- dovecot - dovecot.org

[Dovecot] dovecot and ldaps://
by David Coppa 31 Dec '05

31 Dec '05

Hi all, I've managed to get dovecot running with ldaps (ssl over port 636, not starttls). Btw, it's working right only if i specify "TLSVerifyClient never" in my slapd.conf. With any other parameter (like "TLSVerifyClient demand"), the bind fails with: connection_get(12) connection_get(12): got connid=0 connection_read(12): checking for input on id=0 TLS trace: SSL_accept:before/accept initialization TLS trace: SSL_accept:SSLv3 read client hello A TLS trace: SSL_accept:SSLv3 write server hello A TLS trace: SSL_accept:SSLv3 write certificate A TLS trace: SSL_accept:SSLv3 write certificate request A TLS trace: SSL_accept:SSLv3 flush data TLS trace: SSL_accept:error in SSLv3 read client certificate A TLS trace: SSL_accept:error in SSLv3 read client certificate A connection_get(12) connection_get(12): got connid=0 connection_read(12): checking for input on id=0 TLS trace: SSL3 alert write:fatal:handshake failure TLS trace: SSL_accept:error in SSLv3 read client certificate B TLS: can't accept. TLS: error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate +/usr/src/lib/libssl/src/ssl/s3_srvr.c:2004 connection_read(12): TLS accept error error=-1 id=0, closing connection_closing: readying conn=0 sd=12 for close connection_close: conn=0 sd=12 Is there a way to specify, in the dovecot-ldap.conf file, where to look for the client certificate and key files? Or maybe make dovecot parse the ldaprc file under /etc? Best Regards, David

3 2

[Dovecot] How to disable keywords?
by Sebastjan Trepca 31 Dec '05

31 Dec '05

Hi, is there a quick way to disable keyword feature in dovecot? Thanks, Sebastjan

2 4

[Dovecot] Compile problem on FreeBSD 6.0-STABLE
by Kim Culhan 30 Dec '05

30 Dec '05

Trying to update to dovecot-1.0.alpha5 and seeing this at compile time: mech-gssapi.o mech-gssapi.c; then mv -f ".deps/mech-gssapi.Tpo" ".deps/mech-gssapi.Po"; else rm -f ".deps/mech-gssapi.Tpo"; exit 1; fi mech-gssapi.c:30:27: gssapi/gssapi.h: No such file or directory mech-gssapi.c:42: error: syntax error before "gss_ctx_id_t" mech-gssapi.c:51: error: syntax error before "gss_name_t" mech-gssapi.c:58: error: syntax error before "OM_uint32" [snipped] mech-gssapi.c:387: error: structure has no member named `authz_name' *** Error code 1 Stop in /usr/local/src/dovecot/dovecot-1.0.alpha5/src/auth. *** Error code 1 Stop in /usr/local/src/dovecot/dovecot-1.0.alpha5/src. *** Error code 1 Any help is greatly appreciated -kim -- w8hdkim(a)gmail.com

3 3

[Dovecot] dovecot+mysql login problem
by Mircea Stefan 30 Dec '05

30 Dec '05

Hi, This is my MySQL table: <snip> mysql> select username, password from mailbox; +----------+----------+ | username | password | +----------+----------+ | mircea | stefan | +----------+----------+ 1 row in set (0.00 sec) </snip> When I try to login (pop3) I recive "-ERR Authentication failed." <snip> +OK Dovecot ready. user mircea +OK pass stefan -ERR Authentication failed. </snip> maillog: <snip> Dec 27 20:54:38 pluto dovecot: auth-worker(default): sql(mircea,10.13.15.2): query: SELECT password FROM mailbox WHERE username = 'mircea' Dec 27 20:54:38 pluto dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=POP3^Ilip=10.13.15.1^Irip=10.13.15.2^Iresp=AG1pcmNlYQBzdGVmYW4= Dec 27 20:54:39 pluto dovecot: auth(default): client out: FAIL^I1^Iuser=mircea </snip> I started a mysql client and ran: <snip> mysql> SELECT password FROM mailbox WHERE username = 'mircea'; +----------+ | password | +----------+ | stefan | +----------+ 1 row in set (0.00 sec) </snip> What's the problem? Thank you and Happy Holidays!

2 1

[Dovecot] new user setup trouble
by Will Ling 30 Dec '05

30 Dec '05

Hi again, I am still trying to run Dovecot but persistently get the errors Corrupted transaction log file and Lost transaction log file. I cannot find any reference to this problem that will help, I have checked the file permissions and locks and cannot see any obvious cause. Could somebody please advise what I might be doing wrong or direct me to somewhere else that I can ask for or find help. Below is some information about the problem. The log file show the following when I attempt to log in: Info: Dovecot v1.0.alpha5 starting up Info: imap(will): Effective uid=501, gid=501 Info: imap(will): mbox: data=/home/will/mail/:INBOX=/var/spool/mail/will Info: imap(will): mbox: root=/home/will/mail, index=/home/will/mail, inbox=/var/spool/mail/will Info: imap-login: Login: user=<will>, method=PLAIN, rip=10.0.128.58, lip=10.0.128.55 Error: imap(will): Corrupted transaction log file /home /will/mail/.imap/INBOX/dovecot.index.log: record size too small (type=0x40, offset=24, size=0) Error: imap(will): /home/will/mail/. imap/INBOX/dovecot.index.log seq 2 Error: imap(will): Lost transaction log file /home/will/mail/. imap/INBOX/dovecot.index.log seq 2 My config file contains the following un commented lines: protocols = imap ssl_disable = yes disable_plaintext_auth = no log_path = /var/log/dovecot.log info_log_path = /var/log/dovecot.log mail_extra_groups = mail mail_debug = yes default_mail_env = mbox:~/mail/:INBOX=/var/spool/mail/%u protocol imap { } protocol pop3 { } auth_verbose = yes auth default { mechanisms = plain passdb shadow { } userdb passwd { } } My file permissions are: /var/spool/mail/ -rwxrwx--- will mail 2797 Dec 29 20:37 will /home/will/mail drwx------ will will 4096 Dec 29 20:47 .imap/ -rw------- will will 19 Dec 29 20:47 .subscriptions /home/will/mail/.imap drwx------ will will 4096 Dec 29 21:07 INBOX/ /home/will/mail/.imap/INBOX -rwxrwxrwx will will 120 Dec 28 20:47 dovecot.index -rw------- will will 376 Dec 29 21:07 dovecot.index.log -rw------- will will 376 Dec 29 21:04 dovecot.index.log.2 The .imap and everything in it is created when I try to login, the three dovecot.index are all completely empty. If any more information is required, please let me know. Regards, Will -- Will Ling

2 1

[Dovecot] Dovecot index cache regeneration
by John Newman 30 Dec '05

30 Dec '05

Hi, We've been using dovecot in the lab now for quite a while and really like the results we're seeing. Underlying dovecot we're using maildir mailboxes. We have the need to manually remove maildir files from time to time. That is, by hand (we'll, actually by script) but not via imap or pop. Dues to dovecot's index caching (which I might add, we love most of the time) imap clients still continue to display the message once they're gone (as we'd expect). However, in this instance it's not what we're after. So my question is, what is the "dovecot recommended" way to force the index cache to regenerate. We really don't want to delete the entire index cache for a particular mailbox as larger mailboxes will then need to unnecessarily regenerate indices on unaffected messages. Many thanks for any tips you can provide. John.

2 1

[Dovecot] dovecot INSTALL
by Tom Lee 30 Dec '05

30 Dec '05

Hello, I just tried dovecot-stable-20051206.tar.gz. It takes me one additional day to get it work. >From INSTALL file, it failed to miss the following installation steps: 1) needs to create the file /etc/pam.d/dovecot 2) needs to create the directory /etc/ssl/certs/ and /etc/ssl/private/, configure doc/dovecot-openssl.cnf, chmod +x doc/mkcerts.sh doc/mkcerts.sh Not sure why it is not in the the file INSTALL. For pop3 client configuration, I wonder if it is OK for me to use: #outlook-no-nuls: # Outlook and Outlook Express hang if mails contain NUL characters. # This setting replaces them with 0x80 character. # oe-ns-eoh: # Outlook Express and Netscape Mail breaks if end of headers-line is # missing. This option simply sends it if it's missing. pop3_client_workarounds = outlook-no-nuls, oe-ns-eoh or dovecot can only allow one such as: pop3_client_workarounds = outlook-no-nuls Thanks. Tom

2 1

[Dovecot] Dovecot - struct dqblk' has no member named 'dqb_curblocks
by Bob Gustafson 30 Dec '05

30 Dec '05

On, Fedora4 This is against the latest cvs update This was encountered during make, after doing ./autogen.sh ./configure --without-lda make gcc -DHAVE_CONFIG_H -I. -I. -I../../.. -I../../../src/lib -I../../../src/lib-dict -I../../../src/lib-mail -I../../../src/lib-storage -I/usr/local/ssl/include -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -MT quota-fs.lo -MD -MP -MF .deps/quota-fs.Tpo -c quota-fs.c -fPIC -DPIC -o .libs/quota-fs.o quota-fs.c: In function 'fs_quota_get_resource': quota-fs.c:208: error: 'struct dqblk' has no member named 'dqb_curblocks' make[4]: *** [quota-fs.lo] Error 1 make[4]: Leaving directory `/usr/local/src/dovecot/cvs/dovecot/src/plugins/quota'

2 2

[Dovecot] out of memory on dovecot alpha5
by Pavel Volkovitskiy 30 Dec '05

30 Dec '05

Hello Once a day i have these errors in doveecot.log: =========================================== dovecot: Dec 16 14:06:04 Error: auth-worker(default): .Out of memory (Needed 52 bytes) dovecot: Dec 16 14:06:04 Error: auth-worker(default): sql(login,<ip>): Password query failed: MySQL client ran out of memory dovecot: Dec 16 14:06:06 Info: imap-login: Disconnected: user=<login>, method=PLAIN, rip=<ip>, lip=<ip2> dovecot: Dec 16 14:06:06 Error: auth-worker(default): pool_system_malloc(): Out of memory dovecot: Dec 16 14:06:06 Error: child 23022 (auth-worker) returned error 83 (Out of memory) ============================================ And after that nobody can login I do /etc/init.d/dovecot restart and then it's working for a day Before upgrade to alpha5 i was used 0.99.x series without eny errros on this server What can i do to debug this? -- Pavel

3 3

[Dovecot] LDAP authenticated bind support
by J.M. Maurer 30 Dec '05

30 Dec '05

Recently at Better.be we implemented LDAP authenticated bind support for dovecot. A patch against CVS HEAD is attached. I have not tested it against all possible configurations one can use, but the basic operation seems to be right. As documented in the patch, it adds one new option to the dovecot-ldap.conf configuration file: # Set "auth_bind" to "yes" if you want to use "authenticated binds" # as a login validation mechanism. NOTE: the pass_attrs option # will (naturally) be ignored if you enable this auth_bind = yes Authenticated bind support is implemented asynchronously. This involves 2 asynchronous calls: the first being 'ldap_search' to find the dn to bind against and the second being the actual 'ldap_bind' call. I'd love to hear some feedback on this. Regards, Marc Maurer Better.be B.V.

3 6