- dovecot - dovecot.org

Re: [Dovecot] dovecot, search and i18n
by Timo Sirainen 20 Jun '06

20 Jun '06

On Tue, 2006-06-20 at 13:19 +0400, Alex Povolotsky wrote: > Timo Sirainen wrote: > > On Tue, 2006-06-20 at 11:45 +0400, Alex Povolotsky wrote: > > > >> Hello! > >> > >> Does dovecot support i18n'd search? > >> > > > > It supports searching with all the character sets that your system's > > iconv supports. Case-insensitive matching unfortunately works only for > > A-Z characters for now. > > > > > Hmm... Attempt to plainly use squirrelmail's search resulted in no > success at all. Imap command was quite plain, > > SEARCH ALL SUBJECT {10}[russian letters here] > > The problem is that Cyrillic has at least two widely used encodings. > Maybe I need to specify them exactly somehow? I don't know much about Squirrelmail configuration, but SEARCH command should specify character set if using non-ascii characters in search string. Otherwise Dovecot will just try to search them from the mails without any charset conversions. So correct way would have been something like: SEARCH CHARSET cyrillic ALL SUBJECT {10} Maybe someone in this list knows more about Squirrelmail..

1 0

[Dovecot] Question about acls
by Stian Jordet 20 Jun '06

20 Jun '06

Hi, Is it possible to have a maildir-folder with an acl letter "i", but not "r"? I mean, the folder always seems empty for the user, but he can copy mail there? (which of course might be readable for another user..) Regards, Stian

2 2

[Dovecot] dovecot, search and i18n
by Alex Povolotsky 20 Jun '06

20 Jun '06

Hello! Does dovecot support i18n'd search? Alex.

2 1

[Dovecot] Shared Folder's, Separate Index's, not 'Working'
by Timothy White 20 Jun '06

20 Jun '06

Looking back through the mail, I found the following from March --- On Thu, 2006-03-23 at 16:15 +0000, Mark Lidstone wrote: > Hi all, > > I was wondering if the above was possible. I know that the "seen" > flag is stored in the filename, but was wondering if anyone knew of a > way to separate it out? I know this would strictly-speaking break > maildir compatibility, but it would be extremely useful for shared > folders. The way this worked at one point was by making each user have separate index file for the mailbox, then keeping the \Seen flag only inside that index file and ignoring the maildir's seen flag completely. Then I rewrote the maildir syncing code and this part was dropped out. Probably wouldn't be too difficult to make it work again.. Yea, looks like it wasn't. Works now in CVS. --- I'm trying to do a similar thing now, but without 100% luck. I have the following namespaces defined namespace public { separator = / prefix = Public/ location = maildir:/var/mail/scouts/public:CONTROL=/var/mail/scouts/%1n/%n/shared-settings/public/control:INDEX=/var/mail/scouts/%1n/%n/shared-settings/public/index hidden = no } namespace public { separator = / prefix = Official/ location = maildir:/var/mail/scouts/official::INDEX=/var/mail/scouts/%1n/%n/shared-settings/official/index hidden = no } Even though I have separate INDEX's for the second public namespace, the SEEN flag doesn't seem to be picked up from the users' INDEX's. BUT, for the first namespace, when I have CONTROL defined as well, it IS picked up! The reason I don't want CONTROL defined for the second name space, is I discovered that I can force all users on the system, to be subscribed to mailboxes in the 'Official' name space, if I keep CONTROL with the mailbox, instead of separate, and ensure that once I have set up the subscriptions file, I ensure it can't be changed. The counter side of this 'subscriptions' hack, is that I can't do hidden=yes. Ideally, I want a method of forcing a subscription on every user, that they can't change, but still preserving the SEEN flag. The closest I have come to, is, separate CONTROL, INDEX, and hidden=yes. This requires though, that I use the SquirrelMail forced subscriptions extension, which I've not yet tested. The other idea I had, was a method for having subscriptions come out of a database, seeing as I already have a large block of user data in the SQL database, and if I could have subscriptions in there as well, that would be a huge bonus! (Even better if it was only for the namespaces I wanted, cause I don't need to put each users personal subscriptions in a database). Anyway, it's mainly ideas, other than the SEEN flag issue I described above. Hope someone has ideas for getting it to work. Tim -- Linux Counter user #273956

1 0

[Dovecot] About RH patches and 1.0beta8
by Oliver Schulze L. 20 Jun '06

20 Jun '06

Hi, I just started building dovecot 1.0beta8 on RHEL4.3 based on atrpm.net .spec file. I noted that 3 patches are included in the .src.rpm and wanted to discuss them. I'm interested in knowing if those patches are relevant to all dovecot users and if they can be applied to dovecot. From: http://dl.atrpms.net/all/dovecot-1.0-0_10.99.beta7.el4.at.src.rpm patch: dovecot-1.0.beta2-mkcert-permissions.patch calls 'chown root.root', is good to have the certs owned by root? patch: dovecot-1.0.beta2-pam-setcred.patch is dissables the call to pam_setcred() because there is no other call to pam_setcred() in order to release the resources patch: dovecot-1.0.beta2-pam-tty.patch it add a call to pam_set_item() I don't to attach the patches to the list, but I can if anyone could not extract them from the .src.rpm Many thanks Oliver -- Oliver Schulze L. <oliver(a)samera.com.py>

5 5

[Dovecot] "GETQUOTA" Working?
by richs＠whidbey.net 20 Jun '06

20 Jun '06

Using beta9, I've tried "quota = dirsize:storage=10240" and "quota = maildir:storage=10240", but I can't seem to get the IMAP commands to respond: * OK Dovecot ready. a LOGIN user pass a OK Logged in. b CAPABILITY * CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS b OK Capability completed. c GETQUOTAROOT INBOX c BAD Error in IMAP command GETQUOTAROOT: Unknown command. d GETQUOTA "" d BAD Error in IMAP command GETQUOTA: Unknown command. e LOGOUT * BYE Logging out e OK Logout completed. (Per http://www.faqs.org/rfcs/rfc2087.html) Apparently "QUOTA" isn't being advertised, and none of the commands are accepted. Any ideas? Rich

1 1

[Dovecot] 1.0.beta9 released
by Timo Sirainen 19 Jun '06

19 Jun '06

Fixes a lot of bugs. The next release will be the first "release candidate" instead of a beta. * PAM: Don't call pam_setcred() unless setcred=yes PAM passdb argument was given. * Moved around settings in dovecot-example.conf to be in more logical groups. + Local delivery agent (deliver binary) works again. + LDAP: Added support for SASL binding. Patch by Geert Jansen + ssl_verify_client_cert: Check CRLs. If auth_verbose=yes, log invalid sent certificates. If verbose_ssl=yes, log even the valid certificates. When using the username from the certificate, use CommonName. Based on patch by HenkJan Wolthuis + PAM: Set PAM_TTY which is needed by some PAM plugins + dovecot --exec-mail ext <binary path> can now be used to start binaries which want dovecot.conf to be read, for example the convert-tool. - Expunging needed to be done twice if client used STORE +FLAGS.SILENT command to set the \Deleted flags - Added sql_escape_string() to lib-sql API and use it instead of normal \-escaping. - ACL plugin fixes - DIGEST-MD5: Trying to use subsequent authentication crashed dovecot-auth. - Fetching BODY when BODYSTRUCTURE was already cached caused the reply to be broken in some cases - Lots of fixes for index file handling - dbox fixes and changes - mbox syncing broke if some extraneous/broken headers were removed (eg. extra X-IMAPbase headers in mails) - Running Dovecot from inetd work now properly with POP3 - Quota plugin fixes for calculating the quota correctly

8 13

[Dovecot] Help! Uidlist files are gone and won't come back; imap keeps coredumping!
by Mario Nigrovic-rvvk40 19 Jun '06

19 Jun '06

Folks - Some time ago as I migrated to dovecot 1.0, I ran into all sorts of problems with file locks, and I tried various solutions. Apparently, in the process, I got a bit careless and removed all my dovecot-uidlist files. They're gone. My understanding, however, is that they should come back, but this doesn't happen. I've been forced to run with index=MEMORY in 1.0 for the entire time I've been using it, but I would really like to get back to a more standard configuration. Yet, anything I do to try and actually use index files, whether (locally) on /var or (via NFS) in /home, I run into problems. The log files say: dovecot: Jun 01 07:36:36 Info: imap-login: Login: user=<rvvk40>, method=plain, rip=10.69.75.131, lip=172.16.26.151 dovecot: Jun 01 07:36:36 Info: IMAP(rvvk40): Effective uid=10019173, gid=21 dovecot: Jun 01 07:36:36 Info: IMAP(rvvk40): maildir: data=/home/mario/.mail/Maildir dovecot: Jun 01 07:36:36 Info: IMAP(rvvk40): maildir: root=/home/mario/.mail/Maildir, index=/home/mario/.mail/Maildir, control=, inbox= dovecot: Jun 01 07:36:36 Error: child 21207 (imap) killed with signal 11 dovecot: Jun 01 07:36:36 Error: child 21208 (imap) killed with signal 11 dovecot: Jun 01 07:36:36 Error: child 21211 (imap) killed with signal 11 dovecot: Jun 01 07:36:36 Error: child 21212 (imap) killed with signal 11 and a truss says: 29146: execve("/home/mario/tools/SunOS/libexec/dovecot/imap", 0x000407D8, 0x00052850) argc = 1 29146: argv: imap ... 29146: write(1, " * 1 2 4 5 F E T C H".., 2091) = 2091 29146: write(1, " * 1 2 9 5 F E T C H".., 2059) = 2059 29146: write(1, " * 1 3 4 6 F E T C H".., 2056) = 2056 29146: poll(0x000AEC90, 3, 9912) = 1 29146: read(0, " 4 U I D f e t c h ".., 4037) = 173 29146: open64("/home/mario/.mail/Maildir/.Freescale.ATIC.CMOS65/dovecot-uidlist", O_RDONLY) Err#2 ENOENT 29146: Incurred fault #6, FLTBOUNDS %pc = 0xFF133218 29146: siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000 29146: Received signal #11, SIGSEGV [default] 29146: siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000 29146: *** process killed *** Some background info: dovecot is running only for me, so it runs under my UID, from my home directory. % tools/SunOS/sbin/dovecot --version 1.0.beta8 % tools/SunOS/sbin/dovecot --build-options Build options: ioloop=poll openssl Passdb: checkpassword pam passwd passwd-file shadow Userdb: checkpassword passwd passwd-file static % uname -a SunOS velocity 5.8 Generic_117350-06 sun4u sparc What do I have to do to recreate the uidlist files? Mario -- I don't need a name; my number's just fine. | Mario.Nigrovic(a)freescale.com It's nobody else's -- just mine, all mine. | 480-413-3578 Internal Use Only

4 17

[Dovecot] beta8 + mbox + Thunderbird
by Thomas Hummel 19 Jun '06

19 Jun '06

Hi all, I'm still using beta8 (on FreeBSD 5.4-RELEASE). Recently I put a co-worker who's using Thunderbird (1.5.0.4) on it and he seemed to have lost some messages (which were delivered on the spool since seen on procmail logfile). I switched him on another server to play safe and tried to test it myself but failed to reproduce the issue. I myself use mutt on a daily basis with no problem with that beta8. Did someone experienced the same (I read about some similar issue on the list but with maildir format - I'm using mbox) ? -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

3 4

RE: [Dovecot] MS Exchange SMTP Login problem
by Xavier Romero 19 Jun '06

19 Jun '06

Ok, patched and working perfectly !! Thank you!!! Xavier Romero. -----Mensaje original----- De: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] En nombre de Timo Sirainen Enviado el: lunes, 19 de junio de 2006 12:49 Para: Xavier Romero CC: dovecot(a)dovecot.org Asunto: Re: [Dovecot] MS Exchange SMTP Login problem On Mon, 2006-06-19 at 12:43 +0200, Xavier Romero wrote: > But it seems that the way Exchange talks to our server, dovecot gets > confused, and password is used instead username for user lookups, so > authentication fails. Fixed in next version, or use a patch: http://dovecot.org/list/dovecot-cvs/2006-June/005765.html

1 0

[Dovecot] MS Exchange SMTP Login problem
by Xavier Romero 19 Jun '06

19 Jun '06

Hello, I'm using dovecot & postfix to bring smtp auth to our customers. Normal mail clients have no problem at all and I'm so satisfied. However, we're having problems with Microsoft Exchange server clients. We're using our postfix-dovecot server as smarhost for several Exchange Servers, and we wish to use TLS + basic authentication for these outgoing mails. But it seems that the way Exchange talks to our server, dovecot gets confused, and password is used instead username for user lookups, so authentication fails. Info: auth(default_with_listener): client in: AUTH 5 login service=smtp resp=bXlfdXNlcm5hbWU= //(resp=my_username) Info: auth(default_with_listener): client out: CONT 5 VXNlcm5hbWU6 //(Username:) Info: auth(default_with_listener): client in: CONT 5 bXlfcGFzc3dvcmQ= //(my_password) Info: auth(default_with_listener): client out: CONT 5 UGFzc3dvcmQ6 //(Password:) Info: auth(default_with_listener): client in: CONT 5 bXlfcGFzc3dvcmQ= //(my_password) Info: auth(default_with_listener): sql(my_user): query: SELECT user, password FROM users WHERE user = 'my_password' Info: auth(default_with_listener): sql(my_user): unknown user Info: auth(default_with_listener): client out: FAIL 5 user=my_password Any clue if there is a way to make it work, either modifiying Exchange or dovecot settings? Thank you very much! Xavier Romero.

2 1

Re: [Dovecot] Problem with Dovecot LDA / Postfix
by Dominique Feyer 19 Jun '06

19 Jun '06

Thanks. The log is really useful ;-) **** deliver(info(a)lda.net4all.ch): Fatal: Running as root isn't permitted **** So it's not possible acutally to use LDA to deliver mail with different UID/GID So I need the change all the owner for my mail storage ... update the DB and restart the service ... it's bad !!! I need a lots of downtime to change the owner of 80Go data storage. So beafore that, I need to test the dovecot-sieve plugin from CVS. Next month a lot of my customer are in holiday and the need auto responders ;-) I try the dovecot-sieve plugin from the CVS and I have this error when i start make (configure as no error): libsieve.a(script.o)(.text+0xa23): In function `sieve_script_load': /usr/src/dovecot-sieve/src/libsieve/script.c:435: undefined reference to `map_refresh' libsieve.a(script.o)(.text+0xaf0): In function `sieve_script_unload': /usr/src/dovecot-sieve/src/libsieve/script.c:462: undefined reference to `map_free' libsieve.a(sieve.o)(.text+0x1e6e): In function `verify_flag': /usr/src/dovecot-sieve/src/libsieve/sieve.y:951: undefined reference to `imparse_isatom' collect2: ld returned 1 exit status make[3]: *** [sievec] Erreur 1 make[3]: Leaving directory `/usr/src/dovecot-sieve/src/libsieve' make[2]: *** [all-recursive] Erreur 1 make[2]: Leaving directory `/usr/src/dovecot-sieve/src' make[1]: *** [all-recursive] Erreur 1 make[1]: Leaving directory `/usr/src/dovecot-sieve' make: *** [all-recursive-am] Erreur 2 I have the same error last week when I try to build dovecot-lda with sieve script support from the CVS. I use Debian Sarge. I think the macro imparse_isatom is from the cyrus-imapd project. I try to install cyrus-dec and cyrus21-dev with apt-get ... but always the same error. Do you have a idea ? Le vendredi 16 juin 2006 à 10:44 -0400, My BSD a écrit : > On Fri, 16 Jun 2006 14:44:51 +0200 > Dominique Feyer <dfeyer(a)net4all.ch> wrote: > > > I have only postfix log (in syslog mail facility), no dovecot log from > > the LDA deliver binary (with mail_debug = yes), this is strange ... > > > > Jun 16 14:37:58 mail2 postfix/pickup[6014]: 5407F7FF3: uid=0 > > from=<root> Jun 16 14:37:58 mail2 postfix/cleanup[6073]: 5407F7FF3: > > message-id=<20060616123758.5407F7FF3(a)mail2.clm.net4all.ch> > > Jun 16 14:37:58 mail2 postfix/qmgr[6015]: 5407F7FF3: > > from=<root(a)localhost.localdomain>, size=326, nrcpt=1 (queue active) > > Jun 16 14:37:58 mail2 postfix/pipe[6076]: 5407F7FF3: > > to=<info(a)lda.net4all.ch>, relay=dovecot, delay=0, status=bounced > > (Command died with status 89: > > "/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver") > > > > Can i activate log for the LDA in the configuration file or deliver > > command argument in master.cf ? > > > ... > > My dovecot setup logs to a file, settings below: > > ---------------------------------------------- > mail_debug = yes > log_path = /var/log/dovecot/dovecot > info_log_path = /var/log/dovecot/dovecot.info > ---------------------------------------------- > > Make sure that the socket user has write access to the file, otherwise > it won't work (and thinking of it, also make sure that the socket user > also has access to the socket itself -- that was one of my biggest > problems before I got it to work). > > You may also want to add the following until you get it working: > > ---------------------------------------------- > auth_verbose = yes > auth_debug = yes > auth_debug_passwords = yes > ---------------------------------------------- > > Good luck! > -- Dominique Feyer Administrateur Système Ch. de la Colline 5bis CH-1007 Lausanne dfeyer(a)net4all.ch

3 4

[Dovecot] Problem with default_mail_env in beta9
by Andreas Schulze 19 Jun '06

19 Jun '06

Hallo, I am playing arround with dovecot I hat version 1.0.beta7 running fine. After installing beta9 there is a problem with default_mail_env setting. I have all users in ldap. there is an attribute "mailMessageStore" which contains a relative path to users maildir mailMessageStore: sca/ my mailer completes this relative pathinformation to /var/mail/sca/ therefor I setup default_mail_env to "maildir:/var/mail/%h" dovecot-ldap.conf includes "user_attrs = mailMessageStore=home,uidNumber=uid,gidNumber=gid" all fine in beta7 in beta9 I got this in my log: dovecot: Jun 16 14:50:22 Info: Dovecot v1.0.beta9 starting up dovecot: Jun 16 14:50:30 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=127.0.0.1 rip=127.0.0.1 resp=random dovecot: Jun 16 14:50:30 Info: auth(default): ldap(sca,127.0.0.1): bind search: base=o=datev,c=de filter=(uid=sca) dovecot: Jun 16 14:50:30 Info: auth(default): client out: OK 1 user=sca dovecot: Jun 16 14:50:30 Info: auth(default): master in: REQUEST 1 30400 1 dovecot: Jun 16 14:50:30 Info: auth(default): ldap(sca,127.0.0.1): base=o=datev,c=de scope=subtree filter=(uid=sca) fields=mailMessageStore,uidNumber,gidNumber dovecot: Jun 16 14:50:30 Info: auth(default): master out: USER 1 t02985a home=sca/ uid=30014 gid=30007 dovecot: Jun 16 14:50:30 Info: pop3-login: Login: user=<sca>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1 dovecot: Jun 16 14:50:30 Error: POP3(sca): dovecot: Jun 16 14:50:30 Fatal: chdir(sca/) failed with uid 30014: Permission denied dovecot: Jun 16 14:50:30 Error: child 30407 (pop3) returned error 89 If I change user_attrs to "user_attrs = mailMessageStore=FOO,uidNumber=uid,gidNumber=gid" I got dovecot: Jun 16 14:54:36 Info: Dovecot v1.0.beta9 starting up dovecot: Jun 16 14:54:41 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=127.0.0.1 rip=127.0.0.1 resp=random dovecot: Jun 16 14:54:41 Info: auth(default): ldap(sca,127.0.0.1): bind search: base=o=datev,c=de filter=(uid=sca) dovecot: Jun 16 14:54:41 Info: auth(default): client out: OK 1 user=sca dovecot: Jun 16 14:54:41 Info: auth(default): master in: REQUEST 1 30475 1 dovecot: Jun 16 14:54:41 Info: auth(default): ldap(sca,127.0.0.1): base=o=datev,c=de scope=subtree filter=(uid=sca) fields=mailmessagestore,uidNumber,gidNumber dovecot: Jun 16 14:54:41 Info: auth(default): master out: USER 1 sca uid=30014 gid=30007 dovecot: Jun 16 14:54:41 Info: pop3-login: Login: user=<sca>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1 dovecot: Jun 16 14:54:41 Info: POP3(sca): Effective uid=30014, gid=30007 dovecot: Jun 16 14:54:41 Info: POP3(sca): maildir: data=/var/mail//HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB dovecot: Jun 16 14:54:41 Info: POP3(sca): maildir: root=/var/mail//HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB, index=/var/mail//HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB, control=, inbox= this inicates to me, that 1. homedirvariable is unset OK, because I assigned mailMessageStore to local FOO 2. default_mail_env is correct evaluated to maildir:/var/mail/%h Question: Why is default_mail_env not correct evalueted to maildir:/var/mail/sca/ if sca/ is set as homedir ? As mentions above, this worked fine with beta7 ... What do I wrong ??? My I provide more Informations ? -- Andreas Schulze DATEV eG, Paumgartner Strasse 6-14, D - 90429 Nürnberg Abt. Internet- und Securitydienste Telefon : +49 911 276 2648 Telefax : +49 911 276 7892 Mobil : +49 172 8122883 E-Mail : andreas.schulze_at_datev.de

2 3

[Dovecot] building dovecot lda on solaris 9
by lenny＠edpausa.com 18 Jun '06

18 Jun '06

Trying to build the latest CVS code of LDA against dovecot beta 9. Running autogen script I'm getting this message. I added the contents of /usr/local/share/aclocal/ to /usr/local/share/libtool/libltdl/aclocal.m4 #aclocaldir = /usr/local/share/aclocal/ aclocal_DATA = libmcrypt.m4 libtool.m4 ltdl.m4 but no luck. any advise ? /usr/local/share/aclocal/libmcrypt.m4:17: warning: underquoted definition of AM_PATH_LIBMCRYPT run info '(automake)Extending aclocal' or see http://sources.redhat.com/automake/automake.html#Extending-aclocal autom4te: unknown language: Autoconf-without-aclocal-m4 aclocal: autom4te failed with exit status: 1 autoheader: `lda-config.h.in' is unchanged You should add the contents of `/usr/local/share/aclocal/libtool.m4' to `aclocal.m4'. configure.in: no proper invocation of AM_INIT_AUTOMAKE was found. configure.in: You should verify that configure.in invokes AM_INIT_AUTOMAKE, configure.in: that aclocal.m4 is present in the top-level directory, configure.in: and that aclocal.m4 was recently regenerated (using aclocal). /usr/local/share/automake-1.9/am/depend2.am: am__fastdepCC does not appear in AM_CONDITIONAL /usr/local/share/automake-1.9/am/depend2.am: AMDEP does not appear in AM_CONDITIONAL src/libsieve/Makefile.am:5: library used but `RANLIB' is undefined src/libsieve/Makefile.am:5: src/libsieve/Makefile.am:5: The usual way to define `RANLIB' is to add `AC_PROG_RANLIB' src/libsieve/Makefile.am:5: to `configure.in' and run `autoconf' again. /usr/local/share/automake-1.9/am/depend2.am: am__fastdepCC does not appear in AM_CONDITIONAL /usr/local/share/automake-1.9/am/depend2.am: AMDEP does not appear in AM_CONDITIONAL

3 4

[Dovecot] LDA - Return-Path missing
by Timothy White 18 Jun '06

18 Jun '06

I seem to have a problem... Deliver relies on Return-Path headers? I tried sending emails from SquirrelMail, and Gmail, and both have caused the same issue (on the recieving end). (I am trying to test this part, the quota exceeded stuff). deliver(joeblogs): Return-Path missing, rejection reason: Quota exceeded I can post email headers, and stuff if needed. Does it need the Return-Path header, shouldn't it rely on the From address, if there is no Return-Path? Tim -- Linux Counter user #273956

2 1

[Dovecot] Dovecot randomly stops responding
by Miguel Saturnino 18 Jun '06

18 Jun '06

Hi! I'm running Dovecot 1.0beta7 on FreeBSD 6.0 (i386) and it randomly stops responding. To mitigate the problem I made a little ruby scripts which logs in to the POP3 server every 3 minutes and, in case of error (the errors are usually timeout or end of file errors), restarts Dovecot. Although this keeps this keeps things working, I'd like to figure out what is causing Dovecot to stop responding. Looking at the logs, nothing stands out except that there is always one or more of these messages just before Dovecot stops responding: Apr 20 19:25:00 zeus dovecot[62881]: pop3-login: Disconnected: Inactivity: rip=209.123.xxx.xxx, lip=64.21.xxx.xxx Any help debugging this would be greatly appreciated. Thanks, -- Miguel Saturnino <miguel.saturnino(a)teiadigital.pt>

2 3

[Dovecot] Maildir++ implementation issues.
by Apps Lists 18 Jun '06

18 Jun '06

Hi Timo and crew! I'm doing more testing with Dovecot and Maildrop today and have run across some strangeness. It appears as if Maildrop stores updates to the maildirquota file in a way that causes Dovecot to ignore them. In my test scenario, Dovecot just rebuilt my maildirsize file to the following: 0S 86213796 108 After delivering a few messages through Postfix -> Maildrop and have the following maildirsize file: 0S 86213796 108 5102 1 387708 1 5093 1 382406 1 3550 1 268337 1 Note the pretty formatting. These are spaces. Unfortunately, Dovecot seems to ignore these when reading the maildirsize file in maildirsize_parse(). It appears to be using sscanf to look for numeric entries: if (sscanf(*lines, "%lld %d", &bytes_diff, &count_diff) != 2) I've read and re-read the maildir++ specification at http://www.inter7.com/courierimap/README.maildirquota.html and can't understand why Maildrop implements things this way. Steve

2 1

[Dovecot] asserts and cores in beta3
by Jeff A. Earickson 18 Jun '06

18 Jun '06

My setup: Solaris 9, built with gcc 4.0.2 (I now have gcc 4.1 installed on my system, but have not rebuilt dovecot). A couple of asserts and cores in the last few days: Mar 1 09:25:13 emerald dovecot: [ID 107833 mail.error] imap(tmwillia): file mbox-sync.c: line 1471 (mbox_sync_do): assertion failed: (!sync_ctx->mbox->mbox_sync_dirty || (flags & MBOX_SYNC_UNDIRTY) == 0) Mar 1 09:58:44 emerald dovecot: [ID 107833 mail.error] imap(eewilson): file mbox-sync.c: line 1471 (mbox_sync_do): assertion failed: (!sync_ctx->mbox->mbox_sync_dirty || (flags & MBOX_SYNC_UNDIRTY) == 0) Mar 3 16:18:54 emerald dovecot: [ID 107833 mail.error] imap(tmwillia): file mbox-sync.c: line 1471 (mbox_sync_do): assertion failed: (!sync_ctx->mbox->mbox_sync_dirty || (flags & MBOX_SYNC_UNDIRTY) == 0) Backtraces from the two cores in hand are attached. I can do further poking at the cores if that would help. Jeff Earickson Colby College

2 2

[Dovecot] 1.0 beta3 not preserving X-Keyword header?
by Gregory K. Ruiz-Ade 18 Jun '06

18 Jun '06

We've been putting 1.0 Beta 3 through the paces on our test system, and one of our users pointed out to me that Thunderbird's "labels" behave strangely on the new server. In fact, there used to be a header added to the message via IMAP when Thunderbird placed a label on a message, but as of the switch from 0.99.11 to 1.0beta3, this label header is no longer placed in the message. Specifically, Thunderbird adds the "X-Keyword: $LabelN" header when you add a label to the message in tbird, where "N" is [1-9]. This works on dovecot 0.99.11 (RHEL4), but not on 1.0beta3. 1.0b3 doesn't seem to add this header at all, but rather seems to keep this information somewhere else. Perhaps in the .imap indexes? We're using mbox stores on the server. This was tested with both Thunderbird 1.0.7 (most widely deployed) and Thunderbird 1.5. Aditionally, we've found that if the .imap index directories are removed, all the Thunderbird labels on messages seem to get "confused", too. I.e., if the user uses multiple machines throughout the day, changes in one client may not be reflected in another, when the user moves to a different system. I'm still trying to get more details from the users, but have been doing preliminary testing that verifies this. One of the users complaining about this is my manager, who makes extensive use of Thunderbird's "Label" feature, so he's a bit nervous. :\ Another thing we've noticed is the potential for bad behavior if a use switches from the old dovecot to the new dovecot, which seems to be resolved if the .imap indexes are removed... Let me know what other information is needed, and I'll do my best to collect it. Gregory -- Gregory K. Ruiz-Ade Sr. Systems Administrator Computer Science and Engineering University of California, San Diego Office: EBU3b 1216 Phone: (858) 822-2625 E-mail: gkra(a)ucsd.edu

4 10

[Dovecot] RHEL 3 and quota problems...
by alan premselaar 18 Jun '06

18 Jun '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've just installed 1.0beta9 on my RHEL 3 system and am still getting the problems with the quota-fs returning "invalid argument". I think i've traced the problem down to differences in the quota versions based on the <sys/quota.h> files on RHEL 3 compared to FC3. on the system itself i'm using v2 quotas (with aquota.user and aquota.group files) however a diff of sysquota.h (copied from FC3 /usr/include/sys/quota.h) and <sys/quota.h> produces only the following: diff -u sysquota.h /usr/include/sys/quota.h - --- sysquota.h 2006-06-16 23:48:03.000000000 +0900 +++ /usr/include/sys/quota.h 2005-11-22 21:57:15.000000000 +0900 @@ -31,7 +31,7 @@ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. * - - * Version: $Id: quota.h,v 1.7.6.1 2005/07/18 02:07:37 roland Exp $ + * Version: $Id: quota.h,v 1.7 1999/10/19 03:05:21 drepper Exp $ */ #ifndef _SYS_QUOTA_H @@ -42,10 +42,10 @@ /* * Select between different incompatible quota versions. - - * Default to the version used by Linux kernel version 2.4.22 - - * or later. */ + * Default to the version used by Linux kernel version 2.4.21 + * or earlier (in RHEL version 1 is AS2.1, version 2 is RHEL3 and later). */ #ifndef _LINUX_QUOTA_VERSION - -# define _LINUX_QUOTA_VERSION 2 +# define _LINUX_QUOTA_VERSION 1 #endif /* if I edit the quota-fs.h file to load "sysquota.h" instead of <sys/quota.h> for the linux quotas, it won't compile. (i tried this instead of editing system header files directly) so I suspect the problem lies deeper than just the _LINUX_QUOTA_VERSION number being set incorrectly. incidently, the error I get compiling is this: quota-fs.c: In function `fs_quota_get_resource': quota-fs.c:214: structure has no member named `dqb_curblocks' make: *** [quota-fs.lo] Error 1 I haven't done any C programming in more than 20 years so I think I'm pushing the boundaries of my capabilities here, but I'm hoping this might just be enough information to help someone more qualified easily fix the problem and allow me to start using the FS based quota plugins to dovecot on my mail server. here are some details of my system if they're useful: # uname -a Linux <hostname_goes_here> 2.4.21-40.ELsmp #1 SMP Thu Feb 2 22:22:39 EST 2006 i686 i686 i386 GNU/Linux # more /etc/redhat-release Red Hat Enterprise Linux ES release 3 (Taroon Update 7) Thanks, Alan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEkshYE2gsBSKjZHQRAgrZAJ0cbZjSuPLV0T8C432EniCrkNw6tACgwKkz UZiSXsgXRb8w1Cc1XXXHWXs= =3CGX -----END PGP SIGNATURE-----

2 2

[Dovecot] [PATCH] Better detection for ioloop and notify
by Roy Marples 18 Jun '06

18 Jun '06

Hi List! Attached is a patch to configure.in to test that epoll, poll, inotify, kqueue and dnotify actually work. It also attempts to select the best one for you if none specified. This supercedes my previous patch in the re beta9 thread. Hopefully get this in Gentoo's beta9 ebuild soon. Thanks -- Roy Marples <uberlord(a)gentoo.org> Gentoo/Linux Developer (baselayout, networking)

3 3

[Dovecot] Plain and MD5 passwd for the same user?
by M. Fioretti 18 Jun '06

18 Jun '06

Hello, I'm running dovecot 1.0-0_12.beta8. Since I have only a very small number of user on that server, I have their names and password in text files, no databases. imap works both via webmail and via Kmail Is it possible to have, for the same user, a plain unencrypted password when connecting via imap on the local interface (needed, as I understand it, to be squirrelmail compatible) and a DIGEST-MD5 one when connecting via pop3s or imaps remotely? TIA, Marco -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ We are drowning in information but starved for knowledge. -- John Naisbitt, Megatrends

2 1

[Dovecot] Server CommonName mismatch: localhost.localdomain
by M. Fioretti 18 Jun '06

18 Jun '06

Hello, I have seen via google that this very problem was already discussed on this and other lists some months ago, but the archives report no solution. I have dovecot 1.0-0_12.beta8 on Centos 4.3. IMAP works just fine: I can read email from both Squirrelmail via web and Kmail. Now I have created an ssl certificate and I'm trying to use it via pop3. When I launch fetchmail I get the error below. Is it caused by dovecot? If not, where is the problem, on the server or here in my home PC? TIA, Marco marco@polaris:~> fetchmail -vv fetchmail: 6.3.2 querying my.vps.fqdn.name (protocol POP3) at Tue 13 Jun 2006 05:22:50 PM CEST: +poll started fetchmail: Issuer Organization: SomeOrganization fetchmail: Issuer CommonName: localhost.localdomain fetchmail: Server CommonName: localhost.localdomain fetchmail: Server CommonName mismatch: localhost.localdomain != my.vps.fqdn.name fetchmail: my.vps.fqdn.name key fingerprint: 20:93:B4:D8:CB:75:AD:72:F6:00:A8:DC:CE:F2:53:6E fetchmail: my.vps.fqdn.name fingerprints do not match! 23942:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify +failed:s3_clnt.c:894: fetchmail: SSL connection failed. fetchmail: socket error while fetching from remoteuser(a)my.vps.fqdn.name -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ Only boring people ever get bored Anonymous

2 2

[Dovecot] 1.0 beta 9 problems
by Peter Chiu 18 Jun '06

18 Jun '06

Two problems with this new beta not found in beta 8. 1. mbox_from_create error This is the configure string I use, and I paste the make error message below. I have to use "--with-storages=maildir,mbox" to get around the error. ./configure \ --prefix=/opt1/dovecot \ --localstatedir=/var \ --without-shadow \ --without-cyrus-sasl2 \ --without-pop3d \ --without-gssapi \ --disable-ipv6 \ --disable-debug \ --with-storages=maildir \ --with-ssl=openssl mkdir .libs gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o deliver auth-client.o deliver.o duplicate.o mail-send.o smtp-client.o ../lib/mountpoint.o ../lib/str-sanitize.o -Wl,--export-dynamic ../lib-storage/register/libstorage-register.a ../../src/lib-storage/index/maildir/libstorage_maildir.a ../../src/lib-storage/index/libstorage_index.a ../../src/lib-index/libindex.a ../lib-storage/libstorage.a ../lib-storage/subscription-file/libstorage_subscription_file.a ../lib-imap/libimap.a ../lib-mail/libmail.a ../lib-dict/libdict.a ../lib-charset/libcharset.a ../lib/liblib.a deliver.o(.text+0xa28): In function `main': /opt1/source/dovecot-1.0.beta9/src/deliver/deliver.c:301: undefined reference to `mbox_from_create' *** Error code 1 Stop in /opt1/source/dovecot-1.0.beta9/src/deliver. *** Error code 1 Stop in /opt1/source/dovecot-1.0.beta9/src. *** Error code 1 Stop in /opt1/source/dovecot-1.0.beta9. *** Error code 1 Stop in /opt1/source/dovecot-1.0.beta9. 2. I have to specify the following in the dovecot.conf or server wont start as others have pointed out alreay. protocol imap { ssl_listen = *:993 }

2 1

[Dovecot] APPEND command truncates message
by Chris Rodgers 18 Jun '06

18 Jun '06

Hi, I have been debugging a small perl script (see ShowBug2) that I use. In doing so, I think that I may have uncovered a problem with the dovecot IMAP server. Attached are two packet traces for connections to two different IMAP servers. On both servers I run the script: i.e. I login, select a folder, search for messages and append a message. On the fvs5 server (Courier IMAP?), everything works as expected. However, on the dovecot server, the message that is saved into my mailbox has been truncated at the end of the line containing "26". I attach a copy of the saved message in MessageAsOnIMAPServer.txt. I hope that this report might be useful. Please let me know if you require any further information. Chris. * OK [CAPABILITY IMAP4REV1 LOGIN-REFERRALS AUTH=LOGIN] fvs5 IMAP4rev1 2003.339p-cpanel at Tue, 18 Apr 2006 21:50:06 +0000 (GMT) 1 Login "*******" {7} + Ready for argument ******* 1 OK [CAPABILITY IMAP4REV1 IDLE NAMESPACE MAILBOX-REFERRALS BINARY UNSELECT SCAN SORT THREAD=REFERENCES THREAD=ORDEREDSUBJECT MULTIAPPEND] User Rodgers authenticated 2 SELECT IT-Lilac * 0 EXISTS * NO Trying to get mailbox lock from process 32317 * 0 RECENT * OK [UIDVALIDITY 1145396966] UID validity status * OK [UIDNEXT 1] Predicted next UID * FLAGS (\Answered \Flagged \Deleted \Draft \Seen) * OK [PERMANENTFLAGS (\* \Answered \Flagged \Deleted \Draft \Seen)] Permanent flags 2 OK [READ-WRITE] SELECT completed 3 UID SEARCH HEADER Subject "lilac gpg message" * SEARCH 3 OK UID SEARCH completed 4 APPEND IT-Lilac {717} + Ready for argument >From chris(a)rodgers.org.uk Tue Apr 18 21:49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 * 1 EXISTS * 1 RECENT 4 OK APPEND completed 5 LOGOUT * BYE fvs5.freevirtualservers.com IMAP4rev1 server terminating connection 5 OK LOGOUT completed * OK dovecot ready. 1 Login "*******" {8} + OK ******** 1 OK Logged in. 2 SELECT IT-Lilac * FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk Junk) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk Junk \*)] Flags permitted. * 117 EXISTS * 1 RECENT * OK [UNSEEN 116] First unseen. * OK [UIDVALIDITY 1136428693] UIDs valid * OK [UIDNEXT 344] Predicted next UID 2 OK [READ-WRITE] Select completed. 3 UID SEARCH HEADER Subject "lilac gpg message" * SEARCH 3 OK Search completed. 4 APPEND IT-Lilac {717} + OK >From chris(a)rodgers.org.uk Tue Apr 18 21:49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 * 118 EXISTS * 2 RECENT 4 OK Append completed. 5 LOGOUT * BYE Logging out 5 OK Logout completed. >From chris(a)rodgers.org.uk Tue Apr 18 21: 49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test Content-Length: 113 Status: O X-UID: 344 X-Keywords: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 #! /usr/bin/perl use strict; use Mail::IMAPClient; use Term::ReadPassword; # Check that username, password and server have been provided my $Server = "imap.pcl.ox.ac.uk"; my $User = `whoami`; chomp $User; my $Password = read_password('Mail password: '); my $INBOX = "IT-Lilac"; unless ($Server) { die "You must provide a server!"; } unless ($User) { die "You must provide a user!"; } unless ($Password) { die "You must provide a password!"; } print "Connecting to $User\@$Server\n\n"; my $IMAP = Mail::IMAPClient -> new (Server => $Server, User => $User, Password => $Password, Debug => 1) or die "Could not connect to your IMAP server, stopping"; if (!$IMAP->IsAuthenticated()) { die "Could not log in to your IMAP server, stopping"; } $IMAP -> Uid(1); # Use UID's for messages. $IMAP -> select($INBOX); my @msgs = $IMAP -> search("HEADER","Subject","lilac gpg message"); my $MessageBody = <<'EOM'; >From chris(a)rodgers.org.uk Tue Apr 18 21:49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 EOM print "Length is: {" . length($MessageBody) . "}"; $IMAP -> append("IT-Lilac",$MessageBody); # BUG: For some reason, we lose a bit of the message! print "\n"; $IMAP = $IMAP -> disconnect(); exit;

2 1

[Dovecot] Dovecot's as ip/user based login filter?
by Sysadmin 18 Jun '06

18 Jun '06

Hello. I'm facing a problem, I need to give access to internal mailserer for some people only, but can't figure out how to do it. Opening the 993 port for whole word gives access to everyone who have account. Can Dovecot act as login filter or etc for that purpose. Or does anybody have idea how to do it? -- Sysadmin

4 9

[Dovecot] Dovecot not responding to CAPABILITY command
by Ryan Hinton 17 Jun '06

17 Jun '06

Thank you for the patch, my mail server is up and running again. Now I am back to my previous problem: I am not able to log in with Thunderbird. Thunderbird issues the capability command which is not answered by Dovecot. Here is a session transcript using openssl s_client. * OK Dovecot ready. 1 capability * OK Waiting for authentication process to respond.. 2 CAPABILITY * OK Waiting for authentication process to respond.. quit * OK Waiting for authentication process to respond.. QUIT DONE The first time I tried it worked fine. * OK Dovecot ready. 1 capability * CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS AUTH=PLAIN 1 OK Capability completed. QUIT DONE But every other time I tried it failed like the first example. Any suggestions? --- Ryan Hinton iobass(a)email.com

2 1

[Dovecot] Plugin Docs (Trash)
by Timothy White 17 Jun '06

17 Jun '06

I searched, and couldn't find much in the wiki, or the mailing list... What is the trash plugin? How do we use it? I notice that none of the plugins have much documentation, other that bits on the wiki, which is getting out of date. When I get the chance, I'll make sure the wiki quota stuff, is right, and post working examples. Thanks Tim -- Linux Counter user #273956

2 1

[Dovecot] Dovecot+NFS: Copying messages causes failures (possible SIGABRT)
by Tony Kay 16 Jun '06

16 Jun '06

Environment: Dovecot 1.0beta8 Host: 64 bit Red Hat AS4 Linux (2.6.9-34.0.1) Disks: NFS netapp In the case below, the two connections were going through two separate servers sharing disks via an NFS NetApp. Here is the sequence of operations: 1. Open a connection to a folder (say mail/Trash) 2. Open a connection to another folder (say Inbox) 3. Move messages from Inbox to Trash using this sequence on Inbox: uid copy #,# "mail/Trash" uid store #,# +flags (\Deleted) check expunge 4. Next, access open connection to Trash: noop (completes OK, but does not see new messages) ...wait a few seconds... noop (connection drops...no response) Attempt to reconnect: mailbox locked. Will override in 270 seconds. The dovecot logs contain the following for the exact time when the connection drops: dovecot: IMAP(tkay): file mail-index-sync-update.c: line 686 (mail_index_sync_update_index): assertion failed: (view->hdr.messages_count == map->hdr.messages_count) I cannot correlate this to the user/folder, but this message is usually nearby: child 22915 (imap) killed with signal 6 -- Anthony Kay University Computing Center (541) 346-1719 GPG Fingerprint: B0DB D46A 60AF FAE7 A94A 5075 0CB4 4D88 9F4F 7F09 Perfection uncanned Like a beautiful redhead Fresh from her trailer from Spam-Ku : Tranquil Reflections on Luncheon Loaf by John Cho

2 1

[Dovecot] check pass; user unknown in logs
by james edwards 16 Jun '06

16 Jun '06

I am seeing lots of these in my logs and there are often a hundered or so imap/dovecat process running. I am running RC Core3. Can anyone shead some light on how to correct this ? Jun 16 08:38:24 jidmail dovecot(pam_unix)[27653]: check pass; user unknown Jun 16 08:38:24 jidmail dovecot(pam_unix)[27653]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:24 jidmail dovecot(pam_unix)[27657]: check pass; user unknown Jun 16 08:38:24 jidmail dovecot(pam_unix)[27657]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:24 jidmail dovecot(pam_unix)[27658]: check pass; user unknown Jun 16 08:38:24 jidmail dovecot(pam_unix)[27658]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:26 jidmail dovecot(pam_unix)[27684]: check pass; user unknown Jun 16 08:38:26 jidmail dovecot(pam_unix)[27684]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:27 jidmail dovecot(pam_unix)[27690]: check pass; user unknown Jun 16 08:38:27 jidmail dovecot(pam_unix)[27690]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:27 jidmail dovecot(pam_unix)[27693]: check pass; user unknown Jun 16 08:38:27 jidmail dovecot(pam_unix)[27693]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:29 jidmail dovecot(pam_unix)[27712]: check pass; user unknown Jun 16 08:38:29 jidmail dovecot(pam_unix)[27712]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:30 jidmail dovecot(pam_unix)[27713]: check pass; user unknown Jun 16 08:38:30 jidmail dovecot(pam_unix)[27713]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:30 jidmail dovecot(pam_unix)[27716]: check pass; user unknown Jun 16 08:38:30 jidmail dovecot(pam_unix)[27716]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= -- James H. Edwards Network Systems Administrator Judicial Information Division jedwards(a)nmcourts.com

1 0

[Dovecot] Problem with Dovecot LDA / Postfix
by Dominique Feyer 16 Jun '06

16 Jun '06

Our setup is ok with Postfix / Dovecot. I just need to add dovecot LDA. I use the 1.0beta9 LDA Configuration: protocol lda { postmaster_address = postmaster(a)clm.net4all.ch #hostname = #mail_plugins = #mail_plugin_dir = /usr/lib/dovecot/imap #sendmail_path = /usr/lib/sendmail auth_socket_path = /var/run/dovecot/auth-master } auth default-socket { mechanisms = plain login passdb sql { args = /usr/local/dovecot-1.0-beta9/etc/dovecot-pgsql.conf } userdb sql { args = /usr/local/dovecot-1.0-beta8/etc/dovecot-pgsql.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } } user = dovecot count = 1 } Postfix configuration, like the dovecot LDA wiki page Master.cf: dovecot unix - n n - - pipe flags=DRhu user=mail:mail argv=/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver -d ${recipient} Main.cf default_destination_recipient_limit = 1 Log: Jun 15 19:15:43 mail2 postfix/qmgr[4226]: 31FA27FF2: from=<root(a)localhost.localdomain>, size=343, nrcpt=1 (queue active) Jun 15 19:15:43 mail2 dovecot: auth(default-socket): master in: USER^I1^Iinfo(a)lda.net4all.ch^Iservice=deliver Jun 15 19:15:43 mail2 dovecot: auth(default-socket): sql(info(a)lda.net4all.ch): SELECT '/var/spool/mail/'||home AS home, uid, gid FROM users WHERE userid = 'info(a)lda.net4all.ch' Jun 15 19:15:43 mail2 dovecot: auth(default-socket): master out: USER^I1^Iinfo@lda.net4all.ch^Ihome=/var/spool/mail/lda.net4all.ch/mails/info^Iuid=1999^Igid=1999 Jun 15 19:15:43 mail2 dovecot: auth(default-socket): Jun 15 19:15:43 mail2 postfix/pipe[4314]: 31FA27FF2: to=<info(a)lda.net4all.ch>, relay=dovecot, delay=0, status=bounced (Command died with status 89: "/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver") The status 89 is for default error ... so no more informations with this. Permision on deliver is setuid (we use a different UID per domain) mail2:/etc/dovecot# stat /usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver File: `/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver' Size: 2507575 Blocks: 4912 IO Block: 4096 fichier r�gulier Device: 805h/2053d Inode: 65010 Links: 1 Access: (6755/-rwsr-sr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2006-06-15 19:15:43.314434576 +0200 Modify: 2006-06-15 13:46:15.000000000 +0200 Change: 2006-06-15 19:18:32.821665560 +0200 Can anyone help me ? Thanks, -- Dominique Feyer Administrateur Système Ch. de la Colline 5bis CH-1007 Lausanne dfeyer(a)net4all.ch

2 2

Re: [Dovecot] Problem with Dovecot LDA / Postfix
by Dominique Feyer 16 Jun '06

16 Jun '06

I have only postfix log (in syslog mail facility), no dovecot log from the LDA deliver binary (with mail_debug = yes), this is strange ... Jun 16 14:37:58 mail2 postfix/pickup[6014]: 5407F7FF3: uid=0 from=<root> Jun 16 14:37:58 mail2 postfix/cleanup[6073]: 5407F7FF3: message-id=<20060616123758.5407F7FF3(a)mail2.clm.net4all.ch> Jun 16 14:37:58 mail2 postfix/qmgr[6015]: 5407F7FF3: from=<root(a)localhost.localdomain>, size=326, nrcpt=1 (queue active) Jun 16 14:37:58 mail2 postfix/pipe[6076]: 5407F7FF3: to=<info(a)lda.net4all.ch>, relay=dovecot, delay=0, status=bounced (Command died with status 89: "/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver") Can i activate log for the LDA in the configuration file or deliver command argument in master.cf ? Thanks Le vendredi 16 juin 2006 à 08:24 -0400, My BSD a écrit : > On Thu, 15 Jun 2006 19:18:40 +0200 > Dominique Feyer <dfeyer(a)net4all.ch> wrote: > > > Our setup is ok with Postfix / Dovecot. > > > > I just need to add dovecot LDA. > > > > I use the 1.0beta9 > > > > LDA Configuration: > > > > protocol lda { > > postmaster_address = postmaster(a)clm.net4all.ch > > #hostname = > > #mail_plugins = > > #mail_plugin_dir = /usr/lib/dovecot/imap > > #sendmail_path = /usr/lib/sendmail > > auth_socket_path = /var/run/dovecot/auth-master > > } > > auth default-socket { > > mechanisms = plain login > > passdb sql { > > args = /usr/local/dovecot-1.0-beta9/etc/dovecot-pgsql.conf > > } > > userdb sql { > > args = /usr/local/dovecot-1.0-beta8/etc/dovecot-pgsql.conf > > } > > socket listen { > > master { > > path = /var/run/dovecot/auth-master > > mode = 0660 > > user = vmail > > group = mail > > } > > } > > user = dovecot > > count = 1 > > } > > > > Postfix configuration, like the dovecot LDA wiki page > > > > Master.cf: > > dovecot unix - n n - - pipe > > flags=DRhu user=mail:mail > > argv=/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver -d > > ${recipient} > > > > Main.cf > > default_destination_recipient_limit = 1 > > > > Log: > > > > Jun 15 19:15:43 mail2 postfix/qmgr[4226]: 31FA27FF2: > > from=<root(a)localhost.localdomain>, size=343, nrcpt=1 (queue active) > > Jun 15 19:15:43 mail2 dovecot: auth(default-socket): master in: > > USER^I1^Iinfo(a)lda.net4all.ch^Iservice=deliver > > Jun 15 19:15:43 mail2 dovecot: auth(default-socket): > > sql(info(a)lda.net4all.ch): SELECT '/var/spool/mail/'||home AS home, > > uid, gid FROM users WHERE userid = 'info(a)lda.net4all.ch' > > Jun 15 19:15:43 mail2 dovecot: auth(default-socket): master out: > > USER^I1^Iinfo@lda.net4all.ch^Ihome=/var/spool/mail/lda.net4all.ch/mails/info^Iuid=1999^Igid=1999 > > Jun 15 19:15:43 mail2 dovecot: auth(default-socket): > > Jun 15 19:15:43 mail2 postfix/pipe[4314]: 31FA27FF2: > > to=<info(a)lda.net4all.ch>, relay=dovecot, delay=0, status=bounced > > (Command died with status 89: > > "/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver") > > > > The status 89 is for default error ... so no more informations with > > this. > > > > Permision on deliver is setuid (we use a different UID per domain) > > mail2:/etc/dovecot# > > stat /usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver > > File: `/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver' > > Size: 2507575 Blocks: 4912 IO Block: 4096 fichier > > r�gulier > > Device: 805h/2053d Inode: 65010 Links: 1 > > Access: (6755/-rwsr-sr-x) Uid: ( 0/ root) Gid: ( 0/ > > root) Access: 2006-06-15 19:15:43.314434576 +0200 > > Modify: 2006-06-15 13:46:15.000000000 +0200 > > Change: 2006-06-15 19:18:32.821665560 +0200 > > > > Can anyone help me ? Thanks, > > > > -- > > Dominique Feyer > > Administrateur Système > > Ch. de la Colline 5bis > > CH-1007 Lausanne > > dfeyer(a)net4all.ch > > > > > > What are the corresponding "dovecot" log entries? > > (I use exim and was finally able to get "deliver" working by studying > "dovecot" log entries.) > -- Dominique Feyer Administrateur Système Ch. de la Colline 5bis CH-1007 Lausanne dfeyer(a)net4all.ch

1 0

[Dovecot] Broken on upgrade, "Protocol not supported"
by Ryan Hinton 16 Jun '06

16 Jun '06

Hello, and thanks in advance for your help. I was having trouble with dovecot-1.0beta2 after it worked flawlessly since January. Thunderbird was complaining that dovecot was not returning proper mail server capabilities (its log seems to confirm this). I checked the dovecot site and saw a new beta (beta9) with lots of bug fixes, so I downloaded it and installed it. The configure and make ran without incident. Before running 'sudo make install' I stopped the dovecot process with a SIGTERM. I installed and tried to restart the server, but now I get the two following errors: Error: socket() failed: Protocol not supported Fatal: listen(993) failed: Protocol not supported I went back and re-configured without IPv6 support, recompiled, and reinstalled. I even rebooted, but still the same result. Any help is greatly appreciated. I am running OpenBSD 3.5 i386. <time passes...> After some printf's, I found Error: socket() failed: Protocol not supported Error: section 2 port = 993 my_ip.family = 0 so.sin.family = 0 SOCK_STREAM = 1 AF_UNIX = 1 AF_INET = 2 AF_INET6 = 24 Fatal: listen(993) failed: Protocol not supported in function net_listen(...) in src/lib/network.c. My socket programming is a little rusty, but don't we want an address family of AF_INET or AF_INET6? Moving up into src/master/main.c I found set->protocols = imap imaps set->listen_ip.family = 2 set->listen_port = 143 set->ssl_listen_ip.family = 0 set->ssl_listen_port = 993 These print statements start at line 361, right after if (set->ssl_listen_ip.family == 0 && set->ssl_listen == NULL) set->ssl_listen_ip = set->listen_ip; Is there something going wrong in resolve_ip? I'm out of time tonight trying to track this down. Hopefully someone else will have more knowledge to pinpoint the problem. Let me know if I can provide more information. OK, one more tidbit. I hard-coded set->ssl_listen_ip.family to 2 and it seems to work beautifully. My mail server is back up. Why? --- Ryan Hinton iobass(a)email.com

3 2

[Dovecot] LDAP with Active Directory
by B Hatoum 16 Jun '06

16 Jun '06

Hello, I have successfully used dovecot 1.0 Beta 9 to do SASL authentication for postfix using the unix passwd/shadow files. I need to authenticate with a windows 2003 server using active directory. My system does not support PAM (I'm using slackware) so I cannot take that route. I do not need to use dovecot for POP or IMAP at the present time and so I would like to avoid modifying my active directory schema. Dovecot seems to be communicating with the active directory server, however it is sending an authentication failure to postfix: postfix/smtpd[24540]: warning: unknown[XXX.XXX.XXX.X]: SASL LOGIN authentication failed: UxxvcmxxQ6 I don't see any messages in the log from dovecot. Here is my dovecot-ldap.conf: hosts = 192.168.1.2:389 dn = "cn=dovecot,cn=Users,dc=DOM,dc=local" dnpass = "password" auth_bind = yes ldap_version = 3 base = cn=Users,dc=DOM,dc=local deref = never scope = subtree default_pass_scheme = CRYPT user_global_uid = 900 user_global_gid = 900 Can someone point out what I am missing? I can't find documentation on this type of setup. Thanks in advance. B Hatoum

4 3

[Dovecot] fedora directory server
by Alfonso Sparano 16 Jun '06

16 Jun '06

Hi all someone is successful to use fedora directory server as an ldap server for user/password and also with the LDA? I'm testing protocol smtp: sendmail + dovecot lda + fedora directory server and also: protocol pop3 and imap: dovecot + fedora directory server Thanks a lot folks Alfonso

1 0

[Dovecot] Dovecot-auth relicensing to BSD/MIT
by Timo Sirainen 15 Jun '06

15 Jun '06

Bcc'd to everyone who have sent me patches to dovecot-auth or related code. Once in a while people ask me if Dovecot's authentication server code could be relicensed to BSD so they could use it for their project. Usually they have been other BSD-licensed open source projects which just prefer not to use LGPL code. Now there's again this company asking me to give them a bit less restrictive license (they want to link it statically to a closed source program). They'd want to move the code to a separate SASL package and create a library out of it. They want SASL client code too, so they'd apparently write it for the package as well. I've been thinking about separating the dovecot-auth to be a separate package for a while too, although only around the time when Dovecot v2.0 is released (certainly not before v1.0). So, I think changing the Dovecot-auth's license from LGPL to BSD or MIT wouldn't really hurt and it could get it more widely used. Most of Dovecot's lib/ code is already MIT-licensed, so MIT would be more consistent. But I don't think there really is any real difference between BSD and MIT, so either one is fine for me. :) Now, this mail is mostly meant for asking people who have sent me patches to dovecot-auth if they allow the license change for their patch. If not, I'll either rewrite the part of the code, or for larger code parts (eg. NTLM auth) I'll just leave it LGPL licensed but so that it can be compiled out optionally. So, bcc'd people, please reply to me which one of these you're okay with: 1) I allow license change to either BSD or MIT 2) I allow license change to BSD 3) I allow license change to MIT 4) I don't allow license change

2 2

[Dovecot] SASL AUTH LOGIN mechanism problems
by Anders Karlsson 15 Jun '06

15 Jun '06

Hi all, Have anyone had problems with Exhange 2003 servers trying to use sasl against Postfix+Dovecot SASL using the AUTH LOGIN Mechanism ? I've done some smtp debugging, and it seems that Exchange sends the usename at the same time as AUTH LOGIN i.e: AUTH LOGIN <base64_username> It then expects to be able to send the password. mech-login.c silently discards all data after AUTH LOGIN and just prompts the username prompt whetever the username has already been supplied during initial AUTH LOGIN request. I've attached a patch to make mech-login.c check if additional data has been sent along with AUTH LOGIN, and in this case skip ahead directly to the Password: prompt. Cheers Anders

2 1

[Dovecot] nfs, dovecot, and maildirs
by bofh list 15 Jun '06

15 Jun '06

Hello - I know I am not the only one that will be trying, or has tried this before. Here are my questions! NFS Clients, multiple servers running dovecot - linux with 2.6 kernel with relevant patches (utime, etc) Backend - netapp filer End users - various clients all running IMAP It looks like 1.0.beta8 is definately the way to go. I have a few questions with regards to setup. Is it now possible to reliably store index files over nfs? If not, the alternative is keeping index files in memory, or on local disk - on each server. How big of a performance hit is this if imap connections are round-robined between imap servers? I've seen various people using different actimeo settings, some set at 0, some slightly higher - as much as 30. Can anyone speak on experience they have had with netapps on this subject? The following sound like they are required: mmap_disable=yes lock_method=dotlock Has anyone been successful with fnctl() on netapps with dovecot? Thanks in advance!

3 2

[Dovecot] How to open only these dovecot ports?
by M. Fioretti 15 Jun '06

15 Jun '06

Hello, I have not clear, due to the new syntax, how to configure dovecot 1.0 to listen only for the following combinations of ports and services: no pop3, from whatever host accept imap connections only if coming from localhost (since I understand this is secure _and_ the only way to make squirrelmail talk to dovecot) listen on the internet only for imaps and pop3s connections, accept them only if DIGEST-MD5 authentication succeeds. Thanks in advance for any explanation, Marco -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ We shall serve God, family and country, in that order, because without the one before it, each would perish.

2 2

[Dovecot] Error: socket() failed: Protocol not supported ERROR in dovecot-1.0.beta9
by Jeff Gardiner 14 Jun '06

14 Jun '06

I'm trying to get IMAPS working with dovecot-1.0.beta9. I'm building it on a Solaris 10 box, with openssl-0.9.8b installed. Here is the results of my ./configure: Install prefix ...................... : /usr/local/dovecot-1.0.beta9 File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : none Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword (modules) Building with password lookup modules : passwd passwd-file shadow pam checkpassword (modules) Building with SQL drivers ............: I've attached a copy of my dovecot.conf file (striped of comments). When I try running dovecot I get the following error: Error: socket() failed: Protocol not supported Fatal: listen(993) failed: Protocol not supported When I change ssl_disable = no to ssl_disable = yes, everything works. Anyone have any suggestions? Cheers Jeff protocols = imap imaps listen = * disable_plaintext_auth = no log_path = /var/log/dovecot ssl_disable = no ssl_cert_file = /usr/local/ssl/certs/Imaging_Dovecot_cert.pem ssl_key_file = /usr/local/ssl/private/Imaging_Dovecot_key.pem ssl_parameters_regenerate = 168 verbose_ssl = yes default_mail_env = maildir:%h/.email protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth default { mechanisms = plain digest-md5 cram-md5 passdb pam { args = dovecot } userdb passwd { } user = root } plugin { }

5 5

[Dovecot] Problems with dovecot.beta9
by Adnae Mac Uthidir 14 Jun '06

14 Jun '06

Dear all :) I have been upgraded dovecot today and I get following errors: Jun 14 12:08:54 [dovecot] IMAP(adnae(a)xxxxxx.xxx): inotify_init() failed: Function not implemented Jun 14 12:08:54 [dovecot] IMAP(auftrag(a)xxxxxxx.xxx): inotify_init() failed: Function not implemented Jun 14 12:08:54 [dovecot] IMAP(swolf(a)xxxxxx.xxx): inotify_init() failed: Function not implemented I have a 64 bit system (Gentoo [amd64]) and I have enabled this function on my kernel: Kernel: 2.6.16-gentoo-r9: [*] Inotify file change notification support thx for your help :)

1 0

Re: [Dovecot] Quick thanks for wonderful ACLS!
by Gavin Henry 14 Jun '06

14 Jun '06

<quote who="Marc Perkel"> > Looks cute but - why do I want it? What's it good for? I must be missing > something .... > > Well, in a big company, you might not want users to delete any e-mails they have sent out of the company. Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

2 1

[Dovecot] 1.0 roadmap
by Timo Sirainen 14 Jun '06

14 Jun '06

I've read about one month back this list's messages. I've still 216 messages from this year marked as "unread" which I should look into more (+258 older ones). Also I've 180 "unread" messages in my INBOX also which might contain something useful. So those messages could still contain something that should be added to this list. Anyway looking at my current TODO, I think the following things should be fixed before v1.0. Additions, comments, patches and such welcome. :) Help would be welcome in checking if these bugs are still there: - Thunderbird+POP3 DELE error. Was this fixed already? Could someone try this? See http://www.dovecot.org/list/dovecot/2005-June/007497.html and the rest of the thread. Basically put thousands of messages into mailbox, start downloading them and see if error comes. - Solaris sendfile is broken? Is it? Can someone try? You can test it with maildir by setting mail_save_crlf=yes, saving a somewhat large mail and FETCHing it (and truss that it really uses sendfile) - passdb passwd + passdb shadow -> passdb_password isn't reset to NULL (ie. probably doesn't allow logging in if the shadow password is correct?) - maildir: rename foo foo.xyz -> infinite loop possible? (doesn't seem so? why did I think it could be? look at the code) Important: - dict-server should have some config file which lists the allowed dicts - LDA: empty mail gives an error. - deliver: delivering mail to box smaller than mbox_min_index_size give close() errors - mbox: CRLFs in headers break the mbox - index: when mailbox is deleted/renamed and someone else had it open, we get stat() error messages in log file. Handle at least the most common places where it happens. - lib-storage - limit folder hierarchy levels? user can now create eg. a/a/a/a/... and then start renaming them from end to beginning, which probably will at some point start causing syscall failures which will fill up logs. Probably should be done: - mbox: dirty mode should be stored to index - quota code should probably be always doing some quota_set_critical() instead of using mail_storage_set_critical(), so that quota_last_error() would work properly - rfc2557 support for BODYSTRUCTURE, as specified by RFC3501 - keywords: add some limits to how many there can be - don't return \* in PERMANENTFLAGS when we're full - mbox: how well does dirty sync + status work? it reads the last mail every time? not very good.. - maildir: we probably shouldn't do duplicate detection/fixing?.. or at least stat() the old file before trying, because we might have just previously seen the old file and then new file and then we try to fix it..

18 37

[Dovecot] b8 fails with ACL plugin on
by Fintec 14 Jun '06

14 Jun '06

After upgrading to b8 using the ATrpm with the ACL plugin on it fails: # /etc/init.d/dovecot start Starting Dovecot Imap: Edlopen(/usr/lib/dovecot/imap/lib01_acl_plugin.so) failed: /usr/lib/dovecot/imap/lib01_acl_plugin.so: cannot open shared object file: No such file or directory Error: imap dump-capability process returned 22784 [FAILED] Anyone able to help be troubleshoot this? Gavin

1 0

[Dovecot] question about upgrade
by Ivan Arteaga 14 Jun '06

14 Jun '06

HI, First time posting here. can someone do let me know if there is a specific upgrade procedure from 0.99x to 1.x? Any comment will be appreciated. --Ivan.

2 1

Re: [Dovecot] Error: socket() failed: Protocol not supported ERROR
by Marcus Rueckert 14 Jun '06

14 Jun '06

On 2006-06-13 17:20:11 -0700, Jack Bailey wrote: > The bug seems to be in dovecot.conf. Uncomment ssl_listen and set it to * works for me: SuSE Linux 10.0 i386 1.0.beta9 with imap and pop3 enabled with listen and ssl_listen set to either "*" or "[::]". maybe run the process under truss/strace to see which call exactly fails. darix -- openSUSE - SUSE Linux is my linux openSUSE is good for you www.opensuse.org

1 0

[Dovecot] Re: [Dovecot-news] 1.0.beta9 released
by Timo Sirainen 13 Jun '06

13 Jun '06

On Tue, 2006-06-13 at 18:49 +0200, Geert Hendrickx wrote: > On Tue, Jun 13, 2006 at 07:16:50PM +0300, Timo Sirainen wrote: > > Fixes a lot of bugs. The next release will be the first "release > > candidate" instead of a beta. > > Timo, > > thanks for another release. I noticed one thing though: ./configure now > checks for c++ and f77 compilers, even though dovecot doesn't seem to use > any C++ nor Fortran. Could this check be removed again? (unless it's > necessary, of course) I've no idea how to remove them. Autoconf for some reason just wants to add checks for them. I once tried looking into it how they could be removed but couldn't figure out anything. Cc'd the mailing list, maybe someone here knows how to do that?

2 1

[Dovecot] POP3 notice if password expired
by Vaidas Pilkauskas 13 Jun '06

13 Jun '06

Hi, We just migrated our IMAP service to Dovecot and it performs very well. We also want to migrate our POP3 service (qpopper) to Dovecot. The problem is that Dovecot and Qpopper differently act on expired passwords: Qpopper: -ERR "user": password expired. Dovecot: -ERR Authentication failed. Are there any way to tell Dovecot to report about expired passwords? We have about 30000 users and 84 days password lifecycle. "Password expired" notifications highly reduce the number of support calls from our users. Server setup info: Solaris 9 SPARC, PAM authentication. Thanks, Vaidas Pilkauskas Vilnius University

2 3

[Dovecot] ssl-proxy: client certificates and crl check
by HenkJan Wolthuis 13 Jun '06

13 Jun '06

Hi, I've attached a new version of my patch against ssl_proxy-openssl.c which: - disconnects when no clientcertificate is presented - checks the clientcertificate against the crl for our root cert. (so you can't use a revoked client cert.) - returns the CommonName from the client cert. in ssl_proxy_get_peer_name (this way it's easier to use dovecot as imap-proxy with a passwd-like userdb + ssl_require_client_cert + ssl_username_from_cert, it "binds" the emailuser to the clientcertificate, so a user / clientcert. can access only the account from the userdb) In order to use it, the CAfile must be a file which contains the CAcertificate (pem format) followed by the CRL (also in pem format). (servercert and the clientcerts are signed with a self-signed rootcert) changes in this version: - found the proper way to extract the CommonName from a certificate! - code cleanup there are some issues with the patch: - it needs openssl > 0.9.7. the way I do CRL loading/checking is new in 0.9.7. There are some examples on the openssl-devel list, but not much documentation. - ssl_verify_client_cert now returns 0 in case of an invalid cert. was there a reason why it always returned 1? - ssl_proxy_get_peer_name is changed, code depending on this function returning "X509_NAME_oneline" can break.. (at the moment it is only used for the ssl_username_from_cert config option, i think) I'd like comments / ideas etc. -- groeten, HenkJan Wolthuis --- ssl-proxy-openssl.c.orig 2006-04-04 10:32:58.000000000 +0200 +++ ssl-proxy-openssl.c 2006-06-01 09:24:57.000000000 +0200 @@ -498,7 +498,7 @@ const char *ssl_proxy_get_peer_name(struct ssl_proxy *proxy) { X509 *x509; - char buf[1024]; + char buf[256]; const char *name; if (!ssl_proxy_has_valid_client_cert(proxy)) @@ -508,10 +508,16 @@ if (x509 == NULL) return NULL; /* we should have had it.. */ - X509_NAME_oneline(X509_get_subject_name(x509), buf, sizeof(buf)); - name = t_strndup(buf, sizeof(buf)); + /* HJHJ */ + /* the X509_N_gtbN can return -1 without 0-terminating buf */ + /* if the call succeeds buf is 0-terminated (openssl 0.9.7e / 0.9.8b src) */ + buf[0] = '\0'; + if( X509_NAME_get_text_by_NID(X509_get_subject_name(x509),NID_commonName,buf,sizeof(buf)) < 0 ) + { buf[0] = '\0'; } + name = t_strndup(buf, sizeof(buf) ); X509_free(x509); - + /* HJHJ */ + return *name == '\0' ? NULL : name; } @@ -582,10 +588,22 @@ proxy = SSL_get_ex_data(ssl, extdata_index); proxy->cert_received = TRUE; + + /* HJHJ */ + char buf[1024]; + X509_NAME_oneline( X509_get_subject_name(ctx->current_cert),buf,sizeof(buf)); + if (!preverify_ok) + { proxy->cert_broken = TRUE; + i_warning("BAD CERT %s: %s",X509_verify_cert_error_string(ctx->error),buf); + } + else + { i_warning("CERT: %s",buf); } /* logging */ - return 1; + return preverify_ok; + /* HJHJ */ + } static int @@ -666,10 +684,20 @@ if (getenv("SSL_VERIFY_CLIENT_CERT") != NULL) { SSL_CTX_set_verify(ssl_ctx, SSL_VERIFY_PEER | - SSL_VERIFY_CLIENT_ONCE, + SSL_VERIFY_FAIL_IF_NO_PEER_CERT, ssl_verify_client_cert); } + /* HJHJ */ +#if OPENSSL_VERSION_NUMBER >= 0x00907000L + X509_STORE *store; + if( (store=SSL_CTX_get_cert_store(ssl_ctx)) != NULL ) + { X509_STORE_set_flags( store, X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL); } + else + { i_warning("X509 get cert store failed..."); } +#endif + /* HJHJ */ + /* PRNG initialization might want to use /dev/urandom, make sure it does it before chrooting. We might not have enough entropy at the first try, so this function may fail. It's still been

2 5

[Dovecot] Using MySQL to store email?
by Marc Perkel 13 Jun '06

13 Jun '06

So Timo, Have you considered the idea of storing all the email in a MySQL database? Seems to me that MySQL could somplify all the backend stuff that everyone struggles with and with replication one could create very massive and reliable systems. What would it take to use MySQL that way?

26 62