- dovecot - dovecot.org

[Dovecot] Public Namespace & ACL & Virtual Users
by Fintec 01 Aug '06

01 Aug '06

Background: I am wanting to create shared folders (public namespace) with access control lists on the sub directories. Our implementation of dovecot (v1.0b7) uses many virtual users and domains and 1 actual user (vmail), all using maildir. So far I have successfully created the public namespace (Public_Folders) which every user can access but I'm having difficulty restricting access using ACls. When trying to implement the dovecot ACL plug-in I followed the wiki instructions and created a "dovecot-acl" file within Public_Folders containing: owner lrwstiekxa user=user1(a)domain.com lrwstiek However this doesn't appear to do anything. All users can still access Public_Folders so I have a couple of questions that hopefully someone can help me with... 1) Is it possible to use the dovecot's ACL plug-in on a Public name space? 2) Is it possible to create dovecot-acl files with virtual usernames, i.e. user1(a)domain.com or does it have to be actual users, i.e. vmail? 3) Is it possible to restrict access within the namespace definition, i.e. set up another public namespace restricted to manager(a)domain.com? 4) Is ACL accepts & denies logged somewhere other than /var/log/maillog (my default)? 4) Is anyone successfully set-up an environment with a public namespace and ACLs? Any help would be greatly appreciated. Gavin

3 7

[Dovecot] Dovecot and Sun's Directory Server
by Brian Hechinger 31 Jul '06

31 Jul '06

I've got Sun's Directory Server 5.2 installed here, and I would like to have dovecot use it for virtual users. I have the following questions: a) How do I get dovecot to link to DS's libraries? Am I better off just building OpenLDAP client libraries and linking dovecot with them instead? b) how about password-hash {CRYPT} in the OpenLDAP config file? Do I need to do anything to make DS5.2 do that for me the right way? c) Schema. Can I use the OpenLDAP schema? Does DS5.2 have the correct schema for my needs? Which exact schema does dovecot use? Maybe I can check and see what's in there and what needs to be added/extended. I think that's it for now. ;) -brian

1 0

[Dovecot] Dovecot copy with imapsync
by Stephan Holl 31 Jul '06

31 Jul '06

Hi List, I am trying to migrate my dovecot 0.9 (mbox-Storage) to 1.0rc2 with maildir-storage using imapsync. I cannot manage to copy the emails from one server to the other, however the dry-run from imapsync works nicely. Is it possible to make dovecot more verbose to see what is happening (or not happening)? Thank you very much. Best Stephan

3 4

[Dovecot] Dovecot and SSL certificates
by M.-A. Lemburg 31 Jul '06

31 Jul '06

Hello, we're running RC2 and seeing a problem with the way SSL certs are handled by Dovecot. We've set ssl_verify_client_cert=yes and ssl_require_valid_client_cert=no. Using this setup we get (rather interesting) log entries like these: Jul 31 11:21:23 dev dovecot: imap-login: Invalid certificate: <user cert> Jul 31 11:21:23 dev dovecot: imap-login: Invalid certificate: <CA cert> Jul 31 11:21:23 dev dovecot: imap-login: Valid certificate: <CA cert> Jul 31 11:21:23 dev dovecot: imap-login: Valid certificate: <user cert> Jul 31 11:21:23 dev dovecot: imap-login: Login: user=... When setting ssl_require_valid_client_cert=yes, logins always fail with: Jul 31 11:57:54 dev dovecot: auth(default): PLAIN(?,...): Client didn't present valid SSL certificate Are we doing something wrong, or is dovecot mixing up something while checking the certificates. Note that the certificates are all valid and have not expired. The <user cert> is signed by the <CA cert> and we set ssl_ca_file to the CA certificate PEM file. Ideally, we'd like to only accept login requests from users which have a valid certificate signed by our CA. Even better would be an approach such as the one taken by Postfix where you have to provide a list of valid MD5 hash sums for the users you'd like to accept. Thanks, -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Jul 31 2006) >>> Python/Zope Consulting and Support ... http://www.egenix.com/ >>> mxODBC.Zope.Database.Adapter ... http://zope.egenix.com/ >>> mxODBC, mxDateTime, mxTextTools ... http://python.egenix.com/ ________________________________________________________________________ ::: Try mxODBC.Zope.DA for Windows,Linux,Solaris,FreeBSD for free ! ::::

2 2

[Dovecot] Folder not visible - after migration ( Squirrel Mail )
by Sumit Gulati 31 Jul '06

31 Jul '06

Hello, We did migration from old version postfix to new version postfix (2.3). >From old dovcot 0.99 to dovcot 1.0 rc2 and we rsynched /Home of old box to new /Home 1:1 After migration we are not able to see customise the folders in squirrel mail interface. What could be the reason. Regards, Sumit

2 1

[Dovecot] Folder not visible - after migration ( Squirrel Mail )
by Sumit Gulati 31 Jul '06

31 Jul '06

Hello, Please give me any solution for this problem i am facing lot of problem because of these folders. These folder is not showing in /home/username also, Please tell me the location of these folders. Regards, Sumit ----- Original Message ----- From: Sumit Gulati To: dovecot(a)dovecot.org Sent: Saturday, July 29, 2006 7:45 PM Subject: Folder not visible - after migration ( Squirrel Mail ) Hello, We did migration from old version postfix to new version postfix (2.3). From old dovcot 0.99 to dovcot 1.0 rc2 and we rsynched /Home of old box to new /Home 1:1 After migration we are not able to see customise the folders in squirrel mail interface. What could be the reason. Regards, Sumit

2 1

[Dovecot] Corrupted index cache file
by Wink Saville 31 Jul '06

31 Jul '06

Hello, I'm running: root@ubuntu-mail:/var/log# dovecot --version 1.0.beta3 root@ubuntu-mail:/var/log# uname -a Linux ubuntu-mail 2.6.15-25-386 #1 PREEMPT Wed Jun 14 11:25:49 UTC 2006 i686 GNU/Linux I'm seeing the following in the mail.err file when I access a IMAP folder: Jul 30 10:19:16 localhost dovecot: imap(wink): Corrupted index cache file /home/wink/Maildir/dovecot.index.cache: Duplicated field in header: hdr.LIST-ID What can I do to fix this? Regards, Wink

2 1

[Dovecot] sieve copy extension
by Scott Murman 30 Jul '06

30 Jul '06

I want (need) to get the sieve copy extension working for the deliver LDA. the latest cyrus imap distro (v2.3 or greater) contains a libsieve which supports it. the dovecot-LDA cvs branch uses an older cyrus distro (looks like v2.1). has anyone meshed deliver with the new libsieve? if not, any estimates of how much of my time it would chew up? thanks. -SM-

3 4

[Dovecot] different SSL certificates for different connectoins
by Waldemar Augustyn 30 Jul '06

30 Jul '06

Is it possible to setup dovecot to have it presented different SSL certificates to connections coming at different ports. I don't see it in the docs. It seems, dovecot would present the same certificate to all connecting ports. Thanks.

2 2

[Dovecot] dovecot sasl error with postfix
by Arya, Manish Kumar 29 Jul '06

29 Jul '06

Hi, I have compiled dovecot 1.0 and postfix 2.3 with dovecot support. here are my config sections dovecot in auth default section ---------- client { user = postfix group = postfix /path = /var/run/dovecot/auth-client mode = 0660 } postfix main.cf --------------------- smtpd_sasl_auth_enable = yes broken_sasl_auth_clients = yes smtpd_sender_restrictions = permit_sasl_authenticated, check_sender_access hash:/etc/postfix/sender_access smtpd_recipient_restrictions =permit_sasl_authenticated, reject_unknown_recipient_domain, reject_invalid_hostname, reject_non_fqdn_recipient, # reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, permit_mynetworks, reject_unauth_destination, smtpd_sasl_type = dovecot smtpd_sasl_path = /var/run/dovecot/auth-client in postfix logs i get Jul 29 16:36:22 localhost postfix/smtpd[1437]: warning: SASL: Connect to /var/run/dovecot/auth-client failed: Permission denied Jul 29 16:36:22 localhost postfix/smtpd[1437]: fatal: no SASL authentication mechanisms Jul 29 16:36:23 localhost postfix/master[1426]: warning: process /usr/libexec/postfix/smtpd pid 1437 exit status 1 Jul 29 16:36:23 localhost postfix/master[1426]: warning: /usr/libexec/postfix/smtpd: bad command startup -- throttling basically socket file is not created by dovecot -sh-2.05b# ls /var/run/dovecot/auth-client ls: /var/run/dovecot/auth-client: No such file or directory not sure why Regards, -Manish --------------------------------- Do you Yahoo!? Next-gen email? Have it all with the all-new Yahoo! Mail Beta.

2 1