- dovecot - dovecot.org

[Dovecot] Authentication failed (migrate from 2.0.13 to 2.0.17)
by Dovecot user 03 Jul '12

03 Jul '12

Hi, I use OpenBSD 5.1, roundcube 0.7.2 and dovecot 2.0.17 (684381041dc4+), mysql. I get the following error when i try to connect to imap : roundcube: IMAP Error: Login failed for testing(a)mydomain.net from 192.168.0.92. AUTHENTICATE PLAIN: Authentication failed. in /var/www/webmail/roundcubemail-0.7.2/program/include/rcube_imap.php on line 205 (POST /webmail/?_task=login&_action=login) dovecot: imap-login: Aborted login (auth failed, 1 attempts): user=, method=CRAM-MD5, rip=127.0.0.1, lip=127.0.0.1, TLS Jul 2 15:19:13 mx dovecot: auth-worker: mysql(localhost): Connected to database mail Jul 2 15:19:15 mx dovecot: imap-login: Aborted login (auth failed, 1 attempts): user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Can you help me please ? Here my config files : *dovecot-sql.conf driver = mysql connect = host=localhost dbname=mail user=postfix password=postfix default_pass_scheme = PLAIN password_query = SELECT email as user, password FROM users WHERE email = '%u' user_query = SELECT id as uid, id as gid, home, concat('*:storage=', quota, 'M') AS quota_rule FROM users WHERE email = '%u' *dovecot.conf #i use this on OpenBSD 5.0 and dovecot 2.0.13, works, but it doesn't seem to work with this version :-( # 2.0.13: /etc/dovecot/dovecot.conf # OS: OpenBSD 5.0 i386 ffs auth_mechanisms = plain login digest-md5 cram-md5 apop auth_debug=yes base_dir = /var/dovecot/ first_valid_uid = 1000 mail_location = maildir:/var/mailserv/mail/%d/%n mmap_disable = yes passdb { args = /etc/dovecot-sql.conf driver = sql } plugin { antispam_mail_notspam = --ham antispam_mail_sendmail = /usr/local/bin/sa-learn antispam_mail_sendmail_args = --username=%u antispam_mail_spam = --spam antispam_mail_tmpdir = /tmp antispam_signature = X-Spam-Flag antispam_signature_missing = move antispam_spam = SPAM;Spam;spam;Junk;junk antispam_trash = trash;Trash;Deleted Items; Deleted Messages autocreate = Trash autocreate2 = Spam autocreate3 = Sent autocreate4 = Drafts autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Sent autosubscribe4 = Drafts quota = maildir quota_rule = *:storage=5G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% /usr/local/bin/quota-warning.sh 95 quota_warning2 = storage=80%% /usr/local/bin/quota-warning.sh 80 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap sieve pop3 service auth { unix_listener /var/run/dovecot-auth-master { group = _dovecot mode = 0666 user = _dovecot } unix_listener /var/spool/postfix/private/auth { group = _postfix mode = 0660 user = _postfix } } service imap-login { service_count = 0 #user = _dovecot vsz_limit = 64 M } service pop3-login { service_count = 0 #user = _dovecot vsz_limit = 64 M } ssl_cert =ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3 ssl_key = userdb { args = /etc/dovecot-sql.conf driver = sql } #userdb { # driver = passwd #} protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota autocreate } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xv%08Xu } protocol lda { auth_socket_path = /var/run/dovecot-auth-master mail_plugins = $mail_plugins sieve postmaster_address = postmaster(a)mx.itdebug.net sendmail_path = /usr/sbin/sendmail } default_login_user = _dovenull default_internal_user = _dovecot ## ## ManageSieve specific settings ## # Service definitions service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service managesieve { #Max. number of ManageSieve processes (connections) #process_count = 1024 } # Service configuration protocol sieve { } Thank you very much. -- Wesley

2 7

[Dovecot] v2.1.8 released
by Timo Sirainen 02 Jul '12

02 Jul '12

http://dovecot.org/releases/2.1/dovecot-2.1.8.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.8.tar.gz.sig Most importantly fixes a pretty bad behavior of sending mailbox names as UTF-8 instead of mUTF-7 as required by IMAP RFC. I'm surprised nobody hadn't noticed this in v2.1.x tree before yesterday. I guess some clients might have translated the name to UTF-8 anyway and not noticed it, while others would have silently ignored the problem of not seeing STATUS updates. + pop3c: Added pop3c_master_user setting. - imap: Mailbox names were accidentally sent as UTF-8 instead of mUTF-7 in previous v2.1.x releases for STATUS, MYRIGHTS and GETQUOTAROOT commands. - lmtp proxy: Don't timeout connections too early when mail has a lot of RCPT TOs. - director: Don't crash if the director is working alone. - shared mailboxes: Avoid doing "@domain" userdb lookups. - doveadm: Fixed crash with proxying some commands. - fts-squat: Fixed handling multiple SEARCH parameters. - imapc: Fixed a crash when message had more than 8 keywords. - imapc: Don't crash on APPEND/COPY if server doesn't support UIDPLUS.

1 0

[Dovecot] Additional passdb result status
by Jürgen Pabel 02 Jul '12

02 Jul '12

Dear Dovecot-Team, I am implementing a plugin (for the pop3/imap process) that requires some data to provided from the authentication phase (a derivative of the password). For that, I have now implemented a passdb plugin that generates this data and I would like to "pass" this data down to the mail process (pop3/imap) via extra_fields in the reply of the authentication. The general idea is that my custom passdb plugin calculates the data, sets the extra_field and returns some error (authentication was not successful) so that the "real" passdb backend can be invoked to "really" validate the authentication data. However, in auth_request_handle_passdb_callback() the extra_fields are reseted unless the return code is PASSDB_RESULT_USER_DISABLED. But if that return code is used then any following passdb's aren't invoked any more - which makes sense with respect to user authenticiation. I would therefore like to propose that some IGNORE/CONTINUE-status to be introduced in auth/passdb.h, that would be handled in that extra_fields and possible other values are not reseted in order to allow such propagation of data from authentication process down to the mail process (which could be extracted from the reply string by parsing it). As a further implementation alternative (to the parsing of the reply string), I also propose that some new "environment" item be introduced (in auth_request) in order to allow such data passing in a generic manner. I hope you consider my proposal to be reasonable. If desired, I could implement this myself and provide a patch for merging (based on 2.0.x). If my proposal is generally unfavored, it would be great if any alternative approaches for my situation were suggested. Thanks. Regards, Jürgen PS: please reply to my e-mail (or CC me), as I have not subscribed to the dovecot list

3 3

[Dovecot] userdb errors after upgrading to 2.1
by André Rodier 02 Jul '12

02 Jul '12

Hello everybody, I am running debian wheezy for development and test, and I recently upgrade to dovecot 2.1.7 I am using LDAP lookups, and virtual users with the same UID/GID. Everything was working fine before, but now, I have this error when I try to send an email to a local account: -------------------------------------------------------- Jun 26 15:46:52 lapetus dovecot: lmtp(24518): Error: user user.test(a)indienet.com: Auth USER lookup failed Jun 26 15:46:52 lapetus dovecot: auth: Error: userdb(user.test(a)indienet.com,127.0.0.1): client doesn't have lookup permissions for this user: userdb reply doesn't contain uid (change userdb socket -------------------------------------------------------- However, even if I set the permissions to 0666, I still have the same error. Can you point me in the right direction to fix this, please? Kind regards, André Rodier

2 1

[Dovecot] Wrong headers in dovecot-crlf
by Matthieu RAKOTOJAONA 02 Jul '12

02 Jul '12

Hello everyone, I'm using the very good imaptest [0] tool to test my little imap server implementation. I've tried to use the dovecot-crlf [1] file, but it looks like there are some major issues : $ grep -n "In-Reply-To.*;" tests/data/dovecot-crlf 479:In-Reply-To: <20020806175441.GA7148(a)linux.taugt.net>; from rueckert(a)informatik.uni-rostock.de on Tue, Aug 06, 2002 at 07:54:41PM +0200 525:In-Reply-To: <20020806234054.GA30820(a)carpa.ciagri.usp.br>; from marcelo(a)carpa.ciagri.usp.br on Tue, Aug 06, 2002 at 08:40:54PM -0300 564:In-Reply-To: <20020806234054.GA30820(a)carpa.ciagri.usp.br>; from marcelo(a)carpa.ciagri.usp.br on Tue, Aug 06, 2002 at 08:40:54PM -0300 673:In-Reply-To: <20020807231956.GA11240(a)carpa.ciagri.usp.br>; from marcelo(a)carpa.ciagri.usp.br on Wed, Aug 07, 2002 at 08:19:56PM -0300 795:In-Reply-To: <20020808131329.GA30775(a)carpa.ciagri.usp.br>; from marcelo(a)carpa.ciagri.usp.br on Thu, Aug 08, 2002 at 10:13:30AM -0300 964:In-Reply-To: <20020808193533.GA28619(a)carpa.ciagri.usp.br>; from marcelo(a)carpa.ciagri.usp.br on Thu, Aug 08, 2002 at 04:35:33PM -0300 21545:In-Reply-To: <1046294808.30811.66.camel@hurina>; from tss(a)iki.fi on Wed, Feb 26, 2003 at 11:26:48PM +0200 22042:In-Reply-To: <1046373554.18310.4.camel@hurina>; from tss(a)iki.fi on Thu, Feb 27, 2003 at 09:19:14PM +0200 23712:In-Reply-To: <20030227212127.A10927(a)pcx3332.desy.de>; from Juergen.Kahnert(a)DESY.de on Thu, Feb 27, 2003 at 09:21:27PM +0100 25498:In-Reply-To: <OFF6D684CA.26838A7C-ON42256CE8.003A8EFC-42256CE8.003B49AC(a)icoc.org>; from Leslie_Viljoen(a)icoc.org on Thu, Mar 13, 2003 at 12:44:52PM +0200 30654:In-Reply-To: <1048667343.30187.100.camel@hurina>; from tss(a)iki.fi on Wed, Mar 26, 2003 at 10:29:03AM +0200 31126:In-Reply-To: <1048704303.31565.214.camel@hurina>; from tss(a)iki.fi on Wed, Mar 26, 2003 at 08:45:03PM +0200 31313:In-Reply-To: <1048928723.6856.21.camel@hurina>; from tss(a)iki.fi on Sat, Mar 29, 2003 at 11:05:23AM +0200 31820:In-Reply-To: <1049101161.884.126.camel@hurina>; from tss(a)iki.fi on Mon, Mar 31, 2003 at 11:59:21AM +0300 31890:In-Reply-To: <Pine.LNX.4.44.0303311009510.17234-100000(a)vegemite.nssg.mitel.com>; from charlieb-dovecot(a)e-smith.com on Mon, Mar 31, 2003 at 10:12:22AM -0500 32037:In-Reply-To: <Pine.LNX.4.44.0303311414410.17234-100000(a)vegemite.nssg.mitel.com>; from charlieb-dovecot(a)e-smith.com on Mon, Mar 31, 2003 at 02:19:27PM -0500 32463:In-Reply-To: <1049243642.11879.25.camel@hurina>; from tss(a)iki.fi on Wed, Apr 02, 2003 at 03:34:02AM +0300 As you can see, many of the "In-Reply-To" headers are polluted with some junk. The situation is the same for many "Message-ID" headers. I don't know why they are here, but I think it's a mistake. I thought I would let you know. [0] http://imapwiki.org/ImapTest [1] http://www.dovecot.org/tmp/dovecot-crlf Regards, -- Matthieu RAKOTOJAONA

2 1

[Dovecot] Setting up mixed mbox and maildir
by Jonathan Ryshpan 02 Jul '12

02 Jul '12

I'm trying to set up a dovecot server for which mail arrives in an mbox, and mail is stored in a maildir. The wiki (see http://wiki.dovecot.org/Namespaces) refers to this as "Mixed mbox and Maildir". It advises handling this situation by creating two namespaces: one for the mbox and the other for the maildir. Each of these namespaces starts with namespace private { On the other hand the sample configuration in the documentation puts inbox in a namespace starting with: namespace inbox { # Namespace type: private, shared or public #type = private It appears that there has been a change in the configuration syntax after the wiki was written, and that the word following namespace no longer gives a property of the namespace, but rather its name. Is this correct? In any case, how should the configuration be modified to handle mixed mailboxes? Thanks - jon

4 7

[Dovecot] indexer-worker
by Wojciech Puchar 02 Jul '12

02 Jul '12

why this process (which most probably do squat index/update) runs as root, not - like imap process - as user? 29413 root 1 76 0 22820K 9204K kqread 1 0:17 5.86% indexer-worker

2 3

[Dovecot] Proxy config help please
by Zac Israel 02 Jul '12

02 Jul '12

Hello, I am new to dovecot and I am initially trying to setup a basic imap proxy with password forwarding, I can start the dovecot service, connect and give it my password, and that is where I hang. My config is: root@imap-test:/etc/dovecot# doveconf -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-24-generic x86_64 Ubuntu 12.04 LTS auth_debug = yes auth_verbose = yes debug_log_path = syslog first_valid_uid = 100 imap_capability = CAPABILITY IMAP4rev1 ACL BINARY CATENATE CHILDREN CONDSTORE ENABLE ESEARCH ESORT I18NLEVEL=1 ID IDLE LIST-EXTENDED LIST-STATUS LITERAL+ LOGIN-REFERRALS MULTIAPPEND NAMESPACE QRESYNC QUOTA RIGHTS=ektx SASL-IR SEARCHRES SORT THREAD=ORDEREDSUBJECT UIDPLUS UNSELECT WITHIN XLIST last_valid_uid = 200 mail_debug = yes mail_gid = 107 mail_uid = 107 passdb { args = proxy=proxy_always nopassword=y host=172.16.0.13 port=143 proxy_timeout=5 starttls=y ssl=any-cert driver = static } protocols = imap service imap-login { inet_listener imap { address = * port = 143 } } ssl = required ssl_cert = </etc/courier/imapd.pem ssl_key = </etc/courier/imapd.pem verbose_ssl = yes The system at 172.16.0.13 is a zimbra proxy. I can see in the logs that it initially complains about my ssl cert, and if I remove ssl=any-cert it fails because my cert is self signed, so I know it is talking to the proxy and doing starttls which is a requirement of zimbra. Unfortunately I have not found a way to see the full exchange between dovecot and my zimbra proxy other than tcp dump, which just shows a small packet exchange. Please let me know if I can provide any other information and thanks in advance for any help. -Zac

3 3

[Dovecot] Dovecot 2.1 stable packages for Debian?
by Krzysztof Trybowski 02 Jul '12

02 Jul '12

Hello all, it is strange, but Dovecot 2.x still didn't make it into Debian (not even backports). It exists in testing, but that's still a long wait. OTOH there are official packages built every day (referenced from the download page). This puzzles me: why isn't there a build created from each stable, released version of Dovecot, so that users of Debian Stable could benefit from the new version, and run it on production environment? Could you (I mean — the Dovecot team) provide such packages? This wouldn't require any major amount of work, since you already have daily builds produced. You would just have to run that building system once per each released version and keep it available for download. The reason for this is relatively simple: I'm about to implement a new mail server, and I'd like to keep to Debian Stable while using Dovecot 2.x. This will make future updates much easier, as I won't have to face 1.2 -> 2.0 migration on a production system. Regards, KT

9 9

[Dovecot] RAID1+md concat+XFS as mailstorage
by Костырев Александр Алексеевич 02 Jul '12

02 Jul '12

Hello! somewhere in maillist I've seen RAID1+md concat+XFS being promoted as mailstorage. Does anybody in here actually use this setup? I've decided to give it a try, but ended up with not being able to recover any data off survived pairs from linear array when _the_first of raid1 pairs got down. thanks!

7 22