- dovecot - dovecot.org

LDAP authentication
by John Oliver 10 Sep '14

10 Sep '14

CentOS 6.5, dovecot 2.0.9-7 I was using http://www.linuxmail.info/postfix-dovecot-ldap-centos-5/ to get LDAP auth working. And what's really annoying is, it worked... until I screwed something up and had to pull my work back from a backup. Now it doesn't work :-( [joliver@localhost ~]$ telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready. a1 LOGIN testuser1 password a1 NO [AUTHENTICATIONFAILED] Authentication failed. Turn on debugging and see: Sep 10 11:26:58 localhost dovecot: auth: Debug: pam(testuser1,127.0.0.1): lookup service=dovecot Sep 10 11:26:58 localhost dovecot: auth: Debug: pam(testuser1,127.0.0.1): #1/1 style=1 msg=Password: Sep 10 11:27:00 localhost dovecot: auth: pam(testuser1,127.0.0.1): pam_authenticate() failed: Permission denied Sep 10 11:27:00 localhost dovecot: auth: ldap(testuser1,127.0.0.1): invalid credentials Sep 10 11:27:02 localhost dovecot: auth: Debug: client out: FAIL#0111#011user=testuser1 So, I don't know what permission is being denied by PAM, or if that was there or not when this did work. I can access my LDAP server just fine. What else can I check? -- *********************************************************************** * John Oliver http://www.john-oliver.net/ * * * ***********************************************************************

2 4

dovecot 2.2.13: LMTP delivery with multiple recipients incorrectly mixes users
by Arkadiusz Miśkiewicz 10 Sep '14

10 Sep '14

Hi. I'm using exim that delivers email over LMTP to dovecot 2.2.13. I noticed that dovecot LMTP service is sometimes (reare but repeats) mixing users. Example below. There is one mail (msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>) that is going to be delivered to multiple local recipients. Some recipients are delivered properly: Sep 1 05:40:33 host dovecot: lmtp(3176): Connect from local Sep 1 05:40:34 host dovecot: lmtp(3176, gbuser1): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:40:34 host dovecot: lmtp(3176, jpuser2): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:40:34 host dovecot: lmtp(3176, rkuser3): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:40:34 host dovecot: lmtp(3176, gbruser4): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:40:34 host dovecot: lmtp(3176, pbauser5): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:40:34 host dovecot: lmtp(3176, mwauser6): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:40:34 host dovecot: lmtp(3176, mdyuser7): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX but some are not: Sep 1 05:40:34 host dovecot: lmtp(3176, lkrzyuser8): Error: lstat(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist.lock) failed: Permission denied Sep 1 05:40:34 host dovecot: lmtp(3176, lkrzyuser8): Error: file_dotlock_create(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist) failed: Permission denied (euid=28371(<unknown>) egid=17373(<unknown>) missing +x perm: /var/lib/dovecot/control/gbuser1, dir owned by 67593:17373 mode=0700) Notice it was trying to deliver to user "lkrzyuser8" but it tries to access some other user files (dovecot-uidlist). euid=28371 is indeed "lkrzyuser8" but why it tries to access "gbuser1" files? Sep 1 05:40:34 host dovecot: lmtp(3176, lkrzyuser8): Error: lstat(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist.lock) failed: Permission denied Sep 1 05:40:34 host dovecot: lmtp(3176, lkrzyuser8): Error: file_dotlock_create(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist) failed: Permission denied (euid=28371(<unknown>) egid=17373(<unknown>) missing +x perm: /var/lib/dovecot/control/gbuser1, dir owned by 67593:17373 mode=0700) Sep 1 05:40:34 host dovecot: lmtp(3176, lkrzyuser8): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: save failed to INBOX: BUG: Unknown internal error Above is again the same case. Sep 1 05:40:34 host dovecot: lmtp(3176, wm1user9): Error: lstat(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist.lock) failed: Permission denied Sep 1 05:40:34 host dovecot: lmtp(3176, wm1user9): Error: file_dotlock_create(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist) failed: Permission denied (euid=128065(<unknown>) egid=17373(<unknown>) missing +x perm: /var/lib/dovecot/control/gbuser1, dir owned by 67593:17373 mode=0700) Sep 1 05:40:34 host dovecot: lmtp(3176, wm1user9): Error: lstat(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist.lock) failed: Permission denied Sep 1 05:40:34 host dovecot: lmtp(3176, wm1user9): Error: file_dotlock_create(/var/lib/dovecot/control/gbuser1/.INBOX/dovecot-uidlist) failed: Permission denied (euid=128065(<unknown>) egid=17373(<unknown>) missing +x perm: /var/lib/dovecot/control/gbuser1, dir owned by 67593:17373 mode=0700) Sep 1 05:40:34 host dovecot: lmtp(3176, wm1user9): TDO+HNDpA1RoDAAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: save failed to INBOX: BUG: Unknown internal error And here again the same problem but with user "wm1user9" Sep 1 05:40:34 host dovecot: lmtp(3176): Disconnect from local: Successful quit # doveadm user gbuser1 field value uid 67593 gid 17373 home /var/mail/gbuser1/ mail maildir:/var/mail/gbuser1/:CONTROL=/var/lib/dovecot/control/gbuser1 # doveadm user lkrzyuser8 field value uid 28371 gid 17373 home /var/mail/lkrzyuser8/ mail maildir:/var/mail/lkrzyuser8/:CONTROL=/var/lib/dovecot/control/lkrzyuser8 # doveadm user wm1user9 field value uid 128065 gid 17373 home /var/mail/wm1user9/ mail maildir:/var/mail/wm1user9/:CONTROL=/var/lib/dovecot/control/wm1user9 Later exim retries delivery and dovecot lmtp succeeds: Sep 1 05:41:34 host dovecot: lmtp(4737): Connect from local Sep 1 05:41:34 host dovecot: lmtp(4737, lkrzyuser8): b9F+OsHqA1SBEgAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:41:34 host dovecot: lmtp(4737, wm1user9): b9F+OsHqA1SBEgAA16XVAg: msgid=<1ACE53B70631CA45B62348E4EE8757493731A59E@KRMXA41>: saved mail to INBOX Sep 1 05:41:34 host dovecot: lmtp(4737): Disconnect from local: Successful quit The problem is not reasily repeatable. It happens several times a day for different users each time (while thousands users are logging in), so I guess some race condition takes place. # dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=1000 } is lower than required under max. load (8000) doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (6003) # OS: Linux 3.14.17-1 x86_64 xfs auth_mechanisms = plain login auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@= auth_username_translation = @= auth_verbose = yes default_process_limit = 2000 default_vsz_limit = 512 M disable_plaintext_auth = no first_valid_gid = 1500 first_valid_uid = 1500 lda_mailbox_autocreate = yes lmtp_save_to_detail_mailbox = yes login_greeting = Mail server ready. mail_location = maildir:/var/mail/%Ln:CONTROL=/var/lib/dovecot/control/%Ln mail_log_prefix = "%s(%u): session=<%{session}>, " mail_plugins = zlib quota namespace { hidden = no inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename quota = fs:User quota:user quota2 = fs:Group quota:group } postmaster_address = postmaster(a)somwehere.pl service auth { unix_listener auth-userdb { mode = 0666 } } service imap { process_limit = 2048 } service pop3 { process_limit = 1024 } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { auth_username_format = %Ln auth_username_translation = } protocol imap { imap_logout_format = bytes=%i/%o mail_max_userip_connections = 20 mail_plugins = zlib quota imap_quota mail_log notify } protocol pop3 { mail_max_userip_connections = 20 mail_plugins = mail_log notify pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o pop3_uidl_format = %Mf } -- Arkadiusz Miśkiewicz, arekm / maven.pl

1 1

Replication problem
by Ve (HOME) 10 Sep '14

10 Sep '14

Hi, I'm using mdbox and replication. Due to configuration error synchronization was not able to be done last week. Since then the problem has been corrected but synchronisation for some mailbox always failed in I/O stalled timeout for 600 seconds. The link between the two servers is quite slow and multiple sync are done in parallel leading to congested link. I can't replicate with rsync as change in the mdbox has been done on the two servers to get back to a working state. What do you think could be done to resynchronized the two dovecot server. Another question is what is this timeout ? Timeout of communication i.e no data received during 600 seconds ( to me that looks unlikely ) or 600 seconds for doing the full sync or 600 seconds for one mail sync. Thanks for any help. Regards, Vincent

3 5

preserving flags for shared mailbox when migrating from cyrus to dovecot
by Jogi Hofmüller 10 Sep '14

10 Sep '14

Dear all, Despite all the progress we are making in our attempt to make the migration as smooth and transparent for our users there are still some important unsolved issues. One thing that I can't figure out is how to preserve a user's flags that s/he has for mail in a shared mailbox. So far we tried 'doveadm backup -R' as well as the cyrus2dovecot script from here [1]. Both work well for individual mailboxes but do not migrate subscriptions for shared mailboxes and -- more importantly -- flags for mail in a shared mailbox. Reconstructing subscriptions is quite easy but I have no clue on how to reconstruct a user's flags. Any hint is greatly appreciated! [1] http://cyrus2dovecot.sw.fu-berlin.de/index.html -- j.hofmüller mur.sat -- a space art project http://sat.mur.at/

3 5

master user in ldap?
by Francesco 10 Sep '14

10 Sep '14

Hello everyone, i was wondering if it was possible to add master user criteria in ldap backends. the idea is that the users, members of a specific group, should be able to login with their own credentials on behalf of other users. i've tried setting it up like this: hosts = localhost dn = CN=ldapuser,OU=someldapou,DC=domain,DC=tld dnpass = <password> auth_bind = yes ldap_version = 3 base = DC=domain,DC=tld user_attrs = sAMAccountName=home=/var/vmail/% $,skip=found,maxStorage=quota_rule=*:storage=% $M,quota_rule2=Trash:storage=+100M user_filter = (&(ObjectClass=person)(sAMAccountName=% u)(memberOf=CN=Domain Admins,CN=Users,DC=domain,DC=tld)) then i added a passdb as follows passdb { driver = ldap master = yes args = /etc/dovecot/dovecot-ldap-masteruser.conf.ext } and of course the separator. but when i try to login with realuser*userinadministratorsgroup passwordofuserinadministratorsgroup i get authentication failed. am i missing something? is it even possible to accomplish such thing? because i didn't see any example in the wiki, only plain passdb and sql. thanks in advance Francesco

1 0

Escape comma in the LDAP passdb subquery configuration
by Francesco Fiore 10 Sep '14

10 Sep '14

Hi I have to configure the LDAP passdb to execute a subquery defining dinamically the new DN to use. For example: pass_attrs = @mail=mail=%{login_user},dc=%{login_domain},dc=example,dc=com,\ =proxy=y,\ =host=%{ldap:mailHost@mail} In the previous example, the problem is the use of "," for DN representation, which is also the separator for the attribute template in the pass_attr parameter value. I tried to escape it with '\' or '%' but it doesn't work. Dovecot version is 2.2.13. How can I resolve this issue? Thanks in advance

3 3

"§"-sign in passwords
by InterNetworX | Pascal Heverhagen 10 Sep '14

10 Sep '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hey users, I've got a constellation with dovecot, postfix, froxlor and roundcube. My problem is, when a user has got a paragraph sign in his password, every mail client tells him, that he entered a wrong password. The log says as usually "password mismatch". did anyone else fixed this problem already? Hope you can help me :) Pascal -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJUD+SHAAoJEA3oZzzqW4iVobwH/0r/g9eP2inhqCNLqBBN3Ret gU9L9dXM8iqOBl3ylgTK1Fvf/7rhnPHhM43oS+KAoaOcrG4u9PI83hfKYqMGuZPB +1/PhMcEmydUl98mjT76tC/SuGAgRnWlnc6eA+LB1Zp8EgN0h4l8zLXvw2mv6nA5 dyEHUq6cW9oIg38jMe0rXAb5mqNROAGtKTaM7182Xxk5dnJAfb5ZdNPZ8Vbn0A3d ENE9hzdndNeQPkDIVmdD6Fv1kWVwCf7shAPgQ3yJoJxOUaEq9sl4BQRI/GcLU6RF lpQFsMQTjwDa9RWPYvOT33SHDiwYLAr9l65C5A1ReLNROSaTW5rE+lL9NiUWcD8= =jP+Y -----END PGP SIGNATURE-----

3 2

Creating a backup of incoming mail
by LuKreme 10 Sep '14

10 Sep '14

This is my master.cf line for dovecot virtual users: dovecot unix - n n - - pipe flags=DRhu user=vpopmail:vchkpw argv=/usr/local/libexec/dovecot/dovecot-lda -f ${sender} -d ${user}@${nexthop} -m ${extension} I would like to also write every mail, before delivery to the user, to a backup location like /backup/imap/mm/dd Possible? -- 'On whose authority?' demanded Wert. Trymon turned his grey eyes on him. 'Mine. I need no other.' --The Light Fantastic

5 11

Re: vsz_limit is 18,447 PB
by Joseph Tam 10 Sep '14

10 Sep '14

On Tue, 9 Sep 2014, dovecot-request(a)dovecot.org wrote: > vsz_limit = 18446744073709551615 B > } > > Still the same value? why not 265MB? I guess this is Dovecot's approximation of infinity. It's the largest value that fits into a 64-bit signed integer (2^64-1). Joseph Tam <jtam.home(a)gmail.com>

1 0

ACL with Public Namespace
by Bruno Galindro da Costa 10 Sep '14

10 Sep '14

I've configured a namespace like this: namespace avisos { type = public list = yes location = maildir:/var/mail.avisos:INDEXPVT=~/Maildir/avisos subscriptions = yes prefix = "AVISOS." mailbox DIVULGA { auto = subscribe } } This is the namespace representation in filesystem: root@imap:~# ls -lha /var/mail.avisos/ total 44K drwxr-xr-x 7 vmail mail 4,0K Set 9 18:21 . drwxr-xr-x 16 root root 4,0K Set 9 17:08 .. drwxr-xr-x 5 vmail mail 4,0K Set 9 16:49 .DIVULGA -rw-r--r-- 1 root root 17 Set 9 18:21 dovecot-acl -rw-r--r-- 1 vmail mail 0 Set 9 18:11 dovecot-acl-list -rw-r--r-- 1 vmail mail 360 Set 9 18:11 dovecot.mailbox.log -rw-r--r-- 1 vmail mail 8 Set 9 18:02 dovecot-uidvalidity -r--r--r-- 1 vmail mail 0 Set 9 14:57 dovecot-uidvalidity.540f3f88 -rw-r--r-- 1 vmail mail 249 Set 9 18:11 subscriptions This is the content of dovecot-acl file located at namespace's root level: root@imap:~# cat /var/mail.avisos/dovecot-acl authenticated rs After reload dovecot service, it trows this error message in log: Sep 9 18:14:13 imap dovecot: imap(user@mydomain): Error: Failed to autocreate mailbox AVISOS.DIVULGA: Permission denied So, I've changed the dovecot-acl file to this one and the problem was solved. root@imap:~# cat /var/mail.avisos/dovecot-acl authenticated rsk But that change created another problem: dovecot-acl file is copied into AVISOS.DIVULGA. So, the user can create a maildir inside it. This behaviour is bad because "invalid" maildirs are created under the filesystem. My intention is to don't permit the user to create any maildir inside any location of that namespace. But, I want to make possible to the administrator to edit the dovecot.conf, insert a new mailbox into namespace avisos and reload dovecot service to create new maildirs automatically. How can I solve this problem? -- Att. Bruno Galindro da Costa

1 0