- dovecot - dovecot.org

[Dovecot] SSL Certifcates
by Stephen Feyrer 12 Aug '08

12 Aug '08

Hi anyone. Can dovecot be configured to authenticate user using only SSL Certificates only and not ask for a password. So far I've got it taking the username from the common name of the certificate but I like it to use the certificate in place of the password. Is this possible and how? -- Regards Stephen.

2 5

[Dovecot] Dovecot crashing
by Erinn Looney-Triggs 12 Aug '08

12 Aug '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sent an e-mail off as was detailed here: http://wiki.dovecot.org/MboxProblems for crashes but I also wanted to see if any of you folks had insight into the issue. Dovecot is crashing on a certain user inbox which is in mbox format as well as one of the users other mbox files. The crash doesn't exactly match what is listed in the aforementioned wiki page, so I thought their might be some other insight into this process or how to fix it. Here is the error in the log files: Aug 8 09:26:07 localhost dovecot: IMAP(user): UIDVALIDITY changed (1216167307 -> 1218134720) in mbox file /var/mail/user Aug 8 09:26:07 localhost dovecot: Panic: IMAP(user): file index-sync.c: line 39 (index_mailbox_set_recent_uid): assertion failed: (seq_range_exists(&ibox->recent_flags, uid)) Aug 8 09:26:07 localhost dovecot: IMAP(user): Raw backtrace: imap [0x80f5257] -> imap [0x80f5aa4] -> imap(i_fatal+0) [0x80f53b3] -> imap(index_mailbox_set_recent_uid+0x62) [0x80b1af9] -> imap(index_mailbox_set_recent_seq+0x33) [0x80b1b6f] -> imap [0x808ef93] - -> imap [0x808f502] -> imap [0x808fe73] -> imap(mbox_sync+0x2b) [0x8090120] -> imap(mbox_storage_sync_init+0x8b) [0x80901ee] -> imap(mailbox_sync_init+0x1b) [0x80b61df] -> imap(mailbox_sync+0x1c) [0x80b6256] -> imap(cmd_select_full+0x13b) [0x805fad7] -> imap(cmd_select+0x19) [0x805fc63] -> imap [0x8062444] -> imap [0x8062679] -> imap [0x8062777] -> imap [0x80627b3] -> imap(client_input+0xb7) [0x8062941] -> imap(io_loop_handler_run+0x17d) [0x80ff704] -> imap(io_loop_run+0x35) [0x80fea32] -> imap(main+0xb0) [0x806dd99] -> /lib/libc.so.6(__libc_start_main+0xdc) [0xc31dec] -> imap [0x805a151] Aug 8 09:26:07 localhost dovecot: child 4740 (imap) killed with signal 6 Any ideas or thoughts? Thanks, - -Erinn Here are the pertinents: ./dovecot --version 1.1.2 ./dovecot -n # 1.1.2: /usr/local/dovecot/etc/dovecot.conf protocols: pop3s imaps ssl_cert_file: /usr/local/adm/config/openssl/certs/imapd.pem ssl_key_file: /usr/local/adm/config/openssl/certs/imapd.pem login_dir: /usr/local/dovecot/var/run/dovecot/login login_executable(default): /usr/local/dovecot/libexec/dovecot/imap-login login_executable(imap): /usr/local/dovecot/libexec/dovecot/imap-login login_executable(pop3): /usr/local/dovecot/libexec/dovecot/pop3-login max_mail_processes: 128 mail_location: mbox:~/mail:INBOX=/var/mail/%u mail_executable(default): /usr/local/dovecot/libexec/dovecot/imap mail_executable(imap): /usr/local/dovecot/libexec/dovecot/imap mail_executable(pop3): /usr/local/dovecot/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/dovecot/lib/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %08Xv%08Xu auth default: passdb: driver: pam userdb: driver: passwd -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFInHWxJqsQ+sq8O4ERAoklAJ4i1Ja3D8OcBjpyPZ6NJ/1A+l/rvQCgiu7B b/dk0dCGNd5zNBgHGXULHyc= =F0sY -----END PGP SIGNATURE-----

2 1

[Dovecot] Possible bug in v1.1.1
by John Wood 12 Aug '08

12 Aug '08

Greetings, I recently upgraded our server from Dovecot 1.0.14 to 1.1.1. I am building using the FreeBSD ports system, so nothing is custom aside from the flags set there. dovecot fell down a few days after the update with: pid 1823 (imap), uid 1000: exited on signal 11 the mail log shows: Jul 4 14:36:07 hostname dovecot: IMAP(username): Corrupted index cache file /home/username/mail/.imap/INBOX/dovecot.index.cache: Broken MIME parts for mail UID 10462 Jul 4 14:36:07 hostname dovecot: child 1823 (imap) killed with signal 11 unfortunately I do not have a core. The closest thing I could find in the Changelog is: v1.1.rc13 2008-06-20 Timo Sirainen <tss(a)iki.fi> - Message parser: Fixed assert-crash if cached MIME structure was broken. but, it does not appear to be the same issue. The upgrade file mentions issues with cache/index files, but they are related to downgrades. The rest of the relative information: Dovecot version: v1.1.1 Operating system: FreeBSD 6.2 p11 CPU architecture: x86 Filesystem you used: FreeBSD UFS Message that caused the crash: attached Dovecot configuration: 1.1.1: /usr/local/etc/dovecot.conf Warning: mail_extra_groups setting was often used insecurely so it is now deprecated, use mail_access_groups or mail_privileged_group instead protocols: imap imaps pop3 pop3s listen(default): 127.0.0.1:143 listen(imap): 127.0.0.1:143 listen(pop3): 127.0.0.1:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_ca_file: /etc/ssl/godaddy_cert/gd_intermediate.crt ssl_cert_file: /etc/ssl/godaddy_cert/hostname.cert ssl_key_file: /etc/ssl/godaddy_cert/hostname.key ssl_parameters_regenerate: 400 login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Hostname ready. login_process_per_connection: no login_process_size: 128 verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_extra_groups: mail mail_access_groups: mail mail_location: mbox:~/mail:INBOX=/var/mail/%u mbox_read_locks: fcntl dotlock mbox_write_locks: fcntl dotlock mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix I have not been able to repeat this so far. Thanks, John

2 3

[Dovecot] Auth message
by Pavel Shirov 12 Aug '08

12 Aug '08

Recently my network was scanned. Various services was scanned, and checking the logs of mail server the following string draw my attention: mail dovecot: pop3-login: Disconnected: user=<ttejmgpfip>, method=PLAIN, rip=87.228.15.180, lip=x.x.x.x This looks weird to me, because pop3-login: Disconnected looks like succesful login attempt to me. I have no such user named ttejmgpfip exits ofc. I've check what dovecot writes to log if try PLAIN login method with random login/password, and it's "Aborted login". As I'm using SQL backend for user/pass database, I'm afraid that I might have something misconfigured and a possible sql-injection or something else allowed attacker to "login" with random password. Or my worries are groundless and I can get such message in some case of unsuccessful login? Running dovecot 1.0.rc15 (CentOS 5). Here is how my sql auth done: default_pass_scheme = MD5 password_query = SELECT password FROM mailbox WHERE active = '1' AND (LEFT(username, INSTR(username, '@')-1) = '%u' OR username = '%u') user_query = SELECT maildir as home, 6000 AS uid, 6000 AS gid, domain FROM mailbox WHERE LEFT(username, INSTR(username, '@')-1) = '%u' OR username = '%u' I have such query so it is possible for a user to login either as user@domain or just as user (I have single domain).

3 2

[Dovecot] About domains in antispam plugin
by Eduardo Morales Chavez 12 Aug '08

12 Aug '08

Hi there, I have the problem that the antispam filter is looking in a different subdirectory (I think is the domain subfolder) than the actuallly used i.e., The following error message is constant: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Aug 12 12:07:58 mail dspam[4540]: Unable to open file for reading: /var/spool/dspam/data/local/itadmin/itadmin.sig/48a1c36c24 9461173910573.sig: No such file or directory Aug 12 12:07:58 mail dspam[4541]: Unable to open file for reading: /var/spool/dspam/data/local/itadmin/itadmin.sig/48a1c36c24 9461173910573.sig: No such file or directory ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ The file in the error exists but in a different subdirectory than the one AntiSpam Plugin is looking: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ls -l /var/spool/dspam/data/local/itadmin/itadmin.sig/48a1c36c249461173910573.sig ls: cannot access /var/spool/dspam/data/local/itadmin/itadmin.sig/48a1c36c249461173910573.sig: No such file or directory ls -l /var/spool/dspam/data/mydomain.com/itadmin/itadmin.sig/48a1c36c249461173910573.sig -rw-rw---- 1 root dspam 968 Aug 12 12:07 /var/spool/dspam/data/mydomain.com/itadmin/itadmin.sig/48a1c36c249461173910573.sig ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ I looked at the /etc/dovecot/dovecot.conf for a line containing a local doman vs mydomain.com but there's nothing even in the comments. So If there's something I'm missing I'd be glad you to enlight me. Thanks a lot in advance for you help. Rgds, Eduardo

1 0

[Dovecot] NFS vs CIFS - and Dovecot
by Daniel L. Miller 12 Aug '08

12 Aug '08

I've seen a number of posts discussing NFS based storage and issues with Dovecot. When the term "NFS" is used - does this exclusively refer to the Linux NFS network file system, or is it a generic reference to any network file system? I don't recall seeing any posts referencing issues with CIFS or SMBFS - is this because no one is using it, or because it just works instead of fiddling with NFS? -- Daniel

2 1

[Dovecot] Install from source of dovecot 1.1.2
by Guy 12 Aug '08

12 Aug '08

Hi guys, I have what I'm sure is a stupid question. I'm trying to install Dovecot 1.1.2 from source and my command sequence is this: cd dovecot-1.1.2 ./configure --prefix=/usr --exec-prefix=/usr --with-mysql --with-storagesmaildir --sysconfdir=/etc/dovecot make make install cd ../dovecot-sieve-1.1.5 ./configure --with-dovecot=../dovecot-1.1.2 make make install I don't get any errors during either install I've done the odd config on dovecot to try and keep it as close to the install dirs used by the Dovecot package included with Ubuntu. Once it's done, dovecot -n still looks in /usr/local/etc and when I try and start dovecot it looks for the libexec dir in /usr/local instead of /usr. Is there something I'm missing on the configure? I've very, very little experience (rather obviously) installing directly from source so any advice would be greatly appreciated. Thanks Guy -- Don't just do something...sit there!

5 5

[Dovecot] Cyrus vs Dovecot
by Mathieu Kretchner 12 Aug '08

12 Aug '08

First of all : forgive me for my poor English Hello all, I've to compare cyrus with dovecot for my work. Because these are the only solutions that could fit our needs. Unfortunately I really don't know a lot about dovecot and I would like to have some of its assets. Here are the properties of the versus table I've done : dovecot cyrus Installation: Update: Migration from cyrus : Migration from dovecot : functionalities : Management : Local Delivery : availability : Security : Indexes management : NFS compatibility : Scalability : Configuration : interoperability : Sieve filter : Documentation : Quota capability : Performance : IMAP capability : So I know this can scared you, but If you have some asset for dovecot, It could be great and a lot more FAIR !! Thank you in advance for your advice.

7 14

[Dovecot] GlusterFS
by Jeroen Koekkoek 12 Aug '08

12 Aug '08

Hi everybody, We use a Dovecot setup with GlusterFS. Dovecot 1.1.2 and GlusterFS 1.3.9. I enabled the following options (I don't have posix-locks translators): lock_method = dotlock dotlock_use_excl = no mmap_disable = yes mail_nfs_index = yes mail_nfs_storage = yes I receive the following error message. Aug 7 09:38:51 mta2 dovecot: POP3(somebody(a)domain.tld): nfs_flush_fcntl: fcntl(/var/vmail/domain.tld/somebody/Maildir/dovecot.index, F_RDLCK) failed: Function not implemented I think that I can disable mail_nfs_index to fix these messages. Has anybody had the same problem, if so, how did you solve it? Kind regards, Jeroen Koekkoek

5 6

[Dovecot] proxy_maybe and IPv6
by Matthieu Herrb 12 Aug '08

12 Aug '08

Hi, Using dovecot 1.1.2 on a dual-stack server, with the 'proxy_maybe' attribute to forward some clients to another server, it seems that only clients connecting with the same protocol version as the one used by address in the 'host' attribute in the password db are recognized as local. If an IPv4 address is specified as 'host', a dovecot proxy is created for clients connecting using IPv6 to this server, and symmetrically if the proxy is specified as an IPv6 address, clients connecting through IPv4 will get forwarded to the v6 address. Is there a way to avoid that? -- Matthieu Herrb

2 3