- dovecot - dovecot.org

[Dovecot] 1.0-test57 LDAP dovecot-auth SIGABRT
by Thomas Hummel 13 Dec '04

13 Dec '04

Hi, I'm experiencing the following problem when runnig dovecot-1.0-test set up to authenticate users against openldap, while the corresponding setup with dovecot-0.99.11 works fine : . my platform : FreeBSD 5.3-RELEASE-p1 . dovecot version : dovecot-1.0-test57 . openldap version : openldap-2.1.27 - Description : When I talk IMAP to the dovecot server, I can connect on port 143 and receive the 'Dovecot ready' greeting message, but when I issue the command 'x LOGIN username userpass', the following message is written to the log file : ---------------------------------------------------------------------- 'dovecot: Dec 13 16:40:26 Error: auth(default): dovecot-auth in free(): error: chunk is already free dovecot: Dec 13 16:40:26 Error: child 17260 (auth) killed with signal 6' ---------------------------------------------------------------------- - here's a gdb backtrace of the dovecot-auth running process as it happens : (gdb) continue Continuing. Program received signal SIGABRT, Aborted. 0x1826e1d7 in kill () from /lib/libc.so.5 (gdb) bt full #0 0x1826e1d7 in kill () from /lib/libc.so.5 No symbol table info available. #1 0x1826327e in raise () from /lib/libc.so.5 No symbol table info available. #2 0x182d5627 in abort () from /lib/libc.so.5 No symbol table info available. #3 0x18279389 in ldexp () from /lib/libc.so.5 No symbol table info available. #4 0x182793cd in ldexp () from /lib/libc.so.5 No symbol table info available. #5 0x1827a2c1 in ldexp () from /lib/libc.so.5 No symbol table info available. #6 0x1827a513 in ldexp () from /lib/libc.so.5 No symbol table info available. #7 0x1827a644 in free () from /lib/libc.so.5 No symbol table info available. #8 0x080502c7 in ldap_input (context=0x2c) at db-ldap.c:172 request = (struct ldap_request *) 0x806a580 timeout = {tv_sec = 0, tv_usec = 0} res = (LDAPMessage *) 0x806a5a0 ret = 0 msgid = 405650150 #9 0x0805cea8 in io_loop_handler_run (ioloop=0x8075340) at ioloop-poll.c:184 data = (struct ioloop_handler_data *) 0x806a160 pollfd = (struct pollfd *) 0x2 tv = {tv_sec = 0, tv_usec = 268537} io = (struct io *) 0x806a300 t_id = 2 msecs = 0 ret = 0 call = 1 #10 0x0805c8e5 in io_loop_run (ioloop=0x8075340) at ioloop.c:218 No locals. #11 0x08051174 in main (argc=1, argv=0x0) at main.c:296 master = (struct auth_master_connection *) 0x8075500 i = 1 env = 0x4598 <Error reading address 0x4598: Bad address> pid = 0 master_p = (struct auth_master_connection **) 0x8075400 size = 1 (gdb) detach Detaching from program: /usr/local/dovecot-1.0-test57/libexec/dovecot/dovecot-auth, process 17804 (gdb) - here are the configure options I passed when compiling openldap and dovecot : - dovecot ./configure --prefix=/usr/local/dovecot-1.0-test57 --with-ldap --with-cyrus-sasl2 --with-rawlog --with-ssl=openssl --with-storages=mbox,maildir - openldap ./configure --prefix=/usr/local/openldap-2.1.27 --with-threads --with-tls=openssl --enable-dynamic --with-cyrus-sasl --enable-ldbm --enable-crypt --enable-lmpasswd --enable-ldap --enable-meta --enable-rewrite --enable-null --enable-monitor --enable-bdb --with-ldbm-api=berkeley --enable-spasswd --enable-wrappers -- Thomas Hummel <hummel(a)pasteur.fr>

1 0

[Dovecot] Problem with LDAP and Dovecot
by Peter Clark 13 Dec '04

13 Dec '04

I am trying to set up Dovecot so that it uses LDAP, but I keep getting this error message in /var/log/syslog: Dec 12 03:38:17 mydomain dovecot-auth: LDAP: ldap_search() failed (filter user_filter = (mail=user(a)mydomain.tld)) Bad search filter Relevant configuration files: /etc/dovecot-ldap.conf: hosts = localhost dn = cn=dovecot,ou=sysAccounts,dc=mydomain,dc=tld dnpass = password ldap_version = 3 base = ou=mailAccounts,dc=mydomain,dc=tld deref = never scope = subtree user_attrs = mail,,,,, user_filter = (mail=%u) pass_attrs = mail,userPassword pass_filter = user_filter = (mail=%u) default_pass_scheme = CRYPT user_global_uid = 5000 user_global_gid = 5000 /etc/dovecot.conf: protocols = imap imaps pop3s imap_listen = 127.0.0.1 imaps_listen = * pop3s_listen = * ssl_cert_file = /etc/ssl/mydomain.tld/Cert.pem ssl_key_file = /etc/ssl/mydomain.tld/PrivateKey.pem disable_plaintext_auth = yes login = imap login_user = dovecot login = pop3 verbose_proctitle = yes first_valid_uid = 5000 last_valid_uid = 5000 first_valid_gid = 5000 last_valid_gid = 5000 mail_extra_groups = mail valid_chroot_dirs = /var/mail/virtualmail default_mail_env = maildir:/var/mail/virtualmail/%n/Maildir auth = default auth_mechanisms = plain auth_userdb = ldap /etc/dovecot-ldap.conf auth_passdb = ldap /etc/dovecot-ldap.conf auth_user = dovecot auth_verbose = yes auth_debug = no In /etc/ldap/slapd.conf: access to attribute=userPassword by dn="cn=admin,dc=mydomain,dc=tld" write by dn="cn=dovecot,ou=sysAccounts,dc=mydomain,dc=tld" read by anonymous auth by self write by * none Output of 'slapcat | grep dovecot': dn: cn=dovecot,ou=sysAccounts,dc=mydomain,dc=tld cn: dovecot sn: dovecot I've even tried changing the dn to admin, but I still get the same error. What am I doing wrong? :Peter

3 3

[Dovecot] Ximian Evolution Issue
by Adam Todorski 13 Dec '04

13 Dec '04

Hi This may be a problem with Dovecot and it may be a problem with Evolution, I'm trying to narrow it down. I'm using Evolution 2.0.2 on Fedora Core 3 x86_64 to connect over SSL to Dovecot 0.99.11 on Debian testing (Sarge) on an i686 using Maildir for the mail store. Specifically, when I open a folder with more than a few dozen messages in it I get the following error (with the carroted fields populated): Error while Opening folder imap://<username>@<mailserver>/<folder>. Incomplete server response: no information provided for message <message number>. Thanks for any leads on this! Adam

2 1

[Dovecot] Corrupted index files in 0.99.12.1
by Brady Wetherington 12 Dec '04

12 Dec '04

Hi - I've got two copies of Dovecot installed on my server (don't worry, talking to two different sockets for authentication, with two different sets of filenames using options in configure), and I found at least one instance where the index file for my INBOX (on my own account, in fact) got corrupted. So badly so that when I connected via IMAP and selected my INBOX, it said there were no messages there - but if I logged in via sqWebMail (ugh), it said all my messages were there. Note that it didn't give the 'NO can't use index file' message. I moved the .INBOX directory to another filename, and then re-logged in and found that all was well (it regenerated the index files correctly). Would my old, corrupted index files be of any use to anyone? I still have that directory sitting somewhere. Is it perhaps 'bad' to run two copies of Dovecot? I don't know exactly what I was doing, but I can easily imagine accessing one of my Dovecots using my webmail setup, and one using straight IMAP - is that an unsupported setup? I'd also be happy to discuss why I'm using two copies of Dovecot, but that's a whole other discussion :)

2 1

Re: [Dovecot] Timeouts with outlook express
by Daniel 11 Dec '04

11 Dec '04

Hi Yes I have all the outlook workarounds enabled. Interestingly the progress bar dose not move until the whole email has been downloaded. Normally this moves bit by bit as the mail downloads. But as I said the email is downloading, there is network traffic. Any ideas? Regards Daniel On Thu, 2004-12-09 at 07:45 +0000, Andrew Hutchings wrote: > Hi Daniel, > > Have you tried turning on th outlook-no-nuls workaround in dovecot? > > Regards > Andrew > > On Thu, 2004-12-09 at 15:22 +0800, Daniel wrote: > > Hi > > > > I am using Dovecot 0.99.12.1 (just upgraded) on a site with about 1500 > > mailboxes. One thing I have noticed is when the client outlook express > > is receiving a large mail via pop3 it gets a time out. There is traffic. > > If you click on the "wait" button in the dialogue the mail continues to > > download. > > > > This seem to relate to the "Server Timeouts" setting under mail account > > Properties/advance. If this setting is set higher the dialogue come only > > after this time has passed. > > > > If the mail take a long time to download if say is very big the user may > > have to click "Wait" a number of time even if the time out setting is > > set to the largest amount. > > > > It funny because the mail is downloading, So the pop3 server has not > > stopped responding as outlook express say it has. Strange. > > > > What is happening here? and is there a work around for it. Do I have a > > setting wrong. > > > > Regards > > Daniel ROwe > > > >

2 1

[Dovecot] SQL + AUTH command bug?
by Andrew Hutchings 10 Dec '04

10 Dec '04

Hi, While investigating the problem with Thunderbird auths I found the following happening: Escape character is '^]'. +OK Dovecot ready. CAPA +OK CAPA TOP USER UIDL RESP-CODES PIPELINING SASL PLAIN . AUTH PLAIN + + + -ERR Authentication failed. This is what is happening during a Thunderbird connection, when each '+' happens dovecot does an sql query on the sql server for user '?'. This was asserting mech.c until Timo did the bugfix last night. I currently have dovecot authing via 3 separate sql password tables as it is a migration from 3 old servers. If you try any other auth method (which shouldn't work anyway in my case) it doesn't talk to the SQL servers and just comes back as: -ERR Authentication failed. Regards Andrew -- Andrew Hutchings Systems Operator / Developer / Linux Guru Netserve Consultants Ltd. http://www.domaincity.co.uk/

5 10

Re: [Dovecot] When the 1.0 release is planed?
by Kim Culhan 10 Dec '04

10 Dec '04

On Thu, December 9, 2004 15:07, Andrew Velikoredchanin said: > Wouter Van Hemel: > >>> >>> What part of 1.0-test now not fully tested? >>> >>> >>> >> >> For me, the latest test releases have been pretty stable. But if you're >> not going to offer imap, you might as well run a simple pop server such as popa3d >> (http://www.openwall.com/popa3d/) It's quite secure AFAIK -- >> at least, it's written by Solar Designer and uses a multiple-fork model. > > No. popa3d not support mysql userdb. :( > > >> But it probably would help dovecot if you would give the test releases a >> try, the last bugs (if any) are hardest to find. That way, you would have a stable dovecot >> sooner. > > Yes, of couse. FWIW, dovecot CVS (development version) has been running here for several weeks with pop3s users having no problems we can find. -kim' __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

4 4

[Dovecot] Exim4 authentication patch
by Andrey Panin 10 Dec '04

10 Dec '04

Hello all, attached patch makes possible to use dovecot as an authentication backend for Exim 4. Reasons beyond this patch are simple: exim's authenticators require use of plaintext passwords and NTLM code in exim is quite outdated and hairy. Patch generated against Exim 4.43, but should apply to earlier versions too. Patch adds new 'dovecot' authenticator, which can be used as such: ntlm: driver = dovecot public_name = NTLM server_socket = /var/authentication_socket_path server_set_id = $1 cram: driver = dovecot public_name = CRAM-MD5 ... Authenticator has only one parameter 'server_socket', it's value used as path for dovecot's authentication socket. Authenticator can be used for server authentication only. Hope it will be useful for someone. Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke(a)donpac.ru | PGP key: wwwkeys.pgp.net

2 1

[Dovecot] mech-plain patch
by Andrew Hutchings 10 Dec '04

10 Dec '04

Hi Guys, Unoffical patch for mech-plain so the AUTH PLAIN command works with SQL (and possibly other DBs). Thunderbird should work again after this. --- mech-plain.c 2004-12-10 01:56:51.065987304 +0000 +++ mech-plain.c 2004-12-10 01:53:16.974534152 +0000 @@ -27,7 +27,10 @@ authid = (const char *) data; authenid = NULL; pass = ""; - count = 0; + if (data_size == 0) + return; + + count = 0; for (i = 0; i < data_size; i++) { if (data[i] == '\0') { if (++count == 1) Regards Andrew -- Andrew Hutchings Systems Operator / Developer / Linux Guru Netserve Consultants Ltd. http://www.domaincity.co.uk/

1 1

[Dovecot] Help needed with debugging auth command
by Andrew Hutchings 10 Dec '04

10 Dec '04

Hi guys, OK, so I am trying to find out why the POP3 AUTH / IMAP AUTHORIZE command is not doing what it is supposed to (not sure if it just for me or what). I am getting as far as: sasl-server.c - line 123 - mech = auth_client_find_mech(auth_client, mech_name); auth_client_find_mech is in auth-client.c which is where I am getting lost. My guess is we are not returning back to sasl-server.c since we don't get an SASL auth or an 'Unsupported' error. If I try 'PLAIN' as the auth method as the parameter then it tries to login with no user or pass and fails. If I try anything else (I have configed to accept plain only) I get 'Authorization failed' and it doesn't even try to lookup the user/pass. Regards Andrew -- Andrew Hutchings Systems Operator / Developer / Linux Guru Netserve Consultants Ltd. http://www.domaincity.co.uk/

1 1