- dovecot - dovecot.org

[Dovecot] minor issue - dovecot -n output with 1.1.beta11
by arvids 21 Dec '07

21 Dec '07

Hello, when running diff for 'dovecot -n' outputs from beta10 and beta11(for the same config file), I noticed that 'dovecot -n' beta11 output does not show anymore the following parameters, which are set to non-default values(and which 'dovecot -a' shows): login_processes_count login_max_processes_count first_valid_uid first_valid_gid cache_size cache_ttl cache_negative_ttl mode(from auth default section) And by the way, parameters from lda section are not showed both with -a and -n. But it is so already for a long time, so I assume that it is OK :) Regards, Arvids

2 1

[Dovecot] Permission for /var/run/dovecot
by Dr. Ashok N. Ullal 21 Dec '07

21 Dec '07

I have just installed my mail server on a Ubuntu Linux V.7.10 box with sendmail and dovecot imap from the Ubuntu packages. Each time the machines boots, I get the following messages: Starting mail server: dovecotWarning: Fixing permissions of /var/run/dovecot to be world readable Warning: Corrected permissions for login directory /var/run/dovecot/login After the boot the permissions visible are: drwxr-xr-x root root /var/run/dovecot drwxr-x--- root dovecot /var/run/dovecot/login What permissions do I need to set so that the warnings do not appear?

3 2

[Dovecot] Dirsize quotas with 1.1beta9
by Dean Brooks 21 Dec '07

21 Dec '07

Hi, Anyone able to get 'dirsize' quotas to work properly under 1.1beta9? I can get them to reflect the size of the INBOX properly, but it never seems to be adding up the size of the files in the folder directory itself. I'll keep hammering away at it if others are able to use dirsize with no problems, but wanted to check first. -- Dean Brooks dean(a)iglou.com

2 1

[Dovecot] V1.1beta11 compile problem
by Stewart Dean 21 Dec '07

21 Dec '07

Using IBM's C for AIX V9 with Ralf Becker's AIX adaption, I see this: + exec /usr/vac/bin/xlc -DHAVE_CONFIG_H -I. -I. -I../.. -I/opt/freeware/include/ openssl -g -c close-keep-errno.c -M source='compat.c' object='compat.o' libtool=no DEPDIR=.deps depmode=aix /bin/sh ../../depcomp /usr/local/dovecot/dovecot-cc -DHAVE_CONFIG_H -I. -I. -I ../.. -I/opt/freeware/include/openssl -g -c compat.c + exec /usr/vac/bin/xlc -DHAVE_CONFIG_H -I. -I. -I../.. -I/opt/freeware/include/ openssl -g -c compat.c -M "compat.c", line 64.71: 1506-275 (S) Unexpected text ';' encountered. "compat.c", line 64.23: 1506-238 (S) Function argument cannot be type void. make: 1254-004 The error code from the last command is 1. Is this enough or do you need more....? -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

2 3

[Dovecot] dovecot 1.1beta11 auth problems
by Moritz Mertinkat 21 Dec '07

21 Dec '07

Hi everybody, I've problems running Dovecot 1.1beta11 using vpopmail userdb/passdb (Dovecot 1.08 however works just fine). It looks like as if the auth process gets killed somehow... Any ideas what might be wrong? Dec 12 20:02:32 vs247165 dovecot: Dovecot v1.1.beta11 starting up Dec 12 20:02:32 vs247165 dovecot: Generating Diffie-Hellman parameters for the first time. This may take a while.. Dec 12 20:03:06 vs247165 dovecot: imap-login: Waiting for SSL parameter file ssl-parameters.dat Dec 12 20:03:46 vs247165 dovecot: ssl-build-param: SSL parameters regeneration completed Dec 12 20:03:47 vs247165 dovecot: imap-login: Disconnected: rip=a.a.a.a, lip=b.b.b.b, TLS handshaking Dec 12 20:04:03 vs247165 dovecot: child 32051 (auth) killed with signal 11 Dec 12 20:04:03 vs247165 dovecot: imap-login: Internal login failure: user=<postmaster(a)mydomain.de>, method=PLAIN, rip=a.a.a.a, lip=b.b.b.b, TLS Dec 12 20:04:04 vs247165 dovecot: imap-login: Internal login failure: user=<postmaster(a)mydomain.de>, method=PLAIN, rip=a.a.a.a, lip=b.b.b.b, TLS Dec 12 20:04:04 vs247165 dovecot: child 1503 (auth) killed with signal 11 # /usr/local/dovecot-1.1/sbin/dovecot -n protocols: imap login_dir: /usr/local/dovecot-1.1/var/run/dovecot/login login_executable: /usr/local/dovecot-1.1/libexec/dovecot/imap-login mail_location: maildir:/var/lib/vpopmail/domains/%d/%n/Maildir auth default: passdb: driver: vpopmail userdb: driver: vpopmail Regards, Moritz

2 2

[Dovecot] Security hole #4: Specific LDAP + auth cache configuration may mix up user logins
by Timo Sirainen 21 Dec '07

21 Dec '07

Somehow I doubt there are any Dovecot setups left that unknowingly have this problem, but it still counts as a security hole. The possibility to cause this problem exists in Dovecot v1.0.rc11 and later. If you use: 1. passdb ldap with settings: - auth_bind = yes - auth_bind_userdn = no - base containing %variables required for unique user identification, e.g. base = dc=%d,dc=org - pass_filter not containing all %variables required for unique user identification - pass_attrs returning user-specific settings, such as user's home directory 2. userdb prefetch 3. auth_cache_size non-zero (0 is default) If two users with the same password and same pass_filter variables log in within auth_cache_ttl seconds (1h by default), the second user may get logged in with the first user's cached pass_attrs. For example if pass_attrs contained the user's home/mail directory, this would mean that the second user will be accessing the first user's mails. You most likely would have noticed this already by wondering why logins keep failing, unless pass_filter used also some %variables that most of the time uniquely identifies the user. For example %r (remote IP address) or %n (username without domain). You can fix this by upgrading to v1.0.10 (to be released soon), or using this patch: http://hg.dovecot.org/dovecot-1.0/raw-rev/2cedab21cd6d

2 2

[Dovecot] dovecot-auth: returning incorrect maildir for user (user seeing another user's mail)
by Brendan 20 Dec '07

20 Dec '07

timo, here is an bizarre bug for you: i had (foolishly, it turns out) configured dovecot-auth to do ldap authentication binding with a prefect userdb (configs at end of message). everything worked fine, although with huge numbers of pop logins per second we started to see some pileup in the pop3-login processes as they were all waiting for ldap responses on the single ldap connection. the auth caching was never getting hit (some interaction with the prefetch, i assume), but everything worked fine. or so i thought. we had complaints from a user saying they would occasionally pop another user's mail. after much digging, it turned out that if two or more users: - were logged/logging in at the same time - had the same password - got "lucky" then one of the users would occasionally end up with the other users' homedir/maildir. it didn't happen often (maybe once every 500-1000 login attempts), but it did happen. (i ended up writing a script that would pound the pop3 server with logins and look for the wrong number of messages in the inbox. it was not easy to trigger). i'd already realized that having the auth bind do a search and return that to prefetch was a bad idea (since it used a single ldap connection) and had already built a new config that used auth binding and userdb ldap - when we switched over to that config we were unable to replicate the problem again. so, it's not an issue for us right now. i've confirmed that the ldap server never returns the wrong homedir, so it must have been getting mixed up somehow in dovecot-auth. but it did seem like something you might want to dig into a bit, as it might indicate that something could be amiss somewhere in the auth code. that the problem only occured when the users had the same password seemed truly bizarre.. sorry i can't provide more details, it was very difficult to reproduce (and i was reproducing in a production environment and couldn't turn debug up). the auth section from the poorly behaving dovecot.conf: auth default { mechanisms = plain login passdb ldap { args = /opt/dovecot-1.0.3/etc/dovecot-ldap.conf } userdb prefetch { } user = mail } the poorly behaving dovecot-ldap.conf: hosts = ldap ldap_version = 3 auth_bind = yes base = uid=%u,o=imap user_global_uid = 8 user_global_gid = 8 dn = uid=imap@dovecot,o=imap dnpass = ****** pass_filter = (&(proto=%s)(remoteip=%r)(localip=%l)(mech=%m)(pid=%p)) pass_attrs = home=userdb_home,quota=userdb_quota,nologin=nologin,reason=reason,user=user note: the ldap server does some custom processing based on the filter - the filter was the easiest way to get them passed to it. (in case that looks a little wierd :)

2 1

[Dovecot] Wiki license
by Timo Sirainen 20 Dec '07

20 Dec '07

Any suggestions as to what license to use for wiki.dovecot.org? I should have specified this a long time ago, but luckily(?) most of the content is written by me, so I don't think there are going to be problems. The main choices are: a) GNU Free Documentation License b) Creative Commons (Attribution-Share Alike?) It could also be dual-licensed to both to maximize the distribution possibilities.

4 4

[Dovecot] How to change dovecot's bounce message
by Markus Reymann 20 Dec '07

20 Dec '07

Hi, I am using the quota plugin of dovecot. Dovecot is running as LDA for postfix. When the system is running into the quota limit, the bounce message reads as follows: > Your message was automatically rejected by Dovecot Mail Delivery Agent. > The following reason was given: > Quota exceeded Can I somehow change this message, to make it more userfriendly? Postfix has a possibilty to change the bounce_template_file. Best regards, Markus

2 1

[Dovecot] Massive Dovecot auth errors too strange for me
by Rudi K. 20 Dec '07

20 Dec '07

Hello out there, im running Dovecot on "ubuntu Dapper" serving pop3 only in maildir-style, but the dove-auth-process refuses "answers" to the deliver or login-process from time to time, (several times a day), and I have no glue whats going on and why ... Debbugging password-Auth surprised me, as the transmitted password IS correct and allows an successfull authenification lots of hundreds times a day.... but suddenly runs into trouble .. here the logs ... (please take care..., I´m a newbie ;-) Dec 18 10:25:05 server dovecot: pop3-login: Disconnected: Inactivity: method=PLAIN, rip=91.9.201.219, lip=83.154.61.77 Dec 18 10:25:07 server deliver(user.yxz(a)somedom.de): User request from dovecot-auth timed out Dec 18 10:25:07 server postfix/pipe[22156]: 63861180062A7: to=<user.yxz(a)somedom.de>, relay=dovecot, delay=60, status=deferred (temporary failure) Dec 18 10:33:09 server dovecot: auth(default): ssha_verify(info(a)mydom.de): invalid SSHA base64 decode Dec 18 10:33:09 server dovecot: auth(default): cache(info(a)mydom.de,84.166.106.150): Password mismatch Dec 18 10:33:09 server dovecot: auth(default): cache(info(a)mydom.de,84.166.106.150): SSHA(1234) != '1234' Dec 18 10:33:11 server dovecot: auth(default): client out: FAIL^I56^Iuser=info(a)mydom.de Dec 18 10:33:11 server dovecot: auth(default): client out: FAIL^I57^Iuser=info(a)mydom.de root@server:~# dovecot --version 1.0.rc17 root@server:~# dovecot --build-options Build options: ioloop=poll notify=dnotify ipv6 openssl SQL drivers: mysql postgresql sqlite Passdb: checkpassword ldap pam passwd passwd-file shadow sql Userdb: checkpassword ldap passwd prefetch passwd-file sql static root@server:/etc/dovecot# grep -v '^ *$#.*$\?$' dovecot-ldap.conf hosts = localhost dn = cn=admin,dc=jdbit,dc=de dnpass = auth_bind = yes ldap_version = 3 base = ou=mailsystem,dc=jdbit,dc=de scope = subtree user_attrs = uid=user,userPassword=password user_filter = (&(objectClass=ekitsMailAccount)(|(uid=%u)(userAlias=%u))) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=ekitsMailAccount)(|(uid=%u)(userAlias=%u))) default_pass_scheme = SSHA user_global_uid = vmail user_global_gid = vmail root@server:~# dovecot -n # /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: pop3 listen: mail.mydom.de disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/pop3-login login_greeting: mail.mydom.de POP3-Server ready login_process_size: 64 login_processes_count: 64 first_valid_uid: 5000 last_valid_uid: 5000 first_valid_gid: 5000 last_valid_gid: 5000 mail_extra_groups: mail mail_location: maildir:/var/spool/dovecot/mail/%Ld/%Ln mail_executable: /usr/lib/dovecot/pop3 mail_process_size: 384 mail_plugin_dir: /usr/lib/dovecot/modules/pop3 pop3_uidl_format: %08Xu%08Xv pop3_client_workarounds: outlook-no-nuls oe-ns-eoh auth default: cache_ttl: 0 user: nobody worker_max_count: 60 passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: master: path: /var/run/dovecot/dovecot-auth-master mode: 384 user: vmail

2 1