- dovecot - dovecot.org

[Dovecot] CRAM-MD5 Password Generation Algorithm
by Douglas Willcocks 17 Apr '08

17 Apr '08

Hi, I'm just in the middle of setting up dovecot to serve IMAPS -- Actually I've finished apart from one thing: CRAM-MD5 passwords. I'm using SQL as a backend for the password storage, and I don't want to store the passwords in plaintext. I've also configured dovecot to be rather restrictive when it comes to authentication methods (only CRAM-MD5 is allowed). To generate the passwords to go into the database I can use the dovecotpw utility, but I'm wanting to stick some sort of minimal admin interface on the server to be able to manage the users etc without having to use the CLI. I've looked at the theoretical explanation of the hashing algorithm, and I've read through the source code that dovecotpw uses to generate the passwords with the intent of creating a higher level language library (Perl, Ruby, PHP ... whatever)) to generate passwords, but I don't seem to be able to replicate the functionality, and there don't seem to be any existing libraries that generate consistent results (that I've found). I don't have that much experience with C, and so I'm sure that I must have misunderstood how dovecotpw does its stuff. Perhaps someone could explain how the algorithm works? Or point me in the right direction? Thanks, Douglas Willcocks

4 11

[Dovecot] Dovecot-deliver lookup fails
by Wouter Amsterdam 17 Apr '08

17 Apr '08

Hi all, I'm still trying to get Dovecot-deliver to work in my config. I have found the problem to be in the maildir lookup for Dovecot-deliver as logged in /var/log/maillog: "Apr 15 16:30:34 termserv dovecot: auth(default): static(user(a)zesgoes.nl): passdb doesn't support lookups, can't verify user's existence" The thing I don't get, is that if I remove the virtual_transport modifications in /etc/postfix/master.cf and /etc/postfix/main.cf and the socket listen in /etc/dovecot.conf, all works well. So dovecot has no problems looking up my users on a LDAP server as a passdb backend, but failes when using the same passdb for dovecot-deliver. How come? TIA, Wouter

2 1

[Dovecot] Multiple ssl certificates
by Wojciech Matys 17 Apr '08

17 Apr '08

Hello, I wonder if there is some possibility to force dovecot to use more than one ssl certificate. I would like to use a few certficates: one per IP We are hosting many different domains and I had to use stunnel to ensure encrypted connection for our clients using different certificates. But stunnel isn't a good solution and sometimes I need to restart stunnels because of some of it's processes hangs - after some improvements like setting ulimit it is better now but still it is not a permanent soulution. I would like to use is: 1.1.1.1 - certificate nr1 2.2.2.2 - certificate nr2 ..... Any suggestion?

2 1

Re: [Dovecot] pop3 & imap
by tommy.s＠op.pl 17 Apr '08

17 Apr '08

> Ok, so I wonder how labels in gmail works :) one mail folder, you use lables to filter mails to be (not) seen by the mail client. Of course, one can virtualize folders by returning any message with a specific label in a virtual IMAP folder of that name. >>BTW: There was some talk about a virtual trashbin, "virtually" containing >>all messages marked as deleted in all folders. It's the same. >>Bye, >>- -- >>Steffen Kaiser Thanks for your answer,

1 0

[Dovecot] pop3 & imap
by Tommy 17 Apr '08

17 Apr '08

Hi, I use dovecot as pop3 and imap(squirrelmail) server. When I create a folder through webmail and set some sieve rules(fileinto for example), messages will be delivered to that folder by lda, but will not be visibe for pop clients. Is it possible to download these messages ? (Dovecot 1.0, debian etch) regards

4 3

[Dovecot] postfix virtual maildir
by Gert Cuykens 17 Apr '08

17 Apr '08

my postfix setup http://code.google.com/p/appwsgi/wiki/smtp my dovecot setup http://code.google.com/p/appwsgi/wiki/imap root@localhost:~# /etc/postfix/test/root 220 localhost.localdomain ESMTP Postfix (Ubuntu) 250-localhost.localdomain 250-PIPELINING 250-SIZE 10240000 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN 235 2.7.0 Authentication successful 250 2.1.0 Ok 250 2.1.5 Ok 354 End data with <CR><LF>.<CR><LF> 250 2.0.0 Ok: queued as E19B649016D 221 2.0.0 Bye root@localhost:~# /etc/dovecot/test/root * OK Dovecot ready. . OK Logged in. . LIST "" "*" Apr 9 13:01:58 localhost postfix/smtpd[9345]: connect from localhost[127.0.0.1] Apr 9 13:01:58 localhost dovecot: auth-worker(default): mysql: Connected to 127.0.0.1 (mail) Apr 9 13:01:58 localhost postfix/smtpd[9345]: E19B649016D: client=localhost[127.0.0.1], sasl_method=PLAIN, sasl_username=root@vlocalhost Apr 9 13:01:58 localhost postfix/cleanup[9349]: E19B649016D: message-id=<20080409110158.E19B649016D(a)localhost.localdomain> Apr 9 13:01:58 localhost postfix/qmgr[11316]: E19B649016D: from=<root@vlocalhost>, size=359, nrcpt=1 (queue active) Apr 9 13:01:58 localhost postfix/smtpd[9345]: disconnect from localhost[127.0.0.1] Apr 9 13:01:58 localhost postfix/virtual[9350]: E19B649016D: to=<root@vlocalhost>, relay=virtual, delay=0.03, delays=0.02/0.01/0/0.01, dsn=2.0.0, status=sent Apr 9 13:01:58 localhost postfix/qmgr[11316]: E19B649016D: removed Apr 9 13:02:24 localhost dovecot: imap-login: Login: user=<root@vlocalhost>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Apr 9 13:12:19 localhost postfix/qmgr[11316]: BD567490191: from=<root@vlocalhost>, size=359, nrcpt=1 (queue active) Apr 9 13:12:19 localhost postfix/virtual[18607]: BD567490191: to=<root@vlocalhost>, relay=virtual, delay=7037, delays=7037/0.01/0/0.01, dsn=2.0.0, status=sen Apr 9 13:12:19 localhost postfix/qmgr[11316]: BD567490191: removed Apr 9 13:18:51 localhost dovecot: IMAP(root@vlocalhost): Connection closed So no erros at all but dovecot just ignores my incoming mail root@localhost:~# ls -al /var/mail/vlocalhost/root/ total 20 drwx------ 5 5001 5001 4096 2008-04-09 12:19 . drwx------ 3 5001 5001 4096 2008-04-09 12:19 .. drwx------ 2 5001 5001 4096 2008-04-09 12:19 cur drwx------ 2 5001 5001 4096 2008-04-09 13:22 new drwx------ 2 5001 5001 4096 2008-04-09 13:22 tmp root@localhost:~# ls -al /var/mail/vlocalhost/root/new total 84 drwx------ 2 5001 5001 4096 2008-04-09 13:22 . drwx------ 5 5001 5001 4096 2008-04-09 12:19 .. -rw------- 1 5001 5001 441 2008-04-09 12:19 1207736352.V802I42434dM422151.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:22 1207736539.V802I424350M438766.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:22 1207736539.V802I424351M442839.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:27 1207736839.V802I424352M458479.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:32 1207737139.V802I424353M475024.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:32 1207737139.V802I424354M479117.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:32 1207737139.V802I424355M484827.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:32 1207737139.V802I424356M488137.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:32 1207737139.V802I424357M495435.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:37 1207737439.V802I424472M506944.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:37 1207737439.V802I424473M511500.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:37 1207737439.V802I424474M516792.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:37 1207737439.V802I424475M518515.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:42 1207737739.V802I424476M535074.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:47 1207738039.V802I424477M550421.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 12:52 1207738339.V802I424478M566532.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 13:01 1207738918.V802I424479M942873.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 13:12 1207739539.V802I42447aM958350.localhost.localdomain -rw------- 1 5001 5001 441 2008-04-09 13:22 1207740139.V802I42447bM974462.localhost.localdomain root@localhost:~# So what can i do to see some listing of my new mail ?

2 2

[Dovecot] how to link antispam server & mail server?
by Allen Sim 17 Apr '08

17 Apr '08

Hi; I just installed antispam server & quarantine system in a machine, and mail server in another machine. I tested the mail server, it works ok! can send in & out the mail properly.. how can i link my mail server and antispam togather? Please advice ThankYou Regards Allen

2 1

[Dovecot] LDAP
by Wojtek Bogusz 15 Apr '08

15 Apr '08

hi. i am trying to setup dovecot imap server with users in LDAP. but i get "Internal login failure". can you help please? it is probably something obvious. thank you. Wojtek i am using version 1.0.rc17 # /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps imap ssl_cert_file: /etc/apache2/ssl/server.pem ssl_key_file: /etc/apache2/ssl/server.key disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable: /usr/lib/dovecot/imap-login login_greeting_capability: yes mail_extra_groups: mail mail_location: maildir:/home/MAIL/%u imap_client_workarounds: tb-extra-mailbox-sep auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf # /etc/dovecot/dovecot-ldap.conf hosts = localhost dn = uid=root,ou=Users,dc=frontline dnpass = [user root plain text password here] auth_bind = yes auth_bind_userdn = uid=%u,ou=Users,dc=frontline ldap_version = 3 base = ou=Users,dc=frontline scope = subtree user_attrs = homeDirectory=home,uidNumber=uid user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%u)) default_pass_scheme = MD5 user_global_uid = dovecot user_global_gid = dovecot in logfile i got this when i try to login: # /var/log/mail.info Mar 15 16:13:25 base dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Ilip=192.168.0.202^Irip=192.168.0.200 Mar 15 16:13:25 base dovecot: auth(default): client out: CONT^I1^I Mar 15 16:13:25 base dovecot: auth(default): client in: CONT^I1^IAHdvanRlawBiZWR6aWUgZG9icnpl Mar 15 16:13:25 base dovecot: auth(default): ldap(wojtek,192.168.0.200): bind: dn=uid=wojtek,ou=Users,dc=frontline Mar 15 16:13:25 base dovecot: auth(default): client out: OK^I1^Iuser=wojtek Mar 15 16:13:25 base dovecot: auth(default): master in: REQUEST^I1^I24908^I1 Mar 15 16:13:25 base dovecot: auth(default): ldap(wojtek,192.168.0.200): user search: base=ou=Users,dc=frontline scope=subtree filter=(&(objectClass=*)(u id=wojtek)) fields=homeDirectory,uidNumber Mar 15 16:13:25 base dovecot: auth(default): ldap(wojtek,192.168.0.200): Authenticated user not found Mar 15 16:13:25 base dovecot: auth(default): userdb(wojtek,192.168.0.200): user not found from userdb Mar 15 16:13:25 base dovecot: auth(default): master out: NOTFOUND^I1 Mar 15 16:13:25 base dovecot: imap-login: Internal login failure: user=<wojtek>, method=PLAIN, rip=192.168.0.200, lip=192.168.0.202

3 6

Re: [Dovecot] A little assistance with Sieve
by cam＠ellisonpsychology.ca 15 Apr '08

15 Apr '08

> From what I see here I am not quite sure whether you have understood > the ManageSieve protocol. The putscript command as specified above > expects you to provide 2049 bytes of script directly after entering the > command. It will not accept other commands until it has fully read the > 2049 bytes. (Refer to the specification > http://tools.ietf.org/id/draft-martin-managesieve-08.txt) The listing > above shows no script and a logout command in stead. You indicate that > you have to cancel the connection using Ctrl-C which is consistent with > that behavior. > > The following similar protocol session should show how it is done with a > trivially small script: > > OK "Logged in." > CAPABILITY > "IMPLEMENTATION" "dovecot" > "SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags > notify include envelope body relational regex subaddress copy" > OK "Capability completed." > PUTSCRIPT "hotseflots" {6+} > keep; > OK "Putscript completed." > GETSCRIPT "hotseflots" > {6} > keep; > OK "Getscript completed. > SETACTIVE "hotseflots" > OK "Setactive completed." > LISTSCRIPTS > "phpscript" > "hotseflots" ACTIVE > "frop" > "ingo" > "fruts" > OK "Listscripts completed." > > BTW, it is not useful to upload a script called .dovecot.sieve on the > server. For managesieve, the .dovecot.sieve script (as looked for by the > Sieve plugin) is a symbolic link that points to the actual active script > in the sieve storage directory. That also explains the warning in your > follow-up e-mail, indicating that a normal file is still in place. When > you upload and activate a new script, the situation is resolved. The > regular file previously called .dovecot.sieve is moved to the sieve > directory as dovecot-orig.sieve (and listed as dovecot-orig). However, > if you consider your current sieve script to be important you are > advised to back it up before uploading and activating a script through > managesieve. OK. I understand all this. Thank you for the reference to the specification. Apart from the wrong name, I was using PUTSCRIPT instead of GETSCRIPT. Now, where do I have to put the scripts to GET them? My home directory does not work, nor do the /var/mail/user/ and /var/mail/user/Maildir directories. I get a "Script does not exist" response, though the script is in all three locations. Thank you for all the assistance Cam -- Cam Ellison, PhD RPsych (BC #01417) Cam Ellison & Associates Ltd. 3446 Beach Avenue Roberts Creek BC V0N 2W2 Phone 604.885.4806 Fax 694.885.4809 Cell 604.989.0635

4 8

[Dovecot] dovecot-deliver auth-master error
by Wouter Amsterdam 15 Apr '08

15 Apr '08

Hi all, I'm trying to get the sieve plugin to work, but with little result. I'm following http://wiki.dovecot.org/LDA, http://wiki.dovecot.org/LDA/Postfix and http://wiki.dovecot.org/LDA/Sieve but it won't work. As I have virtual users from several virtual domains, I added the "virtual users - with lookup" section from http://wiki.dovecot.org/LDA, but now dovecot fails to start. My dovecot.conf is as follows: # 1.0.13: /etc/dovecot.conf login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:/data/mail/mydomain/%Ln maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: username_format: %Lu debug: yes debug_passwords: yes passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: static args: uid=5000 gid=5000 home=/var/mail/vmail socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: sieve: /home/virtual/%u/sieve The problem seems to be in the auth-master path, for /var/log/maillog shows: Apr 14 16:14:44 termserv dovecot: Dovecot v1.0.13 starting up Apr 14 16:14:44 termserv dovecot: auth(default): unlink(/var/run/dovecot/auth-master) failed: Is a directory Apr 14 16:14:44 termserv dovecot: Auth process died too early - shutting down Apr 14 16:14:44 termserv dovecot: child 12385 (auth) returned error 89 Can anyone point me in the right direction? TIA, Wouter

2 2