- dovecot - dovecot.org

Re: [Dovecot] Authentication problems
by Rodti MacLeary 01 Sep '08

01 Sep '08

On Mon, 01 Sep 2008 17:17:27 +0300, Timo Sirainen <tss(a)iki.fi> wrote: >> Extracts of /var/log/mail.log attached below. Nothing new in mail.err. > > Those are only Postfix's logs. See Dovecot's logs. > http://wiki.dovecot.org/Logging Sorry, I pulled these from syslog: Sep 1 13:52:36 localhost dovecot: imap-login: Login: user=<user(a)domain.tld>, method=PLAIN, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx, TLS Sep 1 13:52:57 localhost dovecot: imap-login: Login: user=<user(a)domain.tld>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Sep 1 13:52:57 localhost dovecot: IMAP(user(a)domain.tld): Disconnected: Logged out Sep 1 13:53:01 localhost dovecot: imap-login: Login: user=<user(a)domain.tld>, method=PLAIN, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx, TLS Sep 1 13:53:08 localhost postfix/smtpd[6047]: connect from unknown[xxx.xxx.xxx.xxx] Sep 1 13:53:09 localhost postfix/smtpd[6047]: lost connection after EHLO from unknown[xxx.xxx.xxx.xxx] Sep 1 13:53:09 localhost postfix/smtpd[6047]: disconnect from unknown[xxx.xxx.xxx.xxx] Sep 1 13:53:12 localhost postfix/smtpd[6047]: connect from unknown[xxx.xxx.xxx.xxx]

1 0

[Dovecot] Autocreating INBOX only
by Edgar Fuß 01 Sep '08

01 Sep '08

I would like deliver not to automatically create subfolders for mails addressed to user+some_strange_name(a)domain.com, but nevertheless automatically create INBOX for new users. I'm not sure whether a new option like -M or -m -m would be appropriate, i.e., whether anyone needs the current -m behaviour. It looks to me like one would need to change mailbox_open_or_create_synced() if (box != NULL || no_mailbox_autocreate) return box; to something like (assuming an enum mailbox_autocreate {_never,_inbox,_always} if (box != NULL) return box; if (mailbox_autocreate == mailbox_autocreate_never || strcasecmp (mailbox, "INBOX") != 0) return NULL;

2 3

Re: [Dovecot] usernames with/without domain - my solution
by Mark Zealey 01 Sep '08

01 Sep '08

We do it the same and it works fine, however we do it by inbound port (because we're behind some loadbalancers that can do port translation. We create a port -> domain mapping table and then you can just do the join with "where port = '%a'" (dovecot 1.1 only). Seems a little neater than the per-ip solution if you're in a loadbalanced environment. I don't see why you need the group by or having statements (assuming you have normalized tables). Mark -- Mark Zealey -- Shared Hosting Team Leader Product Development * Webfusion 123-reg.co.uk, webfusion.co.uk, donhost.co.uk, supanames.co.uk This mail is subject to http://www.gxn.net/disclaimer > -----Original Message----- > From: dovecot-bounces+mark.zealey=webfusion.com(a)dovecot.org > [mailto:dovecot-bounces+mark.zealey=webfusion.com@dovecot.org] > On Behalf Of Ian B > Sent: 01 September 2008 09:29 > To: dovecot(a)dovecot.org > Subject: [Dovecot] usernames with/without domain - my solution > > My existing pop3/imap environment is courier imap + vpopmail > + qmail with MySQL backend. I'm looking at migrating this to Dovecot. > > Currently I have multiple instances of Courier bound to > different loopback IPs (the IPs correspond with the virtual > IPs on a server load balancer). When a user authenticates > they don't have to specify a domain - if they don't, Courier > will use a 'default' domain (defined in the Courier config > for that instance). > > Moving to Dovecot I want to avoid having to running an > instance of Dovecot listening on each loopback IP, but still > handle usernames that may not have the domain component. > > I wasn't able to find any examples showing how to achieve > this exactly, so came up with the following solution: > > 1. create a new 2 column SQL table: 'domain', 'IP' - this > allows me to map between the local Dovecot IP and the 'default' domain > 2. create a (rather ugly looking) sql query that combines > data from both the vpopmail table and the new table > > The SQL query is as follows: > > > SELECT > IF('%d' = '',dovecot.domain,'%d') AS authdomain, > CONCAT(pw_name, '@', pw_domain) AS user, > pw_passwd AS password, pw_dir AS userdb_home, 89 AS > userdb_uid, 89 AS userdb_gid > FROM vpopmail, dovecot_authmap AS dovecot > WHERE pw_name = '%n' > AND dovecot.local_ip = SUBSTRING_INDEX('%l', ':', -1) > GROUP BY pw_domain HAVING pw_domain = authdomain > > > NOTE: I'm prefetching userdb info > > This works, however I'd like to know what others think of > this approach, and whether there is a better way to achieve > what I require. > > Thanks, > Ian. > > > Win a MacBook Air or iPod touch with Yahoo!7. > http://au.docs.yahoo.com/homepageset >

1 0

[Dovecot] How do I move delete messages to Trash?
by Robert S 01 Sep '08

01 Sep '08

I've recently replaced courier-imap with dovecot - mainly for performance benefits. All of my users in the office use Outlook Express. It appears that dovecot has no facility to move deleted messages to a Trash folder - where they can be removed after a specified time with a cronjob. Other mail clients seem to have an option to specify a Trash folder. I see that there's a deleted-to-trash plugin at http://wiki.dovecot.org/Plugins/deleted-to-trash but I've got no idea as to how I'd implement this. Could somebody please give me some pointers? I realise that OE might not be the best mail client for implementing IMAP but that's what everyone in the office uses!

1 0

[Dovecot] usernames with/without domain - my solution
by Ian B 01 Sep '08

01 Sep '08

My existing pop3/imap environment is courier imap + vpopmail + qmail with MySQL backend. I'm looking at migrating this to Dovecot. Currently I have multiple instances of Courier bound to different loopback IPs (the IPs correspond with the virtual IPs on a server load balancer). When a user authenticates they don't have to specify a domain - if they don't, Courier will use a 'default' domain (defined in the Courier config for that instance). Moving to Dovecot I want to avoid having to running an instance of Dovecot listening on each loopback IP, but still handle usernames that may not have the domain component. I wasn't able to find any examples showing how to achieve this exactly, so came up with the following solution: 1. create a new 2 column SQL table: 'domain', 'IP' - this allows me to map between the local Dovecot IP and the 'default' domain 2. create a (rather ugly looking) sql query that combines data from both the vpopmail table and the new table The SQL query is as follows: SELECT IF('%d' = '',dovecot.domain,'%d') AS authdomain, CONCAT(pw_name, '@', pw_domain) AS user, pw_passwd AS password, pw_dir AS userdb_home, 89 AS userdb_uid, 89 AS userdb_gid FROM vpopmail, dovecot_authmap AS dovecot WHERE pw_name = '%n' AND dovecot.local_ip = SUBSTRING_INDEX('%l', ':', -1) GROUP BY pw_domain HAVING pw_domain = authdomain NOTE: I'm prefetching userdb info This works, however I'd like to know what others think of this approach, and whether there is a better way to achieve what I require. Thanks, Ian. Win a MacBook Air or iPod touch with Yahoo!7. http://au.docs.yahoo.com/homepageset

1 0

[Dovecot] GETQUOTAROOT (part 2)
by Patrick Medina 31 Aug '08

31 Aug '08

Hello, I'm a recent convert to dovecot from courier-imap and the performance has certainly improved. I'm running the vanilla 1.0.7 version that came with the CentOS 5.2 x86_64 distro. I've come across a similar problem that was posted by Ralf Hildebrandt earlier this year under the same subject, but that thread just seems to have died off. I'm also using per- user maildirsize files (originally run under courier-imap) but these are not being read/enforced/updated for some users. After some testing with these users, the problem seems to be related to the size of the maildirsize file itself. A file size greater than 5119 bytes results in no quota for the INBOX of the user, and the file seems to be ignored entirely by dovecot. I guess the solution to this is to just copy over a fresh (i.e. empty save for the limit line) maildirsize file, but I was wodering if this maildirsize size limit is some innate property of dovecot. Would not others, especially converts from courier-imap that also use maildirsize files, have this experience also? Thank you. Patrick

3 6

[Dovecot] Problem with multiple Dovecot Instances
by Manuel Maurer 31 Aug '08

31 Aug '08

Hello, first i want to say that i never used a mailing list before, so if i made something wrong do not hesitate to contact me via e-mail. I try to set up multiple Dovecot instances running at the same time. Goal is to provide IMAPS with a valid SSL Certificate on selected IP Addresses. To reach this i want to set it up as follows: 1 Dovecot Daemon listening on localhost (for webmail), providing LDA and Authentification (over MySQL) 4 Dovecot Daemons listening on each IP Address, querying the localhost daemon for authentification Just for your Information: I replaced all real data with placeholders, like the IP Address of my Server with MY_IP. Also i removed some absolutely non relevant lines from the configuration output (like settings for logging) This is my localhost config-output: # 1.1.2: /opt/dovecot/etc/dovecot.conf base_dir: /var/run/dovecot protocols: pop3 imap listen(default): 127.0.0.1:143 listen(imap): 127.0.0.1:143 listen(pop3): 127.0.0.1:110 ssl_disable: yes login_dir: /var/run/dovecot/login login_executable(default): /opt/dovecot/libexec/dovecot/imap-login login_executable(imap): /opt/dovecot/libexec/dovecot/imap-login login_executable(pop3): /opt/dovecot/libexec/dovecot/pop3-login login_chroot: no first_valid_uid: 5000 last_valid_uid: 5000 mail_location: mbox:/home/vmail/%d/%u mail_executable(default): /opt/dovecot/libexec/dovecot/imap mail_executable(imap): /opt/dovecot/libexec/dovecot/imap mail_executable(pop3): /opt/dovecot/libexec/dovecot/pop3 mail_plugin_dir(default): /opt/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /opt/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /opt/dovecot/lib/dovecot/pop3 auth default: mechanisms: plain login user: nobody passdb: driver: sql args: /opt/dovecot/etc/dovecot-sql.conf userdb: driver: sql args: /opt/dovecot/etc/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 user: dovecot group: dovecot deliver and webmail works fine when i start this Daemon. Now i made a second conf-file: # 1.1.2: /opt/dovecot/etc/dovecot_main.conf base_dir: /var/run/dovecot_main protocols: pop3s imaps ssl_listen(default): MY_IP:993 ssl_listen(imap): MY_IP:993 ssl_listen(pop3): MY_IP:995 ssl_cert_file: /opt/certs/example.crt ssl_key_file: /opt/certs/example.key ssl_cipher_list: ALL:!LOW:!SSLv2 login_dir: /var/run/dovecot/login login_executable(default): /opt/dovecot/libexec/dovecot/imap-login login_executable(imap): /opt/dovecot/libexec/dovecot/imap-login login_executable(pop3): /opt/dovecot/libexec/dovecot/pop3-login login_chroot: no first_valid_uid: 5000 last_valid_uid: 5000 mail_location: mbox:/home/vmail/%d/%u mail_executable(default): /opt/dovecot/libexec/dovecot/imap mail_executable(imap): /opt/dovecot/libexec/dovecot/imap mail_executable(pop3): /opt/dovecot/libexec/dovecot/pop3 mail_plugin_dir(default): /opt/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /opt/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /opt/dovecot/lib/dovecot/pop3 auth extern: socket: type: connect master: path: /var/run/dovecot/auth-master mode: 384 Starting up the second Daemon is also no problem, it listen to the correct IP, Logfiles does not show any errors. When i try to connect with Thunderbird to this Daemon using IMAPS, i got the following errors logged: Logfile for dovecot_main: dovecot: “2008-08-21 19:16:47 ”Info: imap-login: Internal login failure (auth failed, 1 attempts): user=<MY_USERNAME>, method=PLAIN, rip=REMOTE_IP, lip=LOCAL_IP, TLS Logfile for dovecot_local: dovecot: Info: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=LOCAL_IP rip=REMOTE_IP lport=993 rport=3107 dovecot: Info: auth(default): client out: CONT 1 dovecot: Info: auth(default): client in: CONT<hidden> dovecot: Info: auth-worker(default): sql(MY_EMAIL,REMOTE_IP): query: SELECT email AS user, NULL AS password, 1 AS nopassword, '/home/vmail/MY_DOMAIN/MY_USERNAME' AS userdb_home, 'mbox:/home/vmail/MY_DOMAIN/MY_USERNAME' AS userdb_mail, 5000 AS userdb_uid, 5000 AS userdb_gid FROM users WHERE email = 'MY_EMAIL' AND password = MD5('MY_PASSWORD') AND locked = 0 AND inactive = 0 dovecot: Info: auth(default): client out: OK 1 user=MY_EMAIL dovecot: Info: auth(default): master in: REQUEST 1 5416 1 dovecot: Error: auth(default): Master requested auth for nonexisting client 5416 I understand what this error message means, when i run top during login i can see one imap-login process (running under the Daemon "main") is disappearing and coming up again a few seconds later. What is causing this behaviour? Thanks in advance. Manuel

2 6

[Dovecot] many users maildir access
by VK 31 Aug '08

31 Aug '08

Hi All, Is it possible when using Dovecot and MySQL to tell dovecot maildir:%h/MailDir -- Yes I know but please read on before you answer this one :-> We have users directories layer structured because of the filesystems 32k directory limit , eg: user foobar(a)example.com's home mail directory is: /mailhosts/example.com/f/fo/foo/foobar I know Dovecot takes maildir:%d/%u/MailDir but as you see this will not work, so I guess I'm after the defination of %h, is that home as in system users home, or home as is like our setup? Or, is there yet another way we could have Dovecot access the users mail, we need to ove away from our current <insert_wellknown_pop3/imap> setup as it is just to slow, and I know dovecot has a 30 fold increase on speed over it from talknig to other people, but none of them do anymore then the /domain/user setup so cant help me. Regards, Vic

2 1

[Dovecot] Input and suggestions: Mail mirror setup
by Ulf Zimmermann 31 Aug '08

31 Aug '08

Hello, everyone. To make life for our operations team easier I am looking at setting up a mail mirror of any email which gets sent from certain machines. My current ideas go along the following lines: Each machine will use the Postfix "always_bcc" option and set it to an address like mailmirror(a)mailmirror.openlane.com. On mailmirror I am looking at setting up Dovecot with public folders and a number of users, which probably will authenticate via Active Directory. I intend to create a main public folder called MailMirror and then underneath sub folders based on the sender email address in a format of like "<sender>_<domain>". Now the sub folders need to be created automatically when it doesn't exist yet. I think the best way to tie this in between Postfix and Dovecot is to use an alias in Postfix for mailmirror(a)mailmirror.openlane.com which will check if a public folder exist or not. It will create the folder and then deliver the message to the folder (maybe via safecat http://www.dovecot.org/list/dovecot/2007-November/026661.html) Anyone got input or suggestion about my plans? Ulf Zimmermann | Senior System Architect OPENLANE 4600 Bohannon Drive, Suite 100 Menlo Park, CA 94025 O: 650-532-6382 M: (510) 396-1764 F: (510) 580-0929 Email: ulf(a)openlane.com | Web: www.openlane.com

2 3

[Dovecot] Dovecot and fake users
by Vytenis Sabaliauskas 31 Aug '08

31 Aug '08

Hi everyone, Our company has decided to make a fake POP3 (and possibly IMAP) server, which accepts any user name and password combination and shows there are no new messages. This is for the purpose that when our mail cluster passes out, we can redirect our clients to this server while we fix our mail system. This way we can prevent our users from getting errors. We are using the latest dovecot server with Ubuntu (currently), but perhaps will migrate to CentOS (if this is important) I am trying to use the following configuration for testing, but it doesn't seem to work (don't laugh :) ) -------8<------------ passdb pam { args = dovecot } userdb static { args = uid=0 gid=0 home=/var/mail/empty allow_all_users=yes } -------8<------------ cat /etc/pam.d/dovecot: ------------------- #%PAM-1.0 auth required pam_permit.so ------------------- I will be very thankful for pointing the way to do this and any thoughts. P.S. Sorry for my english. -- Vytenis

4 3