- dovecot - dovecot.org

[Dovecot] Problems with master user
by Andrea Mistrali 12 Apr '12

12 Apr '12

Hi to all! I’m trying to setup master users, but I have some problems. Namely I can authenticate, but after it I cannot access INBOX or other mailboxes of the user. My configuration is: passdb { driver = ldap args = /etc/dovecot/ldap-passdb.conf } passdb { driver = sql args = /etc/dovecot/sql.conf } passdb { driver = passwd-file args = /etc/dovecot/passwd.masterusers master = yes pass = yes } userdb { driver = sql args = /etc/dovecot/sql.conf } (I look up for auth in LDAP server first, if it fails I look up in DB, else I check for master user) and relevant files are /etc/dovecot/sql.conf —————————— password_query = SELECT fullusername as user, \ password, \ uid AS userdb_uid, \ gid AS userdb_gid, \ home AS userdb_home, \ mail AS userdb_mail, \ groups as userdb_acl_groups, \ quota_rule as userdb_quota_rule \ FROM pd_users_full WHERE \ username = '%n' AND \ domain = '%d' AND \ external_auth IS FALSE AND \ master_user IS FALSE AND \ %Ls_ok IS TRUE user_query = SELECT fullusername as user, \ uid, \ gid, \ home, \ mail, \ groups as acl_groups, \ quota_rule \ FROM pd_users_full WHERE \ username = '%n' AND \ domain = '%d' AND \ master_user IS FALSE iterate_query = SELECT fullusername as username, fullusername as user \ FROM pd_users_full where master_user IS FALSE ORDER BY domain,username /etc/dovecot/ldap-passdb.conf —————————————— uris = ldap://dioniso.cube.lan base = cn=users,dc=cube,dc=lan auth_bind = yes auth_bind_userdn = uid=%n,cn=users,dc=cube,dc=lan pass_attrs = uid=username, \ userPassword=password, \ # uidNumber=userdb_uid, \ # =userdb_home=/var/mail/cubeholding.com/%Lu, \ # =userdb_domain=cubeholding.com, \ # =userdb_mail=maildir:~/maildir/:INBOX=~/maildir/INBOX:LAYOUT=fs:INDEX=~/indexes/ pass_filter = (&(objectClass=posixAccount)(uid=%n)(mail=*@%d)) # Attributes and filter to get a list of all users # iterate_attrs = uid=username iterate_attrs = uid=user iterate_filter = (&(objectClass=posixAccount)(mail=*@%d)) If I test with doveadm auth and doveadm user I receive this: # doveadm auth -x service=imap andre@am.cx\*master@am.cx XXXXXX passdb: andre@am.cx*master@am.cx auth succeeded extra fields: user=andre(a)am.cx # doveadm user andre(a)am.cx userdb: andre(a)am.cx uid : 10010 gid : 8 home : /var/mail/am.cx/andre mail : maildir:~/maildir:INBOX=~/maildir/INBOX:LAYOUT=fs:INDEX=~/indexes/ acl_groups: quota_rule: *:storage=10G and in log files I see: 20120412 17:31:26 auth: Info: passdb(master(a)am.cx,master): Master user logging in as andre(a)am.cx 20120412 17:31:26 auth: Info: ldap(andre(a)am.cx): invalid credentials (given password: XXXXXX) but if I try the real thing: # telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE ACL QUOTA NAMESPACE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=GSSAPI] Dovecot ready. 0 login andre@am.cx*master@am.cx XXXXXX 0 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE ACL QUOTA NAMESPACE COMPRESS=DEFLATE QUOTA ACL RIGHTS=texk] Logged in 0 select INBOX 0 NO [SERVERBUG] Internal error occurred. Refer to server log for more information. [2012-04-12 17:33:15] and in log file I have: 20120412 17:34:25 auth: Info: passdb(master(a)am.cx,127.0.0.1,master): Master user logging in as andre(a)am.cx 20120412 17:34:25 auth: Info: ldap(andre(a)am.cx,127.0.0.1): invalid credentials (given password: silmaril) 20120412 17:34:25 imap-login: Info: Login: pid=1673, <andre(a)am.cx>, 127.0.0.1/127.0.0.1, PLAIN, secured 20120412 17:34:47 imap(andre(a)am.cx): Error: Opening INBOX failed: Mailbox doesn't exist: INBOX Can someone tell me what is wrong in my setup? TIA A.

1 0

[Dovecot] Problems with Apple Mail and attachments
by Helga Mayer 12 Apr '12

12 Apr '12

Hello, has anyone experiences with the Apple mail client, to be precise : Mail 5.2? When I copy a message with an attachment from the inbox to a different folder using 'move' or 'copy' , Apple Mail does not properly display the attachment in the new folder. When I copy the same message using 'archive' the attachment shows up properly. There is no difference on the server side. We are using maildirs. The raw messages in the various folders are identical. Deleting plist on the Mac didn't help. After removing and recreation of the account (client side) the attachments are displayed correctly again. Is this an apple problem or has it got anything to do with dovecot.index.cache ? Kind Regards Helga Mayer

3 3

[Dovecot] vacation plugins for squirrelmail
by Daminto Lie 12 Apr '12

12 Apr '12

Hi, I am afraid I have a question to ask of you all. I have just completed setting up a mail server running on Ubuntu Server 10.04. It has postfix, dovecot 1.2.19, LDAP and squirrelmail as the webmail. I have also created virtual users accounts on the system through LDAP. I can send and receive mails which is great. Now, what I am trying to do is to set up a vacation auto-reply on the squirrelmail so that users who are about to go on vacation can set it up themselves. I was looking around for the vacation plugins for dovecot that I can incorporate it into squirrelmail. Any help would be very much appreciated. Thank you

2 1

[Dovecot] "doveadm mailbox status" destroys compressed messages without W= attribute
by Artur Zaprzała 12 Apr '12

12 Apr '12

I still have some old messages from previous mail server. This messages have no W= attribute either in file name or dovecot-uidlist and are compressed with gzip. Running "doveadm mailbox status -A vsize \*" will result in the following messages: doveadm(foo@domain): Error: Cached message size larger than expected (2580 > 1451) doveadm(foo@domain): Error: Maildir filename has wrong S value, renamed the file from /vmail/domain/foo/Maildir/.Sent/cur/1206550323.M125837P13306V0000000000000812I0000809E.oldname,S=2580:2,SZ to /vmail/domain/foo/Maildir/.Sent/cur/1206550323.M125837P13306V0000000000000812I0000809E.oldname,S=1451:2,SZ doveadm(foo@domain): Error: Corrupted index cache file /vmail/domain/foo/Maildir/.Sent/dovecot.index.cache: Broken physical size for mail UID 2 doveadm(foo@domain): Error: Cached message size larger than expected (2580 > 1451) doveadm(foo@domain): Error: Corrupted index cache file /vmail/domain/foo/Maildir/.Sent/dovecot.index.cache: Broken physical size for mail UID 2 doveadm(foo@domain): Error: read(/vmail/domain/foo/Maildir/.Sent/cur/1206550323.M125837P13306V0000000000000812I0000809E.oldname,S=2580:2,SZ) failed: Input/output error (uid=2) (Size of uncompressed message is 2580 and compressed size is 1451) I have enabled zlib plugin for imap, pop3, lda and lmtp. But how to enable it for doveadm? -- Best regards, Artur Zaprzała

2 1

[Dovecot] SSL Certificate Anomalies with latest code changes
by Thomas Leuxner 12 Apr '12

12 Apr '12

Some change between bf5ae73e9475 and 584bd77c38fd seems to have broken something in the SSL Handshake. A previously valid server certificate is deemed invalid by various mail clients. http://hg.dovecot.org/dovecot-2.1/rev/bf5ae73e9475 works fine while http://hg.dovecot.org/dovecot-2.1/rev/584bd77c38fd does not. Regards Thomas

2 7

[Dovecot] ldap idle connection timeout in DoveCot 1.0.13?
by Zhou, Yan 11 Apr '12

11 Apr '12

Hi there, We are using DoveCot 1.0.13, it connects to LDAP server for authentication. It seems that DoveCot keeps the idle LDAP connection open. Our firewall is terminating these connections after some time of idle activity (2 hours), then, we run into authentication problem. If we restart either LDAP or DoveCot, then it is fine. Can we set some kind of LDAP idle connection timeout in DoveCot? /etc/dovecot-ldap.conf. I do not see any configuration available for 1.0.13. Another alternative is to set idle connection timeout in LDAP, but we prefer doing that in DoveCot. Thanks, Yan Confidentiality Notice: The information contained in this electronic transmission is confidential and may be legally privileged. It is intended only for the addressee(s) named above. If you are not an intended recipient, be aware that any disclosure, copying, distribution or use of the information contained in this transmission is prohibited and may be unlawful. If you have received this transmission in error, please notify us by telephone (513) 229-5500 or by email (postmaster(a)MedPlus.com) After replying, please erase it from your computer system.

3 2

[Dovecot] lazy_expunge questions
by James Devine 11 Apr '12

11 Apr '12

I'm messing around with lazy expunge and I just had a couple of questions. If I delete messages or folders with messages, I see them being moved to the expunge namespace, but if I delete an empty folder, all traces of it seem to disappear. Is there a way to move empty folders to the expunge namespace also? My second question is in regards to restoring folders. If I try to execute the imap command 'RENAME EXPUNGED/TEST INBOX/TEST' I get 'NO [CANNOT] Can't rename mailboxes to/from expunge namespace'. Just wondering if this is possible or do I need to recreate the folder and then move messages into it.

2 3

[Dovecot] Bug tracker
by Timo Sirainen 11 Apr '12

11 Apr '12

I started thinking that perhaps I should move my TODO list to a bug tracker. But because of reasons I've explained a few times before, I don't want a full blown public bug tracking system. The requirements for it are: * I am the only person who can add new bugs. Everyone else reports bugs/requests to this mailing list as before. (Well, I guess Stephan could use this as well if he wants to.) * Everyone can comment existing bugs. * Dovecot mailing list integration: Commenting a bug sends a mail to the mailing list. Replies to those comments go back to bug tracker (probably based on some [#1234] tag in subject). I would have the option of adding a comment that doesn't go to the mailing list (= adding some internal comment that nobody else cares about). Notifications about new bugs won't go to the mailing list (most likely it was created due to a recent mailing list post). So the main difference to how things work now is that people would be able to easily browse existing bugs and add comments to them. I would add bugs there only when I'm not planning on fixing them within a few days. I wouldn't add each and every feature request there, only the things that I'm actually interested in developing. So the idea would be to actually get the bug tracker emptied at some point, not to be a graveyard of unimportant feature requests that about 1-2 people in the world would want. So, any suggestions for what software could do these things? I think Request Tracker has those features, but it's not really the nicest/prettiest thing.

9 15

[Dovecot] Proxy and SSO (single sign-on)
by Miguel Tormo 11 Apr '12

11 Apr '12

Hello, I have a running setup with a dovecot imap4/pop3 proxy to a few dovecot backend servers which actually store the mailboxes. This is running smoothly and allows me to transparently distribute mailboxes. I'm using some "extrafield" configured in the LDAP passdb. However, now I would like to use GSSAPI (preferred) and NTLM for single sign-on. Both are pretty straightforward to configure in a single instance environment, but I don't know if they would work with proxy. For example, with GSSAPI there are two cases: 1) Just use gssapi mechanism, without PAM. Then, it a user presents a ticket the passdb ldap is not used, so the extrafields are never read. 2) Use gssapi and PAM (thus allowing using a kerberos password). But the extrafields feature isn't available with PAM passdb driver, so again the proxy won't work. The case for NTLM would fall into the first case, I think. Am I right regarding this scenario? Is there a way I could make SSO and proxying work? I'm currently using dovecot 2.0.16 (had to patch it to increment LOGIN_MAX_INBUF_SIZE to 4096 for GSSAPI to work, as I read somewhere in this list), but I could upgrade to a newer version if that allows all this to work. Thanks!

2 3

Re: [Dovecot] Bug tracker
by interfaSys sàrl 11 Apr '12

11 Apr '12

I second that. New version 3.2 supports sub-projects, editions and components and is user-friendly. Cheers, Olivier > On Wed, Apr 11, 2012 at 09:26:20AM +0300, Timo Sirainen wrote: > > So, any suggestions for what software could do these things? I think > Request > Tracker has those features, but it's not really the nicest/prettiest > thing. > > May be worth to take a look at http://www.thebuggenie.com/. > > Thomas >

1 0