- dovecot - dovecot.org

[Dovecot] LDAP auth with AD
by Chris Visser 07 Aug '12

07 Aug '12

Hi, I'm struggling to setup LDAP authentication with dovecot against an AD server. When I attempt to bind using the same DN I use to do address lookups in exim and to do searches using ldap search on the command line I get the following in my logs: Aug 7 08:55:58 mail-dev dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 7 08:55:58 mail-dev dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 7 08:55:58 mail-dev dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Aug 7 08:55:58 mail-dev dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Aug 7 08:55:58 mail-dev dovecot: auth: Debug: auth client connected (pid=1523) Aug 7 08:55:58 mail-dev dovecot: auth: Error: LDAP: binding failed (dn CN=Linux Sync,CN=Users,DC=RTT,DC=co,DC=za): Invalid credentials, 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1 I'm running CentOS 6 and connect to a Windows 2008 R2 domain. The output from dovecot -n: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.2.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_debug = yes auth_verbose = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { args = uid=exim gid=exim home=/var/spool/mail/%Ld/%Ln driver = static } And my /etc/dovecot/dovecot-ldap.conf.ext: hosts = dc01.mydomain.com base = dc=mydomain,dc=com dn = CN=Linux Sync,CN=Users,DC=mydomain,DC=com dnpass = mypass deref = never scope = subtree ldap_version = 3 auth_bind = no pass_filter = (&(objectClass=person)(mail=%u)) Chris Visser Linux/Network Infrastructure ================== Please read our Email Disclaimer : http://www.rtt.co.za/disclaimer.html

1 0

[Dovecot] redirect actions exceeds policy limit
by Mike Greene 06 Aug '12

06 Aug '12

Hello, We have a vacation/mail forwarder plugin in squirrel mail that allows customers to forward email. It has come to my attention that there is a limit (appears to be 5) on the number of addresses that can be specified. I'm now trying to track down where this policy limit is set. This is the error we see in the customers .dovecot.sieve.log file: main_script: line 26: error: number of redirect actions exceeds policy limit. sieve: info: started log at Jul 25 07:02:54. I checked the following for possible settings: /usr/local/etc/dovecot/dovecot.conf /usr/local/etc/sieve/dovecot.sieve /usr/local/etc/sieve/global.sieve I didn't see anything specific to limiting the number of redirects. I'm wondering where else I can look to find where this limit is coming from and adjust it upwards. We are using the following dovecot / pigeonhole versions. dovecot-2.0.7 dovecot-pigeonhole-0.2.1 athena# dovecot -n # 2.0.7: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.1-RELEASE amd64 auth_default_realm = rockisland.com auth_mechanisms = plain login cram-md5 auth_username_format = %Lu disable_plaintext_auth = no dotlock_use_excl = yes first_valid_gid = 1000 first_valid_uid = 1000 listen = * mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { quota = maildir quota_rule = *:storage=2G quota_warning = storage=90%% /usr/local/sbin/quota-warning.sh 90 quota_warning2 = storage=80%% /usr/local/sbin/quota-warning.sh 80 sieve = ~/.dovecot.sieve sieve_dir = ~/ sieve_global_dir = /usr/local/etc/sieve/ } protocols = imap pop3 service auth { unix_listener auth-client { mode = 0660 } unix_listener auth-master { group = vmail mode = 0600 user = vmail } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service imap-login { service_count = 0 } service pop3-login { service_count = 0 } ssl_cert = </usr/local/etc/ssl/star.rockisland.com.crt.pem ssl_key = </usr/local/etc/ssl/star.rockisland.com.key.pem userdb { driver = prefetch } userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf driver = ldap } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master info_log_path = lda_mailbox_autocreate = no lda_mailbox_autosubscribe = yes log_path = mail_plugins = quota sieve postmaster_address = postmaster(a)rockisland.com sendmail_path = /usr/sbin/sendmail } Mike Greene Rock Island Technology Solutions, Inc. San Juan Islands, WA. 360-378-5884 x201

2 1

[Dovecot] find virtual users
by Rafael Nathan 06 Aug '12

06 Aug '12

Hi, Can sendmail find virtual users in /etc/dovecot/passwd ? If yes, what are the necesary changes I have to make ? Urgent help needed. Thanks in advance. Regards, Rafael

3 2

[Dovecot] Just trying to make dovecot work.
by Peter Snow 06 Aug '12

06 Aug '12

Hi, I have to say that Dovecot is certainly the most challenging piece of software I've ever had the pleasure of setting up (due mainly to the reams of largely unhelpful documentation). After 36 almost non-stop hours reading and trying, I finally end up here. :-) I really would appreciate your help - and many thanks in advance! *************************************************************** /var/log/dovecot.info.log (showing unsuccessful login) *************************************************************** Aug 04 21:32:36 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 04 21:32:36 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 04 21:32:36 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Aug 04 21:32:36 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Aug 04 21:32:36 auth: Debug: passwd-file /usr/local/etc/dovecot.passdb: Read 1 users Aug 04 21:32:36 auth: Debug: auth client connected (pid=24769) Aug 04 21:32:41 auth: Debug: client in: AUTH 1 PLAIN service=imap securedlip=::1 rip=::1 lport=143 rport=52551 resp=AHBldGVyAGZ1YXNpbjU0MTRz Aug 04 21:32:41 auth: Debug: passwd-file(peter,::1): lookup: user=peter file=/usr/local/etc/dovecot.passdb Aug 04 21:32:41 auth: Debug: client out: OK 1 user=peter Aug 04 21:32:41 auth: Debug: master in: REQUEST 1417805825 24769 1 44a3aec60ec6eaec6eff0efb99971eee Aug 04 21:32:41 auth: Debug: master out: USER 1417805825 peter Aug 04 21:32:41 imap-login: Info: Login: user=<peter>, method=PLAIN, rip=::1, lip=::1, mpid=24772, secured *************************************************************** END *************************************************************** *************************************************************** /var/log/dovecot.log (showing unsuccessful login) *************************************************************** Aug 04 21:32:41 IMAP(peter): Error: user peter: Couldn't drop privileges: User is missing UID (see mail_uid setting) Aug 04 21:32:41 IMAP(peter): Error: Internal error occurred. Refer to server log for more information. *************************************************************** END *************************************************************** *************************************************************** dovecot -n *************************************************************** # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.2.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) ext4 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes disable_plaintext_auth = no first_valid_uid = 1000 info_log_path = /var/log/dovecot.info.log last_valid_uid = 5000 log_path = /var/log/dovecot.log login_trusted_networks = 127.0.0.1 mail_debug = yes mail_location = maildir:/var/mail/%u/Maildir mail_log_prefix = "%Us(%u): " passdb { args = /usr/local/etc/dovecot.passdb driver = passwd-file } protocols = imap ssl = no verbose_proctitle = yes *************************************************************** END *************************************************************** *************************************************************** /usr/local/etc/dovecot.passdb *************************************************************** peter:{CRYPT}BrtgyyOEX33w6:1000:500:Peter Snow:/var/mail/peter:: *************************************************************** END *************************************************************** *************************************************************** cat /etc/passwd | grep peter *************************************************************** peter:x:1000:500::/home/peter:/sbin/nologin *************************************************************** END *************************************************************** Notes: 'peter' does not yet have a system password, since I'm testing this for users which will only be virtual users. I made the password for 'peter' in the dovecot.passdb using "doveadm pw -s crypt" although once I've got it working I'd like to change the encryption to something as strong as possible - any suggestions please? Hope you can help and many thanks. Kind regards, Peter

4 6

Re: [Dovecot] getting rid of old spam from +spam Maildir ?
by Joseph Tam 06 Aug '12

06 Aug '12

Charles Marcus <CMarcus(a)Media-Brokers.com> writes: > On 2012-08-03 6:33 PM, Voytek Eymont <voytek(a)sbt.net.au> wrote: >> don't know, looking this morning it shows like below, the 00:05:05 is >> probably last time I did 'ls'? I was doing 'ls' or web mail refresh, to >> see what gets removed from 'spam' box, before and after each attempt to >> expunge : >> >> date.saved: 2012-08-03 00:05:05 > > The 'date.saved:' is the date/time that the message was moved into that > folder. Perhaps this related thread starting at http://dovecot.org/list/dovecot/2012-July/067199.html and ending with the patch by Timo http://dovecot.org/list/dovecot/2012-July/067423.html may be of interest to the OP. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] getting rid of old spam from +spam Maildir ?
by Voytek Eymont 06 Aug '12

06 Aug '12

I'm trying to setup per user '+spam' delivery from amavis tags, so that each user gets any mails tagged as spam to 'spam' Maildir via +spam Dovecot lmtp delivery. after say 7 days I want to delete all spams older than 7 days, if I simply delete mail files from the file system, is that a 'bad thing' ? what is a proper way to do that, and scripts ? for removing/archiving old uncollected emails in main INBOX I use archivemail from sf, but, don't think I can do subfoldrs with archivemail any pointers (and scripts) welcomed, thanks -- Voytek

6 19

[Dovecot] ot: mysql auth worker failure ?
by Voytek Eymont 05 Aug '12

05 Aug '12

looking through logs I noticed this today: grep mysql /var/log/maillog | grep fail Aug 3 17:35:25 dovecot: auth-worker(28335): Error: mysql: Query failed, retrying: Table 'postfix.users' doesn't exist Aug 3 17:35:57 dovecot: auth-worker(28335): Error: mysql: Query failed, retrying: Table 'postfix.users' doesn't exist Aug 3 17:36:02 dovecot: auth-worker(28335): Error: mysql: Query failed, retrying: Table 'postfix.users' doesn't exist Aug 3 17:36:23 dovecot: auth-worker(28335): Error: mysql: Query failed, retrying: Table 'postfix.users' doesn't exist Aug 3 17:36:40 dovecot: auth-worker(28335): Error: mysql: Query failed, retrying: Table 'postfix.users' doesn't exist Aug 3 17:36:50 dovecot: auth-worker(28335): Error: mysql: Query failed, retrying: Table 'postfix.users' doesn't exist Aug 3 17:40:04 dovecot: auth-worker(28335): Error: mysql: Query failed, retrying: Table 'postfix.users' doesn't exist Aug 3 17:41:04 dovecot: auth-worker(29721): Error: mysql: Query failed, retrying: Table 'postfix.users' doesn't exist Aug 3 17:41:19 dovecot: auth-worker(29721): Error: mysql: Query failed, retrying: Table 'postfix.users' doesn't exist Aug 3 17:41:38 dovecot: auth-worker(29721): Error: mysql: Query failed, retrying: Table 'postfix.users' doesn't exist looking at mysqld.log, all i see is: 120721 17:58:44 InnoDB: Shutdown completed; log sequence number 0 76814 120721 17:58:44 [Note] /usr/libexec/mysqld: Shutdown complete 120721 17:58:44 mysqld_safe mysqld from pid file /var/run/mysqld/mysqld.pid ended 120721 17:59:53 mysqld_safe Starting mysqld daemon with databases from /var/lib/mysql 120721 17:59:54 InnoDB: Initializing buffer pool, size = 8.0M 120721 17:59:54 InnoDB: Completed initialization of buffer pool 120721 17:59:54 InnoDB: Started; log sequence number 0 76814 120721 17:59:54 [Note] Event Scheduler: Loaded 0 events 120721 17:59:54 [Note] /usr/libexec/mysqld: ready for connections. Version: '5.1.61' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution no failure were noticed or reported, except for log items any thoughts ? I might have been importing (phpmyadmin) some 3 or 4 databases around that time, surely that wouldn't cause such issue ? -- Voytek Eymont

4 6

[Dovecot] disable auth-worker logging
by Gmail-teopro 04 Aug '12

04 Aug '12

Hello all, Can someone please give me a hint about how can I disable such messages to be inserted into log file(maillog this case as syslog_facility = mail)? >> dovecot: auth-worker(13377): mysql(localhost): Connected to database postfix All the '_debug' and '_verbose' statements bear the 'no' value. Thank you. -- Best regards, Gmail-teopro mailto:teopro@gmail.com

2 1

[Dovecot] authenticate plain and utf-8 with special chars
by Matthias Lay 04 Aug '12

04 Aug '12

Hi, I experienced some problems with authenticate. seems like the mail clients like thunderbird send their base64 string in ISO- encoding, which doesnt work on my dovecot setup if there are some Umlauts I am not able to login as "ömer" for example If I authenticate from telnet with an base64 encoded utf-8 string like 'echo -en "\0ömer\0Start12" |base64' everything works fine -dovecot 2.1.7 -userdb is an openldap which queries an windows AD so results are in utf8, I think. any clues at which point to fix this are welcome ;)

2 1

[Dovecot] zlib plugin maildir broken ?/ Cached message size smaller than expected
by Robert Schetterer 03 Aug '12

03 Aug '12

Hi Timo, by having errors like Cached message size smaller than expected and Maildir filename has wrong S value and Corrupted index cache file in dove 2.1.8 i can reproduce the problem with tb 14 with 2 nat machines connected to the same server the problem relates with create new folder then copy some uncompressed and compressed mail to it, the i.e open it by other client sometime this happens at once , sometime after a few copy actions however thunderbird ,then errors above apear, sometimes no mail is shown, sometimes only uncompressed or only compressed so funktion read both formats gets lost somehow any idea, you need a better debug ? -- Best Regards MfG Robert Schetterer

2 13