- dovecot - dovecot.org

Re: [Dovecot] Problem with DIGEST-MD5 authentication and plainte xt passwords
by Matthew Reimer 18 Nov '03

18 Nov '03

Maikel Verheijen wrote: > For what it's worth: > > We use postgres userlookups, and use an older version of dovecot (an old > cvs version of around 0.99.9.1), and we DO use digest-md5 password > encryption in the database and realms. It seems to work flawlessly in > our situation, I used kmail, evolution, apple-mail, entourage, outlook, > outlook-express and mutt. > > > Have there been changes in the digest-md5 code since 0.99.9.1 ? > > > Kind regards, > > > Maikel Verheijen > Ladot Nederland BV. The problem is not with passwords that are stored in the db in digest-md5 format (i.e., as an md5 hash of user:realm:password), but with dovecot's password_generate() that takes the username and password and hashes it on the fly. Matt

2 1

Re: [Dovecot] Problem with DIGEST-MD5 authentication and plaintext passwords
by Matthew Reimer 18 Nov '03

18 Nov '03

Timo Sirainen wrote: > On Wed, 2003-11-12 at 03:09, Matthew Reimer wrote: > >>I wasn't able to get DIGEST-MD5 authentication working with passwords >>stored as plaintext until I tweaked password_generate() to make it not >>use the domain portion of user(a)domain.com as the realm. Both evolution >>and kmail send the email address as the username with no realm; when >>dovecot tries to convert the username to user + realm, the hash is >>different and so DIGEST-MD5 authentication fails. Having >>password_generate() hash user@domain.com::password instead of >>user:domain.com:password fixes it. I need this to work because I need to >>support all of PLAIN, CRAM-MD5, and DIGEST-MD5 at the same time. >> >>Timo, do you think this is a proper fix, or are kmail and evolution broken? > > > Well .. Looks like most clients don't actually use realms, but I rather > wouldn't completely drop support for them which your change would do. > > Correct fix would be to separate realm and "@domain" handling in code, > that should work with both cases. I'll see if I can get that done. Thanks Timo. Send me a patch when you're done and I'll test it. Matt

1 0

[Dovecot] Children, HasChildren
by Miquel van Smoorenburg 17 Nov '03

17 Nov '03

Hello, I'm using dovecot 0.99.10.2 on a debian box. Mailstore is maildir. If I list the IMAP hierarchy in mutt (debian, 1.5.4+20031024-1) it shows all my plain mailboxes as having subfolders - while none of them have. I straced mutt and this is the IMAP exchange (a bit reformatted for readability): write(6, "a0001 LSUB \"\" \"%\"\r\n", 19) = 19 read(3, " * LSUB () \".\" \"Drafts\" * LSUB () \".\" \"INBOX\" * LSUB () \".\" \"Sent\" * LSUB () \".\" \"Trash\" * LSUB (\\Noselect \\Children) \".\" \"broadband\" * LSUB (\\Noselect \\Children) \".\" \"cistron\" * LSUB (\\Noselect \\Children) \".\" \"debian\" * LSUB (\\Noselect \\Children) \".\" \"ip\" * LSUB (\\Noselect \\Children) \".\" \"lists\" * LSUB (\\Noselect \\Children) \".\" \"prive\" a0001 OK Lsub completed. ", 1024) = 374 Now this is strange - I read RFC3348 and shouldn't \\Children be \\HasChildren, also shouldn't the plain mailboxes (first four) be listed with \\HasNoChildren ? Mike.

2 3

[Dovecot] Corrupted index files
by Tomi Hakala 17 Nov '03

17 Nov '03

Hi, I'm playing with Dovecot in a lab environment and got it in state where it crashes on every incoming connection. I moved mail spool from ext2 file system to a ReiserFS on a another disk, mount point changed from /var/vmail to /spool/vmail. After that I managed to open mailbox and I moved about 2000 messages from INBOX to a subfolder. Then I tried to open mailbox with POP3 and it didn't succeed, from that point pop3d and imapd died every time I logged in until I removed all index files by hand. This is what I have in logs. imap-login: Nov 17 13:30:53 Info: Login: tomi.hakala(a)xx.fi [xx.xx.xx.xx] pop3-login: Nov 17 13:32:04 Info: Login: tomi.hakala(a)xx.fi [xx.xx.xx.xx] pop3(tomi.hakala(a)xx.fi): Nov 17 13:32:04 Error: Corrupted index file /spool/vmail/xx.fi/tomi.hakala(a)xx.fi/Maildir/.INBOX/.imap.index: Sequence 1848 not found from binary tree (5398 msgs says header) pop3-login: Nov 17 13:32:12 Info: Login: tomi.hakala(a)xx.fi [xx.xx.xx.xx] pop3(tomi.hakala(a)xx.fi): Nov 17 13:32:21 Error: Couldn't lock created modify log file /spool/vmail/xx.fi/tomi.hakala(a)xx.fi/Maildir/.INBOX/.imap.index.log imap(tomi.hakala(a)xx.fi): Nov 17 14:09:32 Error: IndexID mismatch for modify log file /spool/vmail/xx.fi/tomi.hakala(a)xx.fi/Maildir/.INBOX/.imap.index.log imap(tomi.hakala(a)xx.fi): Nov 17 14:09:33 Panic: file mail-tree-redblack.c: line 187 (rb_left_rotate): assertion failed: (node[x].right != RBNULL) dovecot: Nov 17 14:09:33 Error: child 19984 (imap) killed with signal 6 imap-login: Nov 17 14:27:24 Info: Login: tomi.hakala(a)xx.fi [xx.xx.xx.xx] imap(tomi.hakala(a)xx.fi): Nov 17 14:27:24 Panic: file mail-tree-redblack.c: line 232 (rb_right_rotate): assertion failed: (node[y].left != RBNULL) dovecot: Nov 17 14:27:24 Error: child 10478 (imap) killed with signal 6 -- Tomi Hakala

1 0

[Dovecot] Problem with DIGEST-MD5 authentication and plaintext passwords
by Matthew Reimer 17 Nov '03

17 Nov '03

I wasn't able to get DIGEST-MD5 authentication working with passwords stored as plaintext until I tweaked password_generate() to make it not use the domain portion of user(a)domain.com as the realm. Both evolution and kmail send the email address as the username with no realm; when dovecot tries to convert the username to user + realm, the hash is different and so DIGEST-MD5 authentication fails. Having password_generate() hash user@domain.com::password instead of user:domain.com:password fixes it. I need this to work because I need to support all of PLAIN, CRAM-MD5, and DIGEST-MD5 at the same time. Timo, do you think this is a proper fix, or are kmail and evolution broken? Matt

3 2

[Dovecot] MySQL patch + Debian
by James Tyson 17 Nov '03

17 Nov '03

Hi folks. Sorry to post here about a patch that hasn't been officially integrated into Dovecot, however I am trying to get it going and seem to have hit a dead end. I downloaded the Debianised source for Dovecot (0.99.10-9) from sarge: > wedge:/usr/local/src# apt-get -t testing source dovecot then applied the latest MySQL patch that I could find on the list: > wedge:/usr/local/src/dovecot-0.99.10# cat ../dovecot-mysql.patch | > patch -p 2 and manually fixed a merge issue with src/auth/master-connection.c, fiddled with the debian changelog to indicate the patch and then used dpkg-buildpackage -b to compile the package. Everything looked to build alright and I grepped the output to make sure that it compiled userdb-mysql.o and passdb-mysql.o into dovecot-auth. Problem is that dovecot-auth says "Unknown userdb type 'mysql'" and an ldd of /src/auth/dovecot-auth shows no libmysqlclient10: > wedge:/usr/local/src/dovecot-0.99.10# ldd src/auth/dovecot-auth > libpam.so.0 => /lib/libpam.so.0 (0x4001a000) > libldap.so.2 => /usr/lib/libldap.so.2 (0x40022000) > libpq.so.3 => /usr/lib/libpq.so.3 (0x4005a000) > libcrypt.so.1 => /lib/libcrypt.so.1 (0x4006e000) > libdl.so.2 => /lib/libdl.so.2 (0x4009c000) > libc.so.6 => /lib/libc.so.6 (0x4009f000) > liblber.so.2 => /usr/lib/liblber.so.2 (0x401cd000) > libresolv.so.2 => /lib/libresolv.so.2 (0x401da000) > libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x401ec000) > libgnutls.so.7 => /usr/lib/libgnutls.so.7 (0x401fe000) > libssl.so.0.9.7 => /usr/lib/i686/cmov/libssl.so.0.9.7 > (0x40231000) > libcrypto.so.0.9.7 => /usr/lib/i686/cmov/libcrypto.so.0.9.7 > (0x40260000) > libkrb5.so.17 => /usr/lib/libkrb5.so.17 (0x40351000) > libnsl.so.1 => /lib/libnsl.so.1 (0x40387000) > /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000) > libtasn1.so.0 => /usr/lib/libtasn1.so.0 (0x4039c000) > libgcrypt.so.1 => /usr/lib/libgcrypt.so.1 (0x403aa000) > libz.so.1 => /usr/lib/libz.so.1 (0x403e8000) > libcom_err.so.1 => /usr/lib/libcom_err.so.1 (0x403f7000) > libkrb.so.1 => /usr/lib/libkrb.so.1 (0x403f9000) > libasn1.so.6 => /usr/lib/libasn1.so.6 (0x40415000) > libroken.so.16 => /usr/lib/libroken.so.16 (0x40435000) > libdb3.so.3 => /usr/lib/libdb3.so.3 (0x40445000) Anyone know what I'm missing? --- James Tyson Director, Giant Robot Ltd http://www.giantrobot.co.nz/

2 2

[Dovecot] Migrate from Courier-imap
by Jerry Chiu 16 Nov '03

16 Nov '03

Hi, I have a redhat server running courier-imap + squirrelmail webmail. I am migrating to dovecot... the problem is - the existing sub-folders are all disappear from the folder list. What can I do to fix this problem? Thanks, Jerry Chiu

2 1

[Dovecot] namesapce patch
by Farkas Levente 16 Nov '03

16 Nov '03

hi, where can I find the namspace patch? I remember there was an email on this list, that if I'd not like to open all sufolder's in mozilla's mailer on startup, but I'd like to start mozilla to open all subfolder I've to apply the namespace patch. now it getting more and more anoying so I'd like to apply, but I can't find it... thanks. -- Levente "Si vis pacem para bellum!"

2 1

[Dovecot] dovecot vs cyrus, uw, etc.
by Scott Klein 13 Nov '03

13 Nov '03

I've been doing research on switching our current e-mail server (qpopper, sendmail) to imap. The decision on which server to use is essentially down to Cyrus and Dovecot -- I like Cyrus' approach to a lot of things, but the "blackbox" nature of it makes some niceties like using spamassassin and procmail difficult, or at least counterintuitive. Dovecot seems to play nicer with other apps. I'm a bit concerned with stability, though. Although we don't have a lot of users (about 60) they're all very big e-mail users -- my users rely on their e-mail more than on their phones. We can't afford any downtime, and with our pop3 server, we haven't had any. Does anybody on this list use Dovecot to serve mission critical e-mail to an entire company? What kind of uptime can I expect? Is it genuinely ready for prime time? Has anybody here migrated from a recent release of Cyrus and can compare apples-to-apples? Many thanks, Scott Klein -- Scott Klein Web Publisher/Director of Technology The Nation Magazine http://www.thenation.com

8 8

[Dovecot] 0.99.10.2 for debian
by Jaldhar H. Vyas 12 Nov '03

12 Nov '03

I just uploaded it to sid. A woody backport is available from http://www.braincells.com/open/ I came across an error: giving --without-cyrus-sasl2 to the configure script doesn't work i.e. it looks for -lsasl anyway. Other than that, it seems to be working fine. -- Jaldhar H. Vyas <jaldhar(a)debian.org> La Salle Debain - http://www.braincells.com/debian/

1 0