- dovecot - dovecot.org

[Dovecot] dovecot with Active Directory problem
by marie ot 18 Nov '10

18 Nov '10

Hello, I am using dovecot-2.0.6 with NetBSD amd64. Active Directory is used as an authentication server. (Windows Server 2008 R2) However, the message of "Operations error" was displayed first and it did not move. It solved it by understanding that this is because the authority of the user who used it for bind was insufficient, and adding to "Account Operators" group. # Though it is not the best. The error "Error: re_encode_request new request is" occurs, and it doesn't operate still as follows. Postfix operates though connects with LDAP. The following are samples. ------------------------ # Active Directory Server settings domain = example.com server_host = ldap://xxx.xxx.xxx.xxx:389 search_base = dc=example, dc=com version = 3 timeout = 30 # Active Directory Searcher settings bind = yes bind_dn = cn=Mail Administrator, cn=Users, dc=example, dc=com bind_pw = ********* # Filter Query query_filter = (&(&(objectCategory=person)(|(mail=%s)(userPrincipalName=%s)))(!(userAccountControl:1.2.840.113556.1.4.803:=2))) result_attribute = userPrincipalName result_filter = %s/ chase_referrals = no ------------------------ The packet was done with wireshark by using this definition and a capture doing and a similar test were done to dovecot. It is a setting of dovecot. ------------------------ hosts = xxx.xxx.xxx.xxx:389 dn = cn=Mail Administrator, cn=Users, dc=example, dc=com dnpass = ********* auth_bind = no ldap_version = 3 base = dc=example, dc=com user_attrs = unixHomeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (&(&(objectCategory=person)(userPrincipalName=%u))(!(userAccountControl:1.2.840.113556.1.4.803:=2))) pass_attrs = userPrincipalName=user,unixUserPassword=password pass_filter = (&(&(objectCategory=person)(userPrincipalName=%u))(!(userAccountControl:1.2.840.113556.1.4.803:=2))) iterate_attrs = userPrincipalName=user iterate_filter = (&(objectCategory=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) default_pass_scheme = MD5 ------------------------ # Schema of LDAP is matched to Windows Services for UNIX, # and the password is made a hush with MD5. Both dovecot and postfix the first "bindRequest" was quite the same demand and the results. Next, dovecot demanded query of "userPrincipalName" and "unixUserPassword". It seems to be ok for the result. # This fails if it doesn't add to "Account Operators" group. However, "name" and "simple" were issued by the blank (anonymously?) as for the following next demand (bindRequest). In addition, query of "userPrincipalName" and "unixUserPassword" is issued to "cn=Configuration, dc=example, dc=com" afterwards. And, "Operations Error" is returned because of this. Error description in LDAP packet: ------------------------ errorMessage: 000004DC: LdapErr: DSID-0C0906DC, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db0 ------------------------ Because LDAP is unprofessional, it has not understood though the source code was seen. Do you serve as a reference? Thanks powerful codes.

2 1

[Dovecot] problems with folders in another server
by Jose Luis Faria 18 Nov '10

18 Nov '10

Hello ppl, we are using two servers, with dovecot 2.0.5, Sx and Sy, with: cat dovecot-ldap-ext: ... pass_attrs = uid=user,userPassword=password,=y=proxy,mailHost=host ... When I access server Sx via IMAP I see all my folders. When I access server Sy via IMAP I only see the INBOX. I want to see my IMAP folders independently of the server. any help? -- :) cumprimentos ---------------------- José Luís Faria Network Eng./Administrador de Sistemas Departamento de Informática Universidade do Minho Braga, Portugal

1 0

[Dovecot] Multiple MYSQL hosts as passdb backend
by moody_cz 18 Nov '10

18 Nov '10

Hello, I use mysql as passdb backend for my dovecot 2.0.6 installation. I have 2 mysql 5.0.77 servers with master/slave replication enabled. My goal is to ensure dovecot's ability to provide its services even when one of the mysql hosts are unavailable. Here is my passdb backend conf: passdb { driver = sql args = /etc/dovecot/mysql.conf } and mysql.conf: default_pass_scheme = PLAIN driver = mysql connect = host=10.0.0.3 host=10.0.0.4 dbname=some_database user=some_user password=some_password password_query = some_query Everything works fine as long as 10.0.0.3 is up and running. However, when I shutdown mysql server on 10.0.0.3, dovecot won't even try the other host 10.0.0.4 as it is told to do in the conf. My dovecot verbose log says: Nov 16 14:29:24 auth: Error: mysql: Query failed, retrying: MySQL server has gone away Nov 16 14:29:24 auth: Error: mysql: Connect failed to 10.0.0.3 (some_database): Can't connect to MySQL server on '10.0.0.3' (111) - waiting for 1 seconds before retry Nov 16 14:30:28 auth-worker: Error: mysql: Query timed out (no free connections for 64 secs): some_sql_query Nov 16 14:30:28 auth-worker: Error: sql(mail_user,127.0.0.1): Password query failed: Not connected to database Nov 16 14:30:28 auth: Error: auth worker: Aborted request: Lookup timed out Nov 16 14:30:28 auth: Error: mysql: Connect failed to 10.0.0.3 (some_database): Can't connect to MySQL server on '10.0.0.3' (111) - waiting for 1 seconds before retry Nov 16 14:31:33 pop3-login: Info: Disconnected (auth failed, 1 attempts): user=<mail_user>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured What am I doing wrong? Thanks for reply in advance. -- View this message in context: http://old.nabble.com/Multiple-MYSQL-hosts-as-passdb-backend-tp30234196p302… Sent from the Dovecot mailing list archive at Nabble.com.

2 2

[Dovecot] Debian package init scripts
by Jan Behrend 18 Nov '10

18 Nov '10

Dearest list, I am using dovecot with heartbeat-2 and I noticed that the init scripts in the Debian packages from http://xi.rename-it.nl/debian/ do not conform to the LSB standard: http://refspecs.freestandards.org/LSB_3.1.1/LSB-Core-generic/LSB-Core-gener… E.g. the return code for "program is not running" is not 3. Is there is special reason for this? Cheers Jan -- MAX-PLANCK-INSTITUT fuer Radioastronomie Jan Behrend - Rechenzentrum ---------------------------------------- Auf dem Huegel 69, D-53121 Bonn Tel: +49 (228) 525 359, Fax: +49 (228) 525 229 jbehrend(a)mpifr-bonn.mpg.de http://www.mpifr-bonn.mpg.de

2 1

[Dovecot] add basic systemd support to dovecot
by Christophe Fergeau 17 Nov '10

17 Nov '10

Hi all, In the last days, I've been trying to add support for systemd[1] socket activation to dovecot. The basic idea is that systemd takes care of opening the sockets needed by dovecot to communicate with external processes, and when a connection happens on one of these sockets, systemd spawns dovecot, and then dovecot uses these sockets instead of creating its own sockets. The main reason why I hacked on this was that I wanted to get on-demand startup of dovecot on my home box. WIth the patch attached to this email, I'm now able to do that. The patch includes a dovecot.socket file which should be seen as a sample file, however I'm not sure what is the best way to handle this file (systemd uses it to know which sockets dovecot needs). What I wanted to ask the list for now is if such a patch is wanted, and to get feedback on how things are done in it, and what should be improved in it. [2] and [3] might be useful reading while looking at the patch. Thanks in advance for the feedback! Christophe [1] http://www.freedesktop.org/wiki/Software/systemd [2] http://0pointer.de/public/systemd-man/daemon.html [3] http://0pointer.de/public/systemd-man/sd-daemon.html

2 5

[Dovecot] Ongoing performance issues with 2.0.x
by Ralf Hildebrandt 17 Nov '10

17 Nov '10

Due to the ongoing performance issues with 2.0.x I switched back to 1.2.15 yesterday evening, with no changes to the machine or my users. (I migrated from 1.2.15 to 2.0.x by converting the existing config) Today, we have MUCH LESS load, with the same number of logins/min. I cannot say what exactly causes this immense increase in load, but one observation is that the time spent in system() has now dropped (user and iowait have stayed contant) to a third of the values I was seeing with 2.0.x. This evening I'll post some graphs showing two comparable 24 hour ranges. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

12 56

[Dovecot] \Noselect eliciting bug?
by David Ford 17 Nov '10

17 Nov '10

Timo, examine these two simplified sets if you will. This, is a properly working $inbox folder: d /home/david/.maildir /home/david/.maildir/dovecot.* d /home/david/.maildir/cur d /home/david/.maildir/new d /home/david/.maildir/tmp /home/david/.maildir/subscriptions This one is not, $inbox becomes \Noselect: d /home/david/.maildir /home/david/.any-file /home/david/.maildir/dovecot.* d /home/david/.maildir/cur d /home/david/.maildir/new d /home/david/.maildir/tmp /home/david/.maildir/subscriptions i can make directories willy nilly starting with a dot, but a -file- starting with a dot breaks my mailbox. it doesn't affect any other folder, just $inbox 2.0.6

2 1

[Dovecot] Recommended quota backend for a virtual users setup using ldap and sdbox
by Aliet Santiesteban Sifontes 17 Nov '10

17 Nov '10

Just that, wich is the recommended quota backend for sdbox in terms of performance and flexibility running a setup of virtual users with ldap??... thank's in advance...

2 1

[Dovecot] child 23925 killed with signal 6
by Jan Behrend 17 Nov '10

17 Nov '10

Dearest list, just now I migrated a pine user to dovecot. Nothing special so far, but then I saw this in my syslog and the user reported, that he got this error message: MAIL FOLDER "INBOX" CLOSED DUE TO ACCESS ERROR Obviously this problem is related to his local filter rules: If commented out everything works like a charm. The corresponding filter rule looks for a "From"-Line in the email header but the filter string itself is empty. I know this filter rule does not make a lot of sense, but nevertheless it shouldn't crash the imap process. If there is any additional information you need please ask. --- snip --- Nov 16 11:25:07 imap-mgt dovecot: imap(username): Panic: file istream-header-filter.c: line 520 (i_stream_create_header_filter): assertion failed: (ret < 0) Nov 16 11:25:07 imap-mgt dovecot: imap(username): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3e81b) [0x7f82a3bc381b] -> /usr/lib/dovecot/libdovecot.so.0(+0x3e876) [0x7f82a3bc3876] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f82a3b9dacf] -> /usr/lib/do vecot/libdovecot.so.0(i_stream_create_header_filter+0x27b) [0x7f82a3babf9b] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_get_header_stream+0x154) [0x7f82a3e4cf04] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_storage_search_next_nonblock+0x530) [0x7f82a3e4e7 e0] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_search_next_nonblock+0x20) [0x7f82a3e36630] -> dovecot/imap() [0x416284] -> dovecot/imap(imap_search_start+0x106) [0x4166f6] -> dovecot/imap(cmd_search+0xc5) [0x40d535] -> dovecot/imap() [0x41032d] -> dovecot/imap() [0x41040d] -> dovecot/imap(client_handle_input+0x135) [0x410635] -> dovecot/imap(client_input+0x5f) [0x410f5f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xb5) [0x7f82a3bcf205] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x18) [0x7f82a3bce338] -> /usr/lib /dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f82a3bbd0e3] -> dovecot/imap(main+0x2d1) [0x418f91] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f82a3436c4d] -> dovecot/imap() [0x408c39] Nov 16 11:25:07 imap-mgt dovecot: master: Error: service(imap): child 23925 killed with signal 6 (core not dumped) --- snip --- doveconf -n: # 2.0.7 (3aced5ececd7): /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-amd64 x86_64 Debian 5.0.6 xfs auth_gssapi_hostname = imap.mpifr-bonn.mpg.de auth_mechanisms = plain login gssapi auth_verbose = yes listen = 134.104.18.77 mail_gid = 40000 mail_location = mdbox:/var/mail/%Ln mail_uid = 40000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . } passdb { args = /etc/dovecot/dovecot-ldap-passdb.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_after = /home/global-after.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { group = vmail } } service lmtp { inet_listener lmtp { address = 134.104.18.77 port = 24 } } service managesieve-login { inet_listener sieve { address = 134.104.18.77 port = 4190 } } ssl = required ssl_cert = </etc/ssl/certs/imap-server.pem ssl_key = </etc/ssl/private/imap-server.key userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lmtp { mail_plugins = " sieve" } protocol imap { ssl_cert = </etc/ssl/certs/imap-server.pem ssl_key = </etc/ssl/private/imap-server.key } protocol pop3 { ssl_cert = </etc/ssl/certs/pop3-server.pem ssl_key = </etc/ssl/private/imap-server.key } -- MAX-PLANCK-INSTITUT fuer Radioastronomie Jan Behrend - Rechenzentrum ---------------------------------------- Auf dem Huegel 69, D-53121 Bonn Tel: +49 (228) 525 359, Fax: +49 (228) 525 229 jbehrend(a)mpifr-bonn.mpg.de http://www.mpifr-bonn.mpg.de

2 1

[Dovecot] local users and virtual users
by Egbert Jan van den Bussche 17 Nov '10

17 Nov '10

Hi list, I'm facing this problem: I have a e few local (system) users and a bunch of virtual users (in MySQL). To make it easy for the big group, I've set a default domain which is not the domain of the server (which is just the servername). So the big group logs in with there short name without @<domain>. BUT the few system users (in passwd) cannot login to pop or imap because they get the non-local domain attached and cannot be found in the mysql db but they cannot be found in passdb either with their long name. The same applies when system users give their longname with the local domain which IS the localname of the server. This name is not in mysql nor passdb either. Is there a way to find local users in passdb when the come in with a long name? Do I need another passwd like file (i hope not...) Recap: local Domain is :mail-dev.hobby.nl default domain added bij dovecot is kader.hcc.nl kader users are found in mysql regardless if they give @kader.hcc.nl or not (then it is added) system user are never found since longname is not in mysql nor in passdb. dovecot -n: root@mail-dev:/etc/dovecot# dovecot -n # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-25-server x86_64 Ubuntu 10.04.1 LTS log_path: /var/log/dovecot/error.log info_log_path: /var/log/dovecot/info.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 imaps pop3s managesieve listen: *, [::] ssl_cert_file: /etc/ssl/certs/ssl-mail.pem ssl_key_file: /etc/ssl/private/ssl-mail.key ssl_cipher_list: ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_max_userip_connections(default): 10 mail_max_userip_connections(imap): 10 mail_max_userip_connections(pop3): 3 mail_max_userip_connections(managesieve): 10 verbose_proctitle: yes first_valid_uid: 200 mail_privileged_group: vmail mail_location: maildir:~/Maildir mail_debug: yes mmap_disable: yes dotlock_use_excl: no mail_nfs_storage: yes mail_nfs_index: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): convert autocreate mail_plugins(imap): convert autocreate mail_plugins(pop3): convert autocreate mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): lda: postmaster_address: postmaster deliver_log_format: msgid=%m: %$ rejection_reason: Your message to <%t> was automatically rejected:%n%r auth_socket_path: /var/run/dovecot/auth-master auth default: mechanisms: plain login realms: kader.hcc.nl hobby.nl default_realm: kader.hcc.nl cache_size: 1024 verbose: yes debug: yes debug_passwords: yes passdb: driver: pam args: failure_show_msg=yes cache_key=%u dovecot passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: passwd args: mail=maildir:~/Maildir userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/dovecot-auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: convert_mail: mbox:/disk/mail/convert/%n autocreate: Trash autocreate2: Sent autocreate3: Drafts autocreate4: Spam autosubscribe: Trash autosubscribe2: Sent autosubscribe3: Drafts autosubscribe4: Spam Pse help. TIA! Egbert Jan

2 1