- dovecot - dovecot.org

[Dovecot] Homedir permissions problems with LDAP
by "Fábio M. Catunda" 04 Jan '08

04 Jan '08

Sorry, my previous message entered like a reply, so I'm sending again to keep the list in order. Hi, I'm using dovecot 1.0.5-1 (debian stable) and I'm trying to build a virtual host machine with ldap. In my dovecot-ldap.conf thats what I have: uris = ldap://<ldapserver>/ dn = cn=Manager, dc=domain, dc=com, dc=br dnpass = <ultra secret passwd> sasl_bind = no tls = no ldap_version = 3 base = ou=Users, dc=domain, dc=com, dc=br deref = never scope = subtree user_attrs = homeDirectory=homeDirectory user_filter = (&(mail=%u)) pass_attrs = mail=user,userPassword=password pass_filter = (&(mail=%u)) default_pass_scheme = CRYPT user_global_uid = 107 user_global_gid = 109 But I don't want to read homeDirectory from LDAP, so I have the following in dovecot.conf mail_location = maildir:/var/virtual/%d/%n/ The question is when I try to log into imap I receive the following error: dovecot: 2008-01-03 10:03:55 Error: IMAP(magalhaes(a)fmcs.com.br): mkdir(/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/expunged/cur) failed: Permission denied dovecot: 2008-01-03 10:03:55 Error: IMAP(magalhaes(a)fmcs.com.br): mkdir(/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/deleted/cur) failed: Permission denied dovecot: 2008-01-03 10:03:55 Error: IMAP(magalhaes(a)fmcs.com.br): mkdir(/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/deleted/expunged/cur) failed: Permission denied (I'm using lazy_expunge too) I can log in and etc, but this is strange for me, why do I receive this Permission denied message? The directory /var/virtual/<domain>/<user>/ is owned by uid 107 and gid 109, so, i believe thats ok. My homedir in ldap is /home/samba/<user> , so I changed tried to chown 107:109 too but I still get this error. Is there a way for me to know what is the full path that dovecot is trying to use? HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB is no helping me too much! Oh, I imagine that my lazy_expunge conf may be helpfull: namespace private { prefix = .EXPUNGED/ separator = / location = maildir:~/expunged hidden = yes } namespace private { prefix = .DELETED/ separator = / location = maildir:~/deleted hidden = yes } namespace private { prefix = .DELETED/.EXPUNGED/ separator = / location = maildir:~/deleted/expunged hidden = yes } Thanks for all!

1 1

[Dovecot] Compile error introduced in b13 (Solaris 10)
by mikkel＠euro123.dk 04 Jan '08

04 Jan '08

Any news on the b13 compile issue on Solaris 10 (both Sparc and X86)? Would be nice to know whether it's our own headache or something thats not supposed to be and thus expected to be fixed in the next release. Just to be clear this didn't occur in any other release (I've compiled all previous v1.1 betas on the same setup including b12). Ref.: http://dovecot.org/list/dovecot/2007-December/027702.html http://dovecot.org/list/dovecot/2007-December/027704.html Regards, Mikkel

1 1

[Dovecot] latest 1.1 betas and quota warning
by arvids 03 Jan '08

03 Jan '08

Hello, I noticed that quota warning is not executed with latest 1.1 betas and I looked at the code that implements quota warning. Here it is (line 657 in quota.c): if ((bytes_current < warnings[i].bytes_limit && bytes_current >= warnings[i].bytes_limit) || (count_current < warnings[i].count_limit && count_current >= warnings[i].count_limit)) { quota_warning_execute(warnings[i].command); break; } It seems to me that quota_warning_execute function will never be executed. Timo, can you look at this code? Regards, Arvids

1 0

Re: [Dovecot] [Fwd: Re: Building path to maildir]
by Michel Bulgado 03 Jan '08

03 Jan '08

Hi Charles I receive the Timo's reply. thanks for send me again Use the option that i said, but the problem persists. userdb static { args = uid=500 gid=500 } userdb prefetch { } Jan 2 23:50:08 michel dovecot: auth(default): new auth connection: pid=18374 Jan 2 23:50:20 michel dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=127.0.0.1 rip=127.0.0.1 resp=<hidden> Jan 2 23:50:20 michel dovecot: auth(default): pam(michel,127.0.0.1): lookup service=dovecot Jan 2 23:50:20 michel dovecot: auth(default): client out: OK 1 user=michel Jan 2 23:50:20 michel dovecot: auth(default): master in: REQUEST 1 18306 1 Jan 2 23:50:20 michel dovecot: auth(default): master out: USER 1 michel uid=503 gid=503 Jan 2 23:50:20 michel dovecot: POP3(michel): Loading modules from directory: /usr/lib64/dovecot/pop3 Jan 2 23:50:20 michel dovecot: pop3-login: Login: user=<michel>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 2 23:50:20 michel dovecot: POP3(michel): Module loaded: /usr/lib64/dovecot/pop3/lib10_quota_plugin.so Jan 2 23:50:20 michel dovecot: POP3(michel): Effective uid=503, gid=503 Jan 2 23:50:20 michel dovecot: POP3(michel): maildir: data=/var/spool/virtualmail//michel Jan 2 23:50:20 michel dovecot: POP3(michel): maildir: root=/var/spool/virtualmail//michel, index=/var/spool/virtualmail//michel, control=, inbox= Dovecot detect the username , but no detect the part domain that i need to build the path to maildir. Use ldap (active directory) to retrieve the mail attribute which specifies the address of my mail users. I ask, as I could do with pam. As I get the attribute mail with pam mail_location = maildir:/var/storage/virtualmail/%d/%n So must be /var/spool/virtualmail/casa.co.cu/michel not /var/spool/virtualmail//michel ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

3 2

[Dovecot] Building path to maildir
by Michel Bulgado 03 Jan '08

03 Jan '08

I have the following situation and I need help from all you people I have dovecot 0.99.11 and i want to migrate to a superior version like dovecot 1.0 looking forward to implement quotas in my system , and use the function deliver with postfix. My Scenario is as follow Dovecot + LDAP (ADS) + postfix My actual version is : 0.99.11 This is my actual configuration: Protocols = imap pop3 imap_listen = * pop3_listen = * login_dir = /var/run/dovecot-login login = imap login = pop3 default_mail_env = maildir:/var/spool/virtualmail/%d/%n mbox_locks = fcntl auth = dovecot-auth auth_mechanisms = plain auth_default_realm = CASA.CULT.CU auth_userdb = ldap /etc/dovecot-ldap.conf auth_passdb = pam dovecot auth_user = root auth_verbose = yes auth_debug = yes dovecot-ldap.conf hosts = ldap.casa.cult.cu base = ou=CASA,dc=casa,dc=cult,dc=cu dn = cn=unix-conector,cn=Users,dc=casa,dc=cult,dc=cu dnpass = ***** ldap_version = 3 deref = never scope = subtree user_global_uid = 500 user_global_gid = 500 user_attrs = mail,/var/spool/virtualmail/%d/%n,,,, user_filter = (&(objectClass=user)(!(objectClass=computer))(sAMAccountName=%n)) I see many changes in this new version. One of them is : -Renamed default_mail_env to mail_location - many changes in ldap queries With the new version my problem is when to dovecot tries to detect or builds the way where it´s stored the mailbox of my users. In /var/spool/virtualmail/%d/%u , it does not detect the domain when asking to my active directory (w2k) and consequently takes a value of my default realm = casa.cult.cu in this case the default domain where authenticate my users. My configuration in the new version of dovecot: protocols = imap pop3 protocol imap { listen = * } protocol pop3 { listen = * } login_dir = /var/run/dovecot/login login_chroot = yes login_greeting = Dovecot ready. mail_location = maildir:/var/spool/virtualmail/%d/%u mail_debug = yes mbox_read_locks = fcntl mbox_write_locks = fcntl protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } protocol lda { postmaster_address = postmaster(a)example.com mail_plugins = quota auth_socket_path = /var/run/dovecot/auth-master } auth_executable = /usr/libexec/dovecot/dovecot-auth auth_verbose = yes auth_debug = yes auth default { mechanisms = plain passdb pam { args = dovecot } userdb ldap { args = /etc/dovecot-ldap.conf } userdb prefetch { } user = root socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = virtualmail group = virtualmail } } } dict { } plugin { quota = maildir:storage=10240 } user_attrs = mail,/var/spool/virtualmail/%d/%n,,,, The attribute mail in the old version returns to me user(a)casa.com or user(a)casa.cult.cu this way dovecot can build the way with no problems at all. But in this late version something is happening, it only takes the value %n= user , but not %d = domain . It´s not working. do you have any idea how I can solve this I beg your pardon for my poor English. ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

2 1

[Dovecot] Trying to build the maildir path
by Michel Bulgado 03 Jan '08

03 Jan '08

I use ldap because is where are store the users and his make place the authentication . In my LDAP I have a attribute mail. like this = mail: pepe(a)casa.com I Have more that one domain This atribute return to me something like : pepe(a)casa.com where i use tu build the path to maildir, using %d and %n variables . /var/spool/vmail/%d/%n = /var/spool/vmail/casa.com/pepe this work in 0.99.11 but no in the latest version of dovecot. ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

2 1

[Dovecot] Permanent roadmap page on web
by Timo Sirainen 02 Jan '08

02 Jan '08

http://dovecot.org/roadmap.html I'll try to keep it updated.

7 11

[Dovecot] Dovecot on OpenWRT
by Dirk Aust 02 Jan '08

02 Jan '08

Hello, does anybody has a patch so that I can compile for the OpenWRT, currently the configure script can't be used for cross-compiling. Best Regards, Dirk Aust

1 0

[Dovecot] dovecot-auth consumes 100% CPU time on Solaris 10
by KOT MATPOCKuH 02 Jan '08

02 Jan '08

Is problem with CPU load solved? I have same problem - dovecot-auth eats one of my cores. I'm using dovecot 1.0.7 on Solaris 10 Sparc. I tried to use auth-bind and standard scheme with separate user for bind and have same result. Problem occupts only with LDAP authentication, on some other systems I use PostgreQSL and MySQL authentication and doesn't have this problem. Using PAM authentication is not possible, because dovecot run in chroot'ed environment and I planing to move it to separate system or zone without ldap client. -- MATPOCKuH

7 20

[Dovecot] Delay on failed pw attempts
by Dean Brooks 02 Jan '08

02 Jan '08

Hi, Is there a way, or can a way be added, to add an "auth_failed_delay=10s" style option that would put in an artificial delay after a failed password attempt? As it stands now, Dovecot seems highly vulnerable to widescale brute-force password dictionary scans. Even if it's not configurable, can a delay be hardcoded to something like, say, 10 or 15 seconds? -- Dean Brooks dean(a)iglou.com

10 18