- dovecot - dovecot.org

[Dovecot] Virtual and system users with public mailboxes
by kshaw＠kendallshaw.com 21 Mar '11

21 Mar '11

Hi, I am running dovecot 1.2.9 and postfix, and I am trying to setup a public mailbox. My thought is that there would be one system user with a sieve script to deliver messages to the public mailbox. And, I would like to give virtual users access to the mailbox. On this list, I read how you can have both system and virtual users by using passdb and static userdbs. But, I don't understand how this can be combined with namespaces, where I specify the location. For all virtual users I had: mail_location = maildir:/var/somewhere/%u/maildir/ I think I need that for virtual users and: maildir:~/Maildir for the system users. namespace private { location = ? # how do I have the location be different for system and virtual users? } namespace public { location = ? # ditto (for the index)? } Kendall

3 3

[Dovecot] maildir location
by upen 21 Mar '11

21 Mar '11

Hello, I am trying to use dovecot (v. 2.0.11) and postfix (v. 2.7.3) together. The email server is an ldap client and user's home directories on NFS server are mounted using autofs. As I understand, Maildir performance is better than mbox type, so I'd like to use Maildir instead of mbox. However, when I checked conf.d/10-mail.conf file, there is mail_location = maildir:~/.maildir already configured in it which means user's email will reside in their home directories on the NFS server rather than being on Email server's local storage where plenty of space is available. I anticipate due to NFS there will again be a performance hit . Question : Can I change mail_location for maildir to be somewhere other than ~/.maildir. ( like /var/mail/%u/Maildir, where /var/mail is local storage). There are about 200 ldap users who will be using this email server through squirrel-mail or access them through email clients. By the way, I am confused about one setting in postfix : home_mailbox = .maildir/ in main.cf . Does this really play any role? If so, which parameter should be changed and to what and with what permissions to the new directory. Hope I was able to explain, if not please let me know for more details.. Thanks, U

4 9

[Dovecot] Can't disable chroot to 'empty' dir, but need to... how to do it?
by Tim Bessie 21 Mar '11

21 Mar '11

Hello all... I've installed dovecot on my ISP's shell server, and am using SSH tunnelling so that I can retrieve my mbox-format mail from procmail-processed mailboxes on that server (normally I just ssh there and read them locally with pine, but now that I have a phone with an IMAP client, I wanted to be able to read it more easily there). The problem I'm having is, although it's working, whenever dovecot starts up, or I try to log in, it attempts to chroot to /home/mydir/dovecot/var/run/dovecot/empty (where /home/mydir/dovecot is the path to my dovecot installation). I've turned off all chroot'ing in all the config files, but it still seems to want to chroot to that one directory. The message I see in the log is: Mar 19 02:09:43 master: Info: Dovecot v2.0.11 starting up (core dumps disabled) Mar 19 02:09:44 anvil: Fatal: chroot(/home/mydir/dovecot/var/run/dovecot/empty) failed: Operation not permitted Mar 19 02:09:44 master: Error: service(anvil): command startup failed, throttling This doesn't cause a problem accessing my mail, but it DOES seem to wait 60 seconds between attempts at chroot'ing, so logins to the server take that long (until the chroot fails). Is there any way I can disable this? Again, I've followed the instructions and set 'chroot=' (empty) for all services, but that hasn't helped. - Tim

2 1

[Dovecot] Problem with pam-auth and winbind
by pk10＠ksiaznica.torun.pl 21 Mar '11

21 Mar '11

Hi I try to use windbind rule to authenticate users in dovecot login procedure. /etc/nsswitch.conf file: passwd: files winbind shadow: files winbind group: files winbind Configuration of the dovecot is follows: log_path: /var/log/dovecot/error.log info_log_path: /var/log/dovecot/info.log protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/pki/tls/certs/dovecot.pem ssl_key_file: /etc/pki/tls/private/dovecot.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/lib64/dovecot/imap-login login_executable(imap): /usr/lib64/dovecot/imap-login login_executable(pop3): /usr/lib64/dovecot/pop3-login mail_executable(default): /usr/lib64/dovecot/imap mail_executable(imap): /usr/lib64/dovecot/imap mail_executable(pop3): /usr/lib64/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib64/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/modules/pop3 auth default: mechanisms: plain login use_winbind: yes passdb: driver: pam args: dovecot userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix and configuration of the /etc/pam.d/dovecot is follows: #%PAM-1.0 auth required pam_env.so debug auth sufficient pam_winbind.so #auth sufficient pam_unix.so likeauth nullok use_first_pass auth required pam_deny.so # when I try logon from my console: # telnet komp14 110 Trying 10.10.10.38... Connected to komp.xxx.xxx (10.10.10.38). Escape character is '^]'. +OK Dovecot ready. user tt1 +OK pass xxxxxxxxx -ERR Authentication failed. quit +OK Logging out Connection closed by foreign host. Of course password is corret becouse #wbinfo -K tt1 Enter tt1's password: plaintext kerberos password authentication for [tt1] succeeded (requesting cctype: FILE) credentials were put in: FILE:/tmp/krb5cc_0 In the logs files I can find coresponding to the telnet command to dovecot: /var/log/auth.log Mar 14 09:43:22 komp14 dovecot-auth: pam_winbind(dovecot:auth): getting password (0x00000000) Mar 14 09:43:22 komp14 dovecot-auth: pam_winbind(dovecot:auth): user 'tt1' granted access /var/log/dovecot/info.log Mar 14 09:43:29 pop3-login: Info: Aborted login (auth failed, 1 attempts): user=<tt1>, method=PLAIN, rip=10.10.10.38, lip=10.10.10.38, secured I'll be apreciate for any hints. but in /var/log/dovecot/error.log we have information: Mar 14 09:43:29 auth-worker(default): Error: pam(tt1,10.10.10.38): pam_acct_mgmt() failed: Authentication failure This test was done with windbindd Version 3.5.3. When I test it on another machine with windbind Version 3.0.24 (config file are the same) authentication prosess is done properly. Any HINTS????

2 1

[Dovecot] DOVECOT TO HAVE MULTIPLE AUTHENTICATION MECHANISM FOR A PARTICULAR USER
by PARTH MONGA 21 Mar '11

21 Mar '11

Hi Friends IS IT POSSIBLE IN DOVECOT TO HAVE MULTIPLE AUTHENTICATION MECHANISM FOR A PARTICULAR USER as u provided me in the link http://wiki2.dovecot.org/Authentication/MultipleDatabases <http://wiki2.dovecot.org/Authentication/MultipleDatabases>The link is applied to all the users( system + virtual) , which increased my overhead of fetching data can i have the same for a particular user ( local + database ) auth mecahnism Thanks and Regards Parth Monga

2 1

[Dovecot] 2.0.11 segfault while can't access submission_host
by Maciej Uhlig 21 Mar '11

21 Mar '11

15-lda.conf: submission_host = 192.168.m.n:587 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.debug] lmtp(12354, user(a)us.edu.pl) Debug: mcQ1NitVh01CMAAAuqlTtQ: sieve: executing script from /mails/sieve/user(a)us.edu.pl.svbin 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.error] lmtp(12354, user(a)us.edu.pl) Error: smtp(192.168.m.n:587): RCPT TO failed: 554 5.7.1 <prac[192.168.x.y]>: Client host rejected: Access denied 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.error] master: Error: service(lmtp): child 12354 killed with signal 11 (core not dumped) in case submission_host grants access there is no segfault; mail sent ok. Regards, MU

2 1

[Dovecot] Sieve problems (not matching emails expected to match)
by Michael Welsh Duggan 21 Mar '11

21 Mar '11

I have a sieve file that reads like this: require "fileinto"; # Emacs if header :contains "List-Id" "emacs-devel.gnu.org" { fileinto "mail.emacs-devel"; } elsif header :contains "List-Id" "emacs-bidi.gnu.org" { fileinto "mail.emacs-bidi"; } ... Unfortunately the List-Id based lines don't appear to be working, although some other ones do. The attached test message does not get delivered to the mail.emacs-devel list. Why? -- Michael Welsh Duggan (md5i(a)md5i.com)

3 7

[Dovecot] dovecot authentication Local + MySQL
by PARTH MONGA 20 Mar '11

20 Mar '11

Hi Friends I am facing an issue with dovecot configuration and i am describing it in a nutshell. We have a dovecot setup under ultramonkey load balancer and in loadbalancer we have a check defined for pop service which queries mysqldatabase for a particular user name/password after every 2 minutes to check if service is live or not.. Things are fine till here . Now The catch is if somehow that particular user info(either password or username) is mistakenly changed in mysql database whole of my pop gets down beacuse load balancer cant login and that is a single point of failure in my setup . Now what i want is I want to know if there is any method that i can setup in dovecot to lookup for a user locally first and then go for a remote search for the user( ie in mysql database) So that we get the user searched locally before querying the mysql database Local + mysql database authetication i want to be in parallel with each other. Please show some light on this . Thanks and Regards Parth Monga

2 1

[Dovecot] Strange Dovecot Issue
by Scott Hughes 20 Mar '11

20 Mar '11

Greetings, I am trying to copy email from one server to another server using Thunderbird. The old server is a closed source ModusMail server and the new server is a Qmail server running Dovecot 1.2.3 (yes, I realize this is behind the times a bit). My issue is this: Whenever Thunderbird gets to a message that has been forwarded (has the forward flag set) an error is generated from the new server (dovecot) that it does not know how to handle the forward flag. Is this a known issue or is it simply that my version of Dovecot is behind? Thanks, Scott

1 0

[Dovecot] Question about "extracting" unwanted e-mails from mdbox
by Maria Arrea 20 Mar '11

20 Mar '11

Imagine the following scenario Last Saturday, 3:00 AM a big phishing attack hits our e-mail inboxes. Spamassassin does not mark them as spam, and our 50.000+ users have in their mdbox a very credible phishing attack. What doveadm-fu could I use to delete (or move to spam) that e-mail from each user INBOX (let´s imagine the Subject or a Header is known)? I repeat: already delivered e-mail, how to filter/prune it. Regards Maria

3 2