- dovecot - dovecot.org

[Dovecot] Work with auth socket
by Неворотин Вадим 30 Jun '10

30 Jun '10

---------- Forwarded message ---------- From: Неворотин Вадим <nevorotin(a)gmail.com> Date: 2010/6/29 Subject: Re: [Dovecot] Work with auth socket To: Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> Hmm, I have some problems with realization of authentication throw dovecot socket. I've wrote such script: #!/usr/bin/perl $login = "test"; $passwd = "test"; #utf8::encode($login); # I don't know are we really need it #utf8::encode($passwd); my $service = "ejabberd"; my $timeout = 1; my $socket = '/var/spool/postfix/private/auth-client'; my $sock = new IO::Socket::UNIX(Type => SOCK_STREAM, Peer => $socket) or die "Can't open socket."; my $sel = new IO::Select($sock); while (1) { $sel->can_read($timeout) or last; defined recv($sock, my $buf, 256, 0) or warn 'Error while reading response'; print $buf; } send($sock,"VERSION\t1\t0\nCPID\t$$\n",0) or die "Can't write to $socket"; my $base64 = encode_base64("\0$login\0$passwd"); $sock->send("AUTH\t1\tPLAIN\tservice=$service\tsecured\tresp=$base64\n") or die "Can't write to $socket"; my $i = 10; while ($i--) { $sel->can_read($timeout) or last; # "Timed out while waiting for response"; defined recv($sock, my $buf, 256, 0) or warn 'Error while reading response'; print $buf; } And has such log: # ./test.pl MECH PLAIN plaintext MECH LOGIN plaintext VERSION 1 0 SPID 26023 CUID 1818 DONE So dovecot doesn't answer anything after AUTH command. May be http://wiki.dovecot.org/Authentication%20Protocol is not fully describe auth protocol? 2010/6/24 Неворотин Вадим <nevorotin(a)gmail.com> Thank you! > > > 2010/6/24 Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> > > -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> On Thu, 24 Jun 2010, Неворотин Вадим wrote: >> >> >> I need to use Dovecot auth socket from my perl script to validate user's >>> passwords (for jabber server). Is there any information about how to >>> communicate with dovecot auth socket? >>> >>> >> >> http://search.cpan.org/~sasha/Authen-SASL-Authd-0.04/lib/Authen/SASL/Authd.… >> >> "NAME >> >> Authen::SASL::Authd - Client authentication via Cyrus saslauthd or Dovecot >> authentication daemon." >> >> http://wiki.dovecot.org/Authentication+Protocol >> >> Regards, >> >> - -- Steffen Kaiser >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v1.4.6 (GNU/Linux) >> >> iQEVAwUBTCNOy7+Vh58GPL/cAQJXEQf/SHlQTrUo/OiNFSLteEuF6kGGY/iYGYZ2 >> CUEKLJQtE92yyGJqt7CYun3Z64llrkzYUGoJDnyPtEFgP2a1uqaEUyusilobuYfB >> E/B7zdRbHOD2+4afdwHocGundcfWB2GxZi+j454rCDWt5haX+cSd5Be561WdpyE0 >> yUc3raXLRz6qeRC/A+vmpbA4sbmm+Fd1fCHtwcQhOVvk+X7fJRLb30HUq1wRjyMi >> LBTv5TxCib+O34MPYpA6xLyrNCkjwAuhdshiw6KihVBx29U9HcoNtUIjfSqL6/gG >> vhKt6RfgahpytJm97LuDwE7GNf6/3oDeHlTJfAS5EfYdSqcnxxyfLw== >> =1C+5 >> -----END PGP SIGNATURE----- >> > >

3 4

[Dovecot] Expunge email Plugin
by Alex Baule 30 Jun '10

30 Jun '10

Hello everyone..... I Need to know when a email is expunge, but i don't need change this action. I Need to call another action + the default action. There is a plugin to do this ?

5 11

[Dovecot] Error that I don't understand
by Andre 29 Jun '10

29 Jun '10

I’ve noticed lines like this in error log: IMAP(username(a)cubeholding.com): Error: read(mail, uid=58284) failed: Is a directory I’ve looked at sources and found this message in src/lib-storage/index/index-mail.c, function static int index_mail_stream_check_failure(struct index_mail *mail) but I don’t understand where it come from, I understand it is something about indexes, anyone can explain me more, please? Dovecot 1.2.12 TIA Andrea

2 3

[Dovecot] Use both SQL and LDAP
by Shayne Jellesma 29 Jun '10

29 Jun '10

Hey guys, I am just wondering if it is possible to use both SQL and LDAP queries at the same time to get information. Example on why I want to do this: I work at a school where we have the need for 2 separate types of mailbox configuration (better wording is eluding me at the moment). Staff and Students currently share the same email server. I would like to be able to give staff a bigger inbox (eg: 500MB) than students (eg: 50MB). The way I am thinking, if this is even possible, to pull username and group membership from Active Directory. Check the groups against a SQL query to give the user the appropriate mailbox size. Also, having email is a privilege, not a right at my school so is it also possible to check if a user is part of a BannedEmailUsers or AllowedEmailUser group so I could quickly and effectively disable accounts as needed. I apologise if this is a little hard to follow. Writing what I want has never been a strongpoint for me J I also apologise if this has been asked, or information is available somewhere. I did search and didn't come up with much. Regards, Shayne Jellesma Network Administrator / ICT Support St Martins Lutheran College

2 1

[Dovecot] system_groups_user=%u seem not to be considered by deliver
by Matthias Rieber 29 Jun '10

29 Jun '10

Hi, while trying to deliver a mail I got the following error: Jun 20 21:57:09 shrike dovecot: lda(matthias): Error: user matthias: Initialization failed: Namespace 'shared.': stat(/home/sharedbox/Maildir) failed: Permission denied (euid=1014(matthias) egid=1022(scheff32) missing +x perm: /home/sharedbox, euid is not dir owner) Jun 20 21:57:09 shrike dovecot: lda(matthias): Fatal: Invalid user settings. Refer to server log for more information. The shared mailbox works without any problems when I access it with imap. Regards, Matthias

2 1

[Dovecot] %d/%n doesn't work... why?
by William Ottley 29 Jun '10

29 Jun '10

Hello all, I've been trying to setup my postfix and dovecot to AUTH with mysql, and I'm almost there! BUT, for some reason, dovecot won't create the folders in their proper location. For some reason, instead of going into /var/vmail/pplsnet.com/{username}location, where the postfix put all the emails, dovecot creates a whole new set of folders in /var/vmail/{username} I have attempted to force dovecot to put into a sub directly, without using the %d, but that doesn't work either: #mail_location = mbox:/var/vmail/%d/%n mail_location = mbox:/var/vmail/pplsnet.com/%n Where do I look to figure out why its not putting it into the %d/%n location? does it have to do with the fact that AUTH graps the username, and NOT the domain name? (via mysql)? I have included dovecot -n and postconf -n.. can anyone take a quick guess and figure out what I should be doing? thanks! *dovecot -n* # 1.0.7: /etc/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot log_timestamp: %Y-%m-%d %H:%M:%S protocols: pop3 pop3s login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/pop3-login first_valid_uid: 150 last_valid_uid: 150 mail_extra_groups: mail mail_access_groups: mail mail_location: mbox:/var/vmail/pplsnet.com/%n maildir_copy_with_hardlinks: yes mail_executable: /usr/libexec/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/pop3 auth default: mechanisms: plain login digest-md5 cram-md5 passdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail *postconf -n: *alias_database = hash:/etc/postfix/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 2 disable_vrfy_command = no html_directory = no inet_interfaces = all mail_owner = postfix mail_spool_directory = /var/spool/mail mailbox_size_limit = 500000 mailq_path = /usr/bin/mailq manpage_directory = /usr/share/man message_size_limit = 10000 mydomain = rnd myhostname = mail.pplsnet.com mynetworks = 174.xx.xx.0/24 myorigin = $myhostname newaliases_path = /usr/bin/newaliases queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.2.10/README_FILES recipient_delimiter = + relayhost = sample_directory = /usr/share/doc/postfix-2.2.10/samples sendmail_path = /usr/sbin/sendmail setgid_group = postdrop smtp_tls_note_starttls_offer = yes smtp_use_tls = yes smtpd_banner = $myhostname smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_tls_CAfile = /etc/postfix/gd_bundle.crt smtpd_tls_cert_file = /etc/postfix/pplsnet.com.crt smtpd_tls_key_file = /etc/postfix/www.pplsnet.com.key smtpd_tls_loglevel = 1 smtpd_tls_received_header = no smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 450 virtual_alias_maps = mysql:$config_directory/mysql_virtual_alias_maps.cf virtual_gid_maps = static:12 virtual_mailbox_base = /var/vmail virtual_mailbox_domains = mysql:$config_directory/ mysql_virtual_domains_maps.cf virtual_mailbox_maps = mysql:$config_directory/mysql_virtual_mailbox_maps.cf virtual_minimum_uid = 150 virtual_uid_maps = static:150 * *

4 4

[Dovecot] help with global ACL
by Piyush Joshi 29 Jun '10

29 Jun '10

Dear All, I am willing to know can i restrict all my users to delete some general folders like Drafts, Sent, SPAM, Trash etc. I am using autocreate plugin to create these folders and using Maildir to store my mails. I also want that they can not unsubscribe the above mentioned folder as well. Dovecot version - 1.2.11 Please send me some link so that i can implement the same if possible. Thanks Piyush Joshi

2 1

[Dovecot] Upgrade Too 1.2.11 Broke Everything
by Marcel Grandemange 29 Jun '10

29 Jun '10

Good Day. I have had dovecot working successfully for years now, however after a system update , dovecot refused to start up complaing that im not using absolute paths. It took a bit of hacking to get it working again as can be seen by the sql query, however now imap doesn't work anymore because of that change. Im lost!! dovecot --version 1.2.11 dovecot -n # 1.2.11: /usr/local/etc/dovecot.conf # OS: FreeBSD 8.1-PRERELEASE amd64 protocols: imap pop3 listen(default): * listen(imap): * listen(pop3): *:110 ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: thavinci Ready verbose_proctitle: yes first_valid_uid: 125 first_valid_gid: 125 mail_access_groups: postfix mail_privileged_group: postfix mail_location: mbox:~:INBOX=/var/mail/%u mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh lda: postmaster_address: postmaster(a)example.com sendmail_path: /usr/sbin/sendmail auth default: passdb: driver: sql args: /usr/local/etc/dovecot-mysql.conf passdb: driver: sql args: /usr/local/etc/dovecot-mysql.conf userdb: driver: sql args: /usr/local/etc/dovecot-mysql.conf userdb: driver: sql args: /usr/local/etc/dovecot-mysql.conf In regards to this file the following was changed to make it work... mail_location = mbox:~:INBOX=/var/mail/%u Used to be: mail_location = mbox:~/mail/:INBOX=/var/mail/%u grep -v '^ *$#.*$\?$' dovecot-mysql.conf driver = mysql default_pass_scheme = CRYPT connect = host=xx.xx.xx.xx dbname=nameofdb user=dbuser password=dbpassword password_query = SELECT password FROM mailbox WHERE username = '%u' AND active = '1' user_query = SELECT maildir, concat('/var/mail/',maildir) AS home, 125 AS uid, 125 AS gid FROM mailbox WHERE username = '%u' AND active = '1' This query used to be: user_query = SELECT maildir, maildir AS home, 125 AS uid, 125 AS gid FROM mailbox WHERE username = '%u' AND active = '1' A snapshot of the maillog during failure Jun 29 11:50:15 thavinci postfix/qmgr[1469]: BA3DD9B4C9: removed Jun 29 11:50:49 thavinci dovecot: imap-login: Login: user=<me(a)thavinci.za.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jun 29 11:50:49 thavinci dovecot: IMAP(me(a)thavinci.za.net): Connection closed bytes=53/372 Jun 29 11:52:05 thavinci dovecot: imap-login: Login: user=<me(a)thavinci.za.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jun 29 11:52:05 thavinci dovecot: IMAP(me(a)thavinci.za.net): Connection closed bytes=53/372 Jun 29 11:52:05 thavinci dovecot: imap-login: Login: user=<me(a)thavinci.za.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jun 29 11:52:05 thavinci dovecot: IMAP(me(a)thavinci.za.net): stat(/var/mail/me(a)thavinci.za.net/.imap/INBOX) failed: Not a directory Jun 29 11:52:05 thavinci last message repeated 2 times Jun 29 11:52:05 thavinci dovecot: IMAP(me(a)thavinci.za.net): open() failed with subscription file /var/mail/me(a)thavinci.za.net/.subscriptions: Not a directory Jun 29 11:52:05 thavinci dovecot: IMAP(me(a)thavinci.za.net): Connection closed bytes=306/4046 As can be seen somehow it's trying to write to the mbox file and I have no idea why! And this is the db structure! SET FOREIGN_KEY_CHECKS=0; -- ---------------------------- -- Table structure for `mailbox_copy` -- ---------------------------- DROP TABLE IF EXISTS `mailbox_copy`; CREATE TABLE `mailbox_copy` ( `username` varchar(255) NOT NULL DEFAULT '', `password` varchar(255) NOT NULL DEFAULT '', `name` varchar(255) NOT NULL DEFAULT '', `maildir` varchar(255) NOT NULL DEFAULT '', `quota` int(10) NOT NULL DEFAULT '0', `domain` varchar(255) NOT NULL DEFAULT '', `created` datetime NOT NULL DEFAULT '0000-00-00 00:00:00', `modified` datetime NOT NULL DEFAULT '0000-00-00 00:00:00', `active` tinyint(1) NOT NULL DEFAULT '1', PRIMARY KEY (`username`), KEY `username` (`username`) ) ENGINE=MyISAM DEFAULT CHARSET=latin1 COMMENT='Postfix Admin - Virtual Mailboxes'; -- ---------------------------- -- Records of mailbox_copy -- ----------------------------

2 1

[Dovecot] Compile error sieve plugin for dovecot2
by Christian Kivalo 29 Jun '10

29 Jun '10

Hello, I'm trying to compile the sieve plugin for dovecot2 Dovecot2-beta6 is allready running and working. i did a hg clone http://hg.renamie-it.nl/dovecot-2.0-pigeonhole and ran the autogen.sh script as mentioned in the INSTALL file configure options: /configure --prefix=/usr --localstatedir=/var --sysconfdir=/etc --with-dovecot=/usr/lib/dovecot/ --with-managesieve=no compiling gives an error after a while: /bin/bash ../../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I../.. -I/usr/include/dovecot -DMODULEDIR=\""/usr/lib/dovecot"\" -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wstrict-aliasing=2 -MT sieve-actions.lo -MD -MP -MF .deps/sieve-actions.Tpo -c -o sieve-actions.lo sieve-actions.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I/usr/include/dovecot -DMODULEDIR=\"/usr/lib/dovecot\" -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wstrict-aliasing=2 -MT sieve-actions.lo -MD -MP -MF deps/sieve-actions.Tpo -c sieve-actions.c -fPIC -DPIC -o .libs/sieve-actions.o sieve-actions.c: In function 'act_store_mailbox_open': sieve-actions.c:338: error: storage size of 'save_ctx' isn't known sieve-actions.c:355: warning: implicit declaration of function 'mail_deliver_save_open' sieve-actions.c:338: warning: unused variable 'save_ctx' make[4]: *** [sieve-actions.lo] Fehler 1 make[4]: Leaving directory `/usr/src/dovecot/dovecot-2.0-pigeonhole/src/lib-sieve' make[3]: *** [all-recursive] Fehler 1 make[3]: Leaving directory `/usr/src/dovecot/dovecot-2.0-pigeonhole/src/lib-sieve' make[2]: *** [all-recursive] Fehler 1 make[2]: Leaving directory `/usr/src/dovecot/dovecot-2.0-pigeonhole/src' make[1]: *** [all-recursive] Fehler 1 make[1]: Leaving directory `/usr/src/dovecot/dovecot-2.0-pigeonhole' make: *** [all] Fehler 2 am i missing something? further information can be provided. dovecot2 was configured with prefix/sysconfdir/localstatedir as above it doesnt make any differences if i change --with-dovecot to the local sources directory thanks in advance Christian Kivalo

2 3

[Dovecot] Dovecot-2.0 conf misc questions
by Thomas Hummel 29 Jun '10

29 Jun '10

Hello, I'm setting up a dovecot-2.0.beta6 install and I'm experiencing the following issues/questions : 1. Converting the config file # /usr/local/dovecot-2/bin/doveconf -n -c /usr/local/dovecot-1.2.12/etc/dovecot.conf : [...] doveconf: Fatal: Error in configuration file /usr/local/dovecot-1.2.12/etc/dovecot.conf line 176: Unknown setting: process_limit but # grep -i process_limit /usr/local/dovecot-1.2.12/etc/dovecot.conf # Well, it doesn't bother me much since I made the dovecot-2 conf from scratch anyway. 2. Changing the process limit In 10-master.conf, I changed 'service imap''s 'process_limit' from 1024 to 4096 which caused : Warning: service auth { client_limit=4096 } is lower than required under max. load (5320) Where does the 5320 come from ? 3. The = <file syntax Is there anything to know about this new syntax other than files are introduced by "<" ? 4. The "filter" hierarchy My understanding is that protocol, remote, local must be specified in the following order protocol name { remote <ip|name> { local <ip|name> { and that for a match in several blocks, the more specific wins. but it's not clear to me where they are valid and if we can negate (with a ! for instance) an argument. For instance, I want to implement the typical case of "let clients from the inside network perform a plain auth over a clear connection, require SSL before auth for the outside network clients". For that, I want to put remote <internal network address> { disable_plaintext_auth = no } in 10-auth.conf and let the 'disable_plaintext_auth = yes' in dovecot.conf But : . why is this default not in 10-auth.conf file ? . would I have been allowed to do, for instance, in that file at the same line protocol imap { remote <internal network address> { disable_plaintext_auth = no } ? . would I have been allowed to do, for instance, in that file at the same line protocol ! imap ... or remote ! <some address> ? Besides, if I set ssl=required, do I still need disable_plaintext_auth = yes ? 4. auth unix listner Default is the unix socket 'auth-userdb'. Which processes communicate through this one ? Does that mean the the auth process is not the process which performs the actual passdb/userdb lookup ? In that case what is the 'userdb process' ? Same question : what is the auth-client socket used for ? Finally, would it make sense to declare other auth listeners than the two listed by default in the 10-master.conf file ? -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 4