- dovecot - dovecot.org

[Dovecot] dovecot-ldap.conf and gosaMailAlternateAddress
by william Famy 03 Oct '08

03 Oct '08

Hi. I am looking how to allow gosaMailAlternateAddress connection. I use postfix mail server under debian computer. this is my dovecot-ldap.conf hosts = 192.168.0.3 auth_bind = yes ldap_version = 3 base = dc=mydc user_attrs = gosaMailServer=postfix #user_filter = (&(objectClass=gosaMailAccount)(mail=%s)) user_filter = (&(objectClass=gosaMailAccount)(|(mail=%u)(gosaMailAlternateAddress=%u))) #(&(objectClass=gosaMailAccount)(mail=%u)) pass_attrs = mail=user,userPassword=password #pass_filter = (&(objectClass=gosaMailAccount)(mail=%s)) pass_filter = (&(objectClass=gosaMailAccount)(|(mail=%u)(gosaMailAlternateAddress=%u))) #(&(objectClass=gosaMailAccount)(mail=%u)) default_pass_scheme = CRYPT user_global_uid = vmail user_global_gid = vmail i can receveil mail to gosaMailAlternateAddress the filter is OK. But when i connect to imap to alternateadresse(a)myserver.org i try to connect with my mail mail(a)server2.org instead of alternate(a)server.org So how to change my dovecot-ldap.conf pass_attrs = mail=user,userPassword=password to allow alternate IMAP connection? regards. vs_ldap:/# ldapsearch -v -h 192.168.0.3 -x -W -D "cn=ldap, dc=mydc" -b dc=mydc "(&(objectClass=gosaMailAccount)(|(mail=mail@server2.org)(gosaMailAlternateAddress=alternate@server.org)))" ldap_initialize( ldap://192.168.0.3 ) Enter LDAP Password: filter: (&(objectClass=gosaMailAccount)(|(mail=alternate@server.org)(gosaMailAlternateAddress=alternate@server.org))) requesting: All userApplication attributes # extended LDIF # # LDAPv3 # base <dc=mydc> with scope subtree # filter: (&(objectClass=gosaMailAccount)(|(mail=alternate@server.org)(gosaMailAlternateAddress=alternate@server.org))) # requesting: ALL # # william famy, people, mydc dn: cn=william famy,ou=people,dc=mydc sn: famy givenName: william uid: wfamy cn: william famy gosaMailServer: postfix gosaMailQuota: 0 gosaMailDeliveryMode: [L] gosaSpamSortLevel: 0 gosaSpamMailbox: INBOX objectClass: gosaMailAccount objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: gosaAccount mail: mail(a)server2.org gosaMailAlternateAddress: alternate(a)server.org sambaLMPassword: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx sambaNTPassword: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx sambaPwdLastSet: xxxxxxxxxxxxx sambaBadPasswordCount: 0 sambaBadPasswordTime: 0 userPassword:: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1

1 1

[Dovecot] Unable to Login to Dovecot.
by Rajiv Gore 03 Oct '08

03 Oct '08

I am unable to login to dovecot . I have edited dovecot.conf as per the Basic Configuration.txt in the wiki.I am using Suse 10.2 on I586 and OS is Linux 2.6.18.2-34-default i686. Any help will be appreciated. Lisiting of Dovecot.conf Saisuse:~ # dovecot -n # 1.1.3: /usr/local/etc/dovecot.conf log_path: /var/log/dovecot.log info_log_path: /var/log/info.dovecot disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login login_greeting: Hi Buddy got Password!. mail_privileged_group: mail auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/passwd.dovecot userdb: driver: passwd Lisiting of Dovecot.log dovecot: Oct 02 12:43:52 Error: auth(default): userdb(Rajiv,127.0.0.1): user not found from userdb Lisitng of info.dovecot dovecot: Oct 02 12:43:26 Info: Dovecot v1.1.3 starting up dovecot: Oct 02 12:43:26 Info: auth(default): passwd-file /etc/passwd.dovecot: Read 1 users dovecot: Oct 02 12:43:27 Info: auth(default): new auth connection: pid=19922 dovecot: Oct 02 12:43:27 Info: auth(default): new auth connection: pid=19923 dovecot: Oct 02 12:43:27 Info: auth(default): new auth connection: pid=19924 dovecot: Oct 02 12:43:43 Info: auth(default): new auth connection: pid=19930 dovecot: Oct 02 12:43:52 Info: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=52353 resp=AFJhaml2AHBhc3N3b3Jk dovecot: Oct 02 12:43:52 Info: auth(default): passwd-file(Rajiv,127.0.0.1): lookup: user=Rajiv file=/etc/passwd.dovecot dovecot: Oct 02 12:43:52 Info: auth(default): client out: OK 1 user=Rajiv dovecot: Oct 02 12:43:52 Info: auth(default): master in: REQUEST 1 19924 1 dovecot: Oct 02 12:43:52 Info: auth(default): passwd(Rajiv,127.0.0.1): lookup dovecot: Oct 02 12:43:52 Info: auth(default): passwd(Rajiv,127.0.0.1): unknown user dovecot: Oct 02 12:43:52 Info: auth(default): master out: NOTFOUND 1 dovecot: Oct 02 12:43:52 Info: imap-login: Internal login failure (auth failed, 1 attempts): user=<Rajiv>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Oct 02 12:46:18 Info: auth(default): new auth connection: pid=19976 Thanks -- -- Rajiv Gore

2 1

Re: [Dovecot] disbale to responded to an unrequested SSL Certificate
by Andre Hübner 02 Oct '08

02 Oct '08

Hi List, > Hi dovecot-list, > > just a easy question today ;) > > Customer did on Server a PCI-Test to test security to fit worldpay > requirements. > > They found a critical risk at pop3s. (and some other things) > > This is the Textmesage: > ############ > Family: Remote Shell Access Critical 993/tcp 11875 > Description: > The remote host responded to an unrequested SSL Certificate. The remote > SSL server should have > sent back an Error message. This may indicate that the server is > vulnerable to a remote > flaw in the way that it handles unrequested certificates. You should > manually inspect the > SSL Server's configuration > ############ > > Background is that we use a wildcard-cert which is installed on ervery > machine and fits to servername. So you have to use the accredited > Hostname/Servername to make clean ssl connection pop3s/imaps without > warnings etc. > Problem should be that server sends no error when requested with other > hostname. This is significant part from dovecot.conf > > protocols = imap imaps pop3 pop3s > ssl_disable = no > ssl_cert_file = "/path/to/*.myhost.com.crt" > ssl_key_file = "/path/to/*.myhost.com.key" > ssl_ca_file = "/path/to/*.myhost.com.bundle.crt" > > Is there a Config-Option to send error when ssl-connect ist not > established to in cert accredited Hostname/Servername ? Did not found > something like this or did not really understand function of the options. > > I do not know backgrounds to this issue. Cant decide if it would be a > security risk or disproportionated wishes of securityexperts but i want to > satisfy this costumer. > How to handle thos? > > Thank you > Andre could be the solution to set ssl_listen to hostname where dovecot is running? pretty easy... O.o my tests were successful but would like to obtain other opinions.. Thanks Andre

2 1

[Dovecot] Step-by-set Postfix/Dovecot/LDA?
by Roderick A. Anderson 02 Oct '08

02 Oct '08

Anyone know of a /complete/ step-by-step HOWTO for setting up a system using Postfix, Dovecot, and Deliver? I'm looking to put a new mail server together that will host three domains with pretty low volumes of email. Later adding three or four more for some non-profits that I host. I'm finding my self skipping all around the Postfix and Dovecot sites trying to come up with this setup. I have set up Postfix in several different configurations: inbound spool, outbound SMTP, regular mail server, etc. And with Dovecot I was lucky as it ran for me pretty much out of the box. Of course that was on a single domain mail server. (Not to mention it is a really old version.) Since it went up I've added a couple of domains to my personal collection and rather than add a new mail server for each I thought I'd go the virtual route. Anyone have a complete set of example .conf files they could share? main.cf, master.cf dovecot.conf Isn't it about time for a Dovecot book? TIA, Rod --

2 2

[Dovecot] Annotation plugin for dovecot
by Bernhard Herzog 02 Oct '08

02 Oct '08

Hi, as part of an effort to make dovecot usable as the IMAP component in the Kolab Groupware system <http://kolab.org/>, we've started to develop a plugin that implements the IMAP METADATA extension. The plugin is still under development and development is focused on the plugin's use in Kolab, so it will at first only implement what's immediately needed to achieve that goal. The plugin is available as a mercurial repository at http://hg.intevation.org/kolab/dovecot-metadata-plugin/ More information about the current status of the plugin is available in the README file in the sources. Regards, Bernhard

3 3

[Dovecot] Unable To Move IMAP Folder (Dovecot)
by Carlos Williams 02 Oct '08

02 Oct '08

I have a user who has a folder in his Maildir/ called "test" /home/user/Maildir/.test This folder shows up as a sub folder to his Inbox on his Thunderbird client and I tried using the "cp" command to move this over to my Maildir/ directory on the same server and when I launch Thunderbird, that folder is not visible for me. I made sure permissions are correct and even reloaded Dovecot. mail:/home/user/Maildir# cp -R .test/ /home/me/Maildir/ mail:/home/user/Maildir# chown -R me:users .test/ The permissions and ownership seem to be identical to all the folders I created as subfolders myself but for some reason, I can NOT see "test/". Does anyone know what I am doing wrong?

4 4

[Dovecot] Why my Evolution cannot delete emails in dovecot IMAP folder?
by Igor Chudov 02 Oct '08

02 Oct '08

I use Ubuntu Hardy, get mails locally and run dovecot listening on localhost. I run Evolution and have it connect to dovecot, so that I can access my mail in IMAP and be able to use mutt from remote. So far so good. It works. However, my problem is that Evolution cannot delete any messages. That is, when I click DELETE in Evolution, Evolution no longer sees the message , but the message is still there. That's not what I want, when deleting messages I want them to go away from Inbox. How can I do it? thanks i

3 2

[Dovecot] segfault in dovecot imap 1.1.1 to 1.1.3
by Rene Luria 02 Oct '08

02 Oct '08

Dovecot dies with signal 11 (segfault) when doing some commands with a specific message you'll find relevant information stored here: http://www.luria.ch/9e93676668e453b739ee3e085434e086/ the email: msg.anon.txt input rawlog: 20081001-120137-24371.in dovecot -n: dovecot-n.txt the gdb backtrace: bt.txt test system is running debian sarge, but same thing happens with debian etch (both x86) using xfs always reproductible Can you help me with this ? (the problematic email is anonimized, tell-me if you need the originalone) -- Rene Luria

3 5

Re: [Dovecot] Step-by-set Postfix/Dovecot/LDA?
by Roderick A. Anderson 02 Oct '08

02 Oct '08

Fred Newtz wrote: > www.howtoforge.com has some great how-tos on there. > Thanks Fred. Some look interesting. Too bad so many are using a web/GUI interface to get it running. My favorite system admin tool is vi. :-) I did find a pretty good one (http://neranjara.org/tutorials/?tid=56) but he does some pretty good skips that leave me with questions. I think I have it up a working but need to do some testing. Rod -- > Fred > > > On Wed, 2008-10-01 at 13:04 -0700, Roderick A. Anderson wrote: >> Anyone know of a /complete/ step-by-step HOWTO for setting up a system >> using Postfix, Dovecot, and Deliver? I'm looking to put a new mail >> server together that will host three domains with pretty low volumes of >> email. Later adding three or four more for some non-profits that I host. >> >> I'm finding my self skipping all around the Postfix and Dovecot sites >> trying to come up with this setup. >> >> I have set up Postfix in several different configurations: inbound >> spool, outbound SMTP, regular mail server, etc. And with Dovecot I was >> lucky as it ran for me pretty much out of the box. Of course that was >> on a single domain mail server. (Not to mention it is a really old >> version.) >> >> Since it went up I've added a couple of domains to my personal >> collection and rather than add a new mail server for each I thought I'd >> go the virtual route. >> >> Anyone have a complete set of example .conf files they could share? >> >> main.cf, master.cf >> dovecot.conf >> >> Isn't it about time for a Dovecot book? >> >> >> TIA, >> Rod >

1 0

[Dovecot] ACL plugin
by Matvey Soloviev 01 Oct '08

01 Oct '08

Hello, I am working on implementing support for the RFC4314 ACL management commands and responses in the ACL plugin included with dovecot 1.1.2. (I verified the error persists with 1.1.3 though.) While the described objective is still in the works, I have stumbled upon what I believe to be a critical issue with the handling of negative rights in the present ACL plugin - to be precise, the cache component of it handles them in the exact same way as it does positive rights, thus granting rather than retracting the individual privileges. To fix this, go to src/plugins/acl/acl-cache.c:391. The line and the one following it should read p[j] |= obj_cache->my_neg_rights[i]->mask[j]; Replace that to read p[j] &= ~obj_cache->my_neg_rights[i]->mask[j]; I hope this information is useful. Regards, M. Soloviev

4 7