- dovecot - dovecot.org

[Dovecot] Fwd: dovecot - cas authentication help needed
by Vidyasagar Warge 18 Apr '07

18 Apr '07

---------- Forwarded message ---------- From: Vidyasagar Warge <vidyasagar.mailinglists(a)gmail.com> Date: Apr 17, 2007 4:36 AM Subject: dovecot - cas authentication help needed To: cas(a)tp.its.yale.edu Hello All, I am new to CAS & writing my first mail on this mailing list. So please forgive me if I am asking something trivial or stupid :). I am trying to configure dovecote-IMAP server to authenticate the users against CAS through PAM authentication. I found a tutorial here: http://translate.google.com/translate?hl=en&sl=fr&u=http://esup-portail.org… I followed the instructions, but not able to get the authentication running through PAM :(. I googled a lot but didn't found any text on dovecot-pam-casauthentication. If anyone has done it before? and can tell me the steps? Thanks in advance! Regards, Vidyasagar Warge.

1 0

[Dovecot] help with static userdb
by Kyle Wheeler 18 Apr '07

18 Apr '07

Hey, This may be a dumb question... I'm trying to set up 1.0 with a static userdb, and I'm getting stuck. I have: userdb static { args = uid=500 gid=500 home=/domains/%d/%n } When I attempt to log in as, say, kyle(a)memoryhole.net (via telnet, so I *know* I'm logging in as that user), the debug log says that it thinks my home directory is "/domains//kyle". I even tried, just to check what might be going on: args = uid=500 gid=500 home=/domains/%u/%d/%n It then thought my home directory was "/domains/kyle//kyle". Can anyone help me? Where might that be getting cleared? ~Kyle -- The more men you make free, the more freedom is strengthened and the ... greater is the security of the State. -- Frederick Douglas, Nov 17, 1864

2 2

[Dovecot] lazy_expunge vs mulberry
by Frank Cusack 18 Apr '07

18 Apr '07

I've configured the lazy_expunge plugin exactly like it says on the wiki. I can't seem to configure Mulberry to find the new namespaces. Any hints? I notice that the wiki says to use / as the separator. Mulberry has a setting for this, and the default is '.'. Leaving this as '.' in Mulberry and / in dovecot seems to work fine. (But I still can't access the .EXPUNGED or other namespaces.) Another page on the wiki says that the default separator for maildir is '.'. Why does the lazy_expunge page suggest using '/'? I'm very confused about namespaces. -frank

2 4

[Dovecot] Time just moved backwards
by Chaos Engine 18 Apr '07

18 Apr '07

Hi there, I got a daily cron (rdate to local time server) job wich adjusts time and which constantly gives me headache. Every day my dovecot suicides with: "dovecot: Time just moved backwards by 11 seconds. This might cause a lot of problems, so I'll just kill myself now." Of course my onboard clock is constantly off by more than 5 secs. I don't want to abandon time synchronization and I want to use dovecot. Maybe a -HUP signal would do? What do you propose? -- Chaos greets U

7 9

[Dovecot] PAM on AIX - resolved
by Stewart Dean 17 Apr '07

17 Apr '07

I previously asked about this problem with pam on IBM's AIX Unix > I get the errmsg: > auth|security:err|error dovecot-auth PAM: load_modules: can not open > module /usr/lib/security/pam_prohibit FWIW, it turned out that the default PAM libraries are 32 bit, while I had compiled DC at 64bit. The /etc/pam.conf lines come standard like this: telnet auth required /usr/lib/security/pam_aix To get 64 bit, you can either change the line like this: dovecot auth required /usr/lib/security/64/pam_aix OR, you can let PAM figure which bit-width library to use dovecot auth required pam_aix Needless to say, it would have been better if the IBM default was the second -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

1 0

[Dovecot] keeping indexes in tmpfs
by Justin McAleer 17 Apr '07

17 Apr '07

While doing some testing with converting accounts while simulating incoming mail load (no other pop/imap processes going but 4 processes converting users), we found that we were maxing out the local disk in the server with the index activity. To find out that it was the index activity, I mounted a tmpfs for dovecot to keep indexes on, and the system load dropped from 70 to 3 :) Anyway, Timo and others, do you have any thoughts about keeping indexes on a tmpfs partition? I realize the obvious issues with this: running out of space, and the fact that the partition is lost on reboot. However, we plan to run a cluster of these servers anyway, where we will keep domains/accounts going to a particular server but fail over to one of the others in case of an outage. Recreating the indexes seems pretty trivial when writing to tmpfs anyway, plus we could copy the indexes to disk (restore after reboot) in the case of planned outages... unplanned outages result in another server rebuilding them all anyway. So, I'm looking for non-obvious issues we may have with this approach. I need to do more testing to see how much memory we would actually need to feasibly keep the indexes there, but otherwise is there a good reason not to do this?

3 7

Re: [Dovecot] Public folders using NAMESPACE
by Joakim Ryden 17 Apr '07

17 Apr '07

On Tue, April 17, 2007 3:48 am, Joakim Ryden wrote: > On Tue, April 17, 2007 2:29 am, Timo Sirainen wrote: >> On Tue, 2007-04-17 at 02:14 -0700, Joakim Ryden wrote: >>> I've been trying to research how to (or if possible at all) implement public >>> folders using the namespace feature on a server with multiple virtual >>> domains. >>> After about an hour of looking around I'm a little confused. :) >> >> Did you read this? http://wiki.dovecot.org/SharedMailboxes >> >> I now added a link there from ACL page. > > Thanks Timo! That's pretty helpful. I think I'm still missing something though. > I have the following configuration: > > > namespace public { > separator = . > prefix = Public Folders. > location = maildir:/var/mailstore/shared-folders/%d/Maildir > } > > namespace private { > separator = . > prefix = > inbox = yes > } > > With this, "Public Folders" shows up (testing with Thunderbird) but not as an > italic special folder (does that make sense?) as it does on all other accounts I > have on other servers which support public folders. I created a folder here: > > /var/mailstore/shared-folders/domain.com/Maildir/.Announcements > > which also shows up nicely, I can copy email in there and subscribe and > unsubsribe to this subfolder, but clicking on "Public Folders" gives: Mailbox > doesn't exist: Public Folders. which I'm sure is because I've missed or > misunderstood something :) Any ideas? > > Cheers! > > --Jo Ok, I'm a dumb ass. If I would actually use my eyes I would see: "Another problem is that although the namespace prefix shows up as a normal looking mailbox, Dovecot doesn't allow subscribing to it because it's not a real mailbox. This will be fixed in later versions." on the wiki page. Nevermind me :) I assume this hasn't been fixed yet?

1 0

[Dovecot] Different classes of user
by John Robinson 17 Apr '07

17 Apr '07

Hello list! Only recently joined, please excuse me if this is a stupid question. I'd like to have 2 classes of user: those with shell accounts, and those without. They'll all have "real" accounts, for which the password can be checked with PAM. I've set up SSL too. What I want to arrange is for users with shell accounts not to be succeed in logging in to Dovecot without using TLS/SSL. I'll have to allow unencrypted logins (for non-shell users), but I want to reject/refuse such a login from someone with a shell account. I've already made my exim do this, with the following logic in my authenticator there: if (pam auth ok) and ((tls) or (user's shell not listed in /etc/shells)) I haven't worked out how to make Dovecot do this, yet. So far I just tried using * as the PAM service name, in the hope that not only would pop3 or imap get passed through, but pop3s and imaps might, and I had a line in my /etc/pam.d/imap and pop like this: auth required pam_succeed_if.so debug shell notin /bin/bash:/bin/sh which worked, but unfortunately also got used for imapS logins. Then I realised this was likely to be the wrong thing anyway, because it would presumably only cover IMAPS on port 993, and not IMAP+TLS on the usual port 143. So I've had a go but got it wrong. What should I do to get it right? Cheers, John.

3 11

[Dovecot] timeout error in dovecot.log
by Joe Wong 17 Apr '07

17 Apr '07

Hello, I have upgraded to Dovecot 1.0.0, I saw a lot of error in the dovecot.log file: Timeout while waiting for lock for transaction log file /fs/example.com/joewong/Maildir/dovecot.index.log where /fs is a NFS mounted directory. What can be the cause of this problem? How to prevent this from happening? Thanks! - Joe

3 5

[Dovecot] Maildir, INDEX, and folders
by Troy Engel 17 Apr '07

17 Apr '07

I'm reading the wiki et el. regarding indexes, but can't come up with a coherent answer to the setup and what will happen. I want to take the indexes and move them off of NFS (~/Maildir) and place in /var/spool/dovecot/indexes, but not have to hand create everything (user homes, mail folders) So, I create a parent folder /var/spool/dovecot/indexes that has the appropriate permissions for writing by all users/dovecot. If I then set: mail_location = maildir:~/Maildir:INDEX=/var/spool/dovecot/indexes/%1u/%u ...will the dovecot daemon(s) automagically create (A) the parent user folders (i.e. .../indexes/t/tengel/)(1), and (B) the necessary subfolders for all the child folder indexes? (i.e. .../tengel/.Lists.Dovecot/) Most of the doc info seems to revolve around moving your indexes if you use mbox, I'm a little fuzzy on what happens with Maildir when you attempt this. thanks! -te (1) in our setup, initially user's home folders are created on an admin server -> NFS that is not the mail server, so Dovecot needs to create the home & index folders on it's own at runtime. -- Troy Engel | Systems Engineer Fluid, Inc | http://www.fluid.com

4 5