August 2009 - dovecot

[Dovecot] Active IMAP sessions per server?
by Brent Bloxam 31 Aug '09

31 Aug '09

Hi, I'm curious about some of the larger dovecot installs out there and what your current active user load looks like per server. Realistically, how many active IMAP sessions are some of you maintaining? At what point did you find the load became unmanageable? I know there's a lot of different factors involved in this, but I'm just looking to get a rough idea of what I can expect to be able to handle with dovecot. Any help is appreciated Regards, Brent

2 1

[Dovecot] Quotas ignored on INBOX only
by Random Monkey 31 Aug '09

31 Aug '09

I have set up postifx and dovecot (1.1) with virtual users and delivery via LDA. I am very pleased with the results so far but have this problem with quotas. Setting a global quota using plugin { } I initially used maildir to set quotas, but they seem to apply to all folders apart from INBOX. For debugging I switched maildir to dict using mysql. The table populates as it should with sizes and message count for all messages created in trash/drafts/sent folders - but messages in the INBOX do not increment size or message count in the table. I have tried with quota rules for both messages and storage. I have also tried specifying INBOX instead of * Any suggestions on how to fix please? Dovecot -n output: # 1.1.11: /etc/dovecot/dovecot-postfix.conf # OS: Linux 2.6.28-14-server i686 Ubuntu 9.04 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps pop3s managesieve ssl_cert_file: /etc/ssl/certs/ssl-mail.pem ssl_key_file: /etc/ssl/private/ssl-mail.key ssl_cipher_list: ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no login_greeting_capability(managesieve): no mail_max_userip_connections(default): 10 mail_max_userip_connections(imap): 10 mail_max_userip_connections(pop3): 3 mail_max_userip_connections(managesieve): 10 mail_privileged_group: mail mail_location: maildir:/var/vmail/%d/%n/Maildir mail_debug: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): ~/sieve sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): ~/.dovecot.sieve auth default: mechanisms: plain login passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: passwd userdb: driver: static args: uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/dovecot-auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: quota: dict:user::proxy::quotadict quota_rule: *:messages=5 dict: quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf

2 3

[Dovecot] expire plugin: columns not uniq
by Nikita Koshikov 31 Aug '09

31 Aug '09

Hello list, My dovecot setup have expire plugin enabled. It is working fine: new records added to database(sqlite), expire-tool successfully expunges old mail, but when expire-tool try to update database record for processed user, I get error in logs: root@mail dovecot 0:0 # /usr/sbin/dovecot --exec-mail ext /usr/libexec/dovecot/expire-tool.sh --test Info: koshikov.n(a)domain.com/Spam: timestamp 1250622406 (Tue Aug 18 22:06:46 2009) -> 1250684287 (Wed Aug 19 15:18:07 2009) in logs: Aug 19 13:29:11 dict: Error: sqlite: exec(INSERT INTO expires (expire_stamp,username,mailbox) VALUES ('1250684287','koshikov.n(a)domain.com','Spam')) failed: columns username, mailbox are not unique (19) Aug 19 13:29:11 dict: Error: sql dict: commit failed: 1҅�t+�]�Ћu�}��]Ð�t& This is my expire dict config file: connect = /var/mail/expire.db #v1.2 map { pattern = shared/expire/$user/$mailbox table = expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } } expire plugin related dovecot sections: dict { expire = sqlite:/etc/dovecot/plugins/expire.conf } plugin { expire = Trash 30 Spam 20 expire_dict = proxy::expire } Version of sqlite is 3.6.16, dovecot-1.2.3. How can I solve this ? and why expire plugin is trying to use INSERT, instead of UPDATE ?

3 8

[Dovecot] Quick and dirty server optimized for IMAP upload speed?
by Adam McDougall 31 Aug '09

31 Aug '09

Early next week I need to upload over 100,000 emails to an IMAP server as quickly as possible from an Outlook client. I am looking for any methods I can use to (temporarily?) speed up the rate at which dovecot can accept and store IMAP uploads, whether it be storing on local disk, ram disk, etc. I can setup a temporary server on a laptop for example and once the upload has finished I can use standard file copying methods to transfer the mail to stable, permanent storage. I haven't been able to see over about 7 msgs/sec upload speed from a local folder in any mail client to dovecot (only NFS or ZFS backend tested so far with Maildir). Is there something horribly wrong with the speed I am seeing or are there just tricks I can try? Any tips? I'll be working on it all weekend until I find something satisfactory. It seems like I can upload mails to an Exchange server quicker. I'll setup just about anything that my experience allows me to, I can be very resourceful with adhoc hardware and software. Alternatively I'll take a fast way of converting Exchange email to a tree of local mbox files which I can then run mb2md on. I tried using Thunderbird to Import the mails from Outlook and while it was fast, it messed up the formatting of some of the mails so I don't think I can use that. I tried readpst briefly from libpst but it took a long time to run, took alot of cpu, and was spewing lots of errors so I canceled it. Thanks for any input!

3 7

[Dovecot] Postfix : lda problem
by denis 30 Aug '09

30 Aug '09

Hi, I come back with my problem: On debian lenny, using dovecot 1.1.13-2~bpo50+1 I try to configure my setup (with Postfix virtual domains) to use dovecot as lda but nothing happens, as if postfix not delegate to dovecot I am using the contreol panel alternc (http://www.alternc.org) All the maildir are in the format /var/alternc/mail/i/info_domainepublic.net for info(a)domainepublic.net The "virtual_mailbox_maps" will retrieve the correct maildir to deliver the message. For Alternc, an address is considered as an alias of the primary domain name. Thus info(a)domainepublic.net is assimilated to info_domainepublic.net(a)altern.domainepublic.net Here is a sequence of arrival of mail, the result of postconf -n, dovecot -n and the master.cf from postfix I looked in the documentation and google, but I do not understand the problem. Thanks Denis # Mail.log Aug 15 14:49:17 altern amavis[17243]: (17243-09) Passed CLEAN, [85.27.20.149] [85.27.20.149] <denis(a)collectifs.net> -> <info_domainepublic.net(a)altern.domainepublic.net>, Message-ID: <4A86AE18.7020706(a)collectifs.net>, mail_id: ozn7XWRcaHem, Hits: -9.27, size: 665, queued_as: 0A0054604A, 727 ms Aug 15 14:49:17 altern postfix/smtp[18138]: 345954610C: to=<info_domainepublic.net(a)altern.domainepublic.net>, orig_to=<info(a)domainepublic.net>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.9, delays=0.17/0/0/0.73, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=17243-09, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 0A0054604A) Aug 15 14:49:17 altern postfix/local[18256]: 0A0054604A: to=<info_domainepublic.net(a)altern.domainepublic.net>, relay=local, delay=0.23, delays=0.19/0/0/0.05, dsn=2.0.0, status=sent (delivered to maildir) # DOVECOT # 1.1.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-1-amd64 x86_64 Debian 5.0.2 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s managesieve ssl_cert_file: /etc/ssl/domainepublic.net/domainepublic.net.crt ssl_key_file: /etc/ssl/domainepublic.net/domainepublic.net.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login first_valid_uid: 33 mail_privileged_group: mail mail_location: maildir:~/Maildir mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): ~/sieve sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): ~/.dovecot.sieve auth default: passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix socket: type: listen master: path: /var/run/dovecot/auth-master mode: 432 user: postfix # POSTFIX alias_database = hash:/etc/aliases alias_maps = proxy:mysql:/etc/postfix/myalias.cf, hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix content_filter = smtp-amavis:[127.0.0.1]:10024 default_privs = www-data disable_vrfy_command = yes inet_interfaces = all mailbox_size_limit = 0 message_size_limit = 20480000 mydestination = altern.domainepublic.net vacarme.domainepublic.net mail.domainepublic.net, altern, localhost.localdomain, localhost myhostname = altern.domainepublic.net mynetworks = 127.0.0.0/8 91.121.107.196 62.58.108.143 62.58.108.140 10.0.112.2 10.0.112.1 myorigin = altern.domainepublic.net owner_request_special = no readme_directory = no recipient_delimiter = + smtp_tls_CAfile = /etc/ssl/certs/cacert.org.pem smtp_tls_cert_file = /etc/ssl/domainepublic.net/domainepublic.net.crt smtp_tls_key_file = /etc/ssl/domainepublic.net/domainepublic.net.key smtp_tls_note_starttls_offer = yes smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_use_tls = yes smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_client_restrictions = permit_mynetworks, check_client_access hash:/etc/postfix/access, permit_sasl_authenticated, smtpd_data_restrictions = reject_unauth_pipelining smtpd_delay_reject = yes smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, check_helo_access hash:/etc/postfix/helo_access, reject_invalid_hostname, reject_non_fqdn_hostname smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_invalid_hostname, reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unauth_pipelining, reject_unauth_destination, reject_multi_recipient_bounce, check_client_access hash:/etc/postfix/access, reject_rbl_client zombie.dnsbl.sorbs.net, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net, reject_rbl_client cbl.abuseat.org, reject_rbl_client dul.dnsbl.sorbs.net, check_policy_service inet:127.0.0.1:60000, permit smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_sender, reject_invalid_hostname, smtpd_tls_CAfile = /etc/ssl/certs/root.pem smtpd_tls_cert_file = /etc/ssl/domainepublic.net/domainepublic.net.crt smtpd_tls_key_file = /etc/ssl/domainepublic.net/domainepublic.net.key smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes strict_rfc821_envelopes = yes tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 virtual_gid_maps = proxy:mysql:/etc/postfix/mygid.cf virtual_mailbox_base = / virtual_mailbox_maps = proxy:mysql:/etc/postfix/myvirtual.cf virtual_minimum_uid = 1000 virtual_transport = dovecot virtual_uid_maps = static:33 # POSTFIX master.cnf # # Postfix master process configuration file. For details on the format # of the file, see the master(5) manual page (command: "man 5 master"). # # Do not forget to execute "postfix reload" after editing this file. # # ========================================================================== # service type private unpriv chroot wakeup maxproc command + args # (yes) (yes) (yes) (never) (100) # ========================================================================== smtp inet n - - - - smtpd #submission inet n - - - - smtpd # -o smtpd_tls_security_level=encrypt # -o smtpd_sasl_auth_enable=yes # -o smtpd_client_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name=ORIGINATING smtps inet n - - - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name=ORIGINATING #628 inet n - - - - qmqpd pickup fifo n - - 60 1 pickup cleanup unix n - - - 0 cleanup qmgr fifo n - n 300 1 qmgr #qmgr fifo n - - 300 1 oqmgr tlsmgr unix - - - 1000? 1 tlsmgr rewrite unix - - - - - trivial-rewrite bounce unix - - - - 0 bounce defer unix - - - - 0 bounce trace unix - - - - 0 bounce verify unix - - - - 1 verify flush unix n - - 1000? 0 flush proxymap unix - - n - - proxymap proxywrite unix - - n - 1 proxymap smtp unix - - - - - smtp # When relaying mail as backup MX, disable fallback_relay to avoid MX loops relay unix - - - - - smtp -o smtp_fallback_relay= # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 showq unix n - - - - showq error unix - - - - - error retry unix - - - - - error discard unix - - - - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - - - - lmtp anvil unix - - - - 1 anvil scache unix - - - - 1 scache # # ==================================================================== # Interfaces to non-Postfix software. Be sure to examine the manual # pages of the non-Postfix software to find out what options it wants. # # Many of the following services use the Postfix pipe(8) delivery # agent. See the pipe(8) man page for information about ${recipient} # and other message envelope options. # ==================================================================== # # maildrop. See the Postfix MAILDROP_README file for details. # Also specify in main.cf: maildrop_destination_recipient_limit=1 # maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient} # # See the Postfix UUCP_README file for configuration details. # uucp unix - n n - - pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) # # Other external delivery methods. # ifmail unix - n n - - pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp unix - n n - - pipe flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient scalemail-backend unix - n n - 2 pipe flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} mailman unix - n n - - pipe flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user} # added for amavisd-new smtp-amavis unix - - - - 4 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes -o disable_dns_lookups=yes -o max_use=20 127.0.0.1:10025 inet n - - - - smtpd -o content_filter= -o local_recipient_maps= -o relay_recipient_maps= -o smtpd_restriction_classes= -o smtpd_delay_reject=no -o smtpd_client_restrictions=permit_mynetworks,reject -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o mynetworks_style=host -o mynetworks=127.0.0.0/8 -o strict_rfc821_envelopes=yes -o smtpd_error_sleep_time=0 -o smtpd_soft_error_limit=1001 -o smtpd_hard_error_limit=1000 -o smtpd_client_connection_count_limit=0 -o smtpd_client_connection_rate_limit=0 -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks -o smtpd_data_restrictions=reject_unauth_pipelining -o smtpd_end_of_data_restrictions= dovecot unix - n n - - pipe flags=DRhu user=www-data:www-data argv=/usr/lib/dovecot/deliver -d $(recipient)

5 14

[Dovecot] Dovecot 1.0.14 + osx 10.6 and authentication PAM
by Maarten Koster 30 Aug '09

30 Aug '09

Howdy, Today I installed the new version of Apple OSX 10.6. Besides that it deleted the dovecot user, things went quite smooth. As far as I can tell it is running as it used to. However, I can't login to my account. It used to work fine with PAM taking the username and password from my osx installation. Now it doesn't allow me to login anymore. I have read on a website that apple changed from Linux-Pam to Open-Pam. If this is true, how would I need to change the PAM entry file? Right now it is as follows: /etc/pam.d/dovecot: # dovecot: auth account password session auth required pam_nologin.so auth sufficient pam_securityserver.so auth sufficient pam_unix.so auth required pam_deny.so account required pam_permit.so password required pam_deny.so session required pam_uwtmp.so Here is a list with all dovecot processes Maarten-2:sbin maarten$ ps auxw|grep "dovecot\|imap\|pop3" maarten 249 1,1 0,0 2435032 528 s000 S+ 3:21pm 0:00.00 grep dovecot\|imap\|pop3 dovecot 218 0,0 0,0 602248 660 ?? S 3:06pm 0:00.08 imap-login root 215 0,0 0,0 601144 636 ?? S 3:06pm 0:00.08 dovecot-auth root 214 0,0 0,0 599940 356 ?? Ss 3:06pm 0:00.11 ./dovecot dovecot 238 0,0 0,0 602248 660 ?? S 3:17pm 0:00.03 imap-login dovecot 221 0,0 0,0 602248 660 ?? S 3:06pm 0:00.08 imap-login and here is my Dovecot configuration: # 1.0.14: /opt/etc/dovecot.conf Warning: mail_extra_groups setting was often used insecurely so it is now deprecated, use mail_access_groups or mail_privileged_group instead base_dir: /var/run/dovecot/ protocols: imap ssl_disable: yes login_dir: /var/run/dovecot//login login_executable: /opt/libexec/dovecot/imap-login mail_extra_groups: mail mail_access_groups: mail default_mail_env: maildir:~/Maildir mail_location: maildir:~/Maildir auth default: passdb: driver: pam userdb: driver: passwd Thanks in advance, Maarten

2 1

[Dovecot] Lazy expunge? URGENT
by Erik Janson 29 Aug '09

29 Aug '09

I have configured Dovecot namespace alike Courier has: mail_location = maildir:~/.Maildir namespace private { separator = . prefix = INBOX. inbox = yes } Question: How should I configure lazy expunge for it? br, erik

2 1

[Dovecot] PAM Authentication with OSX Snow Leopard
by Nicola Tiling 29 Aug '09

29 Aug '09

Hi Apple changed from Linux PAM to OpenPAM and the dovecot pam file (dovecot installed from macports) doesn't work anymore. Installed pam modules are: -r--r--r-- 1 root wheel 76640 31 Jul 09:15 pam_env.so.2 -r--r--r-- 1 root wheel 51024 31 Jul 09:15 pam_group.so.2 -r--r--r-- 1 root wheel 99776 31 Jul 09:15 pam_krb5.so.2 -r--r--r-- 1 root wheel 51552 31 Jul 09:15 pam_launchd.so.2 -r--r--r-- 1 root wheel 68800 31 Jul 09:15 pam_mount.so.2 -r--r--r-- 1 root wheel 50896 31 Jul 09:15 pam_nologin.so.2 -r--r--r-- 1 root wheel 64272 31 Jul 09:15 pam_opendirectory.so.2 -r--r--r-- 1 root wheel 51008 31 Jul 09:15 pam_sacl.so.2 -r--r--r-- 1 root wheel 50608 31 Jul 09:15 pam_self.so.2 -r--r--r-- 1 root wheel 60448 31 Jul 09:15 pam_serialnumber.so.2 -r--r--r-- 1 root wheel 50880 31 Jul 09:15 pam_uwtmp.so.2 Does anyone know to get dovecot with this modules work? Nicola

1 1

[Dovecot] Quota question.
by Tom Diehl 29 Aug '09

29 Aug '09

Hi, I am trying to get quota working properly on dovecot 1.2.3 with postfix admin, amavisd-new, mysql, and postfix. So far I can see the db getting updated when messages are added and deleted from the mailbox. The problem I am having is that I have imported a bunch of messages from the old mail server that was running uw-imap and mbox to the doevcot machine using maildir++. As a result the quotas used only reflects what has been added and deleted since the import was done. What is the proper way to get the quota in the database to reflect what is actually in the users mailbox? Google and the wiki have not been helpful to me in figuring this out. I do not really think this is a config problem but in case it is below is the output of dovecot-n: (vfoggy pts7) # dovecot -n # 1.2.3: /etc/dovecot.conf # OS: Linux 2.6.18-128.4.1.el5xen x86_64 CentOS release 5.3 (Final) protocols: imap imaps pop3 pop3sa managesieve listen: * login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login first_valid_uid: 512 last_valid_uid: 512 first_valid_gid: 512 last_valid_gid: 512 mail_location: maildir:~/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugins(default): quota mail_plugins(imap): quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 mail_plugin_dir(managesieve): /usr/lib64/dovecot/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): lda: postmaster_address: postmaster(a)tntechs.com mail_plugins: sieve quota auth default: mechanisms: plain login user: nobody worker_max_count: 50 passdb: driver: sql args: /etc/dovecot/sql.conf userdb: driver: static args: uid=512 gid=512 home=/var/spool/vmail/domains/%d/%n userdb: driver: sql args: /etc/dovecot/sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: vmail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail plugin: quota: dict:user::proxy::quotadict sieve: ~/.dovecot.sieve sieve_storage: ~/sieve acl: vfile:/etc/dovecot/acls trash: /etc/dovecot/trash.conf dict: quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf (vfoggy pts7) # In addition below is what I have in dovecot-dict-quota.conf: map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } -- Regards, Tom Diehl tdiehl(a)rogueind.com Spamtrap address mtd123(a)rogueind.com

3 11

[Dovecot] GSSAPI Authentication Broke with Dovecot 1.1.16 -> 1.2.4 Upgrade
by John Marshall 29 Aug '09

29 Aug '09

This morning I upgraded a dovecot installation from 1.1.16 to 1.2.4 on a FreeBSD 7.2 server, and then spent 3 hours trying to figure out why GSSAPI authentication had broken. It turned out to be a recent change in Dovecot's mech-gssapi.c to do with checking for NULs in usernames: everything worked fine when I disabled that test. <http://hg.dovecot.org/dovecot-1.2/rev/5d53b1d66d1b> This is what I was seeing in the log file with auth_debug enabled: ------------------------ auth(default): client in: AUTH 1 GSSAPI service=imap secured lip=192.0.2.36 rip=192.0.2.168 lport=143 rport=51168 auth(default): gssapi(?,192.0.2.168): Obtaining credentials for imap(a)mail1.example.com auth(default): client out: CONT 1 auth(default): client in: CONT<hidden> auth(default): gssapi(john(a)EXAMPLE.COM,192.0.2.168): security context state completed. auth(default): client out: CONT 1 YGwGCSqGSIb3EgECAgIAb10wW6ADAgEFoQMCAQ+iTzBNoAMCARCiRgREIuGJR3fqiMdvWjEg6utI7bt3fZuI8Ulk4LoFu59aMgnX+Kivdohxin2A71UCEC7oG0sVYe7vrTjg2N9s27D1BLRuJbQ= auth(default): client in: CONT<hidden> auth(default): gssapi(john(a)EXAMPLE.COM,192.0.2.168): Negotiated security layer auth(default): client out: CONT 1 YD8GCSqGSIb3EgECAgIBBAD/////MINNkeu5LVS8fiZNSnb8j8iKBuHArr/sHec++VYV+9SSc+RkAf///wQEBAQ= auth(default): client in: CONT<hidden> auth(default): gssapi(john(a)EXAMPLE.COM,192.0.2.168): authz_name has NULs auth(default): client out: FAIL 1 user=john(a)EXAMPLE.COM imap-login: Disconnected (auth failed, 1 attempts): user=<john(a)EXAMPLE.COM>, method=GSSAPI, rip=192.0.2.168, lip=192.0.2.36, TLS: Disconnected ------------------------ I commented out the 'return -1;' at the end of the if(data_has_nuls) block (to preserve the log message but fall through), rebuilt, and everything works again. ------------------------ auth(default): gssapi(john(a)EXAMPLE.COM,192.0.2.168): authz_name has NULs auth(default): client out: OK 1 user=john(a)EXAMPLE.COM ------------------------ I tried building dovecot 1.2.4 with Heimdal 0.6.3, 1.0.1 and 1.2.1 and all gave the same result. Is it possible that the data_has_nuls test doesn't work as intended or that it only works with MIT Kerberos? Thank you. -- John Marshall

2 4