- dovecot - dovecot.org

[Dovecot] cleartext password logging
by Imre Gergely 16 Aug '06

16 Aug '06

hi is it possible to somehow log cleartext passwords (preferably after the authentication is done, and the user logged in)? 'auth_verbose = yes' doesn't seem to be enough. i have dovecot 0.99. thx.

2 1

[Dovecot] Dovecot - Issue with Maildir++ quotas
by Andrew Richards 16 Aug '06

16 Aug '06

Hi, I've been bitten by an issue running Squirrelmail on top of Dovecot using Maildir++ quotas. Having configured these quotas in Dovecot, I notice that Dovecot appears not to exclude the 'Trash' folder from its quota calculation (which it should do, according to the Maildir++ spec). Unfortunately this breaks Squirrelmail if I try to delete a message from a close-to-quota mailbox - as per July's thread: "Maildir++ quota - how to handle a full mailbox" Which unfortunately means that a fairly full mailbox can become 'Wedged' with Dovecot/Squirrelmail in this situation with its owner unable to delete messages if that's the only way they access their mailbox. I took a look at the source and found the 'Quota exceeded' lines in src/plugins/quota/quota-storage.c but didn't understand it well enough to dive in... except to notice that the 'Trash' folder doesn't appear to get excluded from the calculations. cheers, Andrew.

5 8

[Dovecot] multiple Authentication
by Marc Perkel 16 Aug '06

16 Aug '06

I'm using the following authentication passing the full email address user(a)domain.com auth default { mechanisms = plain # Linuxconf passwd-like file with specified location passdb passwd-file { args = /etc/vmail/shadow.%d } # Linuxconf passwd-like file with specified location userdb passwd-file { args = /etc/vmail/passwd.%d } user = root } But - what I want to do is if the user doesn't enter the domain part I want it to assume one specific domain. How would I do that?

2 1

[Dovecot] POP3 and TLS don't work (dovecot 1.0 rc6)
by kaspars.bogdanovs＠awtech.lv 16 Aug '06

16 Aug '06

Hi! It seems there are problem with POP3 connection when TLS enabled. Previously it worked fine, but for now it doesn't... Plain & SSL POP3 works. Plain, TLS & SSL IMAP works too. In logs nothing than: dovecot: Aug 16 10:36:23 Warning: pop3-login: SSL_accept() failed: error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac [xxx.xxx.xxx.xx] xxx.. - remote ip address On client side: KMail - Could not connect to host Your POP3 server claims to support TLS but negotiation was unsuccessful. You can disable TSL in KDE using the crypto settings module. Thunderbird (on Windows) - nothing special, but can't connect. OS: Debian Linux __ Kaspars P.S. sorry for bad english

2 1

[Dovecot] default_realm problem
by Anton Martchukov 16 Aug '06

16 Aug '06

Hello List, I've upgraded to dovecot from FreeBSD ports, changed the config from previous 0.99 version, but meet a problem with %d variable beeing empty in userdb static configuration directive. Our server supports multiple domains, e.g. 'mxc.ru' and 'mail.mxc.ru'. Users can log into using their full e-mail address like antonm(a)mxc.ru or antonm(a)mail.mxc.ru, but the feature of adding default domain should also be present, e.g. when logging with user name 'antonm' server should assume username to be 'antonm(a)mxc.ru' cause 'mxc.ru' is the default domain. This wroked fine in 0.99 version, but, alas, I can't get it working in newer version. I've tried different settings combination, but all of them results in '%d' beeing empty Debug authentication log is: dovecot: Aug 16 10:59:46 Info: auth(default): auth(antonm(a)mxc.ru,10.3.1.192): username changed antonm(a)mxc.ru -> antonm dovecot: Aug 16 10:59:46 Info: auth(default): ldap(antonm,10.3.1.192): uid(user)=antonm userPassword(password)=<hidden> dovecot: Aug 16 10:59:46 Info: auth(default): client out: OK 1 user=antonm dovecot: Aug 16 10:59:46 Info: auth(default): master in: REQUEST 11 97887 1 dovecot: Aug 16 10:59:46 Info: auth(default): master out: USER 11 antonm uid=1004 gid=1004 home=/data/mai lspool//antonm The problem here seems to be with "username changed antonm(a)mxc.ru -> antonm", but I do not know how to switch it off. The relevant config file parts are: dovecot.conf: auth_default_realm = mxc.ru auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth default { mechanisms = plain digest-md5 passdb ldap { args = /usr/local/etc/dovecot-ldap.conf } userdb static { args = uid=1004 gid=1004 mail=maildir:/data/mailspool/%d/%n } } dovecot-ldap.conf: #all user attrs here are commented, since we don't get any user info from ldap, but checking a password #user_attrs = uid,homeDirectory,,,uidNumber,gidNumber #user_attrs = ,,,,,,, #user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_filter = (&(objectClass=mailUser)(dc=%d)(uid=%n)(accountActive=TRUE)) default_pass_scheme = PLAIN The authentication is working, so on the pass_filter in dovecot-ldap.conf '%d' is resolved properly, but in userdb static's mail argument it's empty whatever I do. Thank you for your help! -- Anton Martchukov - http://www.martchukov.com

2 1

[Dovecot] Problems after upgrade (0.99.x -> 1.0.x)
by fazer69＠o2.pl 16 Aug '06

16 Aug '06

Hello :) I had a working Dovecot 0.99.x with the following dovecot.conf: ### ssl_disable = yes disable_plaintext_auth = no login = imap verbose_proctitle = yes default_mail_env = maildir:%h/Maildir auth = default auth_mechanisms = plain auth_userdb = passwd /etc/passwd auth_passdb = shadow /etc/shadow auth_user = root protocols = imap pop3 ### Then I've downloaded, compiled and installed Doveot 1.0.rc6, I tried lot of "possibilities" in the new dovecot.conf but I always get : dovecot: Dovecot v1.0.rc6 starting up dovecot: Login process died too early - shutting down dovecot: child 15288 (login) killed with signal 11 dovecot: child 15289 (login) killed with signal 11 dovecot: child 15290 (login) killed with signal 11 Some add. info: # dovecot -n # /usr/local/etc/dovecot.conf ssl_disable: yes login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login auth default: passdb: driver: shadow args: /etc/shadow userdb: driver: passwd How can I get the new Dovecot acting as the old one? I don't use pam (which seems to be default now), simply shadow passwords (Slackware). http://wiki.dovecot.org/UpgradingDovecot did not help me. TIA, websafe

6 7

[Dovecot] Migrating from qpopper to dovecot
by asko 16 Aug '06

16 Aug '06

Hi, I am planning a migration from Qpopper 4.0.5 to Dovecot.. I need to use mbox format (because Openwebmail does not have native Maildir support yet) and pop3. The system will have about 1500 users, once migrating is complete. To avoid users downloading their mailboxes all over again, i need to set "pop3_reuse_xuidl = yes".. But that option works since Dovecot 1.0alpha1. RHEL has latest stable version 0.99.11-2. So let me rephrase my question: is latest dovecot (1.0.rc6) stable enough to handle the load (mbox with pop3) or should I wait for the stable version to come out.. I want to avoid trouble under heavy load and/or with different pop3 clients. I found some problem reports of mbox related issues from dovecot mailing list. I could go with latest Qpopper 4.0.8, trading speed to safety.. If you have any similar experiences, please share your knowledge ;-) -- asko

1 0

[Dovecot] LDAP Authorising users from Active Directory
by Rob Coward 16 Aug '06

16 Aug '06

Hi, I am having stability problems setting up dovecot to authenticate virtual users against Active Directory on Win2k3. If the correct userid and password are used, everything works fine, see first logfile snippet below. If an unknown userid is used, again everything works fine. If I try logging in with a valid userid but get the password wrong, that connection is rejected (see second logfile snippet), and all subsequent connection even with correct userid/password are rejected with thunderbird getting a temporary auth failure (see third logfile snippet below). I am using auth_bind = yes and it seems as though after the failed login with an incorrect password, dovecot is loosing the dn & dnpass settings for the initial user lookup. I have found numerous references to PHP and ActiveDirectory on Win2k3 getting a similar "ldap_search() failed: Operations error" error and they suggested ensuring LDAP Version 3 is used and the Deref is set to 'never'. I am already using these setting to no avail. Has anyone else experience these problems, or have any suggestions on how to overcome it ? Many thanks, Rob Coward Normal Login with correct password Aug 16 10:08:52 gm-ho-lin-05 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=ADA5OTlAc3RvcmVzLmdhbWUuY28udWsAOTk5MA== Aug 16 10:08:52 gm-ho-lin-05 dovecot: auth(default): ldap(0999(a)stores.game.co.uk,127.0.0.1): bind search: base=OU=Stores,OU=UK,DC=group,DC=game,DC=net filter=(&(objectClass=user)(mail=0999(a)stores.game.co.uk)) Aug 16 10:08:52 gm-ho-lin-05 dovecot: auth(default): client out: OK 1 user=0999(a)stores.game.co.uk Aug 16 10:08:52 gm-ho-lin-05 dovecot: auth(default): master in: REQUEST 6 20765 1 Aug 16 10:08:52 gm-ho-lin-05 dovecot: auth(default): ldap(0999(a)stores.game.co.uk,127.0.0.1): base=OU=Stores,OU=UK,DC=group,DC=game,DC=net scope=subtree filter=(&(objectClass=user)(mail=0999(a)stores.game.co.uk)) fields=uid,,,uid,, Aug 16 10:08:52 gm-ho-lin-05 dovecot: auth(default): master out: USER 6 0999(a)stores.game.co.uk uid=12367 gid=12367 Aug 16 10:08:52 gm-ho-lin-05 dovecot: imap-login: Login: user=<0999(a)stores.game.co.uk>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Aug 16 10:08:52 gm-ho-lin-05 dovecot: IMAP(0999(a)stores.game.co.uk): Effective uid=12367, gid=12367 Aug 16 10:08:52 gm-ho-lin-05 dovecot: IMAP(0999(a)stores.game.co.uk): maildir: data=/data/mailstore/stores.game.co.uk/0999 Aug 16 10:08:52 gm-ho-lin-05 dovecot: IMAP(0999(a)stores.game.co.uk): maildir: root=/data/mailstore/stores.game.co.uk/0999, index=/data/mailstore/stores.game.co.uk/0999, control=, inbox= Aug 16 10:08:52 gm-ho-lin-05 dovecot: IMAP(0999(a)stores.game.co.uk): Disconnected: Logged out Login with incorrect password Aug 16 10:09:37 gm-ho-lin-05 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=ADA5OTlAc3RvcmVzLmdhbWUuY28udWsAMTIzNA== Aug 16 10:09:37 gm-ho-lin-05 dovecot: auth(default): ldap(0999(a)stores.game.co.uk,127.0.0.1): bind search: base=OU=Stores,OU=UK,DC=group,DC=game,DC=net filter=(&(objectClass=user)(mail=0999(a)stores.game.co.uk)) Aug 16 10:09:39 gm-ho-lin-05 dovecot: auth(default): client out: FAIL 1 user=0999(a)stores.game.co.uk Aug 16 10:09:39 gm-ho-lin-05 dovecot: imap-login: Aborted login: user=<0999(a)stores.game.co.uk>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Subsequent logins with correct password Aug 16 10:09:48 gm-ho-lin-05 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=ADA5OTlAc3RvcmVzLmdhbWUuY28udWsAOTk5MA== Aug 16 10:09:48 gm-ho-lin-05 dovecot: auth(default): ldap(0999(a)stores.game.co.uk,127.0.0.1): bind search: base=OU=Stores,OU=UK,DC=group,DC=game,DC=net filter=(&(objectClass=user)(mail=0999(a)stores.game.co.uk)) Aug 16 10:09:48 gm-ho-lin-05 dovecot: auth(default): ldap(0999(a)stores.game.co.uk,127.0.0.1): ldap_search() failed: Operations error Aug 16 10:09:49 gm-ho-lin-05 dovecot: auth(default): client out: FAIL 1 user=0999(a)stores.game.co.uk temp Aug 16 10:09:49 gm-ho-lin-05 dovecot: imap-login: Aborted login: user=<0999(a)stores.game.co.uk>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this e-mail in error please notify the system manager at: mailto:postmaster@game.net The recipient acknowledges that the transmissions made via the Internet can be corrupted and therefore THE GAME GROUP PLC and any of its subsidiaries do not give any warranty as to the quality or accuracy of any information contained in the message or assume any liability for it or for its transmission, reception or storage. This footnote also confirms that this e-mail message has been swept by anti-virus software for the presence of computer viruses. http://www.game.co.uk http://www.gamegroup.plc.uk

1 0

[Dovecot] imap+ssl feedback
by Herr Nagengast 15 Aug '06

15 Aug '06

I've been using 1.0rc5 since August 2nd. Thunderbird users on multiple platforms haven't had any problems saving messages to the Sent mailbox. I know from reading release notes that the SSL proxy code in rc5 is different from rc6, but I have to admit to being leery about upgrading since it works for me. Here's my configure command: ./configure --without-shadow --localstatedir=/var --with-notify=kqueue --with-cyrus-sasl2 --without-gssapi --without-vpopmail --prefix=/usr/local --build=i386-portbld-freebsd5.3 Thanks for your hard work! Todd

1 0

[Dovecot] Possible to alias ("ln") a folder?
by scianos＠speakeasy.net 15 Aug '06

15 Aug '06

Greetings - I've got an interesting issue that has cropped up due to some brain-dead "functionality" in mobile Windows Mobile clients... Our mail infrastructure traditionally uses "Sent" as our sent items folder. This is the default. However, WM puts it's sent messages in a folder called "Sent Items", and does not let you change it. Is there any proper and/or elegant way to alias the Sent folder to Sent Items (and allow both to coexist as the same message store) in an automated fashion without needing to set this up for each user? Thank you in advance for you help and patience! - Stu

2 1