- dovecot - dovecot.org

[Dovecot] Proxy with MasterUser + Authentication issues
by Cassidy B. Larson 16 Feb '07

16 Feb '07

Per Timo's direction, I decided to give the MasterUser a try in connecting my proxy to my destination server. This might allow for the use of 'secure password' for my clients that like to check that box by default. A couple of problems I'm running into running RC15: #1: My Proxy's SQL password_query line: password_query = SELECT a.clearpasswd AS password, v.storeIP AS host, CONCAT(v.userID,'*someuser') AS destuser, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy, 'somepass' AS pass FROM iwmailsystem.virtmailbox AS v NATURAL JOIN authenticate.users AS a WHERE v.userID = '%u' and v.imap_active = 1 I'm wanting to authenticate the user on the proxy before I send it off via the MasterUser to the destination server. However, I show this in the logs: Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip= x.y.z.a rip=a.b.c.d resp=AGJ1dGNoQGluZm93ZXN0LmNvbQBzZWNyZXQ= Info: auth-worker(default): sql(user(a)host.com,a.b.c.d): query: SELECT a.clearpass wd AS password, v.storeIP AS host, CONCAT(v.userID,'*someuser') AS destuser, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS p roxy, 'somepass' AS pass FROM iwmailsystem.virtmailbox AS v NATURAL JOIN authenticate.users AS a WHERE v.userID = 'user(a)host.com' and v.imap_active = 1 Error: auth(default): file auth-request.c: line 207 (auth_request_save_cache): assertion failed: (extra_fields == NULL || (strstr(extra_fields, "\tpass=") == NULL && strncmp(extra_fields, "pass=", 5) != 0)) Error: child 54122 (auth) killed with signal 6 The Wiki showed I should return a 'pass' column. However, that's choking the query up in auth-request.c. Could it be the "\tpass" from auth-request.c? If I change user(a)host.com's password to 'someass' and remove the 'pass' column from the password_query, it authenticates, and proxy's over just fine. Am I doing something wrong? I want to authenticate the user locally on the proxy and pass off the 'master password' to the proxy, but using 'pass' doesnt work. 'password' column does. Doesnt help me though for my situation :) Problem #2: I'm wanting to put the masteruser/pass in the database for quick retrieval and updating. So I setup dovecot.conf as: passdb sql { # Path for SQL configuration file, see doc/dovecot-sql.conf for example args = /usr/local/etc/dovecot-sql.conf master=yes #pass=yes } passdb passwd { } and dovecot-sql.conf with: password_query = SELECT '%u' AS user, 'master-password' AS password Trying to connect locally with a "telnet localhost 143" via: 1 login user(a)host.com*someuser "somepass" Give me this in the detail log file: Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip= a.b.c.d rip=w.x.y.z resp=AGJ1dGNoQGluZm93ZXN0LmNvbSphZG1pbkBpbmZvd2VzdC5jb20AbWFzdGVyLXBhc3N3b3Jk Error: auth-worker(default): BUG: PASSV had invalid passdb ID Warning: Killed with signal 15 I am able to successfully authenticate with the master user/pass if I store it in a passdb file. However, I'd prefer to have it in the database for obvious reasons. Any help to the above would be appreciated. thanks, Cassidy

2 6

[Dovecot] Can't login in IMAP server
by Mário Gamito 16 Feb '07

16 Feb '07

Hi, I can't login in the IMAP server. This is the log from a telnet session to port 143: Feb 16 15:38:32 mail2 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=192.168.84.128 rip=192.168.84.128 resp=<hidden> Feb 16 15:38:32 mail2 dovecot: auth(default): checkpassword(gamito(a)mail2.telbit.pt,192.168.84.128): Executed: /usr/local/bin/auth_imap /usr/local/libexec/dovecot/checkpassword-reply Feb 16 15:38:32 mail2 dovecot: auth(default): checkpassword(gamito(a)mail2.telbit.pt,192.168.84.128): Received no input Feb 16 15:38:32 mail2 dovecot: auth(default): checkpassword: Child 15764 died with signal 11 Feb 16 15:38:34 mail2 dovecot: auth(default): client out: FAIL 1 user=gamito(a)mail2.telbit.pt temp Feb 16 15:38:40 mail2 dovecot: imap-login: Aborted login: user=<gamito(a)mail2.telbit.pt>, method=PLAIN, rip=192.168.84.128, lip=192.168.84.128, secured What is happening here ? Any help would be appreciated. Warm Regards, Mário Gamito

2 2

[Dovecot] Dovecot proxy question (hostname instead of ip)
by Wouter de Jong 16 Feb '07

16 Feb '07

Hello, We are planning to use the Proxy feature of Dovecot, but fail to implement it currently the way we would like to. Reason is that proxy insists to have an IP-address as host : Feb 15 15:43:24 proxy-test.widexs.nl dovecot: pop3-login: proxy(username): mspool01-test.widexs.nl is not a valid IP When I changed the query to force the IP-address of the above server, it works. Would it be possible to make this work, but more important ... Are there any reasons NOT to make this work ? :)) Kind regards, Wouter. -- WideXS http://www.widexs.nl Wouter de Jong System-Administrator Tel +31 (0)23 5698070 Fax +31 (0)23 5698099 Bijlmermeerstraat 62, 2131 HG HOOFDDORP, NL

3 3

[Dovecot] domain truncated
by Nemanja Miletic 16 Feb '07

16 Feb '07

Hi all, I have a problem with domain information being truncated from username during ldap search, so it can not be used in mail_location. This happens when user part of the username %n is used in pass_filter in passdb ldap search. When I use %u all username information remains and mailbox can be located. Here is my configuration. In dovecot.conf I have two locations one for system and one for virtual users: ... mail_location = maildir:/var/spool/mail/%n mail_location = maildir:/var/spool/mail/vdom/%d/%n ... Also two configurations for passdb: ... passdb ldap { args = /etc/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot-ldap-virt.conf } ... Here info is searched in ldap: /etc/dovecot-ldap-virt.conf ... base = dc=%d,ou=Virtual Domains,dc=eunet,dc=yu pass_filter = (&(objectClass=posixAccount)(uid=%n)) ... And the line in log file stating that maildir can not be located: mkdir(/var/spool/mail/vdom//cone/cur) failed: Permission denied Is this a bug or I am doing something wrong. Thank You, Nemanja

3 4

[Dovecot] Where is auth_dovecot
by Mário Gamito 16 Feb '07

16 Feb '07

Hi, Shouldn't i have a file named auth_dovecot ? It's not in my system and i can't find anything about it in the docs. Any help would be appreciated. Warm Regards, Mário Gamito

1 0

Re: [Dovecot] severe performance problem (mail cache related?)
by Bill Boebel 16 Feb '07

16 Feb '07

On Fri, February 16, 2007 9:03 am, Timo Sirainen <tss(a)iki.fi> said: > Looks like my rc22 fix broke that then. It didn't loop forever, only > until client sent the whole message or until it disconnected, but it did > eat all the CPU while waiting. > > Fix here: > http://dovecot.org/list/dovecot-cvs/2007-February/007721.html > > I guess this is good enough reason for rc23. > Nice. Thanks for the quick fix. Bill

1 0

Re: [Dovecot] severe performance problem (mail cache related?)
by Bill Boebel 16 Feb '07

16 Feb '07

On Fri, February 16, 2007 6:39 am, Timo Sirainen <tss(a)iki.fi> said: > On Fri, 2007-02-16 at 03:29 -0800, Dan Price wrote: >> Well there you go, I'm a dope. I think I set mmap_disable=yes because I >> was seeing strange things happening where there would be thousands >> (millions?) of madvise(DONTNEED) calls-- seemingly forever in a loop. I >> have not yet tracked that problem down-- next time I see it, I will >> make sure to get to the bottom of it. > > Actually the only place where madvise(MADV_DONTNEED) is called is in the > file-cache code which is used only with mmap_disable=yes. I'm not sure if this is related or not, but we set mmap_disable=yes last week and since then have seen what appears to be an occasional infinite loops. I have been trying to track down some more details before posting to the list, but here is what I have so far. There is no error logged in the dovecot log when this occurs, and it only stops by "kill -9" on the process... # top -c PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND 7832 virtual 25 0 580 496 376 R 71.5 0.0 70:59 0 imap [user(a)example.com 192.168.1.14] # lsof -p 7832 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME imap 7832 virtual cwd DIR 147,0 600 2372995 /data1/mail/ex/example.com/us/user imap 7832 virtual rtd DIR 3,3 4096 2 / imap 7832 virtual txt REG 3,3 412996 789553 /usr/libexec/dovecot/imap imap 7832 virtual mem REG 3,3 33856 771355 /usr/lib/dovecot/lib10_quota_plugin.so imap 7832 virtual mem REG 3,3 7720 771364 /usr/lib/dovecot/imap/lib11_imap_quota_plugin.so imap 7832 virtual mem REG 3,3 106912 278626 /lib/ld-2.3.2.so imap 7832 virtual mem REG 3,3 14868 278653 /lib/libdl-2.3.2.so imap 7832 virtual mem REG 3,3 1571824 278633 /lib/tls/libc-2.3.2.so imap 7832 virtual 0u IPv4 -1140164370 TCP vip.mail17a.r4.iad.mlsrvr.com:imap->director2.r2.iad.emailsrvr.com:56195 (ESTABLISHED) imap 7832 virtual 1u IPv4 -1140164370 TCP vip.mail17a.r4.iad.mlsrvr.com:imap->director2.r2.iad.emailsrvr.com:56195 (ESTABLISHED) imap 7832 virtual 2w FIFO 0,5 3154802927 pipe imap 7832 virtual 3r CHR 1,9 599160 /dev/urandom imap 7832 virtual 4r FIFO 0,5 3154802928 pipe imap 7832 virtual 5w FIFO 0,5 3154802928 pipe imap 7832 virtual 6r FIFO 0,5 3154802929 pipe imap 7832 virtual 7w FIFO 0,5 3154802929 pipe imap 7832 virtual 8u REG 22,1 11112 6602923 /var/index/data1/mail/ex/example.com/us/user/.Elementos enviados/dovecot.index imap 7832 virtual 9u REG 22,1 50824 6602903 /var/index/data1/mail/ex/example.com/us/user/.Elementos enviados/dovecot.index.log imap 7832 virtual 10u REG 147,0 3074 6346008 /data1/mail/ex/example.com/us/user/maildirsize imap 7832 virtual 11w REG 147,0 905650 7062984 /data1/mail/ex/example.com/us/user/.Elementos enviados/tmp/1171483586.P7832Q0M770594.mail17a.r4.iad.mlsrvr.com # strace -p 7832 read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable)

2 2

[Dovecot] imap-login crash with RC19
by Nicolas STRANSKY 16 Feb '07

16 Feb '07

Hi Timo, Using RC19, I've have the following crash. If there was a core file, I've got no idea where it's gone... Jan 25 10:35:10 rouge dovecot: imap-login: file client.c: line 528 (client_unref): assertion failed: (client->refcount > 0) Jan 25 10:35:10 rouge dovecot: child 25498 (login) killed with signal 6 Best regards, -- Nico On réalise qu'une femme est de la dynamite quand on la laisse tomber. -+- Marcel Pagnol -+-

2 4

[Dovecot] Wiki to doc/ in tarball
by Timo Sirainen 16 Feb '07

16 Feb '07

So I finally started building a script that does it. Anyone interested in helping with it so that it produces readable output? First step is getting raw wiki pages. I'll do this directly by getting them from the filesystem. You can get them from here: http://dovecot.org/tmp/wikipages.tar.gz Next there's http://dovecot.org/tmp/wiki2txt.pl which is my horrible Perl script that kind of works now to produce almost readable text files. Its current output is in http://dovecot.org/tmp/wikitxt.tar.gz One thing I'm wondering about is how to make the directory layout work. For example there is "UserDatabase" and "UserDatabase/Static" pages. Currently I'm placing the latter into "_UserDatabase/Static" but I don't think that's the best solution. I was thinking about adding some "include" and "exclude" lists. If a page is in excluce list it's skipped. If it's in neither list it prints a warning but still includes it. So this makes it easy to find out the new pages and figure out if they should be included in the documentation.

3 2

[Dovecot] Index Prob
by Kevin Richter 16 Feb '07

16 Feb '07

Hi, i have a problem with rc19 (sorry, i have no time at the moment to uptime) and homedirs and maildirs mounted via NFS on Solaris10. At the beginning of the following log file everything is ok. At the end it cannot access the index... and just deleted the whole mailbox! It was empty... so it was no problem. Any ideas? Thanks. Bye, Kevin dovecot: Feb 15 21:17:52 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=147.x.x.x rip=89.x.x.x resp=<hidden> dovecot: Feb 15 21:17:52 Info: auth(default): client out: CONT 1 dovecot: Feb 15 21:17:52 Info: auth(default): client in: CONT<hidden> dovecot: Feb 15 21:17:52 Info: auth(default): client out: OK 1 user=ssal0041 dovecot: Feb 15 21:17:52 Info: auth(default): master in: REQUEST 111 2754 1 dovecot: Feb 15 21:17:52 Info: auth(default): master out: USER 111 ssal0041 system_user=ssal0041 uid=3092 gid=1100 home=/home/ssal0041 dovecot: Feb 15 21:17:52 Info: pop3-login: Login: user=<ssal0041>, method=PLAIN, rip=89.x.x.x, lip=147.x.x.x, TLS dovecot: Feb 15 21:17:52 Info: POP3(ssal0041): Effective uid=3092, gid=1100 dovecot: Feb 15 21:17:52 Info: POP3(ssal0041): mbox: data=/home/ssal0041/mail/:INBOX=/var/mail/ssal0041 dovecot: Feb 15 21:17:52 Info: POP3(ssal0041): mbox: root=/home/ssal0041/mail, index=/home/ssal0041/mail, inbox=/var/mail/ssal0041 dovecot: Feb 15 21:17:55 Error: POP3(ssal0041): Timeout while waiting for shared lock for index file /home/ssal0041/mail/.imap/INBOX/dovecot.index dovecot: Feb 15 21:19:52 Error: POP3(ssal0041): Timeout while waiting for shared lock for index file /home/ssal0041/mail/.imap/INBOX/dovecot.index dovecot: Feb 15 21:19:55 Error: POP3(ssal0041): Timeout while waiting for shared lock for index file /home/ssal0041/mail/.imap/INBOX/dovecot.index dovecot: Feb 15 21:19:55 Error: POP3(ssal0041): Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2007-02-15 21:15:55] dovecot: Feb 15 21:19:55 Info: POP3(ssal0041): No INBOX for user top=0/0, retr=0/0, del=0/0, size=0 dovecot: Feb 15 21:21:29 Info: POP3(ssal0041): Disconnected top=0/0, retr=0/0, del=0/0, size=0 dovecot: Feb 15 21:21:29 Info: POP3(ssal0041): Disconnected top=0/0, retr=0/0, del=0/0, size=0

2 2