July 2005 - dovecot - dovecot.org

[Dovecot] Authentication feature I need
by Marc Perkel 17 Jul '05

17 Jul '05

OK - here's whay I need to make it work for my Linuxconf compatible authentication system. First - a question: Will this work? I can find docs on "virtualfile. auth virtualfile { mechanisms = plain digest-md5 userdb = passwd-file /etc/vmail/passwd.%d passdb = passwd-file /etc/vmail/shadow.%d user = root } Then - since the dmain name selects the passwd file, if there were a feature to make %n be us user instead of the whole email address then I have what I need. Password files are placed in the /etc/vmail directory as follows: /etc/vmail/passwd.domain1 /etc/vmail/shadow.domain1 /etc/vmail/passwd.domain2 /etc/vmail/shadow.domain2 The password and shadow files are exactly the same format as the /etc/password and /etc/shadow files. The user name within the files would be the %n part of the email address passed to authenticate with. Basically the password file names are /etc/vmail/passwd.%d with the user withing the file being %n. marc:x:40000:12:Marc Perkel:/vhome/perkel.com/home/marc:/bin/false test:x:40001:12::/vhome/perkel.com/home/test:/bin/false dd:x:40002:12:Atia:/vhome/perkel.com/home/dd:/bin/false test2:x:40003:12::/vhome/perkel.com/home/test2:/bin/false

2 3

[Dovecot] Feature Request - Authentication Scheme - Linuxconf
by Marc Perkel 17 Jul '05

17 Jul '05

This would make my life a lot easier in migrating to Dovecot. And it should be really easy to implement. Here's how linuxconf does it: Password files are placed in the /etc/vmail directory as follows: /etc/vmail/passwd.domain1 /etc/vmail/shadow.domain1 /etc/vmail/passwd.domain2 /etc/vmail/shadow.domain2 The password and shadow files are exactly the same format as the /etc/password and /etc/shadow files. The user name within the files would be the %n part of the email address passed to authenticate with. Basically the password file names are /etc/vmail/passwd.%d with the user withing the file being %n. marc:x:40000:12:Marc Perkel:/vhome/perkel.com/home/marc:/bin/false test:x:40001:12::/vhome/perkel.com/home/test:/bin/false dd:x:40002:12:Atia:/vhome/perkel.com/home/dd:/bin/false test2:x:40003:12::/vhome/perkel.com/home/test2:/bin/false It also makes merging several servers with separate passwd/shadow files into one virtual system because all you have to do is copy their existing passwd/shadow files into the /etc/vmail directory and rename them with the domain at the end. So - wouldn't that be easy to add? Sure would make migrating easy for me. -- Marc Perkel - marc(a)perkel.com Spam Filter: http://www.junkemailfilter.com My Blog: http://marc.perkel.com

2 4

[Dovecot] user_db, uid/gid and maildir
by vmstech 17 Jul '05

17 Jul '05

Im experimenting with putting all my virtual users mail under 1 directory with belonging to a system user created for the purpose. The mode on the directory (and subdirectories) is 770. I keep all my virtual users details in a postgres database. My interpretation of the wiki documentation is that if the user_db query returns a uid column and a gid column containing the numeric uid and gid of the owner of the directory, then dovecot should have no problem using mail in these folders. Is that correct? (I'm actually getting permission errors appear in the log file on the directories when I try and attach with a client, which reports "Cannot get LIST information for pattern `*' on IMAP server a.b.com unknown".) thanks Glenn

1 0

[Dovecot] Authenticaing in postgresql
by vmstech 17 Jul '05

17 Jul '05

Hi all - Im new to dovecot and actually all things email serverish. I spent last week wrestling with exim4, and this week its dovecots turn. I'm trying to connect as an imap user (from evolution) and not actually able to make a successful login. I have default_pass_scheme=PLAIN, and am using pass authentication in evolution client. Its the only one available after it queries the server for available types. I'm not getting any errors appear in either the postgres or dovecot log files (anymore :-) that is). I'm getting the exact query I'd like to see in the dovecot log file, after I entering the password in the client, but unfortunately it doesnt give me the reply. I can key this exact query in to the psql client and get the correct answer. dovecots logs don't tell me if I have success or failure. The auth_db query has only 1 column. I have no idea where to go from here - would love a hint thanks Glenn

1 1

Re: [Dovecot] New to dovecot, little luck - signal 10 death for imap
by Jeroen Scheerder 15 Jul '05

15 Jul '05

Peter Evans wrote: > Jeroen Scheerder (Jeroen.Scheerder(a)phil.uu.nl) wrote: > >>However, whenever a mailbox is selected, the imap subprocess dies. >>Jul 13 14:52:05 localhost dovecot: imap-login: Login: js [127.0.0.1] >>Jul 13 14:52:07 localhost dovecot: child 8082 (imap) killed with signal 10 > > > You're going to have to help us to help you. 10 is bus error (I think) > which is badness. > > OS, > version of dovecot > etc. > > you might want to debug a coredump, that will tell you where/why its > dying too. I would merrily gdb into a coredump and stacktrace away, if a core dump were created. No such luck. I'm now logging directly to file using syslog, after having started dovecot. There is no limit on coredumps: % limit cputime unlimited filesize unlimited datasize unlimited stacksize 8MB coredumpsize unlimited descriptors 64 vmemorysize unlimited % more /tmp/dovecot* :::::::::::::: /tmp/dovecot-info.log :::::::::::::: dovecot: Jul 13 15:27:35 Info: Dovecot v1.0-stable starting up dovecot: Jul 13 15:28:21 Info: imap-login: Login: avank [127.0.0.1] :::::::::::::: /tmp/dovecot.log :::::::::::::: dovecot: Jul 13 15:28:21 Error: child 14882 (imap) killed with signal 10 Environmental details: Solaris 7 (sparc) dovecot 1.0-stable compiled with ldap support using gcc 3.3.4 4.0.0 4.0.1 (no difference here) configured for mbox support with locking matching procmail's delivery locking strategies with authentication using passwd/shadow native databases A header dump shows nothing suspect: % elfdump -d /phil/sunos/sparc/pkg/dovecot-1.0-stable/libexec/dovecot/imap Dynamic Section: .dynamic index tag value [0] NEEDED 0x1 libsocket.so.1 [1] NEEDED 0x117 librt.so.1 [2] NEEDED 0x140 libc.so.1 [3] NEEDED 0x397 libnsl.so.1 [4] NEEDED 0x3b3 libdl.so.1 [5] RPATH 0x3cc /phil/sw/sunos/sparc/lib [snip] Will try on Solaris 10.

4 9

[Dovecot] OS X Mail.app 2 (Tiger) + dovecot -> new mail count doubled
by Alan Schmitt 14 Jul '05

14 Jul '05

Hello, I've noticed a strange bug with Mail.app 2 (from OS X.4) and dovecot, and I'm trying to identify where it comes from. I have a bunch of mailboxes that can receive new mail (delivered by procmail) and I have Mail set up as to automatically synchronize all maiboxes. When I start up Mail, the count for new mail is doubled in every mailbox that I have not seen yet. Looking at a mailbox restores the correct count (mail is not actually duplicated, it's just the new mail counter that is wrong). Has anyone else seen this? Would this bug be from Mail.app or from dovecot? (I suspect the former.) Thanks a lot, Alan Schmitt

3 6

[Dovecot] Very slow select() command on large mailboxes
by Sebastjan Trepca 14 Jul '05

14 Jul '05

Hi, I'm trying to decide if I could use you mail server in our enviroment which has about 10k users and mailboxes size about ~1GB. So I made a few tests and it all worked quite fast, except that select command on large mailboxes. The first time I select a mailbox which has 10k messages it takes about 4s to process. I am deliberately trying this on a Celeron 850Mhz, 512 MB memory and some shitty hard-drive to maximize the times. So why is this so slow? Does it index the messages on select? It's even slower when I have some new messages in folder, more that I have more I wait. So I presume it must be something with indexing? Anyway, how could I optimize this? Why don't you index when a mail arrives instead of on select? Thanks for help and keep doing a great job with Dovecot. Sebastjan

4 3

[Fwd: Re: [Dovecot] Dovecot and ActiveDirectory]
by Chris Wakelin 14 Jul '05

14 Jul '05

Oops! Thought I'd CC'd this to the list. Sorry, Oliver! Chris -------- Original Message -------- Date: Wed, 13 Jul 2005 20:09:35 +0100 From: Chris Wakelin <c.d.wakelin(a)reading.ac.uk> To: Jeroen Scheerder <Jeroen.Scheerder(a)phil.uu.nl> CC: Chris Wakelin <c.d.wakelin(a)reading.ac.uk> Subject: Re: [Dovecot] Dovecot and ActiveDirectory Jeroen Scheerder wrote: > Chris Wakelin (13/7/05 16:08 +0100) [Re: [Dovecot] Dovecot and > ActiveDirectory]: > > >>I've got it working via PAM and pam_ldap on Solaris. [..] > > > That's exactly what I'm striving to do. > > I've never set up LDAP authentication for Solaris itself, and actually > never used PAM before. > > If I may be so bold, could I bother you for details about your > configuration in these respects? /opt/RDGpldap/etc/ldap.conf: host xxx.rdg.ac.uk base dc=xxxxx,dc=ad,dc=rdg,dc=ac,dc=uk binddn cn=xxxuser,cn=users,dc=xxxxx,dc=ad,dc=rdg,dc=ac,dc=uk bindpw xxxpasswd nss_map_objectclass posixAccount user nss_map_objectclass shadowAccount user nss_map_attribute uid sAMAccountName nss_map_attribute homeDirectory unixHomeDirectory nss_map_attribute shadowLastChange pwdLastSet nss_map_objectclass posixGroup group nss_map_attribute uniqueMember member pam_login_attribute sAMAccountName pam_filter objectclass=User pam_password ad xxxuser is a read-only account in the AD. /etc/pam.conf: ... dovecot auth required /opt/RDGpldap/lib/pam_ldap.so dovecot account required /opt/RDGpldap/lib/pam_ldap.so dovecot session required /opt/RDGpldap/lib/pam_ldap.so dovecot.conf: auth_username_translation = AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz auth default { mechanisms = plain login passdb = pam userdb = passwd user = root } The auth_username_translation is because AD users are case-insensitive but UNIX ones aren't! We have users in both AD and UNIX (but could use something like "userdb=static uid=xxxx gid=yyyy home=/var/mail/%Lu" assuming xxxx:yyyy has appropriate permissions on the spool files) pam_ldap-178 was configured with ./configure --prefix=/opt/RDGpldap \ --with-ldap-conf-file=/opt/RDGpldap/etc/ldap.conf Hope this helps, Chris -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, c.d.wakelin(a)reading.ac.uk IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094

1 0

Re: [Dovecot] problem with server certificate: dovectot.pem
by Joseph Tam 14 Jul '05

14 Jul '05

> Date: Wed, 13 Jul 2005 23:46:33 +0300 > From: vladone <vladone(a)spaingsm.com> > Subject: [Dovecot] problem with server certificate: dovectot.pem > > I have an mail server with postfix and dovecot. > All works fine, but now is change my domain. After changed > configurations i can receive (or send) mail without STARTTLS, > but when i try to use this option i receive: > "TLS handshake failure. Invalid server certificate (Key material > mismatch)" > > I dont know what is this. > I use certificate that is generate with script for dovecot (that work > at begining). > Even i try to rebuild this certificate acording with new domain but > nothing. > Where is my problem? Yes, of course. Certificates are made out to a particular hostname (e.g. smtp.wahtever.com) and if you change your server hostname or move it to another server, a new certificate will have to be made out to the new hostname. You could also configure your client ignore certificate mismatches, but this wouldn't be the best option. Joseph Tam <tam(a)math.ubc.ca>

1 0

[Dovecot] Search with specified charset
by Chris Wakelin 14 Jul '05

14 Jul '05

I've seen a problem with searching in the Prayer webmail client that turns out to be caused by Prayer insisting on a charset called "ISO-8859-1" and Dovecot, using Solaris iconv, not recognising it (all the Solaris 8 iconv modules appear to be "ISO8859-1" etc. or just "8859-1"). This isn't a problem in Linux: % iconv --list | grep 8859.1/ 8859_1// ISO-8859-1// ISO8859-1// ISO885911// ISO_8859-1// I've hacked together a patch for Dovecot to try matching without the "ISO-" prefix if matching fails at first, which works for Solaris (as would creating an extra symbolic link in /usr/lib/iconv or hacking Prayer to use "ISO8859-1") and it doesn't break Linux, but it's not pretty :( Better may be to try substituting underscores, hyphens, spaces(?) and nothing in the string, but that makes the change much more complicated! Best Wishes, Chris --- dovecot-1.0-stable/src/lib-charset/charset-iconv.c.orig Mon Jan 31 16:37:55 2005 +++ dovecot-1.0-stable/src/lib-charset/charset-iconv.c Wed Jul 13 21:47:03 2005 @@ -36,9 +36,17 @@ ascii = FALSE; cd = iconv_open("UTF-8", charset); if (cd == (iconv_t)-1) { - if (unknown_charset != NULL) - *unknown_charset = TRUE; - return NULL; + /* Try matching charset without "ISO" prefix */ + if (strncasecmp(charset, "ISO-", 4) == 0 || + strncasecmp(charset, "ISO ", 4) == 0) + cd = iconv_open("UTF-8", charset + 4); + else if (strncasecmp(charset, "ISO", 3) == 0) + cd = iconv_open("UTF-8", charset + 3); + if (cd == (iconv_t)-1) { + if (unknown_charset != NULL) + *unknown_charset = TRUE; + return NULL; + } } } @@ -137,9 +145,17 @@ cd = iconv_open("UTF-8", charset); if (cd == (iconv_t)-1) { - if (unknown_charset != NULL) - *unknown_charset = TRUE; - return NULL; + /* Try matching charset without "ISO" prefix */ + if (strncasecmp(charset, "ISO-", 4) == 0 || + strncasecmp(charset, "ISO ", 4) == 0) + cd = iconv_open("UTF-8", charset + 4); + else if (strncasecmp(charset, "ISO", 3) == 0) + cd = iconv_open("UTF-8", charset + 3); + if (cd == (iconv_t)-1) { + if (unknown_charset != NULL) + *unknown_charset = TRUE; + return NULL; + } } if (unknown_charset != NULL) -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, c.d.wakelin(a)reading.ac.uk IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094

1 0