- dovecot - dovecot.org

[Dovecot] auth server refusing connections intermittently
by Steven F Siirila 28 Mar '07

28 Mar '07

Running Dovecot 1.0-rc27 on Solaris 10.. We have been noticing intermittent messages of this sort and wondered if this indicates whether we need to add more dovecot-auth worker processes: Mar 28 03:15:41 myhost dovecot: pop3-login: Can't connect to auth server at default: Connection refused Mar 28 08:10:20 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 28 09:08:13 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 28 10:23:38 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 28 10:35:37 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 28 10:50:59 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 28 12:00:44 myhost dovecot: pop3-login: Can't connect to auth server at default: Connection refused Mar 28 12:07:31 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 28 14:44:57 myhost dovecot: imap-login: Can't connect to auth server at default: Connection refused However, this system has over 7,000 users and 1,500 simultaneous IMAP and POP3 connections, and we only see one dovecot-auth process running. By contrast, another server has over 11,000 users and 3,000 simultaneous IMAP and POP3 connections (but is currently running rc24), and we only have seen 3 of the above error messages there -- and there is only one dovecot-auth process there as well. Does this sound right? Also, how many times are these connections retried (and at what sleep interval, if any) before it gives up? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 1

Re: [Dovecot] Building problem on FreeBSD with GSSAPI
by pod 28 Mar '07

28 Mar '07

>>>>> "TS" == Taras Savchuk <taras(a)elantech.ru> writes: TS> gw# krb5-config --version TS> FreeBSD heimdal 0.6.3 $Id: krb5-config.in,v 1.9 2002/09/09 22:29:06 joda Exp $ TS> gw# krb5-config --libs gssapi TS> -L/usr/lib -lgssapi -lkrb5 -lasn1 -lcrypto -lroken -lcrypt -lcom_err I'm not sure how much further I can help you since I don't have access to any FreeBSD compilation environments. Maybe someone else on this list can at least either confirm success or report similar problems building dovecot on FreeBSD 6.2. Are you able to compile and link the appended C without error? cc $(krb5-config --cflags gssapi) -o gssapi.o -c gssapi.c cc $(krb5-config --libs gssapi) -o gssapi gssapi.o If not then it's probably not a dovecot specific problem. -------------------- #include <stdlib.h> #include <gssapi/gssapi.h> int main(int argc, char *argv[]) { OM_uint32 rc_major, rc_minor; gss_name_t name; rc_major=gss_import_name(&rc_minor, GSS_C_NO_BUFFER, GSS_C_NO_OID, &name); return EXIT_SUCCESS; }

1 0

[Dovecot] Removing users maildir DOVECOT+LDAP
by Venilton Junior 28 Mar '07

28 Mar '07

Hi all, Does anyone have an idea how can I remove(delete) my virtual mail users' maildir? I have Dovecot + LDAP and I would like to do something like this: When I remove an user entry in my ldap server, it should remove my user directory information. Does anyone has this implemented? Or have an idea? I can remove users entry in my ldap server remotely, is there some way in dovecot? I'm asking this, cause I'm very familiar with Cyrus and I can do this with it. Tnx for now Regards, Venilton C. Junior HP Certified Professional Sercompe Computadores Ltda. Office: +55 47 3431-9700 Fax: +55 47 3431-9747 Mobile: +55 47 9653-5872 www.sercompe.com.br <http://www.sercompe.com.br/>

1 0

[Dovecot] Deliverm, vpopmail, and valias
by John Peacock 28 Mar '07

28 Mar '07

I'm in the final stages of testing my e-mail server to come and I seem to have hit a roadblock. One option of current vpopmail is to store all aliases in a valias table, that looks like this: +-------------+----------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +-------------+----------+------+-----+---------+-------+ | alias | char(32) | NO | MUL | | | | domain | char(64) | NO | | | | | valias_line | text | NO | | | | +-------------+----------+------+-----+---------+-------+ where valias_line could be either an e-mail address (preceded by an ampersand) or a command (piped to vacation for example). I have already accepted a message for an aliased address, but the MTA isn't going to be rewriting the envelope address, so how can I get dovecot's deliver to dereference the alias and deliver to the correct Inbox? Because of the number of other hops[1] that the message is going through, I don't want to rewrite the destination address unless I really have to, but if that is the only option, that is what I'll have to do. Thoughts? John 1) inbound e-mail hits a qpsmtpd instance which validates e-mails using several different filtering techniques. Next the mail gets fed to a dspam appliance running two Postfix queues (one before dspam and one after). Mail that isn't quarantine by dspam gets sent to the delivery server (currently running qmail) and delivered to the final destination (modulo sieve rules under deliver). The only place I could conceivably rewrite the address would be the second Postfix queue. -- John Peacock Director of Information Research and Technology Rowman & Littlefield Publishing Group 4501 Forbes Boulevard Suite H Lanham, MD 20706 301-459-3366 x.5010 fax 301-429-5748

1 1

Re: [Dovecot] Building problem on FreeBSD with GSSAPI
by Ed Lucero 28 Mar '07

28 Mar '07

> -----Original Message----- > From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] > On Behalf Of Taras Savchuk > Sent: Tuesday, March 27, 2007 11:41 PM > To: pod > Subject: Re: [Dovecot] Building problem on FreeBSD with GSSAPI > > > gw# krb5-config --version > FreeBSD heimdal 0.6.3 > $Id: krb5-config.in,v 1.9 2002/09/09 22:29:06 joda Exp $ > gw# krb5-config --libs gssapi > -L/usr/lib -lgssapi -lkrb5 -lasn1 -lcrypto -lroken -lcrypt -lcom_err > > > pod ÐÉÛÅÔ: > >>>>>> "TS" == Taras Savchuk <taras(a)elantech.ru> writes: > > > > TS> I have error while compiling dovecot with GSSAPI under > FreeBSD > > TS> 6.2: Is this dovecot-related or not? > > > > One suspects not since none of the dovecot code directly calls into > the > > krb5 API. It looks like a linkage problem with > /usr/lib/libgssapi.so. Do > > you have a 'krb5-config' and if so what is the output of > > > > krb5-config --version > > krb5-config --libs gssapi > > > > -- > ó Õ×ÁÖÅÎÉÅÍ, óÁ×ÞÕË ôÁÒÁÓ > ïïï "üÌÁÎÔÅË" : áÕÔÓÏÒÓÉÎÇ éô, WEB-ÒÁÚÒÁÂÏÔËÁ > http://www.elantech.ru > +7 (495) 589 68 81 > +7 (926) 575 22 11 Are you using the FreeBSD port for dovecot. I recently installed rc28 using the port on 6.2. No problems. Ed

1 0

[Dovecot] ssl with openwrt OS
by burolib 28 Mar '07

28 Mar '07

Hi. I'm still facing troubles on my way. This time concerning ssl encryption. only dovecot-auth starts... imap and pop3 go down with this log dovecot: Mar 23 18:34:19 Info: Dovecot v1.0.rc27 starting up dovecot: Mar 23 18:34:20 Error: Temporary failure in creating login processes, slowing down for now dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: child 849 (login) returned error 89 dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: child 847 (login) returned error 89 dovecot: Mar 23 18:34:20 Error: child 848 (login) returned error 89 I attemped with makecert.sh, myown certificate which works with qmail-pop3d/stunnel, and cacert.org. All the times i get the same error. my dovecot.conf says: ## ## SSL settings ## #ssl_listen = #ssl_disable = no ssl_cert_file = /etc/ssl/certs/server.pem ssl_key_file = /etc/ssl/private/private.key #ssl_key_password = #ssl_ca_file = #ssl_verify_client_cert = no ssl_parameters_regenerate = 128 ssl_cipher_list = ALL:!LOW verbose_ssl = yes I spent a week trying to solve this out. Any ideas? ------------------------------------------------------ Leggi GRATIS le tue mail con il telefonino i-mode di Wind http://click.libero.it/imode ------------------------------------------------------ Passa a Infostrada. ADSL e Telefono senza limiti e senza canone Telecom http://click.libero.it/infostrada

3 2

[Dovecot] ignoring some subfolders [potential wishlist]
by Arkadiusz Miskiewicz 28 Mar '07

28 Mar '07

Hello I'm looking at migration path from my current setup (tpop3d/courier-imap) and I seem to miss one feature - ability to ignore some subfolders for pop3. tpop3d allows me to say: maildir-ignore-folders: Spam Trash trash Sent sent-mail POP3-Invisible (would be stupid to fetch own sent-mail via pop3 again 8-) In recent tpop3d cvs version I can also use regexps like maildir-ignore-folders: ^IMAP-Only.*$. Is it possible to ignore some subfolders in dovecot per protocol (like for pop3 only and not imap) ? If not then please consider this as wishlist, maybe in form of location negation like: mail_location = \ maildir:/var/mail/%Lu:!maildir:/var/mail/%Lu/.Something (which doesn't look sane) or with separate config directive like in tpop3d -- Arkadiusz Miśkiewicz PLD/Linux Team arekm / maven.pl http://ftp.pld-linux.org/

2 2

[Dovecot] PAM auth problem
by Taras Savchuk 28 Mar '07

28 Mar '07

Pam auth don't work when I add pam_group: gw# id test2 uid=10001(test2) gid=11111(adusers) groups=11111(adusers), 10000(group1), 10001(group2), 10002(test10) gw# getent passwd test2 test2:*:10001:11111:Our AD-Unix Test Account:/home/test2:/bin/sh gw# cat /etc/pam.d/dovecot auth required pam_group.so group=adusers auth required pam_krb5.so debug try_first_pass All works fine with only pam_krb5 module. -- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11

2 3

[Dovecot] problem with POP3 mail location when using namespaces
by Lutz Preßler 28 Mar '07

28 Mar '07

Hello, I have a problem (at least with 1.0rc28 and 1.0rc27) when using the following namespace definitions: namespace private { separator = "/" inbox = yes location = mbox:~/Mail:INBOX=/var/spool/mail/%u } namespace public { separator = / prefix = 0-LISTS/ location = mbox:/var/mail/lists:INDEX=~/.sharedMail/lists/index } namespace private { separator = "/" prefix = "0-MAILDIR-FOLDERS/" location = maildir:~/Maildir } IMAP access is working as expected, but when connecting with POP3(s), the (mostly empty in our case) ~/Maildir is used as mail location when it has been created (including index files) by IMAP access. If ~/Maildir does not exist/has been deleted again, POP3 uses /var/spool/mail/%u. This is independent of the private namespace section order and also an explicit "inbox = no" in 0-MAILDIR-FOLDERS namespace. Any idea if this is an configuration issue I don't understand yet or a bug? Thanks, Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 1

[Dovecot] Allow/disallow mail access based on group membership
by Taras Savchuk 28 Mar '07

28 Mar '07

I'm just finished FreeBSD/AD integration via Kerberos/LDAP and now I can manage unix users/groups from AD. I want to grant access to IMAP based on user membership in certain group. Is it possible? Can you give me some hints? Thanks in advance! -- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11

2 3