- dovecot - dovecot.org

don't understand error message
by Robert Watson 22 Sep '14

22 Sep '14

new installation of Dovecot 2.0.9 on Centos # telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready. LOGIN JohnDoe JohnDoe LOGIN BAD First parameter in line is IMAP's command tag, not the command name. Add that before the command, like: a login user pass ^] telnet> quit Connection closed. What's generating this error? Using samba4 ad for passdb/userdb. Robert

2 1

Re: LDAP and dovecot
by dovecot＠outputservices.com 21 Sep '14

21 Sep '14

I am sorry. I am NOW able to authenticate to my ldap server. Thank you all.

2 1

Re: LDAP and dovecot
by dovecot＠outputservices.com 20 Sep '14

20 Sep '14

I was able to decipher the error after looking at some other web pages. I found I have to compile using the openldap libraries instead of the default Solaris ldap libraries. I compiled using the following: > LDFLAGS='-L/usr/local/openldap/lib -R/usr/local/openldap/lib' \ > ./configure --prefix=/tmp/tocevod --with-ssl=openssl --with-solr --with-zlib --with-bzlib --with-ldap=yes ldd on the ....libexec/dovecot/auth files shows the proper openldap libraries. libdovecot.so.0 => /usr/local/tools/dovecot/lib/dovecot/libdovecot.so.0 libpam.so.1 => /usr/lib/libpam.so.1 libldap-2.4.so.2 => /usr/local/openldap/lib/libldap-2.4.so.2 libsasl.so.1 => /usr/lib/libsasl.so.1 libssl.so.0.9.7 => /usr/sfw/lib/libssl.so.0.9.7 libcrypto.so.0.9.7 => /usr/sfw/lib/libcrypto.so.0.9.7 liblber-2.4.so.2 => /usr/local/openldap/lib/liblber-2.4.so.2 libresolv.so.2 => /usr/lib/libresolv.so.2 libgen.so.1 => /usr/lib/libgen.so.1 librt.so.1 => /usr/lib/librt.so.1 libnsl.so.1 => /usr/lib/libnsl.so.1 libsocket.so.1 => /usr/lib/libsocket.so.1 libsendfile.so.1 => /usr/lib/libsendfile.so.1 libc.so.1 => /usr/lib/libc.so.1 libgcc_s.so.1 => /usr/sfw/lib/libgcc_s.so.1 libcmd.so.1 => /usr/lib/libcmd.so.1 libmd.so.1 => /usr/lib/libmd.so.1 libaio.so.1 => /usr/lib/libaio.so.1 libmp.so.2 => /usr/lib/libmp.so.2 libscf.so.1 => /usr/lib/libscf.so.1 libdoor.so.1 => /usr/lib/libdoor.so.1 libuutil.so.1 => /usr/lib/libuutil.so.1 libssl_extra.so.0.9.7 => /usr/sfw/lib/libssl_extra.so.0.9.7 libcrypto_extra.so.0.9.7 => /usr/sfw/lib/libcrypto_extra.so.0.9.7 libm.so.2 => /usr/lib/libm.so.2 I am not able to authenticate to my ldap server. Thank you all.

1 0

Re: LDAP and dovecot
by Dave Ryan 19 Sep '14

19 Sep '14

Thank you all for your assistance. I was able to locate another web site that mentioned I needed to compile dovecot with my openldap libraries. I then compiled dovecot in the following manner: CPPFLAGS=-I/usr/local/openldap/include \ LDFLAGS='-L/usr/local/openldap/lib -R/usr/local/openldap/lib' \ ./configure --prefix=/tmp/tocevod --with-ssl=openssl --with-solr --with-zlib --with-bzlib --with-ldap=yes This then included the openldap libraries. I tested access and now it works. ldd on /dovecot/libexec/dovecot/auth showed the openldap libraries. libdovecot.so.0 => /usr/local/tools/dovecot/lib/dovecot/libdovecot.so.0 libpam.so.1 => /usr/lib/libpam.so.1 libldap-2.4.so.2 => /usr/local/openldap/lib/libldap-2.4.so.2 libsasl.so.1 => /usr/lib/libsasl.so.1 libssl.so.0.9.7 => /usr/sfw/lib/libssl.so.0.9.7 libcrypto.so.0.9.7 => /usr/sfw/lib/libcrypto.so.0.9.7 liblber-2.4.so.2 => /usr/local/openldap/lib/liblber-2.4.so.2 libresolv.so.2 => /usr/lib/libresolv.so.2 libgen.so.1 => /usr/lib/libgen.so.1 librt.so.1 => /usr/lib/librt.so.1 libnsl.so.1 => /usr/lib/libnsl.so.1 libsocket.so.1 => /usr/lib/libsocket.so.1 libsendfile.so.1 => /usr/lib/libsendfile.so.1 libc.so.1 => /usr/lib/libc.so.1 libgcc_s.so.1 => /usr/sfw/lib/libgcc_s.so.1 libcmd.so.1 => /usr/lib/libcmd.so.1 libmd.so.1 => /usr/lib/libmd.so.1 libaio.so.1 => /usr/lib/libaio.so.1 libmp.so.2 => /usr/lib/libmp.so.2 libscf.so.1 => /usr/lib/libscf.so.1 libdoor.so.1 => /usr/lib/libdoor.so.1 libuutil.so.1 => /usr/lib/libuutil.so.1 libssl_extra.so.0.9.7 => /usr/sfw/lib/libssl_extra.so.0.9.7 libcrypto_extra.so.0.9.7 => /usr/sfw/lib/libcrypto_extra.so.0.9.7 libm.so.2 => /usr/lib/libm.so.2 Thanks again.

1 0

dovecot doesn't see my mails ?
by Dave Myers 19 Sep '14

19 Sep '14

Dear dovecot users. I have an odd issue in that when I connect to my dovecot server from either a local or remote system I can't see my test emails (I have the impression that is is looking at the wrong location on disk). here are some details.... # dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-xen-amd64 x86_64 Debian 6.0.3 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login cram-md5 auth_verbose = yes auth_verbose_passwords = plain lda_mailbox_autocreate = yes log_path = /var/log/dovecot.log mail_debug = yes mail_gid = 1002 mail_home = /var/mail/virtual/%d/%n mail_location = maildir:~/mail/: mail_uid = 1002 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=SHA512-CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } protocols = imap service auth { unix_listener auth-client { mode = 0660 user = mail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } userdb { driver = passwd } verbose_ssl = yes when I connect (via openSSL from a remote system) openssl s_client -connect mail.exsportee.biz:993 CONNECTED(00000003) depth=0 C = fr, ST = coupvray, L = paris, O = exsportee, OU = facilitee, CN = scibearspace, emailAddress = david.myers(a)scibearspace.org verify error:num=18:self signed certificate verify return:1 depth=0 C = fr, ST = coupvray, L = paris, O = exsportee, OU = facilitee, CN = scibearspace, emailAddress = david.myers(a)scibearspace.org verify return:1 [.... security stuff removed....] * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot ready. auth login "websales(a)exsportee.biz" "testPassword" auth OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE] Logged in a list "" "*" * LIST (\HasNoChildren) "." "INBOX" a OK List completed. a select INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1411042633] UIDs valid * OK [UIDNEXT 1] Predicted next UID * OK [NOMODSEQ] No permanent modsequences a OK [READ-WRITE] Select completed. So I seem to have no mails in the inbox... so I check the dovecot log for the where it thinks it should be looking for the mail Sep 19 07:37:59 imap-login: Info: Login: user=<websales(a)exsportee.biz>, method=PLAIN, rip=85.170.90.200, lip=92.39.247.92, mpid=26570, TLS, session=<Cf4uLmYDlgBVqlrI> Sep 19 07:37:59 imap(websales(a)exsportee.biz): Debug: Effective uid=1002, gid=1002, home=/var/mail/virtual/exsportee.biz/websales Sep 19 07:37:59 imap(websales(a)exsportee.biz): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/mail/: Sep 19 07:37:59 imap(websales(a)exsportee.biz): Debug: maildir++: root=/var/mail/virtual/exsportee.biz/websales/mail, index=, control=, inbox=/var/mail/virtual/exsportee.biz/websales/mail, alt= So I can see that the directories that Dovecot is looking at are: home=/var/mail/virtual/exsportee.biz/websales location=maildir:~/mail/ So if I understand, dovecot is looking at [ /var/mail/virtual/exsportee.biz/websales/mail/ ] for my mail. When I run a listing of the directory I get the following.... # ls -al /var/mail/virtual/exsportee.biz/websales/mail/ total 44 drwx--S--- 5 vmail vmail 4096 Sep 18 12:46 . drwxr-sr-x 3 vmail vmail 4096 Sep 18 12:00 .. drwx--S--- 2 vmail vmail 4096 Sep 18 12:17 cur -rw------- 1 vmail vmail 248 Sep 18 12:23 dovecot.index.log -rw------- 1 vmail vmail 51 Sep 18 12:23 dovecot-uidlist -rw------- 1 vmail vmail 8 Sep 18 12:17 dovecot-uidvalidity -r--r--r-- 1 vmail vmail 0 Sep 18 12:17 dovecot-uidvalidity.541acd49 drwx--S--- 2 vmail vmail 4096 Sep 18 12:17 new -rw------- 1 vmail vmail 561 Sep 18 12:22 q1XUaj8-5382575 -rw------- 1 vmail vmail 517 Sep 18 12:00 q1XUaOD-5382570 -rw------- 1 vmail vmail 513 Sep 18 12:46 q1XUb60-5382584 drwx--S--- 2 vmail vmail 4096 Sep 18 12:17 tmp the 3 files q1xu[....] are test mails that I sent to myself, either internally from the localhost CLI, mutt or from my google mail account. I should note the following: ~ SWAKS can send mails out to external addresses also. ~ I cannot connect to my mail from any external clients (thunderbird) ~ I cannot connect to my mail localy using MUTT ~ I use exim4 (v4.7.2) as my MTA (if you want to see a config just ask). please help me resolve these issues. thanks in advance. David -- Tel: + 33 6 50 14 39 34 email: david.myers.24j74(a)gmail.com Addres: 22 Rue de L'Eglise 77700 Coupvray. 77700 France

4 9

Support of unicode in then recipient names
by Александр Егоров 19 Sep '14

19 Sep '14

Hi Dovecot Community, We are using ltmp to deliver messages through postfix to dovecot. During testing we have found that dovecot does not understand recipient email address if it is composed from national symbols : e.g. ยจฆฟคฏข(a)xn--22cdfh1b8fsa.xn--22cdfh1b8fsa Question is are there any plans to either add native support for such email addresses or to translate it to punycode and then try to find such a recipient? -- Александр Егоров (Alexander Yegorov)

1 0

Syslog PID
by Фадеев Виталий Львович 19 Sep '14

19 Sep '14

Hi! How to write PIDs to syslog? Example: Sep 19 00:57:00 hostname dovecot: pop3-login: Login: user=< username(a)domainname.com >, method=PLAIN, rip=XXX.XXX.XXX.XXX, lip=XXX.XXX.XXX.XXX, mpid=14407, TLS, session=<6LYlcmYDAQC4reGs> Sep 19 00:57:00 hostname dovecot: pop3( username(a)domainname.com ): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Sep 19 00:57:09 hostname exim[14423]: 2014-09-19 00:57:09 dovecot_login authenticator failed for s16010629.onlinehome-server.info (User) [82.165.16.9]: 535 Incorrect authentication data (set_id=front) Sep 19 00:57:09 hostname exim[14424]: 2014-09-19 00:57:09 dovecot_login authenticator failed for s16010629.onlinehome-server.info (User) [82.165.16.9]: 535 Incorrect authentication data (set_id=front I need it because i write all logs to postgresql and analyze them with Adiscon LogAnalyzer. Perhaps, per-process logs entry with PID would be better.

2 1

unable to see mail when using telnet / open ssl
by Dave Myers 19 Sep '14

19 Sep '14

Dear dovecot list. I'm setting up my own VPS and working through getting mail to work. Here is my dovecot -n $dovecot -n maildir:%h/%d/%n/mail : layout=fs # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-xen-amd64 x86_64 Debian 6.0.3 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login cram-md5 auth_verbose = yes auth_verbose_passwords = plain lda_mailbox_autocreate = yes log_path = /var/log/dovecot.log mail_debug = yes mail_gid = 1002 mail_home = /var/mail/virtual/%d/%n mail_location = maildir:~/mail: layout=fs mail_uid = 1002 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=SHA512-CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } protocols = imap service auth { unix_listener auth-client { mode = 0660 user = mail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } userdb { driver = passwd } verbose_ssl = yes I can successfully log into dovecot using telnet and open ssl from a remote terminal, so authentication and everything is working fine. From the above dovecot -n I asume that mails should be going to /var/mail/virtual/domain/user/mail However when I view this directory I can see a number of test mails that I have sent using echo "Hello me" | mail -s "Dovecot test" $USER (see http://wiki2.dovecot.org/FindMailLocation) Why am I not seeing them when I use telnet / openSSL to log in? All help is greately appreciated. -- Tel: + 33 6 50 14 39 34 email: david.myers.24j74(a)gmail.com Addres: 22 Rue de L'Eglise 77700 Coupvray. 77700 France

2 1

negative auth cache?
by Will Yardley 19 Sep '14

19 Sep '14

I am using Dovecot 2.2.13, which doesn't yet seem to have the $auth_cache_negative parameter. Should the negative cache value honor $auth_cache_ttl then? I had a problem where some of our ldap systems were reinitialized. Some users, presumably those who tried to login while their records were returning a failure, became unable to login after the records were once again returning normally. I currently have: auth_cache_size = 5 M auth_cache_ttl = 5 mins # Not yet implemented #auth_cache_negative = 2 mins yet the problem seemed to persist for more than an hour. Also, how can I flush the cache for a non-default instance's cache using doveadm -- "doveadm auth cache flush" doesn't seem to have an '-a' option AFAICT. # doveadm auth usage: doveadm [-Dv] [-f <formatter>] auth <command> [<args>] cache flush w

3 5

LDAP and dovecot
by dovecot＠outputservices.com 19 Sep '14

19 Sep '14

At my company I have users who are now becoming remote and using their mobile devices for email. I use Solaris 10 10/09 s10x_u8wos_08a X86 as an operating system and I now need a more secure email solution than the generic sendmail / imap solution. I want to use dovecot and postfix because I have read good reports on these products for ease of setup and use. I need to use both with SSL certificates and username / passwords for both receiving and sending emails. I am having difficulty getting dovecot to work with my ldap password solution. I have read all the documentation, there is a lot of it, and find it confusing. But I have tried very hard to get the solution to work. I have not compiled postfix because I want to use the dovecot authentication solution it mentions. Therefore I need to get dovecot to work first. I have dovecot 2.2.10 & postfix 2.11.1 with openldap 2.4.33. I have tested dovecot with /etc/passwd /etc/shadow password authentication and password flat files. Those work, but not what I need. I need to use ldap so the users only have to set one password. Below is the information I have. I have created self signed SSL certificates for testing purposes. We will get real SSL certificates once everything is operational. ********* I compiled dovecot with the following command: ./configure --prefix=/usr/local/tools/dovecot --with-ssl=openssl --with-solr --with-zlib --with-bzlib --with-ldap=yes ------------------------------------------- dovecot -n # 2.2.10: /usr/local/tools/dovecot/etc/dovecot/dovecot.conf # OS: SunOS 5.10 i86pc base_dir = /dovecot/var/run/dovecot log_path = /dovecot/log/log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = mbox:~/posta:INBOX=/var/mail/%u:LAYOUT=maildir++:INDEX=~/posta/index:CONTROL=~/posta/control passdb { args = /dovecot/etc/dovecot/tests/ldap.settings driver = ldap } protocols = imap service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 } } ssl_cert = </dovecot/certs/dovecot.pem ssl_key = </dovecot/certs/dovecot.key ssl_prefer_server_ciphers = yes userdb { args = /dovecot/etc/dovecot/tests/ldap.settings driver = ldap } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep } ------------------------------------------- /dovecot/etc/dovecot/tests/ldap.settings hosts = ldap.outputservices.com tls = no ldap_version = 3 base = dc=ldap,dc=outputservices,dc=com ------------------------------------------- If I use ldap for passwords: 2014-09-18 09:44:23 master: Info: Dovecot v2.2.10 starting up for imap 2014-09-18 09:44:33 auth: Fatal: LDAP: Buggy LDAP library returned wrong fd: 1 2014-09-18 09:44:33 master: Error: service(auth): command startup failed, throttling for 2 secs 2014-09-18 09:44:33 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<> , rip=137.106.101.127, lip=137.106.76.215, TLS handshaking, session=<d1Nt3FgD1wCJamV/> 2014-09-18 09:44:48 master: Warning: Killed with signal 15 (by pid=18992 uid=0 code=kill) ------------------------------------------- If I use a flat file for passwords: 2014-09-18 09:42:23 master: Info: Dovecot v2.2.10 starting up for imap 2014-09-18 09:43:05 imap-login: Info: Login: user=<dave>, method=PLAIN, rip=137.106.101.127, lip=137.106.76.215, mpid=16769, TLS, se ssion=<vAny1VgDywCJamV/> 2014-09-18 09:43:05 imap(dave): Debug: Effective uid=6010, gid=131, home=/export/home/sun/dave 2014-09-18 09:43:05 imap(dave): Debug: maildir++: root=/export/home/sun/dave/posta, index=/export/home/sun/dave/posta/index, indexpv t=, control=/export/home/sun/dave/posta/control, inbox=/var/mail/dave, alt= 2014-09-18 09:43:10 imap(dave): Info: Disconnected: Logged out in=223 out=1122 2014-09-18 09:43:22 master: Warning: Killed with signal 15 (by pid=17115 uid=0 code=kill) ------------------------------------------- If I use /etc/passwd /etc/shadow for passwords: 2014-09-18 09:39:56 master: Info: Dovecot v2.2.10 starting up for imap 2014-09-18 09:40:14 imap-login: Info: Login: user=<dave>, method=PLAIN, rip=137.106.101.127, lip=137.106.76.215, mpid=13053, TLS, se ssion=<uaT5zFgDwACJamV/> 2014-09-18 09:40:14 imap(dave): Debug: Effective uid=6010, gid=131, home=/export/home/sun/dave 2014-09-18 09:40:14 imap(dave): Debug: maildir++: root=/export/home/sun/dave/posta, index=/export/home/sun/dave/posta/index, indexpv t=, control=/export/home/sun/dave/posta/control, inbox=/var/mail/dave, alt= 2014-09-18 09:41:01 imap(dave): Info: Disconnected: Logged out in=219 out=1118 2014-09-18 09:41:33 master: Warning: Killed with signal 15 (by pid=14765 uid=0 code=kill) ------------------------------------------- I am using openldap 2.4.33. I compiled it using the following command: ./configure --enable-crypt --enable-ldap --enable-perl --prefix=/usr/local/openldap In the slapd.conf file I have placed the following: access to attrs=userPassword by dn="cn=dovecot,dc=ldap,dc=outputservices,dc=com" read by anonymous auth by self write by * none ------------------------------------------- In the ldap database I have the following dovecot user information: dn: uid=dovecot,ou=People,dc=ldap,dc=outputservices,dc=com uid: dovecot cn: Dovecot Email User objectClass: account objectClass: posixAccount objectClass: top objectClass: shadowAccount uidNumber: 505 gidNumber: 505 homeDirectory: /tmp structuralObjectClass: account entryUUID: f85d1e02-13e3-1033-9c4a-b7d2075f7ecd creatorsName: cn=admin,dc=ldap,dc=outputservices,dc=com createTimestamp: 20140117165553Z loginShell: /bin/tcsh entryCSN: 20140725160856.481921Z#000000#000#000000 modifiersName: cn=admin,dc=ldap,dc=outputservices,dc=com modifyTimestamp: 20140725160856Z ------------------------------------------- In the /etc/passwd file I have the following information: dovecot:x:505:505:Dovecot IMAP Server:/tmp:/bin/false dovenull:x:506:506:Dovecot IMAP Server:/tmp:/bin/false ------------------------------------------- I need assistance on this and also once I get dovecot running with ldap, I could use proper assistance with the postfix solution also. I want to stop solaris versions of sendmail and use dovecot & postfix. I am also a little confused on the mail_location setting. We use thunderbird as an email client and it sets the "local folders" just fine. But with imap it puts the Sent, Trash, Draft folders in the users "home" directory. With dovecot I have to put them in a different folder, I called it posta for now. It then makes them . Files. (.Sent, .Trash ?)

2 1