- dovecot - dovecot.org

[Dovecot] gssapi, kerberos and webmail
by Denis Cardon 14 Sep '07

14 Sep '07

Hi every one, first thanks for the great job, I switched successfully from courier imap a few months ago and both the migration and maintenance went smoothly from then on. The reason I switched was gssapi support (and the easier debug) and now I have thunderbird on Linux connecting in an SSO fashion through kerberos/GSSAPI (works great). Users should be able to access their mail throught a webmail too (eg. eGroupware). I have already checked for kerberos authentication on Apache, however there seems to be no way to have ticket forwarding throught PHP. AFIAK there is thus no way to use kerberos for php-imap --> dovecot authentication. The only information available seems to be the username. So here is my question : how do people on this mailing list handle kerberos authentication with webmail? Do you use other kind of authentication on privileged port (ie with access only from apache) and just do a login/nopassword authentication (like an uid base authentication through ldapi:/// on an ldap directory for example) ? Here is what we have with thunderbird : Thunderbird -------kerberos-------> dovecot on standard port Here is what I would guess for webmail auth : Firefox ------kerberos----> Apache ----gssapi-auth-just-using-login----> dovecot on privileges port Cheers, Denis -- Denis Cardon Tranquil IT Systems 44 bvd des pas enchantés 44230 Saint Sébastien sur Loire tel : +33 (0) 2.40.97.62.67 http://www.tranquil-it-systems.fr

2 1

[Dovecot] Dovecot / OS X 10.4 Mail.app and "Too Many Opened files" error message ?
by Xavier Beaudouin 14 Sep '07

14 Sep '07

Hello, I am trying to move from Courier-imap to dovecot.... Even if the processes to move logical (eg name spaces etc...) went very and without any problem, I've some etrange behavior when Imap client is Mac OS X Mail.app. I've got a big mailbox that have about 3 / 4G of mail in several folder (lots !!!)... After a long time, the OS X client say error : "Too Many opened files". I have check on the servers (a FreeBSD farm of 3 servers using freebsd ports of dovecot)... And nothing special... A question : why do I have never this kind of message on courier imap and why do I get this on dovecot... ? Configuration file on demand... if needed... THanks, /Xavier

1 0

[Dovecot] pipe() error but not linked to kqueue
by Patrick Milvich 13 Sep '07

13 Sep '07

I have dovecot 1.0.5 installed on an OpenBSD 4.1 box and an OS X Server 10.4.10 box. Sure you've all heard it before, because of the pipe error, no more login processes can be launched, and I have to restart the server. dovecot: Sep 13 05:50:00 Error: pipe() failed: Too many open files I first thought this was the issue with kqueue, but I've since recompiled making sure to use poll. This also happened with 1.0.3 and 1.0.2. It also happens very specifically after a dictionary attack that lasts usually about an hour, unless I can catch it earlier. (Around 18,000 login attempts) ex: dovecot: Sep 13 05:49:58 Info: pop3-login: Aborted login: user=<aaron>, method=PLAIN, rip=62.161.41.32, lip=<local ip> dovecot: Sep 13 05:49:58 Info: pop3-login: Aborted login: user=<adm>, method=PLAIN, rip=62.161.41.32, lip=<local ip> dovecot: Sep 13 05:49:58 Info: pop3-login: Aborted login: user=<account>, method=PLAIN, rip=62.161.41.32, lip=<local ip> But after the attack has subsided for a period of time, I still have the number of file descriptors maxed out for the dovecot process. I've increased the number available to have a higher roof, but that doesn't fix the problem. Wondering if anyone else has seen this issue, and also in a generic problem. How are others dealing the the problem of being attacked in this method? Is there a max number of login tries for a given ip address within a period of time that I'm missing? :) Thanks, Patrick

2 1

[Dovecot] dirsize quota assertion problem
by Alan Ferrency 13 Sep '07

13 Sep '07

Our current virtual mailbox configuration is not compatible with one of the assertions in the dovecot quota plugin's assertions in quota-dirsize.c. I believe the assertion is incorrect, but I would also be happy if I could get the same result with a better configuration setting. Here is a sample passdb entry which causes the quota assertion to fail: test(a)example.com:<snip>:3007:1000::/usr/boxes/username/example.com::userdb_mail=mbox:~/test^/.imap:INBOX=~/test userdb_uid=3007 userdb_gid=1000 userdb_home=/usr/boxes/username/example.com userdb_quota=dirsize:storage=100 The imap folder is "~/test^/.imap" and the INBOX is "~/test". As you can see, these are in different locations, but the INBOX string happens to be a substring of the imap folder directory. An example of the failed assertion error: Aug 31 16:44:13 www2 dovecot: IMAP(test(a)example.com): file quota-dirsize.c: line 180 (quota_count_path_add): assertion failed: (!is_file) This particular error log line was generated by dovecot 1.0.3, but the code in quota-dirsize.c is the same in dovecot 1.1 alpha3's version of quota-dirsize.c: 131 if (strncmp(count_path[i].path, path, strlen(path)) == 0) { 132 /* the new path contains the existing path */ 133 i_assert(!is_file); 134 count_path += i; 135 break; 136 } First, quota_count_path_add() is called for directory "~/test^/.imap" and it succeeds. When it is subsequently called for file "~/test": - the strncmp matches because "~/test" is a substring of "~/test^/.imap" - the assertion fails because "~/test" is a file and not a directory It seems to me that instead of asserting !is_file, it would be better to simply skip the conditional in that case, since a path variable that is a file should never be tested to see whether it contains an existing path. if (!is_file && strncmp(count_path[i].path, path, strlen(path)) == 0) { /* the new path contains the existing path */ count_path += i; break; } But this also has a bug: if path is a directory which substring matches count_path[i].path, but the same path with a directory separator appended to it does not substring match count_path[i].path, then it is a different path and does not contain the existing path. For example, if count_path[i] is the directory /usr/home/test/mailbox_folders, and path is the directory /usr/home/test/mailbox, then /usr/home/test/mailbox does not contain/usr/home/test/mailbox_folders, and this condition should fail. If some other code were to enforce that /usr/home/test/mailbox be terminated with a directory separator, then this is not a problem and my patch should work. I hope this makes sense. Thanks, Alan Ferrency pair Networks, Inc. alan(a)pair.com

2 7

[Dovecot] Dovecot + virtual users
by bichumo 13 Sep '07

13 Sep '07

Hi, I'm running FreeBSD, Dovecot, Postfix (virtual users), MySQL, Squirrelmail. I have installed squirrelmail-quota_usage-plugin, but I cannot make it work. It mentions "If you have an IMAP server with QUOTA Extension capability...". In dovecot.conf I have enabled "mail_plugins = quota" near protocol pop3 and protocol lda, near protocol imap I have "mail_plugins = quota imap_quota". Near " plugin { ..." I have "quota = maildir:storage=204800". I think that the problem of why I don't see quota in Squirrelmail is in file dovecot-sql near user_query. I have my users mailboxes in such format: /usr/local/virtual/domain.tld/username and my user_query looks like this: user_query = SELECT maildir, 125 AS uid, 125 AS gid, concat('maildir:storage=', quota) AS quota FROM mailbox WHERE username = '%u' AND active = '1', I think that in my user_query I'm missing something. I do not get any errors in the dovecot and dovecot-debug logs, everything works fine, but I still can't see quota.

3 3

[Dovecot] Deliver parameter problem!
by Umut Arus 13 Sep '07

13 Sep '07

Is there anybody having idea about this problem? thanks. -------- Original Message -------- Subject: Deliver parameter problem Date: Tue, 11 Sep 2007 14:21:56 +0300 From: Umut Arus <umuta(a)sabanciuniv.edu> To: dovecot(a)dovecot.org Hello, I'm using dovecot-1.0.5 with postfix. I have to use deliver from procmail because I have some filters. There is no document about how to using deliver parameters (-d) other than http://wiki.dovecot.org/LDA . If I set -d parameters manually as a username everything is ok. I can not set users' mail quota (don't lookup) with mysql db if I haven't set -d parameter as receipt username in procmail. How can I describe user (-d) parameter's variable in procmail? Procmail configuration, :0 | /usr/local/dovecot/libexec/dovecot/deliver -f $blabla -d $blabla2 Output of the configuration, # 1.0.5: /usr/local/dovecot/etc/dovecot.conf protocols: imap imaps pop3 pop3s listen: 10.1.1.168 ssl_cert_file: /usr/local/dovecot/etc/dovecot.cert.pem ssl_key_file: /usr/local/dovecot/etc/dovecot.key.pem disable_plaintext_auth: no login_dir: /usr/local/dovecot/var/run/dovecot/login login_executable(default): /usr/local/dovecot/libexec/dovecot/imap-login login_executable(imap): /usr/local/dovecot/libexec/dovecot/imap-login login_executable(pop3): /usr/local/dovecot/libexec/dovecot/pop3-login mail_location: maildir:%h/Maildir:INDEX=/var/no-quotas/index/%u:CONTROL=/var/no-quotas/control/%u mail_debug: yes mail_full_filesystem_access: yes mail_executable(default): /usr/local/dovecot/libexec/dovecot/imap mail_executable(imap): /usr/local/dovecot/libexec/dovecot/imap mail_executable(pop3): /usr/local/dovecot/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): mail_plugin_dir(default): /usr/local/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/dovecot/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xv%08Xu namespace: type: private separator: / location: maildir:~/Maildir:INDEX=/var/no-quotas/index/%u:CONTROL=/var/no-quotas/control/%u inbox: yes namespace: type: private separator: / prefix: mail/ location: maildir:~/Maildir/.mail:INDEX=/var/no-quotas/index/%u:CONTROL=/var/no-quotas/control/%u auth default: verbose: yes debug: yes passdb: driver: pam userdb: driver: sql args: /usr/local/dovecot/etc/dovecot-sql.conf userdb: driver: prefetch socket: type: listen master: path: /var/run/dovecot/auth-master mode: 438 plugin: quota: maildir:storage=500000:ignore=trash regards,

1 0

[Dovecot] Dovecot v1.1.alpha4 problem
by Vladislav Malyshkin 13 Sep '07

13 Sep '07

Dovecot v1.1.alpha4 imap after some time stops responding. It can not be restarted as /etc/init.d/dovecot restart killall imap also does not help killall -9 imap and then restart does help in log I see message (repeted periodically) that Sep 12 09:50:02 localhost postfix/local[22533]: C7057753B6: to=<username@domain> , relay=local, delay=5195, delays=5156/0.01/0/39, dsn=4.2.0, status=deferr ed (cannot update mailbox /home/username/Mailbox for user username. unable to lo ck for exclusive access: Resource temporarily unavailable) lsof -n shows that the file is is open by imap process.

3 4

[Dovecot] Datehandling bug?
by Ed W 12 Sep '07

12 Sep '07

Hi, I am testing dovecot 1.0.3 alongside my existing courier installation and a number of my emails are heading to the top of the inbox even though they are rather old. Closer inspection shows that my mailclient (Thunderbird on Win32) is showing me some screwey dates for a number of messages. One example is an email which says: Date: 2007-08-21 11:42:43 But in TB I see the date shown as only: 03:27 ie just a time and no date OK, the date above is clearly not an RFC date, but any idea why this is showing up only under Dovecot? Is it a dovecot date handling issue? Cheers Ed W

3 3

Re: [Dovecot] dovecot sieve notify example?
by Thanh Han The 12 Sep '07

12 Sep '07

Hi, On Tue, Sep 11, 2007 at 10:47:10PM +0300, Uldis Pakuls wrote: > you can expand it using variables: > > sample: > ----------- > # Imagine the header > if address :matches ["From"] ["*"] { > # ${1} is the matching address > keep; > notify :method "mailto" :options ["${1}"] :message "Thank you, your message has been received." ; > } else { > # Control wouldn't reach this block, any match was successful > } > ----------- > > see: http://www.ietf.org/internet-drafts/draft-ietf-sieve-variables-08.txt I installed the latest sieve plugin (1.0.2) but it seems that the "variables" extension is not supported yet. When I say ,-------- | require ["fileinto", "variables"]; `-------- then I get the error: ,-------- | sieve parse error: line 1: Unsupported features in require line `-------- If I leave variables out, sieve doesn't complain but the variable is not expanded and I got ,-------- | sent notification to <${1}> (method=mailto) `-------- Any hint please? Thanks, Thanh

1 0

[Dovecot] [Debian] Sarge packages for dovecot 1.0.5 available
by Brian T Glenn 11 Sep '07

11 Sep '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sun, Sep 09, 2007 at 07:21:26AM +0300, Timo Sirainen may have written: > http://dovecot.org/releases/1.0/dovecot-1.0.5.tar.gz > http://dovecot.org/releases/1.0/dovecot-1.0.5.tar.gz.sig Packages dovecot-common, dovecot-pop3d, and dovecot-imapd are available from the delink.net repository. Add the following line to /etc/apt/sources.list: deb http://debian.delink.net/ sarge-delink main Any problems with the package should be reported to me offlist. Just remove the tag from the left hand side of my email address above. Thanks, Brian - -- http://www.delink.net/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFG5w5vFy/L+4MovqIRApgfAKCSbqHNTZYHArAJNhRb9ZIc0fXm1ACfZLJ9 QNA9XIqzFEGi8tpxCX9mNjU= =APhD -----END PGP SIGNATURE-----

1 0