- dovecot - dovecot.org

Re: [Dovecot] Capability problems dovecot 2.0
by reg9009 27 May '09

27 May '09

answered the wrong address... Timo Sirainen schrieb: > On May 27, 2009, at 2:35 AM, reg9009 wrote: > >> what if TB just needs the "IMAP4rev1" capability before logging in? > > That's a completely different issue. Meaning that v2.0 is buggy here > currently and returning an empty string, because I haven't yet decided > how to fix it. That explains all :) I'll try imap_capability manual override for now. Btw., when I telnet to the server, I get * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready. What's this capability string? Couldn't we use this one, at least until a user is logging in? > >> Where is the setting "imap_capability" used? I could try and see how TB >> is behaving, in parallel to Outlook, OE, etc. > > What do you mean by used? You should be able to just set in dovecot.conf: > > imap_capability = imap4rev1 and other stuff > > I didn't know if that shoul be used in some section or directly in dovecot.conf. Thx. Regards, Sebastian

1 0

[Dovecot] [bug] dovecot 1.1.15: segfault after message move
by Juergen Daubert 27 May '09

27 May '09

Hello, found the following in my error log: May 20 13:27:48 ser dovecot: imap-login: Login: user=<juergen>, method=PLAIN, rip=192.168.0.17, lip=192.168.0.90, TLS May 20 13:28:10 ser dovecot: Panic: IMAP(juergen): file imap-sync.c: line 439 (cmd_sync_delayed): assertion failed: (client->mailbox != NULL) May 20 13:28:10 ser dovecot: IMAP(juergen): Raw backtrace: imap [0x80cc01e] -> imap [0x80cc08a] -> imap [0x80cba78] -> imap [0x806642f] -> imap [0x80602c1] May 20 13:28:10 ser dovecot: child 23536 (imap) killed with signal 6 (core dumps disabled) it's almost always reproducible using the Heirloom mailx [1] mail client, with mutt I get a 'connection closed' message but no segfault: - login to the dovecot server via imap/imaps - move a message from INBOX to a another large mbox-file - quit Seems to be a new issue introduced with 1.1.15 because I don't see that with 1.1.14 or older versions. Greetings Juergen [1] http://heirloom.sourceforge.net/mailx.html #:> dovecot -n # 1.1.15: /etc/dovecot.conf # OS: Linux 2.6.27.23 i686 base_dir: /var/run/dovecot/ protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/certs/dovecot.crt ssl_key_file: /etc/ssl/keys/dovecot.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_process_per_connection: no login_processes_count: 1 first_valid_gid: 100 mail_location: mbox:~/Mail:INBOX=/var/spool/mail/%u mbox_min_index_size: 100 mbox_very_dirty_syncs: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 auth default: passdb: driver: shadow userdb: driver: passwd -- Juergen Daubert | mailto:jue@jue.li Korb, Germany | http://jue.li/crux

6 16

[Dovecot] example sql acl_shared_dict wiki
by Robert Schetterer 27 May '09

27 May '09

Hi Timo, wiki says --------- Shared mailbox listing ..... You could use any dictionary backend, such as SQL or Berkeley DB, but a simple flat file should work pretty well too: plugin { acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes.db } .... -------- could you include an example for having acl_shared_dict in sql ? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 6

[Dovecot] FTS Plugin design
by Rui Carneiro 26 May '09

26 May '09

Hi all, Currently I am developing some changes on the solr plugin. I want this plugin indexing also the attachment's content. I have already started to look on plugin's source but I am having some problems understanding how it works. I didn't understood yet what is the plugin's design and how the plugins are called from the core system and I was wondering if anyone could help me with that. Sorry if this doubts sound stupid but I am newcomer on Dovecot. Regards, Rui Carneiro

5 31

[Dovecot] Secure Sockets Layer client certificate authentication
by Stephen Feyrer 26 May '09

26 May '09

Hi everyone. Please note, I've asked a very similar question before and I apologize for sounding like a broken record. Well here it goes. What I want to do is authenticate my users using a certificate. Thereby authenticating both the user and server with strong tokens that are centrally managed. In the worst case scenario the user should only need to enter a password for the certificate store and then the certificate should trigger the appropriate level of access to their account. Is Dovecot the correct tool for the job? If yes then, how? Else if not, then what would you recommend? I have tried setting the auth mechanism to anonymous without any joy. My password file is set with nopassword. All my certificates work well with the Secure Sockets Layer system. This is the configuration I am currently running: # 1.2.beta1: /opt/etc/dovecot/dovecot.conf # OS: Linux 2.6.12.6-arm1 armv5tejl log_path: /opt/var/log/dovecot.log info_log_path: /opt/var/log/dovecot-info.log protocols: imaps ssl_ca_file: /opt/etc/ssl.ca/cacrl.pem ssl_cert_file: /opt/etc/ssl.ca/newcerts/imap.cer ssl_key_file: /opt/etc/ssl.ca/private/imap.key ssl_parameters_regenerate: 24 ssl_cipher_list: ALL:!LOW:!SSLv2 ssl_verify_client_cert: yes disable_plaintext_auth: yes verbose_ssl: yes login_dir: /opt/var/run/dovecot/login login_executable: /opt/libexec/dovecot/imap-login login_user: guest login_processes_count: 2 login_max_processes_count: 4 mbox_write_locks: fcntl mail_process_size: 512 imap_client_workarounds: outlook-idle tb-negative-fetch auth default: user: admin verbose: yes debug: yes ssl_require_client_cert: yes ssl_username_from_cert: yes passdb: driver: passwd-file args: /opt/etc/dovecot/h.org/passwd userdb: driver: passwd This is a log of a login attempt: dovecot: May 25 11:55:58 Info: auth(default): new auth connection: pid=22556 dovecot: May 25 11:56:08 Info: imap-login: Valid certificate: /O=home.org/emailAddress=admin(a)nas2.h.org/L=W/ST=C/C=G/CN=h.org dovecot: May 25 11:56:08 Info: imap-login: Valid certificate: /C=G/ST=C/O=h.org/OU=K F/CN=k dovecot: May 25 11:56:10 Info: auth(default): new auth connection: pid=22585 dovecot: May 25 11:56:16 Info: auth(default): client in: AUTH 1 PLAIN service=imap secured valid-client-cert cert_username=k lip=10.1.1.245 rip=10.1.1.1 lport=993 rport=53430 dovecot: May 25 11:56:16 Info: auth(default): client out: CONT 1 dovecot: May 25 11:56:16 Info: auth(default): client in: CONT<hidden> dovecot: May 25 11:56:16 Info: auth(default): passwd-file(k,10.1.1.1): lookup: user=k file=/opt/etc/dovecot/h.org/passwd dovecot: May 25 11:56:16 Info: auth(default): passwd-file(k,10.1.1.1): No password dovecot: May 25 11:56:16 Info: auth(default): client out: OK 1 user=k dovecot: May 25 11:56:16 Info: auth(default): master in: REQUEST 6 22164 1 dovecot: May 25 11:56:16 Info: auth(default): passwd(k,10.1.1.1): lookup dovecot: May 25 11:56:16 Info: auth(default): master out: USER 6 k system_user=k uid=500 gid=100 home=/ dovecot: May 25 11:56:16 Info: imap-login: Login: user=<k>, method=PLAIN, rip=10.1.1.1, lip=10.1.1.245, TLS With this configuration the client will connect over ssl and identify itself with a certificate but a client password is still required. -- Regards Stephen.

3 8

Re: [Dovecot] pop3 gives a permission denied error on chdir
by Kenneth Gonsalves 26 May '09

26 May '09

On Thursday 21 May 2009 12:40:00 you wrote: > exec "strace -f -o /tmp/access.log -etrace=file -p <pid_of_dovecot>" > then try to access pop3 when fail occurs send us /tmp/access.log > (gzipped) attached -- regards Kenneth Gonsalves Associate NRC-FOSS http://nrcfosshelpline.in/web/

3 7

[Dovecot] status=bounced (Command died with signal 11: "/usr/lib/dovecot/deliver"
by Chantal Rosmuller 26 May '09

26 May '09

Hi list, I use dovecot 1.1.11 on ubuntu 9.04, when I want to send a message to an email adres on this mailserver I get this error: status=bounced (Command died with signal 11: "/usr/lib/dovecot/deliver". The folders where the email should be delivered are created so it does not look like a permission problem. I connect to a mysql database where the email accoutn info is stored, this works. I use the same setup on an ubuntu 8.04 server with dovecot 1 and I have no problems on that server. What am I overlooking here? Here is my configuration: dovecot -n: base_dir: /var/run/dovecot/ log_path: /var/log/mail.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 imaps pop3s ssl_cert_file: /etc/ssl/certs/dovecot-cert.pem ssl_key_file: /etc/ssl/private/dovecot.pem disable_plaintext_auth: no login_dir: /var/run/dovecot-login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login first_valid_uid: 150 last_valid_uid: 150 mail_privileged_group: mail mail_location: mbox:/var/vmail/%2d/%d/%n mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail postconf -n: append_dot_mydomain = no biff = no config_directory = /etc/postfix/ disable_vrfy_command = no home_mailbox = Maildir/ inet_interfaces = all mailbox_size_limit = 0 message_size_limit = 25000000 mydestination = $myhostname, localhost.$mydomain mydomain = domain.com myhostname = server.domain.com mynetworks = 127.0.0.0/24, 10.0.11.248, 10.0.11.249 myorigin = $mydomain recipient_delimiter = + setgid_group = postdrop smtpd_banner = $myhostname smtpd_client_restrictions = permit_sasl_authenticated permit_mynetworks reject smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unknown_recipient_domain, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot virtual_alias_maps = mysql:$config_directory/mysql_catchall_workaround.cf mysql:$config_directory/mysql_virtual_alias_maps.cf mysql: $config_directory/mysql_domain_alias_maps2.cf mysql: $config_directory/mysql_domain_alias_maps.cf virtual_gid_maps = static:118 virtual_mailbox_base = /var/vmail virtual_mailbox_domains = mysql:$config_directory/mysql_virtual_domains_maps.cf virtual_mailbox_maps = mysql:$config_directory/mysql_virtual_mailbox_maps.cf virtual_minimum_uid = 150 virtual_transport = dovecot virtual_uid_maps = static:150

4 15

[Dovecot] "Panic: file client.c: line 354: unreached"
by Ralf Hildebrandt 26 May '09

26 May '09

>From my log today: May 22 07:38:48 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:39:29 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:39:50 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:39:50 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:39:50 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:39:50 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:45:29 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:45:29 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:45:29 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:45:29 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:45:37 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 May 22 07:45:37 postamt dovecot: imap-login: Disconnected (no auth attempts): rip=141.42.245.68, lip=141.42.4.250 and then: May 22 07:45:37 postamt dovecot: imap-login: Panic: file client.c: line 354: unreached May 22 07:45:37 postamt dovecot: dovecot: child 19726 (login) killed with signal 6 (core not dumped - add -D to login_executable) (latest ip=141.42.245.68) Using v1.2.rc4 -- Ralf Hildebrandt Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.computerbeschimpfung.de In our world, software has to be small, has to be debugged, has to ship as part of a major initiative, has to avoid compatibility problems, has to avoid end user calls. Bill Gates

2 3

[Dovecot] Dovecot 1.0.15, sieve fileinto subdirectory ?
by Karel Hendrych 26 May '09

26 May '09

Hi, does sieve plugin in 1.0.15 support fileinto subdirectory? There is a maildir .oss.dovecot and sieve rule: if envelope :contains "to" "k+dovecot" { fileinto "oss.dovecot"; } But I get LDA error: Couldn't open mailbox dovecot: Mailbox doesn't exist: dovecot Any suggestions? Delivery to non-subdirectories is working fine. Regards -- Karel

3 2

[Dovecot] libsieve problems / wishes
by Steffen Kaiser 26 May '09

26 May '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I'm trying libsieve (853:42e154b8792e) to cope with our current installation, the following issues arise: 1) vacation addresses are compared case-sensitivly, e.g.: vacation :addresses [ "Steffen.Kaiser(a)example.com" ] ""; it won't match "steffen.kaiser@...". attached patch makes a first shot about that problem, leaving: 1a) maybe one should lower-case :addresses argument at compile time and my_address at run-time and then use strcmp() again. 1b) duplicate checks are case-sensitive, too. This is probably no big issue, because if the same person uses different variants of his/her mail address for sending, s/he does not deserve better. 1c) Suppression of replies to own mails are case-sensitive, too. Well, many people I know test that "it just works" by sending themselves a mail. I would disable this check. 2) we have about 157 ways to write the domain part. Not all accounts are available in all of them, but it's close to it. The old vacation program we used prior to "cmusieve" didn't care about the domain unless explicitly given. It was quite painful. Attached patch adds a "domainless" variant of :addresses arguments in such way, that vacation :addresses [ "Steffen.Kaiser" ] ""; matches any domain. Ideally, it would be better to specify all valid domains, but perhaps one can leave that for another approach with a different syntax, e.g. with "@*" as domain? Maybe, there is a better approach. Now there is possibility that common local parts are matched from alien domains easily. If to specify a set of "default" domains would be an option for libsieve, what is the suggested way: - - as user-option via dovecot.conf? - - as admin-enforced Sieve-script that sets some internal variables? aka using the multi-script capability - - ??? 3) Because I try to migrate from cmusieve v1.0, I have a name issue with "imapflags". README sec "* Supports all extensions provided by the original CMUSieve plugin:" and sec "Implementation Status" explains that "imapflags" is available. This is not true entirly: "imapflags" is not, lib-sieve uses the name "imap4flags" as defined by RFC. So, it leaves me with two options: 3a) convert all user scripts and hack Horde-Ingo, or 3b) have libsieve accept the alias "imapflags" for the extension "imap4flags". Would it be worhtwhile for libsieve to implement aliases for extensions, so that they are available in require by more than one name? About Horde-Ingo, maybe they have an update to use "imap4flags", too, but it looks like that I upgrade Dovecot before Horde. Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBSYccg3WSIuGy1ktrAQLlaQf+NHtyBxMb3aqnaw58zapo3/5kgqMM4GA+ 68el9d1CK4URjuk9io3MBsSzEJ4lRy6VFHNLw0jyNEnZp7l0vv5UoiK/+af7LCW5 H2T/qYL+lG/ul870t0/3q5wHmtrriAGQqE215C1u5/trJRX/sQLzDq1tbOtV4/vQ xUa8P0TXvCsgGSzCCmNiU0AenTIRGnxo+sCiyxnDKhgmWph/t06GYHX77CKwumK8 O57rh3RD9hA5yjicTbEZVLzeDDPEmCFliiSR6qMukfxOwX6LIxqhfw8n3cmSm8+X QyK6d/pBxy6EC14XhRQ7Jjtse+gWraiVJ/kcXKuW8sNPphtrGM1fdQ== =uuB6 -----END PGP SIGNATURE-----

5 11