- dovecot - dovecot.org

[Dovecot] Automatic subscribtion to the Spam folder?
by Henk Wevers 20 Apr '07

20 Apr '07

Is this possible? Or need I make some shell scripts to add Spam into subscriptions? Henk

1 0

Re: [Dovecot] dovecot-auth %c variable is not working
by Bill Boebel 20 Apr '07

20 Apr '07

On Thu, April 19, 2007 3:23 pm, Andrey Panin <pazke(a)donpac.ru> said: > On 109, 04 19, 2007 at 12:17:41PM -0400, Bill Boebel wrote: >> In "doc/variables.txt" >> >> > For dovecot-auth there are also these variables: >> > >> > %c - "secured" string with SSL, TLS and localhost connections. >> > Otherwise empty. >> >> %c does not appear to be working. I am trying to use it in a MySQL query userdb >> and passdb query and it is always empty string. > > Seems like secured flag isn't passed to blocking passdb handler. > Can you try attached patch ? > This patch indeed fixed it. Tested with all 4 protocols... pop3 -> %c = '' pop3s -> %c = 'secured' imap -> %c = '' imaps -> %c = 'secured' Thanks Andrey! Bill

1 0

[Dovecot] Client with SSL client cert support?
by Peter Abrahamsen 20 Apr '07

20 Apr '07

Good day, all, I've gleaned that dovecot has support for verifying SSL client certs on connect. What IMAP clients have people found that support sending a specific SSL cert? I can't find this feature in Thunderbird, at least. Thanks, Peter

3 2

[Dovecot] POP3 log in failure after switch to dovecot from Cyrus
by Stowe Spivey 20 Apr '07

20 Apr '07

I can set up and access a dovecot pop3 account using outlook express fine. I can telnet into it fine. However, GFI FaxMaker is failing to log in. I assisted a client in switching his web site, including email from one server (FreeBSD) which was using Cyrus to a Redhat 4.0 server using dovecot version 0.99.11 Here's the listing of dovecot -n: dovecot -n Usage: dovecot [-F] [-c <config file>] Fatal: Unknown argument: -n The GFI Faxmaker polls the pop3 account every minute so we're getting a lot lf these messages in the log file: Apr 19 19:51:28 server name pop3-login: Aborted login [::ffff:<ip address here>] Again, I can telnet in to the account from that server. I verified all the log in credentials are correct but it still is failing to log in. Any ideas?

2 1

[Dovecot] Memory Errors
by Paul Hamby 20 Apr '07

20 Apr '07

I just loaded 1.0.0 on a new box and am getting the following errors periodically. Apr 19 16:36:00 imap01 dovecot: auth(default): *** glibc detected *** free(): invalid pointer: 0xb7f45d14 *** Apr 19 16:36:00 imap01 dovecot: child 1943 (auth) killed with signal 6 Apr 19 16:36:00 imap01 dovecot: auth(default): *** glibc detected *** malloc(): memory corruption: 0x080920a0 *** Apr 19 16:37:31 imap01 dovecot: auth(default): *** glibc detected *** malloc(): memory corruption: 0x08091449 *** Apr 19 16:37:31 imap01 dovecot: auth(default): pam(user,ip): Child process died Apr 19 16:37:31 imap01 dovecot: auth(default): PAM: Child 13425 died with signal 6 Apr 19 16:38:09 imap01 dovecot: IMAP(user): UID larger than next_uid in file /mail_home1/c/ch/user/Maildir/dovecot-uidlist (1 >= 1) Apr 19 16:38:46 imap01 dovecot: auth(default): *** glibc detected *** free(): invalid pointer: 0xb7ea7d14 *** Apr 19 16:38:46 imap01 dovecot: child 12280 (auth) killed with signal 6 Apr 19 16:38:46 imap01 dovecot: auth(default): *** glibc detected *** malloc(): memory corruption: 0x0809143f *** Has anyone else seen something similar? What additional information can I provide? Dovecot Version=1.0.0 OS: Debian Etch CPU: x86 Maildirs are stored in NFS and only accessed via Horde/IMP webmail client. I have three other Dovecot boxes(1.0.rc28) running Sarge and haven't seen this error before. dovecot -n follows Thanks for any help. Paul imap01:/usr/local/src/dovecot-1.0.0# dovecot -n # /usr/local/etc/dovecot.conf protocols: imap listen: *:143 ssl_disable: yes disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login login_process_per_connection: no default_mail_env: maildir:~/Maildir mail_location: maildir:~/Maildir mmap_disable: yes lock_method: dotlock maildir_copy_with_hardlinks: yes mail_plugins: quota imap_quota namespace: type: private separator: . prefix: INBOX. inbox: yes auth default: passdb: driver: pam userdb: driver: passwd plugin: quota: maildir

2 1

[Dovecot] Maillog rotates, but dovecot still writes logs into old logfile?
by Mart Pirita 19 Apr '07

19 Apr '07

Tere. I use: log_path = /var/log/maillog info_log_path = /var/log/maillog And into /var/log are: maillog maillog.1 maillog.2 maillog.3 Now when log files are rotating at 04:00 (maillog > maillog.1) dovecot still keeps login into maillog.1 and not into maillog, where sendmail, etc writes logs. The only solution I did found, is adding into /etc/logrotate.d/syslog command to restart dovecot: /var/log/maillog { postrotate /usr/bin/killall -HUP syslogd /etc/rc.d/init.d/dovecot restart >/dev/null 2>&1 endscript } Any other solution? -- Mart

3 4

[Dovecot] Master auth: what is 'client-id'?
by Koen Vermeer 19 Apr '07

19 Apr '07

Hi, I am trying to get some useful data from the master auth socket. On the wiki, I found that I need to do: M: "REQUEST" TAB <id> TAB <client-pid> TAB <client-id> M: "USER" TAB <id> TAB <userid> TAB service=<service> [TAB <parameters>] However, what should I specify for <client-id>? I cannot find a definition on the Wiki. Thanks! Koen

1 0

[Dovecot] dovecot-auth %c variable is not working
by Bill Boebel 19 Apr '07

19 Apr '07

In "doc/variables.txt" > For dovecot-auth there are also these variables: > > %c - "secured" string with SSL, TLS and localhost connections. > Otherwise empty. %c does not appear to be working. I am trying to use it in a MySQL query userdb and passdb query and it is always empty string. Timo, any chance you could post a patch that fixes this? Thanks, Bill

2 1

Re: [Dovecot] dovecot Digest, Vol 48, Issue 71
by Kenny Dail 19 Apr '07

19 Apr '07

> * On 19/04/07 10:13 -0500, Steven F Siirila wrote: > | For lack of a better name, we are interested in a feature where one could > | get a notice out to all Dovecot users as quickly as possible, possibly > | without going through an MTA even. Given a message and a list of userids > | we could certainly do a mailing on the MDA server itself going through > | both Postfix and Dovecot LDA. However, we were wondering what other options > | we might have in Dovecot. For example, would it be possible to place the > | message into some file which Dovecot periodically checks for, and if the > | file exists, either present it to the user as a new message, or automatically > | deliver it at that time via Dovecot LDA? > > It's a really nice feature! > > We have something like that with tpop3d (Chris Lightfoot's). tpop3d is > nolonger maintained but it's rock solid as a POP3 daemon. It gives this > feature via some perl hooks (plugin, I'd call it, for lack of the proper > word atm) and works very well. > It serves the "bulletin" without any reference to the MTA, and keeps a > DB of those users who have received/retrieved/pop-ed the bulletin(s) > so that they don't get them twice. > It's one feature I will surely miss if I migrated to dovecot 100%. > It would seem to me to be easy enough to do this with post-login scripting http://wiki.dovecot.org/PostLoginScripting -- Kenny Dail <kend(a)amigo.net>

1 0

[Dovecot] FYI: TB 2.0.0 + DC 1.0.0 = OK so far
by Troy Engel 19 Apr '07

19 Apr '07

Just a status note - my beta group is upgrading/upgraded to the new Thunderbird 2.0.0 (OS X & Win32 so far, Linux to come) and beating it up against Dovecot 1.0.0 and all is A-OK, nary a problem in sight. Obviously just an initial status report, but good mojo so far for those curious about trying it. -te -- Troy Engel | Systems Engineer Fluid, Inc | http://www.fluid.com

1 0

[Dovecot] MANAGESIEVE patch v4 for dovecot 1.0.rc28
by Stephan Bosch 19 Apr '07

19 Apr '07

Hello dovecot users, I have updated the MANAGESIEVE patch to fix the currently known small problems with the protocol implementation. It is designed for rc28, but also compiles cleanly with the current cvs branch_1_0. Change Log V4 ------------- - Added managesieve_implementation_string setting to the managesieve configuration. This can be used to customize the default "IMPLEMENTATION" capability response (as requested by John Peacock). - Denied ANONYMOUS login until proper support is implemented - Fixed problem with authenticate command regarding continued responses. In V3 only initial response would work. Problem was caused by rc2 -> rc28 upgrade. One of the clear reasons why code duplication is a very bad idea. - Fixed readlink bug as indicated by Timo: return value of readlink can also be -1. - Fixed bug in the regular file rescue code, as introduced in the previous version. Used stat instead of lstat. This caused the symlink to be rescued subsequently in the next activation, thus still overwriting the initially rescued script. This patch still includes (yet another) instance of the CMU Sieve source, as explained in one of my previous e-mails (http://dovecot.org/list/dovecot/2006-July/015016.html) It can be downloaded at: http://sinas.rename-it.nl/~sirius/dovecot-1.0.rc28-MANAGESIEVE-v4.diff.gz A design related README is located at src/managesieve after applying the patch. Have fun testing the patch. Notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl IRC: Freenode, #dovecot, S[r]us

6 14

[Dovecot] Duplicate E-mail Problem
by Phillip T. George 19 Apr '07

19 Apr '07

Hello all, Definitely congrats on the 1.0.0 release! Anyway, I'm having a problem, that may or may not be related to Dovecot. Specifically, duplicate (and sometimes triplicate) emails are appearing. These emails have exactly the same queue ID, so its not that they were sent multiple times. These dup emails do not show up to me ever. Postfix is being used as the SMTP, and it hands it over to procmail. I set up procmail's verbose logging feature for that user and on the duplicate emails that he receives, it shows only ONE write to a file for that specific subject of email. Tonight / this morning I'll be tracking down to see if this duplicate for sure happens in IMAP. Note: Its possible that part of the problem is he leaves two IMAP clients open at the same time (Netscape I think). I'm going to verify that with him. Any ideas? I'm NOT trying to blame Dovecot, I'm just trying to explore options. Right now its looking fairly bad for Dovecot though....I mean, what else is there after the mail is delivered to the appropriate place in the mailbox? Software versions: postfix 2.3.8 procmail 3.22 dovecot 1.0.rc28 Thanks, Phillip

9 20

[Dovecot] v1.0.0 released
by Timo Sirainen 18 Apr '07

18 Apr '07

http://dovecot.org/releases/dovecot-1.0.0.tar.gz http://dovecot.org/releases/dovecot-1.0.0.tar.gz.sig It took almost 5 years, but it's finally ready. I'm not expecting to release v1.0.1 anytime soon, unless someone's been sitting on a major bug just waiting for v1.0 to be released. :) People wanting new features should start testing the upcoming v1.1. http://dovecot.org/nightly/ contains now snapshots from CVS HEAD. It already has tons of new features. I've been using it myself for half a year, so it should be mostly stable too. I'll write a separate mail about this later.

61 66

[Dovecot] v1.1 plans - sieve?
by David Anderson 18 Apr '07

18 Apr '07

In the 1.1 plans (http://dovecot.org/list/dovecot/2007-April/021974.html) I don't see any mention of sieve... is this intentional? Sieve support is a priority for me... I'm going to have to see if I can get it via exim's support if dovecot's not going to add it in 1.1. Cheers, David

7 8

[Dovecot] Fwd: dovecot - cas authentication help needed
by Vidyasagar Warge 18 Apr '07

18 Apr '07

---------- Forwarded message ---------- From: Vidyasagar Warge <vidyasagar.mailinglists(a)gmail.com> Date: Apr 17, 2007 4:36 AM Subject: dovecot - cas authentication help needed To: cas(a)tp.its.yale.edu Hello All, I am new to CAS & writing my first mail on this mailing list. So please forgive me if I am asking something trivial or stupid :). I am trying to configure dovecote-IMAP server to authenticate the users against CAS through PAM authentication. I found a tutorial here: http://translate.google.com/translate?hl=en&sl=fr&u=http://esup-portail.org… I followed the instructions, but not able to get the authentication running through PAM :(. I googled a lot but didn't found any text on dovecot-pam-casauthentication. If anyone has done it before? and can tell me the steps? Thanks in advance! Regards, Vidyasagar Warge.

1 0

[Dovecot] help with static userdb
by Kyle Wheeler 18 Apr '07

18 Apr '07

Hey, This may be a dumb question... I'm trying to set up 1.0 with a static userdb, and I'm getting stuck. I have: userdb static { args = uid=500 gid=500 home=/domains/%d/%n } When I attempt to log in as, say, kyle(a)memoryhole.net (via telnet, so I *know* I'm logging in as that user), the debug log says that it thinks my home directory is "/domains//kyle". I even tried, just to check what might be going on: args = uid=500 gid=500 home=/domains/%u/%d/%n It then thought my home directory was "/domains/kyle//kyle". Can anyone help me? Where might that be getting cleared? ~Kyle -- The more men you make free, the more freedom is strengthened and the ... greater is the security of the State. -- Frederick Douglas, Nov 17, 1864

2 2

[Dovecot] lazy_expunge vs mulberry
by Frank Cusack 17 Apr '07

17 Apr '07

I've configured the lazy_expunge plugin exactly like it says on the wiki. I can't seem to configure Mulberry to find the new namespaces. Any hints? I notice that the wiki says to use / as the separator. Mulberry has a setting for this, and the default is '.'. Leaving this as '.' in Mulberry and / in dovecot seems to work fine. (But I still can't access the .EXPUNGED or other namespaces.) Another page on the wiki says that the default separator for maildir is '.'. Why does the lazy_expunge page suggest using '/'? I'm very confused about namespaces. -frank

2 4

[Dovecot] Time just moved backwards
by Chaos Engine 17 Apr '07

17 Apr '07

Hi there, I got a daily cron (rdate to local time server) job wich adjusts time and which constantly gives me headache. Every day my dovecot suicides with: "dovecot: Time just moved backwards by 11 seconds. This might cause a lot of problems, so I'll just kill myself now." Of course my onboard clock is constantly off by more than 5 secs. I don't want to abandon time synchronization and I want to use dovecot. Maybe a -HUP signal would do? What do you propose? -- Chaos greets U

7 9

[Dovecot] PAM on AIX - resolved
by Stewart Dean 17 Apr '07

17 Apr '07

I previously asked about this problem with pam on IBM's AIX Unix > I get the errmsg: > auth|security:err|error dovecot-auth PAM: load_modules: can not open > module /usr/lib/security/pam_prohibit FWIW, it turned out that the default PAM libraries are 32 bit, while I had compiled DC at 64bit. The /etc/pam.conf lines come standard like this: telnet auth required /usr/lib/security/pam_aix To get 64 bit, you can either change the line like this: dovecot auth required /usr/lib/security/64/pam_aix OR, you can let PAM figure which bit-width library to use dovecot auth required pam_aix Needless to say, it would have been better if the IBM default was the second -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

1 0

[Dovecot] keeping indexes in tmpfs
by Justin McAleer 17 Apr '07

17 Apr '07

While doing some testing with converting accounts while simulating incoming mail load (no other pop/imap processes going but 4 processes converting users), we found that we were maxing out the local disk in the server with the index activity. To find out that it was the index activity, I mounted a tmpfs for dovecot to keep indexes on, and the system load dropped from 70 to 3 :) Anyway, Timo and others, do you have any thoughts about keeping indexes on a tmpfs partition? I realize the obvious issues with this: running out of space, and the fact that the partition is lost on reboot. However, we plan to run a cluster of these servers anyway, where we will keep domains/accounts going to a particular server but fail over to one of the others in case of an outage. Recreating the indexes seems pretty trivial when writing to tmpfs anyway, plus we could copy the indexes to disk (restore after reboot) in the case of planned outages... unplanned outages result in another server rebuilding them all anyway. So, I'm looking for non-obvious issues we may have with this approach. I need to do more testing to see how much memory we would actually need to feasibly keep the indexes there, but otherwise is there a good reason not to do this?

3 7

Re: [Dovecot] Public folders using NAMESPACE
by Joakim Ryden 17 Apr '07

17 Apr '07

On Tue, April 17, 2007 3:48 am, Joakim Ryden wrote: > On Tue, April 17, 2007 2:29 am, Timo Sirainen wrote: >> On Tue, 2007-04-17 at 02:14 -0700, Joakim Ryden wrote: >>> I've been trying to research how to (or if possible at all) implement public >>> folders using the namespace feature on a server with multiple virtual >>> domains. >>> After about an hour of looking around I'm a little confused. :) >> >> Did you read this? http://wiki.dovecot.org/SharedMailboxes >> >> I now added a link there from ACL page. > > Thanks Timo! That's pretty helpful. I think I'm still missing something though. > I have the following configuration: > > > namespace public { > separator = . > prefix = Public Folders. > location = maildir:/var/mailstore/shared-folders/%d/Maildir > } > > namespace private { > separator = . > prefix = > inbox = yes > } > > With this, "Public Folders" shows up (testing with Thunderbird) but not as an > italic special folder (does that make sense?) as it does on all other accounts I > have on other servers which support public folders. I created a folder here: > > /var/mailstore/shared-folders/domain.com/Maildir/.Announcements > > which also shows up nicely, I can copy email in there and subscribe and > unsubsribe to this subfolder, but clicking on "Public Folders" gives: Mailbox > doesn't exist: Public Folders. which I'm sure is because I've missed or > misunderstood something :) Any ideas? > > Cheers! > > --Jo Ok, I'm a dumb ass. If I would actually use my eyes I would see: "Another problem is that although the namespace prefix shows up as a normal looking mailbox, Dovecot doesn't allow subscribing to it because it's not a real mailbox. This will be fixed in later versions." on the wiki page. Nevermind me :) I assume this hasn't been fixed yet?

1 0

[Dovecot] Different classes of user
by John Robinson 17 Apr '07

17 Apr '07

Hello list! Only recently joined, please excuse me if this is a stupid question. I'd like to have 2 classes of user: those with shell accounts, and those without. They'll all have "real" accounts, for which the password can be checked with PAM. I've set up SSL too. What I want to arrange is for users with shell accounts not to be succeed in logging in to Dovecot without using TLS/SSL. I'll have to allow unencrypted logins (for non-shell users), but I want to reject/refuse such a login from someone with a shell account. I've already made my exim do this, with the following logic in my authenticator there: if (pam auth ok) and ((tls) or (user's shell not listed in /etc/shells)) I haven't worked out how to make Dovecot do this, yet. So far I just tried using * as the PAM service name, in the hope that not only would pop3 or imap get passed through, but pop3s and imaps might, and I had a line in my /etc/pam.d/imap and pop like this: auth required pam_succeed_if.so debug shell notin /bin/bash:/bin/sh which worked, but unfortunately also got used for imapS logins. Then I realised this was likely to be the wrong thing anyway, because it would presumably only cover IMAPS on port 993, and not IMAP+TLS on the usual port 143. So I've had a go but got it wrong. What should I do to get it right? Cheers, John.

3 11

[Dovecot] timeout error in dovecot.log
by Joe Wong 17 Apr '07

17 Apr '07

Hello, I have upgraded to Dovecot 1.0.0, I saw a lot of error in the dovecot.log file: Timeout while waiting for lock for transaction log file /fs/example.com/joewong/Maildir/dovecot.index.log where /fs is a NFS mounted directory. What can be the cause of this problem? How to prevent this from happening? Thanks! - Joe

3 5

[Dovecot] Maildir, INDEX, and folders
by Troy Engel 17 Apr '07

17 Apr '07

I'm reading the wiki et el. regarding indexes, but can't come up with a coherent answer to the setup and what will happen. I want to take the indexes and move them off of NFS (~/Maildir) and place in /var/spool/dovecot/indexes, but not have to hand create everything (user homes, mail folders) So, I create a parent folder /var/spool/dovecot/indexes that has the appropriate permissions for writing by all users/dovecot. If I then set: mail_location = maildir:~/Maildir:INDEX=/var/spool/dovecot/indexes/%1u/%u ...will the dovecot daemon(s) automagically create (A) the parent user folders (i.e. .../indexes/t/tengel/)(1), and (B) the necessary subfolders for all the child folder indexes? (i.e. .../tengel/.Lists.Dovecot/) Most of the doc info seems to revolve around moving your indexes if you use mbox, I'm a little fuzzy on what happens with Maildir when you attempt this. thanks! -te (1) in our setup, initially user's home folders are created on an admin server -> NFS that is not the mail server, so Dovecot needs to create the home & index folders on it's own at runtime. -- Troy Engel | Systems Engineer Fluid, Inc | http://www.fluid.com

4 5

[Dovecot] mail_log plugin
by Phillip T. George 16 Apr '07

16 Apr '07

Hello all, Is there any way to add additional options for the mail_log plugin? Specifically, I'm wanting to make it so IMAP copy commands will show the source filename and/or the user's IP address. Is this possible? If there are docs for this info, feel free to point me to it. -Phillip

2 2

[Dovecot] auth-login crash with cram-md5 (plain works) on unknown user
by Charlie Allom 16 Apr '07

16 Apr '07

Hello Timo and others.. 14:09 mail:~# dovecot --version 1.0.rc31 Install prefix ...................... : /usr/local File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : inotify Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with mail delivery agent .. : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword ldap (modules) Building with password lookup modules : passwd passwd-file shadow checkpassword ldap (modules) Building with SQL drivers ............: when logging in as an *unknown* user - with CRAM-MD5 and an LDAP pass/userdb i get this crash of the auth process: ==> /var/log/dovecot.log <== dovecot: 2007-04-12 13:50:14 Error: auth(default): file auth-request.c: line 474 (auth_request_lookup_credentials_callback): assertion failed: (request->state = = AUTH_REQUEST_STATE_PASSDB) dovecot: 2007-04-12 13:50:14 Error: auth(default): Raw backtrace: dovecot-auth [0x80665a1] -> dovecot-auth [0x80664bc] -> dovecot-auth [0x805429e] -> dovecot-auth [0x805d7fd] -> dovecot-auth [0x805dbc4] -> dovecot-auth [0x8057f3b] -> dovecot-auth(io_loop_handler_run+0x110) [0x8069730] -> dovecot-auth(io_loop_run+0x1c) [0x8068c8c] -> dovecot-auth(main+0x2fe) [0x805920e] -> /lib/libc.so.6(__libc_start_main+0xdc) [0xb7db58cc] -> dovecot-auth [0x804fb51] dovecot: 2007-04-12 13:50:14 Error: child 7163 (auth) killed with signal 6 logging in via plain works nicely: ==> /var/log/dovecot.info <== dovecot: 2007-04-12 14:08:12 Info: Dovecot v1.0.rc31 starting up dovecot: 2007-04-12 14:08:27 Info: auth(default): ldap(yeled,19.8.5.23): unknown user ldap entry of unknown user: dn: uid=yeled,ou=users,dc=playlouder,dc=com uid: yeled sn: yeled cn: Charles Allom userPassword:: ddd= objectClass: inetOrgPerson objectClass: CourierMailAlias mail: yeled(a)playlouder.com maildrop: charlie(a)playlouder.com ldap entry of known user: uid: luke sn: luke cn: Luke userPassword:: ddd= objectClass: inetOrgPerson objectClass: mspUser objectClass: CourierMailAccount mail: luke(a)playlouder.com homeDirectory: /home/l/luke gidNumber: 5000 uidNumber: 5000 and my ldap config: hosts = beta.playlouder.com dn = cn=admin,dc=playlouder,dc=com dnpass = ddd auth_bind = no ldap_version = 3 base = ou=users,dc=playlouder,dc=com scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=CourierMailAccount)(uid=%n)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=CourierMailAccount)(uid=%n)) default_pass_scheme = PLAIN user_global_uid = 5000 user_global_gid = 5000 as you can see I'm setting CourierMailAlias on users with no dovecot access, and CourierMailAccount on users with imap/pop logins. the passwords in openldap are plain (b64) i have included the strace output... 13:49:54.112641 gettimeofday({1176385794, 112728}, {0, 0}) = 0 13:49:54.112757 gettimeofday({1176385794, 112771}, NULL) = 0 13:49:54.112792 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 579) = 0 13:49:54.691245 gettimeofday({1176385794, 691271}, {0, 0}) = 0 13:49:54.691295 gettimeofday({1176385794, 691307}, NULL) = 0 13:49:54.691328 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 2000) = 0 13:49:56.691229 gettimeofday({1176385796, 691257}, {0, 0}) = 0 13:49:56.691280 gettimeofday({1176385796, 691293}, NULL) = 0 13:49:56.691313 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 970) = 0 13:49:57.661354 gettimeofday({1176385797, 661389}, {0, 0}) = 0 13:49:57.661437 gettimeofday({1176385797, 661450}, NULL) = 0 13:49:57.661470 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 1030) = 0 13:49:58.691228 gettimeofday({1176385798, 691255}, {0, 0}) = 0 13:49:58.691278 gettimeofday({1176385798, 691292}, NULL) = 0 13:49:58.691312 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 2000) = 0 13:50:00.691326 gettimeofday({1176385800, 691362}, {0, 0}) = 0 13:50:00.691396 gettimeofday({1176385800, 691409}, NULL) = 0 13:50:00.691430 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 1970) = 0 13:50:02.661327 gettimeofday({1176385802, 661355}, {0, 0}) = 0 13:50:02.661387 gettimeofday({1176385802, 661401}, NULL) = 0 13:50:02.661421 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 30) = 0 13:50:02.691270 gettimeofday({1176385802, 691293}, {0, 0}) = 0 13:50:02.691316 gettimeofday({1176385802, 691329}, NULL) = 0 13:50:02.691348 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 2000) = 0 13:50:04.691291 gettimeofday({1176385804, 691327}, {0, 0}) = 0 13:50:04.691366 gettimeofday({1176385804, 691379}, NULL) = 0 13:50:04.691399 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 2000) = 0 13:50:06.691246 gettimeofday({1176385806, 691275}, {0, 0}) = 0 13:50:06.691298 gettimeofday({1176385806, 691312}, NULL) = 0 13:50:06.691332 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 970) = 0 13:50:07.661253 gettimeofday({1176385807, 661280}, {0, 0}) = 0 13:50:07.661314 gettimeofday({1176385807, 661327}, NULL) = 0 13:50:07.661347 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 1030) = 0 13:50:08.692164 gettimeofday({1176385808, 692193}, {0, 0}) = 0 13:50:08.692217 gettimeofday({1176385808, 692230}, NULL) = 0 13:50:08.692250 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 2000) = 0 13:50:10.691295 gettimeofday({1176385810, 691330}, {0, 0}) = 0 13:50:10.691352 gettimeofday({1176385810, 691365}, NULL) = 0 13:50:10.691387 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 1) = 0 13:50:10.702349 gettimeofday({1176385810, 702382}, {0, 0}) = 0 13:50:10.702406 gettimeofday({1176385810, 702419}, NULL) = 0 13:50:10.702439 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 1959) = 0 13:50:12.661239 gettimeofday({1176385812, 661268}, {0, 0}) = 0 13:50:12.661300 gettimeofday({1176385812, 661314}, NULL) = 0 13:50:12.661334 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 41) = 0 13:50:12.711302 gettimeofday({1176385812, 711336}, {0, 0}) = 0 13:50:12.711372 gettimeofday({1176385812, 711385}, NULL) = 0 13:50:12.711405 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL, revents=POLLIN}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 2000) = 1 13:50:14.324672 gettimeofday({1176385814, 324698}, {0, 0}) = 0 13:50:14.324722 read(10, "AUTH\t1\tCRAM-MD5\tservice=IMAP\tlip"..., 4074) = 62 13:50:14.324786 read(4, "\275\215\332\242\353%\371\243\261\207\362c~8\365f", 16) = 16 13:50:14.324856 write(10, "CONT\t1\tPDkxODI1NzkzNzUyOTY2NTIuM"..., 76) = 76 13:50:14.324915 gettimeofday({1176385814, 324929}, NULL) = 0 13:50:14.324952 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL, revents=POLLIN}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 387) = 1 13:50:14.330904 gettimeofday({1176385814, 330925}, {0, 0}) = 0 13:50:14.330956 read(10, "CONT\t1\teWVsZWQgMmYwZWVlZDI5M2RjO"..., 4012) = 60 13:50:14.331053 time(NULL) = 1176385814 13:50:14.331107 write(7, "0{\2\1\7cv\4\35ou=users,dc=playlouder,"..., 125) = 125 13:50:14.331184 gettimeofday({1176385814, 331198}, NULL) = 0 13:50:14.331217 poll([{fd=5, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL, revents=POLLIN}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=15, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=8, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=17, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=12, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=13, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=14, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=9, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 12, 380) = 1 13:50:14.332637 gettimeofday({1176385814, 332653}, {0, 0}) = 0 13:50:14.332674 time(NULL) = 1176385814 13:50:14.332707 select(1024, [7], [], NULL, {0, 0}) = 1 (in [7], left {0, 0}) 13:50:14.332827 read(7, "0\f\2\1\7e\7\n", 8) = 8 13:50:14.332864 read(7, "\1\0\4\0\4\0", 6) = 6 13:50:14.332906 time(NULL) = 1176385814 13:50:14.332947 write(2, "\1Ildap(yeled,19.8.5.23): unkn"..., 41) = 41 13:50:14.333033 write(2, "\1Ffile auth-request.c: line 474 "..., 140) = 140 13:50:14.333120 open("/etc/ld.so.cache", O_RDONLY) = 11 13:50:14.333166 fstat64(11, {st_mode=S_IFREG|0644, st_size=11099, ...}) = 0 13:50:14.333217 mmap2(NULL, 11099, PROT_READ, MAP_PRIVATE, 11, 0) = 0xb7f28000 13:50:14.333256 close(11) = 0 13:50:14.333289 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) 13:50:14.333354 open("/lib/libgcc_s.so.1", O_RDONLY) = 11 13:50:14.333391 read(11, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\240\30"..., 512) = 512 13:50:14.333437 fstat64(11, {st_mode=S_IFREG|0644, st_size=40208, ...}) = 0 13:50:14.333488 mmap2(NULL, 43332, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 11, 0) = 0xb79e1000 13:50:14.333526 mmap2(0xb79eb000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0x9) = 0xb79eb000 13:50:14.333571 close(11) = 0 13:50:14.333632 munmap(0xb7f28000, 11099) = 0 13:50:14.333685 futex(0xb7ebe9d8, FUTEX_WAKE, 2147483647) = 0 13:50:14.333753 futex(0xb79eb824, FUTEX_WAKE, 2147483647) = 0 13:50:14.333883 write(2, "\1ERaw backtrace: dovecot-auth [0"..., 406) = 406 13:50:14.333948 rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0 13:50:14.333990 tgkill(7163, 7163, SIGABRT) = 0 13:50:14.334021 --- SIGABRT (Aborted) @ 0 (0) --- -- hail eris http://rubberduck.com/

2 4

[Dovecot] Deliver die if global sieve script turn on
by M1 16 Apr '07

16 Apr '07

In my installation "deliver" die if global sieve script turn on. Is there anything I have missed? Thanks.. Flex 2.5.33 Dovecot 1.0.rc29 postfix 2.3.8 In maillog: Apr 3 13:29:58 minigrass postfix/pipe[24691]: CA194121BC5: to=<xxx(a)yyy.com>, relay=dovecot, delay=0.24, delays=0.14/0.01/0/0.09 , dsn=5.3.0, status=bounced (Command died with status 2: "/usr/libexec/dovecot/deliver". Command output: input in flex scanner failed ) In master.cf : dovecot unix - n n - - pipe flags=DRhu user=dovecot:dovecot argv=/usr/libexec/dovecot/deliver -d ${recipient} -n in dovecot.conf: mail_plugins = cmusieve quota global_script_path = /home/mail/sieve/global in /home/mail/sieve/global/dspam.sieve require "fileinto"; if header :is ""X-DSPAM-Result" "Spam" { fileinto "Spam"; } Regards

3 7

[Dovecot] LDA problem
by Azher Amin 15 Apr '07

15 Apr '07

Hi, I am using dovecot deliver as lda for sendmail. My problem is that when a user account is over quota, deliver program sends message in the logs, but the message is not bounced back to sender informing that their is disk quota problem at the recipient side. Further message remains in the mail queue. Details are below. Plz suggest how to figure out the problems: 1. Message should be removed from queue if quota is exceeded 2. Sender should get a proper response. Regards -Azher Apr 14 11:31:41 wm sm-mta[22712]: l3EFVKQY022711: to=<azher(a)wm.niit.edu.pk>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=130864, dsn=4.0.0, stat=Deferred: local mailer (/usr/dovecot/libexec/dovecot/deliver) exited with EX_TEMPFAIL -------- wm:/etc/mail# mailq MSP Queue status... /var/spool/mqueue-client is empty Total requests: 0 MTA Queue status... /var/spool/mqueue (1 request) -----Q-ID----- --Size-- -----Q-Time----- ------------Sender/Recipient----------- l3EFVKQY022711 99722 Sat Apr 14 20:31 <azher(a)niit.edu.pk> (Deferred: local mailer (/usr/dovecot/libexec/dovecot/deliver) <azher(a)wm.niit.edu.pk> Total requests: 1 ----------------------------- Sendmail.mc ========= LOCAL_CONFIG FEATURE(`masquerade_envelope')dnl FEATURE(`allmasquerade')dnl FEATURE(`always_add_domain')dnl LOCAL_CONFIG FEATURE(`use_cw_file')dnl FEATURE(`use_ct_file')dnl FEATURE(`nouucp', `reject')dnl FEATURE(`bestmx_is_local')dnl FEATURE(`mailertable')dnl FEATURE(`smrsh')dnl FEATURE(`local_procmail', `/usr/dovecot/libexec/dovecot/deliver',`deliver -d $u') dnl # FEATURE(local_procmail) MAILER_DEFINITIONS MAILER(local)dnl MAILER(smtp)dnl MODIFY_MAILER_FLAGS(`LOCAL', `-f') MAILER(procmail)dnl LOCAL_CONFIG -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 7

[Dovecot] mbox sync assertion failed?
by ddalton 15 Apr '07

15 Apr '07

freebsd 6.0 Dovecot v1.0.rc25 dovecot: Apr 14 17:06:25 Error: IMAP(ddalton): file mbox-sync-rewrite.c: line 408 (mbox_sync_read_and_move): assertion failed: (need_space == (uoff_t)-mails[idx].space) dovecot: Apr 14 17:06:26 Error: child 60712 (imap) killed with signal 6 Core was generated by `imap'. Program terminated with signal 6, Aborted. Reading symbols from /usr/local/lib/libiconv.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/libiconv.so.3 Reading symbols from /lib/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /usr/local/lib/dovecot/imap/drac.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/drac.so Reading symbols from /usr/local/lib/nss_dns.so.1...done. Loaded symbols for /usr/local/lib/nss_dns.so.1 Reading symbols from /libexec/ld-elf.so.1...done. Loaded symbols for /libexec/ld-elf.so.1 #0 0x1821d4b3 in kill () from /lib/libc.so.6 (gdb) bt full #0 0x1821d4b3 in kill () from /lib/libc.so.6 No symbol table info available. #1 0x182124f0 in raise () from /lib/libc.so.6 No symbol table info available. #2 0x1828cc5c in abort () from /lib/libc.so.6 No symbol table info available. #3 0x080a7339 in i_set_failure_file () No symbol table info available. #4 0x080a6e9f in i_panic () No symbol table info available. #5 0x0807618b in mbox_sync_rewrite () No symbol table info available. #6 0x080715c8 in mbox_sync_apply_index_syncs () No symbol table info available. #7 0x080735c6 in mbox_sync () No symbol table info available. #8 0x08073a38 in mbox_storage_sync_init () No symbol table info available. #9 0x0805f7b2 in imap_sync_init () No symbol table info available. #10 0x0805fc5f in cmd_sync () No symbol table info available. #11 0x080566db in cmd_check () ---Type <return> to continue, or q <return> to quit--- No symbol table info available. #12 0x0805a43e in _client_reset_command () No symbol table info available. #13 0x0805a3d2 in _client_reset_command () No symbol table info available. #14 0x0805a584 in _client_input () No symbol table info available. #15 0x080ac6d4 in io_loop_handler_run () No symbol table info available. #16 0x080abd91 in io_loop_run () No symbol table info available. #17 0x08061330 in main () No symbol table info available. (gdb) quit

3 2

[Dovecot] dovecot pam const
by Frank Cusack 15 Apr '07

15 Apr '07

In passdb-pam.c, I found some bits about const with some PAM data types. Rather than check for each vendor of PAM, better to check for actual const usage ... some vendors have changed const-ness between releases. Also, actually testing constness is great for supporting new implementations that may come out. Here is the autoconf test I use in pam_otp_auth: --8<-- # Check PAM headers for brokenness otp_CFLAGS="$CFLAGS" # save CFLAGS="$CFLAGS $EXTRA_CFLAGS -Werror" # Linux-PAM has (incorrectly) overdone const AC_MSG_CHECKING(for extra const in PAM headers) AC_TRY_COMPILE([#include <security/pam_appl.h>], [ pam_handle_t *pamh = NULL; char *item; pam_get_item(pamh, PAM_SERVICE, (void **) &item); ], [ AC_MSG_RESULT(no) DEFINES="$DEFINES -DPAM_GET_CONST=" ], [ AC_MSG_RESULT(yes) DEFINES="$DEFINES -DPAM_GET_CONST=const" ]) # Solaris PAM has (incorrectly) underdone const AC_MSG_CHECKING(for missing const in PAM headers) AC_TRY_COMPILE([#include <security/pam_appl.h>], [ struct pam_conv *conv = NULL; struct pam_message *msg; struct pam_response *resp; conv->conv(1, &msg, &resp, conv->appdata_ptr); ], [ AC_MSG_RESULT(yes) DEFINES="$DEFINES -DPAM_CONV_CONST=" ], [ AC_MSG_RESULT(no) DEFINES="$DEFINES -DPAM_CONV_CONST=const" ]) CFLAGS="$otp_CFLAGS" # restore --8<-- And then I do pam_get_item(..., (PAM_GET_CONST void **) arg); pam_get_user(..., (PAM_GET_CONST void **) arg); conv(..., (PAM_CONV_CONST struct pam_message **) arg, ...); -frank

2 1

[Dovecot] Dovecot crashing
by ddalton 15 Apr '07

15 Apr '07

freebsd 6.0 Dovecot v1.0.rc25 dovecot: Apr 14 17:06:25 Error: IMAP(ddalton): file mbox-sync-rewrite.c: line 408 (mbox_sync_read_and_move): assertion failed: (need_space == (uoff_t)-mails[idx].space) dovecot: Apr 14 17:06:26 Error: child 60712 (imap) killed with signal 6 Core was generated by `imap'. Program terminated with signal 6, Aborted. Reading symbols from /usr/local/lib/libiconv.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/libiconv.so.3 Reading symbols from /lib/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /usr/local/lib/dovecot/imap/drac.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/drac.so Reading symbols from /usr/local/lib/nss_dns.so.1...done. Loaded symbols for /usr/local/lib/nss_dns.so.1 Reading symbols from /libexec/ld-elf.so.1...done. Loaded symbols for /libexec/ld-elf.so.1 #0 0x1821d4b3 in kill () from /lib/libc.so.6 (gdb) bt full #0 0x1821d4b3 in kill () from /lib/libc.so.6 No symbol table info available. #1 0x182124f0 in raise () from /lib/libc.so.6 No symbol table info available. #2 0x1828cc5c in abort () from /lib/libc.so.6 No symbol table info available. #3 0x080a7339 in i_set_failure_file () No symbol table info available. #4 0x080a6e9f in i_panic () No symbol table info available. #5 0x0807618b in mbox_sync_rewrite () No symbol table info available. #6 0x080715c8 in mbox_sync_apply_index_syncs () No symbol table info available. #7 0x080735c6 in mbox_sync () No symbol table info available. #8 0x08073a38 in mbox_storage_sync_init () No symbol table info available. #9 0x0805f7b2 in imap_sync_init () No symbol table info available. #10 0x0805fc5f in cmd_sync () No symbol table info available. #11 0x080566db in cmd_check () ---Type <return> to continue, or q <return> to quit--- No symbol table info available. #12 0x0805a43e in _client_reset_command () No symbol table info available. #13 0x0805a3d2 in _client_reset_command () No symbol table info available. #14 0x0805a584 in _client_input () No symbol table info available. #15 0x080ac6d4 in io_loop_handler_run () No symbol table info available. #16 0x080abd91 in io_loop_run () No symbol table info available. #17 0x08061330 in main () No symbol table info available. (gdb) quit

1 0

[Dovecot] Moving Maildir files from multiple Dovecot installs
by craig carriere 15 Apr '07

15 Apr '07

I currently have Dovecot running on a SuSE SLES 10 mail server with postfix as the MTA and a number of real linux users. I have postfix delivering to Maildir records. We are going to convert to a virtual user/domain system with PostfixAdmin. I have checked out all of our settings and they appear to work well except for a problem with authenticating against mySQL using MD5-Crypt; plaintext works well however. My question is how to transfer the maildir files from the real users Maildirs to the created virtual users. When creating a mail user PostfixAdmin will create the maildir directory. Once this is created can I simply rsync the complete old directory including the dovecot files to the new mailbox? Sorry for the newbie question. Many Thanks --------------------------------- We won't tell. Get more on shows you hate to love (and love to hate): Yahoo! TV's Guilty Pleasures list.

3 2

[Dovecot] 2 mysql dbs or 2 types of encryption
by Ken Anderson 14 Apr '07

14 Apr '07

Just upgrading to 1.0.0 and I'm trying to switch from PAM (using pam-mysql) to a direct mysql query from dovecot, and I've got both md5crypt and crypt passwords in a password db. http://wiki.dovecot.org/Authentication/PasswordSchemes seems to indicate that I have to pick 1, but that is per auth-worker, right? So, I created 2 auth workers using 2 dovecot-sql config files specifying different default encryption schemes and it seems to work. Is there any problem with this, other than a small bit of overhead for 2 queries if the first doesn't hit? Thanks, Ken Anderson Pacific.Net

2 2

[Dovecot] minor public folder problem still in v1.0.0
by Mark Nienberg 14 Apr '07

14 Apr '07

This minor problem still exists in the current version. http://www.dovecot.org/list/dovecot/2006-December/018251.html It's my own fault, I kept meaning to test one of the latest versions before the 1.0 release and never got around to it. Oh well, just mentioning it so it stays on the list of things to do. 1.0.0 update from RC15 went smoothly here. Thanks, Mark Nienberg

2 2

[Dovecot] Convert mbox to maildir
by Héctor S. Mendoza O 14 Apr '07

14 Apr '07

Hello all Ive installed a new Server with dovecot, started using it and had no problems until I noticed that I couldnt create sub-sub-folders on my imap account, Ive read for the past two days info on how to convert and I know now that instead of using mbox I need to user maildir, the issue is now to convert mbox to maildir, on the various searches I did, I found the convert wiki page (http://wiki.dovecot.org/Plugins/Convert) followed the instructions there and no luck, I always end up with an error: Eopen(/.temp.chihuahua.intranet.acorporativa.com.mx.21409.1089e702ee50f317) failed: Permission denied Error: imap dump-capability process returned 89 If I remove the line convert_mail = mbox:~/mail:INBOX=/var/mail/%u it starts correctly but I see no e-mails and no conversion takes place, since its a production server Ive reverted all changes and had to add a line (mail_location = mbox:~/mail:INBOX=/var/mail/%u) to be able to see my e-mails again. Ive tried stopping dovecot, making the changes and trying dovecot n to see the configuration, but with the same results. Any ideas on what Ive been doing wrong? TIA Héctor [root@chihuahua etc]# dovecot --version 1.0.rc15 [root@chihuahua etc]# dovecot -n # /etc/dovecot.conf login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: mbox:~/mail:INBOX=/var/mail/%u mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: passdb: driver: pam userdb: driver: passwd [root@chihuahua etc]#

2 2

[Dovecot] Wiki language issues
by James Turnbull 14 Apr '07

14 Apr '07

Hi all It's morning and I haven't had coffee but has anyone else noticed that the Wiki seems to have changed languages from English to Russian in sections? http://wiki.dovecot.org/FrontPage It appears a user has made some edits to a couple of the pages and 'translated' them. Regards James Turnbull -- James Turnbull <james(a)lovedthanlost.net> --- Author of Pro Nagios 2.0 (http://www.amazon.com/gp/product/1590596099/) Hardening Linux (http://www.amazon.com/gp/product/1590594444/) --- PGP Key (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0C42DF40)

2 1

[Dovecot] Test
by Brian Morrison 14 Apr '07

14 Apr '07

Hi Georgie Just testing! -- Brian Morrison bdm at fenrir dot org dot uk "Arguing with an engineer is like wrestling with a pig in the mud; after a while you realize you are muddy and the pig is enjoying it." GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html

1 0

[Dovecot] 1.0.rc32 released
by Timo Sirainen 13 Apr '07

13 Apr '07

http://dovecot.org/releases/dovecot-1.0.rc32.tar.gz http://dovecot.org/releases/dovecot-1.0.rc32.tar.gz.sig Pretty late for changes if v1.0 is supposed to come out tomorrow, but I can't really leave these LDAP bugs unfixed. They shouldn't anyway break anything, so here's one more day for you people to find out about any bugs. One thing that I'm a bit concerned about is the addition of #define LDAP_DEPRECATED. I know it fixes crashes with OpenLDAP 2.3 + 64bit systems, but I hope it doesn't break compiling with some old versions or non-OpenLDAP libraries.. - LDAP, auth_bind=no: Don't crash if doing non-plaintext ldap passdb lookup for unknown user. This also broke deliver when userdb static was used. - LDAP, auth_bind=yes and userdb ldap: We didn't wait until bind was finished before sending the userdb request, which could have caused problems. - LDAP: Don't break when compiling with OpenLDAP v2.3 library - Convert plugin: Don't create "maildirfolder" file to Maildir root.

6 6

[Dovecot] upgrading from 1.0 to 1.1
by Daniel 13 Apr '07

13 Apr '07

Hi! I've been using 1.0 cvs always. Now that 1.0 is final, I would like to continue testing the future dovecot, and thought I'd ask if there is anything I must be aware of, if I'm trying to upgrade to 1.1 cvs. Thanks! Daniel

2 1

[Dovecot] dovecot + ima
by aza zel 13 Apr '07

13 Apr '07

hi... ¿dovecot uses imap4? can anybody explain diferences between imap4 and imap. -- Salu2 ;)

2 6

[Dovecot] dovecot forward multipart problem
by Samuel HAMEAU 13 Apr '07

13 Apr '07

Hi, I experience problems everytime i forward a mail (basically, when forwarding an email containing an attachement). I'm using thunderbird (it does the same with outlook clients) with the forward parameter "as attachement" instead of "inline". (Using the inline parameters works fine). When i forward a mail with attachements (eg a jpeg file), the attachements file is displayed in base64 instead, and is impossible to detach/save. I'm using dovecot 1.0.rc22-1 (debian package) on debian etch, x86 SMP box with maildir format on a ext3 partition. I'm using postfix currently 2.3.4-3, i have tried different version of dovecot (from rc16 i think) and postfix (from 2.2.?) and i suspect the deliver to be the origin of the problem. I think it is the same problem than here http://dovecot.org/pipermail/dovecot/2006-July/014786.html , my "From" headers are badly duplicated. Could this be fixed before the dovecot 1.0 release ? Regards, Samuel HAMEAU

3 7

[Dovecot] LDA sieve plugin [patch]
by Uldis Pakuls 13 Apr '07

13 Apr '07

Hi all. I spent some time testing Dovecot's LDA sieve plugin and found problem with "notify" method. In fact it always returns "generic sieve error"... and thus produces bounce messages like this: ----- Your message was automatically rejected by Dovecot Mail Delivery Agent. The following reason was given: Unknown error ---- Deliver logs error: "generic sieve error", but otherwise server reports "notify" method as supported. The problem is: original code was taken from curys sieve and requires "notifyd", as sieve runs 'chrooted' and can't access external binaries like "sendmail". communications with notifyd is done via socket. Thus I wrote pacth, which ads "notify" functionality to dovecot's sieve plugin, at less "notify:mailto" method. cyrus originally contains null, log and zephyr methods. null and log is useless with dovecot, zephur is cyrus specific... RFC docs says there is 3 available methods SMS, XMPP and MAILTO: ------ method can be an SMS URI [SMS-URI <http://ietfreport.isoc.org/idref/draft-ietf-sieve-notify/#ref-SMS-URI>] containing a phone number, or an XMPP [XMPP <http://ietfreport.isoc.org/idref/draft-ietf-sieve-notify/#ref-XMPP>] URI containing an XMPP identifier [XMPP-URI <http://ietfreport.isoc.org/idref/draft-ietf-sieve-notify/#ref-XMPP-URI>] The supported URI values will be site-specific, but support for the [MailTo <http://ietfreport.isoc.org/idref/draft-ietf-sieve-notify/#ref-MailTo>] method is REQUIRED in order to insure interoperability. If a URI schema is specified that the implementation does not support, the notification MUST cause an error condition. Sieve scripts can check the supported methods using the "valid_notify_method" test to be sure that they only use supported ones, to avoid such error conditions. ------ as SMS-URI and XMPP methods are not included in cyrus sieve version, they are not available in dovecots plugin too. [any ideas, sample code how to implement them?] BUT... WARNING All this will not work if you have "mail_chroot" setting enabled in dovecot.conf; chrooted process can't access required external binaries. DOT USE THIS PLUGIN WITH "mail_chroot" SENTIG ENABLED! Actualy it is not sieve plugin problem only - its LDA problem... it can't send bonce messages, do forwards etc. Question to Timo: Do You have ideas how to fix it? My be disable chroting for LDA at all? or do it "cyrus way" - move all calls to external binaries to sepreate, non chrooted process? For delivery agent it is requred to be able send bounces and notifications... do forwards. Uldis

1 0

[Dovecot] convert plugin created maildirfolder file in root maildir directory
by Justin McAleer 12 Apr '07

12 Apr '07

I've noticed that if a user's maildir gets created by deliver or pop/imap without the convert plugin running, the maildir structure is fine (no maildirfolder file). But, if a user gets converted, there is a maildirfolder file in the user's base maildir directory. As far as I can tell, that doesn't cause any problems, but I just wanted to mention it. I've looked at the code for a while but didn't find why it behaves differently.

2 1

[Dovecot] Connection refused with auth-master after upgrading to Dovecot 1.0 rc 28
by Jason Warner 12 Apr '07

12 Apr '07

Fedora pushed out an update to Dovecot 1.0 rc 28 today. After upgrading, mail isn't delivered to local recipients. My log file is full of error messages similar to the following: Apr 2 12:56:32 mail deliver(user(a)domain.com): net_connect(/var/run/dovecot/auth-master) failed: Connection refused I'm including some snippets from my dovecot.conf file that pertain to the auth-master file: protocol lda { # Address to use when sending rejection mails. postmaster_address = postmaster(a)brashers.com mail = maildir:/home/vmail/mail/%n # Hostname to use in various parts of sent mails, eg. in Message-Id. # Default is the system's real hostname. #hostname = # Support for dynamically loadable plugins. mail_plugins is a space separated # list of plugins to load. #mail_plugins = #mail_plugin_dir = /usr/lib/dovecot/lda mail_plugins = cmusieve mail_plugin_dir = /usr/lib/dovecot/lda # Binary to use for sending mails. #sendmail_path = /usr/lib/sendmail # UNIX socket path to master authentication server to find users. auth_socket_path = /var/run/dovecot/auth-master #auth_socket_path = /home/vmail/mail/auth-master } socket listen { master { # Master socket provides access to userdb information. It's typically # used to give Dovecot's local delivery agent access to userdb so it # can find mailbox locations. path = /var/run/dovecot/auth-master #path = /home/vmail/mail/auth-master mode = 0600 # Default user/group is the one who started dovecot-auth (root) user = vmail group = mail } #client { # The client socket is generally safe to export to everyone. Typical use # is to export it to your SMTP server so it can do SMTP AUTH lookups # using it. #path = /var/run/dovecot/auth-client #mode = 0660 #} } I have been beating my head against this trying to change the permissions to 0777, changing the directory of the socket, changing the auth user, and just about anything else I can find in any thread that relates to this error. Any help would be greatly appreciated.

3 21

[Dovecot] Dovecot deliver agent - dovecot.conf permissions
by Daniel L. Miller 12 Apr '07

12 Apr '07

I started playing with deliver, and saw a permission error in the logs for dovecot.conf. Under my distro install, /etc/dovecot.conf was installed owner/group root, with only user rw rights. I added "other" read privileges and deliver is happy - is this necessary? -- Daniel

3 3

[Dovecot] Comment from OpenLDAP developer regarding "deferring operations"
by Ben Beuchler 12 Apr '07

12 Apr '07

I received this response from a member of the OpenLDAP core team when asking about meaning of the deferred operations I was seeing. Is it possible that this is what I'm seeing, Timo? -Ben --------------------------------------------- I'd note that if your client is performing search + bind on the same connection in an asynchronous manner, then the server behavior as per RFC4511 is undefined, since a server is not supposed to be willing to handle operations intermixed with binds until a bind is concluded. That is, any operation can be multiplexed on a single LDAP connection __except__ binds, which must be serialized. A more appropriate client for that type of operations would need to use at least 2 connections, one for searches and one for binds, and the one for binds should take care of either performing synchronous binds, or in any case to wait for response to a bind before performing another. In case of failure (e.g. timeout) while waiting for bind response, the connection should be trashed (see ldap_unbind_ext(3)) and recreated. This is what is done, for example, by slapd-ldap(5). p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati(a)sys-net.it ---------------------------------------

2 3

[Dovecot] Dovecot Assertion on mail server with POP3 and LDAP authentication
by Tim Alberts 12 Apr '07

12 Apr '07

Running two Fedora 6 systems with all the latest updates as of a week ago. One system is the mail server (sendmail, dovecot), the other is the master (open)LDAP server with the mail server running a slave LDAP instance. The problem I'm having is the client pop3 users are frequently being told their passwords aren't correct by their email clients (Outlook, Eudora). They try again, a couple times and eventually it works. I've seen it on my own account and when I test their accounts, occasionally it just doesn't take the password. I've only had this trouble since I implemented the LDAP authentication. Checking through the server maillog, I see the following entry: Apr 4 08:44:38 msi2 dovecot: auth(default): dovecot-auth: ../../../libraries/liblber/io.c:491: ber_get_next: Assertion `ber->ber_buf == ((void *)0)' failed. Apr 4 08:44:38 msi2 dovecot: auth(default): pam(secretuser,192.168.0.200): Child process died Apr 4 08:44:38 msi2 dovecot: auth(default): PAM: Child 14564 died with signal 6 Apr 4 08:44:38 msi2 dovecot: pop3-login: Aborted login: user=<secretuser>, method=PLAIN, rip=192.168.0.200, lip=192.168.0.11 This seems to point out that dovecot is the problem, but again, I didn't have this trouble until I implemented the LDAP authentication. So my question is, anyone know a solution? If not, anyone got a suggestion of where I should look for more clues or support? Or any suggestions at all? Thanks for any help. Following is the dovecot version and configuration [root@msi2 ~]# dovecot --version 1.0.rc15 [root@msi2 ~]# dovecot -n # /etc/dovecot.conf protocols: pop3 listen: login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/pop3-login mail_executable: /usr/libexec/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/pop3 pop3_client_workarounds: outlook-no-nuls oe-ns-eoh auth default: passdb: driver: pam userdb: driver: passwd [root@msi2 ~]#

2 4

[Dovecot] [PATCH] Compile cleaning against OpenLDAP 2.3.x
by Roy Marples 12 Apr '07

12 Apr '07

Hi List Looks like OpenLDAP 2.3 doesn't define LDAP_DEPRECATED [1] anymore which causes a few warnings in Gentoo [2]. Attached is a patch that re-defines this so that dovecot can continue using simple functions like ldap_bind(). Thanks Roy [1] http://www.mail-archive.com/openldap-devel@openldap.org/msg00487.html [2] http://bugs.gentoo.org/show_bug.cgi?id=162437

1 0

[Dovecot] Convert plugin mbox to maildir has no effect
by Sylvain Nemtua 12 Apr '07

12 Apr '07

Convert plugin seems to have no effect with dovecot-1.0.rc26 and my settings. When a user log, maildir creation is successful, but no mbox conversion occur. New incoming mails are dropped into maildir, but I cant access those in Mbox file. I set the following in dovecot.con as describe on wiki. mail_location: maildir:/var/mail/Maildir/%u convert_mail: mbox:/var/mail:INBOX=/var/mail/%u Any thoughts ? Is there a particular settings to use ? Anything wrong with my setup ? Logs : dovecot: [ID 107833 mail.info] pop3-login: Login: user=<sts>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: [ID 107833 mail.info] POP3(sts): Effective uid=45842, gid=10008 dovecot: [ID 107833 mail.info] POP3(sts): maildir: data=/var/mail/Maildir/sts dovecot: [ID 107833 mail.info] POP3(sts): maildir: root=/var/mail/Maildir/sts, index=/var/mail/Maildir/sts, control=, inbox= dovecot: [ID 107833 mail.info] POP3(sts): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 dovecot -n : protocols: pop3 ssl_disable: yes disable_plaintext_auth: no shutdown_clients: no login_dir: /var/run/dovecot/login login_executable: /var/mail/bin/dovecot-1.0.rc26_devsol10/libexec/dovecot/pop3-login login_greeting: ready. mail_extra_groups: mail mail_location: maildir:/var/mail/Maildir/%u mail_debug: yes mail_full_filesystem_access: yes mmap_disable: yes mbox_write_locks: fcntl mail_executable: /var/mail/bin/dovecot-1.0.rc26_devsol10/libexec/dovecot/pop3 mail_plugin_dir: /var/mail/bin/dovecot-1.0.rc26_devsol10/lib/dovecot/pop3 pop3_uidl_format: %08Xu%08Xv pop3_client_workarounds: outlook-no-nuls oe-ns-eoh auth default: verbose: yes passdb: driver: passwd passdb: driver: shadow userdb: driver: passwd socket: type: listen client: master: path: /var/run/dovecot/auth-master mode: 384 plugin: convert_mail: mbox:/var/mail:INBOX=/var/mail/%u convert_skip_broken_mailboxes: no

4 12

[Dovecot] Building Dovecot to link against alternative libldap
by Ben Beuchler 12 Apr '07

12 Apr '07

I'm running Dovecot on an Ubuntu (Edgy) box. I'd like to link dovecot against the latest stable version of the OpenLDAP libraries instead of the system defaults. I can't really replace the existing libraries as other packages rely on them. If this didn't use libtool, I would be able to influence the runtime linker by manipulating -rpath and -L. I can't seem to figure out how to get this to work with Dovecot's libtool-based build. The system libldap_r.so.2 lives in /usr/lib My libldap_r.so.2.3 lives in /usr/local/lib Anyone have any pointers? -Ben

1 0