- dovecot - dovecot.org

[Dovecot] Dovecot Parando
by Kleiton L R Soares 12 Sep '06

12 Sep '06

Olá, estou com um problema que é o seguinte: Tenho uma rede com 400 pessoas, estas possuem cada uma seu e-mail. Quando recebo muitos e-mails ao mesmo tempo meu Dovecot para. Ele continua em execução porém não responde mais, então tenho que reiniciar o serviço. Alguêm pode me ajudar neste problema ? Agradeço desde já, Abraços. -- --- --------------------------- Kleiton L R Soares (21-2620-0735 | 21-9639-5829) PCS - Processos Consultoria Soluções www.pcs.com.br / kleiton(a)pcs.com.br

3 3

[Dovecot] MySQL Authentication
by Peter Fraser 12 Sep '06

12 Sep '06

Hi all I have this interesting issue. I installed dovecot on FreeBSD 6.1. The install went well. I'm trying to get it to use a mysql database that postfix is already using to authenticate. When I use this in dovecot.conf userdb mysql { args = /usr/local/etc/dovecot/dovecot-mysql.conf } passdb mysql { args = /usr/local/etc/dovecot/dovecot-mysql.conf } I get this error. auth(default): Unknown passdb driver 'mysql' (typo, or Dovecot was built without support for it? Check with dovecot --build-options) This is strange because I did compile it with mysql support. Any ideas here?

2 1

[Dovecot] TAB characters in subject header continuation/wrap lines
by Stephen Warren 12 Sep '06

12 Sep '06

I have some emails where the Subject line has been wrapped, and subsequent lines are indented with TAB characters. Specifically, here's a dump of a portion of an email: 0002020 C c : sp nl S u b j e c t : sp [ B 0002040 u i l d b o t ] sp B u i l d B o 0002060 t sp S U C C E S S nl ht ( B l d _ 0002100 g s s d k _ g s s d k _ t e s t 0002120 _ 2 0 0 6 _ 0 9 _ 1 2 _ 0 0 _ 0 0002140 1 _ 0 0 _ I n c r e m e n t a l 0002160 _ 2 ) nl X - B e e n T h e r e : Note the HT about half way through the third line. When I view this email using Thunderbird 1.5.0.5 on Windows XP, with Dovecot 1.0.rc7 running on CentOS 4.3, this TAB character shows up as a funny character in the subject line, as displayed by the Thunderbird. My question is: Should Dovecot be detecting mail header continuation lines that start with a TAB, and stripping the TAB (converting to a space)? I *think* that's what the RFCs implied when I read up on this a few months ago, but I may easily be mis-remembering. A second somewhat off-topic question: When the automated system that sends out these messages sends them to me directly, this problem does not occur, because the email titles are not wrapped. However, when I receive these emails via a mailman mailing list, mailman prepends the text "[Buildbot]" on the front of the title, thus making the title long enough to require wrapping. As such, I imagine that it's mailman that is indenting the Subject continuation line with the TAB character. Is there an issue in mailman - should mailman be indenting with e.g. a SPACE character, or is mailman's action perfectly legal? Thanks for any pointers.

2 2

[Dovecot] Using pgsql with 'cram-md5 auth' and 'hmac-md5 scheme'
by Jonathan Ballet 12 Sep '06

12 Sep '06

Hello, I want to use PostgreSQL to store my Dovecot users. I setup a very basic configuration, following word for word this page http://wiki.dovecot.org/DovecotPostgresql and it works ... almost. In fact, it works if I use PLAIN password scheme in my database. However, I would like to store them encrypted. But, if I replace the password field for my user with {HMAC-MD5}-... (the password generated by dovecotpw), it doesn't work. Here is the log, using PLAIN password scheme (all debug options activated) : =================================================== auth(default): client in: AUTH 1 CRAM-MD5 service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 auth(default): client out: CONT 1 PDU3NTgxMTE5MTcwMTYzNjguMTE1ODAxMTQzN0BkZWI2ND4= auth(default): client in: CONT 1 am9uIDJjN2RmMDVmZWZiNWU4MmE0MzFkMjM2YThhYzc2MDAx auth(default): sql(jon,127.0.0.1): query: SELECT userid as user, password FROM users WHERE userid = 'jon' auth(default): password(jon,127.0.0.1): Credentials: 3fd9989457cb3edf1fb8d31dddaf11f3f0efee3423aeb9ebf9bbe981f86a079b auth(default): client out: OK 1 user=jon auth(default): master in: REQUEST 1 23748 1 auth(default): sql(jon,127.0.0.1): SELECT home, uid, gid FROM users WHERE userid = 'jon' auth(default): master out: USER 1 jon home=/var/mail/jon/ uid=5000 gid=5000 IMAP(jon): Effective uid=5000, gid=5000 IMAP(jon): maildir: data=/var/mail/jon IMAP(jon): maildir:root=/var/mail/jon, index=/var/mail/jon, control=, inbox= imap-login: Login: user=<jon>, method=CRAM-MD5, rip=127.0.0.1, lip=127.0.0.1, secured IMAP(jon): Disconnected: Logged out And here is the log, using HMAC-MD5 password scheme (all debug options activated too) : ===================================================== auth(default): client in: AUTH 1 CRAM-MD5 service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 auth(default): client out: CONT 1 PDI0MDc4NTQzMDc5NjU2NTIuMTE1ODAxMTkxNUBkZWI2ND4= auth(default): client in: CONT 1 am9uIDViNmE4NDI5ZjUzZTQ3YTEzZmEzNjhiOThlYjI5OTFi auth(default): sql(jon,127.0.0.1): query: SELECT userid as user, password FROM users WHERE userid = 'jon' auth(default): password(jon,127.0.0.1): Credentials: auth(default): cram-md5(jon,127.0.0.1): password mismatch auth(default): client out: FAIL 1 user=jon imap-login: Disconnected: user=<jon>, method=CRAM-MD5, rip=127.0.0.1, lip=127.0.0.1, secured The login + password used for those tests are 'jon'/'jonpwd'. In the second example, I didn't get any Credentials, whereas in the first case (PLAIN scheme), the Credentials output correspond to the 'dovecotpw' generated password (as in `dovecotpw -s HMAC-MD5 -p jonpwd`). I don't know if it's normal or not. So, I'm not sure what to do next :/ I use this kind of 'auth mechanism'/'password scheme' on another computer, with passwd-like files, and it works. So, I don't know why the same data, coming from another location, doesn't work. Any help would be greatly appreciated ! Thanks, -- Jonathan

3 7

[Dovecot] Dovecot go Down !
by Kleiton L R Soares 12 Sep '06

12 Sep '06

Excuse-me mr. Luca. Translating to you understand. Hello Peoples of the list. I'm have a problem I'm have a wide with 400 people, each user have a self mail. But when my server receive much mails the dovecot goes down and only return to activity when i restart the service. The service dovecot don-t stop, the service dovecot don't answer ! Somepeople can help-me ? Thanks ! Agradeço desde já, Abraços. :) -- --- --------------------------- Kleiton L R Soares (21-2620-0735 | 21-9639-5829) PCS - Processos Consultoria Soluções www.pcs.com.br / kleiton(a)pcs.com.br

2 1

[Dovecot] Mail does not arrive at my server.
by Wolfgang Paul Rauchholz 12 Sep '06

12 Sep '06

I run under FC5. I want to setup a mail server with postfix (already runnung) and dovecot. Once this i working I add spamassassin and clamav. I setup postfix and can send emails. When replying to these emails they do not get to my server (I checked in the Maildir directory of the user, there is no file) The server has 2 NICs. there is a firewall where I opened the port 143 (that is for IMAP?) 0 0 ACCEPT tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:143 flags:0x17/0x02 the only change I made to the dovecot.conf files is: protocols = imap I did not touch the rest as in the comments of the file it says # Default values are shown after each value, it's not required to uncomment # any of the lines. Any hint on what I am doing wrong is welcomed. Thanks in advance

5 6

[Dovecot] userdb/autdb via ldaps
by Jürgen Herz 12 Sep '06

12 Sep '06

Hello, I'm using a OpenLDAP server to store mail users infos like maildir location and password. This server is running on a separate machine and I'd like to protect the connection to it by using SSL/TLS. The server is configured so that it offers ldaps and it works with other clients. But I haven't found how to configure dovecot to use ldaps. Would someone please direct me to the right place or directly help how to? Greets, Jürgen

2 3

[Dovecot] Plugins for Dovecot at FreeBSD 6.0
by Boris Ivanov 12 Sep '06

12 Sep '06

Hi I met problem developing plug-in under FreeBSD 6.1. First I tried to use internal plugins like quota and acl but I got: IMAP(xxx): module /usr/local/lib/dovecot/imap/lib01_acl_plugin.so: dlsym(acl_plugin_init) failed: Shared object "nss_dns.so.1" not found, required by "imap" This library doesn't exist on FreeBSD 6.1 Same story when u mention any plugin in dovecot.conf… Any ideas how to fix it? -- Yours Boris

3 6

[Dovecot] Namespace with a single mailbox (for spam)
by Tom Alsberg 12 Sep '06

12 Sep '06

Hi there. Perhaps this is answered somewhere, but a short search through the mailing list and Wiki yielded nothing. We have spam filtering set up for all users, with all messages over some spam threshold going to a separate mbox. There is one directory containing the spam mboxes of all users (call it "/var/spool/spam", right now), with the spam box of a user residing in /var/spool/spam/<user>. I am trying to achieve that, in IMAP, each user will see his spam mbox as a folder named "SPAM" or something like that (possibly under some new namespace), without creating a symbolic link for each user. Is there any facility for that? Specifically, I do not want to create a single namespace pointing to the directory, since that will cause each user to have to access his spam folder under a different name (e.g. #spam.<user>), and users will also see (although not be able to read) others' spam folders. Regards, -- Tom -- Tom Alsberg - hacker (being the best description fitting this space) Web page: http://www.cs.huji.ac.il/~alsbergt/ DISCLAIMER: The above message does not even necessarily represent what my fingers have typed on the keyboard, save anything further.

3 5

[Dovecot] bug report, from apple.com
by Jason Fesler 11 Sep '06

11 Sep '06

Bruce includes detailed information including the imap session. Bruce works at Apple, on the Apple Mail.app product. ---------- Forwarded message ---------- From: Bruce Arthur <barthur(a)apple.com> To: dovecot(a)dovecot.org Cc: Bruce Arthur <barthur(a)apple.com> Date: Tue, 29 Aug 2006 09:04:35 -0700 Subject: Problem using Apple Mail with Dovecot Server Configuration: dovecot-1.0.rc6 Built with: ./configure --prefix=/usr/local OS: FreeBSD 4.10-STABLE i386 running on ufs Client configuration Mac OS X 10.4.7, using Apple Mail client. Issue: Apple Mail is able to connect to the server, but it is not seeing the available folder correctly. I did a little debugging and it looks like dovecot is failing to provide the separator in response to the LIST command. I did not spend anytime trying to figure out how other mail clients are getting this (my tcpdump is a little rusty these days). Here is what I see Mail sending to the server, and it's responses. 1 LOGIN applecot ******** 1 OK Logged in. 2 CAPABILITY * CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS 2 OK Capability completed. 3 LIST "" "" 3 OK List completed. The "LIST" command should be sending back the mailbox separator. The IMAP spec seems pretty clear about this (but reading RFC's is always a bit of a challenge). From the RFC: http://www.ietf.org/rfc/rfc2060.txt 6.3..8. LIST Command Arguments: reference name mailbox name with possible wildcards Responses: untagged responses: LIST Result: OK - list completed NO - list failure: can't list that reference or name BAD - command unknown or arguments invalid An empty ("" string) reference name argument indicates that the mailbox name is interpreted as by SELECT. The returned mailbox names MUST match the supplied mailbox name pattern. A non-empty reference name argument is the name of a mailbox or a level of mailbox hierarchy, and indicates a context in which the mailbox name is interpreted in an implementation-defined manner. An empty ("" string) mailbox name argument is a special request to return the hierarchy delimiter and the root name of the name given in the reference. The value returned as the root MAY be null if the reference is non-rooted or is null. In all cases, the hierarchy delimiter is returned. This permits a client to get the hierarchy delimiter even when no mailboxes by that name currently exist. Example: C: A101 LIST "" "" S: * LIST (\Noselect) "/" "" S: A101 OK LIST Completed C: A102 LIST #news.comp.mail.misc "" S: * LIST (\Noselect) "." #news. S: A102 OK LIST Completed C: A103 LIST /usr/staff/jones "" S: * LIST (\Noselect) "/" / S: A103 OK LIST Completed C: A202 LIST ~/Mail/ % S: * LIST (\Noselect) "/" ~/Mail/foo S: * LIST () "/" ~/Mail/meetings S: A202 OK LIST completed -- Bruce ------- From: Jason Fesler <jfesler(a)gigo.com> To: Bruce Arthur <barthur(a)apple.com> Cc: dovecot(a)dovecot.org Date: Tue, 29 Aug 2006 10:41:55 -0700 (PDT) Subject: Re: Problem using Apple Mail with Dovecot > Server Configuration: > dovecot-1.0.rc6 > Built with: ./configure --prefix=/usr/local > OS: FreeBSD 4.10-STABLE i386 running on ufs Thanks, Bruce. Timo et all; Bruce specifically has been looking at my instance of dovecot after a friend of his reported problems with Mail.app and my server. More information: Stock dovecot namespaces work; This name space does not: namespace private { separator = . prefix = INBOX. inbox = yes hidden = no } namespace private { separator = / inbox = no hidden = yes prefix = "#mail/" location = mbox:/home/%u/mail }

9 19

[Dovecot] what defines dovecot LOG perms?
by OpenMacNews 11 Sep '06

11 Sep '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 on dovecot launch, 'dovecot.log' is created as: -rw------- 1 root testuser 271 2006-09-11 07:58 dovecot.log which causes an apparent perms prob with exim using dovecot's LDA ... what/how do i define/change the LOG's ownership/perms with? it seems to ignore the dovecot.conf umask setting, etc. thx. richard - -- /"\ \ / ASCII Ribbon Campaign X against HTML email, vCards / \ & micro$oft attachments [GPG] OpenMacNews at gmail dot com fingerprint: 50C9 1C46 2F8F DE42 2EDB D460 95F7 DDBD 3671 08C6 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iEYEARECAAYFAkUFepwACgkQlffdvTZxCMaXoACfdGwNb8NQUZCfn6AlCswqbgrB T6IAoI0OMmhFsjWts3zAqIK3Ol32MwP7 =w1XL -----END PGP SIGNATURE-----

2 4

[Dovecot] Wrong content-type reported for messages with only a text/html body?
by Mathijs den Burger 11 Sep '06

11 Sep '06

Hi all, It looks like Dovecot 1.0rc7 reports the wrong content-type for messages with only a text/html body. An example of such a message is: --- From: mathijs(a)izecom.com Subject: test To: foobar(a)example.com Content-Type: text/html; test --- When I talk IMAP to Dovecot directly using telnet and fetch the bodystructure of this message, Dovecot replies: * 1 FETCH (BODYSTRUCTURE ("text" "plain" ("charset" "us-ascii") NIL NIL "7bit" 6 1 NIL NIL NIL)) I guess that should be 'text/html', not 'text/plain'. Is this a bug or am I missing something here? FYI: I run Dovecot on Debian stable with version 1.0rc7 compiled from source. cheers, Mathijs

2 1

[Dovecot] AppleMail 1.3 filter problem [solved] / fc5 package of 1.0rc7
by Bill McGonigle 11 Sep '06

11 Sep '06

Hi, Folks, I recently migrated from courier-imapd to dovecot when I migrated a machine from rh9 to fc5. I managed to hit a snag with the 1.0b8 version of dovecot that's currently in fc5. With AppleMail 1.3 I was seeing most of my incoming mail go missing. To make a long story short, AppleMail was applying mail filters inappropriately (walking right past a 'stop processing' rule and moving my incoming mail into folders specified for Act-On actions). This made the AppleMail 1.3 client unusable with 1.0b8. Before complaining here I figured I ought to try the current version, and, sure enough, 1.0rc7 fails to cause AppleMail to go insane like 1.0b8 did. I'm not sure which change between b8 and rc7 is the important one, but rc7 seems to work well. I saw the pointer on the Wiki to the ATRPM's repository which had a current RPM, but looking at the included patches in their SRPM they seem to be doing things somewhat differently than the Fedora guys are (default settings, etc.), so, I figured for my machine I'd rather stay as close to the Fedora methodology to make future upgrades perhaps less painful. To that end I took the SRPM for b8 from fc5 and modified it as little as possible to make it work with 1.0rc7. One bugfix patch was left out as that seems to have been fixed in the Dovecot source during the interim period. I put the resulting RPM and SRPM up here: http://bfccomputing.com/downloads/dovecot/ in case anybody wants to use it, review it, merge it into Fedora Core, their repo, etc. I'm neither an RPM packing nor Dovecot source expert and I've only tested it lightly, but I'm using it currently and haven't seen problems. -Bill ----- Bill McGonigle, Owner Work: 603.448.4440 BFC Computing, LLC Home: 603.448.1668 bill(a)bfccomputing.com Cell: 603.252.2606 http://www.bfccomputing.com/ Page: 603.442.1833 Blog: http://blog.bfccomputing.com/ VCard: http://bfccomputing.com/vcard/bill.vcf

2 2

[Dovecot] Create subfolder
by Hugo Dubé 11 Sep '06

11 Sep '06

I have dovecot on Fedora Core 5 and I want to create a subfolder. By default its impossible!!!! I setup dovecot for maildir and after I able to create a subfolder. But I cant receive my old and new email on this format. I read dovecot documentation at http://wiki.dovecot.org/QuestionsAndAnswers#head-35b621e067b7e72c1d1e47886f4 00a1a784bd95c and its write: For ordinary local Unix users, you may want to specify the mail environment as "maildir:%h/Maildir:INBOX=/var/mail/%n". There are two reasons. First, mail can be delivered there without consuming the user's disk quota on the home directory. Second, the user's home directory may prohibit access to any users other than the owner and the privileged user root. Having the INBOX outside the user's home directory permits mail delivery by programs running without root privileges, but belong to the group mail. I try it with maildir:%h/Maildir:INBOX=/var/mail/%n and dont work. I cant connect to my imap server. Help me please!!! Hugo

1 0

[Dovecot] dovecot LDA w/ exim: "dyld: Library not loaded" & "trace trap" errors
by OpenMacNews 10 Sep '06

10 Sep '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hi, i've Dovecot 10branch head built on on OSX 10.4.7. i've also exim 4.63 configured for use with dovecot's AUTH. on local delivery via exim -> dovecot LDA, i see two errors: (1) dovecot_lda transport output: dyld: Library not loaded: /usr/local/ssl/lib/libssl.0.9.8.dylib (2) Child process of dovecot_lda transport (running command "/usr/local/dovecot/libexec/dovecot/deliver -c /var/MailServer/Conf/dovecot.conf -d $local_part@$domain") was terminated by signal 5 (trace trap) the more i stare at this, the more i think this is a dovecot issue ... thoughts/suggestions ? details: % exim -bV Exim version 4.63 #1 built 09-Sep-2006 11:58:58 Copyright (c) University of Cambridge 2006 Berkeley DB: Sleepycat Software: Berkeley DB 4.3.29: (June 7, 2006) Support for: crypteq PAM TCPwrappers OpenSSL Content_Scanning Old_Demime Experimental_DomainKeys Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dsearch mysql Authenticators: cram_md5 plaintext dovecot Routers: accept dnslookup ipliteral manualroute queryprogram redirect Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp Fixed never_users: 0 Size of off_t: 8 Configuration file is /var/MailServer/Conf/Exim/exim.conf in my exim.conf, i've set up to use dovecot's LDA: ... begin routers ... dovecot_localuser: debug_print = "EXIM-DEBUG [R:dovecot_localuser] for $local_part@$domain" driver = accept domains = +local_domains local_part_suffix = +* local_part_suffix_optional transport = dovecot_lda ... begin transports ... dovecot_lda: debug_print = "EXIM-DEBUG [T:dovecot_lda] for $local_part@$domain" driver = pipe command = /usr/local/dovecot/libexec/dovecot/deliver \ -c /var/MailServer/Conf/Dovecot/dovecot.conf \ -d $local_part@$domain message_prefix = "" message_suffix = "" delivery_date_add envelope_to_add return_path_add log_output user = vmail ... when i test a local smtp exim devliery w/: % exim -v -odf testuser(a)testdomain.com LOG: MAIN cwd=/usr/local 4 args: exim -v -odf testuser(a)testdomain.com Test message. . i see as response in console: LOG: MAIN <= root(a)testdomain.com U=root P=local S=456 LOG: MAIN cwd=/var/MailServer/Mail/Queue 5 args: /usr/local/exim/bin/exim -v - -odi -Mc J5CFC3-0007YC-99 delivering J5CFC3-0007YC-99 EXIM-yes [R:dovecot_localuser] for testuser(a)testdomain.com EXIM-yes [T:dovecot_lda] for testuser(a)testdomain.com LOG: MAIN <testuser(a)testdomain.com>: dovecot_lda transport output: dyld: Library not loaded: /usr/local/ssl/lib/libssl.0.9.8.dylib LOG: MAIN ** testuser(a)testdomain.com F=<root(a)testdomain.com> P=<root(a)testdomain.com> R=dovecot_localuser T=dovecot_lda: Child process of dovecot_lda transport (running command "/usr/local/dovecot/libexec/dovecot/deliver -c /var/MailServer/Conf/dovecot.conf -d $local_part@$domain") was terminated by signal 5 (trace trap) LOG: MAIN cwd=/var/MailServer/Mail/Queue 9 args: /usr/local/exim/bin/exim -v - -odi -t -oem -oi -f <> -EJ5CFC3-0007YC-99 LOG: MAIN <= <> R=J5CFC3-0007YC-99 U=testuser P=local S=1485 T="Mail delivery failed: returning message to sender" ... if i, however, test the dovecot local delivery directly @ shell: % /usr/local/dovecot/libexec/dovecot/deliver -c /var/MailServer/Conf/Dovecot/dovecot.conf -d testuser(a)testdomain.com i see no 'complaints' about ssl lib ... dovecot: Sep 09 14:06:50 Info: auth(default): master in: USER 1 testuser(a)testdomain.com service=deliver dovecot: Sep 09 14:06:50 Info: auth(default): master out: USER 1 testuser(a)testdomain.com static uid=301 gid=301 home=/var/MailServer/Mail/Dovecot/Domains/testdomain.com/Accounts/testuser nice=10 so, where to begin with this? is this an exim or dovecot issue? thanks! richard - -- /"\ \ / ASCII Ribbon Campaign X against HTML email, vCards / \ & micro$oft attachments [GPG] OpenMacNews at gmail dot com fingerprint: 50C9 1C46 2F8F DE42 2EDB D460 95F7 DDBD 3671 08C6 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iEYEARECAAYFAkUDRakACgkQlffdvTZxCMYoHwCdGSaSeNok1B2ZYMnrNdaGFCj5 z4sAoIAKloPRwMD8GJgHT4BYwbS7Mecr =HKZx -----END PGP SIGNATURE-----

1 0

[Dovecot] Password mismatch - SHA1 authentication problem.
by guard 09 Sep '06

09 Sep '06

On Thu, 31 Aug 2006, guard wrote: > > Hello, > I have problem with authentication. > I'm using SHA1 passwords stored in MySQL. > > From debug: > Info: auth-worker(default): sql(test@mail, IP): query: SELECT password FROM > vmail WHERE mail = 'test@mail' > Info: auth-worker(default): sql(test@mail ,IP): Password mismatch > Info: auth-worker(default): sql(test@mail ,IP): SHA1(dupadupa) != > '2bca9dbe8a14811c687bb8c51c0e1cd14db8a018' > > I tried convert password to upper case, but it didn't help. Then I > tried authentication in plain text and everything works fine... > So, does dovecot crypt SHA1 using other method? > > I also use same SHA1 passwords to authenticate users in exim and it doesn't > have any problem with that. > > I'm using mysql 5.0.24 and dovecot 1.0 rc7. I have found the reason why i can not authenticate users using SHA1 passowds. Problem is dovecot stores sha1 as "sum of the password stored in base64" but mysql and exim store it in hex. Question is why, and does anyone have patch for it? Best regards, Tomasz Krynicki

1 0

[Dovecot] Virtual and system users
by Max A 08 Sep '06

08 Sep '06

Hi. I can not understand, how at presence of system users (passdb shadow and userdb passwd) and virtual (for example, user(a)host.domain.com as system user and user(a)domain.com as virtual) to allow virtual users to not enter a domain part of username at a login, and to allow system users to use a full name (user(a)host.domain.com)? I have read the documentation and default config - I can not understand, how it can be made? If the parameter "auth_username_format = %n" worked inside of separate passdb{} and userdb{} sections, it can be realized, but it does not work inside of them :( . --- M. Alhimenko.

1 0

[Dovecot] quota infor @ wiki page
by OpenMacNews 08 Sep '06

08 Sep '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hi matthias, reading the dovecot wiki page: http://wiki.dovecot.org/Quota that, apparently, you last edited (created?): Quota (last edited 2006-06-13 15:27:38 by MatthiasAndree) i note: " plugin { # 10 MB quota limit quota = maildir:storage=10240 # 1000 messages quota limit quota = maildir:messages=1000 # 10 MB + 1000 messages quota limit quota = maildir:storage=10240:messages=1000 } The above example shows how to set the same quota globally for everyone. You can override this for one or all users by returning a quota field from the user database. See UserDatabase for more information about how to set them for the user database you are using. Here is an example using a SQL-based user database: " i'm (currently) attempting to assign per-user quotas in a 'userdb static' scenario, where, in my dovecot.conf, i've: protocol imap { ... plugin { quota = maildir:storage=10240 } ... } auth default { ... passdb passwd-file { args = /var/MailServer/Data/USERS/imap.users } userdb static { args = static uid=300 gid=300 home=/var/MailServer/Mail/Dovecot/Domains/%d/Accounts/%n nice=10 } ... } so, per 'your' suggestion @ the wiki page, i nav to: http://wiki.dovecot.org/UserDatabase then: http://wiki.dovecot.org/AuthDatabase/PasswdFile where the example for userdb is given as: Or for passdb and userdb: user:{plain}pass:1000:1000::/home/user::mail=maildir:~/Maildir allow_nets=192.168.0.0/24 which, iiuc, would 'translate' to quota in my scenario as, in the "/var/MailServer/Data/USERS/imap.users" file: user:{plain}pass::::::quota=maildir:storage=4096 Unfortunately, when I do make this change, dovecot starts without error, BUT the given user's QUOTA *remains* at the global setting of (in this example) '10240'. i.e., the per-user override is, seemingly, not recognized. i'd make an add/change/comment *to* the wiki page, but it's set as an "Immutable Page". can you, perhaps, comment/clarify? any suggestions? many thanks! richard - -- /"\ \ / ASCII Ribbon Campaign X against HTML email, vCards / \ & micro$oft attachments [GPG] OpenMacNews at gmail dot com fingerprint: 50C9 1C46 2F8F DE42 2EDB D460 95F7 DDBD 3671 08C6 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iEYEARECAAYFAkUBgJ8ACgkQlffdvTZxCMYHrQCaAtvv9WvetLoA0BVd8lLfIHa0 rosAoL3l3rNuBHwwJ+sLi3qqT4fw50bH =wl2c -----END PGP SIGNATURE-----

1 0

[Dovecot] quota plugin feature request
by Michael Tibben 08 Sep '06

08 Sep '06

Hi am having an issue with the quota plugin To reproduce: - have a mailbox close to its quota limit (say 10 MB), and a large email in the inbox (say 6 MB) - use Squirrelmail or Thunderbird to delete the email The operation fails, as by default the email client seems to try and copy the message into the Trash before deleting it from the inbox, and dovecot will correctly deny the copy operation as the quota will be exceeded if the message is copied... Because of this, I am wondering if it is possible to have an option for the quota plugin to track, but not enforce the quota. This is because I don't require quota enforcement on IMAP operations, as Postfix will enforce quota on incoming mail anyway. Attached is a quick hack job I did on the plugin to strip out the enforcing functionality, but it would be great if this could be a configurable option.. Thanks Michael --- ./dovecot-1.0.rc7/src/plugins/quota/quota-storage.c.orig 2006-09-07 14:56:57.000000000 +1000 +++ ./dovecot-1.0.rc7/src/plugins/quota/quota-storage.c 2006-09-07 15:12:41.000000000 +1000 @@ -116,8 +116,8 @@ struct quota_transaction_context *qt = QUOTA_CONTEXT(t); int ret; bool too_large; - - ret = quota_try_alloc(qt, mail, &too_large); + return 0; +/* ret = quota_try_alloc(qt, mail, &too_large); if (ret > 0) return 0; else if (ret == 0) { @@ -127,7 +127,7 @@ mail_storage_set_error(t->box->storage, "%s", quota_last_error(quota)); return -1; - } + }*/ } static int @@ -167,7 +167,7 @@ { struct quota_transaction_context *qt = QUOTA_CONTEXT(t); struct quota_mailbox *qbox = QUOTA_CONTEXT(t->box); - const struct stat *st; +/* const struct stat *st; int ret; st = i_stream_stat(input, TRUE); @@ -181,7 +181,7 @@ I think these don't really matter though compared to the benefit of giving "out of quota" error before sending the full mail. */ - bool too_large; +/* bool too_large; ret = quota_test_alloc_bytes(qt, st->st_size, &too_large); if (ret == 0) {

1 0

[Dovecot] slow attachments loading
by xrado 07 Sep '06

07 Sep '06

when i browse imap with thunderbird, attachments are loadin/downloading really slow although they are size around 2Mb, it takes up to half minute to get it ..really annoying (server is in the same network as client) any idea why is so slow?

1 0

[Dovecot] dovecot-sieve feature
by Luis Venegas 07 Sep '06

07 Sep '06

Hi all., I am uing dovecot rc7 and dovecot-sieve both compiled from source. If I test sieve with feature redirect require "redirect"; redirect "user@domain"; keep; log says "sieve parse error: line 1: Unsupported features in require line" Is this normal? Thanks !

2 1

Re: [Dovecot] Plugins for Dovecot at FreeBSD 6.0
by Dominic Marks 07 Sep '06

07 Sep '06

Boris Ivanov wrote: > Hi Dominic > > dovecot itself linked to libc, but what do u mean "removing references > to nss_..."? > May u clear ur answer abit plz? Google shows quite a bit of information about this and it seems related to not clearing errors before using the dl* methods. Shows an (old) patch for Samba3 to add it. http://www.freebsd.org/cgi/cvsweb.cgi/ports/net/samba3/files/Attic/patch-li… Seems like this patch is required for auth/auth-module.c --- auth-module.c Thu Sep 7 14:13:26 2006 +++ auth-module.c.new Thu Sep 7 14:13:08 2006 @@ -59,6 +59,7 @@ return NULL; } + (void)dlerror(); handle = dlopen(path, RTLD_GLOBAL | RTLD_NOW); if (handle == NULL) i_error("dlopen(%s) failed: %s", path, dlerror()); @@ -89,6 +90,7 @@ } } + (void)dlerror(); if (dlclose(module->handle) != 0) i_error("dlclose() failed: %s", dlerror()); i_free(module->name); This is against RC7. Cheers, Dominic > Thank you > > Boris > > On 07/09/06, *Dominic Marks* <dom(a)goodforbusiness.co.uk > <mailto:dom@goodforbusiness.co.uk>> wrote: > > Boris Ivanov wrote: > > Hi > > > > I met problem developing plug-in under FreeBSD 6.1. > > > > First I tried to use internal plugins like quota and acl but I got: > > > > IMAP(xxx): module /usr/local/lib/dovecot/imap/lib01_acl_plugin.so: > > dlsym(acl_plugin_init) failed: Shared object "nss_dns.so.1" not > found, > > required by "imap" > > > > This library doesn't exist on FreeBSD 6.1 Same story when u > mention any > > plugin in dovecot.conf… > > > > Any ideas how to fix it? > > The nss functions are in libc. So I'd guess removing all reference to > any nss_*.so > libs would be sufficient. > > > -- > > Yours > > Boris > > Dominic > > > > > -- > Yours > Boris

1 0

[Dovecot] dovecot ignoring config file contents -- istream.c problem?
by pavol marko 07 Sep '06

07 Sep '06

Hello! This is my first time trying to run dovecot so maybe I've overlooked something, but I'm having a hard time running dovecot. First of all, it's worth noting that I'm trying to run dovecot on an embedded platform: the target architecture is mipsel; I have patches for the 2.4.18 kernel with special support for the board so I'm still using the 2.4.18 kernel. My C library is uClibc (I forget which version; will look it up later). The compiler I'm using is GCC 2.96. Anyway, after some struggling, I got dovecot to compile. These are my configure options: ./configure --prefix=/home/marko/ovis/myfirm/tmp/ --build=i686-linux --host=mipsel-uclibc-linux --disable-static --disable-rpath --disable-ipv6 --with-pic --with-notify=none --without-shadow --without-pam --with-checkpassword --without-bsdauth --without-vpopmail --without-ssl --without-pop3d --without-docs dovecot compiles and runs, but no matter what I put in dovecot.conf, it says something like "SSL support not build in but ssl_disable=no". I've even tried putting garbage into the config file (like hello=test ; on my desktop dovecot complains on that line, it is completly ignored on my embedded device). But when I delete the config file, dovecot complains. So I've done some printf-debugging in lib-settings/settings.c, and fount out that: control flow reaches the line input = i_stream_create_file(fd, default_pool, 2048, TRUE); but then no single iteration of the while loop is executed. Do you have any idea what could be wrong here? Any help is greatly appreciated ! Thank you. Pavol Marko

3 3

[Dovecot] Quotas with MySQL
by Neil Smith 07 Sep '06

07 Sep '06

Hello, I've had a look through past messages and I think this has been brought up but I'm not sure what the outcome of it was. I'm trying to use quotas with a MySQL dict backend. I am using Dovecot version 1.0.rc6-1 from the Debian Testing package on a x86 machine. My dovecot.conf file has the following entries which I took from the Wiki: dict { quotadict = mysql:/etc/dovecot/dovecot-dict-quota.conf } plugin { quota = dict:storage=10240 proxy::quotadict } and my dovecot-dict-quota.conf looks like the following, again from the Wiki: connect = host=127.0.0.1 dbname=mail user=<user> password=<passwd> table = quota select_field = current where_field = path username_field = username and my MySQL table is as follows: create table quota ( username varchar(255) not null, path varchar(255) not null, current integer, primary key (username, path) ); Now with this setup, the query for looking up the current quota appears in the MySQL logs as: SELECT current FROM quota WHERE path = 'quota/storage' AND username = 'neil(a)example.com' and the query for Inserting/Updating the quota is: BEGIN;INSERT INTO quota (current, path, username ) VALUES ('quota/storage', 0, 'neil(a)example.com') ON DUPLICATE KEY UPDATE current = current + 0;COMMIT With latter query, it appears to be trying to insert 'quota/storage' into `current` and 0 into `path`. This seems to be the wrong way around. Is that correct? If I change my dovecot-dict-quota.conf file to read: connect = host=127.0.0.1 dbname=mail user=<user> password=<passwd> table = quota select_field = path where_field = current username_field = username the two queries now look like: SELECT path FROM quota WHERE current = 'quota/storage' AND username = 'neil(a)example.com' and BEGIN;INSERT INTO quota (path, current, username ) VALUES ('quota/storage', 0, 'neil(a)example.com') ON DUPLICATE KEY UPDATE current = current + 0;COMMIT Although the latter query now works as expected and does update the quota in the database, the former query is now incorrect. Is this a problem with my configuration or is it a bug? If a bug, has it been corrected in Version 1.0.rc7? Thank you all. Neil

2 2

[Dovecot] Using Dovecot SASL with postfix
by Jonathan Stewart 06 Sep '06

06 Sep '06

I'm trying to use Dovecot SASL with postfix 2.3.3 and when trying to send mail I get the debug output below. I don't know enough about whats going on to know where the problem is but something clearly is not right. I would send the configurations for postfix and dovecot except they are clearly talking to each other so I kinda doubt its a configuration issue. The machine can afford to be down for an hour or two at a time for testing stuff if needed. Sep 6 12:04:10 server postfix/smtpd[13555]: connect from mobile-166-137-248-219.mycingular.net[166.137.248.219] Sep 6 12:04:17 server dovecot: auth(default): client in: AUTH 1 PLAIN service=smtp Sep 6 12:04:17 server dovecot: auth(default): client out: CONT 1 Sep 6 12:04:18 server dovecot: auth(default): client in: CONT 1 jonathan Sep 6 12:04:18 server dovecot: auth(default): plain(?): invalid input Sep 6 12:04:19 server dovecot: auth(default): client out: FAIL 1 Sep 6 12:04:19 server postfix/smtpd[13555]: warning: mobile-166-137-248-219.mycingular.net[166.137.248.219]: SASL PLAIN authentication failed: Sep 6 12:04:20 server postfix/smtpd[13555]: lost connection after AUTH from mobile-166-137-248-219.mycingular.net[166.137.248.219] Sep 6 12:04:20 server postfix/smtpd[13555]: disconnect from mobile-166-137-248-219.mycingular.net[166.137.248.219] A working auth looks like this, I'm thinking that IMAP versus SMTP should not be *too* big a difference in this case. Sep 6 12:06:22 server dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=10.70.3.1 rip=10.70.3.254 Sep 6 12:06:22 server dovecot: auth(default): client out: CONT 1 Sep 6 12:06:22 server dovecot: auth(default): client in: CONT 1 (some kind of hash looking thing) Sep 6 12:06:22 server dovecot: auth(default): client out: OK 1 user=jonathan Sep 6 12:06:22 server dovecot: auth(default): master in: REQUEST 1 13554 1 Sep 6 12:06:22 server dovecot: auth(default): master out: USER 1 jonathan system_user=jonathan uid=1001 gid=1001 home=/home/jonathan Sep 6 12:06:22 server dovecot: imap-login: Login: user=<jonathan>, method=plain, rip=10.70.3.254, lip=10.70.3.1, TLS Thanks, Jonathan

2 2

[Dovecot] Migrando DOVECOT -> Cyrrus-imapd
by Kleiton L R Soares 06 Sep '06

06 Sep '06

Gostaria de saber se alguêm conhece alguma ferramenta de migração de Dovecot para Cyrrus. Tenho minhas inbox em /var/spool/mail. Agradeço desde já. Abraços. -- --- --------------------------- Kleiton L R Soares (21-2620-0735 | 21-9639-5829) PCS - Processos Consultoria Soluções www.pcs.com.br / kleiton(a)pcs.com.br

1 0

[Dovecot] configuration issues / virtual users
by Zbigniew Szalbot 06 Sep '06

06 Sep '06

Hello, It is my first post on this list and I hope someone will be able to help. I have installed dovecot on FreeBSD 6.1. Everything works fine but I wanted to create a way to accept mail to a few virual users and decied to use and example from http://wiki.dovecot.org/VirtualhostingWithExim auth = default auth_userdb = static uid=500 gid=500 home=/home/dovecot/users/%u auth_passdb = passwd-file /home/dovecot/passwd auth_user = dovecot I altered the uid and gid and made sure I have the directories ready and passwd file ok. I altered the conf file to read the following: userdb static { # Template for settings. Can return anything a userdb could normally # return, eg.: uid, gid, home, mail, nice # # A few examples: # # args = uid=500 gid=500 home=/var/mail/%u # args = uid=500 gid=500 home=/home/%u mail=mbox:/home/%u/mail nice=10 # #args = # dovecot virtual users auth_userdb = static uid=1003 gid=1003 home=/home/dovecot/users/%u auth_passdb = passwd-file /home/dovecot/passwd auth_user = dovecot ) However, dovecot complains: Error: Error in configuration file /usr/local/etc/dovecot.conf line 752: Unknown setting: auth_userdb Where did I go wrong? I hope someone can help me. Thanks! Warm regards from Poland, Zbyszek

1 0

[Dovecot] Strange log entry???
by Bill Landry 06 Sep '06

06 Sep '06

Although everything appears to be working fine, I see the following entry in my log file each time someone logs on via the IMAPS service (all other services are disables: POP, IMAP, etc.): ========== Sep 6 02:57:00 mgw1 dovecot: Logins with login process UID xxxx (user someone(a)example.com) not permitted (see login_user in config file). ========== Any idea what this log entry means and is there a config setting I need to adjust to stop these log entries (Dovecot version 1.0.rc7)? Thanks, Bill

2 1

[Dovecot] dovecot-sieve with FreeBSD
by Peter Bauer 06 Sep '06

06 Sep '06

Hello, I've a test system with postfix (SMTP), dovecot (IMAP only) and covecot-LDA (MDA) under FreeBSD-6.1. Currently everything works fine. But I wasn't able to install dovecot-sieve from the CVS. Does anyone has a small documentation howto install dovecot-sieve on FreeBSD. Thanks. -- Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer

4 5

[Dovecot] Dovecot problem in RHEL4
by ~adarsh~ 06 Sep '06

06 Sep '06

Hi all, I have some problem with dovecot in RHEL4. IMAP server is dropping connection after woorking for some time. It seems that the login process count keeps increasing?(stale login process are not removed) Any points to sort the problem? -- Adarsh

2 2

[Dovecot] configuration guidelines.
by Ian Mortimer 05 Sep '06

05 Sep '06

Our imap/pop service is moving from UW imap to dovecot 0.99.11 on RHEL4. This is for around 200 users with lots of different email clients, e.g.: Windows: outlook, outlook Express, eudora, thunderbird, netscape OS X: mail, eudora, thunderbird Unix/Linux: evolution, thunderbird, pine, mutt Web: squirrelmail Apart from the example configuration file, I can't find any guides for optimal values to use for dovecot's many configuration options. A few that look like they might need changing are: login_process_size = 32 login_process_per_connection = yes login_processes_count = 3 mbox_dotlock_change_timeout = 30 auth_count = 1 client_workarounds = Does anyone have any pointers to reasonable values for those or other settings? Thanks -- Ian

3 3

Re: [Dovecot] rc7 bug? [Was: deliver LDA and INBOX location] (fwd)
by David Lee 05 Sep '06

05 Sep '06

Anyone had any thoughts on the item below? If the problem is with my config, I'd like to be guided towards how I might resolve it. If it is a bug in rc7, it would be good to fix it, and I'd be happy to beta-test. -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : Durham University : : http://www.dur.ac.uk/t.d.lee/ South Road : : Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. : ---------- Forwarded message ---------- Date: Fri, 1 Sep 2006 10:22:20 +0100 (BST) From: David Lee <t.d.lee(a)durham.ac.uk> To: dovecot(a)dovecot.org Subject: Re: [Dovecot] rc7 bug? [Was: deliver LDA and INBOX location] On Thu, 31 Aug 2006, David Lee wrote: > [...] > We have a well-established different convention which subdivides this, > based on the last two digits of the uid: "/var/spool/mail/12/fred" (for > fred's uid as something ending "[...]12"). This is working nicely with > dovecot, using the new rc7 functionality: > default_mail_env = mbox:%h:INBOX=/var/spool/mail/%-2.02i/%u:[...] > > I am now trying to get sendmail to use dovecot's "deliver" as the LDA, > [...] The main problem is that, according to the log file, the delivery > attempt is being made to an INBOX "/var/spool/mail//fred". That is, it > seems to be ignoring the "default_mail_env" setting. > > Have I missed something in the wiki, or is this a bug of some sort? I have looked deeper at my problem (abov). It seems to be a bug in rc7, and probably an "always been there" bug. I sprinked a few "i_info(...)" diagnostics into "deliver.c" where it does 'getenv("MAIL")' and 'getenv("DEFAULT_MAIL_ENV")'. It shows that these are being successfully read from the 'dovecot.conf' file (good). But, crucially, it seems that the "%" variable substitution is incomplete: line 483: MAIL [null] line 486: MAIL mbox:%h:INBOX=/var/spool/mail/%-2.02i/%u:INDEX=/var/spool/mail/indexes/%d/%n line 492: MAIL mbox:/home/fred:INBOX=/var/spool/mail//fred:INDEX=/var/spool/mail/indexes//fred (Aside: The act of inserting the 'i_info' will have knocked the line numbers adrift by a couple. But it shows what is (not) happening.) Note in the "INBOX=..." clause that while "%u" and "%h" have been successfully expanded (good), the "%i" variant (UNIX uid) has failed to get expanded (bad). I'm new to dovecot, so am on a steep learning curve and am unfamiliar with the source code and dovecot's principles. So it would probably take me ages to work out a suitable patch, and even then it might be inappropriate. But hopefully the above information is sufficient and suitable for someone (Timo?) to investigate more expertly and fully. If someone can produce a patch (or hints of what to patch and where) I would certainly intend to test it and work on it for you. Hope that helps. Many thanks in advance. -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : Durham University : : http://www.dur.ac.uk/t.d.lee/ South Road : : Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. :

2 3

[Dovecot] Effective UIDs Nad GID for VIrtual Users
by rammstein-den 05 Sep '06

05 Sep '06

Hello to All. I have a system with FreeBSD 6.1 Release, Dovecot 1.0 Release Candidate 7. I am a novice user in unix world and when my first deal with with Dovecot is Virtual users. User databes in master.passwd file (like a /etc/master.passwd) created by "pw". All works fine, BUT --- If user exclusivly virtual (there is no user with same name in system) IMAP folders are created normal with a right access rights(they described in dovecot.conf statically UID 555) - all cool - BUT when i trying to login with a Virtual user with the SAME LOGIN NAME as in SYSTEM (FreeBSD's /etc/master.passwd user) USER ---- going something strange: imap folders that creating for this user takig wrong ACCES RIGHTS (access rights for system user), not statically with UID 555! What the ... ?! -----------------------Edited Part of Dovecot.conf----------------------------------------------------- default_mail_env = mbox:/var/new/%u:INBOX=/var/virtual/%u auth default { # Space separated list of wanted authentication mechanisms: # plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi #mechanisms = digest-md5 # /etc/passwd or similar, using getpwnam() # In many systems nowadays this uses Name Service Switch, which is # configured in /etc/nsswitch.conf. # passdb passwd { # } #auth_user=root #userdb passwd-file { # args = /bsd/dove/passwd #} userdb passwd { args = /bsd/dove/passwd } passdb passwd-file { args = /bsd/dove/master.passwd } # /etc/passwd or similar, using getpwnam() # In many systems nowadays this uses Name Service Switch, which is # configured in /etc/nsswitch.conf. # static settings generated from template userdb static { # Template for settings. Can return anything a userdb could normally # return, eg.: uid, gid, home, mail, nice # # A few examples: # # args = uid=500 gid=500 home=/var/mail/%u # args = uid=500 gid=500 home=/home/%u mail=mbox:/home/%u/mail nice=10 # args = uid=555 gid=125 } } ------------------------------------END------------------------------------- In logs I also have: dovecot: Sep 04 22:47:03 Info: IMAP(radeon): Effective uid=1001, gid=1001 instead dovecot: Sep 04 22:59:39 Info: IMAP( ): Effective uid=555, gid=125 - - - - -- - -- - - I so angry! P.S. Sorry for my english,my native language is Russian :)

1 0

[Dovecot] Upgrading from Package on OpenBSD
by Michael Starks 05 Sep '06

05 Sep '06

Hi, First, let me say I looked for a way to search the archives online but must be missing something. Can someone point me to a URL? On to the question: I'm currently running dovecot-0.99.14p1 from packages on OpenBSD 3.8. I'm interested in running the latest version. What is the best practice for migrating/upgrading on OpenBSD? Thanks in advance.

2 1

[Dovecot] Maildir messages owned by Root.
by Simon 05 Sep '06

05 Sep '06

G'day I am having an interesting issue, that I can not find a fixe for. I am running dovecot 1.0 rc7, on a Freebsd 5.4 x86 box, with around 1500ish users, using Maildir storage format. I have a very small number of user, with the same problem, when messages are moved from ~username/Maildir/new to ~username/Maildir/cur a random number, of the files ownership, will change to root. And my users can then not download any mail until this has been fixed. I have an identical setup running on Solaris 10 x86, that does not have this problem. Has anybody come across this before on Freebsd or any other operating system. Or have any suggestions, on what I can try to fix the problem. I have not been able to emulate it in a lab environment, and the logs on the server do not produce an error.

1 0

[Dovecot] OT: NIS Authentication
by Jeff Graves 04 Sep '06

04 Sep '06

Ran into a major issue with my setup overnight: We have a Win2K AD domain running SFU with a master and 1 slave NIS server. Our mail server is a FC1 box that runs dovecot and a MailScanner/sendmail config. The mail server is configured as a NIS client. The problem is that we lost power overnight and all of the boxes shutdown after the UPS's ran out of battery. After the power came back on, all of the boxes automatically rebooted. The problem is that our mail server is somewhat faster than the rest of the servers. It booted up before the master or slave NIS servers were up and running. Since the mail server uses a PAM NIS authentication scheme, it knows nothing about our users unless it connects to a NIS server. So, this morning users were getting "unknown username" type errors with outlook. Furthermore, the mail logs show that sendmail was rejecting mail with "unknown user" errors. It wasn't until we rebooted the mail server and it was able to reconnect to the NIS servers that mail resumed being received and users could access it. It seems like a fundamental problem with our setup. Since I'll eventually be updating the box to a newer OS and configuration, I need to plug this hole somehow without changing the authentication scheme. Furthermore, I'm concerned that if the master or slave went down while the mail server was still up, we'd see similar results. I'm thinking of one of two options to fix this but wanted to run it by everyone to see if there was a better way: 1) Configure the boot loader to wait 5 minutes before loading the OS (it uses GRUB so I'll set it display the OS menu screen for 5 minutes and then boot). Then if I'm doing maintenance to the box I can just hit enter to boot immediately and hopefully the 5 minute delay will allow the other boxes to boot after a power outage. This won't cover me if it's not a power outage (Eg. The master or slave dies). 2) Configure the mail server as an NIS slave. I'm thinking that this will basically "copy" the user info (username, password, homedir, etc.) on a schedule and store it locally on the mail server (is this how it works?). This covers both issues - power outage and a server dying. But I've read about problems getting password sync to happen quickly. I'd ideally like it to happen immediately (without any manual intervention) but I don't think this is possible. Thoughts? Jeff Graves, MCSA Customer Support Engineer Image Source, Inc. 10 Mill Street Bellingham, MA 02019 508.966.5200 - Phone 508.966.5170 - Fax jeff(a)image-src.com - Email www.image-src.com

5 4

[Dovecot] Can't build with PAM support
by Neil Briscoe 04 Sep '06

04 Sep '06

I'm having trouble getting dovecot to compile with PAM support. Output from the configure command says its checking for pam_start in -lpam .... no. I've checked, there is a pam_start in there. So how can I force configure to see what its looking for? I've tried the --with-pam switch and that doesn't work. I'm trying to build the latest RC7 on a Debian Sarge box. Regards Neil ------------------------------------------------------------------------------------ Scanned for viruses, spam and offensive content by CensorNet MailSafe Professional Web & E-mail Filtering from www.censornet.com

2 5

[Dovecot] Emails corrupted...
by Jean-François Guyet 04 Sep '06

04 Sep '06

Hi All, I have just setup a Dovecot Imap server on a Ubuntu 6.06 Lamp box. Basically I use fetchmail to retrieve emails from foregin pop accounts and then procmail transfers emails for /var/mail/username to ~/Maildir/new and other folders. Everything works fine *except* if my Thunderbird client is connected (I haven't tried any other client). If an email is received while TB is connected, then the file for the email is empty (eg size 0) leading to an empty email dated 1/jan/1970!. As I'm quite to Dovecot (and Linux in general), I'm quite a bit lost. Anyone there who could help ? Best regards Jean-François -- ----- Fin du message transféré ----- --

2 1

[Dovecot] Mailbox Limnits
by Chris Kenward 04 Sep '06

04 Sep '06

Hi Folks Can anyone tell me whether there is a default limit on the size of IMAP mailboxes using Dovecot or, if not, where I would set that up? We're wanting to give our customers the choice of IMAP vs POP but don't want to end up with Gigabyte mailboxes. Regards Chris

1 0

[Dovecot] SPA (NTLM) Authentication
by Neil Briscoe 03 Sep '06

03 Sep '06

Hello I have just spent a happy day (!) configuring Exim4 to accept authenticated connections from full blown Outlook clients. That works. Unfortunately, by ticking the "Use SPA" box in Outlook it now demands SPA on the POP3 server as well. The existing POP3 server doesn't support this style of authentication. I believe Dovecot will. We're already using it as an IMAP server. What I'm worried about is diverting its current view from /etc/passwd. I have an /etc/exim4/passwd file which contains three fields for the users tested so far, their name, an encrypted password, and a clear text one. Timo has already told me that the system needs access to the cleartext password (or an NTLM style password) in order to work. It would be nice if I could have the system check the /etc/exim4/passwd file and if the user wasn't there then check the /etc/passwd file - and ignore NTLM as it would normally. Regards Neil -- Neil Briscoe Adelix Ltd neil.briscoe(a)adelix.com web: www.adelix.com tel: 0845 230 9592 / fax: 0845 230 9591 / main office: 0845 230 9590 snail: The Old Post Office, Bristol Rd, Hambrook, Bristol BS16 1RY. UK. skype: stonefish001 Adelix Ltd is BS EN ISO 9001:2000 Certified (No. GB 12763) Any views expressed in this email communication are those of the individual sender, except where the sender specifically states them to be the views of a member of Adelix Ltd. Adelix Ltd. does not represent, warrant or guarantee that the integrity of this communication has been maintained nor that the communication is free of errors or interference. ------------------------------------------------------------------------------------ Scanned for viruses, spam and offensive content by CensorNet MailSafe Professional Web & E-mail Filtering from www.censornet.com

1 1

[Dovecot] Dovecot with STARTTLS
by Dovecot Mailing List 03 Sep '06

03 Sep '06

Dovecot rc7 I have Dovecot working fine with using SSL on port 995. However, if I attempt to use STARTTLS on port 110, I receive the following error message from my MUA: >>> Connecting to "192.168.0.2" (SSL/TLS) [9/1/2006 5:36:12 PM] <<< +OK Seibercom.net at your service [ISafe POP3 Proxy] STLS +OK Begin TLS negotiation now. The connection then times out. This is the only entry in the Dovecot.log: dovecot: Sep 01 17:36:52 Info: pop3-login: Disconnected: Inactivity: rip=192.168.0.4, lip=192.168.0.2, TLS handshake Does anyone have an idea what the problem might be? Thanks! -- Gerard Seibert gerard(a)seibercom.net

6 9

[Dovecot] imap fails, policy wrong?
by rob＠adeed.tele.com 02 Sep '06

02 Sep '06

up until a week or so ago, I had no problem using IMAP logging into a server running Fedora Core (I think 4 or 5 ) with dovecot 1.0. Had used squirrelmail and other mail agents using IMAP with no problem. as of 2 days ago, I get a squirrelmail error "ERROR: Connection dropped by IMAP server. Query: CAPABILITY" and turning on dovecot debugging shows the following: audit(1157176740.621:14111): avc: denied { search } for pid=9431 comm="doveco t" name="rob" dev=dm-0 ino=23560377 scontext=user_u:system_r:dovecot_t:s0 tconte xt=user_u:object_r:httpd_sys_content_t:s0 tclass=dir can someone point me in the right direction? apologies if this doesn't contain enough info, will try to get more if necesssary, thanks in advance. (incidentally, the simpler dovecot error message says it can't chdir to my $HOME or its parent, but I see no problem with perms or ownership. ) Rob Lingelbach rob(a)colorist.org

2 1

[Dovecot] Passwd-file extra-fields ...which ones
by Luis Venegas 01 Sep '06

01 Sep '06

Hi list., >From http://wiki.dovecot.org/AuthDatabase/PasswdFile I can tell there is mail and allow_nets fields. Which ones dovecot supports? In particular one for quota?? Thanks Luis Venegas

1 0

[Dovecot] DIGEST-MD5 doesn't work
by Jürgen Herz 01 Sep '06

01 Sep '06

Hi, my dovecot installation works since months and clients authenticate using CRAM-MD5. But today I got the first chance to test an client that supports DIGEST-MD5 - and it doesn't work. Because of lack of other supporting clients and servers I'm now at the point I don't know which side is to blame. The error I get after the client answers the servers challenge is "-ERR Authentication failed: Missing nonce parameter". Though I don't know how DIGEST-MD5 works I wonder about the message because the clients answer contains a nonce parameter (captured with tcpdump): YXV0aHppZD0ib3RycyIsY2hhcnNldD11dGYtOCxjbm9uY2U9IjFlOTZkYmZiZWEwZjUxNmVhZjEyYmM0NjU1M2JmZjVlIixkaWdlc3QtdXJpPSJwb3AzL25hbm8iLG5jPTAwMDAwMDAxLG5vbmNlPSJPVGpGWmhjS2FIVjZSVGMyZlRDTXJ3PT0iLHFvcD1hdXRoLHJlYWxtPSIiLHJlc3BvbnNlPTVmMTQyZWVlN2FmMWVmYTJhYWI5ZmM0ODNiOGJjOTJhLHVzZXJuYW1lPSJvdHJzIg== authzid="otrs",charset=utf-8,cnonce="1e96dbfbea0f516eaf12bc46553bff5e", digest-uri="pop3/nano",nc=00000001,nonce="OTjFZhcKaHV6RTc2fTCMrw==", qop=auth,realm="",response=5f142eee7af1efa2aab9fc483b8bc92a,username="otrs" Client is a Perl script using Net::POP3 and Authen::SASL Modules Dovecot is version 0.99.14 - I know it's old and not supported. If one tells me the bug is known and fixed in 1.0rc, then I'll think about upgrading, but I just to test I don't want to change my running system. Regards, Jürgen

1 1

[Dovecot] Stale imap processes
by Michael Bond 01 Sep '06

01 Sep '06

I read through the thread on Stale imap process and would like to chime in that I too am having the problem. The only imap user on the system is using Mail.app 2.1. The other users are using pop with thunderbird. After quiting mail.app and stopping dovecot I can still see many imap sessions opened. Over the course of the day a good number of imap process will be open and no one will be able to connect to the server via imap or pop. Typically I have to restart dovecot twice a day with the following: /etc/init.d/dovecot stop killall imap /etc/init.d/dovecot start I've narrowed it down to an imap issue. If i don't connect with imap the other users don't report any issues connecting with pop. I'm using mbox as my mail format on centos 4. I know that the default version on centos4 is .99, but it appears that people are still having issues into 1.0rc2. Could it have something to do with using mbox format? Mike. mbond(a)the-forgotten.org

1 0

[Dovecot] deliver LDA and INBOX location
by David Lee 01 Sep '06

01 Sep '06

(OS: Fedora Core 5; dovecot: 1.0 rc7) On a typical UNIX-like OS, the INBOXes are in "/var/spool/mail/" using the user identifier: so user 'fred' has INBOX "/var/spool/mail/fred". We have a well-established different convention which subdivides this, based on the last two digits of the uid: "/var/spool/mail/12/fred" (for fred's uid as something ending "[...]12"). This is working nicely with dovecot, using the new rc7 functionality: default_mail_env = mbox:%h:INBOX=/var/spool/mail/%-2.02i/%u:[...] I am now trying to get sendmail to use dovecot's "deliver" as the LDA, (following "http://wiki.dovecot.org/LDA") as a simple drop-in replacement for the normal LDA. (Actually our migration starting point is a UW-IMAP background using its 'tmail' as LDA.) 1. It seems that using "auth default {...socket listen {...}...}" is mandatory. Can someone confirm? This feels like an extra complication: is it strictly necessary in a NIS/PAM set-up? (Fair enough if so.) 2. The main problem is that, according to the log file, the delivery attempt is being made to an INBOX "/var/spool/mail//fred". That is, it seems to be ignoring the "default_mail_env" setting. Have I missed something in the wiki, or is this a bug of some sort? -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : Durham University : : http://www.dur.ac.uk/t.d.lee/ South Road : : Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. :

1 1

[Dovecot] No tcp wrappers, other ideas to help stop brute force attacks?
by David Rees 01 Sep '06

01 Sep '06

I'm looking for a way to deny access to dovecot from certain IP addresses, basically to help prevent brute force attacks on the server. Right now I'm using denyhosts which scans /var/log/secure for authentication failures which then can add an entry to /etc/hosts.deny, but since dovecot doesn't have tcp wrappers support, that doesn't do anything. It doesn't look like I can run dovecot run xinetd. Any other ideas to help protect dovecot from brute force attacks? I don't think pam can help, can it? Otherwise I need to figure out a way to have denyhosts trigger iptables rules or something, or maybe there's another application that will work? -Dave

9 15

[Dovecot] one example, just one example ...
by OpenMacNews 01 Sep '06

01 Sep '06

... of a correctly formatted QUOTA spec in/for a static userdb. That's all I'm askin' for! i've tried a bunch of variants. the most recent two: user@domain.com:{PLAIN}testpass:::::: quota=maildir:storage=4096 user@domain.com:{PLAIN}testpass:::::: maildir:storage=4096 *none* (so far ...) work to override the spec in dovecot.conf. no errors in the logs; rather, simply: dovecot: Aug 31 08:54:25 Info: auth(default): passwd-file /var/MailServer/Data/USERS/imap_user_file: Read 2 users nobody? really, nobody does this successfully? richard

2 2

[Dovecot] [Fwd: dovecot-1.0_rc7 crashes (Login process died too early) with repeated deletes from thunderbird]
by Tim Schafer 01 Sep '06

01 Sep '06

I've run this test on every permutation of poll and notify: can NOT reproduce the crash: --with-ioloop=select --with-notify=none --with-ioloop=select --with-notify=dnotify --with-ioloop=select --with-notify=inotify --with-ioloop=poll --with-notify=none --with-ioloop=poll --with-notify=dnotify --with-ioloop=poll --with-notify=inotify CAN reproduce the crash: --with-ioloop=epoll --with-notify=none --with-ioloop=epoll --with-notify=dnotify --with-ioloop=epoll --with-notify=inotify So it would seem that epoll is related some how. As IDLE only seems to work well with epoll, I'm highly interested in resolving this crash. My Linux kernel is version 2.6.14.2 glibc 2.3.6 If any other info would help, please let me know. If any other test combinations would be helpful, I will try to do them ASAP. Regards, Tim Schafer -------- Original Message -------- Subject: [Dovecot] dovecot-1.0_rc7 crashes (Login process died too early) with repeated deletes from thunderbird Date: Thu, 24 Aug 2006 15:18:56 -0700 From: Tim Schafer <tim_schafer(a)shipfsp.com> To: Dovecot Mailing List <dovecot(a)dovecot.org> I can consistently reproduce a crash in dovecot: Select 20 or more messages and copy them to a test folder. Go into that test folder and SHIFT-DEL the messages rapidly (holding down SHIFT-DEL works best) Just rapidly DELing them (even holding down DEL) doesn't do it (unless it's the Trash folder) I'm using the following namespace (in case that's relevant) namespace private { separator = . prefix = INBOX. inbox = yes } The /var/log/syslog for the session reads: Aug 24 14:58:54 hostname dovecot: Dovecot v1.0.rc7 starting up Aug 24 14:58:55 hostname slapd[7243]: conn=147 fd=9 ACCEPT from IP=127.0.0.1:41074 (IP=0.0.0.0:389) Aug 24 14:58:55 hostname slapd[7243]: conn=147 op=0 BIND dn="" method=128 Aug 24 14:58:55 hostname slapd[7243]: conn=147 op=0 RESULT tag=97 err=0 text= Aug 24 14:59:09 hostname dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Ilip=192.168.0.7^Irip=192.168.0.100 Aug 24 14:59:09 hostname dovecot: auth(default): client out: CONT^I1^I Aug 24 14:59:09 hostname dovecot: auth(default): client in: CONT^I1^IAHRdfmkerjejfkdeie Aug 24 14:59:09 hostname dovecot: auth(default): client out: OK^I1^Iuser=username Aug 24 14:59:09 hostname dovecot: auth(default): master in: REQUEST^I1^I10081^I1 Aug 24 14:59:09 hostname dovecot: auth(default): master out: USER^I1^Iusername^Isystem_user=username^Iuid=1000^Igid=100^Ihome=/home/username Aug 24 14:59:09 hostname dovecot: imap-login: Login: user=<username>, method=plain, rip=192.168.0.100, lip=192.168.0.7 Aug 24 14:59:10 hostname dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Ilip=192.168.0.7^Irip=192.168.0.100 Aug 24 14:59:10 hostname dovecot: auth(default): client out: CONT^I1^I Aug 24 14:59:10 hostname dovecot: auth(default): client in: CONT^I1^IAHRdfmkerjejfkdeie Aug 24 14:59:10 hostname dovecot: auth(default): client out: OK^I1^Iuser=username Aug 24 14:59:10 hostname dovecot: auth(default): master in: REQUEST^I2^I10082^I1 Aug 24 14:59:10 hostname dovecot: auth(default): master out: USER^I2^Iusername^Isystem_user=username^Iuid=1000^Igid=100^Ihome=/home/username Aug 24 14:59:10 hostname dovecot: imap-login: Login: user=<username>, method=plain, rip=192.168.0.100, lip=192.168.0.7 Aug 24 14:59:12 hostname dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Ilip=192.168.0.7^Irip=192.168.0.100 Aug 24 14:59:12 hostname dovecot: auth(default): client out: CONT^I1^I Aug 24 14:59:12 hostname dovecot: auth(default): client in: CONT^I1^IAHRdfmkerjejfkdeie Aug 24 14:59:12 hostname dovecot: auth(default): client out: OK^I1^Iuser=username Aug 24 14:59:12 hostname dovecot: auth(default): master in: REQUEST^I3^I10085^I1 Aug 24 14:59:12 hostname dovecot: auth(default): master out: USER^I3^Iusername^Isystem_user=username^Iuid=1000^Igid=100^Ihome=/home/username Aug 24 14:59:12 hostname dovecot: imap-login: Login: user=<username>, method=plain, rip=192.168.0.100, lip=192.168.0.7 Aug 24 14:59:14 hostname dovecot: IMAP(username): Disconnected Aug 24 14:59:14 hostname dovecot: imap-login: Disconnected: rip=192.168.0.100, lip=192.168.0.7 Aug 24 14:59:14 hostname last message repeated 2 times Aug 24 14:59:14 hostname dovecot: Login process died too early - shutting down Aug 24 14:59:14 hostname dovecot: imap-login: Disconnected: rip=192.168.0.100, lip=192.168.0.7 Aug 24 14:59:14 hostname slapd[7243]: conn=147 op=1 UNBIND Aug 24 14:59:14 hostname slapd[7243]: conn=147 fd=9 closed -- Regards, Tim Schafer

1 1

[Dovecot] MANAGESIEVE patch v2
by Stephan Bosch 01 Sep '06

01 Sep '06

Hello Timo, Dispite the heat out here, I managed to come up with a new version of the managesieve patch for dovecot-1.0rc2: - Fixed the bug (missing CRLF) in the authenticate command - Modified the sieve storage library making the interface much less crude. - The scripts put on the server using the putscript command are now checked before they are accepted. - The reported SIEVE capability is now directly read from the sieve implementation (in this case cmu), listing much more than "FILEINTO VACATION". - Fixed some minor bugs in the putscript command Considering the dovecot-sieve plugin, I noticed that you obviously do not want to include the cmu sieve code in the main dovecot source tree. Unfortunately I did not see any other way but to include this library in my patch to make it support checking the uploaded scripts (for now). There are a few alternatives to solve this issue. We could combine de dovecot-sieve plugin with the managesieve patch yielding a single large sieve plugin. However, this would require some means to let the master know about the new managesieve process type. This could be achieved with some more plugin magic. Another way to solve this problem is by truly only excluding the cmu source from the main dovecot tree. If the interface of the sieve implementation is abstracted somehow, one could build a plugin interface for sieve implementations. This sieve interface would be common to dovecot-deliver and the managesieve daemon. This way, it does not matter how the sieve language is implemented (dovecot could even implement its own and still support cmu and others). I saw a hint to this solution in your original dovecot-lda plugin (i.e. sieve-mailutils.c etc), so you must have been playing with this idea as well. I took the liberty to define an example interface for the sieve implementations in the src/lib-sieve directory. It was concieved very quickly and it is far from complete, but it should support the current features of the delivery process. It is only tested for the managesieve putscript verification (no script was ever run though this interface). I am also not quite happy with the error reporting scheme of this interface. This needs more work and if you don't like it you can of course discard it entirely and define your own. Currently, I am also testing other sieve implementations. I am experimenting with libsieve2 (libsieve.sourceforge.net) and with building a wrapper around 'exim -bf'. This last solution is of course not useful for dovecot-lda, but I think the managesieve daemon is not only useful for dovecot itself. Support for these implementations is not yet included in this patch. The patch can be downloaded at: http://sinas.rename-it.nl/~sirius/dovecot-1.0.rc2-MANAGESIEVE-v2.diff.gz (Simply apply it (-p0) to a clean 1.0rc2 source tree and run autogen.sh etc.) For testing, I have tried other client implementations than horde-ingo, but somehow everyone is very focused on the timsieve daemon and they tend to require its protocol specifics. The only other implementation I got working is smartsieve. The others either crashed or produced protocol errors (i.e. sieveshell). I hope I can get more client implementations to work to ensure the incompatibilies are not my fault. I am very eager to know what you think about the sieve implementation ideas and what you think of the new managesieve patch. Regards, -- Stephan Bosch stephan(a)rename-it.nl

2 1