July 2005 - dovecot - dovecot.org

[Dovecot] problem with server certificate: dovectot.pem
by vladone 13 Jul '05

13 Jul '05

Hi! I have an mail server with postfix and dovecot. All works fine, but now is change my domain. After changed configurations i can receive (or send) mail without STARTTLS, but when i try to use this option i receive: "TLS handshake failure. Invalid server certificate (Key material mismatch)" I dont know what is this. I use certificate that is generate with script for dovecot (that work at begining). Even i try to rebuild this certificate acording with new domain but nothing. Where is my problem? P.S. All works before changed my domain!!!

1 0

[Dovecot] file locks
by Obantec Support 13 Jul '05

13 Jul '05

Hi I am trying to install 1.0 stable from source on a test server running 0.99 on FC3. i did basic ./configure etc and get this result Jul 13 17:24:26 proteus4 dovecot: Dovecot v1.0-stable starting up Jul 13 17:24:35 proteus4 dovecot: POP3(obantec): open(/var/spool/mail/.temp.proteus4.4485.e3eec7b26a559bac) failed: Permission denied Jul 13 17:24:35 proteus4 dovecot: POP3(obantec): file_lock_dotlock() failed with mbox file /var/spool/mail/obantec: Permission denied Jul 13 17:24:35 proteus4 dovecot: pop3-login: Login: obantec [192.168.0.10] when trying to access a test account. permissions all look as per old 0.99 which did work. Mark

3 5

[Dovecot] Minor bugs still in test77
by Chris Wakelin 13 Jul '05

13 Jul '05

Thinking of patches I always apply, I've got a couple (attached) that fix minor bugs and maybe should be applied - or implemented better and then applied ;) - to the main distribution? 1) LIST bugs: LIST "~/mail/" "" and LIST "" "~/mail/" (where "~/mail/" is a namespace prefix) don't reply the same way as UW-IMAP does and in at least the first case, still violates the spec (your fix breaks, as namespace_find() modifies its argument) The second issue breaks Pine 4.x, I think. 2) Angle-addresses If a header address is just "<someone(a)somewhere.org>" rather than "Someone <someone(a)somewhere.org>" or "someone(a)somewhere.org", then the FETCH ... ENVELOPE command responds with "" as the personal name, rather than NIL, which may confuse clients (without being wrong, technically, I think). (In case anyone's interested, I also use patches to: 1) fix the 64bit issue mentioned earlier today 2) introduce extra logging of LIST, SUBSCRIBE and UNSUBSCRIBE (for debugging during our migration from UW-IMAP) 3) rename .subscriptions to .mailboxlist and store folder names in it including the namespace prefix (to emulate UW-IMAP) 4) implement a Reading-specific hashing algorithm for the mail spool location as an extra variable modifier "%H" (e.g. "/export/mail/%Hu/%u/INBOX") 5) remove the need for /dev/urandom, which isn't available on our mail server (though there is a Solaris patch available to create it). 6) add an option to hide "AUTH=PLAIN" in the CAPABILITY string as Pine 4.x complains loudly when this is advertised on a non-SSL connection ) Best Wishes, Chris -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, c.d.wakelin(a)reading.ac.uk IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094 --- dovecot-1.0-test77.orig/src/imap/cmd-list.c Sun Apr 17 17:37:05 2005 +++ dovecot-1.0-test77/src/imap/cmd-list.c Wed Jul 13 16:10:27 2005 @@ -372,7 +372,8 @@ concept which probably no other client uses than Pine. Just try our best to emulate UW-IMAP behavior and hopefully we're fine. */ - ns = namespace_find(client->namespaces, &ref); + const char *ref_copy = t_strdup(ref); + ns = namespace_find(client->namespaces, &ref_copy); if (ns == NULL) { const char *empty = ""; ns = namespace_find(client->namespaces, &empty); @@ -405,6 +406,28 @@ } client_send_tagline(cmd, "OK List completed."); } else { + + if (*ref == '\0' && !lsub) { + /* LIST "" "something" */ + const char *mask_copy = t_strdup(mask); + ns = namespace_find(client->namespaces, &mask_copy); + if (ns == NULL) { + const char *empty = ""; + ns = namespace_find(client->namespaces, &empty); + } + if (*ns->prefix != '\0' && *mask_copy == '\0') { + /* namespace, return it */ + string_t *str = t_str_new(64); + str_printfa(str, "* LIST (\\Noselect) \"%s\" ", + ns->sep_str); + imap_quote_append_string(str, ns->prefix, + FALSE); + client_send_line(client, str_c(str)); + client_send_tagline(client, "OK List completed."); + return TRUE; + } + } + ctx = p_new(cmd->pool, struct cmd_list_context, 1); ctx->ref = ref; ctx->mask = mask; --- dovecot-1.0-test77.orig/src/lib-mail/message-address.c Fri Apr 8 12:16:36 2005 +++ dovecot-1.0-test77/src/lib-mail/message-address.c Wed Jul 13 16:15:15 2005 @@ -140,6 +140,10 @@ return -1; ctx->addr.name = p_strdup(ctx->pool, str_c(ctx->str)); + if (*ctx->addr.name == '\0') { + /* Cope with "<address>" without display name */ + ctx->addr.name = NULL; + } if (parse_angle_addr(ctx) < 0) { /* broken */ ctx->addr.domain = p_strdup(ctx->pool, "SYNTAX_ERROR");

1 0

[Dovecot] Dovecot and ActiveDirectory
by Hoffmann, Oliver 13 Jul '05

13 Jul '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! Is there a solution to auth dovecot against an windows active directory? i've tried this config: - --- # Space separated list of LDAP hosts to use. host:port is allowed too. hosts = dc.foo.bar # Distinguished Name - the username used to login to the LDAP server dn = cn=oh,cn=Users,dc=foo,dc=bar # Password for LDAP server dnpass = password # LDAP protocol version to use. Likely 2 or 3. ldap_version = 3 # LDAP base base = cn=Users,dc=foo,dc=bar # Dereference: never, searching, finding, always #deref = never # Search scope: base, onelevel, subtree scope = subtree # User attributes in order: user_attrs = uid,homeDirectory,,,uidNumber,gidNumber # Filter for user lookup. Some variables can be used: #user_filter = (&(objectClass=posixAccount)(uid=%u)) # Password checking attributes in order: pass_attrs = uid,userPassword # Filter for password lookups #pass_filter = (&(objectClass=posixAccount)(uid=%u)) # Default password scheme. "{scheme}" before password overrides this. #default_pass_scheme = CRYPT # You can use same UID and GID for all user accounts if you really want # to. # If the UID/GID is still found from LDAP reply, it overrides these values. #user_global_uid = #user_global_gid = - --- but got this error: - --- dovecot-auth: Jul 13 16:42:09 Error: ldap(oh): unknown user - --- thx & greets oliver -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (MingW32) iD8DBQFC1S162+wHtX4o3oARAo+SAJ9EGVQPXBG+gtZmcbkOjMiy0xF2JACgigDs +6q+EW0zjsICqME310Ky41M= =sMRS -----END PGP SIGNATURE-----

2 1

[Dovecot] New to dovecot, little luck - signal 10 death for imap
by Jeroen Scheerder 13 Jul '05

13 Jul '05

Hi, I'm a new prospective dovecot user. I'm planning to migrate a medium-scale mail site (a few thousand users) from UW to something better. I've set up dovecot on a test system. I can connect and authenticate just fine. IMAP clients get to see the right mailboxes. However, whenever a mailbox is selected, the imap subprocess dies. The log shows: Jul 13 14:52:05 localhost dovecot: imap-login: Login: js [127.0.0.1] Jul 13 14:52:07 localhost dovecot: child 8082 (imap) killed with signal 10 When I either telnet to it manually or run the "imap" process in a terminal window, everything seems to work: ---- Snip ---- * PREAUTH [CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS] Logged in as js x select INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 1300 EXISTS * 0 RECENT * OK [UNSEEN 2] First unseen. * OK [UIDVALIDITY 1119092680] UIDs valid * OK [UIDNEXT 1590] Predicted next UID x OK [READ-WRITE] Select completed. x fetch 1 full * 1 FETCH (FLAGS (\Seen) INTERNALDATE "18-Jun-2005 05:00:02 +0200" RFC822.SIZE 1773 ENVELOPE ("Sat, 18 Jun 2005 05:00:01 +0200 (MET DST)" "Waarschuwing: uw inbox overschrijdt 80% van de groottelimiet (18-06-2005)" (("Super-User" NIL "helpdesk" "phil.uu.nl")) (("Super-User" NIL "helpdesk" "phil.uu.nl")) (("Super-User" NIL "helpdesk" "phil.uu.nl")) ((NIL NIL "js" "phil.uu.nl")) NIL NIL NIL "<20050618030001.B5F3952048(a)goedel.admin.phil.uu.nl>") BODY ("text" "plain" ("charset" "us-ascii") NIL NIL "7bit" 1082 25)) x OK Fetch completed. x fetch 1 body[text] * 1 FETCH (BODY[TEXT] {1082} Beste Jeroen Scheerder, [...] Met vriendelijke groet, het systeembeheer. ) x OK Fetch completed. x list * * * LIST (\Noselect \HasChildren) "/" "Archive/" [...] * LIST (\Unmarked) "/" "INBOX" x OK List completed. ---- Snip ---- I'm at a loss here, and no amount of logging or sniffing with tcpdump has revealed anything interesting so far. Does anyone else see these "signal 10" aborts? Is there any way in which I can force a coredump (in case it's *really* a bus error)? Regards, Jeroen.

1 0

Re: [Dovecot] mysql
by John Peacock 13 Jul '05

13 Jul '05

Peter Evans wrote: > Because you might, just possibly want performance that > doesn't resemble mollasses in midwinter? > Optionally, you might even want something where the response > time is deterministic. I think you need to take your biases and go someplace else. If you don't like MySQL because of some personal bias, then don't use it. Anyone halfway competent can build Dovecot themselves and not rely on some third-party RPM's that have dependencies. This is a discussion list for Dovecot. Please try and stay on topic... John -- John Peacock Director of Information Research and Technology Rowman & Littlefield Publishing Group 4720 Boston Way Lanham, MD 20706 301-459-3366 x.5010 fax 301-429-5747

1 0

Re: [Dovecot] mysql
by Andrew Hutchings 13 Jul '05

13 Jul '05

Peter Evans wrote: > Dominic Marks (dom(a)goodforbusiness.co.uk) wrote: > > Because you might, just possibly want performance that > doesn't resemble mollasses in midwinter? > Optionally, you might even want something where the response > time is deterministic. > > Points at the company mail system here for a prime example > of why not to use mysql. But then again, this is actually > a prime example of "it works, but we don't know how." > > P > > We use mysql here as it makes a perfect integration with the rest of our systems, we have over 6000 mail accounts (probably closer to 7000 now) on it and the mysql lookup time is pretty much instant, the load never goes above 0.5 on the systems (2x1GHz Epias on round robin with replicated databases on each) and most of that is because the POP/IMAP servers are also round robin MX servers so Exim can take a chunk out of the CPU. Regards Andrew -- Andrew Hutchings (A-Wing) - Linux Guru Netserve Consultants - http://www.domaincity.co.uk/ A-Wing Internet Services - http://www.a-wing.co.uk/ Random quote 2: "In most countries selling harmful things like drugs is punishable. Then howcome people can sell Microsoft software and go unpunished?" - Hasse Skrifvars

1 0

[Dovecot] Headers "missing" in new CVS version
by Todd Burroughs 13 Jul '05

13 Jul '05

We're experiencing an odd problem with dovecot "losing" headers. This started happening with the CVS release as of July 4 and still happens with July 12. It was working properly June 28. It does not happen using pine or thunderbird. It happens using webmail (twig). When you open the inbox, you see subject, etc. When you open a mail, all of the headers are gone. Returning to the inbox, all the headers are missing. It seems to cache this as well. After returning to the older dovecot, all of the headers are missing. Deleting the cache files fixes this and there does not seem to be any mbox corruption. It does not log any errors or crash. Todd Burroughs

2 1

[Dovecot] separate SSL certificates for pop3s and imaps
by Michael Weiser 13 Jul '05

13 Jul '05

Hi, I'm migrating a uw-imap installation to dovecot. With uw-imap I had different SSL certificates and keys for ipop3d and imapd. How can I configure dovecot to do the same with its pop3s and imaps services? Thanks in advance, -- _________________________creating IT solutions Michael Weiser science + computing ag bei Eisenbahn und Haefen Postfach 11 02 63 Hagellocher Weg 71-75 47142 Duisburg 72070 Tuebingen, Germany phone +49 203 52 26341 www.science-computing.de

2 2

[Dovecot] add inotify support to dovecot
by Johannes Berg 13 Jul '05

13 Jul '05

Hi, attached patch against test76 adds inotify support and the --with-notify=... configure option that defaults to the current check for dnotify using no special method if dnotify cannot be compiled, and can be set to none, dnotify and inotify. If it is set to dnotify or inotify, failure to compile a test program results in an error. Also, it adds | file change notification method ..... : <method> to the output at the end of configure. The only thing I don't like about this patch is the fact that I had to add a field notify_context to struct io, but I didn't see a different way to handle this. Also, the patch doesn't support the condition parameter, it simply always asks for all the relevant changes. I don't really see that it is useful for in the context of file system notifications anyway. I modeled this after ioloop-notify-dn.c with my other patch applied to it, if you don't like the other patch you'll want to "revert" that change in the new ioloop-notify-inotify.c file as well. Oh, and obviously I didn't include patches to configure and all the Makefiles, so of course you'll have to run automake. But you already knew that :) I only tested this with maildir. I did add IN_MODIFY so I think it should work with mbox too, but someone should probably verify. Have fun, johannes

2 2