- dovecot - dovecot.org

[Dovecot] pop3s fails, imaps works great
by Darren David 08 Nov '03

08 Nov '03

hey all- i'm running dovecot-0.99.10p2 on OpenBSD 3.4-snapshot (installed from ports). i have had 0 problems with imaps -- it's been running like a charm! however, i'm trying to get pop3s set up for some of my users, but i can't seem to connect from ANY client. in /etc/dovecot.conf, i've got: protocols = imaps pop3s and i've also got pop3s_listen set up with the same IP as imaps. i'm using vpopmail for auth. nmap shows that port 995 is open, and netstat does show an established connection to pop3s when i attempt to connect, but i see no activity in the dovecot log, and the client just churns and churns and eventually i have to quit it since i get no response. any ideas what i could have wrong, or how to test? thanks in advance, darren david

1 0

[Dovecot] PATCH: make local IP address available to auth modules
by Matthew Reimer 04 Nov '03

04 Nov '03

The attached patch makes the local IP address to which the client connected available to the authentication modules; i.e., the local IP address is available for substitution as %i for the mysql and pgsql modules. We needed this feature to support thousands of our legacy accounts which are authenticated by username/local_part (not the full email address) and IP address (one per domain). Timo, would this be acceptable to commit? One further improvement would be to make the remote IP address available as well, in case one wanted to implement a tcpwrapper-like functionality. Matt diff -u -r work.patched/dovecot-0.99.10/src/auth/auth-login-interface.h work/dovecot-0.99.10/src/auth/auth-login-interface.h --- work.patched/dovecot-0.99.10/src/auth/auth-login-interface.h Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/auth-login-interface.h Fri Oct 24 13:57:18 2003 @@ -1,6 +1,8 @@ #ifndef __AUTH_LOGIN_INTERFACE_H #define __AUTH_LOGIN_INTERFACE_H +#include "network.h" + /* max. size for auth_login_request_continue.data[] */ #define AUTH_LOGIN_MAX_REQUEST_DATA_SIZE 4096 @@ -47,6 +49,7 @@ struct auth_login_request_new { enum auth_login_request_type type; /* AUTH_LOGIN_REQUEST_NEW */ unsigned int id; /* unique ID for the request */ + struct ip_addr ip_local; enum auth_mech mech; enum auth_protocol protocol; @@ -56,6 +59,7 @@ struct auth_login_request_continue { enum auth_login_request_type type; /* AUTH_LOGIN_REQUEST_CONTINUE */ unsigned int id; + struct ip_addr ip_local; size_t data_size; /* unsigned char data[]; */ diff -u -r work.patched/dovecot-0.99.10/src/auth/master-connection.c work/dovecot-0.99.10/src/auth/master-connection.c --- work.patched/dovecot-0.99.10/src/auth/master-connection.c Fri Aug 22 17:56:18 2003 +++ work/dovecot-0.99.10/src/auth/master-connection.c Fri Oct 24 13:57:35 2003 @@ -133,8 +133,9 @@ } send_reply(&failure_reply, sizeof(failure_reply), request->tag); } else { - userdb->lookup(auth_request->user, userdb_callback, - POINTER_CAST(request->tag)); + userdb->lookup(auth_request->user, + net_ip2addr(&auth_request->ip_local), + userdb_callback, POINTER_CAST(request->tag)); mech_request_free(login_conn, auth_request, request->id); } } diff -u -r work.patched/dovecot-0.99.10/src/auth/mech.c work/dovecot-0.99.10/src/auth/mech.c --- work.patched/dovecot-0.99.10/src/auth/mech.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/mech.c Fri Oct 24 13:57:51 2003 @@ -97,6 +97,7 @@ auth_request->created = ioloop_time; auth_request->conn = conn; auth_request->id = request->id; + auth_request->ip_local = request->ip_local; auth_request->protocol = request->protocol; hash_insert(conn->auth_requests, POINTER_CAST(request->id), diff -u -r work.patched/dovecot-0.99.10/src/auth/mech.h work/dovecot-0.99.10/src/auth/mech.h --- work.patched/dovecot-0.99.10/src/auth/mech.h Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/mech.h Fri Oct 24 13:58:02 2003 @@ -14,6 +14,7 @@ struct login_connection *conn; unsigned int id; + struct ip_addr ip_local; time_t created; enum auth_protocol protocol; diff -u -r work.patched/dovecot-0.99.10/src/auth/passdb-ldap.c work/dovecot-0.99.10/src/auth/passdb-ldap.c --- work.patched/dovecot-0.99.10/src/auth/passdb-ldap.c Thu Mar 20 09:55:57 2003 +++ work/dovecot-0.99.10/src/auth/passdb-ldap.c Fri Oct 24 13:58:20 2003 @@ -145,7 +145,8 @@ passdb_ldap_conn->attr_names[ATTR_VIRTUAL_USER], user); } else { str = t_str_new(512); - var_expand(str, conn->set.pass_filter, user, NULL); + var_expand(str, conn->set.pass_filter, user, NULL, + net_ip2addr(&auth_request->ip_local)); filter = str_c(str); } diff -u -r work.patched/dovecot-0.99.10/src/auth/passdb-mysql.c work/dovecot-0.99.10/src/auth/passdb-mysql.c --- work.patched/dovecot-0.99.10/src/auth/passdb-mysql.c Fri Aug 29 17:47:24 2003 +++ work/dovecot-0.99.10/src/auth/passdb-mysql.c Fri Oct 24 13:58:31 2003 @@ -109,7 +109,8 @@ str = t_str_new(512); var_expand(str, conn->set.password_query, - str_escape(auth_request->user), NULL); + str_escape(auth_request->user), NULL, + net_ip2addr(&auth_request->ip_local)); query = str_c(str); mysql_request->callback = mysql_handle_request; diff -u -r work.patched/dovecot-0.99.10/src/auth/passdb-pgsql.c work/dovecot-0.99.10/src/auth/passdb-pgsql.c --- work.patched/dovecot-0.99.10/src/auth/passdb-pgsql.c Fri Apr 4 06:17:25 2003 +++ work/dovecot-0.99.10/src/auth/passdb-pgsql.c Fri Oct 24 14:01:08 2003 @@ -105,7 +105,8 @@ str = t_str_new(512); var_expand(str, conn->set.password_query, - str_escape(auth_request->user), NULL); + str_escape(auth_request->user), NULL, + net_ip2addr(&auth_request->ip_local)); query = str_c(str); pgsql_request->callback = pgsql_handle_request; diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-ldap.c work/dovecot-0.99.10/src/auth/userdb-ldap.c --- work.patched/dovecot-0.99.10/src/auth/userdb-ldap.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/userdb-ldap.c Fri Oct 24 15:46:21 2003 @@ -142,8 +142,8 @@ t_pop(); } -static void userdb_ldap_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void userdb_ldap_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct ldap_connection *conn = userdb_ldap_conn->conn; struct userdb_ldap_request *request; @@ -156,7 +156,7 @@ userdb_ldap_conn->attr_names[ATTR_VIRTUAL_USER], user); } else { str = t_str_new(512); - var_expand(str, conn->set.user_filter, user, NULL); + var_expand(str, conn->set.user_filter, user, NULL, ip_local); filter = str_c(str); } diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-mysql.c work/dovecot-0.99.10/src/auth/userdb-mysql.c --- work.patched/dovecot-0.99.10/src/auth/userdb-mysql.c Fri Oct 24 15:07:12 2003 +++ work/dovecot-0.99.10/src/auth/userdb-mysql.c Fri Oct 24 14:58:08 2003 @@ -115,8 +115,8 @@ } } -static void userdb_mysql_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void userdb_mysql_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct mysql_connection *conn = userdb_mysql_conn->conn; struct userdb_mysql_request *request; @@ -124,7 +124,8 @@ string_t *str; str = t_str_new(512); - var_expand(str, conn->set.user_query, str_escape(user), NULL); + var_expand(str, conn->set.user_query, str_escape(user), NULL, + ip_local); query = str_c(str); request = i_malloc(sizeof(struct userdb_mysql_request) + strlen(user)); diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-passwd-file.c work/dovecot-0.99.10/src/auth/userdb-passwd-file.c --- work.patched/dovecot-0.99.10/src/auth/userdb-passwd-file.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/userdb-passwd-file.c Fri Oct 24 15:28:09 2003 @@ -11,8 +11,8 @@ struct passwd_file *userdb_pwf = NULL; -static void passwd_file_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void passwd_file_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct user_data data; struct passwd_user *pu; diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-passwd.c work/dovecot-0.99.10/src/auth/userdb-passwd.c --- work.patched/dovecot-0.99.10/src/auth/userdb-passwd.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/userdb-passwd.c Fri Oct 24 15:28:26 2003 @@ -10,8 +10,8 @@ #include <pwd.h> -static void passwd_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void passwd_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct user_data data; struct passwd *pw; diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-pgsql.c work/dovecot-0.99.10/src/auth/userdb-pgsql.c --- work.patched/dovecot-0.99.10/src/auth/userdb-pgsql.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/userdb-pgsql.c Fri Oct 24 15:45:51 2003 @@ -84,8 +84,8 @@ } } -static void userdb_pgsql_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void userdb_pgsql_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct pgsql_connection *conn = userdb_pgsql_conn->conn; struct userdb_pgsql_request *request; @@ -93,7 +93,7 @@ string_t *str; str = t_str_new(512); - var_expand(str, conn->set.user_query, str_escape(user), NULL); + var_expand(str, conn->set.user_query, str_escape(user), NULL, ip_local); query = str_c(str); request = i_malloc(sizeof(struct userdb_pgsql_request) + strlen(user)); diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-static.c work/dovecot-0.99.10/src/auth/userdb-static.c --- work.patched/dovecot-0.99.10/src/auth/userdb-static.c Wed Feb 19 18:46:51 2003 +++ work/dovecot-0.99.10/src/auth/userdb-static.c Fri Oct 24 15:30:40 2003 @@ -16,8 +16,8 @@ static gid_t static_gid; static char *static_home_template; -static void static_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void static_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct user_data data; string_t *str; @@ -29,7 +29,7 @@ data.virtual_user = data.system_user = user; str = t_str_new(256); - var_expand(str, static_home_template, user, NULL); + var_expand(str, static_home_template, user, NULL, ip_local); data.home = str_c(str); callback(&data, context); diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-vpopmail.c work/dovecot-0.99.10/src/auth/userdb-vpopmail.c --- work.patched/dovecot-0.99.10/src/auth/userdb-vpopmail.c Thu Mar 20 09:46:33 2003 +++ work/dovecot-0.99.10/src/auth/userdb-vpopmail.c Fri Oct 24 15:29:24 2003 @@ -46,8 +46,8 @@ #ifdef USERDB_VPOPMAIL -static void vpopmail_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void vpopmail_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { char vpop_user[VPOPMAIL_LIMIT], vpop_domain[VPOPMAIL_LIMIT]; struct vqpasswd *vpw; diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb.h work/dovecot-0.99.10/src/auth/userdb.h --- work.patched/dovecot-0.99.10/src/auth/userdb.h Fri Aug 22 13:07:53 2003 +++ work/dovecot-0.99.10/src/auth/userdb.h Fri Oct 24 15:47:11 2003 @@ -17,8 +17,8 @@ void (*init)(const char *args); void (*deinit)(void); - void (*lookup)(const char *user, userdb_callback_t *callback, - void *context); + void (*lookup)(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context); }; extern struct userdb_module *userdb; diff -u -r work.patched/dovecot-0.99.10/src/imap-login/client.c work/dovecot-0.99.10/src/imap-login/client.c --- work.patched/dovecot-0.99.10/src/imap-login/client.c Wed Jun 25 20:02:04 2003 +++ work/dovecot-0.99.10/src/imap-login/client.c Fri Oct 24 14:21:46 2003 @@ -49,7 +49,7 @@ if (!verbose_proctitle || !process_per_connection) return; - addr = net_ip2addr(&client->common.ip); + addr = net_ip2addr(&client->common.ip_remote); if (addr == NULL) addr = "??"; @@ -126,7 +126,7 @@ client->common.io = NULL; } - fd_ssl = ssl_proxy_new(client->common.fd, &client->common.ip); + fd_ssl = ssl_proxy_new(client->common.fd, &client->common.ip_remote); if (fd_ssl != -1) { client->tls = TRUE; client_set_title(client); @@ -338,7 +338,8 @@ } } -struct client *client_create(int fd, struct ip_addr *ip, int ssl) +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl) { struct imap_client *client; @@ -357,7 +358,8 @@ client->refcount = 1; client->tls = ssl; - client->common.ip = *ip; + client->common.ip_remote = *ip_remote; + client->common.ip_local = *ip_local; client->common.fd = fd; client_open_streams(client, fd); @@ -439,7 +441,7 @@ { const char *addr; - addr = net_ip2addr(&client->common.ip); + addr = net_ip2addr(&client->common.ip_remote); if (addr == NULL) addr = "??"; diff -u -r work.patched/dovecot-0.99.10/src/imap-login/client.h work/dovecot-0.99.10/src/imap-login/client.h --- work.patched/dovecot-0.99.10/src/imap-login/client.h Tue Mar 4 19:43:04 2003 +++ work/dovecot-0.99.10/src/imap-login/client.h Fri Oct 24 14:23:02 2003 @@ -30,7 +30,8 @@ unsigned int destroyed:1; }; -struct client *client_create(int fd, struct ip_addr *ip, int ssl); +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl); void client_destroy(struct imap_client *client, const char *reason); void client_ref(struct imap_client *client); diff -u -r work.patched/dovecot-0.99.10/src/lib/var-expand.c work/dovecot-0.99.10/src/lib/var-expand.c --- work.patched/dovecot-0.99.10/src/lib/var-expand.c Sun Jan 26 19:27:51 2003 +++ work/dovecot-0.99.10/src/lib/var-expand.c Fri Oct 17 13:12:51 2003 @@ -5,7 +5,7 @@ #include "var-expand.h" void var_expand(string_t *dest, const char *str, - const char *user, const char *home) + const char *user, const char *home, const char *ip) { const char *var; unsigned int width; @@ -36,6 +36,9 @@ case 'd': var = strchr(user, '@'); if (var != NULL) var++; + break; + case 'i': + var = ip; break; default: str_append_c(dest, '%'); diff -u -r work.patched/dovecot-0.99.10/src/lib/var-expand.h work/dovecot-0.99.10/src/lib/var-expand.h --- work.patched/dovecot-0.99.10/src/lib/var-expand.h Sun Jan 26 19:27:51 2003 +++ work/dovecot-0.99.10/src/lib/var-expand.h Fri Oct 17 13:13:08 2003 @@ -6,8 +6,9 @@ %u user or user@domain %h home %n user - %d domain */ + %d domain + %i ip */ void var_expand(string_t *dest, const char *str, - const char *user, const char *home); + const char *user, const char *home, const char *ip); #endif diff -u -r work.patched/dovecot-0.99.10/src/login-common/auth-connection.c work/dovecot-0.99.10/src/login-common/auth-connection.c --- work.patched/dovecot-0.99.10/src/login-common/auth-connection.c Mon May 26 10:27:13 2003 +++ work/dovecot-0.99.10/src/login-common/auth-connection.c Fri Oct 24 14:47:17 2003 @@ -325,6 +325,7 @@ auth_request.protocol = protocol; auth_request.mech = request->mech; auth_request.id = request->id; + auth_request.ip_local = ((struct client *) request->context)->ip_local; if (o_stream_send(request->conn->output, &auth_request, sizeof(auth_request)) < 0) { errno = request->conn->output->stream_errno; @@ -342,6 +343,7 @@ /* send continued request to auth */ auth_request.type = AUTH_LOGIN_REQUEST_CONTINUE; auth_request.id = request->id; + auth_request.ip_local = ((struct client *) request->context)->ip_local; auth_request.data_size = data_size; if (o_stream_send(request->conn->output, &auth_request, diff -u -r work.patched/dovecot-0.99.10/src/login-common/client-common.h work/dovecot-0.99.10/src/login-common/client-common.h --- work.patched/dovecot-0.99.10/src/login-common/client-common.h Tue Mar 4 19:43:04 2003 +++ work/dovecot-0.99.10/src/login-common/client-common.h Fri Oct 24 14:23:58 2003 @@ -5,7 +5,8 @@ #include "master.h" struct client { - struct ip_addr ip; + struct ip_addr ip_remote; + struct ip_addr ip_local; int fd; struct io *io; @@ -17,7 +18,8 @@ /* ... */ }; -struct client *client_create(int fd, struct ip_addr *ip, int ssl); +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl); unsigned int clients_get_count(void); void clients_notify_auth_process(void); diff -u -r work.patched/dovecot-0.99.10/src/login-common/main.c work/dovecot-0.99.10/src/login-common/main.c --- work.patched/dovecot-0.99.10/src/login-common/main.c Sun Jun 22 18:09:48 2003 +++ work/dovecot-0.99.10/src/login-common/main.c Fri Oct 24 14:25:02 2003 @@ -75,28 +75,30 @@ static void login_accept(void *context __attr_unused__) { - struct ip_addr ip; + struct ip_addr ip_remote, ip_local; int fd; - fd = net_accept(LOGIN_LISTEN_FD, &ip, NULL); + fd = net_accept(LOGIN_LISTEN_FD, &ip_remote, NULL); if (fd < 0) { if (fd < -1) i_fatal("accept() failed: %m"); return; } + net_getsockname(fd, &ip_local, NULL); + if (process_per_connection) main_close_listen(); - (void)client_create(fd, &ip, FALSE); + (void)client_create(fd, &ip_remote, &ip_local, FALSE); } static void login_accept_ssl(void *context __attr_unused__) { - struct ip_addr ip; + struct ip_addr ip_remote, ip_local; int fd, fd_ssl; - fd = net_accept(LOGIN_SSL_LISTEN_FD, &ip, NULL); + fd = net_accept(LOGIN_SSL_LISTEN_FD, &ip_remote, NULL); if (fd < 0) { if (fd < -1) i_fatal("accept() failed: %m"); @@ -106,11 +108,12 @@ if (process_per_connection) main_close_listen(); - fd_ssl = ssl_proxy_new(fd, &ip); + fd_ssl = ssl_proxy_new(fd, &ip_remote); if (fd_ssl == -1) net_disconnect(fd); - else - (void)client_create(fd_ssl, &ip, TRUE); + + net_getsockname(fd_ssl, &ip_local, NULL); + (void)client_create(fd_ssl, &ip_remote, &ip_local, TRUE); } static void open_logfile(const char *name) @@ -219,7 +222,7 @@ int main(int argc __attr_unused__, char *argv[], char *envp[]) { const char *name, *group_name; - struct ip_addr ip; + struct ip_addr ip_remote, ip_local; int i, fd = -1, master_fd = -1; is_inetd = getenv("DOVECOT_MASTER") == NULL; @@ -257,7 +260,7 @@ main_init(); if (is_inetd) { - if (net_getsockname(1, &ip, NULL) < 0) { + if (net_getsockname(1, &ip_remote, NULL) < 0) { i_fatal("%s can be started only through dovecot " "master process, inetd or equilevant", argv[0]); } @@ -265,7 +268,7 @@ fd = 1; for (i = 1; i < argc; i++) { if (strcmp(argv[i], "--ssl") == 0) { - fd = ssl_proxy_new(fd, &ip); + fd = ssl_proxy_new(fd, &ip_remote); if (fd == -1) i_fatal("SSL initialization failed"); } else if (strncmp(argv[i], "--group=", 8) != 0) @@ -276,8 +279,10 @@ closing_down = TRUE; } - if (fd != -1) - (void)client_create(fd, &ip, TRUE); + if (fd != -1) { + net_getsockname(fd, &ip_local, NULL); + (void)client_create(fd, &ip_remote, &ip_local, TRUE); + } io_loop_run(ioloop); main_deinit(); diff -u -r work.patched/dovecot-0.99.10/src/login-common/master.c work/dovecot-0.99.10/src/login-common/master.c --- work.patched/dovecot-0.99.10/src/login-common/master.c Tue Mar 4 19:43:04 2003 +++ work/dovecot-0.99.10/src/login-common/master.c Fri Oct 24 14:25:57 2003 @@ -44,7 +44,7 @@ req.tag = client->fd; req.auth_pid = auth_pid; req.auth_id = auth_id; - req.ip = client->ip; + req.ip = client->ip_remote; if (fd_send(master_fd, client->fd, &req, sizeof(req)) != sizeof(req)) i_fatal("fd_send(%d) failed: %m", client->fd); diff -u -r work.patched/dovecot-0.99.10/src/master/mail-process.c work/dovecot-0.99.10/src/master/mail-process.c --- work.patched/dovecot-0.99.10/src/master/mail-process.c Fri Aug 22 18:04:27 2003 +++ work/dovecot-0.99.10/src/master/mail-process.c Fri Oct 17 13:25:54 2003 @@ -91,7 +91,7 @@ } /* expand %vars */ - var_expand(str, env, user, home); + var_expand(str, env, user, home, NULL); return str_c(str); } diff -u -r work.patched/dovecot-0.99.10/src/pop3-login/client.c work/dovecot-0.99.10/src/pop3-login/client.c --- work.patched/dovecot-0.99.10/src/pop3-login/client.c Mon May 26 10:27:13 2003 +++ work/dovecot-0.99.10/src/pop3-login/client.c Fri Oct 24 14:27:50 2003 @@ -42,7 +42,7 @@ if (!verbose_proctitle || !process_per_connection) return; - addr = net_ip2addr(&client->common.ip); + addr = net_ip2addr(&client->common.ip_remote); if (addr == NULL) addr = "??"; @@ -80,7 +80,7 @@ client->common.io = NULL; } - fd_ssl = ssl_proxy_new(client->common.fd, &client->common.ip); + fd_ssl = ssl_proxy_new(client->common.fd, &client->common.ip_remote); if (fd_ssl != -1) { client->tls = TRUE; client_set_title(client); @@ -231,7 +231,8 @@ } } -struct client *client_create(int fd, struct ip_addr *ip, int ssl) +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl) { struct pop3_client *client; @@ -250,7 +251,8 @@ client->refcount = 1; client->tls = ssl; - client->common.ip = *ip; + client->common.ip_remote = *ip_remote; + client->common.ip_local = *ip_local; client->common.fd = fd; client->common.io = io_add(fd, IO_READ, client_input, client); client_open_streams(client, fd); @@ -322,7 +324,7 @@ { const char *addr; - addr = net_ip2addr(&client->common.ip); + addr = net_ip2addr(&client->common.ip_remote); if (addr == NULL) addr = "??"; diff -u -r work.patched/dovecot-0.99.10/src/pop3-login/client.h work/dovecot-0.99.10/src/pop3-login/client.h --- work.patched/dovecot-0.99.10/src/pop3-login/client.h Tue Mar 4 19:43:04 2003 +++ work/dovecot-0.99.10/src/pop3-login/client.h Fri Oct 24 14:28:05 2003 @@ -24,7 +24,8 @@ unsigned int destroyed:1; }; -struct client *client_create(int fd, struct ip_addr *ip, int ssl); +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl); void client_destroy(struct pop3_client *client, const char *reason); void client_ref(struct pop3_client *client);

1 0

Re: [Dovecot] dovecot vs cyrus, uw, etc.
by Scott Klein 04 Nov '03

04 Nov '03

Thanks, all. I'm definitely leaning toward Dovecot. Cyrus is just too big a pain for very little payoff.

1 0

[Dovecot] current CVS seems to have index problems.
by Andreas Jaekel 04 Nov '03

04 Nov '03

Hi Timo. I've checked out the current CVS version and tested it. There seems to be a problem when dovecot accesses mailboxes for the first time: I have a mailbox with 4 mails, and no special IMAP headers. (no X-IMAPBase, X-UID etc.) and it's in mbox format. I log in, SELECT the folder and do FETCH 2 BODY[] and receive only a snipplet of the mail from somewhere in the middle of it. After some debugging it seems like dovecot: 1. creates an index, for mbox_index_rewrite(), 2. rewrites the mbox, but then 3. forgets to update the index after the rewrite. and ends up in a state with a pre-rewrite index but a post-rewrite folder. Now, there are many ways to make dovecot rebuild the index after rewriting the folder, but some are ugly and some are not, some need extra code to avoid endless loops. I don't know how you would want this fixed. I attached a patch that worked for me. After that patch, I have more (new?) problems, which may or may not be related. Now, when I SELECT a folder and do a COPY within the folder (*smile*) I get this: A COPY 1 INBOX * BYE Mailbox is in inconsistent state, please relogin. Connection closed by foreign host. ... which is what I'm gonna start looking for right now. :) Regards, Andy

1 1

[Dovecot] -test8 & Mail.app
by Dan Sully 04 Nov '03

04 Nov '03

A user just tried to use OSX 10.3's Mail.app via imap. It caused the process to start eating CPU, and this in the logs. Any idea what could be happening here? What information should I get on his setup? imap-login: Nov 03 14:28:37 Info: Login: fenner [12.106.35.5] imap(fenner): Nov 03 14:30:37 Error: Timeout while waiting for release of exclusive fcntl() lock for index file /home/f/fenner/M>aildir/.INBOX/.imap.index imap(fenner): Nov 03 14:32:37 Error: Timeout while waiting for release of exclusive fcntl() lock for index file /home/f/fenner/M>aildir/.INBOX/.imap.index imap(fenner): Nov 03 14:32:37 Panic: file index-messageset.c: line 346 (index_messageset_next): assertion failed: (!(ctx->expung>es->uid1 <= mail->rec->uid && ctx->expunges->uid2 >= mail->rec->uid)) dovecot: Nov 03 14:32:37 Error: child 26371 (imap) killed with signal 6 Thanks. -D -- Ooo-Eee-Ooo-Ah-Ah-Ting-Tang-Walla-Walla-Bing-Bang

1 0

[Dovecot] dies on start-up: Auth process
by Tom Allison 04 Nov '03

04 Nov '03

I was digging through some of the archives and ran into someone who was having the same problem, but for completely different reasons....i think. dovecot: Nov 02 07:58:51 Info: Dovecot starting up dovecot: Nov 02 07:58:52 Error: Auth process died too early - shutting down dovecot: Nov 02 07:58:52 Error: child 27673 (login) killed with signal 11 dovecot: Nov 02 07:58:52 Error: child 27672 (login) killed with signal 11 dovecot: Nov 02 07:58:52 Error: child 27671 (login) killed with signal 11 dovecot: Nov 02 07:58:52 Error: child 27670 (auth) killed with signal 11 So I took the advice posted and ran 'strace dovecot' and this is what I got. Unfortunately I'm not exactly good enough with this to even know what I'm looking at. But I suspect the notation about "/dev/null" might have something to do with it. my user, dovecot as a shell of /bin/bash and a $HOME of /usr/local/lib/dovecot By all rights, he's almost a regular user, except that his UID is <100 (I built user:dovecot as a system uid under SuSE 8.2) open("/var/run/dovecot/", O_RDONLY|O_LARGEFILE) = 3 fstat64(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 close(3) = 0 lstat64("/var/run/dovecot/", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 open(".", O_RDONLY|O_LARGEFILE) = 3 open("/var/run/dovecot//login", O_RDONLY|O_LARGEFILE|O_NOFOLLOW) = 4 fchdir(4) = 0 open("/dev/null", O_RDONLY|O_NONBLOCK|O_DIRECTORY) = -1 ENOTDIR (Not a directory) open(".", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY) = 6 fstat64(6, {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0 fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 brk(0) = 0x8061000 brk(0x8062000) = 0x8062000 getdents64(6, /* 2 entries */, 4096) = 48 getdents64(6, /* 0 entries */, 4096) = 0 close(4) = 0 close(6) = 0 fchdir(3) = 0 close(3) = 0 geteuid32() = 0 lstat64("/var/run/dovecot//login", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0 open("/var/run/dovecot//login", O_RDONLY|O_LARGEFILE) = 3 fstat64(3, {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0 close(3) = 0 lstat64("/var/run/dovecot//login", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0 access("/usr/local/libexec/dovecot/dovecot-auth", X_OK) = 0 open("/dev/null", O_RDONLY|O_LARGEFILE) = 3 fcntl64(3, F_GETFD) = 0 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 dup(3) = 4 fcntl64(4, F_GETFD) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 6 setsockopt(6, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 setsockopt(6, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 bind(6, {sa_family=AF_INET, sin_port=htons(143), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 getsockname(6, {sa_family=AF_INET, sin_port=htons(143), sin_addr=inet_addr("0.0.0.0")}, [16]) = 0 listen(6, 8) = 0 fcntl64(6, F_SETFL, O_RDONLY|O_NONBLOCK) = 0 fcntl64(6, F_GETFD) = 0 fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 dup(4) = 7 fcntl64(7, F_GETFD) = 0 fcntl64(7, F_SETFD, FD_CLOEXEC) = 0 dup(4) = 8 fcntl64(8, F_GETFD) = 0 fcntl64(8, F_SETFD, FD_CLOEXEC) = 0 dup(4) = 9 fcntl64(9, F_GETFD) = 0 fcntl64(9, F_SETFD, FD_CLOEXEC) = 0 dup2(4, 0) = 0 dup2(4, 1) = 1 dup2(4, 2) = 2 fork() = 27706 exit_group(0) = ?

4 10

Re: [Dovecot] Re: Bug with partial IMAP fetches
by Matthew Reimer 03 Nov '03

03 Nov '03

Timo Sirainen wrote: > On Fri, Oct 31, 2003 at 04:43:55PM -0600, Matthew Reimer wrote: > >>A little more information: >> >>This bug results in Mozilla and pine never rendering the message, since >>dovecot lies about how much data was really sent, as seen in the >>following log in which only 394 bytes (rather than the 10240 dovecot is >>claiming to send) are returned: > > > Does this patch fix it? http://dovecot.fi/fetch-body.patch No; I'm already using all available 0.99.10 patches. Sorry for not mentioning that before. Matt

1 0

[Dovecot] Re: Bug with partial IMAP fetches
by Matthew Reimer 03 Nov '03

03 Nov '03

A little more information: This bug results in Mozilla and pine never rendering the message, since dovecot lies about how much data was really sent, as seen in the following log in which only 394 bytes (rather than the 10240 dovecot is claiming to send) are returned: ---- 8 UID fetch 94 (UID RFC822.SIZE BODY[]<10240.10240>) * 24 FETCH (UID 94 RFC822.SIZE 20873 BODY[]<10240> {10240} G SRC="/world/image/nav/contents_bottom.gif" WIDTH="49" HEIGHT="15" BORDER="0" VSPACE="10"></A></TD></TR></TABLE>  <script type="text/javascript"> if(parent.frames.length>0&&!isContents) top.location.replace(document.location) </script> </BODY> </HTML>  --------------010405000308030207040500-- ) 8 OK Fetch completed. ---- Matt

2 1

[Dovecot] Debian bug #201444: More verbose logging
by Jaldhar H. Vyas 03 Nov '03

03 Nov '03

I brought this up a while ago but the submitter is wondering if there has been any progress on this issue. He says: It would be extremely nice to have a little bit more detailed logging, and I believe it doesn't really require that much code. I use now a daemon which logs login (name, ip; as dovecot does), and logout (with name, logout reason if any special) with the numbers of "read new mail number and size" and "mail left on server number and size". Would be nice to have something like that in dovecot. Could something like this be added for the next version? -- Jaldhar H. Vyas <jaldhar(a)debian.org> La Salle Debain - http://www.braincells.com/debian/

3 4

[Dovecot] Problems finding information on passwd-file
by David A. Desrosiers 03 Nov '03

03 Nov '03

I've recently converted over to dovecot to uw-imap, and am having a heck of a time trying to find actual docs that describe how to set up virtual users properly without using ldap or posgres.. Basically I need to know what goes in auth_userdb and auth_passdb for a system with *NO* local user accounts in /etc/passwd and /etc/shadow. I will only create mbox files for these users in /var/mail/%u and alternately a home directory where they can store their own mail folders under /home/%u. How can I do this, given the current dovecot codebase? I've googled for a few hours, talked to many people on irc, and checked the mailing lists (of what I could find) related to this, and found nothing whatsoever describing how to achive this. Dovecot apparently supports "virtual users", but I can't find any supporting documentation that describes exactly HOW to set that up. Thanks in advance. d.

2 1

Re: [Dovecot] evolution - folders not displayed correctly
by Terry 03 Nov '03

03 Nov '03

--- Jonas Smedegaard <dr(a)jones.dk> wrote: > s�n, 2003-11-02 kl. 22:54 skrev Terry: > ... > > I tried my account in evolution and all the > folders > > appear in one level and not in several as they > were in > > thunderbird. > ... > > What could be the problem? Thanks! > > The documentation of offlineimap seems to reveil the > cause of the > problem: Evolution uses "/" as delimiter, not "." as > dovecot. > > It seems to not be configurable in Evolution, so > access the files > through dovecot instead of directly. > > - Jonas I am accessing my files via dovecot. That is why I am mailing the dovecot list. Maybe I misunderstood your response. I will check around to see that deliter...probably in the xml configs somewhere.... ===== Terry __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com

2 1

[Dovecot] Bug with partial IMAP fetches
by Matthew Reimer 31 Oct '03

31 Oct '03

X-UIDL: 61c08992b287bf24b6fff123164620b2 Return-Path: <mreimer(a)vpop.net> Delivered-To: krista(a)vpop.net Received: from vpop.net (bilbo.vpop.net [65.103.33.41]) by boromir.vpop.net (Postfix) with ESMTP id 6B7D43A60F6 for <krista(a)vpop.net>; Sun, 6 Oct 2002 21:16:38 -0700 (PDT) Message-ID: <3DA10B4B.50405(a)vpop.net> Date: Sun, 06 Oct 2002 23:19:23 -0500 From: Matthew Reimer <mreimer(a)vpop.net> Organization: VPOP Technologies, Inc. User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.1) Gecko/20020829 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Krista Reimer <krista(a)vpop.net> Subject: WORLD October 12, 2002: Eight principles Content-Type: multipart/mixed; boundary="------------010405000308030207040500" This is a multi-part message in MIME format. --------------010405000308030207040500 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Lemme know if this doesn't come through right. http://www.worldmag.com/world/issue/10-12-02/closing_1.asp Matt --------------010405000308030207040500 Content-Type: text/html; charset=WINDOWS\252; name="www.worldmag.com/world/issue/10-12-02/closing_1.asp" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="www.worldmag.com/world/issue/10-12-02/closing_1.asp" Content-Base: "http://www.worldmag.com/world/issue/10 -12-02/closing_1.asp" Content-Location: "http://www.worldmag.com/world/issue/10 -12-02/closing_1.asp" <DOCTYPE HTML PUBLIC "-//IETF//DTD HTML3.0//EN" "html.dtd"> <HTML><HEAD><TITLE>WORLD October 12, 2002: Eight principles</TITLE> <META HTTP-EQUIV="Content-type" CONTENT="text/html; charset=Windows\252"> <META NAME="ISSUE" CONTENT="2002-10-12"> <META NAME="ISSUEFOLDER" CONTENT="10-12-02"> <META NAME="DESCRIPTION" CONTENT="How Christians should relate to those of other faiths : 1. We should not conceal aspects of our faith so as to avoid criticism or disapproval, and we should not ask others to do that. We believe it is just and loving to point out publicly the errors of other faiths, provided this is done with suf..."> <META NAME="ARTICLEAUTHOR" CONTENT=""></HEAD> <BODY BGCOLOR=ffffff BACKGROUND=/world/image/bg.gif LINK=#000099 VLINK=#6699CC ALINK=#0000FF> <A NAME="top">  <script type="text/javascript" src="/world/world_ad.js"></script> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="520"> <TR><TD WIDTH=20 VALIGN=TOP ALIGN=LEFT><IMG SRC="/world/image/dot_red.gif" WIDTH="20" HEIGHT="56" BORDER="0"></TD><TD WIDTH=500 VALIGN=MIDDLE ALIGN=LEFT><A TARGET="_top" HREF="/world/adredir.asp?url=http://stats.schwa.com/ss%3Fclick%26world%263a5f25c8&image=/world/image/ads/maiad.jpg" ><IMG SRC="/world/image/ads/maiad.jpg" ALT="Medical Ambassadors International" WIDTH=468 HEIGHT=60 BORDER=1></A> <BR></TD></TR></TABLE> <BR> <script type="text/javascript"> var isContents=false </script> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="720"> <TR><TD ALIGN=LEFT VALIGN=TOP WIDTH="4"><IMG SRC="/world/image/dot_red.gif" WIDTH="4" HEIGHT="1" BORDER="0"><BR></TD><TD ALIGN=LEFT VALIGN=MIDDLE WIDTH="110"><FONT SIZE="1" FACE="arial, helvetica">Call 1-800-951-NEWS (6397) to subscribe today! <BR></TD><TD ALIGN=LEFT VALIGN=MIDDLE WIDTH="38"><BR></TD><TD WIDTH="280" VALIGN=BOTTOM ALIGN=LEFT><IMG SRC="/world/image/world_header.gif" WIDTH="276" HEIGHT="51" BORDER="0"> </TD><TD WIDTH=98 VALIGN=MIDDLE ALIGN=LEFT><FONT SIZE="1" FACE="arial, helvetica">October 12, 2002<BR> Volume 17<BR> Number 39 </FONT><BR> </TD> <TD width="190"> <a href="http://www.weeklystandard.com/world"><img src="/world/image/side_ads/TWS-Wrld-2.gif" width="180" height="100"></a> </TD></TR></TABLE> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="720"><TR>  <TD ALIGN=LEFT VALIGN=TOP ROWSPAN="1" WIDTH="4"><IMG SRC="/world/image/dot_red.gif" WIDTH="4" HEIGHT="1" BORDER="0"></TD>   <TD ALIGN=LEFT VALIGN=TOP WIDTH="136"> <IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="11" BORDER="0"><BR><A HREF="home.asp" TARGET="_top"><IMG SRC="/world/image/nav/contents.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="opening_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/opening.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="cover_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/cover.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="national_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/national.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="international_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/international.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="cultural_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/cultural.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><IMG SRC="/world/image/nav/closing_v.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="20" BORDER="0"><BR><A HREF="/world/meta/search/" TARGET="_top"><IMG SRC="/world/image/nav/search.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="/world/meta/subscribe/" TARGET="_top"><IMG SRC="/world/image/nav/subscribe.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="https://secure.palmcoastd.com/pcd/document?ikey=057FCIREN" TARGET="_top"><IMG SRC="/world/image/nav/renew.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="/world/meta/archives/" TARGET="_top"><IMG SRC="/world/image/nav/archives.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="/world/classifieds/" TARGET="_top"><IMG SRC="/world/image/nav/classifieds.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="/world/meta/adrates/" TARGET="_top"><IMG SRC="/world/image/nav/adinfo.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="110"><TR><TD ALIGN=LEFT VALIGN=TOP WIDTH="110"><FONT SIZE="1" FACE="arial, helvetica"><STYLE> A.side {color:white;} </STYLE> <P><A class=side HREF=/world/issue/08-17-02/home.asp TARGET=_top><IMG SRC=/world/issue/08-17-02/image/cover_thumb.jpg WIDTH=72 HEIGHT=97 HSPACE=15 VSPACE=10 BORDER=0><BR><center>REMEMBERING 9/11 </center></A> <P>Read <A TARGET=_top HREF=/world/olasky/centralideas/index.html class=side>Central Ideas in the Development of American Journalism</a>, <A TARGET=_top HREF=/world/olasky/truth1.html class=side>Telling the Truth</A> and <A TARGET=_top HREF=/world/olasky/Prodigal/index.html class=side>Prodigal Press</a>, three books on journalism by Marvin Olasky.  <P> <A TARGET=_top HREF=http://www.gwbc.com/godsworld/worldad.asp class=side>Add Olasky, Belz, and other great thinkers to your reading list!</A> <P> <A class=side HREF=/world/meta/wear/ TARGET=_top> <IMG SRC=/world/image/world_wear_ad.gif WIDTH=99 HEIGHT=99 HSPACE=0 VSPACE=0 BORDER=1></A> <P> <A class=side HREF=/world/meta/subscribe/sub_standard.asp TARGET=_top> <IMG SRC=/world/image/bennett_book.gif WIDTH=75 HEIGHT=101 HSPACE=15 VSPACE=0 BORDER=1> <center>Free Book!</center></A> <P>Find out <A TARGET=_top HREF=/world/meta/contact/ class=side>how to contact us</A>. <P>Not familiar with WORLD Magazine? <A HREF=/world/meta/about/pr.asp TARGET=_top class=side>Find out more about us.</A> <P>Read our <A HREF=/world/meta/about/mission.asp TARGET=_top class=side>Mission Statement.</A> <P>If you are already a WORLD reader, head to <A HREF=/world/meta/help/ TARGET=_top class=side>Help Us Out</A> to find out how to help us grow.  <P>Find out <A HREF=/world/meta/about/about.asp TARGET=_top class=side>about this site</A>. <P>Excellence in Home Education starts here. Visit the new God's World Book Club Online! <A HREF=http://www.gwbc.com/godsworld TARGET=_top class=side>www.gwbc.com</A>. <p>Check out the World Journalism Institute website at <a href=http://www.worldji.com TARGET=_top class=side>www.worldji.com</a> and apply online! <p>Since 1981, God's World News has been helping children to understand and interpret the world around them. Now you can visit God's World News Online at <A HREF=http://www.gwnews.com TARGET=_top class=side>GWNews.com</a></font></body> <P></FONT> </TD> </TR> </TABLE> </TD>   <TD ALIGN=LEFT VALIGN=TOP WIDTH="16"> <IMG SRC="/world/image/dot_clr.gif" WIDTH="16" HEIGHT="1" BORDER="0"><BR></TD>   <TD ALIGN=LEFT VALIGN=TOP WIDTH="364">   <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" BORDER="0" HEIGHT="45"> <TR VALIGN="MIDDLE"> <TD ALIGN="LEFT"><FORM METHOD="POST" ACTION="/world/redirect.asp"> <INPUT TYPE=HIDDEN NAME="folder" VALUE="10-12-02"> <SELECT NAME="where"> <OPTION VALUE="closing_1.asp">Also in CLOSING THOUGHTS <OPTION VALUE="closing_2.asp">What's the difference? </SELECT> </TD> <TD ALIGN="LEFT"> <INPUT TYPE=SUBMIT VALUE="go"></FORM> </TD></TR></TABLE>  <FONT SIZE="5" COLOR="CC0000" FACE="arial, helvetica"><B>JOHN PIPER</B></FONT><BR><IMG SRC="/world/image/line_364.gif" WIDTH="364" HEIGHT="1" BORDER="0"><BR> <H2>Eight principles</H2> <H3><I>How Christians should relate to those of other faiths</I></H3>   <P>1. We should not conceal aspects of our faith so as to avoid criticism or disapproval, and we should not ask others to do that. We believe it is just and loving to point out publicly the errors of other faiths, provided this is done with sufficient evidence that the sacred writings or representative spokesmen of those faiths do indeed express these errors. We must strive not to misrepresent other faiths, as that is not only disrespectful but also undermining of our own credibility.<P> 2. We should acknowledge our sin and desperate need of salvation by a crucified and risen Savior, and not posture ourselves as worthy of salvation as if we had superior intellect or wisdom or goodness. We are beggars who have, by grace, found the life-giving bread of truth, forgiveness, and joy. As we expose the errors of other religions, we should feel and express sorrow and compassion for those who do not embrace Christ so as to be saved.<P> 3. We should not expect a fair fight in a secular world that is hostile to God and uncomfortable around the truth of Christ. Therefore, our response to abuse, distortion, or slander should not be angry resentment, but patient witness to the truth, in the hope and with the prayer that returning good for evil may open hearts to the truth. We must recognize that persecution is normal and that much of the protection Christians have in America is abnormal in history and in the world. Our witness will be best advanced by kind, steadfast statements and reasonable defenses of the truth.<P> 4. We should renounce all violence as a means of spreading our faith. Christians spread biblical faith by suffering, not by causing suffering. Authentic Christianity cannot be coerced by force or manipulation. We should acknowledge and proclaim that Christ will, at his personal appearing, punish those who have rejected him; his violence at the end of the age is a decisive reason we should not and may not exert violence against anyone because of his beliefs. This is Christ's right, not ours.<P> 5. We believe that God has given to civil government, not individuals or the church, the duty to bear the sword for justice and safety. Civil authorities should not punish beliefs, but some behaviors rooted in beliefssuch as killing, assault, or theftmay be outside the law and therefore punishable by the civil authority. Which behaviors are legally prohibited in a society based on freedom of belief and religion will be determined in a process of persuasion, debate, and election of representative lawmakers, with checks and balances provided by the executive and judicial branches and by constitutional safeguards for the rights of minorities.<P> 6. We should distinguish between a just war of defense against aggression and a religious war against people because of their beliefs. We should acknowledge that this distinction will probably not be recognized by certain religions that define their beliefs to include the right of cultural domination by force. But we should insist on this distinction rather than accept the claim of aggressors that our resistance is a religious attack on their faith. We should argue that the ground of such national defense is the civil right to freedom (of religion and speech and press and assembly), not disapproval of the religion underlying the attack.<P> 7. We should distinguish between the right to express criticism of erroneous beliefs and sinful behaviors, on the one hand, and the false inference some draw from this criticism that proponents of the criticized beliefs can therefore legitimately be mistreated. We also should not accept the claim that being criticized or denounced as mistaken or as sinners is a form of mistreatment. It is not a crime (hate crime or otherwise) to say publicly that someone's belief is wrong and harmful, or to call someone's behavior sinful and destructive. A necessary part of all debate concerning beliefs, behaviors, or proposals is the argument that some are wrong, ill-founded, and have deleterious effects.<P> 8. We believe that every religion, worldview, or philosophy of life may freely endeavor to influence and shape our culture. We renounce the use of force or bribery or deceit in this culture-shaping effort. We affirm preaching the gospel, publishing truth, and modeling love and justice, as well as prayer, persuasion, and participation in the political process. We recognize that all laws "impose" some group's behavioral conviction on all, so it is not a compelling criticism to say that a law that governs behavior is bad because it "imposes someone's morality" on society. It is therefore particularly vital to support principles, laws, and policies that protect the legal freedoms of minorities that do not have the numbers to sway lawmaking processes.<P> These principles are further developed at the website http://www.desiringgod.org/library/topics/culture/tolerance_principles.html  <BR></TD><TD width="200" valign="top"> <link rel="Stylesheet" href="/world/right-bar-basic.css" type="text/css"></link> <style type="text/css"> @import: "/world/right-bar-advanced.css"; </style> <div id="rightbar"> <div id="listenlinks"> <h4><a target="_top" href="/world/listen/">Listen to WORLD</a></h4> <div>Daily radio shorts by Nick Eicher. <a target="_top" href="/world/listen/">Read more...</a><br /> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000201.mp3">10/7/02 download MP3</a></p> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000199.mp3">10/8/02 download MP3</a></p> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000198.mp3">10/9/02 download MP3</a></p> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000197.mp3">10/10/02 download MP3</a></p> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000196.mp3">10/11/02 download MP3</a></p> </div> </div> <div id="recentlinks"> <h4><a target="_top" href="/world/meta/archives/">From Previous Weeks</a></h4> <div> <p><a target="_top" href="/world/issue/10-05-02/"><img src="/world/issue/10-05-02/image/cover_thumb.jpg" width="72" height="97" /><br /> October 5, 2002</a></p> <p><a target="_top" href="/world/issue/09-28-02/"><img src="/world/issue/09-28-02/image/cover_thumb.jpg" width="72" height="97" /><br /> September 28, 2002</a></p> <p><a target="_top" href="/world/issue/09-21-02/"><img src="/world/issue/09-21-02/image/cover_thumb.jpg" width="72" height="97" /><br /> September 21, 2002</a></p> </div> <br /> <a href="http://worldmag.com/world/classifieds/"><img src="/world/image/side_ads/Searching_Ad_100x180.gif" width="180" height="100"></a> </div> </div> </TD></TR> </TABLE> <BR> <TABLE BORDER="0" WIDTH=520><TR><TD WIDTH=110 ALIGN=right VALIGN=top><FONT COLOR=ffffff><B>Search for more<BR>articles about:</B></FONT><BR></TD><TD WIDTH=40><BR></TD><TD WIDTH=370 VALIGN=top ALIGN=left BGCOLOR="#CCCC99"> <TABLE WIDTH="370" BORDER="0" CELLPADDING="8" CELLSPACING="0"><TR><TR><TD WIDTH="370" ALIGN="LEFT" VALIGN="top"><form name="searchForm" action="/world/meta/search/search.asp" onsubmit=""> <input type="hidden" name="performSearch" value="y"> <INPUT TYPE="text" NAME="target" SIZE="30" MAXLENGTH="100"><br> <input type=checkbox name="stype" value="phrase" checked> exact phrase </TD><TD ALIGN="LEFT" VALIGN="TOP"> <INPUT TYPE=SUBMIT VALUE="search"></FORM> </TD></TR> </TABLE> </TD></TR></TABLE> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="500"><TR><TD WIDTH="156"><BR></TD><TD ALIGN=LEFT WIDTH="253"><FONT SIZE="1"><A HREF="/world/meta/copyright.asp" TARGET="_top">© 1996 - 2002 WORLD</A> Magazine. <A HREF="/world/meta/contact/" TARGET="_top">mailbag(a)worldmag.com</A></FONT></TD><TD COLSPAN="1" ALIGN=RIGHT WIDTH="91"><A HREF="#top"><IMG SRC="/world/image/nav/top_bottom.gif" WIDTH="22" HEIGHT="15" HSPACE="10" VSPACE="10" BORDER="0"></A><A HREF="home.asp" TARGET="_top"><IMG SRC="/world/image/nav/contents_bottom.gif" WIDTH="49" HEIGHT="15" BORDER="0" VSPACE="10"></A></TD></TR></TABLE>  <script type="text/javascript"> if(parent.frames.length>0&&!isContents) top.location.replace(document.location) </script> </BODY> </HTML>  --------------010405000308030207040500--

1 0

Re: [Dovecot] SSL Certificate Chains?
by Matthew Reimer 29 Oct '03

29 Oct '03

Timo Sirainen wrote: > On Mon, 2003-10-27 at 15:01, Steve Gare wrote: > >>Just a quicky, I can't see anything about how Dovecot handles >>certificate chains. >> >>1, Does it handle them? >>2, How, if if does? >> >>(Just got a cert from www.instantssl.com and I need there intermediate >>cert do validate it.., Works fine with Apache and Exim ) > > > Dovecot doesn't check client's certificate. It's client's job to check > server's certificate and check the chains. Or at least I don't think > there's anything special Dovecot should do with them.. I had trouble with an instantssl cert, and found that what I needed to do was to also include all the certs up the chain, in a certain order, to keep the client from complaining about an invalid certificate. The first certificate in the pem file should be the the server certificate, followed by its chain starting from the root certificate down. Matt

1 0

[Dovecot] Copy from INBOX to INBOX corrupts file
by Andreas Jaekel 29 Oct '03

29 Oct '03

Aloha, again, Timo. Concerning the problem of copying within one folder... I'm still not sure it's not a problem I created myself, but I think it's caused by the use of the buffered IO routines in ostream-file.c ... you use io_add() to schedule write operations for later while simultanously reading new chunks from the very same file. This seems to confuse dovecot and make it write the copy to the strangest locations. I think when working within one folder I should use either blocking IO or a lot of calls to o_stream_flush()... what do you think? Greetings, Andy

2 3

[Dovecot] SSL Certificate Chains?
by Steve Gare 29 Oct '03

29 Oct '03

Hi, Just a quicky, I can't see anything about how Dovecot handles certificate chains. 1, Does it handle them? 2, How, if if does? (Just got a cert from www.instantssl.com and I need there intermediate cert do validate it.., Works fine with Apache and Exim ) Cheers, Steve Gare - Xantara.Net -- 0845 123 5707

2 1

[Dovecot] root privilidge issues?
by lists＠netxp.com.au 24 Oct '03

24 Oct '03

hi all, i am migrating from imap-uw to dovecot on a freebsd machine and i am getting this error message: imap(phil): Oct 22 19:24:01 Fatal: We couldn't drop root group privileges imap-login: Oct 22 19:24:01 Info: Login: phil [220.240.217.2] dovecot: Oct 22 19:24:01 Error: child 1019 (imap) returned error 89 when it trie manually logining in this is what i see telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK dovecot ready. 1 login phil password 1 OK Logged in. Connection closed by foreign host. any ideas? thansk in advance phil

2 1

[Dovecot] Shared Folders
by D Canfield 21 Oct '03

21 Oct '03

I was just wondering if any thought has been given to shared folders and how they might be implemented yet? True shared folders are compelling enough to our organization that I've been looking into moving to Cyrus from Courier, but transparent folder migration looks to be nearly impossible for more than a handful of accounts... so that leaves me back at hoping courier or dovecot can eventually do what we want. We have a lot of organizations on campus that have a generic mail address such as "maintenance" of "physics." We don't like the idea of shared accounts (invariably either the mailbox gets forgotten about when a secretary changes, the password gets lost, or everyone on campus ends up with the password), so our policies require such generic accounts to be forwarded to a folder in a "real person's" account. This works well for us, but the users are clamoring for the ability to have more than one person access those folders. The problem with Courier's shared folders is that one person owns the folder and while others can see that mailbox, only the owner has write access. This kills most of the utility of shared folders, except for use as announcement areas. As I understand it, the reason Courier does it this way is that it uses the underlying unix permissions to control access to the mailbox. I'm thinking that even if dovecot uses the same concept for shared folders, it should be possible to allow multiple users to write to the folders if filesystem ACL support is used. At least ext3 and XFS both support ACL's, so there is a reasonable amount of support for them, and they would allow dovecot to give multiple users write access to the folders without having to manage it's own security system. The only issue would be that the delivery agent would have to make sure that that ACLs for a folder are kept consistent... I'm not even sure dovecot has to be ACL-aware. Anyway, if there is a completely different plan in the works, that's great too, but I wanted to at least voice an opinion and offer a suggestion of how to make it work. Thanks DC

4 5

[Dovecot] A view quirks
by Andreas Jaekel 21 Oct '03

21 Oct '03

Aloha Timo. I found a few odd things while playing with dovecot. At least one of them bugs me, but it might be a result of my own patches - I haven't testet it with mbox or maildir, yet. The details :) 1. * OK dovecot ready. A = (<return> Connection closed by foreign host. 2. * OK dovecot ready. A001 LOGIN xxxxxx xxxxxx A001 OK Logged in. A002 COPY 1 INBOX Connection closed by foreign host. (segfault) 3. [...] A003 SEARCH SUBJECT "test" * SEARCH 1 A003 OK Search completed. A004 SEARCH SUBJECT {6} + OK "test" * SEARCH A004 OK Search completed. I think these two searches should give identical results. 4. (my current nemesis) A002 CREATE bla A003 SELECT INBOX A004 COPY 1 bla A005 SELECT bla A006 COPY 1 bla * NO Internal error [2003-10-16 16:07:21] A006 OK Copy completed. If I copy from the current folder to the current folder I get a scrambled mailbox and an error. This might be selfmade, though. I'm currently trying to find this bug, but the various layers of [_oi]streams and callback and function pointer structs do not help :) I think the stream routines hide the mstream(istream(realstream(iostream))) and the ostream(_ostream(iostream)) behind the same file descriptor and the data gets written to the wrong position. BTW: what exactly is "max_pos"? Greetings and thanks! Andy

2 6

[Dovecot] move from imap-uw
by Sergey Matveychuk 18 Oct '03

18 Oct '03

Hello! I've just subscribed and I'd like to ask. Is there any troubles if I change my imap-uw with davecot? Will davecot pick up imap-uw created folders (mboxes)? I use all protocols: imap, imaps, pop and pops. I've seen some problems with mbox was mention on this maillist. What kind of problem? -- Sem.

2 1

[Dovecot] Re: Darwin Build (cvs)
by Jesse Peterson 16 Oct '03

16 Oct '03

On Thursday, October 9, 2003, at 02:00 AM, dovecot-request(a)procontrol.fi wrote: > From: Timo Sirainen <tss(a)iki.fi> > Subject: Re: [Dovecot] Darwin Build (cvs) > To: dovecot(a)procontrol.fi > Message-ID: <1065657988.1377.43.camel@hurina> > Content-Type: text/plain > > On Wed, 2003-10-08 at 17:23, Jesse Peterson wrote: >> Here's the deal: OpenDarwin 6.6 (closest relative being Mac OS X >> 10.2.6) won't build from CVS. Specifically libtoolize doesn't seem to >> exist (does it even come with libtool?) and the other parts of the >> "autogen.sh" fail miserably. > > So, the solution is to get libtoolize :) Mine seems to have come from > libtool14 package in Fink (although it is libtool v1.5, weird). Thought so. I wasn't sure if it came with libtool or not (OpenDarwin does ship with libtool). > > Also it looks like you're missing iconv.m4. It's in gettext package in > Fink. Ahh, I'll grab that as well. > > Did OpenDarwin use Fink? > Yes, although they've switched from 'DarwinPorts' to MetaPkg. Not sure the status on either of those, though. > Anyway, building from CVS requires some more packages to install which > aren't needed if you stick with tarballs. I could also build a new test > tarball if you need :) > This would be great. Maybe an automatically posted daily snapshot? Thanks Timo.

2 1

[Dovecot] problem getting mail from mbox
by Gavin Estey 16 Oct '03

16 Oct '03

I'm trying to set up dovecot and I'm running into a few problems. I just want to use IMAP for one user, everyone else gets POP3 from the existing (working server). $MAIL is set to /var/spool/mail/gavin_imap In my /var/spool/mail directory I now have a problem: -rw------- 1 gavin_im mail 1392 Oct 14 22:28 gavin_imap -rw------- 1 gavin_im popusers 0 Oct 14 21:54 gavin_imap When I try to get my mail, I guess it's checking the wrong file as I can't download anything. I also can't delete the file (which I find confusing as I am root): [root@chicken mail]# rm gavin_imap rm: cannot remove `gavin_imap': No such file or directory I actually have the same problem with the dovecot log file. I have this in my config: info_log_path = /tmp/dovecot -rw------- 1 root root 4436 Oct 14 22:40 dovecot [root@chicken tmp]# cat dovecot cat: dovecot: No such file or directory I don't get any obvious errors if I telnet in: [root@chicken tmp]# telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK dovecot ready. 1 LOGIN gavin_imap <pass> 1 OK Logged in. 1 SELECT Inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1066184985] UIDs valid * OK [UIDNEXT 1] Predicted next UID 1 OK [READ-WRITE] Select completed. 1 LOGOUT * BYE Logging out 1 OK Logout completed. Connection closed by foreign host. This is confusing the hell out of me. Is there anything obvious that I've screwed up? Thanks! Gavin.

2 3

[Dovecot] exchange, dovecot, mutt, evolution
by Krammer Clemens 16 Oct '03

16 Oct '03

Dear all, When I "migrate" my outlook folders to imapd (dovecot) it works well from a Windoze perspective, but if I open a migrated folder via imap (mutt, evolution) a cannot see the Senders. If i open the folder locally via mutt, the Senders are displayed correctly. By examining one folder with vi I recognised that there are no valid From headers but Return-Paths. Is there a common way to see the senders when connecting with imap? Best Regards, Clemens

2 1

[Dovecot] Ordering mailboxes
by Ian Marlier 16 Oct '03

16 Oct '03

I have a really weird problem. To whit: I compiled dovecot 0.99.10 on two different systems: a linux-ppc box running Debian, and a Mac OS X Server v. 10.2.8. It compiled fine on both. The same Maildir's are being served up on both -- the OS X server exports home directories to the clients via NFS. BUT the OS X box orders mailboxes this way: INBOX Deleted Items Sent Items . . . And the Debian box orders mailboxes this way: INBOX INBOX/Deleted Items INBOX/Sent Items . . . The compilation options were the same in both cases. The dovecot.conf files are essentially identical -- the only changes are the names of the SSL certificates and the name of the dovecot user. What I can't figure out is, why is the ordering of the mailboxes different? This is the Maildir directory list: [network:/Users/foc/Maildir] root# ls -al /Network/Servers/network.uphamscornercs.net/Users/marlier/Maildir/ total 816 drwxrw---- 22 marlier staff 748 Oct 13 19:52 . drwxr-xr-x 64 marlier staff 2176 Oct 10 14:08 .. drwxrw---- 13 marlier staff 442 Oct 13 19:14 .Deleted Items drwxrwxr-x 9 marlier staff 306 Oct 13 19:14 .Dovecot drwxrw---- 12 marlier staff 408 Oct 8 12:26 .Drafts drwxrw---- 7 marlier staff 238 Oct 13 19:28 .INBOX drwxrw---- 13 marlier staff 442 Sep 16 22:59 .Jen drwxrw---- 13 marlier staff 442 Oct 13 18:30 .Klimas List drwxrw---- 13 marlier staff 442 Oct 13 17:57 .Rachel drwxrw---- 13 marlier staff 442 Oct 13 19:14 .Sent Items drwxrw---- 13 marlier staff 442 Oct 13 19:16 .UCCS -rw-rw---- 1 marlier staff 5 Sep 15 20:58 .customflags -rw-rw---- 1 marlier staff 120 Oct 13 18:16 .subscriptions -rw------- 1 marlier staff 296206 Oct 13 19:40 bincimap-cache -rw------- 1 marlier staff 534 Sep 22 17:45 bincimap-subscribed -rw------- 1 marlier staff 197 Sep 16 21:38 bincimap-subscribed.old -rw------- 1 marlier staff 59 Oct 13 19:40 bincimap-uidvalidity drwx------ 3582 marlier staff 121788 Oct 13 19:36 cur -rw------- 1 marlier staff 96421 Oct 13 19:36 dovecot-uidlist drwx------ 2 marlier staff 68 Oct 13 19:36 new drwxrw--w- 2 marlier staff 68 Sep 15 20:58 recov drwx------ 2 marlier staff 68 Oct 13 19:36 tmp [network:/Users/foc/Maildir] root# Any thoughts? (dovecot.conf files is included here, if it's helpful): [network:/Users/foc/Maildir] root# more /usr/local/etc/dovecot.conf ## Dovecot 1.0 configuration file # Default values are shown after each value, it's not required to uncomment # any of the lines. Exception to this are paths, they're just examples # with real defaults being based on configure options. The paths listed here # are for configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var # --with-ssldir=/etc/ssl # Base directory where to store runtime data. base_dir = /var/run/dovecot/ # Protocols we want to be serving: # imap imaps pop3 pop3s protocols = imap imaps pop3 pop3s # IP or host address where to listen in for connections. It's not currently # possible to specify multiple addresses. "*" listens in all IPv4 interfaces. # "[::]" listens in all IPv6 interfaces, but may also listen in all IPv4 # interfaces depending on the operating system. You can specify ports with # "host:port". imap_listen = * pop3_listen = * # IP or host address where to listen in for SSL connections. Defaults # to above non-SSL equilevants if not specified. #imaps_listen = #pop3s_listen = # Disable SSL/TLS support. ssl_disable = no # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. Included doc/mkcert.sh can be used to easily generate self-signed # certificate, just make sure to update the domains in dovecot-openssl.cnf ssl_cert_file = /etc/ssl/certs/imapd.pem ssl_key_file = /etc/ssl/private/imapd.pem # SSL parameter file. Master process generates this file for login processes. # It contains Diffie Hellman and RSA parameters. ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat # How often to regenerate the SSL parameters file. Generation is quite CPU # intensive operation. The value is in hours, 0 disables regeneration # entirely. ssl_parameters_regenerate = 0 # Disable LOGIN command and all other plaintext authentications unless # SSL/TLS is used (LOGINDISABLED capability) disable_plaintext_auth = no # Use this logfile instead of syslog(). /dev/stderr can be used if you want to # use stderr for logging (ONLY /dev/stderr - otherwise it is closed). log_path = /var/log/mail.log # For informational messages, use this logfile instead of the default info_log_path = /var/log/mail.log # Prefix for each line written to log file. % codes are in strftime(3) # format. Note the extra space at the end of line. log_timestamp = %b %d %H:%M:%S dovecot: ## ## Login processes ## # Directory where authentication process places authentication UNIX sockets # which login needs to be able to connect to. The sockets are created when # running as root, so you don't have to worry about permissions. login_dir = /var/run/dovecot/login # chroot login process to the login_dir. Only reason not to do this is if you # wish to run the whole Dovecot without roots. login_chroot = yes ## ## IMAP login process ## login = imap # Executable location. login_executable = /usr/local/libexec/dovecot/imap-login # User to use for the login process. Create a completely new user for this, # and don't use it anywhere else. The user must also belong to a group where # only it has access, it's used to control access for authentication process. login_user = dovecot # Set max. process size in megabytes. If you don't use # login_process_per_connection you might need to grow this. login_process_size = 32 # Should each login be processed in it's own process (yes), or should one # login process be allowed to process multiple connections (no)? Yes is more # secure, espcially with SSL/TLS enabled. No is faster since there's no need # to create processes all the time. login_process_per_connection = yes # Number of login processes to create. If login_process_per_user is # yes, this is the number of extra processes waiting for users to log in. login_processes_count = 5 # Maximum number of extra login processes to create. The extra process count # usually stays at login_processes_count, but when multiple users start logging # in at the same time more extra processes are created. To prevent fork-bombing # we check only once in a second if new processes should be created - if all # of them are used at the time, we double their amount until limit set by this # setting is reached. This setting is used only if login_process_per_use is yes. login_max_processes_count = 128 # Maximum number of connections allowed in login state. When this limit is # reached, the oldest connections are dropped. If login_process_per_user # is no, this is a per-process value, so the absolute maximum number of users # logging in actually login_processes_count * max_logging_users. login_max_logging_users = 256 ## ## POP3 login process ## # Settings default to same as above, so you don't have to set anything # unless you want to override them. login = pop3 # Exception to above rule being the executable location. login_executable = /usr/local/libexec/dovecot/pop3-login ## ## Mail processes ## # Maximum number of running mail processes. When this limit is reached, # new users aren't allowed to log in. max_mail_processes = 1024 # Show more verbose process titles (in ps). Currently shows user name and # IP address. Useful for seeing who are actually using the IMAP processes # (eg. shared mailboxes or if same uid is used for multiple accounts). verbose_proctitle = yes # Show protocol level SSL errors. verbose_ssl = yes # Valid UID range for users, defaults to 500 and above. This is mostly # to make sure that users can't log in as daemons or other system users. # Note that denying root logins is hardcoded to dovecot binary and can't # be done even if first_valid_uid is set to 0. first_valid_uid = 30 #last_valid_uid = 0 # Valid GID range for users, defaults to non-root/wheel. Users having # non-valid GID as primary group ID aren't allowed to log in. If user # belongs to supplementary groups with non-valid GIDs, those groups are # not set. first_valid_gid = 1 #last_valid_gid = 0 # ':' separated list of directories under which chrooting is allowed for mail # processes (ie. /var/mail will allow chrooting to /var/mail/foo/bar too). # This setting doesn't affect login_chroot or auth_chroot variables. # WARNING: Never add directories here which local users can modify, that # may lead to root exploit. Usually this should be done only if you don't # allow shell access for users. See doc/configuration.txt for more information. # valid_chroot_dirs = /var/mail # Default MAIL environment to use when it's not set. By leaving this empty # dovecot tries to do some automatic detection as described in # doc/mail-storages.txt. There's a few special variables you can use: # # %u - username # %n - user part in user@domain, same as %u if there's no domain # %d - domain part in user@domain, empty if user there's no domain # %h - home directory # # You can also limit a width of string by giving the number of max. characters # after the '%' character. For example %1u gives the first character of # username. Some examples: # # maildir:/var/mail/%1u/%u/Maildir # mbox:~/mail/:INBOX=/var/mail/%u # mbox:/var/mail/%d/%n/:INDEX=/var/indexes/%d/%n # default_mail_env = maildir:~/Maildir # Space-separated list of fields to cache for all mails. Currently these # fields are allowed followed by a list of commands they speed up: # # Envelope - FETCH ENVELOPE and SEARCH FROM, TO, CC, BCC, SUBJECT, # SENTBEFORE, SENTON, SENTSINCE, HEADER MESSAGE-ID, # HEADER IN-REPLY-TO # Body - FETCH BODY # Bodystructure - FETCH BODY, BODYSTRUCTURE # MessagePart - FETCH BODY[1.2.3] (ie. body parts), RFC822.SIZE, # SEARCH SMALLER, LARGER, also speeds up BODY/BODYSTRUCTURE # generation. This is always set with mbox mailboxes, and # also default with Maildir. # # Different IMAP clients work in different ways, that's why Dovecot by default # only caches MessagePart which speeds up most operations. Whenever client # does something where caching could be used, the field is automatically marked # to be cached later. For example after FETCH BODY the BODY will be cached # for all new messages. Normally you should leave this alone, unless you know # what most of your IMAP clients are. Caching more fields than needed makes # the index files larger and generate useless I/O. # # With maildir there's one extra optimization - if nothing is cached, indexing # the maildir becomes much faster since it's not opening any of the mail files. # This could be useful if your IMAP clients access only new mails. mail_cache_fields = MessagePart Envelope Bodystructure Body # Space-separated list of fields that Dovecot should never set to be cached. # Useful if you want to save disk space at the cost of more I/O when the fields # needed. #mail_never_cache_fields = # Workarounds for various client bugs: # oe6-fetch-no-newmail: # Never send EXISTS/RECENT when replying to FETCH command. Outlook Express # seems to think they are FETCH replies and gives user "Message no longer # in server" error. Note that OE6 still breaks even with this workaround # if synchronization is set to "Headers Only". # outlook-idle: # Outlook and Outlook Express never abort IDLE command, so if no mail # arrives in half a hour, Dovecot closes the connection. This is still # fine, except Outlook doesn't connect back so you don't see if new mail # arrives. #client_workarounds = # Dovecot can notify client of new mail in selected mailbox soon after it's # received. This setting specifies the minimum interval in seconds between # new mail notifications to client - internally they may be checked more or # less often. Setting this to 0 disables the checking. # NOTE: Evolution client breaks with this option when it's trying to APPEND. mailbox_check_interval = 30 # Like mailbox_check_interval, but used for IDLE command. #mailbox_idle_check_interval = 30 # Allow full filesystem access to clients. There's no access checks other than # what the operating system does for the active UID/GID. It works with both # maildir and mboxes, allowing you to prefix mailboxes names with eg. /path/ # or ~user/. mail_full_filesystem_access = no # Maximum allowed length for custom flag name. It's only forced when trying # to create new flags. mail_max_flag_length = 50 # Save mails with CR+LF instead of plain LF. This makes sending those mails # take less CPU, especially with sendfile() syscall with Linux and FreeBSD. # But it also creates a bit more disk I/O which may just make it slower. mail_save_crlf = no # Use mmap() instead of read() to read mail files. read() seems to be a bit # faster with my Linux/x86 and it's better with NFS, so that's the default. mail_read_mmaped = no # Copy mail to another folders using hard links. This is much faster than # actually copying the file. This is problematic only if something modifies # the mail in one folder but doesn't want it modified in the others. I don't # know any MUA which would modify mail files directly. IMAP protocol also # requires that the mails don't change, so it would be problematic in any case. # If you care about performance, enable it. maildir_copy_with_hardlinks = no # Check if mails' content has been changed by external programs. This slows # down things as extra stat() needs to be called for each file. If changes are # noticed, the message is treated as a new message, since IMAP protocol # specifies that existing message are immutable. maildir_check_content_changes = yes # Which locking methods to use for locking mbox. There's three available: # dotlock: Create <mailbox>.lock file. This is the oldest and most NFS-safe # solution. If you want to use /var/mail/ like directory, the users # will need write access to that directory. # fcntl : Use this if possible. Works with NFS too if lockd is used. # flock : May not exist in all systems. Doesn't work with NFS. # # You can use both fcntl and flock too; if you do the order they're declared # with is important to avoid deadlocks if other MTAs/MUAs are using both fcntl # and flock. Some operating systems don't allow using both of them # simultaneously, eg. BSDs. If dotlock is used, it's always created first. mbox_locks = fcntl # Should we create dotlock file even when we want only a read-lock? Setting # this to yes hurts the performance when the mailbox is accessed simultaneously # by multiple processes, but it's needed for reliable reading if no other # locking methods are available. mbox_read_dotlock = no # Maximum time in seconds to wait for lock (all of them) before aborting. mbox_lock_timeout = 300 # If dotlock exists but the mailbox isn't modified in any way, override the # lock file after this many seconds. mbox_dotlock_change_timeout = 30 # umask to use for mail files and directories umask = 0077 # Drop all privileges before exec()ing the mail process. This is mostly # meant for debugging, otherwise you don't get core dumps. Note that setting # this to yes means that log file is opened as the logged in user, which # might not work. It could also be a small security risk if you use single UID # for multiple users, as the users could ptrace() each others processes then. mail_drop_priv_before_exec = no ## ## IMAP process ## # Executable location imap_executable = /usr/local/libexec/dovecot/imap # Set max. process size in megabytes. Most of the memory goes to mmap()ing # files, so it shouldn't harm much even if this limit is set pretty high. imap_process_size = 256 # Support for dynamically loadable modules. imap_use_modules = no #imap_modules = /usr/local/lib/dovecot/imap ## ## POP3 process ## # Executable location pop3_executable = /usr/local/libexec/dovecot/pop3 # Set max. process size in megabytes. Most of the memory goes to mmap()ing # files, so it shouldn't harm much even if this limit is set pretty high. pop3_process_size = 256 # Support for dynamically loadable modules. pop3_use_modules = no #pop3_modules = /usr/lib/dovecot/pop3 ## ## Authentication processes ## # You can have multiple processes; each time "auth = xx" is seen, a new # process definition is started. The point of multiple processes is to be # able to set stricter permissions to others. For example, plain/PAM # authentication requires roots, but if you also use digest-md5 authentication # for some users, you can authenticate them without any privileges in a # separate auth process. Just remember that only one auth process is asked # for the password, so you can't have different passwords with different # processes (unless they have different auth methods, and you're ok with # having different password for each method). # Authentication process name. auth = default # Space separated list of wanted authentication mechanisms: # plain digest-md5 anonymous auth_mechanisms = plain # Space separated list of realms for SASL authentication mechanisms that need # them. You can leave it empty if you don't want to support multiple realms. # Many clients simply use the first one listed here, so keep the default realm # first. #auth_realms = # Default realm to use if none was specified. #auth_default_realm = # Where user database is kept: # passwd: /etc/passwd or similiar, using getpwnam() # passwd-file <path>: passwd-like file with specified location # static uid=<uid> gid=<gid> home=<dir template>: static settings # vpopmail: vpopmail library # ldap <config path>: LDAP, see doc/dovecot-ldap.conf # pgsql <config path>: a PostgreSQL database, see doc/dovecot-pgsql.conf auth_userdb = passwd # auth_userdb = ldap /usr/local/etc/dovecot-ldap.conf # Where password database is kept: # passwd: /etc/passwd or similiar, using getpwnam() # shadow: /etc/shadow or similiar, using getspnam() # pam [<service> | *]: PAM authentication # passwd-file <path>: passwd-like file with specified location # vpopmail: vpopmail authentication # ldap <config path>: LDAP, see doc/dovecot-ldap.conf # pgsql <config path>: a PostgreSQL database, see doc/dovecot-pgsql.conf auth_passdb = pam dovecot # auth_passdb = ldap /usr/local/etc/dovecot-ldap.conf # Executable location auth_executable = /usr/local/libexec/dovecot/dovecot-auth # Set max. process size in megabytes. auth_process_size = 256 # User to use for the process. This user needs access to only user and # password databases, nothing else. Only shadow and pam authentication # requires roots, so use something else if possible. auth_user = root # Directory where to chroot the process. Most authentication backends don't # work if this is set, and there's no point chrooting if auth_user is root. #auth_chroot = # Number of authentication processes to create auth_count = 2 # List of allowed characters in username. If the user-given username contains # a character not listed in here, the login automatically fails. This is just # an extra check to make sure user can't exploit any potential quote escaping # vulnerabilities with SQL/LDAP databases. If you want to allow all characters, # set this value to empty. auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ # Username to use for users logging in with ANONYMOUS SASL mechanism #auth_anonymous_username = anonymous # More verbose logging. Useful for figuring out why authentication isn't # working. auth_verbose = yes # digest-md5 authentication process. It requires special MD5 passwords which # /etc/shadow and PAM doesn't support, so we never need roots to handle it. # Note that the passwd-file is opened before chrooting and dropping root # privileges, so it may be 0600-root owned file. #auth = digest_md5 #auth_methods = digest-md5 #auth_realms = #auth_userdb = passwd-file /etc/passwd.imap #auth_passdb = passwd-file /etc/passwd.imap #auth_user = imapauth #auth_chroot = # if you plan to use only passwd-file, you don't need the two auth processes, # simply set "auth_methods = plain digest-md5"

2 1

[Dovecot] Ignore purge and delete command
by vikrant＠linmark.com 16 Oct '03

16 Oct '03

Hi, Does anyone know how to ignore the purge or delete command from the imap clients. Actually I created a mail archive and using dovecot and so far I am happy with the performance. But the problem I am facing right now is I do not want the users to delete the mail by themselves and want to disable the purge or delete command. Thanks Vikrant

2 1

[Dovecot] dovecot crashes on start
by Timothy 16 Oct '03

16 Oct '03

Hello, I wasn't able to find anything about this on the site that could give me a definite answer, but when I start dovecot it dies immediately. The following is left in the logs. dovecot: Oct 06 20:59:30 Info: Dovecot starting up dovecot: Oct 06 20:59:32 Error: Auth process died too early - shutting down pop3-login: Oct 06 20:59:32 Fatal: fd_send(-1) failed: Broken pipe I thought this might have something to do with chrooting so I tried to disable all of that in the configuration. After that did not work I rebuilt dovecot with minimal configure options (compared to what I used originally) and used a stock configuration changing only the certificate locations so that dovecot would not complain about the certificates missing, still no luck and the same error. I've tried using strace on dovecot but it seems like it hardly ever hangs/dies at the same point. I'm trying to run this on a slackware 9.0 linux based machine. Any suggestions? Timothy, -- I put instant coffee in a microwave and almost went back in time. -- Steven Wright

2 3

[Dovecot] Dovecot pop3 and Outlook Express timeout
by Warren Togami 16 Oct '03

16 Oct '03

> Vince did some troubleshooting at my Dad's place and found that part of > the problem was related to dovecot timing out in communicating with > outlook express. Any ideas? You can do a raw pop3 connection which works > fine, but if you try to do the same from within outlook it times out or > gives "server not found". This sounds like what I was experiencing here > with my outlook express as well. > > thanks, > scott > Any idea what could be happening here? They insist that Outlook Express constant times out when trying to download POP3 from the latest stable dovecot. Thanks, Warren Togami warren(a)togami.com

2 1

[Dovecot] Tips to build from CVS?
by david＠madole.net 13 Oct '03

13 Oct '03

I am struggling to compile Dovecot from CVS. I don't seem to be able to get a good configure script, always ending up with an error during configure. # sh autogen.sh configure.in:13: warning: AC_ARG_PROGRAM invoked multiple times # ./configure checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes [...] checking build system type... i386-unknown-freebsd4.8 checking host system type... i386-unknown-freebsd4.8 [...] checking whether va_lists can be copied by value... yes checking for gnutls_global_init in -lgnutls... no ./configure.lineno: 25085: Syntax error: word unexpected (expecting ")") Looking at the script: cat >>confdefs.h <<\_ACEOF #define HAVE_GNUTLS _ACEOF SSL_LIBS="-lgnutls -lgcrypt" have_ssl="yes (GNUTLS)" have_gnutls=yes fi done <-- line 25085 fi fi if test "$want_openssl" = "yes" && test "$have_ssl" = "no"; then if pkg-config --exists openssl; then I have the following installed: autoconf-2.57 automake-1.7.7 libtool-1.5 I've alto tried: autoconf-2.13 automake-1.5 With similar results except a different line number and more warnings from autogen.sh Any ideas? David

1 0

[Dovecot] gzipped files in Mail directory
by Olivier Tharan 09 Oct '03

09 Oct '03

Hi, I have been testing dovecot on my own machine before a bigger deployment. Basically I have all my mbox mailboxes in ~/Mail, delivered by procmail. Some mbox's are gzipped because they are archives which I can grep into, but do not want to look at often. When I first launched an IMAP client, dovecot created the indexes (I think) and gave several errors when finding a gzipped file, such as: ,---- | Oct 1 19:53:21 mafate imap(olive): File isn't in mbox format: /home/olive/Mail//Archives/daily.d/mafate.2003.gz `---- After 19 gzipped mbox's, I had the following crash: ,---- | Oct 1 19:53:21 mafate dovecot: child 4923 (imap) killed with signal 10 `---- Does dovecot not like gzipped mbox's? For the moment, all gzipped files are in ~/Mail/.Archives and I can live with it. -- olive

1 0

[Dovecot] Line length limitation in dovecot leads to out-of-control process?
by Amelia A. Lewis 09 Oct '03

09 Oct '03

Heylas! I've been copying mailboxes from one dovecot server (on an alpha running debian testing, 0.99.10-9) to another (on an i686 running debian unstable, 0.99.10-9). I encountered a weird problem, which I seem to have resolved by moving a message with a To: line from hell out of the mailbox. Both machines are running maildir. They're not exactly identical, but they're fairly similar, apart from differences in distribution and architecture; they're running the same version of dovecot, supposedly. Specifically, when I copied this folder over to the new location, dovecot went into CPU-feeding frenzy (up to 99.7% of CPU), and stayed there. If I killed the client and tried to look at the same mailbox using a different client (mutt instead of sylpheed), without killing the imap processor on the server, the indexes would be locked, mutt would fall back to reading headers instead, and then would send its imap process into CPU-feeding frenzy when it got to one particular message. After some experimentation, I found the message. Once I moved it out of cur, I could access the mailbox without problems. The odd thing is that I can look at the message on the original machine, but on the machine it was copied to, its mere existence makes the mailbox inaccessible. After a little more exploration (grep ^To name-of-message | wc, on both machines) I seem to have found the issue: the original message has a To: line that is 16504 characters long. In the copy, it's 8192 characters long, and ends in the middle of a <email@address> (line in copy ends: user name <emai, chopped right there). I suspect that it is the *latter* that's causing dovecot to die a messy death. Or, actually, to turn into a very *rude* process that *doesn't* die. It's a really stupid trick to stuff that much into a header line (it's from helixcode in 2000, btw, notifying people that the promised CD is late), and perfectly reasonable to truncate (even to truncate to 1000 characters, per 282[12]). However, I kinda thing dovecot shouldn't choke on the results of truncation, which is what I think is the problem. Amy! -- Amelia A. Lewis amyzing {at} talsever.com I have spent nights with matches and knives, leaning over ledges, only two flights up. Cutting my heart, burning my soul. Nothing left to hold. Nothing left, but blood and fire. -- Indigo Girls

2 2

[Dovecot] Darwin Build (cvs)
by Jesse Peterson 09 Oct '03

09 Oct '03

Oops, I apologize for my short, breif message that didn't even include what I said it should inlcude =). Here's the deal: OpenDarwin 6.6 (closest relative being Mac OS X 10.2.6) won't build from CVS. Specifically libtoolize doesn't seem to exist (does it even come with libtool?) and the other parts of the "autogen.sh" fail miserably. This time (really) attached is a gzip of the log of autogen.sh: "./autogen.sh >& autogen.log". Thanks for any help! - Jesse

2 1

[Dovecot]
by Jesse Peterson 08 Oct '03

08 Oct '03

% uname -a Darwin xxx 6.6 Darwin Kernel Version 6.6: Sun Jul 6 05:12:51 PDT 2003; root:tmp/xnu-6.6.2-4-root.obj/RELEASE_PPC Power Macintosh powerpc Attached is a gzipped "sh autogen.sh >& autogen.log" for the above machine. What do you think? Jesse Peterson <jesse(a)mactechs.com> Office 206.441.7443 / Fax 206.441.8078 MacTechs / Macintosh System and Network Support 2121 First Avenue, Suite 103 / Seattle, Washington 98121 http://www.mactechs.com/

1 0

[Dovecot] those assertions
by dovecot＠spam.turbolink.net 06 Oct '03

06 Oct '03

Timo, Just FYI while you're working on the mbox code, I discovered a bug that occasionally causes dovecot to insert a single blank line at the beginning of the mbox, I'm not sure when/how/why. A single blank line seems to really confuse dovecot, and causes the server to crash when somebody connects to an afflicted mbox. ("Error indexing mbox" in the log, and disconects the user right away). I fixed it with lots of ugly code at our site (basically just remember that we skipped an intial blank line when doing other operations, instead of skipping it then forgetting later). I suspect there's a more elegant way to do it. - Mike

1 0

[Dovecot] SSL Client Certificate Support
by Bert Koelewijn 06 Oct '03

06 Oct '03

Dear Timo, most modern enterprises make use of a Public Key Infrastructure. It would be nice to have dovecot check a client certificate instead of a password. This makes life much easier and more secure. Mail clients like Mozilla and MS Outlook do support this. What do you think of the following feature request: - Client authenticates with a certificate via SSL. (Like stunnel can) - Dovecot looks the username up in a table with (public key, username) - The mailclient gives a name and password, but dovecot ignores them - Dovecot gives the client access by the username found in the table This way existing mail clients can use this system and you can save your username with an empty password. Best Regards, Bert Koelewijn

5 10

[Dovecot] those assertions
by Bernard Blackham 05 Oct '03

05 Oct '03

Hi, I did a bit of digging into the assertions from mbox-rewrite.c (hdr_parsed_size.physical_size == hdr_size). Every time it happens, hdr_size is 0, while hdr_parsed_size.physical_size is non-zero (presumably the correct value). Does this help track it down? I can't manage to get hold of an mbox that causes this though. Another infrequent assertion that's popped up: file message-address.c: line 262 (message_address_write): assertion failed: (addr->domain != NULL) And one that's only ever been spotted once in the last few weeks: file imap-bodystructure.c: line 278 (part_parse_headers): assertion failed: (part->physical_pos >= input->v_offset - start_offset) I'm waiting for them to happen again to provide some more info... Regards, Bernard. -- Bernard Blackham bernard at blackham dot com dot au

2 1

[Dovecot] another Dovecot problem
by Tim Miller 05 Oct '03

05 Oct '03

Hi All-- First, thanks to Timo for solving my last issue. I got dovecot up and running on one of my machines, and it does exactly what I want. Now I'm trying to install dovecot on an older box (glibc 2.0.7 Linux kernel 2.0.36), and encountering some problems: -- firstly autoconf/automake does not seem to correctly deal with the madvise function on this system. It detects that we don't have madvise, yet it's prototyped in /usr/include/sys/mman.h. This causes the compilation to fail when dovecot tries to redefine this function. -- I attempted to solve this problem by renaming the function dovecot prototypes to dc_madvise and then changed all the calls in the code (and the implementation) from madvise to dc_madvise. This allows the code to compile correctly. -- However, once the server is installed, it does not appear to work correctly. I can login, but when I try to list my folders or select any folder (one that exists or one that doesn't exist) the connection times out and the following entry is written to the log file: dovecot: Oct 03 05:38:56 Error: login: received another "not listening" notification (if you can't login at all, see src/lib/fdpass.c) I tracked this message down in the source, but didn't see any obvious way to trace back the problem. Does anyone have experience building on this older configuration (the glibc is a Red Hat version, if it makes any difference)? Any ideas on what might be causing this issue? Best, Tim Miller

2 5

mbox/maildir/directories [was: Re: [Dovecot] still getting weird .{inbox} folder creations with latest -test7]
by Miquel van Smoorenburg 05 Oct '03

05 Oct '03

This is a bit of a late reply, but still: On Thu, 2003-09-04 at 15:06, Timo Sirainen wrote: > CVS has been optimized to assume all files beginning with a dot (except > .subscriptions currently) are mailboxes. This is faster since it doesn't > have to stat() each file to figure out if it's a directory or not. > Perhaps that should be optional. New Linux systems (maybe others too) > wouldn't actually even need the stat().. > > I'll probably some day also add support for dotless directory-structured > mailbox locations, but it's not really high priority. Well, on our systems the mailbox is in /var/mail in maildir format, and in ~/Mail users have split up their folders in subdirs, in mixed maildir and mbox formats. So if dovecot could support both dotless directory-structured mailbox locations and maildir/mbox mix-n-match in the same tree, that would be excellent for us. Mbox is a better format for archiving. Now if Dovecot could also access (read-only ofcourse) compressed mbox archives ... Food for thought. Just put it on the wishlist ;) Mike.

2 1

[Dovecot] Patches
by Jaldhar H. Vyas 05 Oct '03

05 Oct '03

As the freeze for Debian sarge slowly approaches I want to make sure the Dovecot packages are in as good condition as possible. I see there have been a number of patches since 0.99.10. I have added the following patches: * segfault when user home directory is empty * Proper PAM service name * Make suid work on 2.6 kernels Any other patches thatI ought to add. Or better yet, will there be a 0.99.11 soon? -- Jaldhar H. Vyas <jaldhar(a)debian.org> La Salle Debain - http://www.braincells.com/debian/

5 4

[Dovecot] Why does dovecot confuse mutt?
by Amelia A Lewis 04 Oct '03

04 Oct '03

Heylas, I just switched my primary mail server from courier imap to dovecot (I've been waiting to do this; dovecot showed up in debian testing for alpha, at last). So, using the same set of maildirs, there are slightly different behaviors. First, of course, dovecot displays the hierarchy as I thought it ought to be, such that INBOX is a sibling of all other top-level boxes, not the parent of everything. This is A Good Thing[tm]. That works as expected. However, as far as mutt is concerned, *every* mailbox has child folders. My muttrc contains the line: set folder=imap://localhost/. (and the home folder is set to imap://localhost/INBOX; the idea is to do all mail munging through the server, never directly touching the maildirs with an MUA). Oh, and I'm using maildir (~/Maildir). In mutt, from the currently-selected mailbox, one can use 'c' to change boxes, and ? displays a navigable folder hierarchy. If a folder contains only mail (no child folders), it shows up as "FolderName", if it has child folders (whether or not it has mail), it shows up as "FolderName.". You can display the mail in a folder that has child folders, but it requires a different keystroke than the default (enter selects a folder, which means showing child folders if there are any, showing mail if there aren't; to display mail in a folder that has child folders, space). This is tripping me up a little, because of course the commands are mostly bred into my fingertips, and it's a difficult adjustment. I hit return, and I see a folder that contains the "child" folder "../". Is this a glitch in mutt's handling of information that I ought to report to mutt maintainers? Is it a glitch in dovecot's presentation of information that I ought to report to ... err, well. *laugh* My other primary mail client seems to cope beautifully with the information that's supplied (sylpheed, if it matters). But then, sylpheed also coped perfectly when courier was supplying information. I gather that courier and dovecot are reporting something slightly different, somehow, but I don't really know what, and I don't know which should be considered "correct". Amy!

5 5

[Dovecot] mailbox sorting issue
by Paul 04 Oct '03

04 Oct '03

Thanks for the "junk at end" help. Now I'm having one more perplexing issue: When I sort a Dovecot mbox in Pine, the most recent messages tend to linger near the bottom of the message list, regardless of how they're sorted. Here's a snippet of the bottom of the list, sorted by arrival time: 448 2003-09-24 20:31 sprightly@e... Re: *hoopoe 449 2003-09-24 21:05 mlescaut@w... Re: yes! 450 2003-09-24 23:57 jackulysses@y... Re: oh my lord 451 2003-09-25 01:43 sprightly@e... attachments==take a look 452 2003-09-25 01:29 avantguild@m... Your Membership is Almost Up 453 2003-09-25 10:40 heidi@p... xhtml 454 2003-09-25 11:04 dembo@s. Re: bridge 455 2003-09-25 11:54 JKesner@m... Bombay 456 2003-09-25 12:05 cm2144@c... Re: bridge at linda's And here is a snippet of the same mbox list, sorted by From address: 449 2003-09-25 01:43 sprightly@e... attachments==take a look 450 2003-09-10 16:06 staff@c... Tribute in Light Shines 451 2003-09-08 18:44 starpiekat@y... Re: Sorry! 452 2003-09-23 22:01 starry@p... but... 453 2003-09-25 12:05 cm2144@c... Re: bridge at linda's 454 2003-09-17 17:07 wahrman@s... RE: bridge etc. 455 2003-09-19 13:11 wahrman@s... RE: bridge etc. 456 2003-09-15 23:39 waycross@u... waycross - the eagle Notice that message from cm2144 in both lists, way out of order in the second! I'm not 100% sure that this is a Dovecot issue, but I suspect it is, since this doesn't happen if I open the same mailbox locally or with UW-IMAP. I know that Pine makes use of IMAP server-based sorting if it is available. I tried deleting .imap-index* files, just in case, but that didn't help. thanks, Paul

3 2

Re: [Dovecot] PATCH: mysql authentication
by Matthew Reimer 03 Oct '03

03 Oct '03

> On Fri, 2003-10-03 at 19:54, Matthew Reimer wrote: > >Here's another patch. This one isn't much different from the last patch, >except it tries a little harder to make sure that the required fields >are returned by the query (like the pgsql module does). BTW, the patch lacks configure magic to detect mysql includes and libs, and to define USERDB_MYSQL and PASSDB_MYSQL in config.h. Matt

1 0

Re: [Dovecot] PATCH: mysql authentication
by Matthew Reimer 03 Oct '03

03 Oct '03

Timo Sirainen wrote: > On Fri, 2003-10-03 at 19:54, Matthew Reimer wrote: >>One question about how t_strdup works. How and who should memory >>returned by t_strdup be freed? My patch has a function my_get_str() >>which returns the value of t_strdup, and then I do this: >> >> user.uid = atoi(my_get_str(res, row, "uid")); /* XXX leak */ >> user.gid = atoi(my_get_str(res, row, "gid")); /* XXX leak */ >> >>Will this result in a memory leak? > > > No. > > Memory allocated by t_*() functions are freed "later". There's first > t_push(), then you allocate memory, then t_pop() frees it all. So they > never leak memory, but they could allocate more memory than necessary if > called inside loop. That can be fixed by adding t_push/t_pop calls > there. Nice! Thanks for the answer Timo. Matt

1 0

Re: [Dovecot] PATCH: mysql authentication
by Matthew Reimer 03 Oct '03

03 Oct '03

Here's another patch. This one isn't much different from the last patch, except it tries a little harder to make sure that the required fields are returned by the query (like the pgsql module does). One question about how t_strdup works. How and who should memory returned by t_strdup be freed? My patch has a function my_get_str() which returns the value of t_strdup, and then I do this: user.uid = atoi(my_get_str(res, row, "uid")); /* XXX leak */ user.gid = atoi(my_get_str(res, row, "gid")); /* XXX leak */ Will this result in a memory leak? Matt diff -u -r --new-file work/dovecot-0.99.10/doc/dovecot-mysql.conf work.patched/dovecot-0.99.10/doc/dovecot-mysql.conf --- work/dovecot-0.99.10/doc/dovecot-mysql.conf Wed Dec 31 16:00:00 1969 +++ work.patched/dovecot-0.99.10/doc/dovecot-mysql.conf Tue Sep 30 12:24:00 2003 @@ -0,0 +1,70 @@ +# For the mysql passdb module, you'll need a database with a table that +# contains fields for at least the userid and password. If you want to +# use the user@domain syntax, you might want to have a separate domain +# field as well. +# +# If your users all have the same uig/gid, and have predictable home +# directories, you can use the static userdb module to generate the home +# dir based on the userid and domain. In this case, you won't need fields +# for home, uid, or gid in the database. +# +# If you prefer to use the mysql userdb module, you'll want to add fields +# for home, uid, and gid. Here is an example table: +# +# CREATE TABLE users ( +# userid VARCHAR(128) NOT NULL, +# password VARCHAR(64) NOT NULL, +# home VARCHAR(256) NOT NULL, +# uid INTEGER NOT NULL, +# gid INTEGER NOT NULL, +# active CHAR(1) DEFAULT 'Y' NOT NULL +# ); + +db_host = localhost +db_port = 3306 +#db_unix_socket = /var/tmp/mysql.sock +db = users +db_user = dovecot-db +db_passwd = opensesame +db_client_flags = 0 + +# Default password scheme. +# +# Currently supported schemes include PLAIN, PLAIN-MD5, DIGEST-MD5, and CRYPT. +# +#default_pass_scheme = PLAIN-MD5 + +# Query to retrieve the password. +# +# The query should return one row, one column. If more than one row or column +# is returned, authentication will automatically fail. +# +# Available substitutions: +# %u = entire userid +# %n = user part of user@domain +# %d = domain part of user@domain +# +# Example: +# password_query = SELECT password FROM users WHERE userid = '%n' AND domain = '%d' +# password_query = SELECT password FROM users WHERE userid = '%u' AND active = 'Y' +# +#password_query = SELECT password FROM users WHERE userid = '%u' + +# Query to retrieve the user information. +# +# The query must return only one row. The columns to return are: +# home - Home directory +# mail - MAIL environment +# system_user - System user name (for initgroups()) +# uid - System UID +# gid - System GID +# +# Either home or mail is required. uid and gid are required. If more than one +# row is returned or there's missing fields, login will automatically fail. +# +# Examples +# user_query = SELECT home, uid, gid FROM users WHERE userid = '%n' AND domain = '%d' +# user_query = SELECT dir AS home, user AS uid, group AS gid FROM users where userid = '%u' +# user_query = SELECT home, 501 AS uid, 501 AS gid FROM users WHERE userid = '%u' +# +#user_query = SELECT home, uid, gid FROM users WHERE userid = '%u' diff -u -r --new-file work/dovecot-0.99.10/src/auth/Makefile.in work.patched/dovecot-0.99.10/src/auth/Makefile.in --- work/dovecot-0.99.10/src/auth/Makefile.in Thu Jun 26 09:15:11 2003 +++ work.patched/dovecot-0.99.10/src/auth/Makefile.in Tue Sep 30 12:24:00 2003 @@ -99,10 +99,10 @@ dovecot_auth_LDADD = ../lib-settings/libsettings.a ../lib/liblib.a $(AUTH_LIBS) $(RAND_LIBS) $(MODULE_LIBS) -dovecot_auth_SOURCES = auth-module.c db-ldap.c db-pgsql.c db-passwd-file.c login-connection.c main.c master-connection.c md5crypt.c mech.c mech-anonymous.c mech-cyrus-sasl2.c mech-plain.c mech-digest-md5.c mycrypt.c passdb.c passdb-ldap.c passdb-passwd.c passdb-passwd-file.c passdb-pam.c passdb-shadow.c passdb-vpopmail.c passdb-pgsql.c password-scheme.c userdb.c userdb-ldap.c userdb-passwd.c userdb-passwd-file.c userdb-static.c userdb-vpopmail.c userdb-pgsql.c +dovecot_auth_SOURCES = auth-module.c db-ldap.c db-pgsql.c db-mysql.c db-passwd-file.c login-connection.c main.c master-connection.c md5crypt.c mech.c mech-anonymous.c mech-cyrus-sasl2.c mech-plain.c mech-digest-md5.c mycrypt.c passdb.c passdb-ldap.c passdb-passwd.c passdb-passwd-file.c passdb-pam.c passdb-shadow.c passdb-vpopmail.c passdb-pgsql.c passdb-mysql.c password-scheme.c userdb.c userdb-ldap.c userdb-passwd.c userdb-passwd-file.c userdb-static.c userdb-vpopmail.c userdb-pgsql.c userdb-mysql.c -noinst_HEADERS = auth-login-interface.h auth-master-interface.h auth-mech-desc.h auth-module.h db-ldap.h db-pgsql.h db-passwd-file.h common.h login-connection.h master-connection.h md5crypt.h mech.h mycrypt.h passdb.h password-scheme.h userdb.h userdb-vpopmail.h +noinst_HEADERS = auth-login-interface.h auth-master-interface.h auth-mech-desc.h auth-module.h db-ldap.h db-pgsql.h db-mysql.h db-passwd-file.h common.h login-connection.h master-connection.h md5crypt.h mech.h mycrypt.h passdb.h password-scheme.h userdb.h userdb-vpopmail.h mkinstalldirs = $(SHELL) $(top_srcdir)/mkinstalldirs CONFIG_HEADER = ../../config.h @@ -116,17 +116,17 @@ LDFLAGS = @LDFLAGS@ LIBS = @LIBS@ dovecot_auth_OBJECTS = auth-module.$(OBJEXT) db-ldap.$(OBJEXT) \ -db-pgsql.$(OBJEXT) db-passwd-file.$(OBJEXT) login-connection.$(OBJEXT) \ +db-pgsql.$(OBJEXT) db-mysql.$(OBJEXT) db-passwd-file.$(OBJEXT) login-connection.$(OBJEXT) \ main.$(OBJEXT) master-connection.$(OBJEXT) md5crypt.$(OBJEXT) \ mech.$(OBJEXT) mech-anonymous.$(OBJEXT) mech-cyrus-sasl2.$(OBJEXT) \ mech-plain.$(OBJEXT) mech-digest-md5.$(OBJEXT) mycrypt.$(OBJEXT) \ passdb.$(OBJEXT) passdb-ldap.$(OBJEXT) passdb-passwd.$(OBJEXT) \ passdb-passwd-file.$(OBJEXT) passdb-pam.$(OBJEXT) \ passdb-shadow.$(OBJEXT) passdb-vpopmail.$(OBJEXT) \ -passdb-pgsql.$(OBJEXT) password-scheme.$(OBJEXT) userdb.$(OBJEXT) \ +passdb-pgsql.$(OBJEXT) passdb-mysql.$(OBJEXT) password-scheme.$(OBJEXT) userdb.$(OBJEXT) \ userdb-ldap.$(OBJEXT) userdb-passwd.$(OBJEXT) \ userdb-passwd-file.$(OBJEXT) userdb-static.$(OBJEXT) \ -userdb-vpopmail.$(OBJEXT) userdb-pgsql.$(OBJEXT) +userdb-vpopmail.$(OBJEXT) userdb-pgsql.$(OBJEXT) userdb-mysql.$(OBJEXT) dovecot_auth_DEPENDENCIES = ../lib-settings/libsettings.a \ ../lib/liblib.a dovecot_auth_LDFLAGS = @@ -295,6 +295,13 @@ ../../src/lib/strfuncs.h ../../src/lib/network.h \ ../../src/lib/str.h ../../src/lib-settings/settings.h \ db-pgsql.h +db-mysql.o: db-mysql.c ../../config.h common.h ../../src/lib/lib.h \ + ../../src/lib/compat.h ../../src/lib/macros.h \ + ../../src/lib/failures.h ../../src/lib/data-stack.h \ + ../../src/lib/mempool.h ../../src/lib/imem.h \ + ../../src/lib/strfuncs.h ../../src/lib/network.h \ + ../../src/lib/str.h ../../src/lib-settings/settings.h \ + db-mysql.h login-connection.o: login-connection.c common.h ../../src/lib/lib.h \ ../../config.h ../../src/lib/compat.h ../../src/lib/macros.h \ ../../src/lib/failures.h ../../src/lib/data-stack.h \ @@ -388,6 +395,14 @@ ../../src/lib/str.h ../../src/lib/strescape.h \ ../../src/lib/var-expand.h password-scheme.h db-pgsql.h \ passdb.h mech.h auth-login-interface.h +passdb-mysql.o: passdb-mysql.c ../../config.h common.h \ + ../../src/lib/lib.h ../../src/lib/compat.h \ + ../../src/lib/macros.h ../../src/lib/failures.h \ + ../../src/lib/data-stack.h ../../src/lib/mempool.h \ + ../../src/lib/imem.h ../../src/lib/strfuncs.h \ + ../../src/lib/str.h ../../src/lib/strescape.h \ + ../../src/lib/var-expand.h password-scheme.h db-mysql.h \ + passdb.h mech.h auth-login-interface.h passdb-shadow.o: passdb-shadow.c ../../config.h common.h \ ../../src/lib/lib.h ../../src/lib/compat.h \ ../../src/lib/macros.h ../../src/lib/failures.h \ @@ -428,6 +443,13 @@ ../../src/lib/imem.h ../../src/lib/strfuncs.h \ ../../src/lib/str.h ../../src/lib/strescape.h \ ../../src/lib/var-expand.h db-pgsql.h userdb.h +userdb-mysql.o: userdb-mysql.c ../../config.h common.h \ + ../../src/lib/lib.h ../../src/lib/compat.h \ + ../../src/lib/macros.h ../../src/lib/failures.h \ + ../../src/lib/data-stack.h ../../src/lib/mempool.h \ + ../../src/lib/imem.h ../../src/lib/strfuncs.h \ + ../../src/lib/str.h ../../src/lib/strescape.h \ + ../../src/lib/var-expand.h db-mysql.h userdb.h userdb-static.o: userdb-static.c ../../config.h common.h \ ../../src/lib/lib.h ../../src/lib/compat.h \ ../../src/lib/macros.h ../../src/lib/failures.h \ diff -u -r --new-file work/dovecot-0.99.10/src/auth/db-mysql.c work.patched/dovecot-0.99.10/src/auth/db-mysql.c --- work/dovecot-0.99.10/src/auth/db-mysql.c Wed Dec 31 16:00:00 1969 +++ work.patched/dovecot-0.99.10/src/auth/db-mysql.c Tue Sep 30 12:24:00 2003 @@ -0,0 +1,181 @@ +/* Copyright (C) 2003 Alex Howansky, Timo Sirainen */ + +#include "config.h" +#undef HAVE_CONFIG_H + +#if defined(PASSDB_MYSQL) || defined(USERDB_MYSQL) + +#include "common.h" +#include "network.h" +#include "str.h" +#include "settings.h" +#include "db-mysql.h" + +#include <limits.h> +#include <stddef.h> +#include <stdlib.h> + +#define DEF(type, name) { type, #name, offsetof(struct mysql_settings, name) } + +static struct setting_def setting_defs[] = { + DEF(SET_STR, db_host), + DEF(SET_STR, db_port), + DEF(SET_STR, db_unix_socket), + DEF(SET_STR, db), + DEF(SET_STR, db_user), + DEF(SET_STR, db_passwd), + DEF(SET_STR, db_client_flags), + DEF(SET_STR, password_query), + DEF(SET_STR, user_query), + DEF(SET_STR, default_pass_scheme) +}; + +struct mysql_settings default_mysql_settings = { + MEMBER(db_host) "localhost", + MEMBER(db_port) "0", + MEMBER(db_unix_socket) "/var/tmp/mysql.sock", + MEMBER(db) "email_accounts", + MEMBER(db_user) "dovecot", + MEMBER(db_passwd) "changeme", + MEMBER(db_client_flags) "0", + MEMBER(password_query) "SELECT password FROM users WHERE userid = '%u'", + MEMBER(user_query) "SELECT home, uid, gid FROM users WHERE userid = '%u'", + MEMBER(default_pass_scheme) "PLAIN-MD5" +}; + +static struct mysql_connection *mysql_connections = NULL; + +static int mysql_conn_open(struct mysql_connection *conn); +static void mysql_conn_close(struct mysql_connection *conn); + +void db_mysql_query(struct mysql_connection *conn, const char *query, + struct mysql_request *request) +{ + MYSQL_RES *res; + int failed; + + if (!conn->connected) { + if (!mysql_conn_open(conn)) { + request->callback(conn, request, NULL); + return; + } + } + + if (verbose_debug) + i_info("MYSQL: Performing query: %s", query); + + if (mysql_query(conn->mysql, query)) + i_info("MYSQL: Error executing query \"%s\": %s", query, + mysql_error(conn->mysql)); + + if ((res = mysql_store_result(conn->mysql))) + failed = FALSE; + else { + i_info("MYSQL: Error retrieving results: %s", + mysql_error(conn->mysql)); + failed = TRUE; + } + + request->callback(conn, request, failed ? NULL : res); + mysql_free_result(res); + i_free(request); +} + +static int mysql_conn_open(struct mysql_connection *conn) +{ + if (conn->connected) + return TRUE; + + if (conn->mysql == NULL) { + conn->mysql = mysql_init(NULL); + if (conn->mysql == NULL) { + i_error("MYSQL: mysql_init failed"); + return FALSE; + } + + if (!mysql_real_connect(conn->mysql, conn->set.db_host, + conn->set.db_user, conn->set.db_passwd, + conn->set.db, + atoi(conn->set.db_port), + conn->set.db_unix_socket, + strtoul(conn->set.db_client_flags, + NULL, 10))) { + i_error("MYSQL: Can't connect to database %s: %s", + conn->set.db, mysql_error(conn->mysql)); + return FALSE; + } + } + + conn->connected = TRUE; + return TRUE; +} + +static void mysql_conn_close(struct mysql_connection *conn) +{ + conn->connected = FALSE; + + if (conn->mysql != NULL) { + mysql_close(conn->mysql); + conn->mysql = NULL; + } +} + +static struct mysql_connection *mysql_conn_find(const char *config_path) +{ + struct mysql_connection *conn; + + for (conn = mysql_connections; conn != NULL; conn = conn->next) { + if (strcmp(conn->config_path, config_path) == 0) + return conn; + } + + return NULL; +} + +static const char *parse_setting(const char *key, const char *value, + void *context) +{ + struct mysql_connection *conn = context; + + return parse_setting_from_defs(conn->pool, setting_defs, + &conn->set, key, value); +} + +struct mysql_connection *db_mysql_init(const char *config_path) +{ + struct mysql_connection *conn; + pool_t pool; + + conn = mysql_conn_find(config_path); + if (conn != NULL) { + conn->refcount++; + return conn; + } + + pool = pool_alloconly_create("mysql_connection", 1024); + conn = p_new(pool, struct mysql_connection, 1); + conn->pool = pool; + + conn->refcount = 1; + + conn->config_path = p_strdup(pool, config_path); + conn->set = default_mysql_settings; + settings_read(config_path, parse_setting, conn); + + (void)mysql_conn_open(conn); + + conn->next = mysql_connections; + mysql_connections = conn; + return conn; +} + +void db_mysql_unref(struct mysql_connection *conn) +{ + if (--conn->refcount > 0) + return; + + mysql_conn_close(conn); + pool_unref(conn->pool); +} + +#endif diff -u -r --new-file work/dovecot-0.99.10/src/auth/db-mysql.h work.patched/dovecot-0.99.10/src/auth/db-mysql.h --- work/dovecot-0.99.10/src/auth/db-mysql.h Wed Dec 31 16:00:00 1969 +++ work.patched/dovecot-0.99.10/src/auth/db-mysql.h Tue Sep 30 12:24:00 2003 @@ -0,0 +1,51 @@ +#ifndef __DB_MYSQL_H +#define __DB_MYSQL_H + +#include <mysql.h> + +struct mysql_connection; +struct mysql_request; + +typedef void mysql_query_callback_t(struct mysql_connection *conn, + struct mysql_request *request, + MYSQL_RES *res); + +struct mysql_settings { + const char *db_host; + const char *db_port; + const char *db_unix_socket; + const char *db; + const char *db_user; + const char *db_passwd; + const char *db_client_flags; + const char *password_query; + const char *user_query; + const char *default_pass_scheme; +}; + +struct mysql_connection { + struct mysql_connection *next; + + pool_t pool; + int refcount; + + char *config_path; + struct mysql_settings set; + + MYSQL *mysql; + + unsigned int connected:1; +}; + +struct mysql_request { + mysql_query_callback_t *callback; + void *context; +}; + +void db_mysql_query(struct mysql_connection *conn, const char *query, + struct mysql_request *request); + +struct mysql_connection *db_mysql_init(const char *config_path); +void db_mysql_unref(struct mysql_connection *conn); + +#endif diff -u -r --new-file work/dovecot-0.99.10/src/auth/master-connection.c work.patched/dovecot-0.99.10/src/auth/master-connection.c --- work/dovecot-0.99.10/src/auth/master-connection.c Mon May 26 08:27:13 2003 +++ work.patched/dovecot-0.99.10/src/auth/master-connection.c Tue Sep 30 12:24:00 2003 @@ -55,7 +55,7 @@ reply.virtual_user_idx = reply_add(buf, user->virtual_user); reply.mail_idx = reply_add(buf, user->mail); - p = strstr(user->home, "/./"); + p = user->home ? strstr(user->home, "/./") : NULL; if (p == NULL) { reply.home_idx = reply_add(buf, user->home); reply.chroot_idx = reply_add(buf, NULL); diff -u -r --new-file work/dovecot-0.99.10/src/auth/passdb-mysql.c work.patched/dovecot-0.99.10/src/auth/passdb-mysql.c --- work/dovecot-0.99.10/src/auth/passdb-mysql.c Wed Dec 31 16:00:00 1969 +++ work.patched/dovecot-0.99.10/src/auth/passdb-mysql.c Tue Sep 30 12:24:00 2003 @@ -0,0 +1,171 @@ +/* Copyright (C) 2003 Alex Howansky, Timo Sirainen */ + +#include "config.h" +#undef HAVE_CONFIG_H + +#ifdef PASSDB_MYSQL + +#include "common.h" +#include "str.h" +#include "strescape.h" +#include "var-expand.h" +#include "password-scheme.h" +#include "db-mysql.h" +#include "passdb.h" + +#include <mysql.h> +#include <stdlib.h> +#include <string.h> + +struct passdb_mysql_connection { + struct mysql_connection *conn; +}; + +struct passdb_mysql_request { + struct mysql_request request; + + enum passdb_credentials credentials; + union { + verify_plain_callback_t *verify_plain; + lookup_credentials_callback_t *lookup_credentials; + } callback; + + char password[1]; +}; + +static struct passdb_mysql_connection *passdb_mysql_conn; + +static void mysql_handle_request(struct mysql_connection *conn, + struct mysql_request *request, MYSQL_RES *res) +{ + struct passdb_mysql_request *mysql_request = + (struct passdb_mysql_request *) request; + struct auth_request *auth_request = request->context; + const char *user, *password, *scheme; + int ret = 0; + + user = auth_request->user; + password = NULL; + + if (res != NULL) { + if (mysql_num_rows(res) == 0) { + if (verbose) + i_info("mysql(%s): Unknown user", user); + } else if (mysql_num_rows(res) > 1) { + i_error("mysql(%s): Multiple matches for user", user); + } else if (mysql_num_fields(res) != 1) { + i_error("mysql(%s): Password query returned " + "more than one field", user); + } else { + MYSQL_ROW row; + + row = mysql_fetch_row(res); + if (row) + password = t_strdup(row[0]); + } + } + + scheme = password_get_scheme(&password); + if (scheme == NULL) { + scheme = conn->set.default_pass_scheme; + i_assert(scheme != NULL); + } + + if (mysql_request->credentials != -1) { + passdb_handle_credentials(mysql_request->credentials, + user, password, scheme, + mysql_request->callback.lookup_credentials, + auth_request); + return; + } + + /* verify plain */ + if (password == NULL) { + mysql_request->callback.verify_plain(PASSDB_RESULT_USER_UNKNOWN, + auth_request); + return; + } + + ret = password_verify(mysql_request->password, password, + scheme, user); + if (ret < 0) + i_error("mysql(%s): Unknown password scheme %s", user, scheme); + else if (ret == 0) { + if (verbose) + i_info("mysql(%s): Password mismatch", user); + } + + mysql_request->callback.verify_plain(ret > 0 ? PASSDB_RESULT_OK : + PASSDB_RESULT_PASSWORD_MISMATCH, + auth_request); +} + +static void mysql_lookup_pass(struct auth_request *auth_request, + struct mysql_request *mysql_request) +{ + struct mysql_connection *conn = passdb_mysql_conn->conn; + const char *query; + string_t *str; + + str = t_str_new(512); + var_expand(str, conn->set.password_query, + str_escape(auth_request->user), NULL); + query = str_c(str); + + mysql_request->callback = mysql_handle_request; + mysql_request->context = auth_request; + + db_mysql_query(conn, query, mysql_request); +} + +static void +mysql_verify_plain(struct auth_request *request, const char *password, + verify_plain_callback_t *callback) +{ + struct passdb_mysql_request *mysql_request; + + mysql_request = i_malloc(sizeof(struct passdb_mysql_request) + + strlen(password)); + mysql_request->credentials = -1; + mysql_request->callback.verify_plain = callback; + strcpy(mysql_request->password, password); + + mysql_lookup_pass(request, &mysql_request->request); +} + +static void mysql_lookup_credentials(struct auth_request *request, + enum passdb_credentials credentials, + lookup_credentials_callback_t *callback) +{ + struct passdb_mysql_request *mysql_request; + + mysql_request = i_new(struct passdb_mysql_request, 1); + mysql_request->credentials = credentials; + mysql_request->callback.lookup_credentials = callback; + + mysql_lookup_pass(request, &mysql_request->request); +} + +static void passdb_mysql_init(const char *args) +{ + struct mysql_connection *conn; + + passdb_mysql_conn = i_new(struct passdb_mysql_connection, 1); + passdb_mysql_conn->conn = conn = db_mysql_init(args); +} + +static void passdb_mysql_deinit(void) +{ + db_mysql_unref(passdb_mysql_conn->conn); + i_free(passdb_mysql_conn); +} + +struct passdb_module passdb_mysql = { + passdb_mysql_init, + passdb_mysql_deinit, + + mysql_verify_plain, + mysql_lookup_credentials +}; + +#endif diff -u -r --new-file work/dovecot-0.99.10/src/auth/passdb.c work.patched/dovecot-0.99.10/src/auth/passdb.c --- work/dovecot-0.99.10/src/auth/passdb.c Sun May 18 05:26:28 2003 +++ work.patched/dovecot-0.99.10/src/auth/passdb.c Tue Sep 30 12:24:00 2003 @@ -110,6 +110,10 @@ if (strcasecmp(name, "pgsql") == 0) passdb = &passdb_pgsql; #endif +#ifdef PASSDB_MYSQL + if (strcasecmp(name, "mysql") == 0) + passdb = &passdb_mysql; +#endif #ifdef HAVE_MODULES passdb_module = passdb != NULL ? NULL : auth_module_open(name); if (passdb_module != NULL) { diff -u -r --new-file work/dovecot-0.99.10/src/auth/passdb.h work.patched/dovecot-0.99.10/src/auth/passdb.h --- work/dovecot-0.99.10/src/auth/passdb.h Thu Mar 20 07:46:33 2003 +++ work.patched/dovecot-0.99.10/src/auth/passdb.h Tue Sep 30 12:24:00 2003 @@ -58,6 +58,7 @@ extern struct passdb_module passdb_vpopmail; extern struct passdb_module passdb_ldap; extern struct passdb_module passdb_pgsql; +extern struct passdb_module passdb_mysql; void passdb_init(void); void passdb_deinit(void); diff -u -r --new-file work/dovecot-0.99.10/src/auth/userdb-mysql.c work.patched/dovecot-0.99.10/src/auth/userdb-mysql.c --- work/dovecot-0.99.10/src/auth/userdb-mysql.c Wed Dec 31 16:00:00 1969 +++ work.patched/dovecot-0.99.10/src/auth/userdb-mysql.c Tue Sep 30 12:24:00 2003 @@ -0,0 +1,160 @@ +/* Copyright (C) 2003 Alex Howansky, Timo Sirainen */ + +#include "config.h" +#undef HAVE_CONFIG_H + +#ifdef USERDB_MYSQL + +#include "common.h" +#include "str.h" +#include "strescape.h" +#include "var-expand.h" +#include "db-mysql.h" +#include "userdb.h" + +#include <mysql.h> +#include <stdlib.h> +#include <string.h> + +struct userdb_mysql_connection { + struct mysql_connection *conn; +}; + +struct userdb_mysql_request { + struct mysql_request request; + userdb_callback_t *userdb_callback; + + char username[1]; /* variable width */ +}; + +static struct userdb_mysql_connection *userdb_mysql_conn; + +static int is_result_valid(MYSQL_RES *res) +{ + int i, n_fields, found; + MYSQL_FIELD *fields; + + if (res == NULL) { + i_error("MYSQL: Query failed"); + return FALSE; + } + + if (mysql_num_rows(res) == 0) { + if (verbose) + i_error("MYSQL: Authenticated user not found"); + return FALSE; + } + + n_fields = mysql_num_fields(res); + fields = mysql_fetch_fields(res); + + /* Make sure the 'uid' field exists. */ + for (found = 0, i = 0; i < n_fields; i++) + if (strcmp("uid", fields[i].name) == 0) { + found = 1; + break; + } + + if (!found) { + i_error("MYSQL: User query did not return 'uid' field"); + return FALSE; + } + + /* Make sure the 'gid' field exists. */ + for (found = 0, i = 0; i < n_fields; i++) + if (strcmp("gid", fields[i].name) == 0) { + found = 1; + break; + } + + if (!found) { + i_error("MYSQL: User query did not return 'gid' field"); + return FALSE; + } + + return TRUE; +} + +static const char *my_get_str(MYSQL_RES *res, MYSQL_ROW row, const char *field) +{ + int i, n_fields; + unsigned long *lengths; + MYSQL_FIELD *fields; + + n_fields = mysql_num_fields(res); + lengths = mysql_fetch_lengths(res); + fields = mysql_fetch_fields(res); + for (i = 0; i < n_fields; i++) + if (strcmp(field, fields[i].name) == 0) + return (const char *) lengths[i] == 0 ? + NULL : t_strdup(row[i]); + + return NULL; +} + +static void mysql_handle_request(struct mysql_connection *conn __attr_unused__, + struct mysql_request *request, MYSQL_RES *res) +{ + struct userdb_mysql_request *urequest = + (struct userdb_mysql_request *) request; + struct user_data user; + MYSQL_ROW row; + + if (res != NULL && is_result_valid(res) && + (row = mysql_fetch_row(res))) { + memset(&user, 0, sizeof(user)); + user.virtual_user = urequest->username; + user.system_user = my_get_str(res, row, "system_user"); + user.home = my_get_str(res, row, "home"); + user.mail = my_get_str(res, row, "mail"); + user.uid = atoi(my_get_str(res, row, "uid")); /* XXX leak */ + user.gid = atoi(my_get_str(res, row, "gid")); /* XXX leak */ + urequest->userdb_callback(&user, request->context); + } else { + urequest->userdb_callback(NULL, request->context); + } +} + +static void userdb_mysql_lookup(const char *user, userdb_callback_t *callback, + void *context) +{ + struct mysql_connection *conn = userdb_mysql_conn->conn; + struct userdb_mysql_request *request; + const char *query; + string_t *str; + + str = t_str_new(512); + var_expand(str, conn->set.user_query, str_escape(user), NULL); + query = str_c(str); + + request = i_malloc(sizeof(struct userdb_mysql_request) + strlen(user)); + request->request.callback = mysql_handle_request; + request->request.context = context; + request->userdb_callback = callback; + strcpy(request->username, user); + + db_mysql_query(conn, query, &request->request); +} + +static void userdb_mysql_init(const char *args) +{ + struct mysql_connection *conn; + + userdb_mysql_conn = i_new(struct userdb_mysql_connection, 1); + userdb_mysql_conn->conn = conn = db_mysql_init(args); +} + +static void userdb_mysql_deinit(void) +{ + db_mysql_unref(userdb_mysql_conn->conn); + i_free(userdb_mysql_conn); +} + +struct userdb_module userdb_mysql = { + userdb_mysql_init, + userdb_mysql_deinit, + + userdb_mysql_lookup +}; + +#endif diff -u -r --new-file work/dovecot-0.99.10/src/auth/userdb.c work.patched/dovecot-0.99.10/src/auth/userdb.c --- work/dovecot-0.99.10/src/auth/userdb.c Sun May 18 05:26:28 2003 +++ work.patched/dovecot-0.99.10/src/auth/userdb.c Tue Sep 30 12:24:00 2003 @@ -49,6 +49,10 @@ if (strcasecmp(name, "pgsql") == 0) userdb = &userdb_pgsql; #endif +#ifdef USERDB_MYSQL + if (strcasecmp(name, "mysql") == 0) + userdb = &userdb_mysql; +#endif #ifdef HAVE_MODULES userdb_module = userdb != NULL ? NULL : auth_module_open(name); if (userdb_module != NULL) { diff -u -r --new-file work/dovecot-0.99.10/src/auth/userdb.h work.patched/dovecot-0.99.10/src/auth/userdb.h --- work/dovecot-0.99.10/src/auth/userdb.h Sun May 18 05:26:28 2003 +++ work.patched/dovecot-0.99.10/src/auth/userdb.h Tue Sep 30 12:24:00 2003 @@ -29,6 +29,7 @@ extern struct userdb_module userdb_vpopmail; extern struct userdb_module userdb_ldap; extern struct userdb_module userdb_pgsql; +extern struct userdb_module userdb_mysql; void userdb_init(void); void userdb_deinit(void);

2 1

Re: [Dovecot] PATCH: mysql authentication
by Matthew Reimer 03 Oct '03

03 Oct '03

Timo Sirainen wrote: > > On Saturday, Aug 30, 2003, at 02:16 Europe/Helsinki, Matthew Reimer > wrote: > >> Here's a patch that implements mysql authentication. I started with >> the pgsql files and tweaked them to use mysql instead. It works for >> me, but there might be a couple of memory leaks. I'm welcome to >> suggestions on how to clean it up so it can be committed. > > Thank you. I'll look at it more closely later, but it looked fine with > a quick look. > > It would be nice to be able to use asynchronous database lookups. I'm > not sure how easy that is with MySQL, of if it's possible at all. With > PostgreSQL it looked annoyingly difficult so I haven't done it yet. > > Synchronous calls anyway mean that there's only one SQL statement > executing at a time and that may slow down the authentication if > there's a _lot_ of users logging in constantly. If that's a problem, > growing auth_count should help at least some. It specifies the number > of auth processes that respond to the authentication queries. > > And some day I'll probably move the sql stuff into separate lib-sql > and have only a single sql authenticator.. I'm not sure what you mean by asynchronous database lookups. Do you mean you'd like to be able to fire off a db lookup and then come back later to get the results? Like blocking vs non-blocking? I've pasted what may be relevant mysql documentation below in case it might help answer the question. N db handles could be allocated, giving us N simultaneous lookups. Matt --- From http://www.mysql.com/doc/en/C_API_function_overview.html: There are two ways for a client to process result sets. One way is to retrieve the entire result set all at once by calling mysql_store_result(). This function acquires from the server all the rows returned by the query and stores them in the client. The second way is for the client to initiate a row-by-row result set retrieval by calling mysql_use_result(). This function initialises the retrieval, but does not actually get any rows from the server. In both cases, you access rows by calling mysql_fetch_row(). With mysql_store_result(), mysql_fetch_row() accesses rows that have already been fetched from the server. With mysql_use_result(), mysql_fetch_row() actually retrieves the row from the server. Information about the size of the data in each row is available by calling mysql_fetch_lengths(). After you are done with a result set, call mysql_free_result() to free the memory used for it. The two retrieval mechanisms are complementary. Client programs should choose the approach that is most appropriate for their requirements. In practice, clients tend to use mysql_store_result() more commonly. An advantage of mysql_store_result() is that because the rows have all been fetched to the client, you not only can access rows sequentially, you can move back and forth in the result set using mysql_data_seek() or mysql_row_seek() to change the current row position within the result set. You can also find out how many rows there are by calling mysql_num_rows(). On the other hand, the memory requirements for mysql_store_result() may be very high for large result sets and you are more likely to encounter out-of-memory conditions. An advantage of mysql_use_result() is that the client requires less memory for the result set because it maintains only one row at a time (and because there is less allocation overhead, mysql_use_result() can be faster). Disadvantages are that you must process each row quickly to avoid tying up the server, you don't have random access to rows within the result set (you can only access rows sequentially), and you don't know how many rows are in the result set until you have retrieved them all. Furthermore, you must retrieve all the rows even if you determine in mid-retrieval that you've found the information you were looking for. --- end

1 0

[Dovecot] can't read attachments using javamail with dovecot
by Jonas Bosson 03 Oct '03

03 Oct '03

Dear folks, this might be a java-bug, but it seems to occur only when connecting to dovecot-IMAP. UW and Cyrus-ditto works, while when I try to read attachments (base64), I get slapped in the face with this: java.lang.NullPointerException at com.sun.mail.iap.Response.parse(Response.java:99) at com.sun.mail.iap.Response.<init>(Response.java:68) at com.sun.mail.imap.protocol.IMAPResponse.<init>(IMAPResponse.java:31) at com.sun.mail.imap.protocol.IMAPResponse.readResponse(IMAPResponse.java:105) at com.sun.mail.imap.protocol.IMAPProtocol.readResponse(IMAPProtocol.java:153) at com.sun.mail.iap.Protocol.command(Protocol.java:215) at com.sun.mail.imap.protocol.IMAPProtocol.fetch(IMAPProtocol.java:882) at com.sun.mail.imap.protocol.IMAPProtocol.fetch(IMAPProtocol.java:874) at com.sun.mail.imap.protocol.IMAPProtocol.fetchBody(IMAPProtocol.java:677) at com.sun.mail.imap.IMAPInputStream.fill(IMAPInputStream.java:74) at com.sun.mail.imap.IMAPInputStream.read(IMAPInputStream.java:105) at com.sun.mail.util.BASE64DecoderStream.decode(BASE64DecoderStream.java:143) at com.sun.mail.util.BASE64DecoderStream.read(BASE64DecoderStream.java:54) at se.illuminet.httpd.mail.MailXMLService.serviceXml(MailXMLService.java:361) This occurs in booth javamail 1.2 and 1.3(.1) using dovecot. Of course this unfriendly/unhandled response is a problem with javamail while biting the dust. Further analysis points to that the reading works OK up until 2^16 bytes, so it fails either in reading the tail of the attachment or resuming after the first buffered data is consumed. I tried the BODYSTRCUTURE-patch (booth #1 and then #2), but it didn't help. Now I am fresh out of ideas. The java-bug has a three week delay to surface on "bug-parade". But I still have to explain why it works in UW/Cyrus and not with dovecot. Next step would be to add trace-lines in dovecot. Any ideas? /Jonas

2 6

[Dovecot] pop3s in Outlook
by Antonin Karasek 03 Oct '03

03 Oct '03

Hi, I'm using Dovecot for pop3-ssl. Unofortunatelly, most of my users are using MS Outlook. I want them to be able to remove standard mesage: "The certificat is not signed by...", but I don't know how :-( In the dialog isn't a button "Trust this certificate forever"... Is there anybody, who know, how to solve this? Many thanks.

2 1

[Dovecot] Handling of X-Status flags
by Bernard Blackham 29 Sep '03

29 Sep '03

Hi all, I've done a bit of searching and haven't seen anybody else coming across this problem yet: I noticed that Dovecot uses the opposite flags for marking messages as deleted and draft to most other MUAs I've seen or used: With PINE, mutt and uw-imapd at least, messages are marked with X-Status 'D' for Deleted, and 'T' for drafT. Dovecot reverses this behaviour, using 'D' for Draft, and 'T' for Trashed. Was there any reason behind this? Or have I gone loopy? At our site, we have users reading mail with a mix of PINE locally, and through dovecot via WebMail and there seems to arise a bit of confusion between the two flags. Attached is a patch that reverses this behaviour (prepared against 0.99.10 but applies with a little fuzz to cvs). I'd like to hear people's comments on the issue... is it just me? :) Thanks, Bernard. -- Bernard Blackham bernard at blackham dot com dot au

2 2

[Dovecot] UIDPLUS?
by Keith Edmunds 29 Sep '03

29 Sep '03

Any plans to implement UIDPLUS in Dovecot? Keith

2 1

[Dovecot] Odd problem with dovecot segfaulting
by Tim Miller 29 Sep '03

29 Sep '03

Hi All, I installed dovecot on one of my servers the other day, and I want to use it in a vhosting environment. To this end, I have set it up to use password file authentication with a passwd file specified by me. This file will contain both system users and virtual accounts. To test it, I set up two accounts in the dovecot passwd file. One is a system user, I give his home dir in the correct field, along with the MD5 hash of his password in its field, and everything seems to work OK (he can login, read mail out of /var/spool/mail/user etc.). The seconmd account is a vhosted account, and I set the uid and gid to that under which the vhosting account exists. I did not set a home dir, but I set a mail dir in /var/spool/vmail/imap/vhost/user, and made this dir group writeable by dovecot. The user can login, but immediately upon authentication, dovecot segfaults (the log reports an "Internal login failure" and the authentication process is killed with signal 11, i.e. a segfault). Has anyone encountered this before? Is this even the right way to set up vhosting (I don't want to go with LDAP or SQL authentication right at the moment, but I may move to that later on)? Are there any things I should look for (this is probably due to something I've done wrong) or make dovecot be a bit more verbose in reporting errors to its log? Thanks in advance for any help. From what I've seen so far, dovecot looks like an excellent product. Best, Tim Miller

2 1

[Dovecot] pine and mozilla at the same time
by Gasha 26 Sep '03

26 Sep '03

Hi all, what is the best way to read e-mail from server using "pine" ?? I would like to use graphical IMAP client, mozilla for example. And sometimes run pine from shell. mbox or Maildir? Or maybe setup pine to use IMAP server on "localhost" ?? Gasha

2 1

[Dovecot] can't read attachments using javamail with dovecot
by Jonas Bosson 25 Sep '03

25 Sep '03

Dear folks, this might be a javamail-bug, but it seems to occur only when connecting to dovecot-IMAP. UW and Cyrus-ditto works, while when I try to read attachments (base64), I get slapped in the face with this: java.lang.NullPointerException at com.sun.mail.iap.Response.parse(Response.java:99) at com.sun.mail.iap.Response.<init>(Response.java:68) at com.sun.mail.imap.protocol.IMAPResponse.<init>(IMAPResponse.java:31) at com.sun.mail.imap.protocol.IMAPResponse.readResponse(IMAPResponse.java:105) at com.sun.mail.imap.protocol.IMAPProtocol.readResponse(IMAPProtocol.java:153) at com.sun.mail.iap.Protocol.command(Protocol.java:215) at com.sun.mail.imap.protocol.IMAPProtocol.fetch(IMAPProtocol.java:882) at com.sun.mail.imap.protocol.IMAPProtocol.fetch(IMAPProtocol.java:874) at com.sun.mail.imap.protocol.IMAPProtocol.fetchBody(IMAPProtocol.java:677) at com.sun.mail.imap.IMAPInputStream.fill(IMAPInputStream.java:74) at com.sun.mail.imap.IMAPInputStream.read(IMAPInputStream.java:105) at com.sun.mail.util.BASE64DecoderStream.decode(BASE64DecoderStream.java:143) at com.sun.mail.util.BASE64DecoderStream.read(BASE64DecoderStream.java:54) at se.illuminet.httpd.mail.MailXMLService.serviceXml(MailXMLService.java:361) This occurs in booth javamail 1.2 and 1.3(.1) using dovecot. Of course this unfriendly/unhandled response is a problem with javamail while it bites the dust. Further analysis points to that the reading works OK up until 2^16 bytes, so it fails either in reading the tail of the attachment or resuming after the first buffered data is consumed. I tried the BODYSTRCUTURE-patch (booth #1 and then #2), but it didn't help. Now I am fresh out of ideas. The java-bug has a three week delay to surface on "bug-parade". But I still have to explain why it works in UW/Cyrus and not with dovecot. Next step would be to add trace-lines in dovecot. Any ideas? /Jonas

1 0

[Dovecot] Multiple instances of .customflags staying open
by Ron 25 Sep '03

25 Sep '03

# cat /proc/version Linux version 2.4.20-18.9 (bhcompile(a)daffy.perf.redhat.com) (gcc version 3.2.2 20030222 (Red Hat Linux 3.2.2-5)) #1 Thu May 29 07:09:43 EDT 2003 # dovecot --version 0.99.10 I've just recently noticed a serious problem with my system. After about an hour or so I get errors in /var/log/maillog such as this; Sep 21 06:40:16 the-system imap(ray): opendir() failed with file \ \/home/ray/Maildir//new: Too many open files I investigated with 'lsof' and found that many copies of '.customflags' were open for each and every folder. ie; Each folder's '.customflags' file was open 15 times! I suspect that postfix is not able to store newly collected email while this is occuring, therefore I am likely losing messages. I've tried with multiple mail clients (Sylpheed & Evolution) and multiple users, always with the same result. Further investigation indicates that each time the client scans for new mail another instance of each and every '.customflags' is opened. As I have the client set for checking at five minute intervals then it was probably 75 minutes until the client barfed. Less, if I manualy scan for new mail a few times. If I shutdown the client and restart it then everything is fine for about an hour. Running 'lsof /home/ray/Maildir/.customflags' on the server I can see the list of files increasing each time the client checks for new mail. Any help would be appreciated!

4 14

[Dovecot] Re: Bug: Message time gets changed during move/copy
by Timo Sirainen 25 Sep '03

25 Sep '03

On Sat, 2003-09-13 at 13:10, Akhilesh Agarwal wrote: > SERVER > > * Redhat 9.0 stable (with all up2date updates installed) > * Sendmail-8.12.8-6.90 > * Dovecot 0.99.10 release > * On the workstation running Outlook Express, there should be > some existing messages in Local Folders. (example: message > downloaded from a POP3 server) > * Change the time zone of the workstation machine to non-GMT > time zone. In my case GMT +0530 (Indian Standard Time) > * Create a test IMAP account on the server > * Configure Outlook Express to connect to the IMAP account. > * Now select a message in the Local Folders and copy it to a > folder on the IMAP server. > * If you check the message time on the IMAP account, you will > find that +0530 hrs was added to the message time. (+0530 is > apparently the time zone of my workstation as configure above) Sorry for taking this long to reply, it always takes so much effort to turn on my Windows computer :) I cannot reproduce this. I have my server and workstation set to GMT+3 and copying message from Dovecot to OE6 local folder and back keeps the message date the same. Or actually it looks like IMAP -> local folder copies using the message's Date field rather than IMAP's INTERNALDATE which Received-field shows. I'm not sure if this could be Dovecot's or OE6's fault .. Has anyone else seen timestamps going wrong when copying? > Can anyone please confirm this and let me know, as I am not subscribed > to the list. It actually never made it to list because it was decided to be spam (mostly due to being HTML).

1 0

[Dovecot] status of maildir and mbox
by Eric S. Johansson 25 Sep '03

25 Sep '03

what is the status of mixed support of maildir and mbox at the same time? Has any progress been made? --- eric

3 7

Re: [Dovecot] PC-Pine "Junk in end of group" (fwd)
by Paul 25 Sep '03

25 Sep '03

Also, this line is popping up in my syslog. It wasn't there before the recompile: imap(paul): Error indexing mbox file /home/paul/mail/postponed-msgs: LF not found where expected Paul ---------- Forwarded message ---------- Date: Wed, 24 Sep 2003 14:17:20 -0400 (Eastern Daylight Time) From: Paul <lists(a)pote.com> To: dovecot(a)procontrol.fi Subject: Re: [Dovecot] PC-Pine "Junk in end of group" Timo, thanks - I applied the patch and recompiled, but I am still getting the same error, under the same circumstances. Paul

2 1

[Dovecot] PC-Pine "Junk in end of group"
by Paul Adams 25 Sep '03

25 Sep '03

I am running PC-Pine under Windows XP, connecting via SSL to a Dovecot IMAP server (0.99.10-2 under Debian woody). When I open a mail folder (mbox format) in Pine I get the following non-fatal error: [Junk in end of group: pn=undisclosed-recipients al= dn=] A similar error was reported to comp.mail.pine as happening with a Lotus Domino server. Mark Crispin explained it as a server-side bug: http://groups.google.com/groups?hl=en&lr=lang_en&ie=UTF-8&safe=off&threadm=… Is this something that can be easily fixed? Paul

3 3

[Dovecot] debian installation
by Ewald Geschwinde 23 Sep '03

23 Sep '03

apt-get install postfix-tls postfix-pgsql sasl2-bin libsasl2-modules postgresql libpam-pgsql Reading Package Lists... Done Building Dependency Tree... Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: Sorry, but the following packages have unmet dependencies: sasl2-bin: Depends: libcomerr1-kerberos4kth (>= 1.2.2-2) but it is not installable E: Sorry, broken packages I think the new users should know this Maybe it takes some time before the sasl2-bin is update Regards Ewald Geschwinde

3 3

[Dovecot] shared folders?
by Samuel Verner 23 Sep '03

23 Sep '03

hello, does dovecot support shared folders (a very nice feature in cyrus-imapd)? sam

2 1

[Dovecot] dovecot IMAP misserving problem?
by Warren Togami 23 Sep '03

23 Sep '03

http://togami.com/~warren/archive/2003/evolution-1.4.4-crash.mbox I suspect that dovecot-0.99.10 is misserving this message in some way that is confusing some IMAP clients. This behavior causes evolution-1.4.4 to segfault, and squirrelmail-1.4.1 to be unable to read the message. The same message served by uw-imapd works works fine in both evolution and squirrelmail. https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104288 Red Hat Bugzilla dovecot report https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104289 Red Hat Bugzilla evolution segfault report http://bugzilla.ximian.com/show_bug.cgi?id=48418 Ximian evolution segfault report

2 6

[Dovecot] problem with auth
by Ewald Geschwinde 22 Sep '03

22 Sep '03

I'm new to dovecot (it's a cool piece of software!!!) I'm using Debian woody I'm trying to start the server but then there is this mail Do I have to set an environment variable or waht does this mean. I'm trying to use a pgsql backend for authentification and I have compiled it from source /usr/local/libexec/dovecot/dovecot-auth start dovecot-auth: Fatal: MECHANISMS environment is unset Regards Ewald Geschwinde

2 1

[Dovecot] feature request: maildirquota
by Eero Volotinen 21 Sep '03

21 Sep '03

Hope maildirquota++ is soon supported, without it, dovecot is useless in my use (mail hosting with maildirquotas). Also QUOTA cabability in dovecot is needed to get to use my webmail plugins that use a001 CAPABILITY to get quota support. Courier imapd supports this. --snippet from quota usage plugin to squirrelmail-- function sqimap_get_quota ($imap_stream, $mailbox) { if (check_quota_capability($imap_stream, "QUOTA")) { fputs ($imap_stream, "a001 GETQUOTAROOT \"$mailbox\"\r\n"); $read_ary = sqimap_read_data ($imap_stream, 'a001', true, $result, $message); for ($i = 0; $i < count($read_ary); $i++) { if (ereg("STORAGE", $read_ary[$i])) { $tempusage = ereg_replace("^.*[(]STORAGE +(.*)[)].*$", "\\1", $read_ary[$i]); $usagearray = explode(" ", $tempusage); return $usagearray[0].":".$usagearray[1]; } } } return "NOQUOTA"; } function check_quota_capability($imap_stream, $capability) { global $imap_general_debug; fputs ($imap_stream, "a001 CAPABILITY\r\n"); $read_ary = sqimap_read_data($imap_stream, 'a001', true, $a, $b); for($i = 0; $i < count($read_ary); $i++) { if (ereg("QUOTA", $read_ary[$i])) return TRUE; } return false; } -- end snippet-- -- Eero

3 2

[Dovecot] Secure coding guide
by Timo Sirainen 21 Sep '03

21 Sep '03

I thought I'd write a small guide to what Dovecot's "secure coding techniques" are and how you'd use them: http://dovecot.fi/doc/securecoding.txt

1 0

[Dovecot] convert wu-imap Maildir format to dovecot
by Alin Osan 21 Sep '03

21 Sep '03

Hello, I intend to migrate a mail server with Maildir from wu-imap to dovecot imap. Using horde/IMP, users can not access their imap forders, as wu-imap created Mail directory that holds all created folders. Dovecot could not detect the mail directory so I had to put default_mail_env = ~/Maildir in dovecot.conf. Before I begin to read the source-code of dovecot or try to migrate the the mailboxes using a shell script, is there any way I can make dovecot read the wu-imap folders format? Please suggest any solution that you find viable. Thank you. -- -- We are what we repeatedly do. Excellence, then, is not an act, but a habit. -- Alin Osan

3 7

[Dovecot] namespaces
by Brian Marcotte 21 Sep '03

21 Sep '03

I'm trying to use the namespaces feature to set up dovecot to look just like our existing Courier IMAP server, and our previous Cyrus server. That is, all folders are subfolders of INBOX, and the hierachy separator is ".". I put this in the configuration file: namespace private { separator = . prefix = INBOX. location = maildir:~/.maildir } This makes subfolders work correctly, but it can't find the INBOX: x1 select INBOX x1 NO Unknown namespace. Also, I don't really want to specify the location here. I want to use the userdb settings (I'm using password-file). Is there a way to make it use my setting in the userdb/password-file? Also, I'm not sure if it actually matters, but when selecting a folder, the number of RECENT messages is always the same as the number of messages which EXISTS: x2 select INBOX.Tech * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 70 EXISTS * 70 RECENT * OK [UNSEEN 69] First unseen. * OK [UIDVALIDITY 1057356619] UIDs valid * OK [UIDNEXT 181] Predicted next UID x2 OK [READ-WRITE] Select completed. I'm afraid some clients may use this information for something, and display incorrect information to the user. Thanks! -- - Brian

2 6

[Dovecot] Feature question/request
by Dan Sully 20 Sep '03

20 Sep '03

So I have a bunch of users who are roaming - IE no static IP address from all over the internet. Some of them are able to use SMTP-AUTH which is great, but for those that can't, a pop before smtp solution is in place using relay-ctrl-age & cdb files via qmail. Would it be desirable to have this feature in dovecot? I'd really like to ditch qmail-pop3d, etc. vpopmail has a open_smtp_relay() when using vchkpw directly. -D -- <iNoah> I won't be satisfied until I have a rectally-insertable laptop

5 8

[Dovecot] Multiple auth checkers
by Dan Sully 18 Sep '03

18 Sep '03

I noticed this is in the TODO: - support for multiple auth checkers. passdb+userdb should be tied together. auth process configurations really should be used for this.. and is functionality that I really would like, as I have local users (passwd+shadow) and vpopmail users. In -test7's dovecot-example.conf, there is a different format for "blocking" multiple auth types, and I created a conf as such: auth default { mechanisms = plain userdb = passwd passdb = shadow user = root count = 2 } auth vpopmail { mechanisms = plain userdb = vpopmail passdb = vpopmail user = vpopmail count = 2 } Password authentication still works fine, but I can't find a way to get it to fallback to using the vpopmail auth. Is this simply not working yet? Timo - what part of the code needs this update? Thanks. -D -- Change? We fear change.

2 6

[Dovecot] Dovecot + PostgreSQL + Postfix with SMTP AUTH HOWTO
by Timo Sirainen 17 Sep '03

17 Sep '03

Just built one and figured I'd write down what I did :) Still needing some web thingy to configure it. At least a password changer plugin for Squirrelmail. http://wiki.dovecot.fi/moin.cgi/DovecotPostgresql

3 3

[Dovecot] Unable to access the mailbox or folders !!
by nasir nasir 17 Sep '03

17 Sep '03

Hi, Thanx a lot for your reply. But my log file(its /var/log/dovecot) doesnt have any information other than the following line for example, imap-login: Sep 16 10:31:50 Info: Login: usr1 [127.0.0.1] After this when I give select command or anything like that, its not logged(I dont know also, how to enable maximum debug information, I checked the docs and all) Again, let me tell you that I suspect there is something wrong with the mail environment setting. its as follows default_mail_env = maildir:/var/spool/mail/%u/Maildir and when i give some nonexisting location ( eg; /var/blah/blah) also, I get the SAME ERROR. Here is a sample telnet session Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. * OK dovecot ready. a01 login usr1 XXXXXXXXX a01 OK Logged in. a02 select inbox a02 NO Please tell me if you would like to have any other info. Thanx again and regards, Nasirudheen --- Timo Sirainen <tss(a)iki.fi> wrote: > On Tue, 2003-09-16 at 01:35, nasir nasir wrote: > > Hi all, > > I have installed dovecot on redhat linux > with > > ldap backend. I can login using ldap account in to > my > > webmail (squirrelmail) .But when I login to the > > webmail , I cant see any inbox or anything . Just > some > > error messages like this , > > Check the log file. /var/log/mail.log usually. It > should give more > specific error message on what happened. > > > I tried to telnet to port 143. Its also similar > case. > > It allows me to login but when I give "select" > command > > , it gives error(in fact, "NO" and nothing else). > > "x select inbox" too? > > __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com

2 1

[Dovecot] Locking foolishness
by Ian Marlier 16 Sep '03

16 Sep '03

I'm working on getting Dovecot set up on my school's mailserver, as an IMAP and POP server. Everything is going well, move over to maildir went well, and all that... The catch: When I coverted from mbox to maildir (as part of this whole process), I put the Maildir folders under user home dirs -- and the home dirs are mounted via NFS from a server. This is for reasons of space as well as simply seeming to make sense. Now I get errors in my mail.log which read: imap-login: Sep 16 00:16:24 dovecot:Info: Login: marlier [209.6.159.188] imap(marlier): Sep 16 00:16:28 dovecot:Error: file_wait_lock() failed with index file /Network/Servers/network.uphamscornercs.net/Users/marlier/Maildir/.INBOX/.im ap.index: Invalid argument It looks to me like it's a file locking problem...any thoughts on how to get around it? I've already tried the dotlock mechanism alone...without success... More information available upon request... - Ian

2 1

[Dovecot] Locking foolishness - Better info
by Ian Marlier 16 Sep '03

16 Sep '03

I realized that my last message about locking gave bad information -- or rather, very little information. Here's my setup: - Home directories and user login information are located on an Xserve running Mac OS X 10.2.6. Home directories are split between 2 different directories -- /Users and /Students. Home dirs are exported via NFS to the mail server. User login info is shared via LDAP to the mail server and to Windows machines in classrooms. - The mail server is an old beige G3 running Debian Woody (linux 2.4.20) kernel. It's completely up-to-date. Homedirs are mounted at /Network/Servers/network.uphamscornercs.net/Users and /Network/Servers/network.uphamscornercs.net/Students, in keeping with the OS X Server userdir name scheme. The only user with a shell on the server is root, other than that all user information is pulled from LDAP using PAM. Postfix is setup to deliver mail to maildir:~/Maildir, and dovecot is set to read mail from the same directory. This is working without any problem. - Clients Entourage works fine to access mailboxes -- it reads mail without a problem. However, it pops up an error message intermittently that reads "Mail could not be read: Internal Error [<datestamp>]". This message doesn't seem to interfere with reading mail, it's just an annoyance. Squirrelmail doesn't work to access mailboxes. It logs in fine, but gives the following error message in all windows that require mailbox access: "ERROR : Could not complete request. Query: <imap query string> Reason Given: Internal error [<datestamp>]" In both cases (Entourage and Squirrelmail), the Internal Error is accompanied by the following error message in the /var/log/mail.log file: "imap(marlier): Sep 16 08:40:45 dovecot:Error: /Network/Servers/network.uphamscornercs.net/Users/marlier/Maildir/.subscript ions failed with subscription file file_wait_lock(): Invalid argument" So, it looks to me like something isn't working with locking. I'm not sure whether the problem is with the NFS mount, or with dovecot, or with permissions, or something else, but I'd like to get it fixed. I love the server, and if I can get this licked I think I've got a long-term setup. Relevant sections of /usr/local/etc/dovecot.conf: -------- # Use mmap() instead of read() to read mail files. read() seems to be a bit # faster with my Linux/x86 and it's better with NFS, so that's the default. mail_read_mmaped = no # Copy mail to another folders using hard links. This is much faster than # actually copying the file. This is problematic only if something modifies # the mail in one folder but doesn't want it modified in the others. I don't # know any MUA which would modify mail files directly. IMAP protocol also # requires that the mails don't change, so it would be problematic in any case. # If you care about performance, enable it. maildir_copy_with_hardlinks = no # Check if mails' content has been changed by external programs. This slows # down things as extra stat() needs to be called for each file. If changes are # noticed, the message is treated as a new message, since IMAP protocol # specifies that existing message are immutable. maildir_check_content_changes = yes # Which locking methods to use for locking mbox. There's three available: # dotlock: Create <mailbox>.lock file. This is the oldest and most NFS-safe # solution. If you want to use /var/mail/ like directory, the users # will need write access to that directory. # fcntl : Use this if possible. Works with NFS too if lockd is used. # flock : May not exist in all systems. Doesn't work with NFS. # # You can use both fcntl and flock too; if you do the order they're declared # with is important to avoid deadlocks if other MTAs/MUAs are using both fcntl # and flock. Some operating systems don't allow using both of them # simultaneously, eg. BSDs. If dotlock is used, it's always created first. mbox_locks = dotlock # Should we create dotlock file even when we want only a read-lock? Setting # this to yes hurts the performance when the mailbox is accessed simultaneously # by multiple processes, but it's needed for reliable reading if no other # locking methods are available. mbox_read_dotlock = yes # Maximum time in seconds to wait for lock (all of them) before aborting. mbox_lock_timeout = 300 # If dotlock exists but the mailbox isn't modified in any way, override the # lock file after this many seconds. mbox_dotlock_change_timeout = 30 # umask to use for mail files and directories umask = 0077 # Drop all privileges before exec()ing the mail process. This is mostly # meant for debugging, otherwise you don't get core dumps. Note that setting # this to yes means that log file is opened as the logged in user, which # might not work. It could also be a small security risk if you use single UID # for multiple users, as the users could ptrace() each others processes then. mail_drop_priv_before_exec = no --------- Thanks in advance for any help you can give. - Ian

1 0

[Dovecot] Unable to access the mailbox or folders !!
by nasir nasir 16 Sep '03

16 Sep '03

Hi all, I have installed dovecot on redhat linux with ldap backend. I can login using ldap account in to my webmail (squirrelmail) .But when I login to the webmail , I cant see any inbox or anything . Just some error messages like this , ERROR: ERROR : Connection dropped by imap-server. Query: LIST "" "Sent" ERROR : Could not complete request. Query: SELECT "INBOX" Reason Given: I tried to telnet to port 143. Its also similar case. It allows me to login but when I give "select" command , it gives error(in fact, "NO" and nothing else). Required info, OS - Redhat 8.0 dovecot - dovecot-0.99.10-2.dag.src.rpm ( --with-ldap --with-rawlog additionally) MTA - Exim 4.14 Webmail - Squirrelmail 1.4.1-2 Location of Maildir - /var/spool/mail/USERNAME/Maildir dovecot configuration has the following line, default_mail_env = maildir:/var/spool/mail/%u/Maildir Is there anything I am missing or doing wrong ? I am sorry if this is a silly question. But I am a newbie to dovecot and did a lot of google search for this error or even additional documentation for dovecot without any success. Any suggestion or advice would be highly appreciated. Regards, Nasirudheen __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com

2 1

[Dovecot] child 9436 (pop3) killed with signal 11
by Gunter Ohrner 15 Sep '03

15 Sep '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! Suddenly since this afternoon the following happens: Sep 14 18:16:55 UnseenUniversity pop3-login: Login: gunter [127.0.0.1] Sep 14 18:16:55 UnseenUniversity pop3(gunter): Corrupted index data file / home/gunter/Mail/.imap/INBOX/.imap.index.data: Field 1 size points outside file (205408 / 205376) for record 4662 Sep 14 18:16:55 UnseenUniversity pop3(gunter): Corrupted index data file / home/gunter/Mail/.imap/INBOX/.imap.index.data: Missing location field for record 4662 Sep 14 18:16:55 UnseenUniversity dovecot: child 9436 (pop3) killed with signal 11 I thought dovecot would delete damaged index files but I get this always when checking mail for the first time, cheking mail for the second time tells me: Sep 14 18:18:43 UnseenUniversity pop3-login: Login: gunter [127.0.0.1] Sep 14 18:18:43 UnseenUniversity pop3(gunter): Corrupted binary tree file / home/gunter/Mail/.imap/INBOX/.imap.index.tree: Invalid used_file_size in header (0) but actually fetches the mail after that. So what can/should I do? Simply delete the offending index file? The dovecot version I'm using here is Debian's ii dovecot-pop3d 0.99.10-7 A secure POP3 server that supports mbox and and only it's pop3 part. Greetings, Gunter - -- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + PGP-verschlüsselte Mails bevorzugt! + +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 3) I don't sign parts of the body, even if they're still attached. -- From Terry's Rules of Book Signing (Terry Pratchett, alt.fan.pratchett) +-+-+-+-+-+-+-+-+-+-+-+-+ http://www.lspace.org +-+-+-+-+-+-+-+-+-+-+-+-+ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQE/ZKEX0ORHvREo8l8RAnKoAJoDpKu3OprNQ0W7ZWXpj5/RcYmZFgCfWU2c s5uLQS9yQpe7LQlVDRbnlvk= =ngZu -----END PGP SIGNATURE-----

2 1

[Dovecot] Dovecot Wiki
by Timo Sirainen 14 Sep '03

14 Sep '03

I finally got around to cleaning up the MoinMoin pages out of it and added a link to it from main page. I also got dovecot.fi domain, so Dovecot pages can be accessed from http://www.dovecot.fi/ and Wiki is at http://wiki.dovecot.fi/

2 2

[Dovecot] Setting up a local shared mailbox
by Peter Clark 14 Sep '03

14 Sep '03

One: I have never set up an IMAP server before, so I thought I would ask first before blindly stumbling around. The problem I am want to solve is this: my wife and I have a "joint" email account that we both want to access (we also have our own personal accounts, but that's beside the point.) I posed the question to my local LUG, and several suggested setting up a local IMAP server so that we can both access it through KMail. Would you concur? If so, is there a tutorial or something similar that gives instructions for setting up dovecot locally? As I said, I've never set up an IMAP server before, and I'm not really sure how to go about it. (I'm running Debian Sid, so the packages are already installed, but I don't know what additional steps need to be taken.) Thanks for your help, :Peter

4 8

[Dovecot] Patch for auto-creating home directories
by David S Madole 13 Sep '03

13 Sep '03

I've created a patch that adds a feature that is helpful to my setup. If 'parent_dir_umask' is set in the configuration file, any missing directories in the home directory path are created. The home directory itself is created according to the 'umask' setting, 'parent_dir_umask' is only used for intermediate directories that might need creating. This is useful to me, as I pull user information from a PostgreSQL database. This allows a new account to be created just by populating the database. The directory gets created the first time the user logs in (by Dovecot) or mail is received (by the MTA). As the patch is of modest length, I have included it below. I hope my meager skills are not an insult to the beatiful Dovecot code base! Thanks, David *** ./src/master/mail-process.c.orig Wed Sep 10 10:14:04 2003 --- ./src/master/mail-process.c Wed Sep 10 12:16:06 2003 *************** *** 95,100 **** --- 95,136 ---- return str_c(str); } + static int create_directories(const char *directory, mode_t mask) + { + char *chunk, *slash, *path; + mode_t oldmask; + int result; + + if (mkdir(directory, 0777) == 0 || errno == EEXIST) + return TRUE; + + if (errno != ENOENT) + return FALSE; + + path = t_strdup_noconst(directory); + + oldmask = umask(mask); + + for (chunk = path; (slash = strchr(chunk, '/')); chunk = slash + 1) { + + if (slash > chunk) { + + *slash = '\0'; + result = mkdir(path, 0777); + *slash = '/'; + + if (result != 0 && errno != EEXIST) { + umask(oldmask); + return FALSE; + } + } + } + + umask(oldmask); + + return (mkdir(path, 0777) == 0 || errno == EEXIST); + } + int create_mail_process(int socket, struct ip_addr *ip, const char *executable, const char *module_dir, unsigned int process_size, int process_type, *************** *** 156,164 **** --- 192,205 ---- restrict_process_size(process_size, (unsigned int)-1); + (void)umask(set->umask); + if (*home_dir != '\0') { full_home_dir = *chroot_dir == '\0' ? home_dir : t_strconcat(chroot_dir, "/", home_dir, NULL); + if (set->parent_dir_umask != 0777 && + !create_directories(full_home_dir, set->parent_dir_umask)) + i_fatal("mkdir(%s) failed: %m", full_home_dir); if (chdir(full_home_dir) < 0) i_fatal("chdir(%s) failed: %m", full_home_dir); } *************** *** 188,194 **** env_put("MAILDIR_CHECK_CONTENT_CHANGES=1"); if (set->mail_full_filesystem_access) env_put("FULL_FILESYSTEM_ACCESS=1"); - (void)umask(set->umask); env_put(t_strconcat("MBOX_LOCKS=", set->mbox_locks, NULL)); env_put(t_strdup_printf("MBOX_LOCK_TIMEOUT=%u", --- 229,234 ---- *** ./src/master/master-settings.h.orig Wed Sep 10 12:13:45 2003 --- ./src/master/master-settings.h Wed Sep 10 12:13:47 2003 *************** *** 51,56 **** --- 51,57 ---- int mbox_read_dotlock; unsigned int mbox_lock_timeout; unsigned int mbox_dotlock_change_timeout; + unsigned int parent_dir_umask; unsigned int umask; int mail_drop_priv_before_exec; *** ./src/master/master-settings.c.orig Wed Sep 10 12:13:59 2003 --- ./src/master/master-settings.c Wed Sep 10 12:14:40 2003 *************** *** 67,72 **** --- 67,73 ---- DEF(SET_BOOL, mbox_read_dotlock), DEF(SET_INT, mbox_lock_timeout), DEF(SET_INT, mbox_dotlock_change_timeout), + DEF(SET_INT, parent_dir_umask), DEF(SET_INT, umask), DEF(SET_BOOL, mail_drop_priv_before_exec), *************** *** 180,185 **** --- 181,187 ---- MEMBER(mbox_read_dotlock) FALSE, MEMBER(mbox_lock_timeout) 300, MEMBER(mbox_dotlock_change_timeout) 30, + MEMBER(parent_dir_umask) 0777, MEMBER(umask) 0077, MEMBER(mail_drop_priv_before_exec) FALSE,

2 1

[Dovecot] Dovecot on Linux 2.6.0-test1-ac1
by Kyler Laird 12 Sep '03

12 Sep '03

I've been using Dovecot on 2.6.0-test1 for quite awhile but today I jumped ahead to test5 and it broke in the way you described. http://dovecot.procontrol.fi/list/dovecot/2003-July/001943.html I used your workaround and now everyone is back in business. Thank you for the help! (I was sweating there for a bit.) --kyler

1 0

[Dovecot] Web administration tool
by Timo Sirainen 10 Sep '03

10 Sep '03

Any suggestions for a small web based tool to manage virtual domains/users? I tried to look but didn't really find anything that didn't seem to be tightly integrated with Courier or Cyrus, and I'd rather not spend time writing yet another one of those. I would be using Postfix and Squirrelmail with LDAP or PostgreSQL. On a somewhat related thought, I've been thinking about writing some kind of performance and statistics tool which would at least show the users who are logged in and how much CPU, memory and disk I/O they're eating so that you could see what's happening when load is too high. From Dovecot side that'd be done using a plugin. I'm not sure what the client side would be.. HTML might not be enough. Java maybe. Would Flash be too evil? :)

3 2

[Dovecot] Problem with mbox files.
by David Röhr 09 Sep '03

09 Sep '03

I have trouble to get my INBOX-mbox to work properly. I have set the default_mail_env, to this.. "default_mail_env = mbox:~/mail/:INBOX=/var/mail/%u" Since my users are using thier home-dirs to store folders and old mails, and recieving them in /var/mail/username. But when logging in i get this.. Sep 9 12:25:23 angelica imap-login: Login: username [217.151.192.103] Sep 9 12:25:23 angelica imap(username): stat() failed with mbox file /var/mail/username : No such file or directory Just like the file wasn't there?! But checking.. .~ > ls -l /var/mail/username 1200 -rw-rw---- 1 username mail 1222055 Sep 9 12:16 /var/mail/username I can see that it is there, and containing mails.. It's not corrupt or anything like that. And its not a link of any kind. Why am I getting this error? And how do I solve it? I've tested to disable chroots, but get the same error... /d -- ... david röhr | o_ .. unix systems consultant | o/ /\ Solaris, AIX, HP-UX . qbranch system management | /|_, \\ and GNU/Linux Certified. www.qbranch.se / `

2 2

[Dovecot] what is the current state
by Farkas Levente 09 Sep '03

09 Sep '03

hi, what is the current state of dovecot? is it worth to upgrade now or wait for some release in the near future? -- Levente "Si vis pacem para bellum!"

4 10

[Dovecot] squirrelmail + dovecot + qmail + vpopmail error
by Warren Togami 09 Sep '03

09 Sep '03

ERROR : Could not complete request. Query: COPY 99:99 "INBOX.SPAM" Reason Given: [TRYCREATE] Mailbox doesn't exist: INBOX.SPAM Running latest stable version of squirrelmail, dovecot, qmail and vpopmail with Maildir storage in virtual users. One of my users reports seeing this yesterday, then it went away for a few hours, then early in the next day it happened again on the same account, but went away a little while after that. Any idea what could be happening here? Warren Togami warren(a)togami.com

1 0

[Dovecot] Dovecot not starting
by Antonin Karasek 07 Sep '03

07 Sep '03

Hello everybody, sorry for stupid qustion, but I have following problem: I succesfully installed Dovecot on Debian (from source). Now I want to run it. I tryed: # /usr/local/dovecot/sbin/dovecot # but nothing happened: # ps -Af | grep dove ....... ps -Af | grep dove # What is wrong? I want Dovecot to serve POP3 over SSL. Many thanks and sorry again :o)

3 4

[Dovecot] Re: Dovecot not starting
by Antonin Karasek 06 Sep '03

06 Sep '03

Thanks for fast response :) This is copy of syslog: Sep 5 17:58:40 cernunnos dovecot: Dovecot starting up Sep 5 17:58:41 cernunnos dovecot: Auth process died too early - shutting down Sep 5 17:58:41 cernunnos dovecot: child 4327 (auth) returned error 11 Sep 5 17:58:41 cernunnos pop3-login: fd_send(-1) failed: Broken pipe Alejandro Martinez writes: > Did you see the logs ? > > -----Mensaje original----- > De: Antonin Karasek [mailto:lists@ceskyserver.cz] > Enviado el: viernes, 05 de septiembre de 2003 12:46 > Para: dovecot(a)procontrol.fi > Asunto: [Dovecot] Dovecot not starting > > > Hello everybody, > sorry for stupid qustion, but I have following problem: > I succesfully installed Dovecot on Debian (from source). Now I want to > run > it. I tryed: > # /usr/local/dovecot/sbin/dovecot > # > but nothing happened: > # ps -Af | grep dove > ....... ps -Af | grep dove > # > > What is wrong? > > I want Dovecot to serve POP3 over SSL. > > Many thanks and sorry again :o)

2 1

[Dovecot] still getting weird .{inbox} folder creations with latest -test7
by Charlie Allom 06 Sep '03

06 Sep '03

Hi, I am still getting strange creation and mailbox lookups from 0.99.11-test7. dovecot creates in ~/Maildir/ .INBOX/ .imap.index .imap.index.cache .imap.index.log .customflags dovecot-uidlist .INBOX seems to be a reference to ~/Maildir/{cur,new,tmp} yet I cannot get an IMAP client uo pick up my other maildir, located at ~/Maildir/mi/{cur,new,tmp}. In Apple's Mail.app, it picks up a file called ~/Maildir/.procmaillog as if it were a maildir directory! This is with the Mail.app preference for "IMAP Path Prefix" set to null. mutt just seems plain confused. I have these settings: # imap styleee set folder=imap://yeled@lazy.spodder.com/ set mbox=imap://yeled@lazy.spodder.com/mbox set record=imap://yeled@lazy.spodder.com/sent set postponed=imap://yeled@lazy.spodder.com/postponed set spoolfile=imap://yeled@lazy.spodder.com/ set certificate_file=~/.mutt/certificates set mail_check=10 set timeout=10 set imap_home_namespace="" set imap_pass="foo" I have included the tcpflow files to show what the clients are doing.. Is it normal to search for folders starting with "." ? Why won't it just pick up my normally nested maildir folders? C. -- charlie(a)rubberduck.com - http://rubberduck.com/~yeled/

4 4

[Dovecot] dovecot, vpopmail and djb's tcpserver
by Lasse Danielsen 06 Sep '03

06 Sep '03

Hello! I've tried to set up dovecot in conjuction with vpopmail, and running it under djb's tcpserver instead of (x)inetd. Btw - there was no reference to setting dovecot up using (x)inetd either in the manuals/faqs i read, though I didn't search all that hard. Anyway, back to my Q: vpopmail uses vchkpw as an authentication mechanism, and with tcpserver I can do relaycontrol (based on vchkpw) with roaming users. Is there anyone who have tried this, and succeeded? Right now I use two imap services to accomplish this (bincimap has support for vchkpw). Thank you for any response. - Lasse Danielsen Never argue with an idiot. He'll drag you down to his level, then beat you with experience.

4 5

[Dovecot] pine, INBOX, and dovecot
by Jethro R Binks 04 Sep '03

04 Sep '03

Hi all, I've been experimenting with Dovecot; tests with Maildir seemed to work fine. However, now I'm trying with mbox folders, and I'm having a problem where I do not get an INBOX listed using pine. Outlook Express and IMP show it fine. I snooped part of the session, which appears to go like this (it is slightly garbled, sorry -- I couldn't get rawlog to work by creating dovecot.rawlog in the mail home directory): 00000002 CAPABILITY\r\n * CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UN 00000003 LIST "" %\r\n" * LIST (\NoInferiors) "/" INBOX * LIST (\NoInferiors \UnMarked) "/" "test" * LIST (\NoInferiors \UnMarked) ""/" "Sent Items" * LIST (\NoInferiors \UnMarked) "/" "Drafts" 0000000a OK List .completed.. Pine just displays "test", "Sent Items", and "Drafts". OE happily downloads mail from the inbox I put there, and IMP can see it and read it. Perhaps there is something there that IMAP protocol people might see. Or else, perhaps there is a known reason why pine does this? Any clues would be appreciated - I browsed the list archives but couldn't spot anything very relevant. Pine version is very recent - I updated today to 4.56. Incidentally, is mbox support still broken in the CVS version? Is there an expected timescale for the next release, preferably with mbox fixed again?! Thanks for any advice. Jethro. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Jethro R Binks Computing Officer, IT Services University Of Strathclyde, Glasgow, UK

2 2

Re: [Dovecot] How do i load a configfile ?
by Tweek 01 Sep '03

01 Sep '03

>which does everything itself without loading the config file it dosen't do anything - i can connect to the server but thats all. how should the server know where i store my mboxes etc. i must load the config file - but how ? ----- Original Message ----- From: "Timo Sirainen" <tss(a)iki.fi> To: <dovecot(a)procontrol.fi> Sent: Monday, September 01, 2003 8:07 PM Subject: Re: [Dovecot] How do i load a configfile ? > On Mon, 2003-09-01 at 20:57, Tweek wrote: > > hello, > > > > this may be a very stupid question but how do i load a config file? > > i didn't find the docs part which explains how to start the imapserver at > > all. > > There's two possibilities: Run the "dovecot" binary which does > everything itself, or start imap-login from inetd. > > > server = /usr/local/dovecot/imap > > So imap-login here :) > > -- E-Mail by http://www.jesus.ch/ and http://www.livenet.ch/ News, Magazin, Events, Forum, Chat, Free E-Mail, Dialin, Jobs, Top-Newsletter

2 2

[Dovecot] How do i load a configfile ?
by Tweek 01 Sep '03

01 Sep '03

hello, this may be a very stupid question but how do i load a config file? i didn't find the docs part which explains how to start the imapserver at all. i have put this in my xinetd.conf: service imap { disable = no socket_type = stream protocol = tcp wait = no user = root server = /usr/local/dovecot/imap flags = IPv4 } and the server is running, but thats all. as u can see i have installed the server in /usr/local/dovecot and i have put the config file in /etc, /usr/local/etc and the programmdir itself - nothing worked. what commands must i write in the xinetd.conf to get the server running ? thanks -- E-Mail by http://www.jesus.ch/ and http://www.livenet.ch/ News, Magazin, Events, Forum, Chat, Free E-Mail, Dialin, Jobs, Top-Newsletter

2 1

[Dovecot] observations about delays
by Eric S. Johansson 01 Sep '03

01 Sep '03

I've tried two imap clients (mahogany and Mozilla) and they both have strange delays and weird failures. As a reminder, I am using mbox format mailboxes on the server and client side filtering of messages from the inbox. In both cases when the client fetches messages from the inbox and starts redistributing them, CPU utilization on the imap server goes to around 40 percent for Mozilla and around 90 percent for mahogany. There are long delays on the order of two minutes when filtering messages. or 30 to 50 seconds when opening a mailbox. Other than the performance problems, Mozilla is relatively well-behaved. Mahogany on the other hand is a bit more rough and (not) ready. It uses c-client for its imap code and during the filter driven message redistribution process, it all of a sudden started started complaining about unexpected EOF and I found one corrupted message: on 31/8/03 7:36 pm, Morten Christensen at ipcop-d(a)indbakke.dk wrote: >> These bugs might keep many people from trying a new alpha with >> interesting improvements. >> >> A more detailed help for fixing them after install is needed. OK, I'll have a From esj(a)harvee.org Sun Aug 31 16:01:21 2003 Return-Path: <ipcop-devel-admin(a)lists.sourceforge.net> Received: from red.harvee.home (red [192.168.25.1] (may be forged)) by harvee.org (8.12.8/8.12.8) with ESMTP id h7VK1KiE029762 for <esj(a)harvee.billerica.ma.us>; Sun, 31 Aug 2003 16:01:20 -0400 Received: from sc8-sf-list2.sourceforge.net (lists.sourceforge.net [66.35.250.206]) by red.harvee.home (8.11.6/8.11.6) with ESMTP id h7VK1I111902 for <esj(a)harvee.billerica.ma.us>; Sun, 31 Aug 2003 16:01:19 -0400 Received: from sc8-sf-list1-b.sourceforge.net ([10.3.1.13] helo=sc8-sf-list1.sourceforge.net) I had read this message before it was filtered and moved to the right mailbox. It was complete then. Now it's not so happy. How can I gather more data to make it possible to debug these problems. ---eric

2 2

[Dovecot] Crash when searching messages
by Nicolas STRANSKY 01 Sep '03

01 Sep '03

Hi, I've been encountering a crash when trying to use the "Search messages" function with mozilla on a newly indexed/subscribed mailbox. I tryed to search something in "To or CC" and got the following : Sep 1 09:07:13 aster imap(nico): file message-address.c: line 255 (message_address_write): assertion failed: (addr->domain != NULL) Sep 1 09:07:13 aster dovecot: child 15674 (imap) killed with signal 6 In addition, mozilla gives the following message : "Server mail.neo-lan.net has disconnected. The server may have gone down or there may be a network problem" and the search fails. But there was no problem when doing other searches. After trying several different types of searches, the initial one (on TO or CC) worked fine, but the crash is reproducible on an other newly subscribed mbox. -- Nico Si cela fonctionne, c'est obsolète. Marshall McLuhan

2 1

[Dovecot] conversion to maildir
by Eric S. Johansson 30 Aug '03

30 Aug '03

is really a royal pain in the butt. most of the conversion tools only do a partial job. mb2md seems to be the best but it does not convert the from line correctly unless you are using exim for an MTA. It also does not get the file status right so everything is written to the new maildir directory. something else that makes the process painful is when you have folders containing mailboxes. And the process is *slow* when you have 2 GB of mail (yes, I will be deleting some soon). looks like I will be debugging and rewrapping this package real soon now.. to relate this to dovecot: this is probably not the job of the imap server but it would be real nice to be able to fit in some sort of a plug-in that could automatically do the conversion on a mailbox as it is opened. it would make migrations trivial easy. give me the ability to use python for plug-ins and I will write such a tool. ---eric

11 15

[Dovecot] PATCH: mysql authentication
by Matthew Reimer 30 Aug '03

30 Aug '03

Here's a patch that implements mysql authentication. I started with the pgsql files and tweaked them to use mysql instead. It works for me, but there might be a couple of memory leaks. I'm welcome to suggestions on how to clean it up so it can be committed. Enjoy! Matt diff -u -r --new-file work/dovecot-0.99.10/doc/dovecot-mysql.conf work.patched/dovecot-0.99.10/doc/dovecot-mysql.conf --- work/dovecot-0.99.10/doc/dovecot-mysql.conf Wed Dec 31 18:00:00 1969 +++ work.patched/dovecot-0.99.10/doc/dovecot-mysql.conf Fri Aug 15 13:43:05 2003 @@ -0,0 +1,70 @@ +# For the mysql passdb module, you'll need a database with a table that +# contains fields for at least the userid and password. If you want to +# use the user@domain syntax, you might want to have a separate domain +# field as well. +# +# If your users all have the same uig/gid, and have predictable home +# directories, you can use the static userdb module to generate the home +# dir based on the userid and domain. In this case, you won't need fields +# for home, uid, or gid in the database. +# +# If you prefer to use the mysql userdb module, you'll want to add fields +# for home, uid, and gid. Here is an example table: +# +# CREATE TABLE users ( +# userid VARCHAR(128) NOT NULL, +# password VARCHAR(64) NOT NULL, +# home VARCHAR(256) NOT NULL, +# uid INTEGER NOT NULL, +# gid INTEGER NOT NULL, +# active CHAR(1) DEFAULT 'Y' NOT NULL +# ); + +db_host = localhost +db_port = 3306 +#db_unix_socket = /var/tmp/mysql.sock +db = users +db_user = dovecot-db +db_passwd = opensesame +db_client_flags = 0 + +# Default password scheme. +# +# Currently supported schemes include PLAIN, PLAIN-MD5, DIGEST-MD5, and CRYPT. +# +#default_pass_scheme = PLAIN-MD5 + +# Query to retrieve the password. +# +# The query should return one row, one column. If more than one row or column +# is returned, authentication will automatically fail. +# +# Available substitutions: +# %u = entire userid +# %n = user part of user@domain +# %d = domain part of user@domain +# +# Example: +# password_query = SELECT password FROM users WHERE userid = '%n' AND domain = '%d' +# password_query = SELECT password FROM users WHERE userid = '%u' AND active = 'Y' +# +#password_query = SELECT password FROM users WHERE userid = '%u' + +# Query to retrieve the user information. +# +# The query must return only one row. The columns to return are: +# home - Home directory +# mail - MAIL environment +# system_user - System user name (for initgroups()) +# uid - System UID +# gid - System GID +# +# Either home or mail is required. uid and gid are required. If more than one +# row is returned or there's missing fields, login will automatically fail. +# +# Examples +# user_query = SELECT home, uid, gid FROM users WHERE userid = '%n' AND domain = '%d' +# user_query = SELECT dir AS home, user AS uid, group AS gid FROM users where userid = '%u' +# user_query = SELECT home, 501 AS uid, 501 AS gid FROM users WHERE userid = '%u' +# +#user_query = SELECT home, uid, gid FROM users WHERE userid = '%u' diff -u -r --new-file work/dovecot-0.99.10/src/auth/Makefile.am work.patched/dovecot-0.99.10/src/auth/Makefile.am --- work/dovecot-0.99.10/src/auth/Makefile.am Sun May 18 07:26:28 2003 +++ work.patched/dovecot-0.99.10/src/auth/Makefile.am Fri Aug 15 16:47:21 2003 @@ -19,6 +19,7 @@ auth-module.c \ db-ldap.c \ db-pgsql.c \ + db-mysql.c \ db-passwd-file.c \ login-connection.c \ main.c \ @@ -38,6 +39,7 @@ passdb-shadow.c \ passdb-vpopmail.c \ passdb-pgsql.c \ + passdb-mysql.c \ password-scheme.c \ userdb.c \ userdb-ldap.c \ @@ -45,7 +47,8 @@ userdb-passwd-file.c \ userdb-static.c \ userdb-vpopmail.c \ - userdb-pgsql.c + userdb-pgsql.c \ + userdb-mysql.c noinst_HEADERS = \ auth-login-interface.h \ @@ -54,6 +57,7 @@ auth-module.h \ db-ldap.h \ db-pgsql.h \ + db-mysql.h \ db-passwd-file.h \ common.h \ login-connection.h \ diff -u -r --new-file work/dovecot-0.99.10/src/auth/db-mysql.c work.patched/dovecot-0.99.10/src/auth/db-mysql.c --- work/dovecot-0.99.10/src/auth/db-mysql.c Wed Dec 31 18:00:00 1969 +++ work.patched/dovecot-0.99.10/src/auth/db-mysql.c Fri Aug 22 17:56:44 2003 @@ -0,0 +1,181 @@ +/* Copyright (C) 2003 Alex Howansky, Timo Sirainen */ + +#include "config.h" +#undef HAVE_CONFIG_H + +#if defined(PASSDB_MYSQL) || defined(USERDB_MYSQL) + +#include "common.h" +#include "network.h" +#include "str.h" +#include "settings.h" +#include "db-mysql.h" + +#include <limits.h> +#include <stddef.h> +#include <stdlib.h> + +#define DEF(type, name) { type, #name, offsetof(struct mysql_settings, name) } + +static struct setting_def setting_defs[] = { + DEF(SET_STR, db_host), + DEF(SET_STR, db_port), + DEF(SET_STR, db_unix_socket), + DEF(SET_STR, db), + DEF(SET_STR, db_user), + DEF(SET_STR, db_passwd), + DEF(SET_STR, db_client_flags), + DEF(SET_STR, password_query), + DEF(SET_STR, user_query), + DEF(SET_STR, default_pass_scheme) +}; + +struct mysql_settings default_mysql_settings = { + MEMBER(db_host) "localhost", + MEMBER(db_port) "0", + MEMBER(db_unix_socket) "/var/tmp/mysql.sock", + MEMBER(db) "email_accounts", + MEMBER(db_user) "dovecot", + MEMBER(db_passwd) "changeme", + MEMBER(db_client_flags) "0", + MEMBER(password_query) "SELECT password FROM users WHERE userid = '%u'", + MEMBER(user_query) "SELECT home, uid, gid FROM users WHERE userid = '%u'", + MEMBER(default_pass_scheme) "PLAIN-MD5" +}; + +static struct mysql_connection *mysql_connections = NULL; + +static int mysql_conn_open(struct mysql_connection *conn); +static void mysql_conn_close(struct mysql_connection *conn); + +void db_mysql_query(struct mysql_connection *conn, const char *query, + struct mysql_request *request) +{ + MYSQL_RES *res; + int failed; + + if (!conn->connected) { + if (!mysql_conn_open(conn)) { + request->callback(conn, request, NULL); + return; + } + } + + if (verbose_debug) + i_info("MYSQL: Performing query: %s", query); + + if (mysql_query(conn->mysql, query)) + i_info("MYSQL: Error executing query \"%s\": %s", query, + mysql_error(conn->mysql)); + + if ((res = mysql_store_result(conn->mysql))) + failed = FALSE; + else { + i_info("MYSQL: Error retrieving results: %s", + mysql_error(conn->mysql)); + failed = TRUE; + } + + request->callback(conn, request, failed ? NULL : res); + mysql_free_result(res); + i_free(request); +} + +static int mysql_conn_open(struct mysql_connection *conn) +{ + if (conn->connected) + return TRUE; + + if (conn->mysql == NULL) { + conn->mysql = mysql_init(NULL); + if (conn->mysql == NULL) { + i_error("MYSQL: mysql_init failed"); + return FALSE; + } + + if (!mysql_real_connect(conn->mysql, conn->set.db_host, + conn->set.db_user, conn->set.db_passwd, + conn->set.db, + atoi(conn->set.db_port), + conn->set.db_unix_socket, + strtoul(conn->set.db_client_flags, + NULL, 10))) { + i_error("MYSQL: Can't connect to database %s: %s", + conn->set.db, mysql_error(conn->mysql)); + return FALSE; + } + } + + conn->connected = TRUE; + return TRUE; +} + +static void mysql_conn_close(struct mysql_connection *conn) +{ + conn->connected = FALSE; + + if (conn->mysql != NULL) { + mysql_close(conn->mysql); + conn->mysql = NULL; + } +} + +static struct mysql_connection *mysql_conn_find(const char *config_path) +{ + struct mysql_connection *conn; + + for (conn = mysql_connections; conn != NULL; conn = conn->next) { + if (strcmp(conn->config_path, config_path) == 0) + return conn; + } + + return NULL; +} + +static const char *parse_setting(const char *key, const char *value, + void *context) +{ + struct mysql_connection *conn = context; + + return parse_setting_from_defs(conn->pool, setting_defs, + &conn->set, key, value); +} + +struct mysql_connection *db_mysql_init(const char *config_path) +{ + struct mysql_connection *conn; + pool_t pool; + + conn = mysql_conn_find(config_path); + if (conn != NULL) { + conn->refcount++; + return conn; + } + + pool = pool_alloconly_create("mysql_connection", 1024); + conn = p_new(pool, struct mysql_connection, 1); + conn->pool = pool; + + conn->refcount = 1; + + conn->config_path = p_strdup(pool, config_path); + conn->set = default_mysql_settings; + settings_read(config_path, parse_setting, conn); + + (void)mysql_conn_open(conn); + + conn->next = mysql_connections; + mysql_connections = conn; + return conn; +} + +void db_mysql_unref(struct mysql_connection *conn) +{ + if (--conn->refcount > 0) + return; + + mysql_conn_close(conn); + pool_unref(conn->pool); +} + +#endif diff -u -r --new-file work/dovecot-0.99.10/src/auth/db-mysql.h work.patched/dovecot-0.99.10/src/auth/db-mysql.h --- work/dovecot-0.99.10/src/auth/db-mysql.h Wed Dec 31 18:00:00 1969 +++ work.patched/dovecot-0.99.10/src/auth/db-mysql.h Fri Aug 15 13:40:56 2003 @@ -0,0 +1,51 @@ +#ifndef __DB_MYSQL_H +#define __DB_MYSQL_H + +#include <mysql.h> + +struct mysql_connection; +struct mysql_request; + +typedef void mysql_query_callback_t(struct mysql_connection *conn, + struct mysql_request *request, + MYSQL_RES *res); + +struct mysql_settings { + const char *db_host; + const char *db_port; + const char *db_unix_socket; + const char *db; + const char *db_user; + const char *db_passwd; + const char *db_client_flags; + const char *password_query; + const char *user_query; + const char *default_pass_scheme; +}; + +struct mysql_connection { + struct mysql_connection *next; + + pool_t pool; + int refcount; + + char *config_path; + struct mysql_settings set; + + MYSQL *mysql; + + unsigned int connected:1; +}; + +struct mysql_request { + mysql_query_callback_t *callback; + void *context; +}; + +void db_mysql_query(struct mysql_connection *conn, const char *query, + struct mysql_request *request); + +struct mysql_connection *db_mysql_init(const char *config_path); +void db_mysql_unref(struct mysql_connection *conn); + +#endif diff -u -r --new-file work/dovecot-0.99.10/src/auth/master-connection.c work.patched/dovecot-0.99.10/src/auth/master-connection.c --- work/dovecot-0.99.10/src/auth/master-connection.c Mon May 26 10:27:13 2003 +++ work.patched/dovecot-0.99.10/src/auth/master-connection.c Fri Aug 22 17:56:18 2003 @@ -55,7 +55,7 @@ reply.virtual_user_idx = reply_add(buf, user->virtual_user); reply.mail_idx = reply_add(buf, user->mail); - p = strstr(user->home, "/./"); + p = user->home ? strstr(user->home, "/./") : NULL; if (p == NULL) { reply.home_idx = reply_add(buf, user->home); reply.chroot_idx = reply_add(buf, NULL); diff -u -r --new-file work/dovecot-0.99.10/src/auth/passdb-mysql.c work.patched/dovecot-0.99.10/src/auth/passdb-mysql.c --- work/dovecot-0.99.10/src/auth/passdb-mysql.c Wed Dec 31 18:00:00 1969 +++ work.patched/dovecot-0.99.10/src/auth/passdb-mysql.c Fri Aug 15 14:24:44 2003 @@ -0,0 +1,171 @@ +/* Copyright (C) 2003 Alex Howansky, Timo Sirainen */ + +#include "config.h" +#undef HAVE_CONFIG_H + +#ifdef PASSDB_MYSQL + +#include "common.h" +#include "str.h" +#include "strescape.h" +#include "var-expand.h" +#include "password-scheme.h" +#include "db-mysql.h" +#include "passdb.h" + +#include <mysql.h> +#include <stdlib.h> +#include <string.h> + +struct passdb_mysql_connection { + struct mysql_connection *conn; +}; + +struct passdb_mysql_request { + struct mysql_request request; + + enum passdb_credentials credentials; + union { + verify_plain_callback_t *verify_plain; + lookup_credentials_callback_t *lookup_credentials; + } callback; + + char password[1]; +}; + +static struct passdb_mysql_connection *passdb_mysql_conn; + +static void mysql_handle_request(struct mysql_connection *conn, + struct mysql_request *request, MYSQL_RES *res) +{ + struct passdb_mysql_request *mysql_request = + (struct passdb_mysql_request *) request; + struct auth_request *auth_request = request->context; + const char *user, *password, *scheme; + int ret = 0; + + user = auth_request->user; + password = NULL; + + if (res != NULL) { + if (mysql_num_rows(res) == 0) { + if (verbose) + i_info("mysql(%s): Unknown user", user); + } else if (mysql_num_rows(res) > 1) { + i_error("mysql(%s): Multiple matches for user", user); + } else if (mysql_num_fields(res) != 1) { + i_error("mysql(%s): Password query returned " + "more than one field", user); + } else { + MYSQL_ROW row; + + row = mysql_fetch_row(res); + if (row) + password = t_strdup(row[0]); /* XXX binary? */ + } + } + + scheme = password_get_scheme(&password); + if (scheme == NULL) { + scheme = conn->set.default_pass_scheme; + i_assert(scheme != NULL); + } + + if (mysql_request->credentials != -1) { + passdb_handle_credentials(mysql_request->credentials, + user, password, scheme, + mysql_request->callback.lookup_credentials, + auth_request); + return; + } + + /* verify plain */ + if (password == NULL) { + mysql_request->callback.verify_plain(PASSDB_RESULT_USER_UNKNOWN, + auth_request); + return; + } + + ret = password_verify(mysql_request->password, password, + scheme, user); + if (ret < 0) + i_error("mysql(%s): Unknown password scheme %s", user, scheme); + else if (ret == 0) { + if (verbose) + i_info("mysql(%s): Password mismatch", user); + } + + mysql_request->callback.verify_plain(ret > 0 ? PASSDB_RESULT_OK : + PASSDB_RESULT_PASSWORD_MISMATCH, + auth_request); +} + +static void mysql_lookup_pass(struct auth_request *auth_request, + struct mysql_request *mysql_request) +{ + struct mysql_connection *conn = passdb_mysql_conn->conn; + const char *query; + string_t *str; + + str = t_str_new(512); + var_expand(str, conn->set.password_query, + str_escape(auth_request->user), NULL); + query = str_c(str); + + mysql_request->callback = mysql_handle_request; + mysql_request->context = auth_request; + + db_mysql_query(conn, query, mysql_request); +} + +static void +mysql_verify_plain(struct auth_request *request, const char *password, + verify_plain_callback_t *callback) +{ + struct passdb_mysql_request *mysql_request; + + mysql_request = i_malloc(sizeof(struct passdb_mysql_request) + + strlen(password)); + mysql_request->credentials = -1; + mysql_request->callback.verify_plain = callback; + strcpy(mysql_request->password, password); + + mysql_lookup_pass(request, &mysql_request->request); +} + +static void mysql_lookup_credentials(struct auth_request *request, + enum passdb_credentials credentials, + lookup_credentials_callback_t *callback) +{ + struct passdb_mysql_request *mysql_request; + + mysql_request = i_new(struct passdb_mysql_request, 1); + mysql_request->credentials = credentials; + mysql_request->callback.lookup_credentials = callback; + + mysql_lookup_pass(request, &mysql_request->request); +} + +static void passdb_mysql_init(const char *args) +{ + struct mysql_connection *conn; + + passdb_mysql_conn = i_new(struct passdb_mysql_connection, 1); + passdb_mysql_conn->conn = conn = db_mysql_init(args); +} + +static void passdb_mysql_deinit(void) +{ + db_mysql_unref(passdb_mysql_conn->conn); + i_free(passdb_mysql_conn); +} + +struct passdb_module passdb_mysql = { + passdb_mysql_init, + passdb_mysql_deinit, + + mysql_verify_plain, + mysql_lookup_credentials +}; + +#endif diff -u -r --new-file work/dovecot-0.99.10/src/auth/passdb.c work.patched/dovecot-0.99.10/src/auth/passdb.c --- work/dovecot-0.99.10/src/auth/passdb.c Sun May 18 07:26:28 2003 +++ work.patched/dovecot-0.99.10/src/auth/passdb.c Fri Aug 15 11:39:31 2003 @@ -110,6 +110,10 @@ if (strcasecmp(name, "pgsql") == 0) passdb = &passdb_pgsql; #endif +#ifdef PASSDB_MYSQL + if (strcasecmp(name, "mysql") == 0) + passdb = &passdb_mysql; +#endif #ifdef HAVE_MODULES passdb_module = passdb != NULL ? NULL : auth_module_open(name); if (passdb_module != NULL) { diff -u -r --new-file work/dovecot-0.99.10/src/auth/passdb.h work.patched/dovecot-0.99.10/src/auth/passdb.h --- work/dovecot-0.99.10/src/auth/passdb.h Thu Mar 20 09:46:33 2003 +++ work.patched/dovecot-0.99.10/src/auth/passdb.h Fri Aug 15 16:45:43 2003 @@ -58,6 +58,7 @@ extern struct passdb_module passdb_vpopmail; extern struct passdb_module passdb_ldap; extern struct passdb_module passdb_pgsql; +extern struct passdb_module passdb_mysql; void passdb_init(void); void passdb_deinit(void); diff -u -r --new-file work/dovecot-0.99.10/src/auth/userdb-mysql.c work.patched/dovecot-0.99.10/src/auth/userdb-mysql.c --- work/dovecot-0.99.10/src/auth/userdb-mysql.c Wed Dec 31 18:00:00 1969 +++ work.patched/dovecot-0.99.10/src/auth/userdb-mysql.c Fri Aug 22 17:53:56 2003 @@ -0,0 +1,148 @@ +/* Copyright (C) 2003 Alex Howansky, Timo Sirainen */ + +#include "config.h" +#undef HAVE_CONFIG_H + +#ifdef USERDB_MYSQL + +#include "common.h" +#include "str.h" +#include "strescape.h" +#include "var-expand.h" +#include "db-mysql.h" +#include "userdb.h" + +#include <mysql.h> +#include <stdlib.h> +#include <string.h> + +struct userdb_mysql_connection { + struct mysql_connection *conn; +}; + +struct userdb_mysql_request { + struct mysql_request request; + userdb_callback_t *userdb_callback; + + char username[1]; /* variable width */ +}; + +static struct userdb_mysql_connection *userdb_mysql_conn; + +static int is_result_valid(MYSQL_RES *res) +{ + + if (res == NULL) { + i_error("MYSQL: Query failed"); + return FALSE; + } + + if (mysql_num_rows(res) == 0) { + if (verbose) + i_error("MYSQL: Authenticated user not found"); + return FALSE; + } + + /* XXX */ + if (mysql_num_fields(res) < 3) { + i_error("MYSQL: Not enough fields returned"); + return FALSE; + } +/* XXX + if (PQfnumber(res, "uid") == -1) { + i_error("MYSQL: User query did not return 'uid' field"); + return FALSE; + } + + if (PQfnumber(res, "gid") == -1) { + i_error("MYSQL: User query did not return 'gid' field"); + return FALSE; + } +*/ + + return TRUE; +} + +static const char *my_get_str(MYSQL_RES *res, MYSQL_ROW row, const char *field) +{ + int i, n_fields; + unsigned long *lengths; + MYSQL_FIELD *fields; + + n_fields = mysql_num_fields(res); + lengths = mysql_fetch_lengths(res); + fields = mysql_fetch_fields(res); + for (i = 0; i < n_fields; i++) + if (strcmp(field, fields[i].name) == 0) + return (const char *) lengths[i] == 0 ? + NULL : t_strdup(row[i]); + + return NULL; +} + +static void mysql_handle_request(struct mysql_connection *conn __attr_unused__, + struct mysql_request *request, MYSQL_RES *res) +{ + struct userdb_mysql_request *urequest = + (struct userdb_mysql_request *) request; + struct user_data user; + MYSQL_ROW row; + + if (res != NULL && is_result_valid(res) && + (row = mysql_fetch_row(res))) { + memset(&user, 0, sizeof(user)); + user.virtual_user = urequest->username; + user.system_user = my_get_str(res, row, "system_user"); + user.home = my_get_str(res, row, "home"); + user.mail = my_get_str(res, row, "mail"); + user.uid = atoi(my_get_str(res, row, "uid")); /* XXX leak */ + user.gid = atoi(my_get_str(res, row, "gid")); /* XXX leak */ + urequest->userdb_callback(&user, request->context); + } else { + urequest->userdb_callback(NULL, request->context); + } +} + +static void userdb_mysql_lookup(const char *user, userdb_callback_t *callback, + void *context) +{ + struct mysql_connection *conn = userdb_mysql_conn->conn; + struct userdb_mysql_request *request; + const char *query; + string_t *str; + + str = t_str_new(512); + var_expand(str, conn->set.user_query, str_escape(user), NULL); + query = str_c(str); + + request = i_malloc(sizeof(struct userdb_mysql_request) + strlen(user)); + request->request.callback = mysql_handle_request; + request->request.context = context; + request->userdb_callback = callback; + strcpy(request->username, user); + + db_mysql_query(conn, query, &request->request); +} + +static void userdb_mysql_init(const char *args) +{ + struct mysql_connection *conn; + + userdb_mysql_conn = i_new(struct userdb_mysql_connection, 1); + userdb_mysql_conn->conn = conn = db_mysql_init(args); +} + +static void userdb_mysql_deinit(void) +{ + db_mysql_unref(userdb_mysql_conn->conn); + i_free(userdb_mysql_conn); +} + +struct userdb_module userdb_mysql = { + userdb_mysql_init, + userdb_mysql_deinit, + + userdb_mysql_lookup +}; + +#endif diff -u -r --new-file work/dovecot-0.99.10/src/auth/userdb.c work.patched/dovecot-0.99.10/src/auth/userdb.c --- work/dovecot-0.99.10/src/auth/userdb.c Sun May 18 07:26:28 2003 +++ work.patched/dovecot-0.99.10/src/auth/userdb.c Fri Aug 22 13:07:21 2003 @@ -49,6 +49,10 @@ if (strcasecmp(name, "pgsql") == 0) userdb = &userdb_pgsql; #endif +#ifdef USERDB_MYSQL + if (strcasecmp(name, "mysql") == 0) + userdb = &userdb_mysql; +#endif #ifdef HAVE_MODULES userdb_module = userdb != NULL ? NULL : auth_module_open(name); if (userdb_module != NULL) { diff -u -r --new-file work/dovecot-0.99.10/src/auth/userdb.h work.patched/dovecot-0.99.10/src/auth/userdb.h --- work/dovecot-0.99.10/src/auth/userdb.h Sun May 18 07:26:28 2003 +++ work.patched/dovecot-0.99.10/src/auth/userdb.h Fri Aug 22 13:07:53 2003 @@ -29,6 +29,7 @@ extern struct userdb_module userdb_vpopmail; extern struct userdb_module userdb_ldap; extern struct userdb_module userdb_pgsql; +extern struct userdb_module userdb_mysql; void userdb_init(void); void userdb_deinit(void);

2 1

[Dovecot] converting from courier-imap
by Emily 30 Aug '03

30 Aug '03

Hello. I apologize if there is a simple answer to this question, but I haven't been able to figure it out. Our people use various clients (pine 4.50 with maildir patch, eudora, messenger, outlook, squirrelmail), and all of them work with courier-imap. But I've become very interested in dovecot after reading about it, so I'm trying it out on another server. The results are mixed. Strangely enough, squirrelmail 1.4.1 works wonderfully. For some reason, it duplicates Sent, Drafts, and Trash, but I deleted the duplicates and it was fine. Mozilla messenger is also fine, but with the same duplication of those special folders. Everything seems nice and fast. But some of our users still cling to pine, which works with courier-imap using these three lines in .pinerc: inbox-path={our.server.edu/ssl/novalidate-cert/user=emily}INBOX default-fcc={our.server.edu/ssl/novalidate-cert/user=emily}INBOX.Sent folder-collections="IMAP Folders" {our.server.edu/user=emily/ssl/novalidate-cert}INBOX.[] On the test server I'm using dovecot-0.99.10 compiled against openssl-0.9.7b in Redhat 9. This pine configuration worked in courier, but when I try pine with dovecot, I can't see any folders under "Folder Collection" other than those special three (Drafts, Sent, Trash). I'm sure there's just something I'm doing wrong, but I couldn't find anything in the dovecot list archives. I would appreciate any advice on what I'm doing wrong in getting pine to see the whole collection. Thanks, -- Emily

2 1

[Dovecot] No localhost after reboot
by Bob Hall 30 Aug '03

30 Aug '03

Rebooted the server box today. Now Dovecot doesn't listen at localhost. It does listen at the LAN interface, so it is perfectly usable, but... Does anyone have any idea why it has stopped listening at localhost? Bob Hall

4 15

[Dovecot] Postgresql and Dovecot
by Michael Ducy 29 Aug '03

29 Aug '03

I am having some issues getting dovecot to work with postgres. Dovecot starts up and runs fine without using postgres (ie passwd and pam). There is nothing in /var/log/messages other than: Aug 28 12:44:05 mail dovecot: dovecot startup succeeded Then ps -A shows no running dovecot processes (or the imap-login or pop-login). I have tried with both the RPMs that are on the download page and buidling it myself on 2 different boxes (yes I configured with --with-pgsql - Red Hat 7.3 and Red Hat 9.0). Any suggestions would be appreciated as this is the only imap/pop server with pgsql support and flatfile support I can find. Michael

3 7

[Dovecot] better body and text search?
by Mark Anderson 29 Aug '03

29 Aug '03

(this is a resend, sorry if duplicate but my first post didn't get through). I was wondering what plans dovecot has for text and body search? This is one of those issues that *no* imap implementation ever seems to document :(. Not cyrus, courier, bincimap, or dovecot.... i speed-read some of the sources and found src/lib-mail/message-body-search.c After a quick scan, it seems: - it uses no text index at all, but does a linear search over the folder. - it searches only messages with content-type starting with "text/" or "message/" - it does no special parsing of "text/html", so tags and attributes would match - it appears to exclude any mime messages, since it skips "multipart/mixed" for example. - it does deal with content encoding and charset. There is a lucene-based text indexing utility for IMAP stores here: http://www.tropo.com/techno/java/lucene/imap.html But ideally there would be pluggable text indexing builtin.... -mda

2 3

[Dovecot] Custom flags.
by Maheshkumar Sabhnani 29 Aug '03

29 Aug '03

How do I define custom flags? What are added features of IMAP apart from Online access and Hierarchy folders. I created a new folder and copied couple of messages from incoming file. Where is this new folder created? Also Microsoft Outlook still shows the messages in incoming as deleted. How do I refresh list to permanently delete the messages that I have already transferred to a different folder. Mahesh

2 1

[Dovecot] Conf problems ??
by maheshkumar sabhnani 29 Aug '03

29 Aug '03

Hello, I am having problems with configuring dovecit. The imap directory was correctly made in ~/mail/.imap But I can't see any mail headers. My mbox path is ~/mail/incoming Currently I am trying to use "mbox:~/mail/:INBOX=~/mail/incoming" for configuration but it complains about missing value. Can someone send me more information on configuration directives especially mbox and INBOX. Early reply shall be appreciated. Regards, Mahesh

2 1

[Dovecot] Squirrelmail & Dovecot
by Alex 29 Aug '03

29 Aug '03

What are the optimum IMAP settings for Squirelmail on dovecot? I am having good luck with the Cyrus settings, but I would prefer to know the real truth... Thanks -Alex

3 2

[Dovecot] better body and text search?
by Mark Anderson 28 Aug '03

28 Aug '03

I was wondering what plans dovecot has for text and body search? This is one of those issues that *no* imap implementation ever seems to document :(. Not cyrus, courier, bincimap, or dovecot.... i speed-read some of the sources and found src/lib-mail/message-body-search.c After a quick scan, it seems: - it uses no text index at all, but does a linear search over the folder. - it searches only messages with content-type starting with "text/" or "message/" - it does no special parsing of "text/html", so tags and attributes would match - it appears to exclude any mime messages, since it skips "multipart/mixed" for example. - it does deal with content encoding and charset. There is a lucene-based text indexing utility for IMAP stores here: http://www.tropo.com/techno/java/lucene/imap.html But ideally there would be pluggable text indexing builtin.... -mda

1 0

[Dovecot] mail accounts for users without home dirs
by Gunter Ohrner 28 Aug '03

28 Aug '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! I use dovecot on a machine where users without an existing home directory (Not my idea...) need to access their mailboxes. Unfortunately dovecot tries to chdir to the users home directory before allowing IMAP access - is there anything I can do about that besides creating a dummy-homedirectory for these users? Greetings, Gunter - -- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + PGP-verschlüsselte Mails bevorzugt! + +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Chain-mail isn't much defence against an arrow. It certainly isn't when the arrow is being aimed between your eyes. -- (Terry Pratchett, Lords and Ladies) +-+-+-+-+-+-+-+-+-+-+-+-+ http://www.lspace.org +-+-+-+-+-+-+-+-+-+-+-+-+ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQE/SpA/0ORHvREo8l8RAvFcAJ0ZsnnRTmBUzQEuon6QLDSOWMB2lgCfVFJw C/6nmMXb8cyvOWog0cfmi6E= =iO/e -----END PGP SIGNATURE-----

4 9

[Dovecot] 0.99.11-test6
by Timo Sirainen 28 Aug '03

28 Aug '03

http://dovecot.procontrol.fi/test/ I think I've fixed the problems that were corrupting indexes with the new code. It happened every time you had expunged some messages and new messages arrived. I think this release might actually work :) disable_plaintext_auth = yes will be default from now on. It allows plaintext authentication from localhost (127.*, ::1) however. I just figured out that the lockless cache file reading prevents me from fixing the mbox code to work the same way it used to. I'm not sure actually how this would be best fixed.. Problem is that headers in mails change and move the messages around in the mailbox, so I have to keep track of them. Previously I just updated the header size in index files.. but without read locks this can't be done safely. One possibility would be to parse the whole mbox file every time when the mailbox is opened (or when it needs to be read) and save the header sizes in memory. That'd make it slower than it is today though.. Or maybe it'd work if I just grabbed exclusive lock whenever reading header sizes. They could be then copied into memory to avoid locking more than once. But that still creates locking contention if lots of clients are reading the mailbox. Exactly in the situation where I'd mostly use mboxes.. I could also save it in .imap.index file which still currently uses read-locks. But I'd rather want to get rid of them in there too.

6 14

[Dovecot] IMAP error after login
by Nicolas STRANSKY 28 Aug '03

28 Aug '03

Hello, I'm having a slight problem with Dovecot (0.99.10-0.rc2, on Debian woody). When using mozilla 1.4, there is an error message from the mailer just after login, but nothing in dovecot logs. "Alert The current command did not succeed. The mail server responded: Error in IMAP command UID: Too long argument.." How could I fix this problem ? Thanks, -- Nico J'ai une panne de micro et les parasites me brouillent l'écoute

3 3

[Dovecot] Chrooting the Mail processes
by Bert Koelewijn 25 Aug '03

25 Aug '03

Hello! Could somebody give some feedback on this configuration: - OpenBSD box with local ssh users. - /home directory mounted with nosuid,noexec. - postfix dropping mail in /home/username/mail/INBOX, with the UID/GID of the user. - dovecot: valid_chroot_dirs = /home default_mail_env = mbox:/home/%u/mail/:INBOX=/home/%u/mail/INBOX Are there any obvious ways for a local user to help dovecot escape the chroot jail? How can I check that dovecot is REALLY using /home as chroot jail for the imap process? Thanks! Bert Koelewijn

2 5

[Dovecot] Docs on the wiki
by Bob Hall 25 Aug '03

25 Aug '03

I went to the Dove Wiki page and added a couple of docs. There's a DoveWikiMainPage link at the top of the first page now. Click on that and the next page has links to the two docs. Someone who knows more than I do about wiki formatting should make this look good. The two docs are for Dovecot/OpenLDAP installation. The first is detailed instructions and the second is a cheat sheet. You don't need to contact me if you find errors; just click "Edit this page" at the bottom. Anyone who wants to use parts of my docs to use in documenting other types of installation should feel free. There's no mention of copyright policy, but I assume everthing is GPL copyleft. Bob Hall

1 0

[Dovecot] Postfix and Maildirs
by Steve Sloan 24 Aug '03

24 Aug '03

Hope someone can help me with this as I am presently stuck I am setting up a new server with Dovecot 0.99.10, Redhat 9.0, Postfix, Amavisd-new and maildir's in the users home drive. I am using Netscape mail 7.1 as the main client to access the mail store via imap which works fine and various other imap clients can access the maildirs Ok as well. The problem is when Postfix delivers a message is insists on making a second Maildir directory in the user's home drive and put the message in there. The Maildir's are being created automatically ie. I didn't use maildirmake. Even if I delete one of the Maildir's it just gets recreated again. ie. this is the test user's home drive drwx------ 10 test2 test2 4096 Aug 23 20:53 Maildir drwx------ 6 test2 test2 4096 Aug 24 11:05 Maildir This is the Maildir that the clients are using and being accessed by Dovecot drwx------ 10 test2 test2 4096 Aug 23 20:53 . drwx------ 4 test2 test2 4096 Aug 24 11:05 .. drwx------ 2 test2 test2 4096 Aug 23 19:58 cur -rw------- 1 test2 test2 5 Aug 23 19:58 .customflags drwx------ 5 test2 test2 4096 Aug 23 19:59 .Drafts drwx------ 2 test2 test2 4096 Aug 23 19:58 .INBOX drwx------ 2 test2 test2 4096 Aug 23 19:58 new drwx------ 5 test2 test2 4096 Aug 23 20:15 .Sent -rw------- 1 test2 test2 29 Aug 23 20:13 .subscriptions drwx------ 5 test2 test2 4096 Aug 23 20:11 .test drwx------ 2 test2 test2 4096 Aug 23 19:58 tmp drwx------ 5 test2 test2 4096 Aug 23 20:11 .Trash and the other one which Postfix user's drwx------ 6 test2 test2 4096 Aug 24 11:05 . drwx------ 4 test2 test2 4096 Aug 24 11:05 .. drwx------ 2 test2 test2 4096 Aug 24 11:05 cur -rw------- 1 test2 test2 5 Aug 24 11:05 .customflags drwx------ 2 test2 test2 4096 Aug 24 11:05 .INBOX drwx------ 2 test2 test2 4096 Aug 24 11:05 new drwx------ 2 test2 test2 4096 Aug 24 11:05 tmp This one has no index files and looks just like a courier Maildir For Postfix main.cf I have set home_mailbox = Maildir/ and /etc/dovecot.conf default_mail_env = maildir:/home/%u/Maildir Hope this make sense to someone Steve -- _____________________________________________ LanSol Computers 283 Sir Donald Bradman Drv. Brooklyn Park SA 5032 Ph 618 8238 3406 Fax 618 83538479 Mobile 0414 398166 Email steve(a)lansol.com.au URL www.lansol.com.au _____________________________________________

3 3

[Dovecot] Three oddities
by Bob Hall 24 Aug '03

24 Aug '03

FBSD 4.8, Dovecot-0.99.10 1) I have mail accounts for people who use Macs and Windows, so their mail is stored on a Unix box where they don't have accounts. When their mail comes in, it is stored in /var/mail/<accountname>. When I was setting this up, I used my own Unix account for testing, and that works fine. But for the other mail accounts, which don't correspond to Unix accounts, I want to give ownership of the /var/mail/* files to another account that doesn't have my privileges. However, no one can access their mail unless I own their files. As long as I own all the /var/mail/* files, everything works fine. But if I shift ownership to another account, users can log on to Dovecot but attempts to access an IMAP folder return an error. >From maillog: Aug 18 16:39:46 kongemord imap(philrodrigues): mkdir_parents(/var/mail/philrodri gues/.imap/INBOX) failed: Permission denied All files and directories in /var/mail/* are in the mail group. I tried adding dovecot to that group, but that didn't help. Since everyone can log on to Dovecot, but can't access their mail unless I own their files, I'm assuming that there's some simple ownership setting that I'm overlooking. But I haven't a clue what it is. Can someone tell me what I need to change? 2) The Macs have Eudora 4.2 installed, and the Win boxes have Eudora 5.1. The Macs can delete mail, put it in the trash, and empty the trash. The Win clients can mark mail deleted, but they can't remove it. The mail stays in the IMAP folder until the same user accesses their mail from a Mac and deletes it. If a user drags a message to another folder, a copy is created in the new folder but the old copy remains in the original folder. I'm not having this problem with Mutt, so it the problem seems to be specific to the Windows verson of Eudora. Is there a fix? 3) We're pulling our e-mail off our ISP's POP server and loading it into Dovecot to allow people to work with their mail from different machines. I'm using getmail to make the transfer. Is anyone else doing POP to IMAP, and how are they doing it? Any suggestions? TIA, Bob Hall

3 24

Re: [Dovecot] please add MySQL Support!
by Matthew Reimer 24 Aug '03

24 Aug '03

Timo Sirainen wrote: > On Sun, 2003-08-24 at 02:57, eLgino wrote: > >>Hi, Developer(s) >> >>I will use this fantastic IMAP/POP -Server but i dislike, no a realy HATE >>PostgreSQL!, please make a hack or code a MySQL support. >> >>I know its a strange mail, and "question" but every one's first choice for >>SQL-DBs is MySQL! :) and i love it!. > > > And I really hate MySQL :) I'm still hoping someone else would write the > support for it. I might end up doing it eventually, but currently > there's more important things to do. Just yesterday I got this working, using the pgsql stuff as a guide. After I clean up the patch and make sure I'm not leaking memory, I'll send it to the list. Matt

1 0

[Dovecot] please add MySQL Support!
by eLgino 24 Aug '03

24 Aug '03

Hi, Developer(s) I will use this fantastic IMAP/POP -Server but i dislike, no a realy HATE PostgreSQL!, please make a hack or code a MySQL support. I know its a strange mail, and "question" but every one's first choice for SQL-DBs is MySQL! :) and i love it!. thanks in advance eLgino

2 1

[Dovecot] ssl failure !!
by thomas may 24 Aug '03

24 Aug '03

Hi, i havent yet any problems with dovecat but in my dovecot log i get the following warning, does anybody know what its wrong. imap-login: Aug 23 22:14:47 Warning: SSL_read() syscall failed: Connection reset by peer [192.168.1.139] imap-login: Aug 23 22:14:48 Info: Login: info(a)domain1.com [192.168.1.139] -th

3 2

[Dovecot] postfix+dovecot
by eLgino 22 Aug '03

22 Aug '03

Hi folks, I will setup an mailserver with postfix an dovecot, but i would like to add the users and domains to postfix is this possible? because postfix can handle mysql. and if this possible anyone can say me HOW?, i do not find anything about this. if not anyone can say me how i do configure it with postgresql (dovecot)? ( i have NO pgsql skills). i hope anyone can understand my poor english, and thx in advance bye

1 0

[Dovecot] user database clarification
by Jared 22 Aug '03

22 Aug '03

Hi, this question gets back to a thread I started back on July 8th. (gosh how time flies) I still am not clear on why PAM is not supported for the user database. I'm in an environment that has users both in local flat files (/etc/passwd and /etc/shadow) AND in an LDAP database. Is it possible for this set up to work with dovecot? (both local and ldap users have imap/pop?) I'd prefer to just have Dovecot use PAM for user db and the password database so that I can configure PAM to try both local users and LDAP users. Thanks a lot. -jared

3 4

[Dovecot] rawlog change suggestion
by Charlie Brady 21 Aug '03

21 Aug '03

I find the separate .in and .out files rather difficult to work with. I think it would be more useful if the in/out traffic were interleaved with a prefix to indicate direction, and suffix to indicate continuation, as recordio (http://cr.yp.to/ucspi-tcp/recordio.html) does: <a0002 LIST "" "" >* LIST (\Noselect) ";" "" >a0002 OK List completed. <a0003 SELECT "INBOX" >* FLAGS (\Answered \Flagged \Deleted \Seen \Draft) >* OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags + >permitted. >* 18 EXISTS >* 0 RECENT >* OK [UNSEEN 18] First unseen. >* OK [UIDVALIDITY 1055795174] UIDs valid >* OK [UIDNEXT 6741] Predicted next UID >a0003 OK [READ-WRITE] Select completed. <a0004 STATUS "incoming.foo" (RECENT) >* STATUS "incoming.foo" (RECENT 397) >a0004 OK Status completed. <a0005 NOOP >a0005 OK NOOP completed. Comments? -- Charlie

2 2

[Dovecot] Mozilla dovecot interaction
by Eric S. Johansson 21 Aug '03

21 Aug '03

I think this is more a Mozilla bug but just a heads up the case other people complain. periodically, the Mozilla e-mail client refuses to delete messages. It shows up either as absolutely no action when you press the delete key/button or it shows activity but refuses to perform any other action in that mailbox. Sometimes if you switch to another mailbox and then come back to the mailbox you're deleting e-mail message from, the messages deleted when you re-enter the mailbox. I looked with ethereal and it looks like Mozilla is not sending any imap commands. Hence my assertion that it's a Mozilla problem. The only reason I mention it here is because something about dovecot seems to trigger the problem more quickly. I was seeing this kind of problem before but only after a week or two of uptime in the browser. Now I'm seeing it in just under a week (I think) I've only seen at once but I will keep track for future reference. I got to get me a new client... ---eric

1 0

[Dovecot] transitional weirdnesses
by Eric S. Johansson 20 Aug '03

20 Aug '03

1) not reproducible but when it occurred, its stuck: in the early transition to dovecot I would notice occasionally that messages would come up, I would delete them and then something would hang causing a major delay in the (Mozilla) e-mail client's response. When the system responded, I would notice that occasionally there would be an off by one offset between the index of messages and the message displayed. This error would persist until I killed off the index and the dovecot process. 2) very reproducible: after fetching messages from my inbox, there will be a long (30 sec.) delay. Dovecot demon is clearly busy doing something. I do have a large set of filter rules (approximately 150) sorting messages into different boxes. Is this a reason to switch to maildir? 3) just ended up with a message that displayed the entire header. Will look into this more but it's very strange. ---eric

4 14

[Dovecot] Squirrelmail and Dovecot folder namespace
by Warren Togami 19 Aug '03

19 Aug '03

I am currently using Squirrelmail and Dovecot with this setting: default_mail_env = mbox:%h/mail/:INBOX=%h/mail/INBOX It works well, however folder subscriptions in Squirrelmail annoyingly end up with "./" prefixes because Squirrelmail refuses to work without overriding the folder namespace. All of my other IMAP clients work fine without setting that option. Squirrelmail's default setting is this: $default_folder_prefix = './mail'; This setting breaks Squirrelmail: $default_folder_prefix = ''; This setting becomes default if you attempt to blank that user's preference: $default_folder_prefix = './'; The end result of this is duplicate entries in .subscriptions, one with "./" prefix and one without. Most IMAP clients handle this by showing all the folders again in a folder named ".", or Mozilla displays all folders twice. =( When I asked one of the squirrelmail developers, he said that this might be a dovecot specific problem. Any ideas? Warren Togami warren(a)togami.com

2 1

[Dovecot] Re: CVS Note
by dovecot＠spam.turbolink.net 19 Aug '03

19 Aug '03

Is mbox support working again in CVS? - Mike

2 1

[Dovecot] Questions
by Alejandro Martinez 19 Aug '03

19 Aug '03

Hi, I'm still figthing with passwd-file, virtual users and permissions. I have created the directory /var/spool/virtual/test and inside I've done a "maildirmake Maildir". I have a couple of questions : I use the same passwd-file for auth_userdb and as auth_passdb. 1) What program can I use to create the userdb file ? What I do now is to use the htpasswd program and then I complete by hand the rest of the fields (uid:group:GECOS:home:shell) htpasswd userdb test password: xxx again: xxx And then vi userdb test@test.com:ssasZXc00P1H6:502:102::/var/spool/virtual/test/:/bin/false <--by hand. I think that if I want to offer virtual mail with imap is very tedious to complete user by user. (If this second question does not fall in this list, then don't answer it) 2) I know that postfix delivers in Maildir format, and when the user is a virtual user, I do the next Modify the virtual file ---> test(a)test.com test.test.com Modify the aliases file--> test.test.com: /var/spool/virtual/test/Maildir postmap hash:virtual postaliases hash:aliases postfix reload but when I do a "echo testing | sendmail test(a)test.com " I receive an error Aug 18 15:32:44 slk90 postfix/pickup[12208]: 95C3717D5C: uid=0 from=<root> Aug 18 15:32:44 slk90 postfix/cleanup[12252]: 95C3717D5C: message-id=<20030818183244.95C3717D5C(a)slk90.equital.lx> Aug 18 15:32:44 slk90 postfix/qmgr[12209]: 95C3717D5C: from=<root(a)slk90.equital.lx>, size=291, nrcpt=1 (queue active) Aug 18 15:32:44 slk90 postfix/local[12254]: 95C3717D5C: to=<test.prueba.com(a)slk90.equital.lx>, orig_to=<test(a)prueba.com>, relay=local, delay=0, status=bounced (cannot append message to destination file /var/spool/virtual/test/Maildir: cannot open file: Permission denied) I'm confused about permissions. I set the /var/spool/virtual to dovecot.postfix and the permissions are drwxrwx--- Thanks a lot. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.509 / Virus Database: 306 - Release Date: 12/08/2003

2 1

[Dovecot] CVS note
by Timo Sirainen 18 Aug '03

18 Aug '03

Another large update for header caching which breaks your old indexes. I think it's working pretty nicely now. Only some smaller tweaking left to do with caching in general.

1 0

[Dovecot] more transitional joys
by Eric S. Johansson 17 Aug '03

17 Aug '03

well, now that I have moved to dovecot, I'm not getting any spam... in fact, I'm not getting e-mail at all. default_mail_env =mbox:~/IMap2/:INBOX=/var/spool/mail/%u when I first tried to access my inbox, I was told I had permission problems: Aug 14 17:47:22 harvee imap(esj): open(/var/spool/mail/esj.lock) failed: Permission denied Aug 14 17:47:22 harvee imap(esj): file_lock_dotlock() failed with mbox file /var/spool/mail/esj: Permission denied so I changed permissions on /var/spool/mail to 777 as a temporary work around. no luck. It tells me that I have no e-mail in my inbox... fat chance [root@harvee mail]# ls -l /var/spool/mail/esj -rw------- 1 esj mail 167772 Aug 14 18:05 /var/spool/mail/esj what simply obvious thing I am I missing now? ---eric

4 6

[Dovecot] 0.9.10 and Cygwin
by Tim H. 17 Aug '03

17 Aug '03

Has anybody succeeded in compiling 0.9.10 with Cygwin? I'm getting the following error:- gcc -DHAVE_CONFIG_H -I. -I. -I../.. -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -c istream-file.c istream-file.c:57: conflicting types for `_close' /usr/include/sys/unistd.h:148: previous declaration of `_close' istream-file.c:129: conflicting types for `_read' /usr/include/sys/unistd.h:153: previous declaration of `_read' make: *** [istream-file.o] Error 1 Thanks Tim

2 1

[Dovecot] login w/ IMAP & LDAP
by Bob Hall 16 Aug '03

16 Aug '03

I'm getting imap-login: Internal login failure: bob whenever I try to check mail. I'm new to mail server setup, new to IMAP, and I don't know a heck of a lot about authentication schemes. I've set up Dovecot as an IMAP server on FreeBSD 4.8. I've got OpenLDAP running on the same system. Users will access mail via Eudora on Windows and Macs, so that's how I'm testing. If I try to test Dovecot using IMAP commands via telnet, Dovecot tells me LOGIN BAD Error in IMAP command received by server. I also can't telnet via localhost; I have to specify the host name, so I'm connecting via the host's external interface. I have no problem connecting to localhost on ports not used by Dovecot. So I have two questions: 1) How do I correct my configuration to make login successful? 2) How can I test Dovecot without using an MUA? If I have to use an MUA, I can't distinguish between errors in the MUA and errors in the IMAP server. Thanks for any help with these two. Configuration follows. Eudora: Server configuration: IMAP IMAP Mailbox Location Prefix: /var/mail/bob/Mail Authentication Style: passwords dovecot.conf ---------------- protocols = imap imaps imap_listen = *:143 login_user = dovecot default_mail_env = mbox:/var/mail/%u/Mail auth_userdb = ldap /usr/local/etc/dovecot-ldap.conf auth_passdb = ldap /usr/local/etc/dovecot-ldap.conf auth_user = dovecot dovecot-ldap.conf ------------------- hosts = localhost dn = cn=dovecot,dc=domain,dc=tld dnpass = ********** ldap_version = 3 base = ou=accounts,dc=domain,dc=tld deref = never scope = subtree user_attrs = uid user_filter = (&(objectClass=inetOrgPerson)(uid=%u)) pass_attrs = uid,userPassword pass_filter = (&(objectClass=inetOrgPerson)(uid=%u)) default_pass_scheme = PLAIN slapd.conf ----------------- password-hash {CLEARTEXT} If I change this last to CRYPT (comment out the dovecot-ldap default_pass_scheme and change the slapd.conf password-hash to {CRYPT} and re-enter the password into LDAP), I get the same error. I have no problem accessing the LDAP data from the command line. If I comment out the dovecot-ldap.conf user_filter and pass_filter, I get dovecot-auth: ldap(bob): unknown user I interpret as meaning that the user_filter and pass_filter are necessary. Bob Hall

5 17

[Dovecot] Startup Problem
by Tobias Sasse 15 Aug '03

15 Aug '03

Hello, i don't like asking stupid questions in mailinglist, 'cause i guess you got something better to do than answer it. But well this is an exception, because i didn't find anything on google. Here comes my problem: I'm using a NetBSD 1.6.0 System with the latest dovecot build. i want to start dovecot imapd by: root@balin:[/etc]$ ./rc.d/dovecot start Starting dovecot. Fatal: Error in configuration file /usr/pkg/etc/dovecot.conf line 88: Missing value This is my error ;) This is the line 88 in my conf file. maildir:/home/%u/mail the maildir was created by 'makemaildir mail' and exists: root@balin:[/home/tobi]$ ls -all total 18 drwxr-xr-x 4 tobi users 512 Aug 15 09:11 . drwxr-xr-x 3 root wheel 512 Aug 13 01:18 .. drwx------ 5 tobi users 512 Aug 14 12:47 mail there it is. in default option of the maildir line dovecot starts without problems but i really want to have my mails in /home/%u/mail and not in /var/mail/%1u/%u/mail So could somebody please put some light on it? Thank you, Tobi

2 1

[Dovecot] joys of transition.
by Eric S. Johansson 14 Aug '03

14 Aug '03

Red Hat 8.0 stock dovecot 99.10 for a variety of reasons, I decided to cut over to dovecot this morning. I extracted all of my mailboxes from mbx purgatory back to mbox purgatory, set up dovecot and proceed to get authentication failures. (am using simple password based authentication either direct or through pam) I turned authentication verbosity on and got: Aug 14 11:51:38 harvee dovecot: Dovecot starting up Aug 14 11:51:46 harvee dovecot-auth: PAM: pam_authenticate(esj) failed: Authentication failure Aug 14 11:51:49 harvee dovecot-auth: PAM: pam_authenticate(esj) failed: Authentication failure Aug 14 11:51:52 harvee imap-login: Aborted login [192.168.0.10] not very informative. I already know that I can't login. So I fire up ethereal and capture the following transaction: * OK dovecot ready. 1 authenticate login 1 NO Unsupported authentication mechanism. 2 login "esj" "no peeking" 2 NO Authentication failed. 3 authenticate login 3 NO Unsupported authentication mechanism. 4 login "esj" "no peeking" 4 NO Authentication failed. 5 logout * BYE Logging out 5 OK Logout completed. hmm no unsupported authentication mechanism. So that means all authentication methods works right? ;-) looking a little further into the configuration, I see instructions to change auth_methods to add plain in front of digest-md5 (or is it digest_md5, both forms are present in the configuration file). No luck. Doing so gives me the following error message: Fatal: Error in configuration file /usr/local/etc/dovecot.conf line 430: Unknown setting: methods so, I'm not sure what to look for. It's probably something simple but googling didn't reveal anything pertinent although it turned up something amusing[1]and dovecot does apply. Suggestions or clues would be welcome. FYI, you probably could use a little bit more detail in the install instructions. For example instructing user to create a dovecot user and group name would be useful as would be a startup/shutdown script for init.d. I also find the SSL configuration lacking. On the other hand, I have enough scar tissue from certificates and mini-CA setups to hate them till the end of time. If I get them working better, I'll document and send it to the list. ---eric [1]http://www.oblomovka.com/eldritch/iag/ob1-5.htm

2 2

[Dovecot] error in config file?
by Robert S. Jagger 14 Aug '03

14 Aug '03

When I start dovecot I am getting an error about the ocnfig file. watson:~# /etc/init.d/dovecot start Starting mail server: dovecotFatal: Error in configuration file /etc/dovecot.conf line 185: Missing value So I look int /etc/dovecot.conf and line 185 is mbox:~/mail/:INBOX=/var/mail/%u/ Which seems like valid syntax according to the docs. I am using dovecot 0.99.10-2

2 1

[Dovecot] Mozilla
by Stefan Sels 14 Aug '03

14 Aug '03

Hi, I hope this problem is not answered before. Mozilla is making trouble with searching and subscribing folders. Do I have to change the "namespace" ? If I start a search (other than just in To & CC or subject) mozilla complains about a closed connection. A fresh mozilla installation just lists no folder beside "Inbox". Regards, Stefan Sels

3 4

[Dovecot] Hardlinks in copy
by Andreas Aardal Hanssen 12 Aug '03

12 Aug '03

Hi, Dovecotters. In the Maildir code, dovecot-0.99.10/src/lib-storage/index/maildir/maildir-copy.c, I see that hardlinks are used. It seems that (line 185) if MAILDIR_COPY_WITH_HARDLINKS is exported, then copying is attempted by using link. Having problems reading the source / flow of control, I resort to this list. When a file is linked, the mtime is naturally kept on the destination. This gives the destination message the same internaldate as the original. The destination mailbox would then be likely to get an arrival with an earlier internaldate than its newest message. The IMAP protocol says to bump UIDVALIDITY when this happens. Does Dovecot always bump UIDVALIDITY when messages are copied, or is not the mtime used for internaldate? Best regards, Andreas -- Andreas Aardal Hanssen

2 1

[Dovecot] 0.99.10-test5
by Timo Sirainen 12 Aug '03

12 Aug '03

Again at http://dovecot.procontrol.fi/test/ if someone wants to test it. - new index file code should work now - mbox support is completely broken - caching isn't very smart yet. it always caches only what client requested at the time - header caching might have some problems actually now that I think of it.. I was anyway going to change a bit how it worked.

2 1

[Dovecot] CVS/test version config/build failures on FreeBSD
by Mike Brown 11 Aug '03

11 Aug '03

While diagnosing a problem I was having with IMAP and SSL (which I ended up fixing by simply upgrading from 0.99.9.1 to 0.99.10, and possibly affected by upgrading openssl libs from 0.9.7a to 0.9.7.b), I attempted to try the CVS version of Dovecot. When using the CVS version, apparently I have to first generate 'configure' using autogen.sh (?). This was the result of that, on FreeBSD 4.8-STABLE (2003-08-06): # ./autogen.sh automake: configure.in: installing `./install-sh' automake: configure.in: installing `./mkinstalldirs' automake: configure.in: installing `./missing' configure.in: 3: required file `./config.h.in' not found automake: configure.in: installing `./depcomp' configure.in:3: warning: do not use m4_patsubst: use patsubst or m4_bpatsubst configure.in:13: warning: AC_ARG_PROGRAM invoked multiple times configure.in:1126: warning: do not use m4_regexp: use regexp or m4_bregexp autoheader: `config.h.in' is created And then... # ./configure checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for gawk... no checking for mawk... no checking for nawk... nawk checking whether make sets ${MAKE}... yes checking whether to enable maintainer-specific portions of Makefiles... no checking for style of include used by make... GNU checking for gcc... gcc checking for C compiler default output... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking dependency style of gcc... gcc checking for strerror in -lcposix... no checking for gcc... (cached) gcc checking whether we are using the GNU C compiler... (cached) yes checking whether gcc accepts -g... (cached) yes checking dependency style of gcc... (cached) gcc checking how to run the C preprocessor... gcc -E checking for ANSI C header files... yes checking for gcc option to accept ANSI C... none needed checking for inline... inline checking build system type... i386-unknown-freebsdelf4.8 checking host system type... i386-unknown-freebsdelf4.8 checking for ranlib... ranlib checking for ld used by GCC... /usr/libexec/elf/ld checking if the linker (/usr/libexec/elf/ld) is GNU ld... yes checking for BSD-compatible nm... /usr/bin/nm -B checking whether ln -s works... yes loading cache /dev/null within ltconfig ./ltconfig: .: /dev/null: not a regular file ltconfig: you must specify a host type if you use `--no-verify' Try `ltconfig --help' for more information. configure: error: libtool configure failed I also attempted to use 0.99.11-test4 from http://dovecot.procontrol.fi/test/, but this failed to build: [...] Making all in maildir gcc -DHAVE_CONFIG_H -I. -I. -I../../../.. -I../../../../src/lib -I../../../../src/lib-mail -I../../../../src/lib-imap -I../../../../src/lib-index -I../../../../src/lib-index/maildir -I../../../../src/lib-storage -I../../../../src/lib-storage/index -I/usr/local/include -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -c maildir-copy.c make: don't know how to make ../../../../src/lib-storage/index/index-expunge.h. Stop *** Error code 1 Stop in /usr/local/src/dovecot/dovecot-0.99.11-test4/src/lib-storage/index. Just thought you'd like to know :) -Mike

3 8

[Dovecot] Some benchmarking
by Timo Sirainen 11 Aug '03

11 Aug '03

So I finally got the new mail caching code fully working in normal conditions. Index rebuilding and some error correction still needs a bit work. mbox is also still broken. Anyway, I was mostly interested how fast Dovecot now works with my 367000 LKML mails, but thought I'd have to get something to compare the results against, so here's Dovecot vs. Courier. Results against older Dovecot would have been pretty boring, the older Dovecot could never perform threading without opening all the files and reading References-headers from them. Sorting would could have been done from cache if IMAP ENVELOPEs were cached, I'd estimate maybe 2-3x larger user CPU usage with it and a _lot_ larger cache file since it would have stored from, to, etc. fields in it. Results against Cyrus would be interesting. I'll probably do those sometimes later too.. Last I checked, Cyrus was very slow at inserting the mails into it's database, it took .. was it 1-3 hours to insert all those mails, while a simple copying took maybe 20 mins. Anyway, Cyrus's caching is pretty dummy as well so I'd expect Dovecot to be many times faster in threading and likely somewhat faster in sorting.

3 2

[Dovecot] Direct RADIUS support, not via PAM
by Jethro R Binks 08 Aug '03

08 Aug '03

Hi, I'm currently testing dovecot to authenticate user passwords against a radius server, via pam_radius_auth, and that seems to work fine. However, I am running other software (Exim MTA) that also authenticates via radius, using the radiusclient library from: http://www.mcs.de/~lf/radius/ Is there any chance that this library could be used by Dovecot as a further authentication option, and save me having two separate radius configurations for two different (but related) pieces of software, and the need to install pam_radius_auth, which I don't otherwise use? Jethro. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Jethro R Binks Computing Officer, IT Services University Of Strathclyde, Glasgow, UK

2 1

[Dovecot] Slow bulk deleting
by Leslie Viljoen 07 Aug '03

07 Aug '03

Hi! I am finding Dovecot very slow to delete large numbers of messages. IS this a known problem? Leslie

2 2

[Dovecot] compile with dietlibc
by Jens Gutzeit 06 Aug '03

06 Aug '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, I'm used to test the software which I use with dietlibc, just to see if it could run without the bloat of glibc. While compiling dovecot 0.99.10 I got these errors: In file included from lib.h:20, from alarm-hup.c:26: compat.h:30: conflicting types for `uint_fast32_t' /opt/diet/include/stdint.h:25: previous declaration of `uint_fast32_t' I've solved this in a dirty way, but is this something which could be fixed in the future? Thanks in advance, Jens Gutzeit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQE/L/etLPHiyaqJLscRAuNGAJ9jlOQzx86T+NS9h7FfjoDi86R4ygCgs6gb 1XyNB93ybwiG4gFatz797qo= =WZod -----END PGP SIGNATURE-----

3 3

[Dovecot] thinking seriously about converting
by Eric S. Johansson 06 Aug '03

06 Aug '03

to dovecot from UW imap. I think I will go all the way to maildir while I'm at it. I was having performance problems with mbox format files and converted to mbx but it's not really yielding a huge performance gain. Deletes and moves are still rather slow at times. my mailboxes are typically 2000 to 5000 messages. I've scanned the mailing lists a bit and picked up some hints on the conversion. Any bits of advice before I convert? Since it's only my own account I'm converting (my wife likes mutt), I'm torn between two different ways of converting the mailboxes. First is to convert all of the mbx format mailboxes back to mbox. Then convert from mbox to maildir. Second is running both imap server simultaneously (obviously one on a different port number) and running some form of a tool to read from one imap server and write to the other. any better ideas? many thanks ---eric

2 1

[Dovecot] corrupt mbox, mailboxes not found, and message read status
by Jared 04 Aug '03

04 Aug '03

I'm running dovecot 0.99.10-0.rc2 deb packages for Debian Woody from braincells.com. My old environment was a server running UW-IMAP for IMAP and POP services. We are still using mbox for all mailboxes. I use IMP for web based access. Forgive me if these issues have already been discussed or fixed in cvs. Any additional pointers to this info. would be appreciated. I have noticed a few issues. ---- I've seen a whole slew of entries like the following: pop3(username): Error indexing mbox file /home/username/mail/inbox: LF not found where expected According to this mailing list post from June 16, 2003: http://dovecot.procontrol.fi/list/dovecot/2003-June/001668.html it may be because of adjacent From mail headers in a message. I've had one user that this was not the case. They said they were deleting lots of messages in IMP and when he went back to his inbox, it was empty. When I looked at the mbox file, a message had been truncated. When I deleted the imap index and removed that truncated message, the mailbox became visible again. Has the adjacent From issue been fixed? Is there a way to find out more specifically what part of the mbox file dovecot is unhappy about? ie. a line number. ---- Inside IMP several users have set up a filter to send messages marked as spam by SpamAssassin into a spam folder. When they log-in or click the filter icon, the filter runs. However, now when the the filter runs, it reports: "Problem with filter rule 1: folder does not exist: mail/spam". However, the spam folder is still there, and when I open that folder in IMP, it opens just fine. I've already changed IMP's folder prefix from 'mail/' to ''. I've also tried deleting the imap index. The message still shows up and the filter fails to run. ---- With the old set-up, when I check mail with a pop3 client, the UW pop server modifies the Status and/or X-Keywords headers for the message. When the mailbox is viewed with an IMAP client such as IMP, messages that have already been downloaded via pop are marked as read. This doesn't seem to happen with dovecot. I found a Oct 19 2003 thread ( http://dovecot.procontrol.fi/list/dovecot/2002-October/000774.html ) on the mailing list where Timo said he was intending to use the X-Keywords trick. Did this ever get implemented? ---- Thanks, -jared

5 6

[Dovecot] why wont /usr/pkg/libexec/dovecot/imap see my Maildir
by Charlie Allom 04 Aug '03

04 Aug '03

When I invoke /usr/pkg/libexec/dovecot/imap from the command loine on the mail host, it logs me in, but won't see my emails: 13:22 yeled@lazy:~$ /usr/pkg/libexec/dovecot/imap * PREAUTH [CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND * UNSELECT LITERAL+ IDLE CHILDREN LISTEXT LIST-SUBSCRIBED] Logged in * as yeled 0 select inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] * Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1059959635] UIDs valid * OK [UIDNEXT 1] Predicted next UID 0 OK [READ-WRITE] Select completed. I know I have many emails in there, and I can see them when I login via telnet localhost 443. Any tips? would be nice to use fetchmail with ssh here. C. -- charlie(a)rubberduck.com - Melbourne, Australia http://rubberduck.com/~yeled/ PGP: 0x14AA7941 || finger yeled(a)lazy.spodder.com

2 2

[Dovecot] Confusion
by Alejandro Martinez 02 Aug '03

02 Aug '03

Hi, I have a great confusion about mbox, maildir. I use a passwd-file to authenticate users, because I want to use non local users. I have a test user in that file that is this: test:VGRAafc3NHJwI:502:100:Usuario Virtual:/var/spool/mail/virtual/test:/no/shell I create inside /var/spool/mail/virtual/test a folder Maildir and inside Maildir /var/spool/mail/virtual/test/Maildir/cur/ /var/spool/mail/virtual/test/Maildir/new/ /var/spool/mail/virtual/test/Maildir/tmp/ I get an error when I login to the server admin@slk90 /$ telnet localhost 143 Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^]'. * OK dovecot ready. . login test test . OK Logged in. Connection closed by foreign host. The /var/spool/mail/error is this "Aug 2 08:46:46 slk90 imap(test): Failed to create storage with data: /var/spool/mail/virtual/test/Maildir" I've tried setting default_mail_env = maildir:~/Maildir and mbox:~/Maildir, but nothing work. Any help ? Regards. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003

2 1

RE: [Dovecot] corrupt mbox, mailboxes not found, and message rea d status
by Maikel Verheijen 31 Jul '03

31 Jul '03

[SNIP] > http://dovecot.procontrol.fi/list/dovecot/2002> -October/000774.html ) > > on the mailing list where Timo said he was intending to use the > > X-Keywords trick. Did this ever get implemented? > > X-Keywords have been used for a long time now. It's possible > to set \Seen flag for messages downloaded with POP3, but I > don't know if it's worth the trouble. Who uses POP3 and IMAP > mixed anyway? > A lot of our customers, since we only supported pop3 in the past, and our new webmail uses imap. :) And a lot of people don't click on "This is an imap server" when creating their account in for instance outlook-express. Kind regards, Maikel Verheijen.

3 2

[Dovecot] New index file code
by Timo Sirainen 31 Jul '03

31 Jul '03

I just had to write this even while it's not just yet in CVS, but it's only a few fixes away from being committed.. My year long dream has finally came true :) [Summary: Next release will have REALLY kickass indexes] Previously the biggest problem with caching message data in indexes was that we had to do it while syncing the mailbox, before client even saw those messages. This caused index rebuilds to be very slow since it had to go through all mails and cache all of them, even if client never would access them. Alternative was to not cache anything at all, but that wasn't really good idea either. Now Dovecot caches the data when client is actually requesting it. That way it will never do any extra work for caching something that client isn't currently interested in. There's still the anticipatory caching for data that client is likely to be interested in later, but that is done only when it doesn't cause extra disk I/O. The reason why it took this long was because it was previously too difficult with read/write locking that indexes required. I couldn't have relied on it working since changing from read lock -> write lock could deadlock and dropping the lock in the middle would have caused even more problems. So, what I did was to rewrite the cache file handling completely: - It doesn't require any locking to read from it. - It will be NFS-safe without being too costly. - The file format itself is now architecture-independent. - Uses less space than before - OpenBSD support is now worse than before, even worse than NFS-support. They should get that unified cache done. Cached data is also selected better: - Specifically requested message headers are cached (FETCH, SEARCH, SORT, THREAD, etc.) - IMAP ENVELOPE isn't treated in any special way anymore. It's treated just as if you had requested HEADER.FIELDS (Date Subject From ...etc.). - Maildir filenames aren't constantly updated in the cache file anymore. This takes more memory now, but should reduce disk I/O. There's a few more tweaks that I'll probably add later: - Maildir: When compressing cache file we update mail's filename to current one so if message's flags aren't changed often, it won't use any extra memory either. - A normal text/plain message doesn't need to have it's IMAP BODYSTRUCTURE cached. It only needs a single bit set in flags. Should reduce used space quite a lot. - Message with only one body part doesn't need to have it's body structure stored at all since it's mostly just useful for fetching body parts. Plus the body structure could be generated if message sizes were known. All this work was only for index cache file (ex. .data file). There's still the main .imap.index file and modify log files. Modify log should be easy to make NFS-safe - I'm currently using some stupid file locking to figure out when the file is safe to overwrite, but I should have simply replaced the old file with rename(). That will solve some other problems as well as make the code simpler. It should be possible to be made read-lockless as well. The main index file is more problematic though. It contains a lot of changing fields in the header, such as number of messages, number of seen messages, etc. I can't think of any way to make it safe to read these fields without locks (my previous ideas didn't actually work). Lockless reads are pretty much a must for scalable NFS-safety. I think it could be done by simply removing all the constantly changing headers. If you want to know how many seen messages there are, just read all the records in the file and count them. Expunging would be done by rewriting the file and rename()ing it over the old file. Appending new messages is a bit tricky to do safely, but I think I know how to do that too.. read/write locks allow the changing headers, but there's locking contention problems with shared mailboxes.. I think I'll make it optional how to do this. Oh, and I also thought how indexes would work with shared mailboxes. You could use one shared cache file, but each user would have their own main index and modify log. That would allow storing per-user flags in the index file and also expunge (hide) messages by removing them from user's index.

1 0

[Dovecot] Is dovecot NFS safe?
by Adam Shand 29 Jul '03

29 Jul '03

I'm migrating our mailserver from cyrus 2.0 to Postfix and Dovecot. We're using maildirs delivered to /var/maildir, which is mounted via NFS from a Netapp. My understanding was that maildir was completely happy in an NFS environment but I've seen a couple messages here recently which mention the dovecot index files not being NFS safe. Are their any caveats or gotcha's that I need to be aware of? Thanks, Adam.

4 5

[Dovecot] Namespaces
by Timo Sirainen 27 Jul '03

27 Jul '03

0.99.11-test4 release: http://dovecot.procontrol.fi/test/ Finally namespaces somewhat working. Example: namespace private { separator = / prefix = INBOX/ location = maildir:~/Maildir } namespace private { separator = / prefix = #mbox/ location = mbox:~/mail } Problems: - Mailbox listing lists only the first namespace unless you clearly ask mailboxes under some namespace. Not really a problem, but related to: - There should be only one common subscriptions file for all namespaces. This needs some thinking how to do it well. - Having multiple different mailbox formats in one namespace still isn't possible. Needs some more thinking as well.

1 0

[Dovecot] API changes and plugins
by Timo Sirainen 26 Jul '03

26 Jul '03

There's been quite a lot of changes in CVS lately, mostly related to API changes but also some index file changes. They've both had very little testing, so there's probably a few bugs left. Especially mbox users should be careful. pop3 might also be deleting wrong messages.. Anyway. The new mail storage API should allow plugins to hook into pretty much any operation they want to. It's not exactly pretty with C syntax, but I think conceptually it's nice object oriented design :) There's example (non-working) quota plugin at: http://dovecot.procontrol.fi/patches/quota.c I also built 0.99.11-test3 from current CVS: http://dovecot.procontrol.fi/test/

1 0

[Dovecot] Dovecot on Mac OS X?
by jennyw 25 Jul '03

25 Jul '03

Just wondering if anyone has successfully gotten Dovecot to run on Mac OS X? If so, I'd love to hear what your experience has been! Thanks! Jen

2 1

FW: [Dovecot] Is dovecot NFS safe?
by Maikel Verheijen 25 Jul '03

25 Jul '03

This was ment for the list :) Sorry Stuart, for the double email... Regards, Maikel. > -----Original Message----- > From: Maikel Verheijen > Sent: Friday, July 25, 2003 3:40 PM > To: 'Stuart Henderson' > Subject: RE: [Dovecot] Is dovecot NFS safe? > > > Hi, > > Be aware that also your .subscriptions file and .customflags > are not nfs safe (yet) in dovecot-0.99.10. > > I know Timo is working on that though :) > > Kind regards, > > Maikel Verheijen. > > Ps: I have a "crude" patch to make .subscriptions and > .customflags nfs aware (I can not guarentee it is nfs safe ;-). > My own setup runs on nfs with the indexes in memory. > > > -----Original Message----- > > From: Stuart Henderson [mailto:stu@spacehopper.org] > > Sent: Friday, July 25, 2003 2:13 PM > > To: Adam Shand; dovecot(a)procontrol.fi > > Subject: Re: [Dovecot] Is dovecot NFS safe? > > > > > > > I'm migrating our mailserver from cyrus 2.0 to Postfix > and Dovecot. > > > > > > We're using maildirs delivered to /var/maildir, which is > > mounted via > > > NFS from a Netapp. My understanding was that maildir was > > completely > > > happy in an NFS environment but I've seen a couple messages here > > > recently which mention the dovecot index files not being NFS safe. > > > > > > Are their any caveats or gotcha's that I need to be aware of? > > > > You'll probably want to keep them in memory or on local disk. See > > <http://dovecot.procontrol.fi/doc/nfs.txt> for more information - > > default_mail_env needs either ":INDEX=/local/path/to/indexes/%u" or > > ":INDEX=MEMORY", all machines accessing the mailstore should have > > sync'd clocks, and all imap servers need separate hostnames. > > > > --Stu > > >

1 0

[Dovecot] phpgroupware's imap client with dovecot
by Farkas Levente 24 Jul '03

24 Jul '03

hi, we try to use http://www.phpgroupware.org/ imap client with dovecot, but it doesn't working. is there any way to get it working with dovecot? there are a few possibbilities for imap type: courier or cyrus WUash WU-maildir but none of them seems to be working, although pop3 is working. any tip? can I send any log? thanks in advance. -- Levente "Si vis pacem para bellum!"

2 2

Re: [Dovecot] Dovecot, Squirrelmail and KMail
by Rob Thyssen 24 Jul '03

24 Jul '03

On Thursday 24 Jul 2003 11:36 am, Timo Sirainen wrote: > And it shows in kmail? It does display correctly in kmail... > You'll probably just have to setup squirrelmail not to use the > INBOX-prefix: > 1. Default Folder Prefix : > 12. Default Sub. of INBOX : false I thot that was going to sort it, alas it doesn't. Has it got something to do with the fact that kmail puts the contents of subfolders into a hidden directory in ~/Mail ? In kmail I have folders like: Forums, Newsletters, etc... These have subfolders, but in the file system it looks like: /home/rob/Mail/.Forums.directory/DCLUG/ instead of the expected: /home/rob/Mail/Forums/DCLUG/ Thanks for your help! /rob

2 1

[Dovecot] Dovecot, Squirrelmail and KMail
by Rob Thyssen 24 Jul '03

24 Jul '03

I just installed Dovecot and squirrelmail to read my email when I'm away from home. I subscribed to all the folders in my mail directory but I can't actually see any email. Is this a dovecot issue or a squirrelmail issue? I'm running KMail from KDE 3.1.2 and use Debian (Testing) on a Digital Alpha and installed both squirrelmail and dovecot using apt-get. I had to set 'default_mail_env = maildir:~/Mail' To get it to see the parent folders but I'm stuck there. Any advice appreciated. /rob

2 1

[Dovecot] FYI: dovecot is included in redhat beta
by Farkas Levente 24 Jul '03

24 Jul '03

hi, just note that in the current redhat beta they include dovecot 0.99.10:-) -- Levente "Si vis pacem para bellum!"

3 2

[Dovecot] Re: Stripping of domain name
by Timo Sirainen 23 Jul '03

23 Jul '03

On Wed, 2003-07-23 at 20:10, SIMflex Internet Support wrote: > Dear sir, > > Can you please tell me how to make dovecot stipoff or ingore a > @domain.com in a username? Currently, we are only using one domain > (more may be needed in the future), and some of our clients have > incorrectly configured mail clients with the @domain.com in the user > name. We migrated from qpopper and teapop to use Maildirs (we are > building a LVS cluster) and could not use mboxes anymore. In short, > what I need is Well .. What password/user databases do you use? One way is to set default_realm and set the @domain for all users in passdb/userdb. Another way is to patch the code. Below is a patch for plaintext authentication. Or maybe I should make option that if given realm is default_realm, it would look up the user without the realm. I'm not sure if it's worth doing though. BTW. Your mail to dovecot-list got stuck at spamassassin. I raised the spam points a bit and lowered HTML mail's points a bit. Better would be if I could update SA's whitelist automatically when people subscribe. But I'm not really sure how to do that with mailman. RCS file: /home/cvs/dovecot/src/auth/mech-plain.c,v retrieving revision 1.13 diff -u -r1.13 mech-plain.c --- mech-plain.c 8 May 2003 03:18:43 -0000 1.13 +++ mech-plain.c 23 Jul 2003 19:31:13 -0000 @@ -48,14 +48,8 @@ mech_auth_finish(auth_request, NULL, 0, FALSE); } else { /* split and save user/realm */ - if (strchr(authenid, '@') == NULL && default_realm != NULL) { - auth_request->user = p_strconcat(auth_request->pool, - authenid, "@", - default_realm, NULL); - } else { - auth_request->user = p_strdup(auth_request->pool, - authenid); - } + auth_request->user = p_strdup(auth_request->pool, + t_strcut(authenid, '@')); if (!mech_is_valid_username(auth_request->user)) { /* invalid username */

1 0

RE: [Dovecot] Hooks on folder operations
by Maikel Verheijen 23 Jul '03

23 Jul '03

Hi Grahame, > Hi all, > > I'm interested in implementing an anti-spam system using > bayesian filtering. I had the idea of modifying and IMAP > server to assist in training the spam filter. Why do you want to hook it up into your imap server? I think it would be better to prevent emails to enter the mailbox with the MTA rather than removing it when the user is reading his email using imap. Why? Because the spam that is in the mailbox might push the user over his quota limit, and thus preventing legitimate emails to be delivered. > I was thinking of running a program whenever a message in > moved to the folder "Spam" or to a "Safe" folder. This could > be easily added to the server as a generic feature, with hook > programs for: > * new message in a folder (either new, or moved into the folder) > * message in folder is modified > * message in folder is removed > and so on. If the support was generic enough there could be > many uses for it. Security of the external program needs to > be considered but doesn't really affect the IMAP server itself. With the new API code that Timo is making now, I guess this would be possible. (After all: if quota's are updated, something was written to the mailbox, or deleted of course!) > Anyway, if I were to write a patch to add support for running > an external program in these cases, would it be included? Any > feedback would be appreciated, if I'm going to do this I > might as well do it in a way that can be integrated back into > the main tree! You can always build a plugin, and plugins can be loaded whenever an administrator wants them to load. I don't know if Timo wants to include all plugins that are / will be written for dovecot, but I guess there might be a plugins part, where people can "post" their plugins so other people can benefit from them :) > Cheers > Grahame Kind regards, Maikel Verheijen

4 4

[Dovecot] Courier's IMAP custom flags implementation
by Timo Sirainen 23 Jul '03

23 Jul '03

Just thought to mention: http://dovecot.procontrol.fi/tmp/README.imapkeywords.html I'm not sure what to think of it. Good thing in it is that it doesn't limit the number of flags. Bad thing is that I think it's way too slow. Compared to Dovecot's implementation where I "steal" maildir flags a..z and treat them in the normal maildir way. Bad thing is obviously that it's limited to 26 different flags. And I really should fix that customflags file soon to be NFS-safe / read-lockless. It's just a bit problematic how to handle removing unused flags when you've hit the 26 limit and try to add new ones.

2 1

[Dovecot] Hooks on folder operations
by Grahame Bowland 23 Jul '03

23 Jul '03

Hi all, I'm interested in implementing an anti-spam system using bayesian filtering. I had the idea of modifying and IMAP server to assist in training the spam filter. I was thinking of running a program whenever a message in moved to the folder "Spam" or to a "Safe" folder. This could be easily added to the server as a generic feature, with hook programs for: * new message in a folder (either new, or moved into the folder) * message in folder is modified * message in folder is removed and so on. If the support was generic enough there could be many uses for it. Security of the external program needs to be considered but doesn't really affect the IMAP server itself. Anyway, if I were to write a patch to add support for running an external program in these cases, would it be included? Any feedback would be appreciated, if I'm going to do this I might as well do it in a way that can be integrated back into the main tree! Cheers Grahame -- Grahame Bowland Email: grahame(a)ucs.uwa.edu.au University Communications Services Phone: +61 8 9380 1175 The University of Western Australia Fax: +61 8 9380 1109 CRICOS: 00126G

1 0

[Dovecot] Imap 2 imap copy tool?
by Maikel Verheijen 23 Jul '03

23 Jul '03

Hi List! At the moment, our company is preparing to migrate from MS-Exchange to a dovecot mail platform. Since there is no way to access the emails on the file-store other than using webmail, pop or imap, I wanted to do this by using an imap-to-imap copy tool. I have found one that does the job (but POORLY), named migrate (http://prdownloads.sourceforge.net/cyrus-utils/) Does anyone know some other tool(s) for me I could have a look at? My requirements for such software are: - it should use a username;password list to do the migration (20k+ users) - it should be able to do imap to imap copy, or imap to maildir with a flexible path - it should copy all the folders too, except the "Public Folders" from exchange. - it has to be able to "ignore" unknown flags from the exchange imap server (\Recent). What I would love the software to have (and what imapmigrate lacks): - Folder and message syncing (to be able to keep the mailbox in sync) - detailed errors if something goes wrong, not too much fuss over accounts that DO get copied cleanly - fast tool? :) Thank you for your time! Kind regards, Maikel Verheijen.

1 0

[Dovecot] hierarchy_sep
by molter＠tin.it 22 Jul '03

22 Jul '03

Hi Timo, I would like to add another naming scheme to dovecot to recognize maildir folders: As of today: ~/Maildir/.foo ~/Maildir/.foo.bar I would like to add: ~/Maildir/foo ~/Maildir/foo/bar I had a quick look at the code (very clean, I am impressed!) and I saw struct mail_storage, with field hierarchy_sep. I think I cannot just set hierarchy_sep to '/', because /foo would start from the root of the filesystem instead of being relative to ~/Maildir. Do you have any suggestions on the cleaner way of doing it? Or maybe do you think it is wrong to depart from '.' for some reason? thanks Marco

2 1

RE: [Dovecot] Loadable module
by Maikel Verheijen 22 Jul '03

22 Jul '03

Hi Timo, [snipped possible scenario's] > OK. 3) is the best idea :) But it requires a few changes to > make it work. I wouldn't expect it to work out of the box :) But if I read your suggestions right, you propose a "fixed" change in the maildir functions that call the quota update functions if necessary. So perhaps we should make a quota_enabled = yes|no flag int the config file, and use that? I would still be trying to make the quota update functions for you, and try to put them in. > Actually, I think this is exactly how I want quota and ACLs > to be implemented. No extra interface changes for either one of them. > > For quota, you'd want to do something like: > > expunge(): nothing special, just update the quota file after expunges Expunge should recalculate the whole mailfolder? > save_next(): Check data istream's size and if it's over quota, fail. Ok. So this one can be "easy". Just check if mailsize + current usage < max_quota. :) > copy(): this is somewhat problematic, if there wasn't the > maildir hardlinks you wouldn't have to touch it at all.. A copy can duplicate a message in the same store, but do hardlinks work on nfs? If not, we should add the message to the quota list. And maybe we should just add size of the email anyway, it won't be that much of a loss to the user, and it would save us a lot of checking. :) And how about a user that has no quota file (yet), can we "recreate" them? Maybe do a quota lookup for the user (database or file)? This can be done using a module I guess, so it could be "user configurable". Regards, Maikel Verheijen.

2 1

[Dovecot] Outlook Express 6.0.280.1123 SSL and dovecot .
by Xavier Beaudouin 22 Jul '03

22 Jul '03

Hello there, First many thanks for dovecot, this is marvelous piece of software :) One of my users is using Outlook Express 6.0.280.1123 on XP with SSL. I have lots of this in the syslog : Jul 22 16:25:31 kiwi imap-login: Login: fptarget [62.4.1.170] Jul 22 16:25:32 kiwi imap-login: SSL_read() syscall failed: EOF [62.4.1.170] Jul 22 16:25:59 kiwi imap-login: SSL_read() syscall failed: EOF [62.4.1.170] Jul 22 16:26:43 kiwi imap-login: Login: fptarget [62.4.1.170] Jul 22 16:26:45 kiwi imap-login: SSL_read() syscall failed: EOF [62.4.1.170] Jul 22 16:26:47 kiwi imap-login: Login: fptarget [62.4.1.170] Jul 22 16:26:48 kiwi imap-login: SSL_read() syscall failed: EOF [62.4.1.170] Is there any way to avoid that ? (except telling this user to stop using outlook ?). Thanks, /Xavier

2 1

RE: [Dovecot] Loadable module
by Maikel Verheijen 22 Jul '03

22 Jul '03

Hi Timo, When you have time to create the hooks to the various locations within dovecot, I am willing to try to make a module to support Maildir quota's. Would that be possible with the hooks, and can that be done using a plugin as well? Kind regards, Maikel Verheijen. > -----Original Message----- > From: Timo Sirainen [mailto:tss@iki.fi] > Sent: Saturday, July 19, 2003 12:14 AM > To: Maikel Verheijen > Cc: 'dovecot(a)procontrol.fi' > Subject: Re: [Dovecot] Loadable module > > > On Saturday, Jul 19, 2003, at 00:40 Europe/Helsinki, Maikel Verheijen > wrote: > > > I read a post about moving a .mailbixlist to a > .subscriptionfile when > > a user did not have one, but did have a .mailboxlist file. Timo > > emailed a module for that purpose, so it could be done for > this user. > > > > My question is: > > > > - Where and how does dovecot call this function? > > <module name>_init(); is called after initializing Dovecot's > core code, > but before opening any message store or creating client structure. I > think I'd have to add some hooks for store creation and > client creation > so you wouldn't need kludges if you want to modify them in some way. > > You'll have to enable modules of course in configuration file > and place > the module to right directory. > > > - Would it be easy to use a module to a) create a mailpath (can be > > done as the mailuser's id, I use one uid, and my path is > all owned by > > that uid), and b) simply remove a quota file? > > Yes, the modules can do whatever they want. Just use mkdir() and > unlink(). >

2 1

[Dovecot] migrating from uw imapd
by Craig 21 Jul '03

21 Jul '03

Hi, I'm trying to migrate from uw imapd to dovecot. I'm having two problems at the moment. 1. uw imapd grabs new mail from /var/mail/user and then shoves it into ~/mbox, is there any way to make dovecot handle this kind of setup or am I better off merging ~/mbox back into /var/mail/user? If merging is better are what tools are best for this? 2. While I did have have everything in ~/Mail coming up dovetail stopped working and logs the following error: syslog:Jul 19 23:01:07 epsilon3 imap-login: Login: haakon [192.168.0.107] syslog:Jul 19 23:01:07 epsilon3 imap(haakon): Failed to create storage with data: ~/Mail/:INBOX=/var/mail/haakon syslog:Jul 19 23:01:07 epsilon3 dovecot: child 10417 (imap) returned error 89 any idea what is causing this? Regards, Craig.

7 6

Re: [Dovecot] How to use SASL2?
by Matthew Reimer 19 Jul '03

19 Jul '03

Timo Sirainen wrote: > On Fri, 2003-07-18 at 02:02, grpmind+dovecot(a)boromir.vpop.net wrote: > >>How does one use SASL2 for authentication? I looked for docs but found >>none. > > There's some code for supporting Cyrus' SASL library, but it hasn't been > tested for a while and I doubt that it works. I don't really have plans > to make it work either. > > Why do you want it anyway? Dovecot supports PLAIN, DIGEST-MD5 and > ANONYMOUS SASL mechanisms internally. Most important missing one is > Kerberos 5 I think. I'm not really interested in using SASL for its own sake, but because it's a way to get dovecot to authenticate against my mysql users db. I might try to write a patch to implement mysql support for dovecot, hopefully good enough for you to commit. Matt

1 0

[Dovecot] Loadable module
by Maikel Verheijen 19 Jul '03

19 Jul '03

Hi List! I read a post about moving a .mailbixlist to a .subscriptionfile when a user did not have one, but did have a .mailboxlist file. Timo emailed a module for that purpose, so it could be done for this user. My question is: - Where and how does dovecot call this function? - Would it be easy to use a module to a) create a mailpath (can be done as the mailuser's id, I use one uid, and my path is all owned by that uid), and b) simply remove a quota file? Thank you for your time, Maikel Verheijen. Ps: the email I am referring to has: Subject: Re: [Dovecot] 0.99.10-rc3 Message-Id: <1056538261.8144.38.camel@hurina> Date: 25 Jun 2003 13:51:01 +0300

2 1

[Dovecot] Status of database integration / Willing to help
by Gregory Hartman 18 Jul '03

18 Jul '03

I a PhD student here at Carnegie Mellon. I have ten years of experience working in C in industry. I am working on a research project here at Carnegie Mellon that needs to integrate a database with mail clients. We are planning to use the IMAP protocol to communicate with the mail client. After I spent some time looking at the code of various IMAP server implementations, I got very interested in Dovecot. Then I noticed that you were planning to integrate Dovecot with a SQL database. Is this work in progress? Do you have a schema? Is there some way that I could help? -- Gregory Hartman <gghartma(a)cs.cmu.edu>

2 1

[Dovecot] How to use SASL2?
by grpmind+dovecot＠boromir.vpop.net 18 Jul '03

18 Jul '03

How does one use SASL2 for authentication? I looked for docs but found none. Thanks in advance. Matt

2 1

[Dovecot] Dovecot on Linux 2.6.0-test1-ac1
by Grahame Bowland 16 Jul '03

16 Jul '03

Hi all For various reasons I was looking into 2.6, so I installed a copy on my desktop. Everything works fine, except for dovecot - errors such as this appeared in the syslog: Jul 15 14:41:09 typhaon dovecot: Dovecot starting up Jul 15 14:41:12 typhaon imap-login: setuid(113) failed: Resource temporarily unavailable Jul 15 14:41:12 typhaon dovecot: Login process died too early - shutting down I can imagine why setuid() should ever fail, I've confirmed that the daemon is running as UID zero at the time it makes the call. However, the call succeeds if I comment out: restrict_process_size((unsigned int)-1, 1); on line 134 of src/login-common/main.c it starts to work again. It's very strange - I got the idea to try this from the list archives. I'm willing to track this down if anyone can suggest possible things in restrict_process_size() that might be causing this failure. All the other daemons that I run that need to drop root privileges work fine.. Cheers Grahame -- Grahame Bowland Email: grahame(a)ucs.uwa.edu.au University Communications Services Phone: +61 8 9380 1175 The University of Western Australia Fax: +61 8 9380 1109 CRICOS: 00126G

2 3

[Dovecot] Indexes again
by Timo Sirainen 16 Jul '03

16 Jul '03

A bit quiet here, so here's some more thoughts about indexes. Even though I was thinking only how to make them usable with NFS (I wrote it to doc/nfs.txt), it then occured to me that exactly the same tricks would help with local filesystem indexes as well. Especially the lockless reading would help with lock contention issues I was worrying about earlier with shared mailboxes. Also it occured to me that keeping maildir filenames fully synchronized in index file probably isn't very good idea from performance point of view.. BTW. I almost committed the .tree removal code to CVS today. Then I noticed that expunging ignores about half of the deleted messages. This could have been actually happening with the old code in some situations as well, although it probably would have skipped only a couple of messages. Anyway, fixing this properly takes some more time.. -------- Ideas how to make indexes work pretty well with NFS: Reading shouldn't require locks, so modifying should be done using only atomic operations. These include: - Replacing the file completely using rename() - We probably can't assume that writing more than one byte at a time is atomic. If we have to modify a larger dataset, we could do: - struct { bit_t use_first; dataset_t first; dataset_t second; } - when reading, we use first if use_first is set, second if it's unset - when writing, we first write to the non-used variable, only then we update the flag. - This of course requires twice the amount of space for dataset plus one extra bit, so it shouldn't be used too much - If data can be only set, but never changed, we need only one extra bit to specify if the data is set. - Appending new data to end of file. We'd have to have used_file_size variable in header, done like described above. - Each cached message record would have a pointer to next part, so more cached data could be appended to file. Message flags are the most commonly modified data. If we just modify them directly, a simultaneous read might catch the change only partially. But luckily for us, this is accepted behaviour so we can do it. Another commonly modified data is maildir filenames. We probably want to store only the base name in index and keep the full name synchronized only locally. Compressing unused data from index files would have to be done by rewriting the index into index.lock file and renaming it over the index file. All file operations should probably be done with lseek(), read() and write() to avoid extra network traffic. There should be some clever read-ahead caching however.

1 0

[Dovecot] New indexing code
by Timo Sirainen 14 Jul '03

14 Jul '03

If someone's interested, here's an explanation and test code how I was planning on replacing the current .imap.index.tree file's functionality. The .tree file will be removed so you'll save some disk/memory as well, something like 5-20% of whole indexes.

1 0

RE: [Dovecot] dovecot.procontrol.fi anonymous access fails?
by Maikel Verheijen 14 Jul '03

14 Jul '03

> On Mon, Jul 14, 2003 at 09:23:04AM +0200, Maikel Verheijen wrote: > > When I tried connecting using MS outlook express, it is complaining > > about the fact that the folders aren't subscribed. If they are not > > subscribed, you cannot read them... :( > > OK, added the subscriptions now. Ah great! :) Thanks, Maikel Verheijen.

1 0

RE: [Dovecot] dovecot.procontrol.fi anonymous access fails?
by Maikel Verheijen 14 Jul '03

14 Jul '03

Hi List, When I tried connecting using MS outlook express, it is complaining about the fact that the folders aren't subscribed. If they are not subscribed, you cannot read them... :( I did read through the archives using mutt though, that worked quite well! :) Regards, Maikel Verheijen. Ps: did not try it lately, maybe Timo changed the subscription status of the folders in between.... > -----Original Message----- > From: Timo Sirainen [mailto:tss@iki.fi] > Sent: Sunday, July 13, 2003 6:10 PM > To: dovecot(a)procontrol.fi > Subject: Re: [Dovecot] dovecot.procontrol.fi anonymous access fails? > > > On Sunday, Jul 13, 2003, at 18:47 Europe/Helsinki, Marco > Molteni wrote: > > > I was using a patched sylpheed that doesn't support ANONYMOUS > > authentication, so I gave anonymous as username and empty password, > > but it failed as shown in the following trace: > > > > 2 LOGIN anonymous > > 2 BAD Error in IMAP command received by server. > > Sylpheed is buggy and doesn't give password parameter. It should have > said: > > 2 login anonymous "" >

2 1

[Dovecot] mySQL user auth status?
by Jesse Peterson 14 Jul '03

14 Jul '03

Is this anywhere near consideration yet? (an alpha/beta/etc patch/module I can help test maybe?) Thanks, - Jesse

2 1

[Dovecot] dovecot.procontrol.fi anonymous access fails?
by Marco Molteni 13 Jul '03

13 Jul '03

Hi, just started using dovecot on FreeBSD. Nice and easy to configure :-) I then wanted to browse the dovecot mailing list, so, according to http://dovecot.procontrol.fi/mailinglists.html: IMAP archives available from dovecot.procontrol.fi, either use ANONYMOUS authentication or give anonymous as username and empty password. I was using a patched sylpheed that doesn't support ANONYMOUS authentication, so I gave anonymous as username and empty password, but it failed as shown in the following trace: 1 CAPABILITY * OK dovecot ready. * CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN LISTEXT LIST-SUBSCRIBED AUTH=PLAIN AUTH=ANONYMOUS 1 OK Capability completed. 2 LOGIN anonymous 2 BAD Error in IMAP command received by server. 3 LOGOUT * BYE Logging out 3 OK Logout completed. Anyway, I also tried a plain telnet and it failed in the same way. what's wrong? thanks marco

2 1

Re: [Dovecot] Permission denied
by Timo Sirainen 13 Jul '03

13 Jul '03

On Saturday, Jul 12, 2003, at 11:13 Europe/Helsinki, Jaime Medrano wrote: > That's the problem. The home dir is exported by nfs. Chdirs should be > done as the user, not as root. Right.. Well, I'll just ignore that error then: Index: mail-process.c =================================================================== RCS file: /home/cvs/dovecot/src/master/mail-process.c,v retrieving revision 1.25 retrieving revision 1.26 diff -u -r1.25 -r1.26 --- mail-process.c 10 Jul 2003 03:04:07 -0000 1.25 +++ mail-process.c 12 Jul 2003 15:45:19 -0000 1.26 @@ -168,7 +168,9 @@ if (*home_dir != '\0') { full_home_dir = *chroot_dir == '\0' ? home_dir : t_strconcat(chroot_dir, "/", home_dir, NULL); - if (chdir(full_home_dir) < 0) + /* NOTE: if home directory is NFS-mounted, we might not + have access to it as root. Ignore such errors. */ + if (chdir(full_home_dir) < 0 && errno != EACCES) i_fatal("chdir(%s) failed: %m", full_home_dir); }

3 6

[Dovecot] CVS state
by Timo Sirainen 13 Jul '03

13 Jul '03

Just a small note that if you upgrade to latest CVS, you'll have to delete old index files or you'll probably get wrong BODY or BODYSTRUCTURE replies. Next release will have index file's version number increased so it will automatically rebuild them when needed. I didn't raise it yet since several other changes are likely to come soon.

1 0

[Dovecot] Permission denied
by Jaime Medrano 12 Jul '03

12 Jul '03

Dovecot is faulting on an error about permissions that it shouldn't do. I've got an user with its home dir with permissions 700, and inside the mail directory with the mboxes. In the error log I can see: 'Can't chdir to /home/user. Permission denied' I wonder why it has to chdir to that directory and why it can't access. Shouldn't it be running as the user?

3 2

[Dovecot] FreeBSD /etc/passwd errors
by James Read 12 Jul '03

12 Jul '03

Hi there, I've currently compiled and running dovecot version 0.99.10 on my FreeBSD 4.8 system from the ports and am having problems with authenticating clients with the imap/pop3 service. The error message i get is: Jul 11 19:26:18 dev dovecot: Dovecot starting up Jul 11 19:27:23 dev dovecot-auth: passwd(james): invalid password field '*' Jul 11 19:27:23 dev imap-login: Disconnected [10.0.0.1] On the client system I am using Outlook Express 6 and the password dialog box keeps on comming up. Im sure its somthing to do with my conf file not being configured right, here are the main bits: default_mail_env = mbox:/var/mail/%u client_workarounds = oe6-fetch-no-newmail outlook-idle auth = default auth_userdb = passwd auth_passdb = passwd auth_user = dovecot-auth auth_username_chars = If its somthing simple please point me in the right direction as I feel increadbly dumb because im sure its something to do with the passwd file but just carnt get pass the last hurdle! Many thanks in advanced. James.

3 4

[Dovecot] Configuration file changes in CVS
by Timo Sirainen 12 Jul '03

12 Jul '03

OK, it's there now. Not much tested yet, so there's probably some bugs. I didn't yet add support for templates, but I probably will later. The new format is like in the two example config files I sent before: http://dovecot.procontrol.fi/list/dovecot/2003-July/001832.html dovecot-example.conf contains the simple configuration now. New code also tries to be backwards compatible with most settings. New code will also try to check that the configuration is valid after SIGHUP before actually using it, so the server won't die anymore if you made a typo somewhere. It doesn't check all the settings though. Namespace configuration comes probably next. Something like: namespace { prefix = INBOX type = private separator = / location = mbox:/var/mail/%u } namespace { prefix = type = private separator = . location = maildir:~/ } namespace { prefix = lists/ type = public separator = / location = mbox:/var/mail/lists/archives }

10 21

[Dovecot] Date sort-order ignoring timezone, and a few Q's.
by Stuart Henderson 11 Jul '03

11 Jul '03

Timo, thanks for writing and releasing Dovecot. I've recently discovered it and have been very impressed at the speed and balance between flexibility and simplicity. I had to make a packet-trace to be sure that encryption with OpenSSL was working correctly, since it all 'just worked' first time without complex configuration, which I don't think I've ever seen before ;-) LDAP too was quite straightforward (after I worked out where my virtual-domain schema differed from what was required). One small glitch I have noticed is that when the client requests a list of messages sorted by date, the timezone is ignored. For example, listed in descending order: 07/07/2003 00:01 +0300 (= 21:01 UT) 06/07/2003 23:15 +0100 (= 22:15 UT) 06/07/2003 19:03 +0100 (= 18:03 UT) I think that this should instead be... 06/07/2003 23:15 +0100 (= 22:15 UT) 07/07/2003 00:01 +0300 (= 21:01 UT) 06/07/2003 19:03 +0100 (= 18:03 UT) It's most noticable when the client (Mulberry in my case) is configured to display all times in the local timezone. (Mulberry has recently added custom flags which work perfectly with Dovecot - I was hoping this would be the case, and was one of the reasons I was looking for something to replace the version of Courier I previously had installed). Mulberry does like to have NAMESPACE otherwise it usually asks for folder locations on connecting, btw. No real problem, though. A little tip: if anyone is interested in having their MDA write Maildir with CR+LF so that sendfile(2) can be used on all messages (not just those created by Dovecot), Exim offers this natively by adding the "use_crlf" option to the appendfile transport which seems to work fine with 0.99.10 (though not 0.99.9.1, maybe because of 2003-06-04 17:39 in Changelog). It seems Dovecot is using the ,W= Maildir tag for some type of size instead of ,S= but I haven't traced far enough to work out what exactly W/virtual_size means, am I right in guessing that it might be 'wire size' i.e. message-size-with-CRLF-line-endings? (If so, use_crlf in exim.conf can be augmented with "maildir_tag = ,W=$message_size" to help keep overheads to a minimum). And, one final question: for a dual-stack machine to listen on both IPv6 and IPv4 sockets, is the currently preferred option simply to start two instances of Dovecot with their own dovecot.conf containing different *_listen parameters? --Stu

5 23

[Dovecot] Re: Uncaught bounce notification
by Timo Sirainen 10 Jul '03

10 Jul '03

Lots of bounces from you, I'm moving this subscription to new address.. On Wed, 2003-07-09 at 22:15, mailman-bounces(a)procontrol.fi wrote: > The attached message was received as a bounce, but either the bounce > format was not recognized, or no member addresses could be extracted > from it. This mailing list has been configured to send all > unrecognized bounce messages to the list administrator(s). > > For more information see: > http://procontrol.fi/cgi-bin/mailman/admin/dovecot/bounce > > > ______________________________________________________________________ > From: Joburg_Notes1 <Joburg_Notes1(a)icoc.org> > To: dovecot-bounces(a)procontrol.fi > Subject: Re: [Dovecot] LDAP bind questions > Date: 09 Jul 2003 21:13:31 +0200 > > Your email to Leslie Viljoen has been forwarded to his new email address: > lesliev(a)icoc.co.za. Please use this address in future! > > Thanks, > Leslie >

2 3

[Dovecot] Concerns switching from Courier to Dovecot
by marcotte＠panix.com 10 Jul '03

10 Jul '03

[ I'm posting this again since I wasn't subscribed to the list when I first posted. I'm sorry if this gets posted twice] I was considering replacing Courier-IMAP with dovecot in the future, but have some concerns. I realize that some things simply haven't been finished yet like quotas, but some other things may prevent me from using dovecot as a drop in replacement in the future. Subfolders have different names in the file system. A folder (INBOX.subfolder) is named ".subfolder" in Courier, but "INBOX.subfolder" in dovecot. I can't simply rename all the subfolders, because our customers have direct access to the maildirs, and write to it directly with procmail and mail clients like mutt. Certain files have different names, but contain the same information. For example, the subscription lists and UID files look the same to me but have different names. I suppose they could be converted, but this would make it difficult to run both IMAP servers side-by-side, which I'd like to do until dovecot has all the features I need. I also heard talk of the hierarchy separator being changed from "." to "/". Now, is it possible configuration options could be added to allow for better Courier compatibility? I would be willing to help with this. Thanks! -- - Brian

4 4

Re: [Dovecot] Date sort-order ignoring timezone, and a few Q's.
by Stuart Henderson 09 Jul '03

09 Jul '03

>> One small glitch I have noticed is that when the client requests a >> list of messages sorted by date, the timezone is ignored. > > It's not ignored, I just recently "fixed" it. Now it's properly fixed > :) Heheh.. Yes, I confirm that. (: >> It seems Dovecot is using the ,W= Maildir tag for some type of size >> instead of ,S= but I haven't traced far enough to work out what >> exactly W/virtual_size means, am I right in guessing that it might >> be 'wire size' >> i.e. message-size-with-CRLF-line-endings? > > Yes. S means the actual size of the file, W is the size with CRs. Thanks, that's good. >> And, one final question: for a dual-stack machine to listen on both >> IPv6 and IPv4 sockets, is the currently preferred option simply to >> start two instances of Dovecot with their own dovecot.conf >> containing different *_listen parameters? > > Currently, yes. I'll probably add support for multiple listening > sockets per server some day. There is no problem to have two instances running, though it might be more admin-friendly to allow the listen addresses to be supplied on the command-line, since it would save maintaining a second config file (and I imagine this would be easier for you than changing the socket code), but this is quite a low priority I think.

1 0

[Dovecot] search throwing "Sequence out of range"
by Stuart Henderson 09 Jul '03

09 Jul '03

Mulberry client-side message filtering can be persuaded to search for a nonexistent message ... <tag> UID SEARCH UNSEEN UNDELETED UNDRAFT 12 (OR FROM "Cron Daemon <sthen(a)eeyore.37.spacehopper.org>" SUBJECT "Cron <sthen@wide> /home/sthen/pingme") Dovecot 0.99.10 returns this ... <tag> NO Sequence out of range: 12 I *think* the correct behaviour here is to return a null set of search results and avoid the error message in the client. i.e. * SEARCH <tag> OK Certainly this is how other servers seem to work, and my understanding of the next paragraph from IMAP4REV1 RFC seems to backs this up (though the wording in the RFC isn't 100% clear to me) "Message set ranges are permitted; however, there is no guarantee that unique identifiers be contiguous. A non-existent unique identifier within a message set range is ignored without any error message generated." it's not Mulberry's fault that it sent this immediately after deleting message 12, since on closer investigation this is exactly what my filter rules are asking it to do because I forgot to set "stop if matched", however it would be helpful to change sometime since I'm sure I'm not the only person to have done that (-: of course I've fixed my filters now, so it isn't a high priority for me. Commented protocol log follows, it's not really any more information than above though. --> #4.364 Tue Jul 8 12:54:19 2003 A00448 STATUS INBOX (MESSAGES RECENT UNSEEN UIDVALIDITY UIDNEXT) * STATUS "INBOX" (MESSAGES 0 RECENT 0 UIDNEXT 1 UIDVALIDITY 1052370612 UNSEEN 0) A00448 OK Status completed. --> #2.364 Tue Jul 8 12:55:19 2003 A01259 NOOP * 12 EXISTS * 3 RECENT A01259 OK NOOP completed. ... incoming mail ... --> #2.364 Tue Jul 8 12:55:19 2003 A01260 FETCH 12 (FLAGS RFC822.SIZE UID INTERNALDATE ENVELOPE BODYSTRUCTURE) * 12 FETCH (UID 140 FLAGS (\Recent) INTERNALDATE "08-Jul-2003 12:54:36 +0100" RFC822.SIZE 2372 BODYSTRUCTURE ("text" "plain" ("charset" "us-ascii") NIL NIL "7bit" 0 0 NIL NIL NIL) ENVELOPE ("Tue, 08 Jul 2003 12:00:11 +0000" "***SPAM*** I wish I could be there" (("Kieth Hairston" NIL "kiethhairston_ji" "sedona.net")) (("Kieth Hairston" NIL "kiethhairston_ji" "sedona.net")) (("Kieth Hairston" NIL "kiethhairston_ji" "sedona.net")) ((NIL NIL "stu" "spacehopper.org")) NIL NIL NIL "<d1d801c34548$6364549c$6e8ec7ab@0aqdi32>")) A01260 OK Fetch completed. --> #2.364 Tue Jul 8 12:55:19 2003 A01261 SORT (DATE) us-ascii ALL * SORT 9 1 2 8 3 4 5 6 7 11 10 12 A01261 OK Sort completed. ... filter rule #1 ... --> #2.364 Tue Jul 8 12:55:19 2003 A01262 UID SEARCH UNSEEN UNDELETED UNDRAFT 12 SUBJECT "***SPAM***" * SEARCH 140 A01262 OK Search completed. ... ok, it's junk, we want it marked seen/deleted and placed in another folder ... --> #2.364 Tue Jul 8 12:55:19 2003 A01263 UID STORE 140 +FLAGS (\Seen) * 12 FETCH (FLAGS (\Seen \Recent) UID 140) A01263 OK Store completed. --> #2.364 Tue Jul 8 12:55:19 2003 A01264 UID STORE 140 +FLAGS (\Deleted) * 12 FETCH (FLAGS (\Deleted \Seen \Recent) UID 140) A01264 OK Store completed. --> #2.364 Tue Jul 8 12:55:19 2003 A01265 UID COPY 140 "ZZ spam" A01265 OK Copy completed. --> #1.364 Tue Jul 8 12:55:20 2003 A00087 STATUS "ZZ spam" (MESSAGES RECENT UNSEEN UIDVALIDITY UIDNEXT) * STATUS "ZZ spam" (MESSAGES 1 RECENT 1 UIDNEXT 2 UIDVALIDITY 1057513495 UNSEEN 0) A00087 OK Status completed. --> #2.364 Tue Jul 8 12:55:20 2003 A01266 UID STORE 140 +FLAGS (\Deleted) * 12 FETCH (FLAGS (\Deleted \Seen \Recent) UID 140) A01266 OK Store completed. ... and expunge this message (only) from the inbox: Mulberry checks so that it can keep any other deleted messages in the folder intact ... --> #2.364 Tue Jul 8 12:55:20 2003 A01267 UID SEARCH DELETED * SEARCH 140 A01267 OK Search completed. --> #2.364 Tue Jul 8 12:55:20 2003 A01268 EXPUNGE * 12 EXPUNGE A01268 OK Expunge completed. --> #2.364 Tue Jul 8 12:55:20 2003 A01269 SORT (DATE) us-ascii ALL * SORT 9 1 2 8 3 4 5 6 7 11 10 A01269 OK Sort completed. ... and on to filter rule #2 ... --> #2.364 Tue Jul 8 12:55:20 2003 A01270 UID SEARCH UNSEEN UNDELETED UNDRAFT 12 (OR FROM "Cron Daemon <sthen(a)eeyore.37.spacehopper.org>" SUBJECT "Cron <sthen@wide> /home/sthen/pingme") A01270 NO Sequence out of range: 12

2 2

[Dovecot] LDAP bind questions
by Jared 09 Jul '03

09 Jul '03

Hello, I've got dovecot set up to authenticate against our LDAP server. So far seems to work well. I have two concerns that I haven't been able to find answers for in the documentation or archives. Is there any intention to support "authentication binds" so you don't have to bind as a user with read privileges to everyone's userPassword attribute? For security purposes I'd like to see this functionality. And my next concern would become a non-issue if the above was supported, but is there a way to set the dnpass equal to a SSHA password? When I try setting it like this: dnpass = {SSHA}VhxqnmwCLVQj7g3rQV+g9F3XnaJ6bRXR in dovecot-ldap.conf It still tries to do a simple bind and fails. I get this error: dovecot-auth: LDAP: ldap_simple_bind_s() failed \ (dn cn=authadmin,ou=people,dc=domain,dc=com): Invalid credentials I'd prefer not to have the password for the authentication admin user stored in plain text in the conf file. Thanks, -jared

4 6

[Dovecot] Auth problems against Eudora
by Lars Clausen 06 Jul '03

06 Jul '03

Hi, I'm trying to set up dovecot to do pop3 from Eudora, but it keeps breaking on authentication attempts using plain auth. When I snoop the connection with tcpflow, here's what I see: 128.174.246.068.00110-062.107.004.050.49653: +OK dovecot ready. 128.174.246.068.00110-062.107.004.050.49653: +OK dovecot ready. 128.174.246.068.00110-062.107.004.050.49653: 062.107.004.050.49653-128.174.246.068.00110: CAPA 128.174.246.068.00110-062.107.004.050.49653: +OK CAPA TOP USER UIDL RESP-CODES STLS SASL PLAIN DIGEST-MD5 . 062.107.004.050.49653-128.174.246.068.00110: auth plain AG1p2YtlQBebz12YmXQ 128.174.246.068.00110-062.107.004.050.49653: -ERR Unsupported authentication mechanism. It seems to me that sending 'auth plain <MD5>' is against the RFCs (1734, 2195, 1939). What can be done about this? I'm also curious why MD5 auth is not allowed for shadow passwords whenthat has been standard on Linux for a while now. Or am I missing something? Thanks in advance, -Lars -- Lars Clausen (http://shasta.cs.uiuc.edu/~lrclause)| Hårdgrim of Numenor "I do not agree with a word that you say, but I |---------------------------- will defend to the death your right to say it." | Where are we going, and --Evelyn Beatrice Hall paraphrasing Voltaire | what's with the handbasket?

2 1

[Dovecot] "Internal Error" from maildirs (new user)
by Sean 'Shaleh' Perry 05 Jul '03

05 Jul '03

I decided to give dovecot a try this morning. To create a test system I copied mail from my wife and myself into /var/spool/imap. This mail was already in maildir format from our mail clients. I set the mail env to maildir:/var/spool/imap/%u. Below is a session (via telnet): <begin> . OK Logged in. . list "" * * LIST (\UnMarked) "." "blackbox" * LIST (\UnMarked) "." "blackbox-devel" * LIST (\UnMarked) "." "debian-devel" * LIST (\UnMarked) "." "debian-dpkg" * LIST (\UnMarked) "." "debian-ipv6" * LIST (\UnMarked) "." "debian-laptop" * LIST (\UnMarked) "." "debian-legal" * LIST (\UnMarked) "." "debian-lint" * LIST (\UnMarked) "." "debian-mentors" * LIST (\UnMarked) "." "debian-policy" * LIST (\UnMarked) "." "debian-private" * LIST (\UnMarked) "." "debian-publicity" * LIST (\UnMarked) "." "debian-python" * LIST (\UnMarked) "." "debian-qa" * LIST (\UnMarked) "." "debian-release" * LIST (\UnMarked) "." "debian-security" * LIST (\UnMarked) "." "debian-spi" * LIST (\UnMarked) "." "debian-testing" * LIST (\UnMarked) "." "debian-user" * LIST (\UnMarked) "." "debian-vote" * LIST (\UnMarked) "." "drafts" * LIST (\UnMarked) "." "lsb-impl" * LIST (\UnMarked) "." "bad" * LIST (\UnMarked) "." "lsb-test" * LIST (\UnMarked) "." "maradns" * LIST (\UnMarked) "." "narval" * LIST (\UnMarked) "." "python-list" * LIST (\UnMarked) "." "sent-mail" * LIST (\UnMarked) "." "spam" * LIST (\UnMarked) "." "storage" * LIST (\UnMarked) "." "trash" * LIST (\UnMarked) "." "xdg" * LIST (\UnMarked) "." "outbox" * LIST (\UnMarked) "." "bf-python" * LIST (\UnMarked) "." "debian-bug" * LIST (\UnMarked) "." "python-tutor" * LIST (\Marked) "." "INBOX" . OK List completed. . select inbox . NO Internal error [2003-07-04 10:50:51] . examine inbox . NO Internal error [2003-07-04 10:52:22] . examine bad * NO Couldn't use index files * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1057341147] UIDs valid * OK [UIDNEXT 1] Predicted next UID . OK [READ-ONLY] Select completed. <end> I can find no cause of the inbox error in any log. Suggestions? All of my sub folders come back as read only (even when I use select). I presume this is a permissions issue. What should the perms be? I am using 0.99.10 from Debian if it matters.

2 2

[Dovecot] NetBSD Support
by Charlie Allom 03 Jul '03

03 Jul '03

Timo, you can safely update the NetBSD support from 1.5 to 1.5, 1.6 and 2.0 (-current/1.7). C. -- charlie(a)rubberduck.com - Melbourne, Australia http://rubberduck.com/~yeled/ PGP: 0x14AA7941 || finger yeled(a)lazy.spodder.com

4 4

RE: [Dovecot] 0.99.10 released
by Maikel Verheijen 02 Jul '03

02 Jul '03

Hi Timo (and list :) > No bug reports since rc4, so here it is. [snip] One small question: How far is nfs safety implemented now? You did a lot of work on nfs-safety for the index files, how about the other files? And does it need specific configure options? Thank you for this release though, I will have a look at it tonight ;-) Kind regards, Maikel Verheijen.

3 5

[Dovecot] migrating from cyrus
by Jens Gutzeit 02 Jul '03

02 Jul '03

Hi all, I want to migrate our customers mailserver (400 mail accounts), from cyrus-2.0.16 to Dovecot. Anyone an idea how I can preserve the read/unread status and what can I do with the UIDL? (cyrus used a different algorithm for UIDL). Thanks in advance. Best regards, Jens Gutzeit

3 5

[Dovecot] a new error message
by Farkas Levente 02 Jul '03

02 Jul '03

hi, we've got the following error: --------- The current command did not succeed. The mail server responded: Error in IMAP command UID: Too long argument.." --------- -- Levente "Si vis pacem para bellum!"

3 4

[Dovecot] Configuration file changes
by Timo Sirainen 02 Jul '03

02 Jul '03

I was going to add support for "configuration groups", but got a bit stuck at how the logic is supposed to work. I think there could be different settings based on IP/port it's listening in, or based on given username. I can't really describe how it would work, and I'm not entirely sure myself either :) Does this make sense: # (default settings here) # if auth groups are defined here, they are included in all groups below group 1.server.org { protocols = imap imaps pop3 pop3s ssl_cert_file = /etc/ssl/certs/server1.pem login_dir = /var/run/dovecot/login/server1 login { # common for imap/pop3 listen = 1.server.org } auth server1 { mechanisms = plain userdb = ldap /etc/ldap-server1.conf passdb = ldap /etc/ldap-server1.conf } group admins { mail_full_filesystem_access = yes auth admins { mechanisms = plain userdb = passwd-file /etc/admins.passwd passdb = passwd-file /etc/admins.passwd } } } # (any setting changes here would affect only new groups below, otherwise # the config file parsing would get difficult..) group anonymous { protocols = imap ssl_disable = yes login_dir = /var/run/dovecot/login/anonymous login { listen = anonymous.server.org process_per_connection = no processes_count = 1 } auth anonymous { mechanisms = plain anonymous userdb = passwd-file /etc/anon.passwd passdb = passwd-file /etc/anon.passwd } }

6 18

[Dovecot] Dovecot first impressions
by Matthias Andree 30 Jun '03

30 Jun '03

Hi, I have only recently become aware of Dovecot and gave it a try. The previous 0.99.9.1 version didn't work well for me (OpenSSL), I dropped it, but 0.99.10 has come just in time (saw it on freshmeat) and I thought I'd give it another try if it promised SSL fixes, and it's sorta working for me (i. e. it works with mutt, Mozilla, sylpheed, but not cone -- but cone is beta and has SSL issues with certificate verification, I seem to have hosed the setup). Anyways, I was delighted to see how quick it is to install an IMAP/POP3 server -- but being a Courier-IMAP user, I have some compatibility concerns, but these appear to be minor, and the daemontools <URL:http://cr.yp.to/daemontools.html> friendliness (dovecot -F) is very much to my taste as well. One deals with NAMESPACE -- it takes manual intervention in order to convince Mozilla of the new namespace and stuff. Courier-IMAP used to provide a NAMESPACE, but Mozilla leaves it unchanged if I point it to Dovecot. The other is the naming itself, easily visible from the LIST replies below: Courier prefixes everything with "INBOX" (which I believe is reflected in the NAMESPACE, but it appears as though most clients were only tested against UWIMAP). Apparently, mail user clients (particularly the Mozilla derivatives) do a better job of presenting Dovecot's layout, so this one has my preference, although it differs from Courier's and Cyrus 2.1's. Timo, could you add the NAMESPACE extension to Dovecot? That would be a great migration aid for people switching over from Courier-IMAP. Other than that, my first impression is a very good one. One question (I may have missed it in the docs): how do I properly create folders with national characters (umlauts) in their names? Apparently, Courier-IMAP and Dovecot just forward the file name verbatim when I type maildirmake -f t=E4=DFt Maildir, which doesn't look right. OTOH, I am well aware that the IMAP servers can't possible guess the character set, so it must be my "maildirmake" that is flawed rather than the server. This is Courier-IMAP: . namespace * NAMESPACE (("INBOX." ".")) NIL (("shared." ".")) . OK NAMESPACE completed. . list "" * * LIST (\HasNoChildren) "." "INBOX.INBOX.Trash" * LIST (\HasNoChildren) "." "INBOX.dovecot" * LIST (\HasNoChildren) "." "INBOX.qmail" * LIST (\HasNoChildren) "." "INBOX.cone" * LIST (\HasNoChildren) "." "INBOX.vulnwatch" * LIST (\HasNoChildren) "." "INBOX.Outbox" * LIST (\HasNoChildren) "." "INBOX.Trash" * LIST (\HasNoChildren) "." "INBOX.newsletters" * LIST (\HasNoChildren) "." "INBOX.schmendrick" * LIST (\HasNoChildren) "." "INBOX.Queue" * LIST (\HasNoChildren) "." "INBOX.Sent" * LIST (\HasNoChildren) "." "INBOX.Drafts" * LIST (\Marked \HasChildren) "." "INBOX" * LIST (\Noselect \HasChildren) "." "INBOX.INBOX" . OK LIST completed This is Dovecot: . namespace . BAD Error in IMAP command NAMESPACE: Unknown command. . list "" * * LIST (\UnMarked) "." "Drafts" * LIST (\UnMarked) "." "Sent" * LIST (\UnMarked) "." "Queue" * LIST (\UnMarked) "." "schmendrick" * LIST (\UnMarked) "." "newsletters" * LIST (\UnMarked) "." "Trash" * LIST (\UnMarked) "." "Outbox" * LIST (\UnMarked) "." "vulnwatch" * LIST (\Marked) "." "cone" * LIST (\Marked) "." "qmail" * LIST (\UnMarked) "." "dovecot" * LIST (\Children \UnMarked) "." "INBOX" * LIST (\UnMarked) "." "INBOX.Trash" . OK List completed. --=20 Matthias Andree

2 1

[Dovecot] HELP
by Roger Cates 28 Jun '03

28 Jun '03

I am including my config.log in the hopes that someone can tell me what is going on with dovecot installing on Mac OSX 10.2.6 Sincerely, Roger Cates, CCNA Vice President & Chief Technical Officer Xpower Internet, LLC Xpowerhosting.com | Xpoweronline.com P 888.245.7501 | F 270.338.4602 Internet to the power of X. begin 666 dovecot_config.log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a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a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a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a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a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a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` ` end

2 1

[Dovecot] Message display corrupted or missing in Netscape 7.0 and Mozilla 1.3
by Steven Enderle 28 Jun '03

28 Jun '03

Hi, a few days ago, we switched our site from pop3 to imap. We are running about 20 users with Netscape 7.0 on a FreeBSD-4.8 Server . I installed dovecot 0.9.99.1 via the freebsd-ports collection, which was as easy as make install and start dovecot. Our users mailboxes are still standart mbox format in /var/mail/(user), as it is default in Freebsd. Now we suffer from a realy ugly problem, which was arising after the switch from pop3. When Netscape is newly started, it works fine as expected until Netscape displays messages corrupted or stops displaying them completly. I also cannot forward them in that state or open or delete them in any other way. The only way to get it working again is to quit Netscape, exit quickstart and restart Netscape again. It just hangs on a bunch of messages or all of them. The user notices it like this: There are three windows displayed in netscape mail: 1. imap folder view 2. message list of the current folder and 3. the currently displayed message. The Folder view and Message List in Netscape is always fine, so the Subject and sender, time, etc is always displayed in the List. The problem occurs then on some messages when i select them for reading. The Message Display below the message list just stays empty (also opening the message in a new window doesn't help) or the "title bar in the Message Display" stays empty (no subject, sender, time etc) and the raw email starting with header, raw html email and encoded attachment is shown below, each line followed by another blank line, like this: == start corrupted email X-UIDL: 8793f170f0430909 Return-Path: <frank.xx(a)xx.de> Delivered-To: xx(a)mdn.de Received: from mailrelay1.xx.de (mailrelay.xx.de [212.114.153.xx]) by xx.de (Postfix) with ESMTP id D31B7A88F for <xx(a)mdn.de>; Wed, 18 Jun 2003 08:55:07 +0200 (CEST) Received: from ntmail1.xx.de (ntmail1.xx.de [212.114.155.xx]) html and stuff following... == end corrupted email One could read it, but its realy ugly. It seems, that if i delete a lot of messages in sequence (the morning spam), i can force to happen that problem earlier. It always hangs while deleting my spam. I like dovecot a lot, it was easy to install etc and works pretty fine except that it still seems to be in beta-stage. Now i would switch to courier/uw-imap until dovecot is ready, but the mbox format dovecot is using seems to be pretty uniq? I think, the users could keep their /var/mail/Username-INBOX, but wouldn't they loose their email folders? Is there any way to switch the software in a easy way? Or will there be a near future release which will fix that? What about the cvs version? Thanks for you help! Best regards Steven -- -------------------------------------------------- ----- Steven Enderle ----- m d n Huebner GmbH ---- ----- enderle(a)mdn.de ----- + 49 911 93 90 90 ----- ----- Digital Imaging & Documentmanagment ----- --------------------------------------------------

3 6

[Dovecot] 0.99.10 released
by Timo Sirainen 27 Jun '03

27 Jun '03

No bug reports since rc4, so here it is. v0.99.10 2003-06-26 Timo Sirainen <tss(a)iki.fi> * Default PAM service name changed to "dovecot". This means that if you're using PAM, you most likely have to do mv /etc/pam.d/imap /etc/pam.d/dovecot If you wish to keep using imap, see doc/auth.txt. * ~/rawlog directory changed to ~/dovecot.rawlog + Faster and better maildir synchronization. We support read-only maildirs and out-of-quota conditions are handled a lot better. dovecot-uidlist file still isn't out-of-quota-safe though, but you can keep it in another location where quota isn't checked. For example: default_mail_env = Maildir:~/Maildir: INDEX=/noquota/%u:CONTROL=/noquota/%u + Read-only mboxes are supported now. + Only NOOP and CHECK now always do a mailbox sync checking. Other commands sync max. once in 5 seconds, plus always from indexes. This should reduce I/O a bit. + All NUL characters are translated to ascii #128 before sending to client. RFC prohibits sending NULs and this is how UW-IMAP handles it as well. + Make ENVELOPE, BODY and BODYSTRUCTURE replies more compact by removing multiple LWSPs and translating TABs to spaces. RFC doesn't specifically require this, but this seems to be the wanted behaviour.. + Added ANONYMOUS SASL mechanism. + More flexible user chrooting configuration in home directories: "<chroot>/./<homedir>" + Added support for dynamically loadable IMAP/POP3 modules. See INSTALL file for more information. - Partial fetches were broken if mails had CR+LF linefeeds - SEARCH DELETED didn't return anything if all messages were deleted - OpenSSL support was broken in many installations because we were chrooted and it couldn't open /dev/urandom. - PAM: Giving wrong password blocked the whole process for two seconds. Now we create a new process for each check. - Lots of other smaller bugfixes and better error handling

2 1

[Dovecot] Dovecot and file permissions
by Spectron International, Inc. 26 Jun '03

26 Jun '03

I have some questions about some parameters in dovecot.conf, I have them configured as this: # User to use for the login process. The user must belong to a group where # only it has access, it's used to control access for authentication process # named sockets login_user=postfix # User to use for the process. Only shadow and pam authentication requires # roots, so use something else if possible auth_user=postfix It seems to me that all files created and used by Dovecot as long as they were created by the postfix user, they would be accesible. Right? My maildir shows as this: drw------- 6 postfix postdrop 65 Jun 26 09:40 Maildir so I guess postfix has full access to the maildir. Wouldn't setting login_user and auth_user to postfix let Dovecot access the Maildir? In the logs I get permission errors, if I chmod to 777 it works ok. This is what I get in the logs: Jun 26 09:24:23 backup imap(f_rojas): opendir(/opt/mail/f_rojas/Maildir) failed: Permission denied Jun 26 09:24:31 backup imap(f_rojas): stat(/opt/mail/f_rojas/Maildir/.Drafts) failed: Permission denied Jun 26 09:24:31 backup imap(f_rojas): lstat(/opt/mail/f_rojas/Maildir/cur) failed: Permission denied Jun 26 09:24:31 backup imap(f_rojas): stat(/opt/mail/f_rojas/Maildir/.Sent Items) failed: Permission denied Jun 26 09:24:31 backup imap(f_rojas): lstat(/opt/mail/f_rojas/Maildir/cur) failed: Permission denied Jun 26 09:26:52 backup imap(f_rojas): lstat(/opt/mail/f_rojas/Maildir/cur) failed: Permission denied Jun 26 10:06:09 backup imap(f_rojas): lstat(/opt/mail/f_rojas/Maildir/cur) failed: Permission denied Jun 26 10:06:15 backup imap(f_rojas): opendir(/opt/mail/f_rojas/Maildir) failed: Permission denied Jun 26 10:08:38 backup imap(f_rojas): opendir(/opt/mail/f_rojas/Maildir) failed: Permission denied Jun 26 10:13:03 backup imap(f_rojas): stat(/opt/mail/f_rojas/Maildir/.Sent Items) failed: Permission denied Faw

2 1

[Dovecot] mutt and dovecot
by Charlie Allom 26 Jun '03

26 Jun '03

Hi, I setup squirrelmail with dovecot and everything worked. I moved users Maildir directores to ~/Maildir/INBOX.directory/ and updated the .subscriptions file to something like ^INBOX.directory squirrelmail picks this up, but I can't seem to get mutt to read this style. In fact I would have assumed that dovecot would read ~/Maildir/ as INBOX and everything under it as it stands, without having to shuffle things about. Does anyone use mutt and have any words fo advice? I am not sure that courier-imapd does this sort of munging? C. -- charlie(a)rubberduck.com - Melbourne, Australia http://rubberduck.com/~yeled/ PGP: 0x14AA7941 || finger yeled(a)lazy.spodder.com

3 5

[Dovecot] 0.99.10-rc4
by Timo Sirainen 26 Jun '03

26 Jun '03

Again all the recently reported bugs fixed. Hopefully last rc. http://dovecot.procontrol.fi/rc/

1 0

[Dovecot] Help with new install on Mac OSX
by Roger Cates 26 Jun '03

26 Jun '03

Can anyone tell me what's going on and how I can fix it? bash-2.05a# make make all-recursive Making all in src Making all in lib make[3]: Nothing to be done for `all'. Making all in lib-settings make[3]: Nothing to be done for `all'. Making all in lib-charset make[3]: Nothing to be done for `all'. Making all in lib-mail make[3]: Nothing to be done for `all'. Making all in lib-imap make[3]: Nothing to be done for `all'. Making all in lib-index Making all in maildir make[4]: Nothing to be done for `all'. Making all in mbox make[4]: Nothing to be done for `all'. make[4]: Nothing to be done for `all-am'. Making all in lib-storage Making all in index Making all in maildir make[5]: Nothing to be done for `all'. Making all in mbox make[5]: Nothing to be done for `all'. make[5]: Nothing to be done for `all-am'. Making all in subscription-file make[4]: Nothing to be done for `all'. Making all in register gcc -DHAVE_CONFIG_H -I. -I. -I../../.. -I../../../src/lib -I../../../src/lib-imap -I../../../src/lib-storage -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -c mail-storage-register.c rm -f libstorage-register.a ar cru libstorage-register.a mail-storage-register.o ranlib libstorage-register.a make[4]: Nothing to be done for `all-am'. Making all in auth /bin/sh ../../libtool --mode=link gcc -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o dovecot-auth -export-dynamic auth-module.o db-ldap.o db-pgsql.o db-passwd-file.o login-connection.o main.o master-connection.o md5crypt.o mech.o mech-cyrus-sasl2.o mech-plain.o mech-digest-md5.o mycrypt.o passdb.o passdb-ldap.o passdb-passwd.o passdb-passwd-file.o passdb-pam.o passdb-shadow.o passdb-vpopmail.o passdb-pgsql.o password-scheme.o userdb.o userdb-ldap.o userdb-passwd.o userdb-passwd-file.o userdb-static.o userdb-vpopmail.o userdb-pgsql.o ../lib-settings/libsettings.a ../lib/liblib.a -lpam -L/usr/vpopmail/lib -lvpopmail -ldl gcc -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o dovecot-auth auth-module.o db-ldap.o db-pgsql.o db-passwd-file.o login-connection.o main.o master-connection.o md5crypt.o mech.o mech-cyrus-sasl2.o mech-plain.o mech-digest-md5.o mycrypt.o passdb.o passdb-ldap.o passdb-passwd.o passdb-passwd-file.o passdb-pam.o passdb-shadow.o passdb-vpopmail.o passdb-pgsql.o password-scheme.o userdb.o userdb-ldap.o userdb-passwd.o userdb-passwd-file.o userdb-static.o userdb-vpopmail.o userdb-pgsql.o ../lib-settings/libsettings.a ../lib/liblib.a -lpam -L/usr/vpopmail/lib -lvpopmail -ldl ld: Undefined symbols: ___udivdi3 ___umoddi3 restFP saveFP ___divdi3 make[3]: *** [dovecot-auth] Error 1 make[2]: *** [all-recursive] Error 1 make[1]: *** [all-recursive] Error 1 make: *** [all-recursive-am] Error 2 I am on Mac OS X 10.2.6 and the latest Dovecot release 0.99.9.1. Sincerely, Roger Cates

1 0

[Fwd: Re: [Dovecot] current cvs can't login]
by Timo Sirainen 26 Jun '03

26 Jun '03

So, evolution 1.4 upgrade lost my reply-to-list defaulting. Was supposed to send this here..

1 0

[Dovecot] a new bug
by Farkas Levente 25 Jun '03

25 Jun '03

hi, withe the latest cvs (and a few days ago) I've got a lot's of such process on the maiul server (and the number of such processes just growing:-(((). anyway the login problem disapear as I use dovecot as pam module name (both for impa and pop3). ------------------------------------------ root 18923 0.0 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] root 18925 0.0 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] root 18939 0.0 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] dovecot 18942 0.0 0.1 3420 1492 ? S 17:35 0:00 imap-login root 18943 0.0 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] root 18945 0.0 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] root 18947 0.0 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] dovecot 18950 0.0 0.1 3420 1492 ? S 17:35 0:00 imap-login dovecot 18953 0.3 0.1 3424 1488 ? S 17:35 0:00 imap-login root 18954 0.3 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] ------------------------------------------ -- Levente "Si vis pacem para bellum!"

2 1

[Dovecot] a new bug
by Farkas Levente 25 Jun '03

25 Jun '03

hi, withe the latest cvs (and a few days ago) I've got a lot's of such process on the maiul server (and the number of such processes just growing:-(((). anyway the login problem disapear as I use dovecot as pam module name (both for impa and pop3). ------------------------------------------ root 18923 0.0 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] root 18925 0.0 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] root 18939 0.0 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] dovecot 18942 0.0 0.1 3420 1492 ? S 17:35 0:00 imap-login root 18943 0.0 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] root 18945 0.0 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] root 18947 0.0 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] dovecot 18950 0.0 0.1 3420 1492 ? S 17:35 0:00 imap-login dovecot 18953 0.3 0.1 3424 1488 ? S 17:35 0:00 imap-login root 18954 0.3 0.0 0 0 ? Z 17:35 0:00 [dovecot-auth <defunct>] ------------------------------------------ -- Levente "Si vis pacem para bellum!"

1 0

[Dovecot] 0.99.10-rc3
by Timo Sirainen 25 Jun '03

25 Jun '03

Fixed all the reported bugs. Changed PAM service to "dovecot". Anything left? http://dovecot.procontrol.fi/rc/

4 4

[Dovecot] current cvs can't login
by Farkas Levente 25 Jun '03

25 Jun '03

hi, the current cvs don't allow to login with mozilla just such messages: imap-login: Jun 25 01:29:30 Info: Aborted login [192.168.0.50] imap-login: Jun 25 01:29:39 Info: Aborted login [192.168.0.50] even the today afternoon messages was correct (or at least able to login to the imap). -- Levente "Si vis pacem para bellum!"

3 5

[Dovecot] Bug? Folder tree confusion
by Dominic Marks 25 Jun '03

25 Jun '03

Can anyone else confirm this behaviour: o Open an IMAP mailbox o Make a new folder (foo/) o Make another new folder under foo (foo/bar) o Delete foo o Bar will go away and foo will remain (Outlook bug ?) o Try and delete foo, you won't be able to because Dovecot thinks foo is not empty and Outlook thinks it is. This is using Dovecot 0.99.10-rc2 and MS Outlook 2000. Don't know if a bug lies within here somewhere (not nessarily in Dovecot), just something I noticed while playing around. Thanks, -- Dominic <dom at cus.org.uk> <dominic.marks at npl.co.uk>

3 3

[Dovecot] Bug? High CPU Usage after nessus scan
by Jens Gutzeit 25 Jun '03

25 Jun '03

Hi all, I think I've found a Bug in current rc2 (same occours with rc1 and 0.99.9.1). I'am running dovecot with imap, pop3 and the ssl equivalents, after a nessus scan of my host with Bruteforce checks on IMAP, imap-login eats up lots of cpu. Before the scan: dovecot 22342 0.0 0.1 2320 636 ? SN Jun18 0:00 imap-login dovecot 5841 0.0 0.1 2320 692 ? SN Jun21 0:00 imap-login dovecot 5852 0.0 0.1 2320 692 ? SN Jun21 0:00 imap-login Looks wonderfull ;) After the scan: dovecot 20059 39.5 0.2 2340 820 ? RN 20:02 14:08 imap-login dovecot 20733 0.0 0.2 2320 804 ? SN 20:03 0:00 imap-login dovecot 20734 0.0 0.2 2320 804 ? SN 20:03 0:00 imap-login dovecot 20780 41.3 0.2 2340 820 ? RN 20:03 14:04 imap-login dovecot 20855 0.0 0.2 2320 804 ? SN 20:04 0:00 imap-login This was on my local test machine, the same occours on a production machine, both are running Debian GNU/Linux woody, one with Openssl and one with GNUTLS. Even 2 hours after the scan the CPU Usage is so high, I don't think this is normal behaviour? The logs didn't say anything during the test. If you need more information please tell me what data you need and I look for it. -- Best regards/freundliche Grüße Jens Gutzeit http://www.gutzeit.at

2 1