hi, I first posted this problem a day or two ago and have not seen any responses yet. To clarify my problem, I am authenticating virtual users against Active Directory on Win2k3, where their login id is their email address. I am using an almost identical setup to Suranga's below, however my initial bind user doesn't have access to the userPassword attribute, so I am using: auth_bind = yes This is working fine when users enter their correct email address & password, or if the email address is not found, however if a valid email address is given but the password is incorrect, it seems to kill something in the ldap_auth code as all further connections get a temporary authentication error at the client, and the following in /var/log/maillog: Aug 18 13:04:31 gm-ho-lin-06 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=::ffff:127.0.0.1 rip=::ffff:127.0.0.1 resp=ADA5OTlAc3RvcmVzLmdhbWUuY28udWsAOTk5MA== Aug 18 13:04:31 gm-ho-lin-06 dovecot: auth(default): ldap(0999@stores.game.co.uk,::ffff:127.0.0.1): bind search: base=OU=Stores,OU=UK,DC=group,DC=game,DC=net filter=(&(objectClass=user)(mail=0999(a)stores.game.co.uk)) Aug 18 13:04:31 gm-ho-lin-06 dovecot: auth(default): ldap(0999@stores.game.co.uk,::ffff:127.0.0.1): ldap_search() failed: Operations error Aug 18 13:04:31 gm-ho-lin-06 dovecot: auth(default): client out: FAIL 1 user=0999(a)stores.game.co.uk temp Aug 18 13:04:31 gm-ho-lin-06 dovecot: imap-login: Aborted login: user=<0999(a)stores.game.co.uk>, method=PLAIN, rip=::ffff:127.0.0.1, lip=::ffff:127.0.0.1, secured Is the auth_ldap code not resetting the ldap connection bind details to the dn/dnpass values for each login ? You help would be greatly appreciated as I hope to make this a production server within the next week. Regards, Rob Coward Unix Developer GAME STORES GROUP LTD Tel: 01256 784476 Email: Rob.Coward(a)game.net -----Original Message----- From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] On Behalf Of suranga de silva Sent: 18 August 2006 19:14 To: dovecot(a)dovecot.org Subject: Re: [Dovecot] dovecot Digest, Vol 40, Issue 65 Dear Tim Schafer, Take a look at my sample dovecot-ldap.conf hosts = localhost dn = cn=root,dc=ceylonlinux,dc=com dnpass = secret ldap_version = 3 base = dc=ceylonlinux,dc=com deref = never scope = subtree user_attrs = mail,homeDirectory=mailMessageStore,uidNumber=1003,gidNumber=1003 user_filter = (&(objectClass=user)(mail=%u)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=user)(mail=%u)) default_pass_scheme = CRYPT user_global_uid = 1003 user_global_gid = 1003 Here I am using my own schema called "user", but in your case change it to inetOrgPerson or the schema name you are using. I think the most common problem in this process is the ldap filter. Above in my configuration user_filter and pass_filter are used as ldap filters for querying user name and password. There I am using mail attribute. gid and uid are belong to the user vmail. May be this explanation will help you to figure out your problem You can refer my article in the following link for further reference http://www.ceylonlinux.com/pdf/openldap_backsql_postfix_maildir_cl.pdf Cheers!!! Suranga De Silva. CTO CEYLON LINUX This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this e-mail in error please notify the system manager at: mailto:postmaster@game.net The recipient acknowledges that the transmissions made via the Internet can be corrupted and therefore THE GAME GROUP PLC and any of its subsidiaries do not give any warranty as to the quality or accuracy of any information contained in the message or assume any liability for it or for its transmission, reception or storage. This footnote also confirms that this e-mail message has been swept by anti-virus software for the presence of computer viruses. http://www.game.co.uk http://www.gamegroup.plc.uk

1 0

[Dovecot] How to change passwords on LDAP Server?
by Luis Motta Campos 18 Aug '06

18 Aug '06

Dear List People Someone here could please send me some advice on changin' LDAP passwords? It seems that everything is working nice, except by dovecot: I can send emails using my new LDAP password trought postfix smtp authentication, I can login to my Intranet website and to the Mod-LDAP protected pages on my company. I just can't POP my mail messages, because Dovecot says "dovecot-auth: ldap(user(a)company.net): password mismatch". I guess this is because I'm incorrectly coding the password. Please help me to figure out the right way to crypt the password so Dovecot can read this from the LDAP. *Extra* *Information:* I made a simpler and smaller test version of the program that I use to change passwords, its attached to the email. The essentials are there. *Versions:* My dovecot is a Debian/Sarge (Stable) 3.1 package. I'm also using Perl, Net::LDAP, Apache with Mod_Perl and OpenLDAP. Everything on linux, of course. Package Version ---- ---- dovecot-common 0.99.14-1sarge0 dovecot-imapd 0.99.14-1sarge0 dovecot-pop3d 0.99.14-1sarge0 perl 5.8.4-8sarge4 libnet-ldap-perl 0.3202-3 apache-perl 1.3.33-6sarge2 slapd 2.2.23-8 kernel-image-2.4.2 2.4.27-10sarge1 Any help, suggestion or comment are welcome. Thank you all in advance. -- Luis Motta Campos Segula Technologies Portugal http://www.segula.pt/ #!/usr/bin/perl use strict; use warnings; use Net::LDAP; use Carp qw( croak ); # Connects to server my $ldap = new Net::LDAP( 'localhost' ) or croak $@; my $message = $ldap->bind( 'uid=user,ou=People,dc=company,dc=com', password => 'secret' ); croak $message->error if $message->is_error; # Locate user $message = $ldap->search( base => 'ou=People, dc=company, dc=com', filter => 'uid=user', scope => 'one' ); croak $message->error if $message->is_error; my $entry = $message->entry(0); croak 'Nobody found!?!' unless $entry; # Replace password. $entry->replace( userPassword => '{CRYPT}'. crypt( 'secret', join( '', ('.', '/', 0..9, 'A'..'Z', 'a'..'z')[rand 64, rand 64] ) ) ); $message = $entry->update( $ldap ); croak $message->error if $message->is_error; # Report results. print q{User password changed to: "}.$entry->get_value( 'userPassword' ).qq{".\n};

1 0

[Dovecot] OT: best way to move maildirs to another host ?
by Brice Figureau 18 Aug '06

18 Aug '06

Hi, I'm sorry because this mail is a little bit off-topic, but Timo's email titled "1.0RC7 Released" made me think about a possible issue for me. I have to move an old dovecot installation (1.0b2) from an i386 server to a new x86_64 server running latest available dovecot. My concern is about moving all my users' mail stored as maildir onto this new server. What would be the best way to do that ? >From Timo's comment on 32bits->64bits migration, I guess I'll have to move only the maildirs (and get rid of dovecot cache files), right ? Next, from what I remember about maildir, the message names usually contain the inode so that the file name is unique. If I strictly move the files, I can be sure that the moved files won't have the same inodes number as what is in the name. Should I care ? Or should I use something different than scp/rsync to perform the migration ? Thanks for your answers, Regards, -- Brice Figureau <brice+dovecot(a)daysofwonder.com>

3 3

[Dovecot] Dovecot 1.0RC7 on FreeBSD 6.1/i386
by Martin Jackson 18 Aug '06

18 Aug '06

Everything looks good here, with kqueue support. Thanks for all the hard work, Timo! Marty

1 0

Re: [Dovecot] 1.0 RC7 released
by Bill Boebel 18 Aug '06

18 Aug '06

On Thu, August 17, 2006 6:28 pm, Timo Sirainen <tss(a)iki.fi> said: > I think my v1.0 TODO list is: > > - avoid duplicate flag change notifications, or in case the message is > also expunged don't bother notifying its flag changes at all > (shouldn't be hard) > - HFS+ avoid-hardlinks patch? > - 32bit -> 64bit upgrade still doesn't work without assert-crashing: > mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: > (fixed_size == (unsigned int)-1 || fixed_size == data_size) > - Courier-compatible INBOX. namespace gives "invalid namespace" errors What about this one? The "Connection queue full" issue doesn't appear to be entirely fixed. In fact the fix was disconnecting so frequently that I reverted to the non-fixed version: http://www.dovecot.org/list/dovecot/2006-August/015401.html Bill

1 0

[Dovecot] dovecot mbox to dovecot maildir migration
by Michael Blancas 18 Aug '06

18 Aug '06

Hi, I'm migrating accounts from one server with dovecot mbox and pam nss-ldap authentication to a new server with dovecot maildir and mysql auth (no posix accounts). My problem is the pop3 uidl format on the two servers are different, even though I'm using pop3_uidl_format = %08Xu%08Xv in both configs, I'm always re-downloading left messages on my test runs. Is there a way I could reuse the X-UID and X-IMAPbase headers on the converted mails. Issuing the UIDL command via pop3 always give a different result for the mbox and maildir spools. The X-UID and X-IMAPbase headers are present in the converted mails. The first number of X-IMAPbase maps to the mail UIDVALIDITY and the second is the same as X-UID, the mail uid. Thanks.

2 2

[Dovecot] Supporting local and virtual LDAP users, with seperate mail_env
by Tim Schafer 18 Aug '06

18 Aug '06

Is it possible to have local users with mail in maildir:%h/.maildir and virutal users with mail in maildir:/home/exim/%u/.maildir I seem to have authentication working for both local users and LDAP users. But I'm getting this error trying to access a virtual users mail. Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: data=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: root=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir, index=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_B Y_USERDB/.maildir, control=, inbox= Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): mkdir(/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir/cur) failed: Permission denied -- Regards, Tim Schafer Information Technology Logistics Easier with Technology Freight Solution Providers direct 916-376-6190 10453 Old Placerville Road fax 916-376-6156 Sacramento, CA 95827 tim_schafer(a)shipfsp.com

4 7

[Dovecot] kqueue rewrite testing, try #3
by Timo Sirainen 18 Aug '06

18 Aug '06

So, apparently the original kqueue code was working fine after all, although it was much more complex than it really needed to be. So, this time there's a really simple and pretty kqueue implementation: http://dovecot.org/nightly/dovecot-latest.tar.gz Tested that it seems to work with FreeBSD.

3 2

[Dovecot] 1.0rc7 getting near
by Timo Sirainen 18 Aug '06

18 Aug '06

To avoid having some stupid new problems with 1.0rc7, could you test this night's snapshot once it arrives in a couple of hours: http://dovecot.org/nightly/dovecot-20060811.tar.gz Especially people who had compiling problems with 1.0rc6. Also everyone who are still experiencing hangs could you try the suggestions in this mail and tell me what happened: http://dovecot.org/list/dovecot/2006-August/015377.html

8 16

[Dovecot] BSD people, please test kqueue changes
by Timo Sirainen 17 Aug '06

17 Aug '06

I rewrote much of the kqueue code since the old code didn't handle properly the case when both input and output I/O handlers were added to the same file descriptor with different callbacks. This is done commonly in Dovecot, so I'm wondering why more people didn't complain about problems with it.. :) I don't anyway have access to any BSDs so the code is completely untested. Please test how it works before 1.0rc7 :) http://dovecot.org/nightly/dovecot-latest.tar.gz I'd guess the hangs caused by recent RC versions were because the default was to use notify=kqueue instead of notify=none. I changed this back to none unless --with-ioloop=kqueue is used. There are a couple of things in the code that I'm not completely sure of. The kqueue() manual page says that EV_ADD "modifies" the event if it already exists. What exactly does that mean? Does it mean that the filter is replaced, or that it's ORed into the existing one? The same question for the EV_DELETE, does it delete everything or only those filters given in parameters? The code currently assumes ORing and EV_DELETE deleting only the given filters, since this is what the original code also did. I suppose the data and udata parameters don't matter in EV_DELETE since they weren't given originally in ioloop-notify-kqueue.c either, so I left them that way.

9 20

[Dovecot] [Fwd: Re: Supporting local and virtual LDAP users, with seperate mail_env]
by Tim Schafer 17 Aug '06

17 Aug '06

Ooops, this didn't go to the list -------- Original Message -------- Subject: Re: [Dovecot] Supporting local and virtual LDAP users, with seperate mail_env Date: Thu, 17 Aug 2006 11:33:51 -0700 From: Tim Schafer <tim_schafer(a)shipfsp.com> To: Timo Sirainen <tss(a)iki.fi> References: <44E4A543.3070100(a)shipfsp.com> <1155837188.9142.8.camel@hurina> <44E4AEF1.70202(a)shipfsp.com> <1155838393.9142.21.camel@hurina> I'm running rc6 The user_attrs = uid=user alone isn't doing the trick I also tried changing default_mail_env = maildir:/home/exim/%n/.maildir to default_mail_env = maildir:/home/exim/%u/.maildir dovecot.conf: listen = [::] disable_plaintext_auth = no ssl_disable = yes default_mail_env = maildir:/home/exim/%u/.maildir namespace private { separator = . prefix = INBOX. inbox = yes } mail_debug = yes first_valid_uid = 0 protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth_username_chars = abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb shadow { } passdb ldap { args = /etc/dovecot-ldap.conf } userdb passwd { } userdb ldap { args = /etc/dovecot-ldap.conf } user = root } dict { } plugin { } dovecot-ldap.conf: hosts = localhost auth_bind = yes auth_bind_userdn = cn=%n,ou=people,dc=domain,dc=com ldap_version = 3 base = ou=people,dc=domain,dc=com scope = subtree user_attrs = uid=user user_filter = (&(objectClass=uidObject)(cn=%n)) user_global_uid = mail user_global_gid = mail Regards, Tim Schafer Information Technology Logistics Easier with Technology Freight Solution Providers direct 916-376-6190 10453 Old Placerville Road fax 916-376-6156 Sacramento, CA 95827 tim_schafer(a)shipfsp.com Timo Sirainen said the following on 8/17/2006 11:13 AM: > On Thu, 2006-08-17 at 11:01 -0700, Tim Schafer wrote: > > Thank you Timo, > > > > I changed > > default_mail_env = maildir:/home/exim/%n/.maildir > > > > I may not have to support local users > > > > But I'm still running into the problem that the user authenticates as > > Firstname Lastname > > which is the cn in LDAP > > but the uid in LDAP, which would be something like > > flastname > > needs to be used for mail location. > > > > Is there a way to use the uid in LDAP to specify the mail location, > > without modifying the current LDAP database to include the full path? > > It would have been easier to answer if you had given your > dovecot-ldap.conf settings. But if "uid" in LDAP contains the short > form, then giving pass_attrs = uid=user,.. should help. Although that > was also there by default.. > > -- Regards, Tim Schafer Information Technology Logistics Easier with Technology Freight Solution Providers direct 916-376-6190 10453 Old Placerville Road fax 916-376-6156 Sacramento, CA 95827 tim_schafer(a)shipfsp.com

1 0

[Dovecot] BSD kqueue testing, once more before 1.0rc7
by Timo Sirainen 17 Aug '06

17 Aug '06

I did a few more changes and it seems to be working with FreeBSD. I didn't before realize that event filters weren't bitmasks so that broke things. Anyway, a bit more "real world testing" would be better than my test program and telnet localhost -tests :) I'll release 1.0rc7 in any case today before I go to sleep (so, max. 6 hours or so). http://dovecot.org/nightly/dovecot-latest.tar.gz

2 2

[Dovecot] LDAP usernames with spaces
by Tim Schafer 17 Aug '06

17 Aug '06

I'm trying to setup dovecot to work with an existing virtual user database in LDAP in order to replace courier-imap. I have users in LDAP with dn of the following form cn=Firstname Lastname,ou=company,dc=domain,dc=com and the uid attribute containes a userid of the form flastname The on disk format for an account is: /home/exim/<uid>/.maildir My first problem is that I cannot get dovecot to authenticate the existing DNs It complains: dovecot: auth(default): plain(?,ipaddress): Username contains disallowed characters I'm assuming it doesn't like the spaces. Any way around this? Also, I don't see any way to support the seperate username and userid where the username is for authentication and the userid is used for on disk pathname. Anyway to support this? Thanks in advance. -- Regards, Tim Schafer

2 2

[Dovecot] Mailbox isn't a valid mbox file (dovecot 1.0-0.beta8.2.fc5)
by FiL ＠ Kpoxa 17 Aug '06

17 Aug '06

Hello, I have upgraded my dovecot-0.99.13-3.FC3 to dovecot-1.0-0.beta8.2.fc5 recently and now am having weird problem. If somebody's mailbox has the first line in a form of From "User Name" <user(a)host.domain.edu> Thu Oct 7 14:20:00 1999 instead of From user(a)host.domain.edu Thu Oct 7 14:20:00 1999 then that mailbox couldn't be precessed by dovecot. It wasn't a problem with 0.99.13, but it is a problem with 1.0. Is there any fix for that on a dovecot's side? I don't like the idea of going through all 100Gb of mailboxes and fixing the From line. Thank you, FiL

1 1

[Dovecot] Help, the dovecot ldap is down !
by kleiton＠pcs.com.br 17 Aug '06

17 Aug '06

Hi ! my dovecot server is down, the users don't can make login. In a sometimes the dovecot log show the message bellow Aug 17 08:35:46 xxxxx dovecot-auth: nss_ldap: reconnected to LDAP server ldap://127.0.0.1 after 1 attempt In other times show Aug 17 09:40:46 xxxxx dovecot-auth: nss_ldap: reconnected to LDAP server ldap://127.0.0.1 after 5 attempts In another times too Aug 17 10:12:02 xxxxx dovecot-auth: nss_ldap: reconnected to LDAP server ldap://127.0.0.1 after 1 attempt Aug 17 10:12:25 xxxxx last message repeated 3 times Somepeople can help me ? Thanks !

2 4

[Dovecot] warn before overquota
by Dominik Saar 17 Aug '06

17 Aug '06

Hi, is there an implementation to warn the user before his storage capacity exceeded? Regards Dominik

4 4

[Dovecot] dovecot on OSF/1 4.0
by "Gábor Bérczi (Gabucino)" 17 Aug '06

17 Aug '06

Hi,, In src/lib/mountpoint.c:53 the following had to be commented out: // point_r->type = p_strdup(pool, buf.f_fstypename); because f_fstypename is undeclared on this OS. Also the following errors occur with the DEC C compiler (which compiles the other files just fine): source='file-cache.c' object='file-cache.o' libtool=no DEPDIR=.deps depmode=none /usr/bin/posix/sh ../../depcomp cc -std -DHAVE_CONFIG_H -I. -I. -I../.. -I/usr/pkg/include -ieee -O2 -I/usr/pkg/include - I/usr/pkg/include -c file-cache.c cc: Error: file-cache.c, line 70: In this statement, "cache- >mmap_base" and "(-1)" may not be compared for equality or inequality. if (cache->mmap_base == MAP_FAILED) { --------------------^ cc: Error: file-cache.c, line 79: In this statement, "cache- >mmap_base" and "(-1)" may not be compared for equality or inequality. if (cache->mmap_base == MAP_FAILED) { --------------------^ *** Exit 1 Stop. And: source='istream-mmap.c' object='istream-mmap.o' libtool=no DEPDIR=.deps depmode=none /usr/bin/posix/sh ../../depcomp cc -std - DHAVE_CONFIG_H -I. -I. -I../.. -I/usr/pkg/include -ieee -O2 -I/ usr/pkg/include -I/usr/pkg/include -c istream-mmap.c cc: Error: istream-mmap.c, line 121: In this statement, "mstream- >mmap_base" and "(-1)" may not be compared for equality or inequality. if (mstream->mmap_base == MAP_FAILED) { --------------------^ And: source='mmap-anon.c' object='mmap-anon.o' libtool=no DEPDIR=.deps depmode=none /usr/ bin/posix/sh ../../depcomp cc -std -DHAVE_CONFIG_H -I. -I. - I../.. -I/usr/pkg/inc lude -ieee -O2 -I/usr/pkg/include -I/usr/pkg/include -c mmap-anon.c cc: Error: mmap-anon.c, line 67: In this statement, "base" and "(-1)" may not be comp ared for equality or inequality. if (base == MAP_FAILED) ------------^ cc: Warning: mmap-anon.c, line 68: In this statement, "(-1)" of type "long", is being converted to "pointer to void". return MAP_FAILED; -----------------------^ cc: Error: mmap-anon.c, line 85: In this statement, "new_base" and "(-1)" may not be compared for equality or inequality. if (new_base == MAP_FAILED) ------------^ cc: Warning: mmap-anon.c, line 86: In this statement, "(-1)" of type "long", is being converted to "pointer to void". return MAP_FAILED; -----------------------^ cc: Error: mmap-anon.c, line 116: In this statement, "old_address" and "(-1)" may not be compared for equality or inequality. if (old_address == NULL || old_address == MAP_FAILED) { -----------------------------------^ cc: Warning: mmap-anon.c, line 118: In this statement, "(-1)" of type "long", is being converted to "pointer to void". return MAP_FAILED; -----------------------^ cc: Warning: mmap-anon.c, line 131: In this statement, "(-1)" of type "long", is being converted to "pointer to void". return MAP_FAILED; -------------------------------^ cc: Error: mmap-anon.c, line 152: In this statement, "start" and "(-1)" may not be compared for equality or inequality. if (start == NULL || start == MAP_FAILED) { -----------------------------^ *** Exit 1 Stop. And: Making all in lib-index source='mail-cache.c' object='mail-cache.o' libtool=no DEPDIR=.deps depmode=none /usr/bin/posix/sh ../../depcomp cc -std -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib -I../../src/lib-mail -I/usr/pkg/ include -ieee -O2 -I/usr/pkg/include -I/usr/pkg/include -c mail- cache.c cc: Error: mail-index-private.h, line 177: Invalid declarator. unsigned int readonly:1; ---------------------^ *** Exit 1 Stop. source='mail-cache-compress.c' object='mail-cache-compress.o' libtool=no DEPDIR=.deps depmode=none /usr/bin/posix/sh ../../ depcomp cc -std -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - I../../src/lib-mail -I/usr/pkg/include -ieee -O2 -I/usr/pkg/include -I/usr/pkg/include -c mail-cache-compress.c cc: Error: mail-index-private.h, line 177: Invalid declarator. unsigned int readonly:1; ---------------------^ *** Exit 1 Stop. source='mail-cache-decisions.c' object='mail-cache-decisions.o' libtool=no DEPDIR=.deps depmode=none /usr/bin/posix/sh ../../ depcomp cc -std -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - I../../src/lib-mail -I/usr/pkg/include -ieee -O2 -I/usr/pkg/include -I/usr/pkg/include -c mail-cache-decisions.c cc: Error: mail-index-private.h, line 177: Invalid declarator. unsigned int readonly:1; ---------------------^ *** Exit 1 Stop. ... etc, more of this error in other files... -- Gábor Bérczi

2 1

[Dovecot] .imap.index.data Files
by Nigel Cox 17 Aug '06

17 Aug '06

Hi, We recently had a mail storm which resulted in many tens of thousands of e-mails being delivered to each of 4 users in just 5 minutes. This was quickly resolved. However, one more savvy user though he could use the webmail (squirrelmail) to delete the e-mail without downloading it. He gave up on the idea though. I, however, removed the mail directly from the server file system. The problem now is that he has a .imap.index.data file of over 250MB! I have asked him to login again and view all the directories, I even sent him another test and asked him to delete this via webmail. None of this had any effect on the file. I thought the indexes were rebuilt with the deletion of a message? Any ideas? Nigel _____________________________________________________________________ This message has been checked for all known viruses by MessageLabs on behalf of Rentokil Initial plc

2 1