- dovecot - dovecot.org

[Dovecot] SQL + AUTH command bug?
by Andrew Hutchings 10 Dec '04

10 Dec '04

Hi, While investigating the problem with Thunderbird auths I found the following happening: Escape character is '^]'. +OK Dovecot ready. CAPA +OK CAPA TOP USER UIDL RESP-CODES PIPELINING SASL PLAIN . AUTH PLAIN + + + -ERR Authentication failed. This is what is happening during a Thunderbird connection, when each '+' happens dovecot does an sql query on the sql server for user '?'. This was asserting mech.c until Timo did the bugfix last night. I currently have dovecot authing via 3 separate sql password tables as it is a migration from 3 old servers. If you try any other auth method (which shouldn't work anyway in my case) it doesn't talk to the SQL servers and just comes back as: -ERR Authentication failed. Regards Andrew -- Andrew Hutchings Systems Operator / Developer / Linux Guru Netserve Consultants Ltd. http://www.domaincity.co.uk/

5 10

Re: [Dovecot] When the 1.0 release is planed?
by Kim Culhan 10 Dec '04

10 Dec '04

On Thu, December 9, 2004 15:07, Andrew Velikoredchanin said: > Wouter Van Hemel: > >>> >>> What part of 1.0-test now not fully tested? >>> >>> >>> >> >> For me, the latest test releases have been pretty stable. But if you're >> not going to offer imap, you might as well run a simple pop server such as popa3d >> (http://www.openwall.com/popa3d/) It's quite secure AFAIK -- >> at least, it's written by Solar Designer and uses a multiple-fork model. > > No. popa3d not support mysql userdb. :( > > >> But it probably would help dovecot if you would give the test releases a >> try, the last bugs (if any) are hardest to find. That way, you would have a stable dovecot >> sooner. > > Yes, of couse. FWIW, dovecot CVS (development version) has been running here for several weeks with pop3s users having no problems we can find. -kim' __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

4 4

[Dovecot] Exim4 authentication patch
by Andrey Panin 10 Dec '04

10 Dec '04

Hello all, attached patch makes possible to use dovecot as an authentication backend for Exim 4. Reasons beyond this patch are simple: exim's authenticators require use of plaintext passwords and NTLM code in exim is quite outdated and hairy. Patch generated against Exim 4.43, but should apply to earlier versions too. Patch adds new 'dovecot' authenticator, which can be used as such: ntlm: driver = dovecot public_name = NTLM server_socket = /var/authentication_socket_path server_set_id = $1 cram: driver = dovecot public_name = CRAM-MD5 ... Authenticator has only one parameter 'server_socket', it's value used as path for dovecot's authentication socket. Authenticator can be used for server authentication only. Hope it will be useful for someone. Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke(a)donpac.ru | PGP key: wwwkeys.pgp.net

2 1

[Dovecot] mech-plain patch
by Andrew Hutchings 10 Dec '04

10 Dec '04

Hi Guys, Unoffical patch for mech-plain so the AUTH PLAIN command works with SQL (and possibly other DBs). Thunderbird should work again after this. --- mech-plain.c 2004-12-10 01:56:51.065987304 +0000 +++ mech-plain.c 2004-12-10 01:53:16.974534152 +0000 @@ -27,7 +27,10 @@ authid = (const char *) data; authenid = NULL; pass = ""; - count = 0; + if (data_size == 0) + return; + + count = 0; for (i = 0; i < data_size; i++) { if (data[i] == '\0') { if (++count == 1) Regards Andrew -- Andrew Hutchings Systems Operator / Developer / Linux Guru Netserve Consultants Ltd. http://www.domaincity.co.uk/

1 1

[Dovecot] Help needed with debugging auth command
by Andrew Hutchings 10 Dec '04

10 Dec '04

Hi guys, OK, so I am trying to find out why the POP3 AUTH / IMAP AUTHORIZE command is not doing what it is supposed to (not sure if it just for me or what). I am getting as far as: sasl-server.c - line 123 - mech = auth_client_find_mech(auth_client, mech_name); auth_client_find_mech is in auth-client.c which is where I am getting lost. My guess is we are not returning back to sasl-server.c since we don't get an SASL auth or an 'Unsupported' error. If I try 'PLAIN' as the auth method as the parameter then it tries to login with no user or pass and fails. If I try anything else (I have configed to accept plain only) I get 'Authorization failed' and it doesn't even try to lookup the user/pass. Regards Andrew -- Andrew Hutchings Systems Operator / Developer / Linux Guru Netserve Consultants Ltd. http://www.domaincity.co.uk/

1 1

[Dovecot] SHA1
by Marco Herrn 10 Dec '04

10 Dec '04

Hi, I am currently installing doveot as POP and IMAP server, but I a have a few difficulties configuring it correctly. I use postgresql to store the user information. The passwords are stored SHA1 encrypted. Now I have the problem that dovecot isn't accepting the user. In dovecot-pgsql.conf I defined default_pass_scheme = SHA1 I am not quite sure about whether this is corrents, since it is not mentioned in the documentation, but it is mentioned in the wiki (under the name SHA) and it doesn't produce an error (as specifying SHA does). So I assume this is correct. But when I log in with a user I always geht the following log output: dovecot-auth: Dec 08 22:18:20 Info: PGSQL: Performing query: SELECT passwd FROM mailbox WHERE localpart = érwin' AND domainname ='poiu.de' dovecot-auth: Dec 08 22:18:20 Info: pgsql(erwin(a)poiu.de): Password mismatch imap-login: Dec 08 22:18:20 Info: Aborted login [82.82.66.4] dovecot-auth: Dec 08 22:18:20 Info: Login process 9 disconnected dovecot-auth: Dec 08 22:18:20 Info: Login process 9 connected dovecot-auth: Dec 08 22:18:20 Info: Login process 9 sent handshake: PID 22222 Is there a way to get a more excessive debugging? I already set auth_verbose and auth_debug to yes. Or does anyone have an idea what the problem can be here? Regards Marco -- It's better to be wanted for murder that not to be wanted at all. -- Marco Herrn _ ___ o ' (_)< _ _ _>(__'> o 0 (_X % >(_`> O o _; _;'7^'_ \;\ % (GnuPG/PGP-encrypted mail preferred) _;\ _.\ _.';;) ;,;_/; Key ID: 0x94620736 _ _'./_$'))_; );/$}/`fsc

3 7

[Dovecot] When the 1.0 release is planed?
by Andrew Velikoredchanin 10 Dec '04

10 Dec '04

Hi! When the 1.0 release is planed?

5 7

[Dovecot] Timeouts with outlook express
by Daniel 10 Dec '04

10 Dec '04

Hi I am using Dovecot 0.99.12.1 (just upgraded) on a site with about 1500 mailboxes. One thing I have noticed is when the client outlook express is receiving a large mail via pop3 it gets a time out. There is traffic. If you click on the "wait" button in the dialogue the mail continues to download. This seem to relate to the "Server Timeouts" setting under mail account Properties/advance. If this setting is set higher the dialogue come only after this time has passed. If the mail take a long time to download if say is very big the user may have to click "Wait" a number of time even if the time out setting is set to the largest amount. It funny because the mail is downloading, So the pop3 server has not stopped responding as outlook express say it has. Strange. What is happening here? and is there a work around for it. Do I have a setting wrong. Regards Daniel ROwe

4 3

[Dovecot] SQL + POP3 AUTH command bug - test 57
by Andrew Hutchings 09 Dec '04

09 Dec '04

Hi guys, In addition to my previous message stating that POP3 'AUTH' command wasn't working correctly with SQL auths (making Thunderbird fail), the same is true of the AUTHENTICATE command in IMAP. Again I have created a temp fix by commenting out the lines that check for that command in imap-login/client.c If I get some time tonight I will write a patch to fix this properly. (Dovecot 1.0 test 57) Regards Andrew -- Andrew Hutchings Systems Operator / Developer / Linux Guru Netserve Consultants Ltd. http://www.domaincity.co.uk/

1 0

[Dovecot] "correct" permissions for login dir
by Kirill Miazine 09 Dec '04

09 Dec '04

I'm in process of moving away from Cyrus to Dovecot. I have my own authentication daemon working fine. It sets up two sockets: drwxr-x--- 2 root dovecot 512 Dec 7 21:07 /var/state/dovecot/login srw-rw-rw- 1 krot krot 0 Dec 7 21:07 /var/state/dovecot/login/sock drwx------ 2 krot wheel 512 Dec 7 21:07 /var/state/dovecot/master srw-rw-rw- 1 krot wheel 0 Dec 7 21:07 /var/state/dovecot/master/sock When I fire up Dovecot, it warns me of "incorrect" permissons for login dir (/var/state/dovecot/login) and "fixes" the problem. I want /var/state/dovecot/login to be owned by user krot (which the main daemon is running as), not by root. I suggest that login directory is not touched if external authentication is used. Socket are not wiped out, why should permissions be fixed? (see in master/master-settings.c around line 560). I'm afraid that some day I will forget to make this tiny change to Dovecot and end up with a mail system which does not work at all, because the master daemon won't be able to create dovecot/login socket. 1.0-test "works pretty well". Does it mean well enough to replace Cyrus (which indeed works pretty well)? I have maildir-based folders. Most users have no idea what IMAP is (my sister uses IMAP because I set it up, others just say that they don't need IMAP...) and they just download everything using POP3. Sometimes they use SquirrelMail. Default usage pattern. Are the risks high? Currently I have test56 on my test installation (which is almost ready to take over). Timo, Dovecot has been a pleasure to work with so far! -- They make a desert and call it peace. -- Tacitus

2 1