- dovecot - dovecot.org

[Dovecot] bug in 1.0RC2?
by Renaud Allard 17 Jul '06

17 Jul '06

Hello, I have a small problem with dovecot 1.0RC2. This didn't happen with former versions. There are imap processes that are left open a long while after the client disconnected. I am running dovecot on OpenBSD 3.8. Below is the output of a process list. As you can see, there are many imap processes for the same login running. simon 11593 0.0 0.1 924 1140 ?? I 12:21PM 0:00.48 imap [simon 24.43.241.184] juha 1376 0.0 0.2 1936 2212 ?? I 12:25PM 0:01.36 imap [juha 203.114.146.110] n 26989 0.0 0.1 1060 1292 ?? I 2:18PM 0:00.47 imap [n 85.201.63.39] n 30256 0.0 0.5 5124 5300 ?? I 3:34PM 23:29.59 imap [n 85.201.63.39] n 27695 0.0 0.1 1020 1284 ?? I 3:39PM 0:00.26 imap [n 85.201.63.39] n 24109 0.0 0.1 960 1328 ?? I 3:57PM 0:00.18 imap [n 85.201.63.39] n 20018 0.0 0.1 948 1288 ?? I 4:00PM 0:00.28 imap [n 85.201.63.39] n 12715 0.0 0.1 900 1240 ?? I 4:09PM 0:00.25 imap [n 85.201.63.39] n 3466 0.0 0.1 1116 1280 ?? I 4:27PM 0:00.43 imap [n 85.201.63.39] simon 16654 0.0 0.1 864 1268 ?? I 4:31PM 0:00.14 imap [simon 24.43.241.184] simon 12460 0.0 0.1 980 1256 ?? I 5:02PM 0:00.11 imap [simon 24.43.241.184] simon 31713 0.0 0.1 940 1280 ?? I 5:11PM 0:00.17 imap [simon 24.43.241.184] simon 14593 0.0 0.1 1004 1212 ?? I 6:18PM 0:00.56 imap [simon 24.43.241.184] n 15645 0.0 0.5 4984 5336 ?? I 6:19PM 0:37.77 imap [n 85.201.63.39] simon 10532 0.0 0.1 1220 1480 ?? I 6:21PM 0:01.28 imap [simon 24.43.241.184] n 13642 0.0 0.1 1088 1268 ?? I 7:32PM 0:00.32 imap [n 85.201.63.39] juha 20201 0.0 0.2 1736 2160 ?? I 10:45PM 0:00.82 imap [juha 203.114.146.110] simon 30389 0.0 0.1 952 1276 ?? I 11:11PM 0:00.68 imap [simon 24.43.241.184] juha 26802 0.0 0.2 1948 2172 ?? S 2:45AM 0:00.98 imap [juha 203.114.146.110] simon 26946 0.0 0.1 884 1232 ?? I 5:21AM 0:00.09 imap [simon 24.43.241.184] simon 21744 0.0 0.1 948 1244 ?? I 5:22AM 0:00.06 imap [simon 24.43.241.184] simon 17271 0.0 0.1 868 1272 ?? I 5:24AM 0:59.36 imap [simon 24.43.241.184] simon 641 0.0 0.1 952 1228 ?? I 5:31AM 0:00.14 imap [simon 24.43.241.184] simon 23690 0.0 0.1 812 1152 ?? I 5:32AM 0:00.04 imap [simon 24.43.241.184] simon 25444 0.0 0.1 1024 1228 ?? I 5:37AM 0:36.67 imap [simon 24.43.241.184] simon 6198 0.0 0.1 1000 1228 ?? I 5:54AM 0:00.14 imap [simon 24.43.241.184] simon 9066 0.0 0.1 1040 1244 ?? I 6:01AM 0:28.46 imap [simon 24.43.241.184] simon 15098 0.0 0.1 908 1120 ?? I 6:01AM 0:00.12 imap [simon 24.43.241.184] simon 15905 0.0 0.1 992 1232 ?? I 6:13AM 0:39.33 imap [simon 24.43.241.184] simon 26291 0.0 0.1 848 1264 ?? I 6:13AM 0:00.10 imap [simon 24.43.241.184] simon 20385 0.0 0.1 1004 1216 ?? I 6:14AM 0:00.23 imap [simon 24.43.241.184] simon 21078 0.0 0.1 876 1224 ?? I 6:15AM 0:39.01 imap [simon 24.43.241.184] simon 17733 0.0 0.1 828 1196 ?? I 6:21AM 0:30.02 imap [simon 24.43.241.184] simon 22327 0.0 0.1 1192 1408 ?? I 6:24AM 16:20.01 imap [simon 24.43.241.184] simon 20571 0.0 0.1 808 1196 ?? I 6:28AM 0:00.25 imap [simon 24.43.241.184] simon 15751 0.0 0.1 804 1132 ?? I 6:31AM 0:00.12 imap [simon 24.43.241.184] simon 28495 0.0 0.1 904 1108 ?? S 6:51AM 0:00.20 imap [simon 24.43.241.184] n 24886 0.0 0.1 892 1192 ?? S 8:39AM 0:00.04 imap [n 85.201.63.39] n 7397 0.0 0.1 1004 1052 ?? S 8:43AM 0:00.02 imap [n 85.201.63.39] n 9757 0.0 0.1 900 1288 ?? S 8:44AM 0:00.13 imap [n 85.201.63.39] n 6788 0.0 0.1 928 1196 ?? S 8:53AM 0:00.01 imap [n 85.201.63.39]

4 7

[Dovecot] pop3 auth problem solved!
by Bruce Lane 16 Jul '06

16 Jul '06

Fellow techies, OK... This is going to go down as one of those "D'Oh!" moments in the world of computers. Boy, do I feel dumb... In short: I found the problem. One miserable little line in 'dovecot.conf' called 'auth_default_realm =.' I had this set to 'bluefeathertech.com,' thinking it was necessary to do so. I was wrong, at least for my environment, and the stupid clues were right in front of me in the logfile all the time! For the benefit of others who may run into this: Setting a domain name in this entry causes that domain name to be automatically appended to usernames when they log in. No wonder nothing ever matched in /etc/passwd! My deepest thanks to Frank Cusack for giving me the idea. Something he said in his post, in response to my initial one, got me thinking about things getting appended to the user name, and the rest is history. pop3 and pop3s both work just fine now, thanks. ;-) Keep the peace(es). -=-=-=-=-=-=-=-=-=-=-=- Bruce Lane, Owner & Head Hardware Heavy, Blue Feather Technologies -- http://www.bluefeathertech.com kyrrin (at) bluefeathertech do/t c=o=m "If Salvador Dali had owned a computer, would it have been equipped with surreal ports?"

1 0

[Dovecot] pop3 authentication problems: Still got 'em...
by Bruce Lane 16 Jul '06

16 Jul '06

Fellow users, This is just a heads-up to let the list know that I'm still unable to get ANY sort of pop3 or pop3s authentication to work with Dovecot. Just as a sanity check, I set up an entirely separate system, running FreeBSD 6.1 production, postfix 2.3, and Dovecot 1.0rc2, as a testbed. I got the exact same problem that I had with the NetBSD 3.0 production server, specifically that Dovecot refuses to authenticate a user with either basic pop3 or pop3s. The way I see it, I may as well try to get basic pop3 working first. If it doesn't, pop3s will never work. This first quote is taken from the mail client (Pegasus) trying to establish a regular, unencrypted pop3 session. -=-=-=-=-=-=- [*] Connection established to 192.168.42.80 >> 0058 +OK AVG POP3 Proxy Server 7.1.368/7.1.394 [268.10.1/389] << 0013 USER kyrrin >> 0005 +OK << 0016 PASS XXXXXXXXX >> 0029 -ERR Authentication failed. -=-=-=-=-=-=-=- As you can see, the user ID of 'kyrrin' is getting passed as just that, and Dovecot at least seems to recognize it. I say this as a prefix to the next log clip, which will be the corresponding entry from /var/log/maillog, in which the user name is being presented (for whatever reason) in FQDN format. Note that pam was added just as an experiment. It failed too, despite the presence of a 'dovecot' file, containing the following, in /etc/pam.d -=-=-=-=-=-=-=- pioneer# cat /etc/pam.d/dovecot auth required pam_unix.so nullok account required pam_unix.so pioneer# -=-==-=-=-=-=- This would be the /var/log/maillog entry corresponding to the above-referenced Pegasus session. -=-=-=-=-=-=-=- Jul 16 11:24:38 pioneer dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=192.168.42.80rip=192.168.42.40 resp=AGt5cnJpbgBocDIxZHZlbTc= Jul 16 11:24:38 pioneer dovecot: auth(default): pam(kyrrin(a)bluefeathertech.com,192.168.42.40): pam_authenticate() failed: authentication error Jul 16 11:24:38 pioneer dovecot: auth(default): cache(kyrrin(a)bluefeathertech.com,192.168.42.40): User unknown Jul 16 11:24:40 pioneer dovecot: auth(default): client out: FAIL 1 user=kyrrin(a)bluefeathertech.com Jul 16 11:24:49 pioneer dovecot: pop3-login: Aborted login: user=<kyrrin(a)bluefeathertech.com>, method=PLAIN, rip=192.168.42.40, lip=192.168.42.80 -=-=-=-=-=-=-=- This next bit is the auth default section of my dovecot.conf file. Other sections, or the entire file, can be posted upon request. -=-=-=-=-=-=-=- auth default { # Space separated list of wanted authentication mechanisms: # plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi mechanisms = plain login passdb pam { } passdb passwd { } userdb passwd { } socket listen { client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } -=-=-=-=-=-=-=-=-=-=- I've posted a similar note to bsdforums, in the hope that someone there is (successfully) using Dovecot with pop3 and pop3s. Thanks in advance for any assistance. I'm really starting to get seriously upset about this, enough to give thought to qpopper over Dovecot. -=-=-=-=-=-=-=-=-=-=-=- Bruce Lane, Owner & Head Hardware Heavy, Blue Feather Technologies -- http://www.bluefeathertech.com kyrrin (at) bluefeathertech do/t c=o=m "If Salvador Dali had owned a computer, would it have been equipped with surreal ports?"

3 4

[Dovecot] auth with kerberos
by Renaud Allard 16 Jul '06

16 Jul '06

Hello, I am running dovecot 1.0RC2 and I'd like to know if there is a way to make dovecot provide PLAIN, LOGIN, CRAM-MD5, NTLM authentications from a kerberos database. GSSAPI works great, but I currently have to have two password databases, one for GSSAPI and one for all the others. What I'd like is to have only one password database (namely kerberos). I know that cyrus-sasl (which most of you don't like I think ;)) can provide such authentications, but I haven't found the way to configure dovecot to do the same. Any input welcome.

2 2

Re: [Dovecot] TLS Issues - Plain Text login?
by Timothy White 15 Jul '06

15 Jul '06

Thanks Marcus and Thomas. I should have checked it in another client ;-) Tim -- Linux Counter user #273956 Don't email joeblogs(a)scouts.org.au

1 0

Re: [Dovecot] Deliever in RC2 incorretly outputs "saved mail to INBOX"
by Alex Pimperton 14 Jul '06

14 Jul '06

Hi All, I've recently upgraded to RC2 (debian package) and now I get the following message in syslog all the time: Jul 14 15:51:04 server01 deliver(alex): saved mail to INBOX This seems to happen for every mail, despite some being filtered into different folders. It goes like this: Mail arrives from Ubuntu mailing list: Jul 14 15:53:49 server01 postfix/qmgr[19023]: D51A95C023: from=<ubuntu-users-bounces(a)lists.ubuntu.com>, size=4319, nrcpt=1 (queue active) I get this message: Jul 14 15:53:51 server01 deliver(alex): saved mail to INBOX Postfix sends to deliver: Jul 14 15:53:51 server01 postfix/local[29843]: D51A95C023: to=<alex(a)placet.co.uk>, relay=local, delay=29, status=sent (delivered to command: /usr/lib/dovecot/deliver) ...and a few seconds later it shows up in my Ubuntu-Users folder, exactly where my sieve rule sends it. Is this a bug? Alex -- This message has been scanned for viruses and dangerous content by the MailScanner at Placet.co.uk, and is believed to be clean.

1 0

[Dovecot] Backing up mail
by Davide Bolcioni 14 Jul '06

14 Jul '06

Greetings, in backing up mail stored according to default_mail_env = mbox:~/mail/:INBOX=/var/mail/%u is it safe *not* to backup the .imap subdirectory ? I am currently using dovecot-0.99.13-3.FC3. When restoring, I guess the safe option would be to zap the contents of .imap so that it gets rebuilt, correct ? Thank you for your consideration, Davide Bolcioni -- Paranoia is a survival asset.

1 0

[Dovecot] TLS Issues - Plain Text login?
by Timothy White 14 Jul '06

14 Jul '06

I'm trying to setup IMAP, so that it works via secure connections. I have it working fine over SSL, now I wish to get TLS to work. I have set imap and imaps to both listen on *, and have disable_plaintext_auth = yes, which according to the docs, Disable LOGIN command and all other plaintext authentications unless SSL/TLS is used (LOGINDISABLED capability). So the problem is now, that TLS doesn't work. Trying it with thunderbird, I get a message about login being disabled, and to check my settings and such. The port is correct (imap, not imaps), and I have it to always use TLS. I see the following in my logs Jul 14 16:35:46 mafeking dovecot: imap-login: Aborted login: rip=58.7.136.163, lip=203.30.47.34, TLS Any ideas? To me it appears to be using TLS, so why doesn't thunderbird work? Is it the LOGINDISABLED capa keyword? Is it dovecot telling Thunderbird the wrong capa when using TLS? It all works fine with SSL, and the port (in thunderbird) set to the imaps port. The logs show lines like below when using SSL. Jul 14 16:36:32 mafeking dovecot: imap-login: Login: user=<joeblogs>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Any ideas? Or should I just force SSL? Thanks Tim (using RC2) -- Linux Counter user #273956 Don't email joeblogs(a)scouts.org.au

3 2

[Dovecot] How to create rules?
by Romeo Theriault 14 Jul '06

14 Jul '06

Hi, I have dovecot installed and working fine. I would like (server side) a rule runs on all messages and if it finds certain words in the message it will run a script which will send a new email. How can I create these rules? Do I need another piece of software? Thank you, Romeo

7 12

Re: [Dovecot] Squirrelmail Change Dovecot Password Plugin
by Cecil S. Nutakor 14 Jul '06

14 Jul '06

Having a plugin that allows squirrelmail to change Dovecot's password would depend entirely on how you have your Dovecot passwords stored. Peter your right, My Dovecot passwords are stored in /etc/dovecot/passwd and Dovecot users stored in /etc/dovecot/users Thanks > On 7/13/2006 07:42, Cecil S. Nutakor seems to have typed: >> After a moment i noticed that i could make the users change their own >> passwords using squirrelmail, but unfortunatly for me after googling >> around the Internet and also visiting squirrelmail plugin page i could >> not >> find a change Dovecot password plugin for squirrelmail. > > If your Dovecot passwords are stored as system passwords, then you would > have to allow PHP (squirrelmail) to change system passwords. Currently, > I have SQL store my Dovecot passwords (which are actually used for > a lot of different authentication purposes), so it was trivial to write > a page that allows users to change the password in the SQL database and > would be easy to add this to squirrelmail if you wanted, but given how > many ways that Dovecot can use for authentication, a generic plugin that > works for all of them would be extraordinarily difficult (and a security > risk for some of the password storage methods - you don't want PHP to > be able to edit your /etc/passwd if you are using *BSD/*nix) > Office Of The SYSTEMS ARCHITECT DISCOVERYTEL GH

1 0

[Dovecot] dovecot 1.00 RC2 bugs
by Alexander Zagrebin 14 Jul '06

14 Jul '06

imho, dovecot 1.00 RC2 has two bugs at the maildir quota implementation 1. Incorrect calculation of used storage and count of messages When calculating, dovecot counts "." and ".." directory entries. So, if there are no subdirs and messages in maildir, maildirsize still shows 4 messages and some used storage. My workaround is --- src/plugins/quota/quota-maildir.c.orig Sun Jun 11 21:36:24 2006 +++ src/plugins/quota/quota-maildir.c Thu Jul 13 11:33:58 2006 ======================================================== @@ -82,6 +82,8 @@ len = str_len(path); while ((dp = readdir(dirp)) != NULL) { + if (!strcmp(dp->d_name, ".")) continue; + if (!strcmp(dp->d_name, "..")) continue; p = strstr(dp->d_name, ",S="); num = (uoff_t)-1; if (p != NULL) { ======================================================== This patch skips special directory entries. 2. Under some condition maildirsize contains invalid data Consider a such situation 1. User begins pop3 session 2. dovecot calls this sequence of procedures maildir_quota_transaction_begin -> maildirquota_refresh -> maildirsize_read While reading maildirsize's data, may be situation when mailbox size must be recalculated (maildirsize greater 5120, quotas was changed...). In this case dovecot closes maildirsize's file descriptor (root->fd) and assigns it "-1". After that code calls maildirsize_recalculate -> maildirsize_write So maildirsize is rewritten and contains valid data. BUT file descriptor (root->fd) still contains "-1" 3. User retrieves and deletes some messages, then quits. So maildirsize must be updated. 4. Code calls maildir_quota_transaction_commit, but root->fd equals "-1", so maildirsize_update doesn't calls and maildirsize contains incorrect (obsolete) data My workaround is ======================================================== --- src/plugins/quota/quota-maildir.c.orig Sun Jun 11 21:36:24 2006 +++ src/plugins/quota/quota-maildir.c Thu Jul 13 11:33:58 2006 @@ -246,11 +248,12 @@ return -1; } - if (file_dotlock_replace(&dotlock, 0) < 0) { + if (file_dotlock_replace(&dotlock, DOTLOCK_REPLACE_FLAG_DONT_CLOSE_FD) < 0) { mail_storage_set_critical(storage, "file_dotlock_replace(%s) failed: %m", path); return -1; } + root->fd = fd; return 0; } ======================================================== This patch preserves fd after writing recalculated maildirsize file, and when maildir_quota_transaction_commit is called, root->fd contains valid file descriptor. -- Alexander Zagrebin

1 0

[Dovecot] pop3s Authentication Issues, Continued
by Bruce Lane 14 Jul '06

14 Jul '06

Fellow Dovecot'ers. I tried something tonight that I should have done a while back: Turned on verbose logging in the authentication section. I'm still unable to get the mail client I'm experimenting with (Pegasus) to complete a pop3s connection, in that I still get an indication of a failed password. However, at least I'm a little closer to understanding the failure itself. Please note what came up in /var/log/maillog. Jul 13 22:41:25 featherweb dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=192.168.42.130 rip=192.168.42.40 resp=AGt5cnJpbgBocDIxZHZlbTc= Jul 13 22:41:25 featherweb dovecot: auth(default): cache(kyrrin(a)bluefeathertech.com,192.168.42.40): User unknown Jul 13 22:41:26 featherweb dovecot: auth(default): client out: FAIL 1 user=kyrrin(a)bluefeathertech.com More specifically: Take a good hard look at the end of the second line. Why in the Multiverse would the thing consider me an unknown user? Unless it's not really checking /etc/passwd at all...? Excerpt from dovecot.conf follows. -=-=-=-=-=-=-=-=- auth default { # Space separated list of wanted authentication mechanisms: # plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi mechanisms = plain login passdb passwd { } userdb passwd { } socket listen { client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } As a point of interest, SENDING mail via a secure connection (SMTP AUTH via STARTTLS) is working quite well. I'm beginning to think that the OpenSSL installation isn't authenticating properly...? Insights welcome. Thanks much. -=-=-=-=-=-=-=-=-=-=-=- Bruce Lane, Owner & Head Hardware Heavy, Blue Feather Technologies -- http://www.bluefeathertech.com kyrrin (at) bluefeathertech do/t c=o=m "If Salvador Dali had owned a computer, would it have been equipped with surreal ports?"

2 1

[Dovecot] [Fwd: [PATCH] Dovecot-1.0rc2 MANAGESIEVE]
by Timo Sirainen 14 Jul '06

14 Jul '06

3 6

Re: [Dovecot] Error: imap-login: Can't connect to auth server at default: Resource temporarily unavailable
by Matt Roman 13 Jul '06

13 Jul '06

It appears the problem is in this function: int net_connect_unix(const char *path) { struct sockaddr_un sa; int fd, ret; memset(&sa, 0, sizeof(sa)); sa.sun_family = AF_UNIX; if (strocpy(sa.sun_path, path, sizeof(sa.sun_path)) < 0) { /* too long path */ errno = EINVAL; return -1; } /* create the socket */ fd = socket(PF_UNIX, SOCK_STREAM, 0); if (fd == -1) { i_error("socket(%s) failed: %m", path); return -1; } net_set_nonblock(fd, TRUE); /* connect */ ret = connect(fd, (void *)&sa, sizeof(sa)); if (ret < 0 && errno != EINPROGRESS) { close_keep_errno(fd); return -1; } return fd; } This function is returning -1 and the server is crashing - Most likely because of a socket error. The error message from the socket is "Resource temporarily unavailable" If anybody knows why that would happen, I might be able figure out a solution. Thanks!

1 0

[Dovecot] maildir++ quota bug...
by Joseph W. Breu 13 Jul '06

13 Jul '06

Running RC2 with maildrop and MDA: dovecot writes a positive quota count, then the negative quota count on messages delivered with maildrop. For example, message #1 arrives via maildrop: 4488236 1 message is deleted via dovecot: 4488236 1 -4488236 -1 This does not happen when the user accesses the message, only when it is deleted. The user never gets credit for deleting the file and their quota continues to grow. I did not notice this behaviour until now, but I just tested with rc1 and it is present there as well. Thanks, --------------------------------------------------------- Joseph W. Breu, CCNA phone : +1.319.268.5228 Senior Network Administrator fax : +1.319.266.8158 Cedar Falls Utilities cell : +1.319.493.1686 support: +1.319.268.5221 url : http://www.cfu.net

2 2

[Dovecot] proxy load-testing
by Vincent Fox 13 Jul '06

13 Jul '06

I found the proxy performance page in the Wiki. It's interesting to see such good performance for the proxy! However, I was trying to duplicate the tests and am not clear how. Anyone know what a typical test setup would look like? I need to document/test that I can setup a proxy able to handle 100-200 sessions per second which the folks around here are skeptical of. I emailed Tomi directly but got a vacation reply. I tried a quick test of my own with rabid and results seem questionable. Probably I am not using the right options on the command-line. I used a single client to generate the load and while I specified 20,000 per minute when I checked the maillog on my IMAP server it was authentication more like 300 per minute. I get a number of "Re-auth failure" messages even with 3720 accounts. I think this is due to the randomness being literal sometimes you hit again the same account name while a first attempt of it is still connected. Also not sure how Tomi generated those statistics, from the logs, from the rabid output? Since rabid doesn't do POP-mark numbers or anything I guess you just ramp up the load until the proxy slows down and call that your performance number?

1 0

[Dovecot] Squirrelmail Change Dovecot Password Plugin
by Cecil S. Nutakor 13 Jul '06

13 Jul '06

Hi Let me introduce myself, My name is Cecil, and i am a system architect by proferssion working currently on contracts with serveral companies in Ghana and Nigeria. I recently built a Corporate Mail Server for a Company using Postfix, Dovecot and Squirrelmail, running on Ubuntu. Thanks to the Dovecot community everything is working well. After a moment i noticed that i could make the users change their own passwords using squirrelmail, but unfortunatly for me after googling around the Internet and also visiting squirrelmail plugin page i could not find a change Dovecot password plugin for squirrelmail. I want to throw this challenge to the Dovecot community to start a project on developing a change Dovecot password plugin for squirrelmail if none exis t as at now. I am ready to voluntee towards the development of the plugin. I will like to know from others especially the list administrators if the project can take off on the mailling list with any problems. Thank You. Office Of The SYSTEMS ARCHITECT DISCOVERYTEL GH

2 1

Re: [Dovecot] Authentication by certificats (a bug or my misconfiguration)
by HenkJan Wolthuis 13 Jul '06

13 Jul '06

Hi Alexander, > > Thanks for the quick reply; rearranging the certs didn't seem to do > much for the setup; I guess I'm getting one thing wrong, which was the > cause for my followup. How can I make dovecot only rely on cert and no > furhter authentication for giving access to the user, when making > dovecot lift the user ID from the client cert? Hmm, i don't think that's the reason for the "invalid certificate" error. Another question: are the clientcertificates and the servercertificate signed by the same CA? In case you want the ssl-verify error in the logfiles: in src/logincommon/ssl-proxy-openssl.c, line 607 change: i_info("Invalid certificate: %s", buf); to: i_info("Invalid certificate: %s: %s, X509_verify_cert_error_string(ctx->error) ,buf); should help, (tested on beta8) (don't forget to recompile, install, restart ;-)) success! -- groeten, HenkJan Wolthuis

2 2

[Dovecot] Error logged while deleting folder
by Luigi Rosa 13 Jul '06

13 Jul '06

Scenario: Dovecot 1.0.rc2 server (fedora 5) Thunderbird 1.5.0.4 WinXP IMAP client Steps to reproduce the warning message whith Thunderbird client: * create a folder with Thunderbird * copy a message in that folder * delete the folder * empty trash Warning logged: Jul 13 06:27:25 mail dovecot: IMAP(lrosa): stat(/var/spool/mail2/lrosa/.Trash.zzz/new) failed: No such file or directory Jul 13 06:27:25 mail dovecot: IMAP(lrosa): inotify_rm_watch() failed: Invalid argument Does not happen with SquirrelMail 1.4.7 IMAP client Question: Is it Thunderburd bug or a Dovecot bug? Ciao, luigi -- / +--[Luigi Rosa]-- \ All general statements are false (including this one).

1 0

Re: [Dovecot] Quota over 2GB supported?
by Bill Boebel 13 Jul '06

13 Jul '06

On Tue, July 11, 2006 9:27 pm, ssoo(a)siliconfile.com said: > I'm using Courier-imap and gonna change to dovecot. > Courier-imap supports quota over 2GB size. > Does dovecot's Maildir++ quota support over 2GB? Yes, we are enforcing a 5GB per user quota using Dovecot's maildir++ quota support. This works with both 32-bit kernels and 64-bit. I know courier took some patching to make work with 32-bit kernels, but Dovecot supports it out of the box. The only caveat is the quota is only enforceable within one namespace, so make sure your Inbox and folders all use the same namespace. Bill

2 1

[Dovecot] Quota over 2GB supported?
by ssoo＠siliconfile.com 12 Jul '06

12 Jul '06

I'm using Courier-imap and gonna change to dovecot. Courier-imap supports quota over 2GB size. Does dovecot's Maildir++ quota support over 2GB?

7 8

[Dovecot] Corrupted index cache
by Joseph W. Breu 12 Jul '06

12 Jul '06

Upgraded from rc1 to rc2 and I am still getting the Corrupted index cache file warnings in syslog Jul 12 10:10:19 pop1.cfu.net dovecot: IMAP(breu(a)cfu.net): Corrupted index cache file /var/spool/mail/filer/storage//cfu.net/b/r/breu/dovecot.index.cache: invalid record size Is this something to be worried about? Is the cache just rebuilt upon notification of corruption? Thanks, --------------------------------------------------------- Joseph W. Breu, CCNA phone : +1.319.268.5228 Senior Network Administrator fax : +1.319.266.8158 Cedar Falls Utilities cell : +1.319.493.1686 support: +1.319.268.5221 url : http://www.cfu.net

1 0

[Dovecot] passwd authentication issues (ATTN: Petar)
by Bruce Lane 12 Jul '06

12 Jul '06

Hi, Petar, For whatever reason, I didn't see your most recent reply until I checked the web archives. To answer your questions... Is my dovecot running chrooted? Not that I know of. However, the option to (apparently) decide this is confusing at best. Here is what I have entered. # chroot login process to the login_dir. Only reason not to do this is if you # wish to run the whole Dovecot without roots. # http://wiki.dovecot.org/Rootless login_chroot = yes Now, my guts tell me that this WILL make it run chrooted. However, reading the material at this link... http://wiki.dovecot.org/Rootless ...says otherwise, and that setting this to 'no' would be making it run chrooted. For reference, this is the process line from ps -aux|grep dovecot root 3182 0.0 1.4 256 876 ? Ss Sun08PM 10:10.06 /usr/local/sbin/dovecot Also, something else just turned up in the process list that I'm not sure I understand. Specifically... root 1817 0.0 1.6 324 1056 ? S 8:53PM 0:00.19 dovecot-auth dovecot 2191 0.0 3.0 256 1940 ? S 8:53PM 0:00.97 imap-login root 3182 0.0 1.4 256 876 ? Ss Sun08PM 10:11.78 /usr/local/sbin/dovecot dovecot 6333 0.0 3.0 256 1940 ? S 8:53PM 0:00.93 imap-login dovecot 8133 0.0 3.0 256 1940 ? S 8:53PM 0:00.97 imap-login dovecot 8397 0.0 3.0 256 1940 ? S 8:53PM 0:00.96 imap-login dovecot 16144 0.0 3.0 256 1940 ? S 8:53PM 0:00.92 imap-login This has me deeply confused. I'm not running IMAP, I'm not interested in running IMAP, I don't want anything to do with IMAP. However, there's five processes for imap-login. What gives? On to your second question: Are /etc/pwd.db and /etc/spwd.db available? Yes, both are listed in the directory of /etc as follows. -rw-r--r-- 1 root wheel 40960 Jul 9 09:56 /etc/pwd.db -rw------- 1 root wheel 40960 Jul 9 09:56 /etc/spwd.db featherweb: {41} How "available" this makes them (I don't know what context you were asking in), I'm not sure. Just for giggles, I tried chaning the permissions on spwd.db so that it was world-readable. Doing so had no effect. I still get password failure errors when I try to authenticate a pop3s connection from the client program. One other question: Pegasus (the mail client) has two options for secure POP connections besides apop (which I've shelved for the moment): STLS and direct SSL connection. I've got it set to direct SSL at the moment. Does this sound right? Looking forward to the next set of replies. Thanks much. -=-=-=-=-=-=-=-=-=-=-=- Bruce Lane, Owner & Head Hardware Heavy, Blue Feather Technologies -- http://www.bluefeathertech.com kyrrin (at) bluefeathertech do/t c=o=m "If Salvador Dali had owned a computer, would it have been equipped with surreal ports?"

3 4

[Dovecot] Problems with deliver (LDA)
by Claus Alboege 12 Jul '06

12 Jul '06

Hi, I'm using Dovecot's (1.0.rc2) 'deliver' (no sieve) as LDA - calling it from a .qmail file. It seems that 'deliver' destroys "message/rfc822" attachments (forward as attachment). My .qmail file looks like this, and use qmail to deliver a copy directly to my Maildir, and 'deliver' to deliver a second copy of the same message to the same Maildir: % cat .qmail ./Maildir/ |preline /usr/libexec/dovecot/deliver After forwarding a message (as attachment) to my account, I get the following 2 files in my Maildir. Check the difference in size: % ls -l Maildir/new -rw------- 1 csa csa 2818 2006-07-06 09:29 1152170973.7420.silver -rw------- 1 csa csa 1372 2006-07-06 09:29 1152170973.P7422Q0M136220.silver Grepping for ^Content-* in the 2 mails show that a part is missing. % cd Maildir/new % grep ^Content * 1152170973.7420.silver:23:Content-Type: multipart/mixed; 1152170973.7420.silver:28:Content-Type: text/plain; charset = "iso-8859-1" 1152170973.7420.silver:29:Content-Transfer-Encoding: quoted-printable 1152170973.7420.silver:34:Content-Type: message/rfc822; name="Testing" 1152170973.7420.silver:35:Content-Transfer-Encoding: 7bit 1152170973.7420.silver:36:Content-Disposition: attachment; filename="Testing" 1152170973.7420.silver:64:Content-Transfer-Encoding: quoted-printable 1152170973.7420.silver:65:Content-Type: text/plain; charset="iso-8859-1" 1152170973.P7422Q0M136220.silver:24:Content-Type: multipart/mixed; 1152170973.P7422Q0M136220.silver:29:Content-Type: text/plain; charset = "iso-8859-1" 1152170973.P7422Q0M136220.silver:30:Content-Transfer-Encoding: quoted-printable 1152170973.P7422Q0M136220.silver:35:Content-Type: message/rfc822; name="Testing" 1152170973.P7422Q0M136220.silver:36:Content-Transfer-Encoding: 7bit 1152170973.P7422Q0M136220.silver:37:Content-Disposition: attachment; filename="Testing" (sorry for the long lines) The offset in linenumbers is caused the the From line added by 'deliver'. So, am I missing something here (execpt from the attachment) - is there anything in 'deliver' that could cause this behaviour? Please let me know if you need further information or details. Regards /Claus A

1 1

[Dovecot] Shared folders not woking for me
by Nagy László 12 Jul '06

12 Jul '06

Hello, I'm new to dovecot, please forgive me my silly questions. :-) My OS is FreeBSD 6.1. I just installed dovecot 1.0.beta9. I have created a public namespace this way: namespace public { separator = / prefix = Public/ location = maildir:/var/mail/public } namespace private { separator = / prefix = location = maildir:/home/%u/Maildir inbox = yes } Then I created a new group and added a user to it: pw groupadd das pw usermod testuser -g das Then I created some files in /var/mail/public: drwxrwx--- 2 testuser das 512 Jul 11 19:22 Tasks drwx------ 2 testuser mail 512 Jul 11 19:20 cur drwxrwx--- 2 testuser das 512 Jul 11 19:24 dovecot-shared drwx------ 2 testuser mail 512 Jul 11 19:20 new drwx------ 2 testuser mail 512 Jul 11 19:20 tmp Then I restarted dovecot, and I tried to subscribe to 'Tasks', but my email client (Thunderbird 1.5) does not allow it. My other problem is about the "inbox = yes" setting. The private namespace does have an inbox, and it shows up in thunderbird. But it does not show my e-mails. I know that I have emails, I can read them with the 'mail' command. Please help me. Laszlo

3 7

Re: [Dovecot] Dovecot and MySQL auth - initial setup issues
by James Bowling 11 Jul '06

11 Jul '06

If you setup is in a virtual mailbox setup then your query should look something like this: user_query = SELECT maildir, 500 AS uid, 500 AS gid FROM users WHERE id = '%u' Try that out, replacing the 500's with the appropriate uid and gid and let me know what you see then. Regards, James Bowling On Tue, 11 Jul 2006 17:01:41 +0100, Andrew Hearn <andrew(a)aa.nu> wrote: > James Bowling wrote: >> Are you using a password encryption scheme for your user passwords in >> the mysql db? You might want to enable the following to help debug the >> issue more in your dovecot.conf: >> >> auth_verbose = yes >> auth_debug = yes >> auth_debug_passwords = yes >> >> Restart Dovecot and then try logging in. This will spit out alot more >> information about the process and might give us a better look into your >> issue. >> > > > Thanks James, > > I'm using plain at the moment whilst testing and getting this working, > the database has a plain password, and > under auth default { I've now set: > mechanisms = plain > > > The log I now get is: > > dovecot: Jul 11 17:01:21 Info: auth(default): client in: AUTH 1 > PLAIN service=IMAP lip=::ffff:81.187.11.54 rip=::ffff:81.187.11.8 > resp=AGFuZHJld0BtYWlsLXRlc3QuYWFpc3AubmV0LnVrADIzNzQyNg== > dovecot: Jul 11 17:01:21 Info: auth-worker(default): > sql(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): query: SELECT > password FROM users WHERE id = 'andrew(a)mail-test.aaisp.net.uk' > dovecot: Jul 11 17:01:21 Info: auth(default): client out: OK 1 > user=andrew(a)mail-test.aaisp.net.uk > dovecot: Jul 11 17:01:21 Info: auth(default): master in: REQUEST > 4 17643 1 > dovecot: Jul 11 17:01:21 Info: auth-worker(default): > sql(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): SELECT maildir > FROM users WHERE id = 'andrew(a)mail-test.aaisp.net.uk' > dovecot: Jul 11 17:01:21 Error: auth-worker(default): > sql(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): Password query > didn't return uid, or it was NULL > dovecot: Jul 11 17:01:21 Info: auth(default): > passwd(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): unknown user > dovecot: Jul 11 17:01:21 Error: auth(default): > userdb(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): user not found > from userdb > dovecot: Jul 11 17:01:21 Info: auth(default): master out: NOTFOUND 4 > dovecot: Jul 11 17:01:21 Info: imap-login: Internal login failure: > user=<andrew(a)mail-test.aaisp.net.uk>, method=PLAIN, > rip=::ffff:81.187.11.8, lip=::ffff:81.187.11.54 > > > > I'm not sure why it's saying "Password query didn't return uid", that > that seems the issue. > > > I'll carry on playing... Andrew

1 0

Re: [Dovecot] Dovecot and MySQL auth - initial setup issues
by Andrew Hearn 11 Jul '06

11 Jul '06

James Bowling wrote: > Are you using a password encryption scheme for your user passwords in > the mysql db? You might want to enable the following to help debug the > issue more in your dovecot.conf: > > auth_verbose = yes > auth_debug = yes > auth_debug_passwords = yes > > Restart Dovecot and then try logging in. This will spit out alot more > information about the process and might give us a better look into your > issue. > Thanks James, I'm using plain at the moment whilst testing and getting this working, the database has a plain password, and under auth default { I've now set: mechanisms = plain The log I now get is: dovecot: Jul 11 17:01:21 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip=::ffff:81.187.11.54 rip=::ffff:81.187.11.8 resp=AGFuZHJld0BtYWlsLXRlc3QuYWFpc3AubmV0LnVrADIzNzQyNg== dovecot: Jul 11 17:01:21 Info: auth-worker(default): sql(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): query: SELECT password FROM users WHERE id = 'andrew(a)mail-test.aaisp.net.uk' dovecot: Jul 11 17:01:21 Info: auth(default): client out: OK 1 user=andrew(a)mail-test.aaisp.net.uk dovecot: Jul 11 17:01:21 Info: auth(default): master in: REQUEST 4 17643 1 dovecot: Jul 11 17:01:21 Info: auth-worker(default): sql(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): SELECT maildir FROM users WHERE id = 'andrew(a)mail-test.aaisp.net.uk' dovecot: Jul 11 17:01:21 Error: auth-worker(default): sql(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): Password query didn't return uid, or it was NULL dovecot: Jul 11 17:01:21 Info: auth(default): passwd(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): unknown user dovecot: Jul 11 17:01:21 Error: auth(default): userdb(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): user not found from userdb dovecot: Jul 11 17:01:21 Info: auth(default): master out: NOTFOUND 4 dovecot: Jul 11 17:01:21 Info: imap-login: Internal login failure: user=<andrew(a)mail-test.aaisp.net.uk>, method=PLAIN, rip=::ffff:81.187.11.8, lip=::ffff:81.187.11.54 I'm not sure why it's saying "Password query didn't return uid", that that seems the issue. I'll carry on playing... Andrew

2 1

[Dovecot] Dovecot and MySQL auth - initial setup issues
by Andrew Hearn 11 Jul '06

11 Jul '06

Hello, I'm just setting up a new server and wanting to use MySQL for user authentication. Here is what I have: Fedora Core 5: 2.6.17-1.2145_FC5 Dovecot v1.0.rc2 (RPM install from atrpms.net) MySQL v5.0.22 SquirrelMail v 1.4.6-7.fc5 ...Running on a Dual XEON machine I've added the following to dovecot.conf: auth default { passdb sql { args = /etc/dovecot-mysql.conf } userdb sql { args = /etc/dovecot-mysql.conf } The rest of dovecot.conf is standard. /etc/dovecot-mysql.conf has: driver=mysql connect = host=127.0.0.1 port=3306 dbname=maildb user=root client_flags=0 password_query = SELECT password FROM users WHERE id = '%u' user_query = SELECT maildir FROM users WHERE id = '%u' (I've run the SQL queries within mysql and they give the right results) When I start Dovecot the log shows: dovecot: Jul 11 12:47:25 Info: Dovecot v1.0.rc2 starting up dovecot: Jul 11 12:47:27 Info: auth-worker(default): mysql: Connected to 127.0.0.1 (maildb) When I try to log in using SquirrelMail, it takes about 3 seconds, then I get dovecot: Jul 11 12:48:00 Info: imap-login: Aborted login: user=<andrew(a)mail-test.aaisp.net.uk>, method=PLAIN, rip=::ffff:127.0.0.1, lip=::ffff:127.0.0.1, secured ...So, no log of it trying MySQL... And SquirrelMail then says: Unknown user or password incorrect Any ideas of what I'm missing? Thanks! Andrew.

1 0

[Dovecot] Authentication error with corrections
by Bruce Lane 11 Jul '06

11 Jul '06

Hi, Curtis (and the group), I tried setting up Dovecot's auth default section as you described, with both authdb and userdb set to 'passwd.' It let the authenticated session start on the POP side, but I got consistent authentication failures on the client side that the passwords didn't match. I don't have any more time to mess with it this morning, but I will make it a point to try 'shadow' when I get in this evening. It's possible that NetBSD wants to work that way. Thanks for your help. -=-=-=-=-=-=-=-=-=-=-=- Bruce Lane, Owner & Head Hardware Heavy, Blue Feather Technologies -- http://www.bluefeathertech.com kyrrin (at) bluefeathertech do/t c=o=m "If Salvador Dali had owned a computer, would it have been equipped with surreal ports?"

3 4

[Dovecot] dovecot-1.0-rc2
by Lucas Valdeón 11 Jul '06

11 Jul '06

Hi, I´m testing dovecot with Thunderbird 1.5.0.4 and when I try to access several folders this error appear: " ... use the Advanced IMAP Server Settings dialog to reduce the number of cache connections." in config file: auth_cache_size = 0 So cache is disable If I send a message server fails when try to copy message to Sent folder. Any idea? Thank you in advance, Lucas

2 3

[Dovecot] Assertion fails (mail_cache_add) in dovecot 1.0 RC 2
by Jens 11 Jul '06

11 Jul '06

The log looks like this: dovecot: Jul 11 10:38:39 Error: IMAP(ni): file mail-cache-transaction.c: line 703 (mail_cache_add): assertion failed: (file_field != (uint32_t)-1) dovecot: Jul 11 10:38:39 Error: child 31316 (imap) killed with signal 6 What I did: 1. Start dovecot with a fresh account so that no folders exist. 2. Start Thunderbird and create a folder "Mails gespeichert auf nasdrive" 3. Put a message into the folder (with Outlook) 4. Edit this message with Thunderbird and Save it. 5. Thunderbird creates the "Draft" folder but the message never gets there. 6. The log file contains the message above! 7. Check if missing folder is source of issue: Edit the message again with Thunderbird and Save it again. 8. The message appears properly in the Draft folder. Additional Info: # dovecot --version 1.0.rc2 # dovecot --build-options Build options: ioloop=poll notify=dnotify ipv6 openssl SQL drivers: Passdb: checkpassword passwd passwd-file shadow Userdb: checkpassword passwd prefetch passwd-file static Regards, Jens

1 0

[Dovecot] Any news with the MS OE "Headers only" problem?
by Sysadmin 11 Jul '06

11 Jul '06

Hello. About year ago I tested OE and dovecot imap and met this problem (http://wiki.dovecot.org/Clients#head-129bcbfc238b5c34362b8216db87c05e7a34af…) - Using "Headers only" synchronization is buggy and can cause "Message is no longer available on this server" error when opening a mail. I configured OE to sync All messages, and it worked, but then it's acts like pop3 and downloads all messages and the local computer mailboxes are still there. However is there any news according this issue? How to use dovecot imap with OE and "Headers only" option selected? -- Sysadmin

2 5

[Dovecot] 1.0 migration
by jeff sacksteder 11 Jul '06

11 Jul '06

The version of Dovecot I am currently using keeps different read pointers depending on if it's being accessed by POP or IMAP. I understand that in 1.0this is unified. If I upgrade the server in place, what will the status of my messages be? Will everything be marked unread? IMAP pointers become official? POP pointers become official?

2 1

[Dovecot] Authentication by certificats (a bug or my misconfiguration)
by Michal Soltys 11 Jul '06

11 Jul '06

Today I've been trying to get dovecot (1.0 rc2) to use certificates for client side authentication. If my memory serves right, beta8 had no problems with it (although it was some time ago and on different machine). Similar setup works perfectly well for postfix (for authentication that is, on the same machine). Originally I thought I overdid some certificate settings (keyUsage, nsCertType, etc.), so for the sake of testing I've simplified the setup to bare minimum - 1 simple selfsigned root certificate, another 1 for dovecot, and the last one for the user. Unfortunately, the results were the same. Configuration: OpenBSD 3.9 (stable branch), i386, no nfs or afs (only local ffs) standard OpenSSL 0.9.7g (+ patches) dovecot 1.0 rc2, compiled from sources, with sysconfdir set to /etc and with disabled pam Tested with the most recent opera and mozilla thunderbird, using pop3s. (note: both clients work with postfix, authetnicating only by certificates). They do send requested certificates. Important dovecot configuration: ssl_cert_file = /etc/ssl/ca_ppgk/certs/pop3_crt.pem (common name - pop3.ppgk.com.pl, valid dns name) ssl_key_file = /etc/ssl/ca_ppgk/private/pop3_key.pem ssl_ca_file = /etc/ssl/ca_ppgk/ca_crt.pem ssl_verify_client_cert = yes verbose_ssl = yes auth_verbose = yes ssl_require_client_cert = yes ssl_username_from_cert = (tested both with yes and no, with common name of user certificate set both as username@domain or as bare username) The rest is just pretty standard, using passwd for both user auth and userdb, with plain and login mechanisms allowed. I tested "few" sets of certificates (for ca, server and user) with configurations ranging from quite specific ones (with basicConstraints, nsCertType, keyUsage, extendedKeyUsage fields set) to very simple ones (basicConstraints + typical stuff like subjectKeyIdentifier). All of them gave the same results with dovecot (postfix didn't complain with any of them either). This is what I get in logs, when trying to pull mail using opera or mozilla: Jul 7 14:33:47 ppgk-wa dovecot: Dovecot v1.0.rc2 starting up Jul 7 14:33:57 ppgk-wa dovecot: pop3-login: Invalid certificate: /C=PL/ST=Mazowieckie/L=Warszawa/O=PPGK/OU=Z10/CN=adminms@ppgk.com.pl/emailAddress=adminms@ppgk.com.pl Jul 7 14:33:57 ppgk-wa dovecot: pop3-login: Invalid certificate: /C=PL/ST=Mazowieckie/L=Warszawa/O=PPGK/OU=Z10/CN=RootCA/emailAddress=admin(a)ppgk.com.pl Jul 7 14:33:57 ppgk-wa dovecot: pop3-login: Valid certificate: /C=PL/ST=Mazowieckie/L=Warszawa/O=PPGK/OU=Z10/CN=RootCA/emailAddress=admin(a)ppgk.com.pl Jul 7 14:33:57 ppgk-wa dovecot: pop3-login: Valid certificate: /C=PL/ST=Mazowieckie/L=Warszawa/O=PPGK/OU=Z10/CN=adminms@ppgk.com.pl/emailAddress=adminms@ppgk.com.pl Jul 7 14:34:05 ppgk-wa dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=192.168.100.77 rip=192.168.100.75 resp=<hidden> Jul 7 14:34:05 ppgk-wa dovecot: auth(default): PLAIN(?,192.168.100.75): Client didn't present valid SSL certificate Jul 7 14:34:05 ppgk-wa dovecot: auth(default): client out: FAIL 1 reason=Client didn't present valid SSL certificate Jul 7 14:34:05 ppgk-wa dovecot: auth(default): client in: AUTH 2 LOGIN service=POP3 secured lip=192.168.100.77 rip=192.168.100.75 resp=<hidden> Jul 7 14:34:05 ppgk-wa dovecot: auth(default): LOGIN(?,192.168.100.75): Client didn't present valid SSL certificate Jul 7 14:34:05 ppgk-wa dovecot: auth(default): client out: FAIL 2 reason=Client didn't present valid SSL certificate Jul 7 14:34:05 ppgk-wa dovecot: auth(default): client in: AUTH 3 PLAIN service=POP3 secured lip=192.168.100.77 rip=192.168.100.75 resp=<hidden> Jul 7 14:34:05 ppgk-wa dovecot: auth(default): PLAIN(?,192.168.100.75): Client didn't present valid SSL certificate Jul 7 14:34:05 ppgk-wa dovecot: auth(default): client out: FAIL 3 reason=Client didn't present valid SSL certificate Jul 7 14:34:07 ppgk-wa dovecot: pop3-login: Disconnected: method=PLAIN, rip=192.168.100.75, lip=192.168.100.77, TLS Those two "Invalid certificate" lines, followed immediately by two "Valid certificate" lines seem suspicious. Is there some configuration detail I might have missed or messed, or is it (probably) a bug ?

3 4

[Dovecot] Group-based filesystem quota
by Scott Alter 11 Jul '06

11 Jul '06

Hello. After using Dovecot for over a year, I have just started experimenting with the filesystem quotas, and I have a suggestion for improvement. On my mail server, I use group-based quotas, and would like to have Dovecot be able to report these quotas. It should be simple to implement, requiring only changes to the quota-fs.c file of the quota plugin. Simply changing USRQUOTA to GRPQUOTA should do the trick. In terms of the configuration file, "quota = fs" could be expanded to something like: quota = fs:storage=group # use filesystem quota with group storage limit Adding in support for message (inode) limits is just as easy, replacing dqb_curblocks with dqb_curinodes and dqb_bsoftlimit with dqb_isoftlimit. It could be easy to configure too, like: quota = fs:storage=group:messages=user # use filesystem quota with group storage limit and user messages limit Although I think I know what would need to be changed, I'm not a C programmer and my code would not be clean nor efficient. Since the messages and storage parameters of the quota setting are defined elsewhere (quota-maildir.c), I don't think it would be too difficult to duplicate this in the quota-fs.c file. Also, I am having the same problem as others with used space off by a factor of 4096, total limit off by a factor of 4. Stian's patch (http://dovecot.org/list/dovecot/2006-June/014159.html) does the trick, but I'm wondering if everyone is having this problem, or just those running Linux. Thanks, Scott

5 9

[Dovecot] Corrupted index & index data file
by james edwards 10 Jul '06

10 Jul '06

We just moved to a new box for POP/IMAP services. I rsynced /home and /var/spool/mail to the new box from the old with the archive switch. It went smoothly but I am seeing more corrupted index & index data file errors in the log than I normally do. I thought I read that Dovecot would rebuild these files after the user accessed them the second time, if corrupt. Is this correct ? Is there a better way to deal with this issue other than deleting them so they are recreated the next time the user checks their mail ? james <jedwards(a)nmcourts.com>

2 4

[Dovecot] PAM Error on POP3s auth? And apop?
by Bruce Lane 10 Jul '06

10 Jul '06

Fellow Dovecot'ers, I've -almost- got Dovecot completely functional, and I will add that it works just fine for non-authenticated POP3. The problem begins when I try to use authentication for same against the system's /etc/passwd section. This is the error message that comes up in /var/log/maillog Jul 9 21:14:10 featherweb dovecot: auth(default): pam(kyrrin(a)bluefeathertech.com,192.168.42.40): pam_start() failed: system error Jul 9 21:14:17 featherweb dovecot: pop3-login: Aborted login: user=<kyrrin(a)bluefeathertech.com>, method=PLAIN, rip=192.168.42.40, lip=192.168.42.130, TLS THE PLATFORM: NetBSD 3.0, Postfix 2.3-RC8 (soon to be replaced by an official release in the coming week), and whatever the current release candidate of Dovecot is. I did some googling for that pam_start error, and discovered (much to my annoyance) that it may be a system bug within NetBSD 3.0. If that's the case, given that I don't have anywhere near the programming skill to even try and correct it, it'll mean I'm pretty much stuck until the NetBSD developers fix it, or until I can figure out an alternate authentication method that won't be an administrative nightmare. Does anyone have any ideas on this? For the benefit of poking and pondering, this is the relevant section of my dovecot.conf file. auth default { # Space separated list of wanted authentication mechanisms: # plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi mechanisms = plain login passdb pam { } userdb passwd { } socket listen { client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } And this is the contents of the file 'dovecot' in the directory /etc/pam.d # PAM configuration for the "dovecot" subsystem. # # auth auth required pam_nologin.so no_warn auth required pam_unix That entry should, in theory, block all logins if the /etc/nologin file is present, and then hand off to the pam_unix module if it's not. pam_unix, in NetBSD, is the module that authenticates against the /etc/passwd file. As I said, further thoughts would be welcome. If it is a NetBSD system bug causing that pam_auth error, ideas for a simple workaround until the NetBSD crew gets things patched up would also be welcome. Thanks in advance. -=-=-=-=-=-=-=-=-=-=-=- Bruce Lane, Owner & Head Hardware Heavy, Blue Feather Technologies -- http://www.bluefeathertech.com kyrrin (at) bluefeathertech do/t c=o=m "If Salvador Dali had owned a computer, would it have been equipped with surreal ports?"

2 2

[Dovecot] LDAP: bind to LDAP server instead of retreiving a password from it?
by Geert Hendrickx 10 Jul '06

10 Jul '06

Hi, Dovecot currently treats an LDAP user/password database the same way as a text or SQL based database: it just tries to retreive the (hashed) password for a given username. LDAP however has the capability to authenticate the user itself: dovecot could try to bind to LDAP with the given username and password, and if authentication succeeded, the LDAP server returns the other info (uid, homedir, ...), but not the password. I know at least qmail's pop3 server uses LDAP this way. Could this authentication mechanism be implemented in Dovecot as well? Geert

2 2

[Dovecot] Damnitall
by nick 10 Jul '06

10 Jul '06

Today I upgraded to dovecot 1.0 rc1 (before I was using a 1.0 beta, as it had functions no one else had), the beta worked fairly well, no crashes, and the bugs were few and far between. I had a few issues with thunderbird 1.5, so I decided to upgrade. My problem is this, before, I had configured procmail to deliver SPAM to a subdirectory of the users home directory, (not mail/) and everything worked fine, new directories were creatable, and IMP seemed to be happy with everything as it was. With the new version though, dovecot refuses to see the folders in the base of the home directory, and all of this with absolutely no change to my conf file (except for the passdb and userdb options). my dovecot.conf file looks like this: default_mail_env = mbox:/ha/home/%u:INBOX=/ha/mail/%u:INDEX=/ha/home/%u ha is my drbd directory, for high availability. I've tried modifying the private namespaces, but without much luck, and I'm really not looking forward to moving all those folders to under the mail/ directory. Do I have any other options?? thanks, Nick

5 8

[Dovecot] Dovecot and MS Active Directory.
by Sysadmin 10 Jul '06

10 Jul '06

Hello. We are using dovecot right now, but the boss pushes the MS based system (Exchange, Sharepoint, Active Directory etc) to use. However, skipping the other parts I'd like to keep open source based mail server and the question is - can the dovecot authenticate against the MS Active Directory without any problems? -- Sysadmin

2 1

[Dovecot] Oops, forgot about apop...
by Bruce Lane 10 Jul '06

10 Jul '06

How does one go about generating a local password database for apop authentication? Or can it simply run against /etc/passwd, using a PAM entry? (I forgot to append this to my last message... sorry...). Thanks much. -=-=-=-=-=-=-=-=-=-=-=- Bruce Lane, Owner & Head Hardware Heavy, Blue Feather Technologies -- http://www.bluefeathertech.com kyrrin (at) bluefeathertech do/t c=o=m "If Salvador Dali had owned a computer, would it have been equipped with surreal ports?"

2 1

[Dovecot] New User: POP3 issues
by kyrrin＠bluefeathertech.com 10 Jul '06

10 Jul '06

Fellow dovecot'ers, I'm just getting started with Dovecot, and I'm not a programmer, so please be gentle. ;-) THE PLATFORM: NetBSD 3.0/SPARC, Postfix 2.3-RC8, current Dovecot RC (I forgot the number). Maildir-type directories. THE GOAL: To accommodate authenticated (remote) POP3 users with APOP or SSL/TLS, and allow users on the internal network (192.168.x.x) to just use basic POP3 without worrying about authentication. QUESTIONS: (1) Does the dovecot master daemon have to be running in order to call pop3- login from inetd, in response to POP connection attempts? If so, it could be a problem. I'm getting this error when I try to start the thing. featherweb: {339} /usr/local/sbin/dovecot Fatal: listen(110) failed: Address already in use featherweb: {340} (2) For apop authentication, how do I go about generating the shared secret file locally, for each user? Is there a script that came with dovecot or...? (3) Is there a trick, similar to postfix's 'postconf -n,' that will give a condensed output of dovecot's configuration file? (4) I'm currently using sasl auth for Postfix's SMTP auth function. How difficult is it to use Dovecot for the same thing? (5) GAAAAHHHHH! (Just on general principles, based on the hours I've spent trying to get everything working). Thanks in advance. --- Bruce 'Quietly Making Noise' Lane Blue Feather Technologies

3 2

[Dovecot] /var/dovecot /var/spool/mail permissions, setup help (w/ config info)
by Jeff Kowalczyk 08 Jul '06

08 Jul '06

(repost gmane message as list member) I need some help with Dovecot-1.0rc2 on Gentoo Linux. My test harness is one Thunderbird-1.5.0.4 client, storage using legacy mbox directories ported over from an old UW-IMAP/sendmail combo running on RHL 8. Config is intended to be passwd/pam, plaintext login allowed (until I migrate everyone to ssl). After this is working, postfix and dspam are to be added, unless someone can recommend a 'dovecot of smtp' to use. I'll tail the mail.log to illustrate the problem, then excerpt what I think are the relevant directory and config file listings. I'm paying particular attention to file ownership, but am loathe to just chown dovecot things unless I know why. Let me know if you want to see any other config info to help spot the problem. Thanks! # tail -n 30 /var/log/mail.log dovecot: Jul 05 18:35:25 Info: Dovecot v1.0.rc2 starting up dovecot: Jul 05 18:36:10 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip=123.456.789.012 rip=098.765.432.109 dovecot: Jul 05 18:36:10 Info: auth(default): client out: CONT 1 dovecot: Jul 05 18:36:10 Info: auth(default): client in: CONT 1 AGplZmYua293YWxjenlrAHdvcmRwYXNzMQ== dovecot: Jul 05 18:36:10 Info: auth(default): client out: OK 1 user=namefirst.namelast dovecot: Jul 05 18:36:10 Info: auth(default): master in: REQUEST 1 25692 1 dovecot: Jul 05 18:36:10 Info: auth(default): master out: USER 1 namefirst.namelast system_user=namefirst.namelast uid=501 gid=12 home=/home/namefirst.namelast dovecot: Jul 05 18:36:10 Error: stat(/var/dovecot/namefirst.namelast) failed: No such file or directory dovecot: Jul 05 18:36:10 Info: IMAP(namefirst.namelast): Effective uid=501, gid=12 dovecot: Jul 05 18:36:10 Info: IMAP(namefirst.namelast): mbox: data=/var/spool/mail/namefirst.namelast:INDEX=/var/dovecot/namefirst.namelast dovecot: Jul 05 18:36:10 Info: IMAP(namefirst.namelast): mbox: INBOX defaulted to /var/spool/mail/namefirst.namelast/inbox dovecot: Jul 05 18:36:10 Info: IMAP(namefirst.namelast): mbox: root=/var/spool/mail/namefirst.namelast, index=/var/dovecot/namefirst.namelast, inbox=/var/spool/mail/namefirst.namelast/inbox dovecot: Jul 05 18:36:10 Info: imap-login: Login: user=<namefirst.namelast>, method=plain, rip=098.765.432.109, lip=123.456.789.012 dovecot: Jul 05 18:36:10 Error: IMAP(namefirst.namelast): open() failed with subscription file /var/spool/mail/namefirst.namelast/.subscriptions: Not a directory dovecot: Jul 05 18:36:12 Error: IMAP(namefirst.namelast): open(/var/spool/mail/namefirst.namelast/inbox, O_CREAT) failed: Not a directory dovecot: Jul 05 18:36:12 Error: IMAP(namefirst.namelast): mkdir_parents(/var/dovecot/namefirst.namelast/.imap/INBOX) failed: Permission denied dovecot: Jul 05 18:36:14 Info: IMAP(namefirst.namelast): Disconnected: Logged out # ls -al /var/spool/mail drwxrwxr-x 2 root mail 1472 Jul 2 19:20 . drwxr-xr-x 6 root root 168 Jul 3 14:19 .. -rw-r--r-- 1 root root 0 Jun 27 18:46 .keep -rw------- 1 namefirst.namelast mail 36243879 Jul 1 17:52 namefirst.namelast (...) # ls -al /var/dovecot/ total 0 drwxr-xr-x 2 root root 72 Jul 5 10:30 . drwxr-xr-x 14 root root 360 Jun 29 09:45 .. -rw-r--r-- 1 root root 0 Jul 5 10:30 .keep # ls -al /var/run/dovecot/ total 5 drwxr-xr-x 3 root root 176 Jul 5 18:35 . drwxr-xr-x 9 root root 504 Jul 3 14:45 .. srw------- 1 root root 0 Jul 5 18:35 auth-worker.25687 srwxrwxrwx 1 root root 0 Jul 5 18:35 dict-server drwxr-x--- 2 root dovecot 136 Jul 5 18:35 login -rw------- 1 root root 6 Jul 5 18:35 master.pid # ls -al /home/namefirst.namelast/ total 17791 drwxr-xr-x 2 namefirst.namelast mail 248 Jul 5 18:29 . drwxr-xr-x 76 root root 2512 Jul 2 20:21 .. -rw------- 1 namefirst.namelast mail 3293785 Sep 23 2005 Sent # grep dovecot /etc/group dovecot:x:97: # grep dovecot /etc/passwd dovecot:x:97:97:added by portage for dovecot:/dev/null:/usr/sbin/nologin # grep mail /etc/passwd mail:x:8:12:mail:/var/spool/mail:/bin/false postmaster:x:14:12:postmaster:/var/spool/mail:/bin/false # grep mail /etc/group mail::12:mail # grep namefirst.namelast /etc/passwd namefirst.namelast:x:501:12:First Last:/home/namefirst.namelast:/bin/bash # cat /etc/pam.d/dovecot auth required pam_unix.so account required pam_unix.so # cat /etc/dovecot.conf base_dir = /var/run/dovecot/ protocols = imap imaps pop3 pop3s listen = * shutdown_clients = yes log_path = /var/log/mail.log info_log_path = /var/log/mail.log log_timestamp = "%b %d %H:%M:%S " syslog_facility = mail disable_plaintext_auth = no ssl_disable = no ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem login_chroot = yes login_user = dovecot default_mail_env = mbox:/var/spool/mail/%u:INDEX=/var/dovecot/%u mail_extra_groups = mail mail_debug = yes protocol pop3 { pop3_uidl_format = %08Xu%08Xv } auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain login passdb pam { args = dovecot } userdb passwd { } user = root } __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 3

[Dovecot] FYI: timosieved
by John Peacock 07 Jul '06

07 Jul '06

Just a heads up for all interested in using the Dovecot LDA with SIEVE scripting: I've started work on a proof-of-concept managesieve daemon, since the only one available right now is dependent on Cyrus. It appears that the only choice available for sites not using timsieved is the Ingo component of Horde, which is way too fat to install by itself (plus it uses FTP for a transport, which I make it a rule not to install). For testing purposes, I am hacking together a Perl module based on the Net::Server model (which is not suitable for production). If this goes well (the managesieve protocol is painfully stupid and the only tricky part is linking in libsieve), then I'll do a rewrite in C. It will authenticate directly to Dovecot through the auth-client (or auth-master) mechanism, so whatever SASL methods that Dovecot supports, it will support. I've decided that the eventual server will be called timosieved, in honor of our host, and echoing the original Cyrus timsieved. Don't bug me about when it'll be done... :) John -- John Peacock Director of Information Research and Technology Rowman & Littlefield Publishing Group 4501 Forbes Boulevard Suite H Lanham, MD 20706 301-459-3366 x.5010 fax 301-429-5748

3 2

[Dovecot] default_mail_env and IMAP server directory in client
by Dirk Essl 07 Jul '06

07 Jul '06

Hi, I'm currently installing a dovecot Server to be a replacement for an uw-imapd. I dont want to touch the clients configuration, because I have too much users... Situation is the following: the mbox files are in the users homedirectory (~/MailImap), automounted via nfs In dovecot.conf I've set default_mail_env = mbox:%h/MailImap:INBOX=/var/mail/%u It works perfect without a value in Firefox' setting 'IMAP server directory' but in all clients tis is set to '~/MailImap' so it doesnt show subfolders I already tried to symlink various things in the MailImap directory and different values of default_mail_env, but I cannot mak it work. Any suggestions? It would help if dovecot could discard the IMAP server directory setting of the client, but I am not a programmer and dont know where to look in the source :-( -- TIA dirk

2 1

[Dovecot] 1.0.rc2 ldap in Solaris
by Tomi Vainio 07 Jul '06

07 Jul '06

Hi, Earlier it was possible to compile ldap support in Solaris 10 but currently it fails in src/auth/db-ldap.c line 341 because LDAP_SASL_QUIET is missing. I can found eg. LDAP_SASL_INTERACTIVE from headers. Tomppa

1 0

[Dovecot] Newbie on Fedora 5
by Yudhvir Singh Sidhu 07 Jul '06

07 Jul '06

Hey Guys, I want to transition from Merak to Postfix/Dovecot. I am not sure how to begin. I have been reading the different Howtos - cocktail of services to Postfix like ClamAV, Spamassissin, Greylisting, Jamm, SquirrelMail. The thing is that I want stable IMAP mail. Here is what I want to do: a. Stand alone linux box for email only - 25 users b. provide IMAP and web c. provide SSL authentication, spam filtering and virus checking. d. I would perfer to setup flat file, or unix based SIMPLE authentication scheme. e. Current users are on windows and are popping mail. Although we have LDAP, can we have another LDAP server which lives with existing server? f. I have Fedora 5 installed. I have Dovecot, Postfix, Cyrus-SASL installed. As well as webmin to manage it all. Any suggestions to get running quickly? h. I need to preserve the popped mail sitting in user Outlook clients. -- Yudhvir Singh Sidhu, 3-4039

2 1

Re: [Dovecot] bug/feature
by Jeff Graves 07 Jul '06

07 Jul '06

Oops. That one was for 0.99.x series. This one was what I used for 1.x -- Jeff Graves, MCSA Image Source, Inc. 508.966.5200 x31 www.image-src.com -----Original Message----- From: Jeff Graves Sent: Thursday, July 06, 2006 3:22 PM To: dovecot(a)dovecot.org Subject: RE: [Dovecot] bug/feature I have always had a similar problem. Our's though is that we authenticate using SFU and nis. So in addition to the folder needing to be lowercase, the username has to be as well. It hasn't be discussed in a while but Timo mentioned that the %L wouldn't work for username's. To workaround it, I used this patch. However, I have no idea how it works with other authentication methods as we use passwd and I haven't tested it since test69 so it probably needs tweaking. -- Jeff Graves, MCSA Image Source, Inc. 508.966.5200 x31 www.image-src.com -----Original Message----- From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] On Behalf Of Johannes Berg Sent: Thursday, July 06, 2006 2:35 PM To: Paul Blankenship Cc: dovecot(a)dovecot.org Subject: Re: [Dovecot] bug/feature On Thu, 2006-07-06 at 09:13 -0700, Paul Blankenship wrote: > I don't know if this has been mentioned here or even thought of in > the > grand scheme of things and I'm just sending a one time email about it > "just in case" > I recently swapped my server around and I'm using dovecot now....LOVE > it! Could use a bit more intuitive error messages, but otherwise, it's > great! > But there is one flaw that I've run into with my users. Case > sensitivity. I think you can lower-case the name just about anywhere, e.g. default_mail_env = maildir:/home/%Lu/.mail instead of default_mail_env = maildir:/home/%u/.mail See /usr/share/doc/dovecot-common/variables.txt (on debian systems, otherwise just look for variables.txt) johannes

1 1

[Dovecot] courier-imap transition
by Joseph W. Breu 07 Jul '06

07 Jul '06

Hello All, I am transitioning from a courier-imap installation where the POP3 UIDLs are of the format: 28 UID10823-1064256714 29 UID10829-1064256714 30 UID10830-1064256714 31 UID10833-1064256714 32 UID10836-1064256714 33 UID10847-1064256714 34 UID10859-1064256714 35 UID10893-1064256714 36 UID10903-1064256714 37 UID10904-1064256714 The dovecot UIDL list for the recommend courier version 2 configuration produces: 432 1150908803-432 433 1150908803-433 434 1150908803-434 435 1150908803-435 436 1150908803-436 437 1150908803-437 438 1150908803-438 439 1150908803-439 I need to produce a UIDL map similar to that of courier-imap. Any suggestions? Thanks, --------------------------------------------------------- Joseph W. Breu, CCNA phone : +1.319.268.5228 Senior Network Administrator fax : +1.319.266.8158 Cedar Falls Utilities cell : +1.319.493.1686 support: +1.319.268.5221 url : http://www.cfu.net

1 0

[Dovecot] bug/feature
by Paul Blankenship 06 Jul '06

06 Jul '06

I don't know if this has been mentioned here or even thought of in the grand scheme of things and I'm just sending a one time email about it "just in case" I recently swapped my server around and I'm using dovecot now....LOVE it! Could use a bit more intuitive error messages, but otherwise, it's great! But there is one flaw that I've run into with my users. Case sensitivity. As you all know, Linux is case sensitive and windows is not and mail should always be lower case. I have users who are checking Thisemail(a)domain.tld instead of thisemail(a)domain.tld. This causes my build to create a folder for Thisemail(a)domain.tld to check instead of pulling mail from thisemail(a)domain.tld Either rate, I'm correcting users when I find it, but it doesn't help when I have those that USE ALL CAPS BECAUSE EITHER IT'S COOL OR THEY USE IT FOR OTHER PURPOSES AND DON'T TURN IT OFF. No, I'm not yelling, I'm being sarcastic :) Anyway, just incase noone was aware of that little "issue".... -- Paul Blankenship Solano Computer Resource 441 Georgia St. Suite 200 Vallejo, CA 94590 (707)645-9652 Fax: (707)649-4360 For all your business and residential computer and Internet needs. Because IT just works.

3 2