- dovecot - dovecot.org

[Dovecot] dovecot and vmailmgr
by Mij 15 May '06

15 May '06

hello now that dovecot supports authentication with checkpassword-compatible modules, I tried to get it working for IMAP on a qmail + vmailmgr server. For a subtle detail, while claiming to be "a drop-in replacement for the standard checkpassword", checkvpw (auth module for vmailmgr) is not "drop in". It actually expects 2 args on its command line, not 1. So, a wrapper is needed to get it authenticating correctly with dovecot; a very simple one (argswrapper.c below). This wrapper is not sufficient though. In fact, vmailmgr represents user homes like this: $HOME_LOCUSER/users/virtual_username this is ok with default_mail_env = maildir:%h/users/%n $HOME_LOCUSER depends on the domain part of the user's email. The relation is held in /var/qmail/control/virtualdomains . However, on the local part (virtual_username) some rewriting is done on the username, as dots are replaced by ":". So in the end j.doe(a)foo.com becomes "~mxfoocom/users/j:doe". Now, var-expand does not support any rewriting. I patched it by adding another modifier, m_str_replace(), which replaces REPLACE_SOURCE with REPLACE_TARGET in a given string. By defining REPLACE_SOURCE to '.' and REPLACE_TARGET to ':' one accomplishes the vmailmgr username rewriting. This modifier is applied with "P", so: default_mail_env = maildir:%h/users/%Pn A better, general solution would be for dovecot to implement some kind of general rewriting, say with regexps and sed-like replacement rules, or with an external process in a cgi fashion. With this patch, dovecot gets the correct path for any user mailbox. However, there's a bug in dovecot storage modules (both maildir and mbox) which truncates the path in the first ":", when expecting ":INBOX" etc specifiers: /* <Maildir> [:INBOX=<dir>] [:INDEX=<dir>] [:CONTROL=<dir>] */ if (debug) i_info("maildir: data=%s", data); p = strchr(data, ':'); if (p == NULL) root_dir = data; else { root_dir = t_strdup_until(data, p); this way, a former data = /var/maildirs/foo/users/j:doe:INDEX=... is truncated to /var/maildirs/foo/users/j . This opens the much worse possibility for user "j:doe" to be accounted into user "j" account after authentication. It is difficult to get a solid fix here, because the grammar is ambiguous for INBOX, INDEX and CONTROL tokens. Since they are not separated with an illegal path symbol from the rest of the path in default_mail_env, it is not possible to state when a ":INBOX=" token belongs to the path and when it is a user directive. The Best is to move the specifiers into a different configuration directive. However, a more solid check with the current modus operandi is /* <Maildir> [:INBOX=<dir>] [:INDEX=<dir>] [:CONTROL=<dir>] */ if (debug) i_info("maildir: data=%s", data); /* extracting INBOX / INDEX / CONTROL suffices */ if (((p = strstr(data, ":INBOX=")) != NULL) || ((p = strstr(data, ":INDEX=")) != NULL) || ((p = strstr(data, ":CONTROL=")) != NULL)) { root_dir = t_strdup_until(data, p); which expects the full ":INBOX=" etc strings to be present in data instead of the single ":" separator. The patches that implement this for both {maildir,mailbox}-storage are also appended below. I will take a couple of hours tomorrow to wrap all the iter up on a web page here http://mij.oltrelinux.com/net/dovecot-qmail-vmailmgr/ All the patches are applied wrt 1.0-beta7 bye

2 4

[Dovecot] more unexpected results from 0.99.13 -> 1.0beta8 upgrade
by Alan Premselaar 15 May '06

15 May '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Just to give some more information about this: Apparently some of our POP3 users are saying that when they checked for new mail this morning that all the mail that was saved on the server was downloaded again as unread mail. I followed the guidelines in the wiki [1] with regards to upgrading from 0.99 to 1.0, made sure the .subscriptions and .customflags files were renamed to subscriptions and dovecot-keywords respectively yet the subscriptions were not maintained (i.e. users had to re-subscribe after the update) here's my config information, can you give me any hints as to what went wrong? [root@mail root]# dovecot -n protocols: imap imaps pop3 pop3s ssl_cert_file: /usr/share/ssl/certs/dovecot.pem ssl_key_file: /usr/share/ssl/private/dovecot.pem disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no verbose_proctitle: yes default_mail_env: maildir:~/Maildir:INDEX=/var/indexes/%u:CONTROL=/var/control/%u maildir_copy_with_hardlinks: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / location: maildir:~/Maildir:INDEX=/var/indexes/%u:CONTROL=/var/control/%u inbox: yes auth default: master_user_separator: * passdb: driver: pam userdb: driver: passwd [root@mail root]# dovecot --version 1.0.beta8 the machine is running RHEL 3 and kept up to date on a regular basis. Thanks, Alan [1] http://wiki.dovecot.org/UpgradingDovecot -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEZ9hBE2gsBSKjZHQRAnSuAJ929R90J8eBhi25528jwXN1HaR7mgCg42sv t16Eyhc3G+CSLVjTTdTzaEw= =OtX8 -----END PGP SIGNATURE-----

2 1

[Dovecot] Semi-OT: Backing up maildir
by Shayne Hardesty 15 May '06

15 May '06

We switched our mail server over from mbox to maildir a few months ago and couldn't be happier - the performance under normal load is incredible. However we now have a problem with backup.. Typically we would run tar on the mail server, sending its output to another server via ssh.. Like this: tar cfp - /home | gzip | ssh other.server (cd /backups && tar xfp -).. I have tried gzipping the stream on the source side, gzipping on the destination, and running without gzip, all three take an amazingly long time to complete (> 14 hours). Ours is a modest server with about 1300 users, about 300GB of mail total. The whole thing sits on hardware RAID-10, so I'm primarily guarding against a MAJOR hardware failure, a config blunder, or a hacker wiping out files. How do you guys back up your maildir? I've considered exporing the maildir with NFS and backing it up from another server.. Any opinions on that? Thanks, Shayne

7 6

[Dovecot] 1.0beta8 won't start: Fatal: Protocol imaps given more than once
by Mike Brudenell 15 May '06

15 May '06

Greetings - I've just built Dovecot 1.0beta8 and find it refuses to start. This under Solaris 10 on an Intel-based Sun system. The error message Dovecot displays (on standard error) in response to /usr/local/sbin/dovecot is Fatal: Protocol imaps given more than once I've checked through my configuration file and the only mention of "imaps" is here: # Protocols we want to be serving: # imap imaps pop3 pop3s protocols = imap imaps The same settings file worked OK with 1.0beta7. I've also tried using the standard dovecot-example.conf that comes with 1.0beta8 which has the "protocols" line commented out and, after adding appropriate settings for "ssl_cert_file" and "ssl_key_file", still have the same problem. I popped a few dubugging i_info() calls into src/master/main.c to try and see what was going on and the output was as follows: Info: set->protocols = >imap imaps< Info: imap: *fd = -1 Info: imaps: *fd = 0 Fatal: Protocol imaps given more than once The first line is displaying the value of the keywords in set->protocols The second and third are within the if/then/else sequence: the first for the "imap" keyword and the second for the "imaps" keyword. Then comes the fatal error, caused by the "fd" variable not being equal to -1 (it is "0" for "imaps") above. Changing the dovecot.conf file to read protocols = imap lets Dovecot start up OK. Changing it to protcols = imaps causes it to fail in the same way as before(!). Seems to be a problem with the initialisation of set->ssl_listen_fd therefore, as this should apparently be -1? Is this likely to be something I've got wrong (wouldn't have thought so as 1.0beta7 is happy with the same config file) or is there a problem in 1.0beta8? Cheers, Mike B-) -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

4 5

[Dovecot] FSF - dovecot
by Matt 14 May '06

14 May '06

Will dovecot always be open FREE source for all? I am currently migrating my www.digipanel.com from Courier to dovecot as I think courier is overly complicated and a pain in the arse to manage all those files. anyways, I have dovecot IMAP working with MySQL auth but reading the Maildir each time takes up to 30 secs to complete. ANy ideas why? Maybe a dns resolve issue? how can I fix..

1 0

[Dovecot] problems with 1.0beta[78] on RHEL3
by alan premselaar 14 May '06

14 May '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been running 0.99.13 on RHEL 3 for over a year now and finally decided to upgrade to the 1.0 series. unfortunately, I only have one RHEL 3 machine which is my production machine. So, while doing all my preliminary testing I was doing so on a FC 3 machine. I got everything to a stage where I felt comfortable doing the upgrade but I'm running into some problems on the RHEL 3 system. if I download the tarball, it compiles without problem. If I download the cvs or the src.rpm then I get autoconf errors complaining about not supporting AC_CONFIG_HEADER but requiring AM_CONFIG_HEADER. it also complains that the installed version of autoconf is too old, although it's the latest package for RHEL 3 (which means it has the same version number as the original installed package but all the updates are back-ported to it, right?) anyways, that's all trivial as the source compiles. the problem I'm running into is this: the quota plugin is returning the following errors in the mail log: May 13 02:02:13 mail dovecot: POP3(real_user): dlopen(/usr/lib/dovecot/pop3/lib01_quota_plugin.so) failed: /usr/lib/dovecot/pop3/lib01_quota_plugin.so: undefined symbol: mount point_get and also: May 13 02:03:03 mail dovecot: IMAP(real_user): quotactl(Q_GETQUOTA, /dev/sdb1) failed: Invalid argument can anyone offer any assistance with this? oh yeah, one last thing. following the wiki, during the upgrade i renamed the .subscription files to subscription in each user's Maildir directory (oh yeah, i'm using maildir format) but, the subscription information wasn't persistant. anything else i need to be aware of related to that? thanks alan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEZMCtE2gsBSKjZHQRAjRVAKCPgSxLQzyJ7lrhCYBSxnVeTJixtgCaA8G5 NtAoCZZWpdetBLGQsA0llrU= =K+09 -----END PGP SIGNATURE-----

2 3

[Dovecot] Problem with dovecot 1.0 make
by Bob Hope 14 May '06

14 May '06

When trying to build dovecot with MySQL support I got the following: /usr/local/mysql/lib/libmysqlclient.a(sha1.o)(.text+0x5c): In function `sha1_result': : multiple definition of `sha1_result' ../lib/liblib.a(sha1.o)(.text+0x880):/root/dovecot-1.0.alpha3/src/lib/sha1.c:233: first defined here /usr/lib/gcc-lib/i486-slackware-linux/3.3.4/../../../../i486-slackware-linux/bin/ld: Warning: size of symbol `sha1_result' changed from 158 in ../lib/liblib.a(sha1.o) to 126 in /usr/local/mysql/lib/libmysqlclient.a(sha1.o) collect2: ld returned 1 exit status make[3]: *** [dovecot-auth] Error 1 make[3]: Leaving directory `/root/dovecot-1.0.alpha3/src/auth' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/root/dovecot-1.0.alpha3/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/root/dovecot-1.0.alpha3' make: *** [all] Error 2 Any thoughts? Regards, Savage

5 10

[Dovecot] --enable-debug in 1.0beta8
by Mircea Nistor 13 May '06

13 May '06

It looks like there is an error in calling check_nuls for DEBUG In src/lib/ mempool-alloconly.c on line 85 you have check_nuls(block->prev, 0), which I think it should be check_nuls(block->prev); Can some developer confirm that? Thank you [root]#./configure --prefix=/opt/dovecot --enable-debug Install prefix ...................... : /opt/dovecot File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : dnotify Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword (modules) Building with password lookup modules : passwd passwd-file shadow pam checkpassword (modules) Building with SQL drivers ............: . if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/kerberos/include -MT mempool.o -MD -MP -MF ".deps/mempool.Tpo" -c -o mempool.o mempool.c; \ then mv -f ".deps/mempool.Tpo" ".deps/mempool.Po"; else rm -f ".deps/mempool.Tpo"; exit 1; fi if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/kerberos/include -MT mempool-alloconly.o -MD -MP -MF ".deps/mempool-alloconly.Tpo" -c -o mempool-alloconly.o mempool-alloconly.c; \ then mv -f ".deps/mempool-alloconly.Tpo" ".deps/mempool-alloconly.Po"; else rm -f ".deps/mempool-alloconly.Tpo"; exit 1; fi mempool-alloconly.c: In function `check_nuls': mempool-alloconly.c:85: too many arguments to function `check_nuls' make[3]: *** [mempool-alloconly.o] Error 1 make[3]: Leaving directory `/usr/src/dovecot-1.0.beta8/src/lib' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/src/dovecot-1.0.beta8/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/usr/src/dovecot-1.0.beta8' make: *** [all] Error 2

2 3

[Dovecot] SASL bind for LDAP
by Geert Jansen 13 May '06

13 May '06

Hi, would it be possible to add support for SASL binds to dovecot's LDAP userdb/passdb? This would be a nice feature as it would allow the use of SASL EXTERNAL binds to a local LDAP server, thereby removing the need for storing clear-text passwords in configuration files. Regards, Geert

2 4

[Dovecot] Freebsd 6.1 dovecot beta7: nss_dns.so1 not found
by pitun 13 May '06

13 May '06

Hello, FreeBSD 6.1 RELACE dovecot beta7 when enable: mail_plugins = quota imap_quota i've got: May 13 07:37:13 ranos dovecot: IMAP(pitun): module /usr/local/lib/dovecot/imap/lib01_quota_plugin.so: dlsym(quota_plugin_init) failed: Shared object "nss_dns.so.1" not found, required by "imap" May 13 07:37:13 ranos dovecot: child 9942 (imap) returned error 89 any help? -- PJ ---------------------------------------------------------------------- Poznaj Stefana! Zmien komunikator! >>> http://link.interia.pl/f1924

1 0