- dovecot - dovecot.org

Authentication using AD : bug ?
by Nicolas Cauchie 22 Sep '14

22 Sep '14

Hello, I've setup a mail server (still in test) with Postfix and Dovecot, authentication made using Active Directory. I authenticate my test user in AD well in Dovecot. However, if I change this user's password in AD, the old password still works for authentication in Dovecot and the new is working too. Is there a time to make Dovecot don't "remember" the old password or is it a bug ? Restarting Dovecot don't solve the problem. Do you already heard about this ? Please tell me what conf files you maybe need. Thanks in advance Nicolas signature -----

2 1

Re: LDAP and dovecot
by dovecot＠outputservices.com 22 Sep '14

22 Sep '14

For the record. I compiled dovecot to use the openldap libraries my openldap server uses. My email server and ldap server are on two different machines. So I just copied over my ldap libraries and placed them in the correct place and then compiled dovecot. I saw this clue in a different web page. Something about Solaris ldap libraries being bad. CPPFLAGS=-I/usr/local/openldap/include \ > LDFLAGS='-L/usr/local/openldap/lib -R/usr/local/openldap/lib' \ ./configure --prefix=/usr/local/tools/dovecot --with-ssl=openssl --with-solr --with-zlib --with-bzlib --with-ldap=yes This now allows me to authenticate with my openldap server. I am NOW able to authenticate to my ldap server. So my final configuration is: dovecot -n # 2.2.10: /usr/local/tools/dovecot/etc/dovecot/dovecot.conf # OS: SunOS 5.10 i86pc base_dir = /dovecot/var/run/dovecot log_path = /dovecot/log/log mail_location = mbox:~/posta:INBOX=/var/mail/%u:LAYOUT=maildir++:INDEX=~/posta/index:CONTROL=~/posta/control passdb { args = /dovecot/etc/dovecot/conf.d/ldap.settings driver = ldap } protocols = imap service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 } } ssl_cert = </dovecot/certs/dovecot.pem ssl_key = </dovecot/certs/dovecot.key ssl_prefer_server_ciphers = yes userdb { args = /dovecot/etc/dovecot/conf.d/ldap.settings driver = ldap } /dovecot/etc/dovecot/conf.d/ldap.settings hosts = ldap.outputservices.com tls = no auth_bind = yes ldap_version = 3 base = dc=ldap,dc=outputservices,dc=com Thank you all.

1 0

X-DOVECOT capabilities
by Timo Sirainen 22 Sep '14

22 Sep '14

Dovecot has a few hidden features currenly, which I know some webmails have been hardcoded to use. Maybe it would be nice to have these available in a bit more globally usable way and advertise some kind of X-DOVECOT capability? I don't really like the idea of having a ton of separate X-DOVECOT-* capabilities. Maybe instead just have X-DOVECOT-1 for the current functionality and when more is added X-DOVECOT-2 etc? Then describe in Dovecot wiki page what they actually contain. Thoughts? The current list of features are at least: - STATUS (X-SIZE): Sum of all RFC822.SIZEs in a mailbox. (More efficient than FETCHing them.) - STATUS (X-GUID): Show mailbox's GUID. - SEARCH X-SAVEDBEFORE, X-SAVEDON, X-SAVEDSINCE: Search with message's saved-timestamp. - FETCH X-SAVEDATE: Fetch message's saved-timestamp. - SEARCH & FETCH X-GUID: Search/fetch message GUID - SEARCH X-MAILBOX, FETCH X-MAILBOX, FETCH X-REAL-UID: With virtual mailboxes search/fetch the mail's physical mailbox name and message UID. - X-CANCEL <tag>: Stop a (long-running) command, which once in a while goes back to the main loop. For example SEARCH or FETCH.

1 0

how to solve : Dovecot version mismatch: Master is v2.1.7, lmtp is v2.2.13
by Dave Myers 22 Sep '14

22 Sep '14

Hello again dovecot list ;) I've recently upgraded my dovecot version from 2.1.7 to 2.2.13. both versions where installed from source. I upgraded why attempting to get lmtp working. I ultimately just coped the executable lmtp to the location that dovecot was expecting it to be in. but then the above error appeared. However when I get the info from dovecot I get the following... $ dovecot -n # 2.2.13: /usr/local/etc/dovecot/dovecot.conf so there seems to be an issue somewhere. I should note that I had copied my previous /conf.d/ files and then copied them back after the update. I guess that I have missed a switch during the build, or need to modify a line in the config somewhere that tells what the version is, but that doesn't explain why the dovecot -n returns the correct info, but the error reports something different. I am considering inserting the version_ignore=yes config option, but where should I insert it ? Thanks in advance. David -- Tel: + 33 6 50 14 39 34 email: david.myers.24j74(a)gmail.com Addres: 22 Rue de L'Eglise 77700 Coupvray. 77700 France

3 3

dovecot´s multiple quota roots
by Andreas Kasenides 22 Sep '14

22 Sep '14

I am trying to find out how Dovecot behaves when there are multiple quota roots. I could not find something authoritative on this. For example, on a nicely running server that used fs quota I now have in 90-quota.conf > plugin { > quota = fs:Mail Quota:user:mount=/Mail > quota2 = maildir:Mail User Quota > } When I do > > doveadm quota get -u atrige01 > Quota name Type Value Limit > % > Mail Quota STORAGE 80036 204800 > 39 > Mail User Quota STORAGE 79306 - > 0 > Mail User Quota MESSAGE 304 - > 0 Apparently both STORAGE quotas values are the same. The question is which of the two is being used by Dovecot. If I insert a limit on the maildir quota which of the two will be used? I am using Dovecot 2.2.12. thank you

1 0

numeric username
by Jernej Porenta 22 Sep '14

22 Sep '14

Heya, does dovecot support "numeric only" usernames (in format "^0-9+$")? We are unable to deliver emails to such usernames via LMTP: Sep 22 08:41:05 razor4 postfix/lmtp[2120]: D4FD91CDC11F: to=<231588(a)example.org>, relay=example.org[private/dovecot-lmtp], delay=217653, delays=217653/0.01/0.02/0, dsn=4.2.0, status=deferred (host example.org[private/dovecot-lmtp] said: 451 4.2.0 <231588(a)example.org> Permission denied (in reply to end of DATA command)) On normal username format (^[a-z][-a-z0-9]+$) everything is working fine. Permissions are the same as on other accounts: # ls -la .mailbox -rw-------+ 1 231588 users 0 Sep 19 20:13 .mailbox Using dovecot 2.2.13 with local accounts on RHEL and (relevant) configs: auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Ln auth_username_translation = ... lmtp_address_translate = ... passdb { args = cache_key=%u%s dovecot default_fields = deny = no driver = pam master = no name = override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never } ... service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 5 protocol = lmtp service_count = 0 type = unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } .... userdb { args = default_fields = driver = passwd name = override_fields = result_failure = continue result_internalfail = continue result_success = return-ok skip = never } Thank you in advance, cheers, Jernej

1 0

don't understand error message
by Robert Watson 22 Sep '14

22 Sep '14

new installation of Dovecot 2.0.9 on Centos # telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready. LOGIN JohnDoe JohnDoe LOGIN BAD First parameter in line is IMAP's command tag, not the command name. Add that before the command, like: a login user pass ^] telnet> quit Connection closed. What's generating this error? Using samba4 ad for passdb/userdb. Robert

2 1

Re: LDAP and dovecot
by dovecot＠outputservices.com 21 Sep '14

21 Sep '14

I am sorry. I am NOW able to authenticate to my ldap server. Thank you all.

2 1

Re: LDAP and dovecot
by dovecot＠outputservices.com 20 Sep '14

20 Sep '14

I was able to decipher the error after looking at some other web pages. I found I have to compile using the openldap libraries instead of the default Solaris ldap libraries. I compiled using the following: > LDFLAGS='-L/usr/local/openldap/lib -R/usr/local/openldap/lib' \ > ./configure --prefix=/tmp/tocevod --with-ssl=openssl --with-solr --with-zlib --with-bzlib --with-ldap=yes ldd on the ....libexec/dovecot/auth files shows the proper openldap libraries. libdovecot.so.0 => /usr/local/tools/dovecot/lib/dovecot/libdovecot.so.0 libpam.so.1 => /usr/lib/libpam.so.1 libldap-2.4.so.2 => /usr/local/openldap/lib/libldap-2.4.so.2 libsasl.so.1 => /usr/lib/libsasl.so.1 libssl.so.0.9.7 => /usr/sfw/lib/libssl.so.0.9.7 libcrypto.so.0.9.7 => /usr/sfw/lib/libcrypto.so.0.9.7 liblber-2.4.so.2 => /usr/local/openldap/lib/liblber-2.4.so.2 libresolv.so.2 => /usr/lib/libresolv.so.2 libgen.so.1 => /usr/lib/libgen.so.1 librt.so.1 => /usr/lib/librt.so.1 libnsl.so.1 => /usr/lib/libnsl.so.1 libsocket.so.1 => /usr/lib/libsocket.so.1 libsendfile.so.1 => /usr/lib/libsendfile.so.1 libc.so.1 => /usr/lib/libc.so.1 libgcc_s.so.1 => /usr/sfw/lib/libgcc_s.so.1 libcmd.so.1 => /usr/lib/libcmd.so.1 libmd.so.1 => /usr/lib/libmd.so.1 libaio.so.1 => /usr/lib/libaio.so.1 libmp.so.2 => /usr/lib/libmp.so.2 libscf.so.1 => /usr/lib/libscf.so.1 libdoor.so.1 => /usr/lib/libdoor.so.1 libuutil.so.1 => /usr/lib/libuutil.so.1 libssl_extra.so.0.9.7 => /usr/sfw/lib/libssl_extra.so.0.9.7 libcrypto_extra.so.0.9.7 => /usr/sfw/lib/libcrypto_extra.so.0.9.7 libm.so.2 => /usr/lib/libm.so.2 I am not able to authenticate to my ldap server. Thank you all.

1 0

Re: LDAP and dovecot
by Dave Ryan 19 Sep '14

19 Sep '14

Thank you all for your assistance. I was able to locate another web site that mentioned I needed to compile dovecot with my openldap libraries. I then compiled dovecot in the following manner: CPPFLAGS=-I/usr/local/openldap/include \ LDFLAGS='-L/usr/local/openldap/lib -R/usr/local/openldap/lib' \ ./configure --prefix=/tmp/tocevod --with-ssl=openssl --with-solr --with-zlib --with-bzlib --with-ldap=yes This then included the openldap libraries. I tested access and now it works. ldd on /dovecot/libexec/dovecot/auth showed the openldap libraries. libdovecot.so.0 => /usr/local/tools/dovecot/lib/dovecot/libdovecot.so.0 libpam.so.1 => /usr/lib/libpam.so.1 libldap-2.4.so.2 => /usr/local/openldap/lib/libldap-2.4.so.2 libsasl.so.1 => /usr/lib/libsasl.so.1 libssl.so.0.9.7 => /usr/sfw/lib/libssl.so.0.9.7 libcrypto.so.0.9.7 => /usr/sfw/lib/libcrypto.so.0.9.7 liblber-2.4.so.2 => /usr/local/openldap/lib/liblber-2.4.so.2 libresolv.so.2 => /usr/lib/libresolv.so.2 libgen.so.1 => /usr/lib/libgen.so.1 librt.so.1 => /usr/lib/librt.so.1 libnsl.so.1 => /usr/lib/libnsl.so.1 libsocket.so.1 => /usr/lib/libsocket.so.1 libsendfile.so.1 => /usr/lib/libsendfile.so.1 libc.so.1 => /usr/lib/libc.so.1 libgcc_s.so.1 => /usr/sfw/lib/libgcc_s.so.1 libcmd.so.1 => /usr/lib/libcmd.so.1 libmd.so.1 => /usr/lib/libmd.so.1 libaio.so.1 => /usr/lib/libaio.so.1 libmp.so.2 => /usr/lib/libmp.so.2 libscf.so.1 => /usr/lib/libscf.so.1 libdoor.so.1 => /usr/lib/libdoor.so.1 libuutil.so.1 => /usr/lib/libuutil.so.1 libssl_extra.so.0.9.7 => /usr/sfw/lib/libssl_extra.so.0.9.7 libcrypto_extra.so.0.9.7 => /usr/sfw/lib/libcrypto_extra.so.0.9.7 libm.so.2 => /usr/lib/libm.so.2 Thanks again.

1 0