- dovecot - dovecot.org

[Dovecot] Master Login
by Marc Perkel 12 Apr '06

12 Apr '06

How do you make the master login work?

2 1

[Dovecot] Re: strip domains
by Roger Weeks 12 Apr '06

12 Apr '06

So if I understand this correctly, %u matches the whole username in the sql database, but %n only matches the name before @? One thing we discovered in migrating from courier-imap to Dovecot is that courier-imap supported user@domain as a valid login name, where by default using %u in the SQL query, Dovecot does not. So it would have been useful for us to avoid a number of tech support calls for users who have user@domain configured in their mail clients. -- Roger J. Weeks Systems & Network Administrator Mendocino Community Network On Apr 12, 2006, at 7:16 AM, dovecot-request(a)dovecot.org wrote: > Date: Wed, 12 Apr 2006 16:05:24 +0300 > From: Timo Sirainen <tss(a)iki.fi> > Subject: Re: [Dovecot] strip domains > To: Netlink Tech <tech(a)netlinkcom.com> > Cc: dovecot(a)dovecot.org > > On Tue, 2006-04-11 at 09:36 -0500, Netlink Tech wrote: > In general I don't see this as very useful feature. Why are your users > logging in with @domain? Or why not change your passdbs/userdbs to > just > contain the domain, and set auth_default_realm so everyone always logs > in with domains? > > > Here you can modify your SQL command to use %n instead of %u. > > >> userdb passwd { >> } >> > >> userdb sql { >> args = /etc/dovecot-sql.conf >> } >> > > And here again you can use %n. >

1 0

[Dovecot] Scheduled Outages
by Roger Weeks 12 Apr '06

12 Apr '06

What's "after hours" for an ISP with customers all over the world? That's why we have regular once-per-month scheduled outages. Same time, every month. Email reminders go out to customers and are announced on our web pages. People can't argue with a month's advance notice. -- Roger J. Weeks Systems & Network Administrator Mendocino Community Network On Apr 12, 2006, at 5:49 AM, dovecot-request(a)dovecot.org wrote: > Date: Wed, 12 Apr 2006 07:27:36 -0500 > From: Les Mikesell <lesmikesell(a)gmail.com> > Subject: Re: [Dovecot] 1.0.beta6 released > To: Reuben Farrelly <reuben-dovecot(a)reub.net> > Cc: Timo Sirainen <tss(a)iki.fi>, Chris Wakelin > <c.d.wakelin(a)reading.ac.uk>, Jens Laas <jens.laas(a)data.slu.se>, > dovecot(a)dovecot.org > Message-ID: <1144844856.24974.1.camel(a)les-home.futuresource.com> > Content-Type: text/plain > > On Wed, 2006-04-12 at 06:51, Reuben Farrelly wrote: > >> That's why there's "scheduled downtime" and "after hours" to do >> these things, in >> case stuff goes wrong, as some users of horde with dovecot have >> found out lately ;) > > What's 'after hours' for a company with users all around the world? > Interesting concept, though... > -- > Les Mikesell > lesmikesell(a)gmail.com

1 0

[Dovecot] http://wiki.dovecot.org/ IS NOT RUNNING
by Alexandre Busquets 12 Apr '06

12 Apr '06

3 2

[Dovecot] Full text search indexing
by Timo Sirainen 12 Apr '06

12 Apr '06

SEARCH is probably the slowest command that Dovecot has, especially when searching texts from message bodies. There exists a lot of text search engines, but unfortunately as far as I know there exists only one that can be used with IMAP. The reason why IMAP is special is because it requires that when searching eg. "ello", it must match also mails which contain eg. word "hello". Most search engines support only matching either complete words or matching from the beginning of the words. So, the one usable engine which I know of is Cyrus's squat indexing. It works basically by indexing the mails in 4 byte blocks and storing them in a trie. So if there exists a string "he llo", it indexes "he l", "e ll" and " llo" strings. When searching it then gets the first 4 bytes of the search keyword, looks them up from the squat index and then once it gets a list of matched mails, it reads the mails and does a proper search for only them. So the squat index doesn't give exact results, but only narrows down the number of mails which have to be searched. The biggest problem with those squat indexes is that it doesn't support incremental updates, so there has to be some nightly runs to rebuild the indexes from scratch. And with lots of users that's not practical, so I think that's the reason why the squat indexes aren't all that commonly used with Cyrus. I was thinking about taking the basic ideas from the Cyrus squat indexer but making it possible to update it incrementally so Dovecot could do it automatically. Also to reduce space I was thinking about sorting the 4 byte strings so instead of eg. "abcd", "dcba" and "abdc" all being indexed, they could all be stored as "abcd" (so the search key would also have to be sorted before use). But that might cause larger result sets making the search slower, so I'll have to test if it's worth it. Unicode characters might also be a problem. If the characters are stored in 16bit characters, it would waste space. If they're stored in UTF-8 the 4 bytes might not be enough to give a useful index (as a single character might take even 5 bytes). One thing I was thinking was to not index in 4 byte blocks, but 4 character blocks in UTF-8, so the trie could be 4..20 levels deep depending on what unicode characters are used (in finnish text it would probably be max. 7 levels deep). So, now would be a good time to tell if you can think of some better ideas how to do this, especially if you know about some new algorithms specifically designed for this kind of searching. :) Pretty much all the algorithms I've found about this were suffix trees/arrays and this basic trie thing.

6 14

[Dovecot] beta7: TLS, Success!!
by Jeff A. Earickson 12 Apr '06

12 Apr '06

Timo, With my setup (Solaris 9, IMAP only, TLS, plain auth, mbox format), beta 7 is now working correctly. Thanks for your efforts! Jeff Earickson Colby College

1 0

Re: [Dovecot] strip domains]
by Michael Baird 12 Apr '06

12 Apr '06

-------- Forwarded Message -------- From: Michael Baird <mike(a)tc3net.com> To: Timo Sirainen <tss(a)iki.fi> Subject: Re: [Dovecot] strip domains Date: Wed, 12 Apr 2006 10:42:43 -0400 On Wed, 2006-04-12 at 17:17 +0300, Timo Sirainen wrote: > On Wed, 2006-04-12 at 09:48 -0400, Michael Baird wrote: > > I don't > > know why there is so much resistance to supporting functionality that is > > mostly a standard feature with other pop3/imap servers, and which also > > makes it *much* easier to migrate to dovecot from other solutions which > > support the domain stripping. > > I don't remember having seen all that much requests for this feature. > Perhaps lately several people have asked for it, but for the last 3 > years there haven't been all that many people. > > If I added a new setting for every single feature people asked, > dovecot-example.conf would be much larger than it currently is. And it > already is too large I think. I'm not asking for every new feature, just one that I think fits in with the current design of dovecot already and is a standard feature provided by other servers. You already provide the ability built in to "strip domains" per say, with the %u and %d values built in. To accomplish what I would like to do, I only need to be able to pass whatever combination of these values I wish to my passdb and userdb functions of choice. Regards Michael Baird

1 0

[Dovecot] [patch] MD5 variable modifier
by Ben Winslow 12 Apr '06

12 Apr '06

Hello, I've taken a different (better) approach to getting tpop3d-compatible UIDLs: the first attached patch (...md5_modifier.diff) adds a variable expansion modifier (%M) to return the md5sum of the expanded variable in hex. With the patch, you can get tpop3d-compatible UIDLs by setting pop3_uidl_format to %Mf. While testing interactions with other modifiers (e.g. %MUf to get the md5sum in uppercase), I noticed that %U is broken -- it lowercases the input just as %L does. The second patch (...ucase_modifier_fix.diff) is a one-liner to fix that. Finally, the third attached patch (...apop_aesthetics.diff) is another trivial patch to add a space between the server greeting and the APOP challenge. I think it looks better when telnetting to the server to diagnose something, and since spaces are stripped from the end of the login_greeting, editing the code is the only way to add the space. Cheers, -- Ben Winslow <rain(a)bluecherry.net>

2 2

[Dovecot] Beta 7 fixes the Horde issue!
by interfaSys sàrl - Rich Internet Applications 12 Apr '06

12 Apr '06

Thank you for beta 7. Everything works well this time (for us at least). Best regards, Olivier Paroz interfaSys sàrl

1 0

[Dovecot] Postfix dovecot SASL and LDAP not working...
by Brice Figureau 12 Apr '06

12 Apr '06

Hi, I'm trying to setup a new mail server where postfix 2.3-20060405 would use Dovecot's SASL and users located in LDAP. It's with dovecot-1.0-beta5. On the postfix side, I followed the SASL_README and have the following in main.cf: smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_sasl_auth_enable = yes On the dovecot side I have the following related to auth: auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain digest-md5 cram-md5 # LDAP database passdb ldap { # Path for LDAP configuration file, see /etc/dovecot/dovecot-ldap.conf for # example args = /etc/dovecot/dovecot-ldap.conf } # LDAP database userdb ldap { # Path for LDAP configuration file, see /etc/dovecot/dovecot-ldap.conf for # example args = /etc/dovecot/dovecot-ldap.conf } userdb prefetch { } user = root ## ## dovecot-lda & postfix SASL specific settings ## socket listen { master { path = /var/run/dovecot-auth-master mode = 0666 } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } pop or imap authentification with LDAP works fine: Apr 11 17:43:08 localhost dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Isecured^Ilip=127.0.0.1^Irip=127.0.0.1^Iresp=AGJyaWNlAHRvdG8= Apr 11 17:43:08 localhost dovecot: auth(default): ldap(raymond,127.0.0.1): base=ou=people, dc=daysofwonder, dc=com scope=subtree filter=(&(objectClass=CourierMailAccount)(uid=raymond)) fields=uid,userPassword,homeDirectory,uidNumber,gidNumber,mailbox Apr 11 17:43:08 localhost dovecot: auth(default): ldap(raymond,127.0.0.1): uid(user)=raymond userPassword(password)={PLAIN}toto homeDirectory(userdb_home)=/home/raymond uidNumber(userdb_uid)=1000 gidNumber(userdb_gid)=1000 mailbox(userdb_mail)=/home/raymond/Maildir Apr 11 17:43:08 localhost dovecot: auth(default): client out: OK^I1^Iuser=raymond^I Apr 11 17:43:08 localhost dovecot: auth(default): master in: REQUEST^I1^I15439^I1 Apr 11 17:43:08 localhost dovecot: auth(default): ldap(raymond,127.0.0.1): base=ou=people, dc=daysofwonder, dc=com scope=subtree filter=(&(objectClass=CourierMailAccount)(uid=raymond)) fields=homeDirectory,uidNumber,gidNumber,uid,mailbox Apr 11 17:43:08 localhost dovecot: auth(default): master out: USER^I1^Iraymond^Isystem_user=raymond^Ihome=/home/raymond^Iuid=1000^Igid=1000^Imail=/home/raymond/Maildir Apr 11 17:43:08 localhost dovecot: imap-login: Login: user=<raymond>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured postfix SASL doesn't work, but more important don't print any debug messages, nor try to contact the LDAP server at all: Apr 11 18:00:59 localhost postfix/smtpd[15637]: connect from localhost.localdomain[127.0.0.1] Apr 11 18:01:13 localhost dovecot: auth(default): client in: AUTH^I3^Iplain^Iservice=smtp^Iresp=YnJpY2UAYnJpY2UAdG90bw== Apr 11 18:01:14 localhost dovecot: auth(default): client out: FAIL^I3^Iuser=raymond Apr 11 18:01:14 localhost postfix/smtpd[15637]: warning: localhost.localdomain[127.0.0.1]: SASL plain authentication failed: I tried several variations of the config, like without userdb prefetch, moving postfix socket config block in another auth block... Nothing worked. Since the samples are mentioning only pam as userdb and passdb source, maybe it can't work with LDAP ? Any idea on how to solve this issue ? Thanks, Regards, -- Brice Figureau

1 1