- dovecot - dovecot.org

[Dovecot] Dovecot and NTLM problem
by Pavel Obr 28 Sep '11

28 Sep '11

Hallo, i am trying setup dovecot 2.0.9 with NTLM. I tested succesfully winbind with winbind -k, ntlm-auth with ntlm_auth --username=pavel. But I cannot authenticate in Dovecot. My log show these lines: Sep 28 22:16:25 srv-pat dovecot: auth: Debug: auth client connected (pid=6002) Sep 28 22:16:25 srv-pat dovecot: auth: Debug: client in: AUTH#0111#011NTLM#011service=imap#011lip=192.168.7.67#011rip=192.168.100.141#011lport=143#011rport=5109 Sep 28 22:16:25 srv-pat dovecot: auth: Debug: client out: CONT#0111#011 Sep 28 22:16:25 srv-pat dovecot: auth: Fatal: execv(/usr/bin/ntlm_auth) failed: Permission denied Sep 28 22:16:25 srv-pat dovecot: auth: Error: winbind: ntlm_auth exited with exit code 84 Sep 28 22:16:25 srv-pat dovecot: auth: Debug: client in: CONT#0111#011TlRMTVNTUAABAAAAB4IIAAAAAAAAAAAAAAAAAAAAAAA= Sep 28 22:16:25 srv-pat dovecot: auth: Error: winbind(?,192.168.100.141): write(out_pipe) failed: Broken pipe Sep 28 22:16:27 srv-pat dovecot: auth: Debug: client out: FAIL#0111 Do you know what that is mean "Fatal: execv(/usr/bin/ntlm_auth) failed: Permission denied" ? What is exit code 84 - "Error: winbind: ntlm_auth exited with exit code 84"? My dovecot -n: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-131.12.1.el6.x86_64 x86_64 Scientific Linux release 6.1 (Carbon) auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain ntlm login auth_use_winbind = yes auth_username_format = %n mail_home = /data/vmail/%d/%n mail_location = mdbox:~/mail mbox_write_locks = fcntl passdb { driver = pam } protocols = pop3 imap lmtp ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=501 gid=501 home=/data/vmail/%d/%n allow_all_users=yes driver = static } Thank you, Pavel

1 0

[Dovecot] deliver LDA issue with setuid-root
by Daminto Lie 28 Sep '11

28 Sep '11

Hi, I am getting the following error message when trying to implement LDA Dovecot 1.2.9 with virtual users: Sep 28 15:59:33 server1 postfix/pipe[3041]: 28BEC2400A1: to=<msmith(a)example.com>, relay=dovecot, delay=2361, delays=2361/0.01/0/0.03, dsn=4.3.0, status=deferred (temporary failure. Command output: /usr/lib/dovecot/deliver must not be both world-executable and setuid-root. This allows root exploits. See http://wiki.dovecot.org/LDA#multipleuids ) I do not know if I need to change the group to secmail. Currently, I have as follows -rwsr-xr-x 1 root root 933796 2011-06-10 05:36 deliver Can I change it to any other group apart from secmail? and what does it mean by world-executable? Sorry if I ask a silly question here but keen to learn more about linux. Here is my dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap listen: *:143 ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 106 last_valid_uid: 200 mail_privileged_group: mail mail_location: maildir:/home/vmail/%u/Maildir mbox_write_locks: fcntl dotlock mail_plugins: quota imap_quota imap_client_workarounds: outlook-idle delay-newmail netscape-eoh tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)example.com mail_plugins: quota sendmail_path: /usr/lib/sendmail rejection_reason: Your message to <%t> was automatically rejected:%n%r auth default: mechanisms: plain login username_format: %Lu verbose: yes debug: yes debug_passwords: yes passdb: driver: pam passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: prefetch userdb: driver: passwd userdb: driver: static args: uid=106 gid=1010 home=/home/vmail/%u socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot-auth-master mode: 432 user: vmail group: vmail plugin: quota: maildir quota_rule: *:storage=3GB quota_rule2: Trash:storage=20%% quota_rule3: Spam:storage=10%% quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80 Here is my master.cf # delivery through dovecot dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${recipient} Any help would be greatly appreciated. Thank you

2 1

[Dovecot] Dsync Removing Subscriptions Entries
by Asai 28 Sep '11

28 Sep '11

Greetings, In learning to get Dsync to work, I see a lot of this type of warning in the logs: dsync-remote(user(a)domain.org): Warning: Subscriptions file /vmail/domain/user/subscriptions: Removing invalid entry: INBOX/SOME folder When I ran a test this morning on the backed up emails on the remote server with Thunderbird, I did indeed see that many of the subscribed folders were not present in TB, although the directories and data were indeed present on the remote server. The subscriptions file on the remote server had the omissions which Dsync warned about. These maildir folders seem to work fine on the main server. Can someone help me to understand how to make the sync without omissions in the subscriptions file? -- *Asai* Global Change Multi-Media Internet Application Development IT and Networking Services 520-398-2542

1 0

[Dovecot] Controling users access ?
by Frank Bonnet 28 Sep '11

28 Sep '11

Hello We are going to split our mailhub in two :-) one for students and one for the others Does Dovecot 2 provide some mechanisms to filter users's' login ? a flat file would be enough for my usage ( I use pam_ldap nss_ldap with nsswitch ) thanks

1 0

[Dovecot] 2.0.14 IPC client_limit reached error
by Tom Pawlowski 28 Sep '11

28 Sep '11

Hi Timo, Upgraded to 2.0.14 last night for the director-related features and I noticed an oddity in the logs: Sep 28 09:53:21 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:53:56 director1 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:54:23 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:55:07 director1 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:55:24 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:56:08 director1 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:56:25 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:57:10 director1 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:57:26 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped These warnings are only being printed out by the directors. Both the directors and imap/pop3 servers have init scripts with the following ulimits set in the start sections: ulimit -s unlimited ulimit -n 30000 ulimit -u 30000 (We'd get alerts long before resource consumption became an issue) I've been watching the established imap/pop3 connection count on both directors for the past hour and a half and despite these warnings, those counts have grown continuously. The other weird thing is, according the configuration (attached), the ipc service has a client_limit of 0 by default, so we shouldn't be hitting a ceiling anyway, correct? So are these false warnings or something to be concerned about? -- Tom Pawlowski OIT-CSS System Administrator office: Hill 147 email: tompru(a)jla.rutgers.edu phone: (732) 445-2634

1 0

[Dovecot] Problems running Dovecot 1.2.17 on AIX
by ra＠rz.uni-frankfurt.de 28 Sep '11

28 Sep '11

Hello, we have a problem getting Dovecot 1.2.17 to work on one of our AIX-Machines (AIX 5.3). Dovecot compiles fine, but if we try to run it we get strange library dependency problems such as the following: [root@localhost dovecot-test]# /local/dovecot-test/sbin/dovecot -F -c /local/dovecot-test/etc/dovecot.clients.conf Edlopen(/local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so) failed: rtld: 0712-001 Symbol bsearch_strcmp was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol safe_mkstemp_group was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol mail_user_module_register was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol dict_iterate_init was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol dict_iterate was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol dict_iterate_deinit was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol i_strcmp_p was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. Additional errors occurred but are not reported. FCouldn't load required plugins We tried to use the compiler-script as described on the wiki (http://wiki1.dovecot.org/AixPluginsSupport) and we tried to compile dovecot with gcc instead of xlc. We even tried it on another host running AIX 5.3 but dovecot still fails with the runtime linker complaining about missing runtime definitions. Any hint/help would be appreciated. Thanks in advance Manuel

1 0

[Dovecot] Virtual Folder configuration problem.
by Terry Carmen 28 Sep '11

28 Sep '11

I'm attempting to create a virtual inbox that contains all unread messages from the user's Maildir. I created a conf file called 80-virtual.conf containing: mail_plugins = $mail_plugins virtual namespace { prefix = virtual/ separator = / location = virtual:~/Maildir/virtual } And created the /home/username/Maildir/virtual/unseen/dovecot-virtual file which contains: # ~/Maildir/virtual/unseen/dovecot-virtual * unseen However it doesn't work and the maillog file contains: dovecot: imap(username): Error: user username: Initialization failed: namespace configuration error: inbox=yes namespace missing This is with dovecot 2.0.beta6 (3156315704ef) Does anybody have any suggestions? Thanks! Terry

3 4

[Dovecot] Duplicates when switching from Qpopper to Dovecot pop3
by Tristan Goguen 28 Sep '11

28 Sep '11

Hi All, Our test users re-download the mail they've left on the server when they switch from Qpopper to Dovecot. Qpopper includes the X-UIDL header - X-UIDL: X8V"!E)<"!58?"!"9C"! - on read messages. Any suggestions are appreciated. I've included my dovecot configuration. Thank you, Tristan --- Tristan Tristan Goguen CEO, ILAP® T: 416-250-5600 ext. 205 F: 416-250-6755 tgoguen(a)ilap.com www.ilap.com --- # 2.0.14: /etc/dovecot.conf # OS: SunOS 5.10 sun4v auth_cache_size = 1048575 B auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.+-_@ auth_username_format = %Ln auth_verbose = yes base_dir = /usr/local/var/run/dovecot/ disable_plaintext_auth = no first_valid_uid = 100 log_path = /var/log/dovecot.log login_greeting = mail_access_groups = mail mail_fsync = never mail_location = mbox:~/mail:INBOX=/var/mail/%1u/%1.1u/%u mbox_dotlock_change_timeout = 1 mins mbox_min_index_size = 1 B mbox_read_locks = dotlock mbox_write_locks = dotlock mmap_disable = yes passdb { driver = shadow } protocols = pop3 service pop3-login { client_limit = 10 inet_listener pop3 { address = 216.223.136.7 port = 110 } process_limit = 128 process_min_avail = 5 service_count = 0 vsz_limit = 512 M } shutdown_clients = no ssl = no userdb { args = blocking=yes driver = passwd } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes pop3_lock_session = yes pop3_reuse_xuidl = yes pop3_save_uidl = yes }

1 1

[Dovecot] Create userdir on dovecot login --- solved
by Andreas Cieslak 27 Sep '11

27 Sep '11

Sorted out the problem, which was already solved in an older forum post of dovecot. In the file /usr/local/etc/dovecot/conf.d/auth-system.conf.ext I set Passdb { Driver = pam args = session=yes dovecot } Unfortunately this didnt work because when I log in with a user xy, the user dovecot became the owner of the userdir. When I modified the file /usr/local/etc/dovecot/conf.d/auth-system.conf.ext like this: Passdb { Driver = pam # args = session=yes dovecot } And gave anyone (for testing) the permission to write to home. That worked! At least put the ldap-users in a group and gave that group writing permissions to home. Finished! -----Ursprüngliche Nachricht----- Von: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] Im Auftrag von Andreas Cieslak Gesendet: Donnerstag, 22. September 2011 15:41 An: dovecot(a)dovecot.org Betreff: [Dovecot] Create userdir on dovecot login Hi List, I am trying to set up automated userdir-creation on login via squirrelmail or email-client with a dovecot backend. The users are first imported on an openldap directory on the same server as the dovecot runs on. Authentication on the dovecot mail system via pam_ldap works properly. Tried already to integrate some advices from the dovecot wiki like Passdb { Driver = pam args = session=yes dovecot } But the homedir creation works only when the user logs onto the machine. When I try to log in via Squirrel on the dovecot no homedir is created and there is following message in the logs: auth: Error: pam(cieslak,193.175.157.121): pam_open_session() failed: Permission denied I think its something about the user rights, but dont really know where to search for the needle Here is the config of my environment root@server:/home# dovecot -n # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.2 auth_debug = yes auth_mechanisms = login plain auth_verbose = yes first_valid_uid = 1000 hostname = server info_log_path = /var/log/dovecot-info last_valid_uid = 10000 listen = * log_path = /var/log/dovecot mail_access_groups = mail mail_debug = yes mail_full_filesystem_access = yes mail_location = maildir:~/Maildir mbox_write_locks = fcntl passdb { args = session=yes dovecot driver = pam } postmaster_address = mailaddress service auth-worker { group = shadow user = $default_internal_user } service auth { user = $default_internal_user } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 0 vsz_limit = 256 M } service lmtp { unix_listener lmtp { mode = 0666 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl_ca = </usr/local/etc/dovecot/ca ssl_cert = </usr/local/etc/dovecot/crt ssl_key = </usr/local/etc/dovecot/key userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } dovecot --version 2.0.13 The configuration of the pam module /etc/pam.d/dovecot looks like @include common-auth @include common-account @include common-session The common session has the line session required pam_mkhomedir.so skel=/etc/skel umask=0077 I would appreciate any hints. Andreas

1 0

[Dovecot] deliver agent and index/control files
by Nerijus Kislauskas 27 Sep '11

27 Sep '11

Hi Timo and others, We use Dovecot in Kaunas University of Technology in Lithuania. For now our LDA is Postfix and POP/IMAP server is Dovecot. We would like to implement dovecot deliver as LDA. Everything is ok exept one small thing: deliver is creating dovecot.index.log in wrong place In dovecot config files we have: ... mail_location = maildir:/var/mail/%Ln:INDEX=/var/indexes/%Ln:CONTROL=/var/indexes/%Ln ... As you can see, mail and index/control files are in different partitions. and deliver log: deliver(nerijus.kislauskas(a)ktu.lt): maildir: data=/var/mail/nerkisl deliver(nerijus.kislauskas(a)ktu.lt): maildir++: root=/var/mail/nerkisl, index=, control=, inbox=/var/mail/nerkisl That is why dovecot.index.log is created in /var/mail/nerkisl, and not in /var/indexes/nerkisl. How can we fix this? -- Sincerely, Nerijus Kislauskas KTU ITPI, LitNET NOC Studentu g. 48a - 101, Kaunas tel.: (8~37) 30 06 45 mob. tel.: 8-614-93889 e-mail.: nerijus.kislauskas(a)ktu.lt

1 1