- dovecot - dovecot.org

[Dovecot] Dovecot connection problem - Too many invalid commands (no auth attempts) - v2.0.19
by Thomas Standaert 12 Dec '13

12 Dec '13

Hello. This might be a silly problem, but I'm a bit a newbie at this, and the internet didn't give me a solution to this yet. I installed a mail server with postfix, dovecot, postfixadmin and a mysql DB for authentification, using this tutorial : <http://www.exratione.com/2012/05/a-mailserver-on-ubuntu-1204-postfix-doveco t-mysql/> http://www.exratione.com/2012/05/a-mailserver-on-ubuntu-1204-postfix-dovecot -mysql/. Except step 4. The complete tutorial worked on a virtual machine, but doesn't work here on a vps from ovh.net. Connecting via telnet localhost 143 works, I can connect. When I try to connect via thunderbird, the domain name is picked up, but gives me a bad login/password combination. Mail.log, mail.err and error don't show anything. Via MS Outlook, I seem to get stuck on the connection page, and I get the following errors in mail.log: dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts): rip=x, lip=y dovecot: pop3-login: Disconnected (no auth attempts): rip=x, lip=y dovecot: imap-login: Disconnected (no auth attempts): rip=x, lip=y, TLS: Disconnected dovecot: pop3-login: Disconnected (no auth attempts): rip=x, lip=y, TLS: Disconnected dovecot: pop3-login: Aborted login (no auth attempts): rip=x, lip=y dovecot: imap-login: Disconnected (no auth attempts): rip=x, lip=y, TLS: Disconnected dovecot: imap-login: Disconnected (no auth attempts rip=x, lip=y dovecot: imap-login: Disconnected (no auth attempts): rip=x, lip=y, TLS handshaking: Disconnected dovecot: pop3-login: Disconnected (no auth attempts): rip=x, lip=y, TLS handshaking: Disconnected And after a while asks to try to connect via plain method. Doveconf -n gives me this # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab068.8 x86_64 Ubuntu 12.04.2 LTS simfs auth_mechanisms = plain login first_valid_uid = 150 last_valid_uid = 150 mail_gid = mail mail_location = maildir:/var/vmail/%d/%n mail_uid = vmail passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = " imap pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = mail mode = 0600 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } Hope you guys can help me, and thanks in advance for it. Greetings, Thomas Standaert

4 4

[Dovecot] multiple passdbs and auth sockets
by Jouko Nikula 12 Dec '13

12 Dec '13

Hello, I want to use different authentication arguments for smtp and imap/pop3. In the dovecot list I found this: http://www.dovecot.org/list/dovecot/2013-August/091960.html I tried to follow these instructions but dovecot refuses to find the auth executable: Dec 12 10:36:18 jlaptop postfix/smtpd[7302]: connect from localhost[127.0.0.1] Dec 12 10:36:18 jlaptop dovecot: auth-10: Error: doveconf: Fatal: execvp(/usr/local/var/run/dovecot/dovecot/auth) failed: No such file or directory Dec 12 10:36:18 jlaptop dovecot: master: Error: service(auth-10): command startup failed, throttling for 2 secs Dec 12 10:36:18 jlaptop dovecot: auth-10: Fatal: master: service(auth-10): child 7304 returned error 89 (Fatal failure) Dec 12 10:36:18 jlaptop postfix/smtpd[7302]: fatal: no SASL authentication mechanisms Dec 12 10:36:19 jlaptop postfix/master[7046]: warning: process /usr/lib/postfix/smtpd pid 7302 exit status 1 Dec 12 10:36:19 jlaptop postfix/master[7046]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling My settings for postfix and dovecot are as follows: root@jlaptop:/usr/local/etc/dovecot/conf.d# postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no config_directory = /etc/postfix default_transport = error home_mailbox = Maildir/ inet_interfaces = loopback-only mailbox_command = mailbox_size_limit = 0 myhostname = jlaptop mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 queue_directory = /var/spool/postfix readme_directory = no recipient_delimiter = + relay_transport = error relayhost = smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth-10 smtpd_sasl_type = dovecot smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes virtual_gid_maps = static:8 virtual_mailbox_base = /var/mail/smtp virtual_mailbox_domains = jlaptop.com virtual_mailbox_maps = hash:/etc/postfix/vmaps virtual_minimum_uid = 100 virtual_uid_maps = static:124 root@jlaptop:/usr/local/etc/dovecot/conf.d# doveconf -n # 2.2.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.11.0-13-generic x86_64 Ubuntu 13.10 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes first_valid_uid = 124 mail_gid = mail mail_home = /var/mail/imap/%n mail_location = maildir:~/mail mail_plugin_dir = /usr/local/lib/dovecot/ mail_plugins = gpgfuse_umount mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = session=yes dovecot driver = pam } protocols = imap pop3 lmtp imap pop3 service auth-10 { executable = auth -c /usr/local/etc/dovecot-auth-smtp.conf process_limit = 1 unix_listener /var/spool/postfix/private/auth-10 { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = uid=vmail gid=mail home=/var/mail/imap/%n driver = static } The file /usr/local/etc/dovecot-auth-smtp.conf is as follows: auth_mechanisms = plain login disable_plaintext_auth = no #auth_username_format = %Lu auth_debug = yes auth_debug_passwords = yes auth_verbose = yes first_valid_uid = 124 mail_gid = mail mail_uid = vmail protocols = imap pop3 lmtp imap pop3 ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem passdb { driver = pam args = dovecot } userdb { driver = static args = uid=vmail gid=mail home=/var/mail/imap/%n } The result is exactly the same also if I don't give the path to auth. I.e.: executable = auth -c /usr/local/etc/dovecot-auth-smtp.conf In order to get past this problem I provided the auth executable in /usr/local/var/run/dovecot/dovecot/auth, but then I get a new problem: Dec 12 12:31:53 jlaptop postfix/smtpd[9220]: connect from localhost[127.0.0.1] Dec 12 12:31:53 jlaptop dovecot: auth-10: Error: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Dec 12 12:31:53 jlaptop dovecot: auth-10: Error: Debug: Read auth token secret from /usr/local/var/run/dovecot/auth-token-secret.dat Dec 12 12:32:03 jlaptop postfix/smtpd[9220]: fatal: no SASL authentication mechanisms Dec 12 12:32:04 jlaptop postfix/master[8842]: warning: process /usr/lib/postfix/smtpd pid 9220 exit status 1 Dec 12 12:32:04 jlaptop postfix/master[8842]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling My test client is thunderbird with smtp connection security "None" and Authentication method "Password, transmitted insecurely". Any ideas what is going wrong? Is there a better way to provide different passdb settings for smtp and imap/pop3? regards, - Jouko

1 0

[Dovecot] Selectively allow non-SSL connections based on userdb
by Trent Lloyd 12 Dec '13

12 Dec '13

Howdy Folks, I am considering transitioning our mail service over to SSL-only. As a transition mechanism, it would make sense to force all new accounts to use SSL, but still allow old accounts to go unencrypted until some transition date passes. I have done some extensive searching but could not figure a mechanism through which I could specify a setting for this in userdb or similar. Does anyone have any ideas that doesn’t involve a post-login script? Thanks, Trent

1 0

[Dovecot] base_dir= problems
by Philippe Lelédy 11 Dec '13

11 Dec '13

Hi I first let base_dir = with it's default value of /var/dovecot. I changed my mind and now I have doveconf -n # 2.1.17: /etc/dovecot/dovecot.conf # OS: OpenBSD 5.4 amd64 ffs base_dir = /var/run/dovecot/ After a few days, imap clients couldn't login. Here the problem Dec 04 17:03:16 imap-login: Fatal: Corrupted SSL parameters file: /var/dovecot/ssl-parameters.dat Dec 04 17:03:16 imap-login: Fatal: Corrupted SSL parameters file: /var/dovecot/ssl-parameters.dat Dec 04 17:03:16 master: Error: mkdir(/var/dovecot) failed: Read-only file system Dec 04 17:03:16 master: Error: safe_mkstemp(/var/dovecot/mounts.tmp.) failed: No such file or directory Dec 04 17:03:16 master: Error: file_dotlock_open(/var/dovecot/instances) failed: No such file or directory Dec 04 17:03:16 ssl-params: Fatal: creat(/var/dovecot/ssl-parameters.dat.tmp) failed: No such file or directory By-pass ln -s /var/run/dovecot /var/dovecot Strange ? Ph. Le.

2 3

[Dovecot] Plugin development - ostream and index cache size
by Philipp Brüll 11 Dec '13

11 Dec '13

Hi, I'm new to this list, so first thanks for the dovecot tool! So far, it has been great to work with. Currently, I'm developing a scrambler plugin for dovecot, that should stores the mails encrypted. To do that, I've created the scrambler_ostream and scrambler_istream that does the encryption and that I hook in the mail storage process. The scrambler_ostream is stacked on top of the output stream of the mail_save_context (mail_save_context->data.output) and the scrambler_istream is attached to the input stream when the virtual function istream_opened in the mail_private struct is called. Basically, the encrypt/decrypt works, but during the process the data size changes slightly. And when I'm doing a FETCH BINARY[] via imap, it results in the error... Cached message size smaller than expected (204 < 208) Error: Corrupted index cache file /home/.../mail/mailboxes/INBOX/dbox-Mails/dovecot.index.cache: Broken physical size for mail UID 1 My guess is, that the FETCH function tries to deliver the unencrypted cache version of the mail (204 bytes) and not the stored version (208 bytes). How can I make dovecot cache the output of my scrambler_ostream or at least disable this caching for testing? I've read already a lot of code, but I've found a hint yet. How does - for example - the zlib plugin handle this issue? I have read the code a couple of times, but still have no clue. Best regards, Philipp

2 1

Re: [Dovecot] pigeonhole openssl s_client
by LEVAI Daniel 11 Dec '13

11 Dec '13

> http://wiki2.dovecot.org/Pigeonhole/ManageSieve/Troubleshooting > > Try the gnutls command line interface: > > gnutls-cli --starttls --print-cert -p 4190 example.com > STARTTLS > Ctrl-D > LOGOUT > > Regards > Daniel Ah, thanks! Pretty dumb of openssl not to be able to connect arbitrary servers... in a useful way, that is. Daniel -- LÉVAI Dániel PGP key ID = 0x83B63A8F Key fingerprint = DBEC C66B A47A DFA2 792D 650C C69B BE4C 83B6 3A8F

1 0

[Dovecot] [Dovecot 2.2.9] mail-filter plugin don't load
by Stanislas SABATIER 11 Dec '13

11 Dec '13

Hello, I'm trying to load the mail-filter plugin (dovecot-2.2.9) with the following option in 10-mail.conf : mail_plugins = $mail_plugins mail_filter But I've got the following error when restarting dovecot : dovecot: imap: Fatal: Plugin 'mail_filter' not found from directory /usr/local/lib/dovecot I reinstalled dovecot-2.2.9 from sources (freeBSD ports) but it did not install the mail-filter library in /usr/local/lib/dovecot Thank you for your help. --------------------------------- Stanislas SABATIER s.sabatier(a)pobox.com ---------------------------------------------------------------

1 0

[Dovecot] OT: Large corporate email systems - Exchange vs open source *nix based
by Charles Marcus 11 Dec '13

11 Dec '13

Hello, There has been some whispers about considering migrating our mail systems to Exchange Server. I want to try to nip this in the bud. I would like to ask for some help with providing some kind of comparison of large(r) commercial companies use of email systems... specifically, those using Microsoft Exchange Server, vs those using open source Linux/Unix based systems, including even commercial *nix groupware based systems like Zimbra, as well as plain mail systems like dovecot, or cyrus or courier. I know that many (if they are smart) Admins that do use Exchange internally will use postfix (or something else linux/unix based) in front of it as their relayhost (for both inbound and outbound), so just counting the number of publicly accessible smtp servers won't be a good gauge. Does anyone know of any decent non-biased studies that have been done, hopefully relatively recently (last few years) that provide such a comparison? Thanks, -- Best regards, */Charles/*

9 10

[Dovecot] restricted dovecot conf
by Goran 11 Dec '13

11 Dec '13

Hi all, I have a simple but well running dovecot configuration attached below. Now I want to change some things. What I need is an IMAP-Server which restricts the user to the following: - no folder createable - no messages deleteable How to get what I want? My Version: Debian x86 Squeeze, Dovecot 1:1.2.15-7. Many thanks in advance! Goran --- protocols = imaps disable_plaintext_auth = yes shutdown_clients = yes log_timestamp = "%Y-%m-%d %H:%M:%S " ssl = yes ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail mbox_write_locks = fcntl dotlock auth default { mechanisms = plain passdb shadow { } userdb passwd { } }

2 1

Re: [Dovecot] Ubuntu packages and broken link in docs
by Michael Cramer 11 Dec '13

11 Dec '13

these are build from the sources that are automatically build for the debian system mentioned in the wiki http://wiki2.dovecot.org/PrebuiltBinaries#Automatically_Built_Packages (only difference to these are some changes to the build file for version numbers and the changelog file). only building official releases named ...~auto0 packages Zitat von Alan McGinlay - SICS <alanm(a)sics.se>: > On 2013-12-11 13:00, Michael Cramer wrote: >> i uploaded 2.2.9 for ubuntu 12.04 LTS, 12.10, 13.04 and 13.10 to the >> ppa >> >> Zitat von michael(a)bigmichi1.de: >> >> Zitat von Alan McGinlay - SICS <alanm(a)sics.se> >> >> Hi, >> >> Two things: >> >> 1. Does anyone know of a good PPA with updated packages of Dovecot for >> Ubuntu? "For the latest Dovecot for latest Ubuntu LTS see Xiaoka APT >> Repository. (Outdated. Could someone provide a ppa for latest stable >> Dovecot, please?)" >> >> 2. On the http://wiki2.dovecot.org/PrebuiltBinaries#Ubuntu page there >> is a link to a supposedly outdated PPA, the ppa page now redirects to >> an ad for the guys services so should probably be removed. >> >> /Alan >> >> Hi, >> >> In my ppa https://launchpad.net/~bigmichi1 i provide the latest version >> of dovecot for the latest version of Ubuntu. It is build after a >> official release. > > Thanks! I will give it a try on a dev server. Does it follow the debian > split config files layout? Also, which sources are the debs built from? > I would like to try building it my self for comparison.

1 0