- dovecot - dovecot.org

[Dovecot] what is the correct password file format?
by M. Fioretti 13 Jun '06

13 Jun '06

Hello, I'm trying to set up dovecot installed from RPM (version dovecot-0.99.11-2.EL4.1, the one included in Centos 4.3). I get this error: dovecot-auth: passwd-file(user@domail): unknown user even if user@domain exists: auth_userdb = passwd-file /etc/imap.virtual_users auth_passdb = passwd-file /etc/imap.virtual_users -bash-3.00# cat /etc/imap.v_users user@domain:{DIGEST-MD5}thepassword:uid_value:gid_value::/absolute/path/to/virtual/mailboxes why do I get this error? and what is the correct config format for this version of dovecot? TIA, Marco -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ Furious activity is no substitute for understanding. -- H.H. Williams

1 0

Re: [Dovecot] Dovecot fails to start after enabling "deliver" executable settings to config file
by infowolfe 12 Jun '06

12 Jun '06

On 6/12/06, My BSD <MyBSD(a)comcast.net> wrote: > The directory should have been "/opt/local/var/run/dovecot/". > > However, when "user" and "group" are set to "9999" dovecot will not > start with the following error log entries: > > ------------------------------------------- > dovecot: Jun 12 12:52:36 Error: auth(default): User doesn't exist: 9999 > dovecot: Jun 12 12:52:36 Error: Auth process died too early - shutting > down dovecot: Jun 12 12:52:36 Error: child 29585 (auth) returned error > 89 > ------------------------------------------- cat /etc/passwd | grep 9999 if you don't see any output, then cat /etc/passwd | more and pick a different uid/gid to launch dovecot as ;-)

1 0

[Dovecot] ./configure and /or Makefile problem
by B.O.F.H. 12 Jun '06

12 Jun '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 This is on OpenBSD 3.x. I'll fully admit not being a savvy programmer and therefore unable to suggest a decent resolution. It seems that _something_ in either the main "configure" script or one of the Makefile.in templates is causing the Makefiles in src/auth and src/util to add two variables named "AUTH_CFLAGS" and "AUTH_LIBS", which on first look makes sense. Looking a bit deeper, they both contain variables in the format "@VARNAME@" which I'm presuming _should_ have been replaced with actual paths and/or "-l" statements during the configure process. Those being: AUTH_CFLAGS = -I@includedir@ @INCLUDE_des@ AUTH_LIBS = -L@libdir@ -lgssapi -lkrb5 -lasn1 @LIB_des_appl@ - - -lroken @LIB_crypt@ @LIB_dbopen@ @LIBS@ -L/usr/local/lib -lpq - - -L/usr/local/lib/mysql -lmysqlclient -lz -lm Two issues become apparent: 1 - Somehow, the unexpanded "@" variables are making it to the command line 2 - "-lroken" is a Linux specific library and is not found in most *BSD's. Generally configure scripts replace it with "-lcrypto" on host OS detection. This can be displayed by looking at the errors for both auth and util: Making all in auth gmake[3]: Entering directory `/src/mail/dovecot-1.0.beta8/src/auth' if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - - -I../../src/lib-sql -I../../src/lib-settings -I../../src/lib-ntlm - - -DAUTH_MODULE_DIR=\""/usr/local/lib/dovecot/auth"\" - - -DPKG_LIBEXECDIR=\""/usr/local/libexec/dovecot"\" -I@includedir@ @INCLUDE_des@ -I/usr/local/include -I/usr/include/kerberosV - - -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 - - -Wbad-function-cast -MT mycrypt.o -MD -MP -MF ".deps/mycrypt.Tpo" - - -c -o mycrypt.o mycrypt.c; \ then mv -f ".deps/mycrypt.Tpo" ".deps/mycrypt.Po"; else rm -f ".deps/mycrypt.Tpo"; exit 1; fi gcc: cannot specify -o with -c or -S and multiple compilations gmake[3]: *** [mycrypt.o] Error 1 gmake[3]: Leaving directory `/src/mail/dovecot-1.0.beta8/src/auth' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/src/mail/dovecot-1.0.beta8/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/src/mail/dovecot-1.0.beta8' gmake: *** [all] Error 2 Making all in util gmake[3]: Entering directory `/src/mail/dovecot-1.0.beta8/src/util' if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - - - -I../../src/auth -I/usr/local/include -I/usr/include/kerberosV - - - -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 - - - -Wbad-function-cast -MT rawlog.o -MD -MP -MF ".deps/rawlog.Tpo" - - -c - -o rawlog.o rawlog.c; \ then mv -f ".deps/rawlog.Tpo" ".deps/rawlog.Po"; else rm -f ".deps/rawlog.Tpo"; exit 1; fi /bin/sh ../../libtool --mode=link --tag=CC gcc -std=gnu99 -O2 - - - -march=athlon -pipe -Wall -W -Wmissing-prototypes - - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts - - -Wformat=2 - -Wbad-function-cast -L/usr/local/lib -o rawlog rawlog.o ../lib/liblib.a mkdir .libs gcc -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts - - -Wformat=2 - -Wbad-function-cast -o rawlog rawlog.o -L/usr/local/lib ../lib/liblib.a if gcc -DHAVE_CONFIG_H -I. -I. -I../.. - - -I../../src/lib - -I../../src/auth -I/usr/local/include - - -I/usr/include/kerberosV - -std=gnu99 -O2 -march=athlon -pipe -Wall - - -W -Wmissing-prototypes - -Wmissing-declarations -Wpointer-arith - - -Wchar-subscripts -Wformat=2 - -Wbad-function-cast -MT gdbhelper.o - - -MD -MP -MF ".deps/gdbhelper.Tpo" -c -o gdbhelper.o gdbhelper.c; \ then mv -f ".deps/gdbhelper.Tpo" ".deps/gdbhelper.Po"; else rm -f ".deps/gdbhelper.Tpo"; exit 1; fi /bin/sh ../../libtool --mode=link - - --tag=CC gcc -std=gnu99 -O2 - -march=athlon -pipe -Wall -W - - -Wmissing-prototypes - - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts - - -Wformat=2 - -Wbad-function-cast -L/usr/local/lib -o gdbhelper gdbhelper.o ../lib/liblib.a gcc -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts - - -Wformat=2 - -Wbad-function-cast -o gdbhelper gdbhelper.o - - -L/usr/local/lib ../lib/liblib.a if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - - - -I../../src/auth -I/usr/local/include -I/usr/include/kerberosV - - - -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 - - - -Wbad-function-cast -MT dovecotpw.o -MD -MP -MF ".deps/dovecotpw.Tpo" -c -o dovecotpw.o dovecotpw.c; \ then mv -f ".deps/dovecotpw.Tpo" ".deps/dovecotpw.Po"; else rm -f ".deps/dovecotpw.Tpo"; exit 1; fi /bin/sh ../../libtool --mode=link - - --tag=CC gcc -std=gnu99 -O2 - -march=athlon -pipe -Wall -W - - -Wmissing-prototypes - -Wmissing-declarations -Wpointer-arith - - -Wchar-subscripts -Wformat=2 - -Wbad-function-cast - - -L/usr/local/lib -o dovecotpw dovecotpw.o ../auth/libpassword.a ../lib-ntlm/libntlm.a ../lib/liblib.a - -L@libdir@ -lgssapi -lkrb5 - - -lasn1 @LIB_des_appl@ -lroken @LIB_crypt@ @LIB_dbopen@ @LIBS@ - - -L/usr/local/lib -lpq -L/usr/local/lib/mysql - - - -lmysqlclient -lz -lm -export-dynamic ../../libtool[6473]: cd: /src/mail/dovecot-1.0.beta8/src/util/@libdir@ - No such file or directory libtool: link: cannot determine absolute directory name of `@libdir@' gmake[3]: *** [dovecotpw] Error 1 gmake[3]: Leaving directory `/src/mail/dovecot-1.0.beta8/src/util' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/src/mail/dovecot-1.0.beta8/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/src/mail/dovecot-1.0.beta8' gmake: *** [all] Error 2 To get Dovecot to build, I manually went into both Makefiles, made "AUTH_CFLAGS" empty and deleted all "@" references and "-lroken" in "AUTH_LIBS" replacing them with "-lcrypto" Once I did that, it built successfully and has not thrown any errors. - -- Ed V. Don't hit the keys so hard, it hurts. 12 June 2006 08:22:32 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (MingW32) iQIVAwUBRI15U6fRmhqF/IZAAQpxDBAA5eHEmclQjjQesfrz9cq5zkFeted+G5md vDCQ65Q8QDD5yXdg0BKlc571JbFJjI2Rc7jGEGsokrgP895jOEHDMEaDbJ4CCX8h r5IqFSmS9Hi/Uuyte1Aww7lLBnq0+yT9NcxzmYP0OYwGRM+EpYU5Z4/mwjgSmFcR 0qn/2WlmK+Q1kBD3S0IrtbOOUjLEFX+x+C5iomd0Ua05FuwtKSFFBBChNU9jOl3S 4ir9UVYJpd8pOikfghnPrSegoigjU4SsxcbvjFi3lfZUpJPY5oZZDNzRqh5/oJHc PSwIl8as98RqQqtJsMzEwzT787pAD5zT5q+KAk+0jRPN5Qhc58lnDSQD2KBr9WPg MeZmRivQAkK5LUePkSCGg+BqsiA6UJka5RF76nGfpi3boL7Uc6Q9OFYFHWny8g1T dxrQvXW5//n6QyxTPliK9Nu3g7tspp07E6oBMSAhu6q7KF3l+ReARVPEpdjcgOqM yz+rzk6a8NMTkXfsysvwm11EU6pvjgrJRpnVlLvYfbbIu0BDIVrr9J4iAXWvb6Ll 447S+DDf67rDxp0VscmCxQ1CrI8WK2mL/SGdnuJEcQvP2B1BurI01AcVNcUDfeNi anHOX+b8OUkwbvjOecFMNEMg/GHN1Ckgd05vgG4o4u2IyBsA/a1cypNFHnwLFTxM IRjupfBLxlE= =y6WG -----END PGP SIGNATURE-----

2 2

Re: [Dovecot] Dovecot fails to start after enabling "deliver" executable settings to config file
by Timo Sirainen 12 Jun '06

12 Jun '06

On Mon, 2006-06-12 at 10:29 -0400, My BSD wrote: > dovecot: Jun 12 10:08:53 Error: auth(default): bind > (/opt/var/run/dovecot/auth-client) failed: No such file or directory Does /opt/var/run/dovecot/ directory exist? And you haven't tried to chroot auth process?

1 0

[Dovecot] deliver setgid issues
by Brad 12 Jun '06

12 Jun '06

Okay .. have dovecot set up with following settings : userdb static { args = uid=97 gid=97 home=/export/dovecot/mail/%d/%u mail=mbox:/export/dovecot/mbox/%d/%u/ } passdb passwd-file { # Path for passwd-file args = /etc/dovecot-passdb } Passdb works I think in the sense that I can log into dovecot using a regular mail client. The real issue is when I try to deliver any type of mail using dovecot-lda (deliver). deliver is setuid and setgid dovecot .. I event se the static mail dirs above to be owned by dovecot (I know .. a no no .. but wanted to trace down issue) I also have first_valid_uid = 96 and first_valid_uid = 96 Now .. when I try to do this .. echo "A Test Message" | /usr/local/libexec/dovecot/deliver -d existinguser I get this .. master in: USER 1 echo service=deliver dovecot: Mar 11 23:45:24 Info: auth(default): master out: USER 1 echo uid=97 gid=97 home=/export/dovecot/mail//echo mail=mbox:/export/dovecot/mbox//echo/ dovecot: Mar 11 23:45:24 Error: auth(default): deliver: Fatal: setgroups(97) failed: Operation not permitted 97 is the gid for the dovecot user .. which owns just about everything deliver could ever touch. What am I missing ?

5 6

[Dovecot] Verbose logs to show ACL hits?
by Gavin Henry 12 Jun '06

12 Jun '06

Hi all, Using Beta here, but can't see anything in dovecot.conf for this? Any tips? Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

2 3

[Dovecot] Quick thanks for wonderful ACLS!
by Gavin Henry 12 Jun '06

12 Jun '06

Hi again, Just testing the ACLs, as one of our clients do not want users to delete or move Sent emails. Following http://wiki.dovecot.org/ACL and creating: /etc/dovecot-acls/Sent with this in it: owner lrsi Works a treat. We love Dovecot! ;-) -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

1 0

[Dovecot] Verbose logs to show ACL hits?
by Gavin Henry 12 Jun '06

12 Jun '06

Hi all, Using Beta here, but can't see anything in dovecot.conf for this? Any tips? Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

1 0

[Dovecot] LDA Questions
by Timothy White 12 Jun '06

12 Jun '06

Firstly, if you're out of quota for example, and using postfix, will it need to send a bounce email, or will it do the out of quota error at SMTP time? (preferred) Also, I want a global sieve script to run first, REGARDLESS if the user has their own script. # If there is no user-specific Sieve-script, global Sieve script is # executed if set. #global_script_path = This suggests to me, that it will only execute if no user sieve script is present. As most of my users are going to be virtual, it shouldn't be a problem, but just encase, I'd like to know my global script is being run for all users. Thanks Tim -- Linux Counter user #273956

4 4

[Dovecot] ssl_require_client_cert = yes for encrypted connections only
by Rainer Frey 12 Jun '06

12 Jun '06

Hi, is there any way to get dovecot to use "ssl_require_client_cert = yes" for encrypted connections only? For unencrypted connections there can't be any client certificate, and I can't disable unencrypted connections altogether (I limit them by firewall to our own network). Rainer Frey -- Software Development ------------------------------------------------------ Inxmail GmbH Kaiser-Joseph-Str. 274, 79098 Freiburg, Germany

3 4