- dovecot - dovecot.org

[Dovecot] No CA names sent in TLS handshake
by Johnny Chadda 03 Apr '07

03 Apr '07

Hello, I'm setting up Dovecot with client certificates and everything is working fine as long as the client only has one certificate in his store. If he has more than one, the wrong one might be sent to the server. The root of the problem is that Dovecot does not send out a list of valid CA names in the TLS handshake. If I connect using openssl s_client I get: "No client certificate CA names sent" I am using Dovecot 1.0 RC15 from backports.org. Is there a solution to this problem? Regards, Johnny

2 4

[Dovecot] Init.d boot scripts??
by rodman＠thefrowerts.com 03 Apr '07

03 Apr '07

Hello, Trying to figure out how to get dovecot to startup at boot. I saw the Ubuntu script on the dovecot site, but that didn't work on my system (SuSe 10.2). Of course, copying the /usr/local/sbin/dovecot file into /etc/init.d doesn't work at all. Any one have working SuSe script?? Rodman

4 4

[Dovecot] *****SPAM***** Upgrading from rc27 to rc29?
by Francisco Reyes 03 Apr '07

03 Apr '07

After sending a messasge about a problem (The folder 'Inbox' cannot contain items. Namespace problems) I found what seems to be a fix in the release for rc29. Besides any potential configuration files, do I need to delete the old index files? Any of the dovecot files? Based on the release notes for rc29 it seems the following will fix the problem we are experiencing: IMAP: LIST "" "" didn't return anything if there didn't exist a namespace with empty prefix. This broke some clients.

2 1

[Dovecot] [PATCH] to fix 2 pam issues
by Phil Oleson 03 Apr '07

03 Apr '07

Timo, I finally made the time to backport a pam fix I created for proftpd over to dovecot, that allows FreeBSD's pam_group to work as expected. (the bug was escalated to me internally hehe.. ). I also noticed an issue while testing that will be confusing to users. If the docs stay as is, or the other half of this patch is applied, then when the dovecot.conf contains: passdb pam { args = * } the imap files within etc/pam.d right now have to be named 'IMAP' and 'POP3' rather than the expected 'imap' and 'pop3'. The attached patch fixes the code to match the docs. -Phil. --- src/auth/passdb-pam.c.orig Mon Mar 26 10:10:26 2007 +++ src/auth/passdb-pam.c Mon Apr 2 16:18:54 2007 @@ -275,6 +275,8 @@ (void)pam_set_item(pamh, PAM_RHOST, host); /* TTY is needed by eg. pam_access module */ (void)pam_set_item(pamh, PAM_TTY, "dovecot"); + /* FreeBSD's pam_group need this set as well */ + (void)pam_set_item(pamh, PAM_RUSER, request->user); status = pam_auth(request, pamh, &str); if ((status2 = pam_end(pamh, status)) == PAM_SUCCESS) { @@ -428,8 +430,15 @@ int fd[2]; pid_t pid; - service = module->service_name != NULL ? - module->service_name : request->service; + if (module->service_name != NULL) { + service = module->service_name; + } else { + if (!strncmp(request->service, "IMAP", strlen(request->service))) + service = "imap"; + else if (!strncmp(request->service, "POP3", strlen(request->service))) + service = "pop3"; + } + auth_request_log_debug(request, "pam", "lookup service=%s", service); if (worker) {

2 1

[Dovecot] vpopmail "last auth" question
by B. Cook 03 Apr '07

03 Apr '07

Hello, I run the domain for the school here with qmail and vpopmail on FreeBSD with dovecot from the ports. I'm running dovecot 1.0.r26 and everything is working great. I been noticing that dovecot isn't updating when the user last logged in.. and I can't seem to figure out why. I also can't seem to find anything in the archives about it.. so am I the only one? name: bcook passwd: $1$ clear passwd: comment/gecos: B. Cook uid: 0 gid: 0 flags: 0 gecos: B. Cook limits: No user limits set. dir: /usr/local/vpopmail/domains/poughkeepsieschools.org/bcook quota: 41943040S usage: 72% account created: Wed Oct 18 21:09:03 2006 last auth: Never logged in I'm wondering how I could get the 'last auth' to populate like it used to w/ courier. below is my config if it will help: protocols = imap imaps pop3 listen = * disable_plaintext_auth = no ssl_disable = no ssl_cert_file = /long/path/to/file.pem ssl_key_file = /long/path/to/file.pem verbose_ssl = yes login_user = dovecot login_process_size = 64 first_valid_uid = 89 last_valid_uid = 89 first_valid_gid = 89 protocol imap { mail_plugins = quota imap_quota imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep } protocol pop3 { pop3_uidl_format = %08Xu%08Xv pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } auth default { mechanisms = plain passdb vpopmail { args = } userdb vpopmail { } user = root } plugin { quota = maildir } Thanks in advance. -- B. Cook Network Analyst Poughkeepsie City School District Mobile: 845.264.5827 | Desk: 845.451.4791

4 4

[Dovecot] Suggestion: mod_auth_dovecot
by David Anderson 03 Apr '07

03 Apr '07

Hello, I have a suggestion which might be a small and very useful project for a C coder (I'm not one!). As Dovecot makes its authentication interface available to other programs, I think that an Apache module to use it would be very useful. Currently I share an passwd-db file between Dovecot and Apache. However with Apache that means I have to give Apache read access. That means that websites with PHP could read that password file if they liked. If Apache could talk to the Dovecot authentication process instead, that would be a lot better. I'm sure there are lots of situations in which this would be useful - Dovecot's authentication settings are so flexible that it would be very handy to be able to use them more widely. If anyone produces one, I pledge to produce an RPM package and submit it to Fedora as my contribution. I would do it myself if I knew C... David

4 6

[Dovecot] prefetch + static + deliver
by Tom Bombadil 02 Apr '07

02 Apr '07

Hi all... The prefetch entry in the wiki says: "If you're using Dovecot's local delivery agent, you'll still need a valid userdb which it can use to locate the users. You can do this by adding a normal sql/ldap userdb after userdb prefetch." (http://wiki.dovecot.org/UserDatabase/Prefetch) My question is: Does it need to be a SQL/LDAP userdb? How about static or passwd? Thanks in advance :)

3 3

[Dovecot] testing LDAP connections
by Hugo Monteiro 02 Apr '07

02 Apr '07

Hello all, I haven't looked into the source code, but i suspect that LDAP connections, once established, are not tested properly. My scenario is the followind: Dovecot server <--------> firewall <---------> LDAP backend What happens is that the firewall has a security feature which basically make de firewall box "forget" about connections that are idle for more than X period of time. That particular setting is 30 minutes right now. When that happens, neither the LDAP backend or the Dovecot server get any type of notification, and for all they care the connection is alive and well. This is a very common implementation in firewalls nowadays. So my question is, is there any way to make dovecot re-open a new connection if there is a timeout while trying to use a connection already opened? I believe that this could be of great benefit for those who don't have their servers on the same physical network. Thanks in advance, Hugo Monteiro. -- ci.fct.unl.pt:~# cat .signature Hugo Monteiro Email : hugo.monteiro(a)fct.unl.pt Telefone : +351 212948300 Ext.15307 Centro de Informática Faculdade de Ciências e Tecnologia da Universidade Nova de Lisboa Quinta da Torre 2829-516 Caparica Portugal Telefone: +351 212948596 Fax: +351 212948548 www.ci.fct.unl.pt apoio(a)fct.unl.pt ci.fct.unl.pt:~# _

2 1

[Dovecot] Authenticaton in Active Directory(again)
by Claudio Roberto Prateat 02 Apr '07

02 Apr '07

Is possible authenticate in active directory 2003r2 with ldap (dovecot-ldap), but not using pam_ldap ? I have problem, faileds. I need example of the dovecot-ldap.conf for this authentication. Help, please. Best Regards !

2 1

[Dovecot] Using Dovecot LDA with Sendmail
by Scott Peron 02 Apr '07

02 Apr '07

Hi all, After looking at the LDA/Sendmail page in the dovecot wiki, I wanted to contribute another method to easily configure Sendmail to use deliver. Instead of adding a new mailer definition, as already suggested, one can simply use the following line in their sendmail.mc file instead: FEATURE(`local_procmail', `/usr/libexec/dovecot/deliver', `deliver -d $u', `SPhnu9')dnl And further on, still use: MAILER(procmail)dnl The location of deliver will of course vary for each OS and distro, etc, but this redefines the "procmail" mailer in the resulting sendmail.cf to use deliver instead, with the correct flags. For most setups, I believe this is the simplest configuration path. Scott -- Scott Peron, Webmaster, Infolytica Corp. webmaster(a)infolytica.com Tel: (514) 849-8752 x269 Fax: (514) 849-4239 http://www.infolytica.com Place du Parc, 300 Leo-Pariseau, Suite 2222, Montreal, QC, Canada, H2X 4B3

4 3