- dovecot - dovecot.org

[Dovecot] asserts and cores in beta3
by Jeff A. Earickson 18 Jun '06

18 Jun '06

My setup: Solaris 9, built with gcc 4.0.2 (I now have gcc 4.1 installed on my system, but have not rebuilt dovecot). A couple of asserts and cores in the last few days: Mar 1 09:25:13 emerald dovecot: [ID 107833 mail.error] imap(tmwillia): file mbox-sync.c: line 1471 (mbox_sync_do): assertion failed: (!sync_ctx->mbox->mbox_sync_dirty || (flags & MBOX_SYNC_UNDIRTY) == 0) Mar 1 09:58:44 emerald dovecot: [ID 107833 mail.error] imap(eewilson): file mbox-sync.c: line 1471 (mbox_sync_do): assertion failed: (!sync_ctx->mbox->mbox_sync_dirty || (flags & MBOX_SYNC_UNDIRTY) == 0) Mar 3 16:18:54 emerald dovecot: [ID 107833 mail.error] imap(tmwillia): file mbox-sync.c: line 1471 (mbox_sync_do): assertion failed: (!sync_ctx->mbox->mbox_sync_dirty || (flags & MBOX_SYNC_UNDIRTY) == 0) Backtraces from the two cores in hand are attached. I can do further poking at the cores if that would help. Jeff Earickson Colby College

2 2

[Dovecot] 1.0 beta3 not preserving X-Keyword header?
by Gregory K. Ruiz-Ade 18 Jun '06

18 Jun '06

We've been putting 1.0 Beta 3 through the paces on our test system, and one of our users pointed out to me that Thunderbird's "labels" behave strangely on the new server. In fact, there used to be a header added to the message via IMAP when Thunderbird placed a label on a message, but as of the switch from 0.99.11 to 1.0beta3, this label header is no longer placed in the message. Specifically, Thunderbird adds the "X-Keyword: $LabelN" header when you add a label to the message in tbird, where "N" is [1-9]. This works on dovecot 0.99.11 (RHEL4), but not on 1.0beta3. 1.0b3 doesn't seem to add this header at all, but rather seems to keep this information somewhere else. Perhaps in the .imap indexes? We're using mbox stores on the server. This was tested with both Thunderbird 1.0.7 (most widely deployed) and Thunderbird 1.5. Aditionally, we've found that if the .imap index directories are removed, all the Thunderbird labels on messages seem to get "confused", too. I.e., if the user uses multiple machines throughout the day, changes in one client may not be reflected in another, when the user moves to a different system. I'm still trying to get more details from the users, but have been doing preliminary testing that verifies this. One of the users complaining about this is my manager, who makes extensive use of Thunderbird's "Label" feature, so he's a bit nervous. :\ Another thing we've noticed is the potential for bad behavior if a use switches from the old dovecot to the new dovecot, which seems to be resolved if the .imap indexes are removed... Let me know what other information is needed, and I'll do my best to collect it. Gregory -- Gregory K. Ruiz-Ade Sr. Systems Administrator Computer Science and Engineering University of California, San Diego Office: EBU3b 1216 Phone: (858) 822-2625 E-mail: gkra(a)ucsd.edu

4 10

[Dovecot] RHEL 3 and quota problems...
by alan premselaar 18 Jun '06

18 Jun '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've just installed 1.0beta9 on my RHEL 3 system and am still getting the problems with the quota-fs returning "invalid argument". I think i've traced the problem down to differences in the quota versions based on the <sys/quota.h> files on RHEL 3 compared to FC3. on the system itself i'm using v2 quotas (with aquota.user and aquota.group files) however a diff of sysquota.h (copied from FC3 /usr/include/sys/quota.h) and <sys/quota.h> produces only the following: diff -u sysquota.h /usr/include/sys/quota.h - --- sysquota.h 2006-06-16 23:48:03.000000000 +0900 +++ /usr/include/sys/quota.h 2005-11-22 21:57:15.000000000 +0900 @@ -31,7 +31,7 @@ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. * - - * Version: $Id: quota.h,v 1.7.6.1 2005/07/18 02:07:37 roland Exp $ + * Version: $Id: quota.h,v 1.7 1999/10/19 03:05:21 drepper Exp $ */ #ifndef _SYS_QUOTA_H @@ -42,10 +42,10 @@ /* * Select between different incompatible quota versions. - - * Default to the version used by Linux kernel version 2.4.22 - - * or later. */ + * Default to the version used by Linux kernel version 2.4.21 + * or earlier (in RHEL version 1 is AS2.1, version 2 is RHEL3 and later). */ #ifndef _LINUX_QUOTA_VERSION - -# define _LINUX_QUOTA_VERSION 2 +# define _LINUX_QUOTA_VERSION 1 #endif /* if I edit the quota-fs.h file to load "sysquota.h" instead of <sys/quota.h> for the linux quotas, it won't compile. (i tried this instead of editing system header files directly) so I suspect the problem lies deeper than just the _LINUX_QUOTA_VERSION number being set incorrectly. incidently, the error I get compiling is this: quota-fs.c: In function `fs_quota_get_resource': quota-fs.c:214: structure has no member named `dqb_curblocks' make: *** [quota-fs.lo] Error 1 I haven't done any C programming in more than 20 years so I think I'm pushing the boundaries of my capabilities here, but I'm hoping this might just be enough information to help someone more qualified easily fix the problem and allow me to start using the FS based quota plugins to dovecot on my mail server. here are some details of my system if they're useful: # uname -a Linux <hostname_goes_here> 2.4.21-40.ELsmp #1 SMP Thu Feb 2 22:22:39 EST 2006 i686 i686 i386 GNU/Linux # more /etc/redhat-release Red Hat Enterprise Linux ES release 3 (Taroon Update 7) Thanks, Alan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEkshYE2gsBSKjZHQRAgrZAJ0cbZjSuPLV0T8C432EniCrkNw6tACgwKkz UZiSXsgXRb8w1Cc1XXXHWXs= =3CGX -----END PGP SIGNATURE-----

2 2

[Dovecot] [PATCH] Better detection for ioloop and notify
by Roy Marples 18 Jun '06

18 Jun '06

Hi List! Attached is a patch to configure.in to test that epoll, poll, inotify, kqueue and dnotify actually work. It also attempts to select the best one for you if none specified. This supercedes my previous patch in the re beta9 thread. Hopefully get this in Gentoo's beta9 ebuild soon. Thanks -- Roy Marples <uberlord(a)gentoo.org> Gentoo/Linux Developer (baselayout, networking)

3 3

[Dovecot] Plain and MD5 passwd for the same user?
by M. Fioretti 18 Jun '06

18 Jun '06

Hello, I'm running dovecot 1.0-0_12.beta8. Since I have only a very small number of user on that server, I have their names and password in text files, no databases. imap works both via webmail and via Kmail Is it possible to have, for the same user, a plain unencrypted password when connecting via imap on the local interface (needed, as I understand it, to be squirrelmail compatible) and a DIGEST-MD5 one when connecting via pop3s or imaps remotely? TIA, Marco -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ We are drowning in information but starved for knowledge. -- John Naisbitt, Megatrends

2 1

[Dovecot] Server CommonName mismatch: localhost.localdomain
by M. Fioretti 18 Jun '06

18 Jun '06

Hello, I have seen via google that this very problem was already discussed on this and other lists some months ago, but the archives report no solution. I have dovecot 1.0-0_12.beta8 on Centos 4.3. IMAP works just fine: I can read email from both Squirrelmail via web and Kmail. Now I have created an ssl certificate and I'm trying to use it via pop3. When I launch fetchmail I get the error below. Is it caused by dovecot? If not, where is the problem, on the server or here in my home PC? TIA, Marco marco@polaris:~> fetchmail -vv fetchmail: 6.3.2 querying my.vps.fqdn.name (protocol POP3) at Tue 13 Jun 2006 05:22:50 PM CEST: +poll started fetchmail: Issuer Organization: SomeOrganization fetchmail: Issuer CommonName: localhost.localdomain fetchmail: Server CommonName: localhost.localdomain fetchmail: Server CommonName mismatch: localhost.localdomain != my.vps.fqdn.name fetchmail: my.vps.fqdn.name key fingerprint: 20:93:B4:D8:CB:75:AD:72:F6:00:A8:DC:CE:F2:53:6E fetchmail: my.vps.fqdn.name fingerprints do not match! 23942:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify +failed:s3_clnt.c:894: fetchmail: SSL connection failed. fetchmail: socket error while fetching from remoteuser(a)my.vps.fqdn.name -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ Only boring people ever get bored Anonymous

2 2

[Dovecot] 1.0 beta 9 problems
by Peter Chiu 18 Jun '06

18 Jun '06

Two problems with this new beta not found in beta 8. 1. mbox_from_create error This is the configure string I use, and I paste the make error message below. I have to use "--with-storages=maildir,mbox" to get around the error. ./configure \ --prefix=/opt1/dovecot \ --localstatedir=/var \ --without-shadow \ --without-cyrus-sasl2 \ --without-pop3d \ --without-gssapi \ --disable-ipv6 \ --disable-debug \ --with-storages=maildir \ --with-ssl=openssl mkdir .libs gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o deliver auth-client.o deliver.o duplicate.o mail-send.o smtp-client.o ../lib/mountpoint.o ../lib/str-sanitize.o -Wl,--export-dynamic ../lib-storage/register/libstorage-register.a ../../src/lib-storage/index/maildir/libstorage_maildir.a ../../src/lib-storage/index/libstorage_index.a ../../src/lib-index/libindex.a ../lib-storage/libstorage.a ../lib-storage/subscription-file/libstorage_subscription_file.a ../lib-imap/libimap.a ../lib-mail/libmail.a ../lib-dict/libdict.a ../lib-charset/libcharset.a ../lib/liblib.a deliver.o(.text+0xa28): In function `main': /opt1/source/dovecot-1.0.beta9/src/deliver/deliver.c:301: undefined reference to `mbox_from_create' *** Error code 1 Stop in /opt1/source/dovecot-1.0.beta9/src/deliver. *** Error code 1 Stop in /opt1/source/dovecot-1.0.beta9/src. *** Error code 1 Stop in /opt1/source/dovecot-1.0.beta9. *** Error code 1 Stop in /opt1/source/dovecot-1.0.beta9. 2. I have to specify the following in the dovecot.conf or server wont start as others have pointed out alreay. protocol imap { ssl_listen = *:993 }

2 1

[Dovecot] APPEND command truncates message
by Chris Rodgers 18 Jun '06

18 Jun '06

Hi, I have been debugging a small perl script (see ShowBug2) that I use. In doing so, I think that I may have uncovered a problem with the dovecot IMAP server. Attached are two packet traces for connections to two different IMAP servers. On both servers I run the script: i.e. I login, select a folder, search for messages and append a message. On the fvs5 server (Courier IMAP?), everything works as expected. However, on the dovecot server, the message that is saved into my mailbox has been truncated at the end of the line containing "26". I attach a copy of the saved message in MessageAsOnIMAPServer.txt. I hope that this report might be useful. Please let me know if you require any further information. Chris. * OK [CAPABILITY IMAP4REV1 LOGIN-REFERRALS AUTH=LOGIN] fvs5 IMAP4rev1 2003.339p-cpanel at Tue, 18 Apr 2006 21:50:06 +0000 (GMT) 1 Login "*******" {7} + Ready for argument ******* 1 OK [CAPABILITY IMAP4REV1 IDLE NAMESPACE MAILBOX-REFERRALS BINARY UNSELECT SCAN SORT THREAD=REFERENCES THREAD=ORDEREDSUBJECT MULTIAPPEND] User Rodgers authenticated 2 SELECT IT-Lilac * 0 EXISTS * NO Trying to get mailbox lock from process 32317 * 0 RECENT * OK [UIDVALIDITY 1145396966] UID validity status * OK [UIDNEXT 1] Predicted next UID * FLAGS (\Answered \Flagged \Deleted \Draft \Seen) * OK [PERMANENTFLAGS (\* \Answered \Flagged \Deleted \Draft \Seen)] Permanent flags 2 OK [READ-WRITE] SELECT completed 3 UID SEARCH HEADER Subject "lilac gpg message" * SEARCH 3 OK UID SEARCH completed 4 APPEND IT-Lilac {717} + Ready for argument >From chris(a)rodgers.org.uk Tue Apr 18 21:49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 * 1 EXISTS * 1 RECENT 4 OK APPEND completed 5 LOGOUT * BYE fvs5.freevirtualservers.com IMAP4rev1 server terminating connection 5 OK LOGOUT completed * OK dovecot ready. 1 Login "*******" {8} + OK ******** 1 OK Logged in. 2 SELECT IT-Lilac * FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk Junk) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk Junk \*)] Flags permitted. * 117 EXISTS * 1 RECENT * OK [UNSEEN 116] First unseen. * OK [UIDVALIDITY 1136428693] UIDs valid * OK [UIDNEXT 344] Predicted next UID 2 OK [READ-WRITE] Select completed. 3 UID SEARCH HEADER Subject "lilac gpg message" * SEARCH 3 OK Search completed. 4 APPEND IT-Lilac {717} + OK >From chris(a)rodgers.org.uk Tue Apr 18 21:49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 * 118 EXISTS * 2 RECENT 4 OK Append completed. 5 LOGOUT * BYE Logging out 5 OK Logout completed. >From chris(a)rodgers.org.uk Tue Apr 18 21: 49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test Content-Length: 113 Status: O X-UID: 344 X-Keywords: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 #! /usr/bin/perl use strict; use Mail::IMAPClient; use Term::ReadPassword; # Check that username, password and server have been provided my $Server = "imap.pcl.ox.ac.uk"; my $User = `whoami`; chomp $User; my $Password = read_password('Mail password: '); my $INBOX = "IT-Lilac"; unless ($Server) { die "You must provide a server!"; } unless ($User) { die "You must provide a user!"; } unless ($Password) { die "You must provide a password!"; } print "Connecting to $User\@$Server\n\n"; my $IMAP = Mail::IMAPClient -> new (Server => $Server, User => $User, Password => $Password, Debug => 1) or die "Could not connect to your IMAP server, stopping"; if (!$IMAP->IsAuthenticated()) { die "Could not log in to your IMAP server, stopping"; } $IMAP -> Uid(1); # Use UID's for messages. $IMAP -> select($INBOX); my @msgs = $IMAP -> search("HEADER","Subject","lilac gpg message"); my $MessageBody = <<'EOM'; >From chris(a)rodgers.org.uk Tue Apr 18 21:49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 EOM print "Length is: {" . length($MessageBody) . "}"; $IMAP -> append("IT-Lilac",$MessageBody); # BUG: For some reason, we lose a bit of the message! print "\n"; $IMAP = $IMAP -> disconnect(); exit;

2 1

[Dovecot] Dovecot's as ip/user based login filter?
by Sysadmin 18 Jun '06

18 Jun '06

Hello. I'm facing a problem, I need to give access to internal mailserer for some people only, but can't figure out how to do it. Opening the 993 port for whole word gives access to everyone who have account. Can Dovecot act as login filter or etc for that purpose. Or does anybody have idea how to do it? -- Sysadmin

4 9

[Dovecot] Dovecot not responding to CAPABILITY command
by Ryan Hinton 17 Jun '06

17 Jun '06

Thank you for the patch, my mail server is up and running again. Now I am back to my previous problem: I am not able to log in with Thunderbird. Thunderbird issues the capability command which is not answered by Dovecot. Here is a session transcript using openssl s_client. * OK Dovecot ready. 1 capability * OK Waiting for authentication process to respond.. 2 CAPABILITY * OK Waiting for authentication process to respond.. quit * OK Waiting for authentication process to respond.. QUIT DONE The first time I tried it worked fine. * OK Dovecot ready. 1 capability * CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS AUTH=PLAIN 1 OK Capability completed. QUIT DONE But every other time I tried it failed like the first example. Any suggestions? --- Ryan Hinton iobass(a)email.com

2 1

[Dovecot] Plugin Docs (Trash)
by Timothy White 17 Jun '06

17 Jun '06

I searched, and couldn't find much in the wiki, or the mailing list... What is the trash plugin? How do we use it? I notice that none of the plugins have much documentation, other that bits on the wiki, which is getting out of date. When I get the chance, I'll make sure the wiki quota stuff, is right, and post working examples. Thanks Tim -- Linux Counter user #273956

2 1

[Dovecot] Dovecot+NFS: Copying messages causes failures (possible SIGABRT)
by Tony Kay 16 Jun '06

16 Jun '06

Environment: Dovecot 1.0beta8 Host: 64 bit Red Hat AS4 Linux (2.6.9-34.0.1) Disks: NFS netapp In the case below, the two connections were going through two separate servers sharing disks via an NFS NetApp. Here is the sequence of operations: 1. Open a connection to a folder (say mail/Trash) 2. Open a connection to another folder (say Inbox) 3. Move messages from Inbox to Trash using this sequence on Inbox: uid copy #,# "mail/Trash" uid store #,# +flags (\Deleted) check expunge 4. Next, access open connection to Trash: noop (completes OK, but does not see new messages) ...wait a few seconds... noop (connection drops...no response) Attempt to reconnect: mailbox locked. Will override in 270 seconds. The dovecot logs contain the following for the exact time when the connection drops: dovecot: IMAP(tkay): file mail-index-sync-update.c: line 686 (mail_index_sync_update_index): assertion failed: (view->hdr.messages_count == map->hdr.messages_count) I cannot correlate this to the user/folder, but this message is usually nearby: child 22915 (imap) killed with signal 6 -- Anthony Kay University Computing Center (541) 346-1719 GPG Fingerprint: B0DB D46A 60AF FAE7 A94A 5075 0CB4 4D88 9F4F 7F09 Perfection uncanned Like a beautiful redhead Fresh from her trailer from Spam-Ku : Tranquil Reflections on Luncheon Loaf by John Cho

2 1

[Dovecot] check pass; user unknown in logs
by james edwards 16 Jun '06

16 Jun '06

I am seeing lots of these in my logs and there are often a hundered or so imap/dovecat process running. I am running RC Core3. Can anyone shead some light on how to correct this ? Jun 16 08:38:24 jidmail dovecot(pam_unix)[27653]: check pass; user unknown Jun 16 08:38:24 jidmail dovecot(pam_unix)[27653]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:24 jidmail dovecot(pam_unix)[27657]: check pass; user unknown Jun 16 08:38:24 jidmail dovecot(pam_unix)[27657]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:24 jidmail dovecot(pam_unix)[27658]: check pass; user unknown Jun 16 08:38:24 jidmail dovecot(pam_unix)[27658]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:26 jidmail dovecot(pam_unix)[27684]: check pass; user unknown Jun 16 08:38:26 jidmail dovecot(pam_unix)[27684]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:27 jidmail dovecot(pam_unix)[27690]: check pass; user unknown Jun 16 08:38:27 jidmail dovecot(pam_unix)[27690]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:27 jidmail dovecot(pam_unix)[27693]: check pass; user unknown Jun 16 08:38:27 jidmail dovecot(pam_unix)[27693]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:29 jidmail dovecot(pam_unix)[27712]: check pass; user unknown Jun 16 08:38:29 jidmail dovecot(pam_unix)[27712]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:30 jidmail dovecot(pam_unix)[27713]: check pass; user unknown Jun 16 08:38:30 jidmail dovecot(pam_unix)[27713]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:30 jidmail dovecot(pam_unix)[27716]: check pass; user unknown Jun 16 08:38:30 jidmail dovecot(pam_unix)[27716]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= -- James H. Edwards Network Systems Administrator Judicial Information Division jedwards(a)nmcourts.com

1 0

[Dovecot] Problem with Dovecot LDA / Postfix
by Dominique Feyer 16 Jun '06

16 Jun '06

Our setup is ok with Postfix / Dovecot. I just need to add dovecot LDA. I use the 1.0beta9 LDA Configuration: protocol lda { postmaster_address = postmaster(a)clm.net4all.ch #hostname = #mail_plugins = #mail_plugin_dir = /usr/lib/dovecot/imap #sendmail_path = /usr/lib/sendmail auth_socket_path = /var/run/dovecot/auth-master } auth default-socket { mechanisms = plain login passdb sql { args = /usr/local/dovecot-1.0-beta9/etc/dovecot-pgsql.conf } userdb sql { args = /usr/local/dovecot-1.0-beta8/etc/dovecot-pgsql.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } } user = dovecot count = 1 } Postfix configuration, like the dovecot LDA wiki page Master.cf: dovecot unix - n n - - pipe flags=DRhu user=mail:mail argv=/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver -d ${recipient} Main.cf default_destination_recipient_limit = 1 Log: Jun 15 19:15:43 mail2 postfix/qmgr[4226]: 31FA27FF2: from=<root(a)localhost.localdomain>, size=343, nrcpt=1 (queue active) Jun 15 19:15:43 mail2 dovecot: auth(default-socket): master in: USER^I1^Iinfo(a)lda.net4all.ch^Iservice=deliver Jun 15 19:15:43 mail2 dovecot: auth(default-socket): sql(info(a)lda.net4all.ch): SELECT '/var/spool/mail/'||home AS home, uid, gid FROM users WHERE userid = 'info(a)lda.net4all.ch' Jun 15 19:15:43 mail2 dovecot: auth(default-socket): master out: USER^I1^Iinfo@lda.net4all.ch^Ihome=/var/spool/mail/lda.net4all.ch/mails/info^Iuid=1999^Igid=1999 Jun 15 19:15:43 mail2 dovecot: auth(default-socket): Jun 15 19:15:43 mail2 postfix/pipe[4314]: 31FA27FF2: to=<info(a)lda.net4all.ch>, relay=dovecot, delay=0, status=bounced (Command died with status 89: "/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver") The status 89 is for default error ... so no more informations with this. Permision on deliver is setuid (we use a different UID per domain) mail2:/etc/dovecot# stat /usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver File: `/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver' Size: 2507575 Blocks: 4912 IO Block: 4096 fichier r�gulier Device: 805h/2053d Inode: 65010 Links: 1 Access: (6755/-rwsr-sr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2006-06-15 19:15:43.314434576 +0200 Modify: 2006-06-15 13:46:15.000000000 +0200 Change: 2006-06-15 19:18:32.821665560 +0200 Can anyone help me ? Thanks, -- Dominique Feyer Administrateur Système Ch. de la Colline 5bis CH-1007 Lausanne dfeyer(a)net4all.ch

2 2

Re: [Dovecot] Problem with Dovecot LDA / Postfix
by Dominique Feyer 16 Jun '06

16 Jun '06

I have only postfix log (in syslog mail facility), no dovecot log from the LDA deliver binary (with mail_debug = yes), this is strange ... Jun 16 14:37:58 mail2 postfix/pickup[6014]: 5407F7FF3: uid=0 from=<root> Jun 16 14:37:58 mail2 postfix/cleanup[6073]: 5407F7FF3: message-id=<20060616123758.5407F7FF3(a)mail2.clm.net4all.ch> Jun 16 14:37:58 mail2 postfix/qmgr[6015]: 5407F7FF3: from=<root(a)localhost.localdomain>, size=326, nrcpt=1 (queue active) Jun 16 14:37:58 mail2 postfix/pipe[6076]: 5407F7FF3: to=<info(a)lda.net4all.ch>, relay=dovecot, delay=0, status=bounced (Command died with status 89: "/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver") Can i activate log for the LDA in the configuration file or deliver command argument in master.cf ? Thanks Le vendredi 16 juin 2006 à 08:24 -0400, My BSD a écrit : > On Thu, 15 Jun 2006 19:18:40 +0200 > Dominique Feyer <dfeyer(a)net4all.ch> wrote: > > > Our setup is ok with Postfix / Dovecot. > > > > I just need to add dovecot LDA. > > > > I use the 1.0beta9 > > > > LDA Configuration: > > > > protocol lda { > > postmaster_address = postmaster(a)clm.net4all.ch > > #hostname = > > #mail_plugins = > > #mail_plugin_dir = /usr/lib/dovecot/imap > > #sendmail_path = /usr/lib/sendmail > > auth_socket_path = /var/run/dovecot/auth-master > > } > > auth default-socket { > > mechanisms = plain login > > passdb sql { > > args = /usr/local/dovecot-1.0-beta9/etc/dovecot-pgsql.conf > > } > > userdb sql { > > args = /usr/local/dovecot-1.0-beta8/etc/dovecot-pgsql.conf > > } > > socket listen { > > master { > > path = /var/run/dovecot/auth-master > > mode = 0660 > > user = vmail > > group = mail > > } > > } > > user = dovecot > > count = 1 > > } > > > > Postfix configuration, like the dovecot LDA wiki page > > > > Master.cf: > > dovecot unix - n n - - pipe > > flags=DRhu user=mail:mail > > argv=/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver -d > > ${recipient} > > > > Main.cf > > default_destination_recipient_limit = 1 > > > > Log: > > > > Jun 15 19:15:43 mail2 postfix/qmgr[4226]: 31FA27FF2: > > from=<root(a)localhost.localdomain>, size=343, nrcpt=1 (queue active) > > Jun 15 19:15:43 mail2 dovecot: auth(default-socket): master in: > > USER^I1^Iinfo(a)lda.net4all.ch^Iservice=deliver > > Jun 15 19:15:43 mail2 dovecot: auth(default-socket): > > sql(info(a)lda.net4all.ch): SELECT '/var/spool/mail/'||home AS home, > > uid, gid FROM users WHERE userid = 'info(a)lda.net4all.ch' > > Jun 15 19:15:43 mail2 dovecot: auth(default-socket): master out: > > USER^I1^Iinfo@lda.net4all.ch^Ihome=/var/spool/mail/lda.net4all.ch/mails/info^Iuid=1999^Igid=1999 > > Jun 15 19:15:43 mail2 dovecot: auth(default-socket): > > Jun 15 19:15:43 mail2 postfix/pipe[4314]: 31FA27FF2: > > to=<info(a)lda.net4all.ch>, relay=dovecot, delay=0, status=bounced > > (Command died with status 89: > > "/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver") > > > > The status 89 is for default error ... so no more informations with > > this. > > > > Permision on deliver is setuid (we use a different UID per domain) > > mail2:/etc/dovecot# > > stat /usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver > > File: `/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver' > > Size: 2507575 Blocks: 4912 IO Block: 4096 fichier > > r�gulier > > Device: 805h/2053d Inode: 65010 Links: 1 > > Access: (6755/-rwsr-sr-x) Uid: ( 0/ root) Gid: ( 0/ > > root) Access: 2006-06-15 19:15:43.314434576 +0200 > > Modify: 2006-06-15 13:46:15.000000000 +0200 > > Change: 2006-06-15 19:18:32.821665560 +0200 > > > > Can anyone help me ? Thanks, > > > > -- > > Dominique Feyer > > Administrateur Système > > Ch. de la Colline 5bis > > CH-1007 Lausanne > > dfeyer(a)net4all.ch > > > > > > What are the corresponding "dovecot" log entries? > > (I use exim and was finally able to get "deliver" working by studying > "dovecot" log entries.) > -- Dominique Feyer Administrateur Système Ch. de la Colline 5bis CH-1007 Lausanne dfeyer(a)net4all.ch

1 0

[Dovecot] Broken on upgrade, "Protocol not supported"
by Ryan Hinton 16 Jun '06

16 Jun '06

Hello, and thanks in advance for your help. I was having trouble with dovecot-1.0beta2 after it worked flawlessly since January. Thunderbird was complaining that dovecot was not returning proper mail server capabilities (its log seems to confirm this). I checked the dovecot site and saw a new beta (beta9) with lots of bug fixes, so I downloaded it and installed it. The configure and make ran without incident. Before running 'sudo make install' I stopped the dovecot process with a SIGTERM. I installed and tried to restart the server, but now I get the two following errors: Error: socket() failed: Protocol not supported Fatal: listen(993) failed: Protocol not supported I went back and re-configured without IPv6 support, recompiled, and reinstalled. I even rebooted, but still the same result. Any help is greatly appreciated. I am running OpenBSD 3.5 i386. <time passes...> After some printf's, I found Error: socket() failed: Protocol not supported Error: section 2 port = 993 my_ip.family = 0 so.sin.family = 0 SOCK_STREAM = 1 AF_UNIX = 1 AF_INET = 2 AF_INET6 = 24 Fatal: listen(993) failed: Protocol not supported in function net_listen(...) in src/lib/network.c. My socket programming is a little rusty, but don't we want an address family of AF_INET or AF_INET6? Moving up into src/master/main.c I found set->protocols = imap imaps set->listen_ip.family = 2 set->listen_port = 143 set->ssl_listen_ip.family = 0 set->ssl_listen_port = 993 These print statements start at line 361, right after if (set->ssl_listen_ip.family == 0 && set->ssl_listen == NULL) set->ssl_listen_ip = set->listen_ip; Is there something going wrong in resolve_ip? I'm out of time tonight trying to track this down. Hopefully someone else will have more knowledge to pinpoint the problem. Let me know if I can provide more information. OK, one more tidbit. I hard-coded set->ssl_listen_ip.family to 2 and it seems to work beautifully. My mail server is back up. Why? --- Ryan Hinton iobass(a)email.com

3 2

[Dovecot] LDAP with Active Directory
by B Hatoum 16 Jun '06

16 Jun '06

Hello, I have successfully used dovecot 1.0 Beta 9 to do SASL authentication for postfix using the unix passwd/shadow files. I need to authenticate with a windows 2003 server using active directory. My system does not support PAM (I'm using slackware) so I cannot take that route. I do not need to use dovecot for POP or IMAP at the present time and so I would like to avoid modifying my active directory schema. Dovecot seems to be communicating with the active directory server, however it is sending an authentication failure to postfix: postfix/smtpd[24540]: warning: unknown[XXX.XXX.XXX.X]: SASL LOGIN authentication failed: UxxvcmxxQ6 I don't see any messages in the log from dovecot. Here is my dovecot-ldap.conf: hosts = 192.168.1.2:389 dn = "cn=dovecot,cn=Users,dc=DOM,dc=local" dnpass = "password" auth_bind = yes ldap_version = 3 base = cn=Users,dc=DOM,dc=local deref = never scope = subtree default_pass_scheme = CRYPT user_global_uid = 900 user_global_gid = 900 Can someone point out what I am missing? I can't find documentation on this type of setup. Thanks in advance. B Hatoum

4 3

[Dovecot] fedora directory server
by Alfonso Sparano 16 Jun '06

16 Jun '06

Hi all someone is successful to use fedora directory server as an ldap server for user/password and also with the LDA? I'm testing protocol smtp: sendmail + dovecot lda + fedora directory server and also: protocol pop3 and imap: dovecot + fedora directory server Thanks a lot folks Alfonso

1 0

[Dovecot] Dovecot-auth relicensing to BSD/MIT
by Timo Sirainen 15 Jun '06

15 Jun '06

Bcc'd to everyone who have sent me patches to dovecot-auth or related code. Once in a while people ask me if Dovecot's authentication server code could be relicensed to BSD so they could use it for their project. Usually they have been other BSD-licensed open source projects which just prefer not to use LGPL code. Now there's again this company asking me to give them a bit less restrictive license (they want to link it statically to a closed source program). They'd want to move the code to a separate SASL package and create a library out of it. They want SASL client code too, so they'd apparently write it for the package as well. I've been thinking about separating the dovecot-auth to be a separate package for a while too, although only around the time when Dovecot v2.0 is released (certainly not before v1.0). So, I think changing the Dovecot-auth's license from LGPL to BSD or MIT wouldn't really hurt and it could get it more widely used. Most of Dovecot's lib/ code is already MIT-licensed, so MIT would be more consistent. But I don't think there really is any real difference between BSD and MIT, so either one is fine for me. :) Now, this mail is mostly meant for asking people who have sent me patches to dovecot-auth if they allow the license change for their patch. If not, I'll either rewrite the part of the code, or for larger code parts (eg. NTLM auth) I'll just leave it LGPL licensed but so that it can be compiled out optionally. So, bcc'd people, please reply to me which one of these you're okay with: 1) I allow license change to either BSD or MIT 2) I allow license change to BSD 3) I allow license change to MIT 4) I don't allow license change

2 2

[Dovecot] SASL AUTH LOGIN mechanism problems
by Anders Karlsson 15 Jun '06

15 Jun '06

Hi all, Have anyone had problems with Exhange 2003 servers trying to use sasl against Postfix+Dovecot SASL using the AUTH LOGIN Mechanism ? I've done some smtp debugging, and it seems that Exchange sends the usename at the same time as AUTH LOGIN i.e: AUTH LOGIN <base64_username> It then expects to be able to send the password. mech-login.c silently discards all data after AUTH LOGIN and just prompts the username prompt whetever the username has already been supplied during initial AUTH LOGIN request. I've attached a patch to make mech-login.c check if additional data has been sent along with AUTH LOGIN, and in this case skip ahead directly to the Password: prompt. Cheers Anders

2 1

[Dovecot] nfs, dovecot, and maildirs
by bofh list 15 Jun '06

15 Jun '06

Hello - I know I am not the only one that will be trying, or has tried this before. Here are my questions! NFS Clients, multiple servers running dovecot - linux with 2.6 kernel with relevant patches (utime, etc) Backend - netapp filer End users - various clients all running IMAP It looks like 1.0.beta8 is definately the way to go. I have a few questions with regards to setup. Is it now possible to reliably store index files over nfs? If not, the alternative is keeping index files in memory, or on local disk - on each server. How big of a performance hit is this if imap connections are round-robined between imap servers? I've seen various people using different actimeo settings, some set at 0, some slightly higher - as much as 30. Can anyone speak on experience they have had with netapps on this subject? The following sound like they are required: mmap_disable=yes lock_method=dotlock Has anyone been successful with fnctl() on netapps with dovecot? Thanks in advance!

3 2

[Dovecot] How to open only these dovecot ports?
by M. Fioretti 15 Jun '06

15 Jun '06

Hello, I have not clear, due to the new syntax, how to configure dovecot 1.0 to listen only for the following combinations of ports and services: no pop3, from whatever host accept imap connections only if coming from localhost (since I understand this is secure _and_ the only way to make squirrelmail talk to dovecot) listen on the internet only for imaps and pop3s connections, accept them only if DIGEST-MD5 authentication succeeds. Thanks in advance for any explanation, Marco -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ We shall serve God, family and country, in that order, because without the one before it, each would perish.

2 2

[Dovecot] Error: socket() failed: Protocol not supported ERROR in dovecot-1.0.beta9
by Jeff Gardiner 14 Jun '06

14 Jun '06

I'm trying to get IMAPS working with dovecot-1.0.beta9. I'm building it on a Solaris 10 box, with openssl-0.9.8b installed. Here is the results of my ./configure: Install prefix ...................... : /usr/local/dovecot-1.0.beta9 File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : none Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword (modules) Building with password lookup modules : passwd passwd-file shadow pam checkpassword (modules) Building with SQL drivers ............: I've attached a copy of my dovecot.conf file (striped of comments). When I try running dovecot I get the following error: Error: socket() failed: Protocol not supported Fatal: listen(993) failed: Protocol not supported When I change ssl_disable = no to ssl_disable = yes, everything works. Anyone have any suggestions? Cheers Jeff protocols = imap imaps listen = * disable_plaintext_auth = no log_path = /var/log/dovecot ssl_disable = no ssl_cert_file = /usr/local/ssl/certs/Imaging_Dovecot_cert.pem ssl_key_file = /usr/local/ssl/private/Imaging_Dovecot_key.pem ssl_parameters_regenerate = 168 verbose_ssl = yes default_mail_env = maildir:%h/.email protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth default { mechanisms = plain digest-md5 cram-md5 passdb pam { args = dovecot } userdb passwd { } user = root } plugin { }

5 5

[Dovecot] Problems with dovecot.beta9
by Adnae Mac Uthidir 14 Jun '06

14 Jun '06

Dear all :) I have been upgraded dovecot today and I get following errors: Jun 14 12:08:54 [dovecot] IMAP(adnae(a)xxxxxx.xxx): inotify_init() failed: Function not implemented Jun 14 12:08:54 [dovecot] IMAP(auftrag(a)xxxxxxx.xxx): inotify_init() failed: Function not implemented Jun 14 12:08:54 [dovecot] IMAP(swolf(a)xxxxxx.xxx): inotify_init() failed: Function not implemented I have a 64 bit system (Gentoo [amd64]) and I have enabled this function on my kernel: Kernel: 2.6.16-gentoo-r9: [*] Inotify file change notification support thx for your help :)

1 0

Re: [Dovecot] Quick thanks for wonderful ACLS!
by Gavin Henry 14 Jun '06

14 Jun '06

<quote who="Marc Perkel"> > Looks cute but - why do I want it? What's it good for? I must be missing > something .... > > Well, in a big company, you might not want users to delete any e-mails they have sent out of the company. Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

2 1