- dovecot - dovecot.org

[Dovecot] sasl authentication via dovecot
by Frank Church 16 Mar '07

16 Mar '07

I am setting up a Postfix/Dovecot/Virtual Domains system, with virtual tables using Postfixadmin and MySQL. Incoming mail is accepted for the virtual mailboxes, but when I try to retrieve mail from Outlook or Thunderbird I get errors You cannot log in to abc.server.net because the server has disabled login. You may need to connect via SSL or TLS. Please check the account settings for your mail server As Dovecot is handling the auth I suspect that it is where the problem lies. Are they any faults in the settings below that could be the cause? As I understand it because Dovecot is handling the login and monitoring the IMAP and POP ports. All the initial authentication is supposed to be handled there before Postfix gets involved. Running lsof -i:port on ports 110, 143, 993 and 995 shows that dovecot is handling all those inbound connections. I am also seeing messages in the log as follows dovecot: imap-login: Aborted login: rip:81.150.x.x, lip=66.90.x.x my auth section in Dovecot is as follows auth default { mechanisms = plain login passdb sql { args = /etc/dovecot/sql.conf } userdb sql { args = /etc/dovecot/sql.conf } userdb prefetch { } user = nobody socket listen { master { # path = /var/run/dovecot/auth-master path = /usr/local/var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = mail } } } My sql.conf is as follows driver = mysql connect = host=localhost dbname=postfix user=dovecot password=password user_query = SELECT concat('/var/vmail/', maildir) as home, concat('maildir:/var/vmail/', maildir) as mail, 601 AS uid, 12 AS gid, concat('dirsize:storage=', quota) AS quota FROM mailbox WHERE username = '%u' AND active = '1' password_query = SELECT username as user, password, concat('/var/vmail/', maildir) as userdb_home, concat('maildir:/var/vmail/', maildir) as userdb_mail, 601 as userdb_uid, 12 as userdb_gid FROM mailbox WHERE username = '%u' AND active = '1' this is the smtpd section from main.cn # ---------------------- SASL PART START ---------------------- smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_sasl_auth_enable = yes #smtpd_sasl_local_domain = $myhostname smtpd_sasl_exceptions_networks = $mynetworks smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes # ---------------------- SASL PART END ----------------------

2 1

Re: [Dovecot] rc22 segv when over quota
by Steffen Kaiser 16 Mar '07

16 Mar '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, 20 Feb 2007, Steffen Kaiser wrote: I have rebuilt rc23 to use "poll" instead of epoll, the same problem: warning: Can't read pathname for load map: Input/output error. Reading symbols from /lib/tls/i686/cmov/libdl.so.2...done. Loaded symbols for /lib/tls/i686/cmov/libdl.so.2 Reading symbols from /lib/tls/i686/cmov/libc.so.6...done. Loaded symbols for /lib/tls/i686/cmov/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so Core was generated by `imap [dvtest 10.20.10.63]'. Program terminated with signal 11, Segmentation fault. #0 mailbox_save_continue (ctx=0x80df574) at mail-storage.c:530 530 return ctx->transaction->box->v.save_continue(ctx); (gdb) bt full #0 mailbox_save_continue (ctx=0x80df574) at mail-storage.c:530 No locals. #1 0x08057193 in client_input (context=0x80df530) at cmd-append.c:67 client = (struct client *) 0x32c cmd = (struct client_command_context *) 0x80e27c0 #2 0x080ba522 in io_loop_handler_run (ioloop=0x80dd9b0) at ioloop-poll.c:199 ctx = (struct ioloop_handler_context *) 0x80dd9d8 pollfd = <value optimized out> tv = {tv_sec = 4, tv_usec = 762810} io = (struct io *) 0x80df610 t_id = 2 msecs = <value optimized out> ret = 135132464 call = <value optimized out> #3 0x080b9868 in io_loop_run (ioloop=0x80dd9b0) at ioloop.c:284 No locals. #4 0x08063910 in main (argc=Cannot access memory at address 0x8d4 ) at main.c:285 No locals. - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBRdr7NS9SORjhbDpvAQKXQQf/VHx/LEaC5zvz3C17iPuCSjro1Q9jznw2 GQA3FStiWhP3NsckSSQ+RxB8ih+lf+A8o2+nhF+pJ7N6qcBK3BVkum+WjQW5ddDv IEiAeo+dtFaP+7sO+qJeuq4ImXpiMDGpUVRt+PJYC1cAxWx+HYQ8im5UXEP4eTz7 uMu7MAX9vjwsWHmrfKMJf/36VQpTajMsfrfYbbTPPva++kuuNI33RIDvCeOsSmVF Vu38mRzP+wvwi/4YRV6UciVfrXV7sBl9Tk3oJjdEkn3gbxWPMfBYENxNRhAsj158 m+Zqz/bTJuThWlUFFM6uM/HDNrO39N3oWcHAJb7+zt8ULVMbD2WuVA== =9Ba1 -----END PGP SIGNATURE-----

2 10

[Dovecot] Warn before overquota
by Joan 16 Mar '07

16 Mar '07

Looking in the archives I found a message from dominik.saar(a)1und1.de on the 16/08/06, that is asking for a system to control the overquota warnings from within dovecot or dovecot LDA. The proposed solution is to use exim as MTA, since it has build in support. In my case I'm using postfix, what would be the recommended approach in that case? I was thinking of something like the cyrus LDA that you can with deliverquota [ -w percent ], something like that in a quota aware LDA would be quite useful for me. Any proposed solution would be welcome. Thanks

2 3

[Dovecot] running DC and UWIMAP on the same box
by Stewart Dean 15 Mar '07

15 Mar '07

It never hurts to ask...... I am bringing up DC on my production mailserver (which runs UWIMAP for production IMAP service) to learn and test it, much as I did when I introduced SSL protected IMAP, using an unpublicized non-standard port. The folder and mailbox location and format will remain the same. Questions: 1) Will DC be building indices for everything or just for the userid that I use to request client service for? 2) Are there any pitfalls others have experience doing this? -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

3 2

[Dovecot] Postfix+Dovecot+LDAP
by Ejay Hire 15 Mar '07

15 Mar '07

This message does not contain a bug report or any issues. It is a summary of my experiences with Postfix, Dovecot, and Ldap. 1. Do not use Dovecot 0.99, even if it's what your vendor has packaged. 1a. ... When you upgrade past 0.99, you'll get some double mail because of UIDL's. 2. Do not use PAM and Ldap and then let dovecot talk to pam. It is bad. Don't do it. 2a. Unless you like users digging around in random mailboxes. 2b. NSCD is broken and should not be trusted. 3. Dovecot+Ldap works, and works well. 3a. If you don't do "Auth Binds", it cuts the work on the ldap server in half. 3b. User Prefetch cuts that in half again. 4. Postfix+Ldap works, and works well. 4a. If your server is underspec'd, you may get the occassional "Temporary lookup failure" 400 error during periods of heavy load, specifically when backups are running. 5. OpenLdap works. 5a. When you run as ldap, the config files need to be owned by ldap. 5b. ... And the database 5c. ... And the schema 5d. Adding slapd_db_recover to the init script isn't a bad idea. 6. Don't be dumb. 6a. ... Like me. 6b. If you are using ldap to lookup the attribute mail, index the mail attribute. 6c. If you add an index to Openldap, you have to reindex the database with slapindex 6d. ... Or you bounce a lot of mail before you figure it out. 6e. Make sure you can login to the console and/or ssh if the ldap server dies. 6f. ... Be Really sure. 6g. The convert plugin can switch users between maildirs and mboxes. Ejay Hire IT Manager, Confidential Business Resources 615-665-5555 (office) 615-456-9813 (mobile)

5 13

[Dovecot] tb-negative-fetch workaround
by bofh list 15 Mar '07

15 Mar '07

Hi, I notice in the Changelog that the tb-negative-fetch workaround shouldn't be needed any longer. We have a user running Thunderbird 1.5.0.8 that is experiencing the same problem described in https://bugzilla.mozilla.org/show_bug.cgi?id=263904 The current command did not succeed. the mail server responded: error in imap command uid: invalid body[..] parameter. Missing '>' in '<12288.-7215>' Any ideas? Thanks!

4 12

[Dovecot] pop3 uidl when migrating from mbox to maildir
by Giuseppe Giacomini 15 Mar '07

15 Mar '07

Thank you for the reply of my previous post (http://www.dovecot.org/list/dovecot/2007-March/020716.html) now it works, but I have another question about migrating pop3 account (with leave mail on server) to maildir. On this post -> http://www.dovecot.org/list/dovecot/2006-February/011464.html you explain how to create dovecot-uidlist preserving UIDVALIDITY. Is there someone that have build a script to generate such dovecot-uidlist? thank you all

2 1

[Dovecot] [PATCH 0/5] fix gcc warnings in CVS HEAD
by Max Kellermann 15 Mar '07

15 Mar '07

Hi, I have rewritten the patches I submitted earlier today for the CVS HEAD. Some of the changes were already committed months ago. On 2007/03/15 12:30, Timo Sirainen <tss(a)iki.fi> wrote: > That's ok, but I'm not sure about bsearch_insert_pos(). It's the way it > is mostly because I wanted to keep bsearch() API. If it can't return > void * then maybe it could be easier to just change the whole API to > something like: One of the patches changes exactly that. Timo, please review this patch carefully, because I havn't tested them yet. Max

2 6

[Dovecot] Alerts and pre-authenticated connections
by Mike Brudenell 15 Mar '07

15 Mar '07

Greetings - Work moves onward here at setting up our Dovecot IMAP service and I've got a couple more questions, I'm afraid... :-} ============================================== Q1. The UW IMAP Server supports "pre-authenticated connections" -- does Dovecot? Specifically, it is possible to create a symlink from /etc/rimapd to the UW IMAP server binary and then use rsh or ssh from within the Pine mail client to execute that on the server to establish the IMAP connection: rsh imap.york.ac.uk /etc/rimapd Pine uses this to open a "pre-authenticated" connection to the UW IMAP server to avoid the user having to enter their username and password -- the rsh/ssh mechanism provides the IMAP server with the user's login name. I've grepped the Dovecot source but it looks like it doesn't support this. Am I right in thinking this? ============================================== Q2. The UW IMAP Server can issue "IMAP Alerts" The UW IMAP server can issue a sequence of one-line notices to mail clients using IMAP's ALERT mechanism. The notices are formed formed from each line in a systemwide file (if non-empty) and a per-user file (~/.imapalert). Many, but by no means all, mail clients display these notices to the user -- currently we use this mechanism to advise people who have totally run out of mail quota. I've grepped the Dovecot source for "alert" but it looks like the IMAP Alert mechanism isn't supported. Am I right in thinking this? ============================================== Cheers, Mike B-) -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

2 7

[Dovecot] imap connection problems
by Ivan Pesin 15 Mar '07

15 Mar '07

Hi, Have encountered some strange behavior of dovecot: after few days of work (5-7 days, ~50 users, imap over ssl or tls) dovecot stops respond with "* OK Dovecot ready.". I.e. connection gets accepted, but no response from dovecot: [ivan@dyn-226 bin]$ telnet imap 143 Trying 192.168.100.9... Connected to imap.n-ix.com.ua (192.168.100.9). Escape character is '^]'. while obvious should be [ivan@dyn-226 bin]$ telnet imap 143 Trying 192.168.100.9... Connected to imap.n-ix.com.ua (192.168.100.9). Escape character is '^]'. * OK Dovecot ready. After dovecot restart everything works OK. This behavior we started to observe since rc24, before that on rc9 we didn't see that problem. Currently running on rc26. Any ideas? Thanks, Iv

2 2