- dovecot - dovecot.org

[Dovecot] LSUB and namespaces - how to get rid of multible prefixes
by Henrik Ostergaard Madsen 28 Oct '06

28 Oct '06

I'm using dovecot 1.0.rc7 and Squirrelmain 1.4.8 using IMAP on a Debian 3.1 Testing system, and I'm having a problem. When Squirrelmail (or other IMAP clients) submits an LSUB "" "*%", dovecot responds with: Request: A004 LSUB "" "*%" Response: * LSUB () "/" "INBOX.Sent" * LSUB () "/" "INBOX.Trash" * LSUB () "/" "INBOX.Drafts" * LSUB () "/" "mail/Sent" * LSUB () "/" "mail/Trash" * LSUB () "/" "mail/Drafts" * LSUB () "/" ".mail/Sent" * LSUB () "/" ".mail/Trash" * LSUB () "/" ".mail/Drafts" * LSUB () "/" "Sent" * LSUB () "/" "Trash" * LSUB () "/" "Drafts" * LSUB () "/" "INBOXSent" * LSUB () "/" "INBOXTrash" * LSUB () "/" "INBOXDrafts" * LSUB () "/" "./INBOX.Sent" * LSUB () "/" "./INBOX.Trash" * LSUB () "/" "./INBOX.Drafts" * LSUB () "/" "Test" Lsub completed. This is in spite of that only INBOX.Sent, INBOX.Trash, INBOX.Drafts and Test actually exists. I have tried with no explicit namespaces, only one with no prefix or with prefix "/", and with that again and all the above prefixes marked as hidden, but with absolutely no change in the LSUB repons. Due to this, Squirrelmail shows up a whole bunch of folders, but only the correct ones (without prefixes) works.. This has been the same with a few prior versions of dovecot 1.0 , but not with dovecot 0.99. It is the same for Squirrelmail 1.4.7, but I do not think the client matters.. Is there a setting or way to deal with this - or is it a bug? Regards, Henrik

2 2

[Dovecot] "dovecot dead but subsys locked" problem
by Carla Tironi Farinati 27 Oct '06

27 Oct '06

Hi, Following the advice of someone really helpfull here, I just installed Postfix/Dovecot (from rpms). I'm running CentOs 4.4. I followed this guide: http://www.howtoforge.com/linux_postfix_virtual_hosting I've got two problems, a)my server is now listed as RCB, whatever that means, I suppose that's close to spamming. "0: Connection refused. Your IP address is blocked(Spamhaus XBL) - see http://www.spamhaus.org/query/bl?ip=216.32.68.90 " b)[root@server ssl]# /etc/init.d/dovecot restart Stopping Dovecot Imap: [FAILED] Starting Dovecot Imap: [ OK ] [root@server ssl]# /etc/init.d/dovecot status dovecot dead but subsys locked I deleted the sybsys file and tried to restart it. It crashes and show the error agsin. The logs don't show up anything unusual. I also see in the logs: Oct 25 22:50:07 server postfix/virtual[24712]: 48BA5904990: to=<carlatf(a)ithaki.net>, relay=virtual, delay=1, status=deferred (mailbox /var/spool/vmail/ithaki.net/carlatf: cannot open file: Is a directory) Of course it's a directory!. I created it following the guide! I reinstalled Dovecot with the latest sources and nothing. I also turn off SSL from dovecot's config file, nothing. Any ideas dovecot gurus!? Best regards, Carla

4 4

[Dovecot] Clustering (replication and proxying) plans for the future
by Timo Sirainen 27 Oct '06

27 Oct '06

I wrote this mostly so that I won't forget my thoughts. Most likely won't be implemented anytime soon. I haven't thought through all the locking issues. It would require a distributed lock manager in any case. I think there are already several existing ones, so one of them could probably be used for Dovecot. Each mail server would consult a master server for getting namespace configuration and location for shared/public mailboxes. If the data is stored in some central SQL server there could just as well be multiple master servers (or even each server be their own master). Whenever trying to open a shared mailbox that doesn't exist in the current server, the imap process would automatically create a new connection for the destination server and start proxying the data. The proxy would be a somewhat dummy proxy, which just forwards the client's commands to it and doesn't even try to understand the replies from the remote server. So admin will have to be careful to use only servers which have all the capabilities that were announced by the original server. So, then the replication. Each namespace could be configured to be available either by proxying or by replication: namespace public { prefix = example/ location = proxy:imap.example.com } namespace public { prefix = example/ replicated_to = host1.example.com host2.example.com # If multi-master, we'll need to use global locking. If not, the # replicated_to servers contain only slaves. multi_master = yes location = maildir:~/Maildir } The way this would work is that each imap process connects via UNIX socket to a replication process, which gets input from all the imap processes. The replication process keeps track of how much has been sent to each other server and also the acks it has received from them. So if the network dies temporarily it'll start writing the changes to the disk until it reaches some limit, after which a complete resync will be necessary. Dovecot already writes all the changes to a mailbox first to a transaction log file and and only afterwards it updates the actual mailbox. The contents of the new mails aren't stored there though. The replication could work simply by sending the transaction logs' contents to the replicatio process which passes it onto other servers, which finally sync their local mailboxes based on that data. Since Dovecot already is able to sync mailboxes based on the transaction log's contents this should be pretty easy to implement. Of course the new mails' contents also have to be sent. This could be prioritized lower than the transaction traffic, so that each server always has very up-to-date view of the mailbox metadata, but not necessarily the contents of all the mails. If the server finds itself in a situation that it doesn't have some specific mail, it'll send a request to the replication process to fetch it ASAP from another server. The reply will then take the highest priority in the queue. Normally when opening or reading the mailbox there's really no need to do any global locking. The server will show the mailbox's state to be what it has last received from the replication process. Whenever modifying the mailbox a global lock is required. Here's also the problem that if the network is down between two servers, they both think that they got the global lock. If they did any conflicting changes, they'll have to be resolved when both of them again see each others. Dovecot's transactions in general aren't order-dependent so most of the conflicts can be resolved by just having the replication master decide which way the transactions were done and then sending the transactions back to all of the servers in that order. Adding new messages is a problem however. UIDs must be always growing and they must be unique. I think Cyrus solved this by having 64bit global UIDs which really uniquely identify the messages (ie. first 32bits contain server-specific UID), and then the 32bit IMAP UIDs. If there are any conflicts with the IMAP UIDs, they're given new UIDs (which invalidates clients' cache for those messages, but that can't be helped). Resyncing works basically by requesting a list of all the mailboxes, opening each one of them and requesting new transactions from the log files with <UID validity>, <log file sequence>, <log file offset> triplet. If UID validity has changed or log file no longer exists, a full resync needs to be done. Also if the log file contains a lot of changes, it's probably faster to do a full resync. Full resync would then be just sending the whole dovecot.index file. Conflict resolving could also require a full resync if transaction logs were lost. That'd work again by the master receiving everyone's dovecot.index files, deciding what to do with them and sending the modified version back to everyone. Each server has different transaction logs, so the log file sequences can't be directly used between servers. So the replication process probably will have to keep track of every server's log seq/offset. Also when receiving full dovecot.index files they'll have to be updated in some way. Then there's the problem of how to implement the receiving side. If the user already has a process connected to the replication process it could be instructed to update the mailboxes. But since this doesn't happen all that often, there also needs to be some replication-writer process which writes all the received transactions to the mailboxes. Now, when exactly should these replication-writer processes be created then? If all users have the same UNIX user ID, then there could be a spool of processes always running and doing the writing. Although this worries me a bit since the same process is handling different users' data. More secure way, and the only way if users have different UNIX UIDs, is to launch a separate writer process for each user. It probably isn't a great idea to do that immediately when receiving data for a user, but to queue data for the user for a while and then once enough has been received or some timeout has occurred, the writer process would be executed. There probably should be some shared in-memory cache with a memory limit of some megabytes, after which data is written to disk up to a configurable amount. Only after that is full or timeout for the user is reached, the writer process is executed and the data is sent to it. All this replication stuff could also be used to implement a remote mail storage (ie. smarter proxying). The received indexes/transactions could simply be kept in memory, and all the mails that aren't already cached in memory could just be requested from the master whenever needed. I'm not sure if there's much point in doing this over dummy proxying though.

2 2

[Dovecot] dovecot.org not resolving!
by /dev/rob0 27 Oct '06

27 Oct '06

I had to bypass my unknown sender/recipient domain restrictions to receive list mail and send this. It's hard to say without a whois server for .fi, but it appears that the problem might be with the procontrol.fi. domain. Action to fix the problem is needed ASAP! I've emailed Timo offlist; also tried to get him in IRC. -- Offlist mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header

2 1

[Dovecot] POP 23 problem
by Manoj Fernandez 27 Oct '06

27 Oct '06

Hi there I am using Dovecot on Ubuntu 6 LTS forPOP3 services. The user account created at installation works fine and Iam able to log to POP3 services by telnetr. When I created a another user and tried tologin via telnet this is what happens telnet XXX.XXX.XXX.XXX 10 + OK Dovecot ready user XXXX + OK pass XXX +OK logged in Connection tohost lost and session terminates. Pls advise what could be the problem Tks Manoj Sri Lanka

1 0

[Dovecot] SpamAssassin training plugin
by Chad Parry 26 Oct '06

26 Oct '06

I found a plugin for dSPAM on this mailing list (http://thread.gmane.org/gmane.mail.imap.dovecot/4632/focus=4632) that was very useful to me. I just modified the code to work for SpamAssassin instead. The purpose of this plugin is to watch the mail that is in the user's spam folder. If the user manually moves a piece of mail into the spam folder then the mail must have been spam that was incorrectly classified. This plugin causes SpamAssassin to relearn that mail as spam. Anyone else who finds this functionality useful is welcome to follow the link below. . http://chad.parry.org/software/dovecot/ - Chad Parry

3 4

[Dovecot] i386->amd64: tls-certificate cannot be read anymore
by Andreas Barth 26 Oct '06

26 Oct '06

Hi, after rsyncing a tls-certificate from an i386-host to an amd64-one, I got this error message; Oct 25 21:13:23 alius dovecot: imap-login: Can't load private key file /etc/ssl/private/dovecot.pem: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch This happened with dovecot 1.0.rc7-1 (Debian etch) - the version on the i386 was 1.0.rc2-1bpo1. Any hints for me what to do? Cheers, Andi -- http://home.arcor.de/andreas-barth/

2 1

[Dovecot] mail_extra_groups and home directory permissions
by Joe Cooper 26 Oct '06

26 Oct '06

Hi all, I've got a virtual hosting environment, where each user lives in /home/domain/homes/user, and the mailbox is Maildir within that directory. I've been running into a permissions problem, because it seems Dovecot doesn't get the users group membership (which seems odd, but I'm not confident enough of my comprehension of Dovecot to call say it looks like a bug). In short, when Dovecot hits the /home/domain directory which is owned by domain:domain and set to 750 permissions, it gets a permission denied, despite the user having the needed group membership to traverse these directories. So, in an effort to work around this problem, I came upon the mail_extra_groups option, which seems to allow me to drop dovecot into additional groups. If I add the domain group to this list, dovecot is able to traverse to the correct directory and all works exactly as I want it to with the domain directories being set to 750 permissions. Hooray! My only question, since this is not the documented purpose of this option, is: Is it safe to do this? Am I opening up some other kind of security problem by setting this option to include all domain groups? Thanks for any thoughts anyone might have on this...

2 2

[Dovecot] "Real" users AND Virtual users
by Muhamad A. Martoprawiro 25 Oct '06

25 Oct '06

Dear all, How can I use dovecot for both "real" users and virtual users? I could configure dovecot for real users, by using these lines in /etc/dovecot.conf: default_mail_env = maildir:%h/Maildir auth default { passdb pam { } userdb passwd { } } To accept virtual users, I used these lines: default_mail_env = maildir:/usr/local/virtual/%u/ auth default { passdb sql { args = /etc/dovecot-mysql.conf } userdb sql { args = /etc/dovecot-mysql.conf } } But, again, how to accept both kind of users? I use Postfix as mail server, and use LDAP/PAM for real users that have home-directory on the system. My OS is Mandriva 2007, and I use dovecot that is bundled as an RPM package (dovecot 1.9 rc7) in the OS. The content of file /etc/pam.d/dovecot: #%PAM-1.0 auth required pam_stack.so service=system-auth account required pam_stack.so service=system-auth Thanks. Regards, Muhamad

4 6

[Dovecot] P0P3 problems
by Nick 25 Oct '06

25 Oct '06

Hi, I'm setting up Dovecot on a Linux (Ubuntu) server and IMap works but P0P3 doesn't. When I try to get the eMail, it appears to do everything it should (no errors) but nothing gets downloaded. I'm also a little confused with this: If I select either "Password authentication source" Unix passwd or shadow file (using WEBmin or text edit the config file) Dovecot errors: Unknown setting: line 648: and yet, if I take it out it works fine. How does Dovecot get the passwords if no source is included ??? Please advise, Thanks, Nick. . . 1(973)614-8385 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ . . . . . . . . Please visit my Web Hosting/Design Business at: http://MyHost.org -=[ The prices are great - as is the service ]=- . . . . . . . . _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/

9 10

[Dovecot] performance problems with rc10 and solaris 10
by Dominik Saar 25 Oct '06

25 Oct '06

Hi, i have 2 dovecot imap server running on solaris 10 The primary server with dovecot 1.0.alpha4 is running with best performance on Sun Sparc E4k5 with 8x 450MHz The secondary with rc10 has ugly performanceproblems on Sun E450 wth 4x 450MHz. Every new imap process takes permanent 25% cpu usage List the folder and fetch message are both slowy! Both servers are configred with ldap backend preventive i deleted for rc10 the complet index and controlfiles, because the spooldir is a sync from the masterserver with dovecot alpha4. I thought its a little bit slowy because of my 30.000 mails. the indexfiles are created now, but the still ugly slow .... For debugging i compiled rc10 again --with-debug=yes and start dovecot with solaris truss truss tells nothing to explain this behavor logentrys from dovecot has this warnings: --> dovecot: Oct 18 14:51:47 Warning: IMAP(saar): Growing pool 'storage' with: 1024 dovecot: Oct 18 14:51:47 Info: IMAP(saar): dirsize quota limit = 750000kB dovecot: Oct 18 14:51:47 Warning: IMAP(saar): Growing data stack with: 32768 dovecot: Oct 18 14:51:47 Warning: IMAP(saar): Growing data stack with: 65536 dovecot: Oct 18 14:51:48 Warning: IMAP(saar): Growing data stack with: 131072 dovecot: Oct 18 14:51:48 Warning: IMAP(saar): Growing pool 'uidlist record_pool' with: 32768 <-- also i compiled rc10 --with-notify=none, no result to ensure it isn´t the solaris system, i compiled alpha4. Result: good performance Any ideas? Cheers Dominik

3 10

[Dovecot] Unsolved : mbox-sync-rewrite.c : assertion failed
by Jakob Curdes 25 Oct '06

25 Oct '06

Some days ago I wrote about an inaccessible mailbox after an upgrade from 0.99.14 to 1.0rc10. Today I get this problem with another mailbox but it seems to be it is not only related to the upgrade : - user comes back from holiday, does not see his inbox : dovecot: Oct 24 18:51:09 Error: IMAP(abcd): file mbox-sync-rewrite.c: line 405 (mbox_sync_read_and_move): assertion failed: (need_space == (uoff_t)-mails[idx].space) (he accessed it last with the old dc version) Solution : moving account to other server, copy everything over to the old account and it worked. This is what I did and afterwards the mailbox was readable. Now the user goes back to his PC (I made my work from another machine) and opens his mailclient (with the still existing account) and BINGO dovecot crashes again on the mailbox as berfore. Once ist has crashed on it, it than crashes always, even if you make a new account or remove the index. So I suppose it has rather to do with cached information in the client than with the upgrade itself. But nothing the client sends should be able to crash the server ! Hoping for an idea, Jakob Curdes

3 3

[Dovecot] Status of Shared Folders?
by Charles Marcus 24 Oct '06

24 Oct '06

Hi Timo, I'm just curious... is the Wiki up to date regarding the status of Shared Folder support for Dovecot? Specifically, does Dovecot still have a problem with Read-only (for certain users) maildirs using Shared folders defined via namespaces? I'm about ready to start testing a rollout, but wanted to find out what to expect with regard to Shared Folders - we use them extensively right now (Courier-imap), so it is important for us. Having per-user read/unread flags will be a very nice bonus, but I don't see anything about support for those... -- Best regards, Charles Marcus I.T. Director Media Brokers International 678.514.6200 x224 678.514.6299 fax

3 8

[Dovecot] LDAP Dovecot Configuration Problem
by kleiton＠pcs.com.br 24 Oct '06

24 Oct '06

Good Morning I have a problem with my dovecot configuration, somepeople can help-me sending me a example of a dovecot with ldap configuration ? dovecot.conf slapd.conf I'm have - dovecot-1.0-0.beta8.2.fc5 - kernel-smp-2.6.17-1.2157_FC5 - openldap-2.3.19-4 - Fedora Core 5 Today we connect using PAM but we like connect by LDAP because we have some problems. Thanks !

2 1

[Dovecot] converting from courier questions
by Aaron P. Martinez 24 Oct '06

24 Oct '06

I currently run postfix and courier on my mail servers with squirrelmail. The problem with courier is it seems to run so slow. The webmail takes forever to load if you have many mails. I have this set up in virtual domains with all longin and path info in an mysql database. I just joined the list and DID google before asking, hope this isn't a common question. With courier it looks for a "homedir" and then a "maildir".. I tried doing a query as such: user_query = SELECT Homedir and Maildir AS home, VUID AS uid , VGID AS gid FROM users WHERE Email_address = '%u' to no avail, is my sql wrong or can you not cat the homedir and maildir fields together to create the complete path to home? . i got around the homedir problem by setting mail_chroot = /var/spool/postfix/virtuals (is this the general way, only way?) and then in my dovecot-mysql.conf i have user_query = SELECT Maildir AS home, VUID AS uid , VGID AS gid FROM users WHERE Email_address = '%u' This almost worked but as i was watching the logs it was looking for /var/spool/postfix/virtuals/<somedomainname>/Maildir//Maildir In courier the "Maildir" is not implied, it has to be spicified in the database. I have a LOT of users and would love to avoid chaning every line in my database. or add another filed just for dovecot. I would also like the ability to switch back and forth for testing with courier.. Is there anyway that this can be done? Thanks in advance, Aaron

2 1

[Dovecot] LDAP authentication blank password
by Matheus Antonio Oliveira 24 Oct '06

24 Oct '06

People, I have a situation: when use a passwd LDAP module against "microsoft active directory" and one user send a blank password the authentication module returns: "ERR [IN-USE] Internal login failure. Refer to server log for more information."; after this the authentication module never authenticate again "ERR Temporary authentication failure." Thanks in advanced. Trying 0.0.0.0... Connected to 0 (0.0.0.0). Escape character is '^]'. +OK Dovecot ready. user xyz@domain +OK pass <BLANK> -ERR [IN-USE] Internal login failure. Refer to server log for more information. Connection closed by foreign host. Trying 0.0.0.0... Connected to 0 (0.0.0.0). Escape character is '^]'. +OK Dovecot ready. user xyz@domain +OK pass correct-password -ERR Temporary authentication failure. -- Matheus Antonio Oliveira

3 2

[Dovecot] Creating MySQL db
by Gerard Seibert 24 Oct '06

24 Oct '06

I was just wondering if anyone was using or aware of a program to create MySQL Data Bases for use with Dovecot. For Postfix, there is the 'Postfixadmin' application. I have not seen anything similar for Dovecot and was wondering if one existed. My system consists of all virtual users. -- Gerard Never attribute to malice what can adequately be explained by incompetence.

2 1

[Dovecot] problems with authentication
by Paul Aguirre 24 Oct '06

24 Oct '06

Hi, I have some problems I'm using fetchmail to get my mail from the server to a local server, but the problem is that my user name of the mail is "user@virtualdomain" and I can't make a system user with "@" on centos. So, I want to know how can I tell to dovecot the user "user@virtualdomain" is associate to a sistem user "user.virtualdoman". Or if any one knows another solution. Thanks Paul __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

[Dovecot] Dovecot still failing with RC10...
by Brent Spencer 24 Oct '06

24 Oct '06

Are you getting a "chdir (null)" type of message just prior to the Error: Maximum number of mail processes exceeded"? Thanks, Brent Spencer XsiteDesigns _________________________________________________ This email has been scanned for viruses by ClamAV

1 0

[Dovecot] Proxy using passd file
by Clayton Epp 23 Oct '06

23 Oct '06

I'm trying to create a proxy using passwd files. Can I use the existing passwd files created by the system (ie passwd and shadow) or do I have to create new passwd files for the email proxy users? How would the passwd and shadow files for a proxy using passwd files look? I've tried the example on the wiki but I'm not getting anywhere, pop and imap requests are not getting sent to the other server.

3 4

Re: [Dovecot] any idea why the mail downloading is slow?
by LeVA 23 Oct '06

23 Oct '06

2006. October 23. 18:46, Ejay Hire: > What client are you using? I've found Outlook to be a huge > bottleneck compared to Tbird. I'm using KMail 1.9.5. Indeed, with Tbird, the download is faster with KMail. Any idea what could be the problem? I don't think this is a "bug" in KMail; maybe a configuration issue? Daniel > > -ejay > > -----Original Message----- > From: dovecot-bounces(a)dovecot.org > [mailto:dovecot-bounces@dovecot.org] On Behalf Of LeVA > Sent: Saturday, October 21, 2006 4:37 AM > To: dovecot(a)dovecot.org > Subject: [Dovecot] any idea why the mail downloading is slow? > > Hi! > > I'm using rc10, but had this problem with previous releases too. Not > sure if this is a dovecot problem, but I can not think of anything > else. The mail downloading with pop3 is ~very slow, approx. 20 Kbyte > / sec. no matter how many mails I've got in my mailbox, or how big > are the mails. My ISP provides me a dedicated 100mbit line, and > everything else works as fast as expected eg. http, ftp, scp... > The OS is OpenBSD 3.9-stable and the system is not under heavy load > at all. I've tried to turn off TLS but there was no change. > > Is the pop3 protocol this slow by design or there is something wrong > with my setup? > > Thanks! > > Daniel > > -- > LeVA -- LeVA

1 0

Re: [Dovecot] 1.0.rc10 status report
by "Αποστόλης Παπαγιαννάκη ς (Apostolis Papagiannakis)" 23 Oct '06

23 Oct '06

>> Axel Thimm wrote: >> >>> On Mon, Oct 23, 2006 at 11:04:18AM +0300, "????????? >>> ????????????? (Apostolis Papagiannakis)" wrote: >>> >>> >>>> I've had similar "User unknowns" with nscd in the past. I was using >>>> dovecot ->getpwent -> nscd -> nss_ldap -> LDAP. >>>> >>>> >>> Are you using ldapi? >>> >>> >> Oops, I think I sent my previous post with unreadable HTML formating. I >> hope this one is OK. >> >> In /etc/ldap.conf (nss_ldap conf file) I use two ldap servers as >> "ldaps" URIs. >> >> # /etc/ldap.conf >> uri ldaps://ldap1.auth.gr/ ldaps://ldap2.auth.gr/ >> >> apap >> >> > > You need to make sure that the user nscd is running as has proper > permissions to the required resources (r/w on ldapi sockets, read on > ldaps' ca certs and the like). Turn on the debug level in ldap.conf > (nss_ldap's, not openssl's) and sudo to the nscd user/group to test > the access. > > Also nscd doesn't use rootbinddn, it uses binddn. > I think file permissions have always been ok because nscd and nss_ldap usually work ok. The problem appears only when the ldap connection breaks (e.g. remote ldap server restart). We don't use rootbinddn at all. Anyway I just checked the latest version of nss_ldap and now I see interesting new relevant options are available (e.g. nss_connect_policy persist/oneshot). I will give it a try and respond back in a few days. Definately nss_ldap's bad behaviour is not really a dovecot problem. Dovecot has been rock solid here serving 30000 users (4000 different active users every day) on a single server. apap

1 0

Re: [Dovecot] 1.0.rc10 status report
by "Αποστόλης Παπαγιαννάκη ς (Apostolis Papagiannakis)" 23 Oct '06

23 Oct '06

dovecot-request(a)dovecot.org wrote: > Date: Fri, 20 Oct 2006 13:26:03 +0100 (BST) > From: David Lee <t.d.lee(a)durham.ac.uk> > Subject: [Dovecot] 1.0.rc10 status report > > > 1. "User unknown": We use NIS for our passwd information. On the earlier > rc8 test we had had several occurences of "User unknown" (from "deliver") > giving "dsn=5..." for perfectly valid users. So for this rc10 test I > applied a local patch so these were reduced to "EX_TEMPFAIL" (dsn=4...). > (This was triggered, as epected, a few times and subsequent delivery > attemtps succeeded.) I strongly suspect that this is some sort of issue > with FC5, probably "nscd" and nothing to do with dovecot. Hints would be > nice, but from the dovecot perspective you may probably ignore this item. > > I've had similar "User unknowns" with nscd in the past. I was using dovecot ->getpwent -> nscd -> nss_ldap -> LDAP. I found out that whenever the ldap server got restarted, nscd did not restart properly and immediately its permanent ldap connection, and was giving 'user unknown' replies at least for a few minutes. Restarting nscd would fix the problem immediately. Running without nscd would also fix the problem. There was no problem with pam_ldap authentication. As a result, the system got ignorant of its uncached users for a few moments. My workaround was a crontab that kept /etc/passwd up-to-date as well as an entry in the /etc/resolv.conf 'passwd: ldap files' (cat /etc/passwd ; getent passwd ) |sort -u >/etc/passwd.tmp && mv /etc/passwd.tmp /etc/passwd > So should I have the indexes on the fileserver (one instance), or should they > be on each cluster machine's private storage (possibly several instances; > one per cluster machine)? The suggestion is that if you need to have mailboxes over NFS, use local disk for indexes. If you read the complete list archive you will find too many people that have had troubles with indexes over NFS. Local indexes have a performance penalty, only when you have access from different imap servers (especially concurrent) . apap

3 4

[Dovecot] mysql-5.0.26 stored procedure authorization, take 2
by Chaos Engine 22 Oct '06

22 Oct '06

Last time I came up with a problem with concernin MySQL authorization with stored procedures. Timo helped me get going by with modified client_flags (MULTISTATEMENT keyword). Now all it happened again but from another way. My stored proce for MySQL is causing fillowing error: "Oct 21 12:39:22 haos dovecot: auth-worker(default): sql(user,192.168.X.X): Password query fai led: Commands out of sync; you can't run this command now" Looks like it is partly mysql-5.0.26 thing because of this: http://dev.mysql.com/doc/refman/5.0/en/commands-out-of-sync.html On the other hand with my previous mysql installation (mysql-5.0.24-r1) this error is gone (I checked by downgrading). My dovecot-sql.conf: driver = mysql connect = host=/var/run/mysqld/mysqld.sock dbname=mailbase user=mailuser password=******** client_flags=65536 #655536 is equivalent of CLIENT_MULTI_STATEMENTS flag #yes, I still insist on using stored proc for authorization. This gives me few usefull features I like. password_query = call Authenticat('%u', '%n', '%d') With this config on mysq-5.0.26 I get "...Commands out of sync; you can't run this command now..." but not on mysql-5.0.24-r1. Personally I think mysql guys changed something; I can't tell what and why (changelog review?) Maybe you guys know what it was? -- Chaos greets U

2 1

[Dovecot] Using saslauthd with dovecot
by Gerard Seibert 21 Oct '06

21 Oct '06

FreeBSD 6.1 STABLE Postfix-2.4-20061006 Dovecot-1.0.rc7 I am using 'saslauthd -a sasldb -c' for authentication with Postfix. Since Dovecot and Postfix are using the same users and passwords, I was wondering if it would be possible to use this mechanism with Dovecot also. -- Gerard "There is nothing wrong with making love with the light on. Just make sure the car door is closed." George Burns

2 3

[Dovecot] Virtual Users
by Gerard Seibert 20 Oct '06

20 Oct '06

Dovecot 1.0.rc7 Postfix 2.4-20061006 FreeBSD 6.1 STABLE I have dovecot up and running with postfix. I now want to switch over to a system using purely virtual users. I have gotten postfix configured to deliver the mail to virtual mailboxes correctly. The problem I am having is with dovecot. After configuring the dovecot.conf file, dovecot will POP mail from the virtual mailboxes. However, that is only for users who are in the /etc/password file. I will have a large number of users who are truly virtual and therefore not be in that file. I know I am dumb, but I do not know how to set up either a MySQL data base, or just a plain flat file with the required information. I tried Googling, but I cannot find the exact syntax to use. Perhaps someone could point me in the right direction or give me a brief example of how to go about this. Thanks! -- Gerard "It is not the OS's job to stop you from shooting your foot. If you so choose to do so, then it is OS's job to deliver Mr. Bullet to Mr Foot in the most efficient way it knows."

2 1

[Dovecot] md5 password storage
by Andrey Bibiano Jardim 20 Oct '06

20 Oct '06

Hi List. I've got a dovecot running with mysql. All my users data are there. But I intend to use MD5 instead of clear passwords at MySQL. Someone can help-me? []s; Andrey Here's my dovecot-mysql.conf: # Dovecot queries db_host = localhost db_unix_socket = /var/lib/mysql/mysql.sock db_port = 3306 db = mail db_user = my_conn_user db_passwd = my_conn_passwd # # Pehapes i need to change this, but I tryied changing it do md5 with no success. # default_pass_scheme = PLAIN # # This I changed for own reasons, but works. # password_query = SELECT clear FROM postfix_users WHERE user=substring_index('%u', "@", 1) user_query = SELECT concat('/var/spool/mail/', maildir) AS mail, uid, gid FROM postfix_users WHERE user=substring_index('%u', "@", 1)

2 1

[Dovecot] 1.0.rc10 in inetd mode
by Phil Oleson 20 Oct '06

20 Oct '06

Hey.. I'm finding that I can force dovecot (setup in inetd mode) into a wedged state by spamming it with carrage returns. As I've not had enough time to familiarize myself with the code.. I thought I'd ping the list before 1.0 is christened. -Phil.

2 3

[Dovecot] Problem with indexes
by crs 20 Oct '06

20 Oct '06

Hello. Dovecot is really good software but I have one big problem with indexes. I have server with a lot of mailboxes - filesystem has quota enabled and I can't resign it from different reasons. When mailbox achieve quota size and user wants to pick mails via pop3, error "-ERR Mailbox is in inconsistent state, please relogin." is given. I know it's because dovecot can't write indexes. Is it possible to force dovecot to write indexes with definite owner/group f.e dovecot/dovecot and not owner/group of mailbox? I can set quotas for user dovecot to unlimited and problem would disappear. Thanks in advance for any answers. Best regards - Chris. ---------------------------------------------------------------------- PS. >>> http://link.interia.pl/f19a6

3 2

[Dovecot] POP State
by LDB 20 Oct '06

20 Oct '06

I upgraded Dovecot and it was smooth except some of my users using POP3 and leaving their mail on the server, are getting all their mail again. Is there a way to prevent this from happening in the future? /var/run/dovecot was kept during the upgrade ... Thanks, LDB

2 2

[Dovecot] Subscription file
by Steven F Siirila 19 Oct '06

19 Oct '06

Background: We are a UW-IMAP shop, using mbox format. (!) We are in the process of upgrading to Dovecot, hopefully to 1.0 proper. :) One of the modifications we have been using in test versions of Dovecot involve the move of the user subscription file from: IMAP-root/.subscriptions to: $HOME/.mailboxlist Rather than having to make changes to Dovecot source code each time a new release comes out, it would seem to make sense to have a way to configure this from dovecot.conf. Something like: # Default (%i denotes IMAP root): #imap_subscription_file = %i/.subscriptions # UW-imap-style (%h denotes home directory): #imap_subscription_file = %h/.mailboxlist While it makes sense to me to have the subscription file where it is in Dovecot by default, it would be a substantial undertaking to determine where to move the .mailboxlist to in our environment for each user, since there is no easy way to determine what a user's IMAP root directory is set to in their client. Thoughts? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

3 3

Re: [Dovecot] open-folder limit
by Bill Boebel 19 Oct '06

19 Oct '06

On Thu, October 19, 2006 11:57 am, "T. Horsnell" <tsh(a)mrc-lmb.cam.ac.uk> said: > Is there a way to limit the number of folders a user can > have open simultaneously? I am fairly certain that there is no way to do this. Bill

1 0

[Dovecot] open-folder limit
by T. Horsnell 19 Oct '06

19 Oct '06

Is there a way to limit the number of folders a user can have open simultaneously? I seem to remember a config option which would only permit one imap process per user, and would share this between his folders, but I cant find anything relevant in the docs now. Am I talking nonsense here? I'm new to Dovecot. Cheers, Terry.

1 0

[Dovecot] open-folder limit
by T. Horsnell 19 Oct '06

19 Oct '06

Is there a way to limit the number of folders a user can have open simultaneously? I seem to remember a config option which would only permit one imap process per user, and would share this between his folders, but I cant find anything relevant in the docs now. Am I talking nonsense here? I'm new to Dovecot. Cheers, Terry.

1 0

[Dovecot] Urgent - Inconsistent Inboxes
by Jakob Curdes 19 Oct '06

19 Oct '06

Hi, An urgent problem that I have : runninng dc 0.99.14 w mbox on local ext3 , nothing special, no nfs, nothing. For this machine we have a backup server rsyncing everything over. Now the main server went down and we started DC on the backup machine some day ago. Everything went well, besides one problem : people complained about missing mails that they had seen beforehand. When looking in the inbox, they were all there. After recreating the imap account (outlook express) or deleting the cache file (thunderbird .msf files) everything was well. But you can't really recreate all accounts after switching to the backup machine every time.... today we went back to the main server and in advance I deleted all .imap.index files hoping that they might have been the eventual cause of the problem, but no, same thing happens again. It now seems to me that this is a pure client issue, but nevertheless two questions : a) who knows a way to tell the client (OE or TB in this case) to disregard all local information and get everything fresh from the server ? b) Can this behavior be influenced from the server side? I know I'm behind with 0.99.14 but up to now there was no problem and "never change a running system". If upgrading could help, I would do it immediately. Any hints welcome, especially fast ones as tomorrow morning I have to get the clients running. Yours, Jakob Curdes

2 5

[Dovecot] Assertion failure with Dovecot 1.0rc10
by David Schweikert 19 Oct '06

19 Oct '06

Hi, I am seeing the following (with Dovecot 1.0 rc10): Oct 18 07:35:58 dovecot: IMAP(user): UIDs broken with partial sync in mbox file /var/mail/user Oct 18 07:35:58 dovecot: IMAP(user): mbox sync: UID inserted in the middle of mailbox /var/mail/user (15314 > 9604, seq=5, idx_msgs=224) Oct 18 07:35:59 dovecot: IMAP(user): file mbox-sync-rewrite.c: line 405 (mbox_sync_read_and_move): assertion failed: (need_space == (uoff_t)-mails[idx].space) Oct 18 07:37:42 dovecot: IMAP(user): mbox sync: UID inserted in the middle of mailbox /var/mail/user (15314 > 9604, seq=5, idx_msgs=224) Any idea of what this could be? The user is reporting that he is seeing multiple times the same mails and that the new flag is not being unset after he reads a mail. Cheers David -- David Schweikert | phone: +41 44 632 7019 System manager ISG.EE | walk: ETH Zentrum, ETL F24.1 ETH Zurich, Switzerland | web: http://people.ee.ethz.ch/dws

1 1

[Dovecot] LDAP Username Change
by Todd Johnson 19 Oct '06

19 Oct '06

I have a virtual setup using LDAP where the a user has an email address at 2 domain names. The want the mail kept separate but want to use the same password. I use the mail attribute and insert both email addresses. This works perfectly with deliver but opens the wrong Inbox when I IMAP. Is there a way to disable this in the conf file? host dovecot: auth(default): auth(jeff@idom.net,::ffff:127.0.0.1): username changed jeff(a)idom.net -> jeff(a)jdom.net

1 1

[Dovecot] Logging authentication failures?
by dri 19 Oct '06

19 Oct '06

I use a script that watches log files looking for failed ssh login attempts and adds firewall rules when there are enough login failures within a certain amount of time. I would like to apply this to Dovecot to automatically firewall attackers trying to brute-force an IMAP account. Is there a way to make Dovecot log authentication failures (I'm running 1.0.rc10)? In other words, can I configure Dovecot to put something in the log the instant "NO Authentication failed" is sent to the IMAP user? With "auth_verbose = yes" I can see individual authentication mechanisms fail, but I have multiple passdb sections so a failure in one mechanism doesn't mean a complete login failure. Thus, configuring the script to watch for individual mechanism failures may result in the firewalling of legitimate users. Thanks for any info!

1 0

[Dovecot] Proxy not working using passwd-file
by Clayton Epp 18 Oct '06

18 Oct '06

I've been having problems setting up my proxy using dovecot. I'm using the passwd-file for authentication as well as the regular unix passwd file. Can someone provide me with a complete example of how this should be done, I'm finding that the documentation on http://wiki.dovecot.org/AuthSpecials is sparse on the details. Please do not assume anything as I am new to both Dovecot as well as Linux (FC5).

1 0

[Dovecot] Dovecot-compatible web-based sieve configurator
by Koen Vermeer 18 Oct '06

18 Oct '06

Hi, I've set up dovecot with postfix and I'm using the dovecot LDA. It seems that sieve works, but I'm not that good at writing sieve scripts and I'd like to install something more user-friendly anyway. So: Does anyone know of a web-based sieve configurator that works with the dovecot implementation? I haven't been able to find one yet... Koen

3 4

[Dovecot] trash plugin causes crashes in quota plugin?
by Mike Horwath 18 Oct '06

18 Oct '06

I just lost my scrollback - so I'll have to recreate it the issue. Using both 1.0r7 and 1.0r10 on FreeBSD 6.1-STABLE. For the: mail_plugins = quota imap_quota that works fine (using maildir for quota plugin) But... mail_plugins = quota imap_quota trash will cause the quota plugin to die at line 156 of quota.c: root->v.deinit(root); I haven't dug through the code enough to find the actual area for this piece of code to add some debugging. Once I can generate a new traceback, I'll drop another email. -- Mike Horwath drechsau(a)iphouse.net ipHouse - Welcome home!

2 1

[Dovecot] passdb checkpassword and lastauth
by Max A 18 Oct '06

18 Oct '06

Hi. If checkpassword interface is used for working with vpopmail, function vpopmail "Record time and ip of last auth attempt" (--enable-auth-logging option for configure) won't work - the file "lastauth" is created in Maildir, but does not contain ip-address. If I had correctly understood, dovecot woldn't have set a enviroment variable TCPREMOTEIP for vchkpw. If changes are made in auth/passdb-checkpassword.c (a patch in attachment), everything will work. Probably, the patch is incorrect and does not solve all problems, however the request is to pay attention to existence of the problem. Also it is possible, that a similar problem exists with other variables TCP UCSPI protocol (http://cr.yp.to/proto/ucspi-tcp.txt) P.S. If use the interface vpopmail instead of checkpassword, the file "lastauth" will not be created at all, that is a little bit inconvenient. ********************************** System: dovecot-1.0.rc10 vpopmail-5.4.17 ASP Linux Server II (RHEL3 clone) kernel 2.4.21-47.EL.aspsmp CPU architecture: x86 (IBM xSeries 336) Filesystem: ext3 ********************************** dovecot configuration: base_dir = /var/run/dovecot/ protocols = imap pop3 disable_plaintext_auth = no ssl_disable = yes login_greeting = Ready. first_valid_uid = 89 last_valid_uid = 89 first_valid_gid = 89 last_valid_gid = 89 protocol imap { listen = 81.26.136.8:144 mail_executable = /usr/local/libexec/dovecot/imap mail_plugins = quota imap_quota mail_plugin_dir = /usr/local/lib/dovecot/imap imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep } protocol pop3 { listen = 81.26.136.8:112 login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_uidl_format = %f mail_plugins = quota mail_plugin_dir = /usr/local/lib/dovecot/pop3 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } auth default { mechanisms = plain login passdb checkpassword { args = /var/qmail/vpopmail/bin/vchkpw } userdb prefetch { } user = root } dict { } plugin { quota = maildir } *************************************** dovecot configure options: ./configure \ --disable-ipv6 \ --prefix=/usr/local \ --sysconfdir=/etc/dovecot \ --without-passwd \ --without-passwd-file \ --without-shadow \ --without-pam \ --without-bsdauth \ --with-checkpassword \ --with-vpopmail \ --without-static-userdb \ --with-prefetch-userdb \ --without-sql \ --without-pgsql \ --without-mysql \ --without-sqlite \ --with-ssl=openssl \ --with-pop3d \ --without-deliver \ --with-storages=maildir \ --with-docs ***************************************** vpopmail configure options: ./configure \ --enable-auth-module=cdb \ --enable-logging=p \ --enable-md5-passwords \ --enable-make-seekable \ --enable-file-sync \ --enable-ip-alias-domains \ --enable-clear-passwd \ --disable-roaming-users \ --disable-learn-passwords \ --disable-passwd \ --enable-auth-logging diff -ur dovecot-1.0.rc10.orig/src/auth/passdb-checkpassword.c dovecot-1.0.rc10/src/auth/passdb-checkpassword.c --- dovecot-1.0.rc10.orig/src/auth/passdb-checkpassword.c 2006-08-22 06:37:56.000000000 +0400 +++ dovecot-1.0.rc10/src/auth/passdb-checkpassword.c 2006-10-17 16:47:09.000000000 +0400 @@ -226,6 +226,10 @@ env_put(t_strconcat("REMOTE_IP=", net_ip2addr(&request->remote_ip), NULL)); + env_put(t_strconcat("TCPREMOTEIP=", + net_ip2addr(&request->remote_ip), + NULL)); + } if (request->master_user != NULL) { env_put(t_strconcat("MASTER_USER=",

1 0

[Dovecot] 1.0.rc10 released
by Timo Sirainen 18 Oct '06

18 Oct '06

http://dovecot.org/releases/dovecot-1.0.rc10.tar.gz http://dovecot.org/releases/dovecot-1.0.rc10.tar.gz.sig I've finally read all the mails in the mailing list and in my INBOX. If I haven't replied to some of your mail, please resend it. Remember that since 1.0.rc9 release dovecot.index.cache files will get rebuilt in 64bit systems, and it's probably better to delete them manually so you don't get errors in log files. There are only a couple of issues left in my v1.0-TODO list: - Master process appears to be leaking log fds with kqueue. Could someone again give me access to a system where this happens? - Login process problems. How well does it work now? Hopefully well enough that v1.0 could be released. - LDAP authentication is leaking memory? Can anyone confirm this? Even better, can someone figure out what exactly is leaking? :) Not a v1.0 blocker though. I think v1.0 will be released once no-one has reported any major problems for a Dovecot release in 2-4 weeks. I think login process handling is the only potentially major problem left. There are a few patches from people that I haven't forgotten, but I've decided not to put them into v1.0 anymore: - Filesystem quota group. I don't think it's that important feature, and it might break something. - HFS+ hardlink avoiding - Managesieve - vmailmgr support And finally the changes in this release: * When matching allowed_nets IPs, convert IPv6-mapped-IPv4 addresses to actual IPv4 addresses first. + IMAP: Try to avoid sending duplicate/useless message flag updates + Added support for non-plaintext authentication for vpopmail if it returns plaintext passwords. Based on patch by Remi Gacogne. + Added %D modified to return "sub.domain.org" as "sub,dc=domain,dc=org" (for LDAP queries). Patch by Andrey Panin. - rc9 broke cache files in 64bit systems - deliver works now with mail_chroot - auth cache didn't work properly with multiple passdbs - Fixes to handling CRLF linefeeds in mboxes.

13 22

[Dovecot] autoconf check for ldap not linking with -lber
by Jorgen Lundman 18 Oct '06

18 Oct '06

Maybe not a big deal, but generally you (used to?) link against both: configure:31276: checking for ldap_init in -lldap configure:31311: gcc -o conftest -std=gnu99 -I/usr/local/include -Wall -W -Wmiss ing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat =2 -Wbad-function-cast -I/usr/sfw/include -L/usr/local/lib conftest.c -lldap -lsocket -lnsl -lrt -lsendfile >&5 Undefined first referenced symbol in file ber_sockbuf_io_readahead /usr/local/lib/libldap.so ber_sockbuf_alloc /usr/local/lib/libldap.so ber_sockbuf_io_fd /usr/local/lib/libldap.so But could be special situation as my LDAP version is fixed, due to production environment using it. It also failed when OpenLDAP was linked against OpenSSL, since it does not try with the SSL libraries. Lund -- Jorgen Lundman | <lundman(a)lundman.net> Unix Administrator | +81 (0)3 -5456-2687 ext 1017 (work) Shibuya-ku, Tokyo | +81 (0)90-5578-8500 (cell) Japan | +81 (0)3 -3375-1767 (home)

2 3

[Dovecot] defunct processes
by LDB 18 Oct '06

18 Oct '06

I am using SuSE 10.1 and dovecot version 0.99.14-5. dovecot 6267 660 0 14:45 ? 00:00:00 imap-login dovecot 6285 660 0 14:45 ? 00:00:00 pop3-login dovecot 6371 660 0 14:45 ? 00:00:00 imap-login postfix 6454 12811 0 14:46 ? 00:00:00 smtp -t unix -u dovecot 6511 660 0 14:46 ? 00:00:00 pop3-login postfix 6550 12811 0 14:46 ? 00:00:00 showq -t unix -u dovecot 6576 660 0 14:46 ? 00:00:00 imap-login dovecot 6579 660 0 14:46 ? 00:00:00 pop3-login root 6580 666 1 14:46 ? 00:00:00 [dovecot-auth] <defunct> ldb 6581 660 0 14:46 ? 00:00:00 pop3 After dovecot has been up and running for a while (1 month or so), it tends to get hung up and unresponsive. I do a "ps" and I have a whole host of defunct processes. To restore service, I have to manually kill all dovecot processes and start it up again. Is this a symptom of my version or my configuration? Thanks, LDB

3 8

[Dovecot] Strange POP3 problem...
by Mike Cisar 17 Oct '06

17 Oct '06

I've been having this problem for a long time now. It started when I first began to use Dovecot (0.9x) and seems to have been occurring more and more frequently as we've progressed through the betas and now into RC7. I have been kind of chaulking it up to a "user issue" since the problem only seems to occur for one user (who has one machine at his office, and one at his weekend cabin... problem occurs with equal frequency on both of his machines). Lately it's been occurring about once every couple of days, but still nothing that I have been able to reproduce with any particular email or frequency. However as luck would have it the problem occurred today while I was onsite at the client's office so I was at least able to see that end of things at the same time. Essentially the user will have a number of messages in their mailbox (today for example 13) the download of mail will go just fine until one particular message and then the download will just stop, eventually returning an error message. Trying to receive mail again will retrieve messages 1-9 again and fail in the same spot. If you log in via IMAP and delete the following message (ie. the message after the one that was last received) you can then POP for mail again and the remaining messages in the mailbox will download. In the log all we see is the following (over and over)... Aug 28 16:14:51 mail dovecot: pop3-login: Login: user=<xxxxx>, method=PLAIN, rip=vvv.www.xxx.yyy, lip=vvv.www.xxx.yyy Aug 28 16:15:32 mail dovecot: POP3(xxxxx): Disconnected top=0/0, retr=9/170375, del=0/13, size=1349520 >From the client side I get the following in Outlook Express... "Your server has unexpectedly terminated the connection..." "...POP3, Server Response: '+OK 795 octets'..." Interestingly 795 bytes is the size of the "bad" email (the one that won't download). Any thoughts? Cheers, >>>>> Mike <<<<<

8 9

[Dovecot] Index files
by Steven F Siirila 17 Oct '06

17 Oct '06

I am doing some testing with Dovecot and wondered if it was normal for the deliver program to create index files for an Inbox (the test Inbox is over 7MB), but to not update the index files after the initial creation, even though messages continue to come into the mailbox. Note that during this testing, no IMAP or POP accesses are being made. Would it matter if a command-line program such as mutt were reading/updating the Inbox in question? Shouldn't Dovecot delivery be continually updating the index files as new messages arrive in the Inbox? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 4

[Dovecot] dovecot tpop3d UIDL mbox
by antencek＠volja.net 17 Oct '06

17 Oct '06

Hello All! I am new to this list so I hope I'm not in the wrong list with my question. First, I have to say that dovecot is (in my opinion) one of the best POP3/IMAP servers arround. I especialy like its' simplicity (configuration) and powerfullness (speed, auth mechs). In my production environment I would like to cange from tpop3d to dovecot, but I have only one little problem :). This is my situation: pop3 server: tpop3d mail fromat: mbox (/var/mail/username) UIDL: tpop3d UIDL format Since there are users who let mail on server, I need to keep UIDL. The problem is that the patch which gives dovecot the capability to replay with tpop3d UIDL format apparently works only on maildir mailboxes. Is there any resonable solution to my problem? TIA. Regards, Antencek

3 2

[Dovecot] allow_nets and mysql question
by Alex Samorukov 17 Oct '06

17 Oct '06

Hi. I want to use allow_nets in my configuration, but i have some troubles which i cant resolve. To use allow_nets i creates `allow_nets` text field in my mysql users table. My query is: from: dovecot/sql.conf: password_query = SELECT crypt as password, maildir as userdb_mail, 6 AS userdb_uid,6 AS userdb_gid, allow_nets FROM users WHERE id = '%u' from dovecot.conf: auth default { mechanisms = plain passdb sql { args = /usr/local/etc/dovecot/sql.conf } userdb prefetch { } user = root } To check this i added address 193.193.193.100/32 (which is not my address) and tried to connect from localhost (using telnet). And it allow me to connect! May be i did something wrong, but i cant explain this, so i`m asking for your help. Here is debug information: Dovecot v1.0.rc10 starting up auth-worker(default): mysql: Connected to localhost (maildb) auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=10.0.0.1 rip=10.0.0.1 resp=<hidden> auth-worker(default): sql(testuser(a)example.com,10.0.0.1): query: SELECT allow_nets,crypt as password, maildir as userdb_mail, 1005 AS userdb_uid,6 AS userdb_gid FROM users WHERE id = 'testuser(a)example.com' auth-worker(default): auth(testuser(a)example.com,10.0.0.1): allow_nets: Matching for network 193.193.193.100/32 auth-worker(default): passdb(testuser(a)example.com,10.0.0.1): allow_nets check failed: IP not in allowed networks auth(default): client out: OK 1 user=testuser(a)example.com auth(default): master in: REQUEST 1 65787 1 auth(default): master out: USER 1 testuser(a)example.com mail=/usr/local/vdomains/example.com/users/testuser/Maildir/ uid=1005 gid=6 pop3-login: Login: user=<testuser(a)example.com>, method=PLAIN, rip=10.0.0.1, lip=10.0.0.1, secured POP3(testuser(a)example.com): Effective uid=1005, gid=6 POP3(testuser(a)example.com): maildir: data=/usr/local/vdomains/example.com/users/testuser/Maildir/ POP3(testuser(a)example.com): maildir: root=/usr/local/vdomains/example.com/users/testuser/Maildir, index=/usr/local/vdomains/example.com/users/testuser/Maildir, control=, inbox= POP3(testuser(a)example.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/7, size=1362269

2 3

[Dovecot] auth problem
by Lampa 17 Oct '06

17 Oct '06

hello, i new to list but i need little help. I need only imap (later pop3),i have own checkpassword and own user/password database. i'm using last version v1.0.rc10 But i have problem with auth, user is authorized but cannot login, here is log: dovecot: Oct 17 15:00:36 Info: Dovecot v1.0.rc10 starting up dovecot: Oct 17 15:00:40 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip=10.0.0.1 rip=10.0.0.13 resp=AG1kdgBza29sYTY2Ng== dovecot: Oct 17 15:00:40 Info: auth(default): checkpassword(lampa,10.0.0.13): Executed: /usr/local/checklocalpwd/checkpassword.pl /usr/local/dovecot/bin/dovecot/checkpassword-reply dovecot: Oct 17 15:00:40 Info: auth(default): checkpassword(lampa,10.0.0.13): Received input: userdb_user=lampa userdb_home=/home/_mail/lampa userdb_uid=65534 userdb_gid=65534 dovecot: Oct 17 15:00:40 Info: auth(default): checkpassword(lampa,10.0.0.13): Received no input dovecot: Oct 17 15:00:40 Info: auth(default): checkpassword(lampa,10.0.0.13): exit_status=0 dovecot: Oct 17 15:00:40 Info: auth(default): client out: OK 1 user=lampa dovecot: Oct 17 15:00:40 Info: auth(default): master in: REQUEST 1 17950 1 dovecot: Oct 17 15:00:40 Info: auth(default): master out: USER 1 lampa user=lampa home=/home/_mail/lampa uid=65534 gid=65534 dovecot: Oct 17 15:00:40 Info: imap-login: Internal login failure: user=<lampa>, method=PLAIN, rip=10.0.0.13, lip=10.0.0.1 dovecot: Oct 17 15:00:40 Error: Logins with UID 65534 (user lampa) not permitted (see first_valid_uid in config file) i think that problem is that uid and gid is set to user nobody instead 508 and 502 (user lampa , end of message is passwd file) uid 65534 is user nobody (used in auth section in conf, if i set it to root everyhting is ok) this is my config: base_dir = /var/run/dovecot/ protocols = imap listen = 10.0.0.1 disable_plaintext_auth = no log_path = /var/log/dovecot/dovecot.log info_log_path = /var/log/dovecot/dovecot.info log_timestamp = "%b %d %H:%M:%S " ssl_disable = yes login_dir = /var/run/dovecot/login login_chroot = yes login_user = dovecot mail_debug = yes mail_log_prefix = "%Us(%u): " verbose_proctitle = yes first_valid_uid = 508 last_valid_uid = 508 first_valid_gid = 502 last_valid_gid = 502 protocol imap { login_executable = /usr/local/dovecot/bin/imap-login mail_executable = /usr/local/dovecot/bin/imap } auth_executable = /usr/local/dovecot/bin/dovecot-auth auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb checkpassword { args = /usr/local/checklocalpwd/checkpassword.pl } userdb prefetch { } user = nobody } in file i must comment out chdir $home (program was unable to chdir) i think due to chroot /usr/local/checklocalpwd/checkpassword.pl: #!/usr/bin/perl use POSIX; use strict qw(vars); my $PASSWD_FILE = "/usr/local/qmail/control/passwd2"; %ENV=(); my($len, $buf); open (USER, "<&=3") || _exit(2); $len = read(USER, $buf, 512); close USER; _exit(2) if $len < 4; my($user, $pass) = split /\x00/, $buf; $user = lc $user; $buf = "\x00" x $len; my $cwd = getcwd; my ($passwd, $uid, $gid, $gcos, $home, $shell) = ""; open F, $PASSWD_FILE || _exit(111); while (<F>) { if (/^$user:/) { ($user, $passwd, $uid, $gid, $gcos, $home, $shell) = split(/:/); } } close F; _exit(2) unless $uid; if (crypt($pass, $passwd) ne $passwd) { _exit(1); } $ENV{USER} = $user; $ENV{UID} = $uid + 0; $ENV{HOME} = $home; $ENV{SHELL} = $shell; _exit(111) unless $ENV{UID}; #chdir $home || _exit(111); $) = $gid; $( = $gid; $> = $uid; $< = $uid; exec @ARGV; _exit(0); here is passwd/user file: lampa:HSExFJNuwlKvk:508:502::/home/_mail/lampa:/bin/false

1 0