- dovecot - dovecot.org

[Dovecot] Dovecot "deliver" with multiple UIDs (security question)
by Buzai Andras 12 Jul '10

12 Jul '10

Hi all, I have a question related to using the Dovecot LDA (deliver) with a multiple UID setup as described on the http://wiki.dovecot.org/LDA page in the "Multiple UIDs" section. I run Postfix (virtual mailboxes) + Dovecot using multiple UIDs (one UID per virtual domain owner). I configured Postfix to use Dovecot Deliver for the virtual transport. To overcome the problem of multiple UIDs I used the solution described on the http://wiki.dovecot.org/LDA page in the "Multiple UIDs" section. I used the "sudo" solution as described on the page. I only call the deliver with sudo from inside Postfix and the sudoer user is only allowed to sudo on the deliver binary. My question is: Is this solution secure? Can It be used on a production environment? What exactly happens in the background from the time I call "deliver" with sudo, to the time the delivery is finished? The configuration works. The emails get delivered but I am concerned about the security of this setup :(. Thank you, Buzai Andras

3 7

[Dovecot] TLS Issue
by Leander S. 12 Jul '10

12 Jul '10

Hi, I use Postfix & Dovecot with TLS / SSL - it authenticates / works fine - except I'm always getting this ugly SSL cert warning messages mit MTAs. It says that the following: "You have attempted to establish a connection with "server". However, the security certificate presented belongs to "*.server". It is possible, though unlikely, that someone may be trying to intercept your communication with this web site." Is there a serverside solution that I wont get that any more? Why is * as a wildcard not working? Iwonder How gMail or other providers solve that issue Regards

3 2

[Dovecot] deliver and root user
by Bradlee Landis 12 Jul '10

12 Jul '10

On RHEL5, dovecot 1.0.7, I have set up sendmail to use `deliver` for my local mda. It keeps giving me this error for the root user though: Jul 12 12:51:29 mail sendmail[4105]: o699225f001348: to=<root(a)localhost.localdomain>, ctladdr=<root(a)localhost.localdomain> (0/0), delay=3+08:49:26, xdelay=00:00:00, mailer=local, pri=7502879, dsn=4.0.0, stat=Deferred: local mailer (/usr/libexec/dovecot/deliver) exited with EX_TEMPFAIL I've tried to `chmod +s /usr/libexec/dovecot/deliver`, which I read might fix some of those issues, but it didn't. Anyways, here are the important changes I made in my config files for using `deliver`: == sendmail.mc == ... dnl ## Should I modify this?? define(`PROCMAIL_MAILER_PATH', `/usr/bin/procmail')dnl ... dnl ## Should I have "localhost.localdomain" here? It currently is not. LOCAL_DOMAIN(`mydomain.com') ... FEATURE(`local_procmail', `/usr/libexec/dovecot/deliver',`/usr/libexec/dovecot/deliver -d $u') MODIFY_MAILER_FLAGS(`LOCAL', `-f') ... MAILER(smtp) MAILER(procmail) MAILER(local) == END == == dovecot.conf == ... protocol lda { postmaster_address = postmaster(a)mydomain.com hostname = mydomain.com } == END == Any ideas, or do you need more information? -- Thanks, Brad Landis

4 5

[Dovecot] Dovecot + OCFS2
by Thiago Henrique 12 Jul '10

12 Jul '10

Hello, I intend to make a cluster with Dovecot + OCFS2. The tests are working with the default settings of the Dovecot. But it seems too easy to be true. Is there any special configuration of Dovecot to implement it?-- Thank you -- []'s Thiago Henrique Network Administration Digirati Networks K8 Networks

2 1

[Dovecot] Dovecot-lda and Postfix virtual
by D F 12 Jul '10

12 Jul '10

Hello, I'm currently testing Dovecot 2.0RC2 and I have a problem migrating my current configuration. Current configuration is : - Dovecot as IMAP server - Postfix as SMTP/LDA with virtual users. main.cf is : #----------------------------------------------------------- # inet_protocols = all myhostname = mail.domain.tld mydomain = domain.tld myorigin = $mydomain inet_interfaces = all mydestination = localhost local_transport = virtual local_recipient_maps = hash:/etc/postfix/domain.tld virtual_mailbox_base = /home/mail virtual_mailbox_maps = hash:/etc/postfix/domain.tld virtual_mailbox_domains = domain.tld virtual_uid_maps = static:5000 virtual_gid_maps = static:5000 unknown_local_recipient_reject_code = 550 mynetworks = 127.0.0.0/8, [::1]/128 smtpd_banner = $myhostname ESMTP mailbox_size_limit = 0 message_size_limit = 0 virtual_mailbox_limit = 0 smtpd_helo_required = yes # smtpd_sasl_auth_enable = yes smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_helo_hostname, reject_invalid_helo_hostname # debug_peer_level = 1 sendmail_path = /usr/sbin/sendmail newaliases_path = /usr/bin/newaliases mailq_path = /usr/bin/mailq setgid_group = postdrop html_directory = no manpage_directory = /usr/local/man sample_directory = /etc/postfix readme_directory = no queue_directory = /var/spool/postfix command_directory = /usr/sbin daemon_directory = /usr/libexec/postfix mail_owner = postfix alternate_config_directories = /etc/postfix #----------------------------------------------------------- /etc/postfix/domain.tld looks like : #----------------------------------------------------------- # User denis(a)domain.tld /domain.tld/denis/ # Admin root(a)domain.tld /domain.tld/denis/.system/ dnsowner(a)domain.tld /domain.tld/denis/.system/ abuse(a)domain.tld /domain.tld/denis/.system/ postmaster(a)domain.tld /domain.tld/denis/.system/ #----------------------------------------------------------- Currently, I can send mails to denis(a)domain.tld or root(a)domain.tld and they are all accepted and placed in the right IMAP folder/subfolder. Now I'd like to use Dovecot as a LDA (I want to use Sieve). I first add "mailbox_command = /usr/local/libexec/dovecot/dovecot-lda" and "virtual_transport = dovecot" to postfix.conf. Then I add "dovecot unix - n n - - pipe flags=DRhu user=nobody:nobody argv=/usr/local/libexec/dovecot/dovecot-lda -f ${sender} -d ${recipient}" to master.cf Here is my Dovecot config : #----------------------------------------------------------- listen = *, :: protocols = imap base_dir = /var/run/dovecot/ login_greeting = domain.tld IMAP ready. disable_plaintext_auth = no auth_mechanisms = plain auth_failure_delay = 2 secs mail_location = dbox:/home/mail/%d/%n default_login_user = dovenull default_internal_user = dovecot service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service auth { # Postfix smtp-auth unix_listener /var/spool/postfix/private/auth { mode = 0666 user = postfix group = postfix } unix_listener auth-userdb { mode = 0666 user = nobody group = nobody } } passdb { driver = passwd-file args = /usr/local/etc/dovecot/users.db } userdb { driver = passwd-file args = /usr/local/etc/dovecot/users.db } ssl = no #----------------------------------------------------------- /usr/local/etc/dovecot/users.db looks like : #----------------------------------------------------------- denis@domain.tld:password:5000:5000::/home/mail/domain.tld/denis #----------------------------------------------------------- If I send a mail to denis(a)domain.tld it works great, if I send a mail to root(a)domain.tld, it tells the user is non-existent. Is it possible to work the way it used to and benefit from dovecot-lda ? I read http://wiki2.dovecot.org/LDA/Postfix but it seems none of the case looks like mine. Thank you in advance, Denis

2 2

[Dovecot] SSL / TLS Problem
by Leander S. 12 Jul '10

12 Jul '10

Hi, since I upgraded to the new Thunderbird version 3.1 I can't establish a TLS/SSL connection anymore. But before the update Thunerbird was able to establish an encrypted session ... Maillog shows me the following now: server dovecot: imap-login: Disconnected (no auth attempts): rip=84.157.133.248, lip=192.168.1.100, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca Why is the CA unknowen - all of a sudden - ?! Thanks

2 4

[Dovecot] Can only see some folders of inbox
by He Llo 12 Jul '10

12 Jul '10

I've had a working system for ages now with Postfix/Dovecot/Squirrelmail. This evening the right hand pane of Squirrel Mail failed to complete with the Inbox selected but would show some of the other folders. I can also filter and access mail from the 'Invisible' inbox. Other mailboxes on the same server are fine. I've copied my version number below and the output of dovecot -n In the dovecot.log I can see lots of entries like: Warning I/O leak: 0x804d640 (13) or (15) and IMAP login killed with signal 15. I get the same behaviour if I connect with Outlook 2007 configured for IMAP. The mailbox has a lot of mail in it: easily a couple of GB. Very puzzled and would appreciate any help. Many thanks in advance, Mark. ............................................................ Using Postfix with Dovecot V1.0.9 [root@mailer log]# dovecot -n # 1.0.9: /usr/local/etc/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-info.log ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login login_max_processes_count: 64 mail_location: maildir:/home/vmail/%d/%n/Maildir dotlock_use_excl: yes maildir_copy_with_hardlinks: yes auth default: verbose: yes passdb: driver: passwd-file args: /etc/dovecot/passwd userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u _________________________________________________________________ http://clk.atdmt.com/UKM/go/197222280/direct/01/ Do you have a story that started on Hotmail? Tell us now

2 2

[Dovecot] dsync crash
by Matthias Rieber 12 Jul '10

12 Jul '10

Hi, while syncing dsync crashed: dsync-local(matthias): Panic: dsync brain state=10 dsync-local(matthias): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0 [0xf7eed541] -> /usr/local/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x4e) [0xf7eed66e] -> /usr/local/lib/dovecot/libdovecot.so.0(i_error+0) [0xf7eed878] -> dsync [0x804e106] -> dsync [0x80539b7] -> dsync [0x8053c72] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xf5) [0xf7ef9bc5] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x30) [0xf7ef8c10] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x2a) [0xf7ee629a] -> dsync(main+0x7aa) [0x804da3a] -> /lib/libc.so.6(__libc_start_main+0xe5) [0xf7d7a455] -> dsync [0x804d0c1] I don't have a full backtrace. When I repeated the sync it seemed to work. Regards, Matthias

2 5

[Dovecot] UID FETCH returns results outside requested range
by David Woodhouse 12 Jul '10

12 Jul '10

00 SELECT INBOX * OK [CLOSED] Previous mailbox closed. * FLAGS (\Answered \Flagged \Deleted \Seen \Draft Junk $Label1 $Label2 $Label3 $Label4 $Label5 receipt-handled NotJunk NonJunk $MDNSent $has_cal unknown-6 OldNotJunk $Forwarded) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft Junk $Label1 $Label2 $Label3 $Label4 $Label5 receipt-handled NotJunk NonJunk $MDNSent $has_cal unknown-6 OldNotJunk $Forwarded \*)] Flags permitted. * 7126 EXISTS * 0 RECENT * OK [UNSEEN 16] First unseen. * OK [UIDVALIDITY 1154089803] UIDs valid * OK [UIDNEXT 152280] Predicted next UID * OK [HIGHESTMODSEQ 22137] Highest 00 OK [READ-WRITE] Select completed. 01 UID FETCH 152280:* (UID) * 7126 FETCH (UID 152279) 01 OK Fetch completed. Dovecot 1.2.11 on Fedora 12 with Maildir mailboxen. Why is it returning the message with UID 152279, when asked for the range 152280:* ? Is there some reason it has to return at least one result? -- dwmw2

2 2

[Dovecot] Loggin! Exception.
by Henrique Fernandes 12 Jul '10

12 Jul '10

It is possible to make dovecot do not log any request from a determined host? Because, we gonna use ldirectord for foward request and etc. He makes an connection every 2 sec i guess, and dovecot logs its. The logs get too many info that we don need! Any ideias ? Thanks! * *[]'sf.rique

1 0