- dovecot - dovecot.org

[Dovecot] weakness in hash salt generation
by Joshua Goodall 27 Jul '04

27 Jul '04

Dovecot has routines for password hashing; two of these, crypt_generate and md5_generate, both use sizeof(salt_chars) when reducing a random string to salt. I became suspicious when I noted that all salts generated are composed only of "./01". Unfortunately salt_char is declared static const char * rather than static const char [], and so sizeof(salt_chars) is the size of a pointer. Recommend: diff -u -r1.8 password-scheme.c --- password-scheme.c 30 May 2004 03:57:15 -0000 1.8 +++ password-scheme.c 23 Jul 2004 17:05:36 -0000 @@ -15,7 +15,7 @@ # include <openssl/sha.h> #endif -static const char *salt_chars = +static const char salt_chars[] = "./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"; static buffer_t *schemes_buf; joshua. -- Joshua Goodall "as modern as tomorrow afternoon" joshua(a)roughtrade.net - FW109

4 8

[Dovecot] bug in LSUB command
by Geo Carncross 27 Jul '04

27 Jul '04

RFC 2060 section 7.2.2 and 7.2.3 says the "The LIST response occurs as a result of a LIST command." and "The LSUB response occurs as a result of an LSUB command." Dovecot presently returns the LIST response for the LSUB command. -- Geo Carncross <geocar(a)internetconnection.net> Internet Connection

2 1

[Dovecot] Local + virtual users using Dovecot 0.99.10.6 (from debian testing)
by Alexander 26 Jul '04

26 Jul '04

Hi, I have configured the MTA (exim4) to put the messages for my local users at /var/mail. If the user does not exist as true unix user, it looks at a postgresql database and if the user exists there, it delivers the message at /var/mail/virtual Example: User fred is a unix user, and peter is a virtual user. If i send a mail to fred(a)mydomain.org, the message is stored at /var/mail/fred (im using exim's append for transport). If i send a mail to peter(a)mydomain.org, the message is stored at /var/mail/virtual/peter With the defaul configuration from debian, dovecot is capable serving the local users mailbox (and its working at the moment). Im using only IMAP (i see there is an option for pop3, but im not interested in that atm). I think i know how to change the config file to serve only virtual users using the postgres module. Can anyone tell me how to serve them both at the same time? As I understand it, what i need is to make dovecot try to validate a user againt the local user database (its using pam for that at the moment), and if it fail, try with postres. But i dont know how (or if its possible at all). Thanks.

2 1

[Dovecot] file index-mail-headers.c: line 408 (index_mail_get_header): assertion failed: (ret != 0)
by Dmitry Khrustalev 26 Jul '04

26 Jul '04

FreeBSD 4.10-RELEASE, dovecot-1.0-test29 crashes on sort and thread commands: Jul 25 15:12:08 owl dovecot: imap-login: Login: dima [81.19.64.101] Jul 25 15:12:26 owl dovecot: IMAP(dima): file index-mail-headers.c: line 408 (index_mail_get_header): assertion failed: (ret != 0) Jul 25 15:12:26 owl dovecot: child 20384 (imap) killed with signal 6 (gdb) bt #0 0x281e0fc4 in kill () from /usr/lib/libc.so.4 #1 0x2822293e in abort () from /usr/lib/libc.so.4 #2 0x8086c73 in i_internal_panic_handler ( fmt=0x8095720 "file %s: line %d (%s): assertion failed: (%s)", args=0xbfbff8cc "\tW\t\b\230\001") at failures.c:374 #3 0x8086827 in i_panic ( format=0x8095720 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:173 #4 0x806d0f9 in index_mail_get_header (_mail=0x80bf41c, field=0x80955ce "Date") at index-mail-headers.c:408 #5 0x806b8fd in index_mail_get_date (_mail=0x80bf41c, timezone=0x0) at index-mail.c:218 #6 0x8059b1c in mail_sort_input (ctx=0x80a1150, mail=0x80bf41c) at imap-sort.c:420 #7 0x80596ae in imap_sort (client=0x80ad180, charset=0x80b1180 "US-ASCII", args=0x80c8010, sort_program=0x80a10d0) at imap-sort.c:252 #8 0x8054ec8 in cmd_sort (client=0x80ad180) at cmd-sort.c:123 #9 0x80560ae in client_handle_input (client=0x80ad180) at client.c:318 #10 0x805614d in _client_input (context=0x80ad180) at client.c:354 #11 0x808a852 in io_loop_handler_run (ioloop=0x80ab040) at ioloop-poll.c:193 #12 0x808a245 in io_loop_run (ioloop=0x80ab040) at ioloop.c:248 #13 0x805bc5b in main (argc=1, argv=0xbfbffbb0, envp=0xbfbffbb8) at main.c:217 (gdb)

3 2

[Dovecot] dovecot.conf: default_mail_env
by Sebastien 26 Jul '04

26 Jul '04

I just installed Dovecot on Debian and everyting seems to be working fine except for the fact that it can't seem to find my mails when I log in. All my mails are stored in the file ~/mail/Inbox. In the dovecot.conf file I put: default_mail_env = mbox:~/mail/:INBOX=/var/mail/%u and it's not working. What is the part: mbox:~/mail/ for ? and what is the part: INBOX=/var/mail/%u for ? I read the documentation but I don't understand. Can anyone help me ?

3 2

[Dovecot] 1.0-test30
by Timo Sirainen 26 Jul '04

26 Jul '04

http://dovecot.org/test/ Mostly just fixes. Fixed some crashes with cache file. Fixed "randomly" occuring mbox parsing problem. Namespace handling was pretty much rewritten. Non-hidden namespaces will also show up in LIST replies now, so if you have eg.: namespace private { prefix = mboxes location = mbox:~/mail } Then clients would show "mboxes" as normal folder. Subscription file handling also changed and will probably change more.. Currently subscription file is specific to the namespace where the mailboxes are. So in above example subscribing to "mboxes/foo" would use ~/mail/.subscriptions file rather than the default. I'm not exactly sure if this is a good idea or not.. It probably needs to be configurable with some subscriptions = yes|no per-namespace setting.

1 0

[Dovecot] imap folders
by Roger D. Vargas 26 Jul '04

26 Jul '04

Until last week I was using old imap daemon, then i installed FEdora Core 2 and it was replaced by dovecot or cyrus. I decided to use dovecot, and managed to configure it. But I still have a problem, the users imap folders (stored in their home dirs) arent visible, only the inbox. How can I recover those folders? -- Roger Durañona Vargas Linux user #180787 A cada momento nos rodea lo desconocido. Es alli donde uno tiene que buscar el conocimiento. Paul Muad'Dib Atreides. Children of Dune

2 1

[Dovecot] Some users cannot read mail: assertion failed
by Robert Munteanu 26 Jul '04

26 Jul '04

Hi all! I am a recent user of dovecot. First of all, the migration from UW-IMAP was definitely worth it. But now I've run into some troubles. Two of my users complain that they can't read their Inboxes, but other folders work fine. The error message I get in the logs look like: lynx imap(gheorghe.bancos): file buffer.c: line 357 (buffer_set_start_pos): assertion failed: (abs_pos <= I_MIN(buf->used, buf->limit)) lynx dovecot: child 1823 (imap) killed with signal 6 The problems have been reported with both MS Outlook and SquirrelMail. What causes this problem and how can I fix it? Thank you, -- Robert Munteanu _______________________________________________________________ Connex scaneaza automat toate mesajele impotriva virusilor folosind Trend Micro VirusWall. Connex automatically scans all messages for viruses using Trend Micro VirusWall. _______________________________________________________________ Nota: Este posibil ca produsul Trend Micro VirusWall sa nu detecteze toti virusii noi sau toate variantele lor. Va rugam sa luati in considerare ca exista un risc de fiecare data cind deschideti fisiere atasate si ca MobiFon nu este responsabila pentru orice prejudiciu cauzat de decizia dvs. Disclaimer: It is possible that the Trend Micro VirusWall product may not be able to detect all new viruses and variants. Please be aware that there is a risk involved whenever opening e-mail attachments to your computer and that MobiFon is not responsible for any damages caused by your decision to do so.

2 6

[Dovecot] paypal link for donations to dovecot webpage?
by security officer 26 Jul '04

26 Jul '04

Paypal link for donations to dovecot webpage? Really good sofware ;) -- Eero

1 0

[Dovecot] Passwords in passwd-file
by Andrew Boothman 25 Jul '04

25 Jul '04

Hi! I'm trying to use MD5 hashed password in a passwd-file (not the system one). I've set auth_userdb = passwd-file /my/passwd/file auth_passdb = passwd-file /my/passwd/file auth.txt additionally describes a syntax like: auth_userdb = passwd-file[34] /my/passwd/file to denote MD5 passwords in the file, but I've been unable to get any combination of using []'s after passwd-file to work. Dovecot complains: "Unknown userdb type". How is it best to store passwords in a passwd-file using Dovecot 0.99.10.7? Ideally I want to use PHP to generate the passwords being entered into the file. Thanks for any pointers! Andrew

2 2