- dovecot - dovecot.org

[Dovecot] PAM, Active Directory, all users mapped to uid=0
by Matt Zukowski 01 May '07

01 May '07

I'm having a problem with authentication using PAM, connected on the back end to Active Directory. PAM authentication itself works fine. We can log in to the machine using AD credentials without any problems. Each user is automatically mapped to uid's in the 10000+ range. However, for some reason when the user logs in via dovecot, the user's uid and gid are showing up as 0. For example: dovecot: May 01 11:22:47 Info: auth(default): master out: USER 3 mzukowski uid=0 gid=0 home=/home/URBACON/mzukowski dovecot: May 01 11:22:47 Error: Logins with UID 0 not permitted (user mzukowski) Is there a reason why dovecot might not be resolving the uid and gid correctly? PAM itself seems to be doing this right, since when I log on to the machine as an AD user, their UID shows up correctly as 10000+. Thanks, Matt. -------------- This e-mail message is privileged, confidential and subject to copyright. Any unauthorized use or disclosure is prohibited. Le contenu du pr'esent courriel est privil'egi'e, confidentiel et soumis `a des droits d'auteur. Il est interdit de l'utiliser ou de le divulguer sans autorisation.

1 1

[Dovecot] dovecot-ldap and ldap_result() failed.
by Tan Shao Yi 01 May '07

01 May '07

Hi, I have configured dovecot for auth_bind against an LDAP server on the localhost and I'm seeing the following error in my dovecot logs: dovecot: Apr 30 09:03:18 Error: auth(default): LDAP: ldap_result() failed: Can't contact LDAP server dovecot: Apr 30 09:03:27 Error: auth(default): LDAP: ldap_result() failed: Can't contact LDAP server ... and so on ... When I turned on LDAP logging, this was what slapd logged. Apr 30 09:05:00 recess3 slapd[14387]: [ID 848112 local4.debug] conn=3555 fd=11 ACCEPT from IP=127.0.0.1:47299 (IP=0.0.0.0:389) Apr 30 09:05:00 recess3 slapd[14387]: [ID 215403 local4.debug] conn=3555 op=0 BIND dn="cn=root,o=home" method=128 Apr 30 09:05:00 recess3 slapd[14387]: [ID 600343 local4.debug] conn=3555 op=0 BIND dn="cn=root,o=home" mech=SIMPLE ssf=0 Apr 30 09:05:00 recess3 slapd[14387]: [ID 588225 local4.debug] conn=3555 op=0 RESULT tag=97 err=0 text= May I know what is causing Dovecot to log that it Can't contact the LDAP server when slapd does see the incoming connection. Strangely, everything is working fine, my users are able to authenticate against LDAP; the UIDs, home directories, quotas etc are all picked up correctly. It's just the annoying auth(default) errors that keep popping up every 20 seconds or so. Thanking in advance if anyone has any ideas. Cheers.

4 5

[Dovecot] dovecot for imap
by dhottinger＠harrisonburg.k12.va.us 30 Apr '07

30 Apr '07

I have been using uw-imap on my mailserver. I tried briefly to use dovecot with the default config. It seem to work faster, but users imap folders (user accounts are in openldap) disappeared. Is there a sample config somewhere I can look at to get some idea how to configure dovecot so all the imap folders users created will appear when I make the switch? Most of my users login via Horde. Server is an FC6 box, dovecot installed via yum install. -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools

6 11

[Dovecot] Sieve notify error?
by Láďa 30 Apr '07

30 Apr '07

Hi, I am playing with Sieve, everything is working nice except notify method. Source script looks like this (generated with avelsieve): require ["fileinto","envelope","reject","vacation","imapflags","relational","compara tor-i;ascii-numeric","notify"]; if #hashed-avelsieve-source true { keep; notify :method "mailto" :options "xxx(a)xxx.xx" :low :message "Nova zpráva."; } but with no success. Message is delivered fine, but notification is not sent. Deliver logs only this: deliver(xxx(a)xxx.xx): Apr 28 20:05:23 Info: sieve runtime error: Notify: Generic Error Thanks for any ideas how to get this working. Láďa

2 2

[Dovecot] Auth(default): add one userdb - what does this mean?
by Wade Smart 30 Apr '07

30 Apr '07

I got dovecot to start but then I had to reboot and now Im receiving errors: Apr 27 19:48:18 wadesmart dovecot: auth(default): You'll need to add at least one userdb Im still following the steps from http://wiki.dovecot.org/BasicConfiguration wade

2 1

[Dovecot] Doubled subjectlines in mailfolders
by Götz Reinicke 30 Apr '07

30 Apr '07

Hi, after the upgrade from 0.99 to 1.0rc15 on our RHEL 5 Server I noticed, that some of my mailfolders do double the mails subject line in the listview of thunderbird. The mail itself isn't doubled and the second mail contains a different content from a mail that didn't show up in the list. SO it seams, that only the subject line is somehow wrong. Any ideas or tips? I haven't found anything on that googling or in the list archive; but maybe I'm searching with the wrong syntax ... Regards Götz

2 2

Re: [Dovecot] New install on Ubuntu Fiesty 7.04
by Wade Smart 30 Apr '07

30 Apr '07

Ok. I started with the example file and edited it as the Quick Start suggested and here is the final working result: wadesmart@wadesmart:~$ sudo dovecot -n Password: # /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_extra_groups: mail mail_location: ~/Maildir maildir_copy_with_hardlinks: yes auth default: passdb: driver: passwd-file args: /etc/passwd.dovecot userdb: driver: passwd-file args: /etc/passwd.dovecot wadesmart@wadesmart:~$ I was able to login in via telnet like the tutorial said. In my Maildir/new I had 884 new messages. The tutorial said to access the Inbox, and I did and could. However, then my 884 messages were gone!!! I do not understand what the heck happened. Did I just loose all my messages?

4 10

[Dovecot] dovecot sendmail mysql no inbox error
by jan gestre 29 Apr '07

29 Apr '07

hi guys, we are experiencing this particular problem with one of the webmail server we manage. the server is using dovecot as pop3 and imap server while sendmail is being used as mta. when this user tries to login via telnet, this is what i've got: $ telnet localhost pop3 Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. +OK dovecot ready. user user1 +OK pass password +OK Logged in. -ERR No INBOX for user. Connection closed by foreign host. when i looked at the maillog i saw this: Apr 25 20:52:32 samplemail pop3(samplemail): File isn't in mbox format: /var/mail/samplemail Apr 25 20:52:32 samplemail pop3(samplemail): File isn't in mbox format: /var/mail/samplemail Apr 25 20:52:32 samplemail pop3(samplemail): Couldn't open INBOX: Internal error occured. Refer to server log for more information. [2007-04-25 20:52:32] tried google but not much of help, they just suggested to update or replace dovecot. i already update dovecot and made some changes to default_mail_env parameter, still the same result. dovecot version is 0.99 on a fedora 4 box any idea?

2 7

[Dovecot] Shared mailbox plans
by Timo Sirainen 28 Apr '07

28 Apr '07

** Configuration ** namespace shared { prefix = user/%u/ location = maildir:/home/%u/Maildir:INDEX=~/Maildir/shared-indexes } So the only difference to how it's configured now is that %u is expanded to whatever user whose mailboxes we're accessing. ACL plugin then uses that user as the owner in the namespace's mailbox owner. Since the default ACL is to not give any access to non-owners, the mailboxes without dovecot-acl files will be invisible. If ACL plugin isn't loaded, I suppose the mailboxes can be accessed if the process has filesystem permissions to access them. ** ACL vfile speedups ** Currently it stat() the dovecot-acl file a bit too often. It doesn't do it more than once a second, but there's really no need to do it even that often. I guess it could be changed to be configurable with default being something like 5 minutes. Create a new dovecot-acl-list file which lists all the mailboxes which have dovecot-acl file with "l" right (visible in mailbox list) to any non-owner. It could be in "<timestamp> <mailbox name>" format. This allows other users to quickly get a list of mailboxes that are potentially visible to them. They still need to read the dovecot-acl file from the mailbox before knowing for sure. If the dovecot-acl-list file doesn't exist or if at any time any timestamp doesn't match dovecot-acl file's current mtime, the file is rebuilt by looking into all mailboxes' dovecot-acl files (if the reading user has write permissions to the directory, otherwise it just keeps it in memory). Whenever Dovecot modifies dovecot-acl file, it also updates the dovecot-acl-list file. This means that the file can contain stale data only if a new dovecot-acl file is created without updating dovecot-acl-list file. Even that will be fixed the next time the owner does a LIST (or select the mailbox, or anything that causes its dovecot-acl file to be stated), which causes ACL plugin to notice the desync. There exist also global ACL files. These need to be included in the dovecot-acl-list file as well. The only issue with them is that user doesn't necessarily have a mailbox even though the global ACL file exists. So these need to be marked somehow in the dovecot-acl-list file as non-existing mailboxes. Then if user creates a mailbox with such name, the mark is removed. Deleting the mailbox puts the mark back. After the visible mailbox list has been figured out once, only the dovecot-acl-list file needs to be stat()ed once in a while instead of all the mailboxes' dovecot-acl files. ** User list ** The next problem is how to quickly get a list of users whose mailboxes are visible to ourself so they can be included in mailbox list. I couldn't figure out anything new and great for this, so the options are the same as in http://dovecot.org/list/dovecot/2006- October/017082.html Although for dict backend I could make it a bit more secure. Currently dict has "private" and "shared read-write" options to store the data with. The shared users list could be done with "shared read- only". ** Virtual domains ** ACL plugin could support virtual "group=@domain" to give access to usernames ending with @domain. Or perhaps the group could support wildcards? "group=*@domain"? That way it wouldn't be required to have @ really in the username. Anyway, I think "anyone" should then be aliased to "group=*@domain". If there are multiple virtual domains and you let the users manipulate the ACLs themselves, I'd think they want anyone to mean anyone within my domain (my organization) rather than really anyone who just happens to be using the same server. I think it would also be annoying if anyone could really force their own mailboxes to be visible to a lot of people. That could be used for spamming as well.. If administrator wants to have global mailboxes that really are visible to all domains, they could be done with public namespaces (not shared). ** Quota ** This is kind of problematic. The behavior depends entirely on quota backend: - Filesystem quota of course tracks the quota based on the file's owner - Maildir++ quota counts the quota for the user whose maildir the shared mailbox exists in. This means it also requires filesystem level access to maildirsize file, otherwise the quota updating happens sometimes later when the quota is recalculated. - Dict quota.. I think it'll need a new path for each shared mailbox, which is modifiable by any user. So while your own quota would exist in private/quota/storage, the shared mailboxes' quota would exist in shared/quota/storage. This means that the dict quota needs to be able to know what mailboxes the current user has shared. It also gets a bit tricky to update the quota if mailbox is unshared. The quota could be tracked individually for each mailbox also, but I'm not sure if that's such a great idea either. Perhaps a new quota backend could be implemented to make all this easier. The mail sizes could be tracked in index file, so getting the size of a mailbox could be done simply by reading the value from the index file's header. With mailbox list indexes (in CVS HEAD) they'd all be listed in a single mailbox.list.index file, which would make summing them up really fast. This would require that users don't use private index files for shared mailboxes though. But if the users don't have shell access the shared index files are probably a good idea anyway (at least from performance point of view). ** Symlink shares ** Currently the only way to implement shared mailboxes among users is for administrator to create symlinks. This will be possible in future too with a configuration like: namespace shared { prefix = Shared/ location = maildir:~/Maildir/shared-symlinks:INDEX=~/Maildir/ shared-indexes } The "owner" ACL won't match anyone. So it'll work exactly as it does now.

6 15

[Dovecot] New install on Ubuntu Fiesty 7.04
by Wade Smart 28 Apr '07

28 Apr '07

System: Ubuntu 7.04 Dovecot Version: 1.0.rc17 Dovecot -n Output: wadesmart@wadesmart:~$ sudo dovecot -n Password: # /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_extra_groups: mail mail_location: /home/wadesmart/Maildir auth default: passdb: driver: pam userdb: driver: passwd This is my personal system and I use fetchmail and postfix to get and store my mail. All Im wanting to do is to access my email in maildir format. I am new to linux and definitely to this type of setup. Since this is my own system all these talk about security measures seem a bit overboard for my needs. I guess what Im really asking is for a more simple setup instruction set. wade

2 2

[Dovecot] dovecot 1.0, namespace & mbox
by Stefan Klatt 27 Apr '07

27 Apr '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, >i try to use a new namespace with mbox parallel to my working maildir >configuration. Has nobody any idea to get this configuration working? Mfg. Stefan Klatt - -- CaC, Computer and Communication Inhaber Stefan Klatt Triftstrasse 9 60528 Frankfurt Germany Tel.: +49-(0)172-6807809 Tel.: +49-(0)69-67808-900 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGMlwE+AkeCg4UPr4RAqnLAKCeRto1AgGS/P0MBrDZPg/3fEgvDwCg5BJo 3iZhN7x4tHAGPNVwgwwUUEM= =4Zaf -----END PGP SIGNATURE-----

1 0

[Dovecot] dovecot + ldap + quota
by aza zel 27 Apr '07

27 Apr '07

hi.... i using dovecot 1.0rc26 and i started to configure quota plugin but i think its not working fine. i configure like suggested in http://wiki.dovecot.org/Quota in dovecot.conf: protocol imap { mail_plugins = quota imap_quota } plugin { # 10 MB quota limit quota = maildir:storage=10240 } in dovecot-ldap.conf: user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,quotaStorage=quota if a mua send a attach near 9MB i receive a message tell me that the server don't have more space, but if i attach files of 2MB this messages are sending ok, and the cur directory of this user have 15 MB. another question: in ldap entry, the attribute quota are the attibute that A represents the quota on a mailbox, ¿so why i put 10MB as limit? uota = maildir:storage=10240 ¿this value is for all "entryes" or the quota limit is the entry quota limit? i you can see, i not understand how dovecot works with the attribute quota in ldap entry; ¿can anybody explain me this? Thanks in advance!!!

3 3

[Dovecot] Dovecot "assertion failed" errors
by Christian Friedli 27 Apr '07

27 Apr '07

Dear all, We are running Dovecot (on debian etch, Version 1.0.rc15-2) on 4 Loadbalanced servers using a NFS share for the homedirs. The loadbalancer is using persistant connections (timeout 30min). Lately, IMAP Users (mostly using Thunderbird) reported the following errors: 1. When trying to mark messages as read, nothing happened, message was still displayed as unread. 2. When moving a Directory the client loads for a long time and then hangs. Same was reported to happened when a user tried to open a mail. When checking the logs at the time users reported those errors we could always find one fo the following "assertion failed" errors: file mail-index-sync-update.c: line 730 (mail_index_sync_update_index): assertion failed: (view- >hdr.messages_count == map->hdr.messages_count) file mail-index.c: line 415 (mail_index_map_parse_keywords): assertion failed: (ext->hdr_offset < map->hdr.header_size) file mail-index.c: line 909 (mail_index_sync_from_transactions): assertion failed: (prev_seq <= max_seq && (prev_seq != max_seq || prev_offset <= max_offset)) file mail-transaction-log-view.c: line 158 (mail_transaction_log_view_set): assertion failed: (min_file_seq != max_file_seq || min_file_offset <= max_file_offset) file mail-transaction-log-view.c: line 229 (mail_transaction_log_view_set): assertion failed: (view->cur_offset <= view->cur->sync_offset) file message-body-search.c: line 393 (message_body_search_ctx): assertion failed: (input->v_offset <= part->physical_pos) I wonder if anyone has experienced similar problems and if there is a solution to this strange behaviour. ____________________________ University of Bern IT Department Central Systems Group Christian Friedli E-Mail Services Gesellschaftsstr. 6 CH-3012 Bern Switzerland Tel. +41 (0)31 631 38 38 Fax +41 (0)31 631 43 57 mailto:christian.friedli@id.unibe.ch http://www.mail.unibe.ch --

2 3

[Dovecot] sendmail + dovecot + vpopmail + virtual users, problem with pop3 uidl
by Oliver Schulze L. 27 Apr '07

27 Apr '07

Hi, I just migrated a server running qmail+vpopmail+maildir to sendmail+dovecot+maildir+vpopmail The migrating is working great thanks to the help from the list and the wiki. I'm now running the infamous problem about duplicating emails, because of pop3 UIDL mismatch. My question is: anyone knows that the pop3_uidl_format string for a vpopmail server? I'm using vpopmail auth and userdb. I noted that when manually issuing a list command to the vpopmail pop3 server, it uses a number that is in the filename for identifying the email. For example if the filename uses: .....,S=1234,... Then the UID is 1234, and 1234 appears in the list command. Many thanks Oliver -- Oliver Schulze L. | Get my e-mail after a captcha in: Asuncion - Paraguay | http://tinymailto.com/oliver

1 1

[Dovecot] LSUB "" "" vs LIST "" "" (hacked Apple Mail problem)
by Eyvind Bernhardsen 27 Apr '07

27 Apr '07

The LSUB command does not act like LIST when provided with an empty mask argument. LIST responds with the hierarchy delimiter: * LIST (\Noselect) "." "" OK List completed. whereas LSUB doesn't return anything useful: OK Lsub completed. RFC 3501 doesn't specify what LSUB should do in this case, but Courier IMAP has LSUB act like LIST. The attached patch modifies imap/cmd-list.c to make Dovecot do the same. Why do I care about LSUB? I'm using a hack for Apple Mail that replaces its LIST command with LSUB (something like what's described here: http://www.macosxhints.com/article.php? story=20040407062603804), to prevent it from syncing public folders from the Exchange server at the office. The hack replaces _all_ LISTs with LSUBs, including the LIST "" "" Mail.app sends to discover the hierarchy delimiter. Since dovecot doesn't give it any information in response to LSUB "" "", Mail.app defaults to using "/" as a delimiter, which means that trying to access a subfolder only results in an "Invalid mailbox name" error. While this isn't really a bug in Dovecot, it's not inconceivable that other people than me could be affected by this problem (macosxhints.com has a substantial readership). It's also tricky to diagnose, especially since the "Invalid mailbox name" message doesn't include the invalid mailbox name, so any bug reports you get are likely to eventually be filed under "crazy [Mac] users". In fact, while Googling to figure out why Dovecot wasn't working for me, I came across at least one poster to this mailing list who had discovered that Mail.app was using "/" as a delimiter. I can't be sure, but I'm guessing that his problem was related to mine. Since the patch is tiny and doesn't hurt performance or make Dovecot do anything that contradicts the IMAP RFC, I hope you'll consider adding it to the official distribution. Eyvind Bernhardsen

6 9

[Dovecot] simple questions
by Nagyon Almos 27 Apr '07

27 Apr '07

Hello Everybody, I would like to use Dovecot on my desktop with imap but before doing the real migration I have some (very simple) questions: - Is there any way to log in with imap automatically ? That is, from localhost without any passwords. - Can Dovecot work with only readable maildirs? I want to avoid accidental e-mail loss, therefore on some maildir folder I have only read permissions. Or shall I use ACLs only? - Is there or Will there be a windows version? (In case I had to use windows.) Thanks for any help. Regards, A. <br><br>____________________________________________ GYŰJTSÖN LAKÁSRA AZ INTERNETEN! <a href="http://cthandler.adverticum.net/?cturl=http%3A%2F%2Flakaskassza.origo.hu%2F… " target="new">lakaskassza.origo.hu</a>

2 2

Re: [Dovecot] AIXPluginsSupport and AIX FS qoutas
by Ralf Becker 26 Apr '07

26 Apr '07

Hello Stewart, Stewart Dean schrieb am 25.04.2007 21:26: > I'm running AIXV5.3 at the latest level, compiling using the IBM C for > AIX V6.0 compiler and building/running Dovecot at V1.0/mbox under test > usage by our IT department right now. We have a legacy UWIMAP that is > currently the production IMAP service. The same here: - AIX 5.2, - xlC 6, - uwimap and qpopper in production and - dovecot for testing. > I am cleaning up on some left-over loose ends, one of them being > quotas/plugins, and I have some questions about your page with > AIXPluginsSupport on which I'd appreciate your assistance and comments. > > 1) I use AIX filesystem quota on the Inbox and folders, though the > indices are in a separate un-quota-ed filesystem.. a) Do you use Dovecot > with AIX FS quotaing or know of someone with experience? > b) What do you get out of FS quotaing? Since the quota with FS quotaing > is enforced by AIX, what does the FS plugin do that isn't already > achieved by the OS's function? Do I just get quota reporting? > c) If I don't enable quota in Dovecot and let AIX deal with it, are > there any problems? > No, I'm not using AIS FS quotas nor I've any experience with that, sorry > 2) A minor point but you invoke configure using bash: > bash configure > Configure is written in sh; can I just leave off the bash, since the > dovecot-cc script you wrote calls out bash in the first line > You can, but bash is backwards compatible to sh. I'm usually using bash because of it's performance. You may try this: # CONFIG_SHELL=bash time bash ./configure # time ./configure > 3) I gather you use Gnu gcc; do you know of any problems/benefits with > using the IBM compiler? > I'm using xlc and dovecot-cc depends on it. I've haven't use gcc on AIX for years :-) So in my opinion a common problem with xlc (or better xlc and AIX) is the shared object handling. Libtool seems to fix most of the problems. I've mentioned this in http://www.dovecot.org/list/dovecot/2007-March/021247.html > Thanks in advance........S. > Regards, Ralf -- ______________________________________________________________________ Dipl.-Inform. (FH) Ralf Becker Rechenzentrum (r/ft) der FH Trier (Network|Mail|Web|Firewall) University of applied sciences Administrator Schneidershof, D-54293 Trier Mail: beckerr(a)fh-trier.de Fon: +49 651 8103 499 WWW: http://www.fh-trier.de/~beckerr Fax: +49 651 8103 214 PGP: http://www.fh-trier.de/~beckerr/pgp ICQ: <available> ______________________________________________________________________ Wenn Gott gewollt haette, dass E-Mail in HTML geschrieben wuerden, endeten Gebete traditionell mit </amen>. (Tom Listen)

1 0

[Dovecot] Dovecot, Postfix and SMTP AUTH.... one more time...
by Bartosz Toczek 26 Apr '07

26 Apr '07

Hello. I've notice a problem with SMTP AUTH in postfix with dovecot. My configuration is based on Postgresql. I've created a function in postgresql which returns password and username and attached it to password_query. Query looks like this password_query = SELECT username_out as username, password_out as password FROM get_password(lower('%n'),lower('%d')); Problem is when get_password returns something like this... vmail=# SELECT username_out as username, password_out FROM get_password(lower(''),lower('')); LOG: statement: SELECT username_out as username, password_out FROM get_password(lower(''),lower('')); LOG: duration: 2.342 ms statement: SELECT username_out as username, password_out FROM get_password(lower(''),lower('')); username | password_out ----------+-------------- | (1 row) It returns 1 empty row.... When this is attached to postfix with smtp auth with such configuration # SMTP AUTH broken_sasl_auth_clients = yes smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth my serwer starts to be open relay... I now that it returns empty string for username and password... so where is the password checked... if I dont send password as a parameter to my function. Definition of the function looks like this: CREATE FUNCTION get_password("login" character varying, "domain" character varying, OUT username_out character varying, OUT password_out character varying) RETURNS record Can you help with that... BT

1 0

[Dovecot] 1.0 in Debian etch
by Paul 26 Apr '07

26 Apr '07

Is there a plan to upgrade the stable package from 1.0-rc15?

4 4

[Dovecot] dovecot 1.0, namespace & mbox
by Stefan Klatt 25 Apr '07

25 Apr '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, i try to use a new namespace with mbox parallel to my working maildir configuration. With this i have a few interesting effects: - - dovecot doesn't use the CONTROL statement and generate a .subscriptions file at the namespace directory. The INDEX statement is used. - - dovecot can work with subdirectories even mbox is used - - I can't work with namespaces under Thunderbird till i have a mbox file manually there. an subscription or construction of a new mbox file isn't possible :-( but this seems like one of the (handling?) bugs of Thunderbird - - Why can't i delete a Folder at an namespace? Dovecot complains "Can't rename mailbox to another storage type". Probably this is only a config issue. - - if i use as the first character for the prefix an # like #Archiv dovecot dosen't recognize the complete prefix statement at this namespace. The output of "dovecot -n" is the same except the prefix statement. I thought # is a legal character? A folder can start with it. Any ideas ?? Here is the output of dovecot -n : [root@cac etc]# dovecot -n # /etc/dovecot.conf ssl_cert_file: /etc/pki/tls/certs/cac.is-a-geek.com.cert ssl_key_file: /etc/pki/tls/private/cac.is-a-geek.com.key login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_extra_groups: email dotlock_use_excl: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins: zlib mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle tb-extra-mailbox-sep imap_client_workarounds(imap): outlook-idle tb-extra-mailbox-sep imap_client_workarounds(pop3): outlook-idle namespace: type: private separator: / location: maildir:/srv/imapd/user/%u/maildir inbox: yes namespace: type: public separator: / prefix: Public/ location: maildir:/srv/imapd/shared/public/maildir:CONTROL=/srv/imapd/user/%u/shared-settings/public/control:INDEX=/srv/imapd/user/%u/shared-settings/public/index namespace: type: public separator: / prefix: Archiv/ location: mbox:/srv/imapd/shared/archiv/maildir:CONTROL=/srv/imapd/user/%u/shared-settings/archiv/control:INDEX=/srv/imapd/user/%u/shared-settings/archiv/index auth default: passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: static args: uid=600 gid=600 - -- CaC, Computer and Communication Inhaber Stefan Klatt Triftstrasse 9 60528 Frankfurt Germany Tel.: +49-(0)172-6807809 Tel.: +49-(0)69-67808-900 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGL47E+AkeCg4UPr4RApGVAJ9mvhvZAFEcamaSJcL7DTOTLjp4GgCfYkrz tsCThhIsYjCVH1pkPJIq2Go= =hCRf -----END PGP SIGNATURE-----

1 0

[Dovecot] bug? ldap auth CRAM-MD5
by André Höpner 25 Apr '07

25 Apr '07

Hello list, our users are authenticated against ldap-server. anything works fine... dovecot: imap-login: Login: user=<xxx>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured but now we want to use secure passwords and not only plain over ssl. so we configured dovecot to use cram-md5 and configured the ldap-server with CRAM-MD5 passwords. as client we used thunderbird 2.0 and a webfrontend called roundcube. that does not work, because the server gives... dovecot: auth(default): ldap(xxx,127.0.0.1): Password mismatch then we tried to use DIGEST-MD5. we changed the ldap password to the created one with dovecotpw. but this doesnt work too. thunderbird requests CRAM-MD5 and not DIGEST-MD5. so the log says: dovecot: auth(default): password(xxx,127.0.0.1): Requested CRAM-MD5 scheme, but we have only DIGEST-MD5 imap-login: Aborted login: user=<xxx>, method=CRAM-MD5 after that we changed the password back to CRAM-MD5, but we mad the failure not to delete the DIGEST-MD5 value. so the users had 2 passwords set... {CRAM-MD5}e02d374fde0dc75a17a557039a3a5338c7743304777dccd376f332bee68d2cf6 {DIGEST-MD5}358aefa044c08e6c19711c8117714fb0 password is "test" in both cases. on the next try we start thunderbird it works. i dont know why and the log of dovecot says... auth(default): ldap(xxx,127.0.0.1): Multiple password values not supported imap-login: Login: user=<xxx>, method=CRAM-MD5, rip=127.0.0.1, lip=127.0.0.1, secured user was logged in using CRAM-MD5. it's not nice but it works. anyone have an idea why? because of apache-module to auth against ldap and apache doesnt support nor CRAM-MD5 or DIGEST-MD5 we have set the password third time using MD5. So every user has three same passwords with different encryptions. Not nice - but it works. But what can we do to change this. I dont like to set passwords three times. our configuration: # /etc/dovecot/dovecot.conf ssl_cert_file: /etc/ssl/ssl.pem ssl_key_file: /etc/ssl/ssl.key login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login mail_extra_groups: mail mail_location: mbox:/var/mail/dovecot/%n:INDEX=/var/mail/dovecot/indexes/%n mail_plugins: quota imap_quota auth default: mechanisms: plain login cram-md5 digest-md5 verbose: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf plugin: quota: maildir:storage=1024 ------------- # /etc/dovecot/dovecot-ldap.conf hosts = 127.0.0.1:389 dn = cn=dovecot,dc=xxx,dc=com dnpass = dovecot sasl_bind = no sasl_mech = DIGEST-MD5 tls = no auth_bind = no ldap_version = 3 base = ou=People,dc=xxx,dc=com scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%u)) default_pass_scheme = DIGEST-MD5 ------------- best regards Andre

1 0

[Dovecot] upgrading RHEL4 to RHEL5 - dovecot 0.99 to 1.0rc15
by Götz Reinicke 25 Apr '07

25 Apr '07

Hi, now that a lot off software is updated e.g. RedHat EL and dovecot got finaly final :-) we plan to upgrade our mailserver from RHEL4 dovecot 0.99 to RHEL5 with dovecot 1.0rc15 - the rpms provided by Red Hat. I've read the upgrading Dovecot manual from here http://wiki.dovecot.org/UpgradingDovecot, but yust to get things right I'd like to ask some questions: Simply spoken, we use the basic default dovecot-config, mbox format and imaps/pop3s. So will there be any big trouble to just use the most default settings of the 1.0 config file? Or which options are compleatly different? Dose there exist a migration how to beside the dovecot upgrade from the wiki? Thanks for hints and tips! Best regards Götz Reinicke -- Götz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Geschäftsführer: Prof. Thomas Schadt

1 0

[Dovecot] disabling pop/imap per mail address?
by Armijn Hemel 25 Apr '07

25 Apr '07

hello, first of all I want to say thanks to Timo for Dovecot 1.0. We've been running it in production at the company where I work and we're very pleased with it. Good job! One thing that we were wondering about today is if we can disable a certain protocol depending on the mailbox. So for example: user A can access via pop3s and imap, user B can only access via pop3, user C can use only imaps, and so on. thanks! armijn PS: am I assuming correctly that IMAP namespaces will make it possible to have shared IMAP folders with Dovecot? I'm still a bit of an IMAP dummy -- --------------------------------------------------------------------------- armijn(a)uulug.nl | http://www.uulug.nl/ | UULug: Utrecht Linux Users Group ---------------------------------------------------------------------------

2 1

[Dovecot] Experience with Dovecot + Sieve + Webmail?
by Steffen Kaiser 24 Apr '07

24 Apr '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, there were some posts into this lists regarding Webmail interfaces and Sieve. What are the experiences with them? I need a webmail frontend that is capable of IMAP, supporting dovecot's namespaces, verifying PGP and managing Sieve in conjunction with Dovecot. I found two mature products, I also saw posts about, so I'm going to ask. Some posts on this list suggest that some are using SquirrelMail/avelsieve and some Horde (IMP/Ingo). What are the experiences with them? Are they stable and are there configuration glitches (there is a thread about a bug in avelsieve, for instance). How do they interact with Dovecot in order to find the user's homedirectory to get/put the Sieve script? Maybe it's offtopic for the Wiki, but would you mind share your configuration on the Dovecot Wiki? Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBRi3/dS9SORjhbDpvAQLoCggAgGInRUJI944aAIOjOjDWsdlssCdnqTlk CWufMVfFpTjRqN9VobuUHiZzVY45zDN+9emVm4b68hL+L9bHQZyytiqsZjmDNlWM wcE49XckNAAOaq+qOJZR+2CxyKAECklGkhTrs5hfLSZx8i/5uGNCyAOHFQ98YU6Q 3VoDeNq5Cd0sVxiEEzeLeU6BrcY7Cnt+qeemZCSfKRI5cQow+edSM8Mb7BP7WuUU wlaMo5bTZLBWQCQPAPd7m9wiBueV6bDxhsfe9yuOYxUKHI/N/sKr3iRLcZCxRsXk wh3UT6OcFe4Mg873EMfdZClahLp5a3oUbP1lH7MP8Aa9iSOccEIcNg== =ADCc -----END PGP SIGNATURE-----

4 3

[Dovecot] message-of-the-day feature?
by Steven F Siirila 24 Apr '07

24 Apr '07

For lack of a better name, we are interested in a feature where one could get a notice out to all Dovecot users as quickly as possible, possibly without going through an MTA even. Given a message and a list of userids we could certainly do a mailing on the MDA server itself going through both Postfix and Dovecot LDA. However, we were wondering what other options we might have in Dovecot. For example, would it be possible to place the message into some file which Dovecot periodically checks for, and if the file exists, either present it to the user as a new message, or automatically deliver it at that time via Dovecot LDA? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

9 10