- dovecot - dovecot.org

[Dovecot] base dn and filter strings are concatenated
by Kazuo Moriwaka 14 Jan '05

14 Jan '05

Hello, When I set LDAP auth's search base dn, base dn and filter strings are concatenated. It cause filter cannot match any entries... I fixed it. Please check following patch. p.s. LDAP userdb/passdb's debug print have " fields=..." but it print junks. regards, -- Kazuo Moriwaka <moriwaka(a)valinux.co.jp> Index: src/auth/passdb-ldap.c =================================================================== RCS file: /home/cvs/dovecot/src/auth/passdb-ldap.c,v retrieving revision 1.21 diff -r1.21 passdb-ldap.c 161a162 > str_free(str); 162a164 > str = t_str_new(512); 172c174 < conn->set.base, conn->set.scope, filter, --- > base, conn->set.scope, filter, Index: src/auth/userdb-ldap.c =================================================================== RCS file: /home/cvs/dovecot/src/auth/userdb-ldap.c,v retrieving revision 1.25 diff -r1.25 userdb-ldap.c 174a175 > str_free(str); 175a177 > str = t_str_new(512); 187c189 < conn->set.base, conn->set.scope, filter, --- > base, conn->set.scope, filter,

1 0

[Dovecot] maildir and /var/spool/mail
by Steve Hickel 14 Jan '05

14 Jan '05

All, Not sure what to do next. Have imap working in that I can see messages in inbox. When I create a folder it won't create one. Looking at maillog shows that I don't have rights to folder /var/spool/mail/.sent or whatever folder I am trying to create. I have procmailrc and dovecot.conf point to /home/Maildir but for some reason something is tied to /var/spool/mail. Of course I am running FC3 and sendmail. Someone have any ideas as to what to try next? thanks in advance, Steve Hickel -- Steve Hickel <steve(a)korehicom.com> Kore/HiCom Corporation

6 8

[Dovecot] REQUEST: Different port(protocol) should be able to use a different certification.
by NAJIMA Hiroki 14 Jan '05

14 Jan '05

Hello, I want to use a different certificate for a different port(protocol). I searched http://wiki.dovecot.org/ and the mail archives. But such mechanism were not found. Could you implement a such mechanism? Or already implemented it, please teach how to do. I am assuming the following situations. MailAddress: [users](a)example.com SMTP Server: smtp.example.com POP3 Server: pop3.example.com IMAP Server: imap.example.com And pop3, imap, smtp are alias of real.example.com When use IMAPS, user connents imap.example.com POP3S, user connents pop3.example.com But one Certification file certificates only one FQDN. For example, dovecot.conf written that protocols = imaps pop3s ssl_cert_file = /etc/ssl/certs/imap.example.com.cert.pem ssl_key_file = /etc/ssl/private/imap.example.com.key.pem # imap.example.com.cert.pem's CN is imap.example.com In this pattern. MUA such as Thunderbird warn when connect pop3s because FQDN is different. I have an simple idea in this problem. dovecot.conf protocols = imaps pop3s - ssl_cert_file = /etc/ssl/certs/imap.example.com.cert.pem - ssl_key_file = /etc/ssl/private/imap.example.com.key.pem # certification for imaps + imaps_ssl_cert_file = /etc/ssl/certs/imap.example.com.cert.pem + imaps_ssl_key_file = /etc/ssl/private/imap.example.com.key.pem # certification for pop3s + pop3s_ssl_cert_file = /etc/ssl/certs/pop3.example.com.cert.pem + pop3s_ssl_key_file = /etc/ssl/private/pop3.example.com.key.pem Dovecot uses imaps_ssl_cert/key whenever MUA connects imaps port, uses pop3s_ssl_cert/key whenever MUA connected dovecot's pop3s port. Could you discuss it? #If it was already discussed, please show pointer(URL) that discussion. Regards. ----- NAJIMA Hiroki

2 2

[Dovecot] Virtual users vacation notices and forwards
by Del Stoliker 14 Jan '05

14 Jan '05

I'm in the process of moving from UW-IMAP to dovecot. I'm exploring the idea of using virtual users with dovecot and storing all user information in LDAP. While bouncing this idea off of a coworker, he asked me how we could handle vacation notices and forwards. Currently, we're using a procmail recipe to generate the vacation notice, and the sendmail .forward file for forwards (although most of our forwarding takes place elsewhere so the .forward file is rarely used). These are, of course, dependant on the user having an account on the mail server. How are those of you using virtual users supporting this functionality? Thanks!

1 0

[Dovecot] Strange behavior of mysql 4.1.8/9 + dovecot 1.0-test58~test61 on Fedora 3 x86_64 machine
by #LIU QI# 14 Jan '05

14 Jan '05

I've built & configured the dovecot to use mysql as the passdb and userdb. However, dovecot-auth always claims that the username/password of mysql server is wrong (access denied by mysql server) during the connection. When I set the password to NULL, it can successfully connect to mysql server! I am 100% sure that I typed the correct password (by copy & paste), and I can successfully use this username/password connect to mysql server by mysqladmin and other mysql clients. I even wrote a C program which also successfully connects to mysql server. Furthermore, even I want to use pam_mysql in dovecot, the pam library also claims that it cannot connect to mysql server, but pam_mysql can be successfully used in postfix (exactly the same pam configuration, the same database, the same table, and the same username/password). Can anybody give me a hint why? Thank you very very very very much.... Crying for help....

1 0

[Dovecot] Upgraded and authentication fails with LDAP
by Ren Galskap 14 Jan '05

14 Jan '05

FreeBSD 5.2.1 Upgraded to dovecot 0.99.12.1 After authentication failed, I also upgraded OpenLDAP to 2.2.19 Dovecot and OpenLDAP are now the most recent versions in the ports. I can access the LDAP info through the OpenLDAP client without a problem, so slapd seems to be working fine. Both dovecot and OpenLDAP worked fine before the upgrade. Any help will be appreciated, since several people would like to have their e-mail back soon. maillog Jan 13 18:51:02 kongemord imap-login: Internal login failure: rjhjr [127.0.0.1] Jan 13 18:51:02 kongemord dovecot: child 1320 (auth) killed with signal 6 messages Jan 13 18:51:02 kongemord kernel: pid 1320 (dovecot-auth), uid 1006: exited on signal 6 debug.log Jan 13 18:51:02 kongemord slapd[1103]: conn=14 op=1 SRCH base="ou=imap,dc=krig,dc=net" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=rjhjr))" Jan 13 18:51:02 kongemord slapd[1103]: conn=14 op=1 SRCH attr=uid userPassword Jan 13 18:51:02 kongemord slapd[1103]: conn=14 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 13 18:51:02 kongemord slapd[1103]: conn=14 fd=12 closed Jan 13 18:51:03 kongemord slapd[1103]: conn=15 fd=12 ACCEPT from IP=127.0.0.1:54 185 (IP=0.0.0.0:389) Jan 13 18:51:03 kongemord slapd[1103]: conn=15 op=0 BIND dn="cn=dovecot,ou=imap,dc=krig,dc=net" method=128 Jan 13 18:51:03 kongemord slapd[1103]: conn=15 op=0 BIND dn="cn=dovecot,ou=imap,dc=krig,dc=net" mech=SIMPLE ssf=0 Jan 13 18:51:03 kongemord slapd[1103]: conn=15 op=0 RESULT tag=97 err=0 text= dovecot-ldap.conf hosts = localhost dn = cn=dovecot,ou=imap,dc=krig,dc=net dnpass = <cleartext> ldap_version = 3 base = ou=imap, dc=krig, dc=net deref = never scope = subtree user_attrs = uid,homeDirectory,,,uidNumber,gidNumber user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid,userPassword pass_filter = (&(objectClass=posixAccount)(uid=%u)) default_pass_scheme = CRYPT user_global_uid = 1003 user_global_gid = 6 dovecot.conf base_dir = /var/run/dovecot/ protocols = imap imap_listen = * ssl_disable = yes login_chroot = yes login = imap login_executable = /usr/local/libexec/dovecot/imap-login login_user = dovecot verbose_proctitle = yes first_valid_uid = 1003 last_valid_uid = 1003 first_valid_gid = 6 last_valid_gid = 6 valid_chroot_dirs = /var/mail default_mail_env = maildir:/var/mail/%u/Maildir client_workarounds = oe6-fetch-no-newmail outlook-idle outlook-pop3-no-nuls mail_save_crlf = yes maildir_copy_with_hardlinks = yes imap_executable = /usr/local/libexec/dovecot/imap auth = default auth_mechanisms = plain auth_userdb = ldap /usr/local/etc/dovecot-ldap.conf auth_passdb = ldap /usr/local/etc/dovecot-ldap.conf auth_executable = /usr/local/libexec/dovecot/dovecot-auth auth_user = dovecot-auth auth_verbose = yes I had the following flags in the Makefile prior to make: --without-shadow --localstatedir=/var --with-ldap __________________________________ Do you Yahoo!? Yahoo! Mail - 250MB free storage. Do more. Manage less. http://info.mail.yahoo.com/mail_250

1 0

[Dovecot] 1.0-test61
by Timo Sirainen 13 Jan '05

13 Jan '05

http://dovecot.org/test/ - Fixes crashes with keyword code - Fixes some problems with parsing MIME multipart bodies - Fixes some problems with parsing mail addresses - Support %vars in LDAP base setting

1 0

[Dovecot] Test 57 -> Test 60
by Andrew Hutchings 13 Jan '05

13 Jan '05

I just tried upgrading one of our mail cluster servers to test60 from test57. We have dovecot connecting to 3 different MySQL tables in 3 sql conf files. The error seems to stem from this: Jan 13 14:57:59 svr21 dovecot: auth(sql8): file auth-client-connection.c: line 31 (auth_client_send): assertion failed: (conn->refcount > 1) After this the auth process gets killed with signal 6. The sql8 is the config in use at the time, but can be any of the 3. I take it this is the auth process not liking the 3 auth lookups (refcount > 1)? Regards Andrew -- Andrew Hutchings Systems Operator / Developer / NWLUG Admin (http://www.nwlug.org.uk) Netserve Consultants Ltd. http://www.domaincity.co.uk/

2 2

[Dovecot] default_ldap_settings' value
by Kazuo Moriwaka 13 Jan '05

13 Jan '05

Hello, When I tested LDAP auth dovecot-auth caught segv, and I found that auth_cache_parse_key() doesn't check query == NULL. I think db-ldap.c/default_ldap_settings.pass_filter should have non-null default value. Please check following patch. regards, -- Kazuo Moriwaka <moriwaka(a)valinux.co.jp> Index: db-ldap.c =================================================================== RCS file: /home/cvs/dovecot/src/auth/db-ldap.c,v retrieving revision 1.24 diff -r1.24 db-ldap.c 62c62 < MEMBER(pass_filter) NULL, --- > MEMBER(pass_filter) "(&(objectClass=posixAccount)(uid=%u))",

2 1

[Dovecot] Dovecot create mbox files. But why?
by Mirko Schulze 13 Jan '05

13 Jan '05

Hi there, my dovecot is now running normaly, but there is a small problem.... We want to to use the maildir format at the mailstorage. But the imap part of dovecot creates the for mbox specific files, but why? I created a passwd-file for a testuser. At this tme, there is only on line: test2@dev2.abc.de:ujAN28k8.5zV2:99:99:*:*:*:* in dovecot.conf are these interesting lines: auth_userdb = static uid=99 gid=99 home=/vrmd/pop3imap/links2mailboxes/%u/Maildir auth_passdb = passwd-file /vrmd/mailin/conf/pop3imapdb.passdb.txt I think, if a path ends of /Maildir dovecot will autodetect the maildir format. So what is wrong? Regards Mirko

2 1

[Dovecot] using separate authentication based on protocol
by Marius Stan 13 Jan '05

13 Jan '05

Hello, I wonder if it's possible to use a different query for authenticating users against the mysql db based on the protocol used: IMAP or POP3. This could come handy for not allowing my users who switched to IMAP from accidentally getting all their mail through a POP3 connection. Using dovecot-0.99.10 here. Marius

2 1

[Dovecot] imap-dovecot accept only from localhost
by Mirko Schulze 13 Jan '05

13 Jan '05

Hi, i want to configure the imap (not imaps) server to accept connections from everywhere. I can't find a command to configure dovecot in this way. Can anybody help me? Thanx Mirko

2 1

[Dovecot] How to configure auth_userdb and auth_passwd?
by Mirko Schulze 13 Jan '05

13 Jan '05

Hi! i want to configure dovecot to use a modified passwdfile. A linie in this file looks like this: "username: <TAB> crypted_password" how i have to use the auth_userdb and auth_passwd command? Now i have: auth_userdb = passwd-file /path/file auth_passwd = passwd-file /path/file (same file) dovecot is starting normaly (i think) but a authentification test via telnet doesnt work. Any suggestions? Thanx a lot. Mirko

2 1

[Dovecot] Maildir configure problem
by Mirko Schulze 13 Jan '05

13 Jan '05

Hi, i want to configure the maildir support. We are using a "multi-level" maildir, so i'm not sure about the default_mail_env command. the Maildir for the user testuser1(a)dev.test.de is located here: .../mailboxes /t (first char of the top-domainname) /te (the first both chars of the top-domainame /test.de (the top domain) /dev (the subdomain) /testuser1 (the username) /Maildir actually i'm using this command (I know, thats not complete *smile*): default_mail_env = maildir:/............./mailboxes/%1d/%2d/%d/%n/Maildir How can i name the subdomain? And is %d only the topdomain, like "test.de" in my example? Thanx a lot for your help Regards Mirko

2 1

[Dovecot] Bug report for test-60
by Juergen Daubert 12 Jan '05

12 Jan '05

I got the following with mbox and test-60: Jan 12 20:11:17 ser dovecot: IMAP(juergen): file mail-index-transaction.c: line 57 (mail_keyword_transaction_free): assertion failed: (kt->keywords->kt == NULL) Jan 12 20:11:17 ser dovecot: child 24762 (imap) killed with signal 6 but only if I try to move/copy a larger number of messages, around >30, from on folder to another. MUA: mutt, no other problems so far. Greetings Juergen -- Juergen Daubert | mailto:jue@jue.li Korb, Germany | http://jue.li/crux

2 1

[Dovecot] delivery to incorrect user
by jpollara＠lawnchair.net 12 Jan '05

12 Jan '05

Yesterday a user reported to me that she received a bunch of emails that were not addressed to her. I'm using dovecot version 0.99.11 along with postfix and amavisd-new. I don't know how this happened because each mail file in /var/mail/ is only readable by the user. Has anyone ever heard of this happening before?

6 10

RE : [Dovecot] dovecot + mysql (complements)
by MAGALLON Lionel 12 Jan '05

12 Jan '05

Hi, OK, it works now. Thanks -----Message d'origine----- De : dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] De la part de mat(a)reynerie.org Envoyé : mercredi 12 janvier 2005 19:48 À : dovecot(a)dovecot.org Objet : Re: [Dovecot] dovecot + mysql (complements) On Wed, Jan 12, 2005 at 07:26:39PM +0100, MAGALLON Lionel wrote: > Hi, Hi, > I've done some supplementary tests with tcpdump. > Apparently, with a login containing the % character, > there's no query send to MySQL. > > Do you know if the % character is filtered by dovecot ? with my config yes, see auth_username_chars in your dovecot.conf -- Matthieu Clavier <mat(a)reynerie.org> Sola dosis facit venenum - Paracelse (1493-1541)

1 0

[Dovecot] dovecot + mysql (complements)
by MAGALLON Lionel 12 Jan '05

12 Jan '05

Hi, I've done some supplementary tests with tcpdump. Apparently, with a login containing the % character, there's no query send to MySQL. Do you know if the % character is filtered by dovecot ? Thanks

2 1

[Dovecot] dovecot + mysql
by MAGALLON Lionel 12 Jan '05

12 Jan '05

Hi, I've got a problem of authenticating users when they've got the % character in their login name. It always returns -ERR Authentication failed. I've done some tests (explained below). 1. the mysql answer to SELECT password FROM users WHERE uid = 'foo%domain.com' is 123 2. the mysql answer to SELECT password FROM users WHERE uid = 'foo(a)domain.com' is 123 3. with a password_query like this : password_query = SELECT password FROM users WHERE uid = '%u' it works fine with foo(a)domain.com but not with foo%domain.com 4. everybody can login with password 123 with a password_query like this : password_query = SELECT password FROM users WHERE uid = 'foo%domain.com' => I don't know what's done with the % character when passed to the %u variable. Can somebody enlight me ? Thanks a lot.

1 0

[Dovecot] link() failed / maildir_copy_with_hardlinks=no / maildir-save.c.patch
by David C. Reeve 12 Jan '05

12 Jan '05

Hi, I have recently been having a small problem with Dovecot (dovecot-0.99.13) not honouring the "maildir_copy_with_hardlinks" config option, specifically when it is set to "no". This results in errors to the syslog looking like: Jan 12 09:59:21 imap imap(dave): link(/afs/.../tmp/1105541958.P1137Q0M41428.imap, /afs/.../new/1105541958.P1137Q0M41428.imap:2,S) failed in maildir_copy: Invalid cross-device link The supplied patch will, when maildir_copy_with_hardlinks=no, rename files inside maildir's instead of hard linking them, hence honouring the configuration option. A word of caution! This all relies on the filenames in maildir being unique (which they should be, and this shouldn't be a problem, but..). It is possible (although unlikely) that renaming the file could destroy a file in the target directory; no checking is done to assure this is not the case! (If you are paranoid you can always write another patch). Yes I am using AFS (openafs specifically) to hold my maildir's, which does not support hard links. However AFS assures that rename operations are atomic so we can use that instead (this may be the case for other filling systems that do not allow hard links). Hope that helps some one else ;) Dave -- David C. Reeve <David.Reeve(a)pnsol.com> Predictable Network Solutions

1 0

[Dovecot] dovecot-auth zombie procs
by jpollara＠lawnchair.net 12 Jan '05

12 Jan '05

Hi, every now and then it seems as if dovecot-auth zombie's out. When this happens nobody can log in. If I kill all the dovecot-auth processes and then restart dovecot everything seems to work again. I'm authenticating against an openldap server on a debian sarge box so I wonder if this has anything to do with it. All my clients are using Outlook. Any help would be greatly appreciated. Thanks. Josh

2 5

[Dovecot] Re: maildir and /var/spool/mail
by C.Lee Taylor 12 Jan '05

12 Jan '05

Greetings ... > Not sure what to do next. Have imap working in that I can see messages > in inbox. When I create a folder it won't create one. Looking at maillog > shows that I don't have rights to folder /var/spool/mail/.sent or > whatever folder I am trying to create. I have procmailrc and > dovecot.conf point to /home/Maildir but for some reason something is > tied to /var/spool/mail. Of course I am running FC3 and sendmail. > Someone have any ideas as to what to try next? I'm not sure of the rest of the history with this, but my FC3 installation has [root@nasrec etc]# cat /etc/procmailrc PATH=/bin:/usr/bin:/usr/bin MAILDIR=$HOME/mail DEFAULT=$HOME/Maildir/ #VERBOSE=on #LOGFILE=/var/log/procmail [root@nasrec etc]# ll /etc/procmailrc -rw-r--r-- 1 root root 109 May 2 2004 procmailrc I do remember having to delete the old mail box of one of my installs, where I had started using dovecot before putting in my procmailrc file ... I stop dovecot, imap* and pop3* ... Removed all the wrong mailboxs both in user folder and in /var/spool/mail ... Ran mail -s Test user Type a message here < Press Control-D here > Message gets delieverd in maildir format, start dovecot and all seemed well. I hope this helps. Mailed Lee

1 0

[Dovecot] Howto host multiple domains
by Mesut Bayrak 11 Jan '05

11 Jan '05

i dont know howto host multiple domains with dovecot are there any way to make it ?

2 1

[Dovecot] can not connect to dovecot using ssl
by Jay Gustafson 11 Jan '05

11 Jan '05

I can connect using imap, but when I try using ssl (imaps) I get a can not connect to server error. I have in my dovecot.conf protocols = imaps imap imap_listen = * imaps_listen = * I DO get a connection when I telnet to port 993 of my server (both localhost and remote work). Any help much appreciated.. Jay

2 1

[Dovecot] Re: delivery agent in 1.0?
by Apostolos Papayanakis 11 Jan '05

11 Jan '05

On Thu, 23 Dec 2004 Geo Carncross wrote: > How about a dovecot-inject tool that writes a message to whatever is > considered the $LOCAL user? It wouldn't have to do much but write the > message (safely) and update indexes -- something dovecot already has to > do. I hope there will soon be a plain delivering tool for dovecot 1.x. I could use it right away as the delivering step with procmail, which would run it under recipient's uid and context (all recipients are real unix users in my case). Without a local delivery agent, dovecot will always seem slower than its rivals when opening INBOXes with new mails, especially large ones, because of index creation delays. A good LMTP implementation has its benefits, but many people have to do without it. -- Apostolis Papayanakis apap(a)ccf.auth.gr, 2310-998416 On Thu, 23 Dec 2004 dovecot-request(a)dovecot.org wrote: > Date: Thu, 23 Dec 2004 11:44:15 -0500 > From: Geo Carncross <geocar-dovecot(a)internetconnection.net> > Subject: Re: [Dovecot] delivery agent in 1.0? > To: Timo Sirainen <tss(a)iki.fi> > Cc: " Branko F. Gra?nar " <bfg(a)noviforum.si>, dovecot(a)dovecot.org > Message-ID: <1103820255.3898.126.camel(a)midget.intranet> > Content-Type: text/plain; charset=iso-8859-2 > > On Thu, 2004-12-23 at 17:52 +0200, Timo Sirainen wrote: > > On 23.12.2004, at 16:06, Branko F. Graθnar wrote: > > > > > Is there any plan to include delivery agent in 1.x? > > > > I'll need to implement one in next few months, so yes. > > > > Hmm. This brings to my mind again that it would need Sieve, and mvmf > > might be a good base for it, but it's still not open source (Mark? :) > > It may be difficult to please everyone. I could have use for [some > elements of] a dovecot-lda but zero use for sieve... > > > > > I would be very happy, if there would be lmtp delivery agent included > > > with dovecot 1.x... This would make creating large mailsystem cluster > > > creation very simple + indexes would be always up2date. > > > > I'm not sure when I'll get around to implementing LMTP server. It's > > actually a bit annoying to implement because it needs to be able to > > deliver mail into multiple accounts, and if each one stores mails with > > different UID, it needs to either run as root (bad) or launch multiple > > processes and do IPC with them. > > How about a dovecot-inject tool that writes a message to whatever is > considered the $LOCAL user? It wouldn't have to do much but write the > message (safely) and update indexes -- something dovecot already has to > do. > > That way: > > * People who do delivery without LMTP baggage aren't treated as second- > class citizens. > > * Sieve implementations merely have to treat "keep" and "fileinto" as > subprocesses. > > * LMTP implementations can do the work they've already have to do > (regarding mapping email addresses to local users) and simply hook into > the sieve processor or the dovecot-inject, or anything else the > administrator/user likes. > > Formally, dovecot-inject would need the following information: > > 1. the envelope recipient ($RECIPIENT) > 2. the envelope sender/return-path/errors-to-address ($SENDER) > 3. the IMAP folder to write the message to (argv[1]) > > On systems with shared-uids, dovecot-inject would also need the concept > of the "localpart" of the address thats applicable. dovecot already > needs to know this in order to ACCESS the maildrop. ($LOCAL) > > This would keep things very easy to integrate without resorting to > shared libraries, "plugin system" nonsense, or forcing people to make > extra levels of indirection (lmtpclient) in order to benefit from pre- > login indexing... > > > > I suppose I'd implement it so that the actual LMTP talking would be > > done in a process very similar to imap/pop3-login processes, ie. > > completely unprivileged. Then it would tell master process to launch > > delivery agent processes to specific users, and those delivery agents > > then would get the mail from lmtp process via .. um. read-only shared > > memory + semaphores might be better than just copying the data over > > pipes/sockets? > > blah blah blah... > >

2 2