- dovecot - dovecot.org

[Dovecot] Can't disable chroot to 'empty' dir, but need to... how to do it?
by Tim Bessie 21 Mar '11

21 Mar '11

Hello all... I've installed dovecot on my ISP's shell server, and am using SSH tunnelling so that I can retrieve my mbox-format mail from procmail-processed mailboxes on that server (normally I just ssh there and read them locally with pine, but now that I have a phone with an IMAP client, I wanted to be able to read it more easily there). The problem I'm having is, although it's working, whenever dovecot starts up, or I try to log in, it attempts to chroot to /home/mydir/dovecot/var/run/dovecot/empty (where /home/mydir/dovecot is the path to my dovecot installation). I've turned off all chroot'ing in all the config files, but it still seems to want to chroot to that one directory. The message I see in the log is: Mar 19 02:09:43 master: Info: Dovecot v2.0.11 starting up (core dumps disabled) Mar 19 02:09:44 anvil: Fatal: chroot(/home/mydir/dovecot/var/run/dovecot/empty) failed: Operation not permitted Mar 19 02:09:44 master: Error: service(anvil): command startup failed, throttling This doesn't cause a problem accessing my mail, but it DOES seem to wait 60 seconds between attempts at chroot'ing, so logins to the server take that long (until the chroot fails). Is there any way I can disable this? Again, I've followed the instructions and set 'chroot=' (empty) for all services, but that hasn't helped. - Tim

2 1

[Dovecot] Problem with pam-auth and winbind
by pk10＠ksiaznica.torun.pl 21 Mar '11

21 Mar '11

Hi I try to use windbind rule to authenticate users in dovecot login procedure. /etc/nsswitch.conf file: passwd: files winbind shadow: files winbind group: files winbind Configuration of the dovecot is follows: log_path: /var/log/dovecot/error.log info_log_path: /var/log/dovecot/info.log protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/pki/tls/certs/dovecot.pem ssl_key_file: /etc/pki/tls/private/dovecot.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/lib64/dovecot/imap-login login_executable(imap): /usr/lib64/dovecot/imap-login login_executable(pop3): /usr/lib64/dovecot/pop3-login mail_executable(default): /usr/lib64/dovecot/imap mail_executable(imap): /usr/lib64/dovecot/imap mail_executable(pop3): /usr/lib64/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib64/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/modules/pop3 auth default: mechanisms: plain login use_winbind: yes passdb: driver: pam args: dovecot userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix and configuration of the /etc/pam.d/dovecot is follows: #%PAM-1.0 auth required pam_env.so debug auth sufficient pam_winbind.so #auth sufficient pam_unix.so likeauth nullok use_first_pass auth required pam_deny.so # when I try logon from my console: # telnet komp14 110 Trying 10.10.10.38... Connected to komp.xxx.xxx (10.10.10.38). Escape character is '^]'. +OK Dovecot ready. user tt1 +OK pass xxxxxxxxx -ERR Authentication failed. quit +OK Logging out Connection closed by foreign host. Of course password is corret becouse #wbinfo -K tt1 Enter tt1's password: plaintext kerberos password authentication for [tt1] succeeded (requesting cctype: FILE) credentials were put in: FILE:/tmp/krb5cc_0 In the logs files I can find coresponding to the telnet command to dovecot: /var/log/auth.log Mar 14 09:43:22 komp14 dovecot-auth: pam_winbind(dovecot:auth): getting password (0x00000000) Mar 14 09:43:22 komp14 dovecot-auth: pam_winbind(dovecot:auth): user 'tt1' granted access /var/log/dovecot/info.log Mar 14 09:43:29 pop3-login: Info: Aborted login (auth failed, 1 attempts): user=<tt1>, method=PLAIN, rip=10.10.10.38, lip=10.10.10.38, secured I'll be apreciate for any hints. but in /var/log/dovecot/error.log we have information: Mar 14 09:43:29 auth-worker(default): Error: pam(tt1,10.10.10.38): pam_acct_mgmt() failed: Authentication failure This test was done with windbindd Version 3.5.3. When I test it on another machine with windbind Version 3.0.24 (config file are the same) authentication prosess is done properly. Any HINTS????

2 1

[Dovecot] DOVECOT TO HAVE MULTIPLE AUTHENTICATION MECHANISM FOR A PARTICULAR USER
by PARTH MONGA 21 Mar '11

21 Mar '11

Hi Friends IS IT POSSIBLE IN DOVECOT TO HAVE MULTIPLE AUTHENTICATION MECHANISM FOR A PARTICULAR USER as u provided me in the link http://wiki2.dovecot.org/Authentication/MultipleDatabases <http://wiki2.dovecot.org/Authentication/MultipleDatabases>The link is applied to all the users( system + virtual) , which increased my overhead of fetching data can i have the same for a particular user ( local + database ) auth mecahnism Thanks and Regards Parth Monga

2 1

[Dovecot] 2.0.11 segfault while can't access submission_host
by Maciej Uhlig 21 Mar '11

21 Mar '11

15-lda.conf: submission_host = 192.168.m.n:587 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.debug] lmtp(12354, user(a)us.edu.pl) Debug: mcQ1NitVh01CMAAAuqlTtQ: sieve: executing script from /mails/sieve/user(a)us.edu.pl.svbin 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.error] lmtp(12354, user(a)us.edu.pl) Error: smtp(192.168.m.n:587): RCPT TO failed: 554 5.7.1 <prac[192.168.x.y]>: Client host rejected: Access denied 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.error] master: Error: service(lmtp): child 12354 killed with signal 11 (core not dumped) in case submission_host grants access there is no segfault; mail sent ok. Regards, MU

2 1

[Dovecot] Sieve problems (not matching emails expected to match)
by Michael Welsh Duggan 21 Mar '11

21 Mar '11

I have a sieve file that reads like this: require "fileinto"; # Emacs if header :contains "List-Id" "emacs-devel.gnu.org" { fileinto "mail.emacs-devel"; } elsif header :contains "List-Id" "emacs-bidi.gnu.org" { fileinto "mail.emacs-bidi"; } ... Unfortunately the List-Id based lines don't appear to be working, although some other ones do. The attached test message does not get delivered to the mail.emacs-devel list. Why? -- Michael Welsh Duggan (md5i(a)md5i.com)

3 7

[Dovecot] dovecot authentication Local + MySQL
by PARTH MONGA 20 Mar '11

20 Mar '11

Hi Friends I am facing an issue with dovecot configuration and i am describing it in a nutshell. We have a dovecot setup under ultramonkey load balancer and in loadbalancer we have a check defined for pop service which queries mysqldatabase for a particular user name/password after every 2 minutes to check if service is live or not.. Things are fine till here . Now The catch is if somehow that particular user info(either password or username) is mistakenly changed in mysql database whole of my pop gets down beacuse load balancer cant login and that is a single point of failure in my setup . Now what i want is I want to know if there is any method that i can setup in dovecot to lookup for a user locally first and then go for a remote search for the user( ie in mysql database) So that we get the user searched locally before querying the mysql database Local + mysql database authetication i want to be in parallel with each other. Please show some light on this . Thanks and Regards Parth Monga

2 1

[Dovecot] Strange Dovecot Issue
by Scott Hughes 20 Mar '11

20 Mar '11

Greetings, I am trying to copy email from one server to another server using Thunderbird. The old server is a closed source ModusMail server and the new server is a Qmail server running Dovecot 1.2.3 (yes, I realize this is behind the times a bit). My issue is this: Whenever Thunderbird gets to a message that has been forwarded (has the forward flag set) an error is generated from the new server (dovecot) that it does not know how to handle the forward flag. Is this a known issue or is it simply that my version of Dovecot is behind? Thanks, Scott

1 0

[Dovecot] Question about "extracting" unwanted e-mails from mdbox
by Maria Arrea 20 Mar '11

20 Mar '11

Imagine the following scenario Last Saturday, 3:00 AM a big phishing attack hits our e-mail inboxes. Spamassassin does not mark them as spam, and our 50.000+ users have in their mdbox a very credible phishing attack. What doveadm-fu could I use to delete (or move to spam) that e-mail from each user INBOX (let´s imagine the Subject or a Header is known)? I repeat: already delivered e-mail, how to filter/prune it. Regards Maria

3 2

[Dovecot] remove old files
by Stéphane Guedon 20 Mar '11

20 Mar '11

Hello I use the dovecot 2.0.10 server and wonder how to clean up correctly the old mails (especially for spam folder). I use maildir storage, and wonder if deleting files with an rm and file command combinaison would be good or would corrupt indexes files/whatever. for exemple, the spam folder is in ~/.mail/.INBOX.spam/ Thus, can I "cd ~/.mail/.INBOX.spam/ && rm 'files older than 2 months' " or something else ? Thanks. -- Stéphane Guedon page web : http://www.22decembre.eu/ carte de visite : http://www.22decembre.eu/downloads/Stephane-Guedon.vcf clé publique gpg : http://www.22decembre.eu/downloads/Stephane-Guedon.asc

2 1

Re: [Dovecot] dovecot proxy, imapproxy, perdition . . . or?
by jkrejci＠usinternet.com 20 Mar '11

20 Mar '11

We use proxy_maybe across several servers handling over 10,000 accounts with no problems. ------Original Message------ From: Dennis Guhl Sender: dovecot-bounces+jkrejci=usinternet.com(a)dovecot.org To: dovecot(a)dovecot.org ReplyTo: dovecot(a)dovecot.org Subject: Re: [Dovecot] dovecot proxy, imapproxy, perdition . . . or? Sent: Mar 19, 2011 4:32 PM On Sat, Mar 19, 2011 at 09:50:15PM +0100, Lorens Kockum wrote: > Hi, > > I have two load-balanced dovecot servers using a single NFS > mount. The version is 1.2.11. I chose this so that if one server [..] > reasons, and also that dovecot has an included proxy, and > that its performance is better than perdition. However on > http://wiki.dovecot.org/HowTo/ImapProxy the feature "IMAP/POP3 > server with proxy feature" is noted as "This model is still a > bit unfinished in current code." > > Is this still true? There's also a general note that "This page > was written quite a long time ago and may not match reality > anymore" . . . I use 1.2.15 from Debian Lennys backports in a proxy configuration for a medium three digit number of users without any problems. Dennis Sent via BlackBerry from T-Mobile

1 0