- dovecot - dovecot.org

[Dovecot] pop3s fails, imaps works great
by Darren David 08 Nov '03

08 Nov '03

hey all- i'm running dovecot-0.99.10p2 on OpenBSD 3.4-snapshot (installed from ports). i have had 0 problems with imaps -- it's been running like a charm! however, i'm trying to get pop3s set up for some of my users, but i can't seem to connect from ANY client. in /etc/dovecot.conf, i've got: protocols = imaps pop3s and i've also got pop3s_listen set up with the same IP as imaps. i'm using vpopmail for auth. nmap shows that port 995 is open, and netstat does show an established connection to pop3s when i attempt to connect, but i see no activity in the dovecot log, and the client just churns and churns and eventually i have to quit it since i get no response. any ideas what i could have wrong, or how to test? thanks in advance, darren david

1 0

[Dovecot] PATCH: make local IP address available to auth modules
by Matthew Reimer 04 Nov '03

04 Nov '03

The attached patch makes the local IP address to which the client connected available to the authentication modules; i.e., the local IP address is available for substitution as %i for the mysql and pgsql modules. We needed this feature to support thousands of our legacy accounts which are authenticated by username/local_part (not the full email address) and IP address (one per domain). Timo, would this be acceptable to commit? One further improvement would be to make the remote IP address available as well, in case one wanted to implement a tcpwrapper-like functionality. Matt diff -u -r work.patched/dovecot-0.99.10/src/auth/auth-login-interface.h work/dovecot-0.99.10/src/auth/auth-login-interface.h --- work.patched/dovecot-0.99.10/src/auth/auth-login-interface.h Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/auth-login-interface.h Fri Oct 24 13:57:18 2003 @@ -1,6 +1,8 @@ #ifndef __AUTH_LOGIN_INTERFACE_H #define __AUTH_LOGIN_INTERFACE_H +#include "network.h" + /* max. size for auth_login_request_continue.data[] */ #define AUTH_LOGIN_MAX_REQUEST_DATA_SIZE 4096 @@ -47,6 +49,7 @@ struct auth_login_request_new { enum auth_login_request_type type; /* AUTH_LOGIN_REQUEST_NEW */ unsigned int id; /* unique ID for the request */ + struct ip_addr ip_local; enum auth_mech mech; enum auth_protocol protocol; @@ -56,6 +59,7 @@ struct auth_login_request_continue { enum auth_login_request_type type; /* AUTH_LOGIN_REQUEST_CONTINUE */ unsigned int id; + struct ip_addr ip_local; size_t data_size; /* unsigned char data[]; */ diff -u -r work.patched/dovecot-0.99.10/src/auth/master-connection.c work/dovecot-0.99.10/src/auth/master-connection.c --- work.patched/dovecot-0.99.10/src/auth/master-connection.c Fri Aug 22 17:56:18 2003 +++ work/dovecot-0.99.10/src/auth/master-connection.c Fri Oct 24 13:57:35 2003 @@ -133,8 +133,9 @@ } send_reply(&failure_reply, sizeof(failure_reply), request->tag); } else { - userdb->lookup(auth_request->user, userdb_callback, - POINTER_CAST(request->tag)); + userdb->lookup(auth_request->user, + net_ip2addr(&auth_request->ip_local), + userdb_callback, POINTER_CAST(request->tag)); mech_request_free(login_conn, auth_request, request->id); } } diff -u -r work.patched/dovecot-0.99.10/src/auth/mech.c work/dovecot-0.99.10/src/auth/mech.c --- work.patched/dovecot-0.99.10/src/auth/mech.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/mech.c Fri Oct 24 13:57:51 2003 @@ -97,6 +97,7 @@ auth_request->created = ioloop_time; auth_request->conn = conn; auth_request->id = request->id; + auth_request->ip_local = request->ip_local; auth_request->protocol = request->protocol; hash_insert(conn->auth_requests, POINTER_CAST(request->id), diff -u -r work.patched/dovecot-0.99.10/src/auth/mech.h work/dovecot-0.99.10/src/auth/mech.h --- work.patched/dovecot-0.99.10/src/auth/mech.h Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/mech.h Fri Oct 24 13:58:02 2003 @@ -14,6 +14,7 @@ struct login_connection *conn; unsigned int id; + struct ip_addr ip_local; time_t created; enum auth_protocol protocol; diff -u -r work.patched/dovecot-0.99.10/src/auth/passdb-ldap.c work/dovecot-0.99.10/src/auth/passdb-ldap.c --- work.patched/dovecot-0.99.10/src/auth/passdb-ldap.c Thu Mar 20 09:55:57 2003 +++ work/dovecot-0.99.10/src/auth/passdb-ldap.c Fri Oct 24 13:58:20 2003 @@ -145,7 +145,8 @@ passdb_ldap_conn->attr_names[ATTR_VIRTUAL_USER], user); } else { str = t_str_new(512); - var_expand(str, conn->set.pass_filter, user, NULL); + var_expand(str, conn->set.pass_filter, user, NULL, + net_ip2addr(&auth_request->ip_local)); filter = str_c(str); } diff -u -r work.patched/dovecot-0.99.10/src/auth/passdb-mysql.c work/dovecot-0.99.10/src/auth/passdb-mysql.c --- work.patched/dovecot-0.99.10/src/auth/passdb-mysql.c Fri Aug 29 17:47:24 2003 +++ work/dovecot-0.99.10/src/auth/passdb-mysql.c Fri Oct 24 13:58:31 2003 @@ -109,7 +109,8 @@ str = t_str_new(512); var_expand(str, conn->set.password_query, - str_escape(auth_request->user), NULL); + str_escape(auth_request->user), NULL, + net_ip2addr(&auth_request->ip_local)); query = str_c(str); mysql_request->callback = mysql_handle_request; diff -u -r work.patched/dovecot-0.99.10/src/auth/passdb-pgsql.c work/dovecot-0.99.10/src/auth/passdb-pgsql.c --- work.patched/dovecot-0.99.10/src/auth/passdb-pgsql.c Fri Apr 4 06:17:25 2003 +++ work/dovecot-0.99.10/src/auth/passdb-pgsql.c Fri Oct 24 14:01:08 2003 @@ -105,7 +105,8 @@ str = t_str_new(512); var_expand(str, conn->set.password_query, - str_escape(auth_request->user), NULL); + str_escape(auth_request->user), NULL, + net_ip2addr(&auth_request->ip_local)); query = str_c(str); pgsql_request->callback = pgsql_handle_request; diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-ldap.c work/dovecot-0.99.10/src/auth/userdb-ldap.c --- work.patched/dovecot-0.99.10/src/auth/userdb-ldap.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/userdb-ldap.c Fri Oct 24 15:46:21 2003 @@ -142,8 +142,8 @@ t_pop(); } -static void userdb_ldap_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void userdb_ldap_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct ldap_connection *conn = userdb_ldap_conn->conn; struct userdb_ldap_request *request; @@ -156,7 +156,7 @@ userdb_ldap_conn->attr_names[ATTR_VIRTUAL_USER], user); } else { str = t_str_new(512); - var_expand(str, conn->set.user_filter, user, NULL); + var_expand(str, conn->set.user_filter, user, NULL, ip_local); filter = str_c(str); } diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-mysql.c work/dovecot-0.99.10/src/auth/userdb-mysql.c --- work.patched/dovecot-0.99.10/src/auth/userdb-mysql.c Fri Oct 24 15:07:12 2003 +++ work/dovecot-0.99.10/src/auth/userdb-mysql.c Fri Oct 24 14:58:08 2003 @@ -115,8 +115,8 @@ } } -static void userdb_mysql_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void userdb_mysql_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct mysql_connection *conn = userdb_mysql_conn->conn; struct userdb_mysql_request *request; @@ -124,7 +124,8 @@ string_t *str; str = t_str_new(512); - var_expand(str, conn->set.user_query, str_escape(user), NULL); + var_expand(str, conn->set.user_query, str_escape(user), NULL, + ip_local); query = str_c(str); request = i_malloc(sizeof(struct userdb_mysql_request) + strlen(user)); diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-passwd-file.c work/dovecot-0.99.10/src/auth/userdb-passwd-file.c --- work.patched/dovecot-0.99.10/src/auth/userdb-passwd-file.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/userdb-passwd-file.c Fri Oct 24 15:28:09 2003 @@ -11,8 +11,8 @@ struct passwd_file *userdb_pwf = NULL; -static void passwd_file_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void passwd_file_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct user_data data; struct passwd_user *pu; diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-passwd.c work/dovecot-0.99.10/src/auth/userdb-passwd.c --- work.patched/dovecot-0.99.10/src/auth/userdb-passwd.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/userdb-passwd.c Fri Oct 24 15:28:26 2003 @@ -10,8 +10,8 @@ #include <pwd.h> -static void passwd_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void passwd_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct user_data data; struct passwd *pw; diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-pgsql.c work/dovecot-0.99.10/src/auth/userdb-pgsql.c --- work.patched/dovecot-0.99.10/src/auth/userdb-pgsql.c Sun May 18 07:26:28 2003 +++ work/dovecot-0.99.10/src/auth/userdb-pgsql.c Fri Oct 24 15:45:51 2003 @@ -84,8 +84,8 @@ } } -static void userdb_pgsql_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void userdb_pgsql_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct pgsql_connection *conn = userdb_pgsql_conn->conn; struct userdb_pgsql_request *request; @@ -93,7 +93,7 @@ string_t *str; str = t_str_new(512); - var_expand(str, conn->set.user_query, str_escape(user), NULL); + var_expand(str, conn->set.user_query, str_escape(user), NULL, ip_local); query = str_c(str); request = i_malloc(sizeof(struct userdb_pgsql_request) + strlen(user)); diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-static.c work/dovecot-0.99.10/src/auth/userdb-static.c --- work.patched/dovecot-0.99.10/src/auth/userdb-static.c Wed Feb 19 18:46:51 2003 +++ work/dovecot-0.99.10/src/auth/userdb-static.c Fri Oct 24 15:30:40 2003 @@ -16,8 +16,8 @@ static gid_t static_gid; static char *static_home_template; -static void static_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void static_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { struct user_data data; string_t *str; @@ -29,7 +29,7 @@ data.virtual_user = data.system_user = user; str = t_str_new(256); - var_expand(str, static_home_template, user, NULL); + var_expand(str, static_home_template, user, NULL, ip_local); data.home = str_c(str); callback(&data, context); diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb-vpopmail.c work/dovecot-0.99.10/src/auth/userdb-vpopmail.c --- work.patched/dovecot-0.99.10/src/auth/userdb-vpopmail.c Thu Mar 20 09:46:33 2003 +++ work/dovecot-0.99.10/src/auth/userdb-vpopmail.c Fri Oct 24 15:29:24 2003 @@ -46,8 +46,8 @@ #ifdef USERDB_VPOPMAIL -static void vpopmail_lookup(const char *user, userdb_callback_t *callback, - void *context) +static void vpopmail_lookup(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context) { char vpop_user[VPOPMAIL_LIMIT], vpop_domain[VPOPMAIL_LIMIT]; struct vqpasswd *vpw; diff -u -r work.patched/dovecot-0.99.10/src/auth/userdb.h work/dovecot-0.99.10/src/auth/userdb.h --- work.patched/dovecot-0.99.10/src/auth/userdb.h Fri Aug 22 13:07:53 2003 +++ work/dovecot-0.99.10/src/auth/userdb.h Fri Oct 24 15:47:11 2003 @@ -17,8 +17,8 @@ void (*init)(const char *args); void (*deinit)(void); - void (*lookup)(const char *user, userdb_callback_t *callback, - void *context); + void (*lookup)(const char *user, const char *ip_local, + userdb_callback_t *callback, void *context); }; extern struct userdb_module *userdb; diff -u -r work.patched/dovecot-0.99.10/src/imap-login/client.c work/dovecot-0.99.10/src/imap-login/client.c --- work.patched/dovecot-0.99.10/src/imap-login/client.c Wed Jun 25 20:02:04 2003 +++ work/dovecot-0.99.10/src/imap-login/client.c Fri Oct 24 14:21:46 2003 @@ -49,7 +49,7 @@ if (!verbose_proctitle || !process_per_connection) return; - addr = net_ip2addr(&client->common.ip); + addr = net_ip2addr(&client->common.ip_remote); if (addr == NULL) addr = "??"; @@ -126,7 +126,7 @@ client->common.io = NULL; } - fd_ssl = ssl_proxy_new(client->common.fd, &client->common.ip); + fd_ssl = ssl_proxy_new(client->common.fd, &client->common.ip_remote); if (fd_ssl != -1) { client->tls = TRUE; client_set_title(client); @@ -338,7 +338,8 @@ } } -struct client *client_create(int fd, struct ip_addr *ip, int ssl) +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl) { struct imap_client *client; @@ -357,7 +358,8 @@ client->refcount = 1; client->tls = ssl; - client->common.ip = *ip; + client->common.ip_remote = *ip_remote; + client->common.ip_local = *ip_local; client->common.fd = fd; client_open_streams(client, fd); @@ -439,7 +441,7 @@ { const char *addr; - addr = net_ip2addr(&client->common.ip); + addr = net_ip2addr(&client->common.ip_remote); if (addr == NULL) addr = "??"; diff -u -r work.patched/dovecot-0.99.10/src/imap-login/client.h work/dovecot-0.99.10/src/imap-login/client.h --- work.patched/dovecot-0.99.10/src/imap-login/client.h Tue Mar 4 19:43:04 2003 +++ work/dovecot-0.99.10/src/imap-login/client.h Fri Oct 24 14:23:02 2003 @@ -30,7 +30,8 @@ unsigned int destroyed:1; }; -struct client *client_create(int fd, struct ip_addr *ip, int ssl); +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl); void client_destroy(struct imap_client *client, const char *reason); void client_ref(struct imap_client *client); diff -u -r work.patched/dovecot-0.99.10/src/lib/var-expand.c work/dovecot-0.99.10/src/lib/var-expand.c --- work.patched/dovecot-0.99.10/src/lib/var-expand.c Sun Jan 26 19:27:51 2003 +++ work/dovecot-0.99.10/src/lib/var-expand.c Fri Oct 17 13:12:51 2003 @@ -5,7 +5,7 @@ #include "var-expand.h" void var_expand(string_t *dest, const char *str, - const char *user, const char *home) + const char *user, const char *home, const char *ip) { const char *var; unsigned int width; @@ -36,6 +36,9 @@ case 'd': var = strchr(user, '@'); if (var != NULL) var++; + break; + case 'i': + var = ip; break; default: str_append_c(dest, '%'); diff -u -r work.patched/dovecot-0.99.10/src/lib/var-expand.h work/dovecot-0.99.10/src/lib/var-expand.h --- work.patched/dovecot-0.99.10/src/lib/var-expand.h Sun Jan 26 19:27:51 2003 +++ work/dovecot-0.99.10/src/lib/var-expand.h Fri Oct 17 13:13:08 2003 @@ -6,8 +6,9 @@ %u user or user@domain %h home %n user - %d domain */ + %d domain + %i ip */ void var_expand(string_t *dest, const char *str, - const char *user, const char *home); + const char *user, const char *home, const char *ip); #endif diff -u -r work.patched/dovecot-0.99.10/src/login-common/auth-connection.c work/dovecot-0.99.10/src/login-common/auth-connection.c --- work.patched/dovecot-0.99.10/src/login-common/auth-connection.c Mon May 26 10:27:13 2003 +++ work/dovecot-0.99.10/src/login-common/auth-connection.c Fri Oct 24 14:47:17 2003 @@ -325,6 +325,7 @@ auth_request.protocol = protocol; auth_request.mech = request->mech; auth_request.id = request->id; + auth_request.ip_local = ((struct client *) request->context)->ip_local; if (o_stream_send(request->conn->output, &auth_request, sizeof(auth_request)) < 0) { errno = request->conn->output->stream_errno; @@ -342,6 +343,7 @@ /* send continued request to auth */ auth_request.type = AUTH_LOGIN_REQUEST_CONTINUE; auth_request.id = request->id; + auth_request.ip_local = ((struct client *) request->context)->ip_local; auth_request.data_size = data_size; if (o_stream_send(request->conn->output, &auth_request, diff -u -r work.patched/dovecot-0.99.10/src/login-common/client-common.h work/dovecot-0.99.10/src/login-common/client-common.h --- work.patched/dovecot-0.99.10/src/login-common/client-common.h Tue Mar 4 19:43:04 2003 +++ work/dovecot-0.99.10/src/login-common/client-common.h Fri Oct 24 14:23:58 2003 @@ -5,7 +5,8 @@ #include "master.h" struct client { - struct ip_addr ip; + struct ip_addr ip_remote; + struct ip_addr ip_local; int fd; struct io *io; @@ -17,7 +18,8 @@ /* ... */ }; -struct client *client_create(int fd, struct ip_addr *ip, int ssl); +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl); unsigned int clients_get_count(void); void clients_notify_auth_process(void); diff -u -r work.patched/dovecot-0.99.10/src/login-common/main.c work/dovecot-0.99.10/src/login-common/main.c --- work.patched/dovecot-0.99.10/src/login-common/main.c Sun Jun 22 18:09:48 2003 +++ work/dovecot-0.99.10/src/login-common/main.c Fri Oct 24 14:25:02 2003 @@ -75,28 +75,30 @@ static void login_accept(void *context __attr_unused__) { - struct ip_addr ip; + struct ip_addr ip_remote, ip_local; int fd; - fd = net_accept(LOGIN_LISTEN_FD, &ip, NULL); + fd = net_accept(LOGIN_LISTEN_FD, &ip_remote, NULL); if (fd < 0) { if (fd < -1) i_fatal("accept() failed: %m"); return; } + net_getsockname(fd, &ip_local, NULL); + if (process_per_connection) main_close_listen(); - (void)client_create(fd, &ip, FALSE); + (void)client_create(fd, &ip_remote, &ip_local, FALSE); } static void login_accept_ssl(void *context __attr_unused__) { - struct ip_addr ip; + struct ip_addr ip_remote, ip_local; int fd, fd_ssl; - fd = net_accept(LOGIN_SSL_LISTEN_FD, &ip, NULL); + fd = net_accept(LOGIN_SSL_LISTEN_FD, &ip_remote, NULL); if (fd < 0) { if (fd < -1) i_fatal("accept() failed: %m"); @@ -106,11 +108,12 @@ if (process_per_connection) main_close_listen(); - fd_ssl = ssl_proxy_new(fd, &ip); + fd_ssl = ssl_proxy_new(fd, &ip_remote); if (fd_ssl == -1) net_disconnect(fd); - else - (void)client_create(fd_ssl, &ip, TRUE); + + net_getsockname(fd_ssl, &ip_local, NULL); + (void)client_create(fd_ssl, &ip_remote, &ip_local, TRUE); } static void open_logfile(const char *name) @@ -219,7 +222,7 @@ int main(int argc __attr_unused__, char *argv[], char *envp[]) { const char *name, *group_name; - struct ip_addr ip; + struct ip_addr ip_remote, ip_local; int i, fd = -1, master_fd = -1; is_inetd = getenv("DOVECOT_MASTER") == NULL; @@ -257,7 +260,7 @@ main_init(); if (is_inetd) { - if (net_getsockname(1, &ip, NULL) < 0) { + if (net_getsockname(1, &ip_remote, NULL) < 0) { i_fatal("%s can be started only through dovecot " "master process, inetd or equilevant", argv[0]); } @@ -265,7 +268,7 @@ fd = 1; for (i = 1; i < argc; i++) { if (strcmp(argv[i], "--ssl") == 0) { - fd = ssl_proxy_new(fd, &ip); + fd = ssl_proxy_new(fd, &ip_remote); if (fd == -1) i_fatal("SSL initialization failed"); } else if (strncmp(argv[i], "--group=", 8) != 0) @@ -276,8 +279,10 @@ closing_down = TRUE; } - if (fd != -1) - (void)client_create(fd, &ip, TRUE); + if (fd != -1) { + net_getsockname(fd, &ip_local, NULL); + (void)client_create(fd, &ip_remote, &ip_local, TRUE); + } io_loop_run(ioloop); main_deinit(); diff -u -r work.patched/dovecot-0.99.10/src/login-common/master.c work/dovecot-0.99.10/src/login-common/master.c --- work.patched/dovecot-0.99.10/src/login-common/master.c Tue Mar 4 19:43:04 2003 +++ work/dovecot-0.99.10/src/login-common/master.c Fri Oct 24 14:25:57 2003 @@ -44,7 +44,7 @@ req.tag = client->fd; req.auth_pid = auth_pid; req.auth_id = auth_id; - req.ip = client->ip; + req.ip = client->ip_remote; if (fd_send(master_fd, client->fd, &req, sizeof(req)) != sizeof(req)) i_fatal("fd_send(%d) failed: %m", client->fd); diff -u -r work.patched/dovecot-0.99.10/src/master/mail-process.c work/dovecot-0.99.10/src/master/mail-process.c --- work.patched/dovecot-0.99.10/src/master/mail-process.c Fri Aug 22 18:04:27 2003 +++ work/dovecot-0.99.10/src/master/mail-process.c Fri Oct 17 13:25:54 2003 @@ -91,7 +91,7 @@ } /* expand %vars */ - var_expand(str, env, user, home); + var_expand(str, env, user, home, NULL); return str_c(str); } diff -u -r work.patched/dovecot-0.99.10/src/pop3-login/client.c work/dovecot-0.99.10/src/pop3-login/client.c --- work.patched/dovecot-0.99.10/src/pop3-login/client.c Mon May 26 10:27:13 2003 +++ work/dovecot-0.99.10/src/pop3-login/client.c Fri Oct 24 14:27:50 2003 @@ -42,7 +42,7 @@ if (!verbose_proctitle || !process_per_connection) return; - addr = net_ip2addr(&client->common.ip); + addr = net_ip2addr(&client->common.ip_remote); if (addr == NULL) addr = "??"; @@ -80,7 +80,7 @@ client->common.io = NULL; } - fd_ssl = ssl_proxy_new(client->common.fd, &client->common.ip); + fd_ssl = ssl_proxy_new(client->common.fd, &client->common.ip_remote); if (fd_ssl != -1) { client->tls = TRUE; client_set_title(client); @@ -231,7 +231,8 @@ } } -struct client *client_create(int fd, struct ip_addr *ip, int ssl) +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl) { struct pop3_client *client; @@ -250,7 +251,8 @@ client->refcount = 1; client->tls = ssl; - client->common.ip = *ip; + client->common.ip_remote = *ip_remote; + client->common.ip_local = *ip_local; client->common.fd = fd; client->common.io = io_add(fd, IO_READ, client_input, client); client_open_streams(client, fd); @@ -322,7 +324,7 @@ { const char *addr; - addr = net_ip2addr(&client->common.ip); + addr = net_ip2addr(&client->common.ip_remote); if (addr == NULL) addr = "??"; diff -u -r work.patched/dovecot-0.99.10/src/pop3-login/client.h work/dovecot-0.99.10/src/pop3-login/client.h --- work.patched/dovecot-0.99.10/src/pop3-login/client.h Tue Mar 4 19:43:04 2003 +++ work/dovecot-0.99.10/src/pop3-login/client.h Fri Oct 24 14:28:05 2003 @@ -24,7 +24,8 @@ unsigned int destroyed:1; }; -struct client *client_create(int fd, struct ip_addr *ip, int ssl); +struct client *client_create(int fd, struct ip_addr *ip_remote, + struct ip_addr *ip_local, int ssl); void client_destroy(struct pop3_client *client, const char *reason); void client_ref(struct pop3_client *client);

1 0

Re: [Dovecot] dovecot vs cyrus, uw, etc.
by Scott Klein 04 Nov '03

04 Nov '03

Thanks, all. I'm definitely leaning toward Dovecot. Cyrus is just too big a pain for very little payoff.

1 0

[Dovecot] current CVS seems to have index problems.
by Andreas Jaekel 04 Nov '03

04 Nov '03

Hi Timo. I've checked out the current CVS version and tested it. There seems to be a problem when dovecot accesses mailboxes for the first time: I have a mailbox with 4 mails, and no special IMAP headers. (no X-IMAPBase, X-UID etc.) and it's in mbox format. I log in, SELECT the folder and do FETCH 2 BODY[] and receive only a snipplet of the mail from somewhere in the middle of it. After some debugging it seems like dovecot: 1. creates an index, for mbox_index_rewrite(), 2. rewrites the mbox, but then 3. forgets to update the index after the rewrite. and ends up in a state with a pre-rewrite index but a post-rewrite folder. Now, there are many ways to make dovecot rebuild the index after rewriting the folder, but some are ugly and some are not, some need extra code to avoid endless loops. I don't know how you would want this fixed. I attached a patch that worked for me. After that patch, I have more (new?) problems, which may or may not be related. Now, when I SELECT a folder and do a COPY within the folder (*smile*) I get this: A COPY 1 INBOX * BYE Mailbox is in inconsistent state, please relogin. Connection closed by foreign host. ... which is what I'm gonna start looking for right now. :) Regards, Andy

1 1

[Dovecot] -test8 & Mail.app
by Dan Sully 04 Nov '03

04 Nov '03

A user just tried to use OSX 10.3's Mail.app via imap. It caused the process to start eating CPU, and this in the logs. Any idea what could be happening here? What information should I get on his setup? imap-login: Nov 03 14:28:37 Info: Login: fenner [12.106.35.5] imap(fenner): Nov 03 14:30:37 Error: Timeout while waiting for release of exclusive fcntl() lock for index file /home/f/fenner/M>aildir/.INBOX/.imap.index imap(fenner): Nov 03 14:32:37 Error: Timeout while waiting for release of exclusive fcntl() lock for index file /home/f/fenner/M>aildir/.INBOX/.imap.index imap(fenner): Nov 03 14:32:37 Panic: file index-messageset.c: line 346 (index_messageset_next): assertion failed: (!(ctx->expung>es->uid1 <= mail->rec->uid && ctx->expunges->uid2 >= mail->rec->uid)) dovecot: Nov 03 14:32:37 Error: child 26371 (imap) killed with signal 6 Thanks. -D -- Ooo-Eee-Ooo-Ah-Ah-Ting-Tang-Walla-Walla-Bing-Bang

1 0

[Dovecot] dies on start-up: Auth process
by Tom Allison 04 Nov '03

04 Nov '03

I was digging through some of the archives and ran into someone who was having the same problem, but for completely different reasons....i think. dovecot: Nov 02 07:58:51 Info: Dovecot starting up dovecot: Nov 02 07:58:52 Error: Auth process died too early - shutting down dovecot: Nov 02 07:58:52 Error: child 27673 (login) killed with signal 11 dovecot: Nov 02 07:58:52 Error: child 27672 (login) killed with signal 11 dovecot: Nov 02 07:58:52 Error: child 27671 (login) killed with signal 11 dovecot: Nov 02 07:58:52 Error: child 27670 (auth) killed with signal 11 So I took the advice posted and ran 'strace dovecot' and this is what I got. Unfortunately I'm not exactly good enough with this to even know what I'm looking at. But I suspect the notation about "/dev/null" might have something to do with it. my user, dovecot as a shell of /bin/bash and a $HOME of /usr/local/lib/dovecot By all rights, he's almost a regular user, except that his UID is <100 (I built user:dovecot as a system uid under SuSE 8.2) open("/var/run/dovecot/", O_RDONLY|O_LARGEFILE) = 3 fstat64(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 close(3) = 0 lstat64("/var/run/dovecot/", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 open(".", O_RDONLY|O_LARGEFILE) = 3 open("/var/run/dovecot//login", O_RDONLY|O_LARGEFILE|O_NOFOLLOW) = 4 fchdir(4) = 0 open("/dev/null", O_RDONLY|O_NONBLOCK|O_DIRECTORY) = -1 ENOTDIR (Not a directory) open(".", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY) = 6 fstat64(6, {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0 fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 brk(0) = 0x8061000 brk(0x8062000) = 0x8062000 getdents64(6, /* 2 entries */, 4096) = 48 getdents64(6, /* 0 entries */, 4096) = 0 close(4) = 0 close(6) = 0 fchdir(3) = 0 close(3) = 0 geteuid32() = 0 lstat64("/var/run/dovecot//login", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0 open("/var/run/dovecot//login", O_RDONLY|O_LARGEFILE) = 3 fstat64(3, {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0 close(3) = 0 lstat64("/var/run/dovecot//login", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0 access("/usr/local/libexec/dovecot/dovecot-auth", X_OK) = 0 open("/dev/null", O_RDONLY|O_LARGEFILE) = 3 fcntl64(3, F_GETFD) = 0 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 dup(3) = 4 fcntl64(4, F_GETFD) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 6 setsockopt(6, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 setsockopt(6, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 bind(6, {sa_family=AF_INET, sin_port=htons(143), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 getsockname(6, {sa_family=AF_INET, sin_port=htons(143), sin_addr=inet_addr("0.0.0.0")}, [16]) = 0 listen(6, 8) = 0 fcntl64(6, F_SETFL, O_RDONLY|O_NONBLOCK) = 0 fcntl64(6, F_GETFD) = 0 fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 dup(4) = 7 fcntl64(7, F_GETFD) = 0 fcntl64(7, F_SETFD, FD_CLOEXEC) = 0 dup(4) = 8 fcntl64(8, F_GETFD) = 0 fcntl64(8, F_SETFD, FD_CLOEXEC) = 0 dup(4) = 9 fcntl64(9, F_GETFD) = 0 fcntl64(9, F_SETFD, FD_CLOEXEC) = 0 dup2(4, 0) = 0 dup2(4, 1) = 1 dup2(4, 2) = 2 fork() = 27706 exit_group(0) = ?

4 10

Re: [Dovecot] Re: Bug with partial IMAP fetches
by Matthew Reimer 03 Nov '03

03 Nov '03

Timo Sirainen wrote: > On Fri, Oct 31, 2003 at 04:43:55PM -0600, Matthew Reimer wrote: > >>A little more information: >> >>This bug results in Mozilla and pine never rendering the message, since >>dovecot lies about how much data was really sent, as seen in the >>following log in which only 394 bytes (rather than the 10240 dovecot is >>claiming to send) are returned: > > > Does this patch fix it? http://dovecot.fi/fetch-body.patch No; I'm already using all available 0.99.10 patches. Sorry for not mentioning that before. Matt

1 0

[Dovecot] Re: Bug with partial IMAP fetches
by Matthew Reimer 03 Nov '03

03 Nov '03

A little more information: This bug results in Mozilla and pine never rendering the message, since dovecot lies about how much data was really sent, as seen in the following log in which only 394 bytes (rather than the 10240 dovecot is claiming to send) are returned: ---- 8 UID fetch 94 (UID RFC822.SIZE BODY[]<10240.10240>) * 24 FETCH (UID 94 RFC822.SIZE 20873 BODY[]<10240> {10240} G SRC="/world/image/nav/contents_bottom.gif" WIDTH="49" HEIGHT="15" BORDER="0" VSPACE="10"></A></TD></TR></TABLE>  <script type="text/javascript"> if(parent.frames.length>0&&!isContents) top.location.replace(document.location) </script> </BODY> </HTML>  --------------010405000308030207040500-- ) 8 OK Fetch completed. ---- Matt

2 1

[Dovecot] Debian bug #201444: More verbose logging
by Jaldhar H. Vyas 03 Nov '03

03 Nov '03

I brought this up a while ago but the submitter is wondering if there has been any progress on this issue. He says: It would be extremely nice to have a little bit more detailed logging, and I believe it doesn't really require that much code. I use now a daemon which logs login (name, ip; as dovecot does), and logout (with name, logout reason if any special) with the numbers of "read new mail number and size" and "mail left on server number and size". Would be nice to have something like that in dovecot. Could something like this be added for the next version? -- Jaldhar H. Vyas <jaldhar(a)debian.org> La Salle Debain - http://www.braincells.com/debian/

3 4

[Dovecot] Problems finding information on passwd-file
by David A. Desrosiers 03 Nov '03

03 Nov '03

I've recently converted over to dovecot to uw-imap, and am having a heck of a time trying to find actual docs that describe how to set up virtual users properly without using ldap or posgres.. Basically I need to know what goes in auth_userdb and auth_passdb for a system with *NO* local user accounts in /etc/passwd and /etc/shadow. I will only create mbox files for these users in /var/mail/%u and alternately a home directory where they can store their own mail folders under /home/%u. How can I do this, given the current dovecot codebase? I've googled for a few hours, talked to many people on irc, and checked the mailing lists (of what I could find) related to this, and found nothing whatsoever describing how to achive this. Dovecot apparently supports "virtual users", but I can't find any supporting documentation that describes exactly HOW to set that up. Thanks in advance. d.

2 1

Re: [Dovecot] evolution - folders not displayed correctly
by Terry 03 Nov '03

03 Nov '03

--- Jonas Smedegaard <dr(a)jones.dk> wrote: > s�n, 2003-11-02 kl. 22:54 skrev Terry: > ... > > I tried my account in evolution and all the > folders > > appear in one level and not in several as they > were in > > thunderbird. > ... > > What could be the problem? Thanks! > > The documentation of offlineimap seems to reveil the > cause of the > problem: Evolution uses "/" as delimiter, not "." as > dovecot. > > It seems to not be configurable in Evolution, so > access the files > through dovecot instead of directly. > > - Jonas I am accessing my files via dovecot. That is why I am mailing the dovecot list. Maybe I misunderstood your response. I will check around to see that deliter...probably in the xml configs somewhere.... ===== Terry __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com

2 1

[Dovecot] Bug with partial IMAP fetches
by Matthew Reimer 31 Oct '03

31 Oct '03

X-UIDL: 61c08992b287bf24b6fff123164620b2 Return-Path: <mreimer(a)vpop.net> Delivered-To: krista(a)vpop.net Received: from vpop.net (bilbo.vpop.net [65.103.33.41]) by boromir.vpop.net (Postfix) with ESMTP id 6B7D43A60F6 for <krista(a)vpop.net>; Sun, 6 Oct 2002 21:16:38 -0700 (PDT) Message-ID: <3DA10B4B.50405(a)vpop.net> Date: Sun, 06 Oct 2002 23:19:23 -0500 From: Matthew Reimer <mreimer(a)vpop.net> Organization: VPOP Technologies, Inc. User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.1) Gecko/20020829 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Krista Reimer <krista(a)vpop.net> Subject: WORLD October 12, 2002: Eight principles Content-Type: multipart/mixed; boundary="------------010405000308030207040500" This is a multi-part message in MIME format. --------------010405000308030207040500 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Lemme know if this doesn't come through right. http://www.worldmag.com/world/issue/10-12-02/closing_1.asp Matt --------------010405000308030207040500 Content-Type: text/html; charset=WINDOWS\252; name="www.worldmag.com/world/issue/10-12-02/closing_1.asp" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="www.worldmag.com/world/issue/10-12-02/closing_1.asp" Content-Base: "http://www.worldmag.com/world/issue/10 -12-02/closing_1.asp" Content-Location: "http://www.worldmag.com/world/issue/10 -12-02/closing_1.asp" <DOCTYPE HTML PUBLIC "-//IETF//DTD HTML3.0//EN" "html.dtd"> <HTML><HEAD><TITLE>WORLD October 12, 2002: Eight principles</TITLE> <META HTTP-EQUIV="Content-type" CONTENT="text/html; charset=Windows\252"> <META NAME="ISSUE" CONTENT="2002-10-12"> <META NAME="ISSUEFOLDER" CONTENT="10-12-02"> <META NAME="DESCRIPTION" CONTENT="How Christians should relate to those of other faiths : 1. We should not conceal aspects of our faith so as to avoid criticism or disapproval, and we should not ask others to do that. We believe it is just and loving to point out publicly the errors of other faiths, provided this is done with suf..."> <META NAME="ARTICLEAUTHOR" CONTENT=""></HEAD> <BODY BGCOLOR=ffffff BACKGROUND=/world/image/bg.gif LINK=#000099 VLINK=#6699CC ALINK=#0000FF> <A NAME="top">  <script type="text/javascript" src="/world/world_ad.js"></script> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="520"> <TR><TD WIDTH=20 VALIGN=TOP ALIGN=LEFT><IMG SRC="/world/image/dot_red.gif" WIDTH="20" HEIGHT="56" BORDER="0"></TD><TD WIDTH=500 VALIGN=MIDDLE ALIGN=LEFT><A TARGET="_top" HREF="/world/adredir.asp?url=http://stats.schwa.com/ss%3Fclick%26world%263a5f25c8&image=/world/image/ads/maiad.jpg" ><IMG SRC="/world/image/ads/maiad.jpg" ALT="Medical Ambassadors International" WIDTH=468 HEIGHT=60 BORDER=1></A> <BR></TD></TR></TABLE> <BR> <script type="text/javascript"> var isContents=false </script> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="720"> <TR><TD ALIGN=LEFT VALIGN=TOP WIDTH="4"><IMG SRC="/world/image/dot_red.gif" WIDTH="4" HEIGHT="1" BORDER="0"><BR></TD><TD ALIGN=LEFT VALIGN=MIDDLE WIDTH="110"><FONT SIZE="1" FACE="arial, helvetica">Call 1-800-951-NEWS (6397) to subscribe today! <BR></TD><TD ALIGN=LEFT VALIGN=MIDDLE WIDTH="38"><BR></TD><TD WIDTH="280" VALIGN=BOTTOM ALIGN=LEFT><IMG SRC="/world/image/world_header.gif" WIDTH="276" HEIGHT="51" BORDER="0"> </TD><TD WIDTH=98 VALIGN=MIDDLE ALIGN=LEFT><FONT SIZE="1" FACE="arial, helvetica">October 12, 2002<BR> Volume 17<BR> Number 39 </FONT><BR> </TD> <TD width="190"> <a href="http://www.weeklystandard.com/world"><img src="/world/image/side_ads/TWS-Wrld-2.gif" width="180" height="100"></a> </TD></TR></TABLE> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="720"><TR>  <TD ALIGN=LEFT VALIGN=TOP ROWSPAN="1" WIDTH="4"><IMG SRC="/world/image/dot_red.gif" WIDTH="4" HEIGHT="1" BORDER="0"></TD>   <TD ALIGN=LEFT VALIGN=TOP WIDTH="136"> <IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="11" BORDER="0"><BR><A HREF="home.asp" TARGET="_top"><IMG SRC="/world/image/nav/contents.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="opening_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/opening.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="cover_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/cover.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="national_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/national.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="international_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/international.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="cultural_1.asp" TARGET="_top"><IMG SRC="/world/image/nav/cultural.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><IMG SRC="/world/image/nav/closing_v.gif" WIDTH="131" HEIGHT="18" BORDER="0" VSPACE="0"><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="20" BORDER="0"><BR><A HREF="/world/meta/search/" TARGET="_top"><IMG SRC="/world/image/nav/search.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="/world/meta/subscribe/" TARGET="_top"><IMG SRC="/world/image/nav/subscribe.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="https://secure.palmcoastd.com/pcd/document?ikey=057FCIREN" TARGET="_top"><IMG SRC="/world/image/nav/renew.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="/world/meta/archives/" TARGET="_top"><IMG SRC="/world/image/nav/archives.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="/world/classifieds/" TARGET="_top"><IMG SRC="/world/image/nav/classifieds.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR><IMG SRC="/world/image/dot_red.gif" WIDTH="1" HEIGHT="7" BORDER="0"><BR><A HREF="/world/meta/adrates/" TARGET="_top"><IMG SRC="/world/image/nav/adinfo.gif" WIDTH="106" HEIGHT="18" BORDER="0" VSPACE="0"></A><BR> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="110"><TR><TD ALIGN=LEFT VALIGN=TOP WIDTH="110"><FONT SIZE="1" FACE="arial, helvetica"><STYLE> A.side {color:white;} </STYLE> <P><A class=side HREF=/world/issue/08-17-02/home.asp TARGET=_top><IMG SRC=/world/issue/08-17-02/image/cover_thumb.jpg WIDTH=72 HEIGHT=97 HSPACE=15 VSPACE=10 BORDER=0><BR><center>REMEMBERING 9/11 </center></A> <P>Read <A TARGET=_top HREF=/world/olasky/centralideas/index.html class=side>Central Ideas in the Development of American Journalism</a>, <A TARGET=_top HREF=/world/olasky/truth1.html class=side>Telling the Truth</A> and <A TARGET=_top HREF=/world/olasky/Prodigal/index.html class=side>Prodigal Press</a>, three books on journalism by Marvin Olasky.  <P> <A TARGET=_top HREF=http://www.gwbc.com/godsworld/worldad.asp class=side>Add Olasky, Belz, and other great thinkers to your reading list!</A> <P> <A class=side HREF=/world/meta/wear/ TARGET=_top> <IMG SRC=/world/image/world_wear_ad.gif WIDTH=99 HEIGHT=99 HSPACE=0 VSPACE=0 BORDER=1></A> <P> <A class=side HREF=/world/meta/subscribe/sub_standard.asp TARGET=_top> <IMG SRC=/world/image/bennett_book.gif WIDTH=75 HEIGHT=101 HSPACE=15 VSPACE=0 BORDER=1> <center>Free Book!</center></A> <P>Find out <A TARGET=_top HREF=/world/meta/contact/ class=side>how to contact us</A>. <P>Not familiar with WORLD Magazine? <A HREF=/world/meta/about/pr.asp TARGET=_top class=side>Find out more about us.</A> <P>Read our <A HREF=/world/meta/about/mission.asp TARGET=_top class=side>Mission Statement.</A> <P>If you are already a WORLD reader, head to <A HREF=/world/meta/help/ TARGET=_top class=side>Help Us Out</A> to find out how to help us grow.  <P>Find out <A HREF=/world/meta/about/about.asp TARGET=_top class=side>about this site</A>. <P>Excellence in Home Education starts here. Visit the new God's World Book Club Online! <A HREF=http://www.gwbc.com/godsworld TARGET=_top class=side>www.gwbc.com</A>. <p>Check out the World Journalism Institute website at <a href=http://www.worldji.com TARGET=_top class=side>www.worldji.com</a> and apply online! <p>Since 1981, God's World News has been helping children to understand and interpret the world around them. Now you can visit God's World News Online at <A HREF=http://www.gwnews.com TARGET=_top class=side>GWNews.com</a></font></body> <P></FONT> </TD> </TR> </TABLE> </TD>   <TD ALIGN=LEFT VALIGN=TOP WIDTH="16"> <IMG SRC="/world/image/dot_clr.gif" WIDTH="16" HEIGHT="1" BORDER="0"><BR></TD>   <TD ALIGN=LEFT VALIGN=TOP WIDTH="364">   <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" BORDER="0" HEIGHT="45"> <TR VALIGN="MIDDLE"> <TD ALIGN="LEFT"><FORM METHOD="POST" ACTION="/world/redirect.asp"> <INPUT TYPE=HIDDEN NAME="folder" VALUE="10-12-02"> <SELECT NAME="where"> <OPTION VALUE="closing_1.asp">Also in CLOSING THOUGHTS <OPTION VALUE="closing_2.asp">What's the difference? </SELECT> </TD> <TD ALIGN="LEFT"> <INPUT TYPE=SUBMIT VALUE="go"></FORM> </TD></TR></TABLE>  <FONT SIZE="5" COLOR="CC0000" FACE="arial, helvetica"><B>JOHN PIPER</B></FONT><BR><IMG SRC="/world/image/line_364.gif" WIDTH="364" HEIGHT="1" BORDER="0"><BR> <H2>Eight principles</H2> <H3><I>How Christians should relate to those of other faiths</I></H3>   <P>1. We should not conceal aspects of our faith so as to avoid criticism or disapproval, and we should not ask others to do that. We believe it is just and loving to point out publicly the errors of other faiths, provided this is done with sufficient evidence that the sacred writings or representative spokesmen of those faiths do indeed express these errors. We must strive not to misrepresent other faiths, as that is not only disrespectful but also undermining of our own credibility.<P> 2. We should acknowledge our sin and desperate need of salvation by a crucified and risen Savior, and not posture ourselves as worthy of salvation as if we had superior intellect or wisdom or goodness. We are beggars who have, by grace, found the life-giving bread of truth, forgiveness, and joy. As we expose the errors of other religions, we should feel and express sorrow and compassion for those who do not embrace Christ so as to be saved.<P> 3. We should not expect a fair fight in a secular world that is hostile to God and uncomfortable around the truth of Christ. Therefore, our response to abuse, distortion, or slander should not be angry resentment, but patient witness to the truth, in the hope and with the prayer that returning good for evil may open hearts to the truth. We must recognize that persecution is normal and that much of the protection Christians have in America is abnormal in history and in the world. Our witness will be best advanced by kind, steadfast statements and reasonable defenses of the truth.<P> 4. We should renounce all violence as a means of spreading our faith. Christians spread biblical faith by suffering, not by causing suffering. Authentic Christianity cannot be coerced by force or manipulation. We should acknowledge and proclaim that Christ will, at his personal appearing, punish those who have rejected him; his violence at the end of the age is a decisive reason we should not and may not exert violence against anyone because of his beliefs. This is Christ's right, not ours.<P> 5. We believe that God has given to civil government, not individuals or the church, the duty to bear the sword for justice and safety. Civil authorities should not punish beliefs, but some behaviors rooted in beliefssuch as killing, assault, or theftmay be outside the law and therefore punishable by the civil authority. Which behaviors are legally prohibited in a society based on freedom of belief and religion will be determined in a process of persuasion, debate, and election of representative lawmakers, with checks and balances provided by the executive and judicial branches and by constitutional safeguards for the rights of minorities.<P> 6. We should distinguish between a just war of defense against aggression and a religious war against people because of their beliefs. We should acknowledge that this distinction will probably not be recognized by certain religions that define their beliefs to include the right of cultural domination by force. But we should insist on this distinction rather than accept the claim of aggressors that our resistance is a religious attack on their faith. We should argue that the ground of such national defense is the civil right to freedom (of religion and speech and press and assembly), not disapproval of the religion underlying the attack.<P> 7. We should distinguish between the right to express criticism of erroneous beliefs and sinful behaviors, on the one hand, and the false inference some draw from this criticism that proponents of the criticized beliefs can therefore legitimately be mistreated. We also should not accept the claim that being criticized or denounced as mistaken or as sinners is a form of mistreatment. It is not a crime (hate crime or otherwise) to say publicly that someone's belief is wrong and harmful, or to call someone's behavior sinful and destructive. A necessary part of all debate concerning beliefs, behaviors, or proposals is the argument that some are wrong, ill-founded, and have deleterious effects.<P> 8. We believe that every religion, worldview, or philosophy of life may freely endeavor to influence and shape our culture. We renounce the use of force or bribery or deceit in this culture-shaping effort. We affirm preaching the gospel, publishing truth, and modeling love and justice, as well as prayer, persuasion, and participation in the political process. We recognize that all laws "impose" some group's behavioral conviction on all, so it is not a compelling criticism to say that a law that governs behavior is bad because it "imposes someone's morality" on society. It is therefore particularly vital to support principles, laws, and policies that protect the legal freedoms of minorities that do not have the numbers to sway lawmaking processes.<P> These principles are further developed at the website http://www.desiringgod.org/library/topics/culture/tolerance_principles.html  <BR></TD><TD width="200" valign="top"> <link rel="Stylesheet" href="/world/right-bar-basic.css" type="text/css"></link> <style type="text/css"> @import: "/world/right-bar-advanced.css"; </style> <div id="rightbar"> <div id="listenlinks"> <h4><a target="_top" href="/world/listen/">Listen to WORLD</a></h4> <div>Daily radio shorts by Nick Eicher. <a target="_top" href="/world/listen/">Read more...</a><br /> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000201.mp3">10/7/02 download MP3</a></p> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000199.mp3">10/8/02 download MP3</a></p> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000198.mp3">10/9/02 download MP3</a></p> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000197.mp3">10/10/02 download MP3</a></p> <p><img src="/world/image/speaker.gif" height="11" width="12" /> <a target="_top" href="/world/listen/home.asp?file=000000196.mp3">10/11/02 download MP3</a></p> </div> </div> <div id="recentlinks"> <h4><a target="_top" href="/world/meta/archives/">From Previous Weeks</a></h4> <div> <p><a target="_top" href="/world/issue/10-05-02/"><img src="/world/issue/10-05-02/image/cover_thumb.jpg" width="72" height="97" /><br /> October 5, 2002</a></p> <p><a target="_top" href="/world/issue/09-28-02/"><img src="/world/issue/09-28-02/image/cover_thumb.jpg" width="72" height="97" /><br /> September 28, 2002</a></p> <p><a target="_top" href="/world/issue/09-21-02/"><img src="/world/issue/09-21-02/image/cover_thumb.jpg" width="72" height="97" /><br /> September 21, 2002</a></p> </div> <br /> <a href="http://worldmag.com/world/classifieds/"><img src="/world/image/side_ads/Searching_Ad_100x180.gif" width="180" height="100"></a> </div> </div> </TD></TR> </TABLE> <BR> <TABLE BORDER="0" WIDTH=520><TR><TD WIDTH=110 ALIGN=right VALIGN=top><FONT COLOR=ffffff><B>Search for more<BR>articles about:</B></FONT><BR></TD><TD WIDTH=40><BR></TD><TD WIDTH=370 VALIGN=top ALIGN=left BGCOLOR="#CCCC99"> <TABLE WIDTH="370" BORDER="0" CELLPADDING="8" CELLSPACING="0"><TR><TR><TD WIDTH="370" ALIGN="LEFT" VALIGN="top"><form name="searchForm" action="/world/meta/search/search.asp" onsubmit=""> <input type="hidden" name="performSearch" value="y"> <INPUT TYPE="text" NAME="target" SIZE="30" MAXLENGTH="100"><br> <input type=checkbox name="stype" value="phrase" checked> exact phrase </TD><TD ALIGN="LEFT" VALIGN="TOP"> <INPUT TYPE=SUBMIT VALUE="search"></FORM> </TD></TR> </TABLE> </TD></TR></TABLE> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" WIDTH="500"><TR><TD WIDTH="156"><BR></TD><TD ALIGN=LEFT WIDTH="253"><FONT SIZE="1"><A HREF="/world/meta/copyright.asp" TARGET="_top">© 1996 - 2002 WORLD</A> Magazine. <A HREF="/world/meta/contact/" TARGET="_top">mailbag(a)worldmag.com</A></FONT></TD><TD COLSPAN="1" ALIGN=RIGHT WIDTH="91"><A HREF="#top"><IMG SRC="/world/image/nav/top_bottom.gif" WIDTH="22" HEIGHT="15" HSPACE="10" VSPACE="10" BORDER="0"></A><A HREF="home.asp" TARGET="_top"><IMG SRC="/world/image/nav/contents_bottom.gif" WIDTH="49" HEIGHT="15" BORDER="0" VSPACE="10"></A></TD></TR></TABLE>  <script type="text/javascript"> if(parent.frames.length>0&&!isContents) top.location.replace(document.location) </script> </BODY> </HTML>  --------------010405000308030207040500--

1 0

Re: [Dovecot] SSL Certificate Chains?
by Matthew Reimer 29 Oct '03

29 Oct '03

Timo Sirainen wrote: > On Mon, 2003-10-27 at 15:01, Steve Gare wrote: > >>Just a quicky, I can't see anything about how Dovecot handles >>certificate chains. >> >>1, Does it handle them? >>2, How, if if does? >> >>(Just got a cert from www.instantssl.com and I need there intermediate >>cert do validate it.., Works fine with Apache and Exim ) > > > Dovecot doesn't check client's certificate. It's client's job to check > server's certificate and check the chains. Or at least I don't think > there's anything special Dovecot should do with them.. I had trouble with an instantssl cert, and found that what I needed to do was to also include all the certs up the chain, in a certain order, to keep the client from complaining about an invalid certificate. The first certificate in the pem file should be the the server certificate, followed by its chain starting from the root certificate down. Matt

1 0

[Dovecot] Copy from INBOX to INBOX corrupts file
by Andreas Jaekel 29 Oct '03

29 Oct '03

Aloha, again, Timo. Concerning the problem of copying within one folder... I'm still not sure it's not a problem I created myself, but I think it's caused by the use of the buffered IO routines in ostream-file.c ... you use io_add() to schedule write operations for later while simultanously reading new chunks from the very same file. This seems to confuse dovecot and make it write the copy to the strangest locations. I think when working within one folder I should use either blocking IO or a lot of calls to o_stream_flush()... what do you think? Greetings, Andy

2 3

[Dovecot] SSL Certificate Chains?
by Steve Gare 29 Oct '03

29 Oct '03

Hi, Just a quicky, I can't see anything about how Dovecot handles certificate chains. 1, Does it handle them? 2, How, if if does? (Just got a cert from www.instantssl.com and I need there intermediate cert do validate it.., Works fine with Apache and Exim ) Cheers, Steve Gare - Xantara.Net -- 0845 123 5707

2 1

[Dovecot] root privilidge issues?
by lists＠netxp.com.au 24 Oct '03

24 Oct '03

hi all, i am migrating from imap-uw to dovecot on a freebsd machine and i am getting this error message: imap(phil): Oct 22 19:24:01 Fatal: We couldn't drop root group privileges imap-login: Oct 22 19:24:01 Info: Login: phil [220.240.217.2] dovecot: Oct 22 19:24:01 Error: child 1019 (imap) returned error 89 when it trie manually logining in this is what i see telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK dovecot ready. 1 login phil password 1 OK Logged in. Connection closed by foreign host. any ideas? thansk in advance phil

2 1

[Dovecot] Shared Folders
by D Canfield 21 Oct '03

21 Oct '03

I was just wondering if any thought has been given to shared folders and how they might be implemented yet? True shared folders are compelling enough to our organization that I've been looking into moving to Cyrus from Courier, but transparent folder migration looks to be nearly impossible for more than a handful of accounts... so that leaves me back at hoping courier or dovecot can eventually do what we want. We have a lot of organizations on campus that have a generic mail address such as "maintenance" of "physics." We don't like the idea of shared accounts (invariably either the mailbox gets forgotten about when a secretary changes, the password gets lost, or everyone on campus ends up with the password), so our policies require such generic accounts to be forwarded to a folder in a "real person's" account. This works well for us, but the users are clamoring for the ability to have more than one person access those folders. The problem with Courier's shared folders is that one person owns the folder and while others can see that mailbox, only the owner has write access. This kills most of the utility of shared folders, except for use as announcement areas. As I understand it, the reason Courier does it this way is that it uses the underlying unix permissions to control access to the mailbox. I'm thinking that even if dovecot uses the same concept for shared folders, it should be possible to allow multiple users to write to the folders if filesystem ACL support is used. At least ext3 and XFS both support ACL's, so there is a reasonable amount of support for them, and they would allow dovecot to give multiple users write access to the folders without having to manage it's own security system. The only issue would be that the delivery agent would have to make sure that that ACLs for a folder are kept consistent... I'm not even sure dovecot has to be ACL-aware. Anyway, if there is a completely different plan in the works, that's great too, but I wanted to at least voice an opinion and offer a suggestion of how to make it work. Thanks DC

4 5

[Dovecot] A view quirks
by Andreas Jaekel 21 Oct '03

21 Oct '03

Aloha Timo. I found a few odd things while playing with dovecot. At least one of them bugs me, but it might be a result of my own patches - I haven't testet it with mbox or maildir, yet. The details :) 1. * OK dovecot ready. A = (<return> Connection closed by foreign host. 2. * OK dovecot ready. A001 LOGIN xxxxxx xxxxxx A001 OK Logged in. A002 COPY 1 INBOX Connection closed by foreign host. (segfault) 3. [...] A003 SEARCH SUBJECT "test" * SEARCH 1 A003 OK Search completed. A004 SEARCH SUBJECT {6} + OK "test" * SEARCH A004 OK Search completed. I think these two searches should give identical results. 4. (my current nemesis) A002 CREATE bla A003 SELECT INBOX A004 COPY 1 bla A005 SELECT bla A006 COPY 1 bla * NO Internal error [2003-10-16 16:07:21] A006 OK Copy completed. If I copy from the current folder to the current folder I get a scrambled mailbox and an error. This might be selfmade, though. I'm currently trying to find this bug, but the various layers of [_oi]streams and callback and function pointer structs do not help :) I think the stream routines hide the mstream(istream(realstream(iostream))) and the ostream(_ostream(iostream)) behind the same file descriptor and the data gets written to the wrong position. BTW: what exactly is "max_pos"? Greetings and thanks! Andy

2 6

[Dovecot] move from imap-uw
by Sergey Matveychuk 18 Oct '03

18 Oct '03

Hello! I've just subscribed and I'd like to ask. Is there any troubles if I change my imap-uw with davecot? Will davecot pick up imap-uw created folders (mboxes)? I use all protocols: imap, imaps, pop and pops. I've seen some problems with mbox was mention on this maillist. What kind of problem? -- Sem.

2 1

[Dovecot] Re: Darwin Build (cvs)
by Jesse Peterson 16 Oct '03

16 Oct '03

On Thursday, October 9, 2003, at 02:00 AM, dovecot-request(a)procontrol.fi wrote: > From: Timo Sirainen <tss(a)iki.fi> > Subject: Re: [Dovecot] Darwin Build (cvs) > To: dovecot(a)procontrol.fi > Message-ID: <1065657988.1377.43.camel@hurina> > Content-Type: text/plain > > On Wed, 2003-10-08 at 17:23, Jesse Peterson wrote: >> Here's the deal: OpenDarwin 6.6 (closest relative being Mac OS X >> 10.2.6) won't build from CVS. Specifically libtoolize doesn't seem to >> exist (does it even come with libtool?) and the other parts of the >> "autogen.sh" fail miserably. > > So, the solution is to get libtoolize :) Mine seems to have come from > libtool14 package in Fink (although it is libtool v1.5, weird). Thought so. I wasn't sure if it came with libtool or not (OpenDarwin does ship with libtool). > > Also it looks like you're missing iconv.m4. It's in gettext package in > Fink. Ahh, I'll grab that as well. > > Did OpenDarwin use Fink? > Yes, although they've switched from 'DarwinPorts' to MetaPkg. Not sure the status on either of those, though. > Anyway, building from CVS requires some more packages to install which > aren't needed if you stick with tarballs. I could also build a new test > tarball if you need :) > This would be great. Maybe an automatically posted daily snapshot? Thanks Timo.

2 1

[Dovecot] problem getting mail from mbox
by Gavin Estey 16 Oct '03

16 Oct '03

I'm trying to set up dovecot and I'm running into a few problems. I just want to use IMAP for one user, everyone else gets POP3 from the existing (working server). $MAIL is set to /var/spool/mail/gavin_imap In my /var/spool/mail directory I now have a problem: -rw------- 1 gavin_im mail 1392 Oct 14 22:28 gavin_imap -rw------- 1 gavin_im popusers 0 Oct 14 21:54 gavin_imap When I try to get my mail, I guess it's checking the wrong file as I can't download anything. I also can't delete the file (which I find confusing as I am root): [root@chicken mail]# rm gavin_imap rm: cannot remove `gavin_imap': No such file or directory I actually have the same problem with the dovecot log file. I have this in my config: info_log_path = /tmp/dovecot -rw------- 1 root root 4436 Oct 14 22:40 dovecot [root@chicken tmp]# cat dovecot cat: dovecot: No such file or directory I don't get any obvious errors if I telnet in: [root@chicken tmp]# telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK dovecot ready. 1 LOGIN gavin_imap <pass> 1 OK Logged in. 1 SELECT Inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1066184985] UIDs valid * OK [UIDNEXT 1] Predicted next UID 1 OK [READ-WRITE] Select completed. 1 LOGOUT * BYE Logging out 1 OK Logout completed. Connection closed by foreign host. This is confusing the hell out of me. Is there anything obvious that I've screwed up? Thanks! Gavin.

2 3

[Dovecot] exchange, dovecot, mutt, evolution
by Krammer Clemens 16 Oct '03

16 Oct '03

Dear all, When I "migrate" my outlook folders to imapd (dovecot) it works well from a Windoze perspective, but if I open a migrated folder via imap (mutt, evolution) a cannot see the Senders. If i open the folder locally via mutt, the Senders are displayed correctly. By examining one folder with vi I recognised that there are no valid From headers but Return-Paths. Is there a common way to see the senders when connecting with imap? Best Regards, Clemens

2 1

[Dovecot] Ordering mailboxes
by Ian Marlier 16 Oct '03

16 Oct '03

I have a really weird problem. To whit: I compiled dovecot 0.99.10 on two different systems: a linux-ppc box running Debian, and a Mac OS X Server v. 10.2.8. It compiled fine on both. The same Maildir's are being served up on both -- the OS X server exports home directories to the clients via NFS. BUT the OS X box orders mailboxes this way: INBOX Deleted Items Sent Items . . . And the Debian box orders mailboxes this way: INBOX INBOX/Deleted Items INBOX/Sent Items . . . The compilation options were the same in both cases. The dovecot.conf files are essentially identical -- the only changes are the names of the SSL certificates and the name of the dovecot user. What I can't figure out is, why is the ordering of the mailboxes different? This is the Maildir directory list: [network:/Users/foc/Maildir] root# ls -al /Network/Servers/network.uphamscornercs.net/Users/marlier/Maildir/ total 816 drwxrw---- 22 marlier staff 748 Oct 13 19:52 . drwxr-xr-x 64 marlier staff 2176 Oct 10 14:08 .. drwxrw---- 13 marlier staff 442 Oct 13 19:14 .Deleted Items drwxrwxr-x 9 marlier staff 306 Oct 13 19:14 .Dovecot drwxrw---- 12 marlier staff 408 Oct 8 12:26 .Drafts drwxrw---- 7 marlier staff 238 Oct 13 19:28 .INBOX drwxrw---- 13 marlier staff 442 Sep 16 22:59 .Jen drwxrw---- 13 marlier staff 442 Oct 13 18:30 .Klimas List drwxrw---- 13 marlier staff 442 Oct 13 17:57 .Rachel drwxrw---- 13 marlier staff 442 Oct 13 19:14 .Sent Items drwxrw---- 13 marlier staff 442 Oct 13 19:16 .UCCS -rw-rw---- 1 marlier staff 5 Sep 15 20:58 .customflags -rw-rw---- 1 marlier staff 120 Oct 13 18:16 .subscriptions -rw------- 1 marlier staff 296206 Oct 13 19:40 bincimap-cache -rw------- 1 marlier staff 534 Sep 22 17:45 bincimap-subscribed -rw------- 1 marlier staff 197 Sep 16 21:38 bincimap-subscribed.old -rw------- 1 marlier staff 59 Oct 13 19:40 bincimap-uidvalidity drwx------ 3582 marlier staff 121788 Oct 13 19:36 cur -rw------- 1 marlier staff 96421 Oct 13 19:36 dovecot-uidlist drwx------ 2 marlier staff 68 Oct 13 19:36 new drwxrw--w- 2 marlier staff 68 Sep 15 20:58 recov drwx------ 2 marlier staff 68 Oct 13 19:36 tmp [network:/Users/foc/Maildir] root# Any thoughts? (dovecot.conf files is included here, if it's helpful): [network:/Users/foc/Maildir] root# more /usr/local/etc/dovecot.conf ## Dovecot 1.0 configuration file # Default values are shown after each value, it's not required to uncomment # any of the lines. Exception to this are paths, they're just examples # with real defaults being based on configure options. The paths listed here # are for configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var # --with-ssldir=/etc/ssl # Base directory where to store runtime data. base_dir = /var/run/dovecot/ # Protocols we want to be serving: # imap imaps pop3 pop3s protocols = imap imaps pop3 pop3s # IP or host address where to listen in for connections. It's not currently # possible to specify multiple addresses. "*" listens in all IPv4 interfaces. # "[::]" listens in all IPv6 interfaces, but may also listen in all IPv4 # interfaces depending on the operating system. You can specify ports with # "host:port". imap_listen = * pop3_listen = * # IP or host address where to listen in for SSL connections. Defaults # to above non-SSL equilevants if not specified. #imaps_listen = #pop3s_listen = # Disable SSL/TLS support. ssl_disable = no # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. Included doc/mkcert.sh can be used to easily generate self-signed # certificate, just make sure to update the domains in dovecot-openssl.cnf ssl_cert_file = /etc/ssl/certs/imapd.pem ssl_key_file = /etc/ssl/private/imapd.pem # SSL parameter file. Master process generates this file for login processes. # It contains Diffie Hellman and RSA parameters. ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat # How often to regenerate the SSL parameters file. Generation is quite CPU # intensive operation. The value is in hours, 0 disables regeneration # entirely. ssl_parameters_regenerate = 0 # Disable LOGIN command and all other plaintext authentications unless # SSL/TLS is used (LOGINDISABLED capability) disable_plaintext_auth = no # Use this logfile instead of syslog(). /dev/stderr can be used if you want to # use stderr for logging (ONLY /dev/stderr - otherwise it is closed). log_path = /var/log/mail.log # For informational messages, use this logfile instead of the default info_log_path = /var/log/mail.log # Prefix for each line written to log file. % codes are in strftime(3) # format. Note the extra space at the end of line. log_timestamp = %b %d %H:%M:%S dovecot: ## ## Login processes ## # Directory where authentication process places authentication UNIX sockets # which login needs to be able to connect to. The sockets are created when # running as root, so you don't have to worry about permissions. login_dir = /var/run/dovecot/login # chroot login process to the login_dir. Only reason not to do this is if you # wish to run the whole Dovecot without roots. login_chroot = yes ## ## IMAP login process ## login = imap # Executable location. login_executable = /usr/local/libexec/dovecot/imap-login # User to use for the login process. Create a completely new user for this, # and don't use it anywhere else. The user must also belong to a group where # only it has access, it's used to control access for authentication process. login_user = dovecot # Set max. process size in megabytes. If you don't use # login_process_per_connection you might need to grow this. login_process_size = 32 # Should each login be processed in it's own process (yes), or should one # login process be allowed to process multiple connections (no)? Yes is more # secure, espcially with SSL/TLS enabled. No is faster since there's no need # to create processes all the time. login_process_per_connection = yes # Number of login processes to create. If login_process_per_user is # yes, this is the number of extra processes waiting for users to log in. login_processes_count = 5 # Maximum number of extra login processes to create. The extra process count # usually stays at login_processes_count, but when multiple users start logging # in at the same time more extra processes are created. To prevent fork-bombing # we check only once in a second if new processes should be created - if all # of them are used at the time, we double their amount until limit set by this # setting is reached. This setting is used only if login_process_per_use is yes. login_max_processes_count = 128 # Maximum number of connections allowed in login state. When this limit is # reached, the oldest connections are dropped. If login_process_per_user # is no, this is a per-process value, so the absolute maximum number of users # logging in actually login_processes_count * max_logging_users. login_max_logging_users = 256 ## ## POP3 login process ## # Settings default to same as above, so you don't have to set anything # unless you want to override them. login = pop3 # Exception to above rule being the executable location. login_executable = /usr/local/libexec/dovecot/pop3-login ## ## Mail processes ## # Maximum number of running mail processes. When this limit is reached, # new users aren't allowed to log in. max_mail_processes = 1024 # Show more verbose process titles (in ps). Currently shows user name and # IP address. Useful for seeing who are actually using the IMAP processes # (eg. shared mailboxes or if same uid is used for multiple accounts). verbose_proctitle = yes # Show protocol level SSL errors. verbose_ssl = yes # Valid UID range for users, defaults to 500 and above. This is mostly # to make sure that users can't log in as daemons or other system users. # Note that denying root logins is hardcoded to dovecot binary and can't # be done even if first_valid_uid is set to 0. first_valid_uid = 30 #last_valid_uid = 0 # Valid GID range for users, defaults to non-root/wheel. Users having # non-valid GID as primary group ID aren't allowed to log in. If user # belongs to supplementary groups with non-valid GIDs, those groups are # not set. first_valid_gid = 1 #last_valid_gid = 0 # ':' separated list of directories under which chrooting is allowed for mail # processes (ie. /var/mail will allow chrooting to /var/mail/foo/bar too). # This setting doesn't affect login_chroot or auth_chroot variables. # WARNING: Never add directories here which local users can modify, that # may lead to root exploit. Usually this should be done only if you don't # allow shell access for users. See doc/configuration.txt for more information. # valid_chroot_dirs = /var/mail # Default MAIL environment to use when it's not set. By leaving this empty # dovecot tries to do some automatic detection as described in # doc/mail-storages.txt. There's a few special variables you can use: # # %u - username # %n - user part in user@domain, same as %u if there's no domain # %d - domain part in user@domain, empty if user there's no domain # %h - home directory # # You can also limit a width of string by giving the number of max. characters # after the '%' character. For example %1u gives the first character of # username. Some examples: # # maildir:/var/mail/%1u/%u/Maildir # mbox:~/mail/:INBOX=/var/mail/%u # mbox:/var/mail/%d/%n/:INDEX=/var/indexes/%d/%n # default_mail_env = maildir:~/Maildir # Space-separated list of fields to cache for all mails. Currently these # fields are allowed followed by a list of commands they speed up: # # Envelope - FETCH ENVELOPE and SEARCH FROM, TO, CC, BCC, SUBJECT, # SENTBEFORE, SENTON, SENTSINCE, HEADER MESSAGE-ID, # HEADER IN-REPLY-TO # Body - FETCH BODY # Bodystructure - FETCH BODY, BODYSTRUCTURE # MessagePart - FETCH BODY[1.2.3] (ie. body parts), RFC822.SIZE, # SEARCH SMALLER, LARGER, also speeds up BODY/BODYSTRUCTURE # generation. This is always set with mbox mailboxes, and # also default with Maildir. # # Different IMAP clients work in different ways, that's why Dovecot by default # only caches MessagePart which speeds up most operations. Whenever client # does something where caching could be used, the field is automatically marked # to be cached later. For example after FETCH BODY the BODY will be cached # for all new messages. Normally you should leave this alone, unless you know # what most of your IMAP clients are. Caching more fields than needed makes # the index files larger and generate useless I/O. # # With maildir there's one extra optimization - if nothing is cached, indexing # the maildir becomes much faster since it's not opening any of the mail files. # This could be useful if your IMAP clients access only new mails. mail_cache_fields = MessagePart Envelope Bodystructure Body # Space-separated list of fields that Dovecot should never set to be cached. # Useful if you want to save disk space at the cost of more I/O when the fields # needed. #mail_never_cache_fields = # Workarounds for various client bugs: # oe6-fetch-no-newmail: # Never send EXISTS/RECENT when replying to FETCH command. Outlook Express # seems to think they are FETCH replies and gives user "Message no longer # in server" error. Note that OE6 still breaks even with this workaround # if synchronization is set to "Headers Only". # outlook-idle: # Outlook and Outlook Express never abort IDLE command, so if no mail # arrives in half a hour, Dovecot closes the connection. This is still # fine, except Outlook doesn't connect back so you don't see if new mail # arrives. #client_workarounds = # Dovecot can notify client of new mail in selected mailbox soon after it's # received. This setting specifies the minimum interval in seconds between # new mail notifications to client - internally they may be checked more or # less often. Setting this to 0 disables the checking. # NOTE: Evolution client breaks with this option when it's trying to APPEND. mailbox_check_interval = 30 # Like mailbox_check_interval, but used for IDLE command. #mailbox_idle_check_interval = 30 # Allow full filesystem access to clients. There's no access checks other than # what the operating system does for the active UID/GID. It works with both # maildir and mboxes, allowing you to prefix mailboxes names with eg. /path/ # or ~user/. mail_full_filesystem_access = no # Maximum allowed length for custom flag name. It's only forced when trying # to create new flags. mail_max_flag_length = 50 # Save mails with CR+LF instead of plain LF. This makes sending those mails # take less CPU, especially with sendfile() syscall with Linux and FreeBSD. # But it also creates a bit more disk I/O which may just make it slower. mail_save_crlf = no # Use mmap() instead of read() to read mail files. read() seems to be a bit # faster with my Linux/x86 and it's better with NFS, so that's the default. mail_read_mmaped = no # Copy mail to another folders using hard links. This is much faster than # actually copying the file. This is problematic only if something modifies # the mail in one folder but doesn't want it modified in the others. I don't # know any MUA which would modify mail files directly. IMAP protocol also # requires that the mails don't change, so it would be problematic in any case. # If you care about performance, enable it. maildir_copy_with_hardlinks = no # Check if mails' content has been changed by external programs. This slows # down things as extra stat() needs to be called for each file. If changes are # noticed, the message is treated as a new message, since IMAP protocol # specifies that existing message are immutable. maildir_check_content_changes = yes # Which locking methods to use for locking mbox. There's three available: # dotlock: Create <mailbox>.lock file. This is the oldest and most NFS-safe # solution. If you want to use /var/mail/ like directory, the users # will need write access to that directory. # fcntl : Use this if possible. Works with NFS too if lockd is used. # flock : May not exist in all systems. Doesn't work with NFS. # # You can use both fcntl and flock too; if you do the order they're declared # with is important to avoid deadlocks if other MTAs/MUAs are using both fcntl # and flock. Some operating systems don't allow using both of them # simultaneously, eg. BSDs. If dotlock is used, it's always created first. mbox_locks = fcntl # Should we create dotlock file even when we want only a read-lock? Setting # this to yes hurts the performance when the mailbox is accessed simultaneously # by multiple processes, but it's needed for reliable reading if no other # locking methods are available. mbox_read_dotlock = no # Maximum time in seconds to wait for lock (all of them) before aborting. mbox_lock_timeout = 300 # If dotlock exists but the mailbox isn't modified in any way, override the # lock file after this many seconds. mbox_dotlock_change_timeout = 30 # umask to use for mail files and directories umask = 0077 # Drop all privileges before exec()ing the mail process. This is mostly # meant for debugging, otherwise you don't get core dumps. Note that setting # this to yes means that log file is opened as the logged in user, which # might not work. It could also be a small security risk if you use single UID # for multiple users, as the users could ptrace() each others processes then. mail_drop_priv_before_exec = no ## ## IMAP process ## # Executable location imap_executable = /usr/local/libexec/dovecot/imap # Set max. process size in megabytes. Most of the memory goes to mmap()ing # files, so it shouldn't harm much even if this limit is set pretty high. imap_process_size = 256 # Support for dynamically loadable modules. imap_use_modules = no #imap_modules = /usr/local/lib/dovecot/imap ## ## POP3 process ## # Executable location pop3_executable = /usr/local/libexec/dovecot/pop3 # Set max. process size in megabytes. Most of the memory goes to mmap()ing # files, so it shouldn't harm much even if this limit is set pretty high. pop3_process_size = 256 # Support for dynamically loadable modules. pop3_use_modules = no #pop3_modules = /usr/lib/dovecot/pop3 ## ## Authentication processes ## # You can have multiple processes; each time "auth = xx" is seen, a new # process definition is started. The point of multiple processes is to be # able to set stricter permissions to others. For example, plain/PAM # authentication requires roots, but if you also use digest-md5 authentication # for some users, you can authenticate them without any privileges in a # separate auth process. Just remember that only one auth process is asked # for the password, so you can't have different passwords with different # processes (unless they have different auth methods, and you're ok with # having different password for each method). # Authentication process name. auth = default # Space separated list of wanted authentication mechanisms: # plain digest-md5 anonymous auth_mechanisms = plain # Space separated list of realms for SASL authentication mechanisms that need # them. You can leave it empty if you don't want to support multiple realms. # Many clients simply use the first one listed here, so keep the default realm # first. #auth_realms = # Default realm to use if none was specified. #auth_default_realm = # Where user database is kept: # passwd: /etc/passwd or similiar, using getpwnam() # passwd-file <path>: passwd-like file with specified location # static uid=<uid> gid=<gid> home=<dir template>: static settings # vpopmail: vpopmail library # ldap <config path>: LDAP, see doc/dovecot-ldap.conf # pgsql <config path>: a PostgreSQL database, see doc/dovecot-pgsql.conf auth_userdb = passwd # auth_userdb = ldap /usr/local/etc/dovecot-ldap.conf # Where password database is kept: # passwd: /etc/passwd or similiar, using getpwnam() # shadow: /etc/shadow or similiar, using getspnam() # pam [<service> | *]: PAM authentication # passwd-file <path>: passwd-like file with specified location # vpopmail: vpopmail authentication # ldap <config path>: LDAP, see doc/dovecot-ldap.conf # pgsql <config path>: a PostgreSQL database, see doc/dovecot-pgsql.conf auth_passdb = pam dovecot # auth_passdb = ldap /usr/local/etc/dovecot-ldap.conf # Executable location auth_executable = /usr/local/libexec/dovecot/dovecot-auth # Set max. process size in megabytes. auth_process_size = 256 # User to use for the process. This user needs access to only user and # password databases, nothing else. Only shadow and pam authentication # requires roots, so use something else if possible. auth_user = root # Directory where to chroot the process. Most authentication backends don't # work if this is set, and there's no point chrooting if auth_user is root. #auth_chroot = # Number of authentication processes to create auth_count = 2 # List of allowed characters in username. If the user-given username contains # a character not listed in here, the login automatically fails. This is just # an extra check to make sure user can't exploit any potential quote escaping # vulnerabilities with SQL/LDAP databases. If you want to allow all characters, # set this value to empty. auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ # Username to use for users logging in with ANONYMOUS SASL mechanism #auth_anonymous_username = anonymous # More verbose logging. Useful for figuring out why authentication isn't # working. auth_verbose = yes # digest-md5 authentication process. It requires special MD5 passwords which # /etc/shadow and PAM doesn't support, so we never need roots to handle it. # Note that the passwd-file is opened before chrooting and dropping root # privileges, so it may be 0600-root owned file. #auth = digest_md5 #auth_methods = digest-md5 #auth_realms = #auth_userdb = passwd-file /etc/passwd.imap #auth_passdb = passwd-file /etc/passwd.imap #auth_user = imapauth #auth_chroot = # if you plan to use only passwd-file, you don't need the two auth processes, # simply set "auth_methods = plain digest-md5"

2 1

[Dovecot] Ignore purge and delete command
by vikrant＠linmark.com 16 Oct '03

16 Oct '03

Hi, Does anyone know how to ignore the purge or delete command from the imap clients. Actually I created a mail archive and using dovecot and so far I am happy with the performance. But the problem I am facing right now is I do not want the users to delete the mail by themselves and want to disable the purge or delete command. Thanks Vikrant

2 1

[Dovecot] dovecot crashes on start
by Timothy 16 Oct '03

16 Oct '03

Hello, I wasn't able to find anything about this on the site that could give me a definite answer, but when I start dovecot it dies immediately. The following is left in the logs. dovecot: Oct 06 20:59:30 Info: Dovecot starting up dovecot: Oct 06 20:59:32 Error: Auth process died too early - shutting down pop3-login: Oct 06 20:59:32 Fatal: fd_send(-1) failed: Broken pipe I thought this might have something to do with chrooting so I tried to disable all of that in the configuration. After that did not work I rebuilt dovecot with minimal configure options (compared to what I used originally) and used a stock configuration changing only the certificate locations so that dovecot would not complain about the certificates missing, still no luck and the same error. I've tried using strace on dovecot but it seems like it hardly ever hangs/dies at the same point. I'm trying to run this on a slackware 9.0 linux based machine. Any suggestions? Timothy, -- I put instant coffee in a microwave and almost went back in time. -- Steven Wright

2 3