- dovecot - dovecot.org

[Dovecot] auth child abort - "Requested NTLM scheme, but we have only SSHA256"
by LEVAI Daniel 01 Nov '10

01 Nov '10

Hi! I noticed these messages in my logs. It seems that the user checked the "encrypted password" in her outlook or something, and wants NTLM auth. I'm storing all the passwords as SSHA256, and when the user tries to auth, this happens: => dovecot.info auth: Info: password(<username>,<user_ip>): Requested NTLM scheme, but we have only SSHA256 auth: Debug: sql(<username>,<user_ip>): query: SELECT username AS user, password, home AS userdb_home, uid AS userdb_uid, gid AS userdb_gid, userdb_import AS userdb_userdb_import FROM userdb WHERE auth_username = '<username>' AND login = 'enabled' => dovecot.log auth: Error: sql(<username>,<user_ip>): Multiple password values not supported auth: Panic: file passdb-sql.c: line 113 (sql_query_callback): assertion failed: (password == NULL || scheme != NULL) master: Error: service(auth): child 10679 killed with signal 6 (core not dumped - set service auth { drop_priv_before_exec=yes }) Is this an error condition if I store the password in a different scheme than what user is requesting? Thanks, Daniel -- LÉVAI Dániel PGP key ID = 0x83B63A8F Key fingerprint = DBEC C66B A47A DFA2 792D 650C C69B BE4C 83B6 3A8F

2 1

[Dovecot] Testing pop3/imap4 and mdbox corrupted indexes?
by Odhiambo Washington 01 Nov '10

01 Nov '10

I have two questions: 1. What method/tool (other than a MuA) can I use to test my Dovecot setup from Windows CLI when ssl is enabled? I have tried connecting to to the pop3/imap4 services from a Windows PC but here is what I get: [pop3] +OK Dovecot-2.0-sis ready. user wash(a)domain.co.ke -ERR Plaintext authentication disallowed on non-secure (SSL/TLS) connections. [imap4] OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS LOGINDISABLED AUTH=DIGEST-MD5] Dovecot-2.0-sis ready. login wash(a)domain.co.ke S3ecreat BAD [ALERT] Plaintext authentication not allowed without SSL/TLS, but your client did it anyway. If anyone was listening, the password was exposed. NO [PRIVACYREQUIRED] Plaintext authentication disallowed on non-secure (SSL/TLS) connections. 2. When mdbox indexes are corrupted, are they automatically repaired/rebuilt or must I specify this in the configuration? How long does it take? Nov 01 12:08:04 pop3(wash(a)domain.co.ke): Error: Corrupted dbox file /var/spool/virtual/domain.co.ke/wash/mdbox/storage/m.1 (around offset=1941): Ex t refs metadata corrupted: 3861 783856 75/80/75805ed445f1b8b31508dba8d86280a37a74aec1-fabfb11f9f80654ced090000dcbe1dcb Nov 01 12:08:04 pop3(wash(a)domain.co.ke): Error: Corrupted dbox file /var/spool/virtual/domain.co.ke/wash/mdbox/storage/m.1 (around offset=1941): ui d=5 points to broken data at offset=1911 Nov 01 12:08:04 pop3(wash(a)domain.co.ke): Warning: mdbox /var/spool/virtual/ domain.co.ke/wash/mdbox/storage: rebuilding indexes When I connect using outlook, I see this on Outlook: Task 'wash(a)domain.co.ke - Receiving' reported error (0x800CCC90) : 'Your incoming (POP3) e-mail server has reported an internal error. If you continue to receive this message, contact your server administrator or Internet service provider (ISP). The server responded: -ERR Message 5 expunged.' This rebuild process seems to be taking too long:) -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!

1 0

[Dovecot] Testing simscan
by postmaster＠cyborspace.com 30 Oct '10

30 Oct '10

I am pulling my hair out, i think I know what is wrong - i just cant find out how to fix it. Using Debian - lenny it appears that the auth process - is not looking for / seeing the proper file or database for the lookup. i would like it to point to the cdb file stored ~/domains/%d/ <---- assuming the %d = domains - and the file would then be vpasswd.cdb...... Let me know if i need to post anything else to help. 2010-10-30 15:35:58.147617500 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth 2010-10-30 15:35:58.147852500 auth: Debug: auth client connected (pid=27491) 2010-10-30 15:35:58.149434500 imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [70.62.148.223] 2010-10-30 15:35:58.149436500 imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [70.62.148.223] 2010-10-30 15:35:58.149437500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client hello A [70.62.148.223] 2010-10-30 15:35:58.149437500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server hello A [70.62.148.223] 2010-10-30 15:35:58.149438500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write certificate A [70.62.148.223] 2010-10-30 15:35:58.149444500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server done A [70.62.148.223] 2010-10-30 15:35:58.149445500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [70.62.148.223] 2010-10-30 15:35:58.149446500 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [70.62.148.223] 2010-10-30 15:35:58.149446500 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [70.62.148.223] 2010-10-30 15:35:58.177505500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [70.62.148.223] 2010-10-30 15:35:58.177507500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read finished A [70.62.148.223] 2010-10-30 15:35:58.177508500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [70.62.148.223] 2010-10-30 15:35:58.177508500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write finished A [70.62.148.223] 2010-10-30 15:35:58.177509500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [70.62.148.223] 2010-10-30 15:35:58.177532500 imap-login: Warning: SSL: where=0x20, ret=1: SSL negotiation finished successfully [70.62.148.223] 2010-10-30 15:35:58.177533500 imap-login: Warning: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [70.62.148.223] 2010-10-30 15:35:58.287127500 auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=172.16.150.30 rip=70.62.148.223 lport=993 rport=46817 2010-10-30 15:35:58.287210500 auth: Debug: client out: CONT 1 2010-10-30 15:35:58.307138500 auth: Debug: client in: CONT 1 AHJ4YmF1ZXJAcGhhdGFuaGFwcHkuY29tADUxNjIzMQ== 2010-10-30 15:35:58.307139500 auth: Debug: vpopmail(rxbauer(a)phatanhappy.com,70.62.148.223): lookup user=rxbauer domain=phatanhappy.com 2010-10-30 15:35:58.307140500 auth: Info: vpopmail(rxbauer(a)phatanhappy.com,70.62.148.223): unknown user 2010-10-30 15:36:00.308541500 auth: Debug: client out: FAIL 1 user=rxbauer(a)phatanhappy.com 2010-10-30 15:36:00.379057500 auth: Debug: client in: AUTH 2 PLAIN service=imap secured lip=172.16.150.30 rip=70.62.148.223 lport=993 rport=46817 resp=AHJ4YmF1ZXJAcGhhdGFuaGFwcHkuY29tADUxNjIzMQ== 2010-10-30 15:36:04.380615500 auth: Debug: vpopmail(rxbauer(a)phatanhappy.com,70.62.148.223): lookup user=rxbauer domain=phatanhappy.com 2010-10-30 15:36:04.380707500 auth: Info: vpopmail(rxbauer(a)phatanhappy.com,70.62.148.223): unknown user 2010-10-30 15:36:06.380535500 auth: Debug: client out: FAIL 2 user=rxbauer(a)phatanhappy.com dovecot --version 2.0.6 dovecot -n # 2.0.6: /usr/local/etc/dovecot/dovecot.conf doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/conf.d/10-mail.conf:350: namespace private {} has been replaced by namespace { type=private } # OS: Linux 2.6.26-2-686 i686 Debian 5.0.6 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /dev/stderr default_client_limit = 2000 default_process_limit = 200 default_vsz_limit = 512 M first_valid_uid = 100 hostname = mail.cyborspace.com info_log_path = /dev/stderr log_path = /dev/stderr log_timestamp = mail_location = maildir:~/Maildir namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { driver = vpopmail } postmaster_address = postmaster(a)cyborspace.com service imap-login { inet_listener imap { address = 127.0.0.1 port = 143 } inet_listener imaps { address = 172.16.150.30 port = 993 ssl = yes } } service lmtp { unix_listener lmtp { mode = 0666 } } service pop3-login { inet_listener pop3 { address = 127.0.0.1 port = 110 } inet_listener pop3s { address = 172.16.150.30 port = 995 ssl = yes } } ssl_cert = </var/qmail/control/servercert.pem ssl_key = </var/qmail/control/servercert.pem userdb { driver = vpopmail } verbose_proctitle = yes verbose_ssl = yes A A A A A

1 0

[Dovecot] Testing simscan
by postmaster＠cyborspace.com 30 Oct '10

30 Oct '10

I am pulling my hair out, i think I know what is wrong - i just cant find out how to fix it. Using Debian - lenny it appears that the auth process - is not looking for / seeing the proper file or database for the lookup. i would like it to point to the cdb file stored ~/domains/%d/ <---- assuming the %d = domains - and the file would then be vpasswd.cdb...... Let me know if i need to post anything else to help. 2010-10-30 15:35:58.147617500 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth 2010-10-30 15:35:58.147852500 auth: Debug: auth client connected (pid=27491) 2010-10-30 15:35:58.149434500 imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [70.62.148.223] 2010-10-30 15:35:58.149436500 imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [70.62.148.223] 2010-10-30 15:35:58.149437500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client hello A [70.62.148.223] 2010-10-30 15:35:58.149437500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server hello A [70.62.148.223] 2010-10-30 15:35:58.149438500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write certificate A [70.62.148.223] 2010-10-30 15:35:58.149444500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server done A [70.62.148.223] 2010-10-30 15:35:58.149445500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [70.62.148.223] 2010-10-30 15:35:58.149446500 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [70.62.148.223] 2010-10-30 15:35:58.149446500 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [70.62.148.223] 2010-10-30 15:35:58.177505500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [70.62.148.223] 2010-10-30 15:35:58.177507500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read finished A [70.62.148.223] 2010-10-30 15:35:58.177508500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [70.62.148.223] 2010-10-30 15:35:58.177508500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write finished A [70.62.148.223] 2010-10-30 15:35:58.177509500 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [70.62.148.223] 2010-10-30 15:35:58.177532500 imap-login: Warning: SSL: where=0x20, ret=1: SSL negotiation finished successfully [70.62.148.223] 2010-10-30 15:35:58.177533500 imap-login: Warning: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [70.62.148.223] 2010-10-30 15:35:58.287127500 auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=172.16.150.30 rip=70.62.148.223 lport=993 rport=46817 2010-10-30 15:35:58.287210500 auth: Debug: client out: CONT 1 2010-10-30 15:35:58.307138500 auth: Debug: client in: CONT 1 AHJ4YmF1ZXJAcGhhdGFuaGFwcHkuY29tADUxNjIzMQ== 2010-10-30 15:35:58.307139500 auth: Debug: vpopmail(rxbauer(a)phatanhappy.com,70.62.148.223): lookup user=rxbauer domain=phatanhappy.com 2010-10-30 15:35:58.307140500 auth: Info: vpopmail(rxbauer(a)phatanhappy.com,70.62.148.223): unknown user 2010-10-30 15:36:00.308541500 auth: Debug: client out: FAIL 1 user=rxbauer(a)phatanhappy.com 2010-10-30 15:36:00.379057500 auth: Debug: client in: AUTH 2 PLAIN service=imap secured lip=172.16.150.30 rip=70.62.148.223 lport=993 rport=46817 resp=AHJ4YmF1ZXJAcGhhdGFuaGFwcHkuY29tADUxNjIzMQ== 2010-10-30 15:36:04.380615500 auth: Debug: vpopmail(rxbauer(a)phatanhappy.com,70.62.148.223): lookup user=rxbauer domain=phatanhappy.com 2010-10-30 15:36:04.380707500 auth: Info: vpopmail(rxbauer(a)phatanhappy.com,70.62.148.223): unknown user 2010-10-30 15:36:06.380535500 auth: Debug: client out: FAIL 2 user=rxbauer(a)phatanhappy.com dovecot --version 2.0.6 dovecot -n # 2.0.6: /usr/local/etc/dovecot/dovecot.conf doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/conf.d/10-mail.conf:350: namespace private {} has been replaced by namespace { type=private } # OS: Linux 2.6.26-2-686 i686 Debian 5.0.6 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /dev/stderr default_client_limit = 2000 default_process_limit = 200 default_vsz_limit = 512 M first_valid_uid = 100 hostname = mail.cyborspace.com info_log_path = /dev/stderr log_path = /dev/stderr log_timestamp = mail_location = maildir:~/Maildir namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { driver = vpopmail } postmaster_address = postmaster(a)cyborspace.com service imap-login { inet_listener imap { address = 127.0.0.1 port = 143 } inet_listener imaps { address = 172.16.150.30 port = 993 ssl = yes } } service lmtp { unix_listener lmtp { mode = 0666 } } service pop3-login { inet_listener pop3 { address = 127.0.0.1 port = 110 } inet_listener pop3s { address = 172.16.150.30 port = 995 ssl = yes } } ssl_cert = </var/qmail/control/servercert.pem ssl_key = </var/qmail/control/servercert.pem userdb { driver = vpopmail } verbose_proctitle = yes verbose_ssl = yes A A A A A

1 0

[Dovecot] [OT] dovecot appliance
by Johan Hendriks 29 Oct '10

29 Oct '10

Hello all. I am reading the mailinglist for a long time now, and there was a thread i believe called webgui or something. In this thread there was a company i believe german, that was working on a dovecot appliance with a web based gui to administrate a dovecot mail server. The problem is i did not save the URL of that company. Does anyone know which company make the appliance. Or does anyone knows a good webbased tool for dovecot. The reason is that in a windows environment, with only a few FreeBSD machine's , my collega's get frustrated if they can not use a mouse. They even want a mouse on there smartphone's :D I am doing the administration of the mail server, but when i am not there, it would be nice if they can do things them selves. thanks for your time. regards, Johan Hendriks

7 6

Re: [Dovecot] Cron Mail deliver process dying from postfix sendmail.
by Wietse Venema 29 Oct '10

29 Oct '10

Ravindra Gupta // Viva: > Dear Team, > > I am using postfix to sending the mail,but some time postfix is working > very slow.Please give the advice how to improve profermance of postfix to > send the fast mail. Please DO NOT ask a NEW question by replying to OLD MAIL.

1 0

[Dovecot] Cron Mail deliver process dying from postfix sendmail.
by Jerrale G 29 Oct '10

29 Oct '10

Reporting-MTA: dns; mail.sheltoncomputers.com X-SC-Mail-Server-Queue-ID: B84AF1B60004 X-SC-Mail-Server-Sender: rfc822; system17(a)sheltoncomputers.com Arrival-Date: Fri, 29 Oct 2010 03:37:02 -0400 (EDT) Final-Recipient: rfc822; admin(a)sheltoncomputers.com Original-Recipient: rfc822; root Action: failed Status: 5.3.0 Diagnostic-Code: x-unix; internal software error Part 1.2 Subject: Cron <root@server1> /etc/weeklybackup From: system17(a)sheltoncomputers.com (Cron Daemon) Date: Fri, 29 Oct 2010 03:37:02 -0400 (EDT) To: system17(a)sheltoncomputers.com Return-Path: <system17(a)sheltoncomputers.com> Received: by mail.sheltoncomputers.com (SC Mail Server, from userid 0) id B84AF1B60004; Fri, 29 Oct 2010 04:55:50 -0400 (EDT) Content-Type: text/plain; charset=ISO-8859-1 Auto-Submitted: auto-generated X-Cron-Env: <SHELL=/bin/sh> X-Cron-Env: <HOME=/root> X-Cron-Env: <PATH=/usr/bin:/bin> X-Cron-Env: <LOGNAME=root> X-Cron-Env: <USER=root> Message-ID: <20101029085550.B84AF1B60004(a)mail.sheltoncomputers.com> why would this be happening? the deliver process dies and this didn't start happening until I added "-e", as someone here volunteered a great idea, to the transport of postfix. There is an alias in postfix for this admin address as a catch all box for creating tickets to the right departments for abuse@ postmaster@ and admin@. ALL other mail delivers perfectly but I dont know whats with crontab on this mail server. Thanks Jerrale G. SC Senior Admin

1 0

[Dovecot] Upgrading from 1.2.8 to 2.0.6: INBOX not selectable in Thubderbird (greyed and italic)
by Michele Bergonzoni 29 Oct '10

29 Oct '10

I recently upgraded from 1.2.8 to 2.0.6, I am using Maildir, and Thunderbird is showing the INBOX grayed out and in italics, and does not show new messages in it (it shows messages previously downloaded). This occurs when Thunderbird is restarted (if I upgrade dovecot, TB keeps working fine until I shut it down, and at next startup it greys out the inbox). All the subfolders of INBOX work fine. Accessing with horde+imp webmail works fine. I'm using TB 3.1.6 After some traffic capturing, The first difference I see in the IMAP exchange is the answer to 6 list "" "INBOX" Which for 1.2.8 is: LIST (\HasChildren) "." "INBOX" and for 2.0.6 is: LIST (\Noselect \HasChildren) "." "INBOX" Of course for the same user and same maildir. I enabled tb-extra-mailbox-sep in 2.0, but it doesn't appear to differ (I don't really think it should). Any help will be very much appreciated. My 1.2.8 config for the namespaces is: namespace private { prefix = INBOX. inbox = yes location = maildir:~/Maildir } namespace public { prefix = shared. location = maildir:/usr/local/shared list = yes subscriptions = no } And the config for 2.0.6 is the same with new syntax: namespace { type = private prefix = INBOX. inbox = yes location = maildir:~/Maildir } namespace { type = public prefix = shared. location = maildir:/usr/local/shared list = yes subscriptions = no } Regards, Michele Bergonzoni

3 2

[Dovecot] Can you POP a specific folder in Dovecot?
by Peter Reinhold 29 Oct '10

29 Oct '10

Hi all, I am in the middle of migrating from an old, Windows based mailserver, and have run into a small challenge I hope someone here can help me with. In my old setup, a user could have folders on the server, and by using his login with the mailbox appended, could pop a given folder specifically. For instance, logging in with user(a)example.com would pop INBOX, and logging in with user-folder(a)example.com would pop just that specific folder. Is it possible to do something like this in Dovecot, or is the only possible way of popping folders by using the virtual plugin? Med Venlig Hilsen, Peter Reinhold, peter(a)reinhold.dk / peter(a)geekhouse.dk

5 6

[Dovecot] Released Pigeonhole v0.2.1 for Dovecot v2.0.4
by Stephan Bosch 29 Oct '10

29 Oct '10

Hello Dovecot users, There haven't been that many Pigeonhole developments lately, not even really significant bugs were reported. That is why this release is pretty small in terms of changes. However, one issue got some attention: the fact that not recompiling Pigeonhole for Dovecot v2.0.3 would result in rather interesting message delivery. Normally, Dovecot would complain about a version mismatch, but unfortunately Pigeonhole's Sieve plugin didn't record the Dovecot version it was compiled with. Starting with this release, such problems should not occur again. Changelog v0.2.1: + Incorporated distinction between original and final envelope recipient in Sieve interpreter, as recently introduced in Dovecot. + Regex extension: added support for regex keys composed from variables. - LDA Sieve plugin: added _version symbol to enable Dovecot's plugin version check. Without this check, people can forget to recompile the plugin, which can lead to unexpected effects. - LDA Sieve plugin: turned debug message about an unconfigured home directory into a proper error and added script path information. - Fixed unnecessary reporting of dummy extensions in ManageSieve SIEVE capability; the comparator-i;octet and comparator-i;ascii-numeric 'extensions' were reported explicitly. The release is available as follows: http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.1.tar.gz http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.1.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.0 wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

3 8