- dovecot - dovecot.org

[Dovecot] SSL cert problems.
by Geoff Sweet 30 Dec '08

30 Dec '08

I'm really racking my brain trying to figure this one out here. I am running a pop3 server for remote offices on CentOS 5.2. We purchased a SSL cert from Verisign and installed it on our dovecot server, but I continue to get failure problems with the cert and I don't know where to go from here. here is some info about our config: dovecot version: # dovecot --version 1.0.7 hostname: pop.x10.com dovecot.conf: # dovecot -n # 1.0.7: /etc/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log protocols: pop3 pop3s ssl_ca_file: /etc/pki/verisign/intermediate_ca.cer ssl_cert_file: /etc/pki/dovecot/certs/pop.x10.com.cer ssl_key_file: /etc/pki/dovecot/private/pop.x10.com.key ssl_cipher_list: HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3 verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/libexec/dovecot/pop3-login mail_executable: /usr/libexec/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/pop3 pop3_client_workarounds: outlook-no-nuls auth default: passdb: driver: pam userdb: driver: passwd and last but not least, here is my test from openssl. Mind you this fails as a "BAD" ssl cert in Evolution. :~$ openssl s_client -ssl2 -connect pop.x10.com:995 CONNECTED(00000003) depth=0 /C=US/ST=Washington/L=Renton/O=X10 Wireless Technology, Inc./OU=Information Technology/OU=Terms of use at www.verisign.com/rpa (c)05/CN=pop.x10.com verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 /C=US/ST=Washington/L=Renton/O=X10 Wireless Technology, Inc./OU=Information Technology/OU=Terms of use at www.verisign.com/rpa (c)05/CN=pop.x10.com verify error:num=27:certificate not trusted verify return:1 depth=0 /C=US/ST=Washington/L=Renton/O=X10 Wireless Technology, Inc./OU=Information Technology/OU=Terms of use at www.verisign.com/rpa (c)05/CN=pop.x10.com verify error:num=21:unable to verify the first certificate verify return:1 21568:error:1406D0B8:SSL routines:GET_SERVER_HELLO:no cipher list:s2_clnt.c:450: As you can see, the certificate clearly fails. I don't know how to make this work at this point. Any thoughts or advice would be greatly appreciated. -G

4 11

[Dovecot] another assertion failure in dovecot 1.1.7 mbox-sync-rewrite: (mails[idx].from_offset == start_offset)
by Diego Liziero 29 Dec '08

29 Dec '08

Sorry, this time I've no core file, (I forgot to set ulimit -c unlimited before starting dovecot) Regards, Diego. --- dovecot: Dec 09 08:26:52 Panic: IMAP(user): file mbox-sync-rewrite.c: line 590 (mbox_sync_rewrite): assertion failed: (mails[idx].from_offset == start_offset) dovecot: Dec 09 08:26:52 Error: IMAP(user): Raw backtrace: /usr/libexec/dovecot/imap [0x80f739e] -> /usr/libexec/dovecot/imap [0x80f7c5f] -> /usr/libexec/dovecot/imap(i_fatal+0) [0x80f7518] -> /usr/libexec/dovecot/imap(mbox_sync_rewrite+0x6e8) [0x8094e45] -> /usr/libexec/dovecot/imap [0x809105c] -> /usr/libexec/dovecot/imap [0x8091d77] -> /usr/libexec/dovecot/imap [0x809277e] -> /usr/libexec/dovecot/imap(mbox_sync+0x2b) [0x8092a0a] -> /usr/libexec/dovecot/imap [0x8084ff3] -> /usr/libexec/dovecot/imap(mailbox_close+0x47) [0x80b701c] -> /usr/libexec/dovecot/imap(cmd_close+0xc0) [0x805b5d8] -> /usr/libexec/dovecot/imap [0x80625c4] -> /usr/libexec/dovecot/imap [0x80627f9] -> /usr/libexec/dovecot/imap [0x80628f7] -> /usr/libexec/dovecot/imap [0x8062933] -> /usr/libexec/dovecot/imap(client_input+0xb7) [0x8062ac1] -> /usr/libexec/dovecot/imap(io_loop_handler_run+0x17d) [0x8101ecd] -> /usr/libexec/dovecot/imap(io_loop_run+0x35) [0x8101164] -> /usr/libexec/dovecot/imap(main+0xb0) [0x806df19] -> /lib/libc.so.6(__libc_start_main+0xdc) [0x7a5dec] -> /usr/libexec/dovecot/imap [0x805a2b1]

2 3

[Dovecot] Password field limitations
by Tom Sommer 29 Dec '08

29 Dec '08

Hi, I've searched the WIKI for this information but seem unable to find anything about it. What limitations are imposed on the password for IMAP/POP3 users? I've had a customer saying they can't use passwords which contain "." or ":", and some seem to have problems when the password is 8 characters. I use PLAIN authentication, passwords are stored in a MySQL database. Thanks a lot -- Tom Sommer

4 5

[Dovecot] automounting home dirs
by Roger Hale 29 Dec '08

29 Dec '08

Hi, I'm running dovecot-1.0.10 on a Solaris 10 server with home dirs automounted over NFS. I have set the mail_location configuration option so that nothing should be written to a user's home dir over NFS but, as far as I can tell, dovecot still by default tries to chdir to a user's home dir when reading mail, although this is not required. This creates additional unnecessary load on a heavily-loaded fileserver and generally slows everything down and creates an unnecessary dependency. Is there a way to prevent dovecot from causing the home dirs to be mounted? I found this thread: http://markmail.org/message/umywuppl3vvzfe4p#query:dovecot%20mount%20home%2… which discusses the same problem, but it's quite old and there doesn't seem to be a definitive answer other than hacking the passwd file or the code. Is there a more elegant solution? TIA. _________________________________________________________________ Get a bird’s eye view of the world with Multimap http://clk.atdmt.com/GBL/go/115454059/direct/01/

2 3

[Dovecot] change sender name in Sieve
by Jakob Grießmann 26 Dec '08

26 Dec '08

Hello, the vacation module of Sieve works fine for me, but the sender name (From Header) is always the e-mail address. I'm unable to add a name here. I'd love to have my realname in the From: field. Did I miss something? :-) Thanks, Jakob

5 8

[Dovecot] Logging logs moved/deleted
by Nicolas Letellier 26 Dec '08

26 Dec '08

Hi dovecot list, I'm looking for a possibility to log a moved (or a deleted mail). For example, I have a mailbox, and I read it in IMAP. I have a mail in INBOX. I want to move it to Folder. I want to have this action logged in my dovecot log file (or an other file). Is it possible? I read this: http://wiki.dovecot.org/Logging and I don't find any informations about it. I try to set "mail_debug=yes", but it does not log what I want. Thanks. Best regards (and happy Xmas). -- -Nicolas.

3 4

[Dovecot] /etc/dovecot.conf says mkcert.sh is in doc/mkcert.sh but instead it is in /usr/libexec/dovecot/mkcert.sh
by Michael McNamara 25 Dec '08

25 Dec '08

Perhaps this is an issue unique to installing from an RPM, but: % dovecot -n # 1.1.7: /etc/dovecot.conf # OS: Linux 2.6.27.7-134.fc10.i686 i686 Fedora release 10 (Cambridge) /etc/dovecot.conf says: ... ## ## SSL settings ## # IP or host address where to listen in for SSL connections. Defaults # to above if not specified. #ssl_listen = # Disable SSL/TLS support. #ssl_disable = no # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. *Included doc/mkcert.sh can be used to easily generate self-signed* # certificate, just make sure to update the domains in dovecot-openssl.cnf #ssl_cert_file = /etc/pki/dovecot/certs/dovecot.pem #ssl_key_file = /etc/pki/dovecot/private/dovecot.pem However, installing dovecot from an rpm places mkcert.sh in: % rpm -qv dovecot dovecot-1.1.7-1.fc10.i386 % rpm -V -v dovecot S.5....T c /etc/dovecot.conf ........ c /etc/pam.d/dovecot ........ /etc/pki/dovecot ... ........ /usr/libexec/dovecot/logview ........ /usr/libexec/dovecot/maildirlock *........ /usr/libexec/dovecot/mkcert.sh * ........ /usr/libexec/dovecot/pop3 ........ /usr/libexec/dovecot/pop3-login

2 1

[Dovecot] SQL field format for digest-md5?
by Darren Pilgrim 24 Dec '08

24 Dec '08

I'm enabling digest-md5 authentication with "user(a)example.com" username and plain-text passwords stored in a MySQL database. What should the password field contain in order to work with digest-md5? Would the following: SELECT CONCAT('{digest-md5}', MD5(CONCAT(username, '::', password))) AS password ... be correct?

2 5

Re: [Dovecot] copy LDA rule
by Nicolas Letellier 24 Dec '08

24 Dec '08

On Wed, 24 Dec 2008 15:54:31 +0100 Pascal Volk <user+dovecot(a)localhost.localdomain.org> wrote: > Am 24.12.2008 11:50 schrieb Nicolas Letellier: > > Hi dovecot@. > > > > I use the last dovecot (1.1.7) with sieve-plugin. All works perfectly. > > However, I would like to use a "copy" function. All mail sent by "toto(a)domain.tld" have to be copied in a folder (copy, and not move). > > > > So, I don't want to use a fileinto rule. > > > > I see in http://wiki.dovecot.org/LDA/Sieve there is a copy function (1.1 only). > > > > A rule like: > > > > if header :contains "From" "toto(a)domain.tld" { > > copy "test"; > > stop; > > } > > > > does not work. I have nothing into my deliver or dovecot log. However, if I replace copy by fileinto, it works. But I want to copy the email, not move it. I don't find any examples in the Internet or the wiki. > > > > Could you help me? > > > > Thanks! > > > > Did you read RFC 3894? > The first match at http://google.com/search?q=sieve+copy > > /var/log/maillog: > deliver(user(a)example.org): msgid=<X(a)vh3.dom.tld>: saved mail to tototest > deliver(user(a)example.org): msgid=<X(a)vh3.dom.tld>: saved mail to INBOX > > ~/.dovecot.sieve: > require ["copy", "fileinto"]; > if header :contains "From" "toto(a)domain.tld" { > fileinto :copy "tototest"; > } > > > Regards, > Pascal Thanks for your response. It will help me. Regards, -- -Nicolas.

1 0

[Dovecot] copy LDA rule
by Nicolas Letellier 24 Dec '08

24 Dec '08

Hi dovecot@. I use the last dovecot (1.1.7) with sieve-plugin. All works perfectly. However, I would like to use a "copy" function. All mail sent by "toto(a)domain.tld" have to be copied in a folder (copy, and not move). So, I don't want to use a fileinto rule. I see in http://wiki.dovecot.org/LDA/Sieve there is a copy function (1.1 only). A rule like: if header :contains "From" "toto(a)domain.tld" { copy "test"; stop; } does not work. I have nothing into my deliver or dovecot log. However, if I replace copy by fileinto, it works. But I want to copy the email, not move it. I don't find any examples in the Internet or the wiki. Could you help me? Thanks! -- -Nicolas.

2 1