- dovecot - dovecot.org

[Dovecot] Thunderbird very slow startup, 1.2.11, mbox, postfix local delivery to /var/mail
by Stan Hoeppner 22 May '10

22 May '10

I've Google'd to exhaustion and can't seem to find an answer to my problem. I'm not sure if the problem is TBird 3 or my Dovecot setup. The basic problem is that when I launch TBird and it grabs messages upon startup, it takes forever to supposedly pull them down. Once it's got them they sort relatively quickly into the proper IMAP (dovecot) folders. I don't use sieve yet; I sort with TBird rules. I don't sync messages for offline use. The only thing TB stores locally is the index cache, which I deleted and had TB rebuild once, which didn't help. All that did was waste more time, as I've got 40,000 messages in my IMAP folders which had to be re-indexed by TB. (I save all list mail for future searching). As an example of this problem, I'd not checked my email for just over day, had ~300 messages waiting in /var/mail/stan. TBird starts pulling them from dovecot and says in the status bar "downloading x of ~300". As I watch the count tick up +10 at a whack, the TB process is pegged at 100%, there is zero network activity, and the imap process on the server shows zero cpu use. It took over 60 seconds to "pull" the messages, after which TB sorted them. During the apparent sorting process, there is quite a bit of network activity and the imap process on the server is relatively busy. I say "pull" in quotes because the entire time TB is saying it's pulling more messages there is no network activity. The client and server are plugged into the same 100BaseT FDX switch (FDX verified), and the server has zero load. I know TBird isn't the greatest IMAP client around, but I think taking over 60 seconds just to download ~300 messages is way too damn long given the hardware resources, network, and load on the client and server machines. TB basically seems to be pulling, or dovecot serving, only about 5 messages/sec over 100Mb ethernet, which is abysmal performance given neither the server nor client have any load. The messages are mostly list mail which are at max a few kilobytes each. I'm leaning toward a problem with TBird but I've been unable to find a bug report that covers this, nor a forum post anywhere, etc. The closest I've found for "slow startup" are recommendations to compact folders. I have no local folders to compact. I delete immediately and expunge on exit. Anyone have any ideas? Other than switching to LDA+sieve and have TB check the IMAP folders for new mail? -- Stan

7 24

Re: [Dovecot] dovecot from debian lenny-backports does not accept connections
by Stan Hoeppner 22 May '10

22 May '10

Joelly Alexander put forth on 5/15/2010 4:22 AM: > the server and the client are on the same layer2 network and there is no > hard- or software or anything else installed on the server what prevents > traffic between them; > i just figured out that it has to do with the nfs portion; > while incoming mails have no problems and are delivered correct into the > maildir on the nfs, it does not work when the client want to connect to > the maildir; > when i copy content from nfs-storage to the local harddisk it works; Read these below, and post back if that doesn't help. Please remember to reply to the list next time, not to individuals. I'm not an NFS guru, and those who are didn't see your reply. http://wiki.dovecot.org/MailLocation/SharedDisk http://wiki.dovecot.org/NFS -- Stan > storage are two debian lenny systems with rhcs, nfs-export configured: > <nfsexport name="nfs-storage"/> > <nfsclient name="nfs_fcamx1" allow_recover="1" > path="/storage/fca-mailstore" target="fcamx1" > options="rw,no_root_squash,no_all_squash"/> > <nfsclient name="nfs_fcamx2" allow_recover="1" > path="/storage/fca-mailstore" target="fcamx2" > options="rw,no_root_squash,no_all_squash"/> > > mountpoint on fcamx-servers: > 192.168.100.20:/storage/fca-mailstore on /var/vmail type nfs > (rw,rsize=8192,wsize=8192,timeo=14,intr,tcp,addr=192.168.100.20) > > dovecot is configured with this parameters: > fcamx1:/etc/dovecot# dovecot -n > # 1.2.11: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-bpo.4-686 i686 Debian 5.0.4 nfs > log_path: /var/log/dovecot/dovecot-errors.log > info_log_path: /var/log/dovecot/dovecot-info.log > log_timestamp: %Y-%m-%d %H:%M:%S > protocols: imap imaps pop3 pop3s > ssl_cert_file: /etc/ssl/certs/dovecot-cert.pem > ssl_key_file: /etc/ssl/private/dovecot-key.pem > verbose_ssl: yes > login_dir: /var/run/dovecot/login > login_executable(default): /usr/lib/dovecot/imap-login > login_executable(imap): /usr/lib/dovecot/imap-login > login_executable(pop3): /usr/lib/dovecot/pop3-login > login_greeting: hey dude, do you have an account? > verbose_proctitle: yes > first_valid_uid: 150 > last_valid_uid: 150 > mail_privileged_group: mail > mail_location: maildir:/var/vmail/%d/%u > mail_debug: yes > mmap_disable: yes > mail_nfs_storage: yes > mail_nfs_index: yes > lock_method: fnctl > mbox_write_locks: fcntl dotlock > mail_executable(default): /usr/lib/dovecot/imap > mail_executable(imap): /usr/lib/dovecot/imap > mail_executable(pop3): /usr/lib/dovecot/pop3 > mail_plugins(default): quota imap_quota > mail_plugins(imap): quota imap_quota > mail_plugins(pop3): quota > mail_plugin_dir(default): /usr/lib/dovecot/modules/imap > mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap > mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 > imap_client_workarounds(default): outlook-idle delay-newmail > imap_client_workarounds(imap): outlook-idle delay-newmail > imap_client_workarounds(pop3): > pop3_client_workarounds(default): > pop3_client_workarounds(imap): > pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh > lda: > postmaster_address: postmaster(a)mydomain.tld > mail_plugins: sieve quota > global_script_path: /var/vmail/globalsieverc > log_path: /var/log/dovecot/dovecot-deliver.log > info_log_path: /var/log/dovecot/dovecot-deliver-info.log > auth default: > mechanisms: plain login > user: nobody > verbose: yes > debug: yes > debug_passwords: yes > passdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > userdb: > driver: prefetch > userdb: > driver: passwd > userdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > socket: > type: listen > client: > path: /var/spool/postfix/private/auth > mode: 432 > user: postfix > group: mail > master: > path: /var/run/dovecot/auth-master > mode: 432 > user: vmail > group: mail > plugin: > quota: maildir:storage=102400 > sieve: ~/.dovecot.sieve > sieve_dir: ~/sieve > fcamx1:/etc/dovecot#

4 9

[Dovecot] quota and postfix virtual users
by gbotero＠emailforall.no-ip.org 22 May '10

22 May '10

hi everyone i have a mailserver working with postfix 2.5.1 vda and virtual user with mysql and dovecot, everything is working fine but i want to offer quota and i have a problem with that because the quota in roundcube appear but calculate is wrong i need to delete the maildirsize file to force to recalculate, what can i do??? in my dovecot i have imap{ quota imap_quota, in plugins section i have quota=maildir and trough the file dovecot-sql.conf i have the select expression concat(...... as quota_rule, thanks a lot, PD. sorry for my english im from south of colombia - south america

2 1

[Dovecot] sshfs and outlok express imap directory problem.
by ringo tr 22 May '10

22 May '10

I mounted vpopmail/domains in sshfs. root@192.168.239.205:/mnt/disk-b/domains on /mnt/domains type fuse.sshfs (rw,nos uid,nodev,max_read=65536,allow_other) I used qmail+dovecot+vpopmail+mysql dovecot-2.0.beta4. I mounted sshfs with vpopmail/domains directory. my /usr/local/etc/dovecot/conf.d/mail.conf file mmap_disable = yes dotlock_use_excl = yes mail_nfs_storage = yes mail_nfs_index = yes lock_method = fcntl first_valid_uid = 89 first_valid_gid = 89 ----- Outlook Express with sending mail and receving mail success but mail drop imap folder change problem. cbumail1:~# ls -al /home/vpopmail/domains/yvz.cbu.edu.tr/yavuz/Maildir/ total 72 drwx------ 1 vpopmail vchkpw 4096 2010-05-08 01:00 . drwx------ 1 vpopmail vchkpw 4096 2010-04-27 21:22 .. drwx------ 1 vpopmail vchkpw 4096 2010-05-08 01:00 cur -rw------- 1 vpopmail vchkpw 18432 2010-05-08 01:00 dovecot.index.cache -rw------- 1 vpopmail vchkpw 968 2010-05-08 01:00 dovecot.index.log -rw------- 1 vpopmail vchkpw 96 2010-05-07 18:20 dovecot.mailbox.log -rw------- 1 vpopmail vchkpw 328 2010-05-08 01:00 dovecot-uidlist -rw------- 1 vpopmail vchkpw 8 2010-05-07 22:44 dovecot-uidvalidity -r--r--r-- 1 vpopmail vchkpw 0 2010-05-07 18:20 dovecot-uidvalidity.4be42fa9 drwx------ 1 vpopmail vchkpw 4096 2010-05-08 01:09 .G&APY-nderilmi&AV8- &ANYBHw-eler drwx------ 1 vpopmail vchkpw 4096 2010-05-08 01:00 new -rw------- 1 vpopmail vchkpw 54 2010-05-07 18:20 subscriptions drwx------ 1 vpopmail vchkpw 4096 2010-05-07 22:44 .Taslaklar drwxrwxrwx 1 vpopmail vchkpw 4096 2010-05-08 01:00 tmp drwx------ 1 vpopmail vchkpw 4096 2010-05-07 22:44 .zako Outlook Express mail mouse moving drag/drop process and fault message : SERVERBUG] Internal error occurred. Refer to server log for more information. [2010-05-08 01:25:57] and /var/log/mail.err output. May 8 01:25:57 cbumail1 dovecot: imap(yavuz(a)yvz.cbu.edu.tr): link(/home/vpopmail/domains/yvz.cbu.edu.tr/yavuz/Maildir/cur/1273050327.14629.cbumail1,S=1385:2,S, /home/vpopmail/domains/yvz.cbu.edu.tr/yavuz/Maildir/.zako/tmp/1273050327.14629.cbumail1,S=1385) failed: Function not implemented please help ? _________________________________________________________________ Windows Live Hotmail: Arkadaşlarınız Facebook'taki güncellemelerinizi doğrudan Hotmail®'den alır. http://www.microsoft.com/windows/windowslive/see-it-in-action/social-networ…

3 2

[Dovecot] Dovecot Won't start on SLITAZ Linux
by Ludovic LEMARINEL 22 May '10

22 May '10

Hi I've just compiled dovecot under Slitaz, but I can't get it to run... It always die with this message in log : 2010-05-06 12:35:12 dovecot: Info: Dovecot v1.2.11 starting up 2010-05-06 12:35:12 dovecot: Fatal: setrlimit(RLIMIT_DATA, 256): Operation not permitted 2010-05-06 12:35:12 dovecot: Error: child 1455 (auth) returned error 89 (Fatal failure) 2010-05-06 12:35:12 dovecot: Fatal: Auth process died too early - shutting down here is my "dovecot -n" : # 1.2.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.30.6-slitaz i686 login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/dovecot/imap-login auth default: passdb: driver: pam userdb: driver: passwd It's the dovecot-example.conf. I also tried the dovecot.conf that was working well on my "openwrt linux" dovecot, but no more results :( Thanks for you help :)

4 4

[Dovecot] Dovecot and /dev/shm
by DJ GRP 22 May '10

22 May '10

Hi, I have tried to use /dev/shm for Dovecot's index files: > mail_location = mbox:~/mail:INBOX=/var/mail/%u:INDEX=/dev/shm/%u But it does not seem to like it. May 21 07:13:59 IMAP(user): Error: stat(/dev/shm/user/.imap/INBOX) failed: Permission denied (euid=1234(user) egid=500(group) missing +x perm: /dev/shm) It seems to me that /dev/shm permissions are OK. Any suggestions on how to achieve this?

2 1

[Dovecot] question about scripts sieves
by fakessh 21 May '10

21 May '10

hello list hello dovecot network hello all the reader here is a sieve script this ######################################## require ["fileinto","regex","comparator-i;ascii-numeric","reject","relational"]; # rule:[spammanage] if header :value "ge" :comparator "i;ascii-numeric" ["X-Spam-score"] ["500"] { reject "NO SPAM"; stop; } if header :value "ge" :comparator "i;ascii-numeric" ["X-Spam-score"] ["100"] { fileinto "Junk.spam"; stop; } if header :value "ge" :comparator "i;ascii-numeric" ["X-Spam-score"] ["10"] { fileinto "Junk"; } elsif anyof ( header :contains "Received" [ "[4.63.221.224", "[24.244.141.112", "[61.171.253.177", "[63.123.149.", "[63.209.206.", "(63.233.30.73", "[63.251.200.", "[64.41.183.","[64.49.250.", "[64.57.188.", "[64.57.221.", "[64.62.204.", "[64.70.17.", "[64.70.44.", "[64.70.53.", "[64.39.27.6", "[64.39.27.7","[64.191.25.","[64.191.36.", "[64.191.9.", "[64.125.181.", "[64.191.123.", "[64.191.23.", "[64.239.182.", "[65.211.3.", "[66.46.150.", "[66.62.162.", "[66.118.170.", "[66.129.124.", "[66.205.217.", "[66.216.111.", "[66.239.204.", "[67.86.69.", "[80.34.206.", "[80.80.98.", "[81.72.233.13", "[128.242.120.", "[157.238.18", "[168.234.195.18]", "[193.253.198.57", "[194.25.83.1", "[200.24.129.", "[200.161.203.", "[202.164.182.76]","[202.57.69.116", "[203.19.220.","[203.22.104.","[203.22.105.", "[204.188.52.", "[205.153.154.203", "[206.26.195.", "[206.154.33.","[206.169.178", "[207.142.3.", "[208.46.5.","[208.187.", "[209.164.27.","[209.236.", "[210.90.75.129]", "[211.101.138.199","[211.185.7.125]","[211.239.231.", "[212.240.95.", "[213.47.250.139", "[213.225.61.", "[216.22.79.","[216.39.115.","[216.99.240.", "[216.126.32.", "[216.187.123.","[217.36.124.53", "[218.145.25","[218.52.71.103","[218.158.136.115", "[218.160.42.74", "[218.242.112.4]" ] ) { fileinto "Junk"; } elsif anyof ( header :contains ["SPAM", "X-Spam-hits"] [ "X_OSIRU_SPAM_SRC" ] ) { fileinto "Junk"; } elsif anyof ( header :contains ["from", "received"] [".jp ", ".kr ", ".jp>", ".kr>"] ) { fileinto "Junk"; } elsif anyof ( header :contains "Content-Type" [ "GB2312", "big5", "ECU-KR", "ECU-TX", "HZ", "EUC-JP" ] ) { fileinto "Junk"; } elsif anyof ( header :regex "Subject" "^=\\?(gb|GB)2312\\?" # Chinese ecoding at subject ) { fileinto "Junk"; } elsif anyof ( header :regex "Subject" "^=\\?big5\\?" # Other kind of Chinese mail ) { fileinto "Junk"; } ################################################# I tested that emails are not from japan and korea I would like to add one condition: that is, the emails from japan or korea who are destined for which I am mailling subscriber does not end up in Junk and I do the same test in the header: contains "Content-Type" thanks for your help thanks for advice

2 1

[Dovecot] Patch for logging variables
by James Devine 20 May '10

20 May '10

Upon thinking, the variable names may not be descriptive enough as `host` is a bit ambiguous and `deleted_count` may refer to a different command than expunge in imap and may be valid to track at some point so I have changed `host` to `client_ip` and `deleted_count` in imap to `expunged_count`, below is the modified diff for version 1.2.11. diff -crB dovecot-1.2.11.orig/src/imap/client.c dovecot-1.2.11/src/imap/client.c *** dovecot-1.2.11.orig/src/imap/client.c 2010-01-24 16:14:17.000000000 -0700 --- dovecot-1.2.11/src/imap/client.c 2010-05-20 09:30:47.170407921 -0600 *************** *** 42,47 **** --- 42,48 ---- client->fd_out = fd_out; client->input = i_stream_create_fd(fd_in, imap_max_line_length, FALSE); client->output = o_stream_create_fd(fd_out, (size_t)-1, FALSE); + client->expunged = 0; o_stream_set_flush_callback(client->output, client_output, client); *************** *** 105,110 **** --- 106,113 ---- static struct var_expand_table static_tab[] = { { 'i', NULL, "input" }, { 'o', NULL, "output" }, + { 'c', NULL, "client_ip" }, + { 'e', NULL, "expunged_count" }, { '\0', NULL, NULL } }; struct var_expand_table *tab; *************** *** 115,120 **** --- 118,125 ---- tab[0].value = dec2str(client->input->v_offset); tab[1].value = dec2str(client->output->offset); + tab[2].value = getenv("IP") ? getenv("IP") : "Unknown"; + tab[3].value = dec2str(client->expunged); str = t_str_new(128); var_expand(str, logout_format, tab); diff -crB dovecot-1.2.11.orig/src/imap/client.h dovecot-1.2.11/src/imap/client.h *** dovecot-1.2.11.orig/src/imap/client.h 2009-06-26 22:49:34.000000000 -0600 --- dovecot-1.2.11/src/imap/client.h 2010-05-19 16:26:31.529833893 -0600 *************** *** 133,138 **** --- 133,139 ---- unsigned int destroyed:1; unsigned int handling_input:1; unsigned int syncing:1; + unsigned int expunged; unsigned int id_logged:1; unsigned int mailbox_examined:1; unsigned int input_skip_line:1; /* skip all the data until we've diff -crB dovecot-1.2.11.orig/src/imap/cmd-close.c dovecot-1.2.11/src/imap/cmd-close.c *** dovecot-1.2.11.orig/src/imap/cmd-close.c 2010-01-24 16:14:17.000000000 -0700 --- dovecot-1.2.11/src/imap/cmd-close.c 2010-05-19 16:26:31.529833893 -0600 *************** *** 18,24 **** client->mailbox = NULL; storage = mailbox_get_storage(mailbox); ! if ((ret = imap_expunge(mailbox, NULL)) < 0) client_send_untagged_storage_error(client, storage); if (mailbox_sync(mailbox, 0, 0, NULL) < 0) client_send_untagged_storage_error(client, storage); --- 18,24 ---- client->mailbox = NULL; storage = mailbox_get_storage(mailbox); ! if ((ret = imap_expunge(client, NULL)) < 0) client_send_untagged_storage_error(client, storage); if (mailbox_sync(mailbox, 0, 0, NULL) < 0) client_send_untagged_storage_error(client, storage); diff -crB dovecot-1.2.11.orig/src/imap/cmd-expunge.c dovecot-1.2.11/src/imap/cmd-expunge.c *** dovecot-1.2.11.orig/src/imap/cmd-expunge.c 2010-01-24 16:14:17.000000000 -0700 --- dovecot-1.2.11/src/imap/cmd-expunge.c 2010-05-19 16:26:31.529833893 -0600 *************** *** 24,30 **** { struct client *client = cmd->client; ! if (imap_expunge(client->mailbox, search_args == NULL ? NULL : search_args->args) < 0) { client_send_storage_error(cmd, mailbox_get_storage(client->mailbox)); --- 24,30 ---- { struct client *client = cmd->client; ! if (imap_expunge(client, search_args == NULL ? NULL : search_args->args) < 0) { client_send_storage_error(cmd, mailbox_get_storage(client->mailbox)); diff -crB dovecot-1.2.11.orig/src/imap/imap-expunge.c dovecot-1.2.11/src/imap/imap-expunge.c *** dovecot-1.2.11.orig/src/imap/imap-expunge.c 2010-01-24 16:14:17.000000000 -0700 --- dovecot-1.2.11/src/imap/imap-expunge.c 2010-05-19 16:26:31.529833893 -0600 *************** *** 5,18 **** #include "mail-search-build.h" #include "imap-expunge.h" ! int imap_expunge(struct mailbox *box, struct mail_search_arg *next_search_arg) { struct mail_search_context *ctx; struct mailbox_transaction_context *t; struct mail *mail; struct mail_search_args *search_args; bool expunges = FALSE; if (mailbox_is_readonly(box)) { /* silently ignore */ return 0; --- 5,21 ---- #include "mail-search-build.h" #include "imap-expunge.h" ! int imap_expunge(struct client *client, struct mail_search_arg *next_search_arg) { struct mail_search_context *ctx; struct mailbox_transaction_context *t; struct mail *mail; + struct mailbox *box; struct mail_search_args *search_args; bool expunges = FALSE; + box = client->mailbox; + if (mailbox_is_readonly(box)) { /* silently ignore */ return 0; diff -crB dovecot-1.2.11.orig/src/imap/imap-expunge.h dovecot-1.2.11/src/imap/imap-expunge.h *** dovecot-1.2.11.orig/src/imap/imap-expunge.h 2008-06-08 21:14:46.000000000 -0600 --- dovecot-1.2.11/src/imap/imap-expunge.h 2010-05-19 16:26:31.529833893 -0600 *************** *** 3,8 **** struct mail_search_arg; ! int imap_expunge(struct mailbox *box, struct mail_search_arg *next_search_arg); #endif --- 3,8 ---- struct mail_search_arg; ! int imap_expunge(struct client *client, struct mail_search_arg *next_search_arg); #endif Only in dovecot-1.2.11.orig/src/lib-sql: sql-drivers-register.c diff -crB dovecot-1.2.11.orig/src/pop3/client.c dovecot-1.2.11/src/pop3/client.c *** dovecot-1.2.11.orig/src/pop3/client.c 2010-01-24 16:14:17.000000000 -0700 --- dovecot-1.2.11/src/pop3/client.c 2010-05-20 09:31:01.400409195 -0600 *************** *** 238,243 **** --- 238,244 ---- { 's', NULL, "message_bytes" }, { 'i', NULL, "input" }, { 'o', NULL, "output" }, + { 'c', NULL, "client_ip" }, { '\0', NULL, NULL } }; struct var_expand_table *tab; *************** *** 255,260 **** --- 256,262 ---- tab[6].value = dec2str(client->total_size); tab[7].value = dec2str(client->input->v_offset); tab[8].value = dec2str(client->output->offset); + tab[9].value = getenv("IP") ? getenv("IP") : "Unknown"; str = t_str_new(128); var_expand(str, logout_format, tab);

2 1

[Dovecot] Dovecot LDAP problems
by Adam Pardy 20 May '10

20 May '10

I'm currently trying to configure a linux mailserver running centos to use an xserve running snow leopard. I am configuring the mailserver to run dovecot,sendmail,clamav,spam assassin and squirrelmail so it matches those used by the mac. The problem I am having is that I cannot get the server to authenticate properly to the macs LDAP database. As far as I can tell it is either a problem authenticating passwords or username and passwords. mail.app says its the password it cant authenticate Thunderbird says it could be either. It seems to be a problem in dovecot-ldap.conf, (as I can run ldapsearch from the linux server authenticate correctly and gain user information) What I'd like to know is there a standard set of settings required to authenticate to the LDAP on the mac? I'm currently running the od with no requirements for Kerberos, SSL or anything else it can authenticate with plain passwords (it will be once it is implemented I'm trying to have as few variables as possible at the moment). Copy of dovecot-ldap.conf below; 1. This file is opened as root, so it should be owned by root and mode 0600. # 1. http://wiki.dovecot.org/AuthDatabase/LDAP # 1. NOTE: If you're not using authentication binds, you'll need to give 2. dovecot-auth read access to userPassword field in the LDAP server. 3. With OpenLDAP this is done by modifying /etc/ldap/slapd.conf. There should 4. already be something like this: 1. access to attribute=userPassword 2. by dn="<dovecot's dn>" read # add this 3. by anonymous auth 4. by self write 5. by * none 1. Space separated list of LDAP hosts to use. host:port is allowed too. hosts =hostname.com 1. LDAP URIs to use. You can use this instead of hosts list. Note that this 2. setting isn't supported by all LDAP libraries. #uris = 1. Distinguished Name - the username used to login to the LDAP server dn= uid=wmuser,cn=#####,dc=##,dc=###########,dc=### 1. Password for LDAP server dnpass = password 1. Use SASL binding instead of the simple binding. Note that this changes 2. ldap_version automatically to be 3 if it's lower. Also note that SASL binds 3. and auth_bind=yes don't work together. #sasl_bind = no 1. SASL mechanism name to use. #sasl_mech = 1. SASL realm to use. #sasl_realm = 1. SASL authorization ID, ie. the dnpass is for this "master user", but the 2. dn is still the logged in user. Normally you want to keep this empty. #sasl_authz_id = 1. Use TLS to connect to the LDAP server. #tls = no 1. Use authentication binding for verifying password's validity. This works by 2. logging into LDAP server using the username and password given by client. 3. The pass_filter is used to find the DN for the user. Note that the pass_attrs 4. is still used, only the password field is ignored in it. Before doing any 5. search, the binding is switched back to the default DN. auth_bind = yes 1. If authentication binding is used, you can save one LDAP request per login 2. if users' DN can be specified with a common template. The template can use 3. the standard %variables (see user_filter). Note that you can't 4. use any pass_attrs if you use this setting. # 1. If you use this setting, it's a good idea to use a different 2. dovecot-ldap.conf for userdb (it can even be a symlink, just as long as the 3. filename is different in userdb's args). That way one connection is used only 4. for LDAP binds and another connection is used for user lookups. Otherwise 5. the binding is changed to the default DN before each user lookup. # 1. For example: auth_bind_userdn = cn=%u,cn=users,dc=##,dc=###########,dc=### # #auth_bind_userdn = 1. LDAP protocol version to use. Likely 2 or 3. ldap_version = 3 1. LDAP base. %variables can be used here. base = dc=##, dc=###########, dc=### 1. Dereference: never, searching, finding, always #deref = never 1. Search scope: base, onelevel, subtree #scope = subtree 1. User attributes are given in LDAP-name=dovecot-internal-name list. The 2. internal names are: 3. uid - System UID 4. gid - System GID 5. home - Home directory 6. mail - Mail location # 1. There are also other special fields which can be returned, see 2. http://wiki.dovecot.org/UserDatabase/ExtraFields user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid 1. Filter for user lookup. Some variables can be used (see 2. http://wiki.dovecot.org/Variables for full list): 3. %u - username 4. %n - user part in user@domain, same as %u if there's no domain 5. %d - domain part in user@domain, empty if user there's no domain user_filter = (&(objectClass=posixAccount)(uid=%u)) 1. Password checking attributes: 2. user: Virtual user name (user@domain), if you wish to change the 3. user-given username to something else 4. password: Password, may optionally start with {type}, eg. {crypt} 5. There are also other special fields which can be returned, see 6. http://wiki.dovecot.org/PasswordDatabase/ExtraFields pass_attrs = uid=user,userPassword=password 1. If you wish to avoid two LDAP lookups (passdb + userdb), you can use 2. userdb prefetch instead of userdb ldap in dovecot.conf. In that case you'll 3. also have to include user_attrs in pass_attrs field prefixed with "userdb_" 4. string. For example: #pass_attrs = uid=user,userPassword=password 1. Filter for password lookups pass_filter = (&(objectClass=posixAccount)(uid=%u)) 1. Default password scheme. "{scheme}" before password overrides this. 2. List of supported schemes is in: http://wiki.dovecot.org/Authentication default_pass_scheme = PLAIN 1. You can use same UID and GID for all user accounts if you really want to. 2. If the UID/GID is still found from LDAP reply, it overrides these values. #user_global_uid = #user_global_gid =

1 0

[Dovecot] LDAP against Novell eDirectory: 'Confidentiality required'
by Jim Moseby 20 May '10

20 May '10

Hi list! I am trying to get dovecot to authenticate users against Novell eDirectory via LDAP. I have successfully gotten open-xchange to authenticate, and I have written a PHP module that authenticates, however I cannot seem to get Dovecot working. If I turn on TLS and restart dovecot, I get: dovecot: 2010-05-20 09:22:05 Error: auth(default): LDAP: ldap_start_tls_s() failed: Connect error dovecot: 2010-05-20 09:22:05 Error: auth(default): LDAP: ldap_start_tls_s() failed: Local error If I turn it off, it starts without error, but returns this when a user tries to authenticate: dovecot: 2010-05-20 08:48:39 Error: auth(default): ldap(jkmoseby,127.0.0.1): ldap_bind() failed: Confidentiality required I have tried all combinations of host:port, and LDAP uri strings I can think of, nothing seems to work. Thanks in advance, config files follow. Jim -------------------------------------------------------- 'dovecot -n' returns: # 1.0.15: /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap login_dir: /var/run/dovecot//login login_executable: /usr/lib/dovecot/imap-login login_greeting: EFA mail server ready. mail_privileged_group: mail auth default: passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf --------------------------------------------------------- 'grep -v '^ *$#.*$\?$' dovecot-ldap.conf' returns: hosts = 10.1.10.200 tls = yes auth_bind = yes auth_bind_userdn = cn=%u,o=GSO,o=EFA base = o=EFA scope = subtree user_filter = (&(objectClass=posixAccount)(uid=%u))

2 2