- dovecot - dovecot.org

[Dovecot] Struggle with Postfix/Dovecot-auth and SASL
by Ingo Reimann 03 Mar '07

03 Mar '07

Hi List, I just updated an old sendmail installation to a modern postfix/dovecot system with mysql backend. Everything works fine but SMTP-AUTH fails with some clients. The problem is, that with PLAIN (old) clients send the base64 coded form: USERNAME\0USERNAME\0PASSWORD which, as i understand dovecot interprets as MASTERUSER\0USERNAME\PASSWORD. New clients send \0USERNAME\0PASSWORD which works fine. I don`t like to use masterusers, because then everyone would be able to log in as someone else. When i don`t have a passdb with master=yes in my dovecot.conf, Dovecot complains auth(default): passdb(XXXX(a)YYY.TLD,master): Attempted master login with no master passdbs If i create a passdb with contains everyone, everyone may look into other mailboxes. No good idea. I can`t change the old clients, but for now, i don`t know, what i am doing wrong or how to correct it. No real HowTo for my setup on the net, it seems that everyone uses cyrus-sasl. May anybody help, because i don`t like to switch my setup or use 2 auth daemons. My System: Debian Etch, postfix (2.3.7-3), dovecot (1.0.rc15-2) Best wishes, Ingo Reimann System Manager -------------------------------------------------------------------- ICSmedia GmbH in Münster: Soester Straße 13, 48155 Münster in Dortmund: Mönchenwordt 5, 44137 Dortmund im Internet: http://www.icsmedia.de Telefon: (0251) 60 60-403 Telefax: (0251) 60 60-190 E-Mail: ingo.reimann(a)icsmedia.de -------------------------------------------------------------------- Geschäftsführung: Frank Wulf Sitz der Gesellschaft: Münster Amtsgericht: Münster HRB: 46 97

3 2

[Dovecot] Fwd: logging of socket authentication
by Timo Sirainen 02 Mar '07

02 Mar '07

..and I sent this from wrong user account.. And I'm not even drinking :P Begin forwarded message: > From: Timo Sirainen <timo.sirainen(a)procontrol.fi> > Date: 2. maaliskuuta 2007 23.44.34 GMT+02:00 > To: lrosa(a)hypertrek.info > Cc: Dovecot Mailing List <dovecot(a)dovecot.org> > Subject: Re: [Dovecot] logging of socket authentication > > On 2.3.2007, at 23.42, Timo Sirainen wrote: > >> On 2.3.2007, at 16.41, Luigi Rosa wrote: >> >>> I finally and happly discarded Postfix Cyrus SASL authentication >>> and replaced it with Dovecot socket listen {client{}} >>> >>> Am I missing something, or Dovecot does not log the >>> authentication events? >> >> If you have auth_verbose=yes it does log them. If you're still not >> seeing them, it's probably a permission problem. See logging in >> http://wiki.dovecot.org/LDA > > Uh. What was I thinking. Of course LDA has nothing to do with > dovecot-auth. So auth_verbose=yes is the only thing I can think of..

1 0

[Dovecot] logging of socket authentication
by Luigi Rosa 02 Mar '07

02 Mar '07

I finally and happly discarded Postfix Cyrus SASL authentication and replaced it with Dovecot socket listen {client{}} Am I missing something, or Dovecot does not log the authentication events? Ciao, luigi -- / +--[Luigi Rosa]-- \ Chi non beve birra ha torto.

2 1

[Dovecot] Upgrade dovecot - rpm or spec
by Alfredo Marzal 02 Mar '07

02 Mar '07

>Thanks Axel, > >Yes, I did : RHEL4 dovecot-0.99.11-4.EL4 > > but dovecot-0.99 is not longer suported, isn't it?? > >Alfredo Axel, I would like to get a stable package, the available version < dovecot-1.0-3_47.rc24.el4.at.i386.rpm<http://dl.atrpms.net/all/dovecot-1.0-3_47.rc24.el4.at.i386.rpm>> will work without problems on my RH ES 4 ? Thanks, Alfredo

2 1

[Dovecot] Upgrade dovecot - rpm or spec
by Alfredo Marzal 02 Mar '07

02 Mar '07

On Fri, Mar 02, 2007 at 10:53:16AM -0500, Alfredo Marzal wrote: >* His Friends, *> >* I've been using dovecot-1.0.alpha5 for a long time, now i would like to *>* update to v.1.0.rc24 on my Red Hat ES 4 machine, so i need an rpm version * >* that i couldn't find on the web. Also now i can build the rpm package via * >* SPECS, which i don't have. Plis, anybody would help? > *>Have you checked the wiki? > > http://wiki.dovecot.org/PrebuiltBinaries<http://wiki.dovecot.org/PrebuiltBinaries> > There are up to date RHEL packages at ATrpms. >* Thanks in advanced, *>* *>* Alfredo * -- Axel.Thimm at ATrpms.net Thanks Axel, Yes, I did : RHEL4 dovecot-0.99.11-4.EL4 but dovecot-0.99 is not longer suported, isn't it?? Alfredo

1 0

[Dovecot] Upgrade dovecot - rpm or spec
by Alfredo Marzal 02 Mar '07

02 Mar '07

His Friends, I've been using dovecot-1.0.alpha5 for a long time, now i would like to update to v.1.0.rc24 on my Red Hat ES 4 machine, so i need an rpm version that i couldn't find on the web. Also now i can build the rpm package via SPECS, which i don't have. Plis, anybody would help? Thanks in advanced, Alfredo

2 1

[Dovecot] Stopping certain users from using IMAP, or POP3, etc.
by David Craigon 02 Mar '07

02 Mar '07

Hi there, I'm building a mail system for an ISP. We want to be able to turn on or off IMAP or POP3 access for certain customers- basically we want to be able to offer a customer POP3 access, unless they pay us some more money, in which case they get IMAP The username and password will remain the same, and are driven out of a postgres database. The best way I've though of doing this so far is by defining separate auth systems for IMAP and POP. Is this the best way? A gold star is available if you can think of a way that if they try and use IMAP but haven't paid for it it rejects them with "Give us all your money..." or some such. Thanks very much for your help, David Griffin Information Systems Ltd 20 St Christopher's Way, Pride Park, Derby DE24 8JY www.griffin.com <http://www.griffin.com/> Registered in England and Wales. Company Registration Number: 3676297.

2 1

[Dovecot] Doing %var-substitutions in a plugin...
by Nicolas Boullis 02 Mar '07

02 Mar '07

Hi, I'm trying to write a plugin that need to do some %var-substitution. Is there a way to get the var_expand_table used by the process? If not, I guess I could use getenv("USER") (for %u, %n and %d) and getenv("HOME") (for %h); but what for the other ones? Cheers, Nicolas

2 3

[Dovecot] Thunderbird : open() failed with index file /home/XYZ/mail/.imap/Trash/dovecot.index: Not a directory
by Charles Bueche 02 Mar '07

02 Mar '07

Hi, almost everything is in the subject. Server : Solaris 9 /SPARC, Dovecot 1.0.rc22 Client : Mac OS X 10.4.8 (8L2127) Kernel-Version: Darwin 8.8.1 Thunderbird is: german Version 1.5.0.9 (20061207) With OS X Mail.app, message deletion works. With Thunderbird, a warning popup appear on the desktop. English translation is about "command failed, internal error occurred". The server log shows : > Mar 1 10:50:35 ZZZ dovecot: [ID 107833 mail.error] IMAP(XYZ): open > () failed with index file /home/XYZ/mail/.imap/Trash/dovecot.index: > Not a directory After checking, I see "Trash plugin was more or less broken with multiple namespaces and with multiple trash mailboxes" in rc24 release notes. Would an update to rc24 fix my user's issue ? Hints welcome, Charles -- Charles Bueche <charles(a)bueche.ch> sand, snow, wave, wind and net -surfer A-Cat SUI 192

2 7

[Dovecot] (auth) killed with signal 11
by Marc Perkel 01 Mar '07

01 Mar '07

Running rc24 and with one user in particular they are getting "(auth) killed with signal 11" when trying to pop email. IMAP works. What causes this?

3 4

[Dovecot] Deleting when Over Quota
by Daniel Watts 01 Mar '07

01 Mar '07

Hi All, I've read a bit about this but don't really see a full solution anywhere. Has anyone actually got a good fix for this? Telling a user they are over quota then not allowing them to delete anything does seem the height of perversion. =) Question is - is this even a problem for the IMAP server? Or should the MUA be detecting over quota problems and then issuing the right commands to delete messages WITHOUT the copy to Trash? Lastly - even if it is the MUA's responsibility - will Dovecot not still have a problem with indexes? I suspect perhaps not if: A. When using FS Quotas you store the indexes in a non quota partition B. When using other quotas (dirsize / maildir++), Dovecot does not count the index files when counting up the usage. Is B true? Best wishes, Daniel

2 1

[Dovecot] Still issues with new message count...
by Brian Taber 01 Mar '07

01 Mar '07

I am still having issues with new message count. When I move a message to another folder, it counts that message as new until you go into that folder. Is there a way I can solve this? Could it have something to do with NFS? I have tried all the NF workarounds with no luck... I have also tried NFSv3 and NFSv4, no difference. I store the indexes on the local drive...

3 3

Re: [Dovecot] POP Problem
by Marc Perkel 01 Mar '07

01 Mar '07

Charles Marcus wrote: > On 2/23/2007 Marc Perkel wrote: >> >> Marc Perkel wrote: >> > Getting an error on POP only - "Authentication Server Isn't Connected" >> > >> > IMAP works fine. >> > >> > This used to work. not sure what changed. >> > >> >> my settings: >> >> >> ## Dovecot 1.0 configuration file > > Ahem... > > Please, this is what dovecot -n is for... otherwise we have to wade > through the entire .conf file, comments and all... > Thanks - I didn't know about that. # /etc/dovecot.conf log_path: /var/log/dovecot info_log_path: /var/log/dovecot protocols: imap imaps pop3 pop3s ssl_cert_file: /usr/share/ssl/certs/imapd.pem ssl_key_file: /usr/share/ssl/certs/imapd.pem disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_process_per_connection: no login_process_size: 64 default_mail_env: mbox:/vhome/%d/home/%n:INBOX=/vhome/%d/home/%n/INBOX:INDEX=/nobackup/imap-cache/%d-%n mail_location: mbox:/vhome/%d/home/%n:INBOX=/vhome/%d/home/%n/INBOX:INDEX=/nobackup/imap-cache/%d-%n mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %v.%u auth default_with_listener: passdb: driver: passwd-file args: /etc/vmail/shadow.%d userdb: driver: passwd-file args: /etc/vmail/passwd.%d socket: type: listen client: master: path: /var/run/dovecot/auth-master mode: 438 auth default: debug_passwords: yes passdb: driver: pam passdb: driver: passwd-file args: /etc/vmail/shadow.%d userdb: driver: passwd userdb: driver: passwd-file args: /etc/vmail/passwd.%d

2 1

[Dovecot] Dovecot Plugins - ACL
by FreeStyle 01 Mar '07

01 Mar '07

Hi We run "Dovecot 1.0 Stable" when I try to use the ACL plugin I get the following message: Error: Error in configuration file /etc/dovecot.conf line 391: Unknown setting: mail_plugins Are plugins unsupported in our version, or could this be something else? Thanks, Darren. |------------------------------------------------------------------------------- Any opinions expressed in the E-mail are those of the individual and not necessarily those of FreeStyleGames Ltd. This E-mail and any files with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivering to the intended recipient, please be advised that you have received this E-mail in error - please notify info(a)freestylegames.com -------------------------------------------------------------------------------|

2 1

Re: [Dovecot] Dovecot rc23 and rc24 freeze after authentication
by Garret Huntress 01 Mar '07

01 Mar '07

Machine: Quad 2GHz Opterons, 8GB Mem OS: Fedora Core 5 (Linux mail1.ciw.edu 2.6.17-1.2187_FC5 #1 SMP Mon Sep 11 01:16:59 EDT 2006 x86_64 x86_64 x86_64 GNU/Linux) Output from dovecot -n (now in rc22): # /etc/dovecot.conf base_dir: /srv/Apps/dovecot/ log_path: /var/log/dovecot/dovecot.log protocols: imap imaps pop3s ssl_ca_file: /etc/pki/tls/certs/ciw.edu-ca_cert.pem ssl_cert_file: /etc/pki/tls/certs/mail.ciw.edu-cert.pem ssl_key_file: /etc/pki/tls/private/mail.ciw.edu-key.pem login_dir: /srv/Apps/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_max_processes_count: 1024 default_mail_env: maildir:%h/Maildir mail_location: maildir:%h/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins: acl mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle imap_client_workarounds(imap): delay-newmail outlook-idle imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / location: maildir:%h/Maildir inbox: yes namespace: type: private separator: / prefix: CIW Archived/ location: maildir:%h/Mailarchive namespace: type: public separator: / prefix: CIW Groups/ location: maildir:/srv/Export/Groups:CONTROL=%h/Maildir/public- subscriptions:INDEX=%h/Maildir/public-index auth default: passdb: driver: pam args: session=yes dovecot userdb: driver: passwd cat of /etc/pam.d/dovecot #%PAM-1.0 auth required pam_nologin.so auth include od-auth account include od-auth session include od-auth cat of /etc/pam.d/od-auth #%PAM-1.0 auth required pam_env.so auth sufficient pam_krb5.so auth required pam_deny.so account required pam_ldap.so session optional pam_mkhomedir.so skel=/etc/skel umask=077 session required pam_limits.so session required pam_krb5.so session required pam_ldap.so Logs from when it occurred (usernames modified) dovecot: Feb 26 11:50:15 Info: IMAP(user1): Disconnected: Logged out dovecot: Feb 26 11:50:16 Info: IMAP(user1): Disconnected: Logged out dovecot: Feb 26 11:50:16 Info: IMAP(user1): Disconnected: Logged out dovecot: Feb 26 11:50:16 Info: imap-login: Disconnected: rip=10.1.1.254, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:50:16 Info: IMAP(user2): Disconnected: Logged out dovecot: Feb 26 11:50:16 Info: imap-login: Login: user=<user3>, method=PLAIN, rip=10.1.20.232, lip=10.1.248.31, TLS dovecot: Feb 26 11:50:17 Info: imap-login: Login: user=<user4>, method=PLAIN, rip=10.1.20.253, lip=10.1.248.31, TLS dovecot: Feb 26 11:50:17 Info: imap-login: Disconnected: rip=10.1.20.233, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:50:19 Info: imap-login: Login: user=<user5>, method=PLAIN, rip=4.21.98.3, lip=10.1.248.31, TLS dovecot: Feb 26 11:50:20 Info: imap-login: Disconnected: Shutting down: method=PLAIN, rip=10.1.15.194, lip=10.1.248.31, TLS dovecot: Feb 26 11:50:21 Info: imap-login: Login: user=<user1>, method=PLAIN, rip=10.1.1.254, lip=10.1.248.31, TLS dovecot: Feb 26 11:50:45 Info: IMAP(user6): Disconnected: Logged out dovecot: Feb 26 11:50:46 Info: imap-login: Login: user=<user1>, method=PLAIN, rip=10.1.1.254, lip=10.1.248.31, TLS dovecot: Feb 26 11:50:53 Info: IMAP(user7): Disconnected: Logged out dovecot: Feb 26 11:50:53 Info: imap-login: Disconnected: rip=10.1.15.170, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:50:54 Info: imap-login: Login: user=<user1>, method=PLAIN, rip=10.1.1.254, lip=10.1.248.31, TLS dovecot: Feb 26 11:50:57 Info: IMAP(user3): Disconnected: Logged out dovecot: Feb 26 11:50:57 Info: imap-login: Login: user=<user8>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:50:57 Info: IMAP(user8): Disconnected dovecot: Feb 26 11:50:58 Info: imap-login: Login: user=<user9>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:50:58 Info: IMAP(user9): Disconnected dovecot: Feb 26 11:50:59 Info: imap-login: Login: user=<user10>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:50:59 Info: IMAP(user10): Disconnected dovecot: Feb 26 11:51:00 Info: imap-login: Login: user=<user11>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:00 Info: IMAP(user11): Disconnected dovecot: Feb 26 11:51:01 Info: imap-login: Login: user=<user12>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:01 Info: IMAP(user12): Disconnected dovecot: Feb 26 11:51:02 Info: imap-login: Login: user=<user13>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:02 Info: IMAP(user13): Disconnected dovecot: Feb 26 11:51:03 Info: imap-login: Login: user=<user14>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:03 Info: IMAP(user14): Disconnected dovecot: Feb 26 11:51:04 Info: imap-login: Login: user=<user15>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:04 Info: IMAP(user15): Disconnected dovecot: Feb 26 11:51:05 Info: imap-login: Login: user=<user16>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:05 Info: IMAP(user16): Disconnected dovecot: Feb 26 11:51:06 Info: imap-login: Login: user=<user17>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:06 Info: IMAP(user17): Disconnected: Logged out dovecot: Feb 26 11:51:07 Info: imap-login: Login: user=<user16>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:08 Info: imap-login: Login: user=<user9>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:08 Info: IMAP(user9): Disconnected dovecot: Feb 26 11:51:09 Info: imap-login: Login: user=<user17>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:09 Info: IMAP(user17): Disconnected: Logged out dovecot: Feb 26 11:51:10 Info: IMAP(user18): Disconnected: Logged out dovecot: Feb 26 11:51:10 Info: imap-login: Login: user=<user10>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:10 Info: imap-login: Login: user=<user8>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:10 Info: IMAP(user8): Disconnected: Logged out dovecot: Feb 26 11:51:11 Info: IMAP(user10): Disconnected: Logged out dovecot: Feb 26 11:51:11 Info: imap-login: Login: user=<user17>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:11 Info: imap-login: Login: user=<user19>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:11 Info: IMAP(user19): Disconnected: Logged out dovecot: Feb 26 11:51:12 Info: IMAP(user17): Disconnected dovecot: Feb 26 11:51:12 Info: imap-login: Login: user=<user17>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:12 Info: imap-login: Login: user=<user9>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:12 Info: IMAP(user17): Disconnected: Logged out dovecot: Feb 26 11:51:13 Info: imap-login: Login: user=<user19>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:13 Info: imap-login: Login: user=<user8>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:14 Info: IMAP(user19): Disconnected: Logged out dovecot: Feb 26 11:51:14 Info: IMAP(user8): Disconnected: Logged out dovecot: Feb 26 11:51:14 Info: imap-login: Login: user=<user17>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:14 Info: imap-login: Login: user=<user17>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:15 Info: IMAP(user17): Disconnected: Logged out dovecot: Feb 26 11:51:15 Info: IMAP(user17): Disconnected dovecot: Feb 26 11:51:15 Info: imap-login: Login: user=<user19>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:15 Info: imap-login: Login: user=<user17>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:15 Info: IMAP(user17): Disconnected dovecot: Feb 26 11:51:16 Info: IMAP(user19): Disconnected: Logged out dovecot: Feb 26 11:51:16 Info: imap-login: Login: user=<user17>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:16 Info: imap-login: Login: user=<user15>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:16 Info: IMAP(user17): Disconnected dovecot: Feb 26 11:51:16 Info: IMAP(user15): Disconnected: Logged out dovecot: Feb 26 11:51:17 Info: imap-login: Login: user=<user17>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:17 Info: IMAP(user17): Disconnected dovecot: Feb 26 11:51:21 Info: imap-login: Login: user=<user12>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:21 Info: IMAP(user12): Disconnected: Logged out dovecot: Feb 26 11:51:21 Info: imap-login: Login: user=<user17>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:21 Info: IMAP(user17): Disconnected: Logged out dovecot: Feb 26 11:51:22 Info: imap-login: Login: user=<user12>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:22 Info: IMAP(user12): Disconnected: Logged out dovecot: Feb 26 11:51:22 Info: imap-login: Login: user=<user12>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:23 Info: IMAP(user12): Disconnected: Logged out dovecot: Feb 26 11:51:31 Info: imap-login: Login: user=<user15>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:31 Info: IMAP(user15): Disconnected: Logged out dovecot: Feb 26 11:51:31 Info: imap-login: Login: user=<user15>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:31 Info: IMAP(user15): Disconnected: Logged out dovecot: Feb 26 11:51:53 Info: imap-login: Login: user=<user20>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:51:54 Info: IMAP(user20): Disconnected: Logged out dovecot: Feb 26 11:51:59 Info: imap-login: Login: user=<user1>, method=PLAIN, rip=10.1.1.254, lip=10.1.248.31, TLS dovecot: Feb 26 11:52:01 Info: imap-login: Login: user=<user21>, method=PLAIN, rip=129.49.95.41, lip=10.1.248.31, TLS dovecot: Feb 26 11:53:07 Info: IMAP(user16): Disconnected dovecot: Feb 26 11:53:08 Info: IMAP(user1): Disconnected: Logged out dovecot: Feb 26 11:53:08 Info: IMAP(user1): Disconnected: Logged out dovecot: Feb 26 11:53:08 Info: IMAP(user1): Disconnected: Logged out dovecot: Feb 26 11:53:08 Info: IMAP(user1): Disconnected: Logged out dovecot: Feb 26 11:53:08 Info: imap-login: Disconnected: rip=10.1.20.233, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:53:08 Info: imap-login: Disconnected: rip=10.1.1.254, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:53:08 Info: imap-login: Disconnected: rip=10.1.15.170, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:53:08 Info: imap-login: Login: user=<user21>, method=PLAIN, rip=129.49.95.41, lip=10.1.248.31, TLS dovecot: Feb 26 11:53:09 Info: imap-login: Login: user=<user22>, method=PLAIN, rip=10.1.15.187, lip=10.1.248.31, TLS dovecot: Feb 26 11:53:09 Info: imap-login: Login: user=<user23>, method=PLAIN, rip=10.1.15.170, lip=10.1.248.31, TLS dovecot: Feb 26 11:53:10 Info: imap-login: Login: user=<user24>, method=PLAIN, rip=68.8.68.149, lip=10.1.248.31, TLS dovecot: Feb 26 11:53:12 Info: IMAP(user9): Disconnected dovecot: Feb 26 11:53:29 Info: IMAP(user25): Disconnected: Logged out dovecot: Feb 26 11:53:29 Info: imap-login: Login: user=<user26>, method=PLAIN, rip=216.9.249.213, lip=10.1.248.31, TLS dovecot: Feb 26 11:53:30 Info: IMAP(user26): Disconnected: Logged out dovecot: Feb 26 11:53:31 Info: imap-login: Login: user=<user24>, method=PLAIN, rip=68.8.68.149, lip=10.1.248.31, TLS dovecot: Feb 26 11:54:40 Info: IMAP(user27): Disconnected: Logged out dovecot: Feb 26 11:54:40 Info: IMAP(user27): Disconnected: Logged out dovecot: Feb 26 11:54:41 Info: imap-login: Disconnected: rip=10.1.15.156, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:54:41 Info: imap-login: Disconnected: rip=10.1.15.170, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:54:42 Info: imap-login: Login: user=<user28>, method=PLAIN, rip=10.1.2.21, lip=10.1.248.31, TLS dovecot: Feb 26 11:54:43 Info: imap-login: Disconnected: Shutting down: rip=10.1.15.207, lip=10.1.248.31, TLS dovecot: Feb 26 11:54:44 Info: imap-login: Login: user=<user22>, method=PLAIN, rip=10.1.15.187, lip=10.1.248.31, TLS dovecot: Feb 26 11:54:44 Info: IMAP(user22): Disconnected: Logged out dovecot: Feb 26 11:54:45 Info: imap-login: Login: user=<user29>, method=PLAIN, rip=10.1.15.147, lip=10.1.248.31, TLS dovecot: Feb 26 11:55:42 Info: IMAP(user28): Disconnected: Logged out dovecot: Feb 26 11:55:42 Info: IMAP(user28): Disconnected: Logged out dovecot: Feb 26 11:55:42 Info: IMAP(user28): Disconnected: Logged out dovecot: Feb 26 11:55:43 Info: IMAP(user28): Disconnected: Logged out dovecot: Feb 26 11:55:43 Info: IMAP(user28): Disconnected: Logged out dovecot: Feb 26 11:55:43 Info: imap-login: Disconnected: rip=10.1.20.232, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:55:43 Info: imap-login: Disconnected: rip=10.1.2.21, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:55:43 Info: imap-login: Login: user=<user29>, method=PLAIN, rip=10.1.15.147, lip=10.1.248.31, TLS dovecot: Feb 26 11:55:43 Info: imap-login: Login: user=<user6>, method=PLAIN, rip=10.1.20.128, lip=10.1.248.31, TLS dovecot: Feb 26 11:55:43 Info: imap-login: Login: user=<user16>, method=PLAIN, rip=10.1.15.207, lip=10.1.248.31, TLS dovecot: Feb 26 11:55:44 Info: imap-login: Login: user=<user29>, method=PLAIN, rip=10.1.15.147, lip=10.1.248.31, TLS dovecot: Feb 26 11:55:44 Info: imap-login: Disconnected: rip=10.1.20.233, lip=10.1.248.31, TLS dovecot: Feb 26 11:55:45 Info: imap-login: Login: user=<user18>, method=PLAIN, rip=10.1.15.142, lip=10.1.248.31, TLS dovecot: Feb 26 11:56:45 Info: IMAP(user29): Disconnected: Logged out dovecot: Feb 26 11:56:45 Info: IMAP(user29): Disconnected: Logged out dovecot: Feb 26 11:56:45 Info: IMAP(user29): Disconnected: Logged out dovecot: Feb 26 11:56:45 Info: imap-login: Disconnected: rip=10.1.15.147, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:56:45 Info: imap-login: Login: user=<user1>, method=PLAIN, rip=10.1.1.254, lip=10.1.248.31, TLS dovecot: Feb 26 11:56:45 Info: imap-login: Login: user=<user18>, method=PLAIN, rip=10.1.15.142, lip=10.1.248.31, TLS dovecot: Feb 26 11:56:45 Info: IMAP(user18): Disconnected: Logged out dovecot: Feb 26 11:56:46 Info: imap-login: Disconnected: rip=10.1.2.21, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:56:46 Info: imap-login: Disconnected: rip=10.1.2.21, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:56:47 Info: IMAP(user30): Disconnected for inactivity dovecot: Feb 26 11:56:47 Info: imap-login: Disconnected: rip=10.1.2.21, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:56:47 Info: imap-login: Disconnected: rip=10.1.2.21, lip=10.1.248.31, TLS handshake dovecot: Feb 26 11:56:48 Info: imap-login: Login: user=<user31>, method=PLAIN, rip=160.111.107.74, lip=10.1.248.31, TLS dovecot: Feb 26 11:56:48 Info: imap-login: Login: user=<user1>, method=PLAIN, rip=10.1.1.254, lip=10.1.248.31, TLS dovecot: Feb 26 11:56:48 Info: imap-login: Login: user=<user32>, method=PLAIN, rip=10.1.15.139, lip=10.1.248.31, TLS dovecot: Feb 26 11:56:52 Info: IMAP(user1): Disconnected: Logged out dovecot: Feb 26 11:56:53 Info: imap-login: Login: user=<user28>, method=PLAIN, rip=10.1.2.21, lip=10.1.248.31, TLS dovecot: Feb 26 11:57:04 Info: IMAP(user28): Disconnected: Logged out dovecot: Feb 26 11:57:04 Info: imap-login: Login: user=<user12>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:57:04 Info: IMAP(user12): Disconnected dovecot: Feb 26 11:57:05 Info: imap-login: Login: user=<user33>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:57:05 Info: IMAP(user33): Disconnected dovecot: Feb 26 11:57:06 Info: imap-login: Login: user=<user16>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:57:06 Info: IMAP(user16): Disconnected dovecot: Feb 26 11:57:07 Info: imap-login: Login: user=<user34>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 26 11:57:07 Info: IMAP(user34): Disconnected dovecot: Feb 26 11:57:09 Info: imap-login: Login: user=<user35>, method=PLAIN, rip=10.1.15.136, lip=10.1.248.31, TLS dovecot: Feb 26 11:57:21 Warning: Killed with signal 15 dovecot: Feb 26 11:57:21 Info: Dovecot v1.0.rc23 starting upuser1

2 1

[Dovecot] Event on Logout
by Luca Bertoncello 01 Mar '07

01 Mar '07

Hi, @all! Is it possible, with Dovecot, to do something (eg: an SQL-Query) when the User logs out (POP3) or do some action (IMAP)? My problem is to notify a DB when the user logs out or delete E-Mail (in this case, just for IMAP). Thanks for your answer! P.S.: if it is NOT possible, it is my Hit for the next version! :) -- _______________________________ Luca Bertoncello -Programmierung / Mailserver- IMS Internet-Media-Service GmbH Bayrische Str. 18 01069 Dresden Geschäftsführer: Axel C.E. Wittig Registergericht: Amtsgericht Dresden HRB 12 899 Fon: +49 351 2112034 Fax: +49 351 2112020 E-Mail: bertoncello(a)internet24.de

2 2

[Dovecot] fs quota - what I am doing wrong?
by Václav Hůla 01 Mar '07

01 Mar '07

Hi everyone, on my server, i have quota set on /home partition (ext3). mount says: root@zen:/var/log# mount |grep quo /dev/sda8 on /home type ext3 (rw,noatime,usrquota) /dev/sda7 on /tmp type ext3 (rw,noatime,usrquota,data=writeback) System is debian/stable (distribution 2.6.8-3-686-smp kernel), quotas are working: root@zen:/var/log# quota ax Disk quotas for user ax (uid 506): Filesystem blocks quota limit grace files quota limit grace /dev/sda8 148064 250000 300000 7066 0 0 /dev/sda7 16 10000 300000 5 0 0 but dovecot has trouble with them: root@zen:/var/log# grep ax mail.err |tail -n 4 Feb 26 15:02:27 zen dovecot: IMAP(ax): quotactl(Q_GETQUOTA, /dev/sda8) failed: Invalid argument Feb 26 15:02:27 zen dovecot: IMAP(ax): Dovecot was compiled with Linux quota v2 support, try changing it (--with-linux-quota configure option) Feb 26 15:03:28 zen dovecot: IMAP(ax): quotactl(Q_GETQUOTA, /dev/sda8) failed: Invalid argument Feb 26 15:03:28 zen dovecot: IMAP(ax): Dovecot was compiled with Linux quota v2 support, try changing it (--with-linux-quota configure option) In sheer desperation I compiled dovecot with v1 quotas, but that fails too. Can anyone point me into right direction? Ax -- Václav Hůla, správce unixových serverů Přírodovědecká fakulta Univerzita Karlova v Praze

3 6

[Dovecot] How to Prevent IMAP Folders being moved, deleted or renamed
by FreeStyle 01 Mar '07

01 Mar '07

Hello I use exim/dovecot combination for mail delivery and pickup and I'm wondering how I can prevent users from moving, deleting or renaming particular IMAP folders. I use the MailDir mailbox format. The reason for doing this is that I have some special exim filters which deliver mail to specified directories. I don't want users to be able to change these folders because it will mess up the filtering. Also my mail client (Thunderbird) doesn't check the filter folders automatically is there an option in dovecot that lets you send notification to clients when new messages arrive in certain folders. more info: http://kb.mozillazine.org/How_do_I_check_for_new_messages_in_other_folders

3 2

[Dovecot] segv when Mailbox is in inconsistent state, please relogin.
by Steffen Kaiser 01 Mar '07

01 Mar '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, for testing I have different filesystems on various block devices, which I mount on /mnt/mailcache as needed; however, the indexes and caches are located on /var/cache, hence, they get out of sync easily. No offense. Hoever, the web page (http://dovecot.org/bugreport.html) states that every signal 11 is a bug and will be fixed, so here it goes: running Linux x32, Debian Etch, Dovecot rc23, MUA: Thunderbird. It occurs to me that the data on /var/cache must be younger than the one on /mnt/mailcache; e.g. when you re-login after the segv, it works fine. There seems to be one segv per folder with messages. Logs: dovecot: Feb 21 14:40:54 Info: IMAP(dvtest): Loading modules from directory: /usr/local/lib/dovecot/imap dovecot: Feb 21 14:40:54 Info: IMAP(dvtest): Module loaded: /usr/local/lib/dovecot/imap/lib10_quota_plugin.so dovecot: Feb 21 14:40:54 Info: IMAP(dvtest): Module loaded: /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so dovecot: Feb 21 14:40:54 Info: IMAP(dvtest): Effective uid=1012, gid=1000, home=/home/dvtest dovecot: Feb 21 14:40:54 Info: IMAP(dvtest): maildir: data=/mnt/mailcache/dvtest/MailDir:CONTROL=/var/cache/dovecot/1012/control:INDEX=/var/cache/dovecot/1012/index dovecot: Feb 21 14:40:54 Info: IMAP(dvtest): maildir: root=/mnt/mailcache/dvtest/MailDir, index=/var/cache/dovecot/1012/index, control=/var/cache/dovecot/1012/control, inbox= dovecot: Feb 21 14:40:54 Info: IMAP(dvtest): fs quota add storage dir = /mnt/mailcache/dvtest/MailDir dovecot: Feb 21 14:40:54 Info: IMAP(dvtest): fs quota block device = /dev/mapper/mailstaff-mailcache dovecot: Feb 21 14:40:54 Info: IMAP(dvtest): fs quota mount point = /mnt/mailcache dovecot: Feb 21 14:40:54 Info: IMAP(dvtest): Disconnected: Mailbox is in inconsistent state, please relogin. ==> dovecot.log <== dovecot: Feb 21 14:40:54 Error: IMAP(dvtest): Maildir /mnt/mailcache/dvtest/MailDir sync: UID < next_uid (1 < 2, file = 1171969061.P22107Q0M366705.ux-2s11-9:2,S) dovecot: Feb 21 14:40:54 Error: IMAP(dvtest): Sending log messages too fast, throttling.. dovecot: Feb 21 14:40:54 Error: child 27323 (imap) killed with signal 11 ==> dovecot.info <== dovecot: Feb 21 14:41:02 Info: IMAP(dvtest): Disconnected: Logged out gdb output: warning: Can't read pathname for load map: Input/output error. Reading symbols from /lib/tls/i686/cmov/libdl.so.2...done. Loaded symbols for /lib/tls/i686/cmov/libdl.so.2 Reading symbols from /lib/tls/i686/cmov/libc.so.6...done. Loaded symbols for /lib/tls/i686/cmov/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so Core was generated by `imap [dvtest 10.20.10.63]'. Program terminated with signal 11, Segmentation fault. #0 o_stream_uncork (stream=0x0) at ostream.c:60 60 if (stream->closed) (gdb) bt full #0 o_stream_uncork (stream=0x0) at ostream.c:60 _stream = <value optimized out> #1 0x0805ba08 in _client_input (context=0x80df0f0) at client.c:431 client = (struct client *) 0x80df0f0 cmd = (struct client_command_context *) 0x80df134 #2 0x080ba550 in io_loop_handler_run (ioloop=0x80dd9b0) at ioloop-select.c:139 tv = {tv_sec = 0, tv_usec = 984000} io = (struct io *) 0x80df230 t_id = 2 ret = 1 #3 0x080b9868 in io_loop_run (ioloop=0x80dd9b0) at ioloop.c:284 No locals. #4 0x08063910 in main (argc=Cannot access memory at address 0x2 ) at main.c:285 No locals. :~# dovecot -n # /usr/local/etc/dovecot.conf log_path: /var/tmp/dovecot.log info_log_path: /var/tmp/dovecot.info ssl_disable: yes disable_plaintext_auth: no verbose_ssl: yes login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login verbose_proctitle: yes mail_location: maildir:/mnt/mailcache/%u/MailDir:CONTROL=/var/cache/dovecot/%i/control:INDEX=/var/cache/dovecot/%i/index mail_debug: yes mail_drop_priv_before_exec: yes mail_plugins: quota imap_quota auth default: mechanisms: plain login cache_size: 10 verbose: yes debug: yes debug_passwords: yes passdb: driver: pam args: cache_key=%u dovecot userdb: driver: passwd plugin: quota: fs Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBRdxPmi9SORjhbDpvAQLTnQf/Qms2Ffp2g4tx0llz8UiaGdF27sRJLsHO UaF/aMmXL8E4Q6CXhbTMqU3Qzcczko6cnMuYKkL8m3OMNwosLccWoOpxqB1PAu5Y 4CtEpDt/v8O2m6OAFFk9UCXTtH4dZP41qrGHNpzj/8Bs597difLWe7N/nTl4K95f cS1n4NULV0+scSub1CfZkvHZeSxAHgr9e0zGby/PRPbsHeDG++NgwAfXR2zQVyEj vWWjDawD/5W9xlF8+eQ3fxVlil5xYLN8/t5C/2CDaR0nc/WXKk+PZFdpBkD22S5j iQN5zsX8Qf0FHxxm0eX1EsrKZKvvUeBQEMcqqcKXpT4F8L8pxfyRhg== =XMpZ -----END PGP SIGNATURE-----

3 4

[Dovecot] Force "lower case" Folder Creation?
by Rich, Whidbey Telecom 28 Feb '07

28 Feb '07

We're exploring the use of "plus addressing" in our MTA (Exim), which delivers "user+topic(a)domain.com" to a user's "topic" folder. However, the case-sensitive nature of our ext3 filesystem means that a message destined to "topic" won't deliver to a user's "Topic" folder. For example, if a user creates a "Topic" folder, and gives "user+Topic(a)domain.com" to a web form that lower-cases it, delivery is deferred. Although we're checking to see if Exim can workaround this, is there a way Dovecot (1.0rc24) can force lowercase folder names without a patch? We'd hate to do this but are exploring our options. Thanks! Rich

2 3

[Dovecot] 1.0rc_15 - imap-login disappearing
by James Pattinson 28 Feb '07

28 Feb '07

Hi All I am trying to troubleshoot a problem that's been bugging me for several months. About once or twice per week my IMAP server seems to get in a state where no connections are possible (Thunderbird hangs at "Connected to <server>"). Restarting dovecot completely fixes the problem, until it occurs again, hours or days later. I caught the problem today after I rebooted my server, and monitored the running processes while attempting to connect. After each connection attempt, the number of imap-idle processes running decremented until none at all were running. Before the final imap-login process died, I attached an instance of strace to it - results here: http://www.pasteserver.net/286 I am running Dovecot 1.0_rc15 on a Gentoo server. It's a vmware virtual server - mentioning this now just in case, but I'm confident that's not anything to do with it, no other services are having any problems that I am aware of. I am using TLS and Maildir. I don't know enough about how dovecot is supposed to work, so I would appreciate some help in diagnosing this problem! Cheers, James

4 9

[Dovecot] Move deleted to trash
by Brian Taber 28 Feb '07

28 Feb '07

Is there a way to have messages marked to be deleted move to the trash folder automatically? I have moved from courier-imap (which dovecot performs muck better) but the one feature I really need is move to trash. Is there any plugins available for this?

3 2

[Dovecot] mail-log: Same log entry when one deletes/undeletes an e-mail.
by Tan Shao Yi 28 Feb '07

28 Feb '07

Hi Timo, I'm on RC24 with the mail-log plugin. It seems that when one deletes or undeletes a message, the log entries are the same: Deletion: dovecot: Feb 23 09:15:18 Info: IMAP(tansy): deleted: uid=4613, msgid=<E327C631261CD311BBAE00E081103C0901600871(a)ritchie.dev.virpack.com> Undelete: dovecot: Feb 23 09:15:24 Info: IMAP(tansy): deleted: uid=4613, msgid=<E327C631261CD311BBAE00E081103C0901600871(a)ritchie.dev.virpack.com> Is it a bug? :) Cheers.

2 1

[Dovecot] permissions problem reading INBOX
by K. Clair 28 Feb '07

28 Feb '07

Hello, I'm sorry if I'm asking something that is documented - I could swear I saw something about this (dovecot changing to the uid of the entry in the userdb when accessing the mailbox), but now I cannot find it anywhere in the wiki! Dovecot seems to be getting the right uid for the mailbox, but then it is having permissions problems. The error is: Feb 27 17:31:08 rm-002-02 dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=65.23.159.123 rip=65.23.128.14 resp= <hidden> Feb 27 17:31:08 rm-002-02 dovecot: auth(default): client out: OK 1 user=kclair Feb 27 17:31:08 rm-002-02 dovecot: auth(default): master in: REQUEST 1 17052 1 Feb 27 17:31:08 rm-002-02 dovecot: auth(default): master out: USER 1 kclair system_user=kclair uid=12346 gid=12346 home=/home/kclair Feb 27 17:31:08 rm-002-02 dovecot: POP3(kclair): open(/var/spool/mail/kclair, O_CREAT) failed: Permission denied Feb 27 17:31:08 rm-002-02 dovecot: POP3(kclair): stat() failed with mbox file /var/spool/mail/kclair: Permission denied The mbox file permissions are: -rw-rw---- 1 kclair mail 489 Feb 27 16:40 /var/spool/mail/kclair The /etc/passwd file entry is: kclair:x:12346:12346::/home/kclair:/bin/bash I am trying to use the following passdb combination: passdb: driver: pam args: dovecot deny: no pass: no master: no passdb: driver: passwd-file args: /usr/local/etc/passwd.dovecot deny: no pass: no master: no and userdb combination: userdb: driver: passwd args: userdb: driver: passwd-file args: /usr/local/etc/passwd.dovecot Am I missing something obvious? Thanks, Kristina

2 1

[Dovecot] Lower case flag characters ??
by Raymond Lillard 28 Feb '07

28 Feb '07

I know the purpose of the "standard" Maildir flags "FSRT, ..." but some of the files have lower case flag characters as well. What is the meaning of these lower case flags? Google and the Dovecot-Wiki have failed me. Can some kind soul point me to a document, Please. Ray

2 1

[Dovecot] Fwd: RE: pid stamp on log entries?
by bhayden＠umn.edu 28 Feb '07

28 Feb '07

On Feb 26 2007, Bill Boebel wrote: >On Mon, February 26, 2007 2:40 pm, bhayden(a)umn.edu said: > >> Hi folks. Is there a way to modify the log stamp to include pid as well >> as time? > >Take a look at http://wiki.dovecot.org/Variables > >%p = pid > >I use: mail_log_prefix = "%Us(%u)(%p): " > >Syslog adds the timestamp though. Thanks for that. A more specific question: is there a way to have imap/pop-login processes log the PID of the child imap/pop process? This would be for the purpose of connecting a specific authentication with its own session activity in the case of multiple logins by a single user. -Brian

2 1

[Dovecot] relay-ctrl works
by Amitai Schlair 28 Feb '07

28 Feb '07

In case anyone still cares, relay-ctrl works with Dovecot. Dovecot's end of the bargain requires a dirty little script to set TCPREMOTEIP based on the arguments passed from imap-login: #!/bin/sh TCPREMOTEIP=`echo "$@" | sed -e 's|.* ||' -e 's|]$||'` export TCPREMOTEIP exec "$@" And this (long) line in dovecot.conf: mail_executable: envdir /etc/relay-ctrl /usr/local/bin/relay-ctrl- chdir /usr/local/bin/dovecot-settcpremoteip /usr/local/bin/relay-ctrl- allow /usr/local/libexec/dovecot/imap For the SMTP end of the bargain, relay-ctrl has docs for qmail-smtpd and mailfront.

3 3

[Dovecot] stability?
by K. Clair 28 Feb '07

28 Feb '07

Hi, I'm having trouble figuring this out from any of the documentation or website pages: is dovecot v1.0 considered to be stable, or is it still testing/beta? If the latter, is there any timeline for a "stable" release? Thanks, Kristina

2 1

[Dovecot] how to configure quota in horde
by juan carlos 28 Feb '07

28 Feb '07

2 1

[Dovecot] Migrating to dovecot: non-empty mboxes
by Alexander Shikoff 28 Feb '07

28 Feb '07

Hello, I migrate from cucipop to dovecot. Thus I move users' mailboxes (mbox format) to another location. Some POP3 client (for example Outlook or TheBat!) use flag 'Do not delete messages from server'. After the user's mailbox have been moved to a new location all old messages is retrieved again and user get duplicates. Is there a way to avoid such issue? Thanks a lot! -- Kind Regards, Alexander Shikoff minotaur(a)crete.org.ua

2 2

[Dovecot] rc23 Problem - Assertion Failed
by chandler.lists＠chapman.edu 28 Feb '07

28 Feb '07

Feb 27 14:17:46 wurfel dovecot: imap-login: Login: user=<USER>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Feb 27 14:17:46 wurfel dovecot: IMAP(USER): file mbox-sync-update.c: line 387 (mbox_sync_update_header): assertion failed: (ctx->mail.uid != 0 || ctx->pseudo) This is happening for dozens of users. Anyone have a suggestion of what to adjust? It was happening somewhat less frequently in RC22, and I believe the line number was in the 4hundreds there...

2 2

Re: [Dovecot] rc23 Problem - Assertion Failed
by chandler.lists＠chapman.edu 28 Feb '07

28 Feb '07

I don't think this was touched from 23 to 24... Also, 24 hasn't hit the FreeBSD ports tree yet, so I'm not certain what would break if I built it manually... --J > On Tue, 27 Feb 2007 14:19:45 -0800 (PST) > chandler.lists(a)chapman.edu wrote: > >> Anyone have a suggestion of what >> to adjust? > > rc24? > > -- > > Brian Morrison > > bdm at fenrir dot org dot uk > > "Arguing with an engineer is like wrestling with a pig in the mud; > after a while you realize you are muddy and the pig is enjoying it." > > GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html >

1 0

[Dovecot] dovecot-auth (1.0rc24) on Solaris seems broken.
by Stephen Usher 28 Feb '07

28 Feb '07

I've trying to get dovecot-auth to talk to exim and have been running debugging on both sides. I've added the line: i_info("auth_client_input: client disconnected: %s", strerror(errno)); just after the "case -1" in the first switch statement in: auth-client-connection.c: auth_client_input() and get this in the logs: dovecot: Feb 27 13:35:09 Info: auth(default): auth_client_input: client disconnected: Illegal seek Now, on the exim end if I don't have the i_info() call in the routine the call to fgets() which exim is using never returns. If I put the i_info() call in there it does and gives an error, e.g. 2007-02-27 13:35:09 dovecot_plain authenticator failed for vanguard.earth.ox.ac.uk [163.1.22.82]: 435 Unable to authenticate at present: authentication socket protocol error Now, the istreams code in dovecot seems rather too obscure for me to debug any further. According to the read(2) man page under Solaris 10, the only version of read which can possibly return ESPIPE is pread(). Any ideas what's going on? Steve -- --------------------------------------------------------------------------- Computer Systems Administrator, E-Mail:-steve@earth.ox.ac.uk Department of Earth Sciences, Tel:- +44 (0)1865 282110 University of Oxford, Parks Road, Oxford, UK. Fax:- +44 (0)1865 272072

3 2

[Dovecot] Capability dropping support patch
by David 28 Feb '07

28 Feb '07

Hi, A week ago I submitted an early patch, please ignore it. The patch attached to this email has been tested and seems to work for me. I have also attached instead of inline to solve problems with spaces/tabs. The patch will, on systems that have libcap support, drop capabilities that Dovecot doesn't need. For example there is no need for CAP_SYS_MODULE, which enables module loading or CAP_SYS_PTRACE/CAP_SYS_ADMIN/etc. If libcap isn't installed then nothing will change, this is a compile-time only enhancement that isn't configurable. Personally I did not find that CAP_SYS_CHROOT was needed in order for me to authenticate and access my mailbox, but I haven't configured anything special with chrooting (yet). I added it because I see chroot() is used in src/lib/restrict-access.c. The patch was generated against 1.0-rc24 and tested with clients imp and Thunderbird. My configuration uses a virtual passdb, requires TLS for AUTH and exports auth-master under a different account. All of this appears to work correctly. I'd appreciate any comments, perhaps this will help safeguard the 1000EUR on non-hardened systems :) David

1 0

Re: [Dovecot] Quota stored in LDAP
by Stian Jordet 27 Feb '07

27 Feb '07

On tir, 2007-02-27 at 13:12 -0300, Venilton Junior wrote: > default_mail_env = maildir:/var/lib/imap/vmail/domains/%d/%n/mail::INDEX=/var/run/dovecot/indexes/%n I don't really know, but have you checked whether the maildirsize file is in the index-location? > plugin { > convert_mail = maildir:/var/lib/imap/vmail/%d/%u/mail > #quota = maildir:storage=102400 (If I uncomment this line, quota start to work, but for everyone equally) > quota = maildir (After putting this line, all messages starts to get at the filename the ,S=) > } You don't need to have a quota line in the plugin section. > Here follows my dovecot-ldap.conf: > > user_attrs = mail,homeDirectory,,,,quotaStorage=quota And your ldap attribute is called quotaStorage? > But it's not creating the control file... should I use dirsize instead of Maildir++ ? > My quota ldap entry is: maildir:storage=102400 No, you should not use dirsize. That's terribly slow (and does for sure not make the maildirsize-file). The only thing I'm unsure of is whether your ldap attribute is called quotaStorage? You could post some debug output from the log, with debug enabled. -Stian

2 1

[Dovecot] Dovecot rc23 and rc24 freeze after authentication
by Garret Huntress 27 Feb '07

27 Feb '07

I had our production systems running on rc23, however we ran into problems when the server was under heavy load. Eventually, the server would begin to freeze all imap connection after authentication (according to the logs). A user would connect, authentication would succeed, and then the connection would sit until timing out. No error logs were produced. Upgrading to rc24 did not resolve the issue, but reverting to rc22 has. -Garret -- Garret W. Huntress System Administrator / System Developer Geophysical Laboratory Carnegie Institution of Washington 5251 Broad Branch Road, NW Washington, DC 20015 Email: ghuntress(a)ciw.edu Phone: (202)-478-8973 AIM: Garret Huntress

2 1

[Dovecot] Certs file
by Javier Henderson 27 Feb '07

27 Feb '07

I'm running 1.0rc23 on FreeBSD 6.2-RELEASE, and seeing the following: Starting dovecot. Error: Can't use SSL key file /etc/ssl/private/dovecot.pem: No such file or directory In the config file I have: ssl_cert_file=/usr/local/certs/imapd.pem Looking for dovecot.pem on the config file there's only: % grep dovecot.pem dovecot.conf #ssl_cert_file = /etc/ssl/certs/dovecot.pem #ssl_key_file = /etc/ssl/private/dovecot.pem So the two entries referencing dovecot.pem are commented out. I removed those two lines anyway, just in case, but it didn't make a difference. What am I missing? I'd love to include the output of 'dovecot -n' but... % dovecot -n # /usr/local/etc/dovecot.conf Error: Can't use SSL key file /etc/ssl/private/dovecot.pem: No such file or directory Thanks, -jav

6 9

Re: [Dovecot] Solaris problem & exim. Please ignore it.
by Stephen Usher 27 Feb '07

27 Feb '07

Please ignore my previous question.. as it turns out it's a bug/feature of fprintf(3C) and sockets under Solaris. Exim was using fprintf to output the AUTH string and for some unknown reason it was hanging, possibly because the input buffer on the file stream wasn't empty or something. After modifying the Exim's dovecot authentication plug-in to use write(2) instead of fprintf(3C) it miraculously worked! Steve -- --------------------------------------------------------------------------- Computer Systems Administrator, E-Mail:-steve@earth.ox.ac.uk Department of Earth Sciences, Tel:- +44 (0)1865 282110 University of Oxford, Parks Road, Oxford, UK. Fax:- +44 (0)1865 272072

1 0

[Dovecot] lstats on all files in Maildir when opening an e-mail.
by Tan Shao Yi 27 Feb '07

27 Feb '07

Hi, I'm running RC19 on a Solaris 10 SPARC box. It seems that whenever I open an e-mail in any folder via IMAP, dovecot appears to scan every other folder in the Maildir. A truss reveals that it is lstat-ing every e-mail in every directory. I'm sorry I am sending only a fragment of the truss, it's really too long... but is this behaviour expected? Cheers, Tan Shao Yi lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170337156.M209211P18431V025055F0I0000DAF0_0.recess1,S=2596", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170337594.M159985P18549V025055F0I0001891B_0.recess1,S=4111", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170338379.M564254P18933V025055F0I000196A3_0.recess1,S=3630", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170344035.M859029P24106V025055F0I000198E4_0.recess1,S=4254", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170344816.M69242P24829V025055F0I000199CB_0.recess1,S=3810", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170347789.M408186P27905V025055F0I00019A8F_0.recess1,S=3922", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170378895.M589722P25748V025055F0I00019279_0.recess1,S=2782", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170380726.M524353P29456V025055F0I0001AEE1_0.recess1,S=3619", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170381420.M702545P517V025055F0I0001B208_0.recess1,S=3028", 0xFFBFF040) = 0 getdents64(8, 0xFEE72000, 8192) = 0 close(8) = 0 lstat64("/var/qmail/maildirs/AA/AA/test(a)pacific.net.sg/Maildir/.qmail/maildirfolder", 0xFFBFF148) = 0 lstat64("/var/qmail/maildirs/AA/AA/test(a)pacific.net.sg/Maildir/.qmail/cur", 0xFFBFF148) = 0 openat(-3041965, "/var/qmail/maildirs/AA/AA/test(a)pacific.net.sg/Maildir/.qmail/cur", O_RDONLY|O_NDELAY|O_LARGEFILE) = 8 fcntl(8, F_SETFD, 0x00000001) = 0 fstat64(8, 0xFFBFEEE8) = 0 getdents64(8, 0xFEE72000, 8192) = 1088 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/cur/1169092926.M656431P6118V04010002I000023E9_0.recess1,S=4701:2,S", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/cur/1168983168.M76366P8906V04010002I000027AB_0.recess1,S=2345:2,S", 0xFFBFF040) = 0

3 6

Re: [Dovecot] pid stamp on log entries?
by Bill Boebel 27 Feb '07

27 Feb '07

On Mon, February 26, 2007 2:40 pm, bhayden(a)umn.edu said: > Hi folks. Is there a way to modify the log stamp to include pid as well as > time? Take a look at http://wiki.dovecot.org/Variables %p = pid I use: mail_log_prefix = "%Us(%u)(%p): " Syslog adds the timestamp though. Bill

1 0

[Dovecot] pid stamp on log entries?
by bhayden＠umn.edu 26 Feb '07

26 Feb '07

Hi folks. Is there a way to modify the log stamp to include pid as well as time? Preferably for all logging, but at least for imap and pop. I took a look at the mail-login plugin, but that seems to associate operations with uid, still no pid. Am I missing something? Thanks for any info, -Brian U of Minnesota Internet Services

1 0

[Dovecot] dovecot and ldap
by Antonis Faragitakis 26 Feb '07

26 Feb '07

hi im trying to install dovecot and use ldap as the backend and i get the following error srv:/root# telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS AUTH=PLAIN] Dovecot ready. 1 login b.tapratzis passwordhere 1 NO Authentication failed. tail -f /var/log/dovecot.info dovecot: Feb 26 18:14:21 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=AGIudGFwcmF0emlzADM2Yi50YXByIw== dovecot: Feb 26 18:14:21 Info: auth(default): ldap(b.tapratzisb.tapratzis,127.0.0.1): bind search: base=ou=Company,ou=Ath,dc=company,dc=gr filter=(&(objectClass=posixAccount)(uid=b.tapratzisb.tapratzis)) dovecot: Feb 26 18:14:21 Info: auth(default): ldap(b.tapratzisb.tapratzis,127.0.0.1): unknown user dovecot: Feb 26 18:14:21 Info: auth(default): client out: FAIL 1 user=b.tapratzisb.tapratzis i cant understand why is place 2 times the username in the uid= for search. my dovecot.conf: passdb ldap { args = /etc/dovecot-ldap.conf } userdb ldap { args = /etc/dovecot-ldap.conf } my dovecot-ldap.conf: base = ou=Company,ou=Ath,dc=company,dc=gr deref = never scope = subtree user_attrs = uid,homeDirectory,,uid,uidNumber,gidNumber user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password,homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid where it my be the fault? Thanks Atn

1 0

[Dovecot] Quota stored in LDAP
by Venilton Junior 26 Feb '07

26 Feb '07

Hie folks, Does anyone have any experiences using dovecot + per user quota + ldap? I've configured my settings as this example: # quotaStorage must be in the format mentioned above # For example: dirsize:storage=10240 user_attrs = uid,homeDirectory,,,uidNumber,gidNumber,quotaStorage=quota But, Dovecot isn't creating maildirsize file. Any guesses? PS: I've already instaled 1.0rc24 Venilton C. Junior HPS Sercompe Computadores Ltda. Office: +55 47 3431-9700 Fax: +55 47 3431-9747 Mobile: +55 47 9653-5872 www.sercompe.com.br <http://www.sercompe.com.br/>

2 1

[Dovecot] Bigcrypt password patch
by Philipp Kolmann 26 Feb '07

26 Feb '07

Hi, we are currently in the progress of switching an HPUX mailserver to linux and dovecot. The only issue so far is, that HPUX has bigcrypt for passwords > 8 chars. Bigcrypt uses standard libc crypt for every block of 8 chars. The linux pam modules have a bigcrypt.c file which can be used for dovecot as well to authenticate crypt and bigcrypt passwords. I have used the pam bigcrypt.c code to patch the mycrypt.c dovecot file. Maybe you could add this path (against branch_1_0 cvs). thanks Philipp Kolmann -- If you have problems in Windows: REBOOT If you have problems in Linux: BE ROOT

2 1

[Dovecot] problem with NFS from Microsoft Windows Services for Unix
by Arnaud Grandville 26 Feb '07

26 Feb '07

Hi all, I'm using dovecot 1.0 RC24 compiled form source on a OpenBSD 4.0, I use IMAP service with maildir storage and my mail client is Outlook 2003. If the root of the user maildir stay on the BSD filesystem everything is right. If the root of the maildir is mount on an NFS drive on Microsoft Windows 2003 server, I always have the same error when I try to move mail (under Outlook) form my Pop3 account to my Imap account : dovecot: Feb 24 21:41:13 Error: IMAP(arno): rename(/var/mail/arno/Maildir/tmp/1172353272.P7684Q1.mail.domaine.fr, /var/mail/arno/Maildir/cur/1172353272.P7684Q1.mail.domaine.fr:2,S) failed: Input/output error As you see, the name of the file gets an extra string ":2,S" and that's why the new filename can't be created. what's wrong? thanks --- dovecot.conf ------------------ base_dir: /var/run/dovecot/ log_path: /dev/stderr protocols: imap listen: *:143 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable: /usr/local/libexec/dovecot/imap-login first_valid_gid: 0 mail_location: maildir:~/Maildir mmap_disable: yes lock_method: dotlock auth default: passdb: driver: passwd-file args: /etc/master.passwd userdb: driver: passwd

4 5

[Dovecot] Updated SHA256 patch
by Jasper Slits 25 Feb '07

25 Feb '07

Hi, This is the updated version of the SHA256 password hashing patch I submitted earlier to this list. I changed it, based on the suggestions by Andrey Panin (AP). Also some other parts have been changed, summary as follows: [sha2.h] - typedef of context dropped for consistency (AP) - removed ifndef SHA2_TYPES part (AP) - removed sha256() prototype [sha2.c] - added lib.h and safe_memset.h includes - added static const to sha256_h0[8] and sha256_k[64] (AP) - replaced memset with safe_memset - used standard types from stdint.h: (AP) - uint32 -> uint32_t - uint8 -> uint8_t - removed strings.h include - removed PACK64 and UNPACK64 (defined but not used) The updated patch can also be found at http://www.malochia.nl/dovecot/sha256.patch Kind regards, Jasper diff -r -u -N --exclude=Makefile.in --exclude=.deps --exclude=Makefile --exclude=CVS dv_bas/src/auth/password-scheme.c src/auth/password-scheme.c --- dv_bas/src/auth/password-scheme.c 2007-02-25 02:13:29.697424750 +0100 +++ src/auth/password-scheme.c 2007-02-23 14:34:23.940550315 +0100 @@ -10,6 +10,7 @@ #include "mycrypt.h" #include "randgen.h" #include "sha1.h" +#include "sha2.h" #include "str.h" #include "password-scheme.h" @@ -153,6 +154,17 @@ return str_c(str); } +static const char *sha256_generate(const char *plaintext, + const char *user __attr_unused__) +{ + unsigned char digest[SHA256_RESULTLEN]; + string_t *str; + sha256_get_digest(plaintext, strlen(plaintext), digest); + str = t_str_new(MAX_BASE64_ENCODED_SIZE(sizeof(digest)+1)); + base64_encode(digest, sizeof(digest), str); + return str_c(str); +} + static const void * password_decode(const char *password, unsigned int result_len) { @@ -196,6 +208,23 @@ return memcmp(sha1_digest, data, SHA1_RESULTLEN) == 0; } +static bool sha256_verify(const char *plaintext, const char *password, + const char *user) +{ + unsigned char sha256_digest[SHA256_RESULTLEN]; + const char *data; + + sha256_get_digest(plaintext, strlen(plaintext), sha256_digest); + + data = password_decode(password, SHA256_RESULTLEN); + if (data == NULL) { + i_error("sha256_verify(%s): Invalid password encoding", user); + return 0; + } + + return memcmp(sha256_digest, data, SHA256_RESULTLEN) == 0; +} + static const char *ssha_generate(const char *plaintext, const char *user __attr_unused__) { @@ -466,6 +495,7 @@ { "MD5-CRYPT", md5_crypt_verify, md5_crypt_generate }, { "SHA", sha1_verify, sha1_generate }, { "SHA1", sha1_verify, sha1_generate }, + { "SHA256", sha256_verify, sha256_generate }, { "SMD5", smd5_verify, smd5_generate }, { "SSHA", ssha_verify, ssha_generate }, { "PLAIN", plain_verify, plain_generate }, diff -r -u -N --exclude=Makefile.in --exclude=.deps --exclude=Makefile --exclude=CVS dv_bas/src/lib/sha2.c src/lib/sha2.c --- dv_bas/src/lib/sha2.c 1970-01-01 01:00:00.000000000 +0100 +++ src/lib/sha2.c 2007-02-25 01:53:03.876815750 +0100 @@ -0,0 +1,226 @@ +/* + * FIPS 180-2 SHA-224/256/384/512 implementation + * Last update: 02/02/2007 + * Issue date: 04/30/2005 + * + * Copyright (C) 2005, 2007 Olivier Gay <olivier.gay(a)a3.epfl.ch> + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. Neither the name of the project nor the names of its contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + */ + +#include "lib.h" + +#include "sha2.h" +#include "safe-memset.h" + +#define SHFR(x, n) (x >> n) +#define ROTR(x, n) ((x >> n) | (x << ((sizeof(x) << 3) - n))) +#define ROTL(x, n) ((x << n) | (x >> ((sizeof(x) << 3) - n))) +#define CH(x, y, z) ((x & y) ^ (~x & z)) +#define MAJ(x, y, z) ((x & y) ^ (x & z) ^ (y & z)) + +#define SHA256_F1(x) (ROTR(x, 2) ^ ROTR(x, 13) ^ ROTR(x, 22)) +#define SHA256_F2(x) (ROTR(x, 6) ^ ROTR(x, 11) ^ ROTR(x, 25)) +#define SHA256_F3(x) (ROTR(x, 7) ^ ROTR(x, 18) ^ SHFR(x, 3)) +#define SHA256_F4(x) (ROTR(x, 17) ^ ROTR(x, 19) ^ SHFR(x, 10)) + +#define UNPACK32(x, str) \ +{ \ + *((str) + 3) = (uint8_t) ((x) ); \ + *((str) + 2) = (uint8_t) ((x) >> 8); \ + *((str) + 1) = (uint8_t) ((x) >> 16); \ + *((str) + 0) = (uint8_t) ((x) >> 24); \ +} + +#define PACK32(str, x) \ +{ \ + *(x) = ((uint32_t) *((str) + 3) ) \ + | ((uint32_t) *((str) + 2) << 8) \ + | ((uint32_t) *((str) + 1) << 16) \ + | ((uint32_t) *((str) + 0) << 24); \ +} + + + +#define SHA256_SCR(i) \ +{ \ + w[i] = SHA256_F4(w[i - 2]) + w[i - 7] \ + + SHA256_F3(w[i - 15]) + w[i - 16]; \ +} + + + +static const uint32_t sha256_h0[8] = + {0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, + 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19}; + + +static const uint32_t sha256_k[64] = + {0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, + 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5, + 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, + 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, + 0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, + 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da, + 0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, + 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967, + 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, + 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, + 0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, + 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070, + 0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, + 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3, + 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, + 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2}; + + +/* SHA-256 functions */ + +void sha256_transf(struct sha256_ctx *ctx, const unsigned char *message, + unsigned int block_nb) +{ + uint32_t w[64]; + uint32_t wv[8]; + uint32_t t1, t2; + const unsigned char *sub_block; + int i,j; + + + for (i = 0; i < (int) block_nb; i++) { + sub_block = message + (i << 6); + + for (j = 0; j < 16; j++) { + PACK32(&sub_block[j << 2], &w[j]); + } + + for (j = 16; j < 64; j++) { + SHA256_SCR(j); + } + + for (j = 0; j < 8; j++) { + wv[j] = ctx->h[j]; + } + + for (j = 0; j < 64; j++) { + t1 = wv[7] + SHA256_F2(wv[4]) + CH(wv[4], wv[5], wv[6]) + + sha256_k[j] + w[j]; + t2 = SHA256_F1(wv[0]) + MAJ(wv[0], wv[1], wv[2]); + wv[7] = wv[6]; + wv[6] = wv[5]; + wv[5] = wv[4]; + wv[4] = wv[3] + t1; + wv[3] = wv[2]; + wv[2] = wv[1]; + wv[1] = wv[0]; + wv[0] = t1 + t2; + } + + for (j = 0; j < 8; j++) { + ctx->h[j] += wv[j]; + } + } +} + + +void sha256_init(struct sha256_ctx *ctx) +{ + int i; + for (i = 0; i < 8; i++) { + ctx->h[i] = sha256_h0[i]; + } + + ctx->len = 0; + ctx->tot_len = 0; +} + +void sha256_loop(struct sha256_ctx *ctx, const unsigned char *message, + unsigned int len) +{ + unsigned int block_nb; + unsigned int new_len, rem_len, tmp_len; + const unsigned char *shifted_message; + + tmp_len = SHA256_BLOCK_SIZE - ctx->len; + rem_len = len < tmp_len ? len : tmp_len; + + memcpy(&ctx->block[ctx->len], message, rem_len); + + if (ctx->len + len < SHA256_BLOCK_SIZE) { + ctx->len += len; + return; + } + + new_len = len - rem_len; + block_nb = new_len / SHA256_BLOCK_SIZE; + + shifted_message = message + rem_len; + + sha256_transf(ctx, ctx->block, 1); + sha256_transf(ctx, shifted_message, block_nb); + + rem_len = new_len % SHA256_BLOCK_SIZE; + + memcpy(ctx->block, &shifted_message[block_nb << 6], + rem_len); + + ctx->len = rem_len; + ctx->tot_len += (block_nb + 1) << 6; +} + +void sha256_result(struct sha256_ctx *ctx, unsigned char *digest) +{ + unsigned int block_nb; + unsigned int pm_len; + unsigned int len_b; + int i; + + block_nb = (1 + ((SHA256_BLOCK_SIZE - 9) + < (ctx->len % SHA256_BLOCK_SIZE))); + + len_b = (ctx->tot_len + ctx->len) << 3; + pm_len = block_nb << 6; + + safe_memset(ctx->block + ctx->len, 0, pm_len - ctx->len); + ctx->block[ctx->len] = 0x80; + UNPACK32(len_b, ctx->block + pm_len - 4); + + sha256_transf(ctx, ctx->block, block_nb); + + for (i = 0 ; i < 8; i++) { + UNPACK32(ctx->h[i], &digest[i << 2]); + } +} + +void sha256_get_digest(const void *data, size_t size, + unsigned char result[SHA256_RESULTLEN]) +{ + struct sha256_ctx ctx; + + sha256_init(&ctx); + sha256_loop(&ctx, data, size); + sha256_result(&ctx, result); +} + diff -r -u -N --exclude=Makefile.in --exclude=.deps --exclude=Makefile --exclude=CVS dv_bas/src/lib/sha2.h src/lib/sha2.h --- dv_bas/src/lib/sha2.h 1970-01-01 01:00:00.000000000 +0100 +++ src/lib/sha2.h 2007-02-24 19:45:48.447687500 +0100 @@ -0,0 +1,71 @@ +/* + * FIPS 180-2 SHA-224/256/384/512 implementation + * Last update: 02/02/2007 + * Issue date: 04/30/2005 + * + * Copyright (C) 2005, 2007 Olivier Gay <olivier.gay(a)a3.epfl.ch> + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. Neither the name of the project nor the names of its contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + */ + +#ifndef SHA2_H +#define SHA2_H + +#define SHA256_RESULTLEN ( 256 / 8) + +#define SHA256_BLOCK_SIZE ( 512 / 8) + +/* +#ifndef SHA2_TYPES +#define SHA2_TYPES +typedef unsigned char uint8; +typedef unsigned int uint32; +typedef unsigned long long uint64; +#endif +*/ + +struct sha256_ctx { + unsigned int tot_len; + unsigned int len; + unsigned char block[2 * SHA256_BLOCK_SIZE]; + uint32_t h[8]; +}; + +void sha256_transf(struct sha256_ctx *ctx, const unsigned char *message, + unsigned int block_nb); + + +void sha256_init(struct sha256_ctx * ctx); +void sha256_loop(struct sha256_ctx *ctx, const unsigned char *message, + unsigned int len); +void sha256_result(struct sha256_ctx *ctx, unsigned char *digest); +void sha256_get_digest(const void *data, size_t size, + unsigned char result[SHA256_RESULTLEN]); + + + +#endif /* !SHA2_H */ +

1 0

[Dovecot] openssl mkcert problem
by Zbigniew Szalbot 24 Feb '07

24 Feb '07

Hello, Can someone point me to what I should do to install the missing files? I am trying to generate self-signed certificates using mkcert.sh but I get the following error: $ /usr/local/share/dovecot/mkcert.sh error on line -1 of ./dovecot-openssl.cnf} 6213:error:02001002:system library:fopen:No such file or directory:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/bio/bss_file.c:104:fopen('./dovecot-openssl.cnf}','rb') 6213:error:2006D080:BIO routines:BIO_new_file:no such file:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/bio/bss_file.c:107: 6213:error:0E064072:configuration file routines:CONF_load:no such file:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/conf/conf_def.c:197: I am using OpenSSL 0.9.7e-p1 25 Oct 2004. Many thanks for your help in advance! -- Zbigniew Szalbot

2 1

[Dovecot] Dovecot on Solaris x86?
by Tim Skirvin 24 Feb '07

24 Feb '07

I'm trying to get dovecot working on Solaris x86. I've got it working just fine on RH Desktop 4; and while I have a built, limping version on solx86, it's not actually usable except from other solx86 systems. Basic details: Version 1.0rc23 OS Solaris x86 (64 bit) CPU Opteron Filesystem NFS (but it's not getting that far) The general problem is apparently SSL-related. I can connect properly from another Solaris x86 machine, using either mutt or straight openssl; but when I try mutt from a Solaris or Linux machine, I get the error "SSL failed: I/O error" and it fails, and when I use openssl from a Linux machine, I get something like this: victor ~> stelnet xxxxxxxx.ks.uiuc.edu 993 + openssl s_client -connect xxxxxxxx.ks.uiuc.edu:993 -verify -debug verify depth is 0 CONNECTED(00000003) depth=0 /C=US/ST=Illinois/L=Urbana/O=UIUC/OU=[...] verify error:num=18:self signed certificate verify return:1 depth=0 /C=US/ST=Illinois/L=Urbana/O=UIUC/OU=[...] verify return:1 24748:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:226: Annoyingly, the same command run from a Solaris machine connects, even though mutt doesn't. (I'm using 'mutt -f imaps://xxxx/', which I know works elsewhere; and the Linux mutt is the system default one, so I don't suspect that it is the source of the problem.) The logs have been remarkably un-useful: dovecot: Feb 21 09:41:21 Info: imap-login: Disconnected: rip=[...], lip=[...] TLS handshake The software was built in all cases with: ./configure --prefix=/usr/local/encap/dovecot-1.0rc23.1 I've tried with both Sun's native cc and gcc compilers. I have also tried building on SPARC Solaris with the native cc compiler, to the same (negative) effect. (I used to have v0.99.14 running just fine on this SPARC machine, so this worries me... but I only checked it just now as an after-thought.) Any suggestions? - Tim Skirvin (tskirvin(a)ks.uiuc.edu) -- Theoretical and Computational http://www.ks.uiuc.edu/~tskirvin/ Biophysics, Beckman Institute, UIUC Senior Systems Administrator

4 9

[Dovecot] POP Problem
by Marc Perkel 24 Feb '07

24 Feb '07

Getting an error on POP only - "Authentication Server Isn't Connected" IMAP works fine. This used to work. not sure what changed.

1 1

[Dovecot] Setting up an email server
by Matt Penfold 24 Feb '07

24 Feb '07

I am sure this is a really stupid question but I could do with some advice. I am setting an old PC as an email/file server using Gentoo Linux. So far I have configured getting emails from a couple of a pop3 accounts I have with ISPs/Mail Service providers using getmail and dovecot. I can access those emails from a variety of clients using IMAP without problem. The next stage I want to implement is to have a central location available to the clients of sent emails as well as received emails. It is this part I am a bit confused about. I know I will need some kind of agent to transfer the email from the client to the appropriate ISP/Mail provider but I am overwhelmed by the choice. Sendmail seems a bit OTT for me needs! And how do I ensure that I can see what emails I have send using IMAP ? Thanks in advance Matt Penfold -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.441 / Virus Database: 268.18.3/698 - Release Date: 23/02/2007 04:39

2 1

[Dovecot] Simple patch
by David 23 Feb '07

23 Feb '07

Inline below is a simple patch that drops the root capabilities that aren't needed (inspired by a similar patch against the mpm_itk project!). Possibly it is a little too restrictive, extras can be added to suidcaps, but on platforms that support capabilities this will prevent things such as kernel module loading. Needed on linux is libcap, available in most distros. Note that this patch doesn't require libcap, or add an option, but if it is installed then it will take advantage of it. I don't have any other platforms to test on. The patch compiles fine but I haven't managed to test it yet. My autoconf experience is zero, so I hope that HAVE_LIBCAP is actually getting defined. Comments appreciated, I'll test it thoroughly later when I get some free time (and, if it works, remove the test message!). David --- configure.in 2007-02-22 21:50:07.000000000 +0000 +++ configure.in 2007-02-23 17:52:16.000000000 +0000 @@ -382,6 +382,17 @@ ]) ]) +AC_CHECK_FUNC(cap_init, [], [ + AC_CHECK_LIB(cap, cap_init, [ + have_libcap=yes + LIBS="$LIBS -lcap" + ]) +]) + +if test "$have_libcap" = "yes"; then + AC_DEFINE(HAVE_LIBCAP,, libcap is installed for cap_init()) +fi + AC_CHECK_FUNC(fdatasync, [ have_fdatasync=yes ], [ --- src/master/main.c 2007-01-27 01:44:25.000000000 +0000 +++ src/master/main.c 2007-02-23 16:13:39.000000000 +0000 @@ -24,6 +24,9 @@ #include <syslog.h> #include <sys/stat.h> #include <sys/wait.h> +#ifdef HAVE_LIBCAP +#include <sys/capability.h> +#endif const char *process_names[PROCESS_TYPE_MAX] = { "unknown", @@ -36,6 +39,15 @@ "dict" }; +/* the capabilities that we *need* in order to operate */ +#ifdef HAVE_LIBCAP +cap_t caps; +cap_value_t suidcaps[] = { + CAP_SETUID, + CAP_NET_BIND_SERVICE +}; +#endif + static const char *configfile = SYSCONFDIR "/" PACKAGE ".conf"; static const char *env_tz; @@ -583,6 +595,18 @@ if (log_error) i_fatal("This is Dovecot's error log"); + i_info("test message, monkeys"); + /* drop capabilities that we don't need, be very restrictive */ +#ifdef HAVE_LIBCAP + i_info("Found capability support, dropping unnecessary root priviledges"); + caps = cap_init(); + cap_clear(caps); + cap_set_flag(caps, CAP_PERMITTED, sizeof(suidcaps)/sizeof(cap_value_t), suidcaps, CAP_SET); + cap_set_flag(caps, CAP_EFFECTIVE, sizeof(suidcaps)/sizeof(cap_value_t), suidcaps, CAP_SET); + cap_set_proc(caps); + cap_free(caps); +#endif + lib_signals_init(); lib_signals_set_handler(SIGINT, TRUE, sig_die, NULL); lib_signals_set_handler(SIGTERM, TRUE, sig_die, NULL);

1 0

[Dovecot] Migration from courierpop3d (younger versions)
by Christian Skarby 23 Feb '07

23 Feb '07

Dear list, I am looking for a way to set up dovecot as a successor for courier pop3d, however I am looking for a way to preserve the UIDLs. Any progress on this? I can help out writing a converter if I know where the appropriate specs are. References: [1] http://www.dovecot.org/list/dovecot/2006-April/012727.html [2] http://wiki.dovecot.org/Migration#head-a43de1ba365baeb73f6c83702e4f14788041… -- Yours, Christian Skarby Interhost ANS

1 0

[Dovecot] quota warning
by Nicolas Boullis 23 Feb '07

23 Feb '07

Hi, Is there a way with dovecot to warn users who are close to reach their quota? Although I never used it, I think cyrus supports something like that by droping a warning message into the INBOX when delivering a message that brings the total size over a certain percentage. Would it be feasible to implement something like that with an extra plugin or by changing the quota plugin? Cheers, Nicolas

11 22

[Dovecot] rc19 - (_view_lookup_uid_range): assertion failed
by Dean Manners 23 Feb '07

23 Feb '07

Apologies if this is an <=rc19 thing, but am waiting for rc24 to come into Debian unstable/testing before upgrading. After purging ~10 messages from INBOX the index's appeared to go into a broken state. Mail client (Outlook express) reported "unable to read message flags". Logged messages: Feb 23 17:34:58 mailget01 dovecot: IMAP(drawkcab(a)drawkcab.com): file mail-index-view.c: line 386 (_view_lookup_ui d_range): assertion failed: (*last_seq_r >= *first_seq_r) Feb 23 17:34:58 mailget01 dovecot: IMAP(drawkcab(a)drawkcab.com): Raw backtrace: imap [0x80b46eb] -> imap [0x80b413 9] -> imap [0x809c6c8] -> imap(mail_index_lookup_uid_range+0x2b) [0x809cd5b] -> imap(index_storage_get_uids+0x36) [0x8086936] -> imap(mailbox_get_uids+0x2b) [0x80a674b] -> imap [0x805f9b8] -> imap(imap_search_get_arg+0x76) [0x 8060786] -> imap(cmd_fetch+0xa5) [0x8057ed5] -> imap(cmd_uid+0x52) [0x805ad02] -> imap [0x805b8c5] -> imap [0x805 b83b] -> imap(_client_input+0x6d) [0x805b9ad] -> imap(io_loop_handler_run+0x118) [0x80baa88] -> imap(io_loop_run+ 0x28) [0x80b9f08] -> imap(main+0x69) [0x8063e89] -> /lib/tls/libc.so.6(__libc_start_main+0xf4) [0xb7e53974] -> im ap [0x8056731] Feb 23 17:34:59 mailget01 dovecot: child 24629 (imap) killed with signal 6 Feb 23 17:35:10 mailget01 dovecot: IMAP(drawkcab(a)drawkcab.com): file mail-index-view.c: line 386 (_view_lookup_ui d_range): assertion failed: (*last_seq_r >= *first_seq_r) Feb 23 17:35:10 mailget01 dovecot: IMAP(drawkcab(a)drawkcab.com): Raw backtrace: imap [0x80b46eb] -> imap [0x80b413 9] -> imap [0x809c6c8] -> imap(mail_index_lookup_uid_range+0x2b) [0x809cd5b] -> imap(index_storage_get_uids+0x36) [0x8086936] -> imap(mailbox_get_uids+0x2b) [0x80a674b] -> imap [0x805f9b8] -> imap(imap_search_get_arg+0x76) [0x 8060786] -> imap(cmd_fetch+0xa5) [0x8057ed5] -> imap(cmd_uid+0x52) [0x805ad02] -> imap [0x805b8c5] -> imap [0x805 b83b] -> imap(_client_input+0x6d) [0x805b9ad] -> imap(io_loop_handler_run+0x118) [0x80baa88] -> imap(io_loop_run+ 0x28) [0x80b9f08] -> imap(main+0x69) [0x8063e89] -> /lib/tls/libc.so.6(__libc_start_main+0xf4) [0xb7e88974] -> im ap [0x8056731] Feb 23 17:35:10 mailget01 dovecot: child 24662 (imap) killed with signal 6 rm /userdirectory/dovecot* resolved it. If its worth investigating the dovecot* files copied to: http://www.drawkcab.com/dumpyard/dovecot-files.tar Regards __________________________________________ Dean Manners

2 1

[Dovecot] Final LDAP issues
by Joseba Torre 23 Feb '07

23 Feb '07

Hi all, I'm in my final steps with my testing server using rc23 in a x86 RHEL4 machine. Everything is working quite well, but still are some LDAP related issues I'd like to clarify: - I'm using auth_bind and auth_bind_userdn. So pass_filter isn't used, and pass_attrs are never searched. Is this true or am I missing something? - Is there a choice for the userdb bind/queries to be done using the user supplied dn -the one used for passdb-? I would like to access some non-public attributes, but I've had no luck until now. If I use the same dovecot-ldap.conf for userdb and passdb, i have a single connection to the LDAP server, but once the auth bind is successful, an anonymous bind occurs. If I use two separate files for userdb and passdb, i have two connections to the LDAP server, the second one being always anonimous. For me, the perfect state would be: - bind using the user supplied dn - if successfull, search for pass_attrs, where some user_attrs may be prefetched - unbind - userdb only binds if some needed attrs haven't been already fetched. If so, there's a choice to use the user supplied dn for the bind/search. Is this possible now? Would it be in the future? Thanks in advance. -- Joseba Torre. CIDIR Bizkaia.

3 5

[Dovecot] Strange new mail count
by Brian Taber 23 Feb '07

23 Feb '07

I am having a slight issue with new message count... for some reason, dovecot reports I have some strange number of new messages, even though there are no new messages... If I click on a few of the folders, the new message count seams to correct itself... Any way to solve this?

3 4

[Dovecot] out-of-tree plugins and installed header files
by Timo Sirainen 22 Feb '07

22 Feb '07

I added --with-headers configure option now to CVS (not enabled by default). It makes Dovecot install all the useful .h files so that it's possible to compile out-of-tree plugins without having compiled Dovecot sources. I'd hope that binary package builders add a new dovecot-dev package which contains the headers (and $libdir/dovecot- config). I also updated dovecot-sieve so that it compiles against only the header files, except then sievec and sieved binaries aren't compiled (because they require liblib.a).

1 0

[Dovecot] Mixing POP and IMAP
by Dominic Lepiane 22 Feb '07

22 Feb '07

Hi, I run a small site, about a dozen users, and many of the users POP their mail. I have just installed Squirrelmail which uses IMAP. Has anyone had any significant problems with mixing POP and IMAP for mail retreival? Your feedback is greatly apprecianted, -- Dominic Lepiane The IRMACS Centre Simon Fraser University

5 4

[Dovecot] Crash: index-mail.c: line 790
by Bill Boebel 22 Feb '07

22 Feb '07

Here is the first crash I've seen with the current CVS... Feb 19 00:45:52 mail35a dovecot: IMAP(mnash(a)stest1.com): Corrupted transaction log file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index.log: Append with UID 5736, but next_uid = 5744 Feb 19 00:45:55 mail35a dovecot: IMAP(mnash(a)stest1.com): Corrupted transaction log file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index.log: Append with UID 5737, but next_uid = 5744 Feb 19 00:46:34 mail35a dovecot: IMAP(mnash(a)stest1.com): file index-mail.c: line 790: unreached Feb 19 00:46:34 mail35a dovecot: IMAP(mnash(a)stest1.com): Raw backtrace: imap [0x8091552] -> imap [0x80910cf] -> imap [0x806c891] -> imap(mail_set_seq+0x10) [0x8084ce0] -> imap(index_storage_search_next+0x3b) [0x806f28b] -> imap(mailbox_search_next+0x14) [0x8085ae4] -> imap(imap_expunge+0x8a) [0x805b3e6] -> imap(cmd_expunge+0x61) [0x8056e69] -> imap [0x805a51e] -> imap [0x805a498] -> imap(_client_input+0x5a) [0x805a5e6] -> imap(io_loop_handler_run+0x10c) [0x80965fc] -> imap(io_loop_run+0x25) [0x8095a75] -> imap(main+0x6b) [0x80614f7] -> /lib/tls/libc.so.6(__libc_start_main+0xda) [0xd9478a] -> imap(setuid+0xa1) [0x8055825] Feb 19 00:46:34 mail35a dovecot: child 23564 (imap) killed with signal 6 Feb 19 00:46:38 mail35a dovecot: IMAP(mnash(a)stest1.com): fscking index file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index Feb 19 00:46:38 mail35a dovecot: IMAP(mnash(a)stest1.com): Fixed index file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index: first_recent_uid_lowwater 5744 -> 5738

2 1

[Dovecot] 1.0.rc23 released
by Timo Sirainen 22 Feb '07

22 Feb '07

http://dovecot.org/releases/dovecot-1.0.rc23.tar.gz http://dovecot.org/releases/dovecot-1.0.rc23.tar.gz.sig Documentation is probably the only important thing left before v1.0. * deliver doesn't ever exit with Dovecot's internal exit codes anymore. All its internal exit codes are changed to EX_TEMPFAIL. * mbox: X-Delivery-ID header is now dropped when saving mails. * mbox: If pop3_uidl_format=%m, we generate a unique X-Delivery-ID header when saving mails to make sure the UIDL is unique. + PAM: blocking=yes in args uses an alternative way to do PAM checks. Try it if you're having problems with PAM. + userdb passwd: blocking=yes in args makes the userdb lookups be done in auth worker processes. Set it if you're doing remote NSS lookups (eg. nss_ldap problems are fixed by this). + If PAM child process hasn't responded in two minutes, send KILL signal to it (only with blocking=no) - IMAP: APPEND ate all CPU while waiting for more data from the client (broken in rc22) - mbox: Broken X-UID headers assert-crashed sometimes - mbox: When saving a message to an empty mbox file it got an UID which immediately got incremented. - mbox: Fixed some wrong "uid-last unexpectedly lost" errors. - auth cache: In some situations we crashed if passdb had extra_fields. - auth cache: Special extra_fields weren't saved to auth cache. For example allow_nets restrictions were ignored for cached entries. - A lot of initial login processes could cause auth socket errors in log file at startup, if dovecot-auth started slowly. Now the login processes are started only after dovecot-auth has finished initializing itself. - imap/pop3 proxy: Don't crash if the remote server disconnects before we're logged in. - deliver: Don't bother trying to save the mail twice into the default mailbox (eg. if it's over quota). - mmap_disable=yes + non-Linux was really slow with large dovecot.index.cache files - MySQL couldn't be used as a masterdb - Trash plugin was more or less broken - imap/pop3 couldn't load plugins if they chrooted - imap/pop3-login process could crash in some conditions - checkpassword-reply crashed if USER/HOME wasn't set

4 8

[Dovecot] Solaris/SSLonly/Lots of Users
by Steven F Siirila 22 Feb '07

22 Feb '07

Anyone running Dovecot on Solaris, requiring only SSL connections, and servicing thousands of simultaneous users? Our past attempts to do so have failed due to dovecot-auth using up all 256 of its file descriptors. I say 256 since we are limited to that by the 32-bit libraries. We are looking at either compiling Dovecot in 64-bit and letting dovecot-auth file descriptors accumulate (not ideal), or providing Timo with access to one of our test servers so he can debug the problem. However, I would like to hear of anyone in the same boat first. Thanks! -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

4 5

[Dovecot] Dovecot Quota + LDAP
by Venilton Junior 22 Feb '07

22 Feb '07

Hie Folks, I'm having a little problem with quota + ldap. I want to use per user quota settings. So I configured quota on my /etc/dovecot.conf like this site http://wiki.dovecot.org/Quota examples. Here follows my /etc/dovecot.conf: protocols = imap imaps pop3 pop3s ssl_disable = no ssl_cert_file = /usr/share/ssl/certs/cert.pem ssl_key_file = /usr/share/ssl/private/pkey.pem mail_extra_groups = mail valid_chroot_dirs = /var/lib/imap/vmail/domains default_mail_env = maildir:/var/lib/imap/vmail/domains/%d/%n/mail::INDEX=/var/run/dovecot/i ndexes/%n lock_method = dotlock mmap_disable = yes auth_debug = yes auth_debug_passwords = yes first_valid_uid = 202 last_valid_uid = 202 first_valid_gid = 202 last_valid_gid = 202 maildir_copy_with_hardlinks = no login_greeting = Sercomtel Internet ready. disable_plaintext_auth = no protocol imap { mail_plugins = quota imap_quota } protocol lda { postmaster_address = postmaster(a)domain.com mail_plugins = quota } protocol pop3 { pop3_uidl_format = %08Xu%08Xv mail_plugins = quota } auth default_with_listener { mechanisms = plain login userdb ldap { args = /etc/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot-ldap.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } } } plugin { # quota = maildir:/var/lib/imap/vmail/%d/%u/mail:storage=102400 # convert_mail = maildir:/var/lib/imap/vmail/%d/%u/mail #quota = maildir:storage=102400 } And here is my user attributes in my dovecot-ldap.conf: user_attrs = mail,homeDirectory,,,,quotaStorage=quota=dirsize:storage user_filter = (&(objectClass=VirtualMailAccount)(mail=%u)(accountActive=TRUE)(delete=F ALSE)) As you can see above in my dovecot.conf, I made a comment at plugin section to ensure that there's no quota usage for all system. I'd like to have per user quota stored in my ldap base. Here is a value off my quota attribute: quota = 122880 Making tests, the user already have 138 Mb. Does anyone have any idea how to set up quota with ldap and get it working? Tnx for any reply. Best regards, Venilton C. Junior

1 0

[Dovecot] login and plain-md5 in sql query
by Adrian Stoica 22 Feb '07

22 Feb '07

i use last dovecot rc23 with users/passwords in mysql 1) How can i define a sql query for each auth mechanism ? 2)Why i can't set "default_pass_scheme = login" in my dovecot-sql.conf? : dovecot: Feb 21 09:46:22 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=AGFkaUBhZHJpYW4uZXUAcGFyb2xh dovecot: Feb 21 09:46:22 Info: auth-worker(default): sql(adi(a)adrian.eu,127.0.0.1): query: SELECT IF('adrian.eu'='',clear,crypt) AS password , user FROM mailbox WHERE user = 'adi' AND domain = 'adrian.eu' AND status = '1' LIMIT 1 dovecot: Feb 21 09:46:22 Info: auth-worker(default): auth(adi(a)adrian.eu,127.0.0.1): username changed adi(a)adrian.eu -> adi dovecot: Feb 21 09:46:22 Error: auth-worker(default): sql(adi,127.0.0.1): Unknown password scheme login dovecot: Feb 21 09:46:23 Info: auth(default): client out: FAIL 1 user=adi(a)adrian.eu dovecot: Feb 21 09:46:23 Info: imap-login: Disconnected: user=<adi(a)adrian.eu>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 3)Whi i can't use plain-md5 in dovecot.conf : auth default { mechanisms = login plain <- plain-md5 passdb sql { args=/etc/dovecot-sql.conf } userdb sql { args=/etc/dovecot-sql.conf } } dovecot: Feb 21 09:43:48 Error: auth(default): Unknown authentication mechanism 'plain-md5'

2 1

[Dovecot] pop3_lock_session
by Rene Luria 22 Feb '07

22 Feb '07

Hi guys, How can I modify the timeout value for the pop3_lock_session ? I'd like it to be much bigger.

2 4

[Dovecot] crash in mail_cache_transaction_reset on rc22
by Dan Price 22 Feb '07

22 Feb '07

I've not been able to roll out rc23 yet (tonight, I hope) but I just saw a crash which I'm not sure I've seen reported before, following a server outage (that is to say, the server came back up and one of the users had a dovecot core). #0 0x0005d720 in mail_cache_transaction_reset (ctx=0xcf928) at mail-cache-transaction.c:71 No locals. #1 0x0005e8bc in mail_cache_add (ctx=0xcf928, seq=233, field=4294967295, data=0xb7600, data_size=1063) at mail-cache-transaction.c:752 file_field = 19 data_size32 = 1063 fixed_size = 4294967295 full_size = 831272 __PRETTY_FUNCTION__ = "mail_cache_add" #2 0x00057160 in index_mail_parse_header (part=0xe9, hdr=0x14, mail=0xd33e8) at index-mail-headers.c:125 data = (struct index_mail_data *) 0xd3450 cache_field_name = 0xe9 <Address 0xe9 out of bounds> field_idx = 0 count = 21 match = (uint8_t *) 0xcf928 "" __PRETTY_FUNCTION__ = "index_mail_parse_header" #3 0x00079848 in _read (stream=0xe2aa0) at istream-header-filter.c:173 ret = 0 pos = 854336 #4 0x00085818 in i_stream_read (stream=0xe2ac8) at istream.c:58 _stream = (struct _istream *) 0xcaf28 #5 0x00085ca4 in i_stream_read_data (stream=0xe2ac8, data=0xffbff5ec, size=0xffbff5e8, threshold=1) at istream.c:250 ret = 0 read_more = false #6 0x0007e8c4 in message_get_body_size (input=0xe2ac8, body=0xffbff660, has_nuls=0x0) at message-size.c:105 msg = ( const unsigned char *) 0xe2cf7 "\ndary_(ID_/CFD74Co3EWCZqYkdHlE8A)\"\r\nt>\r\nSS(a)cox.net>,\r\nil.com>,\r\n\r\n" i = 0 ---Type <return> to continue, or q <return> to quit--- size = 1 missing_cr_count = 0 __PRETTY_FUNCTION__ = "message_get_body_size" #7 0x0002e5e4 in fetch_body_header_fields (ctx=0xc6a08, mail=0xffbff660, context=0xc6c98) at imap-fetch-body.c:448 size = {physical_size = 1357, virtual_size = 0, lines = 26} old_offset = Unhandled dwarf expression opcode 0x93 -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

2 1

[Dovecot] Understanding fcntl() error messages
by Dean Manners 22 Feb '07

22 Feb '07

Hey guys, After many trials and tribulations I have now got some fairly stable NFS clients serving dovecot-lda and pop3/imap. Over a 9 hour postal/rabid stress test only saw 5 errors for the 4 servers. Wondering if anyone can shed a bit more light on what they mean exactly. I have tried to find "Resource temporarily unavailable" and "No locks available" in the src to get some understanding - however it appears these messages are from a lower level. With pop3: ------------------ Feb 22 03:36:32 mailget01 dovecot: POP3(test992(a)mailtest06.com): fcntl() failed with file /mnt/mailstore/mailtest06.com/8/test992/dovecot.index.log: Resource temporarily unavailable Feb 22 03:36:32 mailget01 dovecot: POP3(test992(a)mailtest06.com): mail_index_wait_lock_fd() failed with file /mnt/mailstore/mailtest06.com/8/test992/dovecot.index.log: Resource temporarily unavailable Feb 22 04:16:45 mailget01 dovecot: POP3(test445(a)mailtest03.com): fcntl() failed with file /mnt/mailstore/mailtest03.com/4/test445/dovecot.index.log: Resource temporarily unavailable Feb 22 04:16:45 mailget01 dovecot: POP3(test445(a)mailtest03.com): mail_index_wait_lock_fd() failed with file /mnt/mailstore/mailtest03.com/4/test445/dovecot.index.log: Resource temporarily unavailable ------------------ ------------------ Feb 22 13:07:27 mailget01 dovecot: POP3(test999(a)mailtest06.com): fcntl() failed with file /mnt/mailstore/mailtest06.com/8/test999/dovecot.index: Resource temporarily unavailable Feb 22 13:07:27 mailget01 dovecot: POP3(test999(a)mailtest06.com): fcntl() failed with file /mnt/mailstore/mailtest06.com/8/test999/dovecot.index: Resource temporarily unavailable Feb 22 13:07:27 mailget01 dovecot: POP3(test999(a)mailtest06.com): Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2007-02-22 13:07:27] Feb 22 13:07:27 mailget01 dovecot: POP3(test999(a)mailtest06.com): No INBOX for user top=0/0, retr=0/0, del=0/0, size=0 ------------------ Does this mean that pop3 was waiting for a lock, but timed out ? What are the likely affects of this on a client POPing - session times out and they need to reconnect? The "No INBOX" error is little more odd, the same user had successful login 90 minutes earlier. With deliver: ------------------ Feb 22 01:42:03 mailfilter01 deliver(test680(a)mailtest04.com): fcntl() failed with file /mnt/mailstore/mailtest04.com/10/test680/dovecot.index: No locks available Feb 22 01:42:06 mailfilter01 deliver(test265(a)mailtest03.com): fcntl() failed with file /mnt/mailstore/mailtest03.com/1/test265/dovecot.index: No locks available Feb 22 03:25:42 mailfilter02 deliver(test454(a)mailtest03.com): fcntl() failed with file /mnt/mailstore/mailtest03.com/2/test454/dovecot.index: No locks available Feb 22 03:25:45 mailfilter02 deliver(test397(a)mailtest03.com): fcntl() failed with file /mnt/mailstore/mailtest03.com/7/test397/dovecot.index: No locks available ------------------ I assume this means deliver tried to obtain a lock on the index file (probably many times) but failed. Are the likely affects that the message still gets saved to the maildir but the index doesn't get updated? Regards __________________________________________ Dean Manners

2 2

[Dovecot] critical performance problem
by Rene Luria 22 Feb '07

22 Feb '07

I have been using dovecot 1.0alpha4 + deliver/sieve in production for a few accounts (400'000). After testing 1.0.rc22 I decided to upgrade one of the imap servers... And... what a mess ! The server just gets unusable. I don't know why but with new release, it just overloads the system with I/O. It turns that with 1.0.rc22 I get 15Mo/s read on disk average, without any reason. What did really change ? How come a system (with a few thousand accounts) works perfectly and then with 1.0.rc22 gets unusable with a load approaching 300 ? If you have any ideas...

5 18

[Dovecot] 1.0.rc23 tomorrow
by Timo Sirainen 22 Feb '07

22 Feb '07

http://dovecot.org/nightly/dovecot-latest.tar.gz Would be nice to get some testing before the actual release. I've now finally gone through all the "TODO" mails in this list and my INBOX and fixed pretty much every problem I know of. There are still some mbox bugs, but I can't really get them fixed unless someone figures out how to reproduce them (http://wiki.dovecot.org/MboxProblems) I think documentation is the last thing that should be done before v1.0. I'm happy enough with the code as it is now, unless some new bugs again appear. The notable changes since rc22: * deliver doesn't ever exit with Dovecot's internal exit codes anymore. All its internal exit codes are changed to EX_TEMPFAIL. + PAM: blocking=yes in args uses an alternative way to do PAM checks. Try it if you're having problems with PAM. + userdb passwd: blocking=yes in args makes the userdb lookups be done in auth worker processes. Set it if you're doing remote NSS lookups (eg. nss_ldap problems are fixed by this). + If PAM child process hasn't responded in two minutes, send KILL signal to it (only with blocking=no) - IMAP: APPEND ate all CPU while waiting for more data from the client (broken in rc22) - mbox: When saving a message to an empty mbox file it got one UID which immediately was incremented. - mbox: Fixed some wrong "uid-last unexpectedly lost" errors. - auth cache: In some situations we crashed if passdb had extra_fields. - auth cache: Special extra_fields weren't saved to auth cache. For example allow_nets restrictions were ignored for cached entries. - A lot of initial login processes could cause auth socket errors in log file at startup, if dovecot-auth started slowly. Now the login processes are started only after dovecot-auth has finished initializing itself. - imap/pop3 proxy: Don't crash if the remote server disconnects before we're logged in. - deliver: Don't bother trying to save the mail twice into the default mailbox (eg. if it's over quota). - mmap_disable=yes + non-Linux was really slow with large dovecot.index.cache files - MySQL couldn't be used as a masterdb - Trash plugin was more or less broken - imap/pop3 couldn't load plugins if they chrooted - imap/pop3-login process could crash in some conditions - checkpassword-reply crashed if USER/HOME wasn't set

6 19

[Dovecot] --log-error and the mysterious "not starting" problem
by Marshal Newrock 22 Feb '07

22 Feb '07

I've finally upgraded to 1.0.rc21. If I run "dovecot --log-error", then dovecot fails to start. The following appears in the log: Feb 5 10:54:00 taurus1 dovecot: Dovecot v1.0.rc21 starting up Feb 5 10:54:00 taurus1 dovecot: This is Dovecot's error log Without --log-error, it will start up fine from command-line. Dovecot still fails to start, as near as I can tell, in the specific condition that it is being started from a non-interactive shell and there is a mail_plugin set in "protocol imap". mail plugins set for pop or lda do not cause this problem. The failure to start appears in only two instances that I can see: on boot, or by a monitoring script if dovecot crashes, or, since I haven't seen dovecot die, when I manually stop it to see if the monitoring program will restart it. With the above problem, if the init script has --log-error when I try to make the monitoring program restart dovecot, then nothing still gets logged. -- Marshal Newrock, Ideal Solution LLC http://www.idealso.com

2 8

[Dovecot] False "new mail" warning from Thunderbird, using RC23
by Stephen Warren 21 Feb '07

21 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am continually getting false "New Mail" warning from Thunderbird. I'm running Thunderbird 1.5.0.9 on Windows, and it's talking to two different Dovecot 1.0.RC23 servers (one home server, one work server). This was happening in older Dovecot versions too, so it's not new in RC23. Very often, Thunderbird will pop up the "new mail" notification window, and put a "new mail" icon in the Windows icon bar. However, when I view the main Thunderbird window, there will be no folders with new mail. Simply changing the currently selected folder in Thunderbird will clear the tray icon. Sometimes the notification window will say something small like "7 new messages", but right now, it's showing huge numbers like "587 new messages", which could be the total message count in one of my folders... Sometimes restarting Thunderbird will stop this happening for a short while. Is this a Thunderbird bug? Am I the only one seeing this? Does it have to do with having two separate IMAP servers configured? Perhaps it's because Thunderbird is configured to cache 5 connections to the server (although I think that's the default?) Should I delete all my accounts in Thunderbird, delete the (Thunderbird) cache files etc. on disk, and re-create it all? I do notice that whenever Thunderbird starts, it displays a whole load of folders that don't exist (e.g. got renamed/deleted) and/or multiple copies (e.g. Sent, Sent-1, Sent-2), which disappear very quickly. Is this related? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFF2+eJhk3bo0lNTrURAh9uAKCWYrcNByF+wE2e1FPvL6x8N48/uACgtwxR 07fYmnaG9P/JCBOkKscCZIA= =XWXG -----END PGP SIGNATURE-----

2 1

[Dovecot] auth_user setting?
by Joseba Torre 21 Feb '07

21 Feb '07

Hi all, I've installed rc23 in a new testing machine, and i've had some permission problems related to dovecot-master.conf. As I have my master passwords in that file, I don't want it to be world readable. dovecot -n shows that auth_user is nobody, so setting the permissions to nobody.whatever 640 solves the problem. Anyway, I've tried to change the auth_user setting with no effect. Is it configurable? Aaaaaaaaaagur. -- Joseba Torre. CIDIR Bizkaia.

1 1

[Dovecot] Wrong configure.in entry in CVS branch_1_0
by Luca Corti 21 Feb '07

21 Feb '07

This line in configure.in src/plugins/mail-log/Makefile refers to a non existing direcory in the branch_1_0 tree, which breaks build. ciao Luca

3 2

[Dovecot] Possible Bug in quota-fs.c
by Martin Konopka 20 Feb '07

20 Feb '07

Hi, I'm using filesystem quotas with dovecot 1.0rc22 on my Linux 2.4.27 box. The quota limit gets correctly reported in kilobytes to the client but the amount of used space is reported in megabytes. In quota-fs.c I noticed that only the currently used space is divided by 1024: Line 241: *value_r = dqblk.dqb_curblocks / 1024; *limit_r = dqblk.dqb_bsoftlimit; After removing /1024 everything works fine. regards, Martin

3 4

[Dovecot] Convert plugin
by Jay Chandler 20 Feb '07

20 Feb '07

convert_mail = mbox:%h/mail Convert plugin. If set, specifies the source storage path which is converted to destination storage (mail_location) when the user logs in. The existing mail directory is renamed to <dir>-converted. I'm not entirely clear on what this does. If someone can clarify for me, I'll update the Wiki. I'm hoping it'll allow me to convert from mbox to Maildir-- otherwise I'm looking at a weekend of downtime when that project comes due... -- Jay Chandler Network Administrator, Chapman University 714.628.7249 / chandler(a)chapman.edu Today's Excuse: high pressure system failure

2 1

[Dovecot] Reading mail for Virtual and Real LDAP Users
by Aaron Luchko 20 Feb '07

20 Feb '07

I'm trying to setup a system with ldap+postfix+dovecot. Everyone who gets an email is stored in LDAP, some of these users also have a local unix account, regardless I want all users to be dealt with as virtual users. All the mail is stored by postfix in /var/spool/mail in Maildir format with permissions 600 vmail:vmail. Everything works fine when dovecot tries to read the mail of a completely virtual user, the problem is when dovecot tries to read mail for a user who has an account on the machine, dovecot finds the user's local account, then it tries to read the mail as that user. Even if first_valid_{u,g}id is low enough to allow login the user still doesn't have sufficient permissions to read the mail. I can't figure out why this is happening and was hoping someone could help me out. thanks, Aaron /etc/dovecot-ldap.conf: hosts = server.example.com base = dc=example,dc=com dn = cn=Directory Manager dnpass = password uris = ldap://127.0.0.1 user_attrs = mail user_filter = uid=%u user_global_uid = 5001 user_global_gid = 5001 pass_filter = uid=%u /etc/dovecot.conf: mail_location = maildir:/var/spool/mail/%u/ protocols = imap pop3 mail_log_prefix = "%Us(%u):%i:%h " first_valid_uid = 5001 first_valid_gid = 5001 protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth_verbose = yes auth_debug = yes auth default { mechanisms = plain passdb pam { } userdb passwd { } userdb ldap { args = /etc/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot-ldap.conf } user = root } dict { } plugin { }

2 2

[Dovecot] NTLM oddities
by Cassidy B. Larson 20 Feb '07

20 Feb '07

Started implementing the MasterUser changes to my config files so I can finally offer SPA for pop3/imap. Things are working fine with the MasterUser (horray!), however one of my guys started using SPA with Outlook Express and started getting another users mailbox. Turns out to be related to NTLM. His Outlook express is configured for the username of 'johnsmith'. However, you'll see the NTLM took the username from his XP machine login, it appears, which is just "John". However, what is really weird, is the "failed" on the "client out" line, but then the proxy went ahead and proxied to the storage server. Here's some output from debuggage: dovecot: Feb 19 16:15:56 Info: auth(mail.infowest.com): client in: AUTH 1 NTLM service=POP3 lip=204.17.177.60 rip=209.33.215.142 resp= dovecot: Feb 19 16:15:56 Info: auth(mail.infowest.com): client out: CONT 1 dovecot: Feb 19 16:15:56 Info: auth-worker(mail.infowest.com): sql(John, 209.33.215.142): query: SELECT a.clearpasswd AS password, v.storeIP AS host, CONCAT(IF('John' LIKE '%(a)%.%',CONCAT(LCASE('John'),''),CONCAT(LCASE('John'),'@',p.host)),'*masteruser') AS destuser, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy, 'masterpass' AS pass FROM iwmailsystem.virtmailbox AS v INNER JOIN iwmailsystem.popserversAS p ON ( p.storeIP = '204.17.177.60') INNER JOIN authenticate.users AS a ON (a.userID= IF('John' LIKE '%(a)%.%',CONCAT(LCASE('John'),''),CONCAT(LCASE('John'),'@', p.host))) WHERE v.userID = IF('John' LIKE '%(a)%.%',CONCAT(LCASE('John'),''),CONCAT(LCASE('John'),'@',p.host)) AND v.client_active=1; dovecot: Feb 19 16:15:56 Info: auth(mail.infowest.com): password(John, 209.33.215.142): Credentials: 8447128CC04AD05D1CD15F0C2F17F136 dovecot: Feb 19 16:15:57 Info: auth(mail.infowest.com): client out: FAIL 1 user=John host=204.17.177.76 destuser= john(a)host.com*masteruser nologin proxy pass=masterpass dovecot: Feb 19 16:15:57 Info: pop3-login: proxy(John): started proxying to 204.17.177.76:110: user=<John>, method=NTLM, rip=209.33.215.142, lip= 204.17.177.60 Questions: 1) So is it possible to use OE for SPA authentication without it sending the "XP username", but the actual account username OE is configured for ? 2) Why, when it "FAIL"ed did it still proxy? This seems bad :) Thanks, Cassidy

3 3

[Dovecot] rc22 segv when over quota
by Steffen Kaiser 20 Feb '07

20 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I just pulled and built version 1.0.rc22 root@ux-2s11-9:/mnt/mailcache/dvtest/MailDir# dovecot -n # /usr/local/etc/dovecot.conf log_path: /var/tmp/dovecot.log info_log_path: /var/tmp/dovecot.info ssl_disable: yes disable_plaintext_auth: no verbose_ssl: yes login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login verbose_proctitle: yes mail_location: maildir:/mnt/mailcache/%u/MailDir:CONTROL=/var/cache/dovecot/%i/control:INDEX=/var/cache/dovecot/%i/index mail_debug: yes mail_plugins: quota imap_quota auth default: mechanisms: plain login cache_size: 10 verbose: yes debug: yes debug_passwords: yes passdb: driver: pam args: cache_key=%u dovecot userdb: driver: passwd On Linux Debian Etch on Debian kernel v2.6.18; tested with XFS and Extended3. repquota /mnt/mailcache *** Report for user quotas on device /dev/mapper/mailstaff-mailcache Block grace time: 7days; Inode grace time: 7days Block limits File limits User used soft hard grace used soft hard grace - ---------------------------------------------------------------------- dvtest -- 560 600 1024 17 0 0 Then I copy messages in a directory via Thunderbird, the log shows: dovecot: Feb 20 12:12:27 Error: IMAP(dvtest): o_stream_send_istream(/mnt/mailcache/dvtest/MailDir/.test/tmp/1171969947.P22138Q3.ux-2s11-9) failed: Resource temporarily unavailable dovecot: Feb 20 12:12:27 Error: child 22138 (imap) killed with signal 11 - -or- dovecot: Feb 20 12:09:42 Error: IMAP(dvtest): o_stream_send_istream(/mnt/mailcache/dvtest/MailDir/.test/tmp/1171969782.P22134Q6.ux-2 s11-9) failed: Disk quota exceeded dovecot: Feb 20 12:09:42 Error: child 22134 (imap) killed with signal 11 and repquota /mnt/mailcache dvtest +- 616 600 1024 6days 20 0 0 The Thunderbird continues to copy other messages believing everthing is OK. There is also this message on the screen (started via dovecot -F): dm-1: write failed, user block limit reached. Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBRdr0Vy9SORjhbDpvAQIKfwgA0vONUFwD5nZ1iOb0z+bRf2Kxz9/9r6QE yqZ/iL6FylJMDQwNi9hY3EbzIbu+pEs3SJrz3VVKuWO7bVyhVTFpxQaSS8vBokXo 6cnLuG5V+n3jtyqy26lM1VQWDCifEY/++YAs/KmJ5NQHm0mk5bUEc6fhDeL4D6MJ UcKUBrQ8S2B6vJMBQfcabgnC8KR9kh+xvvUtvlnsfpoaInAKx8x4r1S+9mMjbAEv lIjHt+yavW6Hlq+HmVCirTddesy1rQDFiDSrrV9F8Sp43GpxHyjun9iK6CGrQkJf AO4o2DsBIbBrhvyUrzUks1dR8ZHasyBQDuMVG02/s1bM3UIkJVX3RA== =/MmG -----END PGP SIGNATURE-----

2 2

[Dovecot] Apple Mail/Tiger Bug came up on the pf mailing list. . .
by Sean Kamath 20 Feb '07

20 Feb '07

Hi all, Just FYI, this post showed up on the pf mailing list a couple of days ago: Cc: pf(a)benzedrine.cx From: Axel Rau <Axel.Rau(a)Chaos1.DE> Subject: Re: mismatch on route through packet/byte counts Date: Sun, 18 Feb 2007 14:37:56 +0100 To: Daniel Hartmeier <daniel(a)benzedrine.cx> X-Mailer: Apple Mail (2.752.2) Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by insomnia.benzedrine.cx id l1IDc2fg029064 Sender: owner-pf(a)benzedrine.cx Thank you, Daniel, for taking the time to analyze my traces and to explain the problem so perfect, that even non-net-developers, like I, can understand it. (-;) > > This looks like a bug in the client's TCP/IP stack, and how to fix it > depends on the client's OS. IMO, the RST is invalid, and pf is > right in > blocking it. The OS is Darwin 8.8 / Mac OS X 10.4.8, a 4.4BSD descendant and the relevant source may be in netinet/tcp_output.c, found here http://www.opensource.apple.com/darwinsource/10.4.8.ppc/xnu-792.12.6 Good news is that your diagnosis could bring us forward to resolve a long running painful bug filed against Mail.app, the Apple email client. If you agree, I would like to add your diagnosis to my open bug report and cross-post the mail on the Darwin Developers list, before filing a new bug against Darwin. Axel --------------------------------------------------------------------- Axel Rau, â˜€Frankfurt , Germany +49 69 9514 18 0

1 0

[Dovecot] relocating indexes.
by Rob Shepherd 20 Feb '07

20 Feb '07

Dear Dovecot users, I'd like to relocate indexes from NFS to local storage. I plan to replace... default_mail_env = maildir:~/.maildir with mail_location = maildir:~/.maildir:INDEX=/usr/local/var/dovecot/index/%u However, to minimise disruption, by avoiding dovecot rebuilding indexes for many user's large and numerous folders, I'd like to copy the existing indexes to the new location. Here is a list of _my_ indexes (in and under ~/.maildir) ./.Drafts/dovecot-uidlist ./.Drafts/dovecot.index ./.Drafts/dovecot.index.cache ./.Drafts/dovecot.index.log ./.OpenLDAP/dovecot-keywords ./.OpenLDAP/dovecot-uidlist ./.OpenLDAP/dovecot.index ./.OpenLDAP/dovecot.index.cache ./.OpenLDAP/dovecot.index.log ./.OpenLDAP/dovecot.index.log.2 ./.Sent/dovecot-keywords ./.Sent/dovecot-uidlist ./.Sent/dovecot.index ./.Sent/dovecot.index.cache ./.Sent/dovecot.index.log ./.Trash/dovecot-keywords ./.Trash/dovecot-uidlist ./.Trash/dovecot.index ./.Trash/dovecot.index.cache ./.Trash/dovecot.index.log ./.mailscanner/dovecot-keywords ./.mailscanner/dovecot-uidlist ./.mailscanner/dovecot.index ./.mailscanner/dovecot.index.cache ./.mailscanner/dovecot.index.log ./.mailscanner/dovecot.index.log.2 ./.nagios/dovecot-keywords ./.nagios/dovecot-uidlist ./.nagios/dovecot.index ./.nagios/dovecot.index.cache ./.nagios/dovecot.index.log ./.samba/dovecot-keywords ./.samba/dovecot-uidlist ./.samba/dovecot.index ./.samba/dovecot.index.cache ./.samba/dovecot.index.log ./.samba/dovecot.index.log.2 ./.sw-announce/dovecot.index ./.sw-announce/dovecot.index.cache ./.sw-announce/dovecot.index.log ./dovecot-keywords ./dovecot-uidlist ./dovecot.index ./dovecot.index.cache ./dovecot.index.log ./dovecot.index.log.2 Would I be correct in copying these to /usr/local/var/dovecot/index/rob/ (_my_ new index loc) whilst preserving the structure of the folders etc. Thanks Rob -- Rob

4 3

[Dovecot] startup script under FreeBSD 6.2 / dovecot-1.0rc22
by Alexis Susset 20 Feb '07

20 Feb '07

Hi all, I recently installed Dovecot rc22 from the FreeBSD ports and I have some problem with the dovecot startup: - If I start dovecot manually, it works fine, it starts and I get messages in /var/log/maillog - If I reboot the machine, that's where the problem appears, dovecot doesn't seem to start and I get nothing, no errors in /var/log/maillog Any idea if this is a known problem and how to fix it ? Thanks in advance, Regards, -- Alexis

4 5

[Dovecot] Run fetchmail after login?
by Brett B. 20 Feb '07

20 Feb '07

Hello all, I was wondering if it is possible to run fetchmail after a user logs into dovecot? So far I have tried to make a small script that contains the command for fetchmail. Then I told the dovecot mail_executable to look at that script. However this ends up leaving the server hanging and does not seem to work. Thanks

2 1

[Dovecot] Dovecot losing .mailboxlist files
by Lauri Jesmin 20 Feb '07

20 Feb '07

Hello! I am running a site that has two servers, 10 000 users in both, Solaris 9 and home directories with mbox mailboxes shared with NFS. Indexes are kept separately in both server, on local disks, both servers are serving imap (from NFS mboxes). We are trying to convert from uw-imap to dovecot. Servers are currently running on their limits and now i have mysterious problems with .mailboxlist file: i patched dovecot to use .mailboxlist file instead of .subscriptions, but sometimes the .mailboxlist file disappears on some users. Instead there are appearing .nfsXXXXXX files, where XXXXXX is combination of numbers and capital letters. Also some users have problems with subscribing to folders, others do not have this problem. It seems to be that users who do not have .mailboxlist have also problems with subscribing to folders. Dovecot is version 1.0rc22. I have not discovered error messages in logs. -- Lauri Jesmin <lauri.jesmin(a)ut.ee> Tartu Ülikool

2 1

[Dovecot] mbox assert crashes finally fixed?
by Timo Sirainen 20 Feb '07

20 Feb '07

Patch: http://dovecot.org/list/dovecot-cvs/2007-February/007760.html Nightly snapshot should be ready in a few minutes. I'll release rc23 tomorrow. Night.

1 0

[Dovecot] Weird Issues with latest nightly (pre-rc23)
by Cassidy B. Larson 20 Feb '07

20 Feb '07

Just updated one of my proxy boxes to the latest nightly (20070217), restarted the dovecot process and got a bit of errors showing up for each pop3/imap connection. Feb 19 11:14:00 marbella dovecot: pop3-login: Login: user=<user1(a)host.com>, method=PLAIN, rip=209.33.217.218, lip=204.17.177.60 Feb 19 11:14:00 marbella dovecot: POP3(user1(a)host.com): Set pop3_uidl_format in config file Feb 19 11:14:00 marbella dovecot: child 33684 (pop3) returned error 89 Feb 19 11:14:04 marbella dovecot: imap-login: Login: user=<user2(a)host.com>, method=PLAIN, rip=204.17.177.50, lip=204.17.177.60 Feb 19 11:14:04 marbella dovecot: IMAP(user2(a)host.com): mbox: Can't create root mail directory /dev/null/mail: Not a directory Feb 19 11:14:04 marbella dovecot: IMAP(user2(a)host.com): MAIL environment missing and autodetection failed (home /dev/null) Feb 19 11:14:04 marbella dovecot: child 33753 (imap) returned error 89 On the pop3 errors above. Why should I have a pop3_uidl_format in the config file for the proxy? This was working fine on rc19. I do have a pop3_uidl_format on my storage boxes. Same with the imap section. It should just proxy over (and is on rc19), the proxy shouldnt have to know about the mail directory. Am I the only one seeing this? Or have I missed a config change that is required? thanks, Cassidy

2 2

[Dovecot] Dovecot authentication problem
by Marion Keith 20 Feb '07

20 Feb '07

Hi all, New SUSE 10.2 install, Sendmail, dovecot 1.0.rc14-7 SUSE rpm. Was using PAM for authentication. Worked like a champ since Feb 7th. No changes to system. Yesterday authentication failed. I can't even authenticate locally with "telnet localhost" options to test pop3 or imap. It appears that my pam authentication has somehow gotten changed. Can anyone direct me to some PAM debugging help? Thanks, Marion

1 0

[Dovecot] LDAP auth load? (looking for advice)
by Troy Engel 19 Feb '07

19 Feb '07

One of the changes my beta testers are testing is switching from NIS to LDAP for login/auth/homedir lookups; all is working perfectly, Dovecot + PAM/nss_ldap is A-OK. No issues here, we've been using LDAP lookups on other servers for years. I'm wondering about load, specifically if when I switch the entire company over, will the new authentication load stress my LDAP server to the point of breaking. A) Does anyone here have some numbers or experience in this switch that could lend some real-world advice? We're talking maybe... 50 people with large (numerically, not gig-age) mailboxes, and ThunderBird seems to open 4-5 connections per client based on the logs. B) Would anyone advise that I run a slapd slave directly on the main Dovecot server to alleviate load? Is this overkill and I shouldn't worry about it? Mainly what has me concerned is that on the Dovecot machine, I'm getting a number of entries in the messages that look like: dovecot-auth: nss_ldap: reconnecting to LDAP server... dovecot-auth: nss_ldap: reconnected to LDAP server after 1 attempt(s) No failures ever, it all just works. But still this tickles my brain that maybe it'll need more robustness come production time. Thanks for your feedback, -te -- Troy Engel | Systems Engineer Fluid Inc. | http://www.fluid.com

5 5

[Dovecot] repeat downloads of message headers in 1.0rc19
by Brian G. Peterson 19 Feb '07

19 Feb '07

I upgraded one server to 1.0rc19 (from rc15) over the weekend, and have since received several reports of dovecot erroneously retrieving older messages as new mail. I've seen this myself intermittently on KMail, and users have reported it on Thunderbird, Squirrelmail, and Outlook. I see some things in the archives that suggest that this was a problem in older 1.0 release candidates, but hadn't experienced the problem myself until just now. Has anyone else seen this problem? Regards, - Brian

5 14

[Dovecot] wrong dovecot GID while upgrading
by Zbigniew Szalbot 18 Feb '07

18 Feb '07

Hello, I tried to upgrade dovecot from 1.0.rc7 to rc22 but I got this error at the end of the upgrade process: Dovecot has reserved the groupname 'dovecot' and gid '143': ERROR: groupname 'dovecot' already in use by gid '1003' Please resolve these issues and try again: Either remove the conflicting group or if you wish to continue using a legacy gr oup override DOVECOT_GID. *** Error code 1 Stop in /usr/ports/mail/dovecot. So I went to /usr/ports/mail/dovecot and edited the Makefile to change the GID into: DOVECOT_UID?= 1003 DOVECOT_GID?= 1003 SCRIPT_ENV+= DOVECOT_UID=${DOVECOT_UID} \ DOVECOT_GID=${DOVECOT_GID} I saved the makefile and ran portupgrade again but I got stopped by exactly the same error. I'd appreciate suggestions how to resolve this. Thank you! -- Zbigniew Szalbot

3 2

[Dovecot] Reproducible duplicate messages bug with Mail.app+Dovecot
by Andrew Moran 18 Feb '07

18 Feb '07

Hey guys, I am not sure if this is a Mail.app bug or a dovecot bug. I can reproduce it 100% of the time using dovecot and Mail.app. I cannot reproduce it with other imap clients, which at first made me think it was Mail.app, but then I tried Mail.app with other imap servers and couldn't reproduce it either, so it's definitely the combination of the two. So I thought I'd try you guys first before submitting a bug to Apple. The problem: If I move multiple messages (set "A") from one imap folder to another, then delete those messages, and then move another set into that same folder (set "B"), then all the messages in set B show up as duplicates until I relaunch Mail.app. My configuration: Server: Dovecot 1.0rc22 using Maildir on FreeBSD 6.1 Client: Mail.app 2.1 on OS X 10.4.8 Steps to reproduce: (these steps involve trashing messages, so it's best to test this on email you are going to toss anyway) 1) Create a new imap folder (let's say "bar") 2) Drag more than one message (let's say 3 or 4) from existing imap folder "foo" to new folder "bar". 3) Click on new folder "bar" and see messages in there. 4) Select messages and delete them (Delete key). Messages are gone as expected. 5) Go back to original folder "foo" and drag a few more messages into new folder "bar" 6) Click on bar. 7) You will notice that all the second set of messages show up twice. Relaunching Mail.app at this point makes the problem disappear. I'm guessing this has something to do with the deleted messages from Set A being purged until the close of imap connection. Any help narrowing this down would be appreciated. Thank you, --Andy

3 4

[Dovecot] Problem moving emails with attachments or HTML links
by J. Wren Hunt 18 Feb '07

18 Feb '07

I recently switched from UW-IMAP to Dovecot (1.0.rc15 on Ubuntu) and am experiencing a weird problem that I haven't been able to figure out yet: If I try to move a message from one IMAP folder to another, all works fine if the message is plain text. However, *sometimes* the message will not be transferred if it contains either an attachment and/or an HTML link (operation times-out). Not all the time, but just enough to be annoying. I've looked through the logs and for settings in the .conf file and can't find anything obvious that I've overlooked. Can anyone help me with any parameters that might be causing this type of problem? Thanks so much! Wren Hunt Cambridge, MA

3 6

[Dovecot] MySQL question
by spammy 18 Feb '07

18 Feb '07

Hi all, Trying to migrate my actual mailserver postfix Cyrus-IMAP with virtual users to dovecot. done some tests and seems to work quite well except for; I would like to integrate my virtual configuration to share SQL information throw various daemons, like postfix, amavis and so on. By default, Dovecot sets the database users table to "users" but I would like to change it to "mailboxes". this is because I don't want to change all my configiuration files already setup, only for dovecot. is this possible? best regards, xtura Fedora Core 6 Dovecot 1.0 rc22

2 1

[Dovecot] LDA plugins mail_plugin_dir
by Dick Middleton 18 Feb '07

18 Feb '07

The LDA option mail_plugin_dir isn't by any chance like PATH i.e. can have more than one directory? I want to pick up some plugins from /usr/lib and some from elsewhere. Thanks Dick

2 3

[Dovecot] master request not found
by Marshal Newrock 18 Feb '07

18 Feb '07

I am setting up dovecot 1.0-rc15 as a proxy. When I try to log in, I get errors such as the following: Dec 4 17:39:23 vega dovecot: Dovecot v1.0.rc15 starting up Dec 4 17:39:24 vega dovecot: auth-worker(default): mysql: Connected to localhost (ad_mail) Dec 4 17:39:31 vega dovecot: auth(default): client in: AUTH 1 PLAINservice=POP3 lip=xx.xx.xx.xx rip=xx.xx.xx.xx resp=<hidden> Dec 4 17:39:31 vega dovecot: auth(default): client out: CONT 1 Dec 4 17:39:31 vega dovecot: auth(default): client in: CONT<hidden> Dec 4 17:39:31 vega dovecot: auth-worker(default): sql(XXXX,xx.xx.xx.xx: query: SELECT NULL AS password, host, destuser, 'Y' AS proxy FROM exchange_proxy WHERE user='XXXX' Dec 4 17:39:31 vega dovecot: auth(default): client out: OK 1 user=XXXX host=XXXX destuser=newrock.marshal(a)acd.net proxy pass=<hidden> Dec 4 17:39:31 vega dovecot: auth(default): master in: REQUEST 1 171931 Dec 4 17:39:31 vega dovecot: auth(default): Master request 17193.1 not found Dec 4 17:39:31 vega dovecot: auth(default): master out: NOTFOUND 1 Dec 4 17:39:31 vega dovecot: pop3-login: Internal login failure: user=<XXXX>, method=PLAIN, rip=xx.xx.xx.xx, lip=xx.xx.xx.xx dovecot.conf contains: auth default { mechanisms = plain login passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb static { args = uid=0 gid=0 } user = nobody } In dovecot-sql.conf: password_query = SELECT NULL AS password, host, destuser, 'Y' AS proxy FROM exchange_proxy WHERE user='%u' I have verified that I can log into the remote server from the proxy via pop3. Unfortunately, there isn't currently imap access to the remote server. I am connecting to the proxy using pop3 (with "telnet localhost 110"). Any suggestions what the problem could be? -- Marshal Newrock, Ideal Solution LLC http://www.idealso.com

2 4

[Dovecot] master password 'username contains disallowed character: 0x2a'
by Dale Bewley 18 Feb '07

18 Feb '07

v1.0.rc22 FC6 x86_64 So, here is my config: protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth_master_user_separator = * auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb passwd-file { args = /etc/dovecot.masterusers master = yes } passdb pam { } userdb passwd { } user = root } dict { } plugin { } But here is what happens when I try to login as dlbewley*zimbra using the password I put in dovecot.masterusers. Feb 16 23:37:30 tofu dovecot: Dovecot v1.0.rc22 starting up Feb 16 23:37:31 tofu dovecot: auth(default): passwd-file /etc/dovecot.masterusers: Read 1 users Feb 16 23:37:49 tofu dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=::ffff:169.237.1.109 rip=::ffff:169.237.2.160 Feb 16 23:37:49 tofu dovecot: auth(default): client out: CONT 1 Feb 16 23:37:49 tofu dovecot: auth(default): client in: CONT 1 ZGxiZXdsZXkqemltYnJhAGRsYmV3bGV5KnppbWJyYQBjb2tlc2hpdDc= Feb 16 23:37:49 tofu dovecot: auth(default): plain(zimbra,::ffff:169.237.2.160): login user: Username contains disallowed character: 0x2a Feb 16 23:37:49 tofu dovecot: auth(default): client out: FAIL 1 user=zimbra Feb 16 23:37:49 tofu dovecot: imap-login: Disconnected: user=<zimbra>, method=PLAIN, rip=::ffff:169.237.2.160, lip=::ffff:169.237.1.109, TLS If I try setting this: auth_username_chars = I get this: Feb 16 23:45:15 tofu dovecot: Dovecot v1.0.rc22 starting up Feb 16 23:45:16 tofu dovecot: auth(default): passwd-file /etc/dovecot.masterusers: Read 1 users Feb 16 23:45:22 tofu dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=::ffff:169.237.1.109 rip=::ffff:169.237.2.160 Feb 16 23:45:22 tofu dovecot: auth(default): client out: CONT 1 Feb 16 23:45:22 tofu dovecot: auth(default): client in: CONT 1 ZGxiZXdsZXkqemltYnJhAGRsYmV3bGV5KnppbWJyYQBjb2tlc2hpdDc= Feb 16 23:45:22 tofu dovecot: auth(default): passdb(zimbra,::ffff:169.237.2.160,master): Master user logging in as dlbewley*zimbra Feb 16 23:45:22 tofu dovecot: auth(default): client out: OK 1 user=dlbewley*zimbra Feb 16 23:45:22 tofu dovecot: auth(default): master in: REQUEST 1 7537 1 Feb 16 23:45:22 tofu dovecot: auth(default): passwd(dlbewley*zimbra,::ffff:169.237.2.160): unknown user Feb 16 23:45:22 tofu dovecot: auth(default): userdb(dlbewley*zimbra,::ffff:169.237.2.160): user not found from userdb Feb 16 23:45:22 tofu dovecot: auth(default): master out: NOTFOUND 1 Feb 16 23:45:22 tofu dovecot: imap-login: Internal login failure: user=<dlbewley*zimbra>, method=PLAIN, rip=::ffff:169.237.2.160, lip=::ffff:169.237.1.109, TLS

2 2

Re: [Dovecot] 1.0.rc23 tomorrow
by Bill Boebel 18 Feb '07

18 Feb '07

On Sat, February 17, 2007 8:09 am, Timo Sirainen <tss(a)iki.fi> said: > http://dovecot.org/nightly/dovecot-latest.tar.gz > > Would be nice to get some testing before the actual release. > Haven't tested this version yet, but we pulled a copy from CVS around mid-day Friday and it has been running fine for the past 30 hours. Bill

1 0

Re: [Dovecot] I keep getting password mismatches
by Mark 18 Feb '07

18 Feb '07

i have that: #%PAM-1.0auth required pam_nologin.soauth include system-authaccount include system-authsession include system-auth[root@School-Mail ~]# and i`m still not able to login with a webmail ldap client ot with thunderbird (also ldap) the error messages are still the same. > Date: Thu, 15 Feb 2007 10:10:13 -0800> From: tengel(a)fluid.com> To: dovecot(a)dovecot.org> Subject: Re: [Dovecot] I keep getting password mismatches> > Mark wrote:> > > > auth(default): passwd(mark,127.0.0.1): password mismatch> > > > The strange thing is that i can login with ssh using my username and > > password but i can`t do anything related to dovecot..> > Do you have a PAM stack installed to allow your dovecot process access > to authentication? (/etc/pam.d/dovecot e.g.)> > http://wiki.dovecot.org/PasswordDatabase/PAM> > -te> > -- > Troy Engel | Systems Engineer> Fluid, Inc | http://www.fluid.com _________________________________________________________________ Probeer Live.com: je eigen persoonlijke opstartpagina met alleen de dingen die jij belangrijk vindt op één plek. http://www.live.com/getstarted

1 0

[Dovecot] [Fwd: wrong dovecot GID while upgrading]
by Zbigniew Szalbot 17 Feb '07

17 Feb '07

Sorry to have bothered - just read the updating file...! I should have let the upgrading process remove the dovecot user... Warm regards, ZS ---------------------------- Original Message ---------------------------- Subject: wrong dovecot GID while upgrading From: "Zbigniew Szalbot" <zbyszek(a)szalbot.homedns.org> Date: Sat, February 17, 2007 21:10 To: dovecot(a)dovecot.org -------------------------------------------------------------------------- Hello, I tried to upgrade dovecot from 1.0.rc7 to rc22 but I got this error at the end of the upgrade process: Dovecot has reserved the groupname 'dovecot' and gid '143': ERROR: groupname 'dovecot' already in use by gid '1003' Please resolve these issues and try again: Either remove the conflicting group or if you wish to continue using a legacy gr oup override DOVECOT_GID. *** Error code 1 Stop in /usr/ports/mail/dovecot. So I went to /usr/ports/mail/dovecot and edited the Makefile to change the GID into: DOVECOT_UID?= 1003 DOVECOT_GID?= 1003 SCRIPT_ENV+= DOVECOT_UID=${DOVECOT_UID} \ DOVECOT_GID=${DOVECOT_GID} I saved the makefile and ran portupgrade again but I got stopped by exactly the same error. I'd appreciate suggestions how to resolve this. Thank you! -- Zbigniew Szalbot -- Zbigniew Szalbot

1 0

[Dovecot] Dovecot "open files" (again?)
by falz 17 Feb '07

17 Feb '07

I'm a new dovecot user, just began using it last week. I switched from courier because my research showed that Dovecot did indexes, and allows me to store them anywhere I chose. I did this, and it fixed some severe disk IO issues that my server had. (25k horde only webmail install using imap proxy). I'm using quotas, and by default had it set to 'dirsize'. my postfix is already creating 'maildirsize' files, so I opted to change dovecot to use this instead. However, when I do, I run into the "too many open files" issue that's been reported many times on the list. I've seen a lot of mention of too many open files, but I haven't seen it related to the quota type used. It's possible that simply my using 'dirsize' as the quota type slows things down enough to not have the issue? I don't really know. Anyhow. I doubled my max open files in FreeBSD's /boot/loader.conf to: kern.maxfiles="24656", but to no avail. When I have it set to maildirsize, the open files on the system grows uncontrollably. Under normal use, it's somewhere below 5k: sysctl -a | grep openfiles kern.openfiles: 4415 I looked into the patch mentioned here: - http://www.dovecot.org/list/dovecot/2006-November/017536.html - http://dovecot.org/list/dovecot-cvs/2006-November/006776.html Those patches already appear to be in rc15, which I'm already running (Via FreeBSD's ports). I also applied the patch mentioned here awhile back: - http://www.dovecot.org/list/dovecot/2005-June/007647.html and rebuilt, but it didn't help out either. There are also freebsd specific notes on forcing a limit on dovecot itsself using login.conf, but that wouldnt really fix anything, it would just cause dovecot to not interfere with other running daemons. - http://www.mail-archive.com/ports@openbsd.org/msg08646.html Any thoughts? TSS, you mention a few times in these notes that you're unable to reproduce this. Perhaps try with the maildir as quota? More details about my setup: - FreeBSD 4.8 (yea, I know) - Imapproxy (http://www.imapproxy.org/) - Postfix to create maildir++ maildirsize folders - MySQL backend The work of this is spread out between several servers, dovecot is running on the server that's the final SMTP delivery location, and has local disks with the maildirs. --falz

2 5

[Dovecot] upgrade from 1.0rc7
by Zbigniew Szalbot 17 Feb '07

17 Feb '07

Hello, Have been to dovecot website but could not find information on what I need to check before I upgrade from the current 1.0rc7 which I am using on a FreeBSD 6.2 system. Will the old conf (virtual users, no ssl) file work with upgraded dovecot? Many thanks! -- Zbigniew Szalbot

2 1

Re: [Dovecot] Reply-To header
by Kenny Dail 17 Feb '07

17 Feb '07

> On Saturday 17 February 2007 00:13, Mark E. Mallett wrote: > > On Sat, Feb 17, 2007 at 12:33:40AM +0200, Timo Sirainen wrote: > > > On Fri, 2007-02-16 at 15:16 -0600, Richard Laager wrote: > > > > I see you've added a Reply-To header later. The canonical response in > > > > this case is for someone to reference: > > > > http://www.unicom.com/pw/reply-to-harmful.html > > > > A canonical response to that is > > > > http://www.metasystema.net/essays/reply-to.mhtml > > My mind was not changed, sorry. First, RFC 822 is obsolete, and RFC 2822 does > not contain the quoted paragraph. Instead it says that '[w]hen > the "Reply-To:" field is present, it indicates the mailbox(es) to which the > author of the message suggests that replies be sent.' - the author, not the > mailing list software. There are other fields for that. Fortunately Dovecot's set-up, does make it the author's choice. -- Kenny Dail <kend(a)amigo.net>

2 1