- dovecot - dovecot.org

Re: [Dovecot] ChgrpNoPerm issue
by Joseph Tam 11 Sep '12

11 Sep '12

Robert JR <roundcube222(a)alaadin.org> writes: > The problem is /var/mail (Owner is > useraccount and the group us mail) , and here comes the problem > Dovecot > keeps trying to chown the imap folder inside the homedirectory with > user:mail account and since > And this is the reason of error that appears > in my log file. Dovecot is trying to keep the permission of your index caches consistent with that of your mailbox it indexes. The INBOX index cache is kept in your user's mail directory (as per your default settings), although you can change that location. > The option mail_access_groups=mail solve the problem.. > but I read it is not secure.. > With my current configutation, users login > with imap to read mail , can they use > any the mail_access_groups=mail > and read other poeple mail ? Yes, that's the security problem. > does my configutation > is a shard mailbox > and could be unsecure.. Could not parse your question/comment. > why didnot have > this issue with uw-imapd? and why dovecot try to chown the .imap > folder > with the mail group ? uw-imapd was not as picky. The extra consideration for group ownership is so that shared access to mailbox files, and their associated index caches, remain consistent. For example, if you shared a mailbox among your colleagues in group "staff" and the mailbox has group=staff,perm=g+rw, then the index caches will inherit those permissions, and members of group staff can access mailbox and indices alike. [You later write ...] > Sep 9 11:22:30 dovecot: pop3(r): Error: > fchown(/home/r/.imap/INBOX/dovecot.index.log.newlock, -1, 12(mail)) > failed: Operation not permitted (egid=501(r), group based on > /var/mail/r) > > i know that chmod 0600 /var/mail , will solve the problem > and i will no longer receive the above errors again You also have to make sure that autocreated INBOXs (i.e. a brand new account) does not start out with anything other than 0600. You may have to use dovecot's LDA or twist your LDA's arm to create mailboxes that way. I guess you can also avoid these errors by using memory indices, but you forego the advantages of persistent indices. > But my question is > that incase i did not set chmod /var/mail 0600, can i ignore such > errors, is these errors harmful ? if this errors keep coming and i > ignored them would this cause mbx corruption .. please advise No, you can't ignore these errors. They will break IMAP access to those mailboxes (as you will find out). Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] precise reading of plugin deleted to trash
by ml 10 Sep '12

10 Sep '12

hello timo and other dev after a precise reading of plugin deleted to trash it appears to me like things more varariables are declared NULL in the code. it appears to me as being possible to achieve actions even if messages with the same id appears several times in different INBOX when it is the exact order of things -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC2626742 gpg --keyserver pgp.mit.edu --recv-key C2626742 http://about.me/fakessh http://urlshort.eu fakessh @ http://gplus.to/sshfake http://gplus.to/sshswilting http://gplus.to/john.swilting https://lists.fakessh.eu/mailman/ This list is moderated by me, but all applications will be accepted provided they receive a note of presentation

1 0

[Dovecot] Chown ChgrpNoPerm problem
by Robert JR 10 Sep '12

10 Sep '12

Hello, I just have a one simple question. my logs has the following entries Sep 9 02:48:10 dovecot: pop3(r): Error: fchown(/home/r/mail/.imap/INBOX/dovecot.index.log.newlock, -1, 12(mail)) failed: Operation not permitted (egid=501(r), group based on /var/mail/r) Sep 9 11:22:30 dovecot: pop3(r): Error: fchown(/home/r/.imap/INBOX/dovecot.index.log.newlock, -1, 12(mail)) failed: Operation not permitted (egid=501(r), group based on /var/mail/r) i know that chmod 0600 /var/mail , will solve the problem and i will no longer receive the above errors again But my question is that incase i did not set chmod /var/mail 0600, can i ignore such errors, is these errors harmful ? if this errors keep coming and i ignored them would this cause mbx corruption .. please advise My dovecot conf is disable_plaintext_auth = no mail_debug = yes mail_location = mbox:~/mymail:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } Thanks. Robert

1 0

[Dovecot] ChgrpNoPerm issue
by Robert JR 09 Sep '12

09 Sep '12

I have dovecot version 2.0.9 I am confused about this article http://wiki2.dovecot.org/Errors/ChgrpNoPerm my mail_location = mbox:~/mymail:INBOX=/var/mail/%u So my inbox is at var/mail/ and my imap folder is /home/user/mymail The problem is /var/mail (Owner is useraccount and the group us mail) , and here comes the problem Dovecot keeps trying to chown the imap folder inside the homedirectory with user:mail account and since And this is the reason of error that appears in my log file. The option mail_access_groups=mail solve the problem.. but I read it is not secure.. With my current configutation, users login with imap to read mail , can they use any the mail_access_groups=mail and read other poeple mail ? does my configutation is a shard mailbox and could be unsecure.. my main quesion , for my current configuration , can i use mail_access_groups=mail safely or can some user use this to read other people mail ? attached my configuration. why didnot have this issue with uw-imapd? and why dovecot try to chown the .imap folder with the mail group ? dovecot -n output is # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.2.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) disable_plaintext_auth = no mail_debug = yes mail_location = mbox:~/mymail:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } [ Robert

1 0

[Dovecot] Sieve command line tool status for Refiltering
by Dieter Knopf 09 Sep '12

09 Sep '12

Hello, is there any update about the sieve command line tool? I really need some way to refilter my mails without loosings flags and without moving all messages in a different folder. This is possible with procmail via direct access to the file system without the need of getmail. Thanks

3 5

[Dovecot] Auth worker max line size
by Emmanuel Dreyfus 09 Sep '12

09 Sep '12

Hello I have been playing with some exotic authentication scheme with Dovecot and PAM. That involves sending really large base64 encoded data as the IMAP password, and I have hit a line limit in Dovecot, with AUTH_WORKER_MAX_LINE_LENGTH set to 1024. This limit is especially frustrating since other parts of the software use much larger limits: MAX_INBUF_SIZE 4096 MAX_IMAP_LINE 8192 AUTH_CLIENT_MAX_LINE_LENGTH 8192 I had to make the patch attached below to get my authentication working. I can live with this local patch, but given the much more liberal limits of MAX_INBUF_SIZE at 4096 makes we wonder if this 1024 limit on AUTH_WORKER_MAX_LINE_LENGTH could not be a bug. Or is there a security concern at using more than 1kB? Opinions? (please Cc: me, I'm not subscribed ot the list) --- src/auth/auth-worker-client.h.orig 2009-06-23 18:32:15.000000000 +0200 +++ src/auth/auth-worker-client.h 2009-06-23 18:32:33.000000000 +0200 @@ -1,8 +1,8 @@ #ifndef AUTH_WORKER_CLIENT_H #define AUTH_WORKER_CLIENT_H -#define AUTH_WORKER_MAX_LINE_LENGTH 1024 +#define AUTH_WORKER_MAX_LINE_LENGTH 4096 struct auth_worker_client *auth_worker_client_create(struct auth *auth, int fd); void auth_worker_client_destroy(struct auth_worker_client **client); void auth_worker_client_unref(struct auth_worker_client **client); -- Emmanuel Dreyfus manu(a)netbsd.org

3 5

[Dovecot] Vpopmail Dynamic Authentication Module
by Eric Sisolak 08 Sep '12

08 Sep '12

Hello, We currently use qmail with vpopmail for e-mail and are looking to switch from courier-imap to dovecot for IMAP on our RedHat EL 5 systems. Our goal is to use the dovecot RPM supplied by RH (v1.0.7) if at all possible. We can do this if we are able to dynamically load the vpopmail auth module. The wiki (http://wiki.dovecot.org/CompilingSource) notes that this should be possible: Dovecot can also dynamically load authentication modules from the $prefix/lib/dovecot/auth/ directory. Binary packages builders should use them for authentication modules which require external libraries (e. g. LDAP and vpopmail). There is no standard way to build them as modules currently, but something like this should work: gcc -shared -fPIC -DHAVE_CONFIG_H -DUSERDB_VPOPMAIL -DPASSDB_VPOPMAIL \-I../.. -I../lib userdb-vpopmail.c passdb-vpopmail.c -o vpopmail.so \-lvpopmail I had to modify the command to build the module, but was able to successfully build it: gcc -shared -fPIC -DHAVE_CONFIG_H -DUSERDB_VPOPMAIL -DPASSDB_VPOPMAIL -I../.. -I../lib -I/home/vpopmail/include -I/home/vpopmail/lib userdb-vpopmail.c passdb-vpopmail.c -o vpopmail.so -L/home/vpopmail/lib/libvpopmail.a I am unable to get the module to load properly. Dovecot built with --with-vpopmail works perfectly. When I start dovecot and it tries to load the module it reports: Aug 23 16:48:18 ctd-nix1 dovecot: Dovecot v1.0.7 starting up Aug 23 16:48:18 ctd-nix1 dovecot: auth(default): dlopen(/usr/lib64/dovecot/auth/vpopmail.so) failed: /usr/lib64/dovecot/auth/vpopmail.so: undefined symbol: vclose Aug 23 16:48:18 ctd-nix1 dovecot: auth(default): dlsym(passdb_vpopmail) failed: dovecot-auth: undefined symbol: passdb_vpopmail Aug 23 16:48:18 ctd-nix1 dovecot: auth(default): Unknown passdb driver 'vpopmail' (typo, or Dovecot was built without support for it? Check with dovecot --build-options) Aug 23 16:48:18 ctd-nix1 dovecot: Auth process died too early - shutting down Sometimes instead the last line is replaced with: Aug 23 15:02:45 ctd-nix1 dovecot: child 5412 (auth) returned error 89 Thanks! Eric

2 2

[Dovecot] problem about pop3 using dovecot
by bmalik 08 Sep '12

08 Sep '12

I upgraded dovecot from 1.1 to 2.1.8 pop3/imap works but i have a problem. i use pop3 protocol on outlook 2010 for my account. and i set keep my mails on the server for 5 days or until i delete them. These settings were working old dovecot1.1. But when i upgraded it to 2.1.8. if i even delete a mail from outlook the server doesn't delete or old mails are not deleted. what can be the problem ? thanks -- View this message in context: http://dovecot.2317879.n4.nabble.com/problem-about-pop3-using-dovecot-tp373… Sent from the Dovecot mailing list archive at Nabble.com.

4 7

Re: [Dovecot] about postlogin in dovecot2
by Joseph Tam 07 Sep '12

07 Sep '12

<bmalik(a)ihlas.net.tr> writes: > where do i have to locate the passwd-file in dovecot2 For what purpose? Master user? Password/user lookup? passdb { driver = passwd-file master = yes args = /anywhere/you/want/master-users pass = yes } passdb { driver = passwd-file args = /anywhere/you/want/passwd } userdb { driver = passwd-file args = /anywhere/you/want/passwd } Joseph Tam <jtam.home(a)gmail.com>

4 7

[Dovecot] Disconnect users for a distinct period of time?
by Michael Grimm 07 Sep '12

07 Sep '12

Hi -- Today, I've learned who to disable incoming mail delivery to dovecot (accepted by postfix), temporarily. Now, I would like to know if there is a way to make a "doveadm kick -A" a permanent disconnect until one would allow reconnects, again? This should be done *without* shutting down dovecot or *extensive* re-configuration. A "doveadm block -u <joe> -m 'sorry: running maintenance, please, come back later'" alike tool/funtionality would be ideal. Background: I would like to avoid any modification of my user's maildirs by a running dovecot server while modifying maildir formats, mdbox_rotate_size setting, and alike, where I would need doveadm/dsnyc access to userdb. (I know there a ways to achieve this without downtimes, and I have already done so.) I just want to be sure that I haven't overseen such a tool/functionality in the documentation. Did I or didn't I? Thanks and regards, Michael

3 2