- dovecot - dovecot.org

[Dovecot] Please help: LDAP configuration _almost_ works.
by Jack McKinney 18 Apr '08

18 Apr '08

Red Hat Linux release 7.2 (Enigma) OpenLDAP 2.3.38 Dovecot 1.0.12 SHORT VERSION ----- ------- Here is my dovecot-ldap.conf: hosts = ldap.lrtz dn = cn=varmail,ou=users,dc=lorentz,dc=com dnpass = ********* ldap_version = 3 auth_bind = yes pass_filter = (&(objectClass=inetOrgPerson)(mail=%Lu)) base = ou=users, dc=%Dd scope = onelevel I have tested using the above information with ldapsearch, and it works fine. However, when dovecot tries to authenticate the user, the LDAP server receives the query and responds to it (according to the LDAP log file), but dovecot just hangs there. 180 seconds later, it drops the IMAP client. E.g.: The dovecot log shows: Apr 3 08:13:21 fourier dovecot: auth(default): new auth connection: pid=15774 Apr 3 08:13:30 fourier dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Isecured^Ilip=x.x.x.x^Irip=y.y.y.y^Iresp=<hidden> Apr 3 08:13:30 fourier dovecot: auth(default): ldap(jackmc(a)lorentz.com,y.y.y.y): bind search: base=ou=users, dc=lorentz,dc=com filter=(&(objectClass=inetOrgPerson)(mail=jackmc(a)lorentz.com)) Apr 3 08:16:30 fourier dovecot: imap-login: Disconnected: Inactivity: method=PLAIN, rip=y.y.y.y, lip=x.x.x.x, TLS The OpenLDAP log shows that the query is received and that it returns a match: Apr 3 08:13:30 fourier slapd[14039]: conn=7 op=3 SRCH base="ou=users,dc=lorentz,dc=com" scope=1 deref=0 filter="(&(objectClass=inetOrgPerson)(mail=jackmc(a)lorentz.com))" Apr 3 08:13:30 fourier slapd[14039]: conn=7 op=3 SRCH attr=uid Apr 3 08:13:30 fourier slapd[14039]: conn=7 op=3 SEARCH RESULT tag=101 err=0 nentries=1 text= LONG VERSION ---- ------- My users login using their email address as username. Each domain has their own LDAP subtree. Each user has an entry in the ou=users subtree of the domain subtree, and has a mail: field (inetOrgPerson) listing their email address/login name. I am trying to use auth_bind: when I login with jackmc(a)lorentz.com, dovecot should search for mail=jackmc(a)lorentz.com in the onelevel below ou=users,dc=lorentz,dc=com and find me as "cn=Jack McKinney,ou=users,dc=lorentz,dc=com". I have created an entry in LDAP (varmail) that should be able to do this query. Indeed, from the command line, it works: ldapsearch -h ldap.lrtz -b 'ou=users, dc=lorentz, dc=com' -D 'cn=varmail,ou=users,dc=lorentz,dc=com' -x -W -s onelevel '(&(objectClass=inetOrgPerson)(mail=jackmc(a)lorentz.com))' Enter LDAP Password: # extended LDIF # # LDAPv3 # base <ou=users, dc=lorentz, dc=com> with scope oneLevel # filter: (&(objectClass=inetOrgPerson)(mail=jackmc(a)lorentz.com)) # requesting: ALL # # Jack McKinney, users, lorentz.com dn: cn=Jack McKinney,ou=users,dc=lorentz,dc=com objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson cn: Jack McKinney givenName: Jack McKinney sn: McKinney mail: jackmc(a)lorentz.com # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 It appears that dovecot performs the above query successfully, but then never uses the password and retrieved DN to attempt to bind and authenticate the user. Instead, it just times out. (See log files above in the SHORT VERSION). I tried to add pass_attrs, in case there was a bug in dovecot where it ignores the reply if there are no pass_attrs (even though none are needed), but it still fails the same way. Timo Sirainen suggested that I add a debug line to src/auth/db-ldap.c ldap_input() around line 372: msgid = ldap_msgid(res); // added line: i_info("LDAP: Received reply %d", msgid); I did this. Now, when the server first starts up, this line is logged. However, it is not logged when it queries the LDAP server as a result of an IMAP connection needing authentication. -- Jack McKinney GPG 1024D/99C6A174 jackmc(a)lorentz.com YM:lfaatsnat2006 AIM:jackmclorentz "There is no parameter that makes it impossible for you to perform still more excellently." -Mario Cuomo, on the lack of a clock in baseball

7 25

Re: [Dovecot] Mixing LDAP and static
by k bah 18 Apr '08

18 Apr '08

That didn't work for me: user_attrs = =home=/var/dovecot-test/home/%n,uid=user (at /etc/dovecot/dovecot-ldap.conf) ( /etc/dovecot/dovecot.conf: mail_location = mbox:/var/dovecot-test/data/%n~%d:INBOX=/var/dovecot-test/%n~%d:INDEX=/var/dovecot-test-no-quotas/index/%n~%d ) neither: user_attrs = uid=user,=home=/var/dovecot-test/home/%n neither: user_attrs = =home=/var/dovecot-test/home/%n on the log it says: dovecot: auth(default): ldap(user0027(a)mydomain.tld,1xx.xxx.xxx.x): user search: base=dc=mydomain,dc=tld scope=subtree filter=(&(objectclass=inetlocalmailrecipient)(mail=user0027(a)mydomain.tld)) fields= and at dovecot start up: Starting dovecot ILoading modules from directory: /usr/lib64/dovecot/modules/imap IModule loaded: /usr/lib64/dovecot/modules/imap/lib10_quota_plugin.so IModule loaded: /usr/lib64/dovecot/modules/imap/lib11_imap_quota_plugin.so IEffective uid=65534, gid=65534, home= using dovecot-1.0.5-6 on OpenSuSE 10.3. thanks = Arthritis Specialists in Magnetism Quality hand crafted jewelry with magnets. Necklaces, bracelets, shoe insoles and more. http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=dfcb5a2d4f25ae3051a9c94… -- Powered by Outblaze

3 2

[Dovecot] authentication troubles
by Albert Dengg 18 Apr '08

18 Apr '08

hi i have a strange problem with my dovecot installtion: i configured it to accept digest-md5 authentication only but for some reason mailclients (i tried mutt and thunderbird so far) want to log with PLAIN (which fails of course). authentication basically works, e.g. if i explicitly set set imap_authenticators="digest-md5 in .muttrc everything works... any idea what is going wrong? config attached below tia yours albert # /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps pop3s ssl_listen(default): *:22993 ssl_listen(imap): *:22993 ssl_listen(pop3): *:22995 ssl_cipher_list: ALL:!LOW login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login first_valid_uid: 107 last_valid_uid: 107 mail_location: maildir:%h/Maildir mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 namespace: type: private location: maildir:%h/Maildir inbox: yes auth default: mechanisms: digest-md5 realms: mailstore.nicenamecrew.com default_realm: mailstore.nicenamecrew.com username_format: %Lu verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: static args: uid=vmail gid=vmail home=/var/mail/virtual/%d/%n socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 group: vmail

2 2

[Dovecot] postfix, dovecot-lda, sieve & smartsieve not working on 1.1-rc4
by kjetil＠hoiseth.no 18 Apr '08

18 Apr '08

Seems there is a bug in 1.1-rc4 in regards to sieve/managesieve, this problem goes away if I downgrade to 1.0.13. Gentoo x86_64 2.6.18-028stab053 (OpenVZ) Intel(R) Core(TM)2 Quad CPU Q6600 Maildirs are not NFS mounted The VE in question runs daemons with the following USE flags; mail-mta/postfix-2.4.6-r2 USE="dovecot-sasl ipv6 ldap mailwrapper mysql pam ssl" net-mail/dovecot-1.0.13-r1 USE="ipv6 ldap managesieve mysql pam sieve ssl" Sieve rules are setup only in Smartsieve(1.0-RC2), running in Lighttpd(1.4.18-r3). --- # 1.0.13: /etc/dovecot/dovecot.conf protocols: imaps managesieve ssl_cert_file: /etc/ssl/private/hoiseth.no.pem ssl_key_file: /etc/ssl/private/hoiseth.no.key login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login mail_location: maildir:~/.maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(managesieve): /usr/lib64/dovecot/managesieve sieve_storage(default): sieve_storage(imap): sieve_storage(managesieve): ~/sieve sieve(default): sieve(imap): sieve(managesieve): ~/.dovecot.sieve auth default: passdb: driver: pam args: login userdb: driver: passwd --- 1.1-rc4; deliver(kjetil): Apr 04 15:17:43 Info: Loading modules from directory: /usr/lib/dovecot/lda deliver(kjetil): Apr 04 15:17:43 Info: Module loaded: /usr/lib/dovecot/lda/lib90_cmusieve_plugin.so deliver(kjetil): Apr 04 15:17:43 Info: maildir: data=/home/kjetil/.maildir deliver(kjetil): Apr 04 15:17:43 Info: maildir++: root=/home/kjetil/.maildir, index=, control=, inbox=/home/kjetil/.maildir deliver(kjetil): Apr 04 15:17:43 Info: msgid=<567340a538d370592ec2a6da4e0fcdf2(a)langtind.no>: saved mail to INBOX 1.0.13; deliver(kjetil): Apr 04 15:33:14 Info: Loading modules from directory: /usr/lib/dovecot/lda deliver(kjetil): Apr 04 15:33:14 Info: Module loaded: /usr/lib/dovecot/lda/lib90_cmusieve_plugin.so deliver(kjetil): Apr 04 15:33:14 Info: maildir: data=/home/kjetil/.maildir deliver(kjetil): Apr 04 15:33:14 Info: maildir: root=/home/kjetil/.maildir, index=/home/kjetil/.maildir, control=, inbox= deliver(kjetil): Apr 04 15:33:14 Info: cmusieve: Using sieve path: /home/kjetil/.dovecot.sieve deliver(kjetil): Apr 04 15:33:14 Info: cmusieve: Executing script /home/kjetil/.dovecot.sievec deliver(kjetil): Apr 04 15:33:14 Info: msgid=<4b15e68896a9ef204bf00482e948058f(a)langtind.no>: saved mail to priv I upgraded to 1.1-rc4 and indeed the problem re-occured, Id be happy to bring more info/ax to the VE if it helps nailing the issue.

2 1

[Dovecot] Dovecot LDA / Deliver question
by Stacy Trippe 18 Apr '08

18 Apr '08

Problem described: I am trying to get Postfix + Dovecot + MySQL setup to work together in a virtual mail hosting platform. I am running Postfix 2.3.x, and MySQL 5.0.x. I am trying to use Dovecot's LDA for delivery to the users vmail home directory -- usually under /var/vmail/domain.com/j/jdoe for home and /var/vmail/domain.com/j/jdoe/.maildir for mail location, using MAILDIR format. However, I cannot get Dovecot's LDA to write the maildir folders/files into the right location. It wants to write in MBOX format to /var/vmail/mail/inbox instead. When I force the mail_location variable...it just uses the system 'vmail' user (uid: 1101) and 'vmail' group (gid: 1101) that I assigned for the virtual mail user. mail_location = maildir:/var/vmail/%d/%1n/%n I am not sure where to go to troubleshoot Dovecot LDA...and how to turn up/down the verbosity of debug messages (albeit now I am logging the deliver info to /var/log/dovecot-deliver.log). Does anyone know what I am missing? Can Dovecot LDA be told how to deliver mail to the users maildir folder? Here is my postfix master.cf: ... dovecot unix - n n - - pipe flags=DRhu user=vmail argv=/usr/libexec/dovecot/deliver -f ${sender} Here is my postfix main.cf (as it pertains to dovecot LDA): virtual_transport = dovecot mailbox_command = /usr/libexec/dovecot/deliver smtpd_sasl_type = dovecot dovecot_destination_recipient_limit = 1 dovecot --version 1.0.rc15 dovecot -n # /etc/dovecot.conf log_path: /var/log/dovecot.log login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: SMTP ready. login_process_size: 64 login_processes_count: 5 login_max_connections: 512 mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %08Xv%08Xu pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login digest-md5 verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: passwd userdb: driver: prefetch userdb: driver: sql args: /etc/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = mysql connect = host=localhost dbname=mailsql user=mailquery password=m@1l default_pass_scheme = PLAIN-MD5 password_query = SELECT email as user, passwd AS password, concat('/var/vmail',homeDir) as userdb_home, 1101 AS userdb_uid, 1101 AS userdb_gid, concat('maildir:/var/vmail',mailDir) as userdb_mail FROM users WHERE (username = '%u' OR email = '%u' OR email = concat('%u','@domain.net')) AND status = 'A' AND type = 'M' user_query = SELECT concat('/var/vmail',homeDir) as home, 1101 AS uid, 1101 AS gid, concat('maildir:/var/vmail',mailDir) as mail FROM users WHERE username = '%u' .... The schema for my data table is as follows: +----------+--------------+------+-----+-------------------+-------+ | Field | Type | Null | Key | Default | Extra | +----------+--------------+------+-----+-------------------+-------+ | updated | timestamp | YES | | CURRENT_TIMESTAMP | | | username | tinytext | NO | | NULL | | | email | varchar(128) | NO | PRI | NULL | | | passwd | varchar(128) | YES | | NULL | | | name | tinytext | NO | | NULL | | | status | char(1) | NO | | A | | | type | char(1) | NO | | M | | | homeDir | longtext | YES | | NULL | | | mailDir | longtext | YES | | NULL | | | newEmail | varchar(128) | NO | | NULL | | +----------+--------------+------+-----+-------------------+-------+ Any help at all would be greatly appreciated! Thanks, Stacy

2 1

[Dovecot] Feature request
by Ruud Boon 18 Apr '08

18 Apr '08

Hi! I hope I'm using the right mailing for a feature request. I'm using dovecot on my server for a year now and I'm very happy with it. Its extremely stable and fast. Ok what is my situation why I'm asking a feature.. Users are retrieving mail using pop3 over the external ip address. When the user connects to there webmail. The webmail client (Squirrelmail) is using imap on the localhost. I would like to give some users the option to use imap over the external ip, I want to set option in my MySql backend configuration. As far as I know there isn't a possible solution on dovecot right now that's why I hope you can build a extra config parameter that gives me the possibility to allow users to retrieve email by imap by ip. So all users can do an imap request on localhost (for webmail) and some user are allowed to do an imap request over the external ip. I hope that my request is clear and I'm posting in the right group. With regards, Ruud Boon

3 2

[Dovecot] Dovecot sending OK while idling
by John Temples 18 Apr '08

18 Apr '08

When an IDLE command is active, Dovecot sends an OK every two minutes. Is it possible to disable this? I'm trying to eliminate unnecessary traffic on a link that's charged by the kilobyte. Using Dovecot 1.0.7. -- John W. Temples, III

3 2

[Dovecot] How to log login errors?
by Sven Schmidt 18 Apr '08

18 Apr '08

Hi! I used "auth_debug=yes" and "auth_debug_passwords=yes". But I only see connects and disconnects: Apr 11 09:17:43 dovecot: POP3(info(a)xxxx.xx): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Apr 11 09:17:43 dovecot: POP3(info(a)xxxx.xx): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Apr 11 09:18:11 dovecot: pop3-login: Login: user=<pop-test(a)xxxx.xx>, method=PLAIN, rip=80.146.3.204, lip=87.106.66.95

2 1

[Dovecot] Single quote email addresses
by Guy 18 Apr '08

18 Apr '08

Hi, I've just been told that I need to make our mail server cater to accounts with single quotes. Has anyone set dovecot up to do this or know of any documentation/howto on it, assuming it's possible at all. I'm running dovecot 1.0.5 on Ubuntu 7.10 if that makes much of a difference. Thanks for any help anyone can give. Guy -- Don't just do something...sit there!

2 1

[Dovecot] dovecot + qmail - deliver not working...
by Peter Van den Wildenbergh 18 Apr '08

18 Apr '08

Hi List, I have a working qmail server and installed dovecot trying to setup vmail... it's not going as expected... What is working: qmail I can log-in using Thunderbird (IMAP) from dovecot-info.log dovecot: Apr 10 21:19:54 Info: imap-login: Login: user=<peter(a)---.com>, method=PLAIN, rip=192.168.10.50, lip=192.168.10.188 Config bits: Ubuntu (command-line system) 7.10 ls -l /home drwxr-xr-- 2 vmail vmail ... vmail UID GID for vmail = 500 Content of /etc/dovecot/dovecot.conf protocols = imap imaps log_path = /var/log/dovecot.log info_log_path = /var/log/dovecot-info.log ssl_disable = yes disable_plaintext_auth = no mail_location = maildir:~/Maildir dotlock_use_excl=yes maildir_copy_with_hardlinks=yes auth_verbose = yes auth default { mechanisms = plain passdb passwd-file { args = /etc/dovecot/passwd } userdb static { args = uid=500 gid=500 home=/home/vmail/%d/%n } } cat /etc/dovecot/passwd peter@meta-logica.com:{SSHA}iDMg--- peter@wilboo.org:{SSHA}iDMg--- cat /var/qmail/control/defaultdelivery |/var/qmail/bin/preline -f /usr/lib/dovecot/deliver -d $EXT@$USER (LWQ setup - verified location of 'deliver') Looks like local delivery for qmail is NOT working :-( from the logs: starting delivery 8: msg 3752525 to local peter@ma--- status: local 1/10 remote 0/20 delivery 8: deferral: Can't_open_log_file_/var/log/dovecot.log:_Permission_denied/ status: local 0/10 remote 0/20 status: exiting permission on /var/log/dovecot.log = -rw-r--r-- 1 vmail vmail 728 2008-04-10 21:36 /var/log/dovecot.log qmailctl stat messages in queue: 7 messages in queue but not yet preprocessed: 3 So I assume that the inability to 'log' is stopping the delivery process... Couldn't find anything obvious on google. Any suggestions? Regards Peter

2 1