- dovecot - dovecot.org

Re: [Dovecot] auth trouble
by Joseph Tam 08 Jun '12

08 Jun '12

Glenn English writes: > I'm getting a lot of what I think is a local socket asking > dovecot:auth to verify username/passwords: > >> May 31 09:00:54 server dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=admin rhost= If dovecot-auth is getting input from a local socket, then rhost information is irrelevant since the host doing the asking is the server itself (maybe from another daemon connected to a remote host). Maybe someone is brute forcing your server's Postfix authenticated SMTP service since Postfix can be configured to use Dovecot's SASL authentication framework. Joseph Tam <jtam.home(a)gmail.com>

4 5

[Dovecot] upgrade from 1.0.5 to 2.1.7
by Andreas Meyer 08 Jun '12

08 Jun '12

Hello! I want to upgrade the docevot-installation from v 1.0.5 to 2.1..7 Now I get the following executing doveconf -n -c /etc/dovecot/dovecot.conf > /home/mail1/dovecot-2.conf doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:217: add auth_ prefix to all settings inside auth {} and remove the auth {} section completely doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:219: passdb passwd-file {} has been replaced by passdb { driver=passwd-file } doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:222: userdb passwd-file {} has been replaced by userdb { driver=passwd-file } The section at line 217 looks like this: auth default { mechanisms = plain passdb passwd-file { args = /etc/dovecot/passwd } userdb passwd-file { args = /etc/dovecot/passwd } How do I change it to fullfill the new needs? And how do I handle line 217? add auth_ prefix to all settings inside auth {} and remove the auth {} section completely ? Thanks for help! Andreas

3 14

[Dovecot] Fwd: ntlm_auth in Dovecot
by Алексей Переклад 08 Jun '12

08 Jun '12

Try to delete your server from domain and add it again by "net ads join..." > I'm trying getting NTLM auth working against AD in my Dovecot 2.0.15. > > I'm getting the following error: > > > Jun 08 14:18:11 auth: Info: winbind(?,10.44.3.151): user not > authenticated: NT_STATUS_UNSUCCESSFUL

1 0

[Dovecot] Director pop3 real ips v2.1.1
by Костырев Александр Алексеевич 08 Jun '12

08 Jun '12

good day! I'm experiencing problem with pop3 proxying: on backend servers in logs there's director's ip instead of remote's like this: Jun 8 15:21:23 host-01 dovecot: pop3-login: Login: user=<test1(a)example.com>, method=PLAIN, rip=192.168.5.102, lip=192.168.5.100, mpid=26170, secured Jun 8 15:32:16 host-01 dovecot: pop3-login: Login: user=<test1(a)example.com>, method=PLAIN, rip=192.168.5.102, lip=192.168.5.100, mpid=26426, secured -- С уважением, Костырев Александр системный администратор ЗАО "Сервер-Центр" тел.: (423) 262-02-62 (доб. 2037) факс: (423) 262-02-10 a.kostyrev(a)serverc.ru icq: 404-198-497

3 3

[Dovecot] dovecot ignores entries in virtual_alias_maps when using dovecot lda
by Marko Weber 08 Jun '12

08 Jun '12

hello list, i need help. dovecot dont look into my virtual_alias_maps . i set via postzfixadmin an alias postmaster(a)domain.tld to newmail(a)domainother.tld. when i send mails to postmaster(a)domain.tld mails are rejected. dovecot authworker tells me in log: user unknown. but i can request the data via postmap -v -q postmaster(a)domain.tld mysql:/etc/postfix/mysql_virtual_alias.cf and get result "newmail(a)domainother.tld". any ideas, hwo to get dovecot to look into my alias maps? marko

2 2

[Dovecot] Can we know when a user read our email?
by Beto Moreno 08 Jun '12

08 Jun '12

Hi. I have seen some emails servers that if I send a email to other person I can see if that person have read our emails and with a option to delete the email if the person hasn't read our email. Does dovecot have some like this feature? Thanks!!!

13 32

[Dovecot] Problems since upgrading to 2.1.6 from 2.0.20
by Trever L. Adams 08 Jun '12

08 Jun '12

Hello Everyone, I saw the text about the change and needing to define an inbox namespace. Everything seems to work fine except doveadm. I get the following from a cronjob that has worked well for years now. doveadm(account(a)example.com): Error: Syncing mailbox TRASH failed: Mailbox doesn't exist: TRASH doveadm(account(a)example.com): Error: Syncing mailbox TRASH failed: Mailbox doesn't exist: TRASH doveadm(account(a)example.com): Error: Syncing mailbox TRASH failed: Mailbox doesn't exist: TRASH The cronjob is: 1 4 * * * doveadm expunge -A mailbox TRASH SAVEDBEFORE 30D What is the problem? I have tried to find documentation and do searches for others having the same problem. I do not know if I am just missing something or what. Any help would be greatly appreciated. Thank you, Trever

1 1

[Dovecot] Postfix don't relay to dovecot virtual user
by phil25lsbin 07 Jun '12

07 Jun '12

Hi, I run a mail server on debian squeeze system , i installed the following software postfix dovecot spamassassin postgrey I configured a virtual domain and virtual mailbox but postfix don't pipe mail in dovecot. In log, it's appear that the relay mode is local and the delivery message is delivered to mailbox) Jun 7 15:23:01 ns230370 postfix/smtpd[27501]: 66BBA4D40F0: client=localhost.localdomain[127.0.0.1] Jun 7 15:23:01 ns230370 postfix/cleanup[8017]: 66BBA4D40F0: message-id=< E1Sccg1-00029S-9I(a)ns231581.ovh.net> Jun 7 15:23:01 ns230370 postfix/qmgr[27490]: 66BBA4D40F0: from=< admlb(a)lebest.fr>, size=1807, nrcpt=1 (queue active) Jun 7 15:23:01 ns230370 postfix/local[7907]: 66BBA4D40F0: to=< admlb(a)lebest.fr>, relay=local, delay=0, delays=0/0/0/0, dsn=2.0.0, status=sent (delivered to mailbox) Jun 7 15:23:01 ns230370 postfix/qmgr[27490]: 66BBA4D40F0: removed My dovecot.conf: protocols = imap imaps pop3 pop3s log_timestamp = "%Y-%m-%d %H:%M:%S " log_path = /var/log/dovecot/dovecot.log info_log_path = /var/log/dovecot/dovecot-info.log mail_privileged_group = mail disable_plaintext_auth = no mail_location = maildir:/home/smtp/%d/%n:INDEX=/home/smtp/%d/%n/indexes protocol imap { } protocol pop3 { } protocol managesieve { } protocol lda { postmaster_address = admlb(a)XXX.FR mail_plugin_dir = /usr/lib/dovecot/modules/lda auth_socket_path = /var/run/dovecot/auth-master } auth default { userdb sql { args = /etc/dovecot/dovecot-mysql.conf } passdb sql { args = /etc/dovecot/dovecot-mysql.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = smtp } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } dict { } plugin { } My main.cf myhostname = smtp.XXX.FR alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases myorigin = XXX.FR mydestination = XXX.FR, smtp.XXX.FR, localhost.XXX.FRr, localhost relayhost = mynetworks = 172.16.0.0/12 127.0.0.0/8 mailbox_size_limit = 0 inet_interfaces = all virtual_uid_maps = static:3000 virtual_gid_maps = static:3000 virtual_mailbox_base = /home/smtp virtual_transport = dovecot virtual_mailbox_domains = mysql:/etc/postfix/ mysql_virtual_mailbox_domains.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf relay_domains = mysql:/etc/postfix/mysql_relay_domains.cf smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unauth_destination, reject_unauth_pipelining, check_policy_service inet:127.0.0.1:10023, reject_invalid_hostname smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous content_filter = amavis:[127.0.0.1]:10024 receive_override_options = no_address_mappings inet_protocols = ipv4 The end of master.cf file dovecot unix - n n - - pipe flags=DRhu user=smtp:smtp argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} amavis unix - - - - 2 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes 127.0.0.1:10025 inet n - - - - smtpd -o content_filter= -o local_recipient_maps= -o relay_recipient_maps= -o smtpd_restriction_classes= -o smtpd_client_restrictions= -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o mynetworks=127.0.0.0/8 -o strict_rfc821_envelopes=yes -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks -o smtpd_bind_address=127.0.0.1 Thanks

3 3

[Dovecot] auth-worker problem here.
by Marko Weber 07 Jun '12

07 Jun '12

hello, in howto for gentoo i found this: To tell Postfix about the maps that you've just set up, add the following (substituting mysql for pgsql if you're on PostgreSQL) to the bottom of /etc/postfix/main.cf: virtual_alias_maps = mysql:/etc/postfix/sql_virtual_alias_maps.cf virtual_mailbox_domains = mysql:/etc/postfix/sql_virtual_domain_maps.cf virtual_mailbox_maps = mysql:/etc/postfix/sql_virtual_mailbox_maps.cf Tip: Because this is using the Dovecot's LDA, all results from virtual_mailbox_maps are ignored beyond checking if they exist. I added in the mysql db an alias postmaster(a)domainn.tld that should be forwarded to name(a)domainn.tld. The tip above tells me when using dovecot lda the virtual_alias_maps is ignored by dovecot. now when i send a mail to postmaster(a)domainn.tld the mail is not transported to name(a)domainn.tld. in logfile i see this: dovecot: auth-worker: sql(postmaster(a)zbfmail.de): Unknown user how can i tell dovecot to also use the virtual_alias_maps? thank you marko

1 0

[Dovecot] Problem with Dovecot and AD LDAP auth
by Алексей Переклад 07 Jun '12

07 Jun '12

Hi. Seems it's a bug in dovecot auth. I have FreeBSD 8.1-RELEASE-p1 and I tried 1.2.17 and 2.1.7 versions of Dovecot, and still no luck. The problem: when I set in dovecot-ldap.conf: base = CN=Users,DC=domain,DC=local everything works fine. But if I set: base = DC=domain,DC=local mail client can't authorize. /var/log/dovecot.log says: =============================================== Jun 07 18:07:17 auth: Debug: auth client connected (pid=14611) Jun 07 18:08:11 auth: Debug: client in: AUTH 1 PLAIN service=imap session=G1//aeLB6wAKAABu lip=10.0.0.3 rip=10.0.0.110 lport=143 rport=55787 resp=AGdhdGV3YXkAVU82eUpuUXQ= Jun 07 18:08:11 auth: Debug: ldap(gateway,10.0.0.110,<G1//aeLB6wAKAABu>): bind search: base=DC=domain,DC=local filter=(&(objectClass=person)(sAMAccountName=gateway)) Jun 07 18:08:11 auth: Debug: ldap(gateway,10.0.0.110,<G1//aeLB6wAKAABu>): result: uid missing Jun 07 18:10:18 imap-login: Info: Disconnected: Inactivity during authentication (disconnected while authenticating, waited 127 secs): user=<>, method=PLAIN, rip=10.0.0.110, lip=10.0.0.3, session=<G1//aeLB6wAKAABu> Jun 07 18:10:18 auth: Debug: client in: CANCEL 1 Jun 07 18:10:18 auth: Debug: auth client connected (pid=14706) Jun 07 18:10:26 auth: Debug: client in: AUTH 1 PLAIN service=imap session=n6IBcuLB7AAKAABu lip=10.0.0.3 rip=10.0.0.110 lport=143 rport=55788 resp=AGdhdGV3YXkAVU82eUpuUXQ= Jun 07 18:10:26 auth: Debug: ldap(gateway,10.0.0.110,<n6IBcuLB7AAKAABu>): bind search: base=DC=domain,DC=local filter=(&(objectClass=person)(sAMAccountName=gateway)) Jun 07 18:10:26 auth: Error: ldap(gateway,10.0.0.110,<n6IBcuLB7AAKAABu>): Connection appears to be hanging, reconnecting Jun 07 18:10:26 auth: Debug: ldap(gateway,10.0.0.110,<n6IBcuLB7AAKAABu>): result: uid missing Jun 07 18:10:26 auth: Error: ldap(gateway,10.0.0.110,<G1//aeLB6wAKAABu>): Request lost Jun 07 18:10:26 auth: Error: ldap(gateway,10.0.0.110,<n6IBcuLB7AAKAABu>): ldap_search(base=DC=domain,DC=local filter=(&(objectClass=person)(sAMAccountName=gateway))) failed: Operations error Jun 07 18:10:26 auth: Error: LDAP: Reply with unknown msgid 2 Jun 07 18:10:26 auth: Error: LDAP: Reply with unknown msgid 2 Jun 07 18:10:26 auth: Error: LDAP: Reply with unknown msgid 2 Jun 07 18:10:26 auth: Error: LDAP: Reply with unknown msgid 2 Jun 07 18:10:28 auth: Debug: client out: FAIL 1 user=gateway temp Jun 07 18:10:28 auth: Debug: client out: FAIL 1 user=gateway temp Jun 07 18:13:18 imap-login: Info: Disconnected: Inactivity (auth failed, 1 attempts in 172 secs): user=<gateway>, method=PLAIN, rip=10.0.0.110, lip=10.0.0.3, session=<n6IBcuLB7AAKAABu> ============================================ My dovecot-ldap.conf: =============================== ldap_version = 3 hosts = ad.domain.local base = DC=hrom,DC=local scope = subtree dn = CN=mailserver,CN=Users,DC=domain,DC=local dnpass = here_is_pass auth_bind = yes pass_attrs = uid=user pass_filter = "(&(objectClass=person)(sAMAccountName=%u))" user_attrs = name=mail=maildir:/var/mail/virtual/hrom.local/%n user_filter = "(&(objectClass=person)(sAMAccountName=%u))" =================================================== I need base = DC=domain,DC=local for searching for user's accounts in different OU of my AD. If I set base = CN=Users,DC=domain,DC=local, Dovecot can't authorize user accounts from OU. P.S.: Postfix with base = DC=domain,DC=local works perfectly, so the problem is not with our domain controller (LDAP server as well) .

1 0