October 2008 - dovecot

[Dovecot] IMAP and SMTP Authentication
by Roderick A. Anderson 07 Oct '08

07 Oct '08

I'm a bit further along but haven't figured out why Authentication is still failing. I've tried a telnet to port 143 and openssl connection to 993. The command I issued, per the debugging page on the wiki, is: a login info(a)aesoft-sbcs.com crap Here is a snapshot from my logs (yup second try and blank lines to make it easier for me to read). Oct 7 08:17:20 mx0 dovecot: auth(default): client in: AUTH 2 PLAIN service=imap secured lip=216.64.180.226 rip=66.193.34.88 lport=993 rport=65026 resp=AGluZm9AYWVzb2Z0LXNiY3MuY29tAGNyYXA= Oct 7 08:17:20 mx0 dovecot: auth(default): passwd-file /var/mail/vhosts/aesoft-sbcs.com/passwd: Read 3 users Oct 7 08:17:20 mx0 dovecot: auth(default): passwd-file(info(a)aesoft-sbcs.com,66.193.34.88): lookup: user=info(a)aesoft-sbcs.com file=/var/mail/vhosts/aesoft-sbcs.com/passwd Oct 7 08:17:20 mx0 dovecot: auth(default): passwd-file(info(a)aesoft-sbcs.com,66.193.34.88): unknown user Oct 7 08:17:22 mx0 dovecot: auth(default): client out: FAIL 2 user=info(a)aesoft-sbcs.com And here is the relevant line from /var/mail/vhosts/aesoft-sbcs.com/passwd info:{PLAIN}crap:5000:5000::/var/mail/vhosts/aesoft-sbcs.com/info Yes there are three users in the file. What is puzzling me is why the source connection's IP is showing up in the /lookup/. I did not create the directory /var/mail/vhosts/aesoft-sbcs.com/info/Maildir Should I? I've attached the out put from postconf -n and dovecot -n since I'm pretty sure I've got some setting wrong. Thanks for any ideas or clues. Rod -- alias_database = hash:/etc/postfix/aliases alias_maps = hash:/etc/postfix/aliases broken_sasl_auth_clients = yes config_directory = /etc/postfix default_destination_concurrency_limit = 10 disable_vrfy_command = yes header_checks = regexp:/etc/postfix/header_checks.regexp inet_interfaces = 216.64.180.226, 127.0.0.1 local_recipient_maps = local_transport = virtual message_size_limit = 20971520 mydestination = localhost mydomain = aesoft-sbcs.com myhostname = mx0.cyber-office.net mynetworks = 127.0.0.0/8 recipient_delimiter = + smtp_bind_address = 216.64.180.226 smtpd_data_restrictions = reject_unauth_pipelining, reject_multi_recipient_bounce smtpd_discard_ehlo_keywords = silent-discard, dsn smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks permit_sasl_authenticated reject_invalid_hostname reject_non_fqdn_hostname smtpd_recipient_restrictions = reject_invalid_helo_hostname, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_unknown_recipient_domain, permit_mynetworks, reject_non_fqdn_recipient, permit_sasl_authenticated, reject_unauth_destination, reject_unlisted_recipient, permit smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $mydomain smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_tls_cert_file = /etc/pki/tls/certs/mail.pem smtpd_tls_key_file = /etc/pki/tls/private/mail.pem smtpd_tls_security_level = may virtual_gid_maps = static:5000 virtual_mailbox_base = /var/mail/vhosts virtual_mailbox_domains = $mydomain, digitalcda.org virtual_mailbox_maps = hash:/etc/postfix/vmailbox virtual_minimum_uid = 500 virtual_transport = dovecot virtual_uid_maps = static:5000 # 1.1.3: /etc/dovecot.conf log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log protocols: imap imaps listen: 127.0.0.1:143 ssl_listen: *:993 login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_greeting_capability: yes valid_chroot_dirs: /var/mail first_valid_uid: 5000 last_valid_uid: 5000 first_valid_gid: 5000 last_valid_gid: 5000 mail_access_groups: mail mail_location: maildir:~/Maildir mail_debug: yes maildir_copy_preserve_filename: yes mail_plugins: acl imap_client_workarounds: outlook-idle namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes auth default: mechanisms: plain login CRAM-MD5 default_realm: aesoft-sbcs.com verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /var/mail/vhosts/%d/passwd userdb: driver: passwd-file args: uid=vmail gid=vmail username_format=%n /var/mail/vhosts/%d/passwd socket: type: listen master: path: /var/run/dovecot/auth-master mode: 432 user: vmail socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix

3 5

[Dovecot] Dovecot 1.1.x or 1.2, which way to go for Kolab Server?
by Sascha Wilde 07 Oct '08

07 Oct '08

Hi Timo, Hi *, was written the other day we started to use Dovecot 1.2 for our Kolab with Dovecot project, but it turned out that there are quite a bunch of issues with 1.2 (which is ok, as it hasn't even been announced as beta till now). We have a customer who should get a first test installation of Kolab with Dovecot in the first week of September and for that we need the features mentioned in my other mails, especially the enhanced name spaces for shared folders. (%%h, listing of shared folders, an checkpassword like backend for userdb). So the big decision to make is: - stay with 1.1.x and port the needed shared namespace stuff back from 1.2 or - build on 1.2 and resolve all issues caused by it Timo, do you have any opinion/advice on this? How far from being production ready is 1.2 in your view? How hard would it be to get the shared folder/namespace stuff in 1.1.x? (or for that matter: who much harder than to do it in 1.2?) We are currently evaluating these questions, but I would highly appreciate your comments on this. cheers sascha -- Sascha Wilde OpenPGP key: 4BB86568 http://www.intevation.de/~wilde/ http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück; AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

3 5

[Dovecot] Maildir++ problem
by Claudio Prono 07 Oct '08

07 Oct '08

Hi to all, I am semi-new to the dovecot system, but i like it very much for the versatility of all the system. I have a problem: i am migrating my servers from postfix with vda patch + courier imap to dovecot. All works fine, except for one thing: i use Maildir++ format, but i don't know how to make the file maildirsize into the home of the users. This file is needed by me becouse i have a script, running every day, checking the quota status and sending me a mail of the space occuped by every mailbox on my mailserver. The format of the maildirsize file is like this: 15360000S 12393886 1 How dovecot can generate that file? I have searched into all the documentation, but i don't find anything... What parameters must be specified into the config file to generate the maildirsize file? Thank u in advance, and long life to dovecot ;) Claudio. -- ------------ Claudio Prono Systems Development @ Atpss.net Srl, Divisione Implementazione Sistemi Via San Bernardino, 17 - 10137 Torino (TO) - IT Tel +39-011.32.72.100 Fax +39-011.32.46.497 PGP Fingerprint: 75C2 4049 E23D 2FBF A65F 40DB EA5C 11AC C2B0 3647 Disclaimer: http://atpss.net/disclaimer ------------

2 3

[Dovecot] Manual verses Wiki
by Roderick A. Anderson 07 Oct '08

07 Oct '08

I know I'm looking at the answer but probably not seeing it on the Wiki? Is there a "manual" for Dovecot? Or ... where do I find all the options for the userdb and passdb options? While trying to get my head wrapped around this I noticed I might have been mixing args between the two. One example has userdb first then the next one passdb. Rod --

2 2

[Dovecot] Improvements to "Authentication failed" error
by Timo Sirainen 07 Oct '08

07 Oct '08

Probably one of the most commonly asked question is "Why does Dovecot just say authentication failed"? It would be nice to be able to get rid of these questions by having Dovecot itself point out the http://wiki.dovecot.org/WhyDoesItNotWork link. But how to do this? There are two groups of people here: 1) People who look at logs after seeing the "Authentication failed" from a client/telnet session. 2) People who don't even think about looking at logs. I'm thinking that the group 1 could be handled by having Dovecot log the link once as informational message if the first authentication attempt fails and it's from localhost. This shouldn't cause problems I think. Group 2 is more difficult though, and I fear they're also the ones asking this question more often than group 1.. I think the only solution would be to change the IMAP/POP3 error message for them. So instead of: NO Authentication failed. they'd get something more usable. So: 2a) NO Authentication failed. See http://wiki.dovecot.org/WhyDoesItNotWork. 2b) NO Authentication failed. Refer to server log for more information. 2c) NO Authentication failed. Enable auth_debug in server for more information. But there are some problems I think: - If it's done only for connections from localhost, the error messages would be different from localhost vs. elsewhere, which might confuse some log parser scripts. - Some people are running stunnel or some other proxies, causing all connections to appear from localhost. Also webmails often run in localhost. So it can't be assumed that only admins will see the error message. I think this rules out 2a) message. I'm certain I don't want end users emailing me and asking why they can't connect to their server because they saw that link. - Sending 2b) for all connections could be a solution, but it might be confusing for end users. They of course can't refer to server log.. Also unless the wiki link is logged for every failure or auth_debug is enabled, there's nothing useful in the server log. - Sending 2c) for all connections when auth_debug isn't enabled (and plain "Authentication failed" when it is) might also work, but it's again confusing to end users since they can't do that. Any thoughts?

5 7

[Dovecot] Unable telnet port 143
by satimis 07 Oct '08

07 Oct '08

Hi folks, Postfix Dovecot-imap 1.0 port 143 not working. $ telnet localhost 143[code] Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^]'. * OK Dovecot ready. 1 login satimis mypassword 1 NO Authentication failed. * BYE Disconnected for inactivity. Connection closed by foreign host. [/code] # tail /var/log/mail.log[code] Password: Oct 6 01:05:02 xen5 dovecot: imap-login: Disconnected: user=<satimis>, method=P LAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 6 01:17:09 xen5 postfix/smtpd[1820]: connect from 201-43-209-60.dsl.telesp. net.br[201.43.209.60] Oct 6 01:17:11 xen5 postfix/smtpd[1820]: NOQUEUE: reject: RCPT from 201-43-209- 60.dsl.telesp.net.br[201.43.209.60]: 554 5.7.1 Service unavailable; Client host [201.43.209.60] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.n et/bl.shtml?201.43.209.60; from=<criticastry(a)frontier-cnc.com> to=<mail@satimis. com> proto=SMTP helo=<gvaeprbc> Oct 6 01:17:11 xen5 postfix/smtpd[1820]: lost connection after RCPT from 201-43 -209-60.dsl.telesp.net.br[201.43.209.60] Oct 6 01:17:11 xen5 postfix/smtpd[1820]: disconnect from 201-43-209-60.dsl.tele sp.net.br[201.43.209.60] Oct 6 01:20:31 xen5 postfix/anvil[1823]: statistics: max connection rate 1/60s for (smtp:201.43.209.60) at Oct 6 01:17:09 Oct 6 01:20:31 xen5 postfix/anvil[1823]: statistics: max connection count 1 for (smtp:201.43.209.60) at Oct 6 01:17:09 Oct 6 01:20:31 xen5 postfix/anvil[1823]: statistics: max cache size 1 at Oct 6 01:17:09 Oct 6 01:24:32 xen5 dovecot: auth-worker(default): mysql: Connected to 127.0.0. 1 (mailserver) Oct 6 01:26:06 xen5 dovecot: imap-login: Disconnected: Inactivity: user=<satimi s>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured [/code] I suppose it uses "MySQL authorization". But I can't find /etc/dovecot/dovecot-mysql.conf # cat /etc/dovecot/dovecot.conf[code] protocols = imap imaps disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " ssl_cert_file = /etc/ssl/certs/xen5.pem ssl_key_file = /etc/ssl/private/xen5.pem mail_privileged_group = mail ## ## IMAP specific settings ## protocol imap { } ## ## POP3 specific settings ## protocol pop3 { pop3_uidl_format = %08Xu%08Xv } ## ## LDA specific settings ## protocol lda { log_path = /var/vmail/dovecot-deliver.log auth_socket_path = /var/run/dovecot/auth-master postmaster_address = postmaster(a)satimis.com # Enabling Sieve plugin for server-side mail filtering mail_plugins = cmusieve global_script_path = /var/vmail/globalsieverc } ## ## Authentication processes ## auth default { # Space separated list of wanted authentication mechanisms: # plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi mechanisms = plain login passdb sql { # Path for SQL configuration file, see /etc/dovecot/dovecot-sql.conf for example args = /etc/dovecot/dovecot-sql.conf } userdb passwd { } user = root socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 # Default user/group is the one who started dovecot-auth (root) user = vmail #group = } client { # The client socket is generally safe to export to everyone. Typical use # is to export it to your SMTP server so it can do SMTP AUTH lookups # using it. path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } dict { #quota = mysql:/etc/dovecot-dict-quota.conf } ## ## Plugin settings ## plugin { } [/code] Please help. Where can I find samples of dovecot.conf and dovecot-mysql.conf for my use. TIA B.R. satimis -- View this message in context: http://www.nabble.com/Unable-telnet-port-143-tp19831992p19831992.html Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Quota Issues
by Peter Fraser 07 Oct '08

07 Oct '08

Hi All Is there a way to test to see if the dovecot quota settings are being applied? I'm doing this as part of troubleshooting. I have set up dovecot + quotas with squirrelmail and I am not seeing the quota graphs in squirrelmail but I am not getting any errors. Could someone please help me with this? THanks.

3 2

[Dovecot] PAM authentication problems
by Tom Lobato 07 Oct '08

07 Oct '08

Hi all! I`m using dovecot for a while with no problems. Some days ago it started to delay the authentication until the timeout. syslog... Oct 3 09:00:10 coan dovecot: auth(default): pam(rodrigo.botan,121.120.119.179): pipe() failed: Too many open files Oct 3 09:00:11 coan dovecot: auth(default): pam(katia,121.120.200.97): pipe() failed: Too many open files Oct 3 09:00:11 coan dovecot: auth(default): pam(andersoncampos,121.120.200.35): pipe() failed: Too many open files Oct 3 08:25:55 coan dovecot: pop3-login: Disconnected: Inactivity: method=PLAIN, rip=121.120.119.39, lip=121.120.119.251 Oct 3 08:25:58 coan dovecot: pop3-login: Disconnected: Inactivity: method=PLAIN, rip=121.120.119.94, lip=121.120.119.251 Oct 3 08:26:01 coan dovecot: pop3-login: Disconnected: Inactivity: method=PLAIN, rip=121.120.119.148, lip=121.120.119.251 After the commands /etc/init.d/dovecot stop killall -9 dovecot-auth /etc/init.d/dovecot start It come back to work, then after some time, I need to restart again and again... I tried 'ulimit -n 5000' in /etc/init.d/dovecot, but the problem remains. The problem is in the authentication backend, I guess. I`m using PAM, so I leaved only one line in /etc/pam.d/dovecot: auth sufficient pam_permit.so and all worked fine. Of course, just for test, since this allows login with any password. My system: Debian Etch 64bit dovecot version: 1.0.rc15 (from etch repositories) PAM lib version: 0.79-5 (from etch repositories) The system has 200 users, with 30 logins per minute. hardware: Intel(R) Xeon(R) CPU 3050 @ 2.13GHz, 2GB RAM. If you have some pointer to the solution, it will be welcome. Thank you, Tom Lobato

2 3

[Dovecot] Transition from Courier-IMAP
by Arno van Amersfoort 07 Oct '08

07 Oct '08

Hello all, Currently we are looking at the possibility of moving from Courier-IMAP to Dovecot (the one that comes with Debian Lenny: version 1.0.15). I'm currently testing it on a non-production server and have a few questions: 1) Currently all our clients use Thunderbird as their mail client to read mail from our IMAP server. Thunderbird is configured with "INBOX." as the "IMAP server directory". As we certainly do NOT want to reconfigure over 150 desktops, we would like to know if it's possible to make Dovecot work with Thunderbird Configured this way -> Simply make Dovecot act the same as Courier-IMAP. With the default configuration of Dovecot I can see the (IMAP) Inbox but not its subfolders when "IMAP server directory" is NOT empty. Is there a way to let Dovecot ignore this setting and/or make it compatible with Courier? 2) About a year back we already test-drived Dovecot but we weren't able to get "Delete as marked" option to work in Thunderbird in combination with "Expunge to trash". Any messages marked as deleted would simply be deleted permanently when Thunderbird was closed. This did work properly with Courier where any messages were expunged to Trash (as it should). Is this a known problem and has it been addressed yet? Basically both questions can be brought together as "How can we make Dovecot as compatible as possible with Courier-IMAP"? Thanks, -- Ing. A.C.J. van Amersfoort (Arno) Electronics & ICT Engineer ---------------------------------------------------------------- Leiden Institute of Physics (LION), Electronics Department (ELD) Huygens Laboratory (Room 1007), Leiden University Postal Address: P.O. Box 9504, 2300 RA Leiden Visit Address : Niels Bohrweg 2, 2333 CA Leiden The Netherlands ---------------------------------------------------------------- Phone : +31-(0)71-527.1894 Fax : +31-(0)71-527.5819 E-mail : a.c.j.van.amersfoort(a)eld.physics.leidenuniv.nl Homepage : http://rocky.eld.leidenuniv.nl

2 3

[Dovecot] Zlib plugin question
by Ralf Hildebrandt 07 Oct '08

07 Oct '08

http://wiki.dovecot.org/Plugins/Zlib says pop3 and imap can use this plugin. Does deliver also use it? -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) snickebo(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de I'm looking for a job T-Shirt I need to see - SARAH PALIN: IN ENGLAND WE SHOOT PIT BULLS

2 2