- dovecot - dovecot.org

Re: [Dovecot] [RFE] A way to encode passwords in the /etc/imap.passwd file
by Răzvan Sandu 04 Feb '10

04 Feb '10

@Pascal Volk Thanks for the algorithm you've provided ! Unfortuantely, I'm not a programmer myself and I don't feel confident to code such an utility (even if I perfectly understand your pseudocode). ;-) What I'm looking for is not even a hand-made script, but a production solution included in the stock dovecot RPM package itself - i.e a new, better form of the dovecotpw utility. Best regards, Răzvan

1 0

[Dovecot] Execute mailfilter after message move
by Kārlis Repsons 04 Feb '10

04 Feb '10

Hi, came here to ask, if there are any ideas about a possible Dovecot feature, which would allow execution of a specific mailfilter or other program after new message is *moved* in specified mail location? The practical benefit on my side would be, that there wouldn't be any need to do getmail cronjobs, which unnecessarily fill up logfiles... (primarily for easy spam learning and reporting)

2 1

[Dovecot] [dovecot] Problem with namespaces and dovecot -n
by Jonathan Siegle 03 Feb '10

03 Feb '10

I'm running dovecot 2.0 revision 10622:de9d6dae7fe5 on AIX. I'm trying to see both namespaces that I have listed in mail.conf. namespace private { separator = / prefix = inbox = no hidden = no location = maildir:%h/Maildir list = yes } namespace private { separator = / prefix = "#mbox/" location = mbox:%h:INBOX=/var/mail/%u inbox = yes hidden = no list = yes # for v1.1+ } Whichever namespace is last, I can see when running dovecot -n. Am I supposed to only see the last one printed? # 2.0.beta2: /usr/local/dovecot2.0beta2/etc/dovecot/dovecot.conf # OS: AIX 3 0001112AD300 auth_debug = yes auth_gssapi_hostname = $ALL auth_krb5_keytab = /etc/krb5/dovecot.keytab auth_mechanisms = plain gssapi disable_plaintext_auth = no listen = * login_greeting = Dovecot version 2 on tr27n12 ready. mail_full_filesystem_access = yes mail_location = mbox:%h:INBOX=/var/spool/mail/%Ju/%u mbox_lazy_writes = no mbox_write_locks = fcntl mmap_disable = yes namespace { hidden = no inbox = yes list = yes location = mbox:%h:INBOX=/var/mail/%u prefix = #mbox/ separator = / name = private } passdb { deny = no driver = pam master = no pass = no } With this config I have no folders. If I flip the namespaces in the config, I have no INBOX and can't login. Thanks, Jonathan

2 1

[Dovecot] [RFE] A way to encode passwords in the /etc/imap.passwd file
by Răzvan Sandu 03 Feb '10

03 Feb '10

Hello, Is this the proper place to suggest an enhancement for the stock dovecot package ? The enhancement would be the following: For the time being, the dovecotpw utility offers a standardised way to interactively encode a user password in a certain scheme, say: dovecotpw -s CRYPT Enter new passord: Re-enter new password: etc. Given a *valid* /etc/imap.passwd file (passwd-file authentication), dovecotpw should be able to process it non-interactively and output another text file with all {PLAIN} passwords converted in the specified <scheme>, i.e.: dovecotpwd -s CRYPT if=/etc/imap.passwd of=/etc/imap.passwd.converted where /etc/imap.passwd.converted have the previously {PLAIN} passwords converted in scheme CRYPT. Passwords that were previously encrypted in other schemes than {PLAIN} shoud remain untouched. That will allow quick securing of old legacy /etc/imap.passwd files. Thanks a lot, Răzvan

2 1

[Dovecot] [BUG] problem with zlib plugin
by spam＠abma.de 03 Feb '10

03 Feb '10

Hi, i think i've the same problem as described here: http://www.dovecot.org/list/dovecot/2009-June/040687.html when opening a folder without an index (?) and bzip-compressed files i get following error message: 2010-02-03T14:12:10.026452+01:00 server dovecot: IMAP(user): gzread() failed: PARAM_ERROR 2010-02-03T14:12:10.026477+01:00 server dovecot: IMAP(user): FETCH for mailbox folder UID 105 failed to read message input: Invalid argument Matthias -- dovecot -n # 1.2.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-vserver-amd64 x86_64 Ubuntu 9.04 listen: *:143 ssl_listen: *:993 ssl_cert_file: /etc/ssl/ssl.crt ssl_key_file: /etc/ssl/ssl.key shutdown_clients: no login_dir: /usr/var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login mail_uid: 97 mail_gid: 97 mail_location: maildir:~/.maildir mail_debug: yes mail_plugins: quota imap_quota zlib lda: postmaster_address: postmaster(a)example.com auth_socket_path: /var/run/dovecot/auth-master auth default: mechanisms: plain login passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: mail group: mail master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail plugin: quota: maildir:User quota quota_rule: *:storage=100M

2 2

[Dovecot] deny=yes in userdb
by Edgar Fuß 03 Feb '10

03 Feb '10

I would like deliver to reject certain users. Since supposedly deliver only uses userdb, not passwd, I can't use deny=yes for that. Or does userdb support deny=yes? Yes, I should rather reject them right in the MTA, but that currently takes too long to implement. Or how to reject gast* in postfix using nss authentication?

3 3

[Dovecot] Restore of individual mail files
by CoolAtt NNA 03 Feb '10

03 Feb '10

Hi. In order for restoration to work fine, I have to create a folder using the interface (e.g RounCube) which also creates the required structures. Then I copied the emailfile e.g xyz:s to /myrestoredemail/cur/ How do i properly create a folder with its structures(index,etc) without using the RoundCube web inteface ? Thanks CoolAtt _________________________________________________________________ Hotmail: Trusted email with powerful SPAM protection. https://signup.live.com/signup.aspx?id=60969

2 3

[Dovecot] disabling mail delivery for a user
by Frank Cusack 02 Feb '10

02 Feb '10

How can I disable mail delivery for a user yet still allow access to their mailbox from another account which their mail is shared to? If I put them in a userdb which has "deny = yes" that just disables their ability to login, yes? And they would still have mail delivered. I want to disable their ability to login AND bounce all mail delivered to them, preferably solely through dovecot configuration. I am using lda, obviously, for mail delivery. (I could configure the MTA to reject mail for them if there is no other option.)

4 13

[Dovecot] v2.0.beta2 released
by Timo Sirainen 02 Feb '10

02 Feb '10

http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta2.tar.gz http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta2.tar.gz.sig I tried to keep the configuration and APIs compatible with v2.0.beta1, but unfortunately there were a few things that really had to be changed: 1. passdbs and userdbs have now a separate "driver" setting inside them. So for example if you had: userdb passwd { } You'll now need to use instead: userdb { driver = passwd } 2. Services now have default inet_listeners. You need to either remove your existing ones, or override the defaults by giving the listeners's name like shown in the new example master.conf. For example if you had: service imap-login { inet_listener { port = 1234 .. change it to: service imap-login { inet_listener imap { port = 1234 If you want to disable a default listener, you can set its port to 0. Some new features: - Added auth_verbose_passwords = no|plain|sha1. If authentication fails, this setting logs the used password. If you don't really need to know what the password itself was, but are more interested in knowing if the user is simply trying to use the wrong password every single time or if it's a brute force attack, you can set this to "sha1" and only the SHA1 of the password is logged. That's enough to know if the password is same or different between login attempts. - lazy-expunge: Support a single-namespace configuration. In this setup if mailbox has some expunged messages and then the whole mailbox gets deleted, they get merged into the same deleted mailbox. - protocol !imap { .. } adds configuration to all protocols except imap. - imap/pop3 proxying supports now async DNS lookups for hosts. There's a separate dns-client service doing the lookups using OS's own blocking resolver. - dovecot-config file changed in a way that it'll be easier to create external software linking against dovecot libraries. This made Pigeonhole's configure script a lot simpler. And of course there have been lots of fixes.

3 4

[Dovecot] proxy_maybe regex
by David Halik 02 Feb '10

02 Feb '10

Does anyone know if dovecot support regex lookups for proxy/proxy_maybe, rather than mysql/ldap etc? I've been comparing it with perdition to see which one might be better for us to do layer7 username switching. Perdition supports the ability to not have any auth/db looks, but rather just a regex file that parses the usernames as they come in and forwards to the particular machine on the same port. For example: username:host ^[a-d]: 192.168.xxx.1 ^[e-k]: 192.168.xxx.2 and so on... I didn't think this was supported in dovecot, but I wanted to check first. I think this is going to end up being what we use to avoid NFS problems. It's lightweight, drops into our current setup, and doesn't require a mysql database which adds another point of failure. -- ================================ David Halik System Administrator OIT-CSS Rutgers University dhalik(a)jla.rutgers.edu ================================

3 6