- dovecot - dovecot.org

[Dovecot] using one-time passwords
by Johannes Berg 22 May '04

22 May '04

Hi, Is there any way to use something like OPIE (one-time passwords in everything, S/KEY) with dovecot? Here's what I want to do ultimately: * have an AUTH=XYZ method that relies on S/KEY as provided by the libpam-opie module (well, maybe not through pam) * have dovecot advertise authentication as follows: - local : PLAIN, XYZ - remote (encrypted) : EXTERNAL, and rely on certificate - remote (unencrypted): XYZ Thats the dovecot part. Then I would modify squirrelmail to a) negotiate PLAIN with an authorized web client certificate b) negotiate XYZ when without SSL or SSL without a valid certificate This way I could check my mail even from computers that I don't trust at all to not do key-logging, since I can have an S/KEY generator on my cell-phone. Does this sound feasible? I see the following advantages: * allows checking of webmail on the road, on untrusted computers, giving out only whatever you decide to look at * allows checking of mail via unencrypted IMAP, relying on one-time passwords so giving an attacker only whatever he can look at while your session is active (assuming he can't insert anything into the tcp stream...) * is otherwise encrypted, and then doesn't force using one-time keys which may be somewhat a hassle to generate. johannes

4 9

[Dovecot] maildirsize virtual quota support
by "Branko F. Gračnar" 22 May '04

22 May '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi. I'm interested to help you with maildirsize virtual quota support. Is there any documented dovecot api? Best regards, - -- Branko F. Gracnar Noviforum Ltd. Software & Media http://www.noviforum.si http://www.najdi.si -----BEGIN PGP SIGNATURE----- iD8DBQFArhbWfiC/E+t8hPcRAtX7AJ9A5ZtSN+6hGQVNLvEjdwV+h2AMBQCfVNem mn+DiJ2ov6+OB3O9hCu/NC8= =8rsG -----END PGP SIGNATURE-----

2 1

[Dovecot] feature request / question?
by James Moser 22 May '04

22 May '04

Occasionally we get a user who decided they need to pop their account 3 to 4 times a second... usually I just disable their account and shout "no!", but now I have someone trying to do it repeatedly with an invalid username so I don't know who to spank. =) Before if this happened I would block the IP and wait for someone to complain... dovecot doesn't make that very easy, or at least I don't see how. May 20 20:12:29 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:30 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:31 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:32 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:32 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:32 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:32 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:32 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:33 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:33 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:33 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:33 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:33 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:34 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username May 20 20:12:34 mail05 dovecot-auth: mech-plain(jhurley(a)thegrid.net): invalid username No IP address, and we do not host thegrid.net. There are no other messages or authetication errors being logged anywhere else either. It would be helpful to have dovecot display the IP address of failed authentications as well... it allready show's it for login's. -- James L Moser james(a)powweb.com PowWeb Hosting http://www.powweb.com /(bb|[^b]{2})/, that is the Question. mysql>SELECT * FROM user WHERE clue > 0; Empty set (0.03 sec) Health is merely the slowest possible rate at which one can die... Health nuts are going to feel stupid someday, lying in hospitals dying of nothing...

3 3

[Dovecot] Dovecot Questions
by Adam Kessel 22 May '04

22 May '04

Hi. I have two questions that don't appear to be answered anywhere: - Many of my users use a fetchmail ssh tunnel to get their mail. Typically this looks like poll 140.247.60.120 with proto imap: plugin "ssh -2 %h /usr/sbin/imapd" auth ssh; uw-imapd provides a binary /usr/sbin/imapd that can be used for an ssh-imap tunnel. I found /usr/lib/dovecot/imap (in Debian) which might work as a replacement, except that it appears that running /usr/lib/dovecot/imap doesn't properly read in the configuration file--for example, it is trying to create dotlocks, but in the configuration I have flock. Is there any way I can do what I want to do here? - Dovecot seems to be dying spontaneously in conjunction with SquirrelMail. Do you have any experience of this? SquirrelMail ends up reporting that there was no response to the CAPABILITY query. If I restart Dovecot, everything is fine again. I don't see anything in the logs to indicate the problem. Any ideas why this might be happening? Thanks for any pointers... -- Adam Kessel http://adam.rosi-kessel.org

2 2

[Dovecot] Why the name dovecot?
by Sven Kirmess 22 May '04

22 May '04

Why is docecot called dovecot? Actually, nobody likes these "rats with wings". ;-) Timo, can we know that or is it a secret? Sven

2 1

[Dovecot] mbox folders
by Villalovos, John L 22 May '04

22 May '04

I just upgraded to Fedora Core 2 from Fedora Core 1. Discovered that UW-IMAP was replaced with Cyrus. Not quite ready to switch to that mail box format so I instead installed dovecot which comes with Fedora Core 2. The RPM version is: dovecot-0.99.10.4-4 The problem I am having is that it seems to want to put folders in: ~/mail/mail/ I would like the folders to be in: ~/mail/ Currently in ~/mail/ there is a .subscriptions file. Am I stuck with having my folders be in ~/mail/mail/ ? Is there some configuration change that I can do? Thanks, John -- A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting Q: What is the most annoying thing on usenet and in e-mail?

3 2

RE: [Dovecot] Dovecot Questions
by Julian Melville 21 May '04

21 May '04

> I suppose I should have mentioned that this is Debian sid, so Dovecot > 0.99.10.4 and SquirrelMail version 1.5.0. Not using pgsql or ldap. What happens if you telnet to e.g. port 143 when this is happening? Do you get a response from dovecot? I ask because I was experiencing the same symptom on a Debian (testing) machine a couple of months back. I had some assistance from Jaldhar but didn't get much closer to the answer. Eventually I put it down to low memory problems (it was a virtual-mode Linux server and had memory probs with other apps) and shifted to a real server with plenty of RAM. That's now also running Debian sid, dovecot and Squirrelmail without any problems. Cheers, Julian.

2 1

RE: [Dovecot] mbox folders
by Villalovos, John L 19 May '04

19 May '04

dovecot-bounces(a)dovecot.org wrote: > No, he means in your dovecot.conf file Oh. Oops :) Initially I had nothing. And then went with the following: #default_mail_env = default_mail_env = mbox:~/mail/:INBOX=/var/spool/mail/%u John -- A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting Q: What is the most annoying thing on usenet and in e-mail?

1 0

RE: [Dovecot] mbox folders
by Villalovos, John L 19 May '04

19 May '04

dovecot-bounces(a)dovecot.org wrote: > * Villalovos, John L <john.l.villalovos(a)intel.com> (20040518 13:46): >> The problem I am having is that it seems to want to put folders in: >> >> ~/mail/mail/ > > How is your `default_mail_env' variable configured? I have: [john@webhost john]$ set | grep -i mail MAIL=/var/spool/mail/john MAILCHECK=60 [john@webhost john]$ John -- A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting Q: What is the most annoying thing on usenet and in e-mail?

2 1

[Dovecot] having hell of the time converting away from UW
by Eric S. Johansson 18 May '04

18 May '04

I just want to check and make sure not missing anything. I'm trying to convert a customer away from UW. unfortunately, all of the mailboxes are in MBX format (my own mistake coming back to haunt me). mailutil doesn't seem to do conversions properly. It keeps complaining about an existing copy of /mbox and only if I say to -merge append will the copy proceed. mailsync doesn't work well with hierarchies of mailboxes. its copies the top level mailboxes but proceeds to get sick on the sub mailboxes. I'm not sure what other tools there are to help me get out from the mbx rathole and over to the maildir wallow. any suggestions?

2 1