- dovecot - dovecot.org

[Dovecot] plugin devel
by fernando＠dfcom.com.br 21 Jul '09

21 Jul '09

Hi, I´m planning to change our maildrop lda to deliver, but I need to devel a plugin in order to have some custom filtering. Are there any documentation regarding how to develop a dovecot plugin - tips, tricks, etc ? Thanks, Fernando

2 1

[Dovecot] [Bug] dovecot deliver v1.2.1 segfaults
by Nikita Koshikov 21 Jul '09

21 Jul '09

Hello list, I have noticed strange dovecot behavior with exim system-filter. I'm using exim+dovecot setup. My exim configuration have system filter enable, which restrict some attachments, like exe, vbs etc. When message with forbidden attachment received, exim accept the message, then construct bounce-message(Reject reason + original message) and returns it to sender. Trying to deliver such messages, I always get segmentation faults and message stayed in exim's queue. Others common delivers work fine. This only happens with bouncing system-filter messages. Steps to reproduce: 1) Create message with forbiden attachment 2) Send message. 3) Get segmentation fault. Here is more details: exim -d+all -M 1MSn7r-0003hN-BG (this command runs delivery from exim's queue) 13:14:23 11570 --------> koshikov.n(a)domain.com <-------- 13:14:23 11570 locking /var/spool/exim/db/retry.lockfile 13:14:23 11570 locked /var/spool/exim/db/retry.lockfile 13:14:23 11570 EXIM_DBOPEN(/var/spool/exim/db/retry) 13:14:23 11570 returned from EXIM_DBOPEN 13:14:23 11570 opened hints database /var/spool/exim/db/retry: flags=O_RDONLY 13:14:23 11570 dbfn_read: key=T:koshikov.n@domain.com 13:14:23 11570 no retry record exists 13:14:23 11570 search_tidyup called 13:14:23 11571 changed uid/gid: local delivery to koshikov.n <koshikov.n(a)domain.com> transport=local_delivery 13:14:23 11571 uid=8 gid=12 pid=11571 13:14:23 11571 auxiliary group list: <none> 13:14:23 11571 home=NULL current=/ 13:14:23 11571 set_process_info: 11571 delivering 1MSn7r-0003hN-BG to koshikov.n using local_delivery 13:14:23 11571 local_delivery transport entered 13:14:23 11571 direct command: 13:14:23 11571 argv[0] = /usr/libexec/dovecot/deliver 13:14:23 11571 argv[1] = -e 13:14:23 11571 argv[2] = -d 13:14:23 11571 argv[3] = $local_part@$domain 13:14:23 11571 expanding: $local_part@$domain 13:14:23 11571 result: koshikov.n(a)domain.com 13:14:23 11571 direct command after expansion: 13:14:23 11571 argv[0] = /usr/libexec/dovecot/deliver 13:14:23 11571 argv[1] = -e 13:14:23 11571 argv[2] = -d 13:14:23 11571 argv[3] = koshikov.n(a)domain.com 13:14:23 11571 Writing message to pipe 13:14:23 11571 writing data block fd=11 size=0 timeout=3600 13:14:23 11573 set_process_info: 11573 reading output from |/usr/libexec/dovecot/deliver -e -d $local_part@$domain 13:14:23 11571 writing data block fd=11 size=814 timeout=3600 13:14:23 11571 writing data block fd=11 size=0 timeout=3600 13:14:23 11571 local_delivery transport yielded 2 13:14:23 11571 search_tidyup called 13:14:23 11570 local_delivery transport returned FAIL for koshikov.n(a)domain.com 13:14:23 11570 post-process koshikov.n(a)domain.com (2) 13:14:23 11570 LOG: MAIN 13:14:23 11570 <koshikov.n(a)domain.com>: local_delivery transport output: Warning: Growing pool 'Plugin strings' with: 1024 13:14:23 11570 LOG: MAIN 13:14:23 11570 ** koshikov.n(a)domain.com F=<> R=ldap_accept T=local_delivery: Child process of local_delivery transport (running command "/usr/libexec/dovecot/deliver -e -d $local_part@$domain") was terminated by signal 11 (Segmentation fault) 13:14:23 11570 >>>>>>>>>>>>>>>> deliveries are done >>>>>>>>>>>>>>>> 13:14:23 11570 changed uid/gid: post-delivery tidying 13:14:23 11570 uid=8 gid=12 pid=11570 13:14:23 11570 auxiliary group list: <none> 13:14:23 11570 set_process_info: 11570 tidying up after delivering 1MSn7r-0003hN-BG 13:14:23 11570 Processing retry items 13:14:23 11570 Succeeded addresses: 13:14:23 11570 koshikov.n(a)domain.com: no retry items 13:14:23 11570 Failed addresses: 13:14:23 11570 Deferred addresses: 13:14:23 11570 koshikov.n(a)domain.com: no retry items 13:14:23 11570 koshikov.n(a)domain.com: no retry items 13:14:23 11570 end of retry processing 13:14:23 11570 LOG: MAIN 13:14:23 11570 Frozen (delivery error message) 13:14:23 11570 delivery deferred: update_spool=1 header_rewritten=0 13:14:23 11570 Writing spool header file 13:14:23 11570 Size of headers = 707 13:14:23 11570 end delivery of 1MSn7r-0003hN-BG 13:14:23 11570 search_tidyup called 13:14:23 11570 search_tidyup called 13:14:23 11570 >>>>>>>>>>>>>>>> Exim pid=11570 terminating with rc=0 >>>>>>>>>>>>>>>> dovecot-deliver log, while trying to deliver this message: ==> /var/log/dovecot/dovecot-deliver.log <== Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Loading modules from directory: /usr/lib/dovecot/lda Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Module loaded: /usr/lib/dovecot/lda/lib10_quota_plugin.so Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Module loaded: /usr/lib/dovecot/lda/lib11_trash_plugin.so Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Module loaded: /usr/lib/dovecot/lda/lib20_expire_plugin.so Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Module loaded: /usr/lib/dovecot/lda/lib90_sieve_plugin.so Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: auth input: uid=8 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: auth input: gid=12 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: auth input: home=/data/mail/domain.com/koshikov.n Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Warning: Growing pool 'userdb lookup replys' with: 1024 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: auth input: mail=maildir:/data/mail/domain.com/koshikov.n/data Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Quota root: name=Mailbox quota backend=maildir args= Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Quota rule: root=Mailbox quota mailbox=* bytes=524288000 messages=0 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Quota rule: root=Mailbox quota mailbox=Trash bytes=52428800 (10%) messages=0 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Quota warning: bytes=498073600 (95%) messages=0 command=/etc/dovecot/plugins/quota_warning.sh 95 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Warning: Growing pool 'Expire pool' with: 1024 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Namespace: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: maildir: data=/data/mail/domain.com/koshikov.n/data Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: maildir++: root=/data/mail/domain.com/koshikov.n/data, index=, control=, inbox=/data/mail/domain.com/koshikov.n/data Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Namespace: type=public, prefix=#Public/, sep=/, inbox=no, hidden=no, list=1, subscriptions=no Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: maildir: data=/var/mail/public Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: maildir++: root=/var/mail/public, index=, control=, inbox= Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Warning: Growing pool 'mail user' with: 1024 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: trash plugin: Added 'Trash' with priority 1 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: trash plugin: Added 'Spam' with priority 2 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: expire: No expiring in mailbox: Dovecot Delivery Mail Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: sieve: using sieve path for user's script: /data/mail/domain.com/koshikov.n/.dovecot.sieve Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: sieve: executed before user's script(1): /etc/dovecot/sieve/default.sieve Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: sieve: opening script /etc/dovecot/sieve/default.sieve Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: sieve: opening script /data/mail/domain.com/koshikov.n/.dovecot.sieve In system log I get: deliver[9476]: segfault at 0 ip b7e16713 sp bfa0ba2c error 4 in libc-2.9.so[b7da4000+13d000] deliver[11572]: segfault at 0 ip b7f41713 sp bfb38b4c error 4 in libc-2.9.so[b7ecf000+13d000] deliver[12433]: segfault at 0 ip b7e7e713 sp bfb73b8c error 4 in libc-2.9.so[b7e0c000+13d000] dovecot -n: # 1.2.1: /etc/dovecot/dovecot.conf Warning: Growing pool 'settings' with: 8192 # OS: Linux 2.6.26-gentoo-r4 i686 Gentoo Base System release 1.12.11.1 log_path: /var/log/dovecot/dovecot-error.log info_log_path: /var/log/dovecot/dovecot.log protocols: imaps managesieve ssl_cert_file: /etc/ssl/dovecot/imaps.crt ssl_key_file: /etc/ssl/dovecot/imaps.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login login_greeting: Server ready. login_processes_count: 10 login_max_processes_count: 512 first_valid_uid: 8 last_valid_uid: 8 first_valid_gid: 12 last_valid_gid: 12 mail_debug: yes mail_drop_priv_before_exec: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugins(default): quota imap_quota trash expire zlib autocreate mail_plugins(imap): quota imap_quota trash expire zlib autocreate mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail imap_client_workarounds(imap): delay-newmail imap_client_workarounds(managesieve): namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: public separator: / prefix: #Public/ location: maildir:/var/mail/public list: yes auth default: mechanisms: plain login cache_size: 10240 cache_negative_ttl: 0 user: dovecot_auth master_user_separator: * worker_max_count: 50 passdb: driver: passwd-file args: /etc/dovecot/passdb/master.pwd master: yes passdb: driver: passwd-file args: /etc/dovecot/passdb/users.pwd passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: prefetch userdb: driver: ldap args: /etc/dovecot/dovecot-userdb-ldap.conf userdb: driver: passwd-file args: /etc/dovecot/passdb/users.pwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: mail group: dovecot_auth master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail plugin: quota_warning: storage=95%% /etc/dovecot/plugins/quota_warning.sh 95 quota: maildir:Mailbox quota quota_rule: *:storage=500M quota_rule2: Trash:storage=10%% trash: /etc/dovecot/plugins/dovecot-trash.conf expire: Trash 30 Spam 30 expire_dict: proxy::expire autocreate: Drafts autocreate2: Sent autocreate3: Spam autocreate4: Trash autosubscribe: Drafts autosubscribe2: Sent autosubscribe3: Spam autosubscribe4: Trash sieve: ~/.dovecot.sieve sieve_dir: ~/sieve sieve_extensions: +imapflags +notify sieve_before: /etc/dovecot/sieve/default.sieve dict: expire: sqlite:/etc/dovecot/plugins/expire.conf Linux: Gentoo x86 1.12.11.1 filesystem: ext3 I you need any addition information, please tell.

4 7

[Dovecot] quota bug
by Amr Shahin 21 Jul '09

21 Jul '09

Hello, please find this log from dovecot server * OK Dovecot ready. 1 login amrtest3 ********* 1 OK Logged in. 1 getquotaroot inbox * QUOTAROOT "inbox" 1 OK Getquotaroot completed. 1 logout * BYE Logging out 1 OK Logout completed. the user has unlimited quota, the back end authentication is mysql database, here is the record from the database account quota amrtest3 0 ... thanks for your help

2 2

[Dovecot] vpopmail and shared mailbox
by David Fuchs 20 Jul '09

20 Jul '09

hi all, I'm a long time courier-imap user and just switched to dovecot-1.2.1. my MTA is qmail and all user accounts are virtual vpopmail users. getting dovecot to work was mostly painless, but I am desperately trying to share a user's mailbox and can't seem to figure out how. unfortunately the documentation is not very helpful. I am trying to share the mailbox /home/vpopmail/domains/ example.com/someuser/Maildir here's what I put in dovecot.conf: namespace shared { separator = . prefix = shared.%%u. location = maildir:/home/vpopmail/domains/%%d/%%n/Maildir:INDEX=~/Maildir/shared/%%u subscriptions = no list = yes } I then logged in as someuser and did a "setacl anyone Inbox lrip". /home/vpopmail/domains/example.com/shared-mailboxes.db now contains an entry shared/shared-boxes/anyone/someuser(a)example.com 1 and /home/vpopmail/domains/example.com/someuser/Maildir/dovecot-acl has anyone ilpr however, when I connect to the server, the client does not see the "shared" namespace. also, dovecot seems to be creating empty shared-mailboxes.db in /home/vpopmail/domains/example/ (missing .com!). I'm very confused at this point, but I'm sure someone has gotten this to work and can help me out. fwiw, the output of dovecot -n is appended. thanks! - Dave.

2 8

[Dovecot] Problem with quota-dict
by Sascha Bendix 20 Jul '09

20 Jul '09

Hi, I wanted to migrate a mailserver from cyrus to dovecot. The new setup was using postfixadmin let the domain admins configure the hostet domains. To view the used quota in postfixadmin the usage of the quota dict backend is required. I have configured it according to the wiki but everytime I connect I get a sucessfully login and then every next command hangs. It seems to me, that the dict process itself is hanging. I even startet with a fresh mail box. The only way to login with my setup is to disable quota for the used protocol. My system is debian lenny based with dovecot 1.0.15 and PostgreSQL 8.3.7 as database server. My config is the following: # 1.0.15: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps pop3s managesieve listen: [::] ssl_cert_file: /etc/ssl/certs/server.crt ssl_key_file: /etc/ssl/private/server.key login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_greeting: Ready. first_valid_uid: 8 last_valid_uid: 8 mail_privileged_group: mail mail_location: maildir:/var/mail/%d/%n mail_debug: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota acl mail_plugins(imap): quota imap_quota acl mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %v.%u pop3_uidl_format(managesieve): sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): /var/mail/sieve/%d/%n sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): /var/mail/sieve/%d/%n.sieve namespace: type: private inbox: yes auth default: user: dovecot-auth passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail plugin: quota: dict:storage=10240 proxy::quota acl: vfile:/etc/dovecot/acls sieve: /var/mail/sieve/%d/%n.sieve dict: quota: pgsql:/etc/dovecot/dovecot-dict-quota.conf My /etc/dovecot/dovecot-dict-quota.conf: connect = host=localhost dbname=mail user=mail password=dovecot-passwort table = quota select_field = current where_field = path username_field = username My database table: CREATE TABLE quota ( username character varying(255) NOT NULL, path character varying(100) NOT NULL, "current" integer, CONSTRAINT quota_pkey PRIMARY KEY (username, path) ) WITH (OIDS=FALSE); ALTER TABLE quota OWNER TO mail; -- Trigger: mergequota on quota -- DROP TRIGGER mergequota ON quota; CREATE TRIGGER mergequota BEFORE INSERT ON quota FOR EACH ROW EXECUTE PROCEDURE merge_quota(); connect = host=localhost dbname=mail user=dovecot password=jianueyeePeev5o table = quota select_field = current where_field = path username_field = username My dovecot logfile with mail_debug=yes: Jul 20 21:06:17 skippy dovecot: Dovecot v1.0.15 starting up Jul 20 21:06:17 skippy dovecot: auth(default): pgsql: Connected to mail Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): Loading modules from directory: /usr/lib/dovecot/modules/pop3 Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): Module loaded: /usr/lib/dovecot/modules/pop3/lib10_quota_plugin.so Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): Effective uid=8, gid=8 Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): maildir: data=/var/mail/domain.tld/user Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): maildir: root=/var/mail/domain.tld/user, index=/var/mail/domain.tld/user, control=, inbox= Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): dict quota: uri = proxy::quota Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): dict quota: byte limit = 52428800 Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): dict quota: count limit = 0 Jul 20 21:07:07 skippy dovecot: pop3-login: Login: user=<user(a)domain.tld>, method=PLAIN, rip=::ffff:1.2.3.4, lip=::ffff:1.2.3.5, TLS Jul 20 21:07:07 skippy dovecot: dict: pgsql: Connected to mail Jul 20 21:07:07 skippy dovecot: dict: Timeout leak: 0x40e150 Jul 20 21:07:07 skippy dovecot: dict: WARNING: there is no transaction in progress I'm a little bit clueless because there is no significant output (even in strace). Can you please give me a clue? Regards, Sascha Bendix

2 1

[Dovecot] Filesystem size limitation?
by Tommy Ng 20 Jul '09

20 Jul '09

I'm new to dovecot, nice to meet you guys here. Referring to Redhat, 32bit Linux v5 GFS supports 16TB filesystem size while 64bit version supports 8 EB (1EB = 1024TB) size. Reference: http://www.redhat.com/rhel/compare/ My question is, any limitation on a single filesystem (Redhat GFS) that Dovecot can handle? or Dovecot depends only on the limitation of OS? Thanks in advance! MJK Yahoo!香港提供網上安全攻略，教你如何防範黑客! 請前往 http://hk.promo.yahoo.com/security/ 了解更多!

2 1

[Dovecot] Bug in Dovecot Managesieve or Horde ?
by Christian Felsing 20 Jul '09

20 Jul '09

Hello, there is a problem between Dovevot 1.2 Managesieve 0.11.7 and Horde webmail 1.2.2 (possibly also in 1.2.3) in imap4flags $ telnet localhost 2000 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. "IMPLEMENTATION" "dovecot" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include body variables enotify environment" "SASL" "PLAIN LOGIN" "STARTTLS" "NOTIFY" "mailto" "VERSION" "1.0" OK "taunusstein.net imap4/pop3 ready." This shows imap4flags, Cyrus sieve shows imapflags instead that. Horde Ingos does not like that and complains about missing "imapflags". Two small patches in Horde code resolves that, but I do not know if that's the right way. cd webmail2/ingo/lib vi ./Script/sieve.php: function requires() { //return array('imapflags'); return array('imap4flags'); } vi ./tests/SieveTest.php: function testBlacklistMarker() { $bl = &new Ingo_Storage_blacklist(3); $bl->setBlacklist(array('spammer(a)example.com')); $bl->setBlacklistFolder(INGO_BLACKLIST_MARKER); $this->store($bl); //$this->assertScript('require "imapflags"; $this->assertScript('require "imap4flags"; if address :all :comparator "i;ascii-casemap" :is ["From", "Sender", "Resent-From"] "spammer(a)example.com" { addflag "\\\\Deleted"; keep; removeflag "\\\\Deleted"; stop; }'); } After that, Horde Ingo likes Dovecot mailsieve. Is it a bug of mailsieve ? Regards Christian

3 3

[Dovecot] dovecot 1.2rc5 fails to authenticate user via GSSAPI
by Michal Hlavinka 20 Jul '09

20 Jul '09

Hi, we're facing problem where dovecot 1.2rc5 is not able to authenticate user via gssapi. (I'm forwarding information from red hat's bugzilla) Steps to reproduce: 1. Install dovecot with kerberos support, create mailboxes for the client 2. Get initial credentials on client side 3. Attempt to log in via dovecot using gssapi -> login failed Client side 1. Email client displays: "[AUTHENTICATIONFAILED] Authentication failed." 2. klist before login shows: Valid starting Expires Service principal 06/18/09 20:01:01 06/19/09 20:01:01 krbtgt/realm@realm 3. klist after login attempt shows: Valid starting Expires Service principal 06/18/09 20:01:01 06/19/09 20:01:01 krbtgt/realm@realm 06/18/09 20:01:28 06/19/09 20:01:01 imap/mail.domain@realm Server side 1. /var/log/maillog: dovecot: auth(default): gssapi(user,192.168.0.1): authn_name not authorized dovecot: imap-login: Aborted login (auth failed, 1 attempts): user=<user>, method=GSSAPI, rip=192.168.0.1, lip=192.168.0.2, TLS ---------------- It is possible for the same user to login via other mechanisms. The issue reproduced with different email clients. Evolution and a custom java-based client were attempted. example of dovecot.conf: protocols = imap mail_location = maildir:/home/virtual/%u/Maildir protocol imap { } auth_krb5_keytab=/etc/dovecot.keytab auth default { mechanisms = gssapi userdb static { args = uid=vmail gid=vmail home=/home/virtual/%u } } ------------------------- Exactly the same dovecot setup was working just fine with dovecot 1.1 series. Authentication using kinit works just fine and kerberos infrastructure is functioning well as I use kerberos auth for other services like apache and ssh successfully. /var/log/maillog with using auth_debug=yes can be found here: https://bugzilla.redhat.com/attachment.cgi?id=348710 Regards, Michal Hlavinka

3 12

Re: [Dovecot] exim4 dovecot sasl problem
by Tristan Rex Santiago 20 Jul '09

20 Jul '09

what flag do i need to set in recompiling exim4 to enable dovecot-sasl support? i tried --enable-dovecot-sasl but exim4 still reported dovecot driver error. many thanks --- On Fri, 7/17/09, Tristan Rex Santiago <pgtr3s(a)yahoo.com> wrote: From: Tristan Rex Santiago <pgtr3s(a)yahoo.com> Subject: exim4 dovecot sasl problem To: dovecot(a)dovecot.org Cc: tansanph(a)gmail.com Date: Friday, 17 July, 2009, 4:36 PM hi! i'm trying to do smtp authentication using dovecot and exim4 by following this guide http://wiki.dovecot.org/HowTo/ EximAndDovecotSASL. for the exim4 part, i got an authenticator dovecot: cannot find authenticator driver "dovecot" error after i entered the codes in /etc/exim4/exim4.conf.template and reloaded exim4 with the update-exim4.conf command. i'm running debian lenny. here's the authentication section of exim4.conf.template: begin authenticators cram_md5: driver = cram_md5 public_name = CRAM-MD5 client_name = ${extract{1}{:}{${lookup{$ host}nwildlsearch{CONFDIR/ passwd.client}{$value}fail}}} client_secret = ${extract{2}{:}{${lookup{$ host}nwildlsearch{CONFDIR/ passwd.client}{$value}fail}}} PASSWDLINE=${sg{\ ${lookup{$host}nwildlsearch{ CONFDIR/passwd.client}{$value} fail}\ }\ {\\N[\\^]\\N}\ {^^}\ } plain: driver = plaintext public_name = PLAIN .ifndef AUTH_CLIENT_ALLOW_NOTLS_ PASSWORDS client_send = "<; ${if !eq{$tls_cipher}{}\ {^${extract{1}{:}{PASSWDLINE}} \ ^${sg{PASSWDLINE}{\\N([^:]+:)( .*)\\N}{\\$2}}\ }fail}" .else client_send = "<; ^${extract{1}{:}{PASSWDLINE}}\ ^${sg{PASSWDLINE}{\\N([^:]+:)( .*)\\N}{\\$2}}" .endif login: driver = plaintext public_name = LOGIN .ifndef AUTH_CLIENT_ALLOW_NOTLS_ PASSWORDS # Return empty string if not non-TLS AND looking up $host in passwd-file # yields a non-empty string; fail otherwise. client_send = "<; ${if and{\ {!eq{$tls_cipher}{}}\ {!eq{PASSWDLINE}{}}\ }\ {}fail}\ ; ${extract{1}{::}{PASSWDLINE}}\ ; ${sg{PASSWDLINE}{\\N([^:]+:)(. *)\\N}{\\$2}}" .else # Return empty string if looking up $host in passwd-file yields a # non-empty string; fail otherwise. client_send = "<; ${if !eq{PASSWDLINE}{}\ {}fail}\ ; ${extract{1}{::}{PASSWDLINE}}\ ; ${sg{PASSWDLINE}{\\N([^:]+:)(. *)\\N}{\\$2}}" .endif dovecot_login: driver = dovecot public_name = LOGIN server_socket = /var/run/dovecot/auth-client server_set_id = $auth1 dovecot_plain: driver = dovecot public_name = PLAIN server_socket = /var/run/dovecot/auth-client server_set_id = $auth1 Design your own exclusive Pingbox today! It's easy to create your personal chat space on your blogs Connect instantly with more friends on your blog and personal website? Create your latest Pingbox today! http://ph.messenger.yahoo.com/pingbox

2 1

[Dovecot] RFC: Different quota for dovecot and deliver
by Philipp Marek 20 Jul '09

20 Jul '09

Hello everybody, I've been with this question in IRC the last days, but no solution was found. So I looked into the sources, and came up with the attached (untested, not even compiled) patch against 1.2.1. Rationale ----------- I'd like to bounce on the external side, which is quite easy if the quota is stored in a SQL database; then eg. postfix can directly query it, and reject accordingly without doing any real work. Now, as discussed some time ago on the postfix list (cannot find it anymore, sorry), it would be best to *not* bounce internally, ie. when the mail is delivered in the mailbox, but to allow a small bit of over-usage instead. Thoughts ---------- Why don't we simply set the value seen by postfix down a bit? I don't think that this is the correct solution; if the difference between these two values is smaller than the allowed mail size we'd get internal bounces again. (And we wouldn't allow to *get* the amount of mail, btw, only to use it via COPY.) There are more complicated schemes, like putting a slightly higher quota in the configuration, and subtracting a bit in postfix again. I wouldn't see that as aesthetical, too. Furthermore all such schemes have the problem of being unstable - larger mails get (internally) rejected earlier than small ones. Wanted behaviour ------------------ What I'd like to achieve is that postfix uses the trigger value from the Database as well, but that deliver allows a small bit more - say 5, 10, or 20MB. Then one incoming mail simply makes the quota go over the defined limit; now postfix no longer accepts mail, but the incoming queue (amavis etc.) can be drained - at least if there's not some big hiccup in queue processing, and that's why I'd like to use a *different* quota, and not simply *none* (for deliver). Idea to solve this -------------------- The idea is that in the SQL configuration the name of an environment variable can be given to the SELECT query; this name, and the value of the environment variable, are used as an additional WHERE constraint. It would be much nicer if a stored procedure could be called with parameters (like Postfix allows), but that would mean a fair bit of change to dovecot. (And in Postgres at least the query could be rewritten with rules - but that's not that nice, either.) I've now looked into the sources, and tried to sketch the basic change that I imagine; please see the attached patch. Would something like that be acceptable? I thought for some time whether the additional query should use the filename part of the executable; then similar things could be done. But as this is a bit more general I settled for the environment variable. Thank you for all answers. Regards, Phil

3 6