- dovecot - dovecot.org

Re: [Dovecot] Solaris hardware crypto engines
by Martin Preen 24 Nov '11

24 Nov '11

Hello, after serveral tests (and reading a lot of howto's) I'm now fairly convinced that the Solaris HW-crypto engine is not automatically used. Even when dovecot ist compiled with the OpenSSL version provided by Solaris. Currently I have only a T1-CPU available for testing (Sun Fire T2000) and after patching src/login-common/ssl-proxy-openssl.c (Dovecot 1.2.17) with ENGINE *e; ENGINE_load_builtin_engines(); ENGINE_init((e=ENGINE_by_id("pkcs11"))); ENGINE_set_default_RSA(e); ENGINE_set_default_DSA(e); ENGINE_set_default_ciphers(e); in ssl_proxy_init() and inserting ENGINE_cleanup(); in ssl_proxy_deinit() the crypto device gets used. I'm sure that this is not the whole story since this only seems to affect the IMAP login. One has to use the specific SSL-engine and the ENGINE/EVP calls (as stated in the various articles). Is there any chance that Dovecot gets updated/patched for this ? E.g. Like the SSLCryptoDevice setting in Apache's mod_ssl. Regards. Martin Chris Hoogendyk wrote: > > On 4/18/11 6:30 AM, Martin Preen wrote: >> Hello, >> I tried to find out how about to use the hardware crypto engines under >> Solaris (Sun Fire T2000). It seems, that its not just a compilation >> issue: >> >>> For operations that are to be offloaded, it is necessary to restrict >>> use to subset >> > of OpenSSL functions (the EVP_ functions) and explicitly indicate >> the use of the PKCS11 >> > engine; something like the following works for bulk ciphers (the >> process for RSA is similar): >>> >>> ENGINE *e; >>> ENGINE_load_builtin_engines(); >>> e = ENGINE_by_id("pkcs11"); >>> ENGINE_set_default_ciphers(e); >>> EVP_CIPHER_CTX_init (&ctx); >>> EVP_EncryptInit (&ctx, EVP_des_cbc (), key, iv); >>> EVP_EncryptUpdate (.....); >> >> Since I'm not familiar with SSL programming, I wonder if it's possible to >> modify the dovecot 1.2.x source code. Maybe someone has already tried >> this >> or can give me hint. > > You don't want to do that. > > The objective is for the ssl engine to be low level and basically > invisible to layers of application above that use it. So, build openssl > properly and it just works for everything else. > > I'm not at work today, so I don't have reference to my notes. Ah, just > found an email I sent to my colleagues -- copied it below. --------------------------------------------------------------- Martin Preen, Universität Freiburg, Institut für Informatik Georges-Koehler-Allee 52, Raum EG-006, 79110 Freiburg, Germany phone: ++49 761 203-8250 preen(a)informatik.uni-freiburg.de fax: ++49 761 203-8242 swt.informatik.uni-freiburg.de/~preen

3 6

[Dovecot] seting acl for master user?
by oni-neko＠gmx.net 24 Nov '11

24 Nov '11

Hello! I'm sorry, but i don't really understand it the way it is written in the wiki, so i'm trying my luck here =) i followed the wiki for creating a master user (the non-sql-version) and i can login as another user via this master user. my dovecot version is 1.2.9 on an ubuntu server 10.4.3 lts. what i don't get is the acl-setting, so that the master-user can access all the other users mails and folders. i made the changes in the dovecot.conf as written in the wiki: protocol imap { mail_plugins = acl imap_acl } protocol lda { mail_plugins = sieve acl } plugin { acl = vfile:/etc/dovecot/acls } in my case I only want the master user (called cyrus) to be able to do everything with/in all mailboxes, so I made a file /etc/dovecot/acls/default that reads "user=cyrus lrwstipekxa". i'm pretty sure i'm missing something rather obvious here, but somehow i'm just stuck. any help would be greatly appreciated. thanks in advance =) silvana -- NEU: FreePhone - 0ct/min Handyspartarif mit Geld-zurück-Garantie! Jetzt informieren: http://www.gmx.net/de/go/freephone

3 3

[Dovecot] Problem with Outlook 2010
by pch0317 24 Nov '11

24 Nov '11

Hi, Maybe this time somebody help. Thanks -------- Original Message -------- Subject: Problem with Outlook 2010 Date: Tue, 07 Jun 2011 20:20:56 +0100 From: pch0317 <pch0317(a)gmail.com> To: Dovecot Mailing List <dovecot(a)dovecot.org> Hi, I use dovecot 2.0. I have problem with Outlook 2010. This application freezes for about 2 minutes when I move or delete messages. Other applications such as Outlook Express and Thunderbird work correctly. Has anyone had similar problem? Thanks

3 3

[Dovecot] "%d" does not expand to domain on wildcard search
by Ramiro Blanco 24 Nov '11

24 Nov '11

Hi, I found that doing a wildcard search with doveadm doesn't expand the %d global variable when doing a wildcard search like: doveadm search *@domain ALL LARGER 10000k doveadm(root): Error: User listing returned failure doveadm: Error: Failed to iterate through some users In /var/log/dovecot.log: Nov 22 20:48:07 auth-worker: Debug: ldap: iterate: base=vd=%d,dc=domain scope=subtree filter=(&(objectClass=VirtualMailAccount)(accountActive=TRUE)) fields=mail Nov 22 20:48:07 auth-worker: Error: ldap(?): ldap_search((&(objectClass=VirtualMailAccount)(accountActive=TRUE))) failed: No such object Is this a bug? Configs: #file /usr/local/etc/dovecot/dovecot-ldap.conf.ext: hosts = x.x.x.x dn = cn=dovecot,dc=domain dnpass = mypass auth_bind = yes auth_bind_userdn = mail=%u,vd=%d,dc=domain ldap_version = 3 base = vd=%d,dc=domain deref = never scope = subtree user_attrs = mailbox=mail=maildir:/home/vmail/domains/%$,quota=quota_rule=*:storage=%$,vdHome=home=%$/%d/%1u/%1.1u/%n,=uid=504,=gid=12 user_filter = (&(&(objectClass=VirtualMailAccount)(mail=%u))(accountActive=TRUE)) pass_attrs = userPassword=password,mail=user pass_filter = (&(&(objectClass=VirtualMailAccount)(mail=%u))(accountActive=TRUE)) iterate_attrs = mail=user iterate_filter = (&(objectClass=VirtualMailAccount)(accountActive=TRUE)) default_pass_scheme = CRYPT # 2.0.16: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.3.1.el5 x86_64 CentOS release 5.5 (Final) ext3 auth_mechanisms = plain login dict { expire = pgsql:/usr/local/etc/dovecot/dovecot-dict-sql.conf.ext } hostname = localhost lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot.log mail_gid = 12 mail_location = maildir:/home/vmail/domains/%d/%1u/%1.1u/%n mail_plugins = quota autocreate expire mail_privileged_group = mail mail_uid = 504 managesieve_notify_capability = mailto managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus virustest passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { autocreate = Enviados autocreate2 = Papelera autocreate3 = Borrador autocreate4 = Spam autosubscribe = Enviados autosubscribe2 = Papelera autosubscribe3 = Borrador autosubscribe4 = Spam expire = Papelera expire2 = Papelera/* expire3 = Spam expire4 = Spam/* expire_dict = proxy::expire quota = maildir:User quota quota_rule = *:storage=100M quota_rule2 = Papelera:storage=+100M sieve = ~/sieve/dovecot.sieve sieve_before = /usr/local/etc/sieve/spam.sieve sieve_dir = ~/sieve sieve_global_dir = /usr/local/etc/sieve/ } postmaster_address = postmaster@d <postmaster(a)uvq.edu.ar>omain protocols = imap sieve pop3 service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service managesieve-login { inet_listener sieve { port = 4190 } vsz_limit = 64 M } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lda { mail_plugins = quota autocreate expire } protocol imap { mail_plugins = quota autocreate expire imap_quota } protocol sieve { mail_plugins = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o } -- Ramiro Blanco

2 9

[Dovecot] Random Loss of Connection with Thunderbird and Dovecot
by Jay Welch 24 Nov '11

24 Nov '11

Hi, Dovecot Version: 1.2.16 OS: CENTOS 5.5 I am having issues with Thunderbird connecting to Dovecot at random times. Usually an error comes up and states that Thunderbird cannot connect to the server. The only way I have been able to fix this is reset/repair the network connection or reboot the computer. Is there any parameters I can change in Dovecot to fix this issue? Does anyone know what is likely going on? I have been reading forums and I cannot find anything. Thanks

2 1

[Dovecot] Excluding some system users after configuration
by Nanitous 24 Nov '11

24 Nov '11

Dear readers, Consider an installed Postfix configuration (2.3.3) on CentOS. Now I want to install Dovecot (alas only version 1.0.7.7 is available) to provide IMAP services for a few system users, but not all. Most importantly the mail delivery by postfix for some of these system user /must/ not change after the installation of Dovecot. How can I prevent the installation of Dovecot to touch some specific system user accounts? Thanks in advance, /Twan

2 1

[Dovecot] How to disable pop3 in version 2?
by Knute Johnson 24 Nov '11

24 Nov '11

I'm about to bring up a new mail server running Ubuntu 11.10 with Dovecot 2. I've been using 1.2 all along and there are a bunch more config files in 2. In 1.2 I just edited the protocols statement but I can't find one in version 2. Is there a way to disable pop3 or do I just firewall the ports? And a related question, I've been using imaps on port 993 but I hear that's not the best solution anymore, I should be using imap with STARTTLS? How do I disable imaps? Thanks, -- Knute Johnson

2 4

Re: [Dovecot] Seg fault in dovecot/auth 2.0.15
by Mark Goldey 24 Nov '11

24 Nov '11

Sorry about the HTML. I removed the string "-O2" from the /auth Makefile and, for good measure, did make clean, make and make install for all of Dovecot. Still, it crashed when trying to log in via IMAP (webmail). Core dumped, here's the backtrace. [snip] Core was generated by `dovecot/auth -w'. Program terminated with signal 11, Segmentation fault. #0 0x00000000 in ?? () (gdb) bt full #0 0x00000000 in ?? () No symbol table info available. #1 0x0805b0c7 in auth_worker_handle_user (client=0x82754d0, id=2, args=0x82601c8) at auth-worker-client.c:405 auth_request = 0x82776e8 userdb_id = 1 #2 0x0805b630 in auth_worker_handle_line (client=0x82754d0, line=0x82757da "2\tUSER\t1\tuser=mgoldXX@goldey.net\tservice=imap\toriginal_username=mgoldXX@goldey.net\trequested_login_user\tlip=127.0.0.1\trip=127.0.0.1\tlport=143\trport=47574\tsecured=1\tsuccessful=1\tmech=PLAIN") at auth-worker-client.c:534 args = 0x82601c0 id = 2 ret = false #3 0x0805b890 in auth_worker_input (client=0x82754d0) at auth-worker-client.c:614 _data_stack_cur_id = 3 line = 0x82757da "2\tUSER\t1\tuser=mgoldXX@goldey.net\tservice=imap\toriginal_username=mgoldXX@goldey.net\trequested_login_user\tlip=127.0.0.1\trip=127.0.0.1\tlport=143\trport=47574\tsecured=1\tsuccessful=1\tmech=PLAIN" ret = 183 #4 0xb7726021 in io_loop_call_io (io=0x8275688) at ioloop.c:384 ioloop = 0x8268398 t_id = 2 #5 0xb77270d3 in io_loop_handler_run (ioloop=0x8268398) at ioloop-epoll.c:213 ctx = 0x8273f38 event = 0x8273f78 list = 0x82756b0 io = 0xbf80049f tv = {tv_sec = 2147483, tv_usec = 0} msecs = 1 ret = 1 i = 0 j = 0 call = 192 #6 0xb7725fa0 in io_loop_run (ioloop=0x8268398) at ioloop.c:405 No locals. #7 0xb7711baa in master_service_run (service=0x82682e8, callback=0x805e466 <worker_connected>) at master-service.c:481 No locals. #8 0x0805e7aa in main (argc=2, argv=0x82681c0) at main.c:298 c = -1 And, for good measure: (gdb) fr 1 #1 0x0805b0c7 in auth_worker_handle_user (client=0x82754d0, id=2, args=0x82601c8) at auth-worker-client.c:405 405 auth_request->userdb->userdb->iface-> (gdb) p *auth_request->userdb->userdb $1 = {args = 0x8268d10 "", cache_key = 0x0, blocking = true, id = 1, init_refcount = 1, iface = 0x807b320} (gdb) p *auth_request->userdb->userdb->iface $2 = {name = 0x8074f3d "vpopmail", preinit = 0x8069a27 <vpopmail_preinit>, init = 0, deinit = 0, lookup = 0x806975f <vpopmail_lookup>, iterate_init = 0, iterate_next = 0, iterate_deinit = 0} This is all Greek to me, but I'm happy to do more troubleshooting. --mhg

2 1

[Dovecot] 1.2.15 can't get zlib working
by Stan Hoeppner 24 Nov '11

24 Nov '11

Following these instructions: http://wiki.dovecot.org/Plugins/Zlib I enabled zlib and restarted Dovecot. I made a backup copy of a 68MB mbox file and moved it to a non mail directory. The mbox file is an existing TBird IMAP folder in my UNIX user mail directory. It is an archive of a defunct mailing list. It was a regular IMAP folder prior to attempting this. I was able to access all emails in the folder. It worked fine. I gzipped the original mbox file down to 14MB and removed the write flag with chmod. I launched TBird and received the following error in Activity Manager when accessing this IMAP folder: The current operation on '1-Spam-l' did not succeed. The mail server for account stan(a)hardwarefreak.com responded: Mailbox doesn't exist: 1-Spam-l I deleted the Dovecot index files and the TBird 1-Spam-l.msf file which didn't help. Curiously, there are no entries in either dovecot.err or dovecot.log, giving not even the slightest hint as to where I should troubleshoot. Kinda sucks when one follows instructions exactly, simple instructions at that, and it doesn't work, and generates zero log errors. A bit frustrating... Any ideas? /$ la /home/stan/mail/1-Spam-l.gz -r-------- 1 stan stan 14M Oct 28 2010 /home/stan/mail/1-Spam-l.gz # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.38.6 i686 Debian 6.0.3 xfs log_path: /var/log/dovecot.err info_log_path: /var/log/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap ssl_parameters_regenerate: 0 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_process_per_connection: no login_process_size: 16 login_processes_count: 1 login_max_processes_count: 1 login_max_connections: 8 max_mail_processes: 4 mail_privileged_group: mail mail_location: mbox:/home/%u/mail:INBOX=/var/mail/%u mailbox_idle_check_interval: 15 mbox_write_locks: fcntl mbox_very_dirty_syncs: yes mbox_lazy_writes: no mail_plugins: fts fts_squat zlib imap_client_workarounds: tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)hardwarefreak.com mail_plugins: sieve auth default: worker_max_count: 1 process_size: 16 passdb: driver: pam args: max_requests=1 userdb: driver: passwd plugin: fts: squat fts_squat: partial=4 full=10 -- Stan

2 5

[Dovecot] doveadm import assertion failed
by Micah Anderson 24 Nov '11

24 Nov '11

Restoring a user's mailbox yesterday resulted in 'doveadm import' panic'ing with an assertion failure and giving a backtrace: /usr/bin/doveadm import -u <user> mdbox:/maildir/riseup.net/a/<user>/.daily.1/mdbox restored_from_backups/daily1 all doveadm(<user>): Error: Transaction log /maildir/riseup.net/a/<user>/.daily.1/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index.log: duplicate transac tion log sequence (3) doveadm(<user>): Error: Transaction log /maildir/riseup.net/a/<user>/.daily.1/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index.log: duplicate transac tion log sequence (3) doveadm(<user>): Panic: file mail-transaction-log-file.c: line 187 (mail_transaction_log_file_add_to_list): assertion failed: ((*p)->hdr.file_se q < file->hdr.file_seq) doveadm(<user>): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3fd1a) [0x7f05152bbd1a] -> /usr/lib/dovecot/libdovecot.so.0(default_f atal_handler+0x32) [0x7f05152bbe02] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f051529519f] -> /usr/lib/dovecot/libdovecot-storage.so .0(+0xa596a) [0x7f05159e696a] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_transaction_log_file_open+0x1f8) [0x7f05159e7bc8] -> /usr/lib/ dovecot/libdovecot-storage.so.0(mail_transaction_log_find_file+0xd0) [0x7f05159e46e0] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_transa ction_log_view_set+0xcb) [0x7f05159e8bdb] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_map+0xbe) [0x7f05159dff6e] -> /usr/lib/ dovecot/libdovecot-storage.so.0(mail_index_map+0x86) [0x7f05159d1816] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x9a6da) [0x7f05159db6da] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_begin_to+0x56) [0x7f05159db956] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_ index_sync_begin+0x1e) [0x7f05159dc21e] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_sync_begin+0x121) [0x7f05159bbb41] -> /usr/lib/dove cot/libdovecot-storage.so.0(mdbox_sync+0x46) [0x7f05159bc1f6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_storage_sync_init+0x43) [0x7f 05159bc293] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x31) [0x7f0515974031] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x27) [0x7f05159748b7] -> /usr/bin/doveadm(doveadm_mail_iter_init+0x8b) [0x40c9db] -> /usr/bin/doveadm() [0x40c284] -> /usr/bin/doveadm() [0x40a673] -> /usr/bin/doveadm(doveadm_mail_single_user+0x61) [0x40a731] -> /usr/bin/doveadm() [0x40a95d] -> /usr/bin/doveadm(doveadm_mail_try_run+0x141) [0x40ad71] -> /usr/bin/doveadm(main+0x381) [0x4107e1] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f0514b2dc4d] -> /usr/bin/doveadm() [0x409e59] This is with 2.0.15. Micah --

2 1