- dovecot - dovecot.org

[Dovecot] Director and forwarding LDAP user as Master user
by Alexandr Sabitov 08 Jan '13

08 Jan '13

Hello guys, Would you be able to help me with this little issue. I bet someone has the same config so if you can copy-paste it I will very appreciate it. So main idea is to enable Dovecot director to authenticate a LDAP user with plain or encrypted password and send the user to back-end Dovecot server after the authentication. According to Wiki it is only possible if we use the master user to communicate to the back-end server. On the back-end Dovecot server it is working fine, I can log in as normal user/user_password or as user*masteruser/master_password. The back-end config is: auth_master_user_separator = * passdb { driver = passwd-file args = /usr/local/dovecot/etc/dovecot/passwd.masterusers master = yes pass = yes } passdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } Now front-end: how to get director forward the user to the back-end after authentication on the director? With my director config the user stays on the director all the time: passdb { driver = static args = proxy=y master=masteruser pass=master_password destuser=%u*masteruser } passdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } The only way to forward the user is to setup nopassword=y in args of static passdb but in that case the user will be authenticated on the backend but not on the director... What do I missing ? Please help me Best Regards, Alexandr Sabitov

2 2

Re: [Dovecot] Problem setting up dovecot on Debian: "telnet: Unable to connect to remote host: Connection refused"
by Joseph Tam 08 Jan '13

08 Jan '13

Noel Butler writes: > I build from sources all key daemon software anyway, package maintainers > can only account for so many configurations. Its not so critical with > dovecot now since v2, because, regrettably, Timo removed a lot of fine > tune config options that allowed us to only build in what we wanted, > now, tuff, most the auth methods and stuff must be built even if we dont > want them. That hasn't been my experience, but maybe because the non-optional stuff are what I need. For example, my configure for v2.1.x summarizes Install prefix . : /opt/dovecot File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file checkpassword : -shadow -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword : -ldap -sql -vpopmail -nss SQL drivers .... : : -pgsql -mysql -sqlite Full text search : squat : -lucene -solr A few auth methods, which even if you don't use, is a nice fallback for exceptions or niche caches, no dbs, one mandatory text search method. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] BLF-CRYPT
by Kristof Bajnok 07 Jan '13

07 Jan '13

Hi, I get "Unknown scheme: BLF-CRYPT" messages if I try to use Blowfish-encrypted passwords, even though it is supposed to be supported. I'm on 2.1.7, Debian Squeeze backports. Do you have any information whether Blowfish is supported with Debian Squeeze crypt(), or is there any other knobs I can turn on to make this algorithm available? Thanks, Kristof

2 1

[Dovecot] Problem setting up dovecot on Debian: "telnet: Unable to connect to remote host: Connection refused"
by Chris Evans 07 Jan '13

07 Jan '13

I would like to get dovecot running on my laptop so I can transfer a lot of old Email from Thunderbird mailbox files to a hosted zimbra service. However I'm falling at the first hurdle. I'm running Debian squeeze i386 (kernel 2.6.32-5-686) and have installed dovecot-imapd and dovecot-common with synaptic and edited /etc/dovecot/dovecot.conf to make sure it has the right protocols and listen instructions. Here's dovecot -n root@delldeb:/etc/dovecot# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.6 log_timestamp: %Y-%m-%d %H:%M:%S listen: 143 993 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mbox_write_locks: fcntl dotlock auth default: passdb: driver: pam userdb: driver: passwd Here's ps: root@delldeb:/etc/dovecot# ps aux | grep dove root 10353 0.0 0.0 3944 792 ? Ss 15:32 0:00 /usr/sbin/dovecot -c /etc/dovecot/dovecot.conf root 10356 0.0 0.0 10008 2420 ? S 15:32 0:00 dovecot-auth root 10360 0.0 0.0 10008 2372 ? S 15:32 0:00 dovecot-auth -w dovecot 10361 0.0 0.0 5412 2024 ? S 15:32 0:00 imap-login dovecot 10362 0.0 0.0 5412 2024 ? S 15:32 0:00 imap-login dovecot 10363 0.0 0.0 5412 2028 ? S 15:32 0:00 imap-login root 10393 0.0 0.0 3304 772 pts/2 S+ 15:33 0:00 grep dove Here's netstat: root@delldeb:/etc/dovecot# netstat -tap | grep 143 tcp 0 0 0.0.0.143:imap2 *:* LISTEN 9178/dovecot tcp 0 0 0.0.0.143:imaps *:* LISTEN 9178/dovecot I can telnet into SMTP OK with telnet localhost 25 but telnet localhost 143 gets me the "Connection refused" message. I've changed auth_debug to "yes" and now /var/log/mail.info says: Jan 5 15:32:13 delldeb dovecot: Dovecot v1.2.15 starting up (core dumps disabled) Jan 5 15:32:14 delldeb dovecot: auth(default): new auth connection: pid=10361 Jan 5 15:32:14 delldeb dovecot: auth(default): new auth connection: pid=10362 Jan 5 15:32:14 delldeb dovecot: auth(default): new auth connection: pid=10363 That doesn't change after I try the telnet login again so I think that's just telling me that the dovecot daemon started and launched it's listeners (but I know I don't know how to read this so correction welcome). My reading of all of this is that the dovecot daemon is up and running, that it's listening correctly on 143 and 993 and that I have to do something else to get authorisation even to start the IMAP dialogue with the server. I would like to get it working and locked to SSL only but thought I should start with both unencrypted and encrypted. Can someone help me or point me to the bits of documentation or good web howto or the like that I've missed? TIA, Chris (long term Debian user but it's some years since I last ran my own mail server and I'm a total newby to imap and dovecot)

4 9

[Dovecot] v2.1.13 released
by Timo Sirainen 07 Jan '13

07 Jan '13

http://dovecot.org/releases/2.1/dovecot-2.1.13.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.13.tar.gz.sig - Some fixes to cache file changes in v2.1.11. - fts-solr: Overlong UTF8 sequences in mails were rejected by Solr and caused the mails to not be indexed. - virtual storage: Sorting mailbox by from/to/cc/bcc didn't work.

1 0

[Dovecot] wrong authentication for local delivery
by Averlon 06 Jan '13

06 Jan '13

Hi all there, I have a postfix/dovecot environment running with ldap authentication. I am able to deliver e-Mails to the internet and also receive them via fetchmail. I have a pure local domain (av.loc). Just for internal purpuse. For all mails where destination is a local mailbox, as for all of the local domain, delivery does not work. Here I can show some logs of such a process: +++ Here the process starts (I have sent an e-Mail to myself). Jan 6 17:31:06 f42252se dovecot: auth: Debug: auth client connected (pid=13250) Jan 6 17:31:06 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.110.150#011rip=192.168.110.165#011secured#011resp=<hidden> Jan 6 17:31:06 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=mail,userPassword *Jan 6 17:31:06 f42252se dovecot: auth: Debug: auth(avadmin,192.168.110.165): username changed avadmin -> avadmin(a)av.loc* Jan 6 17:31:06 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc,192.168.110.165): result: userPassword(password)=<hidden> mail(user)=avadmin(a)av.loc Jan 6 17:31:06 f42252se dovecot: auth: Debug: client out: OK#0111#011user=avadmin(a)av.loc#011mail=/home/vmail/avadmin/Maildir/ Jan 6 17:31:06 f42252se postfix/smtpd[13250]: 69FDB30007C: client=f42252ud.averlon.loc[192.168.110.165], sasl_method=PLAIN, sasl_username=avadmin(a)av.loc Jan 6 17:31:06 f42252se postfix/cleanup[13251]: 69FDB30007C: message-id=<50E9A6C8.1090805(a)av.loc> Jan 6 17:31:06 f42252se postfix/qmgr[11960]: 69FDB30007C: from=<avadmin(a)av.loc>, size=1224, nrcpt=1 (queue active) Jan 6 17:31:06 f42252se postfix/smtpd[13250]: disconnect from f42252ud.averlon.loc[192.168.110.165] Jan 6 17:31:09 f42252se postfix/pickup[11959]: 19A2E30007F: uid=5002 from=<avadmin(a)av.loc> Jan 6 17:31:09 f42252se postfix/cleanup[13251]: 19A2E30007F: message-id=<50E9A6C8.1090805(a)av.loc> Jan 6 17:31:09 f42252se postfix/qmgr[11960]: 19A2E30007F: from=<avadmin(a)av.loc>, size=1531, nrcpt=1 (queue active) Jan 6 17:31:09 f42252se postfix/pipe[13252]: 69FDB30007C: to=<avadmin(a)av.loc>, relay=spamassassin, delay=2.7, delays=0.01/0/0/2.7, dsn=2.0.0, status=sent (delivered via spamassassin service) Jan 6 17:31:09 f42252se postfix/qmgr[11960]: 69FDB30007C: removed Jan 6 17:31:09 f42252se dovecot: auth: Debug: master in: USER#0111#011avadmin(a)av.loc#011service=lda *Jan 6 17:31:09 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin(a)av.loc)) fields=mail,userPassword* Jan 6 17:31:09 f42252se dovecot: auth: ldap(avadmin(a)av.loc): unknown user Jan 6 17:31:09 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111 +++ I have configured my thunderbird to have a username to authenticate against ldap. In the first steps above the authentication of the sender works. But then, when delivering to the receiver, dovecot uses the e-Mail address of the receiver to check the password. I do not know why dovecot chechs the password of the receiver before delivery. I do neither know where to switch that off or set some changes in the configuration to avoid that process. Probably it is correct? But anyhow, the setup ldap-procedure just checks the username and no e-Mail address. Dovecot konfig: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login cram-md5 auth_username_format = %Lu auth_verbose = yes hostname = mail.av.loc mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = avdove userdb { args = uid=vmail gid=vmail home=/home/vmail/%n driver = static } protocol lda { sendmail_path = /usr/sbin/sendmail } +++ As always, I would appreciate some hints. Thanks in advance. -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

1 0

[Dovecot] dovecot as layer between postfix and thunderbird
by martin svensson 05 Jan '13

05 Jan '13

Hello, im all new to this but feel i want to have a dedicated server to handle my mails from Gmail and Hotmail Basically, i installed SMS, superb Mini Server (based on slackware), and with that default install i got: dovecot, postfix, fetchmail and sendmail. The postfix part seems to work according to a "telnet localhost 25", now i want to procede with dovecot, as i understand it, its the middle layer between (in my case) postfix and thunderbird. What i expect in the very end is a dedicated server who regulary checks and fetches mails, and lets me have all contacts info in the (already up and running) LDAP server. When i start thunderbird, i want it to go grab those mails from my local machine I am, ofcourse all over manpages, HOWTOs, guides and google, but would certainly appriciate further help and points in the right direction My apologises for any weird beginner mistakes in this post

5 4

[Dovecot] Disable auth-worker log message?
by Martin Rabl 05 Jan '13

05 Jan '13

Hi, is it possible to disable the line auth-worker(17128): mysql(127.0.0.1): Connected to database mailserver in dovecot 2.1.12? Logging is in "standard" mode. Thank you, Martin

2 1

[Dovecot] permission denied message
by Averlon 05 Jan '13

05 Jan '13

Hi all, I have run successfully a postfix/dovecot installation some time ago. Now, setting up a new server, I am lost with some error messages. I would appreciate some help. +++ f42252se dovecot: pop3-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=113(<getpwu id() error>) egid=65534(<getgrgid() error>) missing +x perm: /, dir owned by 5000:5000 mode=0750) +++ This is the error message I get. "directory /" is a little bit courious to me. Here my dovecot config: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes hostname = mail.av.loc mail_debug = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0600 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = dovecot userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } +++ You probably see it immediatly what I fail to see. Thanks in advance -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Guiding Principle Tel.: +49 (8121) 7922532 Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

2 1

[Dovecot] About the Dovecot Missing mail.
by Vilson Lai 05 Jan '13

05 Jan '13

Dear Sir and/or Madam, I'm the newbie for using Linux, and now our company find the freelancer to change the mbox to maildir. we found that we have mail loss with error massage(ERROR: Connection dropped by IMAP server. Query: EXPUNGE), after that our freelancer do something to let this massage disappear. But now will still found we have mail loss. What can I do? I found a similar case in this page, but I can't found the solution, anyone can help me? URL: http://www.dovecot.org/list/dovecot/2011-December/062632.html Best Regards, Vilson Lai

3 4