- dovecot - dovecot.org

[Dovecot] ssl with openwrt OS
by burolib 28 Mar '07

28 Mar '07

Hi. I'm still facing troubles on my way. This time concerning ssl encryption. only dovecot-auth starts... imap and pop3 go down with this log dovecot: Mar 23 18:34:19 Info: Dovecot v1.0.rc27 starting up dovecot: Mar 23 18:34:20 Error: Temporary failure in creating login processes, slowing down for now dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: child 849 (login) returned error 89 dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: child 847 (login) returned error 89 dovecot: Mar 23 18:34:20 Error: child 848 (login) returned error 89 I attemped with makecert.sh, myown certificate which works with qmail-pop3d/stunnel, and cacert.org. All the times i get the same error. my dovecot.conf says: ## ## SSL settings ## #ssl_listen = #ssl_disable = no ssl_cert_file = /etc/ssl/certs/server.pem ssl_key_file = /etc/ssl/private/private.key #ssl_key_password = #ssl_ca_file = #ssl_verify_client_cert = no ssl_parameters_regenerate = 128 ssl_cipher_list = ALL:!LOW verbose_ssl = yes I spent a week trying to solve this out. Any ideas? ------------------------------------------------------ Leggi GRATIS le tue mail con il telefonino i-mode di Wind http://click.libero.it/imode ------------------------------------------------------ Passa a Infostrada. ADSL e Telefono senza limiti e senza canone Telecom http://click.libero.it/infostrada

3 2

[Dovecot] ignoring some subfolders [potential wishlist]
by Arkadiusz Miskiewicz 28 Mar '07

28 Mar '07

Hello I'm looking at migration path from my current setup (tpop3d/courier-imap) and I seem to miss one feature - ability to ignore some subfolders for pop3. tpop3d allows me to say: maildir-ignore-folders: Spam Trash trash Sent sent-mail POP3-Invisible (would be stupid to fetch own sent-mail via pop3 again 8-) In recent tpop3d cvs version I can also use regexps like maildir-ignore-folders: ^IMAP-Only.*$. Is it possible to ignore some subfolders in dovecot per protocol (like for pop3 only and not imap) ? If not then please consider this as wishlist, maybe in form of location negation like: mail_location = \ maildir:/var/mail/%Lu:!maildir:/var/mail/%Lu/.Something (which doesn't look sane) or with separate config directive like in tpop3d -- Arkadiusz Miśkiewicz PLD/Linux Team arekm / maven.pl http://ftp.pld-linux.org/

2 2

[Dovecot] PAM auth problem
by Taras Savchuk 28 Mar '07

28 Mar '07

Pam auth don't work when I add pam_group: gw# id test2 uid=10001(test2) gid=11111(adusers) groups=11111(adusers), 10000(group1), 10001(group2), 10002(test10) gw# getent passwd test2 test2:*:10001:11111:Our AD-Unix Test Account:/home/test2:/bin/sh gw# cat /etc/pam.d/dovecot auth required pam_group.so group=adusers auth required pam_krb5.so debug try_first_pass All works fine with only pam_krb5 module. -- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11

2 3

[Dovecot] problem with POP3 mail location when using namespaces
by Lutz Preßler 28 Mar '07

28 Mar '07

Hello, I have a problem (at least with 1.0rc28 and 1.0rc27) when using the following namespace definitions: namespace private { separator = "/" inbox = yes location = mbox:~/Mail:INBOX=/var/spool/mail/%u } namespace public { separator = / prefix = 0-LISTS/ location = mbox:/var/mail/lists:INDEX=~/.sharedMail/lists/index } namespace private { separator = "/" prefix = "0-MAILDIR-FOLDERS/" location = maildir:~/Maildir } IMAP access is working as expected, but when connecting with POP3(s), the (mostly empty in our case) ~/Maildir is used as mail location when it has been created (including index files) by IMAP access. If ~/Maildir does not exist/has been deleted again, POP3 uses /var/spool/mail/%u. This is independent of the private namespace section order and also an explicit "inbox = no" in 0-MAILDIR-FOLDERS namespace. Any idea if this is an configuration issue I don't understand yet or a bug? Thanks, Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 1

[Dovecot] Allow/disallow mail access based on group membership
by Taras Savchuk 28 Mar '07

28 Mar '07

I'm just finished FreeBSD/AD integration via Kerberos/LDAP and now I can manage unix users/groups from AD. I want to grant access to IMAP based on user membership in certain group. Is it possible? Can you give me some hints? Thanks in advance! -- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11

2 3

[Dovecot] LDAP group quota support
by Ioannis Zachariadis 28 Mar '07

28 Mar '07

Is there a plan to support LDAP group quotas in the future releases ? Just like the ldap quota plugin for users but with additional support for a unified quota for a group users. -- giannis.

2 2

[Dovecot] Building problem on FreeBSD with GSSAPI
by Taras Savchuk 28 Mar '07

28 Mar '07

I have error while compiling dovecot with GSSAPI under FreeBSD 6.2: Is this dovecot-related or not? cc -std=gnu99 -O2 -fno-strict-aliasing -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o dovecot-auth auth.o auth-cache.o auth-client-connection.o auth-master-connection.o auth-master-listener.o auth-module.o auth-request.o auth-request-handler.o auth-stream.o auth-worker-client.o auth-worker-server.o db-ldap.o db-sql.o db-passwd-file.o main.o mech.o mech-anonymous.o mech-plain.o mech-login.o mech-cram-md5.o mech-digest-md5.o mech-ntlm.o mech-gssapi.o mech-rpa.o mech-apop.o passdb.o passdb-blocking.o passdb-bsdauth.o passdb-cache.o passdb-ldap.o passdb-passwd.o passdb-passwd-file.o passdb-pam.o passdb-checkpassword.o passdb-shadow.o passdb-sia.o passdb-vpopmail.o passdb-sql.o userdb.o userdb-blocking.o userdb-ldap.o userdb-passwd.o userdb-passwd-file.o userdb-prefetch.o userdb-static.o userdb-vpopmail.o userdb-sql.o -Wl,--export-dynamic -L/usr/local/lib libpassword.a ../lib-settings/libsettings.a ../lib-ntlm/libntlm.a ../lib-sql/libsql.a ../lib/liblib.a -lpam -L/usr/lib -lgssapi -lkrb5 -lasn1 -lroken -lcrypt -lcom_err /usr/local/lib/libldap.so /usr/local/lib/liblber.so /usr/local/lib/libsasl2.so -lssl -lcrypto -Wl,--rpath -Wl,/usr/local/lib -Wl,--rpath -Wl,/usr/local/lib /usr/lib/libgssapi.so: undefined reference to `krb5_rd_cred2' /usr/lib/libgssapi.so: undefined reference to `krb5_crypto_destroy' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_address' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_data' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_keyblock' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setremotesubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_data_free' /usr/lib/libgssapi.so: undefined reference to `krb5_config_get_strings' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalsubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_generatelocalsubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_sockaddr2address' /usr/lib/libgssapi.so: undefined reference to `krb5_cc_get_ops' /usr/lib/libgssapi.so: undefined reference to `krb5_get_default_principal' /usr/lib/libgssapi.so: undefined reference to `krb5_cc_copy_cache' /usr/lib/libasn1.so: undefined reference to `init_error_table' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setkey' /usr/lib/libgssapi.so: undefined reference to `krb5_get_forwarded_creds' /usr/lib/libgssapi.so: undefined reference to `krb5_get_err_text' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int32' /usr/lib/libgssapi.so: undefined reference to `krb5_h_addr2sockaddr' /usr/lib/libgssapi.so: undefined reference to `krb5_build_authenticator' /usr/lib/libgssapi.so: undefined reference to `krb5_build_ap_req' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_getremoteseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_data_zero' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_free' /usr/lib/libgssapi.so: undefined reference to `krb5_config_free_strings' /usr/lib/libgssapi.so: undefined reference to `krb5_create_checksum' /usr/lib/libgssapi.so: undefined reference to `krb5_generate_random_block' /usr/lib/libgssapi.so: undefined reference to `krb5_crypto_init' /usr/lib/libgssapi.so: undefined reference to `krb5_enctype_to_keytype' /usr/lib/libgssapi.so: undefined reference to `krb5_free_creds_contents' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_from_mem' /usr/lib/libgssapi.so: undefined reference to `krb5_store_address' /usr/lib/libgssapi.so: undefined reference to `krb5_decrypt_ivec' /usr/lib/libasn1.so: undefined reference to `initialize_error_table_r' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_get_error_string' /usr/lib/libgssapi.so: undefined reference to `krb5_principal_match' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_to_data' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int32' /usr/lib/libgssapi.so: undefined reference to `krb5_encrypt_ivec' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_emem' /usr/lib/libgssapi.so: undefined reference to `krb5_store_data' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setremoteseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_principal_get_realm' /usr/lib/libgssapi.so: undefined reference to `krb5_set_error_string' /usr/lib/libgssapi.so: undefined reference to `krb5_make_principal' /usr/lib/libgssapi.so: undefined reference to `krb5_store_keyblock' *** Error code 1 Stop in /usr/ports/mail/dovecot/work/dovecot-1.0.rc28/src/auth. *** Error code 1 Stop in /usr/ports/mail/dovecot/work/dovecot-1.0.rc28/src. *** Error code 1 Stop in /usr/ports/mail/dovecot/work/dovecot-1.0.rc28. *** Error code 1 Stop in /usr/ports/mail/dovecot/work/dovecot-1.0.rc28. *** Error code 1 Stop in /usr/ports/mail/dovecot. *** Error code 1 Stop in /usr/ports/mail/dovecot. ** Command failed [exit code 1]: /usr/bin/script -qa /tmp/portupgrade.29635.0 env UPGRADE_TOOL=portupgrade UPGRADE_PORT=dovecot-1.0.r28 UPGRADE_PORT_VER=1.0.r28 make ** Fix the problem and try again. ** Listing the failed packages (*:skipped / !:failed) ! mail/dovecot (dovecot-1.0.r28) (linker error) ---> Packages processed: 0 done, 0 ignored, 0 skipped and 1 failed -- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11

2 2

[Dovecot] proxy host specified as fqdn in userdb
by Apostolos Papayanakis 28 Mar '07

28 Mar '07

Abstract from http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy > > host=s: The destination server's *IP address*. This field is required. > Note that currently it's required to use an IP address since no DNS > resolving is done. > Hello Timo, Here goes one more item for the v2.0 wishlist: Will it become possible to do dovecot imap proxying based on a "host" userdb attribute that is an FQDN (instead of a numeric IP as it is now)? It would simplify things for large smtp clusters that already do LDAP mail routing, based on per user "mailHost" attribute containg mail server FQDNs (according to "IETF Internet Draft LDAP Schema for Intranet Mail Routing", http://www.sendmail.org/m4/laser.txt) It is kinda redundunt to keep an extra LDAP attribute for "host" that contains essentially the same information as "mailHost" attribute, but in numeric form. I know the proposed change is not that important for many people, so don't really bother unless it is trivial to implement. apap

3 7

[Dovecot] rc2x seems to break Pegasus Mail
by Rick Romero 28 Mar '07

28 Mar '07

Hi guys, I upgraded from rc7 to rc24 a couple weeks ago, and noticed today that Pegasus Mail's IMAP no longer connects. So I put rc27 in, and it worked, but only for a little while... I'm not sure what the problem might be, the logs look fine, and I can still use Horde and Evolution without a problem. Pegasus Mail's error is unfortunately not helpful. Restarting rc27 didn't 'bring it back' for Pegasus. I turned on debugging, but I don't know what to look for because other clients work :/ dovecot: Mar 22 09:55:58 Info: imap-login: Login: user=<rick>, method=PLAIN, rip=172.16.100.20, lip=172.16.100.10, TLS dovecot: Mar 22 09:55:58 Info: IMAP(rick): Loading modules from directory: /usr/local/lib/dovecot/imap dovecot: Mar 22 09:55:58 Info: IMAP(rick): Module loaded: /usr/local/lib/dovecot/imap/lib10_quota_plugin.so dovecot: Mar 22 09:55:58 Info: IMAP(rick): Module loaded: /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so dovecot: Mar 22 09:55:58 Info: IMAP(rick): Effective uid=89, gid=89, home=/usr/home/vpopmail/domains/havokmon.com/rick dovecot: Mar 22 09:55:58 Info: IMAP(rick): Namespace: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, subscriptions=no dovecot: Mar 22 09:55:58 Info: IMAP(rick): maildir: root exists (/usr/home/vpopmail/domains/havokmon.com/rick/Maildir) dovecot: Mar 22 09:55:58 Info: IMAP(rick): maildir: root=/usr/home/vpopmail/domains/havokmon.com/rick/Maildir, index=/usr/home/vpopmail/domains/havokmon.com/rick/Maildir, control=, inbox= dovecot: Mar 22 09:56:03 Info: imap-login: Login: user=<rick>, method=PLAIN, rip=172.16.100.20, lip=172.16.100.10, TLS dovecot: Mar 22 09:56:03 Info: IMAP(rick): Loading modules from directory: /usr/local/lib/dovecot/imap dovecot: Mar 22 09:56:03 Info: IMAP(rick): Module loaded: /usr/local/lib/dovecot/imap/lib10_quota_plugin.so dovecot: Mar 22 09:56:03 Info: IMAP(rick): Module loaded: /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so dovecot: Mar 22 09:56:03 Info: IMAP(rick): Effective uid=89, gid=89, home=/usr/home/vpopmail/domains/havokmon.com/rick dovecot: Mar 22 09:56:03 Info: IMAP(rick): Namespace: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, subscriptions=no dovecot: Mar 22 09:56:03 Info: IMAP(rick): maildir: root exists (/usr/home/vpopmail/domains/havokmon.com/rick/Maildir) dovecot: Mar 22 09:56:03 Info: IMAP(rick): maildir: root=/usr/home/vpopmail/domains/havokmon.com/rick/Maildir, index=/usr/home/vpopmail/domains/havokmon.com/rick/Maildir, control=, inbox= dovecot: Mar 22 09:56:03 Info: IMAP(rick): Disconnected: Logged out Config: base_dir = /var/run/dovecot/ protocols = imap imaps listen = * disable_plaintext_auth = no shutdown_clients = yes log_path = /var/log/dovecot/dovecot.log info_log_path = /var/log/dovecot/dovecot_info.log log_timestamp = "%b %d %H:%M:%S " ssl_cert_file = /usr/local/share/courier-imap/mail-vfemail-godaddy.crt ssl_key_file = /usr/local/share/courier-imap/mail-vfemail-godaddy.key ssl_key_password = verbose_ssl = no login_dir = /var/run/dovecot/login login_user = nobody login_process_size = 64 login_process_per_connection = yes login_processes_count = 15 login_max_processes_count = 512 login_greeting = VFEmail IMAP Dovecot ready. namespace private { separator = . prefix = INBOX. inbox = yes } mail_debug = no mmap_disable = yes verbose_proctitle = yes first_valid_uid = 89 last_valid_uid = 0 protocol imap { mail_plugins = quota imap_quota imap_client_workarounds = outlook-idle } protocol pop3 { } protocol lda { postmaster_address = admin(a)vfemail.net } auth_verbose = no auth_debug = no auth default { mechanisms = plain passdb checkpassword { args = /usr/local/vpopmail/bin/vchkpw } userdb prefetch { } user = vpopmail } dict { } plugin { quota = maildir } I compiled both rc2x's with just ./configure Install prefix ...................... : /usr/local File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : none Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with mail delivery agent .. : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword vpopmail (modules) Building with password lookup modules : passwd passwd-file pam checkpassword vpopmail (modules) Building with SQL drivers ............: Though - for rc27, I had to disable vpopmail because it wouldn't build. Since I use checkpassword, it didn't matter. Rick

4 13

[Dovecot] rc29 and documentation changes
by Timo Sirainen 27 Mar '07

27 Mar '07

http://dovecot.org/nightly/dovecot-latest.tar.gz Any comments about the doc/wiki/ contents? doc/documentation.txt? dovecot-example.conf's doc/wiki/ pointers? ./autogen.sh now updates the wiki from http://www.dovecot.org/tmp/wiki-export.tar.gz (updated each night) if doc/wiki/Authentication.txt doesn't exist. I guess I'll release rc29 tomorrow. The current changes are: + Added auth_gssapi_hostname setting. - IMAP: LIST "" "" didn't return anything if there didn't exist a namespace with empty prefix. This broke some clients. - If Dovecot is tried to be started when it's already running, don't delete existing auth sockets and break the running Dovecot - If deliver failed too early it still returned exit code 89 instead of EX_TEMPFAIL. - deliver: INBOX fallbacking with -n parameter wasn't working. - passdb passwd and shadow couldn't be used as master or deny databases - IDLE: inotify didn't notice changes in mbox file - If index file directory couldn't be created, disable indexes instead of failing to open the mailbox. - Several other minor fixes

1 0