- dovecot - dovecot.org

[Dovecot] SSL Ciphers
by John Wentworth 23 Apr '04

23 Apr '04

I have dovecot running as a pop3s server on port 995 it works great with sendmail and I run nessus to check security issues nessus reports this The SSLv2 server offers 3 strong ciphers, but also 0 medium strength and 2 weak "export class" ciphers. The weak/medium ciphers may be chosen by an export-grade or badly configured client software. They only offer a limited protection against a brute force attack Solution: disable those ciphers and upgrade your client software if necessary I have previously disabled weak ciphers in apache but cannot figure out how to disable the weak ciphers in dovecot Any help would be appreciated john

1 0

[Dovecot] SSL Ciphers
by John Wentworth 23 Apr '04

23 Apr '04

I have dovecot running as a pop3s server on port 995 it works great with sendmail and I run nessus to check security issues nessus reports this The SSLv2 server offers 3 strong ciphers, but also 0 medium strength and 2 weak "export class" ciphers. The weak/medium ciphers may be chosen by an export-grade or badly configured client software. They only offer a limited protection against a brute force attack Solution: disable those ciphers and upgrade your client software if necessary I have previously disabled weak ciphers in apache but cannot figure out how to disable the weak ciphers in dovecot Any help would be appreciated john

1 0

[Dovecot] Is dovecot distributed with RHEL 3.0
by Avery 20 Apr '04

20 Apr '04

I can't seem to find out if dovecot is packaged with RHEL 3.0. It seems redhat makes it hard to find what packages you get when you purchase their RHEL. Does anyone know if dovecot is disributed with Red Hat Enterprise Linux ES 3.0? I know dovecot is distribured with redhat 9.0 and fedora. Thanks, -- Avery

4 3

[Dovecot] configuring dovecot for NIS (w/ pam)
by Yedidia Klein 20 Apr '04

20 Apr '04

Hi, I am trying to start using dovecot on a linux machine. I config it to auth w/ my passwd/shadow and it worked perefectly. I'm not getting to config it to work with my SUN NIS (not +) As I understood I must use PAM for this, I tried to config it w/o any success... do someone has a config file/ pam config for this ? thanks --Yedidia

1 0

[Dovecot] RE: dovecot Digest, Vol 12, Issue 21
by Alban Dani 20 Apr '04

20 Apr '04

Hi Adrian, You are right. I had a space after the .1. Now dovecot is listening fine on 127.0.0.1. Thanks a lot. I would have never thought of it. Alban Date: Tue, 20 Apr 2004 08:37:21 +0200 From: Adrian Ulrich <dovecot(a)blinkenlights.ch> Subject: Re: [Dovecot] Can't resolve address 127.0.0.1 To: dovecot(a)dovecot.org Message-ID: <20040420083721.1d1a4323.dovecot(a)blinkenlights.ch> Content-Type: text/plain; charset=US-ASCII Hello, > imap_listen = 127.0.0.1 Check if you have a space after .1: 'imap_listen = 127.0.0.1' maybe not the same as 'imap_listen = 127.0.0.1 ' bye

1 0

Re: [Dovecot] Can't resolve address 127.0.0.1
by Alban Dani 20 Apr '04

20 Apr '04

Rick thanks for the message, -I have not done any changes to the default nsswitch.conf. I checked and the entry hosts: files dns is there -127.0.0.1 localhost entry is in the /etc/hosts file. -ifconfig shows that the interface is up and I can successfully ping it by name ( ping localhost ). What else can be wrong. I am totally lost here. Alban Rick Johnson wrote: >Alban Dani wrote: >> Hi , >> >> I recently installed Fedora Core 1. >> >> Installed postfix on it and that is running fine. >> >> I am trying to get dovecot to run and I have changed only the following >> line from the default dovecot.conf : >> >> imap_listen = 127.0.0.1 since I'd like to install squirrelmail later on. >> >> Now when I try to start dovecot I get "Starting Dovecot Imap: Fatal: >> Can't resolve address 127.0.0.1 : Name or service not known" > >Does /etc/hosts still contain an entry for localhost? > >Does /etc/nsswitch.conf still reference files for name resolution? > >Is the interface lo active? (run ifconfig to find out) > >-Rick > >-- >Rick Johnson, RHCE #807302311706007 - rjohnson(a)medata.com >Linux/Network Administrator - Medata, Inc. >PGP Public Key: https://mail.medata.com/pgp/rjohnson.asc >

2 1

[Dovecot] Wiki: virutal user with Sendmail and OpenLDAP
by Zoong Pham 20 Apr '04

20 Apr '04

In the Wiki, section 2, "Virtual user support with OpenLDAP", does the example apply to non Sendmail? If that's the case, can someone post a quick guide about setup virtual user with Sendmail. I use OpenBSD-3.4, BTW. TIA, Zoong

1 0

[Dovecot] Can't resolve address 127.0.0.1
by Alban Dani 20 Apr '04

20 Apr '04

Hi , I recently installed Fedora Core 1. Installed postfix on it and that is running fine. I am trying to get dovecot to run and I have changed only the following line from the default dovecot.conf : imap_listen = 127.0.0.1 since I'd like to install squirrelmail later on. Now when I try to start dovecot I get "Starting Dovecot Imap: Fatal: Can't resolve address 127.0.0.1 : Name or service not known" Can anybody help me? Alban

2 1

[Dovecot] configuration problem.. with passwd
by Kartik Vaidyanathan 19 Apr '04

19 Apr '04

Hi i was trying to configure dovecot. Under the authentication section i have set the auth_passdb=/etc/passwd auth_user=root auth_userdb=/etc/passwd But it gives Error in configuration file /etc/dovecot.conf line 398 :missing value which points to auth_passdb=/etc/passwd in the file. Firstly do i need setup some other parameters I want to follow the most simple authentication process. Please advice. thanks

2 1

[Dovecot] adding new user to dovecot
by Kartik Vaidyanathan 18 Apr '04

18 Apr '04

Hi, Your mail was very insightful. You have stated in you mail as follows .. "But I think they create virtual users in database systems for email, I can't imagine all of the users they have are in one passwd file on one tiny machine." a. What do you mean by virtual users. b. How does one link them to a mailbox. Very frankly i am confused... 1.Well lets say i have a user who wants to create a new group say GROUP1.Lets say i have users who want to create GROUP1(a)pigeonhole.com or GROUP2(a)pigeonhole.com .This group name will be entered in my JSP page, now what do i have to do to create the group. 2.How do i see to that anyone who sends a mail to GROUP2@pigeonhole receives it in it mailbox( Firstly does the group have a mails box in the groups name).Will one create a account(mailbox) for the group or how is it done. 3.Lastly I actually want to create a mailing List manager. Please advice on how to go about it. Regards Kartik On Sun, 18 Apr 2004 Wouter Van Hemel wrote : >On Fri, 16 Apr 2004, Kartik Vaidyanathan wrote: > > > Hi, > > > > I have actually configured dovecot because i required a mail server in > > order to build a mailing list manager.A mail list manager is something > > in the likes of yahoogroups, where each group in my case must have a > > mailbox. > > > >You need a MTA, such as postfix, qmail, sendmail, exim, etc. It's more >important than an imap server for what you want to do. > >Actually, I don't really understand why you need an imap server when >making a mailinglist manager. > > > 1. I am using Debian OS. > > The software that i am creating , which is going developed in JSP, will > > take a new users name and password and create a account for him by > > executing a shell script in my linux machine.I assume yahoo also does > > something similar to this to create new mail boxes for any new > > user.Please correct me if i am wrong. > > > >I don't know, I don't work at yahoo. But I think they create virtual users >in database systems for email, I can't imagine all of the users they have >are in one passwd file on one tiny machine. > > > In fact this very mail that i have received from you is because i have > > subscribed to the dovecott mailing list. How do you think dovecott has > > been able to accomplish this. Is it not because that dovecott has a > > mailbox in the group name "dovecott" in some system, that internally > > does the sending of mails to all those in the groups refering to some > > database. > > > >Dovecot doesn't have anything to do with that. It's mostly the MTA, aided >by the mailing list manager. > >Here's how majordomo (popular mailinglist manager) works: > >Bob wants to subscribe to the pigeonhole mailinglist. He emails or enters >his email address in a web form so it ends up in a database file with all >the other users on that list. The mailinglist manager's job is to take >care of adding (or removing) email addresses to (from) that file; it adds >Bob's address. > >When an email is sent to pigeonhole(a)pigeonhole.org, the mailer daemon >(MTA) receives this email, and instead of delivering it to a local user, >either it (1) delivers it to a pipe - it passes the email to the >mailinglist software, which then just generates an email that replaces the >original destination with the list of email addresses; or (2) the mailer >daemon itself forwards the email by alias expansion to the list of email >addresses the mailinglist software made. > >In the former case, the mailinglist manager reads the original message and >replaces the address with all those in the list's database; in the latter >case, basically the only thing a mailinglist manager does, is taking care >of an error-free database file with email addresses so the MTA can forward >the email to the addresses in this file. > >Because Bob's email address is in this file, his address will be inserted >in the headers of the message, and he will receive the email. > > > 2.Will the mail server support me in anyway by giving me some > > functionality to add users, thereby creating maildir's (imap) for the > > users. > > > >No, adding users is not the job of a mail server daemon. Or of an imap >server. Usually, you don't allow people to add users to your system, for >obvious reasons. > >If you want to add users to a mailing list, you don't need accounts for >those users, only when you also want to provide them with an email address. > >What do you want to do: provide email addresses, or a mailinglist manager? > > > 3.Dont I need to know the admin login and passwd, to create users? > > > >Yes, ofcourse. Unless your users are in a database server, in that case >you need the ability to add records to that database. > >(Shared webhosting accounts usually allow adding virtual users, if that's >the reasoning behind your question.) > > > 3.Lastly i know this is not that prevalent a question -> I was told mail > > man does a similar job as to what my software will do.Do you know how > > mailman works (or even yahoogroups)?. > > > >Not precisely, but pretty much like I said above. You can check out the >documentation and source code of said software. > >Yahoogroups probably uses custom written software, but still based on the >simple approach of a mailinglist manager taking care of a list of >subscribers, and the mailer daemon either itself or by aid of an external >program multiplicating the recipients. > > >A mailinglist manager has nothing to do with Dovecot. Dovecot has nothing >to do with *sending* email, only with retrieving it from a system with >IMAP of POP. It's the end-of-the-line for emails, delivery to final >destination; it does not forward or duplicate. > > > Please enlighten me on the above issues. > > Thanks a lot for you time. > > > >I'll send you the bill later. ;) > > > Regards > > Kartik > > > > > > > > >

2 1