- dovecot - dovecot.org

[Dovecot] ldap quota limitation problem
by Amadou Toure 17 Aug '06

17 Aug '06

hello, We have configured the quota enforcement folowing the link (http://wiki.dovecot.org/Quota) but we note that the global quota limitation configuration in dovecot.conf works well but not the ldap users configuration limit. For example in the casee below, we have tried to limit quota usage for some users to 1Gb but only the global quota limitation appear in the user quota. please find below config of the dovecot.conf, dovecot-ldap.conf and the ldap attributes ####################### dovecot.conf PROTOCOL IMAP mail_plugins = quota imap_quota PROTOCOL POP3 mail_plugins = quota LDA mail_plugins = cmusieve # quota PLUGIN quota = maildir:storage=256000 ######################## dovecot-ldap.conf user_attrs = uid,homeDirectory,,uid,uidNumber,gidNumber,quotaStorage=mailQuotaSize=dirsize:storage ############################# Amadou TOURE Sonatel Multimedia, 136 Sacre Coeur, Pyrotechnique, BP 21100 Dakar Tel +221-8699810. Fax +221-8641094 http://www.sentoo.sn DAKAR - SENEGAL

2 2

[Dovecot] From passwd-file to Postgresql database
by Jonathan Ballet 17 Aug '06

17 Aug '06

Hello, I have a working installation of Dovecot, which use passwd-file for both users and passwords databases. My setup uses CRAM-MD5 for the authentification mechanism and the password in my passwd-file was stored encoded with HMAC-MD5. Now, I want to use Postgresql to replace those passwd-files. So I make the necessary change in my dovecot.conf file : ========================================= userdb sql { args = /etc/dovecot/dovecot-sql.conf } passdb sql { args = /etc/dovecot/dovecot-sql.conf } ========================================= In the dovecot-sql.conf file, I comment out the simplest query, and change the default_pass_scheme to HMAC-MD5 (as in my previous setup). I put my users from the passwd-file into my database, with the same user id, and the same password (starting with {HMAC-MD5}) ... ... but it fails :( The log file says to me : ========== dovecot: 2006-08-14 15:36:12 Info: auth(default): cram-md5(jon,xxx): password mismatch ========== I tried several other password schemes (DIGEST-MD5, PLAIN-MD5, PLAIN), but only PLAIN seems to work (of course, I changed the password in the database accordingly). The documentation isn't very clear about this (or I don't find it ?) : - in an "old" auth.txt, it is written that only PLAIN is supported, but I don't knwo if I can trust it ? - I've got an old dovecot-pgsql.conf (2004, maybe from dovecot 0.9x ?), which said that supported scheme are "PLAIN, PLAIN-MD5, DIGEST-MD5, and CRYPT" So, what I am doing wrong ? And what is correct (or not) in my previous search ? Regards, -- Jonathan

3 6

[Dovecot] Trying to compile again
by Greg Deputy 16 Aug '06

16 Aug '06

I'm currently running a pre 1.0 version of dovecot. Months back I tried to compile beta6, couldn't due to some mysql client libraries issues, and gave up. I'm now trying again with rc6. This is on a fedora core2 box, with postfix 2.3 and mysql 5.0. The error I'm getting when I run make is below. Any help would be greatly appreciated, thanks! I'd really like to get up to a more recent version. ..... /usr/local/mysql/lib/libmysqlclient.a(crypto_wrapper.o)(.gnu.linkonce.d.__vt _Q25yaSSL10BulkCipher+0x8): undefined reference to `__pure_virtual' /usr/local/mysql/lib/libmysqlclient.a(crypto_wrapper.o)(.gnu.linkonce.d.__vt _Q25yaSSL10BulkCipher+0xc): more undefined references to `__pure_virtual' follow /usr/local/mysql/lib/libmysqlclient.a(crypto_wrapper.o)(.gnu.linkonce.t._._Q 28TaoCrypt14RSA_PrivateKey+0x12e): In function `TaoCrypt::RSA_PrivateKey::~RSA_PrivateKey(void)': : undefined reference to `__builtin_delete' /usr/local/mysql/lib/libmysqlclient.a(log.o)(.text+0x30): In function `yaSSL::Log::~Log(void)': : undefined reference to `__builtin_delete' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-algebra.o)(.gnu.linkonc e.d.__vt_Q28TaoCrypt23AbstractEuclideanDomain+0xc): undefined reference to `__pure_virtual' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-algebra.o)(.gnu.linkonc e.d.__vt_Q28TaoCrypt23AbstractEuclideanDomain+0x10): undefined reference to `__pure_virtual' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-algebra.o)(.gnu.linkonc e.d.__vt_Q28TaoCrypt23AbstractEuclideanDomain+0x14): undefined reference to `__pure_virtual' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-algebra.o)(.gnu.linkonc e.d.__vt_Q28TaoCrypt23AbstractEuclideanDomain+0x18): undefined reference to `__pure_virtual' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-algebra.o)(.gnu.linkonc e.d.__vt_Q28TaoCrypt23AbstractEuclideanDomain+0x3c): undefined reference to `__pure_virtual' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-algebra.o)(.gnu.linkonc e.d.__vt_Q28TaoCrypt23AbstractEuclideanDomain+0x40): more undefined references to `__pure_virtual' follow /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-file.o)(.text+0x88): In function `TaoCrypt::FileSource::~FileSource(void)': : undefined reference to `__builtin_delete' /usr/local/mysql/lib/libmysqlclient.a(libtaocrypt_la-file.o)(.text+0x28c): In function `TaoCrypt::FileSink::~FileSink(void)': : undefined reference to `__builtin_delete' collect2: ld returned 1 exit status make[3]: *** [dovecot-auth] Error 1 make[3]: Leaving directory `/root/dovecot-1.0.rc6/src/auth' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/root/dovecot-1.0.rc6/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/root/dovecot-1.0.rc6' make: *** [all] Error 2

4 5

[Dovecot] ACL-s and folders
by xrado 16 Aug '06

16 Aug '06

hi im new to imap servers and dovecot ... and im trying to setup acls for my imap folders i made dovecot-acl in my ~/Maildir/ root, but the setting are only applyed to inbox (.INBOX) folder is there a way to setup acl for other folders i made ..for instance work (.work folder in maildir root) another thing ...it is posibile to accomplish that i can move mail between folders but i cant delete it? greetings, rado

1 0

[Dovecot] Mailbox isn't a valid mbox file (dovecot 1.0-0.beta8.2.fc5)
by Dmitry Filonov 16 Aug '06

16 Aug '06

Hello, I have upgraded my dovecot-0.99.13-3.FC3 to dovecot-1.0-0.beta8.2.fc5 recently and now am having weird problem. If somebody's mailbox has the first line in a form of From "User Name" <user(a)host.domain.edu> Thu Oct 7 14:20:00 1999 instead of From user(a)host.domain.edu Thu Oct 7 14:20:00 1999 then that mailbox couldn't be precessed by dovecot. It wasn't a problem with 0.99.13, but it is a problem with 1.0. Is there any fix for that on a dovecot's side? I don't like the idea of going through all 100Gb of mailboxes and fixing the From line. Thank you, FiL

1 0

[Dovecot] Port Change?
by Charlie Davis 16 Aug '06

16 Aug '06

Hey all, Got a super simple question that I can't find an answer to on google or on the list. I want dovecot to listen to port 143 and another port as well for imap. Is this possible? The dovecot.conf has a little note that says "If you want to specify ports # for each service, you will need to configure these settings inside the # protocol imap/pop3 { ... } section, so you can specify different ports # for IMAP/POP3." but in the protocol section for imap, I don't see any example or what not of changing the port. Any help? -Charlie

1 0

[Dovecot] Authentication Failure
by William J. Dzieciolowski 16 Aug '06

16 Aug '06

Probably a newbie question.... sorry. Did a deluser a week or so ago, but didn't remove any of the users files. I re-enabled the user via useradd with the -u and set the uid the same as it was before. Now when I try and log the user into his mail via Thunderbird, /var/log/messages reports dovecot(pam_unix)[17259]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=sean Any help is appreciated. Thanks.

2 1

[Dovecot] help debugging TLS
by Richard 16 Aug '06

16 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 hi, i've built dovecot latest cvs on OSX 10.4.7. i'm making a 1st attempt @ trying/failing to get TLS operation up-n-running ... my install's OK: Install prefix ...................... : /usr/local/dovecot File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : kqueue Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : no Building with pop3 server ........... : yes Building with mail delivery agent .. : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword sql (modules) Building with password lookup modules : passwd passwd-file pam checkpassword sql (modules) Building with SQL drivers ............: mysql NOTE: This is the UNSTABLE development branch of Dovecot. You may want to change into the stabilizing branch: cvs up -r branch_1_0 i've config'd for ssl/tls w/: ... listen = 10.0.0.6 ssl_listen = 10.0.0.6 ssl_disable = no verbose_ssl = yes auth_verbose = yes auth_debug = yes disable_plaintext_auth = no ssl_cert_file = /var/MailServer/Data/CERTS/mail.testdomain.com.cert.rsa.pem ssl_key_file = /var/MailServer/Data/CERTS/mail.testdomain.com.privkey.rsa.pem ssl_ca_file = /var/MailServer/Data/CERTS/main.CA.cert.rsa.pem ssl_verify_client_cert = no ssl_parameters_regenerate = 24 ssl_cipher_list = ALL:!SSLv2:!aNULL:!NULL:!EXPORT:!DES:!LOW:@STRENGTH 17 ... after launch: % ps -ax | grep -i dovecot 14034 ?? Ss 0:11.61 /usr/local/dovecot/sbin/dovecot -c /var/MailServer/Conf/Dovecot/dovecot.conf 14035 ?? S 0:17.00 dovecot-auth on test via telnet, i see: % telnet 10.0.0.6 143 Trying 10.0.0.6... Connected to mail.testdomain.com. Escape character is '^]'. * OK mail.testdomain.com Dovecot IMAP4 v1.0cvs server ready 1 capability * CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS STARTTLS AUTH=PLAIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5 1 OK Capability completed. ... but, a test with: % openssl s_client -connect 10.0.0.6:143 fails & reports, simply: CONNECTED(00000003) 14282:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:567: i'm migrating from cyrus where this simple testing returns correctly w/o error. unclear, atm, whether there's something in dovecot, or in my testing, not working ... suggestions? thanks, richard - -- /"\ \ / ASCII Ribbon Campaign X against HTML email, vCards / \ & micro$oft attachments [GPG] OpenMacNews at gmail dot com fingerprint: 50C9 1C46 2F8F DE42 2EDB D460 95F7 DDBD 3671 08C6 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iEYEAREDAAYFAkTjK7UACgkQlffdvTZxCMbisgCggspE05II6KCAik5dfvoHtSyI 1PgAn2ErKP0xGfRAlwMrzyavstIw02a7 =kWXI -----END PGP SIGNATURE-----

2 2

[Dovecot] dovecot 1.0rc6 and LDAP problem
by Marcin Deranek 16 Aug '06

16 Aug '06

Hi, I have been using Dovecot with LDAP support (only for password authentication) for a couple of weeks already and everything was running smoothly so far.. till last week when discovered interesting thing: whenever I start LDAP server (openldap 2.3.24) before I start Dovecot everything is fine.. however when Dovecot is started first and then LDAP server it's not possible to authenticate :-( My dovecot-ldap.conf file: hosts = 127.0.0.1 auth_bind = yes auth_bind_userdn = uid=%u,ou=Users,dc=domain,dc=tld ldap_version = 3 base = ou=Users,dc=domain,dc=tld These are messages I get in syslog: slapd is down Aug 15 18:56:55 ftp dovecot: Dovecot v1.0.rc6 starting up Aug 15 18:56:56 ftp dovecot: auth(default): LDAP: Can't connect to server: 127.0.0.1 slapd is started Aug 15 18:58:36 ftp dovecot: imap-login: Disconnected: Inactivity: method=plain, rip=192.168.1.3, lip=192.168.1.2, TLS Aug 15 18:58:36 ftp dovecot: login: tried to change state 2 -> 2 (if you can't login at all, see src/lib/fdpass.c) slapd messages: Aug 15 18:57:19 ftp slapd[20544]: slapd starting Aug 15 18:57:36 ftp slapd[20544]: conn=0 fd=11 ACCEPT from IP=127.0.0.1:37703 (IP=0.0.0.0:389) Aug 15 18:57:36 ftp slapd[20544]: conn=0 op=0 BIND dn="uid=user,ou=Users,dc=domain,dc=tld" method=128 Aug 15 18:57:36 ftp slapd[20544]: conn=0 op=0 BIND dn="uid=user,ou=Users,dc=domain,dc=tld" mech=SIMPLE ssf=0 Aug 15 18:57:36 ftp slapd[20544]: conn=0 op=0 RESULT tag=97 err=0 text= Aug 15 18:58:39 ftp slapd[20544]: conn=0 op=1 BIND anonymous mech=implicit ssf=0 Aug 15 18:58:39 ftp slapd[20544]: conn=0 op=1 BIND dn="uid=user,ou=Users,dc=domain,dc=tld" method=128 Aug 15 18:58:39 ftp slapd[20544]: conn=0 op=1 BIND dn="uid=user,ou=Users,dc=domain,dc=tld" mech=SIMPLE ssf=0 Aug 15 18:58:39 ftp slapd[20544]: conn=0 op=1 RESULT tag=97 err=0 text= Aug 15 18:59:41 ftp slapd[20544]: conn=0 op=2 BIND anonymous mech=implicit ssf=0 Aug 15 18:59:41 ftp slapd[20544]: conn=0 op=2 BIND dn="uid=user,ou=Users,dc=domain,dc=tld" method=128 Aug 15 18:59:41 ftp slapd[20544]: conn=0 op=2 BIND dn="uid=user,ou=Users,dc=domain,dc=tld" mech=SIMPLE ssf=0 Aug 15 18:59:41 ftp slapd[20544]: conn=0 op=2 RESULT tag=97 err=0 text= Has anyone else has the same problem ? Regards, Marcin

2 2

[Dovecot] stale imap processes with 1.0.rc6 on FreeBSD
by Jeremy C. Reed 16 Aug '06

16 Aug '06

Was running dovecot-1.0.rc2 but many stale imap processes (only one user of IMAP). Switched to dovecot-1.0.rc6 but problem continued. This is on FreeBSD 4 something. Maybe it has bug with kqueue?? I read messages about the stale imap processes on the list. It seems to hit *BSD systems. But email about new release candidate indicated it should be fixed. I read on the pkgsrc commit list about --with-ioloop=best So I configured with that and saw that the I/O loop method is now kqueue. (I saved configure output and it was poll before). But the stale imap processes problem continues. For one user over past couple hours I have eight imap processes in "I" state. I have: File offsets ........................ : 64bit I/O loop method ..................... : kqueue File change notification method ..... : kqueue Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with mail delivery agent .. : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword (modules) Building with password lookup modules : passwd passwd-file pam checkpassword (modules) Building with SQL drivers ............: And I have: protocols = imap pop3 protocol imap { imap_client_workarounds = outlook-idle delay-newmail } (Just started using delay-newmail today.) My maillogs don't show any problems. The IMAP user tells me that Outlook says it has reset connections often. I see multiple imap-login Login within a few minutes for this same user who said received a connection reset in outlook at the same time. Just received a screenshot that said: Microsoft Office Outlook Failed to update headers. The TCP/IP connection unexpectedly terminated by the server. Then also received an error (in Outlook I think), like: imap session idle too long, connection reset (I don't have or use Outlook myself so can't test myself.) It is used for a lot of pop3 and seems fine with that. (It uses stunnel for pop3s but not imaps for over a week to eliminate stunnel from our troubleshooting). Any ideas on troubleshooting this would be appreciated. Jeremy C. Reed

4 13