- dovecot - dovecot.org

[Dovecot] Deliverm, vpopmail, and valias
by John Peacock 28 Mar '07

28 Mar '07

I'm in the final stages of testing my e-mail server to come and I seem to have hit a roadblock. One option of current vpopmail is to store all aliases in a valias table, that looks like this: +-------------+----------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +-------------+----------+------+-----+---------+-------+ | alias | char(32) | NO | MUL | | | | domain | char(64) | NO | | | | | valias_line | text | NO | | | | +-------------+----------+------+-----+---------+-------+ where valias_line could be either an e-mail address (preceded by an ampersand) or a command (piped to vacation for example). I have already accepted a message for an aliased address, but the MTA isn't going to be rewriting the envelope address, so how can I get dovecot's deliver to dereference the alias and deliver to the correct Inbox? Because of the number of other hops[1] that the message is going through, I don't want to rewrite the destination address unless I really have to, but if that is the only option, that is what I'll have to do. Thoughts? John 1) inbound e-mail hits a qpsmtpd instance which validates e-mails using several different filtering techniques. Next the mail gets fed to a dspam appliance running two Postfix queues (one before dspam and one after). Mail that isn't quarantine by dspam gets sent to the delivery server (currently running qmail) and delivered to the final destination (modulo sieve rules under deliver). The only place I could conceivably rewrite the address would be the second Postfix queue. -- John Peacock Director of Information Research and Technology Rowman & Littlefield Publishing Group 4501 Forbes Boulevard Suite H Lanham, MD 20706 301-459-3366 x.5010 fax 301-429-5748

1 1

Re: [Dovecot] Building problem on FreeBSD with GSSAPI
by Ed Lucero 28 Mar '07

28 Mar '07

> -----Original Message----- > From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] > On Behalf Of Taras Savchuk > Sent: Tuesday, March 27, 2007 11:41 PM > To: pod > Subject: Re: [Dovecot] Building problem on FreeBSD with GSSAPI > > > gw# krb5-config --version > FreeBSD heimdal 0.6.3 > $Id: krb5-config.in,v 1.9 2002/09/09 22:29:06 joda Exp $ > gw# krb5-config --libs gssapi > -L/usr/lib -lgssapi -lkrb5 -lasn1 -lcrypto -lroken -lcrypt -lcom_err > > > pod ÐÉÛÅÔ: > >>>>>> "TS" == Taras Savchuk <taras(a)elantech.ru> writes: > > > > TS> I have error while compiling dovecot with GSSAPI under > FreeBSD > > TS> 6.2: Is this dovecot-related or not? > > > > One suspects not since none of the dovecot code directly calls into > the > > krb5 API. It looks like a linkage problem with > /usr/lib/libgssapi.so. Do > > you have a 'krb5-config' and if so what is the output of > > > > krb5-config --version > > krb5-config --libs gssapi > > > > -- > ó Õ×ÁÖÅÎÉÅÍ, óÁ×ÞÕË ôÁÒÁÓ > ïïï "üÌÁÎÔÅË" : áÕÔÓÏÒÓÉÎÇ éô, WEB-ÒÁÚÒÁÂÏÔËÁ > http://www.elantech.ru > +7 (495) 589 68 81 > +7 (926) 575 22 11 Are you using the FreeBSD port for dovecot. I recently installed rc28 using the port on 6.2. No problems. Ed

1 0

[Dovecot] ssl with openwrt OS
by burolib 28 Mar '07

28 Mar '07

Hi. I'm still facing troubles on my way. This time concerning ssl encryption. only dovecot-auth starts... imap and pop3 go down with this log dovecot: Mar 23 18:34:19 Info: Dovecot v1.0.rc27 starting up dovecot: Mar 23 18:34:20 Error: Temporary failure in creating login processes, slowing down for now dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: child 849 (login) returned error 89 dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: child 847 (login) returned error 89 dovecot: Mar 23 18:34:20 Error: child 848 (login) returned error 89 I attemped with makecert.sh, myown certificate which works with qmail-pop3d/stunnel, and cacert.org. All the times i get the same error. my dovecot.conf says: ## ## SSL settings ## #ssl_listen = #ssl_disable = no ssl_cert_file = /etc/ssl/certs/server.pem ssl_key_file = /etc/ssl/private/private.key #ssl_key_password = #ssl_ca_file = #ssl_verify_client_cert = no ssl_parameters_regenerate = 128 ssl_cipher_list = ALL:!LOW verbose_ssl = yes I spent a week trying to solve this out. Any ideas? ------------------------------------------------------ Leggi GRATIS le tue mail con il telefonino i-mode di Wind http://click.libero.it/imode ------------------------------------------------------ Passa a Infostrada. ADSL e Telefono senza limiti e senza canone Telecom http://click.libero.it/infostrada

3 2

[Dovecot] ignoring some subfolders [potential wishlist]
by Arkadiusz Miskiewicz 28 Mar '07

28 Mar '07

Hello I'm looking at migration path from my current setup (tpop3d/courier-imap) and I seem to miss one feature - ability to ignore some subfolders for pop3. tpop3d allows me to say: maildir-ignore-folders: Spam Trash trash Sent sent-mail POP3-Invisible (would be stupid to fetch own sent-mail via pop3 again 8-) In recent tpop3d cvs version I can also use regexps like maildir-ignore-folders: ^IMAP-Only.*$. Is it possible to ignore some subfolders in dovecot per protocol (like for pop3 only and not imap) ? If not then please consider this as wishlist, maybe in form of location negation like: mail_location = \ maildir:/var/mail/%Lu:!maildir:/var/mail/%Lu/.Something (which doesn't look sane) or with separate config directive like in tpop3d -- Arkadiusz Miśkiewicz PLD/Linux Team arekm / maven.pl http://ftp.pld-linux.org/

2 2

[Dovecot] PAM auth problem
by Taras Savchuk 28 Mar '07

28 Mar '07

Pam auth don't work when I add pam_group: gw# id test2 uid=10001(test2) gid=11111(adusers) groups=11111(adusers), 10000(group1), 10001(group2), 10002(test10) gw# getent passwd test2 test2:*:10001:11111:Our AD-Unix Test Account:/home/test2:/bin/sh gw# cat /etc/pam.d/dovecot auth required pam_group.so group=adusers auth required pam_krb5.so debug try_first_pass All works fine with only pam_krb5 module. -- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11

2 3

[Dovecot] problem with POP3 mail location when using namespaces
by Lutz Preßler 28 Mar '07

28 Mar '07

Hello, I have a problem (at least with 1.0rc28 and 1.0rc27) when using the following namespace definitions: namespace private { separator = "/" inbox = yes location = mbox:~/Mail:INBOX=/var/spool/mail/%u } namespace public { separator = / prefix = 0-LISTS/ location = mbox:/var/mail/lists:INDEX=~/.sharedMail/lists/index } namespace private { separator = "/" prefix = "0-MAILDIR-FOLDERS/" location = maildir:~/Maildir } IMAP access is working as expected, but when connecting with POP3(s), the (mostly empty in our case) ~/Maildir is used as mail location when it has been created (including index files) by IMAP access. If ~/Maildir does not exist/has been deleted again, POP3 uses /var/spool/mail/%u. This is independent of the private namespace section order and also an explicit "inbox = no" in 0-MAILDIR-FOLDERS namespace. Any idea if this is an configuration issue I don't understand yet or a bug? Thanks, Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 1

[Dovecot] Allow/disallow mail access based on group membership
by Taras Savchuk 28 Mar '07

28 Mar '07

I'm just finished FreeBSD/AD integration via Kerberos/LDAP and now I can manage unix users/groups from AD. I want to grant access to IMAP based on user membership in certain group. Is it possible? Can you give me some hints? Thanks in advance! -- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11

2 3

[Dovecot] LDAP group quota support
by Ioannis Zachariadis 28 Mar '07

28 Mar '07

Is there a plan to support LDAP group quotas in the future releases ? Just like the ldap quota plugin for users but with additional support for a unified quota for a group users. -- giannis.

2 2

[Dovecot] Building problem on FreeBSD with GSSAPI
by Taras Savchuk 28 Mar '07

28 Mar '07

I have error while compiling dovecot with GSSAPI under FreeBSD 6.2: Is this dovecot-related or not? cc -std=gnu99 -O2 -fno-strict-aliasing -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o dovecot-auth auth.o auth-cache.o auth-client-connection.o auth-master-connection.o auth-master-listener.o auth-module.o auth-request.o auth-request-handler.o auth-stream.o auth-worker-client.o auth-worker-server.o db-ldap.o db-sql.o db-passwd-file.o main.o mech.o mech-anonymous.o mech-plain.o mech-login.o mech-cram-md5.o mech-digest-md5.o mech-ntlm.o mech-gssapi.o mech-rpa.o mech-apop.o passdb.o passdb-blocking.o passdb-bsdauth.o passdb-cache.o passdb-ldap.o passdb-passwd.o passdb-passwd-file.o passdb-pam.o passdb-checkpassword.o passdb-shadow.o passdb-sia.o passdb-vpopmail.o passdb-sql.o userdb.o userdb-blocking.o userdb-ldap.o userdb-passwd.o userdb-passwd-file.o userdb-prefetch.o userdb-static.o userdb-vpopmail.o userdb-sql.o -Wl,--export-dynamic -L/usr/local/lib libpassword.a ../lib-settings/libsettings.a ../lib-ntlm/libntlm.a ../lib-sql/libsql.a ../lib/liblib.a -lpam -L/usr/lib -lgssapi -lkrb5 -lasn1 -lroken -lcrypt -lcom_err /usr/local/lib/libldap.so /usr/local/lib/liblber.so /usr/local/lib/libsasl2.so -lssl -lcrypto -Wl,--rpath -Wl,/usr/local/lib -Wl,--rpath -Wl,/usr/local/lib /usr/lib/libgssapi.so: undefined reference to `krb5_rd_cred2' /usr/lib/libgssapi.so: undefined reference to `krb5_crypto_destroy' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_address' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_data' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_keyblock' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setremotesubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_data_free' /usr/lib/libgssapi.so: undefined reference to `krb5_config_get_strings' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalsubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_generatelocalsubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_sockaddr2address' /usr/lib/libgssapi.so: undefined reference to `krb5_cc_get_ops' /usr/lib/libgssapi.so: undefined reference to `krb5_get_default_principal' /usr/lib/libgssapi.so: undefined reference to `krb5_cc_copy_cache' /usr/lib/libasn1.so: undefined reference to `init_error_table' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setkey' /usr/lib/libgssapi.so: undefined reference to `krb5_get_forwarded_creds' /usr/lib/libgssapi.so: undefined reference to `krb5_get_err_text' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int32' /usr/lib/libgssapi.so: undefined reference to `krb5_h_addr2sockaddr' /usr/lib/libgssapi.so: undefined reference to `krb5_build_authenticator' /usr/lib/libgssapi.so: undefined reference to `krb5_build_ap_req' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_getremoteseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_data_zero' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_free' /usr/lib/libgssapi.so: undefined reference to `krb5_config_free_strings' /usr/lib/libgssapi.so: undefined reference to `krb5_create_checksum' /usr/lib/libgssapi.so: undefined reference to `krb5_generate_random_block' /usr/lib/libgssapi.so: undefined reference to `krb5_crypto_init' /usr/lib/libgssapi.so: undefined reference to `krb5_enctype_to_keytype' /usr/lib/libgssapi.so: undefined reference to `krb5_free_creds_contents' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_from_mem' /usr/lib/libgssapi.so: undefined reference to `krb5_store_address' /usr/lib/libgssapi.so: undefined reference to `krb5_decrypt_ivec' /usr/lib/libasn1.so: undefined reference to `initialize_error_table_r' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_get_error_string' /usr/lib/libgssapi.so: undefined reference to `krb5_principal_match' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_to_data' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int32' /usr/lib/libgssapi.so: undefined reference to `krb5_encrypt_ivec' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_emem' /usr/lib/libgssapi.so: undefined reference to `krb5_store_data' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setremoteseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_principal_get_realm' /usr/lib/libgssapi.so: undefined reference to `krb5_set_error_string' /usr/lib/libgssapi.so: undefined reference to `krb5_make_principal' /usr/lib/libgssapi.so: undefined reference to `krb5_store_keyblock' *** Error code 1 Stop in /usr/ports/mail/dovecot/work/dovecot-1.0.rc28/src/auth. *** Error code 1 Stop in /usr/ports/mail/dovecot/work/dovecot-1.0.rc28/src. *** Error code 1 Stop in /usr/ports/mail/dovecot/work/dovecot-1.0.rc28. *** Error code 1 Stop in /usr/ports/mail/dovecot/work/dovecot-1.0.rc28. *** Error code 1 Stop in /usr/ports/mail/dovecot. *** Error code 1 Stop in /usr/ports/mail/dovecot. ** Command failed [exit code 1]: /usr/bin/script -qa /tmp/portupgrade.29635.0 env UPGRADE_TOOL=portupgrade UPGRADE_PORT=dovecot-1.0.r28 UPGRADE_PORT_VER=1.0.r28 make ** Fix the problem and try again. ** Listing the failed packages (*:skipped / !:failed) ! mail/dovecot (dovecot-1.0.r28) (linker error) ---> Packages processed: 0 done, 0 ignored, 0 skipped and 1 failed -- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11

2 2

[Dovecot] proxy host specified as fqdn in userdb
by Apostolos Papayanakis 28 Mar '07

28 Mar '07

Abstract from http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy > > host=s: The destination server's *IP address*. This field is required. > Note that currently it's required to use an IP address since no DNS > resolving is done. > Hello Timo, Here goes one more item for the v2.0 wishlist: Will it become possible to do dovecot imap proxying based on a "host" userdb attribute that is an FQDN (instead of a numeric IP as it is now)? It would simplify things for large smtp clusters that already do LDAP mail routing, based on per user "mailHost" attribute containg mail server FQDNs (according to "IETF Internet Draft LDAP Schema for Intranet Mail Routing", http://www.sendmail.org/m4/laser.txt) It is kinda redundunt to keep an extra LDAP attribute for "host" that contains essentially the same information as "mailHost" attribute, but in numeric form. I know the proposed change is not that important for many people, so don't really bother unless it is trivial to implement. apap

3 7