- dovecot - dovecot.org

[Dovecot] master password
by Marc Perkel 21 Jan '14

21 Jan '14

This is probably easy but how would a set a secret static master password so that if I typed it in for any login it would be happy? I can't use the * separator method in this case because it screws up squirrelmail.

2 1

[Dovecot] Shared mailboxes / IMAP folder performance
by Sebastian Schlatow 21 Jan '14

21 Jan '14

Hello, how performant is an IMAP shared folder / mailbox if it contains 2 million mails? Is it possible two have such a quantity of mails in a shared folder? Is it possible to search that shared folder for mails in a fast way? Regards Sebastian

2 3

[Dovecot] Failure in doveconf
by Andrew Ray 21 Jan '14

21 Jan '14

I ran into a problem while configuring dovecot. Quickly reading the paragraph below, I saw "yes" as one of the options, and put that into the config, as below: # In case of password mismatches, log the attempted password. Valid values are # no, plain and sha1. sha1 can be useful for detecting brute force password # attempts vs. user simply trying the same password over and over again. # You can also truncate the value to n chars by appending ":n" (e.g. sha1:6). auth_verbose_passwords = yes The result from doveconf -n was: doveconf: Error: x�η doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf: 0pη (where the error message was always a changing, apparently random set of characters.) So I managed, by going back through the config file and commenting out options, to find this was the problem and then finally read what are the acceptable values. Any other place that I have tried to give a non acceptable value I get a reasonable error message with line number and problem. Well, now I fixed my original problem, but something needs to be adjusted in the error handling code. Sincerely, Andrew Ray -- Andrew Ray +1 404-418-5443 +421 (0) 917 832 253 http://guns.freedomlives.net/

1 0

[Dovecot] forwarded message is broken in 2.2.10 with pigeonhole-0.4.2
by Burckhard Schmidt 21 Jan '14

21 Jan '14

Hi, forwarding a message with sieve like redirect:copy "me(a)other.domain"; was working without any problem until dovecot-2.1.17, dovecots lmtp and dovecot-2.1-pigeonhole-0.3.5. Using dovecot-2.2.10 , dovecots lmtp and dovecot-2.2-pigeonhole-0.4.2 the structure of a forwarded message is broken. Content of a message is not displayed or an attachment (for instance pdf) can not be opened by (different) clients. Writing a html mail or plain one makes no different. I have compared two messages and the main different is a missing Content-Type: multipart/alternative; boundary="...." to encapsulate the body of the forwarded message. Was it lost in sieve? Here parts of a "well" forwarded message: Return-Path: ... ... Received: by mails.cms.hu-berlin.de (Postfix, from userid 29) id A78C738734; Tue, 14 Jan 2014 17:10:54 +0100 (CET) X-Sieve: Pigeonhole Sieve 0.3.5 X-Sieve-Redirected-From: schmidt(a)mails.cms.hu-berlin.de Delivered-To: <schmidt(a)mails.cms.hu-berlin.de> Received: from mails.cms.hu-berlin.de by suncom1 (Dovecot) with LMTP id p8HoIn9h1VKnTwAA9XuJ/g for <schmidt(a)mails.cms.hu-berlin.de>; Tue, 14 Jan 2014 17:10:54 +0100 ... Message-ID: <52D5618D.6050905(a)gmail.com> Date: Tue, 14 Jan 2014 17:10:53 +0100 From: xy <xy(a)gmail.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: schmidt(a)hu-berlin.de Subject: from gmail with attachment Content-Type: multipart/mixed; boundary="------------070108020005050001040207" X-ENVELOPE-TO: <me(a)other.domain> This is a multi-part message in MIME format. --------------070108020005050001040207 Content-Type: multipart/alternative; boundary="------------090806050202050708030507" --------------090806050202050708030507 Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 8bit Hallo. text --------------090806050202050708030507 Content-Type: text/html; charset=ISO-8859-15 Content-Transfer-Encoding: 8bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-15"> </head> <body text="#000000" bgcolor="#FFFFFF"> Hallo. text P. </body> </html> --------------090806050202050708030507-- --------------070108020005050001040207 Content-Type: application/pdf; name="auftrag-2014-eng-Hinweise.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="auftrag-2014-eng-Hinweise.pdf" JVBERi0xLjYNJeLjz9MNCjcyIDAgb2JqDTw ... ... c3RyZWFtDWVuZG9iag1zdGFydHhyZWYNCjExNg0KJSVFT0YNCg== --------------070108020005050001040207-- message end Now a broken message without "Content-Type: multipart/alternative;": Return-Path: ... ... Received: by mail5.cms.hu-berlin.de (Postfix, from userid 29) id 47C4C6D46E; Tue, 14 Jan 2014 17:43:54 +0100 (CET) X-Sieve: Pigeonhole Sieve 0.4.2 X-Sieve-Redirected-From: testuser(a)mail5.cms.hu-berlin.de Delivered-To: <testuser(a)mail5.cms.hu-berlin.de> Received: from mail5.cms.hu-berlin.de by suncom5 (Dovecot) with LMTP id mnY0AEpp1VLsaQAA0tuC1A for <testuser(a)mail4.cms.hu-berlin.de>; Tue, 14 Jan 2014 17:43:54 +0100 ... Message-ID: <52D56948.1090704(a)gmail.com> Date: Tue, 14 Jan 2014 17:43:52 +0100 From: xy <xy(a)gmail.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: testuser(a)hu-berlin.de Subject: from gmail with attachment Content-Type: multipart/mixed; boundary="------------030506080302040201020604" X-ENVELOPE-TO: <me(a)other.domain> This is a multi-part message in MIME format. --------------030506080302040201020604 Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit text. --------------030506080302040201020604 Content-Type: application/pdf; name="auftrag-2014-eng-Hinweise.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="auftrag-2014-eng-Hinweise.pdf" JVBERi0xLjYNJeLjz... ... c3RyZWFtDWVuZG9iag1zdGFydHhyZWYNCjExNg0KJSVFT0YNCg== --------------030506080302040201020604-- message end -- Mit freundlichen Grüßen --- Burckhard Schmidt Abteilung Systemsoftware und Kommunikation ZE Computer- und Medienservice der Humboldt-Universität zu Berlin Postanschrift: Unter den Linden 6, 10099 Berlin Standort: Rudower Chaussee 26; 12489 Berlin Tel.: +49-30-2093-70058 Fax: +49-30-2093-2959 Mail: bschmidt(a)cms.hu-berlin.de

3 12

[Dovecot] Dovecot doesn't seem to report all subfolders to Thunderbird
by dovecot＠voidptr.de 21 Jan '14

21 Jan '14

Hi, I've recently migrated my emails from a Yahoo account to my own mailserver on a VPS. Ever since then, Thunderbird seems to have issues with the mailbox's directory structure: When I start Thunderbird, it immediately deletes the local copies of all 3rd-level folders (i.e. subfolders of a subfolder of a folder in the mailbox root). Since that didn't happen with the Yahoo account, I assume it's some kind of error or misconfiguration of Dovecot. Here's an example of the mailbox structure: voidptr.de '-> University '-> IEEE '-> Conference "University" and "IEEE" work without problems, but "Conference" gets deleted locally every time I start Thunderbird. When I collapse and re-expand "University" in the folder panel, all subfolders (including "Conference") reappear, but Thunderbird has to re-download the contents of "Conference", since it deleted the local copies earlier. It looks as if Dovecot only reported the topmost two folder levels when Thunderbird requests a folder list... Is there any way I can change that behavior? Nils $ doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab078.22 x86_64 Debian 7.3 auth_verbose = yes mail_location = maildir:~/Maildir:LAYOUT=fs namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = subscriptions = yes } passdb { args = scheme=SHA512-CRYPT username_format=%n /etc/dovecot/users driver = passwd-file } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imaps { port = 0 } } ssl = required ssl_cert = </etc/ssl/certs/own/voidptr.de.pem ssl_key = </etc/ssl/certs/own/voidptr.de.key userdb { args = username_format=%n /etc/dovecot/users default_fields = home=/home/%n driver = passwd-file }

3 4

[Dovecot] Sieve Filter based on Email Body
by Roman Gelfand 21 Jan '14

21 Jan '14

Is it possible to file emails based on the contents of email body? If yes, can you point me to an example. Thanks in advance

2 1

[Dovecot] A variable for the unix user or home path would be useful in some cases
by interfaSys sàrl 20 Jan '14

20 Jan '14

Hello, In our hosting environment, we let users share mailboxes across all their domains and think it's best if the shared mailbox listing (in a file) stays in their unix home path. That would be: /home/USER/imap/shared-mailboxes.db Unfortunately, it seems there is no way to generate that path using a variable. Something like this would be convenient: acl_shared_dict = file:%v/imap/shared-mailboxes.db Instead, we have to use something like this: acl_shared_dict = file:~/../../../shared-mailboxes.db which only works for virtual users. Did somebody solve this another way? Could we have the unix user or home path as a variable? Or could we have a modifier giving us the path or the unix user based on the unix UID? Cheers, Olivier

1 0

Re: [Dovecot] imap abort after upgrade from 2.2.4 to 2.2.7
by morrison 20 Jan '14

20 Jan '14

When I did upgrade, 2.2.7 was the latest release. When I ran into the problem, I checked back and found 2.2.8 and 2.2.9 were released shortly one after another. It seemed these releases were sort of buggy. I would like to know if what I described in my previous email was an known issue and was addressed before upgrade to 2.2.10. We are using dovecot as our internal mail service. So stable is most important to us. Regards,

1 0

[Dovecot] mail check
by Paolo 20 Jan '14

20 Jan '14

Is there some simple script that parsing the dovecot.info.log can give me a list of the mail checks for a user (better if reports also the type (POP/IMAP), and result of the sessions (Ok/Fail/Error/...))? Regards, Paolo

2 2

[Dovecot] auth_default_realm, pam_krb5, gssapi
by Sergey Urushkin 20 Jan '14

20 Jan '14

Hi, Just writing here my note about auth_default_realm, pam_krb5 and gssapi. It seems that 'pam' passdb and 'gssapi' auth_mechanism doesn't honor 'auth_default_realm' setting, at least in several setups I deal with. Here is a part of the config: passdb { args = max_requests=100 cache_key=%u%r dovecot driver = pam } auth_default_realm = REALM.COM auth_mechanisms = plain login apop gssapi auth_username_format = %Uu The problem is that pam_krb5 strips default realm from username (by default), even if auth_default_realm is specified and even if user logs in as 'user1(a)realm.com' (with domain part). A part of auth.log: mail auth: pam_krb5(dovecot:auth): user USER1 authenticated as USER1(a)REALM.COM The same for GSSAPI auth, if specified authorization name doesn't contain domain part. A part of mail.log: mail dovecot: imap-login: Login: user=<USER1>, method=GSSAPI, rip=172.16.0.1, lip=192.168.1.1, mpid=5828, TLS, session=<bpzvRmDwPACsFwCX> For several reasons I do need username inside dovecot to contain domain part. So, I found a solution to this problem - modifying /etc/krb5.conf this way: [libdefaults] default_realm = REALM.COM [realms] REALM.COM = { auth_to_local = RULE:[1:$1@$0] } This will add realm part to the local username despite using default realm. Maybe it's better to put this example to the wiki? Tested with ubuntu 12.04 and dovecot 2.2.10, mit kerberos 1.10, amd64. Taking the opportunity, I'd like to ask, is there a way to make usernames case insensitive while using GSSAPI. The case: klist shows: Principal: user1(a)REALM.COM username in thunderbird 'uSer1(a)REALM.COM'. Dovecot gives me this message (I use auth_username_format=%Uu for pam_krb5 to be able to login with lowercase realm): dovecot: auth: gssapi(USER1(a)REALM.COM,172.16.0.1,<IIgwMGbw3ACsFgA4>): User not authorized to log in as USER1(a)REALM.COM As I know kerberos usernames are case insensitive (user part), at least kinit and windows against AD works that way. Seems that k5credentials passdb extra field will not help here too. Does anyone have an idea? Thanks. -- Best regards, Sergey Urushkin

1 0