- dovecot - dovecot.org

[Dovecot] outlook2003 fails sasl authentication
by Johan Hendriks 13 Mar '08

13 Mar '08

Hello all i have postfix running with dovecot-sasl and mysql as a backend. It all runs good. I run into trouble as where outlook 2003 fails to authenticate when sending e-mail. I have thunderbird outlook2007 and 2003 clients. The tunderbird and 2007 clients are working OK, the outlook2003 client get the relay access denied message. In the postfix log i see it is not initiating sasl they all use pop i use dovecot 1.0.13 this is my posfix part of sasl smtpd_sasl_auth_enable = yes smtpd_sasl_exceptions_networks = $mynetworks broken_sasl_auth_clients = yes smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination permit smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth and this is my dovecot sasl part # dovecot SASL socket listen { client { # Assuming the default Postfix $queue_directory setting path = /var/spool/postfix/private/auth mode = 0660 # Assuming the default Postfix user and group user = postfix group = postfix } } Am i doing something wrong? I guess if it is not configured right outlook 2007 and thunderbird will fail also! regards, Johan Hendriks

3 4

[Dovecot] interesting note - not sure just how to take care of this one
by Joseph Norris 12 Mar '08

12 Mar '08

Hello all, the dovecot -> ldap connection is working correctly but I notice something in my maillog that is disturbing: dovecot.conf in the passdb section I have passdb passwd { } then it drops down into the ldap stuff. The user gets validated via this first and if it fails passes on to the ldap stuff. the problem is: in the file the user's unencrypted password is showing up as follows: Mar 12 11:24:41 malaga dovecot: auth(default): pam(jnorris,XXX.XXX.XXX.XXX): pam_authenticate() failed: Authentication failure Mar 12 11:24:41 malaga dovecot: auth(default): passwd(jnorris,XXX.XXX.XXX.XXX): lookup Mar 12 11:24:41 malaga dovecot: auth(default): passwd(jnorris,XXX.XXX.XXX.XXX): Password mismatch Mar 12 11:24:41 malaga dovecot: auth(default): passwd(jnorris,XXX.XXX.XXX.XXX): CRYPT("the uncrypted password in plain text here") != 'x' is there a way to disable this? thanks. -- Cell: 209.201.3410 Desk: 209.228.4576 email: jnorris(a)ucmerced.edu #Joseph Norris (Linux/Apache/Mysql/Perl - what else is there?) print @c=map chr $_+100,(6,17,15,16,-68,-3,10,11, 16,4,1, 14,-68,12,1,14,8, -68,4,-3,-1,7,1,14,-68, -26,11,15,1,12, 4,-68,-22,11,14,14,5,15,-90);

2 1

[Dovecot] IMAP storage - mail_location = maildir:~/Maildir:mbox:~/mail/
by Tim Alberts 12 Mar '08

12 Mar '08

I'm moving to IMAP and trying to understand all the details of where to save email. The system is CentOS running sendmail - procmail which delivers as: DEFAULT=$HOME/Maildir/ I'm trying also to use Usermin as the webmail client. I can get mail to deliver to $HOME/Maildir/ and I can get clients (thunderbird outlook etc) to view them. However Usermin seems stuck with saving 'Drafts' 'Sent' and 'Trash' in $HOME/mail/ as mbox and Dovecot won't find them even when I use the setting: maildir:~/Maildir:mbox:~/mail/ I don't know what exact question to ask to I'll just ask for any thoughts on this? Second question, different topic. Are there problems with running POP3 and IMAP? I've always run POP3 and I'm thinking to move to IMAP for some clients so the Usermin webmail will be better 'synchronized' with the users inbox. *> dovecot --version * 1.0.10 *> dovecot -n * # 1.0.10: /etc/dovecot.conf protocols: imap pop3 login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:~/Maildir:mbox:~/mail/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: passdb: driver: pam args: dovecot userdb: driver: passwd args: blocking=yes

2 4

[Dovecot] deliver fails - passdb doesn't support lookups?
by Kyle Wheeler 12 Mar '08

12 Mar '08

Hello, I'm trying to get `deliver` (the LDA) to function properly. I can get it to work without doing a user lookup, but for my own sense of sanity, I want to know what I'm doing wrong getting user lookups working. (I'm using dovecot 1.0.10). Here's what I have in the "auth default" section: auth default { mechanisms = plain login passdb ldap { args= /var/lib/dovecot/dovecot-ldap.conf } userdb static { args = uid=3728 gid=3728 home=/domains/%Ld/%Ln } user = vpopmail socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vpopmail group = vchkpw } client { path = /var/run/dovecot/auth-client mode = 0660 } } } And yet, when I run deliver, I get no warnings, no errors, and most especially, no email delivered. Here's how I call deliver: cat testemail | setuidgid vpopmail \ /usr/local/libexec/dovecot/deliver \ -d testuser(a)example.com I tried running deliver within strace, and here's what I found. It opens up the authentication socket and writes: VERSION\t1\t0\nUSER\t1\ttestuser(a)example.com\tservice=deliver\n And it gets back: VERSION\t1\t0\nSPID\t10917\nFAIL\t1\n" If I understand the authentication protocol correctly, that means an internal error occurred. The dovecot log file reports this: Error: auth(default): static(testuser(a)example.com): passdb doesn't support lookups, can't verify user's existence passdb? I thought it was the userdb that was important! What's going on here? ~Kyle -- Men, as an organization, are getting more women than any other group working anywhere in the world. Wherever women are, we have men looking into it. -- Jerry Seinfeld

2 2

[Dovecot] Debugging sieve-options
by Jens Meyer 12 Mar '08

12 Mar '08

Hello all! I am using a dovecot-server since several weeks - and am really impressed about this server (after using courier and cyrus). I tried to install the sieve-plugin now (CentOS RPM) and configured sieve like described in your WIKI (and on several other pages). Unfortunately I can not connect to port 2000 (sieve-administration?!) nor are there any messages regarding sieve in the logs. Can you give me any hints for further testing/debuggin? My part of configuration: --> protocol lda { postmaster_address = postmaster(a)myserver.de auth_socket_path = /var/run/dovecot/auth-master mail_plugins = cmusieve } <-- My output of "dovecot -n": --> # 1.0.12: /etc/dovecot.conf Warning: mail_extra_groups setting was often used insecurely so it is now deprecated, use mail_access_groups or mail_privileged_group instead base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log protocols: imap pop3 listen: * login_dir: /var/run/dovecot//login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_extra_groups: mail mail_access_groups: mail mail_location: maildir:/var/mail/virtual/%d/%n mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %u-%v namespace: type: private prefix: INBOX. inbox: yes auth default: mechanisms: plain login user: vmail username_format: %Lu passdb: driver: sql args: /etc/dovecot/dovecot-sql-domain.conf passdb: driver: sql args: /etc/dovecot/dovecot-sql-subdomain.conf passdb: driver: sql args: /etc/dovecot/dovecot-sql-aliasdomain.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql-domain.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql-subdomain.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql-aliasdomain.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail <-- Thank you, kind regards, Jens

2 2

[Dovecot] Sieve doesnt filter
by Sven Schmidt 12 Mar '08

12 Mar '08

Hi! I have a config like this (globalsieverc): require "fileinto"; if address :domain :is "to" "domain.de" { if header :matches "X-Spam-Level" "\\*\\*\\*\\*\\*\\*\\*\\*" { #discard; fileinto "spamdir"; } } else { # The rest goes into INBOX # default is "implicit keep", we do it explicitly here keep; } It should filter all Mail for "domain.de" and then look for spam score.

4 5

[Dovecot] Fileinto to a maildir with sieve
by Nicolas Letellier 12 Mar '08

12 Mar '08

Hello, Is it possible to specify a maildir to a fileinto rule in a sieve file? A simple: require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto ".Junk"; } does'nt work becaise .Junk is a directoty, not a mailbox... See my dovecot-deliver log: Couldn't open mailbox .Junk: Invalid mailbox name Mar 12 09:52:38 helm deliver(nicolas(a)nicoelro.net): sieve runtime error: Fileinto: Generic Error Is it possible to specify a directory (maildir)? Thanks. - Nicolas.

2 3

[Dovecot] Allowing tilde at start of mailbox names
by pod 12 Mar '08

12 Mar '08

In lib-storage/index/maildir/maildir-storage.c maildir_is_valid_create_name() and maildir_is_valid_existing_name() the following sequence of tests appear but I don't really understand why if ((storage->flags & MAIL_STORAGE_FLAG_FULL_FS_ACCESS) != 0) return TRUE; if (*name == '~' || strchr(name, '/') != NULL) return FALSE; If MAIL_STORAGE_FLAG_FULL_FS_ACCESS is set then the validator funcs return TRUE immediately and code elsewhere will do appropriate home_exapand for mailbox names. However if MAIL_STORAGE_FLAG_FULL_FS_ACCESS is not set the (*name == '~') test prevents mailbox names that begin with '~'. Why is it not possible to have mailbox names that begin with '~' but without '~' carrying any special meaning? I have been working on a patch (appended but incomplete; the option only works against maildir atm) that adds a new option mail_allow_tilde and my admittedly limited testing seems to indicate that it does the right thing but maybe I am barking up the wrong tree. Am I missing something here? ---------------------------------------- # HG changeset patch # User <pod(a)sysdev.oucs.ox.ac.uk> # Date 1185368923 -3600 # Node ID ab9cf3790ea9b5486afa6498f60c6bf6fb2e5f1e # Parent a23be695672737967a10613d7dca2a6f53b5d96d create new option mail_allow_tilde diff -r a23be6956727 -r ab9cf3790ea9 src/lib-storage/index/maildir/maildir-storage.c --- a/src/lib-storage/index/maildir/maildir-storage.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/lib-storage/index/maildir/maildir-storage.c Wed Jul 25 14:08:43 2007 +0100 @@ -240,7 +240,9 @@ static bool maildir_is_valid_create_name if ((storage->flags & MAIL_STORAGE_FLAG_FULL_FS_ACCESS) != 0) return TRUE; - if (*name == '~' || strchr(name, '/') != NULL) + if ((*name == '~' && + (storage->flags & MAIL_STORAGE_FLAG_ALLOW_TILDE) == 0) || + strchr(name, '/') != NULL) return FALSE; if (name[0] == '.' && (name[1] == '\0' || @@ -264,7 +266,9 @@ static bool maildir_is_valid_existing_na if ((storage->flags & MAIL_STORAGE_FLAG_FULL_FS_ACCESS) != 0) return TRUE; - if (*name == '~' || strchr(name, '/') != NULL) + if ((*name == '~' && + (storage->flags & MAIL_STORAGE_FLAG_ALLOW_TILDE) == 0) || + strchr(name, '/') != NULL) return FALSE; if (name[0] == '.' && (name[1] == '\0' || diff -r a23be6956727 -r ab9cf3790ea9 src/lib-storage/mail-storage.c --- a/src/lib-storage/mail-storage.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/lib-storage/mail-storage.c Wed Jul 25 14:08:43 2007 +0100 @@ -66,6 +66,8 @@ void mail_storage_parse_env(enum mail_st *flags_r = 0; if (getenv("FULL_FILESYSTEM_ACCESS") != NULL) *flags_r |= MAIL_STORAGE_FLAG_FULL_FS_ACCESS; + if (getenv("ALLOW_TILDE") != NULL) + *flags_r |= MAIL_STORAGE_FLAG_ALLOW_TILDE; if (getenv("DEBUG") != NULL) *flags_r |= MAIL_STORAGE_FLAG_DEBUG; if (getenv("MMAP_DISABLE") != NULL) diff -r a23be6956727 -r ab9cf3790ea9 src/lib-storage/mail-storage.h --- a/src/lib-storage/mail-storage.h Tue Jul 24 05:48:03 2007 +0300 +++ b/src/lib-storage/mail-storage.h Wed Jul 25 14:08:43 2007 +0100 @@ -34,7 +34,9 @@ enum mail_storage_flags { fail to create the storage. */ MAIL_STORAGE_FLAG_NO_AUTOCREATE = 0x200, /* Rely on O_EXCL when creating dotlocks */ - MAIL_STORAGE_FLAG_DOTLOCK_USE_EXCL = 0x400 + MAIL_STORAGE_FLAG_DOTLOCK_USE_EXCL = 0x400, + /* Allow folder names to begin with '~' TILDE */ + MAIL_STORAGE_FLAG_ALLOW_TILDE = 0x800 }; enum mail_storage_lock_method { diff -r a23be6956727 -r ab9cf3790ea9 src/master/mail-process.c --- a/src/master/mail-process.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/master/mail-process.c Wed Jul 25 14:08:43 2007 +0100 @@ -254,6 +254,8 @@ mail_process_set_environment(struct sett env_put("DEBUG=1"); if (set->mail_full_filesystem_access) env_put("FULL_FILESYSTEM_ACCESS=1"); + if (set->mail_allow_tilde) + env_put("ALLOW_TILDE=1"); if (set->pop3_no_flag_updates) env_put("POP3_NO_FLAG_UPDATES=1"); if (set->pop3_reuse_xuidl) diff -r a23be6956727 -r ab9cf3790ea9 src/master/master-settings-defs.c --- a/src/master/master-settings-defs.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/master/master-settings-defs.c Wed Jul 25 14:08:43 2007 +0100 @@ -67,6 +67,7 @@ static struct setting_def setting_defs[] DEF(SET_INT, mailbox_idle_check_interval), DEF(SET_BOOL, mail_debug), DEF(SET_BOOL, mail_full_filesystem_access), + DEF(SET_BOOL, mail_allow_tilde), DEF(SET_INT, mail_max_keyword_length), DEF(SET_BOOL, mail_save_crlf), DEF(SET_BOOL, mail_read_mmaped), diff -r a23be6956727 -r ab9cf3790ea9 src/master/master-settings.c --- a/src/master/master-settings.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/master/master-settings.c Wed Jul 25 14:08:43 2007 +0100 @@ -216,6 +216,7 @@ struct settings default_settings = { MEMBER(mailbox_idle_check_interval) 30, MEMBER(mail_debug) FALSE, MEMBER(mail_full_filesystem_access) FALSE, + MEMBER(mail_allow_tilde) FALSE, MEMBER(mail_max_keyword_length) 50, MEMBER(mail_save_crlf) FALSE, MEMBER(mail_read_mmaped) FALSE, diff -r a23be6956727 -r ab9cf3790ea9 src/master/master-settings.h --- a/src/master/master-settings.h Tue Jul 24 05:48:03 2007 +0300 +++ b/src/master/master-settings.h Wed Jul 25 14:08:43 2007 +0100 @@ -75,6 +75,7 @@ struct settings { unsigned int mailbox_idle_check_interval; bool mail_debug; bool mail_full_filesystem_access; + bool mail_allow_tilde; unsigned int mail_max_keyword_length; bool mail_save_crlf; bool mail_read_mmaped;

3 12

[Dovecot] question about dovecot imap outlook clients
by Joseph Norris 11 Mar '08

11 Mar '08

Hello, Well... thanks to the input of all of you I have my dovecot->ldap connection working for almost all of my clients, however... on outlook, a message for certificates being trusted comes up, the user clicks yes and connection fails. Questions: Do I have to get an ssl certificate to make it work? ( cost ouch!) Is there a way around this using my own self-signed certificates? Is there a cheaper ssl certificate service? thanks -- Cell: 209.201.3410 Desk: 209.228.4576 email: jnorris(a)ucmerced.edu #Joseph Norris (Linux/Apache/Mysql/Perl - what else is there?) print @c=map chr $_+100,(6,17,15,16,-68,-3,10,11, 16,4,1, 14,-68,12,1,14,8, -68,4,-3,-1,7,1,14,-68, -26,11,15,1,12, 4,-68,-22,11,14,14,5,15,-90);

5 4

[Dovecot] Who's wrong, atmail or dovecot?
by Andy Dills 11 Mar '08

11 Mar '08

We recently switched to atmail, as well as dovecot. I noticed in atmail the size of the mailboxes was always reported as 0kb. So, I did some debugging, and it boiled down to the fact that the regular expression used by dovecot expected UID before SIZE, but Dovecot returned SIZE before UID. No biggy, I changed the regex, but I was curious if there was a standard. Here's the imap query that is sent: UID FETCH 1:* (RFC822.SIZE) Here's the diff I implemented to make it work: http://www.xecu.net/atmail/dovecot_sizes.diff So...is this something that is standard or something atmail needs to handle by making their regex more dynamic? Andy --- Andy Dills Xecunet, Inc. www.xecu.net 301-682-9972 ---

3 2