- dovecot - dovecot.org

[Dovecot] Compatibility namespaces containing a leading ~ appear to be broken in 1.1.x
by David McBride 14 Oct '08

14 Oct '08

Greetings, I'm building a new 1.1.x-series Dovecot installation, and I have a problem setting up compatibility namespaces intended to handle old client-side settings. (See also: http://wiki.dovecot.org/Namespaces#head-0f3ab5ecab632eb517866c3508021e0605d…) I have produced a slightly cut-down example configuration which demonstrates the problem: # dovecot -n # 1.1.3: /etc/dovecot/dovecot.conf protocols: imap imaps pop3 pop3s ssl_cert_file(default): /etc/ssl/certs/imap.pem ssl_cert_file(imap): /etc/ssl/certs/imap.pem ssl_cert_file(pop3): /etc/ssl/certs/pop.pem ssl_key_file(default): /etc/ssl/private/imap.key ssl_key_file(imap): /etc/ssl/private/imap.key ssl_key_file(pop3): /etc/ssl/private/pop.key disable_plaintext_auth(default): yes disable_plaintext_auth(imap): yes disable_plaintext_auth(pop3): no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_max_processes_count: 1024 max_mail_processes: 32768 verbose_proctitle: yes first_valid_uid: 100 mail_privileged_group: mail mail_location: mbox:~/IMAP:INBOX=~/.email:INDEX=/data/dovecot-indexes/%1u/%u mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): zlib quota imap_quota mail_plugins(imap): zlib quota imap_quota mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail outlook-idle tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %08Xv%08Xu namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: Mail/ location: mbox:~/Mail:INDEX=/data/dovecot-indexes/%1u/%u hidden: yes subscriptions: yes namespace: type: private separator: / prefix: ~/Mail/ location: mbox:~/Mail:INDEX=/data/dovecot-indexes/%1u/%u hidden: yes subscriptions: yes auth default: mechanisms: gssapi gss-spnego plain passdb: driver: pam userdb: driver: passwd plugin: quota: fs:Disk Quota Given this configuration, a Thunderbird client using a folder prefix of Mail/ is successfully able to enumerate (and access) non-INBOX folders: 5 list "" "Mail/%" * LIST (\Noselect \HasChildren) "/" "Mail/archive"^M * LIST (\NoInferiors \UnMarked) "/" "Mail/Trash"^M 5 OK List completed.^M 6 list "" "Mail/%/%" * LIST (\Noselect \HasChildren) "/" "Mail/archive/"^M * LIST (\NoInferiors \UnMarked) "/" "Mail/archive/INBOX-2008-10"^M * LIST (\NoInferiors \UnMarked) "/" "Mail/archive/INBOX-2008-09"^M [...] 6 OK List completed.^M 7 list "" "INBOX" * LIST (\NoInferiors \UnMarked) "/" "INBOX"^M 7 OK List completed.^M 8 list "" "Mail/archive" * LIST (\Noselect \HasChildren) "/" "Mail/archive"^M 8 OK List completed.^M ... Whereas a client using a folder prefix of ~/Mail/ is only able to see its INBOX: 5 list "" "~/Mail/%" 5 OK List completed.^M 6 list "" "~/Mail/%/%" 6 OK List completed.^M 7 list "" "INBOX" * LIST (\NoInferiors \UnMarked) "/" "INBOX"^M 7 OK List completed.^M 8 create "~/Mail/Trash" 8 NO Mailbox exists.^M Note that even though it was unable to execute a listing of the hidden namespace, it was clearly aware of it, and able to discover that the 'Trash' mailbox that Thunderbird automatically tries to create already existed in the underlying filesystem. Through experimentation, it appears that Dovecot 1.1.x doesn't correctly handle namespaces that *begin* with the character '~'; using ~ in the middle of a prefix, e.g. "flibble~/Mail", worked as documented, leading me to suspect a bug in the ~-expansion handling of Dovecot. (Dovecot 1.0.x worked as expected in this configuration.) Unfortunately, an hg bisect run on recent Dovecot-1.1 versions didn't expose the offending commit that introduced this problem, so this bug (assuming it is a bug) was probably inadvertently introduced during the 1.1-development series. Can anyone suggest where in the source tree I should start looking to correct this behaviour? Cheers, David -- David McBride <dwm(a)tastycake.net>

2 2

[Dovecot] Get an extra_field in login process
by Alexandre Estanislau 14 Oct '08

14 Oct '08

Hi. I have an auth plugin where an extra_field is filled. Somewhere, in login process I need to log the authentication command and the extra_field, I was trying to do it in login-common/client-common.c, adding a new variable to login_log_format_elements and trying to get the fileld from environment, but, I could not find any way to do it, the getenv returns null everytime. Anyone can suggest something to do it ? Is there a way that I get the extra_fields from request in login process ? Thanks -- Alexandre *Estanislau* Puhl - PX3D1363 alexandre at estanislau dot org http://estanislau.org Jabber: alexandre at estanislau dot org QAP 27,335 MHz AM - Unidade 08 do Agrupamento Sentinela

2 1

[Dovecot] busy loop?
by Cor Bosman 13 Oct '08

13 Oct '08

I just noticed that about 25% of our servers have imap processes hanging: 97996 xxxxxx 1 101 0 4096K 2052K CPU3 2 180:54 98.93% imap All with 98-100% cpu load, taking up 1 or more CPUs. dovecot 1.1.2, FreeBSD 6.2. is this caused by the deadlock issue thats fixed in 1.1.4? Cor

2 1

[Dovecot] Multiple mailboxes per user
by spam＠wilysloth.com 13 Oct '08

13 Oct '08

My users currently have mail delivered to mulitple MailDir locations via procmail. ~/mail/inbox/ ~/mail/graph/ ~/mail/spam/ I would like all these mailboxes to be exported via dovecot IMAP and appear as folders. However, I can't anything beyond the INBOX working. My approach is via 'namespaces'. My config file is changed thusly: $ sudo dovecot -n # 1.0.15: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:~/mail/inbox namespace: type: private inbox: yes namespace: type: private prefix: graph location: maildir:~/mail/graph namespace: type: private prefix: spam location: maildir:~/mail/spam auth default: passdb: driver: pam userdb: driver: passwd I try connecting with mutt and I can see the mails in 'inbox' just fine. I can also see (in the mutt browser) 'graph' and 'spam' just fine too: y:Exit c:Chdir m:Mask ?:Help 1 IMAP INBOX 2 IMAP graph. 3 IMAP spam. However, selecting 'graph' I see: y:Exit c:Chdir m:Mask ?:Help 1 IMAP ../ ...I would have expected it to open the 'graph' MailDir mailbox and display the mail. I try connecting directly using 'mutt -f imaps://user@computer/graph' and I see 'Invalid mailbox name'. telnet-ing in: $ nc localhost 143 * OK Dovecot ready. a1 login user password a1 OK Logged in. c1 list "" * * LIST (\HasNoChildren) "." "INBOX" * LIST (\Noselect \HasChildren) "." "graph" * LIST (\Noselect \HasChildren) "." "spam" c1 OK List completed. a100 logout * BYE Logging out a100 OK Logout completed. The logs only show: Oct 13 10:44:44 machine dovecot: imap-login: Login: user=<user>, method=PLAIN, rip=127.0.1.1, lip=127.0.1.1, TLS Oct 13 10:44:46 machine dovecot: IMAP(user): Disconnected: Logged out Any ideas where I am going wrong? Outlook Express also lists the 'graph' and 'spam' folder but won't show their contents. WS

3 2

[Dovecot] Unkown namespace / sieve
by ML 13 Oct '08

13 Oct '08

Hello, I use dovecot + dspam and a very simple global sieve script : require "fileinto"; if header :contains "X-DSPAM-Result" "Spam" { fileinto "SPAM"; stop; } with dovecot 1.0 all run fine, but moving to 1.1 I experience this in maillog : Oct 13 10:31:52 h8h1 deliver(ml(a)sd2i.com): msgid=<8a24c15885037554724ff966f5458592(a)newsletter.RedSquare.com.au >: save failed to SPAM: Unknown namespace Oct 13 10:31:52 h8h1 deliver(ml(a)sd2i.com): sieve runtime error: Fileinto: Generic Error Oct 13 10:31:52 h8h1 deliver(ml(a)sd2i.com): sieve_execute_bytecode(/usr/ local/mail/.dovecot.sievec) failed Oct 13 10:31:53 h8h1 deliver(ml(a)sd2i.com): msgid=<8a24c15885037554724ff966f5458592(a)newsletter.RedSquare.com.au >: saved mail to INBOX Ay idea ? another question : I use virtual users only, they all have a quota_rule from mysql with different quota size, but I put a quota_rule2 globally to ignore Trash since the ignore= doesn't work anymore with 1.1, is that valid or do I need to add the quota_rule2 to mysql results too ? Thanks, David. ------------------------------------------------------- # dovecot -n # 1.1.3: /usr/local/etc/dovecot.conf protocols: imap pop3 imaps pop3s disable_plaintext_auth: no shutdown_clients: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Welcome login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no login_processes_count: 10 verbose_proctitle: yes first_valid_uid: 26 last_valid_uid: 26 first_valid_gid: 6 last_valid_gid: 6 mail_privileged_group: mail mail_location: maildir:/usr/local/mail/%d/%u mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota antispam mail_plugins(imap): quota imap_quota antispam mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_log_prefix: %Ls[%p]: Info: user=<%u> imap_client_workarounds(default): delay-newmail outlook-idle netscape- eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): UID%u-%v pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private prefix: INBOX. inbox: yes list: yes subscriptions: yes auth default: mechanisms: plain login digest-md5 cram-md5 user: nobody passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/run/dovecot/auth-client mode: 384 master: path: /var/run/dovecot/auth-master mode: 384 user: mailnull group: mail plugin: sieve: /usr/local/mail/.dovecot.sieve quota: maildir quota_rule2: Trash:ignore trash: /usr/local/etc/dovecot-trash.conf antispam_signature: X-DSPAM-Signature antispam_trash: trash;Trash;Deleted Items antispam_spam: Junk;Spam;junk;spam;SPAM;SpamTrain antispam_unsure: Draft;draft antispam_mail_tmpdir: /tmp antispam_mail_spam: spam@localhost antispam_mail_notspam: nospam@localhost antispam_mail_sendmail: /usr/sbin/sendmail

1 1

[Dovecot] client certs with godaddy ssl cert
by Harondel J. Sibble 13 Oct '08

13 Oct '08

I've read the client ssl cert section in the wiki and it talks about using a self signed cert, if I am using a commercial cert, in this case godaddy, how do I implement a self signed cert for the client side and have dovecot make use of this? I know the mechanics of setting up the self signed ca, the question is more what configuration changes do I need to make in dovecot to handle both godaddy and the self signed ca functionality? Thanks -- Harondel J. Sibble Sibble Computer Consulting Creating solutions for the small business and home computer user. help(a)pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice/fax) (604) 686-2253 (pager)

6 18

[Dovecot] Can I translate the userid to match the UW-POP3 server?
by Albert E. Whale 12 Oct '08

12 Oct '08

OK, I have been running the UW-POP3 server which currently translates all login ids as lowercase (i.e. Anthony becomes anthony). Now the Dovecot server is very flexible and currently I have not found how to translate the upper case characters to lowercase. What configuration setting will translate the userids to lowercase? -- Albert E. Whale, CHS CISA CISSP Sr. Security, Network, Risk Assessment and Systems Consultant ------------------------------------------------------------------------ ABS Computer Technology, Inc. <http://www.ABS-CompTech.com> - Email, Internet and Security Consultants SPAMZapper <http://www.Spam-Zapper.com> - No-JunkMail.com <http://www.No-JunkMail.com> - *True Spam Elimination*.

2 2

[Dovecot] Different authentication for pop3 and imap
by sh1ny 12 Oct '08

12 Oct '08

Is it possible to run different authentications for pop3 and imap ? What i need is to give access to some clients to pop3 only and to other to imap only. I'm using postgres as a backend. What i actually need is 2 separate queries for userdb, one to select with "WHERE imap_access = 1" and the other one with "WHERE pop3_access = 1" ( that's just an example ). I'm using 1.1.2 but i plan on upgrading to either 1.1.4 or 1.2.

2 2

[Dovecot] Multiple ldap_search_base in dovecot-ldap
by dongthao 12 Oct '08

12 Oct '08

Can we use multiple ldap_search_base fields in a dovecot-ldap config file? -- View this message in context: http://www.nabble.com/Multiple-ldap_search_base-in-dovecot-ldap-tp19929802p… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Password scheme module thoughts?
by Ian R. Justman 11 Oct '08

11 Oct '08

Hi, all. I have successfully deployed the code I wrote to handle Post.Office password hashes. However, I had to implement it as a hack to password-scheme.c. I'd like to implement it as a module so I don't have to hack Dovecot whenever a new release comes out. However, I had a few thoughts: 1. I used Dovecot's own MD5 routines in my implementation because I know how they behave. However, would it make sense to distribute the C sources for the MD5 routines, or would it make far more sense to have a Dovecot build tree already (so I can use Dovecot's function library)? 2. Is there good documentation for Dovecot's plugin API? I need it so I can figure out how to write the parts which the main program call so then the code can be used as a plugin. Thanks! --Ian. -- Ian R. Justman UNIX hacker. Anime fan. Any questions? ianj (at) ian-justman.com

2 1