- dovecot - dovecot.org

[Dovecot] Authentication Problem MD5 hashs
by Fabrizio Steiner 31 Mar '06

31 Mar '06

Hello I've migrated to dovecot-1.0beta3 and I have taken over the password files from an older system. For some reason the md5 hashs have "[" chars in the salt. For example like this $1$[xxxXX[E$bg/d4JdSSf2kTL8sXXxXXX Now the problem is that in the file src/auth/db-passwd-file.c on line 43 for libpam-pwdfile compatibility it will be searched for "[" to find the type of the password hash. Then only the hash up to this point will be used in future for comparing the passwords. The problem line. p = pass == NULL ? NULL : strchr(pass, '['); I changed the behavior to always use the complete hash out of the file because I don't use pam. Does anyone know if [ chars are allowed in md5 hashs? Kind Regards Fabrizio Steiner

2 1

[Dovecot] problem with IMAP authentication with Thunderbird in local network
by Marco Ceccarelli - tnx.it 31 Mar '06

31 Mar '06

I've installed dovecot in our debian and when i login from localhost it work. when we try from our local network it give an error as this: Mar 31 11:25:27 linux2 dovecot: auth(default): client out: FAIL^I1^Iuser=mcecccarelli Mar 31 11:25:27 linux2 dovecot: auth(default): client in: AUTH^I2^IPLAIN^Iservice=IMAP^Ilip=192.168.0.105^Irip=192.168.0.115^Iresp=AG1jZWNjY2ZWxsaQBzZW5uYTk0 Mar 31 11:25:29 linux2 dovecot: auth(default): pam(mcecccarelli,192.168.0.115): pam_authenticate() failed: User not known to the underlying ahentication module Mar 31 11:25:31 linux2 dovecot: auth(default): client out: FAIL^I2^Iuser=mcecccarelli i see that whe i try to login from localhost it try with pam(mcecccarelli) when i try from local network it try with pam(mcecccarelli,192.168.0.115) what i have to configure to make authorized all ip from local network ?

2 1

[Dovecot] Custom Quotas
by Andrew Barrow 31 Mar '06

31 Mar '06

Greetings I'm currently working on a design, to integrate an IMAP server into our existing mail architecture. It's proving to be a difficult exercise, mainly because of how we structure our quotas. In our system, the quota covers more than just email. We have a single quota that covers email, ftp directory, and personal homepage. The quota is stored in a mysql database, in a werid table structure. The quota allocation is stored against the user, while the quota usage is stored in 3 rows per user, in a seperate table; One row each for www, email, and ftp per user. I'm currently trying to figure out how we could integrate this quota into Dovecot. I'm quite happy to write plugin to handle updating the quota in our system, but I have no idea where to start. Any information you could provide on updating a quota in a third party system would be much appreciated. Thanks for you help. Andrew andrew(a)myinternet.com.au -- "If we don't have time to do it correctly now, will we have time to do it over once it's broken?" http://www.ranum.com/security/computer_security/editorials/dumb/

2 1

[Dovecot] userdb prefetch not working for passdb sql
by dovecot-ri 31 Mar '06

31 Mar '06

Hi all, I'm using 1.0.beta3 and having problems using userdb prefetch in conjuction with passdb sql. Here are my mail logs when I log to virtual account "testuser(a)mydomain.com" by doing "telnet localhost 143": Mar 26 15:15:47 imapserver dovecot: Dovecot v1.0.beta3 starting up Mar 26 15:15:49 imapserver dovecot: auth-worker(default): mysql: Connected to (null) (mail) Mar 26 15:16:03 imapserver dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=<hidden> Mar 26 15:16:03 imapserver dovecot: auth-worker(default): sql(testuser(a)mydomain.com,127.0.0.1): query: ***snipped, very long*** Mar 26 15:16:03 imapserver dovecot: auth(default): client out: OK 1 user=testuser(a)mydomain.com Mar 26 15:16:03 imapserver dovecot: auth(default): master in: REQUEST 1 16001 1 Mar 26 15:16:03 imapserver dovecot: auth(default): passwd(testuser(a)mydomain.com,127.0.0.1): unknown user Mar 26 15:16:03 imapserver dovecot: auth(default): prefetch(testuser(a)mydomain.com,127.0.0.1): userdb_uid not returned Mar 26 15:16:03 imapserver dovecot: auth(default): prefetch(testuser(a)mydomain.com,127.0.0.1): userdb_gid not returned Mar 26 15:16:03 imapserver dovecot: auth(default): userdb(testuser(a)mydomain.com,127.0.0.1): user not found from userdb Mar 26 15:16:03 imapserver dovecot: auth(default): master out: NOTFOUND 1 Mar 26 15:16:03 imapserver dovecot: imap-login: Internal login failure: user=<testuser(a)mydomain.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured The MySQL query is long and complicated, but here's what it returned when I copied and pasted it into mysql: user testuser(a)mydomain.com password {SSHA}BRuPgonpb8Zd+0NaFH2G6dT47m3mT43w userdb_home /var/mail/mydomain.com/testuser userdb_uid vmail userdb_gid vmail All of these values are correct. It seems to be ignoring the userdb_* fields. It works when I don't use prefetch, and it also works when I do use prefetch but change the SQL query to return "testuser" instead of "testuser(a)mydomain.com" in the user field. Anyone know why? Here's my dovecot.conf in case it proves useful: first_valid_uid = 900 mail_debug = yes default_mail_env = maildir:%h/.maildir maildir_copy_with_hardlinks = yes protocol imap { login_greeting_capability = yes } protocol pop3 { } auth_verbose = yes auth_debug = yes auth default { mechanisms = plain passdb sql { args = /etc/dovecot/dovecot-sql.conf } passdb pam { args = "*" } userdb passwd { } userdb prefetch { } user = root } plugin { } Thanks!

3 2

[Dovecot] Dovecot abort while selecting INBOX
by Joshua Wise 31 Mar '06

31 Mar '06

Hello all, Recently, I was setting up SpamAssassin and procmail on my system (used to run Courier, and was converted using Courier convert scripts). I was setting up a rule in PINE to filter all previously marked SPAM messages into a folder, when I suddenly got disconnected from the IMAP server. I attempted to reconnect, but any attempts to access my INBOX would disconnect me. I looked in /var/log/mail.log on my server, and found this: Mar 26 12:42:17 dashnine dovecot: imap-login: Login: user=<joshua>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Mar 26 12:42:17 dashnine dovecot: imap(joshua): Trying to allocate 0 bytes Mar 26 12:42:17 dashnine dovecot: child 31035 (imap) killed with signal 6 Looks like Dovecot aborted. I grabbed a tcpdump of the event after turning off SSL, which is available at http://joshuawise.com/pine.imap.tcpdump . My system is, summarized: * A Linux x86 machine: Linux dashnine 2.6.12.3 #2 Sun Aug 7 18:56:14 EDT 2005 i686 GNU/Linux * A Debian machine: testing/unstable * Running Dovecot from Debian: 1.0.beta3 * Converted from Courier using convert scripts * Using Postfix and Procmail * Using Maildirs in home directories (although in this case, lrwxrwxrwx 1 joshua joshua 23 Mar 11 22:08 Maildir -> /media/Maildirs/joshua/) * Using PINE connecting to Dovecot on localhost to access email Let me know if you want more information, or if you want me to try anything in particular. Thanks, joshua

2 2

[Dovecot] Confused about what MTA, MDA, IMAP/POP server to use
by Netlink Tech 31 Mar '06

31 Mar '06

Hello...I'll TRY make this short. This post is not specific to Dovecot...but many subscribers to this list have probably been down this road. (private replies welcome if you want it to go off list) I currently use Sendmail with MailScanner, SpamAssassin, ClamAV, Procmail, and qpopper for POP3 (hash mail dirs for mbox files)on RedHat 9 server. Roaming users currently only have the option of UebiMiau webmail interface to POP3 (doesn't work well) I will be moving to a server with Fedora Core 5.(x86_64) Things I would like to accomplish: 1) Move to maildir mailbox format (currently large mbox files cause I/O flushing errors and problems for users retrieving). 2) Use squirrelmail for webmail (IMAP) (local or roaming users) 3) Enable local users (ones with current accounts on the server) to continue to use their current client setup. 4) Enable any user to use the webmail interface to retrieve/send email. 5) Enable roaming users (ones connected from any location) to use Outlook Express or similar with SMTP_Auth and port 587 for message submission and POP3/IMAP. 6) Enable mail quota. I want the current users to use their current settings (unless they roam...then require that they use webmail or SMTP_Auth and port 587), but moving forward with new users, I have no reason to give them shell access/system accounts....so I was thinking virtual users using user@domain and storing their auth information in mysql db. (mysql will be used for radius...so it is already running on the server). Because I am trying to figure out how to keep the existing users system accounts and move forward with new users only having virtual accounts (just mail access with no login), I don't think I can use file system quotas. I have used Sendmail for 10 years, so I am familiar with it and it has been very stable for me. (so I prefer to stick with it if I can) I rely heavily on MailScanner to scan/mark/clean virus and Procmail to filter marked spam. Qpopper is on the way out...A couple of weeks messing with the test server and I already love Dovecot. Questions: 1) Recommendations please: How to accomplish with what configuration. 2) Quotas? 3) SMTP_Auth using Mysql for virtual users? (works fine with PAM/system passwords) Sorry for not being Dovecot specific on the list. Curt

2 2

Re: [Dovecot] domain stripping sorry !!
by jasper 31 Mar '06

31 Mar '06

sorry people but a'm searcing for about a year for this sollution im now on double databasses witch gives me ass f* problems I get a lot of " i's an option in dovecot" but nobody gan give me an configuration example. i'l take aniting. On Fri, 31 Mar 2006 14:05:28 +0200, Jan Kundrát wrote > [off-list reply] > > Hi jasper, > FYI, asking the same question three times in five days is considered > impolite by quite a lot of folks. > > Cheers, > -jkt > > -- > cd /local/pub && more beer > /dev/mouth - Als echtparen echt paren hebben echtgenoten echt genoten -- Dit bericht is gescanned op virussen en andere gevaarlijke inhoud door Techspace mailscanner en lijkt schoon te zijn.

1 0

[Dovecot] domain stripping searcing for ages
by jasper 31 Mar '06

31 Mar '06

X-Tech Space-MailScanner-Information: Please contact the ISP for more information X-Tech Space-MailScanner: Found to be clean X-Tech Space-MailScanner-From: redhat(a)techspace.nl I use pam to login my users are stored as j.hendriks now i like to use 2 domains but with the same user and passw and the option that de mail is stored in a difrent directory but i cant get rit of the @domain extention by Autentification i'f made these canges. auth_process_size = 256 auth_cache_size = 5000 auth_cache_ttl = 3600 passdb pam { args = session=yes args = service name="*" args = cache_key=%n args = dovecot } but keeps Autentificating me as j.hendriks@domain insted of j.hendriks what am i doing wrong. help please. -- Dit bericht is gescanned op virussen en andere gevaarlijke inhoud door Techspace mailscanner en lijkt schoon te zijn.

1 0

Re: [Dovecot] Support for Kmail maildir format
by Magnus Holmgren 30 Mar '06

30 Mar '06

Thursday 26 January 2006 18:35 skrev Graham Cobb: > Kmail's use of maildir seems to folow the basic maildir approach except > that sub-folders are handled differently. > > If you create a folder (say it is called ABC) in Kmail and start putting > mail in it, Kmail creates a directory on the disk called ABC (not .ABC) and > creates the cur, new and tmp folders within it to contain the email. > > If you then create a subfolder of ABC (say it is called DEF, contained > within the ABC folder), Kmail creates a directory on the disk called > .ABC.directory and creates the DEF directory within that. > > In other words, maildir directories are given the same name as the mail > folder (with no leading dot) but sub-folders are contained in disk > directories called .<folder-name>.directory. Then we have Evolution, which also uses maildirs but with yet another subfolder naming format (subfolders are created right beside the cur, new and tmp directories). In both cases, the folder names are not UTF-7 encoded on disk, which is worth noticing. -- Magnus Holmgren

1 0

RE: [Dovecot] Shared namespaces
by Mark Lidstone 30 Mar '06

30 Mar '06

Hi Timo, Thanks for the reply. > -----Original Message----- > From: Timo Sirainen [mailto:tss@iki.fi] > Sent: 25 March 2006 09:42 > To: Mark Lidstone > Cc: dovecot(a)dovecot.org > Subject: Re: [Dovecot] Shared namespaces > > > On Fri, 2006-03-17 at 16:03 +0000, Mark Lidstone wrote: > > I logged with Thunderbird as user 1 and everything seems to > work fine. However, when I logged in as user 2 I was getting > all kinds of errors. On checking the permissions of > /home/public/Maildir/subscriptions it was user1:user1 with mode 600. > > Looks like at some point I've thought about adding "subscriptions" > setting to namespaces where you could configure if each one > should have > separate ones. For public/shared namespaces I guess this > should default > to "no". In my case it should default to "yes". It allows people to only see the folders with email relating to their projects. At the moment when a project finishes we have to move it to another store so that it's not clogging up everyone's public folder list. Allowing people to only see the folders they want is one of the features that has attracted us to shared namespaces. > Unfortunately I don't think it's easy to currently make namespace's > subscriptions exist in another namespace. I'll add this in > TODO, but you > could maybe kludge around this by changing the code, eg. set > umask to 0 > before file_dotlock_open() in > src/lib-storage/subscription-file/subscription-file.c and back to > original value afterwards. Don't add it in the TODO - you've already done it (basically). I'd cobbled together a real kludge to use the dovecot-shared permissions on the subscriptions file (kinda - only the group permissions, not the user) and was about to post it to the list when I came across the way you'd already handled it. The subscriptions file is stored in the folder pointed to with the "CONTROL" directive - I just put this to a separate place for every user and it works fine. The only thing that's left is getting this added to the Wiki - I don't think anyone's done that yet. Thanks, Mark CONFIDENTIAL The information contained in this e-mail and any attachment is confidential. It is intended only for the named addressee(s). If you are not the named addressee please notify the sender immediately and do not disclose, copy or distribute the contents to any other person other than the intended addressee(s). VIRUSES The contents of an attachment to this e-mail may contain software viruses which could damage your own computer system. While BMT Nigel Gee and Associates Ltd has taken every reasonable precaution to minimise this risk, we cannot accept liability for any damage which you sustain as a result of software viruses. You should carry out your own virus checks before opening the attachment.

1 0