January 2007 - dovecot

[Dovecot] Vpopmail auth with vchkpw
by Rick Romero 19 Jan '07

19 Jan '07

Hey Guys, I'm using vpopmail, and was told here that I need to use the vchkpw passwd module to authenticate AND get my lastauth data updated. It works like a charm, but I've come across another minor issue. vchkpw sets the 'connection-type' based on the variable TCPLOCALPORT If that's not set, it defaults to pop. What this does in my environment is cause someone who is denied POP access to also not be able to use IMAP (or webmail) because that variable is not set. Is it possible to have Dovecot set that variable, based on the port the user connected to, prior to calling vchkpw? Or can I Set that in here somehow? passdb checkpassword { args = /usr/local/vpopmail/bin/vchkpw } userdb prefetch { } } Thanks Rick

2 1

[Dovecot] patch for serdb-ldap which allows set user_global_mail variable
by Taras 19 Jan '07

19 Jan '07

--- dovecot-1.0.rc17/src/auth/db-ldap.~h 2007-01-15 03:23:09.000000000 +0200 +++ dovecot-1.0.rc17/src/auth/db-ldap.h 2006-11-07 18:47:00.000000000 +0200 @@ -38,6 +38,7 @@ const char *default_pass_scheme; const char *user_global_uid; const char *user_global_gid; + const char *user_global_mail; /* ... */ int ldap_deref, ldap_scope; --- dovecot-1.0.rc17/src/auth/db-ldap.~c 2007-01-15 03:23:09.000000000 +0200 +++ dovecot-1.0.rc17/src/auth/db-ldap.c 2006-11-19 15:42:41.000000000 +0200 @@ -67,6 +67,7 @@ DEF(SET_STR, default_pass_scheme), DEF(SET_STR, user_global_uid), DEF(SET_STR, user_global_gid), + DEF(SET_STR, user_global_mail), { 0, NULL, 0 } }; @@ -93,7 +94,8 @@ MEMBER(pass_filter) "(&(objectClass=posixAccount)(uid=%u))", MEMBER(default_pass_scheme) "crypt", MEMBER(user_global_uid) "", - MEMBER(user_global_gid) "" + MEMBER(user_global_gid) "", + MEMBER(user_global_mail) NULL }; static struct ldap_connection *ldap_connections = NULL; --- dovecot-1.0.rc17/src/auth/userdb-ldap.~c 2007-01-15 03:23:09.000000000 +0200 +++ dovecot-1.0.rc17/src/auth/userdb-ldap.c 2006-12-21 18:06:28.000000000 +0200 @@ -72,7 +72,7 @@ const char *name; char *attr, **vals; unsigned int i; - bool seen_uid = FALSE, seen_gid = FALSE; + bool seen_uid = FALSE, seen_gid = FALSE, seen_mail = FALSE ; reply = auth_stream_reply_init(auth_request); auth_stream_reply_add(reply, NULL, auth_request->user); @@ -94,6 +94,7 @@ return NULL; seen_gid = TRUE; } else if (*name != '\0') { + if (strcmp(name, "mail") == 0) {seen_mail = TRUE;} for (i = 0; vals[i] != NULL; i++) { auth_stream_reply_add(reply, name, vals[i]); @@ -126,6 +127,16 @@ auth_stream_reply_add(reply, "gid", dec2str(conn->set.gid)); } + if (!seen_mail) { + if (*conn->set.user_global_mail != '\0') { + const struct var_expand_table *vars; + vars = auth_request_get_var_expand_table(auth_request, auth_request_str_escape); + string_t *str; + str = t_str_new(512); + var_expand(str, conn->set.user_global_mail, vars); + auth_stream_reply_add(reply, "mail", str_c(str)); + } + } return reply; } --- dovecot-1.0.rc17/doc/dovecot-ldap.~conf 2007-01-15 03:23:09.000000000 +0200 +++ dovecot-1.0.rc17/doc/dovecot-ldap.conf 2006-11-07 18:47:00.000000000 +0200 @@ -114,3 +114,9 @@ # If the UID/GID is still found from LDAP reply, it overrides these values. #user_global_uid = #user_global_gid = + +# You can use same mail path all user accounts if you really want to. +# Same variables can be used as for filter, see user_filter +# If the 'mail' variable is still found from LDAP reply, it overrides these value. +#user_global_mail = +

2 2

[Dovecot] LDAPS
by Osvaldo Sarubbi 19 Jan '07

19 Jan '07

Hello...what's hap with LDAPS?...with the "hosts" parameter of dovecot-ldap.conf, don't work Thanks... kenobi

2 1

[Dovecot] Shared folder
by Stefan Klatt 19 Jan '07

19 Jan '07

Hi, first.. i'm new on this list :-) and use dovecot 1.01rc17 under fedora core 5. And i read the list of the last 4 moth and didn't found answers to my questions........ now i work with shared folders and got it running on the following configuration: namespace private { seperator = . prefix = location = maildir:/srv/imapd/user/%u/maildir inbox = yes } namespace public { seperator = . prefix = Public. location = maildir:/imapd/shared/public/maildir:CONTROL=/imapd/user/%u/shared-settings/public/control:INDEX=/imapd/user/%u/shared-settings/public/index hidden = no } location is one line :-) I have different questions to this configuration: if i use "hidden = no" at the private namespace, the complete namespace isn't viewable, if i use "hidden = yes" i see the prefix "private" at the foldernames in my emailclient. Shouldn't be a non existing hidden option the same like "hidden = no"? if use / as the seperator like dokumented at the wiki it doesn't work. with a dot like the seperator at the directories for the emailfolder it works. is there a way to implement ACL for virtuell user in this configuration? The namespace could be a very interesting idea to give other user access to the own mailbox (e.g. for holiday), but for this each user need it's own acl-file which he can change.... And the special folder like Inbox must be viewable from another user. The both last could be realized with an option like "ACL = /imapd/user/%u/rights" to include an file with acldefinition at the namespacedefiniton. Another way could be a option like "ACL_R = user, user, group, group" inside of the namespacedefinition with definition of user and group outside of the namespacedefintion. For me a LDAP request would the best way :-) i realize the complete emailconfiguration with ldap. Stefan

3 4

[Dovecot] How change the order POP checks mail.
by Andreas Andersson 19 Jan '07

19 Jan '07

Hello! I have a problem with the POP when I want to use mbox and Maildirs. The old users are now using uw-imap, but in the future should theres old e-mail be in mbox format and the new e-mails in maildirs. I'am using this code and its worked fine in Squirrelmail and IMAP. namespace private { separator = / inbox = yes hidden = no prefix = "mbox/" location = mbox:~/mail:INBOX=/var/mail/%u } namespace private { separator = / prefix = location = maildir:~/Maildir } but not with POP, I can't find any mail. When I only searching for mbox mail, it worked great. I think thats the problem are the pop who first searching for Maildirs and then mailboxes. So how could I get the Dovecot POP server to first check the mailboxes and then the maildirs? Or how should I go around this problem? Thanks! Andreas Andersson

3 2

[Dovecot] Shared folder doesn't work!
by Brian Lavender 19 Jan '07

19 Jan '07

I can't seem to get a shared folder working properly. I am authenticating using pam, and the users have a shell account on the system. Problem is, the permissions on the messages moved into the folder don't maintain properly, and other users can't read the share. I have the following in /etc/dovecot/dovecot.conf namespace public { separator = / prefix = Public/ location = maildir:/var/mail/public } # If you create a "namespace public" section, then you need to create # a "namespace private" section namespace private { separator = / prefix = location = maildir:/home/%u/Maildir # There can be only one INBOX, and this setting defines # which namespace has it. inbox = yes } umask = 0007 I am running rc15 from backports on Debian stable. dovecot (1.0.rc15-1~bpo1) sarge-backports; urgency=low * Rebuilt for sarge. * Only changes needed were build dependency on libpq-dev changed back to postgresql-dev, libmysqlclient15-dev changed back to libmysqlclient12-dev, kernel-headers versioned build-dependency removed and debhelper version relaxed to 4. -- Jaldhar H. Vyas <jaldhar(a)debian.org> Mon, 4 Dec 2006 00:48:28 -0500 And here is the share. Two users are accessing it: brian and fred which are both in the colab group. See how the one message doesn't have group read or write. # cd /var/mail # find public -ls 232465 1 drwxrws--- 6 fred colab 1024 Jan 16 00:50 public/ 232466 1 drwxrws--- 2 fred colab 1024 Jan 16 00:13 public/cur 232467 1 drwxrws--- 2 fred colab 1024 Jan 16 00:13 public/new 232468 1 drwxrws--- 2 fred colab 1024 Jan 16 00:13 public/tmp 228051 1 drwxrws--- 5 fred colab 1024 Jan 16 04:32 public/.notices 228100 1 drwxrws--- 2 fred colab 1024 Jan 16 04:30 public/.notices/cur 228104 1 -rw-rw---- 1 fred colab 477 Jan 15 23:05 public/.notices/cur/1168937439.P1214Q0M467971.debian:2,S 228262 1 -rw-rw---- 1 brian colab 812 Jan 15 22:58 public/.notices/cur/1168949589.P1006Q0M317215.debian:2,S 228105 1 -rw-rw---- 1 fred colab 819 Jan 15 21:22 public/.notices/cur/1168950176.P1101Q0M673976.debian:2,S 228263 1 -rw------- 1 fred colab 620 Jan 15 22:57 public/.notices/cur/1168950649.P1171Q0M862818.debian:2,RS 228101 1 drwxrws--- 2 fred colab 1024 Jan 16 00:20 public/.notices/new 228102 1 drwxrws--- 2 fred colab 1024 Jan 16 04:30 public/.notices/tmp 228103 1 -rw-rwx--- 1 fred colab 636 Jan 16 04:30 public/.notices/dovecot.index.log 228266 0 -rw------- 1 brian colab 0 Jan 16 04:32 public/.notices/dovecot-uidlist.lock 228107 1 -rw-rwx--- 1 fred colab 192 Jan 16 04:30 public/.notices/dovecot.index 228106 17 -rw-rwx--- 1 fred colab 16384 Jan 16 04:30 public/.notices/dovecot.index.cache 228265 1 -rw------- 1 fred colab 172 Jan 16 04:30 public/.notices/dovecot-uidlist 232470 1 -rw-rw---- 1 fred colab 8 Jan 16 00:50 public/subscriptions -- Brian Lavender http://www.brie.com/brian/

3 5

[Dovecot] Dovecot deliver and syslog
by Bill Milford 19 Jan '07

19 Jan '07

Can syslog be used to log dovecot's LDA deliver? Bill

2 1

[Dovecot] rc17: child 15802 (auth) killed with signal 6
by Chris Laif 19 Jan '07

19 Jan '07

I'm using dovecot (rc17) in POP3/IMAP server _and_ proxy mode (pgsql backend). Everything works fine but occasionally I get these messages in the log: dovecot: auth(default): file passdb.c: line 126 (passdb_handle_credentials): assertion failed: (password != NULL) dovecot: auth(default): Raw backtrace: dovecot-auth [0x8062b2b] -> dovecot-auth [0x8062599] -> dovecot-auth [0x805a6ae] -> dovecot-auth [0x805b3b8] -> dovecot-auth [0x8060350] -> dovecot-auth(io_loop_handler_run+0x118) [0x8066458] -> dovecot-auth(io_loop_run+0x28) [0x80658e8] -> dovecot-auth(main+0x78) [0x8057028] -> /lib/libc.so.6(__libc_start_main+0xc6) [0x4007ee36] -> dovecot-auth [0x804f591] dovecot: child 15802 (auth) killed with signal 6 I seems (!) that these messages only appear when someone uses dovecot in in IMAP proxy mode. As I said before, everything works fine -- even reading emails via IMAP-proxy works. Chris

1 0

[Dovecot] RC15 problems with dovecot-shared and umask distilled
by Glenn Leavell 19 Jan '07

19 Jan '07

I recently posted about problems I've been having with dovecot-shared and umask in RC15 (using Solaris 9). I've now been able to distill what I'm experiencing into these two separate points: 1. dovecot-uidlist and message files never inherit the dovecot-shared group 2. With umask=0007 these files are created with mode 600 instead of 660: dovecot-uidlist, dovecot.index, dovecot.index.log, messages files (cur,tmp,new and the parent directory *are* created 770) (With regard to #1, I originally posted that individual message files were also not inheriting *permissions* from dovecot-shared, but that turned out to be a case of copying a message with maildir_copy_with_hardlinks = yes.) I can duplicate this consistently; can anyone else? Or has this been fixed in RC16/17? Thanks, Glenn

2 3

[Dovecot] vpopmail
by Lampa 18 Jan '07

18 Jan '07

Hello, i have only some typo: (using rc17) adding to section imap {} mail_plugins = quota produce on dovecot start IEffective uid=65534, gid=65534 ILoading modules from directory: /usr/local/dovecot/lib/dovecot/imap IModule loaded: /usr/local/dovecot/lib/dovecot/imap/lib10_quota_plugin.so and there is little patch to use vpopmail on nonstandart location (like /usr/local/vpopmail for example) (--with-vpopmail=/usr/local/vpomail) *** configure.old 2007-01-07 02:26:51.000000000 -0500 --- configure 2007-01-17 21:05:37.000000000 -0500 *************** *** 21353,21361 **** --- 21353,21363 ---- want_vpopmail=no else want_vpopmail=yes + vpopmail_home="$withval" fi else want_vpopmail=yes + vpopmail_home="`echo ~vpopmail`" fi *************** *** 30717,30723 **** fi if test $want_vpopmail = yes; then ! vpopmail_home="`echo ~vpopmail`" vpop_libdeps="$vpopmail_home/etc/lib_deps" { echo "$as_me:$LINENO: checking for vpopmail configuration at $vpop_libdeps" >&5 --- 30719,30725 ---- fi if test $want_vpopmail = yes; then ! # vpopmail_home="`echo ~vpopmail`" vpop_libdeps="$vpopmail_home/etc/lib_deps" { echo "$as_me:$LINENO: checking for vpopmail configuration at $vpop_libdeps" >&5 Thank you for your time and happy coding. Best regards Lampa

2 1