- dovecot - dovecot.org

[Dovecot] Trying to explain mutt+dovecot(ssl) to myself :(
by Wilkinson, Alex 23 Apr '07

23 Apr '07

Hi all, I have recently migrated my mail from courier-imap to dovecot. In doing so, I finally configured mutt to connect to imaps (SSL). In the end I got it all working. I then sat back and thought: "I kinda don't understand the SSL/TLS part even though it works". And I hate setting stuff up and not truely understanding the mechanics of it. So I started to write about it and am stuck. Can those that _understand_ mutt+ssl have a read of what I wrote to myself and give me your $00.02 worth (corrections etc). Trying to explain mutt+ssl and getting it all wrong --------------------------------------------------- * mutt(with openssl support built in) initiates with a "SSL-Client-Hello" to SSL on port 993 i.e. mutt's capabilities (algorithms, SSL version etc). * dovecot:993 compares mutt's CipherSuites with its own. Of the CipherSuites mutt and dovecot have in common, dovecot:993 chooses the _most_ secure algorithm. * Dovecot:993 will then tell mutt what it has decided to use and assigns a Unique session ID. From now on all communication is via this ID. * Now that the CipherSuite is set between mutt and dovecot, dovecot sends its SSL certificate to mutt [/usr/local/share/dovecot/certs/dovecot.pem]. mutt then uses dovecot's corresponding public key [/usr/local/share/dovecot/private/dovecot.pem] to verify that the ceritificate is authentic. * once mutt has verified that the certificate is authentic ... and here I got unstuck. Cheers -aW IMPORTANT: This email remains the property of the Australian Defence Organisation and is subject to the jurisdiction of section 70 of the CRIMES ACT 1914. If you have received this email in error, you are requested to contact the sender and delete the email.

2 1

[Dovecot] deliver failing to execute sendmail (sieve)
by Justin McAleer 21 Apr '07

21 Apr '07

I have apparently done something to mess up my test installation, as deliver's attempts to send messages now fail with the following error: deliver(user(a)example.com): execv() failed: No such file or directory In these cases, I have sieve rules trying to send messages. It had been working though, and I've tried going through all the changes I made yesterday (related to dictionary quota debugging) to find what could be wrong, but no luck so far. So, I was hoping for suggestions. Basically, deliver seems to not know where sendmail is. I have sendmail_path set in dovecot.conf (never changed that), yet when deliver tries to pull the location via deliver_set->sendmail_path, it's just returning an empty string. If I hard-code the location in smtp-client.c, it works again. Any ideas?

3 5

[Dovecot] dovecot.spec
by J.Palacios 20 Apr '07

20 Apr '07

Hi List, Plis, where can i find an updated version (for recently dovecot v1.0.0) of dovecot.spec, needed to build an rpm for RH 4? Thanks in advance, Juan Carlos

3 5

[Dovecot] Dovecot 1.0.0 and Seive 1.0.1 on FreeBSD
by Ed Lucero 20 Apr '07

20 Apr '07

I have installed dovecot and sieve using the FreeBSD ports. Authentication is against a MySql Database. Dovecot is running using deliver as the LDA. But when I try to Sieve I get the following error in /var/log/dovecot.log deliver(mike(a)systemrt.com): Apr 19 14:07:19 Info: Loading modules from directory: /usr/local/libexec/dovecot deliver(mike(a)systemrt.com): Apr 19 14:07:19 Fatal: Plugin sieved not found from directory /usr/local/libexec/dovecot Yet in /usr/local/libexec/dovecot the binaries are there root@db3 /usr/local/libexec/dovecot> ll total 2432 -r-xr-xr-x 1 root wheel 29980 Apr 17 15:51 checkpassword-reply* -r-xr-xr-x 1 root wheel 476884 Apr 17 15:51 deliver* -r-xr-xr-x 1 root wheel 88700 Apr 17 15:51 dict* -r-xr-xr-x 1 root wheel 254984 Apr 17 15:51 dovecot-auth* -r-xr-xr-x 1 root wheel 30588 Apr 17 15:51 gdbhelper* -r-xr-xr-x 1 root wheel 34816 Apr 17 15:51 idxview* -r-xr-xr-x 1 root wheel 523128 Apr 17 15:51 imap* -r-xr-xr-x 1 root wheel 103968 Apr 17 15:51 imap-login* -r-xr-xr-x 1 root wheel 31996 Apr 17 15:51 logview* -r-xr-xr-x 1 root wheel 474288 Apr 17 15:51 pop3* -r-xr-xr-x 1 root wheel 98932 Apr 17 15:51 pop3-login* -r-xr-xr-x 1 root wheel 52764 Apr 17 15:51 rawlog* -r-xr-xr-x 1 root wheel 108980 Apr 11 09:17 sievec* -r-xr-xr-x 1 root wheel 50228 Apr 11 09:17 sieved* -r-xr-xr-x 1 root wheel 30784 Apr 17 15:51 ssl-build-param* What am I doing wrong? Ed Here is the dovecot.conf file ## Dovecot configuration file mail_debug = yes log_path = /var/log/dovecot.log info_log_path = /var/log/dovecot.log # IC - EL 2006.09.29 protocols = imap imaps pop3 pop3s # IC - EL 2006.09.29 disable_plaintext_auth = no # IC - EL 2006.09.29 ssl_disable = no # IC - EL 2006.09.29 ssl_cert_file = /usr/share/ssl/s/Cert.pem ssl_key_file = /usr/share/ssl/s/PrivateKey.pem login_process_size = 64 # IC - EL 2006.09.29 login_processes_count = 6 # IC - EL 2006.09.29 login_greeting = InternetCrusade ready. # IC - EL 2006.09.29 default_mail_env = maildir:/var/mail/%Ld/%Ln mail_save_crlf = yes maildir_copy_with_hardlinks = yes mail_extra_groups = mail verbose_proctitle = yes first_valid_gid = 0 protocol imap { imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep } protocol pop3 { # IC - EL 2006.09.29 pop3_uidl_format = %v.%u pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { postmaster_address = postmaster(a)internetcrusade.com sendmail_path = /usr/sbin/sendmail # Support for dynamically loadable plugins. mail_plugins is a space separated # list of plugins to load. mail_plugin_dir = /usr/local/libexec/dovecot mail_plugins = sieved # If there is no user-specific Sieve-script, global Sieve script is # executed if set. global_script_path = /usr/local/etc/sieve.default } auth default { # IC - EL 2006.09.29 mechanisms = plain login cram-md5 digest-md5 ntlm # IC - EL 2006.09.29 passdb sql { args = /usr/local/etc/dovecot-sql.conf } # IC - EL 2006.09.29 userdb static { args = uid=5000 gid=5000 home=/var/mail/%Ld/%Ln } # IC - EL 2006.09.29 socket listen { master { # Master socket provides access to userdb information. It's typically # used to give Dovecot's local delivery agent access to userdb so it # can find mailbox locations. path = /var/run/dovecot/auth-master mode = 0600 # Default user/group is the one who started dovecot-auth (root) user = icmail group = icmail } client { user = postfix group = postfix path = /var/spool/postfix/private/auth mode = 0660 } } } #dict { #quota = mysql:/etc/dovecot-dict-quota.conf #} auth_debug = yes auth_debug_passwords = yes verbose_ssl = yes mmap_disable=yes #fsync_disable=yes

5 8

[Dovecot] Automatic subscribtion to the Spam folder?
by Henk Wevers 20 Apr '07

20 Apr '07

Is this possible? Or need I make some shell scripts to add Spam into subscriptions? Henk

1 0

Re: [Dovecot] dovecot-auth %c variable is not working
by Bill Boebel 20 Apr '07

20 Apr '07

On Thu, April 19, 2007 3:23 pm, Andrey Panin <pazke(a)donpac.ru> said: > On 109, 04 19, 2007 at 12:17:41PM -0400, Bill Boebel wrote: >> In "doc/variables.txt" >> >> > For dovecot-auth there are also these variables: >> > >> > %c - "secured" string with SSL, TLS and localhost connections. >> > Otherwise empty. >> >> %c does not appear to be working. I am trying to use it in a MySQL query userdb >> and passdb query and it is always empty string. > > Seems like secured flag isn't passed to blocking passdb handler. > Can you try attached patch ? > This patch indeed fixed it. Tested with all 4 protocols... pop3 -> %c = '' pop3s -> %c = 'secured' imap -> %c = '' imaps -> %c = 'secured' Thanks Andrey! Bill

1 0

[Dovecot] Client with SSL client cert support?
by Peter Abrahamsen 20 Apr '07

20 Apr '07

Good day, all, I've gleaned that dovecot has support for verifying SSL client certs on connect. What IMAP clients have people found that support sending a specific SSL cert? I can't find this feature in Thunderbird, at least. Thanks, Peter

3 2

[Dovecot] POP3 log in failure after switch to dovecot from Cyrus
by Stowe Spivey 20 Apr '07

20 Apr '07

I can set up and access a dovecot pop3 account using outlook express fine. I can telnet into it fine. However, GFI FaxMaker is failing to log in. I assisted a client in switching his web site, including email from one server (FreeBSD) which was using Cyrus to a Redhat 4.0 server using dovecot version 0.99.11 Here's the listing of dovecot -n: dovecot -n Usage: dovecot [-F] [-c <config file>] Fatal: Unknown argument: -n The GFI Faxmaker polls the pop3 account every minute so we're getting a lot lf these messages in the log file: Apr 19 19:51:28 server name pop3-login: Aborted login [::ffff:<ip address here>] Again, I can telnet in to the account from that server. I verified all the log in credentials are correct but it still is failing to log in. Any ideas?

2 1

[Dovecot] Memory Errors
by Paul Hamby 20 Apr '07

20 Apr '07

I just loaded 1.0.0 on a new box and am getting the following errors periodically. Apr 19 16:36:00 imap01 dovecot: auth(default): *** glibc detected *** free(): invalid pointer: 0xb7f45d14 *** Apr 19 16:36:00 imap01 dovecot: child 1943 (auth) killed with signal 6 Apr 19 16:36:00 imap01 dovecot: auth(default): *** glibc detected *** malloc(): memory corruption: 0x080920a0 *** Apr 19 16:37:31 imap01 dovecot: auth(default): *** glibc detected *** malloc(): memory corruption: 0x08091449 *** Apr 19 16:37:31 imap01 dovecot: auth(default): pam(user,ip): Child process died Apr 19 16:37:31 imap01 dovecot: auth(default): PAM: Child 13425 died with signal 6 Apr 19 16:38:09 imap01 dovecot: IMAP(user): UID larger than next_uid in file /mail_home1/c/ch/user/Maildir/dovecot-uidlist (1 >= 1) Apr 19 16:38:46 imap01 dovecot: auth(default): *** glibc detected *** free(): invalid pointer: 0xb7ea7d14 *** Apr 19 16:38:46 imap01 dovecot: child 12280 (auth) killed with signal 6 Apr 19 16:38:46 imap01 dovecot: auth(default): *** glibc detected *** malloc(): memory corruption: 0x0809143f *** Has anyone else seen something similar? What additional information can I provide? Dovecot Version=1.0.0 OS: Debian Etch CPU: x86 Maildirs are stored in NFS and only accessed via Horde/IMP webmail client. I have three other Dovecot boxes(1.0.rc28) running Sarge and haven't seen this error before. dovecot -n follows Thanks for any help. Paul imap01:/usr/local/src/dovecot-1.0.0# dovecot -n # /usr/local/etc/dovecot.conf protocols: imap listen: *:143 ssl_disable: yes disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login login_process_per_connection: no default_mail_env: maildir:~/Maildir mail_location: maildir:~/Maildir mmap_disable: yes lock_method: dotlock maildir_copy_with_hardlinks: yes mail_plugins: quota imap_quota namespace: type: private separator: . prefix: INBOX. inbox: yes auth default: passdb: driver: pam userdb: driver: passwd plugin: quota: maildir

2 1

[Dovecot] Maillog rotates, but dovecot still writes logs into old logfile?
by Mart Pirita 20 Apr '07

20 Apr '07

Tere. I use: log_path = /var/log/maillog info_log_path = /var/log/maillog And into /var/log are: maillog maillog.1 maillog.2 maillog.3 Now when log files are rotating at 04:00 (maillog > maillog.1) dovecot still keeps login into maillog.1 and not into maillog, where sendmail, etc writes logs. The only solution I did found, is adding into /etc/logrotate.d/syslog command to restart dovecot: /var/log/maillog { postrotate /usr/bin/killall -HUP syslogd /etc/rc.d/init.d/dovecot restart >/dev/null 2>&1 endscript } Any other solution? -- Mart

3 4