- dovecot - dovecot.org

[Dovecot] Master Users
by Ben Watts 13 Jul '10

13 Jul '10

Greetings, My company is currently using dovecot with ldap, I am in the process of migrating this over to Exchange. However, to make the process a lot smoother I need to make use of the master user function of dovecot to enable access to other users mailboxes without needing their password. I've gone through the documentation but it looks like this might not be possible with an ldap backend. The wiki isnt exactly crystal clear on where the master user config needs to go. I've generated a passdb file with an admin user and password. Any information that would go to help would be very welcome. Cheers --

2 1

[Dovecot] Command output: Failed to write to log file
by Nick Lunt 13 Jul '10

13 Jul '10

Hi dovecot -n at end of message. Jul 13 09:41:56 findb postfix/smtpd[15996]: connect from unknown[10.56.85.6] Jul 13 09:41:56 findb postfix/smtpd[15996]: 3B7EF56ABA: client=unknown[10.56.85.6] Jul 13 09:41:56 findb postfix/cleanup[15999]: 3B7EF56ABA: message-id=<26CDBD30F4FE1D4FB6FB5F6D16BCA93E0E5B7777AD(a)RVEB1SRVMSGCCR1.c ymru.nhs.uk> Jul 13 09:41:56 findb postfix/qmgr[15667]: 3B7EF56ABA: from=<>, size=1711, nrcpt=1 (queue active) Jul 13 09:41:56 findb postfix/smtpd[15996]: disconnect from unknown[10.56.85.6] Jul 13 09:41:56 findb postfix/local[16000]: 3B7EF56ABA: to=<enduser(a)thishost.com>, relay=local, delay=0.05, delays=0.03/0.01/0/0.02, dsn=4.3.0, status=deferred (temporary failure. Command output: Failed to write to log file) Our postfix server started logging the above messages so I was thinking I had a postfix issue, but it turned out that recreating the dovecot.log file fixed the issue. Does the /var/log/dovecot.log file require special permissions or can it only grow to a certain size ? [/var/log]# dovecot -n # 1.2.10: /etc/dovecot.conf # OS: Linux 2.6.18-92.el5 x86_64 Red Hat Enterprise Linux Server release 5.2 (Tikanga) log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot.log ssl: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_access_groups: mail mail_privileged_group: mail mail_location: maildir:~/Maildir mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 lda: postmaster_address: root@localhost mail_plugins: sieve auth default: debug: yes passdb: driver: pam userdb: driver: passwd plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/ log_path: /var/log/dovecot.log Many thanks Nick . __________ Information from ESET NOD32 Antivirus, version of virus signature database 5273 (20100712) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

2 2

[Dovecot] Dovecot "deliver" with multiple UIDs (security question)
by Buzai Andras 12 Jul '10

12 Jul '10

Hi all, I have a question related to using the Dovecot LDA (deliver) with a multiple UID setup as described on the http://wiki.dovecot.org/LDA page in the "Multiple UIDs" section. I run Postfix (virtual mailboxes) + Dovecot using multiple UIDs (one UID per virtual domain owner). I configured Postfix to use Dovecot Deliver for the virtual transport. To overcome the problem of multiple UIDs I used the solution described on the http://wiki.dovecot.org/LDA page in the "Multiple UIDs" section. I used the "sudo" solution as described on the page. I only call the deliver with sudo from inside Postfix and the sudoer user is only allowed to sudo on the deliver binary. My question is: Is this solution secure? Can It be used on a production environment? What exactly happens in the background from the time I call "deliver" with sudo, to the time the delivery is finished? The configuration works. The emails get delivered but I am concerned about the security of this setup :(. Thank you, Buzai Andras

3 7

[Dovecot] TLS Issue
by Leander S. 12 Jul '10

12 Jul '10

Hi, I use Postfix & Dovecot with TLS / SSL - it authenticates / works fine - except I'm always getting this ugly SSL cert warning messages mit MTAs. It says that the following: "You have attempted to establish a connection with "server". However, the security certificate presented belongs to "*.server". It is possible, though unlikely, that someone may be trying to intercept your communication with this web site." Is there a serverside solution that I wont get that any more? Why is * as a wildcard not working? Iwonder How gMail or other providers solve that issue Regards

3 2

[Dovecot] deliver and root user
by Bradlee Landis 12 Jul '10

12 Jul '10

On RHEL5, dovecot 1.0.7, I have set up sendmail to use `deliver` for my local mda. It keeps giving me this error for the root user though: Jul 12 12:51:29 mail sendmail[4105]: o699225f001348: to=<root(a)localhost.localdomain>, ctladdr=<root(a)localhost.localdomain> (0/0), delay=3+08:49:26, xdelay=00:00:00, mailer=local, pri=7502879, dsn=4.0.0, stat=Deferred: local mailer (/usr/libexec/dovecot/deliver) exited with EX_TEMPFAIL I've tried to `chmod +s /usr/libexec/dovecot/deliver`, which I read might fix some of those issues, but it didn't. Anyways, here are the important changes I made in my config files for using `deliver`: == sendmail.mc == ... dnl ## Should I modify this?? define(`PROCMAIL_MAILER_PATH', `/usr/bin/procmail')dnl ... dnl ## Should I have "localhost.localdomain" here? It currently is not. LOCAL_DOMAIN(`mydomain.com') ... FEATURE(`local_procmail', `/usr/libexec/dovecot/deliver',`/usr/libexec/dovecot/deliver -d $u') MODIFY_MAILER_FLAGS(`LOCAL', `-f') ... MAILER(smtp) MAILER(procmail) MAILER(local) == END == == dovecot.conf == ... protocol lda { postmaster_address = postmaster(a)mydomain.com hostname = mydomain.com } == END == Any ideas, or do you need more information? -- Thanks, Brad Landis

4 5

[Dovecot] Dovecot + OCFS2
by Thiago Henrique 12 Jul '10

12 Jul '10

Hello, I intend to make a cluster with Dovecot + OCFS2. The tests are working with the default settings of the Dovecot. But it seems too easy to be true. Is there any special configuration of Dovecot to implement it?-- Thank you -- []'s Thiago Henrique Network Administration Digirati Networks K8 Networks

2 1

[Dovecot] Dovecot-lda and Postfix virtual
by D F 12 Jul '10

12 Jul '10

Hello, I'm currently testing Dovecot 2.0RC2 and I have a problem migrating my current configuration. Current configuration is : - Dovecot as IMAP server - Postfix as SMTP/LDA with virtual users. main.cf is : #----------------------------------------------------------- # inet_protocols = all myhostname = mail.domain.tld mydomain = domain.tld myorigin = $mydomain inet_interfaces = all mydestination = localhost local_transport = virtual local_recipient_maps = hash:/etc/postfix/domain.tld virtual_mailbox_base = /home/mail virtual_mailbox_maps = hash:/etc/postfix/domain.tld virtual_mailbox_domains = domain.tld virtual_uid_maps = static:5000 virtual_gid_maps = static:5000 unknown_local_recipient_reject_code = 550 mynetworks = 127.0.0.0/8, [::1]/128 smtpd_banner = $myhostname ESMTP mailbox_size_limit = 0 message_size_limit = 0 virtual_mailbox_limit = 0 smtpd_helo_required = yes # smtpd_sasl_auth_enable = yes smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_helo_hostname, reject_invalid_helo_hostname # debug_peer_level = 1 sendmail_path = /usr/sbin/sendmail newaliases_path = /usr/bin/newaliases mailq_path = /usr/bin/mailq setgid_group = postdrop html_directory = no manpage_directory = /usr/local/man sample_directory = /etc/postfix readme_directory = no queue_directory = /var/spool/postfix command_directory = /usr/sbin daemon_directory = /usr/libexec/postfix mail_owner = postfix alternate_config_directories = /etc/postfix #----------------------------------------------------------- /etc/postfix/domain.tld looks like : #----------------------------------------------------------- # User denis(a)domain.tld /domain.tld/denis/ # Admin root(a)domain.tld /domain.tld/denis/.system/ dnsowner(a)domain.tld /domain.tld/denis/.system/ abuse(a)domain.tld /domain.tld/denis/.system/ postmaster(a)domain.tld /domain.tld/denis/.system/ #----------------------------------------------------------- Currently, I can send mails to denis(a)domain.tld or root(a)domain.tld and they are all accepted and placed in the right IMAP folder/subfolder. Now I'd like to use Dovecot as a LDA (I want to use Sieve). I first add "mailbox_command = /usr/local/libexec/dovecot/dovecot-lda" and "virtual_transport = dovecot" to postfix.conf. Then I add "dovecot unix - n n - - pipe flags=DRhu user=nobody:nobody argv=/usr/local/libexec/dovecot/dovecot-lda -f ${sender} -d ${recipient}" to master.cf Here is my Dovecot config : #----------------------------------------------------------- listen = *, :: protocols = imap base_dir = /var/run/dovecot/ login_greeting = domain.tld IMAP ready. disable_plaintext_auth = no auth_mechanisms = plain auth_failure_delay = 2 secs mail_location = dbox:/home/mail/%d/%n default_login_user = dovenull default_internal_user = dovecot service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service auth { # Postfix smtp-auth unix_listener /var/spool/postfix/private/auth { mode = 0666 user = postfix group = postfix } unix_listener auth-userdb { mode = 0666 user = nobody group = nobody } } passdb { driver = passwd-file args = /usr/local/etc/dovecot/users.db } userdb { driver = passwd-file args = /usr/local/etc/dovecot/users.db } ssl = no #----------------------------------------------------------- /usr/local/etc/dovecot/users.db looks like : #----------------------------------------------------------- denis@domain.tld:password:5000:5000::/home/mail/domain.tld/denis #----------------------------------------------------------- If I send a mail to denis(a)domain.tld it works great, if I send a mail to root(a)domain.tld, it tells the user is non-existent. Is it possible to work the way it used to and benefit from dovecot-lda ? I read http://wiki2.dovecot.org/LDA/Postfix but it seems none of the case looks like mine. Thank you in advance, Denis

2 2

[Dovecot] SSL / TLS Problem
by Leander S. 12 Jul '10

12 Jul '10

Hi, since I upgraded to the new Thunderbird version 3.1 I can't establish a TLS/SSL connection anymore. But before the update Thunerbird was able to establish an encrypted session ... Maillog shows me the following now: server dovecot: imap-login: Disconnected (no auth attempts): rip=84.157.133.248, lip=192.168.1.100, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca Why is the CA unknowen - all of a sudden - ?! Thanks

2 4

[Dovecot] Can only see some folders of inbox
by He Llo 12 Jul '10

12 Jul '10

I've had a working system for ages now with Postfix/Dovecot/Squirrelmail. This evening the right hand pane of Squirrel Mail failed to complete with the Inbox selected but would show some of the other folders. I can also filter and access mail from the 'Invisible' inbox. Other mailboxes on the same server are fine. I've copied my version number below and the output of dovecot -n In the dovecot.log I can see lots of entries like: Warning I/O leak: 0x804d640 (13) or (15) and IMAP login killed with signal 15. I get the same behaviour if I connect with Outlook 2007 configured for IMAP. The mailbox has a lot of mail in it: easily a couple of GB. Very puzzled and would appreciate any help. Many thanks in advance, Mark. ............................................................ Using Postfix with Dovecot V1.0.9 [root@mailer log]# dovecot -n # 1.0.9: /usr/local/etc/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-info.log ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login login_max_processes_count: 64 mail_location: maildir:/home/vmail/%d/%n/Maildir dotlock_use_excl: yes maildir_copy_with_hardlinks: yes auth default: verbose: yes passdb: driver: passwd-file args: /etc/dovecot/passwd userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u _________________________________________________________________ http://clk.atdmt.com/UKM/go/197222280/direct/01/ Do you have a story that started on Hotmail? Tell us now

2 2

[Dovecot] dsync crash
by Matthias Rieber 12 Jul '10

12 Jul '10

Hi, while syncing dsync crashed: dsync-local(matthias): Panic: dsync brain state=10 dsync-local(matthias): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0 [0xf7eed541] -> /usr/local/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x4e) [0xf7eed66e] -> /usr/local/lib/dovecot/libdovecot.so.0(i_error+0) [0xf7eed878] -> dsync [0x804e106] -> dsync [0x80539b7] -> dsync [0x8053c72] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xf5) [0xf7ef9bc5] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x30) [0xf7ef8c10] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x2a) [0xf7ee629a] -> dsync(main+0x7aa) [0x804da3a] -> /lib/libc.so.6(__libc_start_main+0xe5) [0xf7d7a455] -> dsync [0x804d0c1] I don't have a full backtrace. When I repeated the sync it seemed to work. Regards, Matthias

2 5