- dovecot - dovecot.org

[Dovecot] Help implementing username_format in auth PAM driver
by lee＠trager.us 24 Apr '14

24 Apr '14

While configuring my server with dovecot I noticed that the PAM authentication driver does not support the username_format option as does the password file driver. This didn't seem too hard to implement so I through together a patch. As you can see in the attached patch I only modify the username sent to PAM. Despit doing this I run into the domain lost issue(http://wiki2.dovecot.org/DomainLost). This prevents me from using the domain name in my mail_location config string. What I don't understand is why does changing the username string sent to PAM for authentication trigger this issue? Shouldn't dovecot continue to use the client supplied username as I am *not* changing it anywhere in my config? Thanks, Lee

1 0

Re: [Dovecot] Allowing non-SSL connections only for certain Password Databases
by Joseph Tam 24 Apr '14

24 Apr '14

Dan Pollock <pollock(a)theorem.ca> writes: > I would like to move everyone onto more modern mail programs, but at the > moment I have a couple of them that are stuck using very old software > installed for them on work computers. The rest of my clients can connect > on ports 993 and 995 without it being a problem. You know best whether you want to take the risk of compromising passwords on your system (including compromised accounts using for spamming and blowing your mail reputation to smithereens), but I don't know whether your customers do. They may think they are only risking their Email, but it can be leveraged to also gain access to other authentication systems e.g. "Forgot password" feature. You can suggest the installation of a SSL proxy for those holdouts that won't switch mail readers (stunnel even has support down to Win98). https://www.stunnel.org/ports.html These days, cleartext passwords over the network is just begging to be compromised. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: [Dovecot] ImapTest utility not compiling
by Hein, Brad 23 Apr '14

23 Apr '14

* Found my error. I moved the dovecot source code after compiling it. Didn’t realize there were embedded/absolute URLS within the dovecot source tree. All I needed to do was make clean && make dovecot, then imaptest compiled no problem. [Brad Hein] From: <Hein>, Local Administrator <Brad_Hein(a)cable.comcast.com<mailto:Brad_Hein@cable.comcast.com>> Date: Wednesday, April 23, 2014 at 2:00 PM To: "dovecot(a)dovecot.org<mailto:dovecot@dovecot.org>" <dovecot(a)dovecot.org<mailto:dovecot@dovecot.org>> Subject: ImapTest utility not compiling Following the wiki instructions here: http://www.imapwiki.org/ImapTest/Installation I’ve run into a wall trying to compile the imapTest utility (dovecot compiled without any problems). I think there’s a problem in the imapTest utility? Copy/pasted compile output and attached. The gist of the problem seems to be that imaptest can’t find the dovecot headers and libraries (configure script was executed like this: ./configure --with-dovecot=/usr/src/dovecot-20140420 checkpoint.c:3:17: error: lib.h: No such file or directory checkpoint.c:4:17: error: str.h: No such file or directory <and many more> Based on these errors I believe there’s a compatibility problem between the current imapTest utility and dovecot. The configure script said to report errors to this email address. [Brad Hein]

1 0

[Dovecot] Latest HG 09c114091c88 2.2.12 Assertion Failure
by Thomas Leuxner 23 Apr '14

23 Apr '14

Latest HG reproducibly crashes when accessing a virtual namespace: Apr 22 14:49:38 spectre dovecot: master: Dovecot v2.2.12 (09c114091c88) starting up for imap, lmtp […] Apr 22 14:50:05 spectre dovecot: imap(tlx(a)leuxner.net): Panic: file mail-storage.c: line 1735 (mailbox_notify_changes): assertion failed: (box->opened) Apr 22 14:50:05 spectre dovecot: imap(tlx(a)leuxner.net): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6bbaf) [0x7f7dad859baf] -> /usr/lib/dovecot/libdovecot.so.0(+0x6bc0e) [0x7f7dad859c0e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f7dad81328e] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x81fda) [0x7f7dadb45fda] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0x8ca3) [0x7f7dabffbca3] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE](cmd_idle+0x45) [0x410495] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE](command_exec+0x3c) [0x41839c] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE]() [0x417400] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE]() [0x4174ba] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE](client_handle_input+0x115) [0x417775] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE](client_input+0x72) [0x417b22] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4e) [0x7f7dad86a91e] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xd7) [0x7f7dad86b917] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f7dad86a9a9] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f7dad86aa28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f7dad818633] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE](main+0x298) [0x40c128] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f7dad481ead] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE]() [0x40c28d] Apr 22 14:50:05 spectre dovecot: imap(tlx(a)leuxner.net): Fatal: master: service(imap): child 25774 killed with signal 6 (core not dumped) I'm not sure how to generate a core in this scenario, but commenting out the namespace configuration seems to prevent crashes for now. This appears to have been introduced in the last 5 days mercurial updates according to logs. Previously working namespace: namespace { prefix = Virtual/ separator = / location = virtual:~/mdbox/virtual } Regards Thomas

2 2

[Dovecot] dovecot qmail-ldap
by Gustavo Coelho 23 Apr '14

23 Apr '14

Hi folks, i am trying to get dovecot to work in my qmail-ldap instalation but no success so far. I respectfuly request your help. Here is my /etc/dovecot/dovecot.conf : auth_debug = yes auth_verbose = yes base_dir=/var/dovecot default_process_limit=100 disable_plaintext_auth=no listen=200.235.128.97 log_path=/var/log/dovecot.log login_greeting = Etosha Messaging Suite IMAP ready mail_uid=vmail mail_gid=vmail mail_location = maildir:/var/pop/%u/Inbox mail_max_userip_connections = 100 passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid from subject mail_log_group_events = mechanisms = plain login quota = maildir quota_rule = ?:storage=0 quota_rule2 = Trash:storage=+1024000 quota_rule3 = SPAM:ignore trash = /etc/dovecot/dovecot-trash.conf } protocols = imap service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 1 } service imap { executable = imap } protocol imap { mail_plugins = quota mail_log notify imap_quota } ssl_cert = </etc/ssl/dovecotcert.pem ssl_key = </etc/ssl/private/dovecot.pem Here is my dovecot-ldap.conf : host = x.y.z.k dn = cn=mail,ou=appsrv,dc=ufv,dc=br dnpass = MaIlAsuopdVpw sasl_bind = no auth_bind = yes ldap_version = 3 base = ou=people,dc=ufv,dc=br scope = subtree pass_filter = (&(objectClass=qmailUser)(uid=%u)) pass_attrs = uid=user,mailHost=host,=y=proxy_maybe user_filter = (&(objectClass=qmailUser)(uid=%u)) user_attrs = mailmessagestore=home,mailQuotaSize=quota_rule=*:bytes=%$,mailHost=host,=y=proxy_maybe Here is the output of pkg_info for my openbsd server 5.4 amd64. obsd# pkg_info | grep dovecot dovecot-2.1.17 compact IMAP/POP3 server dovecot-ldap-2.1.17 LDAP authentication support for Dovecot obsd# Here the output : sioux@obsd$ telnet obsd imap Trying x.y.z.k... Connected to obsd. Escape character is '^]'. * OK Waiting for authentication process to respond.. Connection closed by foreign host. sioux@obsd$ I just hit "enter" and the message was that, "Ok waiting for authentication ..." May somehere help me ? Thanks a lot for your time and cooperation.

1 0

[Dovecot] stats: Error: Mail server input error: UPDATE-SESSION username imap: stats shrank: mrbytes 26961885 < 28237323
by kadafax＠gmail.com 23 Apr '14

23 Apr '14

Hi List, If anyone is still reading this list, I have another problem beside the FTS's one. From time to time I have this showing up in dovecot-error.log (for several users, not always the same one): stats: Error: Mail server input error: UPDATE-SESSION username imap: stats shrank: mrbytes 26961885 < 28237323 A search in google tell me that it should have been corrected in 2.1.13 but I am using 2.2.12. Is there a human here that can direct me to a solution ? Thanks # 2.2.12: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.11.2.el6.x86_64 x86_64 CentOS release 6.5 (Final) ext4 auth_cache_size = 10 M auth_debug = yes auth_master_user_separator = * auth_socket_path = /var/run/dovecot/auth-userdb auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@* auth_verbose = yes auth_verbose_passwords = sha1 base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot-debug.log default_client_limit = 2128 default_process_limit = 512 default_vsz_limit = 2 G hostname = mydomain.com info_log_path = /var/log/dovecot.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * log_path = /var/log/dovecot-error.log login_greeting = Welcome login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_debug = yes mail_gid = vmail mail_location = maildir:/var/vmail/%Ln mail_plugins = fts fts_lucene quota stats mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = maildir:/var/vmail/%Ln mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = type = private } passdb { args = /usr/local/etc/dovecot/deny-users deny = yes driver = passwd-file } passdb { args = /usr/local/etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts = lucene fts_autoindex = yes fts_autoindex_max_recent = 1000 fts_lucene = whitespace_chars=@ quota = maildir:User quota quota_rule = *:storage=20GB quota_rule2 = Trash:storage=+200M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = /var/sieve-scripts/%Ln.sieve sieve_dir = /var/vmail/%Ln/home/sieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 30 secs stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } postmaster_address = postmaster(a)mydomain.com protocols = imap pop3 sieve sieve service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0777 user = vmail } } service decode2text { executable = script /usr/local/libexec/dovecot/decode2text.sh unix_listener decode2text { mode = 0666 } user = dovecot } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 5 } service imap { process_limit = 1024 } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = nobody } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_cert = </etc/pki/tls/certs/mail.mydomain.com.pem ssl_key = </etc/pki/tls/private/mail.mydomain.com.key userdb { args = /usr/local/etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap override_fields = uid=vmail gid=vmail home=/var/vmail/%Ln/home } verbose_proctitle = yes protocol lda { mail_plugins = fts fts_lucene quota stats sieve virtual } protocol imap { mail_plugins = fts fts_lucene quota stats imap_quota virtual imap_stats }

2 1

[Dovecot] How to bring dovecot to using a slightly modified passwd file
by Stephan von Krawczynski 23 Apr '14

23 Apr '14

Hello all, I am trying to use a setup where domains have separate passwd files with a slightly different layout. Is there a way to tell dovecot that a passwd file contains everything it looks for but on different positions inside the passwd file line? Standard passwd: USERNAME:PASSWD:UID:GID:HOME:extras different layout: USERNAME:PASSWD:extras:UID:GID:HOME Or do I have to patch the source, and where if necessary? Thanks for your help. -- Regards, Stephan

4 5

[Dovecot] Allowing non-SSL connections only for certain Password Databases
by Dan Pollock 23 Apr '14

23 Apr '14

I'm trying to set up my system (using Dovecot 2.0.9) so that certain Password Databases are available over pop3 and imap and others are available over pop3s and imaps. In particular, I would like users to be able to connect without SSL to accounts set up in vpopmail, but to require SSL for system accounts. Is there a way to set "disable_plaintext_auth" to different values for different Password Databases? Is there another way to do it? Thank you, Dan

3 7

Re: [Dovecot] Allowing non-SSL connections only for certain Password Databases
by Dan Pollock 23 Apr '14

23 Apr '14

On Apr 22, 2014, Urban Loesch wrote: > > > > Is there a way to set "disable_plaintext_auth" to different values for different Password Databases? Is there another way to do it? > > > > Why do you not force SSL for all users? I have some users whose mail clients don't properly support SSL. For users using system accounts, it's important that passwords are protected (as they can use that password to log in to things other than email). It's not as critical to keep virtual mailboxes on vpopmail encrypted, as those accounts only have access to email. Dan

3 2

[Dovecot] Shared mailboxes not working with . dot namespace separator - values truncated in SQL
by Frantisek Kucera 23 Apr '14

23 Apr '14

Hello, I have Dovecot configured for multiple domains (usernames are user(a)domain.tld) and I wanted to enable shared mailboxes. But there is some problem - if I share a folder, other user can't see it. In the log I foud: > Apr 22 19:21:02 veverka dovecot: imap(user(a)veverka.tld): Error: Couldn't create namespace 'shared.' for user petr: userdb didn't return a home directory, but location used it (%h): maildir:%h/Maildir:INDEX=~/Maildir/shared/%%u > Apr 22 19:21:02 veverka dovecot: imap(user(a)veverka.tld): Error: Couldn't create namespace 'shared.' for user emclient@veverka: userdb didn't return a home directory, but location used it (%h): maildir:%h/Maildir:INDEX=~/Maildir/shared/%%u Which is weird because the user name is "petr.surname" not only "petr" and the domain is "veverka.tld" not only "veverka". So I turned on SQL logging on my PostgreSQL and saw that Dovecot executes these queries: > 2014-04-22 19:21:02 CEST LOG: statement: SELECT * FROM dovecot_uzivatel WHERE login = 'petr' AND domena = '' > 2014-04-22 19:21:02 CEST LOG: statement: SELECT * FROM dovecot_uzivatel WHERE login = 'emclient' AND domena = 'veverka' The first username was "petr.surname(a)veverka.tld" and the second one was "emclient(a)veverka.tld" so it seems that it was truncated right after first "." dot and I afraid that this is a bug. Then it is obvious that Dovecot can't find the home directory and complains in log (as mentioned above). I found workaround – I had "." configured as namespace separator so I reconfigured it to "/" slash and now mailbox sharing works! But I think that it should work also with "." dot separator and the values should not be truncated in SQL queries. I tried also using '%u' in my SQL and its value was also truncated. Values in "dovecot-acl" a "shared-mailboxes" files seem to be ok. BTW: I have also another server with only one domain and simple user names (no dots) and there the mailbox sharing works – but now it seems that it works only accidentally. This might lead to hardly debuggable problems if someone has usernames with and without dots – mailbox sharing will work for some users but for some not. My old configuration: > password_query = SELECT * FROM dovecot_heslo WHERE login = '%n' AND domena = '%d' > user_query = SELECT * FROM dovecot_uzivatel WHERE login = '%n' AND domena = '%d' > iterate_query = SELECT login AS username, domena AS domain FROM dovecot_uzivatel > namespace { > type = shared > separator = . > prefix = shared.%%u. > location = maildir:%h/Maildir:INDEX=~/Maildir/shared/%%u > subscriptions = yes > list = children > } Had to be reconfigured to: > separator = / > prefix = shared/%%u/ Used version: > # dovecot --version > 2.1.7 > # uname -a > Linux veverka 3.11.0-19-generic #33-Ubuntu SMP Tue Mar 11 18:48:34 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux Regards, Franta P.S. If you have similar problem and have to switch from "." to "/" separators, don't forget to update your Sieve scripts (with fileinto). And sometimes also reconfiguration of the client is needed (e.g. NGImap4ConnectionStringSeparator in SOGo; and Kontact/KMail stopped working and I had to recreate the account in this client).

2 6