- dovecot - dovecot.org

[Dovecot] [gentoo-announce] [ GLSA 200803-25 ] Dovecot: Multiple vulnerabilities
by Robert Buchholz 18 Mar '08

18 Mar '08

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Dovecot: Multiple vulnerabilities Date: March 18, 2008 Bugs: #212336, #213030 ID: 200803-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Two vulnerabilities in Dovecot allow for information disclosure and argument injection. Background ========== Dovecot is a lightweight, fast and easy to configure IMAP and POP3 mail server. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-mail/dovecot < 1.0.13-r1 >= 1.0.13-r1 Description =========== Dovecot uses the group configured via the "mail_extra_groups" setting, which should be used to create lockfiles in the /var/mail directory, when accessing arbitrary files (CVE-2008-1199). Dovecot does not escape TAB characters in passwords when saving them, which might allow for argument injection in blocking passdbs such as MySQL, PAM or shadow (CVE-2008-1218). Impact ====== Remote attackers can exploit the first vulnerability to disclose sensitive data, such as the mail of other users, or modify files or directories that are writable by group via a symlink attack. Please note that the "mail_extra_groups" setting is set to the "mail" group by default when the "mbox" USE flag is enabled. The second vulnerability can be abused to inject arguments for internal fields. No exploitation vectors are known for this vulnerability that affect previously stable versions of Dovecot in Gentoo. Workaround ========== There is no known workaround at this time. Resolution ========== All Dovecot users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=net-mail/dovecot-1.0.13-r1" This version removes the "mail_extra_groups" option and introduces a "mail_privileged_group" setting which is handled safely. References ========== [ 1 ] CVE-2008-1199 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1199 [ 2 ] CVE-2008-1218 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1218 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200803-25.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security(a)gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org. License ======= Copyright 2008 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5

1 0

[Dovecot] A tail of joy...
by Curtis Maloney 18 Mar '08

18 Mar '08

So, I _finally_ got the time to upgrade from 0.99.14 ... which I told myself I'd upgrade from once 1.0 was released... (yep, I've been _that_ busy :) So I read the Wiki page on 0.99->1.0 transition, and went through the config file - for all of about 5 or 10 minutes. I logged in at 11pm when nobody else should be using it, restarted dovecot with the new version, and logged in. Snap snap snap went my folders opening.. wow, so fast! And as I got into work this morning... nobody knew a thing. If I hadn't asked a few people to let me know, nobody would have known a thing. My thanks to you, Timo. Thank you for making my life easier. -- Curtis Maloney cmaloney(a)cardgate.net

2 2

[Dovecot] Can the LDA deliver email marked as read?
by Kyle Wheeler 18 Mar '08

18 Mar '08

Hello, One of my users wants to be able to deliver email (e.g. via a procmail script) and mark it *read* when it's delivered. We use Maildir as our mail storage format. I have a bit of a hack script put together that will do it by directly manipulating the Maildir (it delivers the email using safecat, and then renames the file into the "cur" directory with the necessary flags appended to the file name), but this is a hack at best, and has the problem that if Dovecot is monitoring the file, it could potentially fail to work---there is a race between delivery and renaming. I've been slowly moving our site in the direction of using the Dovecot LDA to deliver mail. Is there a way (via a plugin, maybe?) to get the LDA to mark mail as "read" when it is delivered? ~Kyle -- He who dares not offend cannot be honest. -- Thomas Paine

2 1

[Dovecot] How LDA deliver mail
by alex_dovecot 17 Mar '08

17 Mar '08

hi,all I read some part of the source code for studying and interesting. But i face trouble when I read the 'deliver.c'. In file 'deliver.c' on line 812 , there is a function named 'deliver_mail', see below: deliver_mail(storage, mail, destination, mailbox) I couldn't find out where is this function defined and how it was linked. Thank u for your help.

2 1

[Dovecot] current quota in mysql issue
by stefan＠webetc.de 16 Mar '08

16 Mar '08

hi all, i have a problem with storing the current quota in mysql. the configuration of the dictionary quota mostly looks like the example from the wiki. the dirsize quota limit is read correctly from the user_query, but nothing stored with quotadict in the quota table. i wonder that there is nothing like a "dict" in the logfile. did i configured anything wrong? regars stefan logfile from a imap login: Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): Effective uid=150, gid=8 Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): Loading modules from directory: /usr/lib/dovecot/modules/imap Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): Module loaded: /usr/lib/dovecot/modules/imap/lib01_quota_plugin.so Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): Module loaded: /usr/lib/dovecot/modules/imap/lib02_imap_quota_plugin.so Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): Namespace: type=private, prefix=, sep=/, inbox=yes, hidden=no, subscriptions=no Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): maildir: data=/var/vmail/mydomain.de/me/Maildir Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): maildir: root=/var/vmail/mydomain.de/me/Maildir, index=/var/vmail/mydomain.de/me/Maildir, control=, inbox= Mar 15 14:12:18 mx01 dovecot: IMAP(me(a)mydomain.de): dirsize quota limit = 20000000kB Mar 15 14:12:18 mx01 dovecot: imap-login: Login: user=<me(a)mydomain.de>, method=PLAIN, rip=10.1.1.147, lip=10.1.1.146 here is my current config: package from debian etch (1.0.rc15) ### # file dovecot.conf disable_plaintext_auth = no base_dir = /var/run/dovecot/ protocols = imap imaps pop3 pop3s protocol imap { listen = mx01.int.example.net:143 ssl_listen = mx01.int.example.net:993 } protocol pop3 { listen = mx01.int.example.net:110 ssl_listen = mx01.int.example.net:995 } log_timestamp = .%Y-%m-%d %H:%M:%S . syslog_facility = mail ssl_cert_file = /etc/ssl/example.net/mailserver/mail-cert.pem ssl_key_file = /etc/ssl/example.net/mailserver/mail-key.pem ssl_ca_file = /etc/ssl/example.net/mailserver/ca.pem ssl_parameters_regenerate = 168 verbose_ssl = no mail_extra_groups = mail mail_debug = yes auth_verbose = no auth_debug = no auth_debug_passwords = no first_valid_uid = 150 last_valid_uid = 150 first_valid_gid = 8 last_valid_gid = 8 maildir_copy_with_hardlinks = yes protocol imap { login_executable = /usr/lib/dovecot/imap-login mail_executable = /usr/lib/dovecot/imap imap_client_workarounds = outlook-idle imap_max_line_length = 65536 mail_plugins = quota imap_quota } protocol pop3 { login_executable = /usr/lib/dovecot/pop3-login mail_executable = /usr/lib/dovecot/pop3 mail_plugins = quota } protocol lda { postmaster_address = postmaster(a)mydomain.com sendmail_path = /usr/lib/sendmail auth_socket_path = /var/run/dovecot/auth-master mail_plugins = cmusieve quota } auth_username_translation = %Lu auth default { mechanisms = plain passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb sql { args = /etc/dovecot/dovecot-sql.conf } user = nobody socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } namespace private { separator = / prefix = inbox = yes } plugin { quota = dict::: proxy::quotadict } dict { quotadict = mysql:/etc/dovecot/dovecot-sql-quota-dict.conf } ### # file dovecot-sql.conf driver = mysql connect = host=mx01.int.example.net dbname=db_mail user=dovecot password=******** default_pass_scheme = PLAIN user_query = select concat('/var/vmail/%d/%n/Maildir') as home, concat('maildir:/var/vmail/%d/%n/Maildir') as mail, 150 as uid, 8 as gid, quota from qry_dovecot where user = '%u' password_query = select user, password, concat('/var/vmail/%d/%n') as userdb_home, concat('maildir:/var/vmail/%d/%n') as userdb_mail, 150 as userdb_uid, 8 as userdb_gid from qry_dovecot where user = '%u' ### # file dovecot-sql-quota-dict.conf connect = host=db01.int.example.net dbname=db_mail user=quota password==******** table = quota select_field = current where_field = path username_field = username (don't wonder about the different database hosts. mx01 is a readonly slave from db01)

1 1

[Dovecot] CONDSTORE + QRESYNC extensions
by Timo Sirainen 16 Mar '08

16 Mar '08

I wrote a mostly-working CONDSTORE support for Dovecot today. You can try it with: hg clone http://hg.dovecot.org/dovecot-condstore/ There are a few problems left: - STORE FLAGS.SILENT should be sending FETCH MODSEQ updates - When SELECTing a mailbox while CONDSTORE hasn't yet been enabled in the session, Dovecot returns a higher HIGHESTMODSEQ than what's used after CONDSTORE is enabled. This is because modseqs aren't tracked until client has told us that it wants them. So Dovecot doesn't waste time trying to figure out the correct HIGHESTMODSEQ.. Something probably should be done about this. - STORE (UNCHANGEDSINCE xx) doesn't work correctly. The full fix would require adding a new transaction log record type containing the modseq, but currently it doesn't even bother refreshing the mailbox state before checking what the modseqs are. The modseq numbers are calculated as: modseq = ((indexid + log_file_seq) << 32) | log_file_offset Where: - indexid = A growing unique index file ID, usually the same as the UNIX timestamp of index file creation. - log_file_seq = dovecot.index.log file sequence. When the .log is rotated to .log.2 the new .log file's sequence is increased (so indexid and log_file_seq uniquely identify a log file) - log_file_offset = offset in dovecot.index.log where the flag change record was written. The numbers are a bit large, but this way if index files are deleted the modseqs always grow (so nothing breaks), because the newly created index file will have a larger indexid. The modseqs are also stored to dovecot.index file in "modseq" extension records. The highest modseq is stored in header extension. QRESYNC would require keeping track of expunges. This could be implemented by just going through records in log files to find out what messages have been expunged since the given modseq (= log seq+offset). Although I'm not sure if it would be better to have a separate expunge log. To allow rarely (e.g. once a week?) syncing clients the .log files may have to be rotated less often, so they would take more space. Also reading through them to find expunges would be slower than reading a separate log having only expunges. But writing a separate expunge log would add extra writes and there's no guarantee that it's ever even read. Other than that QRESYNC should be easy to implement.

2 3

[Dovecot] Virtual mailboxes
by Timo Sirainen 15 Mar '08

15 Mar '08

Virtual mailbox support can be tested with: hg clone http://hg.dovecot.org/dovecot-virtualboxes/ The code is still pretty non-optimized and I've only done some small tests, but at least it appears to work. Messages can't yet saved to virtual mailboxes, but I was thinking that the first configured mailbox could be used as the save destination. Configuration goes like: mail_plugins = virtual namespace private { .. prefix = virtual/ location = virtual:~/virtual-boxes } ~/virtual-boxes then contains a filesystem-layout view of all virtual mailboxes. Virtual mailboxes are configured in "dovecot-virtual" files. For example for virtual/unseen you'd create ~/virtual-boxes/unseen/dovecot-virtual file: INBOX Other mailbox unseen So the format goes like: <mailbox name> [<more mailbox names>] <search rule> [<search rule continues>] [<another mailbox name>] [<another mailbox's search rule>] Currently mailbox name wildcards aren't supported. The search rules are defined in exactly the same way as IMAP SEARCH command. So a few examples: - all - unseen - or keyword $Label1 or keyword $Label2 $Label3 - from domain.org subject hello Each time the mailbox is synchronized the mailbox search is ran for all the configured mailboxes. For simple rules this should be pretty fast, but for e.g. body searches it's a bad idea. I'll fix this in future so that it'll do searches only for newly seen messages. Virtual mailboxes don't have dovecot.index.cache files. All mail accesses (except uid/flag/keyword) go through the real mailbox and its cache file is used/updated. Messages that no longer match the search rule aren't removed until mailbox is either reopened or EXPUNGE command is sent. This allows creating a virtual mailbox with unseen messages, but without the message getting lost immediately after it's opened. Although perhaps it would be useful for a virtual mailbox with only non-deleted messages .. Maybe I should make it configurable separately for each vmailbox. I guess that's all.

5 6

[Dovecot] Thanks to all who responded on Blackberry & IMAP
by Stewart Dean 14 Mar '08

14 Mar '08

Many good suggestions and comments. But while I was trying to do it right (silly me), the brass hat got it working with whatever is on the phone and I am told that everything is fine (until it isn't). Thanks to all who responded -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

1 0

[Dovecot] Help! OT: Blackberry IMAP client suggestions/experience needed
by Stewart Dean 14 Mar '08

14 Mar '08

The CFO of our college, a most formidable man, had decided to go Blackberry and Something Functional Must Be Done. We've had some users who we've not supported (and things got better for them when we switched from UWIMAP to Dovecot). BB, of course, has their half-baked sorta-IMAP-compliant client (and we do NOT want the BB Enterprise Server) that persistently keeps grabbing the mailbox and breaking the mailbox lock, causing no end of grief for the secretaries (plural, more than one) would also work with the mailbox. 1) Does anyone have recommendations and experience with a genuine BB IMAP client? Googling shows up LogicMail.... 2) I have been avoiding the plunge in multiple-access mailbox and just let the early BB adapter users thrash but I suppose it is time to do what I can with DC. We are running 1.0.12 with mbox format. Would some kind person <grovel,grovel> tell me where I should start reading plus any warnings. BB DC experience info would be a big help. Our CFO has a legendary temper and I would like to get as much as possible right the first time out........... -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

11 21

[Dovecot] Feature request: dovecot -d option to output only/all 'defaults' of current version
by Charles Marcus 14 Mar '08

14 Mar '08

It would be nice to be able to do 'dovecot -d' that outputs only/all of the 'default' values of the currently running version, regardless of what is explicitly set. Postfix currently has this option, and it is very useful for one thing... to compare settings that have been explicitly set to what would be the default values. I used this recently on a postfix install to remove a whole bunch of values that had been explicitly set, and therefore showed up when postconf -n command was issued - but that would have been the default values anyway had they not been explicitly set - thus providing a much cleaner postconf -n output. Thanks Timo for dovecot!! -- Best regards, Charles

1 0

[Dovecot] Hardlinking with Sieve
by Anders 14 Mar '08

14 Mar '08

I have a simple Sieve rule to protect me from accidentally deleting mail: fileinto :copy "backup"; Should I expect this backup to be hardlinked to the ordinary one? Obviously, that would make the backup be almost for free in terms of storage, but currently I do not see any linking. Using Maildir, by the way, and I have not touched the maildir_copy_with_hardlinks setting. TIA, Anders.

2 1

[Dovecot] A message, when moved by multiple clients with same account and same filters, can be duplicated by filters on destination imap folder.
by Diego Liziero 14 Mar '08

14 Mar '08

I'm still collecting user feedback after moving from uw-imap to dovecot development release 1.1.rc3. What said in the subject seems the obvious result of an improper configuration. Office emails are configured and accessed on multiple clients with the same automatic filters, and sometimes the filtered emails get duplicated on the destination folder. The fact is that this was perfectly working with wu-imap (without any duplication/triplication of emails). I'm looking if there is some workaround to keep this client misuse working with dovecot. Could an email have a sort of "primary key" that forbids it's duplication in the same imap folder? Regards, Diego.

3 2

[Dovecot] LDA log_path
by jalal 13 Mar '08

13 Mar '08

Hi all I've just transferred a server from one machine to another. The only remaining dovecot problem I have is that the dovecot deliver program isn't writing a log file. I have this in the conf file: protocol lda { ..... mail_plugins = cmusieve mail_plugin_dir = /usr/lib64/dovecot/lda ..... # setup log files: log_path = /var/log/dovecot-deliver.log } but that file doesn't get written. The dovecot.log and dovecot_info.log files do get written and I've tried creating/touching the deliver log, but that doesn't seem to help at all. If I don't create /var/log/dovecot-deliver.log it doesn't get created by dovecot. If I use 'log_path = /tmp/dovecot-deliver.log' the file will get created but will remain empty. Anyone have an idea on how I can track this down? I like to have logs :) dovecot 1.0.12, CentOS 5/64 bit on a Virtuozzo VPS. TIA

1 0

[Dovecot] imap sent-mail folder sometimes dosen't get updated when used by more than a mailer at the same time.
by Diego Liziero 13 Mar '08

13 Mar '08

Hi, I'm collecting users feedback of latest dovecot 1.1.rc3 development release. Some users are complaining that their sent mails sometimes don't get written to imap Sent-mail folder. It seems that all these users were using multiple istances of imap processes to read their mail (thunderbird+horde-imp, evolution+horde-imp or multiple thunderbird istances). No error message is written in dovecot.log, no user feedback in horde-imp/evolution. Only thunderbird says it can't update Sent folder. Has anyone had similar issues? Diego.

6 10

[Dovecot] outlook2003 fails sasl authentication
by Johan Hendriks 13 Mar '08

13 Mar '08

Hello all i have postfix running with dovecot-sasl and mysql as a backend. It all runs good. I run into trouble as where outlook 2003 fails to authenticate when sending e-mail. I have thunderbird outlook2007 and 2003 clients. The tunderbird and 2007 clients are working OK, the outlook2003 client get the relay access denied message. In the postfix log i see it is not initiating sasl they all use pop i use dovecot 1.0.13 this is my posfix part of sasl smtpd_sasl_auth_enable = yes smtpd_sasl_exceptions_networks = $mynetworks broken_sasl_auth_clients = yes smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination permit smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth and this is my dovecot sasl part # dovecot SASL socket listen { client { # Assuming the default Postfix $queue_directory setting path = /var/spool/postfix/private/auth mode = 0660 # Assuming the default Postfix user and group user = postfix group = postfix } } Am i doing something wrong? I guess if it is not configured right outlook 2007 and thunderbird will fail also! regards, Johan Hendriks

3 4

[Dovecot] interesting note - not sure just how to take care of this one
by Joseph Norris 12 Mar '08

12 Mar '08

Hello all, the dovecot -> ldap connection is working correctly but I notice something in my maillog that is disturbing: dovecot.conf in the passdb section I have passdb passwd { } then it drops down into the ldap stuff. The user gets validated via this first and if it fails passes on to the ldap stuff. the problem is: in the file the user's unencrypted password is showing up as follows: Mar 12 11:24:41 malaga dovecot: auth(default): pam(jnorris,XXX.XXX.XXX.XXX): pam_authenticate() failed: Authentication failure Mar 12 11:24:41 malaga dovecot: auth(default): passwd(jnorris,XXX.XXX.XXX.XXX): lookup Mar 12 11:24:41 malaga dovecot: auth(default): passwd(jnorris,XXX.XXX.XXX.XXX): Password mismatch Mar 12 11:24:41 malaga dovecot: auth(default): passwd(jnorris,XXX.XXX.XXX.XXX): CRYPT("the uncrypted password in plain text here") != 'x' is there a way to disable this? thanks. -- Cell: 209.201.3410 Desk: 209.228.4576 email: jnorris(a)ucmerced.edu #Joseph Norris (Linux/Apache/Mysql/Perl - what else is there?) print @c=map chr $_+100,(6,17,15,16,-68,-3,10,11, 16,4,1, 14,-68,12,1,14,8, -68,4,-3,-1,7,1,14,-68, -26,11,15,1,12, 4,-68,-22,11,14,14,5,15,-90);

2 1

[Dovecot] IMAP storage - mail_location = maildir:~/Maildir:mbox:~/mail/
by Tim Alberts 12 Mar '08

12 Mar '08

I'm moving to IMAP and trying to understand all the details of where to save email. The system is CentOS running sendmail - procmail which delivers as: DEFAULT=$HOME/Maildir/ I'm trying also to use Usermin as the webmail client. I can get mail to deliver to $HOME/Maildir/ and I can get clients (thunderbird outlook etc) to view them. However Usermin seems stuck with saving 'Drafts' 'Sent' and 'Trash' in $HOME/mail/ as mbox and Dovecot won't find them even when I use the setting: maildir:~/Maildir:mbox:~/mail/ I don't know what exact question to ask to I'll just ask for any thoughts on this? Second question, different topic. Are there problems with running POP3 and IMAP? I've always run POP3 and I'm thinking to move to IMAP for some clients so the Usermin webmail will be better 'synchronized' with the users inbox. *> dovecot --version * 1.0.10 *> dovecot -n * # 1.0.10: /etc/dovecot.conf protocols: imap pop3 login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:~/Maildir:mbox:~/mail/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: passdb: driver: pam args: dovecot userdb: driver: passwd args: blocking=yes

2 4

[Dovecot] deliver fails - passdb doesn't support lookups?
by Kyle Wheeler 12 Mar '08

12 Mar '08

Hello, I'm trying to get `deliver` (the LDA) to function properly. I can get it to work without doing a user lookup, but for my own sense of sanity, I want to know what I'm doing wrong getting user lookups working. (I'm using dovecot 1.0.10). Here's what I have in the "auth default" section: auth default { mechanisms = plain login passdb ldap { args= /var/lib/dovecot/dovecot-ldap.conf } userdb static { args = uid=3728 gid=3728 home=/domains/%Ld/%Ln } user = vpopmail socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vpopmail group = vchkpw } client { path = /var/run/dovecot/auth-client mode = 0660 } } } And yet, when I run deliver, I get no warnings, no errors, and most especially, no email delivered. Here's how I call deliver: cat testemail | setuidgid vpopmail \ /usr/local/libexec/dovecot/deliver \ -d testuser(a)example.com I tried running deliver within strace, and here's what I found. It opens up the authentication socket and writes: VERSION\t1\t0\nUSER\t1\ttestuser(a)example.com\tservice=deliver\n And it gets back: VERSION\t1\t0\nSPID\t10917\nFAIL\t1\n" If I understand the authentication protocol correctly, that means an internal error occurred. The dovecot log file reports this: Error: auth(default): static(testuser(a)example.com): passdb doesn't support lookups, can't verify user's existence passdb? I thought it was the userdb that was important! What's going on here? ~Kyle -- Men, as an organization, are getting more women than any other group working anywhere in the world. Wherever women are, we have men looking into it. -- Jerry Seinfeld

2 2

[Dovecot] Debugging sieve-options
by Jens Meyer 12 Mar '08

12 Mar '08

Hello all! I am using a dovecot-server since several weeks - and am really impressed about this server (after using courier and cyrus). I tried to install the sieve-plugin now (CentOS RPM) and configured sieve like described in your WIKI (and on several other pages). Unfortunately I can not connect to port 2000 (sieve-administration?!) nor are there any messages regarding sieve in the logs. Can you give me any hints for further testing/debuggin? My part of configuration: --> protocol lda { postmaster_address = postmaster(a)myserver.de auth_socket_path = /var/run/dovecot/auth-master mail_plugins = cmusieve } <-- My output of "dovecot -n": --> # 1.0.12: /etc/dovecot.conf Warning: mail_extra_groups setting was often used insecurely so it is now deprecated, use mail_access_groups or mail_privileged_group instead base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log protocols: imap pop3 listen: * login_dir: /var/run/dovecot//login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_extra_groups: mail mail_access_groups: mail mail_location: maildir:/var/mail/virtual/%d/%n mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %u-%v namespace: type: private prefix: INBOX. inbox: yes auth default: mechanisms: plain login user: vmail username_format: %Lu passdb: driver: sql args: /etc/dovecot/dovecot-sql-domain.conf passdb: driver: sql args: /etc/dovecot/dovecot-sql-subdomain.conf passdb: driver: sql args: /etc/dovecot/dovecot-sql-aliasdomain.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql-domain.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql-subdomain.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql-aliasdomain.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail <-- Thank you, kind regards, Jens

2 2

[Dovecot] Sieve doesnt filter
by Sven Schmidt 12 Mar '08

12 Mar '08

Hi! I have a config like this (globalsieverc): require "fileinto"; if address :domain :is "to" "domain.de" { if header :matches "X-Spam-Level" "\\*\\*\\*\\*\\*\\*\\*\\*" { #discard; fileinto "spamdir"; } } else { # The rest goes into INBOX # default is "implicit keep", we do it explicitly here keep; } It should filter all Mail for "domain.de" and then look for spam score.

4 5

[Dovecot] Fileinto to a maildir with sieve
by Nicolas Letellier 12 Mar '08

12 Mar '08

Hello, Is it possible to specify a maildir to a fileinto rule in a sieve file? A simple: require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto ".Junk"; } does'nt work becaise .Junk is a directoty, not a mailbox... See my dovecot-deliver log: Couldn't open mailbox .Junk: Invalid mailbox name Mar 12 09:52:38 helm deliver(nicolas(a)nicoelro.net): sieve runtime error: Fileinto: Generic Error Is it possible to specify a directory (maildir)? Thanks. - Nicolas.

2 3

[Dovecot] Allowing tilde at start of mailbox names
by pod 12 Mar '08

12 Mar '08

In lib-storage/index/maildir/maildir-storage.c maildir_is_valid_create_name() and maildir_is_valid_existing_name() the following sequence of tests appear but I don't really understand why if ((storage->flags & MAIL_STORAGE_FLAG_FULL_FS_ACCESS) != 0) return TRUE; if (*name == '~' || strchr(name, '/') != NULL) return FALSE; If MAIL_STORAGE_FLAG_FULL_FS_ACCESS is set then the validator funcs return TRUE immediately and code elsewhere will do appropriate home_exapand for mailbox names. However if MAIL_STORAGE_FLAG_FULL_FS_ACCESS is not set the (*name == '~') test prevents mailbox names that begin with '~'. Why is it not possible to have mailbox names that begin with '~' but without '~' carrying any special meaning? I have been working on a patch (appended but incomplete; the option only works against maildir atm) that adds a new option mail_allow_tilde and my admittedly limited testing seems to indicate that it does the right thing but maybe I am barking up the wrong tree. Am I missing something here? ---------------------------------------- # HG changeset patch # User <pod(a)sysdev.oucs.ox.ac.uk> # Date 1185368923 -3600 # Node ID ab9cf3790ea9b5486afa6498f60c6bf6fb2e5f1e # Parent a23be695672737967a10613d7dca2a6f53b5d96d create new option mail_allow_tilde diff -r a23be6956727 -r ab9cf3790ea9 src/lib-storage/index/maildir/maildir-storage.c --- a/src/lib-storage/index/maildir/maildir-storage.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/lib-storage/index/maildir/maildir-storage.c Wed Jul 25 14:08:43 2007 +0100 @@ -240,7 +240,9 @@ static bool maildir_is_valid_create_name if ((storage->flags & MAIL_STORAGE_FLAG_FULL_FS_ACCESS) != 0) return TRUE; - if (*name == '~' || strchr(name, '/') != NULL) + if ((*name == '~' && + (storage->flags & MAIL_STORAGE_FLAG_ALLOW_TILDE) == 0) || + strchr(name, '/') != NULL) return FALSE; if (name[0] == '.' && (name[1] == '\0' || @@ -264,7 +266,9 @@ static bool maildir_is_valid_existing_na if ((storage->flags & MAIL_STORAGE_FLAG_FULL_FS_ACCESS) != 0) return TRUE; - if (*name == '~' || strchr(name, '/') != NULL) + if ((*name == '~' && + (storage->flags & MAIL_STORAGE_FLAG_ALLOW_TILDE) == 0) || + strchr(name, '/') != NULL) return FALSE; if (name[0] == '.' && (name[1] == '\0' || diff -r a23be6956727 -r ab9cf3790ea9 src/lib-storage/mail-storage.c --- a/src/lib-storage/mail-storage.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/lib-storage/mail-storage.c Wed Jul 25 14:08:43 2007 +0100 @@ -66,6 +66,8 @@ void mail_storage_parse_env(enum mail_st *flags_r = 0; if (getenv("FULL_FILESYSTEM_ACCESS") != NULL) *flags_r |= MAIL_STORAGE_FLAG_FULL_FS_ACCESS; + if (getenv("ALLOW_TILDE") != NULL) + *flags_r |= MAIL_STORAGE_FLAG_ALLOW_TILDE; if (getenv("DEBUG") != NULL) *flags_r |= MAIL_STORAGE_FLAG_DEBUG; if (getenv("MMAP_DISABLE") != NULL) diff -r a23be6956727 -r ab9cf3790ea9 src/lib-storage/mail-storage.h --- a/src/lib-storage/mail-storage.h Tue Jul 24 05:48:03 2007 +0300 +++ b/src/lib-storage/mail-storage.h Wed Jul 25 14:08:43 2007 +0100 @@ -34,7 +34,9 @@ enum mail_storage_flags { fail to create the storage. */ MAIL_STORAGE_FLAG_NO_AUTOCREATE = 0x200, /* Rely on O_EXCL when creating dotlocks */ - MAIL_STORAGE_FLAG_DOTLOCK_USE_EXCL = 0x400 + MAIL_STORAGE_FLAG_DOTLOCK_USE_EXCL = 0x400, + /* Allow folder names to begin with '~' TILDE */ + MAIL_STORAGE_FLAG_ALLOW_TILDE = 0x800 }; enum mail_storage_lock_method { diff -r a23be6956727 -r ab9cf3790ea9 src/master/mail-process.c --- a/src/master/mail-process.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/master/mail-process.c Wed Jul 25 14:08:43 2007 +0100 @@ -254,6 +254,8 @@ mail_process_set_environment(struct sett env_put("DEBUG=1"); if (set->mail_full_filesystem_access) env_put("FULL_FILESYSTEM_ACCESS=1"); + if (set->mail_allow_tilde) + env_put("ALLOW_TILDE=1"); if (set->pop3_no_flag_updates) env_put("POP3_NO_FLAG_UPDATES=1"); if (set->pop3_reuse_xuidl) diff -r a23be6956727 -r ab9cf3790ea9 src/master/master-settings-defs.c --- a/src/master/master-settings-defs.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/master/master-settings-defs.c Wed Jul 25 14:08:43 2007 +0100 @@ -67,6 +67,7 @@ static struct setting_def setting_defs[] DEF(SET_INT, mailbox_idle_check_interval), DEF(SET_BOOL, mail_debug), DEF(SET_BOOL, mail_full_filesystem_access), + DEF(SET_BOOL, mail_allow_tilde), DEF(SET_INT, mail_max_keyword_length), DEF(SET_BOOL, mail_save_crlf), DEF(SET_BOOL, mail_read_mmaped), diff -r a23be6956727 -r ab9cf3790ea9 src/master/master-settings.c --- a/src/master/master-settings.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/master/master-settings.c Wed Jul 25 14:08:43 2007 +0100 @@ -216,6 +216,7 @@ struct settings default_settings = { MEMBER(mailbox_idle_check_interval) 30, MEMBER(mail_debug) FALSE, MEMBER(mail_full_filesystem_access) FALSE, + MEMBER(mail_allow_tilde) FALSE, MEMBER(mail_max_keyword_length) 50, MEMBER(mail_save_crlf) FALSE, MEMBER(mail_read_mmaped) FALSE, diff -r a23be6956727 -r ab9cf3790ea9 src/master/master-settings.h --- a/src/master/master-settings.h Tue Jul 24 05:48:03 2007 +0300 +++ b/src/master/master-settings.h Wed Jul 25 14:08:43 2007 +0100 @@ -75,6 +75,7 @@ struct settings { unsigned int mailbox_idle_check_interval; bool mail_debug; bool mail_full_filesystem_access; + bool mail_allow_tilde; unsigned int mail_max_keyword_length; bool mail_save_crlf; bool mail_read_mmaped;

3 12

[Dovecot] question about dovecot imap outlook clients
by Joseph Norris 11 Mar '08

11 Mar '08

Hello, Well... thanks to the input of all of you I have my dovecot->ldap connection working for almost all of my clients, however... on outlook, a message for certificates being trusted comes up, the user clicks yes and connection fails. Questions: Do I have to get an ssl certificate to make it work? ( cost ouch!) Is there a way around this using my own self-signed certificates? Is there a cheaper ssl certificate service? thanks -- Cell: 209.201.3410 Desk: 209.228.4576 email: jnorris(a)ucmerced.edu #Joseph Norris (Linux/Apache/Mysql/Perl - what else is there?) print @c=map chr $_+100,(6,17,15,16,-68,-3,10,11, 16,4,1, 14,-68,12,1,14,8, -68,4,-3,-1,7,1,14,-68, -26,11,15,1,12, 4,-68,-22,11,14,14,5,15,-90);

5 4

[Dovecot] Who's wrong, atmail or dovecot?
by Andy Dills 11 Mar '08

11 Mar '08

We recently switched to atmail, as well as dovecot. I noticed in atmail the size of the mailboxes was always reported as 0kb. So, I did some debugging, and it boiled down to the fact that the regular expression used by dovecot expected UID before SIZE, but Dovecot returned SIZE before UID. No biggy, I changed the regex, but I was curious if there was a standard. Here's the imap query that is sent: UID FETCH 1:* (RFC822.SIZE) Here's the diff I implemented to make it work: http://www.xecu.net/atmail/dovecot_sizes.diff So...is this something that is standard or something atmail needs to handle by making their regex more dynamic? Andy --- Andy Dills Xecunet, Inc. www.xecu.net 301-682-9972 ---

3 2

[Dovecot] Version info in Makefiles after hg update
by Steffen Kaiser 11 Mar '08

11 Mar '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I have noticed that the version of Dovecot does not adjust, when you upgrade the hg repository. ./configure alone is not sufficient, it looks like that only a ./autogen.sh - ./configure corrects the Makefiles. Is it recommended to run autogen after each update? Thanks, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFH1mfzVJMDrex4hCIRAkC0AKCc6N27nWfQQdeZC7JYp+ae6lvonwCffafb 02viZlPCWzx+mxsnUtE5Ihw= =7/ao -----END PGP SIGNATURE-----

2 1