- dovecot - dovecot.org

[Dovecot] Flags can be changed in read-only mode
by Ron Avriel 30 Mar '08

30 Mar '08

Hi, It seems that IMAP flags can be changed in EXAMINE read-only mode. Luckily, messages cannot be expunged. This happens in both dovecot 1.0.12 and 1.1.rc3: * OK Dovecot ready. 1 login *** *** 1 OK Logged in. 2 examine inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 1 EXISTS * 1 RECENT * OK [UNSEEN 1] First unseen. * OK [UIDVALIDITY 1206865015] UIDs valid * OK [UIDNEXT 2] Predicted next UID 2 OK [READ-ONLY] Select completed. 3 fetch 1:* flags * 1 FETCH (FLAGS (\Recent)) 3 OK Fetch completed. 4 store 1:* +flags (\Deleted) * 1 FETCH (FLAGS (\Deleted \Recent)) 4 OK Store completed. 5 fetch 1:* flags * 1 FETCH (FLAGS (\Deleted \Recent)) 5 OK Fetch completed. 6 expunge 6 OK Expunge completed. 7 fetch 1:* flags * 1 FETCH (FLAGS (\Deleted \Recent)) 7 OK Fetch completed. Thanks, Ron ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

2 1

[Dovecot] Proxy Problems
by Richard Cooper 28 Mar '08

28 Mar '08

Hi, I'm trying to use dovecot as a proxy as described on http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy but without much success. The problem is that when I send a IMAP login command dovecot is responding with "BYE Internal login failure. Refer to server log for more information." Can anyone help me shed light on this problem? Here's the log (Username, password and IPs have been anonymised): dovecot: Mar 27 13:07:11 Info: Dovecot v1.0.rc15 starting up dovecot: Mar 27 13:07:12 Info: auth(default): passwd-file /root/ dovecot-proxy-test.passwd: Read 1 users dovecot: Mar 27 13:07:29 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip=192.168.0.1 rip=192.168.0.2 resp=WWVzIEkgYW5vbnltaXNlZCB0aGlzIHRvbyA7LSk= dovecot: Mar 27 13:07:29 Info: auth(default): client out: OK 1 user=test_proxy proxy host=192.168.0.3 port=143 pass=password dovecot: Mar 27 13:07:29 Info: auth(default): master in: REQUEST 1 11786 1 dovecot: Mar 27 13:07:29 Error: auth(default): Master request 11786.1 not found dovecot: Mar 27 13:07:29 Info: auth(default): master out: NOTFOUND 1 dovecot: Mar 27 13:07:29 Info: imap-login: Internal login failure: user=<test_proxy>, method=PLAIN, rip=192.168.0.2, lip=192.168.0.1 And here's my config according to dovecot -n # /root/dovecot-proxy-test.conf base_dir: /var/run/dovecot-proxy-test log_path: /dev/stderr protocols: imap listen: *:10143 login_dir: /var/run/dovecot-proxy-test/login login_executable: /usr/libexec/dovecot/imap-login auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /root/dovecot-proxy-test.passwd userdb: driver: static args: uid=0 gid=0 /root/dovecot-proxy-test.passwd contains a single line: test_proxy:::::::proxy=y host=192.168.0.3 port=143 I am on Cent OS 5 using dovecot version 1.0.rc15 from their official yum repositories. If I connect my client directly to 192.168.0.3:143 using the same username and password everything works correctly. Thanks in advance. - Richard

2 2

[Dovecot] Using LDA with postfix and virtual users
by Chris Cohen 28 Mar '08

28 Mar '08

Hi list, I have 7 virtual users in a sql database. I don't want any systemusers or local delivery using postfix. On the postfix side everything works fine as long as I use the 'local' delivery agent. But since I want to use dovecot's sieve functionality I set local_transport to dovecot. From now on Postfix seems to ignore local_* settings like local_recipient_maps. Here is my current configuration: log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps managesieve login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:/var/mail/%u mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve sieve_storage(default): sieve_storage(imap): sieve_storage(managesieve): /var/mail/%u/dovecot/sieve/ sieve(default): sieve(imap): sieve(managesieve): /var/mail/%u/.dovecot.sieve auth default: mechanisms: plain login verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: static args: uid=5000 gid=5000 home=/var/mail/%u socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: sieve: /var/mail/%u/.dovecot.sieve And my postfix configuration: alias_maps = mysql:/etc/postfix/alias_maps-mysql.cf command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/lib/postfix data_directory = /var/lib/postfix inet_interfaces = all local_recipient_maps = mysql:/etc/postfix/local_recipients-mysql.cf $alias_maps local_transport = dovecot mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain mydomain = unixhosts.org myhostname = amy.unixhosts.org mynetworks = 127.0.0.0/8 myorigin = $myhostname smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) unknown_local_recipient_reject_code = 550 And accourding to the wiki I have: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user} As soon as I set local_transport to dovecot postfix seems to lookup local_recipients using dovecot. And dovecot doesn't know anything about my alias table. Heres a small log: Mar 28 14:49:25 amy postfix/smtpd[4412]: warning: 10.1.32.13: address not listed for hostname amy.unixhosts.org Mar 28 14:49:25 amy postfix/smtpd[4412]: connect from unknown[10.1.32.13] Mar 28 14:49:25 amy postfix/smtpd[4412]: 820D478399: client=unknown[10.1.32.13] Mar 28 14:49:25 amy postfix/cleanup[4415]: 820D478399: message-id=<20080328134925.5E3954C444(a)zoidberg.unixhosts.org> Mar 28 14:49:25 amy postfix/qmgr[4410]: 820D478399: from=<virtualuser(a)daisy.unixhosts.org>, size=762, nrcpt=1 (queue active) Mar 28 14:49:25 amy postfix/smtpd[4412]: disconnect from unknown[10.1.32.13] Mar 28 14:49:25 amy dovecot: auth(default): master in: USER^I1^Iroot^Iservice=deliver Mar 28 14:49:25 amy dovecot: auth-worker(default): sql(root): query: SELECT password FROM users WHERE username = 'root'; Mar 28 14:49:25 amy dovecot: auth-worker(default): sql(root): unknown user Mar 28 14:49:25 amy dovecot: auth(default): master out: NOTFOUND^I1 Mar 28 14:49:25 amy postfix/pipe[4416]: 820D478399: to=<root(a)daisy.unixhosts.org>, relay=dovecot, delay=0.09, delays=0.03/0.02/0/0.04, dsn=5.1.1, status=bounced (user unknown) Mar 28 14:49:25 amy postfix/cleanup[4415]: 914C978407: message-id=<20080328134925.914C978407(a)amy.unixhosts.org> Mar 28 14:49:25 amy postfix/qmgr[4410]: 914C978407: from=<>, size=2516, nrcpt=1 (queue active) Mar 28 14:49:25 amy postfix/bounce[4418]: 820D478399: sender non-delivery notification: 914C978407 Mar 28 14:49:25 amy postfix/qmgr[4410]: 820D478399: removed Mar 28 14:49:25 amy dovecot: auth(default): master in: USER^I1^Ivirtualuser^Iservice=deliver Mar 28 14:49:25 amy dovecot: auth-worker(default): sql(virtualuser): query: SELECT password FROM users WHERE username = 'virtualuser'; Mar 28 14:49:25 amy dovecot: auth(default): password(virtualuser): Credentials: {CRYPT}{PLAIN-MD5}ebb12eb47da2af187241a0d74fc3d14f Mar 28 14:49:25 amy dovecot: auth(default): master out: USER^I1^Ivirtualuser^Iuid=5000^Igid=5000^Ihome=/var/mail/virtualuser Mar 28 14:49:25 amy postfix/pipe[4416]: 914C978407: to=<virtualuser(a)daisy.unixhosts.org>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service) Mar 28 14:49:25 amy postfix/qmgr[4410]: 914C978407: removed I have already read a lot of documentation, howtos and so on, but just can't figure out how to get this to work. Could someone please give me a hint? -- Greetings Chris

1 0

[Dovecot] Mailbox to maildir conversion
by Aaron Gallagher 28 Mar '08

28 Mar '08

I just today wrote Yet Another Conversion Script. This one differs from the rest that I've seen in that it will generate a dovecot- uidlist index. I've done some testing, but not any absolutely extensive testing. It works well from what I've tried. Invocation is simple. You pass the script the maildir and the mailbox file and it parses the mailbox file. The index file is generated if there is at least one e-mail with an X-IMAP header which contains the last ID used and the IMAP UIDVALIDITY. My old mail setup was ipop3d + sendmail (now dovecot + postfix) and it had a DON'T DELETE THIS MESSAGE e-mail with the aforementioned X-IMAP header. This e-mail will not be saved in the maildir. All e-mails with an X-UID header will get an entry in the uidlist file. The script works with python 2.3 or later. I haven't tested it on pre-2.3 python versions as I don't have any installed. http://habnabit.org/mb2md.py.gz I can answer questions about it if needed. I'm also willing to try to add any suggested features.

1 0

[Dovecot] Dovecot Startup error on FreeBSD
by Dien Phan 28 Mar '08

28 Mar '08

Hi, I have installed latest Dovecot 1.0.13 on a FreeBSD 6.2 with XMail (www.xmailserver.org) It works OK except one thing: error on startup. After each reboot there are lots of such error: dovecot: Mar 28 08:54:38 Error: child 916 (login) returned error 89 dovecot: Mar 28 08:54:54 Error: imap-login: No authentication sockets found When I restart dovecot by running startup script /usr/local/etc/rc.d/dovecot.sh restart the problem disappears. I have to manually restart dovecot after each reboot. Below is used conf file $ dovecot -n # 1.0.13: /usr/local/etc/dovecot.conf log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-info.log protocols: imap ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login mail_location: maildir:~/Maildir dotlock_use_excl: yes maildir_copy_with_hardlinks: yes mail_plugins: antispam imap_client_workarounds: delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep auth default: verbose: yes passdb: driver: checkpassword args: /var/MailRoot/bin/dovecot_xmail userdb: driver: static args: uid=vxmail gid=vxmail home=/var/MailRoot/domains/%d/%n allow_all_users=yes socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vxmail plugin: antispam_signature: X-DSPAM-Signature antispam_trash: Trash antispam_spam: SPAM antispam_dspam_binary: /usr/local/bin/dspam antispam_dspam_args: --user;%u I googled and found similar post at http://www.mail-archive.com/dovecot@dovecot.org/msg01793.html, http://www.mail-archive.com/dovecot@dovecot.org/msg01798.html and http://www.mail-archive.com/dovecot@dovecot.org/msg01831.html but answers there don't meet my case. I don't use sql backend. And startup script doesn't delete /var/run/dovecot/ directory after Dovecot is started. After booting when error still there I have in this directory: $ ls /var/run/dovecot auth-master dict-server login master.pid If restart dovecot (working OK): $ ls /var/run/dovecot auth-master auth-worker.960 dict-server login master.pid As we see dovecot works when there appears a file named auth-worker.960 (the number 960 changes each time it restarted). Please help me to fix this. Thanks in advance. Dien Phan

2 1

[Dovecot] dovecot-1.1.rc3 segmentation fault in fetch_bodystructure
by Diego Liziero 27 Mar '08

27 Mar '08

Hi, another imap crash with latest dovecot. segmentation fault in fetch_bodystructure src/imap/imap-fetch.c static int fetch_bodystructure(struct imap_fetch_context *ctx, struct mail *mail, void *context ATTR_UNUSED) { const char *bodystructure; if (mail_get_special(mail, MAIL_FETCH_IMAP_BODYSTRUCTURE, &bodystructure) < 0) return -1; ---> before the segfault here we have bodystructure=0 and mail_get_special returns >=0 [..] if (o_stream_send(ctx->client->output, "BODYSTRUCTURE (", 15) < 0 || /*line 461*/ o_stream_send_str(ctx->client->output, bodystructure) < 0 || ---> here o_stream_send_str calls strlen(bodystructure=0), and strlen tries to access "Address 0x0" causing a segfault -- Address 0x0 is not stack'd, malloc'd or (recently) free'd Process terminating with default action of signal 11 (SIGSEGV): dumping core Access not within mapped region at address 0x0 at: strlen by: o_stream_send_str (ostream.c:163) by: fetch_bodystructure (imap-fetch.c:461) by: imap_fetch (imap-fetch.c:309) by: cmd_fetch (cmd-fetch.c:154) by: client_command_input (client.c:546) by: client_command_input (client.c:595) by: client_handle_input (client.c:636) by: client_input (client.c:691) by: io_loop_handler_run (ioloop-epoll.c:201) by: io_loop_run (ioloop.c:301) by: main (main.c:293)

3 6

[Dovecot] xexec and dovecot 1.1
by Alex 27 Mar '08

27 Mar '08

Patch and prepatched version of xexec module to dovecot v1.1 now available from http://wiki.dovecot.org/Plugins/xexec. Thanks for patch to Stephan Bosch.

7 17

[Dovecot] pop3 with out LAST command
by Antonio Casado Rodríguez 27 Mar '08

27 Mar '08

Hi, One user has your client in Yahoo Webmail and he had configured pop3 acount with our servers. The Yahoo Webmail said to him: "The server not have the LAST command." We have dovecot 1.0.10 in linux. ¿This command is in Dovecot? ¿how? Regards.

2 1

[Dovecot] (userdb/ldap) Set home dovecot variable - How?
by k bah 27 Mar '08

27 Mar '08

Dovecot version dovecot-1.0.rc14-7 (opensuse) Postfix is using Dovecot LDA. I'm getting this error message, and I guess it's going to be a problem on my next task, which is to set up sieve scripts. Is there something wrong/contraditory on my config or I forgot something? I want: /var/dovecot-tests/: where user's inbox resides /var/dovecot-tests/home/: home dir (users will not be system users, this home is for sieve) /var/dovecot-tests/data/: mbox --- error msg --- --- --- --- auth(default): client in: AUTH 1 PLAIN service=IMAP lip=dovecot_machine_ip rip=client_ip auth(default): client out: CONT 1 auth(default): client in: CONT 1 AHRoYWlzY2diAHRyb2NhcjEyMw== auth(default): ldap(someuser,client_ip): bind search: base=dc=mydomain,dc=me filter=(&(object class=inetlocalmailrecipient)(uid=someuser)) auth(default): ldap(someuser,client_ip): result: mail(user)=someuser auth(default): ldap(someuser,client_ip): bind: dn=cn=112345,ou=people,dc=mydomain,dc=me auth(default): client out: OK 1 user=someuser auth(default): master in: REQUEST 9 13177 1 auth(default): ldap(someuser,client_ip): user search: base=dc=mydomain,dc=me scope=subtree fi lter=(&(objectclass=inetlocalmailrecipient)(mail=someuser)) fields=uid, uid auth(default): master out: USER 9 someuser user=someuser uid=1500 gid=12 imap-login: Login: user=<someuser>, method=PLAIN, rip=client_ip, lip=dovecot_machine_ip debug ('someuser' 'someuser' '' 'IMAP' '/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB' '1500 ')Effective uid=1500, gid=12 debug ('someuser' 'someuser' '' 'IMAP' '/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB' '1500 ')Namespace: type=private, prefix=, sep=/, inbox=yes, hidden=no, subscriptions=no debug ('someuser' 'someuser' '' 'IMAP' '/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB' '1500 ')mbox: data=/var/dovecot-test/data/someuser:INBOX=/var/dovecot-test/someuser debug ('someuser' 'someuser' '' 'IMAP' '/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB' '1500 ')mbox: root=/var/dovecot-test/data/someuser, index=/var/dovecot-test/data/someuser, inbox=/var/dovecot -teste-mailspool/someuser auth(default): client in: AUTH 1 PLAIN service=IMAP lip=dovecot_machine_ip rip=client_ip resp=dGhhaXNjZ2IAdGhhaXNjZ2IAdHJvY2FyMTIz auth(default): ldap(someuser,client_ip): bind search: base=dc=mydomain,dc=me filter=(&(object class=inetlocalmailrecipient)(uid=someuser)) auth(default): ldap(someuser,client_ip): result: mail(user)=someuser auth(default): ldap(someuser,client_ip): bind: dn=cn=112345,ou=people,dc=mydomain,dc=me auth(default): client out: OK 1 user=someuser auth(default): master in: REQUEST 10 16172 1 auth(default): ldap(someuser,client_ip): user search: base=dc=mydomain,dc=me scope=subtree fi lter=(&(objectclass=inetlocalmailrecipient)(mail=someuser)) fields=uid, uid auth(default): master out: USER 10 someuser user=someuser uid=1500 gid=12 imap-login: Login: user=<someuser>, method=PLAIN, rip=client_ip, lip=dovecot_machine_ip debug ('someuser' 'someuser' '' 'IMAP' '/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB' '1500 ')Effective uid=1500, gid=12 debug ('someuser' 'someuser' '' 'IMAP' '/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB' '1500 ')Namespace: type=private, prefix=, sep=/, inbox=yes, hidden=no, subscriptions=no debug ('someuser' 'someuser' '' 'IMAP' '/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB' '1500 ')mbox: data=/var/dovecot-test/data/someuser:INBOX=/var/dovecot-test/someuser debug ('someuser' 'someuser' '' 'IMAP' '/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB' '1500 ')mbox: root=/var/dovecot-test/data/someuser, index=/var/dovecot-test/data/someuser, inbox=/var/dovecot -teste-mailspool/someuser debug ('someuser' 'someuser' '' 'IMAP' '/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB' '1500 ')Disconnected: Logged out debug ('someuser' 'someuser' '' 'IMAP' '/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB' '1500 ')Disconnected: Logged out auth(default): client in: AUTH 1 PLAIN service=IMAP lip=dovecot_machine_ip rip=client_ip auth(default): client out: CONT 1 auth(default): client in: CONT 1 AHRoYWlzY2diAHRyb2NhcjEyMw== auth(default): ldap(someuser,client_ip): bind search: base=dc=mydomain,dc=me filter=(&(object class=inetlocalmailrecipient)(uid=someuser)) auth(default): ldap(someuser,client_ip): result: mail(user)=someuser auth(default): ldap(someuser,client_ip): bind: dn=cn=112345,ou=people,dc=mydomain,dc=me auth(default): client out: OK 1 user=someuser auth(default): master in: REQUEST 11 7014 1 --- error msg --- --- --- --- -- dovecot.conf --- --- --- --- login_user = dovecot mail_extra_groups = mail valid_chroot_dirs = /var/dovecot-test mail_location = mbox:/var/dovecot-test/data/%u:INBOX=/var/dovecot-test/%u login_process_per_connection = yes login_processes_count = 3 login_greeting = login_greeting_capability = yes namespace private { separator = / prefix = inbox = yes } mail_debug = yes mail_log_prefix = "debug ('%u' '%n' '%d' '%s' '%h' '%i')" auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_~@ auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb ldap { args = /etc/dovecot/dovecot-ldap.conf_passdb } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf_userdb } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = dovecot-test group = mail } } } -- dovecot.conf --- --- --- --- -- dovecot-ldap.conf (dovecot-ldap.conf_passdb and dovecot-ldap.conf_userdb are symlinks to this file) hosts = ldap.mydomain.me dn = uid=dovecot,ou=someou,dc=mydomain,dc=me dnpass = pass tls = no auth_bind = yes ldap_version = 3 base = dc=mydomain,dc=me scope = subtree deref = never user_global_uid = dovecot-test user_global_gid = mail # user_filter = (&(objectclass=inetlocalmailrecipient)(mail=%u)) # user_attrs = uid=user, uid=home pass_filter = (&(objectclass=inetlocalmailrecipient)(uid=%u)) pass_attrs = mail=user,userPassword=password -- --- --- --- --- thanks = A 2 Z Ozone Generators Top-quality industrial, commercial, and agricultural ozone generator. http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=bf5730137c0a5c2b7dd75c6… -- Powered by Outblaze

2 1

[Dovecot] Moving main inbox file from /var/mail to ~/mail
by Romain 26 Mar '08

26 Mar '08

Hi list, I am using Dovecot version 1.0.10 in a Debian package. At the moment, i have the main INBOX of each user in /var/mail/%u and others mboxes in ~/mail/. Here is the line coming from my /etc/dovecot/dovecont.conf mail_location = mbox:~/mail:INBOX=/var/mail/%u I would like to move the main inbox in each home folder with the rest of the others mboxes. What should be the process ? Should i only tkahe the network down, update my conf file and move the inbox of every user ? Or do I have to do something different ? Thanks Regards Romain romain(at)abakila(dot)net

1 0

Re: [Dovecot] Howto create maildir in lower case while user login viaimap/pop3?
by Zhang Huangbin 26 Mar '08

26 Mar '08

Hi, Toms. Toms Trankalis wrote: > I have a similar problem. When mail comes to user(a)domain.com (in > lovercase) dovecot creates directory /vmail/domain.com/user, but if > user types login like User(a)domain.com, then dovecot creates dir > /vmail/domain.com/User and I wonder why dovecot accepts the login name > at all? > > In my sutiation dovecot is auth against mysql database. > I fixed this situation, and sorry for the noise :( Reference: http://wiki.dovecot.org/Variables#head-010a6461d783547686f70249e820fd6b83fd… %L - lowercase So i set mail_location to: mail_location = maildir:/%Lh/%Ld/%Ln/:INDEX=/%Lh/%Ld/%Ln/ It works. -- Best Regards. Zhang Huangbin - OpenBSD 4.2 -release, i386. - RHEL 5.1 Client

1 0

[Dovecot] Howto create maildir in lower case while user login via imap/pop3?
by Zhang Huangbin 26 Mar '08

26 Mar '08

Hi, all. I searched mail archives, but no result. I use OutLook Express on Windows XP as MUA, login username is in upper case, such as 'AAA(a)BBB.COM', when login via imap, dovecot create directories: /home/vmail/ |- BBB.COM/ # <- Domain name |- AAA/ # <- User name |- cur/ |- xxx Here, domain name and user name are in upper case. How can i make it create directories in lower case? # # dovecot -n # # /etc/dovecot.conf log_path: /var/log/dovecot login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:/%h/%d/%n/:INDEX=/%h/%d/%n/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: mechanisms: plain login user: vmail passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail # # File: /etc/dovecot-ldap.conf # hosts = 127.0.0.1:389 ldap_version = 3 auth_bind = yes dn = cn=vmail,dc=openbsdonly,dc=org dnpass = passwd base = o=%d,o=domains,dc=openbsdonly,dc=org scope = subtree deref = never user_filter = (&(mail=%u)(objectClass=qmailUser)(accountStatus=active)) user_attrs = homeDirectory=home,mailMessageStore=maildir:mail,mailQuota=quota=maildir:storage pass_filter = (mail=%u) pass_attrs = userPassword=password user_global_uid = 2000 user_global_gid = 2000 default_pass_scheme = CRYPT -- Best Regards. Zhang Huangbin - OpenBSD 4.2 -release, i386. - RHEL 5.1 Client

1 0

[Dovecot] Manage sieve scripts in squirrelmail
by Alex 25 Mar '08

25 Mar '08

>Do you know a tool in squirrelmail (or a plugin) for manage sieve scripts? >Or, how permit to my users to create/modify their filter rules? > I must have managesieve daemon on the server side ( look for approriate info in wiki.dovecot.org. And on squirrelmail side you can use avelsieve. I wonder, how you could not find it: http://www.squirrelmail.org/plugin_view.php?id=73 http://email.uoa.gr/projects/squirrelmail/avelsieve.php

3 3

[Dovecot] Changing the order of plugin execution.
by "Fábio M. Catunda" 25 Mar '08

25 Mar '08

Hi! I'm using an acl to avoid deletion of .Trash messages, but I also have mail_log plugin enabled, but I found out some logs of deletion on info.log: deleted: uid=218, msgid=<200802150943.25163.alessio(a)skye.it>, box=Trash The message is still there, but maillog logged that it have been deleted. I believe that this issue is related to the order that plugins are executes, is there a way to change it? dovecot version 1.0.13-1 debian package. Thanks!

2 2

[Dovecot] Problem with a sieve file
by Nicolas Letellier 25 Mar '08

25 Mar '08

Hello, I use a simple sieve file like: require "fileinto"; if header :contains ["From"] ["root"] { redirect "test(a)domain.com"; } When I send an email with root to this user, I have this error in my deliver log: Mar 12 09:43:18 helm deliver(user(a)domain.net): open(~/.temp.hostname.net.53398.23c1b1a363c2c4e8) failed: No such file or directory Mar 12 09:43:18 helm deliver(user(a)domain.net): msgid=<20080312084317.C01BD37FEC13(a)hostname.com>: forwarded to <test(a)domain.com> Why I have this error? I don't understand it. I use dovecot with Postfix (2.4) and FreeBSD (6.2) : dovecot-1.0.12 Secure and compact IMAP and POP3 servers dovecot-sieve-1.0.2 A sieve plugin for the Dovecot LDA called 'deliver' See my config a sieve in my dovecot.conf: mail_plugins = cmusieve quota (in protocol lda) sieve = /var/mail/vmail/%u/sieve (in plugin) Thanks for your help. - Nicolas.

1 2

[Dovecot] Problem with MailServer Testing.
by Allen Sim 25 Mar '08

25 Mar '08

Hi, I just set up two machine.One is installed with AntiSpam Quarantine Management and Anti Spam components. However, another machine is installed as Mail Server (installed:OpenLDAP,pam,dovecot mail server,sendmail & squirrelmail). Both machine can run now. I want to do some testing now..i am using the client mail Netscape. My question is: 1. how can i create a user and try to send a mail in and out? (to test that the email server is working) 2.how can i test the antispam is working or not? (to test that wehther the spam will go into the AntiSpam QUarantine Management Hope to hear from your reply... As i am vry new to linux and antispam, mail thingie.... Appreciate your reply! Regards, Allen

1 0

[Dovecot] Manage sieve scripts in squirrelmail
by Nicolas Letellier 25 Mar '08

25 Mar '08

Hello. Do you know a tool in squirrelmail (or a plugin) for manage sieve scripts? Or, how permit to my users to create/modify their filter rules? Thanks. - Nicolas.

2 1

[Dovecot] Pegasus Mail 4.41 OK With Dovecot
by Sabahattin Gucukoglu 25 Mar '08

25 Mar '08

Pegasus Mail 4.41 is an excellent client on Windows. It works fine with both Dovecot IMAP and POP3 (APOP, IMAP LOGIN commands only - no SASL). Responds to async events. Supports IMAP STARTTLS. Does not use IDLE - periodic CHECKs. Fast and sensible header caches, light on resources. Offline mode, but read-only, using cache (prefetch options available if body caching enabled, it's not by default to save disk space). Searching is still a bit slow, although it does its best to use IMAP substring searches when it's possible even though the folder metadata is apparently managed locally. Excellent configurability; includes semantics for the different types of separator, prefixes, and a choice of whether or not to support folders w/ messages or w/o in folders. Moves mails for trash; only purges from the Trash folder (expunge after every delete operation and don't provide end-user experience different than local folder management). Provides several tricks for faster IMAP access, one of which is to assume only the client is using the mailbox (they can all be turned off). Closed source. But a very nice client, all round. http://www.pmail.com/ http://community.pmail.com/ Cheers, Sabahattin -- Sabahattin Gucukoglu <mail<at>sabahattin<dash>gucukoglu<dot>com> Address harvesters, snag this: feedme(a)yamta.org Phone: +44 20 88008915 Mobile: +44 7986 053399 http://sabahattin-gucukoglu.com/

1 0

[Dovecot] Dovecot and kmail IMAP resources
by Anne Wilson 25 Mar '08

25 Mar '08

For some time now I have been trying to get IMAP resources working on KMail. I have followed the docs from kde, but they tell how to configure cyrus IMAP, so I've had to learn as I went along. After a lot of help from the postfix list I now have a working sasl. The ability of the user 'groupware' to log in with PLAIN has been checked in a telnet session. Everything in KMail has been set up as in the documentation, but it doesn't work. Now I'm wondering if anything in my dovecot configuration needs changing. dovecot -n # /etc/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/mail/mail info_log_path: /var/log/mail/mail.info protocols: imap listen: *:143 login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login mail_extra_groups: mail mail_location: maildir:~/Maildir/ maildir_copy_with_hardlinks: yes auth default: mechanisms: plain login debug: yes debug_passwords: yes passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/dovecot-auth mode: 432 user: postfix group: postfix master: I'd be thankful for any help. Thanks Anne

5 11

[Dovecot] Email Server testing
by Allen Sim 25 Mar '08

25 Mar '08

Hi, I just set up two machine.One is installed with AntiSpam Quarantine Management and Anti Spam components. However, another machine is installed as Mail Server (installed:OpenLDAP,pam,dovecot mail server,sendmail & squirrelmail). Both machine can run now. I want to do some testing now..i am using the client mail Netscape. My question is: 1. how can i create a user and try to send a mail in and out? (to test that the email server is working) 2.how can i test the antispam is working or not? (to test that wehther the spam will go into the AntiSpam QUarantine Management Hope to hear from your reply... As i am vry new to linux and antispam, mail thingie.... Appreciate your reply! Regards, Allen

1 0

[Dovecot] xexec and dovecot 1.1
by Alex 24 Mar '08

24 Mar '08

Stephan Bosch wrote: > subscriber(a)viliar.net.ru schreef: >> subscriber(a)viliar.net.ru schreef: >> Thank you, Stephan, for your help. Patch applies without any problem and >> compilation was successful. According maillog, Dovecot load it without >> problems too: >> >> Mar 19 09:06:37 mx3 dovecot: IMAP(alx(a)skymail.alx.in): Module loaded: >> /usr/lib/dovecot/imap/lib10_xexec_plugin.so >> I have activate it in config as for dovecot 1.0. But "sub commands" does >> not started: >> >> ... >> >> [pid 4093] --- SIGSEGV (Segmentation fault) @ 0 (0) --- >> Process 4093 detached >> <... select resumed> ) = 2 (in [8 10], left {2147482, >> 996000}) >> --- SIGCHLD (Child exited) @ 0 (0) -- > Found it, apparently dovecot-1.1 does not like a NULL parameter to the > array_get function anymore: > > - execvp(*(char **)array_idx(&command, 0), array_get(&command, > NULL)); > + execvp(*(char **)array_idx(&command, 0), array_idx(&command, > 0)); > > With this additional change, the attached full patch manages to update > the XEXEC plugin to dovecot-1.1. This was tested with the 'average' > example and that worked flawlessly. > > Regards, > > Stephan > > Thank you again, Stephan. Now all works perfectly :-) Probably at http://wiki.dovecot.org/Plugins/xexec it is good to have link on patch/new version of module, created by you. Or attach to page file. I can do it, if it's ok. What you think?

3 2

[Dovecot] Is there a way to avoid deletion in a folder?
by "Fábio M. Catunda" 24 Mar '08

24 Mar '08

Hi, I would like to know if it's possible to avoid message deletion in a specific folder. I'm using lazy-expunge like a Trash folder and I don't want the user to enter there and try to erase the message again. Any help is appreciated. Thanks.

3 6

[Dovecot] dovecot dead
by Allen Sim 24 Mar '08

24 Mar '08

Hi, I am a new linux user.I jz setting up a mail server.Downloaded & Configured the components:CentOS,OpenLDAP,pam,dovecotMailServer,s endmial,squireelmail etc.... But wehn i want to check whether it works or not, so i open up my clientmail, wchi is Netscape 7.2. in Edit > Mail & Newsgroups Account Setting > server setting... i had put the ip address for the machine... but error pop out: Could not connect to mail server 10.XX.XX.XXX;the connection was refused. what's wrong wth it??? how to check wthere the mail server work? my second question. Dovecot dead but subsys locked aft i typed: /etc/init.d/dovecot status, it shows:dovecot dead but subsys locked. I deleted /var/lock/subsys/dovecot. but whn i start my dovecot,etc/init.d/dovecot start, same problem occur again....how to solve ths??? below is frm /var/log/maillog : Mar 19 15:17:28 hosting sendmail[3617]: m2J1EtMP003319: to=<root(a)localhost.localdomain>, ctladdr=<root(a)localhost.localdomain> (0/0), delay=06:02:32, xdelay=00:00:00, mailer=local, pri=665894, dsn=4.0.0, stat=Deferred: local mailer (/usr/libexec/dovecot/deliver) exited with EX_TEMPFAIL i am new in this. anyone can help??? appreciate ur reply....

4 3

Re: [Dovecot] dovecot dead
by tomas＠tuxteam.de 24 Mar '08

24 Mar '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, Mar 24, 2008 at 05:22:36PM +0800, Allen Sim wrote: [please keep list cc'ed: this might help others] > Hi Tomas.... > Happy Easter! Same to you :-) > Great to hear from you and indeed your reply really help me a lot! My > dovecot is running now! > 1. I am running my client mail which is Netscape7.2 on laptop, not in > the mail server. > Under Netscape 7.2. in Edit > Mail & Newsgroups Account Setting > > server setting>server name. In server name i put down the mail server > ip address. what should i put in the username column? it keeps pop up > a dialog box asking me to key in password... So it seems your client "sees" the IMAP server, if I interpret that correctly? > how abt the SMTP setting? > is it the same???? SMTP is completely different. You'll have to point your client to an SMTP server which is willing to accept the mails and forward them. Either you have one running on your server box, or you point directly to your ISP's SMTP server. Running an SMTP server on one's own is no trivial matter these days: spammers will work hard to mis-use it for their own mean purposes (and they are quite skilled). > 2. Or should i use thunderbird to do this??? I have no experience with Netscape and little with thunderbird -- but both should work as IMAP clients, at least at a basic level. Maybe somebody else on the list knows more. Regards - -- tomás -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFH53b9Bcgs9XrR2kYRAijxAJ4++ph3AQQkd8Q7PSWT/UXNjV7QpQCfXsSt iIJmUJsNVvlUQ5HWFX+uWYY= =R4BT -----END PGP SIGNATURE-----

1 0

[Dovecot] Quotas from Active Directory LDAP
by Mohammad "Shami" Al-Shami 23 Mar '08

23 Mar '08

Hi Guys, I've been trying to get this to work for 3 days now, but no luck. I have Dovecot set with an Active Directory back-end. Everything is working properly but I can't get user specific quotas.I tried with both 1.0.13 and 1.0-rc7. All users have the same quota which is set in dovecot.conf dovecot -n # 1.0.13: /usr/local/etc/dovecot.conf Warning: mail_extra_groups setting was often used insecurely so it is now deprecated, use mail_access_groups or mail_privileged_group instead protocols: imap ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login valid_chroot_dirs: /var/vmail verbose_proctitle: yes mail_extra_groups: mail mail_access_groups: mail default_mail_env: maildir:/var/vmail/%n mail_location: maildir:/var/vmail/%n mail_debug: yes mail_plugins: quota imap_quota imap_client_workarounds: delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep auth default: username_format: %Lu debug: yes debug_passwords: yes passdb: driver: ldap args: /usr/local/etc/dovecot-ldap.conf userdb: driver: ldap args: /usr/local/etc/dovecot-ldap.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: dovecot group: dovecot plugin: quota: maildir:storage=10240 dovecot-ldap.conf uris = ldap://172.16.201.138:3268 dn = CN=LDAP User,OU=Special Users,DC=shami,DC=net dnpass = qwerty auth_bind = yes ldap_version = 3 base = dc=shami,dc=net user_attrs = sAMAccountName=home,title=quota user_filter = (&(ObjectClass=person)(sAMAccountName=%u)) pass_filter = (&(ObjectClass=person)(sAMAccountName=%u)) user_global_uid = 1001 user_global_gid = 1001 I'm storing the quota in the title field (tried other fields as well) in the following format: maildir:storage=512000 Yet I still get 10MB for all users. Any idea what I'm missing? Thanks -- Mohammad Al-Shami

2 1

[Dovecot] xexec and dovecot 1.1
by subscriber＠viliar.net.ru 22 Mar '08

22 Mar '08

subscriber(a)viliar.net.ru schreef: > I'll test very interesting plugin xexec. It seems very nice and can be used in many things. It's compiled perfect with dovecot 1.0, but certanly > not with dovecot 1.1. It's stopped with next error: > I did not write that module, but tonight I got a bit bored, so I gave it a quick try to port it to Dovecot 1.1. The attached patch provides a compile fix to make it compile without warnings for dovecot-1.1. I only tested whether the module is successfully loaded by Dovecot and not whether XEXEC still does what it is supposed to. It does not segfault on the xexec command, but that is all I tested. I got a backend command error and now it is bed time for me, but there is a good chance that this works if you bother to read the wiki page properly ;) So, consider this to be more like an 'It compiles! Ship it!' kind of fix. But, anyways, it should help you to get where you want. Just apply inside the xexec directory using the usual patch -p1. Let me know what you find out. Regards, Stephan. Thank you, Stephan, for your help. Patch applies without any problem and compilation was successful. According maillog, Dovecot load it without problems too: Mar 19 09:06:37 mx3 dovecot: IMAP(alx(a)skymail.alx.in): Module loaded: /usr/lib/dovecot/imap/lib10_xexec_plugin.so I have activate it in config as for dovecot 1.0. But "sub commands" does not started: [root@mx3 rpms]# telnet 127.0.0.1 143 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. * OK Dovecot ready. 001 login alx@xxx xxxxxxx 001 OK Logged in. 002 noop 003 OK NOOP completed. 003 noop 003 OK NOOP completed. 004 xexec user 004 NO command failed same command exucuted ok with dovecot 1.0. from config: plugin { xexec2 = user:/usr/local/bin/user %u } According strace -vfF -p there is segfault :-( read(0, "004 xexec user\r\n", 4044) = 16 pipe([6, 7]) = 0 pipe([8, 9]) = 0 pipe([10, 11]) = 0 clone(Process 4093 attached child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7f17708) = 4093 [pid 4061] close(6) = 0 [pid 4061] close(9) = 0 [pid 4061] close(11) = 0 [pid 4061] _llseek(7, 0, 0xbfb8ca40, SEEK_CUR) = -1 ESPIPE (Illegal seek) [pid 4061] getsockname(7, 0xbfb8ca34, [28]) = -1 ENOTSOCK (Socket operation on non-socket) [pid 4061] fstat64(8, {st_dev=makedev(0, 5), st_ino=5022779, st_mode=S_IFIFO|0600, st_nlink=1, st_uid=2004, st_gid=12, st_blksize=4096, st_blocks=0, st_size=0, st_atime=2008/03/19-09:08:00, st_mtime=2008/03/19-09:08:00, st_ctime=2008/03/19-09:08:00}) = 0 [pid 4061] fstat64(10, {st_dev=makedev(0, 5), st_ino=5022780, st_mode=S_IFIFO|0600, st_nlink=1, st_uid=2004, st_gid=12, st_blksize=4096, st_blocks=0, st_size=0, st_atime=2008/03/19-09:08:00, st_mtime=2008/03/19-09:08:00, st_ctime=2008/03/19-09:08:00}) = 0 [pid 4061] gettimeofday({1205932080, 941409}, {4294967116, 0}) = 0 [pid 4061] select(11, [8 10], [], [8 10], {2147483, 0} <unfinished ...> [pid 4093] close(0) = 0 [pid 4093] close(1) = 0 [pid 4093] close(2) = 0 [pid 4093] close(7) = 0 [pid 4093] close(8) = 0 [pid 4093] close(10) = 0 [pid 4093] dup2(6, 0) = 0 [pid 4093] close(6) = 0 [pid 4093] dup2(9, 1) = 1 [pid 4093] close(9) = 0 [pid 4093] dup2(11, 2) = 2 [pid 4093] close(11) = 0 [pid 4093] --- SIGSEGV (Segmentation fault) @ 0 (0) --- Process 4093 detached <... select resumed> ) = 2 (in [8 10], left {2147482, 996000}) --- SIGCHLD (Child exited) @ 0 (0) --- gettimeofday({1205932080, 943134}, {4294967116, 0}) = 0 read(10, "", 1024) = 0 read(8, "", 1024) = 0 close(7) = 0 close(8) = 0 close(10) = 0 waitpid(4093, [{WIFSIGNALED(s) && WTERMSIG(s) == SIGSEGV}], 0) = 4093 gettimeofday({1205932080, 943814}, NULL) = 0 setsockopt(1, SOL_TCP, TCP_CORK, [1], 4) = 0 write(1, "004 NO command failed\r\n", 23) = 23 setsockopt(1, SOL_TCP, TCP_CORK, [0], 4) = 0 I will try to use gdb to attach proccess and found something.

2 1

[Dovecot] Question about log entry?
by Knute Johnson 22 Mar '08

22 Mar '08

dovecot: POP3(knute): mbox sync: Expunged message reappeared in mailbox /var/mail/knute (UID 585 < 379664, seq=2, idx_msgs=0): 1 Time(s) dovecot: POP3(knute): mbox sync: UID inserted in the middle of mailbox /var/mail/knute (379664 > 585, seq=2, idx_msgs=1): 1 Time(s) I've been getting these lately. Any idea what causes them? Should I worry about it? Thanks, -- Knute Johnson Molon Labe...

3 2

[Dovecot] IMAP creates .userid directory even after pop.
by Jorgen Lundman 21 Mar '08

21 Mar '08

We are currently running dovecot-1.0.10 on Solaris 10 x86. Several users has noticed that they get different emails when using pop vs using IMAP. When I check a user's home directory, I find the following situation: /nfs/mail/1/1/hiro.11/mail/: drwx------ 6 176785 1000 512 Mar 21 07:53 . drwxr-xr-x 3 176785 1000 512 Feb 29 17:01 .. drwx------ 5 176785 1000 512 Feb 19 12:52 .hiro_11_c7 drwx------ 2 176785 1000 8192 Mar 21 07:53 cur -rw------- 1 176785 1000 1445 Mar 21 07:53 dovecot-uidlist -rw------- 1 176785 1000 144 Mar 21 07:53 dovecot.index -rw------- 1 176785 1000 57344 Mar 21 07:53 dovecot.index.cache -rw------- 1 176785 1000 66424 Mar 21 07:53 dovecot.index.log drwx------ 2 176785 1000 7680 Mar 21 10:34 new drwx------ 2 176785 1000 1536 Mar 21 10:34 tmp /nfs/mail/1/1/hiro.11/mail/.hiro_11_c7/: drwx------ 5 176785 1000 512 Feb 19 12:52 . drwx------ 6 176785 1000 512 Mar 21 07:53 .. drwx------ 2 176785 1000 512 Feb 19 12:52 cur -rw------- 1 176785 1000 1037 Feb 19 12:52 dovecot-uidlist -rw------- 1 176785 1000 120 Feb 19 12:52 dovecot.index -rw------- 1 176785 1000 24 Feb 19 12:52 dovecot.index.log -rw------- 1 176785 1000 0 Feb 19 12:52 maildirfolder drwx------ 2 176785 1000 1536 Feb 19 12:52 new drwx------ 2 176785 1000 1536 Feb 19 12:52 tmp I suspect that is less than ideal. What exactly is creating these folders, and how do we stop it? I can clean it up ok (which I'd rather do as one maintenance) but only once I know it wont happen again. Should also mention that we have a mbox convert script running for a couple of months, to convert their old mail. Then it will be removed: convert_mail = mbox:/export/mbox/migrate/%u:INBOX=/export/mbox/migrate/%u/%u:INDEX=Maildir:%h/mail/ Should also mention, one server in the cluster was incorrectly running version dovecot-1.0.2 (boy was that fun to track down). Lund -- Jorgen Lundman | <lundman(a)lundman.net> Unix Administrator | +81 (0)3 -5456-2687 ext 1017 (work) Shibuya-ku, Tokyo | +81 (0)90-5578-8500 (cell) Japan | +81 (0)3 -3375-1767 (home)

1 1

[Dovecot] Rootless installation gets ssl-parameters.dat errors
by Daniel Bretoi 20 Mar '08

20 Mar '08

In the logfile, i see this: dovecot: Mar 18 16:24:30 Error: ssl-build-param: Can't create temporary SSL parameters file /var/lib/dovecot/ssl-parameters.dat.tmp: Permission denied dovecot: Mar 18 16:24:30 Error: child 21836 (ssl-build-param) returned error 89 dovecot: Mar 18 16:24:30 Error: link(/var/lib/dovecot/ssl- parameters.dat, /usr/local/sb/daniel/rm/trunk/var/run/dovecot/login/ ssl-parameters.dat.tmp) failed: Permission denied dovecot: Mar 18 16:24:30 Error: file_copy(/var/lib/dovecot/ssl- parameters.dat, /usr/local/sb/daniel/rm/trunk/var/run/dovecot/login/ ssl-parameters.dat) failed: No such file or directory It is true that I as a user do not have permissions to read this file, however, I followed all the instructions to run as a rootless user. I don't seem to be able to specify anywhere where this ssl- parameters file should be copied from. Please note, I'm running this as user daniel (not root). Btw, there seems to have been a ssl_parameters_file keyword in the past, but it doesn't work with my version (nor with the latest 1.0.13). non-SSL IMAP works fine, but obviously SSL has issues. Thank you in advance for any help, Daniel #### SYSTEM INFO ##################################### $ dovecot --version 1.0.rc15 $ uname -a Linux myhost.com 2.6.22.18-vs2.3.0.32.1 #1 SMP Mon Feb 11 07:07:23 EST 2008 x86_64 x86_64 x86_64 GNU/Linux $ cat /etc/redhat-release CentOS release 5 (Final) #### CONFIG FILE #################################### $ perl -e 'for (<>){ next if /^\s*(#|$)/; print $_; }' dovecot.conf base_dir = /usr/local/sb/daniel/rm/trunk/var/run/dovecot protocols = imap imaps protocol imap { listen = *:8300 ssl_listen = *:8301 } log_path = /usr/local/sb/daniel/rm/trunk/var/logs/dovecot.log info_log_path = /usr/local/sb/daniel/rm/trunk/var/logs/dovecot.info.log ssl_cert_file = /usr/local/sb/daniel/rm/trunk/etc/dovecot.cert.pem ssl_key_file =/usr/local/sb/daniel/rm/trunk/etc/dovecot.private.pem login_chroot = no login_user = daniel login_process_size = 64 login_greeting = daniel's Dovecot ready. mail_location = mbox:/usr/local/sb/daniel/rm/trunk/var/mail:INBOX=/usr/ local/sb/daniel/rm/trunk/var/mail/INBOX mail_debug = yes protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth default { mechanisms = plain passdb passwd-file { args = /usr/local/sb/daniel/rm/trunk/var/dovecot.passwd } userdb passwd { } userdb passwd-file { args = /usr/local/sb/daniel/rm/trunk/var/dovecot.passwd } user = daniel } dict { } plugin { }

3 6

[Dovecot] Using IMAP keywords instead of mailboxes for spam with dovecot-antispam
by Jan Oravec 20 Mar '08

20 Mar '08

Hi, Some email clients, like Evolution, use IMAP keywords to flag spam instead of moving mail to dedicated spam mailbox. This is very useful, as false positives can be easily "moved" to original mailbox simply by removing $Junk keyword. I couldn't find a way how to integrate antispam software, like dspam, with dovecot, so that antispam automatically learns ham/spam. I have found Johannes's dovecot-antispam plugin. Unfortunatelly, it doesn't have IMAP keywords support, autolearn is based on folders. Is there any solution for this use case? Thanks, Jan

5 9

[Dovecot] Automatic Debian repository now provides source packages
by Stephan Bosch 20 Mar '08

20 Mar '08

Hello Dovecot users, Last week I announced my automatic Debian repository for dovecot-1.1. Asheesh Laroia requested source package support and as promised I built it this weekend. Now that it has succesfully released new packages for Timo's latest changes I have activated the new script. To use the source packages you must add the following line to your /etc/apt/sources.list deb-src http://xi.rename-it.nl/debian/ testing-auto main Package versions now look as follows: 1:<upstream-version>-0~auto+<build number> Current latest version: 1:1.1.rc3-0~auto+3 For questions, comments and requests, you can send me an e-mail. Regards, -- Stephan Bosch stephan(a)rename-it.nl IRC: Freenode, #dovecot, S[r]us

2 1

[Dovecot] Dovecot 1.0.13 ignores auth_krb5_keytab settings
by christop 20 Mar '08

20 Mar '08

Greetings, i am using here FreeBSD 7.0-RELEASE amd64 with dovecot 1.0.13. Gssapi auth on our dovecot setup did not work for some time, so i wanted to fix it today. I run into an auth failure, where my mutt was not able to login. Also mutt was not able to login, i had a imap/mail2.physik-pool.tu-berlin.de principal in my credentials cache after an try. I can work around with a "ln -s /etc/mail.krb5.keytab /etc/krb5.keytab" to this. MfG Christop Logoutput while try to login with mutt: [ Mar 19 22:31:01 emmi dovecot: auth(default): new auth connection: pid=228 Mar 19 22:31:01 emmi dovecot: auth(default): client in: AUTH 1 GSSAPI service=IMAP secured lip=130.149.58.162 rip=130.149.58.145 resp=bla Mar 19 22:31:01 emmi dovecot: auth(default): gssapi(?,130.149.58.145): Obtaining credentials for imap(a)mail2.physik-pool.tu-berlin.de Mar 19 22:31:01 emmi dovecot: auth(default): gssapi(?,130.149.58.145): While processing incoming data: Miscellaneous failure (see text) Mar 19 22:31:01 emmi dovecot: auth(default): gssapi(?,130.149.58.145): While processing incoming data: failed to find imap/mail2.physik-pool.tu-berlin.de@REALM(kvno 1) in keytab /etc/krb5.keytab Mar 19 22:31:02 emmi dovecot: auth(default): client out: FAIL 1 ] dovecot -n [ # 1.0.13: /usr/local/etc/dovecot.conf protocols: imaps pop3s listen: mail2.physik-pool.tu-berlin.de ssl_ca_file: /etc/CA ssl_cert_file: /etc/CERT ssl_key_file: /etc/PRIVATEKEY login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login verbose_proctitle: yes first_valid_uid: 200 first_valid_gid: 0 mail_privileged_group: mail mail_location: maildir:~/maildir mmap_disable: yes maildir_copy_with_hardlinks: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / inbox: yes namespace: type: private separator: / prefix: mail/ location: mbox:~/mail auth default: mechanisms: gssapi plain login krb5_keytab: /etc/mail.krb5.keytab gssapi_hostname: mail2.physik-pool.tu-berlin.de verbose: yes debug: yes debug_passwords: yes passdb: driver: pam userdb: driver: passwd ]

1 0

[Dovecot] IMAP - multi-simultaneous-user mail store
by Tim Alberts 19 Mar '08

19 Mar '08

I'm finishing converting from POP to IMAP and I'm seeing some potentially powerful uses, but I wonder if my ideas aren't more abuses. I want to create 'multi-user' accounts that allow groups of users to archive and share emails with each other. For example, in the case of a sales department, emails from customers may have requests for new product features. I could create an IMAP storage for sales that allows the sales staff to copy these requests into a common email account. These could then be sorted and searched by the product development team to better determine what customers want where product development should go. Another example, a service/support group has some problem customers that frequently call multiple technicians for support. The service group can save all correspondence with this customer in a single location so they can better work together to provide support for this customer. The possibilities for sharing emails in groups seem endless to me, but it depends on if it's a 'use' or 'abuse' of the IMAP protocol, and if Dovecot in-particular is designed to be able to handle this. Thoughts?

2 3

[Dovecot] Converting from UW-IMAP to dovecot - odd client problems
by Michael Durket 19 Mar '08

19 Mar '08

Our installation currently uses an old version of UW-IMAP. Instead of upgrading to the latest version, we're in the process of testing dovecot 1.0.13 on a Solaris 9 machine (using a different set of network ports of course so both the old and new systems can coexist during testing). We've been asking selected users to switch from UW-IMAP to dovecot in order to test various clients and OSes with dovecot. On our system the inboxes are always on local disk, but the indexes and any folders may be on NFS or local disk (it has to do with how and where we added disk as our user population increased over time). Only a single server is ever used and I've made sure for our version of dovecot that the settings specified for NFS are as described in the Wiki article. We've noticed some oddities which we can't figure out: 1) When siwtching a Thunderbird user running on a Fedora system (latest version of Thunderbird) Thunderbird couldn't see his mail folders even when the appropriate checkbox (Server Settings -> Advanced -> Show Only Subscribed Folders) was unchecked. Clearing out the IMAP Server Directory setting seemed to fix this, but the very next day, the folders were gone again and we've been unable since to get Thunderbird to see them. Using the same version of Thunderbird, running on Mac OS X 10.5.2 yields no such problem. Another problem with this same user involved a test wherein we created a new mail folder and then deleted it. The deletion caused an error message to be displayed (inferior folders, etc) but on the Mac OS X version no such error occurred and the folder was deleted. Investigating the protocol traces for Thunderbird showed that in the error case, it attempted to rename the deleted folder as a subfolder of the Trash folder (thus generating the error message) but on the Mac OS X version, it actually deleted the folder (which would seem to make more sense). The settings pertaining to the Trash folder are the same on both clients. 2) When switching an Apple Mail.app user running on Mac OS X 10.4.11 (Tiger) at the latest patch level, things appeared to work fine, and then the user mentioned that no mail was showing up in her inbox. Closing and restarting Mail.app appeared to fix that temporarily. She normally keeps a large number of messages in her inbox (approximately 7000+) and receives a large number of messages each day (several hundred). In this case, the Postfix mail logs showed that mail was being received, and the procmail delivery log for this user showed that procmail was putting the mail in her inbox, yet Mail.app was not indicating the presence of new mail (until it was restarted). Also Mail.app became very very slow at startup and shutdown (taking several minutes as compared to a few seconds normally). We've had no problems so far with another Tiger Mail.app user (but his inbox is considerably smaller) and no problems yet with converting a Eudora user running under Windows, but this is a stumbling block in our efforts to convert to dovecot since we'd hoped to be able to switch users over fairly easily (just by changing the port address mostly). While these woud seem to be client problems at first glance, the common factor of course is dovecot. There are no problems with any of these clients using UW-IMAP. I'm hoping that perhaps there are some readers of this list that might have seen similar problems and know of solutions, or could point me to some ways of debugging these problems (with Thunderbird I can at least debug IMAP protocol exchanges, but since dovecot doesn't log IMAP exchanges for specific IPs and since the socket connections are all via STARTTLS I can't use tcpdump so I'm kind of at a loss for how to track these things down short of patching the dovecot code to put in tracing messages). Any suggestions would be appreciated (and would help us complete our conversion to dovecot). Michael Durket

2 1

[Dovecot] Dovecot / FreeBSD / Nfs mailstore / Index=memory
by Xavier Beaudouin 19 Mar '08

19 Mar '08

Hello, I have recently changed imap from Courier-imap to dovecot because of serial problems with courier-imap, I have being forced to do it very quickly... and without extensives tests. I have 3 mails servers (freebsd based) behind a load balancer and a nfs mailstore on a netapp. On my first tests I have setup the index into some nfs shared mount, but it seems that some imap clients are going mad when deleting files (mostly because they do open some new imap connection and the index was not clean) so I have changed index to memory. This has fixed one of my problems. Now I have some strange problems is that NFS activity passed from about... 5mbps to more than 70Mpbs... Is there any reasons about that ? OS: FreeBSD 6.2-p11 / x86 Dovecot : 1.0.13 (freebsd ports) Auth: ldap based Nfs mail spool : filer:/vol/vol0/mail /var/mailusers nfs rw,nfsv3,mntudp,bg,noatime,nolockd 0 0 Thanks, /Xavier

3 2

Re: [Dovecot] Remote resources in kde-pim
by Steffen Kaiser 19 Mar '08

19 Mar '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, 18 Mar 2008, Anne Wilson wrote: > Thanks for replying. I have had IMAP mail for some time, but to get the > resources working I need, apparently, to be able to log in as Groupware to > access the shared resources. > > On the server I added sections to dovecot.conf and postfix main.cf as > described in HowTo/PostfixAndDovecotSASL. In KMail, on the client, I > used 'See what the server supports' and set it to TLS + clear text. I don't > appear to be getting a rejection, but the resources are not being read. > > /var/log/maillog shows these lines > > Mar 17 13:35:52 borg2 postfix/smtp[24339]: fatal: specify a password table via > the `smtp_sasl_password_maps' configuration parameter Hmm, I'd say that postfix has nothing to do with it. If you want to have postfix authentificate from the same Database as Dovecot, you need it, but otherwise I do not see no relation. Or do you installed some script, that checks mails for Groupware-related ones and act upon them immediately? I cannot help you with Postfix. For shared resources you'll need yet another, shared account or look into the ACL plugin. KOrganizer even supports imap URLs natively, I saw right now. Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFH4PWgVJMDrex4hCIRAr55AJ90NhgkLLUczDfFGttP6dxpZbhcrwCfRaSS 153FyDkSf+vLwY08MXjbLJ0= =q5sU -----END PGP SIGNATURE-----

2 2

[Dovecot] Missing folders after converting from Courier imap to dovecot
by M. Bobkiewicz 19 Mar '08

19 Mar '08

Hi, I?ve searched around for my problem but couldn?t find a solution. My setup: Centos 5.1 with postfix 2.5.1 (from source) and dovecot 1.0.10 (from source). I?m coming from an old Trustix 2.2 box with postfix 2.2.x and Courier imap with Maildir format mailboxes. For testing I?ve copied over some of the mailboxes from the old machine. After logging in to the new machine with Thunderbird only the incoming and trash folders appear in the Thunderbird sidebar all the rest are not showing up. When you send an email the sent folder appears with all mails this account has sent from the old machine, same with drafts etc. Access a folder directly and it will appear with all it?s content. This is some kind of nasty if you have to do this for several hundred folders. I?ve tried to fix the problem by changing the namespace private parameter "prefix" to ".". Also tried to rename courierimapuiddb to dovecot-uidlist. Both tricks don?t work. Unfortunately I can?t find the mentioned courier-dovecot-migrate.pl, maybe this would help... Any help and suggestion would be welcome. Best regards, Mike

2 2

[Dovecot] problems with postfix->procmail->deliver
by Andy Greenwood 19 Mar '08

19 Mar '08

Hi all. I'm relatively new to Dovecot, but I really like what I'm seeing so far. I have one problem that I was hoping you could help me with though. I use Postfix for my mail server, then pass that on to procmail for filtering, and finally to deliver to put the mail in the appropriate Maildir folder. However, this isn't working. Postfix passes the mail to procmail correctly, but procmail is failing when it tries to call deliver. My system-wide procmailrc matches the lower one shown here: http://wiki.dovecot.org/procmail?highlight=%28procmail%29 which uses deliver. My personal ~/.procmailrc is of similar format :0 * ^List-id:.<beginners.perl.org> #.perl/ | $DELIVER -m perl :0 * ^Sender:.owner.freebsd-\/[^@]+@FreeBSD.ORG { LISTNAME=${MATCH} :0 * LISTNAME??^\/[^@]+ # .freebsd-${MATCH}/ | $DELIVER -m freebsd-${MATCH} } :0 * ^Sender:.owner-cvs-all@freebsd.org #.cvs-all/ | $DELIVER -m cvs-all :0 * ^Delivered-To: greenwood.andy+combackup(a)gmail.com #.work/ | $DELIVER -m work :0 #$HOME/Maildir/ | $DELIVER However, my procmail logs show this error message for every message that comes through: Fatal: destination user parameter (-d user) not given I can see that the variable $DELIVER doesn't use the -d parameter, but I'm not sure on how I would specify the value in a multi-user system. I know I could just use deliver directly from Postfix, but I really want to use the filtering capabilities of procmail. If you need any additional information, just let me know. Thanks in advance for any help you can give, and big thanks for this great piece of software! Andy Greenwood

2 2

[Dovecot] max connects per host?
by subscriber＠viliar.net.ru 19 Mar '08

19 Mar '08

Message: 3 Date: Wed, 19 Mar 2008 09:48:34 +0100 From: Johan Fredin <johan(a)spelaroll.se> Subject: Re: [Dovecot] max connects per host? To: dovecot(a)dovecot.org Message-ID: <47E0D362.9070206(a)spelaroll.se> Content-Type: text/plain; charset=windows-1251; format=flowed I would personally use the operating systems firewall software for this. Seems redundant that every piece of software accepting connections should duplicate the functionality of a firewall. /Johan Yes. In some cases it could be good choice. But in _general_ it's not. It's about functionality of a mail server, isn't so? And how your users will know, what they reached limits and it's not case of broken connection/firewall/network related problems and so on?

1 0

[Dovecot] deliver to namespace using "deliver"
by Nikolay Shopik 19 Mar '08

19 Mar '08

Hi list, I would like to test new functionality in latest 1.1 release, but can't find information on wiki. How can I deliver messages to different namespaces using "deliver"?

2 3

[Dovecot] max connects per host?
by subscriber＠viliar.net.ru 19 Mar '08

19 Mar '08

Hi everyone! I want to manage mail server resource part (like it can CGP) and with it I have one question. Is any way to limit overall max simultaneous connections to imap/pop3 server from one(each) host, except use iptables/ipfw and so on? Like a patch to dovecot or, maybe, it can be released in future versions? I know about mail_max_userip_connections in dovecot 1.1 but it can't limit hosts this way. Thank you.

5 4

[Dovecot] Invalid quota rule using "backend"
by Laurento Frittella 19 Mar '08

19 Mar '08

Using a quota rule like "quota_rule = *:backend=1073741824S" (I'm testing it statically but the value is on LDAP) I receive an an error: Fatal: IMAP(...): Quota root QUOTA: Invalid rule: *:backend=1073741824S Accordingly with the wiki page http://wiki.dovecot.org/Quota/New "Backend-specific configuration currently is used only with Maildir++ quota backend. It means you can have the quota in Maildir++ format (e.g. "10000000S")." so I think it should work. What's wrong? Cheers, Laurento

3 6

[Dovecot] Maildir delete folder error
by Peter Tambach 19 Mar '08

19 Mar '08

I'm getting errors when I try to delete a maildir folder. Dovecot versions 1.0.10, 1.0.13, 1.1.rc1, 1.1,rc3 Error received: "dovecot: Mar 15 15:20:29 Error: IMAP(test(a)mydomain.com): unlink_directory(/home/mail/mydomain.com/test/..DOVECOT-TRASHED) failed: Permission denied" dovecot -n: "# 1.1.rc3: /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot info_log_path: /var/log/dovecot.info protocols: imap pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: Dovecot DA ready. verbose_proctitle: yes first_valid_uid: 100 mail_location: maildir:/home/mail/%d/%n mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: mechanisms: plain digest-md5 verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix " dovecot-sql.conf: "password_query = SELECT email as user, crypt as password, homedir as userdb_home, uid as userdb_uid, gid as userdb_gid FROM postfix_users WHERE email = '%u'" Directory owners / perms: /home/mail: mail mail 0710 /home/mail/mydomain.com: mydomain mail 0710 /home/mail/mydomain.com/test/ and all contents: mydomain mail, dirs 0700, files 0600 Tried all kinds of things, problem got me stuck for weeks. doesn't want to remove directory. Any help would be appreciated. Greetings, Peter

2 1

[Dovecot] xexec and dovecot 1.1
by subscriber＠viliar.net.ru 19 Mar '08

19 Mar '08

I'll test very interesting plugin xexec. It seems very nice and can be used in many things. It's compiled perfect with dovecot 1.0, but certanly not with dovecot 1.1. It's stopped with next error: In file included from cmd-xexec.c:30: xexec.h:8: error: expected specifier-qualifier-list before 'array_t' cmd-xexec.c: In function 'cmd_xexec': cmd-xexec.c:134: error: 'array_t' undeclared (first use in this function) cmd-xexec.c:134: error: (Each undeclared identifier is reported only once cmd-xexec.c:134: error: for each function it appears in.) cmd-xexec.c:134: error: expected ';' before 'union' I found, that in dovecot 1.1 has been changed some of functions of array init and so on. I'm not programmer :(, just a system admin., but first of all have to check it and trying to resolve by myself. According examples in ../../lib/array.h I removed array_t and this code is seems ok: xexec.h struct xexec { ARRAY_DEFINE(setups, struct xexec_setups *); }; and also here: cmd-xexec.c ARRAY_DEFINE(command, char *); After, errors cames with cmd-xexec.c: In function 'cmd_xexec': cmd-xexec.c:144: warning: passing argument 4 of 'client_read_args' from incompatible pointer type cmd-xexec.c:159: warning: assignment from incompatible pointer type cmd-xexec.c:180: warning: implicit declaration of function 'ARRAY_CREATE' cmd-xexec.c:180: error: expected expression before 'char' As I understand, it is because of (from changelog) Replaced ARRAY_CREATE() macro with [ipt]_array_init() macros. The macro has no side effects so it might as well be lowercased. I have look at the array.h, but can't find appropriate function in list of array_create,i_array_init,p_array_init,t_array_init. Should I just forget about it, until someone adapts code for dovecot 1.1, or maybe it no so complex, as looks? Thank you.

2 1

[Dovecot] Remote resources in kde-pim
by Anne Wilson 18 Mar '08

18 Mar '08

For some time I have been using dovecot to serve imap mail on my LAN. Now I want to add my diary and addressbook in kde-pim. I have got the docs from the kde site, but they talk about cyrus, and I'm not able to translate some bits of the instructions into dovecot ones. For instance, "At cyrus level (in the PC that runs IMAP server cyrus, with cyrus tools), we first need to add the user mary, so it's an IMAP recognised user, and create an IMAP folder for her" Can anyone give me a kickstart on this? On the server box I can see the dimap calendar resource and addressbook resource, so I now need to be able to tell it to allow certain users to access it. This is where I'm coming unstuck, and it looks as though no-one on the kde-pim list has done this with dovecot. Anne

2 1

[Dovecot] [gentoo-announce] [ GLSA 200803-25 ] Dovecot: Multiple vulnerabilities
by Robert Buchholz 18 Mar '08

18 Mar '08

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Dovecot: Multiple vulnerabilities Date: March 18, 2008 Bugs: #212336, #213030 ID: 200803-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Two vulnerabilities in Dovecot allow for information disclosure and argument injection. Background ========== Dovecot is a lightweight, fast and easy to configure IMAP and POP3 mail server. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-mail/dovecot < 1.0.13-r1 >= 1.0.13-r1 Description =========== Dovecot uses the group configured via the "mail_extra_groups" setting, which should be used to create lockfiles in the /var/mail directory, when accessing arbitrary files (CVE-2008-1199). Dovecot does not escape TAB characters in passwords when saving them, which might allow for argument injection in blocking passdbs such as MySQL, PAM or shadow (CVE-2008-1218). Impact ====== Remote attackers can exploit the first vulnerability to disclose sensitive data, such as the mail of other users, or modify files or directories that are writable by group via a symlink attack. Please note that the "mail_extra_groups" setting is set to the "mail" group by default when the "mbox" USE flag is enabled. The second vulnerability can be abused to inject arguments for internal fields. No exploitation vectors are known for this vulnerability that affect previously stable versions of Dovecot in Gentoo. Workaround ========== There is no known workaround at this time. Resolution ========== All Dovecot users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=net-mail/dovecot-1.0.13-r1" This version removes the "mail_extra_groups" option and introduces a "mail_privileged_group" setting which is handled safely. References ========== [ 1 ] CVE-2008-1199 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1199 [ 2 ] CVE-2008-1218 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1218 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200803-25.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security(a)gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org. License ======= Copyright 2008 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5

1 0

[Dovecot] A tail of joy...
by Curtis Maloney 18 Mar '08

18 Mar '08

So, I _finally_ got the time to upgrade from 0.99.14 ... which I told myself I'd upgrade from once 1.0 was released... (yep, I've been _that_ busy :) So I read the Wiki page on 0.99->1.0 transition, and went through the config file - for all of about 5 or 10 minutes. I logged in at 11pm when nobody else should be using it, restarted dovecot with the new version, and logged in. Snap snap snap went my folders opening.. wow, so fast! And as I got into work this morning... nobody knew a thing. If I hadn't asked a few people to let me know, nobody would have known a thing. My thanks to you, Timo. Thank you for making my life easier. -- Curtis Maloney cmaloney(a)cardgate.net

2 2

[Dovecot] Can the LDA deliver email marked as read?
by Kyle Wheeler 18 Mar '08

18 Mar '08

Hello, One of my users wants to be able to deliver email (e.g. via a procmail script) and mark it *read* when it's delivered. We use Maildir as our mail storage format. I have a bit of a hack script put together that will do it by directly manipulating the Maildir (it delivers the email using safecat, and then renames the file into the "cur" directory with the necessary flags appended to the file name), but this is a hack at best, and has the problem that if Dovecot is monitoring the file, it could potentially fail to work---there is a race between delivery and renaming. I've been slowly moving our site in the direction of using the Dovecot LDA to deliver mail. Is there a way (via a plugin, maybe?) to get the LDA to mark mail as "read" when it is delivered? ~Kyle -- He who dares not offend cannot be honest. -- Thomas Paine

2 1

[Dovecot] How LDA deliver mail
by alex_dovecot 17 Mar '08

17 Mar '08

hi,all I read some part of the source code for studying and interesting. But i face trouble when I read the 'deliver.c'. In file 'deliver.c' on line 812 , there is a function named 'deliver_mail', see below: deliver_mail(storage, mail, destination, mailbox) I couldn't find out where is this function defined and how it was linked. Thank u for your help.

2 1

[Dovecot] current quota in mysql issue
by stefan＠webetc.de 16 Mar '08

16 Mar '08

hi all, i have a problem with storing the current quota in mysql. the configuration of the dictionary quota mostly looks like the example from the wiki. the dirsize quota limit is read correctly from the user_query, but nothing stored with quotadict in the quota table. i wonder that there is nothing like a "dict" in the logfile. did i configured anything wrong? regars stefan logfile from a imap login: Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): Effective uid=150, gid=8 Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): Loading modules from directory: /usr/lib/dovecot/modules/imap Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): Module loaded: /usr/lib/dovecot/modules/imap/lib01_quota_plugin.so Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): Module loaded: /usr/lib/dovecot/modules/imap/lib02_imap_quota_plugin.so Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): Namespace: type=private, prefix=, sep=/, inbox=yes, hidden=no, subscriptions=no Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): maildir: data=/var/vmail/mydomain.de/me/Maildir Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): maildir: root=/var/vmail/mydomain.de/me/Maildir, index=/var/vmail/mydomain.de/me/Maildir, control=, inbox= Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): dirsize quota limit = 20000000kB Mar 15 14:12:18 mx01 dovecot: imap-login: Login: user=<me(a)mydomain.de>, method=PLAIN, rip=10.1.1.147, lip=10.1.1.146 here is my current config: package from debian etch (1.0.rc15) ### # file dovecot.conf disable_plaintext_auth = no base_dir = /var/run/dovecot/ protocols = imap imaps pop3 pop3s protocol imap { listen = mx01.int.example.net:143 ssl_listen = mx01.int.example.net:993 } protocol pop3 { listen = mx01.int.example.net:110 ssl_listen = mx01.int.example.net:995 } log_timestamp = .%Y-%m-%d %H:%M:%S . syslog_facility = mail ssl_cert_file = /etc/ssl/example.net/mailserver/mail-cert.pem ssl_key_file = /etc/ssl/example.net/mailserver/mail-key.pem ssl_ca_file = /etc/ssl/example.net/mailserver/ca.pem ssl_parameters_regenerate = 168 verbose_ssl = no mail_extra_groups = mail mail_debug = yes auth_verbose = no auth_debug = no auth_debug_passwords = no first_valid_uid = 150 last_valid_uid = 150 first_valid_gid = 8 last_valid_gid = 8 maildir_copy_with_hardlinks = yes protocol imap { login_executable = /usr/lib/dovecot/imap-login mail_executable = /usr/lib/dovecot/imap imap_client_workarounds = outlook-idle imap_max_line_length = 65536 mail_plugins = quota imap_quota } protocol pop3 { login_executable = /usr/lib/dovecot/pop3-login mail_executable = /usr/lib/dovecot/pop3 mail_plugins = quota } protocol lda { postmaster_address = postmaster(a)mydomain.com sendmail_path = /usr/lib/sendmail auth_socket_path = /var/run/dovecot/auth-master mail_plugins = cmusieve quota } auth_username_translation = %Lu auth default { mechanisms = plain passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb sql { args = /etc/dovecot/dovecot-sql.conf } user = nobody socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } namespace private { separator = / prefix = inbox = yes } plugin { quota = dict::: proxy::quotadict } dict { quotadict = mysql:/etc/dovecot/dovecot-sql-quota-dict.conf } ### # file dovecot-sql.conf driver = mysql connect = host=mx01.int.example.net dbname=db_mail user=dovecot password=******** default_pass_scheme = PLAIN user_query = select concat('/var/vmail/%d/%n/Maildir') as home, concat('maildir:/var/vmail/%d/%n/Maildir') as mail, 150 as uid, 8 as gid, quota from qry_dovecot where user = '%u' password_query = select user, password, concat('/var/vmail/%d/%n') as userdb_home, concat('maildir:/var/vmail/%d/%n') as userdb_mail, 150 as userdb_uid, 8 as userdb_gid from qry_dovecot where user = '%u' ### # file dovecot-sql-quota-dict.conf connect = host=db01.int.example.net dbname=db_mail user=quota password==******** table = quota select_field = current where_field = path username_field = username (don't wonder about the different database hosts. mx01 is a readonly slave from db01)

1 1