- dovecot - dovecot.org

[Dovecot] No NTLM with PAM after upgrade
by Phil Quesinberry 01 Mar '13

01 Mar '13

After updating From Dovecot 1.07 (included with CentOS 5) to 2.11, NTLM authentication will not work. Attempts to authenticate against Samba version 4.0.4-GIT-20cb7de also fail with 'auth: Info: winbind(?,192.168.2.100): user not authenticated: NT_STATUS_UNSUCCESSFUL', despite the fact that the same user can sign on to the Samba domain and access files. What I'm really trying to understand here though is why version 1.07 would do NTLM with PAM just fine, but later versions I've tried will not. After failing to get later versions to work, I decided to see if I could at least get them to do NTLM by authenticating against a Samba domain but that won't work either. 1.07 did NTLM just fine authenticating against a system user account with PAM, as demonstrated by the following excerpt from the log: dovecot: Feb 06 12:46:59 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 06 12:46:59 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 06 12:47:42 Info: IMAP(pquesinb): Disconnected: Logged out dovecot: Feb 06 12:47:42 Info: IMAP(pquesinb): Disconnected: Logged out dovecot: Feb 06 12:48:03 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 06 12:48:03 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 06 12:48:44 Info: IMAP(pquesinb): Disconnected: Logged out dovecot: Feb 06 12:48:44 Info: IMAP(pquesinb): Disconnected: Logged out Authentication settings for 1.07 were as follows (excerpt from -n output, see below for full output): auth default: mechanisms: ntlm plain passdb: driver: passwd-file args: /etc/dovecot.users passdb: driver: pam args: cache_key=%u dovecot userdb: driver: passwd Since 1.07 was such an old version, I first tried updating to 1.2.17 and lost the ability to do NTLM authentication with the same settings: Feb 06 16:09:32 dovecot: Info: Dovecot v1.2.17 starting up (core dumps disabled) Feb 06 16:09:46 auth(default): Info: password(pquesinb,192.168.2.100): Requested NTLM scheme, but we have a NULL password Feb 06 16:09:53 auth(default): Info: password(pquesinb,192.168.2.100): Requested NTLM scheme, but we have a NULL password Feb 06 16:10:05 imap-login: Info: Disconnected (auth failed, 2 attempts): user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 Feb 06 16:11:54 auth(default): Info: password(pquesinb,192.168.2.100): Requested NTLM scheme, but we have a NULL password Feb 06 16:12:04 auth(default): Info: password(pquesinb,192.168.2.100): Requested NTLM scheme, but we have a NULL password Feb 06 16:12:16 imap-login: Info: Disconnected (auth failed, 2 attempts): user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 Next I decided to try 2.x and since I had installed 1.2.17 from source, I thought it would be wise to install from an RPM which had been "blessed" for CentOS 5, so 2.1.1 was installed from the RPMs linked to on the Dovecot download site: http://dl.atrpms.net/all/dovecot-2.1.1-2_132.el5.x86_64.rpm Still no NTLM authentication with 2.x using PAM, so I decided to try authenticating against the Samba 4 domain using Samba's winbind daemon and ntlm_auth helper. That still doesn't work however, as seen by the following log excerpt but plaintext login which is also enabled, works: Feb 28 23:29:13 auth: Debug: auth client connected (pid=18518) Feb 28 23:29:13 auth: Debug: client in: AUTH 1 NTLM service=imap lip=192.168.2.102 rip=192.168.2.100 lport=143 rport=4531 Feb 28 23:29:15 auth: Debug: client out: FAIL 1 Feb 28 23:29:15 auth: Debug: client in: AUTH 2 PLAIN service=imap lip=192.168.2.102 rip=192.168.2.100 lport=143 rport=4530 resp=AHBxdWVzaW5iAFN0ZXdCMHkv Feb 28 23:29:17 auth: Debug: client out: CONT 1 Feb 28 23:29:17 auth: Debug: client in: CONT 1 TlRMTVxxxxxxxAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw== Feb 28 23:29:17 auth: Error: could not obtain winbind netbios name! Feb 28 23:29:17 auth: Error: could not obtain winbind domain name! Feb 28 23:29:17 auth: Debug: client out: CONT 1 TlRMTVNTUAACAAAAGAAYADgAAAAFxxxxxxxxxSsAAAAAAAAAAIoAigBQAAAABgEAAAAAAA9IAEUA UgBTAEMASABMxxxxxxxxxxUATgACABgASABFAFIAUwBDAEgATABBAFUAUgBFAE4AAQAOAFMARQBS AFYARQBSADEABAAgAGgAZQByAHMAYwBoAGwAYQB1AHIAZQBuAC4AYwBvAG0AAwAwAFMAZQByAHYA ZQByADEALgBoAGUAcgBzAGMAaABsAGEAdQByAGUAbgAuAGMAbwBtAAAAAAA= Feb 28 23:29:17 auth: Debug: client in: CONT 1 TlRMTVNTUAADAAAAGAAYAGoAAAC6ALoAggAAAAAAAABIAAAAEAAQAEgAAAASABIAWAAAAAAAAAAx xxxxxxxKIogUBKAoAAAAPcABxAHUAZQBzAGkAbgBiAFEAUwBFAC0AVwxxxxxxxx+cYeYzU98pxsa 17QyN6VD8kE2RibAjNedd/ooN2y4/uSr/ZQYxxxxxxxxxU1Fs4BjelQ/JBNkYkAAAAAAgAYAEgAR QBSAFMAQwBIAEwAQQBVAFIARQBOAAEADgBTAEUAUgBWAEUAUgAxAAQAIABoAGUAcgBzAGMAaABsA GEAdQBxxxxxxxxxxbwBtAAMAMABTAGUAcgB2AGUAcgAxAC4AaABlAHIAcwBjAGxxxxxxxxxxxxlA G4ALgBjAG8AbQAAAAAAAAAAAA== Feb 28 23:29:17 auth: Info: winbind(?,192.168.2.100): user not authenticated: NT_STATUS_UNSUCCESSFUL Feb 28 23:29:19 auth: Debug: cache(pquesinb,192.168.2.100): miss Feb 28 23:29:19 auth-worker(18524): Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 28 23:29:19 auth: Debug: client out: FAIL 1 Feb 28 23:29:19 auth: Debug: client in: AUTH 2 PLAIN service=imap lip=192.168.2.102 rip=192.168.2.100 lport=143 rport=4531 resp=AHBxdWVzaW5iAFN0ZXdCMHkv Feb 28 23:29:19 auth-worker(18524): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Feb 28 23:29:19 auth-worker(18524): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Feb 28 23:29:19 auth-worker(18524): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 28 23:29:19 auth-worker(18524): Debug: pam(pquesinb,192.168.2.100): lookup service=dovecot Feb 28 23:29:19 auth-worker(18524): Debug: pam(pquesinb,192.168.2.100): #1/1 style=1 msg=Password: Feb 28 23:29:19 auth: Debug: client out: OK 2 user=pquesinb Feb 28 23:29:19 auth: Debug: master in: REQUEST 751435777 18513 2 db445872b80e33772b5f0d35d50af3d1 Feb 28 23:29:19 auth: Debug: userdb-cache(pquesinb,192.168.2.100): miss Feb 28 23:29:19 auth: Debug: passwd(pquesinb,192.168.2.100): lookup Feb 28 23:29:19 auth: Debug: master out: USER 751435777 pquesinb system_groups_user=pquesinb uid=507 gid=508 home=/home/pquesinb Feb 28 23:29:19 imap-login: Info: Login: user=<pquesinb>, method=PLAIN, rip=192.168.2.100, lip=192.168.2.102, mpid=18526 Feb 28 23:29:27 auth: Debug: cache(pquesinb,192.168.2.100): hit: {SHA1}+2ZUmdHOxxxxxxxxxxxxOLinOC0= user=pquesinb user=pquesinb Feb 28 23:29:27 auth: Debug: client out: OK 2 user=pquesinb Feb 28 23:29:27 auth: Debug: master in: REQUEST 3169320961 18518 2 6bd7b4fd283994029394360a2f5b4048 Feb 28 23:29:27 auth: Debug: userdb-cache(pquesinb,192.168.2.100): hit: pquesinb system_groups_user=pquesinb uid=507 gid=508 home=/home/pquesinb Feb 28 23:29:27 auth: Debug: master out: USER 3169320961 pquesinb system_groups_user=pquesinb uid=507 gid=508 home=/home/pquesinb Feb 28 23:29:27 imap-login: Info: Login: user=<pquesinb>, method=PLAIN, rip=192.168.2.100, lip=192.168.2.102, mpid=18531 Feb 28 23:30:00 imap(pquesinb): Info: Disconnected: Logged out in=861 out=31433 Feb 28 23:30:00 imap(pquesinb): Info: Disconnected: Logged out in=120 out=739 Here is the -n output for both 2.11 and 1.07, login/mail executables and plugins are present within the configured paths for both versions: Config output for 2.11: [root@Server1 log]# dovecot -n # 2.1.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-348.1.1.el5.centos.plusxen x86_64 CentOS release 5.9 (Final) auth_cache_size = 16 M auth_debug = yes auth_debug_passwords = yes auth_mechanisms = ntlm plain auth_use_winbind = yes auth_verbose = yes disable_plaintext_auth = no info_log_path = /var/log/dovecot.log listen = * log_path = /var/log/dovecot.log mail_location = maildir:~/Maildir maildir_very_dirty_syncs = yes passdb { args = cache_key=%u dovecot driver = pam } passdb { driver = shadow } protocols = imap pop3 service auth { executable = /usr/libexec/dovecot/auth user = root } service imap-login { client_limit = 256 executable = /usr/libexec/dovecot/imap-login process_limit = 128 user = dovecot vsz_limit = 64 M } service imap { executable = /usr/libexec/dovecot/imap process_limit = 64 } service pop3-login { client_limit = 256 process_limit = 128 user = dovecot vsz_limit = 64 M } service pop3 { process_limit = 64 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol imap { imap_client_workarounds = mail_plugin_dir = /usr/local/lib/dovecot/imap } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugin_dir = /usr/local/lib/dovecot/lda } Here is the config output from the 1.07 version, which worked: [root@Server1 init.d]# dovecot107 -n # 1.0.7: /etc/dovecot.conf login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:~/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: mechanisms: ntlm plain passdb: driver: passwd-file args: /etc/dovecot.users passdb: driver: pam args: cache_key=%u dovecot userdb: driver: passwd I'm fairly new to Dovecot, so if someone out there could at least point me in the right direction in order to help me better understand why things aren't working with the newer versions I would really appreciate it. Many thanks, Phil Quesinberry Q Systems Engineering, Inc. Embedded Systems Hardware/Software Development and VoIP Business Telephone Hosting Improve your business telephone services and save money (410) 969-8002 http://www.qsystemsengineering.com

1 0

[Dovecot] Maildir Control files and quota
by Tabbed Out 01 Mar '13

01 Mar '13

Hello all, the dovecot wiki recommended that the index and control files for maildir be placed on a partition which does not have a quota. I have a VPS which gives me 20 gigs of space. Since space is tight, is there some way to calculate how much space the partition needs for the control and index files? Would 1 gig be sufficient in the long run?

2 1

[Dovecot] postfix, dovecot, samba, winbind
by Denis Witt 01 Mar '13

01 Mar '13

Hello List, we're currently working on the migration of our LDAP/Samba3-Domain to Samba4-Active-Directory. So far everything works fine. Postfix can deliver Mails using ProxyAddresses-Information from the AD and Dovecot delivers the mail. Unfortunately when Postfix tells Dovecot to deliver the mail he submit the username without the AD-Domain part: Feb 28 17:17:59 tpdc postfix/pickup[30396]: 5DDAE2C0C2B: uid=0 from=<root> Feb 28 17:17:59 tpdc postfix/cleanup[30402]: 5DDAE2C0C2B: message-id=<20130228161759.5DDAE2C0C2B(a)mx0.concepts-and-training.de> Feb 28 17:17:59 tpdc postfix/qmgr[30395]: 5DDAE2C0C2B: from=<root(a)concepts-and-training.de>, size=463, nrcpt=1 (queue active) Feb 28 17:17:59 tpdc dovecot: lda(dwitt): msgid=<20130228161759.5DDAE2C0C2B(a)mx0.concepts-and-training.de>: saved mail to INBOX Feb 28 17:17:59 tpdc postfix/local[30404]: 5DDAE2C0C2B: to=<dwitt(a)concepts-and-training.de>, orig_to=<denis.witt(a)cat06.de>, relay=local, delay=0.24, delays=0.1/0.01/0/0.13, dsn=2.0.0, status=sent (delivered to command: /usr/lib/dovecot/deliver) Feb 28 17:17:59 tpdc postfix/qmgr[30395]: 5DDAE2C0C2B: removed So Dovecot saves the Mail to "/var/mail/dwitt/", which is fine for me. The Problem kicks in when I try to read my Mail. Dovecot uses "TESTDOM\dwitt" as username and so he didn't find the Mailbox and create a new one in "/var/mail/TESTDOM\dwitt". I tried to fix it with auth_username_translation and auth_username_format but it doesn't work. Any ideas? Thanks!

2 2

[Dovecot] help needed with dovecot authentication
by peter lawrie 01 Mar '13

01 Mar '13

Hi I have been asked to configure an dedicated rhel6 server for a customer. I did not realise when I took this on how complicated it was going to be! The purpose of the server is to host a group of websites for small businesses. It came with postfix-2.6.6-2.2 dovecot-2.0.9 and mysql-2.1.67-1 I have installed virtualmin 3.98, usermin1.540-1 and horde 5 About a dozen currently inactive websites have been set up, mail is in /home/<domain>/Maildir My problem is that I can telnet to postfix to send and receive emails and can see these within postfix in webmin I have been having many problems getting dovecot to connect successfully to postfix. I have also installed horde 5 which requires to authenticate to an imap server - that is dovecot. This one server is intended to provide all services, so plain authentication is fine. But I can't use /etc/passwd as the users are in virtualmin I tried configuring ssl, with self-certification so the browser interface is https: At the moment I've restored dovecot.conf and conf.d/10-master.conf, 10-auth.conf and 10-mail.conf to their original settings. So an attempt to login through usermin gives me this Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Feb 28 19:44:19 scotz1 dovecot: auth: Fatal: sql: Configuration file path not given Feb 28 19:44:19 scotz1 dovecot: master: Error: service(auth): command startup failed, throttling Previous to restoring the conf files I was getting this from horde Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: auth client connected (pid=25627) Feb 28 17:55:02 scotz1 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=439 54#011resp=dGVzdHNjb3R6LmNvLnVrAHRlc3RzY290ei5jby51awBwYXNzd29yZA== Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: passwd(testscotz.co.uk,127.0.0.1): lookup Feb 28 17:55:02 scotz1 dovecot: auth: passwd(testscotz.co.uk,127.0.0.1): unknown user Horde is using mysql for its database, but I don't particularly care what dovecot uses, although it seems sensible to do the same I have created and removed several mysql databases during my attempts to get this to work. I would greatly appreciate some assistance with this as every 'howto' I have found by googling describes different setups and just gets me deeper in the mire! I want an authentication mechanism on this one server that virtualmin users and horde users (same people!) can use for imap mail. I thought I knew what I was doing before I took this one on (I have configured and manage a dozen centos servers), but this one is making my head spin. Yours in hope! Peter Lawrie

6 7

[Dovecot] Disallow Deletion from Trash Folder
by Bradley Rintoul 01 Mar '13

01 Mar '13

Hello: I've been tasked with trying to find a way to keep users from ever "permanently" deleting emails. The users are running Thunderbird and are using the "Archive" option for when emails are deleted. However, they are still able to delete emails from the Archive folders... I'm wondering if there's any way that I can configure Dovecot to make sure that emails *never* get removed from the filesystem. I know it's probably kind of a bizarre request, but is there any way that Dovecot can help me out in this regard? Thanks! B. Rintoul

5 4

[Dovecot] sending of password did not succeed
by Peter Sparkes 01 Mar '13

01 Mar '13

Hi Today I have upgraded my Debian server from lenny to squeeze and my email stopped working. I am using Dovecot 1.2.15 with exim4. Exim4 is working and mail is being delivered to the mailboxes - /home/ didm.co.uk/peter/Maildir/new etc When I try to download emails to my I get "sending of password did not succeed, Mail server mail.didm.co.ukresponded:Authentication failed" and the server Dovecot error log "utime(/home/didm.co.uk/peter/Maildir/tmp) failed: Permission denied" etc Help please Peter

3 2

[Dovecot] I need help with my mail client: was [OCLUG] running cron on UTC
by Steve Litt 01 Mar '13

01 Mar '13

On Thu, 28 Feb 2013 19:29:20 -0800 Kevin Cernekee <cernekee(a)gmail.com> wrote: > On Thu, Feb 28, 2013 at 5:54 PM, Nathan Haines <nhaines(a)ubuntu.com> I'm sorry to hijack a thread to do this, but I actually had to reply to someone in order to show you the symptom. Before describing the symptom, let me give you the situation... I'm running Claws-Mail 3.8.1 on Xubuntu 12.10. On the way out I just do normal port 465 SSL to my web host's SMTP server. On the way back, fetchmail grabs my messages from my ISP using IMAP (and erasing them on on the ISP's server after retrieval), then delivers them to procmail, which, based on filters, drops them into the correct directories of the Dovecot server running on my desktop. Claws-mail then views all my email on the IMAP server. slitt@mydesk:~$ dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-25-generic x86_64 Ubuntu 12.10 ext4 At the bottom of this email I'll put a copy of a typical full header on a post from me. Here's the symptom: Every time I reply to an OCLUG post, Claws-Mail loads the *To* with oclug(a)mailman.oclug.org and the *CC* with oclug(a)penguin.oclug.org. Unless I remember to delete the CC, this makes me double post every time, and must be quite annoying to you all. This happens *only* on OCLUG posts: None of my other mailing lists display this symptom. It's actually weirder than that, because although when I compose the message the preceding is true, by the time I get the two messages back they both say oclug(a)penguin.oclug.org. This happens only with the OCLUG list, no others. I studied the full headers of the two messages when they came back to me, and could discern no difference in the two. What I did find, however, is that all OCLUG messages have: List-Post: <mailto:oclug@mailman.oclug.org> Reply-To: Orange County Linux Users Group <oclug(a)penguin.oclug.org> List-Id: Orange County Linux Users Group <oclug.mailman.oclug.org> Can anyone tell me how to start narrowing down the cause of this behavior? I've CC'ed the Claws-Mail list and the Dovecot list in hopes that maybe they have some ideas. The fact that the rest of you don't post doubles makes me wonder if it's a mail client thing (but of course, only for OCLUG). Thanks, SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance ====================================================== Return-path: <oclug-bounces(a)penguin.oclug.org> Envelope-to: slitt(a)troubleshooters.com Delivery-date: Thu, 28 Feb 2013 23:57:27 -0700 Received: from box20.bluehost.com [69.89.18.20] by mydesk with IMAP (fetchmail-6.3.21) for <slitt@localhost> (single-drop); Fri, 01 Mar 2013 02:00:09 -0500 (EST) Received: from athrbthr by box500.bluehost.com with local-bsmtp (Exim 4.80) (envelope-from <oclug-bounces(a)penguin.oclug.org>) id 1UBJuI-0004wp-KM for slitt(a)troubleshooters.com; Thu, 28 Feb 2013 23:57:27 -0700 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on box500.bluehost.com X-Spam-Level: X-Spam-Status: No, score=0.9 required=6.0 tests=BAYES_20,DKIM_SIGNED,RDNS_NONE, T_DKIM_INVALID shortcircuit=no autolearn=no version=3.3.1 Received: from [66.51.217.34] (port=57600 helo=mailman.oclug.org) by box500.bluehost.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.80) (envelope-from <oclug-bounces(a)penguin.oclug.org>) id 1UBJuH-0004vU-Sl for slitt(a)troubleshooters.com; Thu, 28 Feb 2013 23:57:26 -0700 Received: from penguin.oclug.org (localhost.localdomain [127.0.0.1]) by mailman.oclug.org (8.13.8/8.13.8) with ESMTP id r216sAxl005168; Thu, 28 Feb 2013 22:54:25 -0800 X-DKIM: OpenDKIM Filter v2.2.0 mailman.oclug.org r216sAxl005168 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=oclug.org; s=key1; t=1362120877; i=(a)oclug.org; bh=pGJLvLZRLVQZMvAPrmj0xY5yD15S7XKt7ZIXrtLn+n8=; h=Date:From:To:Message-ID:In-Reply-To:References:Mime-Version:Cc: Subject:Reply-To:List-Id:List-Unsubscribe:List-Archive:List-Post: List-Help:List-Subscribe:Content-Type:Content-Transfer-Encoding; b=Ikxul7U6431nG0j1/UvXZoPbuId9Olh01KBQFgHtvW4XY4vRSdO0c/3K04k8S52Gz XbPB09lBM+MgYdwfz96Euo5fIKe63jqud0IMfa51HdMC8soz9AwTFLiY/Bf45dQbc/ L7GWPtjXX/RIjqgZmxV19GqgvALnmaDZ+p9aYlSs= Received: from oproxy5-pub.bluehost.com (oproxy5-pub.bluehost.com [67.222.38.55]) by mailman.oclug.org (8.13.8/8.13.8) with SMTP id r216rFYG005142 for <oclug(a)penguin.oclug.org>; Thu, 28 Feb 2013 22:53:26 -0800 X-DKIM: OpenDKIM Filter v2.2.0 mailman.oclug.org r216rFYG005142 Authentication-Results: mailman.oclug.org; dkim=pass (768-bit key) header.i=(a)troubleshooters.com header.b=pN/Ec/8K; dkim-adsp=pass Received: (qmail 24695 invoked by uid 0); 1 Mar 2013 06:53:12 -0000 Received: from unknown (HELO box500.bluehost.com) (74.220.219.100) by cpoproxy2.bluehost.com with SMTP; 1 Mar 2013 06:53:12 -0000 Received: from [184.90.206.64] (port=58237 helo=mydesk) by box500.bluehost.com with esmtpsa (SSLv3:RC4-SHA:128) (Exim 4.80) (envelope-from <slitt(a)troubleshooters.com>) id 1UBJqB-0007gc-KK; Thu, 28 Feb 2013 23:53:11 -0700 Date: Fri, 1 Mar 2013 01:53:07 -0500 From: Steve Litt <slitt(a)troubleshooters.com> To: oclug(a)penguin.oclug.org Message-ID: <20130301015307.69d0330f@mydesk> In-Reply-To: <CAEiYjQLRUhbu4MCYoodDBxLYVOoc01dJjA1+dGQywkd7_1w0SQ(a)mail.gmail.com> References: <CAOF6TY_dmSP+ZS60wKaZo3Lq6iZ+fcqkbh4H46Jz8HOp+xRprQ(a)mail.gmail.com> <512FB61F.6070607(a)truesdail.com> <CAEiYjQLRUhbu4MCYoodDBxLYVOoc01dJjA1+dGQywkd7_1w0SQ(a)mail.gmail.com> Organization: Troubleshooters.Com X-Mailer: Claws Mail 3.8.1 (GTK+ 2.24.13; x86_64-pc-linux-gnu) Mime-Version: 1.0 X-Identified-User: {36493:box500.bluehost.com:athrbthr:a3b3.com} {sentby:smtp auth 184.90.206.64 authed with junk(a)a3b3.com} Cc: Orange County Linux Users Group <oclug(a)penguin.oclug.org> Subject: Re: [OCLUG] Clonezilla vs Ubuntu backup? X-BeenThere: oclug(a)mailman.oclug.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: Orange County Linux Users Group <oclug(a)penguin.oclug.org> List-Id: Orange County Linux Users Group <oclug.mailman.oclug.org> List-Unsubscribe: <http://mailman.oclug.org/mailman/listinfo/oclug>, <mailto:oclug-request@mailman.oclug.org?subject=unsubscribe> List-Archive: <http://mailman.oclug.org/mailman/private/oclug> List-Post: <mailto:oclug@mailman.oclug.org> List-Help: <mailto:oclug-request@mailman.oclug.org?subject=help> List-Subscribe: <http://mailman.oclug.org/mailman/listinfo/oclug>, <mailto:oclug-request@mailman.oclug.org?subject=subscribe> Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: oclug-bounces(a)penguin.oclug.org X-Identified-User: {36493:box500.bluehost.com:athrbthr:a3b3.com} {sentby:spamassassin for local delivery to identified user} ======================================================

2 1

[Dovecot] Looking for HOWTO for fc18 with postfix/TLS/imaps
by Alex 01 Mar '13

01 Mar '13

Hi all, Does there already exist a document that outlines the best approach to implement postfix with dovecot? I'd like to set up a Maildir system with TLS clients and SMTP Auth. I don't think I need to require client certs, but want to avoid cleartext passwords. It's unclear to me whether to use 143 with TLS or 993. I've currently set it up using 143 with STARTTLS using normal passwords. Is this correct? Can I use a regular apache web cert to provide an authorized cert and key to use for authentication by the clients? Thanks, Alex

1 0

[Dovecot] Support for PolarSSL?
by Charles Marcus 01 Mar '13

01 Mar '13

Hey Timo, Just curious if you ever thought about supporting other than just OpenSSL? PolarSSL looks really interesting, has no major dependencies and is very lightweight compared to OpenSSL, GNUTLS or others... https://polarssl.org/ I guess it could be a lot of work, or not, anyway, I'm just curious... -- Best regards, */Charles/*

6 5

[Dovecot] Best practice for sieve script synchronization
by Oli Schacher 01 Mar '13

01 Mar '13

We consider deploying a two server active-active setup with dsync replication for ~2500 users. I was wondering how people handle sieve script synchronization in such setups. We came up with a few options for syncing: 1) rsync/unison ~/sieve every x seconds 2) move sieve dirs to separatate partition and sync with gluster or drbd 3) patch roundcube managesieve sieve plugin to upload to both managesieve servers (only roundcube can access managesieve in our setup) 4) store sieve scripts in mysql and patch roundcube managesieve plugin to directly access the db instead of using managesieve (we tried this, but apparently sieve scripts read from db via dovecot dict can't have more than one line? show stopper due to roundcube sieve plugin needing comments to parse the scripts) 5) wait until Timo/Stephan add additional magic to dsync for sieve scripts as discussed in http://www.dovecot.org/list/dovecot/2011-October/061699.html ;-) We are tending towards 1) as this seems simplest and most robust solution but before we re-invent the wheel we'd like to "hear" your thoughts... Thanks Oli -- This message does not contain horse meat

6 7