- dovecot - dovecot.org

Re: Make fails with 2.3.0.1 & 2.2.34 on Mac OS X 10.7.5
by James Brown 11 Jul '18

11 Jul '18

> On 2 Mar 2018, at 6:11 pm, James Brown <jlbrown(a)bordo.com.au> wrote: > > > >> On 2 Mar 2018, at 5:59 pm, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: >> >> >> We have attempted to compile our code with OpenSSL 1.0, 1.0.2 and 1.1.0, but I'll try the specific releases too. >> >> Can you try this patch? >> >> diff --git a/src/lib-dcrypt/dcrypt-openssl.c b/src/lib-dcrypt/dcrypt-openssl.c >> index 26c9b91..187bb75 100644 >> --- a/src/lib-dcrypt/dcrypt-openssl.c >> +++ b/src/lib-dcrypt/dcrypt-openssl.c >> @@ -9,17 +9,17 @@ >> #include "array.h" >> #include "module-dir.h" >> #include "dovecot-openssl-common.h" >> -#include <openssl/evp.h> >> -#include <openssl/sha.h> >> -#include <openssl/err.h> >> -#include <openssl/rsa.h> >> -#include <openssl/ec.h> >> -#include <openssl/bio.h> >> -#include <openssl/pem.h> >> -#include <openssl/x509.h> >> -#include <openssl/engine.h> >> -#include <openssl/hmac.h> >> -#include <openssl/objects.h> >> +#include "openssl/evp.h" >> +#include "openssl/sha.h" >> +#include "openssl/err.h" >> +#include "openssl/rsa.h" >> +#include "openssl/ec.h" >> +#include "openssl/bio.h" >> +#include "openssl/pem.h" >> +#include "openssl/x509.h" >> +#include "openssl/engine.h" >> +#include "openssl/hmac.h" >> +#include "openssl/objects.h" >> #include "dcrypt.h" >> #include "dcrypt-private.h" >> >> And if it does not work, add after the includes >> >> #pragma message("OpenSSL version is " OPENSSL_VERSION_TEXT) >> #error See above >> >> And provide output? >> >> Aki Hi Aki, Change src/lib-dcrypt/dcrypt-openssl.c start to: /* Copyright (c) 2016-2017 Dovecot authors, see the included COPYING file */ #include "lib.h" #include "buffer.h" #include "str.h" #include "hex-binary.h" #include "safe-memset.h" #include "randgen.h" #include "array.h" #include "module-dir.h" #include "dovecot-openssl-common.h" #include "openssl/evp.h" #include "openssl/sha.h" #include "openssl/err.h" #include "openssl/rsa.h" #include "openssl/ec.h" #include "openssl/bio.h" #include "openssl/pem.h" #include "openssl/x509.h" #include "openssl/engine.h" #include "openssl/hmac.h" #include "openssl/objects.h" #include "dcrypt.h" #include "dcrypt-private.h" #pragma message("OpenSSL version is " OPENSSL_VERSION_TEXT) #error See above /** Ie changed the < and > to double quotes. Ran make clean, then ./configure and but it still fails. :-( dcrypt-openssl.c:25: warning: ignoring #pragma message dcrypt-openssl.c:26:2: error: #error See above dcrypt-openssl.c:118: error: field 'ctx' has incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_ctx_hmac_destroy': dcrypt-openssl.c:452: warning: implicit declaration of function 'HMAC_cleanup' dcrypt-openssl.c: In function 'dcrypt_openssl_generate_ec_key': dcrypt-openssl.c:556: error: dereferencing pointer to incomplete type dcrypt-openssl.c:557: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_ecdh_derive_secret_local': dcrypt-openssl.c:589: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_ecdh_derive_secret_peer': dcrypt-openssl.c:669: error: dereferencing pointer to incomplete type dcrypt-openssl.c:698: error: dereferencing pointer to incomplete type dcrypt-openssl.c:699: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_store_private_key_dovecot': dcrypt-openssl.c:1462: error: dereferencing pointer to incomplete type dcrypt-openssl.c:1483: error: dereferencing pointer to incomplete type dcrypt-openssl.c:1490: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_load_private_key': dcrypt-openssl.c:1616: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_store_public_key': dcrypt-openssl.c:1766: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_private_to_public_key': dcrypt-openssl.c:1802: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_name2oid': dcrypt-openssl.c:2063: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_public_key_id_old': dcrypt-openssl.c:2113: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_private_key_id_old': dcrypt-openssl.c:2136: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_public_key_id_evp': dcrypt-openssl.c:2154: error: dereferencing pointer to incomplete type make[3]: *** [libdcrypt_openssl_la-dcrypt-openssl.lo] Error 1 make[2]: *** [all-recursive] Error 1 make[1]: *** [all-recursive] Error 1 make: *** [all] Error 2 Thanks for your help. James.

1 1

Remove authentication penalty for webmailer
by Andreas Meyer 11 Jul '18

11 Jul '18

Hi all, I want to remove the authentication penalty for specific ip addresses (subnets if possible). I am using Dovecot 2.3.2 (582970113) and figured that this information: https://wiki2.dovecot.org/Authentication/Penalty > If the IP is in login_trusted_networks (e.g. webmail), skip any authentication penalties is not up to date. Instead this information is: https://wiki2.dovecot.org/Upgrading/2.3 --- START --- *Localhost Auth Penalty* Dovecot no longer disables auth penalty waits for clients connecting from localhost (or login_trusted_networks in general). The previous idea was that it would likely be a webmail that would have its own delays, but there are no guarantees about this. If the old behavior is still wanted, it's possible to do nowadays even more generically with e.g.: passdb { driver = passwd-file args = username_format=%{rip} /etc/dovecot/passdb } /etc/dovecot/passdb: 127.0.0.1:::::::nodelay=yes 192.168.10.124:::::::nodelay=yes --- STOP --- Adding the passdb section and creating a passdb file with the respective ip addresses does not have any effect though. Login failures through the webmailer are still being delayed. "dovecot -n" shows that the new passdb section is loaded: --- START --- passdb { args = username_format=%{rip} /etc/dovecot/passdb driver = passwd-file } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } --- STOP --- Changing orders does not make a difference. The passdb file contains these entries: --- START --- 127.0.0.1:::::::nodelay=yes 10.25.1.20:::::::nodelay=yes --- STOP --- The logfile shows the increased delay: --- START --- Jul 10 23:37:16 9fcdf83ee81e dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<xxx(a)yyy.zzz>, method=PLAIN, rip=10.25.1.20, lip=10.25.1.10, TLS, TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bit s) Jul 10 23:37:25 9fcdf83ee81e dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<xxx(a)yyy.zzz>, method=PLAIN, rip=10.25.1.20, lip=10.25.1.10, TLS, TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bit s) --- STOP --- What am I missing?

1 0

Sieve-filter and default postmaster_address -> error?
by Larry Rosenman 11 Jul '18

11 Jul '18

I wanted to re-filter my inbox after adding some filters for my DMARC reports. When I didn’t have postmaster_address in my 15-lda.conf, I got an error from sieve-filter that it was invalid (postmaster@). I added the setting (postmaster_address = ler(a)lerctr.org<mailto:ler@lerctr.org>), and the error went away. Is this expected? Dovecot 2.3.2 Pigeonhole 0.5.2 thebighonker.lerctr.org /home/ler $ pkg info | grep dovecot dovecot-2.3.2 Secure, fast and powerful IMAP and POP3 server dovecot-pigeonhole-0.5.2_2 Sieve plugin for the Dovecot 'deliver' LDA and LMTP thebighonker.lerctr.org /home/ler $ -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 5708 Sabbia Drive, Round Rock, TX 78665-2106

2 2

Dovecot on CentOS 7
by John Rowan 10 Jul '18

10 Jul '18

I guess I've been lucky. My Red Hat server I built in 2003 finally gave up the ghost yesterday. Fifteen years with almost zero problems running 7x24. Now I'm trying to build a basic server to host my e-mail using CentOS 7, Sendmail and Dovecot. Server is running great as are Sendmail and Dovecot but Dovecot only allows connections from the CentOS 127.0.0.1. I can telnet localhost pop3 and get a +OK Dovecot ready response. Trying to telnet from a different computer on same LAN times out. I've looked at my old Dovecot config files to see how I enabled LAN IP access but the configs have changed a lot since I last installed Dovecot. Googling hasn't helped. Anyone help with a sample config with LAN IPs permitted?

5 4

v2.3.2.1 released
by Timo Sirainen 10 Jul '18

10 Jul '18

https://dovecot.org/releases/2.3/dovecot-2.3.2.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.2.1.tar.gz.sig v2.3.2 still had a few unexpected bugs: - SSL/TLS servers may have crashed during client disconnection - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have sometimes assert-crashed. - v2.3.2: "make check" may have crashed with 32bit systems

2 3

Authentication failure with OpenLDAP
by Anushka Bandara 10 Jul '18

10 Jul '18

Hi all, *Dovecot version: 2.2.22 (fe789d2)* *Ubuntu version: 16.04* *OpenLDAP version: openldap-2.4.42+dfsg* Configurations *# 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf# Pigeonhole version 0.4.13 (7b14904)# OS: Linux 4.10.0-28-generic x86_64 Ubuntu 16.04.3 LTS disable_plaintext_auth = nolisten = *log_path = /var/log/dovecot.logmail_location = maildir:~/Maildirnamespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = }passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap}protocols = pop3 imapservice auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 }}ssl = nouserdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap}* I am having "*Authentication failed" *problem with dovecot-ldap. Before it, I had binding error and I fixed it. Now I am having authentication problem when I am trying to log dovecot (usign telnet localhost 110) using a user which is created in ldap server. I can provide any configuration file and I did this configurations according to this " https://help.ubuntu.com/community/DovecotLDAP". Now I am having an authentication error. Thank you

2 1

slow mailbox refreshes
by Fabian A. Santiago 09 Jul '18

09 Jul '18

Hello, I am using dovecot 2.3.2 on my private email server in conjunction with: centos 7.5 apache 2.4.6 mariadb 10.2.16 roundcube mail 1.3.6 php 5.6.36 postfix 2.10.1 I have one mailbox with nearly 30k messages in it dispersed across several folders. it's often very slow in refreshing the message list, especially in the one largest 25k+ message folder. is this simply to be expected based on my message count or is there some kind of performance optimization and tuning i can do to improve the response times? The mail server itself is a linode hosted VPS: intel xeon e5-2680 v2 @ 2.80 GHz, 4 cores 8 GB real memory 2 GB virtual memory 200 GB local storage (ext4) KVM hypervisor Thanks everyone for any guidance you can offer. -- Fabian S. OpenPGP: 0x643082042DC83E6D94B86C405E3DAA18A1C22D8F (new key) *** 0x3C3FA072ACCB7AC5DB0F723455502B0EEB9070FC (to be retired, still valid)

2 1

New error message with Dovecot/Pigeonhole
by Jerry 08 Jul '18

08 Jul '18

FreeBSD 11.1 / amd64 dovecot --version 2.3.2 (582970113) Pigeonhole version 0.5.2 (7704de5e) I have run 'sieve-test" many times to check out changes in my "sieve" scripts. This morning, it suddenly started issuing this error message: sieve-test(root): Fatal: Couldn't drop privileges: User is missing UID (see mail_uid setting) I am not sure what is wrong or how to correct it, since it never happened before. -- Jerry "Ainsi sera, groigne qui groigne"

3 2

Re: Question about password field in passwd-file
by J Doe 08 Jul '18

08 Jul '18

> On Jul 7, 2018, at 2:12 AM, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: > > you can add nopassword attribute to the end. See https://wiki.dovecot.org/PasswordDatabase/ExtraFields > > > --- > Aki Tuomi > Dovecot oy Hi Aki, Thank you for your reply. I have two questions regarding this: 1. Is the “nopassword” attribute the same as specifying a null password field by itself ? The documentation at [1] seems to suggest that having a null password AND specifying “nopassword” will allow someone to authenticate with _no_ password: “nopasword: if you want to allow all passwords, use an empty password and this field.” Farther down, the page seems to indicate that the “nologin” attribute is what I am looking for: “nologin: User isn’t actually allowed to log in even if the password matches . . .” Or possibly “noauthenticate”: “noauthenticate: Do not perform any authentication . . ." 2. Is “nologin” functionally equivalent to specifying no password in the password field ? I am assuming that setting a null password (even without “nologin”), prevents login with ANY or NO password as a blank field would default to a {CRYPT} scheme and a call to crypt() cannot return a null string. As background to why I want to do this, I have a server with a basic Dovecot setup that provides SMTP SASL AUTH, IMAP and LMTP for Postfix. For the passdb and userdb, I use the same passwd-style file: /etc/dovecot/dovecot.conf userdb { driver = passwd-file args = /etc/dovecot/passwd } passdb { driver = passwd-file args = /etc/dovecot/passwd } I use usernames for SMTP SASL AUTH and IMAP that differ from either: user(a)example.com or user. So for one user, for example, I have: /etc/dovecot/passwd # SMTP SASL AUTH and IMAP user accounts and passwords user_account_1:{PLAIN}password: . . . # LMTP username/e-mail address user(a)example.com:: . . . :/var/mail/vhosts/example.com/user_account_1 So in the LMTP entry I specify no password between the colons to prevent someone trying to logon via IMAP using the LMTP username/e-mail address. Is this correct and: is there a better way to do this ? Thanks, - J Sources: [1] https://wiki.dovecot.org/PasswordDatabase/ExtraFields

1 0

Get rid of the "dbox-Mails"-folder
by Hativ 07 Jul '18

07 Jul '18

Hey to all, is it possible to get rid of the "dbox-Mails"-folder when using sdbox? Currently my folder structure looks like this (I hope the output from tree would be formatted well): /srv/mail/ └── example.com └── user ├── dovecot-acl-list ├── dovecot-attributes ├── dovecot.list.index.log ├── dovecot.mailbox.log ├── dovecot-uidvalidity ├── dovecot-uidvalidity.5b3f746f ├── mailboxes │ ├── Drafts │ │ └── dbox-Mails │ │ └── dovecot.index.log │ ├── INBOX │ │ └── dbox-Mails │ │ ├── dovecot.index.cache │ │ ├── dovecot.index.log │ │ └── u.1 │ ├── Junk │ │ └── dbox-Mails │ │ └── dovecot.index.log │ ├── Sent │ │ └── dbox-Mails │ │ └── dovecot.index.log │ └── Trash │ └── dbox-Mails │ └── dovecot.index.log └── subscriptions I would like to let it look like this: /srv/mail/ └── example.com └── user ├── dovecot-acl-list ├── dovecot-attributes ├── dovecot.list.index.log ├── dovecot.mailbox.log ├── dovecot-uidvalidity ├── dovecot-uidvalidity.5b3f746f ├── mailboxes │ ├── Drafts │ │ └── dovecot.index.log │ ├── INBOX │ │ └── dovecot.index.cache │ │ └── dovecot.index.log │ │ └── u.1 │ ├── Junk │ │ └──dovecot.index.log │ ├── Sent │ │ └── dovecot.index.log │ └── Trash │ └── dovecot.index.log └── subscriptions My path configuration: mail_attribute_dict = file:%h/dovecot-attributes mail_home = /srv/mail/%d/%n/ mail_location = sdbox:~/ I have tried mail_location = sdbox:~/:FULLDIRNAME= and mail_location = sdbox:~/:FULLDIRNAME=/ but it doesn't work. The first doesn't change anything. The second auto-creates the folders after first login like I want, but after next login they are greyed out and no longer accessible. Is it possible to get rid of the "dbox-Mails"-folder? I want this because I don't like to have an unneeded deep folder structure. Or is there a good reason to let the "dbox-Mails" folder in my setup? Greetings, Hativ

2 3