- dovecot - dovecot.org

[Dovecot] Shared Namespace and correct location
by Dieter Knopf 05 Mar '14

05 Mar '14

Hello again, i still have problems using a Shared Namespace in my configuration. I'm using Dovecot 2.2.9. mail_location = maildir:/home/vmail/%d/%n/MAILDIR:INDEX=/home/vmail/%d/%n/INDEX/ namespace inbox { type = private separator = / prefix = inbox = yes } This works create. But: namespace { type = shared separator = / prefix = shared/%%u/ location = maildir:/home/vmail/%%d/%%u/MAILDIR/shared:INDEX=/home/vmail/%d/%u/INDEXS/%%u subscriptions = no list = children } I'm still not sure how i can see a shared mailbox on a different account. I can add ACL rules and dovecot is adding SQL-Entries to the user-shares table. The dovecot-acl-list file is created too, hope this is okay (vfile + SQL) But i can't see the shared folder on the target account. I tried many location-pathes, but not sure how i can add the right folder. There must be a problem with %%d and %%u. Thank you very much, Dieter

2 1

[Dovecot] Dovecot Migration: Retrieving/Logging POP/IMAP Passwords in Plaintext
by Traiano Welcome 05 Mar '14

05 Mar '14

Hi List I'm currently in the process of migrating my dovecot imap/pop users to a new server and have to extract their passwords in order to import them into the new system (different password encryption schemes). I've tried enabling auth_* debug parameters in my dovecot.conf in the hope that this would result in logging plaintext passwords to the dovecot log. However dovecot does not log the passwords in plaintext under any debugging configuration. My question: Is there any other configuration of dovecot that would allow me to capture POP/IMAP passwords at a successful login time? Dovecot version: 1.0.7 (from dovecot-1.0.7-7.el5_7.1 rpm) The output of dovecot -n is: --- # 1.0.7: /etc/dovecot.conf info_log_path: /var/log/dovecot.debug verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: mbox:~:INBOX=~/Mailbox mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: mechanisms: plain login verbose: yes debug: yes debug_passwords: yes passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 438 --- My dovecot.conf is as follows: ------ info_log_path = /var/log/dovecot.debug verbose_ssl = yes mail_location = mbox:~:INBOX=~/Mailbox mail_debug = yes protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain login passdb pam { } userdb passwd { } user = root socket listen { client { path = /var/run/dovecot/auth-client mode = 0666 } } } dict { } plugin { } --- Many thanks in advance! Traiano

3 5

[Dovecot] Using AD, one more try - "successfol auth" and crashing auth process
by Jeroen Scheerder 05 Mar '14

05 Mar '14

Hi, I have no success in using AD with dovecot. The little checkpassword script I cooked up that uses ldapsearch to lookup a user DN (with an authenticated bind) and then ldapsearch with an authenticated bind for that DN again works well. * Approach 1: use a service account to bind to AD, lookup the user DN, and bind to that DN. It fails. The LDAP config looks like: hosts = dc2.office.on2it.net ldap_version = 3 base = dc=office,dc=on2it,dc=net scope=subtree auth_bind = yes dn = CN=DovecotSvc,OU=Svcs,DC=office,DC=on2it,DC=net dnpass = suppressed pass_attrs = sAMAccountName=user pass_filter = (&(objectClass=person)(sAMAccountName=%u)) user_attrs = sAMAccountName=user user_filter = (&(objectClass=person)(sAMAccountName=%u)) What happens in this case is best shown in the packet capture as displayed by tshark: $ tshark -o tcp.check_checksum:FALSE -tr -r dc2.pcap 1 0.000000 172.17.50.13 -> 172.17.10.2 LDAP 197 bindRequest(7) "CN=DovecotSvc,OU=Svcs,DC=office,DC=on2it,DC=net" simple 2 0.001879 172.17.10.2 -> 172.17.50.13 LDAP 88 bindResponse(7) success Yay! The service account binds just fine. 3 0.001967 172.17.50.13 -> 172.17.10.2 LDAP 180 searchRequest(8) "dc=office,dc=on2it,dc=net" wholeSubtree 4 0.002772 172.17.10.2 -> 172.17.50.13 LDAP 502 searchResEntry(8) "CN=Jeroen Scheerder,OU=Users,DC=office,DC=on2it,DC=net" \ | searchResRef(8) | searchResRef(8) | searchResRef(8) | searchResDone(8) success 5 0.098367 172.17.50.13 -> 172.17.10.2 TCP 66 49416 > 389 [ACK] Seq=246 Ack=459 Win=1037 Len=0 TSval=602425599 TSecr=124473537 Yay! The user DN is found successfully. 6 225.149885 172.17.50.13 -> 172.17.10.2 LDAP 166 bindRequest(12) "CN=Jeroen Scheerder,OU=Users,DC=office,DC=on2it,DC=net" simple 7 225.152323 172.17.10.2 -> 172.17.50.13 LDAP 88 bindResponse(12) success 8 225.248387 172.17.50.13 -> 172.17.10.2 TCP 66 49416 > 389 [ACK] Seq=346 Ack=481 Win=1040 Len=0 TSval=602650749 TSecr=124496053 Yay! The user DN bind works. But wait, why is it taking dovecot 225 seconds to get around to trying it? The auth process has already given up. * Approach 2: A template defines the user DN. Bind to that DN. AD DNs don't contain usernames, but AD allows all kinds of non-LDAP shorthands for DNs, inclusing %user%@domain. I've verified this to work using ldapsearch: $ ldapsearch -o ldif-wrap=no -x -LLL -E pr=200/noprompt -H ldap://dc2.office.on2it.net \ -b dc=office,dc=on2it,dc=net -s sub \ -D js(a)office.on2it.net -W \ '(&(ObjectClass=person)(sAMAccountName=js))' DN Enter LDAP Password: dn: CN=Jeroen Scheerder,DC=office,DC=on2it,DC=net The config looks like: hosts = dc2.office.on2it.net ldap_version = 3 base = dc=office,dc=on2it,dc=net scope=subtree auth_bind = yes auth_bind_userdn = "%u(a)office.on2it.net" pass_attrs = sAMAccountName=user user_attrs = sAMAccountName=user What happens in this case is best shown by a snippet of dovecot logging: Mar 5 09:57:36 <mail.err> ponyboy dovecot: auth: Error: ldap(js,127.0.0.1,<z1dLNtjzJwB/AAAB>): ldap_search(base=dc=office,dc=on2it,dc=net filter=(&(objectClass=posixAccount)(uid=js))) failed: Operations error Mar 5 09:57:36 <mail.err> ponyboy dovecot: imap: Error: Disconnected from auth server, aborting (client-pid=7247 client-id=1) Mar 5 09:57:36 <mail.crit> ponyboy dovecot: auth: Fatal: master: service(auth): child 7245 killed with signal 11 (core not dumped - set service auth { drop_priv_before_exec=yes }) Mar 5 09:57:36 <mail.info> ponyboy dovecot: imap-login: Internal login failure (pid=7247 id=1) (internal failure, 1 successful auths): user=<js>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=7248, secured, session=<z1dLNtjzJwB/AAAB> I find this intriguing -- "1 successful auths", so says imap-login, with auth dying horribly. I smell a rat. Something's wrong here...

1 0

[Dovecot] Send and Bounced mail not appearing, depending on mail client
by Dominique 05 Mar '14

05 Mar '14

Hi, I just installed Dovecot2 on Ubuntu 12.04 server with postfix and postfixadmin. I am using virtual users and virutal domains. When using Thunderbird, Roundcubemail,iOS mail application on an iPad2 or Kmail n Android, all mail sent and bounce shows up. However, when using vTigerCRM to send mails, nothing shows up - anywhere. I know the mail are being send - as per the mail.log and the various postfix log lines. But none of that is being captured by Dovecot... What am I missing? Thanks for any hints you can provide. Dominique --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com

2 1

Re: [Dovecot] Can't get authentication for masterusers on Mac OS X Server 10.6.8
by Joseph Tam 05 Mar '14

05 Mar '14

On Tue, 4 Mar 2014, dovecot-request(a)dovecot.org wrote: > #telnet mailserv.example.com 143 > Connected to mailserv.example.com. > Escape character is '^]'. > * OK Dovecot ready. > 1 login myusername myPassword > 1 OK Logged in. > 1 logout > * BYE Logging out > 1 OK Logout completed. > Connection closed by foreign host. This does not test what you want, which is trying to authenticate the master user, not the regular user. From what I remember of your config, you have another passdb which holds the credentials of your master user: you need to check that file to make sure the master user's password (hash) matches what you think the master password ought to be. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Hidden virtual folder
by Moritz Augsburger 04 Mar '14

04 Mar '14

Hi, I wanted to create a virtual folder containing all unread messages and the threads they belong to, and this config works really fine: > dovecot.conf: namespace { type = private prefix = virtual/ separator = / location = virtual:~/Maildir/virtual:INDEX=MEMORY list = children subscriptions = no } > virtual/All/dovecot-virtual: * -Trash -Trash/* -Junk -Junk/* -Drafts -Drafts/* -virtual -virtual/* all > virtual/New/dovecot-virtual: virtual/All inthread refs or unseen recent The only problem I got is that scanning all files for the virtual/All mailbox takes too long, and I would like to keep them cached (no INDEX=MEMORY), so I thought I'll just put virtual/All inside a second virtual namespace. As it's a bad idea to open the All directory manually, I could also hide the complete namespace to the user. So I added the following to my config: namespace { type = private prefix = virtual-all/ separator = / location = virtual:~/Maildir/virtual-all/ hidden = yes list = no subscriptions = no } But sadly it didn't work, a directory virtual-all/ pops up inside my client (thunderbird/icedove). Is hidden=yes/list=no unsupported for virtual locations, or is it me misconfiguring dovecot? If it should matter, it's version 2.2.9, or more specific debian 1:2.2.9-1~bpo70+1. Thanks Moritz

1 0

[Dovecot] No email since Feb 6
by Steve Campbell 04 Mar '14

04 Mar '14

Is the list down or have I been blocked.

2 1

[Dovecot] cyrus2dovecot and doveadm search,expunge
by Lanore Ronan 04 Mar '14

04 Mar '14

hi list, i'am doing a migration from cyrus ( 2.1.17 ) to dovecot ( 2.1.7). for mailbox migration i'am using this script : http://cyrus2dovecot.sw.fu-berlin.de/ To migrate a mailbox : /usr/local/sbin/cyrus2dovecot.pl -C /data/migration/spool/%h/user/%u -D /data/mail/foo.bar/%u(a)foo.bar -U /data/migration/flags/%h/%u.sub -S /data/migration/flags/%h/%u.seen test Directories /data/migration/spool /data/migration/flags are rsynced with rsync -av --delete ... .... .... After mailbox end to migrate, i want to search all message savedbefore some days but this don't work doveadm search -u test(a)foo.bar mailbox inbox savedbefore 1d i'm sure this mailbox have mail before this days. ls into mailbox dir: -rw-r--r-- 1 siadmin siadmin 21662 Mar 3 15:54 1393858496.R2cdf6e55Q2902.server.foo.bar,S=21662,W=22160:2,a I don't understand why this message isn't printer by savedbefore 1d what i'm doing wrong thanks -- Ronan Lanore

1 0

[Dovecot] IMAP native METADATA already implemented?
by Aleve Sicofante 04 Mar '14

04 Mar '14

A year ago, more or less, I was told "Dovecot is getting close to having native METADATA support." How's this going? Thanks.

3 2

[Dovecot] Error "Initializing mail storage ..." after upgrading to 2.2.10
by Götz Reinicke - IT Koordinator 04 Mar '14

04 Mar '14

Hi, I did the upgrade frpom 1.2.x to 2.2.10 and had some warnings/errors on a very few accounts/mailboxes. All of them where permission related and solved. Dovecot rocks again. But on one mailbox I do get an error: Error: user rechnnugseingang-animationsinstitut: Initialization failed: Initializing mail storage from mail_location setting failed Error: Invalid user settings. Refer to server log for more information. There is a homedirectory and the permissions are set like on all other accounts. The username is quite long (35 characters) but an other one with 34 is working fine. And before the upgrade there was no error. Thnaks for any help or hint. Regards . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

5 11