- dovecot - dovecot.org

[Dovecot] Reading mail for Virtual and Real LDAP Users
by Aaron Luchko 20 Feb '07

20 Feb '07

I'm trying to setup a system with ldap+postfix+dovecot. Everyone who gets an email is stored in LDAP, some of these users also have a local unix account, regardless I want all users to be dealt with as virtual users. All the mail is stored by postfix in /var/spool/mail in Maildir format with permissions 600 vmail:vmail. Everything works fine when dovecot tries to read the mail of a completely virtual user, the problem is when dovecot tries to read mail for a user who has an account on the machine, dovecot finds the user's local account, then it tries to read the mail as that user. Even if first_valid_{u,g}id is low enough to allow login the user still doesn't have sufficient permissions to read the mail. I can't figure out why this is happening and was hoping someone could help me out. thanks, Aaron /etc/dovecot-ldap.conf: hosts = server.example.com base = dc=example,dc=com dn = cn=Directory Manager dnpass = password uris = ldap://127.0.0.1 user_attrs = mail user_filter = uid=%u user_global_uid = 5001 user_global_gid = 5001 pass_filter = uid=%u /etc/dovecot.conf: mail_location = maildir:/var/spool/mail/%u/ protocols = imap pop3 mail_log_prefix = "%Us(%u):%i:%h " first_valid_uid = 5001 first_valid_gid = 5001 protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth_verbose = yes auth_debug = yes auth default { mechanisms = plain passdb pam { } userdb passwd { } userdb ldap { args = /etc/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot-ldap.conf } user = root } dict { } plugin { }

2 2

[Dovecot] NTLM oddities
by Cassidy B. Larson 20 Feb '07

20 Feb '07

Started implementing the MasterUser changes to my config files so I can finally offer SPA for pop3/imap. Things are working fine with the MasterUser (horray!), however one of my guys started using SPA with Outlook Express and started getting another users mailbox. Turns out to be related to NTLM. His Outlook express is configured for the username of 'johnsmith'. However, you'll see the NTLM took the username from his XP machine login, it appears, which is just "John". However, what is really weird, is the "failed" on the "client out" line, but then the proxy went ahead and proxied to the storage server. Here's some output from debuggage: dovecot: Feb 19 16:15:56 Info: auth(mail.infowest.com): client in: AUTH 1 NTLM service=POP3 lip=204.17.177.60 rip=209.33.215.142 resp= dovecot: Feb 19 16:15:56 Info: auth(mail.infowest.com): client out: CONT 1 dovecot: Feb 19 16:15:56 Info: auth-worker(mail.infowest.com): sql(John, 209.33.215.142): query: SELECT a.clearpasswd AS password, v.storeIP AS host, CONCAT(IF('John' LIKE '%(a)%.%',CONCAT(LCASE('John'),''),CONCAT(LCASE('John'),'@',p.host)),'*masteruser') AS destuser, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy, 'masterpass' AS pass FROM iwmailsystem.virtmailbox AS v INNER JOIN iwmailsystem.popserversAS p ON ( p.storeIP = '204.17.177.60') INNER JOIN authenticate.users AS a ON (a.userID= IF('John' LIKE '%(a)%.%',CONCAT(LCASE('John'),''),CONCAT(LCASE('John'),'@', p.host))) WHERE v.userID = IF('John' LIKE '%(a)%.%',CONCAT(LCASE('John'),''),CONCAT(LCASE('John'),'@',p.host)) AND v.client_active=1; dovecot: Feb 19 16:15:56 Info: auth(mail.infowest.com): password(John, 209.33.215.142): Credentials: 8447128CC04AD05D1CD15F0C2F17F136 dovecot: Feb 19 16:15:57 Info: auth(mail.infowest.com): client out: FAIL 1 user=John host=204.17.177.76 destuser= john(a)host.com*masteruser nologin proxy pass=masterpass dovecot: Feb 19 16:15:57 Info: pop3-login: proxy(John): started proxying to 204.17.177.76:110: user=<John>, method=NTLM, rip=209.33.215.142, lip= 204.17.177.60 Questions: 1) So is it possible to use OE for SPA authentication without it sending the "XP username", but the actual account username OE is configured for ? 2) Why, when it "FAIL"ed did it still proxy? This seems bad :) Thanks, Cassidy

3 3

[Dovecot] rc22 segv when over quota
by Steffen Kaiser 20 Feb '07

20 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I just pulled and built version 1.0.rc22 root@ux-2s11-9:/mnt/mailcache/dvtest/MailDir# dovecot -n # /usr/local/etc/dovecot.conf log_path: /var/tmp/dovecot.log info_log_path: /var/tmp/dovecot.info ssl_disable: yes disable_plaintext_auth: no verbose_ssl: yes login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login verbose_proctitle: yes mail_location: maildir:/mnt/mailcache/%u/MailDir:CONTROL=/var/cache/dovecot/%i/control:INDEX=/var/cache/dovecot/%i/index mail_debug: yes mail_plugins: quota imap_quota auth default: mechanisms: plain login cache_size: 10 verbose: yes debug: yes debug_passwords: yes passdb: driver: pam args: cache_key=%u dovecot userdb: driver: passwd On Linux Debian Etch on Debian kernel v2.6.18; tested with XFS and Extended3. repquota /mnt/mailcache *** Report for user quotas on device /dev/mapper/mailstaff-mailcache Block grace time: 7days; Inode grace time: 7days Block limits File limits User used soft hard grace used soft hard grace - ---------------------------------------------------------------------- dvtest -- 560 600 1024 17 0 0 Then I copy messages in a directory via Thunderbird, the log shows: dovecot: Feb 20 12:12:27 Error: IMAP(dvtest): o_stream_send_istream(/mnt/mailcache/dvtest/MailDir/.test/tmp/1171969947.P22138Q3.ux-2s11-9) failed: Resource temporarily unavailable dovecot: Feb 20 12:12:27 Error: child 22138 (imap) killed with signal 11 - -or- dovecot: Feb 20 12:09:42 Error: IMAP(dvtest): o_stream_send_istream(/mnt/mailcache/dvtest/MailDir/.test/tmp/1171969782.P22134Q6.ux-2 s11-9) failed: Disk quota exceeded dovecot: Feb 20 12:09:42 Error: child 22134 (imap) killed with signal 11 and repquota /mnt/mailcache dvtest +- 616 600 1024 6days 20 0 0 The Thunderbird continues to copy other messages believing everthing is OK. There is also this message on the screen (started via dovecot -F): dm-1: write failed, user block limit reached. Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBRdr0Vy9SORjhbDpvAQIKfwgA0vONUFwD5nZ1iOb0z+bRf2Kxz9/9r6QE yqZ/iL6FylJMDQwNi9hY3EbzIbu+pEs3SJrz3VVKuWO7bVyhVTFpxQaSS8vBokXo 6cnLuG5V+n3jtyqy26lM1VQWDCifEY/++YAs/KmJ5NQHm0mk5bUEc6fhDeL4D6MJ UcKUBrQ8S2B6vJMBQfcabgnC8KR9kh+xvvUtvlnsfpoaInAKx8x4r1S+9mMjbAEv lIjHt+yavW6Hlq+HmVCirTddesy1rQDFiDSrrV9F8Sp43GpxHyjun9iK6CGrQkJf AO4o2DsBIbBrhvyUrzUks1dR8ZHasyBQDuMVG02/s1bM3UIkJVX3RA== =/MmG -----END PGP SIGNATURE-----

2 2

[Dovecot] Apple Mail/Tiger Bug came up on the pf mailing list. . .
by Sean Kamath 20 Feb '07

20 Feb '07

Hi all, Just FYI, this post showed up on the pf mailing list a couple of days ago: Cc: pf(a)benzedrine.cx From: Axel Rau <Axel.Rau(a)Chaos1.DE> Subject: Re: mismatch on route through packet/byte counts Date: Sun, 18 Feb 2007 14:37:56 +0100 To: Daniel Hartmeier <daniel(a)benzedrine.cx> X-Mailer: Apple Mail (2.752.2) Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by insomnia.benzedrine.cx id l1IDc2fg029064 Sender: owner-pf(a)benzedrine.cx Thank you, Daniel, for taking the time to analyze my traces and to explain the problem so perfect, that even non-net-developers, like I, can understand it. (-;) > > This looks like a bug in the client's TCP/IP stack, and how to fix it > depends on the client's OS. IMO, the RST is invalid, and pf is > right in > blocking it. The OS is Darwin 8.8 / Mac OS X 10.4.8, a 4.4BSD descendant and the relevant source may be in netinet/tcp_output.c, found here http://www.opensource.apple.com/darwinsource/10.4.8.ppc/xnu-792.12.6 Good news is that your diagnosis could bring us forward to resolve a long running painful bug filed against Mail.app, the Apple email client. If you agree, I would like to add your diagnosis to my open bug report and cross-post the mail on the Darwin Developers list, before filing a new bug against Darwin. Axel --------------------------------------------------------------------- Axel Rau, â˜€Frankfurt , Germany +49 69 9514 18 0

1 0

[Dovecot] relocating indexes.
by Rob Shepherd 20 Feb '07

20 Feb '07

Dear Dovecot users, I'd like to relocate indexes from NFS to local storage. I plan to replace... default_mail_env = maildir:~/.maildir with mail_location = maildir:~/.maildir:INDEX=/usr/local/var/dovecot/index/%u However, to minimise disruption, by avoiding dovecot rebuilding indexes for many user's large and numerous folders, I'd like to copy the existing indexes to the new location. Here is a list of _my_ indexes (in and under ~/.maildir) ./.Drafts/dovecot-uidlist ./.Drafts/dovecot.index ./.Drafts/dovecot.index.cache ./.Drafts/dovecot.index.log ./.OpenLDAP/dovecot-keywords ./.OpenLDAP/dovecot-uidlist ./.OpenLDAP/dovecot.index ./.OpenLDAP/dovecot.index.cache ./.OpenLDAP/dovecot.index.log ./.OpenLDAP/dovecot.index.log.2 ./.Sent/dovecot-keywords ./.Sent/dovecot-uidlist ./.Sent/dovecot.index ./.Sent/dovecot.index.cache ./.Sent/dovecot.index.log ./.Trash/dovecot-keywords ./.Trash/dovecot-uidlist ./.Trash/dovecot.index ./.Trash/dovecot.index.cache ./.Trash/dovecot.index.log ./.mailscanner/dovecot-keywords ./.mailscanner/dovecot-uidlist ./.mailscanner/dovecot.index ./.mailscanner/dovecot.index.cache ./.mailscanner/dovecot.index.log ./.mailscanner/dovecot.index.log.2 ./.nagios/dovecot-keywords ./.nagios/dovecot-uidlist ./.nagios/dovecot.index ./.nagios/dovecot.index.cache ./.nagios/dovecot.index.log ./.samba/dovecot-keywords ./.samba/dovecot-uidlist ./.samba/dovecot.index ./.samba/dovecot.index.cache ./.samba/dovecot.index.log ./.samba/dovecot.index.log.2 ./.sw-announce/dovecot.index ./.sw-announce/dovecot.index.cache ./.sw-announce/dovecot.index.log ./dovecot-keywords ./dovecot-uidlist ./dovecot.index ./dovecot.index.cache ./dovecot.index.log ./dovecot.index.log.2 Would I be correct in copying these to /usr/local/var/dovecot/index/rob/ (_my_ new index loc) whilst preserving the structure of the folders etc. Thanks Rob -- Rob

4 3

[Dovecot] startup script under FreeBSD 6.2 / dovecot-1.0rc22
by Alexis Susset 20 Feb '07

20 Feb '07

Hi all, I recently installed Dovecot rc22 from the FreeBSD ports and I have some problem with the dovecot startup: - If I start dovecot manually, it works fine, it starts and I get messages in /var/log/maillog - If I reboot the machine, that's where the problem appears, dovecot doesn't seem to start and I get nothing, no errors in /var/log/maillog Any idea if this is a known problem and how to fix it ? Thanks in advance, Regards, -- Alexis

4 5

[Dovecot] Run fetchmail after login?
by Brett B. 20 Feb '07

20 Feb '07

Hello all, I was wondering if it is possible to run fetchmail after a user logs into dovecot? So far I have tried to make a small script that contains the command for fetchmail. Then I told the dovecot mail_executable to look at that script. However this ends up leaving the server hanging and does not seem to work. Thanks

2 1

[Dovecot] Dovecot losing .mailboxlist files
by Lauri Jesmin 20 Feb '07

20 Feb '07

Hello! I am running a site that has two servers, 10 000 users in both, Solaris 9 and home directories with mbox mailboxes shared with NFS. Indexes are kept separately in both server, on local disks, both servers are serving imap (from NFS mboxes). We are trying to convert from uw-imap to dovecot. Servers are currently running on their limits and now i have mysterious problems with .mailboxlist file: i patched dovecot to use .mailboxlist file instead of .subscriptions, but sometimes the .mailboxlist file disappears on some users. Instead there are appearing .nfsXXXXXX files, where XXXXXX is combination of numbers and capital letters. Also some users have problems with subscribing to folders, others do not have this problem. It seems to be that users who do not have .mailboxlist have also problems with subscribing to folders. Dovecot is version 1.0rc22. I have not discovered error messages in logs. -- Lauri Jesmin <lauri.jesmin(a)ut.ee> Tartu Ülikool

2 1

[Dovecot] mbox assert crashes finally fixed?
by Timo Sirainen 20 Feb '07

20 Feb '07

Patch: http://dovecot.org/list/dovecot-cvs/2007-February/007760.html Nightly snapshot should be ready in a few minutes. I'll release rc23 tomorrow. Night.

1 0

[Dovecot] Weird Issues with latest nightly (pre-rc23)
by Cassidy B. Larson 20 Feb '07

20 Feb '07

Just updated one of my proxy boxes to the latest nightly (20070217), restarted the dovecot process and got a bit of errors showing up for each pop3/imap connection. Feb 19 11:14:00 marbella dovecot: pop3-login: Login: user=<user1(a)host.com>, method=PLAIN, rip=209.33.217.218, lip=204.17.177.60 Feb 19 11:14:00 marbella dovecot: POP3(user1(a)host.com): Set pop3_uidl_format in config file Feb 19 11:14:00 marbella dovecot: child 33684 (pop3) returned error 89 Feb 19 11:14:04 marbella dovecot: imap-login: Login: user=<user2(a)host.com>, method=PLAIN, rip=204.17.177.50, lip=204.17.177.60 Feb 19 11:14:04 marbella dovecot: IMAP(user2(a)host.com): mbox: Can't create root mail directory /dev/null/mail: Not a directory Feb 19 11:14:04 marbella dovecot: IMAP(user2(a)host.com): MAIL environment missing and autodetection failed (home /dev/null) Feb 19 11:14:04 marbella dovecot: child 33753 (imap) returned error 89 On the pop3 errors above. Why should I have a pop3_uidl_format in the config file for the proxy? This was working fine on rc19. I do have a pop3_uidl_format on my storage boxes. Same with the imap section. It should just proxy over (and is on rc19), the proxy shouldnt have to know about the mail directory. Am I the only one seeing this? Or have I missed a config change that is required? thanks, Cassidy

2 2