- dovecot - dovecot.org

[Dovecot] Logging client commands (patch)
by Zach Bagnall 11 Oct '07

11 Oct '07

This might be useful to someone so I'll throw it out there. Patch against 1.0.5 adds support for two new configuration params: pop3_debug_client_commands = TOP, RETR, DELE imap_debug_client_commands = FETCH, DELETE Obviously add in whichever ones you're interested in, or none, or comment them out completely. It'll log the appropriate events: Oct 12 18:30:18 kea dovecot: IMAP(zach): Client command: FETCH The parameters are included for POP3 events. Wasn't sure quite how to do the same for IMAP and for my purposes it's not too important so imap command parameters aren't logged. Running smoothly here with a few dozen IMAP and POP3 users. Not suggesting this gets added to the codebase - I just needed it to help debug some other IMAP software and thought it might be useful. Zach.

1 0

[Dovecot] UIDL format for old UW pop3
by Oliver Hookins 11 Oct '07

11 Oct '07

Hi, we're trying to migrate from UW imap 2001a-10, which doesn't seem to use the UIDL format documented in the wiki. It seems to use a 16 character long MD5 hash of something. I've tried configuring Dovecot to do the same but the value comes out differently. The main thing that I can see is getting in the way is that the UIDL format is not documented sufficiently. There is no description of using numbers to restrict the length of the output, and no documentation of special features like X or M. Can someone shed some light on these? -- Regards, Oliver

2 1

[Dovecot] Quota Display with Horde / IMP ( WebMail Client )
by edwardspl＠ita.org.mo 11 Oct '07

11 Oct '07

Dear All, For the Dovecot.conf : protocol imap { mail_plugins = quota imap_quota mail_plugin_dir = /usr/lib/dovecot/imap } plugin { quota = maildir } For /var/spool/mail : -rw------- 1 root root 7168 Sep 24 23:02 aquota.group -rw------- 1 root root 8192 Sep 24 18:05 aquota.user -rw------- 1 edward mail 301709 Sep 24 23:27 edward But the Quota display is un-limited status... So, what mistake about the config ? Mine is FC6 System ! Thanks ! Edward.

3 2

[Dovecot] GSSAPI Cross-Realm Patch
by Zachary Kotlarek 10 Oct '07

10 Oct '07

I've written a GSSAPI cross-realm auth patch for people not lucky enough to have the __gss_userok function, though it should apply pretty cleanly with that patch in place as well. The patch is available at: http://zinux.cynicbytrade.com/svn/servers/dovecot/cross-realm.diff.bz2 It works for me on MIT-kerb, and I tested compilation against heimdal, but I don't have a cross-realm setup to test functionality under heimdal (though I also have no reason to think it wouldn't work). Since neither MIT nor heimdal provide a gss_userok() function, I used the krb5_userok() function. So if you're using a mechanism other than krb5 this won't work. But it's the same thing that OpenSSH and the apps distributed with heimdal do, so it seemed relatively safe. I also choose to append the krb5_userok() check rather than replace the gss_compare_name() check -- that way same-realm auth works for non-krb5 mechanisms, and my new code doesn't get called unless the same-realm check fails. If you don't care about other mechanisms it would be faster to bypass the gss_compare_name() check entirely. If this is something you'd like to mainline I'd be happy to standardize the coding style -- just point me to a style definition document. And if it doesn't hit the mainline I expect to maintain it for the foreseeable future, with updates at the same URL. Zach

1 0

[Dovecot] Dovecot, postifx, virtual domains and deliver, what about luser_relay/fallback_relay?
by Alexander Hoogerhuis 10 Oct '07

10 Oct '07

I've read documentation (obviously not the right parts) and googled, but I can't seem how to solve this simple problem: I have a machine running postfix/dovecot and using virtual domains, delivery happens with dovecot's LDA. I also have an Exchange machine that I have to house some of the users of a given domain. How can I tell either postifx in general or dovecot's LDA that whatever specific user that cannot be found in the virutal setup can be pawned off to a given relay-server which will sort it out? -A

2 1

[Dovecot] FW: IMAP proxy with dovecot and hostname
by Limperis Antonis 09 Oct '07

09 Oct '07

Good morning dovecot users I read in http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy that dovecot need ip address in host field and then "This field is required. Note that currently it's required to use an IP address since no DNS resolving is done.". I use a qmail cluster and Courier IMAP. In this system used the ldap field mailhost for proxy functionality with dns name as value. Is there a plan to add the DNS resolving to dovecot in host field; Is there any patch; Thanks Antonis

3 2

[Dovecot] User database ldap lookups and sasl
by Olivier Castan 09 Oct '07

09 Oct '07

Hello I'm currently trying to use Active Directory with Unix extensions to store UID, GID and homedir and retrieve them with ldap. I don't want to allow anonymous bindings and I would rather not use TLS and manage a PKI. So I'm trying to use SASL to do a Kerberos authentication for Dovecot against AD LDAP. I'm currently getting GSSAPI errors about the lack of "credentials cache". Looking at similar cases where services act as clients, like using nss_ldap for unix host accounts, I understand the credentials cache should be initiated by an external program (cron and startup script), at least with the TGT and maybe the TGS for ldap. Since usually kerberosv5 cache is based on the user id ( /tmp/krb5cc_0 for root) there's an option in ldap.conf (krb5_ccname) to set the filename (/etc/.ldapcache in nss_ldap tutorials) for this cache. Is there any way to do this with dovecot-ldap.conf or should I try to use "auth user" default cache filename ? Thanks in advance

1 0

[Dovecot] SpamAssassin and Public Namespace
by James 09 Oct '07

09 Oct '07

Hi I know i might get flamed for asking this in the dovecot mailing list instead of the spamassassin one but i thought someone might be kind enough to help anyway. TIA I'm trying to do site-wide spam filtering with a public namespace but it's not reading the folder i have in the public namespace This is the public namespace set in my dovecot.conf #public spam folder namespace public { separator = / prefix = Filter/ location = maildir:/home/vmail/domains/Spam/Maildir/ hidden = no } There's also a .Spam and .Non-spam folder created in that directory server:/home/vmail/domains/Spam/Maildir# ls -al total 32 drwxrwxrwx 7 vmail vmail 4096 2007-10-09 10:35 . drwxrwxrwx 3 vmail vmail 4096 2007-10-05 13:23 .. drwx------ 2 vmail vmail 4096 2007-10-09 10:35 cur drwx------ 2 vmail vmail 4096 2007-10-09 10:35 new drwxrwxrwx 5 vmail vmail 4096 2007-10-09 11:20 .Non-Spam drwxrwxrwx 5 vmail vmail 4096 2007-10-09 11:19 .Spam -rw------- 1 vmail vmail 14 2007-10-08 11:58 subscriptions drwx------ 2 vmail vmail 4096 2007-10-09 10:35 tmp I'm trying to use this script to login and get the spam from the public spam folders and send it to spamassassin to learn I've highlighted the important parts There are 13 messages in Spam There are 5 messages in Non-Spam Here's the script: ######################################################################################### #!/usr/bin/perl # # Process mail from imap server shared folder 'spam' & 'not-spam' through spamassassin sa-learn # dmz(a)dmzs.com - March 19, 2004 # http://www.dmzs.com/tools/files/spam.phtml # LGPL # # Things to try if it doesn't work # 1) Turn debug onto 1 and see if you connect to imap server ad get messages (yes i could have made a command line flag, just didn't see the need once I got it working :) # 2) Check your local.cf for spamassassin (in debian it's /etc/spamassassin/local.cf) bayes_path settings. # # Also be sure to check that your spamassassin is truely using the bayes files (-D manual startup of spamd to debug there) # use Mail::IMAPClient; use IO::Socket::SSL; my $debug=1; my $salearn; my $username = 'user'; my $password = 'password'; my $server = 'server.example.com'; my $ssl=new IO::Socket::SSL("$server:imaps"); die ("Error connecting - $@") unless defined $ssl; $ssl->autoflush(1); my $imap = Mail::IMAPClient->new( #Server=> 'imapmailhost:143', Socket => $ssl, User => $username, Password => $password, Debug => $debug ); if (!defined($imap)) { die "IMAP Login Failed"; } # If debugging, print out the total counts for each mailbox if ($debug) { foreach my $foldername ($imap->folders) { my $number_of_messages = $imap->message_count( $foldername ); print $foldername, " is imap folder\n"; }* my $spamcount = $imap->message_count('Filter/Spam');* print $spamcount, " Spam to process\n"; * my $nonspamcount = $imap->message_count('Filter/Non-Spam');* print $nonspamcount, " Notspam to process\n" if $debug; } # Process the spam mailbox *$imap->select('Filter/Spam');* my @msgs = $imap->search("ALL"); for (my $i=0;$i <= $#msgs; $i++) { # I put it into a file for processing, doing it into a perl var & piping through sa-learn just didn't seem to work $imap->message_to_file("/tmp/salearn",$msgs[$i]); # execute sa-learn w/data # if ($debug) { $salearn = `/usr/bin/sa-learn -D --no-sync --showdots --spam /tmp/salearn`; } # else { $salearn = `/usr/bin/sa-learn --no-sync --showdots --spam /tmp/salearn`; } print "-------\nSpam: ",$salearn,"\n-------\n" if $debug; # delete processed message $imap->delete_message($msgs[$i]); unlink("/tmp/salearn"); } $imap->expunge(); $imap->close(); # Process the not-spam mailbox *$imap->select('Filter/Non-spam');* my @msgs = $imap->search("ALL"); for (my $i=0;$i <= $#msgs; $i++) { $imap->message_to_file("/tmp/salearn",$msgs[$i]); # execute sa-learn w/data # if ($debug) { $salearn = `/usr/bin/sa-learn -D --no-sync --showdots --ham /tmp/salearn`; } # else { $salearn = `/usr/bin/sa-learn --no-sync --showdots --ham /tmp/salearn`; } print "-------\nNotSpam: ",$salearn,"\n-------\n" if $debug; # delete processed message $imap->delete_message($msgs[$i]); unlink("/tmp/salearn"); } $imap->expunge(); $imap->close(); $imap->logout(); # integrate learned stuff my $sarebuild = `/usr/bin/sa-learn --sync`; print "-------\nRebuild: ",$sarebuild,"\n-------\n" if $debug; ######################################################################################### Results: server:/home/james# ./DMZS-sa-learn.pl Using Mail::IMAPClient version 2.2.9 and perl version 5.8.8 (5.008008) Spam to process Notspam to process . ------- Spam: Learned tokens from 0 message(s) (1 message(s) examined) ------- Autoloading: UID store +FLAGS.SILENT (\Deleted) . ------- NotSpam: Learned tokens from 1 message(s) (1 message(s) examined) ------- Autoloading: UID store +FLAGS.SILENT (\Deleted) ------- Rebuild: bayes: synced databases from journal in 0 seconds: 4 unique entries (4 total entries) -------

1 1

[Dovecot] Dovecot hanging up with many defunct processes
by Mayank Joshi 09 Oct '07

09 Oct '07

Hi, I am in a very awkward situation and need some kind of immediate fix up. I had installed dovecot in my organization as part of migration of email server. The setup involves sendmail, dovecot (imaps+pop3s) and webmail (squirrelmail) running on apache webserver. All was working fine until one day I found a lot of defunct processes on system related to dovecot. dovecot-auth, imap-login and imap were all defunct. The system is using pam_ldap and nss_ldap to authenticate users to a Windows 2003 Active Directory. Immediate restart of dovecot solved the problem for me that day, however since then it's been about 3 times that I've faced this problem. After visiting various forums I came to know one thing, that it has something to do with pam_ldap and nss_ldap. However with UW-IMAP we were using the same setup and we didn't find any problems there. It would be very kind of you, if you can help me out on this front as apart from these mishaps the mail server is running perfectly fine and we wish to continue using Dovecot for our setup in future as well. Following is the system details: 1) OS: RHEL4 (Kernel - 2.6.9-5.ELsmp) 2) Dovecot: Dovecot (Version - 1.0.3) 3) Following is dovecot configuration: log_path: /var/log/dovecot.log protocols: imaps pop3s ssl_cert_file: /usr/share/ssl/certs/imapd.pem ssl_key_file: /usr/share/ssl/private/imapd.pem login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login max_mail_processes: 10240 mail_location: mbox:~/mail:INBOX=/var/mail/%u mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: passdb: driver: pam userdb: driver: passwd 4) Dovecot's PAM file (/etc/pam.d/dovecot) #%PAM-1.0 auth required pam_ldap.so account required pam_ldap.so session required pam_mkhomedir.so skel=/etc/skel umask=0077 session required pam_ldap.so As far as I feel it's problem with pam_ldap not able to authenticate against Windows 2003 Active Directory due to some reason or the other. However I'm not sure why is this happening. Regards, Mayank Joshi.

3 2

[Dovecot] undelete messages?
by Cory Coager 08 Oct '07

08 Oct '07

I'm using the lazy expunge plugin as configured in: http://wiki.dovecot.org/Plugins/Lazyexpunge The page claims users can undelete messages without assistance from a sysadmin. How is this accomplished? When I try to subscribe to the folders under the EXPUNGED namespace, nothing happens. ~Cory Coager

2 4