- dovecot - dovecot.org

Re: [Dovecot] dovecot Digest, Vol 44, Issue 53
by Lars Skovgaard 25 Dec '06

25 Dec '06

Den 25/12/2006 kl. 13.00 skrev Adrian Gill: > Date: Sun, 24 Dec 2006 16:43:40 -0000 > From: "Adrian Gill" <adrian(a)ssinternet.co.uk> > Subject: Re: [Dovecot] NTLM authentication woes > To: <dovecot(a)dovecot.org> > Message-ID: <023001c7277a$ae1bcf60$4107a8c0@AdeLaptop> > Content-Type: text/plain; format=flowed; charset="iso-8859-1"; > reply-type=response > > Lars wrote: > [Re Outlook handling of SPA/NTLM] >> Turning on auth_debug and auth_verbose has led me to discover that MS >> Outlook uses the users full name as login, instead of whatever is >> entered >> in the account-information - if the user "John Doe" has the login >> "jd(a)domain.com", Outlook sends "John Doe" instead. This of course >> fails. >> Strangely enough, if I turn off "Use Secure Authentication" from >> within >> Outlook, the login-name from the account- information is used as >> it should >> be. > > Not a solution I'm afraid, but just to let you know that I've been > experimenting with NTLM (actually with Exim for authenticated SMTP) > for a > while with a few users and had the same problems - different > versions of > Outlook behave slightly differently, but none (that I've found) > seem to work > properly. Usually Outlook sends the users Windows Logon username and > password (which is often their name, but often something else too like > 'Administrator') initially, and sometimes then retries > automatically with > the correct details. > > Things never seem to be that consistent though, except that they're > consistently bad. Frustratingly, the only option I have is to tell > users > that have problems to use Thunderbird or something else and use > cram-md5 > instead. > > As far as Outlook goes I think Microsoft seem to only bother > testing NTLM > running with MS Exchange on a local network... v.annoying! > > (Sorry not that helpful a post) > > Adrian Hi Adrian Thanks for your reply. I suspected as much, though I had hoped that there was an easy applicable solution. Sadly my MS-using clients are reluctant at best to change their applications, flawed as they may be, so I guess they'll have to live with things as they are for now. MS really should fix their apps, but that's a topic for a discussion of it's own. I use a mysql-backend, and suspect I could change the login-call to match whatever Outlook or Entourage choose to send, but that would be difficult to make consistent enough to be truly workable, I think... Thanks for your time /Lars

1 0

[Dovecot] NTLM authentication woes
by Lars Skovgaard 24 Dec '06

24 Dec '06

Hi all, I have set up dovecot to use a number of different authentication- mechanisms, which are all working as expected from well-behaved clients. However, MS Outlook on Windows and MS Entourage X on Mac OS X refuse to connect using NTLM. Outlook Express on Windows seems to be working fine, and NTLM authentication works from within OS X Mail.app as well. Turning on auth_debug and auth_verbose has led me to discover that MS Outlook uses the users full name as login, instead of whatever is entered in the account-information - if the user "John Doe" has the login "jd(a)domain.com", Outlook sends "John Doe" instead. This of course fails. Strangely enough, if I turn off "Use Secure Authentication" from within Outlook, the login-name from the account- information is used as it should be. From MS Entourage, the problem is similar but not identical. Here, the login is sent as "jd(a)domain.com/jd". I have worked around the problem for now by instructing my clients to use SSL-connections and disabling "Secure Authentication", but would like for everyone to be able to log on without using SSL (due to the returning questions regarding my self-signed certificate). Can anyone shed some light on why the MS apps refuse to behave? Thanks in advance! /Lars PS: I wish you all a merry christmas and a happy new year! :o)

3 2

[Dovecot] Postfix + Doveot SASL
by Marco Nenciarini 23 Dec '06

23 Dec '06

Hi, i'm trying to configure my postfix to use dovecot SASL instead of saslauthd with rimap to authenticate my users. I've modified my postfix/dovecot configuration as is described on http://wiki.dovecot.org/PostfixAndDovecotSASL but when an user try to login it fails with the following log (debug_auth = on): Dec 12 15:07:53 lorien dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=smtp^Iresp=<hidden> Dec 12 15:07:53 lorien dovecot: auth(default): passdb(mnencia(a)prato.linux.it,master): Attempted master login with no master passdbs Dec 12 15:07:55 lorien dovecot: auth(default): client out: FAIL^I1^Iuser=mnencia(a)prato.linux.it The question is? Why i need a master login to use SASL? How to make my postfix SASL using usual userdb? Ciao, Marco -- --------------------------------------------------------------------- | Marco Nenciarini | Debian/GNU Linux Developer - Plug Member | | mnencia(a)prato.linux.it | http://www.prato.linux.it/~mnencia | --------------------------------------------------------------------- Key fingerprint = FED9 69C7 9E67 21F5 7D95 5270 6864 730D F095 E5E4

2 2

[Dovecot] Postfix/Dovecot virtual - directory structure
by Johan Folin 23 Dec '06

23 Dec '06

Hi, perhaps I should post this in a Postfix forum but I'll give it a shot: I want my accounts sorted under /home/vmail/[domain]/[username] (and I managed to get Dovecot to look for mail there with %d and %n ), but how do I tell Postfix to sort the mail? I can't figure out how to do it. The virtual_mail_base is /home/vmail/ but there I get a bunch of folders in the form [username]@[domain]. I use mysql for the virtual mailboxes if that matters. I'll be grateful for any suggestions. /Johan Folin

3 3

[Dovecot] Filter logging
by Bas van den Dikkenberg 23 Dec '06

23 Dec '06

Hi, I have question i have loadbalancer that's connects every x seconds to my pop3 and Imap to see if it's still working. Every time it connects I see its ip is there a way to say don't log ip x.x.x.x ? With kind regards, Bas van den Dikkenberg

4 4

[Dovecot] Feature request: don't allow subscriptions to deleted mail boxes
by Erik van Oosten 23 Dec '06

23 Dec '06

Hello, Due to Thunderbird's mailbox deletion problem I was able to remove a mailbox while keeping the subscription. This was hugely annoying as Thunderbird is totally incapable of removing the subscription, even though the mailbox is long gone. It took me a while before I found a work around: I had to actually log in and remove a line from the .subscriptions file. You will probably get the same problem when you manually delete or rename a mailbox. So here is my feature request: please check for subscriptions to non-existing mail boxes and delete these when found. I am not sure what events would be appropriate for triggering the check, but I am sure there are some. Environment: - Dovecot 1.0 rc15 - SuSE Linux 10.0 - Thunderbird 1.5 Regards, Erik. PS. Thanks for Dovecot, it is the best IMAP server I have ever used. -- Erik van Oosten http://day-to-day-stuff.blogspot.com/

2 2

[Dovecot] NFS
by Timo Sirainen 23 Dec '06

23 Dec '06

I've finally managed to run Dovecot without errors in two computers with maildir and indexes stored in NFS. I added a page to wiki about this: http://wiki.dovecot.org/NFS Suggestions how to keep attribute cache enabled but to allow Dovecot to specifically request not to use a cached value (when it's important) would be welcome.

4 7

[Dovecot] Telnet Listing of IMAP mailboxes
by Lovell McIlwain 23 Dec '06

23 Dec '06

Hello all, I am trying to figure out why I am can't seem to access any of my mailboxes that I moved from my OS X machine using UW-IMAP and I followed the directions on the wiki (http://wiki.dovecot.org/MissingMailboxes) to try and figure this out. I believe based on what I saw that my client seems to be the problem, but my question is. Can anyone tell me what the difference between (\NoInferiors) and (\NoInferiors \Marked) All of my mailboxes showed up when I telnet'd to my IMAP server but I noticed some had that tag and some didn't and I'm just wondering if I should be concerned with the difference? If your not sure what I mean, here is a snipet of the command I ran and a small output: B list "" * * LIST (\NoInferiors) "/" INBOX * LIST (\NoInferiors \Marked) "/" "Junk E-mail"

2 1

[Dovecot] Dovecot killing OpenLDAP
by Gavin Henry 23 Dec '06

23 Dec '06

Hi all, For some reason, dovecot is holding a connection up, so we can't shutdown our directory server. OpenLDAP just sits there waiting for the thread to finish. Our OpenLDAP logs show (binding example and shutdown): connection_input: conn=1 deferring operation: binding daemon: shutdown requested and initiated. conn=1 fd=12 closed (slapd shutdown) slapd shutdown: waiting for 1 threads to terminate Sometimes the IMAP connection is also dropped. We are storing our users in the directory for passdb and userdb, no prefetch enabled. Running rc15 on FC6. This is crashing OpenLDAP 2.3.31 (bdb 4.2.52), as it won't shutdown. We have to do a db_recover after removing alock. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

1 0

[Dovecot] NEWBIE: Package Requirements List?
by Aaron J Weber 23 Dec '06

23 Dec '06

I can't seem to find a succinct listing of the packages (and optional packages) required to compile dovecot. I see references to various RDBMS's, but nothing that says I actually _require_ one, etc. I see references to openssl, but similarly, I don't see that it's technically required. Is there a link I'm missing that indicates the pre-conditions (pre-installed/configured software) before compiling and linking dovecot? Thanks in advance! -AJ

2 1