- dovecot - dovecot.org

[Dovecot] "check pass; user unknown"
by Zsombor 09 Jul '08

09 Jul '08

Hi, I'm using dovecot v1.0.rc15 (from debian etch) and I have some performance problems. Every time I log in I see the following in the mail log: ---- Jul 8 21:05:31 myserver dovecot-auth: (pam_unix) check pass; user unknown Jul 8 21:05:31 myserver dovecot-auth: (pam_unix) authentication failure; logname=uid=0 euid=0 tty=dovecot ruser= rhost=127.0.0.1 Jul 8 21:05:33 myserver dovecot: imap-login: Login: user=<mogorva(a)mydomain.hu>,method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jul 8 21:05:33 myserver dovecot: IMAP(mogorva(a)mydomain.hu): Disconnected: Logged out ---- It doesn't matter if I use Squirrelmail or Thunderbird (as POP3 client), the first try is always empty username and password so it slows down terribly every action. What's more I'm using postgres authentication and there are no local system users. This problem didn't come out with previous version of dovecot. Thank you in advance, zs-

1 1

[Dovecot] Dovecot CRAM-MD5 & DIGEST-MD5
by Proskurin Kirill 09 Jul '08

09 Jul '08

Hello all. Im try to make a SMTP Auth using Docecot SASL. Im use swaks for tests. Im store users in LDAP. As im understand for CRAM & DIGEST MD5 we need to store pass in a clear text?... Ok. mail: admin3(a)domain.off userPassword: 123 <- Clear text What im do %swaks -a CRAM-MD5 -au admin3(a)domain.off -ap 123 To: admin3(a)domain.off === Trying mx.domain.off:25... === Connected to mx.domain.off. <- 220 mx.domain.off ESMTP Exim 4.69 Tue, 08 Jul 2008 19:14:24 +0000 -> EHLO mx.domain.off <- 250-mx.domain.off Hello mx.domain.off [172.16.1.19] <- 250-SIZE 13631488 <- 250-PIPELINING <- 250-AUTH PLAIN LOGIN CRAM-MD5 DIGEST-MD5 <- 250-STARTTLS <- 250 HELP -> AUTH CRAM-MD5 <- 334 PDM4ODYwNTQ1MjEzMTA3NDEuMTIxNTU0NDQ2NEBteC5kb21haW4ub2ZmPg== -> YWRtaW4zQGRvbWFpbi5vZmYgMGJlYzIzOTA5Zjg4OTc3MDdkYTJmZmNmOTEzMDBhMmM= <** 535 Incorrect authentication data *** No authentication type succeeded -> QUIT <- 221 mx.domain.off closing connection === Connection closed with remote host. Exim says: SMTP<< AUTH CRAM-MD5 9657 dovecot authentication 9657 AUTH 12 CRAM-MD5 service=smtp secured rip=172.16.1.19 lip=172.16.1.19 resp= 9657 received: CONT 12 PDM0MTMzMjg1NTUyOTE0MjMuMTIxNTU0NDcwMUBteC5kb21haW4ub2ZmPg== 9657 SMTP>> 334 PDM0MTMzMjg1NTUyOTE0MjMuMTIxNTU0NDcwMUBteC5kb21haW4ub2ZmPg== 9657 received: FAIL 12 user=admin3(a)domain.off 9657 SMTP>> 535 Incorrect authentication data 9657 auth_cram_md5 authenticator failed for mx.domain.off [172.16.1.19] I=[172.16.1.19]:26: 535 Incorrect authentication data (set_id=admin3(a)domain.off) 9657 SMTP<< QUIT Dovecot logs: Info: auth(default): new auth connection: pid=9713 Info: auth(default): client in: AUTH 11 CRAM-MD5 service=smtp secured rip=172.16.1.19 lip=172.16.1.19 resp=<hidden> Info: auth(default): client out: CONT 11 PDU5MjUzNjc0Mjg1NDAyNjUuMTIxNTU0NDkyN0BteC5kb21haW4ub2ZmPg== Info: auth(default): client in: CONT<hidden> Info: auth(default): ldap(admin3(a)domain.off,172.16.1.19): pass search: base=dc=Virtual-Domains,dc=DOMAIN scope=subtree filter=(&(objectClass=mailUser)(mail=admin3(a)domain.off)) fields=mail,userPassword Info: auth(default): ldap(admin3(a)domain.off,172.16.1.19): result: mail(user)=admin3(a)domain.off userPassword(password)=<hidden> Error: auth(default): password(admin3(a)domain.off,172.16.1.19): Invalid password format for scheme CRAM-MD5 Info: auth(default): client out: FAIL 11 user=admin3(a)domain.off --- password(admin3(a)domain.off,172.16.1.19): Invalid password format for scheme CRAM-MD5 Hm... as im see - something wrong in my dovecot-ldap.conf ? Main idea of it is mail = user, userPassword = password. dovecot-ldap.conf: hosts = 127.0.0.1 dn = uid=Dovecot,ou=System-Users,dc=DOMAIN dnpass = 123 debug_level = 0 ldap_version = 3 base = dc=Virtual-Domains,dc=DOMAIN deref = never scope = subtree user_attrs = user_filter = (&(objectClass=mailUser)(mail=%u)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=mailUser)(mail=%u)) default_pass_scheme = CRAM-MD5 Dovecot logs with debug_level=1 in attachment. Help me please - I running out of ideas. :-( -- Best regards, Proskurin Kirill dovecot: Jul 08 19:20:42 Info: auth(default): new auth connection: pid=9663 dovecot: Jul 08 19:20:42 Info: auth(default): client in: AUTH 13 CRAM-MD5 service=smtp secured rip=172.16.1.19 lip=172.16.1.19 resp=<hidden> dovecot: Jul 08 19:20:42 Info: auth(default): client out: CONT 13 PDQzMTQ1ODQxMzA2NDgxODguMTIxNTU0NDg0MkBteC5kb21haW4ub2ZmPg== dovecot: Jul 08 19:20:42 Info: auth(default): client in: CONT<hidden> dovecot: Jul 08 19:20:42 Info: auth(default): ldap(admin3(a)domain.off,172.16.1.19): pass search: base=dc=Virtual-Domains,dc=ForexClub scope=subtree filter=(&(objectClass=mailUser)(mail=admin3(a)domain.off) ) fields=mail,userPassword dovecot: Jul 08 19:20:42 Error: auth(default): ldap_search dovecot: Jul 08 19:20:42 Error: auth(default): put_filter: "(&(objectClass=mailUser)(mail=admin3(a)domain.off))" dovecot: Jul 08 19:20:42 Error: auth(default): put_filter: AND dovecot: Jul 08 19:20:42 Error: auth(default): put_filter_list "(objectClass=mailUser)(mail=admin3(a)domain.off)" dovecot: Jul 08 19:20:42 Error: auth(default): put_filter: "(objectClass=mailUser)" dovecot: Jul 08 19:20:42 Error: auth(default): put_filter: simple dovecot: Jul 08 19:20:42 Error: auth(default): put_simple_filter: "objectClass=mailUser" dovecot: Jul 08 19:20:42 Error: auth(default): put_filter: "(mail=admin3(a)domain.off)" dovecot: Jul 08 19:20:42 Error: auth(default): put_filter: simple dovecot: Jul 08 19:20:42 Error: auth(default): put_simple_filter: "mail=admin3(a)domain.off" dovecot: Jul 08 19:20:42 Error: auth(default): ldap_send_initial_request dovecot: Jul 08 19:20:42 Error: auth(default): ldap_send_server_request dovecot: Jul 08 19:20:42 Error: auth(default): ldap_result ld 0x18529160 msgid -1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList returns ld 0x18529160 NULL dovecot: Jul 08 19:20:42 Error: auth(default): wait4msg ld 0x18529160 msgid -1 (timeout 0 usec) dovecot: Jul 08 19:20:42 Error: auth(default): wait4msg continue ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Connections: dovecot: Jul 08 19:20:42 Error: auth(default): * host: 127.0.0.1 port: 389 (default) dovecot: Jul 08 19:20:42 Error: auth(default): refcnt: 2 status: Connected dovecot: Jul 08 19:20:42 Error: auth(default): last used: Tue Jul 8 19:20:42 2008 dovecot: Jul 08 19:20:42 Error: auth(default): dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Outstanding Requests: dovecot: Jul 08 19:20:42 Error: auth(default): * msgid 4, origid 4, status InProgress dovecot: Jul 08 19:20:42 Error: auth(default): outstanding referrals 0, parent count 0 dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Response Queue: dovecot: Jul 08 19:20:42 Error: auth(default): Empty dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList returns ld 0x18529160 NULL dovecot: Jul 08 19:20:42 Error: auth(default): ldap_int_select dovecot: Jul 08 19:20:42 Error: auth(default): read1msg: ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): read1msg: ld 0x18529160 msgid 4 message type search-entry dovecot: Jul 08 19:20:42 Error: auth(default): ldap_result ld 0x18529160 msgid -1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList returns ld 0x18529160 NULL dovecot: Jul 08 19:20:42 Error: auth(default): wait4msg ld 0x18529160 msgid -1 (timeout 0 usec) dovecot: Jul 08 19:20:42 Error: auth(default): wait4msg continue ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Connections: dovecot: Jul 08 19:20:42 Error: auth(default): * host: 127.0.0.1 port: 389 (default) dovecot: Jul 08 19:20:42 Error: auth(default): refcnt: 2 status: Connected dovecot: Jul 08 19:20:42 Error: auth(default): last used: Tue Jul 8 19:20:42 2008 dovecot: Jul 08 19:20:42 Error: auth(default): dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Outstanding Requests: dovecot: Jul 08 19:20:42 Error: auth(default): * msgid 4, origid 4, status InProgress dovecot: Jul 08 19:20:42 Error: auth(default): outstanding referrals 0, parent count 0 dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Response Queue: dovecot: Jul 08 19:20:42 Error: auth(default): * msgid 4, type 100 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList returns ld 0x18529160 NULL dovecot: Jul 08 19:20:42 Error: auth(default): ldap_int_select dovecot: Jul 08 19:20:42 Error: auth(default): read1msg: ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): read1msg: ld 0x18529160 msgid 4 message type search-result dovecot: Jul 08 19:20:42 Error: auth(default): new result: res_errno: 0, res_error: <>, res_matched: <> dovecot: Jul 08 19:20:42 Error: auth(default): read1msg: ld 0x18529160 0 new referrals dovecot: Jul 08 19:20:42 Error: auth(default): read1msg: mark request completed, ld 0x18529160 msgid 4 dovecot: Jul 08 19:20:42 Error: auth(default): request done: ld 0x18529160 msgid 4 dovecot: Jul 08 19:20:42 Error: auth(default): res_errno: 0, res_error: <>, res_matched: <> dovecot: Jul 08 19:20:42 Error: auth(default): ldap_free_request (origid 4, msgid 4) dovecot: Jul 08 19:20:42 Error: auth(default): ldap_free_connection 0 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_free_connection: refcnt 1 dovecot: Jul 08 19:20:42 Error: auth(default): adding response ld 0x18529160 msgid 4 type 101: dovecot: Jul 08 19:20:42 Error: auth(default): ldap_parse_result dovecot: Jul 08 19:20:42 Error: auth(default): ldap_first_attribute dovecot: Jul 08 19:20:42 Error: auth(default): ldap_get_values dovecot: Jul 08 19:20:42 Error: auth(default): ldap_next_attribute dovecot: Jul 08 19:20:42 Error: auth(default): ldap_get_values dovecot: Jul 08 19:20:42 Error: auth(default): ldap_next_attribute dovecot: Jul 08 19:20:42 Info: auth(default): ldap(admin3(a)domain.off,172.16.1.19): result: mail(user)=admin3(a)domain.off userPassword(password)=<hidden> dovecot: Jul 08 19:20:42 Error: auth(default): password(admin3(a)domain.off,172.16.1.19): Invalid password format for scheme CRAM-MD5 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_msgfree dovecot: Jul 08 19:20:42 Error: auth(default): ldap_result ld 0x18529160 msgid -1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList returns ld 0x18529160 NULL dovecot: Jul 08 19:20:42 Error: auth(default): wait4msg ld 0x18529160 msgid -1 (timeout 0 usec) dovecot: Jul 08 19:20:42 Error: auth(default): wait4msg continue ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Connections: dovecot: Jul 08 19:20:42 Error: auth(default): * host: 127.0.0.1 port: 389 (default) dovecot: Jul 08 19:20:42 Error: auth(default): refcnt: 1 status: Connected dovecot: Jul 08 19:20:42 Error: auth(default): last used: Tue Jul 8 19:20:42 2008 dovecot: Jul 08 19:20:42 Error: auth(default): dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Outstanding Requests: dovecot: Jul 08 19:20:42 Error: auth(default): Empty dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Response Queue: dovecot: Jul 08 19:20:42 Error: auth(default): Empty dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList returns ld 0x18529160 NULL dovecot: Jul 08 19:20:42 Error: auth(default): ldap_int_select dovecot: Jul 08 19:20:44 Info: auth(default): client out: FAIL 13 user=admin3(a)domain.off

2 2

[Dovecot] FETCH for mailbox got too little data
by Kenneth Porter 08 Jul '08

08 Jul '08

Using 1.1.1. Got this error message in a tight loop, using both Tbird and Mulberry 3 as client: FETCH for mailbox INBOX UID 32994 got too little data: 1616 vs 1649 I get this repeatedly alternating with a login line. What does this mean? I stopped the server, zipped ~/mail/.imap/INBOX to hide it and let dovecot recreate it, and things seem to be working again. Is there a less destructive way to fix this in the future? Delivery is by procmail.

2 5

Re: [Dovecot] Multiple quota roots with quota-fs backend
by Ralf Becker 08 Jul '08

08 Jul '08

Hello Stewart, > You have to previously know or have determined: > a) what FS's are under quota That's easy in my case, because each filesystem is listed in dovecot.conf: quota = fs:"Spool":mount=/var/spool/mail quota2 = fs:"Home0":mount=/home/f0 quota3 = fs:"Home1":mount=/home/f1 quota4 = fs:"Home2":mount=/home/f2 quota5 = fs:"Home3":mount=/home/f3 ... > AND > b) know which ones the user uses That should be easy to, because they are listed in mail_location. In my case this is: mail_location = mbox:~/Mail:INBOX=/var/spool/mail/%n > AND > c) then make multiple calls, one for each FS that the user has stuff in > Let take 'quota_transaction_set_limits' as example: If I understand Timo's source code correctly this is done by looping through the mountpoints of all quota roots. But then, and this is a problem, the lowest quota limit is used, because it is not checked, if the mbox file acctually _resides_ in this filesystem. Well... I think what this behavior could be "fixed" in the same way I've used for GETQUOTAROOT: I've just implemented a callback function 'root_match_box' that returns 'true', if a Mailbox resides on the filesystem defined "mount=" in quota definition and 'false' if not. This optional function is used in 'quota_root_iter_next' to filter the list of all quota roots. From the source code: ----------------------8<---------------------------------------------- roots = array_get(&iter->quota->roots, &count); if (iter->i >= count) return NULL; for (; iter->i < count; iter->i++) { if (roots[iter->i]->backend.v.root_match_box != NULL) { if (!roots[iter->i]->backend.v.root_match_box(roots[iter->i], iter->box)) continue; } ... } ---------------------->8---------------------------------------------- The same should be correct in quota_transaction_set_limits, quota_transaction_commit and quota_default_test_alloc But I should have a deeper look at this... :-) BTW: If this behavior is indeed AIX specific, that's no problem, In this case the function should always returning 'true' or just not be included in the list of callback functions. Regards, Ralf -- ______________________________________________________________________ Dipl.-Inform. (FH) Ralf Becker Rechenzentrum (r/ft) der FH Trier (Network|Mail|Web|Firewall) University of applied sciences Administrator Schneidershof, D-54293 Trier Mail: beckerr(a)fh-trier.de Fon: +49 651 8103 499 WWW: http://www.fh-trier.de/~beckerr Fax: +49 651 8103 214 ______________________________________________________________________

1 0

[Dovecot] imap and vpopmail: per-domain auth
by Francesco Abeni 08 Jul '08

08 Jul '08

Hi, i have qmail + vpopmail + dovecot + squirrelmail 0.99.14 on Fedora Core 4. Qmail includes its own pop3 server, and everybody is able to access it from outside. Dovecot is used only locally by SquirrelMail - so everybody can access via webmail. I'd like to make imap directly available from outside, but only for a few selected domains (NOT ip addresses!), while leaving everyone able to access with pop3 and/or via webmail. I don't know if this is possible, and if it is, i don't even know where to start. Is it a vpopmail or dovecot setting? Thank you for any suggestion and/or pointer to the right documentation. -- Francesco

2 3

[Dovecot] Dovecot Sieve Broken with 1.1 RPMs?
by Mailing List 08 Jul '08

08 Jul '08

We have been using dovecot v1:1.0.15-1_72 and dovecot-sieve v1.0.3-7 very successfully for many months but I've been unable to get dovecot-sieve to work with the latest 1.1 release. The new release seems to completely ignore our global sieve script no matter what we do. Is anyone else using the atrpms-stable rpms packages and able to get dovecot-sieve to work correctly? Any help would be greatly appreciated. Gavin

2 4

[Dovecot] Sorting Mail
by Carlos Williams 08 Jul '08

08 Jul '08

I was wondering if Dovecot has the ability to sort email scored by Spamassassin? I know many people use Procmail for sorting but I was wondering if Dovecot can do the job or should I just use Procmail on my Linux (Postfix) server to sort email in specific folders? I have not yet installed Dovecot and or Procmail on the Postfix / Debian server. I would be installing the latest version avialable in apt-get = 1.0.13. Thanks for any info! -- Man your battle stations...

6 6

[Dovecot] Can't connect to auth server at /var/run/dovecot/auth-master: No such file or directory
by Proskurin Kirill 08 Jul '08

08 Jul '08

Hello all. Just one quick stupid question. ;-( Im try to configure Exim + Dovecot 1.1.1 on FreeBSD 7.0 Then im try to send mail in logs im see this: deliver(admin(a)domain.off): Jul 02 13:52:22 Error: Can't connect to auth server at /var/run/dovecot/auth-master: No such file or directory %ls -al /var/run/dovecot/* srw-rw---- 1 exim wheel /var/run/dovecot/auth-client srw------- 1 dovecot-auth wheel /var/run/dovecot/auth-master srw------- 1 dovecot-auth dovecot-auth /var/run/dovecot/auth-worker.6512 srwxrwxrwx 1 root wheel /var/run/dovecot/dict-server -rw------- 1 root wheel /var/run/dovecot/master.pid As im can understand im confused at Dovecot permission system. Please tell me what im must fix. Here is my config: %dovecot -n # 1.1.1: /usr/local/etc/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot.log protocols: imap imaps pop3s ssl_cert_file: /usr/local/etc/certs/cert.crt ssl_key_file: /usr/local/etc/certs/cert.key ssl_cipher_list: ALL:!LOW:!SSLv2 login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_processes_count: 5 mail_max_userip_connections(default): 10 mail_max_userip_connections(imap): 10 mail_max_userip_connections(pop3): 3 verbose_proctitle: yes first_valid_uid: 1025 first_valid_gid: 0 mail_privileged_group: mail mail_uid: dmail mail_gid: dmail mail_location: maildir:/var/spool/dovecot/domains/%d/%n/ mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login cram-md5 digest-md5 user: dovecot-auth username_format: %Lu passdb: driver: pam passdb: driver: ldap args: /usr/local/etc/dovecot-ldap.conf userdb: driver: passwd userdb: driver: ldap args: /usr/local/etc/dovecot-ldap.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 user: dovecot-auth -- Best Regards, Proskurin Kirill

2 2

[Dovecot] Disable POP
by Carlos Williams 07 Jul '08

07 Jul '08

I am running Dovecot and wanted to make sure that to disable POP3 access on the MDA is as simple as removing the POP lines: protocols = imap imaps pop3 pop3s imap_listen = * pop3_listen = * imaps_listen = * pop3s_listen = * Do I need to modify anything else or am I looking in the totally wrong section: -- Man your battle stations...

2 1

[Dovecot] Certificate Server name!
by kbajwa 07 Jul '08

07 Jul '08

Setup of Dovecot went smoothly. Now when I try to retrieve mail from the server, I get the following message: Security Error: Domain name mismatch You have attempted to establish a connection to "mail.tib.com" However, the security certificate presented belongs to "imap.tib.com"..... How to fix this message? Thanks in advance. Kirt

4 6