- dovecot - dovecot.org

[Dovecot] Dovecots default NTLM Version
by hever＠web.de 02 Mar '08

02 Mar '08

Hi, I'm not sure what NTLM version is used as default by authentication between Outlook and dovecot and I couldn't find it out with a packet sniffer. I think its NTLMv2 but I'm not sure so I'm asking here. I know that NTLMv1 is not secure against a man in the middle. _____________________________________________________________________ Der WEB.DE SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! http://smartsurfer.web.de/?mc=100071&distributionid=000000000066

3 4

[Dovecot] Sieve management without shell access or homedir
by Tobias Franzén 02 Mar '08

02 Mar '08

Hi. Is there some user friendly application (web based, maybe a webmail addon) that can help a user manage their sieve filtering? My mail users don't have any shell access to the mail host. Most users won't have a regular home directory either. Can I store this sieve information someplace else? Either directly in LDAP, or in some database, or a common directory for all user's sieve files? /Tobias

1 0

[Dovecot] Master user doesn't work with 'pass=yes'
by Ron Avriel 01 Mar '08

01 Mar '08

Hi, It seems that master user login does not work with the 'pass=yes' option as recommended and documented. I defined a master user passdb as documented. In addition, I have a passdb sql. If 'pass=yes' is defined then it seems that dovecot recognizes the master login, verifies the master password but then attempts to verify the ***master*** password again with the ***user*** password (?) and fails. If 'pass=yes' is not defined then master login works OK, but if the user does not exist I get a "* BYE Internal login failure. Refer to server log for more information." instead of the usual "NO Authentication failed.". In addition, I'd like to check the SQL users before the master user, because most logins will be done by SQL users. If I place master passdb after passdb SQL then dovecot fails to start with "Last passdb can't have pass=yes". How can I use master password and "pass=yes"? I'm using dovecot 1.0.10. This is the configuration that fails master login: dovecot.conf: auth_master_user_separator=* auth default { passdb passwd-file { args = /usr/local/etc/passwd.masterusers master = yes pass = yes } passdb sql { args = /usr/local/etc/dovecot-sql.conf } userdb prefetch { } userdb sql { args = /usr/local/etc/dovecot-sql.conf } } passwd.masterusers: master:{SHA}aFAMsNWXTaL5dwGZWeeOhWhlTZA= (password is 'masterpass') log file: Feb 18 17:44:27 ha-test1 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=AHVzZXIxQGV4YW1wbGUub3JnKm1hc3RlcgBtYXN0ZXJwYXNz Feb 18 17:44:27 ha-test1 dovecot: auth(default): passwd-file(master,127.0.0.1,master): lookup: user=master file=/usr/local/etc/passwd.masterusers Feb 18 17:44:27 ha-test1 dovecot: auth(default): passdb(master,127.0.0.1,master): Master user logging in as user1(a)example.org Feb 18 17:44:27 ha-test1 dovecot: auth-worker(default): sql(user1(a)example.org,127.0.0.1): query: SELECT username as user, password, maildir as userdb_home, concat('maildir:', maildir) as userdb_mail, 150 as userdb_uid, 12 as userdb_gid, concat('maildir:storage=', quota) AS userdb_quota FROM mailbox WHERE username = 'user1(a)example.org' AND active = '1' Feb 18 17:44:27 ha-test1 dovecot: auth-worker(default): sql(user1(a)example.org,127.0.0.1): Password mismatch ***** Here 'masterpass' is compared to the **USER** password hash (?) ******************* Feb 18 17:44:27 ha-test1 dovecot: auth-worker(default): sql(user1(a)example.org,127.0.0.1): PLAIN-MD5(masterpass) != '81dc9bdb52d04dc20036dbd8313ed055' Feb 18 17:44:28 ha-test1 dovecot: auth(default): client out: FAIL 1 user=user1(a)example.org Thanks, Ron ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs

2 1

[Dovecot] Query about LIST behaviour
by Julian Phillips 01 Mar '08

01 Mar '08

I've just switched from UW-IMAP to Dovecot v1.1.beta16, and I'm having a bit of a problem with a difference in the behaviour of the LIST command. What I'm seeing is: * PREAUTH [CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS UIDPLUS LIST-EXTENDED I18NLEVEL=1] Logged in as jp3 a list test/ * * LIST (\Noselect \HasChildren) "/" "test/a1" * LIST (\Noselect \HasChildren) "/" "test/a1/b1" * LIST (\NoInferiors \UnMarked) "/" "test/a1/b1/c1" * LIST (\NoInferiors \UnMarked) "/" "test/a1/b1/c2" * LIST (\Noselect \HasChildren) "/" "test/a1/b2" * LIST (\Noselect \HasChildren) "/" "test/a2" * LIST (\Noselect \HasChildren) "/" "test/a3" a OK List completed. b list test/a1/ * * LIST (\Noselect \HasChildren) "/" "test/a1/" * LIST (\Noselect \HasChildren) "/" "test/a1/b1" * LIST (\NoInferiors \UnMarked) "/" "test/a1/b1/c1" * LIST (\NoInferiors \UnMarked) "/" "test/a1/b1/c2" * LIST (\Noselect \HasChildren) "/" "test/a1/b2" b OK List completed. c list test/a1/b1/ * c OK List completed. d logout * BYE Logging out d OK Logout completed. but what I expect (and what I was getting with UW-IMAP) is more like: ... c list test/a1/b1/ * * LIST (\Noselect \HasChildren) "/" "test/a1/b1" * LIST (\NoInferiors \UnMarked) "/" "test/a1/b1/c1" * LIST (\NoInferiors \UnMarked) "/" "test/a1/b1/c2" c OK List completed. ... Is this is an expected behaviour? If so, is there any configuration I can change to make it behave as I want instead? -- Julian --- Lookie, lookie, here comes cookie... -- Stephen Sondheim

2 2

[Dovecot] mbox to maildir conversion does not work
by Scott Bruce 01 Mar '08

01 Mar '08

Hello, I'm try to use the convert plugin, but I cannot seem to get it working properly. Is there any setting that I'm missing. -------- dovecot -n # 1.0.10: dovecot.conf log_path: /var/log/dovecot protocols: imap imaps pop3 pop3s listen(default): 127.0.0.1:143 listen(imap): 127.0.0.1:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 login_dir: /opt/csw/var/run/dovecot/login login_executable(default): /opt/csw/libexec/dovecot/imap-login login_executable(imap): /opt/csw/libexec/dovecot/imap-login login_executable(pop3): /opt/csw/libexec/dovecot/pop3-login mail_location: maildir:/var/imap/%u/.imap mail_debug: yes maildir_copy_with_hardlinks: yes mail_executable(default): /opt/csw/libexec/dovecot/imap mail_executable(imap): /opt/csw/libexec/dovecot/imap mail_executable(pop3): /opt/csw/libexec/dovecot/pop3 mail_plugins(default): mail_plugins(imap): mail_plugins(pop3): convert mail_plugin_dir(default): /opt/csw/lib/dovecot/imap mail_plugin_dir(imap): /opt/csw/lib/dovecot/imap mail_plugin_dir(pop3): /opt/csw/lib/dovecot/pop3 pop3_reuse_xuidl(default): no pop3_reuse_xuidl(imap): no pop3_reuse_xuidl(pop3): yes pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: passdb: driver: pam userdb: driver: passwd plugin: convert_skip_broken_mailboxes: no convert_mail: mbox:INBOX=/var/mail/%u Dovecot log ---------------- dovecot: Feb 22 14:13:28 Info: pop3-login: Login: user=<scott>, method=PLAIN, rip=134.117.43.54, lip=134.117.9.47, TLS dovecot: Feb 22 14:13:28 Info: POP3(scott): Loading modules from directory: /opt/csw/lib/dovecot/pop3 dovecot: Feb 22 14:13:28 Info: POP3(scott): Module loaded: /opt/csw/lib/dovecot/pop3/lib20_convert_plugin.so dovecot: Feb 22 14:13:28 Info: POP3(scott): Effective uid=xxx, gid=xx dovecot: Feb 22 14:13:28 Info: POP3(scott): mbox: data=INBOX=/var/mail/scott dovecot: Feb 22 14:13:28 Info: POP3(scott): maildir: data=/var/imap/scott/.imap dovecot: Feb 22 14:13:28 Info: POP3(scott): maildir: root=/var/imap/scott/.imap, index=/var/imap/scott/.imap, control=, inbox= dovecot: Feb 22 14:13:28 Info: POP3(scott): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 bash-3.00# du -sh /var/imap/sbruce/.imap/ And I can use mb2md to do the conversion, but I was hoping to do it on the fly. Thank You for your time, Scott ------------------ dovecot --version 1.0.10

4 5

[Dovecot] typo caused dovecot-acl line 1: Unknown ACL ' '
by Adam McDougall 01 Mar '08

01 Mar '08

A co-worker edited a dovecot-acl file and accidently introduced a space at the end of a "user=username lrwstie" entry. Fortunately he noticed errors in his own mail client, but I'm not sure what may have happened to other users. Would it be possible to make dovecot more forgiving by ignoring whitespace at the end of ACLS to avoid this issue? Feb 21 12:34:38 hill dovecot: IMAP(username): ACL file /path/namespace/.folder/dovecot-acl line 1: Unknown ACL ' '

2 1

[Dovecot] rmdir() warnings with 1.1.rc1
by Dean Brooks 01 Mar '08

01 Mar '08

Hi, Looks like there are still some Solaris rmdir() warnings being logged to syslog in 1.1.rc1 in nfs_flush_file_handle_cache_dir(): Feb 23 13:09:51 sx3 dovecot: [ID 107833 mail.error] IMAP(ran04): \ nfs_flush_file_handle_cache_dir: rmdir(/var/mail) failed: Device busy Manual for rmdir on Solaris states: EBUSY The directory to be removed is the mount point for a mounted file system. We are using /var/mail mounted from NFS, which explains the EBUSY return code. Not sure how you would be able to get the cache flushed in this situation. -- Dean Brooks dean(a)iglou.com

2 3

[Dovecot] 1.1rc1 "Transaction rolled back"?
by Ralf Hildebrandt 01 Mar '08

01 Mar '08

>From my logs: Feb 27 08:10:33 postamt dovecot: IMAP(username): expunge: uid=2793, box=Trash, msgid=<E2FEA6DFF2340C438369E79466FB7E94F43547(a)EXCHANGE01.charite.de>, size=3025 Feb 27 08:10:33 postamt dovecot: IMAP(username): expunge: uid=2794, box=Trash, msgid=<20080226140752B6F6EC3EF7$08D09877C3@REALTIMEPCR>, size=12833 Feb 27 08:10:33 postamt dovecot: IMAP(username): expunge: uid=2795, box=Trash, msgid=<8f63285b4b444b9839c94615c28bcd3347c46aec(a)origene.com>, size=20931 Feb 27 08:10:33 postamt dovecot: IMAP(username): expunge: uid=2796, box=Trash, msgid=<0118578B.8438D393(a)xms1-1.vtrnz.com>, size=12066 Feb 27 08:10:33 postamt dovecot: IMAP(username): expunge: uid=2797, box=Trash, msgid=<1204067704.28W488X7.30077(a)biologyproject.net>, size=3328 Feb 27 08:10:33 postamt dovecot: IMAP(username): expunge: uid=2798, box=Trash, msgid=<2a989b59b24e90a1f0fea02e3582ef6d(a)ionchannels.org>, size=10197 Feb 27 08:10:33 postamt dovecot: IMAP(username): expunge: uid=2799, box=Trash, msgid=<20080226183239684063.12829(a)mailmanager.icebase.net>, size=37658 Feb 27 08:10:33 postamt dovecot: IMAP(username): expunge: uid=2800, box=Trash, msgid=<200802271434.GKTB5350(a)monthly.smtp.com>, size=3717 Feb 27 08:10:33 postamt dovecot: IMAP(username): Transaction rolled back: Ignore last 8 changes Feb 27 08:10:33 postamt dovecot: IMAP(username): Disconnected: Too many invalid IMAP commands. bytes=16371917/34458424 a) What's "Transaction rolled back"? When does it happen? What does it do? Does it - in this case - UNDO the 8 expunges? b) What's "Too many invalid IMAP commands"? And when ist it being triggered? -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) snickebo(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de H�tte ich 10 Euro f�r jeden Analysten, der in 'Computerfragen' schon falsch lag - ich h�tte inzwischen meine Trauminsel mit halbnackten Frauen, viel Bier und ordentlich Mampfmampf.

2 1

[Dovecot] Update from 1.0.10 -> 1.1rc1 "Transaction rolled back"???
by Ralf Hildebrandt 01 Mar '08

01 Mar '08

Feb 23 19:48:14 postamt deliver(username): copy: uid=1, box=Dovecot Delivery Mail, dest=INBOX, msgid=<47C06A3F.3040101(a)charite.de>, size=423118 Feb 23 19:48:14 postamt deliver(username): msgid=<47C06A3F.3040101(a)charite.de>: saved mail to INBOX Feb 23 19:48:14 postamt deliver(username): Transaction rolled back: Ignore last 1 changes What does that "Transaction rolled back: Ignore last 1 changes" mean? The mail was delivered: # find . -type f | xargs fgrep "47C06A3F.3040101(a)charite.de" ./cur/1203792494.M9538P13658.postamt.charite.de,S=423118:2,S:Message-ID: <47C06A3F.3040101(a)charite.de> -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) snickebo(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de Security-wise, NT is a server with a "Kick me" sign taped to it.

2 1

[Dovecot] 1.1rc1 crash with backtrace
by Ralf Hildebrandt 01 Mar '08

01 Mar '08

I wrote an inotify based automatic backtrace generator -- Please do hate me, Timo :) dovecot-1.1rc1 (or rather the hg checkout) GNU gdb 6.7.1-debian Copyright (C) 2007 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu"... Using host libthread_db library "/lib/i686/cmov/libthread_db.so.1". Reading symbols from /lib/i686/cmov/libdl.so.2...Reading symbols from /usr/lib/debug/lib/i686/cmov/libdl-2.7.so...done. done. Loaded symbols for /lib/i686/cmov/libdl.so.2 Reading symbols from /lib/i686/cmov/libc.so.6...Reading symbols from /usr/lib/debug/lib/i686/cmov/libc-2.7.so...done. done. Loaded symbols for /lib/i686/cmov/libc.so.6 Reading symbols from /lib/ld-linux.so.2...Reading symbols from /usr/lib/debug/lib/ld-2.7.so...done. done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_trash_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_trash_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_fts_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_fts_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so Reading symbols from /lib/libgcc_s.so.1...done. Loaded symbols for /lib/libgcc_s.so.1 Core was generated by `/usr/local/libexec/dovecot/imap'. Program terminated with signal 6, Aborted. #0 0xb7f84410 in __kernel_vsyscall () #0 0xb7f84410 in __kernel_vsyscall () #1 0xb7e53f15 in raise () from /lib/i686/cmov/libc.so.6 #2 0xb7e55891 in abort () from /lib/i686/cmov/libc.so.6 #3 0x080ce499 in i_internal_fatal_handler (type=LOG_TYPE_PANIC, status=0, fmt=0x80e8f54 "Trying to close mailbox %s with open transactions", args=0xbfc561f4 "��\020\b\030bſ��\005\b�s\020\b\207\025\016\b\n") at failures.c:415 #4 0x080ce0ec in i_panic ( format=0x80e8f54 "Trying to close mailbox %s with open transactions") at failures.c:187 #5 0x0809fad6 in mailbox_close (_box=0x6) at mail-storage.c:471 #6 0x0805f9db in cmd_logout (cmd=0x8107930) at cmd-logout.c:18 #7 0x08061c59 in client_command_input (cmd=0x8107930) at client.c:546 #8 0x08061cee in client_command_input (cmd=0x8107930) at client.c:595 #9 0x08062483 in client_handle_input (client=0x8107388) at client.c:636 #10 0x0806269e in client_input (client=0x8107388) at client.c:691 #11 0x080d5d87 in io_loop_handler_run (ioloop=0x81039b0) at ioloop-epoll.c:201 #12 0x080d5038 in io_loop_run (ioloop=0x81039b0) at ioloop.c:301 #13 0x08069f3d in main (argc=) at main.c:293 -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) snickebo(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de DRM is Theft

2 2