- dovecot - dovecot.org

[Dovecot] doveadm migration: Warning: I/O leak
by Gedalya 29 Jan '13

29 Jan '13

This seems to be happening only when using the pop3c plugin. Any advice? root@imap01:/etc/dovecot# doveadm -D -o imapc_user=chat_logs(a)xxxxxx.com -o 'imapc_password=*******' -o pop3c_user=chat_logs(a)xxxxxx.com -o 'pop3c_password=*****' backup -u chat_logs(a)xxxxxx.com -R imapc: doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_expire_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_listescape_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually intentional, so just ignore this message) doveadm(chat_logs(a)xxxxxx.com): Debug: Added userdb setting: mail=maildir:/stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir doveadm(chat_logs(a)xxxxxx.com): Debug: Added userdb setting: plugin/quota_rule=*:storage=5120M doveadm(chat_logs(a)xxxxxx.com): Debug: Effective uid=1001, gid=1001, home=/stor/real/domains/xxxxxx.com/ch/chat_logs doveadm(chat_logs(a)xxxxxx.com): Debug: Home dir not found: /stor/real/domains/xxxxxx.com/ch/chat_logs doveadm(chat_logs(a)xxxxxx.com): Debug: Namespace : type=private, prefix=POP3-MIGRATION-NS/, sep=, inbox=no, hidden=yes, list=no, subscriptions=yes location=pop3c: doveadm(chat_logs(a)xxxxxx.com): Debug: fs: root=, index=, control=, inbox=, alt= doveadm(chat_logs(a)xxxxxx.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir doveadm(chat_logs(a)xxxxxx.com): Debug: maildir++: root=/stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir, index=, control=, inbox=/stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir, alt= doveadm(chat_logs(a)xxxxxx.com): Debug: Namespace : /stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir doesn't exist yet, using default permissions doveadm(chat_logs(a)xxxxxx.com): Debug: Namespace : Using permissions from /stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir: mode=0700 gid=-1 dsync(chat_logs(a)xxxxxx.com): Debug: Effective uid=1001, gid=1001, home=/stor/real/domains/xxxxxx.com/ch/chat_logs dsync(chat_logs(a)xxxxxx.com): Debug: Namespace : type=private, prefix=POP3-MIGRATION-NS/, sep=, inbox=no, hidden=yes, list=no, subscriptions=yes location=pop3c: dsync(chat_logs(a)xxxxxx.com): Debug: fs: root=, index=, control=, inbox=, alt= dsync(chat_logs(a)xxxxxx.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc: dsync(chat_logs(a)xxxxxx.com): Debug: imapc: root=, index=, control=, inbox=, alt= dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Looking up IP address dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Connecting to 111.111.111.111:143 dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Server capabilities: IMAP4rev1 NAMESPACE LITERAL+ UIDPLUS IDLE COMPARATOR AUTH=LOGIN AUTH=NTLM AUTH=SCRAM-MD5 AUTH=CRAM-MD5 dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Authenticating as chat_logs(a)xxxxxx.com dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Authenticated successfully dsync(chat_logs(a)xxxxxx.com): Debug: Namespace : /stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir/.Sent Items doesn't exist yet, using default permissions dsync(chat_logs(a)xxxxxx.com): Debug: Namespace : Using permissions from /stor/real/domains/xxxxxx.com/ch/chat_logs/Maildir: mode=0700 gid=-1 dsync(chat_logs(a)xxxxxx.com): Info: Sent Items: only in source (guid=34b8141947b9372e94589bd35a54dac5) dsync(chat_logs(a)xxxxxx.com): Info: INBOX: only in source (guid=c92f64f79f0d1ed01e6d5b314f04886c) dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Looking up IP address dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Connecting to 111.111.111.111:143 dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Server capabilities: IMAP4rev1 NAMESPACE LITERAL+ UIDPLUS IDLE COMPARATOR AUTH=LOGIN AUTH=NTLM AUTH=SCRAM-MD5 AUTH=CRAM-MD5 dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Authenticating as chat_logs(a)xxxxxx.com dsync(chat_logs(a)xxxxxx.com): Debug: imapc(mail01.xxxxxx.com:143): Authenticated successfully dsync(chat_logs(a)xxxxxx.com): Debug: pop3c(111.111.111.111): Looking up IP address dsync(chat_logs(a)xxxxxx.com): Debug: pop3c(111.111.111.111): Connecting to 111.111.111.111:110 dsync(chat_logs(a)xxxxxx.com): Debug: pop3c(111.111.111.111): Authenticating as chat_logs(a)xxxxxx.com dsync(chat_logs(a)xxxxxx.com): Warning: I/O leak: 0xb769a340 (line 1229, fd 14) dsync(chat_logs(a)xxxxxx.com): Warning: I/O leak: 0xb769a340 (line 1229, fd 10) dsync(chat_logs(a)xxxxxx.com): Warning: Timeout leak: 0xb769a5a0 (line 1316) dsync(chat_logs(a)xxxxxx.com): Warning: Timeout leak: 0xb769a5a0 (line 1316)

1 2

[Dovecot] password schemes in dovecot
by Public 28 Jan '13

28 Jan '13

Hey there, I'm using the latest dovecot 2.1.13 In the wiki http://wiki2.dovecot.org/Authentication/PasswordSchemes BLF-CRYPT is listed, but i can't use it. "doveadm pw -l" doesn't show it. And i'm unsure about how I am supposed to use the different SHA schemes, since they always output different hashes for the same password. MD5 is working fine, but I'd rather not use it. Is the wiki outdated or how do i get BLF-CRYPT working? thanks, simon

3 3

[Dovecot] From Sendmail to Dovecot mdbox, what is missing.
by Torpey List 27 Jan '13

27 Jan '13

Sendmail 8.14.4 dovecot 2.0.9 I have sendmail working and it is sending mail to /var/mail/%u. I have dovecot working in that I can move emails into IMAP folders and I can send email through IMAP. I have set up dovecot to use mdbox based on the following: mail_location = mdbox:~/mail However, I seem to be lacking a key piece of information. Sendmail is sending the mail to /var/mail/%u as a mbox (single file for all emails) format. Dovecot wants to read the mail in mdbox (Multiple messages per file, but unlike mbox multiple files per mailbox.) So the two programs are not working together. So, I cannot get dovecot to read new emails at /var/mail/%u. So I tried changing to the following: mail_location = mdbox:~/mail:INBOX=/var/mail/%u However, dovecot complains that it is NOT a directory. That is because sendmail is sending as mbox format. I have tried two lines of “mail_location” but that did not work. example mail_location = mdbox:~/mail ----> for dovecot mail_location = mbox:INBOX=/var/mail/%u -----> for sendmail I have tried LMTP and dovecot-lda. LMTP – I could not see any difference with this added or not. Dovecot-lda – I have had issues getting it configured. Thanks for any help! Sendmail changes FEATURE(`local_procmail', `/usr/libexec/dovecot/dovecot-lda',`/usr/libexec/dovecot/dovecot-lda -d $u') MODIFY_MAILER_FLAGS(`LOCAL', `-f') MAILER(procmail)dnl Here is dovecot configuration [root@nala mail]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.14.1.el6.x86_64 x86_64 Scientific Linux release 6.3 (Carbon) auth_mechanisms = plain login mail_gid = mail mail_location = mdbox:~/mail mail_uid = mail mbox_write_locks = fcntl passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_group_events = yes } service auth { unix_listener auth-userdb { mode = 0600 user = mail } } service lmtp { inet_listener lmtp { address = 192.168.1.185 127.0.0.1 ::1 port = 24 } user = mail } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol lda { info_log_path = /var/log/maillog log_path = /var/log/maillog postmaster_address = postmaster(a)torpey.org }

5 11

[Dovecot] mbox INBOX out of sync (?)
by Tinguaro Barreno Delgado 26 Jan '13

26 Jan '13

Hello all, I've running a Dovecot's installation for several years without problems but since last system upgrade (Dec 26) I'm facing a kind of sync issue with the /var/mail/ inbox files. We have got mobile and desktops IMAP clients (mostly Mozilla Thunderbird). The problem is that /var/mail/ files (mbox) aren't updated: we can delete mail from clients but they persist in de /var/mail, so the same user can see the mail again from other IMAP client. Logs seems to be correct. Many thanks in advance. Best wishes, Tinguaro Barreno -- logs -- Jan 11 21:58:19 master: Info: Dovecot v2.1.7 starting up (core dumps disabled) Jan 11 21:58:33 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Jan 11 21:58:33 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Jan 11 21:58:33 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Jan 11 21:58:33 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_sqlite.so Jan 11 21:58:33 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Jan 11 21:58:33 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Jan 11 21:58:33 auth: Debug: auth client connected (pid=8658) Jan 11 21:58:33 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=1oL4jgnTGgDAqAwf lip=192.168.12.2 rip=192.168.12.31 lport=10103 rport=46874 resp=<hidden> Jan 11 21:58:33 auth: Debug: client out: OK 1 user=tbarreno Jan 11 21:58:33 auth: Debug: master in: REQUEST 3219783681 8658 1 38bcc0e7465cbb3aace197fa29f9319e Jan 11 21:58:33 auth: Debug: ldap(tbarreno,192.168.12.31,<1oL4jgnTGgDAqAwf>): user search: base=dc=alameda,dc=inet scope=subtree filter=(&(objectClass=usuarioLocal)(username=tbarreno)) fields=homeDirectory,uidNumber,gidNumber Jan 11 21:58:33 auth: Debug: ldap(tbarreno,192.168.12.31,<1oL4jgnTGgDAqAwf>): result: uidNumber=1004 gidNumber=1004 homeDirectory=/home/tbarreno Jan 11 21:58:33 auth: Debug: master out: USER 3219783681 tbarreno home=/home/tbarreno uid=1004 gid=1004 Jan 11 21:58:33 imap-login: Info: Login: user=<tbarreno>, method=PLAIN, rip=192.168.12.31, lip=192.168.12.2, mpid=8661, TLS Jan 11 21:58:33 imap(tbarreno): Debug: Effective uid=1004, gid=1004, home=/home/tbarreno Jan 11 21:58:33 imap(tbarreno): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=no, hidden=no, list=yes, subscriptions=yes location=mbox:~/Mail:INBOX=/var/mail/tbarreno Jan 11 21:58:33 imap(tbarreno): Debug: fs: root=/home/tbarreno/Mail, index=, control=, inbox=/var/mail/tbarreno, alt= Jan 11 21:58:42 auth: Debug: auth client connected (pid=8663) Jan 11 21:58:42 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=EWyAjwnTGwDAqAwf lip=192.168.12.2 rip=192.168.12.31 lport=10103 rport=46875 resp=<hidden> Jan 11 21:58:42 auth: Debug: client out: OK 1 user=tbarreno Jan 11 21:58:42 auth: Debug: master in: REQUEST 1092354049 8663 1 13780b9ee679fecc08e3abdcd334049f Jan 11 21:58:42 auth: Debug: ldap(tbarreno,192.168.12.31,<EWyAjwnTGwDAqAwf>): user search: base=dc=alameda,dc=inet scope=subtree filter=(&(objectClass=usuarioLocal)(username=tbarreno)) fields=homeDirectory,uidNumber,gidNumber Jan 11 21:58:42 auth: Debug: ldap(tbarreno,192.168.12.31,<EWyAjwnTGwDAqAwf>): result: uidNumber=1004 gidNumber=1004 homeDirectory=/home/tbarreno Jan 11 21:58:42 auth: Debug: master out: USER 1092354049 tbarreno home=/home/tbarreno uid=1004 gid=1004 Jan 11 21:58:42 imap-login: Info: Login: user=<tbarreno>, method=PLAIN, rip=192.168.12.31, lip=192.168.12.2, mpid=8664, TLS Jan 11 21:58:42 imap(tbarreno): Debug: Effective uid=1004, gid=1004, home=/home/tbarreno Jan 11 21:58:42 imap(tbarreno): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=no, hidden=no, list=yes, subscriptions=yes location=mbox:~/Mail:INBOX=/var/mail/tbarreno Jan 11 21:58:42 imap(tbarreno): Debug: fs: root=/home/tbarreno/Mail, index=, control=, inbox=/var/mail/tbarreno, alt= ---- ---- # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-3-amd64 x86_64 Debian 7.0 auth_debug = yes auth_verbose = yes debug_log_path = /tmp/dovecot.log info_log_path = /tmp/dovecot.log login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_debug = yes mail_location = mbox:~/Mail:INBOX=/var/mail/%u namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imapz { port = 10103 } } ssl_ca = </etc/local/certs/CA-Alameda_cert.pem ssl_cert = </etc/local/certs/alameda.homeip.net_cert.pem ssl_key = </etc/local/certs/alameda.homeip.net_key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_ssl = yes ---------- -- Tinguaro Barreno Delgado <tbarreno(a)alameda.homeip.net>

2 4

[Dovecot] (no subject)
by Lauryca Puyulik 26 Jan '13

26 Jan '13

http://www.das-gute-weine-haus.de/tmp/wtlss.html Lauryca Puyulik

1 0

[Dovecot] Dovecot unable to access the shadow file
by kenwood 25 Jan '13

25 Jan '13

I am installing Dovecot-2.1.13 on Slackware 13.37.0 for the first time to replace ipop3d and I have overcome all of the roadblocks as they have developed except this last one and I finally have to say “uncle”. The error messages that are showing up in the dovecot.log are as follows. Jan 24 12:27:27 tux2 dovecot: auth: Error: passwd-file /etc/shadow: open(/etc/shadow) failed: Permission denied (euid=202(dovecot) egid=202(dovecot) missing +r perm: /etc/shadow, we're not in group 43(shadow), dir owned by 0:0 mode=0755) Jan 24 12:27:27 tux2 dovecot: auth: passwd-file(user,192.168.10.2,<pw3xHwzUSQDAqAoC>): no passwd file: /etc/shadow Jan 24 12:27:29 tux2 dovecot: pop3-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [192.168.10.2] Jan 24 12:27:29 tux2 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<user>, method=PLAIN, rip=192.168.10.2, lip=192.168.10.100, TLS: Disconnected, session=<pw3xHwzUSQDAqAoC> Based on what I have read the only user that should access the shadow file is root. With that in mind I looked at all the configuration and .ext files and the only file I could find that would indicate that root should be checking the shadow file is 10-master.conf. In that file it said the default service auth-worker was root but since it was apparently not working I removed the hash mark and made it explicit. It still didn’t work. As a last resort even though it was not good practice I tried adding user dovecot to the group shadow but that did not work either. It still says dovecot is not in the group shadow even though it is. Any suggestions? -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecot-unable-to-access-the-shadow-fi… Sent from the Dovecot mailing list archive at Nabble.com.

4 5

[Dovecot] dovecot 2.1.13, proxy and nologin extras field
by Marco Giunta 24 Jan '13

24 Jan '13

Hi at all, in our test environment, I'm playing with dovecot 2.1.13 configured as imap/pop/managesieve proxy. It is configured to authenticate users with ldap and it works very well. Now, I'd like to temporary disable some users's login, because we are moving to another storage, and I wouldn't stop imap service at all. I've found on Dovecot wiki that I could use 'nologin' extra field, but I wasn't been able to get it work. My dovecot configuration is: # 2.1.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.19.1.el6.x86_64 x86_64 ... auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no listen = * mail_debug = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = prefetch } and my 'dovecot-ldap.conf.ext' is: uris = ldap://ldap.example.it/ dn = "cn=Reader,dc=example,dc=it" dnpass = password base = ou=People,dc=example,dc=it pass_attrs = uid=user,userPassword=password,\ =userdb_home=/var/spool/mail/%1u/%u,uidNumber=userdb_uid,gidNumber=userdb_gid,\ =proxy=y,=host=imap.example.it,\ =nologin=y pass_filter = (&(objectClass=qmailUser)(uid=%u)(accountStatus=active)) With this configuration, all users can login, and log said: Jan 23 09:16:18 localhost dovecot: master: Dovecot v2.1.13 starting up (core dumps disabled) Jan 23 09:16:33 localhost dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jan 23 09:16:33 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jan 23 09:16:33 localhost dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jan 23 09:16:33 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jan 23 09:16:33 localhost dovecot: auth: Debug: auth client connected (pid=3660) Jan 23 09:16:33 localhost dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011session=PsbzT/DT+gCTeiwf#011lip=192.168.129.109#011rip=192.168.44.31#011lport=143#011rport=53754 Jan 23 09:16:33 localhost dovecot: auth: Debug: client passdb out: CONT#0111#011 Jan 23 09:16:33 localhost dovecot: auth: Debug: client in: CONT#0111#011AHByb3ZhZm0AY2hlcGFsbGU= Jan 23 09:16:33 localhost dovecot: auth: Debug: ldap(prova,147.122.44.31,<PsbzT/DT+gCTeiwf>): pass search: base=ou=People,dc=example,dc=it scope=subtree filter=(&(objectClass=qmailUser)(uid=prova)(accountStatus=active)) fields=uid,userPassword,uidNumber,gidNumber,uid,uid Jan 23 09:16:33 localhost dovecot: auth: Debug: ldap(prova,192.168.44.31,<PsbzT/DT+gCTeiwf>): result: uid=prova uidNumber=2944 gidNumber=650 userPassword={MD5}BjbsTtSovVAs1csswBTI7Q== Jan 23 09:16:33 localhost dovecot: auth: Debug: client passdb out: OK#0111#011user=prova#011proxy#011host=imap.example.it#011nologin#011hostip=192.168.11.136#011pass=password Jan 23 09:16:33 localhost dovecot: imap-login: proxy(prova): started proxying to imap.example.it:143: user=<prova>, method=PLAIN, rip=192.168.44.31, lip=192.168.129.109, session=<PsbzT/DT+gCTeiwf> As you can see 'nologin' field is present in 'passdb' answer, but it doesn't seem to work. If instead I try to disable login with 'allow_nets' extra field, it works as expected: 'dovecot-ldap.conf.ext': ... pass_attrs = uid=user,userPassword=password,\ =userdb_home=/var/spool/mail/%1u/%u,uidNumber=userdb_uid,gidNumber=userdb_gid,\ =proxy=y,=host=imap.example.it,\ =allow_nets=127.0.0.0/8 dovecot log: Jan 22 18:28:19 localhost dovecot: master: Dovecot v2.1.13 starting up (core dumps disabled) Jan 22 18:28:32 localhost dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jan 22 18:28:32 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Jan 22 18:28:32 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Jan 22 18:28:32 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jan 22 18:28:32 localhost dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jan 22 18:28:32 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jan 22 18:28:32 localhost dovecot: auth: Debug: auth client connected (pid=3178) Jan 22 18:28:32 localhost dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011lip=192.168.129.109#011rip=192.168.44.31# 011lport=143#011rport=53218 Jan 22 18:28:32 localhost dovecot: auth: Debug: client out: CONT#0111#011 Jan 22 18:28:32 localhost dovecot: auth: Debug: client in: CONT#0111#011AHByb3ZhZm0AY2hlcGFsbGU= Jan 22 18:28:32 localhost dovecot: auth: Debug: ldap(prova,192.168.44.31): pass search: base=ou=People,dc=example,dc=it scope=subtree filt er=(&(objectClass=qmailUser)(uid=prova)(accountStatus=active)) fields=uid,userPassword,uidNumber,gidNumber Jan 22 18:28:32 localhost dovecot: auth: Debug: auth(prova,192.168.44.31): allow_nets: Matching for network 127.0.0.0/8 Jan 22 18:28:32 localhost dovecot: auth: passdb(prova,192.168.44.31): allow_nets check failed: IP not in allowed networks Jan 22 18:28:32 localhost dovecot: auth: Debug: ldap(prova,192.168.44.31): result: uid=prova uidNumber=2944 gidNumber=650 userPassword={MD5}BjbsTtSovGGs1csswBTI7Q== Jan 22 18:28:34 localhost dovecot: auth: Debug: client out: FAIL#0111#011user=prova I don't understand what is wrong with my configuration with 'nologin'. Do someone have any clue ?? Cheers, Marco

3 4

[Dovecot] Curl
by Makarov Alex 24 Jan '13

24 Jan '13

Hello. I'm trying to configure dovecot with option --with-solr, but it cant find curl-config. What option i should specify for this reason? Curl is installed on /usr/local/lib.curl Thanks

2 1

[Dovecot] Again ACL Postgres dict trouble, no update and raw backtrace
by Steffen Kaiser 24 Jan '13

24 Jan '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I have ACL-dict-postgres trouble again. Eventually a session does not update the ACL dictionary no longer. I execute (for testing) this script: for a in $(seq 1 ${1-4}); do echo 3-$a deleteAcl Junk dvtest1 sleep 30 echo 3-$a SetAcl Junk dvtest1 kxilrsc sleep 30 done It works two loops 2013-01-24 11:07:59 dict: Info: pgsql(localhost): Connected to database dovecot 2013-01-24 11:07:59 dict: Info: pgsql(localhost): Connected to database dovecot 2013-01-24 11:07:59 dict: Info: pgsql(localhost): Connected to database dovecot 2013-01-24 11:08:59 dict: Info: pgsql(localhost): Connected to database dovecot 2013-01-24 11:09:29 dict: Info: pgsql(localhost): Connected to database dovecot , then dies with: 2013-01-24 11:09:59 dict: Error: dict sql iterate failed: Not connected to database 2013-01-24 11:09:59 IMAP(dvtest6) [22740]: Error: acl: dict iteration failed, can't update dict 2013-01-24 11:10:02 IMAP(dvtest6) [22740]: Info: Connection closed in=159 out=572 2013-01-24 11:11:00 dict: Panic: file driver-pgsql.c: line 84 (driver_pgsql_set_state): assertion failed: (state == SQL_DB_STATE_BUSY || db->cur_result == NULL) 2013-01-24 11:11:00 dict: Error: Raw backtrace: /usr/local/dovecot-2.1.13/lib/dovecot/libdovecot.so.0(+0x4881a) [0x7f465693181a] -> /usr/local/dovecot-2.1.13/lib/dovecot/libdovecot.so.0(+0x48866) [0x7f4656931866] -> /usr/local/dovecot-2.1.13/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f4656904f7f] -> dovecot2.1/dict() [0x40aa36] -> dovecot2.1/dict() [0x40aa91] -> dovecot2.1/dict() [0x40bed3] -> dovecot2.1/dict() [0x409504] -> dovecot2.1/dict(sql_db_cache_deinit+0x20) [0x408a60] -> dovecot2.1/dict(main+0x169) [0x405a59] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f465637cc8d] -> dovecot2.1/dict() [0x404bb9] 2013-01-24 11:11:00 dict: Fatal: master: service(dict): child 22744 killed with signal 6 (core not dumped) There are two different Panic messages: Panic: file driver-pgsql.c: line 587: unreached Panic: file driver-pgsql.c: line 84 (driver_pgsql_set_state): assertion failed: (state == SQL_DB_STATE_BUSY || db->cur_result == NULL) I have ulimit -c unlimited set, at start up Dovecot says: 2013-01-23 16:33:20 master: Info: Dovecot v2.1.13 (6eabf0c738d7) starting up but I do not get no core dumps. The last SQL statement executed by Posgres is (log level debug5): 2013-01-24 11:09:59 CET DEBUG: StartTransactionCommand 2013-01-24 11:09:59 CET STATEMENT: SELECT dummy,to_user,from_user FROM user_shares 2013-01-24 11:09:59 CET DEBUG: StartTransaction 2013-01-24 11:09:59 CET STATEMENT: SELECT dummy,to_user,from_user FROM user_shares 2013-01-24 11:09:59 CET DEBUG: name: unnamed; blockState: DEFAULT; state: INPROGR, xid/subid/cid: 0/1/0, nestlvl: 1, children: 2013-01-24 11:09:59 CET STATEMENT: SELECT dummy,to_user,from_user FROM user_shares 2013-01-24 11:09:59 CET LOG: statement: SELECT dummy,to_user,from_user FROM user_shares 2013-01-24 11:09:59 CET DEBUG: CommitTransactionCommand 2013-01-24 11:09:59 CET STATEMENT: SELECT dummy,to_user,from_user FROM user_shares 2013-01-24 11:09:59 CET DEBUG: CommitTransaction 2013-01-24 11:09:59 CET STATEMENT: SELECT dummy,to_user,from_user FROM user_shares 2013-01-24 11:09:59 CET DEBUG: name: unnamed; blockState: STARTED; state: INPROGR, xid/subid/cid: 0/1/0, nestlvl: 1, children: 2013-01-24 11:09:59 CET STATEMENT: SELECT dummy,to_user,from_user FROM user_shares 2013-01-24 11:09:59 CET LOG: duration: 0.205 ms Dovecot conf: SQL /usr/local/dovecot-2.1.13/etc/dovecot/dovecot-dict-sql.conf.ext connect = host=localhost dbname=dovecot user=dovecot pass=XYZ # CREATE TABLE user_shares ( # from_user varchar(100) not null, # to_user varchar(100) not null, # dummy char(1) DEFAULT '1', -- always '1' currently # primary key (from_user, to_user) # ); # COMMENT ON TABLE user_shares IS 'User from_user shares folders to user to_user.'; # # CREATE INDEX to_user # ON user_shares (to_user); -- because we always search for to_user # # CREATE TABLE anyone_shares ( # from_user varchar(100) not null, # dummy char(1) DEFAULT '1', -- always '1' currently # primary key (from_user) # ); # COMMENT ON TABLE anyone_shares IS 'User from_user shares folders to anyone.'; map { pattern = shared/shared-boxes/user/$to/$from table = user_shares value_field = dummy fields { from_user = $from to_user = $to } } map { pattern = shared/shared-boxes/anyone/$from table = anyone_shares value_field = dummy fields { from_user = $from } } # 2.1.13 (6eabf0c738d7): /usr/local/dovecot-2.1.13/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 auth_cache_size = 10 M auth_debug = yes auth_mechanisms = plain login auth_verbose = yes base_dir = /var/run/dovecot2.1/ deliver_log_format = msgid=%m: %$ %p/%w "%f" "%s" dict { acl = pgsql:/usr/local/dovecot-2.1.13/etc/dovecot/dovecot-dict-sql.conf.ext quota = pgsql:/usr/local/dovecot-2.1.13/etc/dovecot/dovecot-dict-sql.conf.ext } instance_name = dovecot2.1 lda_mailbox_autocreate = yes lmtp_save_to_detail_mailbox = yes log_path = /var/log/dovecot/dovecot2.1.log log_timestamp = "%F %H:%M:%S " mail_debug = yes mail_gid = vmail mail_log_prefix = "%Us(%u) [%p]: " mail_plugins = " quota notify mail_log zlib acl" mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = users.%%u. separator = . type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /usr/local/dovecot-2.1.13/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = proxy::acl antispam_allow_append_to_spam = true antispam_backend = spool2dir antispam_spam = SPAM+ReportAsSPAM antispam_spool2dir_notspam = /tmp/spamspool/%%020lu-%%05lu-%u-H antispam_spool2dir_spam = /tmp/spamspool/%%020lu-%%05lu-%u-S antispam_trash = trash;TRASH;Trash;spam;SPAM;Spam;junk;JUNK;Junk;Deleted Items;Deleted Messages;Gel&APY-schte Elemente;Gel&APY-schte Objekte;Junk E-mail;Junk-E-Mail;INBOX.Trash;INBOX.TRASH;INBOX.trash mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size vsize from subject quota = dict:User quota::proxy::quota quota_rule = *:storage=300MB quota_rule2 = Trash:storage=+30M recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +imapflags sieve_max_actions = 0 sieve_quota_max_storage = 3M } protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { unix_listener auth-userdb { mode = 0766 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service doveadm { unix_listener doveadm-server { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_ca = </etc/ssl/certs/ca.crt ssl_cert = </etc/ssl/certs/imap.pem ssl_key = </etc/ssl/private/imap.key userdb { driver = prefetch } userdb { args = /usr/local/dovecot-2.1.13/etc/dovecot/dovecot-ldap.conf.ext default_fields = home=/home/%u driver = ldap } verbose_proctitle = yes verbose_ssl = yes protocol lmtp { mail_plugins = " quota notify mail_log zlib acl quota sieve" } protocol lda { mail_plugins = " quota notify mail_log zlib acl quota sieve" } protocol imap { mail_plugins = " quota notify mail_log zlib acl imap_quota imap_zlib imap_acl antispam" } - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUQEQdF3r2wJMiz2NAQL62AgAsXfP01TYvGjsu9Tcny8vCHMEOhBw0QVO rvx7YDdYgyVLb/JwHQseq5XGPzRHh6PFn5HrrUFpnG87E52ZKTH1rkwYiuyM8fso HAsUM0mlz9fGGPucMa9HoTbw5turbqbjVags8x6Om4W4sgp+RITd4UZq/Qcu/ShF jfI5KDEK9bnPh9WwVKV6Yfd/1auZH+SCacb69Bb/cyVDiwbxOUTAEZikgWYgFOG2 /B1KzUPrjtumAS9myswIJxEG/4DmEt0In5fgQLM7cDdbGQl400JzR2rEa4bd3C1b 3DImA3J/YUfLpuqGS60rhx1rpSfad61Us2dh5kGgbswtbwKj2FtnTg== =Jpqg -----END PGP SIGNATURE-----

1 0

[Dovecot] Permissions when running `dovecot --exec-mail imap`
by Tim Marston 24 Jan '13

24 Jan '13

Hi, I'm running dovecot 1.2.15, on Debian squeeze. /var/mail is owned by group "mail" with permissions "g+rwxs,o=". The mail_privileged_group setting is set to "mail". I am trying to access mail on a remote machine with mutt by tunnelling mutt though ssh and running `dovecot --exec-mail imap` on the mail server. But I frequently get errors in the mail server's logs about not being able to create dotlock files when accessing my INBOX this way. This makes sense -- I'm running dovecot as a regular user, so it isn't able to write to /var/mail as group "mail". I notice that on the dovecot wiki[1] it is suggested that sudo is used to set uid/gid before running `dovecot --exec-mail imap`. But I don't actually want to set the uid, just the gid. And I also have sudo disabled at the moment. So I was wondering about another solution... Would it be acceptable to setgid the dovecot executable and change it's group to "mail" (i.e., `chgrp mail dovecot` and `chmod g+s dovecot`)? Would this pose some kind of security risk? Would this actualy do what I want, or am I missing a bigger picture? Kind regards, [1] http://wiki.dovecot.org/PreAuth -- Tim Marston ed.am

2 3