- dovecot - dovecot.org

[Dovecot] Authentification with PostgreSQL
by Felix.Schwarz＠web.de 22 Jul '04

22 Jul '04

Hi all, I found Dag Wieers' Fedora Core 2 rpm on http://dag.wieers.com/packages/dovecot/ and installed it. Now dovecot-auth isn't complaining anymore about an unknown userdb type but I can't get authentication working. /etc/dovecot.conf (...) # Authentication process name. auth = default # plain digest-md5 anonymous auth_mechanisms = plain auth_userdb = pgsql /etc/dovecot-pgsql.conf auth_userdb = pgsql /etc/dovecot-pgsql.conf auth_user = root auth_verbose = yes (...) /etc/dovecot-pgsql.conf connect = host=localhost dbname=xams-dovecot user=dovecot password=hallo default_pass_scheme = PLAIN password_query = SELECT password FROM users WHERE username = '%u' user_query = SELECT home, uid, gid FROM users WHERE username = '%u' If I try to login over imap (no ssl) with Mozilla Mail, authentification will always fail (username: felix(a)schwarz-online.org, password: "hallo"). /var/log/syslog Jul 22 15:48:47 steinchen postgres[2057]: [30-1] DEBUG: forked new backend, pid=2198 socket=10 Jul 22 15:48:47 steinchen postgres[2198]: [31-1] DEBUG: Passwortpaket erhalten Jul 22 15:48:47 steinchen postgres[2198]: [32-1] LOG: Verbindung authorisiert: Benutzer=dovecot Datenbank=xams-dovecot (...) Jul 22 15:51:15 steinchen dovecot(pam_unix)[2210]: check pass; user unknown Jul 22 15:51:15 steinchen dovecot(pam_unix)[2210]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= /var/log/dovecot.log dovecot: Jul 22 15:48:46 Info: Dovecot starting up dovecot-auth: Jul 22 15:51:18 Info: PAM: pam_authenticate(felix(a)schwarz-online.org) failed: Authentication failure $ psql -d xams-dovecot dovecot xams-dovecot-> SELECT password FROM users WHERE username = 'felix(a)schwarz-online.org'; password ---------- hallo xams-dovecot=> SELECT home, uid, gid FROM users WHERE username = 'felix(a)schwarz-online.org'; home | uid | gid ----------+-----+----- /home/fs | 500 | 500 What is wrong? Password encryption? Is there a possibility to see what dovecot gets from Mozilla and what are the expected results of the sql queries? I am stuck as I don't know exactely why authentification failes... thanks for your help -- Felix

3 2

[Dovecot] [PATCH] POP3 CAPA command RFC violation
by Andrey Panin 22 Jul '04

22 Jul '04

Hello, looks like SASL capability reported by dovecot in response to POP3 CAPA command doesn't conforms with rfc2449 which says: Examples: C: CAPA S: +OK Capability list follows S: TOP S: USER S: SASL CRAM-MD5 KERBEROS_V4 S: RESP-CODES S: LOGIN-DELAY 900 S: PIPELINING S: EXPIRE 60 S: UIDL S: IMPLEMENTATION Shlemazle-Plotz-v302 S: . And later: The POP3 AUTH command [POP-AUTH] permits the use of [SASL] authentication mechanisms with POP3. The SASL capability indicates that the AUTH command is available and that it supports an optional base64 encoded second argument for an initial client response as described in the SASL specification. The argument to the SASL capability is a space separated list of SASL mechanisms which are supported. ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Dovecot sends SASL capability as list of AUTH=FOO pairs. Looks like copy-paste from IMAP code. Patch attached. Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke(a)donpac.ru | PGP key: wwwkeys.pgp.net

1 0

[Dovecot] namespaces and behaviour of LIST and SELECT with leading ~
by Tim Southerwood 21 Jul '04

21 Jul '04

Hi One weirdness when going through the code: (We are migrating from WU-IMAP and have users with a mixture of ~/IMAP/ and ~/Mail/ for storing mail - but all user INBOX=~/.email thankfully. IMAP client config is even more random and we have 1800 users. I have been playing with namespaces to translate various prefixes ala: default_mail_env = mbox:%h/:INBOX=%h/.email:INDEX=/var/cache/dovecot/%n # Note lack of IMAP ^^^ (So clients can use ~/IMAP or ~/Mail - we have a # historic mixture) full_filesystem_access = no namespace private { separator = / inbox = yes prefix = hidden = no location = mbox:.email } namespace private { separator = / prefix = hidden = no location = mbox:IMAP/ } namespace private { separator = / prefix = IMAP/ hidden = no location = mbox:IMAP/ } namespace private { separator = / prefix = ~/IMAP/ hidden = no location = mbox:IMAP/ } User tstest has INBOX in ~/.email and mail folders in ~/IMAP/ all in mbox format: Here's a sample conversation: * OK dovecot ready. 1 login tstest ******* 1 OK Logged in. 1 list "" % * LIST (\NoInferiors \UnMarked) "/" INBOX * LIST (\NoInferiors) "/" "Trash" * LIST (\NoInferiors) "/" "Queue" * LIST (\NoInferiors) "/" "Sent" * LIST (\NoInferiors) "/" "Drafts" * LIST (\NoInferiors) "/" "Blah" 1 OK List completed. Good 1 list "" IMAP/% * LIST (\NoInferiors) "/" "IMAP/Trash" * LIST (\NoInferiors) "/" "IMAP/Queue" * LIST (\NoInferiors) "/" "IMAP/Sent" * LIST (\NoInferiors) "/" "IMAP/Drafts" * LIST (\NoInferiors) "/" "IMAP/Blah" 1 OK List completed. Good 1 list "" ~/IMAP/% 1 OK List completed. Oops (being caught by mbox_is_valid_mask as prefix begins with ~ and the client supplied prefix is being tested, not the virtual one after namespace prefix substitution) But... 1 select Blah * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted.* 5 EXISTS * 0 RECENT * OK [UNSEEN 1] First unseen. * OK [UIDVALIDITY 1090326264] UIDs valid * OK [UIDNEXT 6] Predicted next UID 1 OK [READ-WRITE] Select completed. Yes 1 select IMAP/Blah * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted.* 5 EXISTS * 0 RECENT * OK [UNSEEN 1] First unseen. * OK [UIDVALIDITY 1090326264] UIDs valid * OK [UIDNEXT 6] Predicted next UID 1 OK [READ-WRITE] Select completed. Yes 1 select ~/IMAP/Blah * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted.* 5 EXISTS * 0 RECENT * OK [UNSEEN 1] First unseen. * OK [UIDVALIDITY 1090326264] UIDs valid * OK [UIDNEXT 6] Predicted next UID 1 OK [READ-WRITE] Select completed. Oo - this works despite the ~ I would argue that with namespace {} directives, the behaviour of SELECT is correct. I would suggest that it may be better to test the final translated path thus: if full_filesystem_access = yes let anything go. else make sure that final translated mail path is identical OR a subpath of the default_mail_env mbox folder path. (INBOX is a special case and can be matched as well) This is a suggestion - what do you think? I'd have a go myself but I don't yet feel competant with the dovecot code. Best wishes Tim -- Tim J Southerwood

2 1

[Dovecot] dovecot-1.0-test27 crash on FETCH
by Wouter Van Hemel 21 Jul '04

21 Jul '04

Hello, I've got a crash with -test27 on a FETCH, just after logging in. Attached are the mailbox (1 message only), logs, sniffed session, testcase and core dump backtrace. If the dovecot.conf is needed, just ask (it's pretty much the default configuration). Maybe this has just been fixed in -test28, in which case you can just delete this email. :) Btw, it's rather irrelevant, but does anybody know a good way to read the qmail alias user's mailbox remotely (imap? The only way seems by assigning a password to the account... Regards, wouter

2 4

[Dovecot] Fatal: Unknown userdb type 'pgsql'
by felix.schwarz＠web.de 21 Jul '04

21 Jul '04

Hello, I'm trying to use postgres authentication with dovecot on a linux system running Fedora Core 2. Installation of dovecot was done by installing the rpm included in the fedora distribution ("yum install dovecot"). from /etc/dovecot.conf auth_userdb = pgsql /etc/dovecot-pgsql.conf auth_passdb = pgsql /etc/dovecot-pgsql.conf but the logs tell me: dovecot: Jul 21 19:28:39 Info: Dovecot starting up dovecot-auth: Jul 21 19:28:40 Fatal: Unknown userdb type 'pgsql' dovecot: Jul 21 19:28:40 Error: Auth process died too early - shutting down dovecot: Jul 21 19:28:40 Error: child 5229 (auth) returned error 89 imap-login: Jul 21 19:28:40 Fatal: fd_send(-1) failed: Broken pipe imap-login: Jul 21 19:28:40 Fatal: fd_send(-1) failed: Broken pipe I think that the fedora rpm was compiled without postgresql support. - Is the information given above sufficient for an educated guess? - Would that lead to the above error message? - What other errors may cause this behavior? - How can I check which authentification types are supported by my dovecot-auth? - Are there any other Fedora rpms compiled with postgres support available on the net? thank you for your help :-) -- Felix

3 3

RE: [Dovecot] Probably a bad idea but.....
by Mark Lidstone 21 Jul '04

21 Jul '04

Hi everyone, Just done some testing and thought I'd share the results. I've successfully moved a few test emails from a Mercury/32 Windows server to Maildirs. I created an IMAP folder for each user ".INBOX.Old\ Mail" and put the email in there. It's accessable via IMAP but does not show up as a new email when the user uses POP3 to collect their email - exactly what I was after (they're all using POP3 at the moment, but I will be pushing them to move to IMAP at a later date). I'm going to copy the rest of the email in one go overnight so if you don't get another email from me on here assume it worked. Thanks for the help Timo. Thanks, Mark Lidstone IT and Network Support Administrator BMT SeaTech Ltd Grove House, Meridians Cross, 7 Ocean Way Ocean Village, Southampton. SO14 3TJ. UK Tel: +44 (0)23 8063 5122 Fax: +44 (0)23 8063 5144 E-Mail: mailto:mark.lidstone@bmtseatech.co.uk Website: www.bmtseatech.co.uk ======================================================================== == Confidentiality Notice and Disclaimer: The contents of this e-mail and any attachments are intended only for the use of the e-mail addressee(s) shown. If you are not that person, or one of those persons, you are not allowed to take any action based upon it or to copy it, forward, distribute or disclose the contents of it and you should please delete it from your system. BMT SeaTech Limited does not accept liability for any errors or omissions in the context of this e-mail or its attachments which arise as a result of Internet transmission, nor accept liability for statements which are those of the author and not clearly made on behalf of BMT SeaTech Limited. ======================================================================== == -----Original Message----- From: Timo Sirainen [mailto:tss@iki.fi] Sent: 21 July 2004 13:58 To: Mark Lidstone Cc: dovecot(a)dovecot.org Subject: Re: [Dovecot] Probably a bad idea but..... On Wed, 2004-07-21 at 14:11, Mark Lidstone wrote: > Mercury stores mail in a similar way to Maildirs, different folders > with separate files for each mail, stored in plaintext RFC822 format. > How sensible would it be to copy the files over from the Mercury > server to users maildirs on a Linux server? > > The filenames are in a different format but I don't know if that would > cause a problem? You'll lose message flags, but as long as the filenames don't contain ':' characters you can just copy them.

1 0

Re: [Dovecot] 1.0.0-test28 Problem with INDEX
by Tim Southerwood 21 Jul '04

21 Jul '04

On Tue, 20 Jul 2004 20:35:04 +0300 Timo Sirainen <tss(a)iki.fi> wrote: > On Tue, 2004-07-20 at 19:13, Tim Southerwood wrote: > > default_mail_env = > > mbox:%h/IMAP/:INBOX=%h/.email:INDEX=/var/cache/dovecot/%n > > > > The INBOX indexes are being built correctly in /var/cache/dovecot, > > but all other indexes for folders are still being built in the > > user's home directory. > > > > I had it working once - but it seems fragile - almost as if the > > config parser is sensitive to context??? Sorry - seems vague, but I > > can't pin this down reliably. > > Have you set full_filesystem_access = yes? That's the only thing that > I can think of that might make it use different directory (and even > then only if you access the mboxes as "~/IMAP/box"). > > OK - I've been look at the code all day and sticking debug statements in. full_filesystem_access = yes will cause the indexes to stick with the mail files and not be based under INDEX=dir. But - using default_mail_env = mbox:%h/:INBOX=%h/.email:INDEX=/var/cache/dovecot/%n # Note lack of IMAP ^^^ (So clients can use ~/IMAP or ~/Mail - we have a # historic mixture) full_filesystem_access = no namespace private { separator = / prefix = hidden = no location = mbox:IMAP/ } namespace private { separator = / prefix = IMAP/ hidden = no location = mbox:IMAP/ } namespace private { separator = / prefix = ~/IMAP/ hidden = no location = mbox:IMAP/ } Will cause the indexes to also stick with the mail files, not use INDEX=dir Bit of a problem with NFS involved. I know I could use INDEX=MEMORY, but I'm worried about what will happen if the machine exhausts it's VM (not impossible with my site). I'm happy to play with this a bit longer if you could give me a hint: where is the path to the index file computed? Cheers Tim -- Tim J Southerwood

1 0

[Dovecot] Probably a bad idea but.....
by Mark Lidstone 21 Jul '04

21 Jul '04

Hi all, I've got a few users I'm trying to migrate from a Mercury Mail server to a dovecot IMAP/POP3 setup. I was hoping to use some sort of imap-copy type script to move email from the Mercury server to dovecot server, but the Mercury box is running so slow it's impossible. Mercury stores mail in a similar way to Maildirs, different folders with separate files for each mail, stored in plaintext RFC822 format. How sensible would it be to copy the files over from the Mercury server to users maildirs on a Linux server? The filenames are in a different format but I don't know if that would cause a problem? Any help gratefully appreciated, Mark Lidstone IT and Network Support Administrator BMT SeaTech Ltd Grove House, Meridians Cross, 7 Ocean Way Ocean Village, Southampton. SO14 3TJ. UK Tel: +44 (0)23 8063 5122 Fax: +44 (0)23 8063 5144 E-Mail: mailto:mark.lidstone@bmtseatech.co.uk Website: www.bmtseatech.co.uk ======================================================================== == Confidentiality Notice and Disclaimer: The contents of this e-mail and any attachments are intended only for the use of the e-mail addressee(s) shown. If you are not that person, or one of those persons, you are not allowed to take any action based upon it or to copy it, forward, distribute or disclose the contents of it and you should please delete it from your system. BMT SeaTech Limited does not accept liability for any errors or omissions in the context of this e-mail or its attachments which arise as a result of Internet transmission, nor accept liability for statements which are those of the author and not clearly made on behalf of BMT SeaTech Limited. ======================================================================== ==

2 1

[Dovecot] Almost there.
by Tom Ray [Lists] 21 Jul '04

21 Jul '04

Hey Timo- I got everything working now that I can log in properly...but I'm have a permissions issue and I'm not sure how to set it..I've been playing with ownership and permissions and I'm still getting this imap(tom(a)testdomain.com): mkdir_parents(/var/spool/mail/indexes/testdomain.com/tom/.imap/INBOX) failed: Permission denied What's that permission/ownership in that folder supposed to be?

2 1

[Dovecot] imap support question
by Tom Allison 21 Jul '04

21 Jul '04

OK, I'm actually trying to write something which interacts with IMAP. I'm trying to run the FETCH command and it goes OK, but I'm wondering how I might be able to call both RFC822.SIZE and BODY[HEADERS.FIELDS(..) in the same call. Right now I'm only able to get this to work with two calls to the server. I was hoping to avoid making two calls. Any suggestions? (I realize it isn't exactly "on topic" for the mailing list, but I can't think of any list I'm on that's even close to the topic)

3 2