- dovecot - dovecot.org

[Dovecot] (resolved) Re: Beginner Help with a fatal error in a first Basic Install
by Paul 20 Aug '06

20 Aug '06

Hello Richard, On 8/19/06, OpenMacNews <openmacnews(a)gmail.com> wrote: > > > dovecot: Aug 18 07:06:50 Error: IMAP(paulg): dyld: Library not loaded: > > /usr/local/ssl/lib/libssl.0.9.8.dylib > > i've had these same > can't-find-libssl-even-though-i'm-staring-right-at-it probelms in dovecot. > > after a little poking in code, i note that dovecot check first to get > its ssl lib/include link info from pkg-config, and seems to get > flustered by the presence of your own LDFLAGS/CPPFLAGS specification of > ssl location. > > that said, i've managed to work around it fairly simply. Thanks, thanks, thanks! This, apparently, was the problem, and, once I figure out where to find the pkg-config source (not bundled with OSX?), following your instructions cleared it up. Again. Thanks for your help! Paul

1 0

[Dovecot] Beginner Help with a fatal error in a first Basic Install
by Paul 20 Aug '06

20 Aug '06

dovecot(a)dovecot.org Hello, I have been doing my first BasicInstall of Dovecot, following the documentation for VirtualUsers, and piecing together suggestions from other on the list, and out on the web. In dovecot.conf, I have added, default_mail_env = maildir:/var/Dovecot/%d/Accounts/%1u/%u/Maildir:INDEX=/var/Dovecot/indexes/%d/%n auth default { mechanisms = plain user = pgnmail passdb passwd-file { args = /etc/imap.passwd } userdb static { args = static uid=99 gid=99 home=/var/Dovecot mail=maildir:%h/%d/Accounts/%1u/%u nice=10 } } My User+Passwd DB file is /etc/imap.passwd paulg:{PLAIN}testpass:99:99::/var/Dovecot/domain.com/Accounts/t/paulg::: On Dovecot startup, my log shows, dovecot: Aug 18 07:10:40 Info: Dovecot v1.1.UNSTABLE starting up dovecot: Aug 18 07:10:42 Info: auth(default): passwd-file /etc/imamp.passwd: Read 1 users When I telnet in, I see, Connected to domain.com. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS STARTTLS AUTH=PLAIN] domain.com Dovecot IMAP4 ready and when I login with, x login testuser testpass I see, dovecot: Aug 18 07:06:50 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=192.168.1.6 rip=192.168.1.6resp=<hidden> dovecot: Aug 18 07:06:50 Info: auth(default): client out: OK 1 user=paulg dovecot: Aug 18 07:06:50 Info: auth(default): master in: REQUEST 3 14946 1 dovecot: Aug 18 07:06:50 Info: auth(default): master out: USER 3 paulg static uid=99 gid=99 home=/var/Dovecot mail=maildir://Accounts/t/paulg nice=10 dovecot: Aug 18 07:06:50 Info: imap-login: Login: user=<paulg>, method=PLAIN, rip=192.168.1.6, lip=192.168.1.6, secured dovecot: Aug 18 07:06:50 Error: IMAP(paulg): dyld: Library not loaded: /usr/local/ssl/lib/libssl.0.9.8.dylib dovecot: Aug 18 07:06:50 Error: IMAP(paulg): Referenced from: /usr/local/dovecot/libexec/dovecot/imap dovecot: Aug 18 07:06:50 Error: IMAP(paulg): Reason: image not found dovecot: Aug 18 07:06:51 Error: child 14963 (imap) killed with signal 5 I'm concerned about the "//" in, mail=maildir://Accounts/t/paulg Is that correct? And, of course, the, dovecot: Aug 18 07:06:50 Error: IMAP(paulg): dyld: Library not loaded: /usr/local/ssl/lib/libssl.0.9.8.dylib which I have no idea about. Looking at the libraries linked into the "/usr/local/dovecot/libexec/dovecot/imap" executable, I see /usr/local/ssl/lib/libssl.0.9.8.dylib (compatibility version 0.9.8, current version 0.9.8) /usr/local/ssl/lib/libcrypto.0.9.8.dylib (compatibility version 0.9.8, current version 0.9.8) /usr/lib/libgcc_s.1.dylib (compatibility version 1.0.0, current version 1.0.0) /usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 88.1.6) And, seeing if "/usr/local/ssl/lib/libssl.0.9.8.dylib", exists, ls /usr/local/ssl/lib/libssl.0.9.8.dylib /usr/local/ssl/lib/libssl.0.9.8.dylib Can someone help? Thank you. Paul

2 1

[Dovecot] Acl, Namespace, User Confusion
by Jim Horner 19 Aug '06

19 Aug '06

I'm using dovecot RC6. I have a group named "cmpymail" with 2 users "jdoe(a)arinbe.com" and "jsmith(a)arinbe.com". I set up a mail folders like: drwxrwx--- 4 cmpymail cmpymail 4096 2006-08-13 02:21 cmpymail drwxrwx--- 3 jdoe users 4096 2005-11-21 13:34 jdoe drwxrwx--- 3 jsmith users 4096 2006-08-13 02:27 jsmith drwxrwx--- 3 fred users 4096 2006-08-13 02:27 fred drwxrwx--- 3 wilma users 4096 2006-08-13 02:27 wilma In dovecot.conf namespace public { separator = . prefix = COMPANY. location = maildir:/home/services/mail/arinbe.com/company/Maildir:CONTROL=%h/shared-se… hidden = no } I have a dovecot-shared file -rw-rw---- 1 cmpymail cmpymail 0 2006-08-13 13:24 dovecot-shared What I can not do is restrict access to cmpymail to -just- jdoe and jsmith. I've looked at http://www.dovecot.org/list/dovecot/2006-June/013683.html I've tried adding mail_plugin_dir = /usr/local/lib/dovecot/imap mail_plugins = acl and a dovecot-acl file owner user=jdoe(a)arinbe.com lrwstiekxa user=jsmith(a)arinbe.com lrwstiekxa user=jdoe rwstiekxa user=jsmith lrwstiekxa I am not exactly sure what username to use. All users are in LDAP. The "cmpymail" group shows # getent group cmpymail:*:5555:jdoe,jsmith Nothing I do seems to work. I either get errors that wilma and fred can't access cmpymail, for instance when wilma/fred try to subscribe to folders, or wilma and fred have complete access to cmpymail (if I change cmpymail's group to users instead of cmpymail). Is there a way to restrict access like I want? Thanks, Jim

2 3

Re: [Dovecot] dovecot Digest, Vol 40, Issue 65
by suranga de silva 18 Aug '06

18 Aug '06

Dear Tim Schafer, Take a look at my sample dovecot-ldap.conf hosts = localhost dn = cn=root,dc=ceylonlinux,dc=com dnpass = secret ldap_version = 3 base = dc=ceylonlinux,dc=com deref = never scope = subtree user_attrs = mail,homeDirectory=mailMessageStore,uidNumber=1003,gidNumber=1003 user_filter = (&(objectClass=user)(mail=%u)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=user)(mail=%u)) default_pass_scheme = CRYPT user_global_uid = 1003 user_global_gid = 1003 Here I am using my own schema called "user", but in your case change it to inetOrgPerson or the schema name you are using. I think the most common problem in this process is the ldap filter. Above in my configuration user_filter and pass_filter are used as ldap filters for querying user name and password. There I am using mail attribute. gid and uid are belong to the user vmail. May be this explanation will help you to figure out your problem You can refer my article in the following link for further reference http://www.ceylonlinux.com/pdf/openldap_backsql_postfix_maildir_cl.pdf Cheers!!! Suranga De Silva. CTO CEYLON LINUX On Thu, 2006-08-17 at 21:32 +0300, dovecot-request(a)dovecot.org wrote: > Send dovecot mailing list submissions to > dovecot(a)dovecot.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://dovecot.org/cgi-bin/mailman/listinfo/dovecot > or, via email, send a message with subject or body 'help' to > dovecot-request(a)dovecot.org > > You can reach the person managing the list at > dovecot-owner(a)dovecot.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of dovecot digest..." > > > Today's Topics: > > 1. Re: LDAP usernames with spaces (Tim Schafer) > 2. Supporting local and virtual LDAP users, with seperate > mail_env (Tim Schafer) > 3. Dovecot sometimes Down ! (kleiton(a)pcs.com.br) > 4. Re: dovecot mbox to dovecot maildir migration (Timo Sirainen) > 5. Re: Supporting local and virtual LDAP users, with seperate > mail_env (Timo Sirainen) > 6. Re: Supporting local and virtual LDAP users, with seperate > mail_env (Timo Sirainen) > 7. Re: Supporting local and virtual LDAP users, with seperate > mail_env (Tim Schafer) > 8. BSD kqueue testing, once more before 1.0rc7 (Timo Sirainen) > 9. Re: Supporting local and virtual LDAP users, with seperate > mail_env (Timo Sirainen) > 10. Re: BSD kqueue testing, once more before 1.0rc7 (Timo Sirainen) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 17 Aug 2006 10:00:37 -0700 > From: Tim Schafer <tim_schafer(a)shipfsp.com> > Subject: Re: [Dovecot] LDAP usernames with spaces > To: Johannes Berg <johannes(a)sipsolutions.net> > Cc: dovecot(a)dovecot.org > Message-ID: <44E4A0B5.50608(a)shipfsp.com> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Thank you Johannes, > > By modifying auth_username_chars in dovecot.conf > I was able to allow spaces in usernames. > > Regards, > Tim Schafer > > Johannes Berg said the following on 8/17/2006 12:24 AM: > > On Wed, 2006-08-16 at 18:14 -0700, Tim Schafer wrote: > > > > > I'm assuming it doesn't like the spaces. > > > Any way around this? > > > > You can set the allowed characters somehow. I forgot how, but check the > > annotated config file. > > > > > Also, I don't see any way to support the seperate username and userid > > > where the username is for authentication > > > and the userid is used for on disk pathname. > > > Anyway to support this? > > > > I know with SQL that's possible by just returning user= from the query, > > I guess LDAP as well. I think Timo just posted about this in some other > > ldap thread. Not quite sure though. > > > > Sorry to be so vague, I just happened to have skimmed some messages that > > seem to related to this recently. > > > > johannes > > > > > ------------------------------ > > Message: 2 > Date: Thu, 17 Aug 2006 10:20:03 -0700 > From: Tim Schafer <tim_schafer(a)shipfsp.com> > Subject: [Dovecot] Supporting local and virtual LDAP users, with > seperate mail_env > To: dovecot(a)dovecot.org > Message-ID: <44E4A543.3070100(a)shipfsp.com> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Is it possible to have local users with mail in > maildir:%h/.maildir > > and virutal users with mail in > maildir:/home/exim/%u/.maildir > > > I seem to have authentication working for both local users and LDAP users. > But I'm getting this error trying to access a virtual users mail. > > Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: > data=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir > Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: > root=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir, > index=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_B > Y_USERDB/.maildir, control=, inbox= > Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): > mkdir(/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir/cur) failed: > Permission denied > > -- > > > Regards, > Tim Schafer > Information Technology > Logistics Easier with Technology > > > Freight Solution Providers direct 916-376-6190 > 10453 Old Placerville Road fax 916-376-6156 > Sacramento, CA 95827 tim_schafer(a)shipfsp.com > > > > ------------------------------ > > Message: 3 > Date: Thu, 17 Aug 2006 14:26:48 -0300 (BRT) > From: kleiton(a)pcs.com.br > Subject: [Dovecot] Dovecot sometimes Down ! > To: dovecot(a)dovecot.org > Message-ID: > <34339.157.86.6.55.1155835608.squirrel(a)pcsoffice.dyndns.biz> > Content-Type: text/plain;charset=utf-8 > > > Please, my dovecot sometimes down ! > > Aug 17 14:20:01 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:02 netrasun last message repeated 3 times > Aug 17 14:20:03 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:20:04 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:16 netrasun last message repeated 19 times > Aug 17 14:20:16 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:20:16 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:21 netrasun last message repeated 6 times > Aug 17 14:20:21 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:20:21 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:24 netrasun last message repeated 4 times > Aug 17 14:20:25 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:20:25 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:38 netrasun last message repeated 13 times > Aug 17 14:20:39 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:20:39 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:47 netrasun last message repeated 9 times > Aug 17 14:20:48 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:20:49 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:20:57 netrasun last message repeated 7 times > Aug 17 14:20:58 netrasun dovecot: pop3-login: Disconnected: Inactivity: > rip=157.86.6.55, lip=157.86.6.55 > Aug 17 14:21:00 netrasun dovecot: pop3-login: Can't connect to auth server > at default: Resource temporarily unavailable > Aug 17 14:21:08 netrasun last message repeated 7 times > > Please, Help-me ! > > > > ------------------------------ > > Message: 4 > Date: Thu, 17 Aug 2006 20:48:38 +0300 > From: Timo Sirainen <tss(a)iki.fi> > Subject: Re: [Dovecot] dovecot mbox to dovecot maildir migration > To: Michael Blancas <mblancas(a)mozcom.com> > Cc: dovecot(a)dovecot.org > Message-ID: <1155836918.9142.1.camel@hurina> > Content-Type: text/plain; charset="us-ascii" > > On Fri, 2006-08-18 at 00:05 +0800, Michael Blancas wrote: > > Hi, > > > > I'm migrating accounts from one server with dovecot mbox and pam > > nss-ldap authentication to a new server with dovecot maildir and mysql > > auth (no posix accounts). > > > > My problem is the pop3 uidl format on the two servers are different, > > even though I'm using pop3_uidl_format = %08Xu%08Xv in both configs, > > I'm always re-downloading left messages on my test runs. Is there a > > way I could reuse the X-UID and X-IMAPbase headers on the converted > > mails. Issuing the UIDL command via pop3 always give a different > > result for the mbox and maildir spools. > > > > The X-UID and X-IMAPbase headers are present in the converted mails. > > The first number of X-IMAPbase maps to the mail UIDVALIDITY and the > > second is the same as X-UID, the mail uid. > > You'll have to make your conversion script create dovecot-uidlist file > based on the X-IMAPbase and X-UID headers. There could be existing > scripts to do that, but I'm not sure. > >

1 0

[Dovecot] auth failure with digest-md5
by LeVA 18 Aug '06

18 Aug '06

Hi! I'm using: Dovecot 1.0.beta8 OpenBSD 3.9 KMail 1.9.3 My password file contains only one user now. I've changed its password to a dumb one: 'asd' (so this is not a wrong password failure :) I've configured the PLAIN and DIGEST-MD5 mechanisms in dovecot.conf, and I'm only using pop3. Also I've turned on the verbose auth logging, and I'm attaching the logs inline. My password db contains the {DIGEST-MD5} prefixed password. The problem is very simple but very weird. I start the dovecot server and try to log in. It succeeds, I'm happy. But after one (the first) success, all further logins fails. Yes this a sometimes working/sometimes not problem, which is rare in this business... Here is the log of the first success: 00:48:41 Info: auth(default): client in: AUTH 1 DIGEST-MD5 service=POP3 secured lip=192.168.0.202 rip=192.168.0.3 resp= <newline> 00:48:41 Info: auth(default): client out: CONT 1 cmVhbG09IiIsbm9uY2U9ImJua2tUaHBDVURJblFENWRJZlgyb1E9PSIscW9wPSJhdXRoIixjaGFyc2V0PSJ1dGYtOCIsYWxnb3JpdGhtPSJtZDUtc2VzcyI= <newline> 00:48:41 Info: auth(default): client in: CONT 1 dXNlcm5hbWU9ImxldmEiLHJlYWxtPSIiLG5vbmNlPSJibmtrVGhwQ1VESW5RRDVkSWZYMm9RPT0iLGNub25jZT0iTy9MYndLMVo1dWc4ZURiT2wzaWlhN2ZsTUVTV3MvN1JSc05HL3JPbzhpND0iLG5jPTAwMDAwMDAxLHFvcD1hdXRoLGRpZ2VzdC11cmk9InBvcC8xOTIuMTY4LjAuMjAyIixyZXNwb25zZT0wYTQ3ZmUyNmVlMDg0MWE4ZDgzNTM3NzI5MzUxZmE3YQ== <newline> 00:48:41 Info: auth(default): client out: CONT 1 cnNwYXV0aD01MmQ1YTRlNTVhNWNiYzA0NDk2YTg5ODcyMDMwMGUxYw== <newline> 00:48:41 Info: auth(default): client in: CONT 1 <newline> 00:48:41 Info: auth(default): client out: OK 1 user=username <newline> 00:48:41 Info: auth(default): master in: REQUEST 9 15718 1 <newline> 00:48:41 Info: auth(default): master out: USER 9 username uid=6000 gid=6000 home=/var/mail/virtual/username/./ <newline> 00:48:41 Info: pop3-login: Login: user=<username>, method=DIGEST-MD5, rip=192.168.0.3, lip=192.168.0.202, TLS <newline> 00:48:41 Info: POP3(username): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 And after that, every login fails: 00:49:28 Info: auth(default): client in: AUTH 1 DIGEST-MD5 service=POP3 secured lip=192.168.0.202 rip=192.168.0.3 resp=dXNlcm5hbWU9ImxldmEiLHJlYWxtPSIiLG5vbmNlPSJibmtrVGhwQ1VESW5RRDVkSWZYMm9RPT0iLGNub25jZT0iTy9MYndLMVo1dWc4ZURiT2wzaWlhN2ZsTUVTV3MvN1JSc05HL3JPbzhpND0iLG5jPTAwMDAwMDAyLHFvcD1hdXRoLGRpZ2VzdC11cmk9InBvcC8xOTIuMTY4LjAuMjAyIixyZXNwb25zZT0wMWRkMDNjYTcyMzBmMzM5YjRiY2NlM2VmMTcwMGU4Yw== <newline> 00:49:28 Info: pop3-login: Aborted login: method=DIGEST-MD5, rip=192.168.0.3, lip=192.168.0.202, TLS <newline> 00:49:28 Info: auth(default): passwd-file /etc/dovecot.passwd: Read 1 users I can notice that the second (the failure) log is shorter than the first (the success). Maybe something is missing from there. The PLAIN auth mechanism is working, even after a failed DIGEST-MD5 login. In fact the PLAIN login always works :) Thanks! Daniel -- LeVA

3 3

[Dovecot] Also in 1.0RC7, Beginner Help with a fatal error in a first Basic Install
by Paul 18 Aug '06

18 Aug '06

Thinking that the issue with libssl is an artifact of the unstable branch, I've just tried, a reproduced the problem with, v10.rc7. Thank you. Paul

1 0

[Dovecot] 1.0 RC7 released
by Netserve 18 Aug '06

18 Aug '06

>> | Can everyone now agree that there are no more hangs? :) > 100,000 logins since we upgraded, no problems at all Linux svr22 2.6.xx- FC4 #1 Fri Aug 26 20:35:25 EDT 2005 x86_64 x86_64 86_64 GNU/Linux Good work! Regards John Lyons ADSL £9.99 www.discountadsl.co.uk Netserve Consultants Ltd Unit 8 The Bungalow Offices St Asaph Business Park St Asaph LL17 0LQ T: 0845 6444194 F: 01745 582374 w: www.netserve.co.uk e: support(a)nsnoc.com

1 0

[Dovecot] LDAP Auth problems with auth_bind=yes
by Rob Coward 18 Aug '06

18 Aug '06

Hi, I first posted this problem a day or two ago and have not seen any responses yet. To clarify my problem, I am authenticating virtual users against Active Directory on Win2k3, where their login id is their email address. I am using an almost identical setup to Suranga's below, however my initial bind user doesn't have access to the userPassword attribute, so I am using: auth_bind = yes This is working fine when users enter their correct email address & password, or if the email address is not found, however if a valid email address is given but the password is incorrect, it seems to kill something in the ldap_auth code as all further connections get a temporary authentication error at the client, and the following in /var/log/maillog: Aug 18 13:04:31 gm-ho-lin-06 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=::ffff:127.0.0.1 rip=::ffff:127.0.0.1 resp=ADA5OTlAc3RvcmVzLmdhbWUuY28udWsAOTk5MA== Aug 18 13:04:31 gm-ho-lin-06 dovecot: auth(default): ldap(0999@stores.game.co.uk,::ffff:127.0.0.1): bind search: base=OU=Stores,OU=UK,DC=group,DC=game,DC=net filter=(&(objectClass=user)(mail=0999(a)stores.game.co.uk)) Aug 18 13:04:31 gm-ho-lin-06 dovecot: auth(default): ldap(0999@stores.game.co.uk,::ffff:127.0.0.1): ldap_search() failed: Operations error Aug 18 13:04:31 gm-ho-lin-06 dovecot: auth(default): client out: FAIL 1 user=0999(a)stores.game.co.uk temp Aug 18 13:04:31 gm-ho-lin-06 dovecot: imap-login: Aborted login: user=<0999(a)stores.game.co.uk>, method=PLAIN, rip=::ffff:127.0.0.1, lip=::ffff:127.0.0.1, secured Is the auth_ldap code not resetting the ldap connection bind details to the dn/dnpass values for each login ? You help would be greatly appreciated as I hope to make this a production server within the next week. Regards, Rob Coward Unix Developer GAME STORES GROUP LTD Tel: 01256 784476 Email: Rob.Coward(a)game.net -----Original Message----- From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] On Behalf Of suranga de silva Sent: 18 August 2006 19:14 To: dovecot(a)dovecot.org Subject: Re: [Dovecot] dovecot Digest, Vol 40, Issue 65 Dear Tim Schafer, Take a look at my sample dovecot-ldap.conf hosts = localhost dn = cn=root,dc=ceylonlinux,dc=com dnpass = secret ldap_version = 3 base = dc=ceylonlinux,dc=com deref = never scope = subtree user_attrs = mail,homeDirectory=mailMessageStore,uidNumber=1003,gidNumber=1003 user_filter = (&(objectClass=user)(mail=%u)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=user)(mail=%u)) default_pass_scheme = CRYPT user_global_uid = 1003 user_global_gid = 1003 Here I am using my own schema called "user", but in your case change it to inetOrgPerson or the schema name you are using. I think the most common problem in this process is the ldap filter. Above in my configuration user_filter and pass_filter are used as ldap filters for querying user name and password. There I am using mail attribute. gid and uid are belong to the user vmail. May be this explanation will help you to figure out your problem You can refer my article in the following link for further reference http://www.ceylonlinux.com/pdf/openldap_backsql_postfix_maildir_cl.pdf Cheers!!! Suranga De Silva. CTO CEYLON LINUX This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this e-mail in error please notify the system manager at: mailto:postmaster@game.net The recipient acknowledges that the transmissions made via the Internet can be corrupted and therefore THE GAME GROUP PLC and any of its subsidiaries do not give any warranty as to the quality or accuracy of any information contained in the message or assume any liability for it or for its transmission, reception or storage. This footnote also confirms that this e-mail message has been swept by anti-virus software for the presence of computer viruses. http://www.game.co.uk http://www.gamegroup.plc.uk

1 0

[Dovecot] How to change passwords on LDAP Server?
by Luis Motta Campos 18 Aug '06

18 Aug '06

Dear List People Someone here could please send me some advice on changin' LDAP passwords? It seems that everything is working nice, except by dovecot: I can send emails using my new LDAP password trought postfix smtp authentication, I can login to my Intranet website and to the Mod-LDAP protected pages on my company. I just can't POP my mail messages, because Dovecot says "dovecot-auth: ldap(user(a)company.net): password mismatch". I guess this is because I'm incorrectly coding the password. Please help me to figure out the right way to crypt the password so Dovecot can read this from the LDAP. *Extra* *Information:* I made a simpler and smaller test version of the program that I use to change passwords, its attached to the email. The essentials are there. *Versions:* My dovecot is a Debian/Sarge (Stable) 3.1 package. I'm also using Perl, Net::LDAP, Apache with Mod_Perl and OpenLDAP. Everything on linux, of course. Package Version ---- ---- dovecot-common 0.99.14-1sarge0 dovecot-imapd 0.99.14-1sarge0 dovecot-pop3d 0.99.14-1sarge0 perl 5.8.4-8sarge4 libnet-ldap-perl 0.3202-3 apache-perl 1.3.33-6sarge2 slapd 2.2.23-8 kernel-image-2.4.2 2.4.27-10sarge1 Any help, suggestion or comment are welcome. Thank you all in advance. -- Luis Motta Campos Segula Technologies Portugal http://www.segula.pt/ #!/usr/bin/perl use strict; use warnings; use Net::LDAP; use Carp qw( croak ); # Connects to server my $ldap = new Net::LDAP( 'localhost' ) or croak $@; my $message = $ldap->bind( 'uid=user,ou=People,dc=company,dc=com', password => 'secret' ); croak $message->error if $message->is_error; # Locate user $message = $ldap->search( base => 'ou=People, dc=company, dc=com', filter => 'uid=user', scope => 'one' ); croak $message->error if $message->is_error; my $entry = $message->entry(0); croak 'Nobody found!?!' unless $entry; # Replace password. $entry->replace( userPassword => '{CRYPT}'. crypt( 'secret', join( '', ('.', '/', 0..9, 'A'..'Z', 'a'..'z')[rand 64, rand 64] ) ) ); $message = $entry->update( $ldap ); croak $message->error if $message->is_error; # Report results. print q{User password changed to: "}.$entry->get_value( 'userPassword' ).qq{".\n};

1 0

[Dovecot] OT: best way to move maildirs to another host ?
by Brice Figureau 18 Aug '06

18 Aug '06

Hi, I'm sorry because this mail is a little bit off-topic, but Timo's email titled "1.0RC7 Released" made me think about a possible issue for me. I have to move an old dovecot installation (1.0b2) from an i386 server to a new x86_64 server running latest available dovecot. My concern is about moving all my users' mail stored as maildir onto this new server. What would be the best way to do that ? >From Timo's comment on 32bits->64bits migration, I guess I'll have to move only the maildirs (and get rid of dovecot cache files), right ? Next, from what I remember about maildir, the message names usually contain the inode so that the file name is unique. If I strictly move the files, I can be sure that the moved files won't have the same inodes number as what is in the name. Should I care ? Or should I use something different than scp/rsync to perform the migration ? Thanks for your answers, Regards, -- Brice Figureau <brice+dovecot(a)daysofwonder.com>

3 3