- dovecot - dovecot.org

[Dovecot] Weird Authentication behaviour
by Jürgen Ladstätter 24 Mar '14

24 Mar '14

Hi guys, we use dovecot 2.0.9 and authentication against a mysql database. Everything works fine, but we found some weird behavior when the password is e.g. testpass you also authenticate successfully with testpass123 or testpassNOT. Whatever comes after the correct password doesnt matter, the authentication is still successful. Here are the used configs: // auth-sql.conf.ext passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } userdb { driver = static args = uid=vmail gid=vmail home=/data/mail/%d/%n } // dovecot-sql.conf.ext driver = mysql connect = host=[IP] dbname=[DB] user=[USER] password=[PASS] default_pass_scheme = CRYPT password_query = SELECT `password`, `login` AS `user` FROM `v_email_accounts` WHERE `login`='%u' // 10-auth.conf disable_plaintext_auth = no auth_mechanisms = plain !include auth-sql.conf.ext // 10-master.conf default_process_limit = 1000 default_client_limit = 3003 default_vsz_limit = 1024M service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 vsz_limit = 1024M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service lmtp { unix_listener lmtp { } } service imap { vsz_limit = 1024M process_limit = 2048 } service pop3 { process_limit = 2048 } service auth { unix_listener auth-userdb { user = vmail group = vmail } client_limit = 8096 } service auth-worker { } service dict { unix_listener dict { } } Thanks in advance for your help!

4 3

[Dovecot] imap: Error: mmap() failed with file ... dovecot.index.cache: Cannot allocate memory
by Urban Loesch 24 Mar '14

24 Mar '14

Hi, since some days (about 10) I get the following error in mail error log many, many times: ... dovecot: imap(user(a)domain.com pid:32769 session:<dszL7lX1xADD/uGI>): Error: mmap() failed with file /home/dovecotindex/domain.com/user/mailboxes/Trash /dovecot.index.cache: Cannot allocate memory .... It's always the same "dovecot.index.cache" file and only for the same heavily used account. The account is currently used from about 10 different clients with imap at the sime time. I checked the size of the index cache file and it seems very big: total 2,7G -rw------- 1 mailstore mailstore 464 Mär 24 14:36 dovecot.index -rw------- 1 mailstore mailstore 464 Mär 24 14:36 dovecot.index.backup -rw------- 1 mailstore mailstore 2,7G Mär 24 14:19 dovecot.index.cache -rw------- 1 mailstore mailstore 140 Mär 24 14:45 dovecot.index.log -rw------- 1 mailstore mailstore 89K Mär 24 14:36 dovecot.index.log.2 About 2,7 GB? To solve the problem temporarily, I removed the index files from the index Trash folder and Dovecot initialized an index rebuild. Now the size of the index files are small: total 28K -rw------- 1 mailstore mailstore 512 Mär 24 14:47 dovecot.index -rw------- 1 mailstore mailstore 20K Mär 24 15:28 dovecot.index.cache -rw------- 1 mailstore mailstore 1,2K Mär 24 15:28 dovecot.index.log But why could the index cache file be so big? Many thanks Urban

1 0

[Dovecot] Dovecot/Django authentication
by Thomas Johnson 24 Mar '14

24 Mar '14

We've got an application in django that has passwords stored in both sha1 and pbkdf2_sha256 form. We need dovecot to be able to authenticate against the django database (we can't modify django to store passwords in dovecot's form, I'm afraid). Has anyone done a dovecot authentication plugin to support these password forms (and/or any other forms that django supports)? Thanks- Tom

2 1

[Dovecot] Case-sensitive INBOX or client issue?
by SB Code Ninja 24 Mar '14

24 Mar '14

I am using dovecot as an IMAP server for a Cisco product (Cisco Agent Desktop by Calabrio) and noticed some odd behavior when trying to access emails. The mail is delivered to the main INBOX, then a Cisco server moves it to a directory within the INBOX based on the queue it is meant for. Here is the directory structure of the Maildir: Maildir/INBOX Maildir/INBOX/tmp Maildir/INBOX/63 Maildir/INBOX/63/tmp Maildir/INBOX/63/dovecot.index.cache Maildir/INBOX/63/cur Maildir/INBOX/63/cur/1395445673.M548066P32100.uc-util,S=6403:2, Maildir/INBOX/63/dovecot.index.log Maildir/INBOX/63/dovecot-uidlist Maildir/INBOX/63/maildirfolder Maildir/INBOX/63/new Maildir/INBOX/dovecot.index.cache Maildir/INBOX/cur Maildir/INBOX/dovecot.index.log Maildir/INBOX/dovecot-uidlist Maildir/INBOX/62 Maildir/INBOX/62/tmp Maildir/INBOX/62/dovecot.index.cache Maildir/INBOX/62/cur Maildir/INBOX/62/cur/1395445491.M591207P32114.uc-util,S=6380:2, Maildir/INBOX/62/dovecot.index.log Maildir/INBOX/62/dovecot-uidlist Maildir/INBOX/62/maildirfolder Maildir/INBOX/62/new Maildir/INBOX/new Email is delivered to INBOX then gets moved to INBOX/62 or INBOX/63. The desktop software is then supposed to read the email and process it. I did a packet capture of the conversation and saw the following: IMAP Response: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN] Dovecot ready. IMAP Request: A0 AUTHENTICATE PLAIN IMAP Response: + IMAP Request: <redacted> IMAP Response: A0 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in IMAP Request: A1 LIST "" Inbox/63 IMAP Response: A1 OK List completed. IMAP Request: A2 CREATE Inbox/63 IMAP Response: A2 NO [ALREADYEXISTS] Mailbox exists. If I login manually and do 'LIST "" INBOX/63' it works fine, but not with "Inbox/63". I was under the impression that INBOX was not case-sensitive. Is this a bug or is the client doing something silly? Thanks, Henry dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.7 disable_plaintext_auth = no mail_location = maildir:~/Maildir:LAYOUT=fs namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap" ssl = no ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } -- "The best way to predict the future is to invent it" - Alan Kay

3 2

[Dovecot] dsync in a cronjob to replace offlineimap
by Guilhem Moulin 24 Mar '14

24 Mar '14

Hi list, Replacing offlineimap with dsync for IMAP-to-IMAP synchronization (using dovecot 2.1.7) is working great, but now that I upgraded to 2.2.9 I'd like to take advantage of the incremental replication [1]. I don't think having a separate replicator process & notifications suits my configuration, as I want to sync my server with my laptop which is not always on or might be behind a firewall. After reading ‘replication/replicator/dsync-client.c’ I was thinking of writing a small wrapper around dsync performing a daily full replication and updating the state otherwise. The following works great in a cronjob doveadm sync -l30 imap.example.org but when I try to get the current state doveadm sync -l30 -fs '' imap.example.org >~/mail/dsync.state and later use incremental replication state=$(< ~/mail/dsync.state) doveadm sync -l30 -s "$state" imap.example.org >~/mail/dsync.state the state seems to somehow quickly become "stale" and messages stop being retrieved from the server. I understand that dsync's incremental replication is mostly intended to be used by the replicator process, but I'm wondering whether it's also possible to use it manually ;-) If so, how to keep a sane state? Thanks, cheers, -- Guilhem. [1] http://wiki2.dovecot.org/Replication

2 1

[Dovecot] Where can I find a stable PPA?
by Daniel Reynolds 22 Mar '14

22 Mar '14

Hello, As the subject says, where can I find a stable PPA of Dovecot v2.2 for Ubuntu 12.04? I found this <https://launchpad.net/~kokelnet/+archive/dovecot22>, but the description says, "...I declare them as unstable." For obvious reasons, I don't want to use this. What should I do? Thanks, Daniel

4 4

Re: [Dovecot] Dovecot/Django authentication
by Joseph Tam 22 Mar '14

22 Mar '14

Thomas Johnson <tj(a)terramar.net> writes: > We've got an application in django that has passwords stored in both > sha1 and pbkdf2_sha256 form. We need dovecot to be able to > authenticate against the django database (we can't modify django to > store passwords in dovecot's form, I'm afraid). > > Has anyone done a dovecot authentication plugin to support these > password forms (and/or any other forms that django supports)? You can always fall back on http://wiki2.dovecot.org/AuthDatabase/CheckPassword to implement any wild and woolly scheme you got going. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Debian Wheezy Dovecot Replication no updates on message deposit
by Milan Cvetkovic 21 Mar '14

21 Mar '14

Hi, I am trying to setup dovecot replication based on: http://wiki2.dovecot.org/Replication http://www.dovecot.org/list/dovecot/2013-January/087674.html I know that 2.1.7 is dated, but I would refrain from upgrading, if not necessary. The problem I have is pretty much same as the one described in http://www.dovecot.org/list/dovecot/2013-January/087674.html: I have vmail user on both systems, setup with ssh public key logins with empty passphrase. Apparently, dsync happens only on periodic updates. If a message is deposited on one server, it will only propagate to the other once a while. Thanks, Milan. Here is doveconf -n output: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.4 auth_mechanisms = plain login mail_location = maildir:~/Maildir mail_plugins = " notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_replica = remote:vmail@192.168.108.138 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap sieve pop3" replication_full_sync_interval = 1 hours service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth { unix_listener auth-client { mode = 0660 user = Debian-exim } } service config { unix_listener config { user = vmail } } service doveadm { user = vmail } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl_cert = </etc/exim4/exim.crt ssl_key = </etc/exim4/exim.key userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " sieve" }

2 3

[Dovecot] Dovecot + roundcube -- Password Change
by Vijay Rajah 21 Mar '14

21 Mar '14

Hello, I'm using Postfix + Dovecot (2.2.6) + roundcube 0.8.x + mysql. The roundcube webserver is hosted on a different server than the Dovecot. The dovecot itself is a replicated 2 node configuration. I would like to allow users to change the password from roundcube interface. All the examples I have seen, assume that roundcube runs in the same server as dovecot. Is there an example / documentation to enable this to work, applying reasonable security measures. -Thanks Vijay

2 1

[Dovecot] Password hashing issue
by Daniel Reynolds 20 Mar '14

20 Mar '14

Hello, First off, thanks in advance for all of your help. Now to my issue: I am setting up my first email server. It will be for just me and a few other people. I am using an Amazon EC2 server running Ubuntu 12.04. My MTA is postfix. As I said, this is my first time setting up an email server, so I am following a guide that Arstechnia has published (link<http://arstechnica.com/information-technology/2014/03/taking-e-mail-back-pa…> ). My issue comes when I try to create a hashed of my passwords. I have tried entering the command, "doveadm pw -s SSHA512". When I do this, I get the error message, "doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/99-mail-stack-delivery.conf line 6: Unknown setting: ssl_client_ca_dir". I have tried running that command with sudo and as root, but I still get the exact same error message. I had configured /etc/dovecot/conf.d/99-mail-stack-delivery.conf earlier on, and line 6 of that document says, "ssl_client_ca_dir = /etc/ssl/certs" which is exactly what the ars guide told me it should say. What have I done wrong? Thanks again, Daniel

2 1