- dovecot - dovecot.org

Re: [Dovecot] Samba AD and Dovecot
by Timo Sirainen 07 Oct '09

07 Oct '09

Ccing mailing list, since I'm not all-knowing.. On Oct 7, 2009, at 12:49 AM, Trever L. Adams wrote: > Timo Sirainen wrote: >> On Oct 7, 2009, at 12:36 AM, Trever L. Adams wrote: >>> 1) I have seen how to configure for LDAP and Kerberos. AD uses both >>> together. All user information is in AD/LDAP and authentication is >>> AD/Kerberos. How can I configure Dovecot to use both appropriately? >> You could forget about the Kerberos part and just use AD as an LDAP >> server. > I really want to use kerberos/SPNEGO everywhere I can for various > reasons. The LDAP would be for the configuration. Do you actually want the IMAP/POP3 clients to use Kerberos? For plaintext auth I don't see any benefit in Dovecot using Kerberos rather than LDAP (and it doesn't support that, except via pam_kerberos or whatever I guess). But for clients to use Kerberos (GSSAPI) and authenticate against AD while Dovecot is in the middle... I've no idea. I guess that's possible somehow. >>> 2) For example if I have a directory /var/mail/domain/user. Can >>> I have Dovecot auto create (with proper permissions) the domain/user >>> part? These would be used for maildir. >> If you're using the same UNIX UID for all users, there's really >> nothing you need to do. Dovecot tries to create missing directories >> automatically. > No, I will be using the new Samba IDMAP stuff that hashes all the > parts > of the windows ID to a 32 bit UID. Anyway to do to this, or will I > need > to find another solution (not for mailing, but for directory > creation)? There's no great way to do this.. A couple of kludgy ways. Like chmod 01777 /var/mail. Or override mail_executable setting to a script that still runs as root and can create the directory with proper permissions. http://wiki.dovecot.org/PostLoginScripting

3 2

[Dovecot] Samba AD and Dovecot
by Trever L. Adams 07 Oct '09

07 Oct '09

Hello All, I haven't seen the answer to this, maybe I am just using the wrong searches. I have two queries related to this: 1) I have seen how to configure for LDAP and Kerberos. AD uses both together. All user information is in AD/LDAP and authentication is AD/Kerberos. How can I configure Dovecot to use both appropriately? 2) I can cause Samba to create certain directories on login, etc. However, I am needing to do this for Dovecot (and Postfix using Dovecot deliver). I would prefer to use Dovecot functionality for this, not Samba.This is not the autocreate folder/subscribe stuff, at least I think not. For example if I have a directory /var/mail/domain/user. Can I have Dovecot auto create (with proper permissions) the domain/user part? These would be used for maildir. Thank you, Trever Adams

2 1

[Dovecot] "Time just moved backwards" in Dovecot in a Xen DomU
by PGNet Dev 07 Oct '09

07 Oct '09

i've dovecot --version 1.2.5 hg log | grep changeset | head -n 1 changeset: 9407:a3e16df805e3 in my logs, i'm seeing ... Oct 05 16:51:40 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards Oct 05 17:07:22 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards Oct 05 17:23:15 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards Oct 05 17:38:23 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards ... i'm running Dovecot in a Xen DomU, uname -a Linux mail 2.6.27.29-0.1-xen #1 SMP 2009-08-15 17:53:59 +0200 x86_64 x86_64 x86_64 GNU/Linux reading @, http://wiki.dovecot.org/TimeMovedBackwards Bugs/Issues * With Xen you should run ntpd only in dom0. Other domains should synchronize time automatically (see this Xen FAQ). @ my Dom0, ps ax | grep ntp\.conf 5696 ? Ss 1:05 /usr/sbin/ntpd -p /var/run/ntp/ntpd.pid -g -u ntp:ntp -i /var/lib/ntp -c /etc/ntp.conf and, grep localtime /etc/xen/vm/mail.cfg localtime = 0 looking at my ntp logs around the same time(s). ... 5 Oct 16:41:17 ntpd[5696]: synchronized to 64.125.78.85, stratum 1 5 Oct 16:51:38 ntpd[5696]: time reset -2.140133 s 5 Oct 16:56:40 ntpd[5696]: synchronized to 66.220.9.122, stratum 1 5 Oct 17:01:28 ntpd[5696]: synchronized to 64.125.78.85, stratum 1 5 Oct 17:07:20 ntpd[5696]: time reset -2.137760 s 5 Oct 17:11:49 ntpd[5696]: synchronized to 204.152.184.72, stratum 1 5 Oct 17:15:01 ntpd[5696]: synchronized to 207.200.81.113, stratum 1 5 Oct 17:20:49 ntpd[5696]: synchronized to 66.220.9.122, stratum 1 5 Oct 17:23:14 ntpd[5696]: time reset -2.221749 s 5 Oct 17:27:57 ntpd[5696]: synchronized to 64.125.78.85, stratum 1 5 Oct 17:32:52 ntpd[5696]: synchronized to 207.200.81.113, stratum 1 5 Oct 17:38:22 ntpd[5696]: time reset -2.104476 s 5 Oct 17:42:48 ntpd[5696]: synchronized to 66.220.9.122, stratum 1 ... 1 second is not a terribly big deal, but it IS an error ... not clear to me as to what/where the problem actually is. i've not seen an other dameons report any time issues; of course, i'm not sure they're _checking_ :-/ any suggestions as to what/how to fix? thanks!

5 14

Re: [Dovecot] deliver stopped working
by vwc72283＠voicenet.com 07 Oct '09

07 Oct '09

Note to all: If you are running Dovecot on a system where any of the mailboxes are nfs v4 mounted from a RHEL (or derivative) server DO NOT upgrade that server to an unpatched 2.6.18-164 kernel, it is very broken at this time. Not only will Dovecot fail but you're likely to have a myriad of other problems. https://bugzilla.redhat.com/show_bug.cgi?id=523797 https://bugzilla.redhat.com/show_bug.cgi?id=524520 > On Mon, 2009-10-05 at 10:30 -0400, vwc72283(a)voicenet.com wrote: >> So, it is reproducible. Now, if you take O_EXCL out it works even for the user: > .. >> Why I suddenly get the behavior I don't know. Clearly its not deliver, but deliver >> tries >> to do something that behaves badly on this system. > > I've no idea. Never heard of O_EXCL failing in that way. You could > always just remove the O_EXCL uses from Dovecot sources, Dovecot doesn't > rely on them. > >

1 0

[Dovecot] OpenBSD and Dovecot (mysql support)
by jean-francois 06 Oct '09

06 Oct '09

Hello All, I am having difficulties in running dovecot with mysql accounts. The db worked but the config file is hardly something I could do to work properly as it should be, it does even not run saying various errors found in dovecot.conf Has anyone already built dovecot server to run with with a mysql base ? Could it be so that one sends me a conf file that shall work to help me ? Thanks. Jean-François

4 5

Re: [Dovecot] compiling issue 1.2.6 - Solaris
by Bruce Bodger 06 Oct '09

06 Oct '09

On Oct 6, 2009, at 8:26 AM, Bruce Bodger wrote: >>> >>> Same type of problem here on OS X 10.5.8 Server. >>> >>> Command line to configure: ./configure --with-ssldir=/System/ >>> Library/OpenSSL --with-ssl=openssl >>> >>> .. >>> Undefined symbols: >>> "_SSL_get_current_compression", referenced from: >>> _ssl_proxy_get_security_string in liblogin-common.a(ssl-proxy- >>> openssl.o) >>> "_SSL_COMP_get_name", referenced from: >>> _ssl_proxy_get_security_string in liblogin-common.a(ssl-proxy- >>> openssl.o) >> >> What OpenSSL version do you have? I thought those compression >> functions were new enough that everyone would have them by now.. > > > bash-3.2# /usr/bin/OpenSSL version > OpenSSL 0.9.7l 28 Sep 2006 A bit of oddity I just discovered by viewing source code at http://www.opensource.apple.com/ OS X 10.5.8 - OpenSSL 0.9.7l 28 Sep 2006 OS X 10.6.0 - OpenSSL 0.9.6l 04 Nov 2003 OS X 10.6.1 - OpenSSL 0.9.6l 04 Nov 2003 Looks like they moved back to 0.96l in later versions. B. Bodger

3 3

[Dovecot] Move messages marked as Spam
by Michel Bulgado 06 Oct '09

06 Oct '09

Hello I have implemented recently in my work bogofilter utility to mark messages as Spam or Ham, currently is working perfectly, but I want to move those messages marked as spam to a folder called spam. I installed dovecot-sieve with the intention of using fileinto to accomplish this. my question is: where I put this: require "fileinto"; if header :contains "X-Bogosity" "Spam" { fileinto "Spam"; } so that all messages that come to my users go into the spam folder? and how i handle messages that are marked as "Unsure" X-Bogosity: Unsure Thanks Michel

1 0

[Dovecot] Dovecot 1.2.4 - assertion crash in view_lookup_seq_range
by Brandon Davidson 06 Oct '09

06 Oct '09

Hi all, We have a number of machines running Dovecot 1.2.4 that have been assert crashing occasionally. It looks like it's occurring when the users expunge their mailboxes, but I'm not sure as I can't reproduce it myself. The error in the logs is: Oct 6 07:33:09 oh-popmap3p dovecot: imap: user=<YYYY>, rip=XXXX, pid=11931: Panic: file mail-index-view.c: line 264 (view_lookup_seq_range): assertion failed: (first_uid > 0) Oct 6 07:33:09 oh-popmap3p dovecot: imap: user=<YYYY>, rip=XXXX, pid=11931: Raw backtrace: imap [0x49e130] -> imap [0x49e193] -> imap [0x49d816] -> imap [0x47e462] -> imap(mail_index_lookup_seq+0x12) [0x47e022] -> imap(mail_index_view_sync_begin+0x36a) [0x47ffba] -> imap(index_mailbox_sync_init+0x7f) [0x45e56f] -> imap(maildir_storage_sync_init+0x100) [0x43cb70] -> imap(imap_sync_init+0x67) [0x428177] -> imap(cmd_sync_delayed+0x174) [0x4283c4] -> imap(client_handle_input+0x19e) [0x420a0e] -> imap(client_input+0x5f) [0x4213ff] -> imap(io_loop_handler_run+0xf8) [0x4a5e98] -> imap(io_loop_run+0x1d) [0x4a4fad] -> imap(main+0x620) [0x428cc0] -> /lib64/libc.so.6(__libc_start_main+0xf4) [0x323dc1d994] -> imap [0x4199f9] Oct 6 07:33:09 oh-popmap3p dovecot: dovecot: child 11931 (imap) killed with signal 6 (core dumped) GDB stack information and some additional details are available here: http://uoregon.edu/~brandond/dovecot-1.2.4/stack.txt We are planning to go to 1.2.6 sometime in the next week or two, but I thought I'd try to track this particular error down just in case it's still an issue after the upgrade. -Brad

2 1

[Dovecot] dovecot 1.2.5 - can't create auth listener
by dovecot＠nro.ca 06 Oct '09

06 Oct '09

Hi. I have version 1.1.11 working fine with multiple servers. When I upgrade to 1.2.4 or 1.2.5 I keep getting an error 'can't create auth listener' (address in use) I have two ip addresses (lets call them 1.0.0.1 and 1.0.0.2). Each ip address has it's own certificate and set of servers with custom ports. I don't know how the configuration is supposed to work and it was a lot of google and trial and error to get it working. My configuration file is pretty basic so maybe someone can point out where I'm going wrong. I stripped out the few comments and unrelated settings. #listen = * disable_plaintext_auth = no ssl_ca_file = myca.crt protocol lda { postmaster_address = postmaster(a)example.com } server a1 { protocols = pop3 ssl_cert_file = a1.crt ssl_key_file = a1.key listen = 1.0.0.2:110 1.0.0.2:111 auth default { mechanisms = plain passdb pam { } userdb passwd { }}} server a2 { protocols = pop3s ssl_cert_file = a1.crt ssl_key_file = a1.key listen = 1.0.0.2:995 auth default { mechanisms = plain passdb pam { } userdb passwd { }}} server n1 { protocols = pop3 ssl_cert_file = n1.crt ssl_key_file = n1.key listen = 127.0.0.1:110 127.0.0.1:111 1.0.0.1:110 1.0.0.1:111 auth default { mechanisms = plain passdb pam { } userdb passwd { }}} server n2 { protocols = pop3s ssl_cert_file = n1.crt ssl_key_file = n1.key listen = 127.0.0.1:995 1.0.0.1:995 auth default { mechanisms = plain passdb pam { } userdb passwd { }}} ...and repeat for imap, imaps Thanks, Sean

2 1

[Dovecot] Debugging IMAP ACLs
by Kerem Erciyes 06 Oct '09

06 Oct '09

Hello, I upgraded my server to 1.2.4 and now I'm trying to implement ACL support to use with Bynari Insight Connector. Starting out with the wiki page on shared namespaces from http://wiki.dovecot.org/SharedMailboxes/Shared I tried to implement shared mailbox support so that my customers can enjoy more exhange-like qualities with outlook. However I am not sure if the ACLs or Shared Namespaces are really working. I sure would like some help debugging ACL requests by clients, and the configuration I did. Thanks, Kerem Here is the run down of my configuration, if I have screwed up somewhere. *dovecot -n* # 1.2.4: /usr/local/etc/dovecot.conf # OS: FreeBSD 6.2-STABLE i386 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-debug.log protocols: imap imaps pop3 pop3s disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Kupyazilim IMAPS/POP3S Server - Dovecot ready. verbose_proctitle: yes first_valid_uid: 100 first_valid_gid: 6 mail_privileged_group: mail mail_location: mbox:~/mail/:INBOX=/usr/home/vmail/%d/%u mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(imap): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%u/ location: mbox:/usr/home/vmail/%d/%u:INDEX=/usr/home/vmail/shared/%%u list: children lda: postmaster_address: postmaster(a)kupyazilim.com.tr mail_plugins: quota log_path: /var/log/dovecot-deliver.log info_log_path: /var/log/dovecot-deliver.log auth default: mechanisms: plain login user: nobody passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: acl_shared_dict: proxy::acl dict: quota: maildir:storage=10240:messages=1000 trash: /usr/local/etc/trash.conf acl: mysql:/usr/local/etc/dovecot-dict-sql.conf * cat /usr/local/etc/dovecot-acl.conf * # mail_location copied from dovecot.conf for reference only # # mail_location: mbox:~/mail/:INBOX=/usr/home/vmail/%d/%u # note: it is %d/%u here but only %u in dovecot-sql.conf # You need to create also a private namespace: namespace private { separator = / prefix = #location defaults to mail_location. inbox = yes } namespace shared { separator = / prefix = shared/%%u/ #location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u location = mbox:/usr/home/vmail/%d/%u:INDEX=/usr/home/vmail/shared/%%u subscriptions = no list = children } # Set ACL to SQL Server and Reference sql-dictionary # Table implemented in mysql:/postfix/user_shares plugin { acl_shared_dict = proxy::acl } dict { acl = mysql:/usr/local/etc/dovecot-dict-sql.conf } *cat /usr/local/etc/dovecot-dict-sql.conf * map { pattern = shared/shared-boxes/user/$to/$from table = user_shares value_field = dummy fields { from_user = $from to_user = $to } } -- Kerem Erciyes Sistem Danismani http://proje.keremerciyes.com kerem.erciyes(a)gmail.com +90 532 737 05 83

3 6