- dovecot - dovecot.org

Re: [Dovecot] [Fwd: Re: Building path to maildir]
by Michel Bulgado 03 Jan '08

03 Jan '08

Hi Charles I receive the Timo's reply. thanks for send me again Use the option that i said, but the problem persists. userdb static { args = uid=500 gid=500 } userdb prefetch { } Jan 2 23:50:08 michel dovecot: auth(default): new auth connection: pid=18374 Jan 2 23:50:20 michel dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=127.0.0.1 rip=127.0.0.1 resp=<hidden> Jan 2 23:50:20 michel dovecot: auth(default): pam(michel,127.0.0.1): lookup service=dovecot Jan 2 23:50:20 michel dovecot: auth(default): client out: OK 1 user=michel Jan 2 23:50:20 michel dovecot: auth(default): master in: REQUEST 1 18306 1 Jan 2 23:50:20 michel dovecot: auth(default): master out: USER 1 michel uid=503 gid=503 Jan 2 23:50:20 michel dovecot: POP3(michel): Loading modules from directory: /usr/lib64/dovecot/pop3 Jan 2 23:50:20 michel dovecot: pop3-login: Login: user=<michel>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 2 23:50:20 michel dovecot: POP3(michel): Module loaded: /usr/lib64/dovecot/pop3/lib10_quota_plugin.so Jan 2 23:50:20 michel dovecot: POP3(michel): Effective uid=503, gid=503 Jan 2 23:50:20 michel dovecot: POP3(michel): maildir: data=/var/spool/virtualmail//michel Jan 2 23:50:20 michel dovecot: POP3(michel): maildir: root=/var/spool/virtualmail//michel, index=/var/spool/virtualmail//michel, control=, inbox= Dovecot detect the username , but no detect the part domain that i need to build the path to maildir. Use ldap (active directory) to retrieve the mail attribute which specifies the address of my mail users. I ask, as I could do with pam. As I get the attribute mail with pam mail_location = maildir:/var/storage/virtualmail/%d/%n So must be /var/spool/virtualmail/casa.co.cu/michel not /var/spool/virtualmail//michel ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

3 2

[Dovecot] Building path to maildir
by Michel Bulgado 03 Jan '08

03 Jan '08

I have the following situation and I need help from all you people I have dovecot 0.99.11 and i want to migrate to a superior version like dovecot 1.0 looking forward to implement quotas in my system , and use the function deliver with postfix. My Scenario is as follow Dovecot + LDAP (ADS) + postfix My actual version is : 0.99.11 This is my actual configuration: Protocols = imap pop3 imap_listen = * pop3_listen = * login_dir = /var/run/dovecot-login login = imap login = pop3 default_mail_env = maildir:/var/spool/virtualmail/%d/%n mbox_locks = fcntl auth = dovecot-auth auth_mechanisms = plain auth_default_realm = CASA.CULT.CU auth_userdb = ldap /etc/dovecot-ldap.conf auth_passdb = pam dovecot auth_user = root auth_verbose = yes auth_debug = yes dovecot-ldap.conf hosts = ldap.casa.cult.cu base = ou=CASA,dc=casa,dc=cult,dc=cu dn = cn=unix-conector,cn=Users,dc=casa,dc=cult,dc=cu dnpass = ***** ldap_version = 3 deref = never scope = subtree user_global_uid = 500 user_global_gid = 500 user_attrs = mail,/var/spool/virtualmail/%d/%n,,,, user_filter = (&(objectClass=user)(!(objectClass=computer))(sAMAccountName=%n)) I see many changes in this new version. One of them is : -Renamed default_mail_env to mail_location - many changes in ldap queries With the new version my problem is when to dovecot tries to detect or builds the way where it´s stored the mailbox of my users. In /var/spool/virtualmail/%d/%u , it does not detect the domain when asking to my active directory (w2k) and consequently takes a value of my default realm = casa.cult.cu in this case the default domain where authenticate my users. My configuration in the new version of dovecot: protocols = imap pop3 protocol imap { listen = * } protocol pop3 { listen = * } login_dir = /var/run/dovecot/login login_chroot = yes login_greeting = Dovecot ready. mail_location = maildir:/var/spool/virtualmail/%d/%u mail_debug = yes mbox_read_locks = fcntl mbox_write_locks = fcntl protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } protocol lda { postmaster_address = postmaster(a)example.com mail_plugins = quota auth_socket_path = /var/run/dovecot/auth-master } auth_executable = /usr/libexec/dovecot/dovecot-auth auth_verbose = yes auth_debug = yes auth default { mechanisms = plain passdb pam { args = dovecot } userdb ldap { args = /etc/dovecot-ldap.conf } userdb prefetch { } user = root socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = virtualmail group = virtualmail } } } dict { } plugin { quota = maildir:storage=10240 } user_attrs = mail,/var/spool/virtualmail/%d/%n,,,, The attribute mail in the old version returns to me user(a)casa.com or user(a)casa.cult.cu this way dovecot can build the way with no problems at all. But in this late version something is happening, it only takes the value %n= user , but not %d = domain . It´s not working. do you have any idea how I can solve this I beg your pardon for my poor English. ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

2 1

[Dovecot] Trying to build the maildir path
by Michel Bulgado 03 Jan '08

03 Jan '08

I use ldap because is where are store the users and his make place the authentication . In my LDAP I have a attribute mail. like this = mail: pepe(a)casa.com I Have more that one domain This atribute return to me something like : pepe(a)casa.com where i use tu build the path to maildir, using %d and %n variables . /var/spool/vmail/%d/%n = /var/spool/vmail/casa.com/pepe this work in 0.99.11 but no in the latest version of dovecot. ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

2 1

[Dovecot] Permanent roadmap page on web
by Timo Sirainen 02 Jan '08

02 Jan '08

http://dovecot.org/roadmap.html I'll try to keep it updated.

7 11

[Dovecot] Dovecot on OpenWRT
by Dirk Aust 02 Jan '08

02 Jan '08

Hello, does anybody has a patch so that I can compile for the OpenWRT, currently the configure script can't be used for cross-compiling. Best Regards, Dirk Aust

1 0

[Dovecot] dovecot-auth consumes 100% CPU time on Solaris 10
by KOT MATPOCKuH 02 Jan '08

02 Jan '08

Is problem with CPU load solved? I have same problem - dovecot-auth eats one of my cores. I'm using dovecot 1.0.7 on Solaris 10 Sparc. I tried to use auth-bind and standard scheme with separate user for bind and have same result. Problem occupts only with LDAP authentication, on some other systems I use PostgreQSL and MySQL authentication and doesn't have this problem. Using PAM authentication is not possible, because dovecot run in chroot'ed environment and I planing to move it to separate system or zone without ldap client. -- MATPOCKuH

7 20

[Dovecot] Delay on failed pw attempts
by Dean Brooks 02 Jan '08

02 Jan '08

Hi, Is there a way, or can a way be added, to add an "auth_failed_delay=10s" style option that would put in an artificial delay after a failed password attempt? As it stands now, Dovecot seems highly vulnerable to widescale brute-force password dictionary scans. Even if it's not configurable, can a delay be hardcoded to something like, say, 10 or 15 seconds? -- Dean Brooks dean(a)iglou.com

10 18

[Dovecot] deliver triggering SELinux AVC denials
by Gerry Reno 02 Jan '08

02 Jan '08

I setup postfix/dovecot on a new machine and now all works well with the small exception of dovecot triggering selinux avc denials on some temp... files here is a sample alert: Summary SELinux is preventing /usr/libexec/dovecot/deliver (dovecot_deliver_t) "link" to temp.localhost.678.40caaf5592891c46 (user_home_dir_t). Detailed Description SELinux denied access requested by /usr/libexec/dovecot/deliver. It is not expected that this access is required by /usr/libexec/dovecot/deliver and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access Sometimes labeling problems can cause SELinux denials. You could try to restore the default system file context for temp.localhost.678.40caaf5592891c46, restorecon -v temp.localhost.678.40caaf5592891c46 If this does not work, there is currently no automatic way to allow this access. Instead, you can generate a local policy module to allow this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable SELinux protection altogether. Disabling SELinux protection is not recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. Additional Information Source Context user_u:system_r:dovecot_deliver_t Target Context user_u:object_r:user_home_dir_t Target Objects temp.localhost.678.40caaf5592891c46 [ file ] Affected RPM Packages dovecot-1.0.7-16.fc7 [application] Policy RPM selinux-policy-2.6.4-63.fc7 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Permissive Plugin Name plugins.catchall_file Host Name localhost Platform Linux localhost 2.6.23.8-34.fc7 #1 SMP Thu Nov 22 23:05:33 EST 2007 i686 athlon Alert Count 1 First Seen Tue 01 Jan 2008 09:29:35 PM EST Last Seen Tue 01 Jan 2008 09:29:35 PM EST Local ID 507dd6a2-da46-4541-8c10-a0771bc85042 Line Numbers Raw Audit Messages avc: denied { link } for comm="deliver" dev=dm-0 egid=5000 euid=5000 exe="/usr/libexec/dovecot/deliver" exit=0 fsgid=5000 fsuid=5000 gid=5000 items=0 name="temp.localhost.678.40caaf5592891c46" pid=678 scontext=user_u:system_r:dovecot_deliver_t:s0 sgid=5000 subj=user_u:system_r:dovecot_deliver_t:s0 suid=5000 tclass=file tcontext=user_u:object_r:user_home_dir_t:s0 tty=(none) uid=5000 and 5000 is user vmail. When I look for these files that it is complaining about they are never in the filesystem. I get about 8 alerts with every email that is delivered. Right now I have SELinux set to permissive so that the mail gets delivered but I would like to find the cause of this problem so that I can set it back to enforcing. ???? Gerry

2 1

[Dovecot] 1.1b13 build in FreeBSD fails using 'make'; 'gmake' apparently required
by snowcrash 01 Jan '08

01 Jan '08

hi, i'm doing a 1st build of dovecot in a freebsd 62R jail. following instructions at http://wiki.dovecot.org/CompilingSource ./configure make sudo make install after an OK 'configure', @ 'make', i get make make all-recursive Making all in src Making all in lib make: don't know how to make unicodemap.c. Stop *** Error code 1 Stop in /s/usr-local/build/dovecot/dovecot/src. *** Error code 1 Stop in /s/usr-local/build/dovecot/dovecot. *** Error code 1 Stop in /s/usr-local/build/dovecot/dovecot. looking at source, i couldn't figure this out ... on a whim, i tried 'gmake', instead of 'make'. it completes without error. subsequent make check make install are both ok, resulting in ls -al dovecot -rwxr-xr-x 1 root wheel 459786 Dec 30 21:53 dovecot* ./dovecot --version 1.1.beta13 on FreeBSD, apparently, make != gmake ls -al `which make` `which gmake` -r-xr-xr-x 1 root wheel 350904 Dec 29 17:25 /usr/bin/make* -r-xr-xr-x 1 root wheel 199808 Dec 27 06:14 /usr/local/bin/gmake* make --version make: illegal option -- - usage: make [-BPSXeiknqrstv] [-C directory] [-D variable] [-d flags] [-E variable] [-f makefile] [-I directory] [-j max_jobs] [-m directory] [-V variable] [variable=value] [target ...] gmake --version GNU Make 3.81 Copyright (C) 2006 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. This program built for amd64-portbld-freebsd6.2 so, using 'gmake' seems to solve the issue. neither at the link above, nor at, http://wiki.dovecot.org/DovecotServerInstallations/FreeBSD/6.0RELEASE/20Use… is the use of 'gmake'mentioned. i'd ask/suggest that either said mention be added to the wiki (if it's not already there, and i missed it), or, that the build be made to be FreeBSD-make friendly. hth. cheers!

8 17

[Dovecot] my.cnf reading support in MySQL backend
by Luca Longinotti 01 Jan '08

01 Jan '08

I hope this ml is the right place to send this... Anyway, I'd very much like for the MySQL backend to call mysql_options, so that it'll read the settings defined in MySQL's my.cnf under the [client] section. This allows to set a whole slew of MySQL specific settings for the MySQL connection, for example to enable the compressed protocol, set charsets, enable SSL client verification, and much more. A patch is attached that implements this. See http://dev.mysql.com/doc/refman/5.0/en/mysql-options.html for more info. -- Best regards, Luca Longinotti aka CHTEKK LongiTEKK Networks Admin: chtekk(a)longitekk.com Gentoo Dev: chtekk(a)gentoo.org SysCP Dev: chtekk(a)syscp.org TILUG Supporter: chtekk(a)tilug.ch

2 5