- dovecot - dovecot.org

[Dovecot] dovecot as POP3 proxy
by Alexander Shikoff 19 Jan '07

19 Jan '07

Hello, I am trying to set up dovecot as pop3 proxy. There is net lines in my auth section: passdb passwd-file { args = /usr/local/etc/dovecot/proxy.users } userdb static { args = uid=26 gid=6 } File proxy.users should contain a list of users. Now it looks like test:::::::proxy host=10.10.10.10 and everything is OK. My question is how to change passwd-file in order to match any username? I need something like *:::::::proxy host=10.10.10.10 Thanks in advance! -- Kind Regards, Alexander Shikoff

2 1

[Dovecot] FreeBSD, Postfix, Cyrus SASL, Dovecot IMAP, SquirrelMail, Active Directory
by Phil Anslemo 19 Jan '07

19 Jan '07

Here's an update to my configuration. I'm able to use Cyrus SASL to enable SMTP AUTH in PostFix, validate user's mail addresses in Active Directory, and store mail in maildir on FreeBSD. I am currently able to authenticate AD users with Dovecot and LDAP, but I'm getting the following error in the log: Error: IMAP(user@domain): Ambiguous mail location setting, don't know what to do with it: user@domain (try prefixing it with mbox: or maildir:) Error: IMAP(user@doman): Failed to create storage data: user@domain. Error: child xxxxx (imap) returned error 89 I double-checked dovecot.conf, and the mail_location setting is "mail_location = maildir:/usr/data/vmail/%u". I'm not sure what could be happening, but I'm thinking this is the last thing I need to get my configuration to work. Your assistance is greatly appreciated. Thanks, uxphreak ____________________________________________________________________________________ TV dinner still cooling? Check out "Tonight's Picks" on Yahoo! TV. http://tv.yahoo.com/

2 1

[Dovecot] LDA "deliver" with sendmail
by Zied Fakhfakh 19 Jan '07

19 Jan '07

Hi everybody, this is my first post to the list. I'm setting up a mail server with sendmail/LDAP/Dovecot (all latest version on FC6) I'm trying hard to get sendmail deliver through dovecot "deliver" I followed the instructions at the wiki: http://wiki.dovecot.org/LDA but I can't get it working. i cannot find the problem where ? when I do this as mailer: some.domain.com dovecot:dovecot or this: some.domain.com dovecot.mail.host.net sendmail always reports (on the maillog) an unknown mailer error: ...... stat=unknown mailer error 80 path to deliver is checked and executable by everyone (/usr/libexec/dovecot/deliver) can someone help please ? BTW : I manager to create a dovecot.m4, that way we can add "MAILER(dovecot)" to sendmail.mc if you are interested I will post it. Regards, Zydoon.

2 1

Re: [Dovecot] dovecot Digest, Vol 45, Issue 18
by subscriber＠viliar.net.ru 19 Jan '07

19 Jan '07

> > I use postfx 2.3.5 + dovecot (pop3/imap/lda/auth daemon for postfix) rc15. > > root@post /etc/postfix# grep dovecot main.cf > smtpd_sasl_type = dovecot > virtual_transport = dovecot > dovecot_destination_recipient_limit = 1 > > root@post /etc/dovecot# grep password_query dovecot-sql.conf > password_query = SELECT mail as user, cryptp as password, > CONCAT('/home/vmail/',homedir,'/',maildir,'/') as userdb_home, uid as userdb_uid, gid as > userdb_gid, CONCAT('dirsize:/home/vmail/',homedir,'/',maildir,'/',':storage=',quota/1024) as > userdb_quota, nice as userdb_nice, hosts as allow_nets FROM users WHERE mail = '%u' and access = > 'Y' and %Ls = 'Y'; > > > When I insert allow_nets (and it should be used without userdb_ prefix) into password_query I could > not send any more letters. In logs next: > > Dec 19 11:25:30 post dovecot: auth-worker(default): sql(mail(a)example.com): query: SELECT mail as > user, cryptp as password, CONCAT('/home/vmail/',homedir,'/',maildir,'/' > ) as userdb_home, uid as userdb_uid, gid as userdb_gid, > CONCAT('dirsize:/home/vmail/',homedir,'/',maildir,'/',':storage=',quota/1024) as userdb_quota, nice > as userdb_nice > , hosts as allow_nets FROM users WHERE mail = 'mail(a)example.com' and access = 'Y' and smtp = 'Y'; > Dec 19 11:25:30 post dovecot: auth-worker(default): passdb(mail(a)example.com): allow_nets check > failed: Remote IP not known > > As I understand, postfix does not transfer to dovecot auth daemon rip ( remote ip ). And it is > looks like allow_nets it is impossible to use together with dovecot sasl auth in postfix. > > Do we have any workaround on it? > > Hello again. As I think, this problem is realy about dovecot. Probably it should not doing looking at allow_net then it using for external auh, or then %Ls = smtp ? Just another trap/check to prevent problem like this? Or am I wrong? Thanks.

2 1

[Dovecot] Build problems with non-standard location of mysql libs
by Bob 19 Jan '07

19 Jan '07

Overall the build process for dovecot is very clean. I did however run into a significant problem when it came to locating the mysql libraries, especially when building a 64 bit executable but similar problems occured building a 32 bit executable. I am describing the 64 bit build issues below since that is the worst case scenario. Fixing the 64 bit build will automatically fix the 32 bit build. In the Solaris world it is fairly common for software packages to be installed in the /opt tree rather than under /usr or /usr/local. In addition 64 bit libs are typically located under a path like /opt/lib/64 or /opt/lib/sparcv9 and of course mysql libs are under /opt/lib/mysql or /opt/lib/sparcv9 | 64/mysql. The configure script for dovecot tries only a lib64 or /usr/lib64 path I suggest that the conifgure script for dovecot offer a --with-mysql[=DIR] option so that it would be possible to provide the base location of the mysql installation as --with-mysql=/opt in the same manner that it is done for php. I patched the configure script to search the /opt tree for mysql but unfortunately a side effect occured during the build which was compiled as 64 bit with the necessary CFLAGS and LDFLAGS input to the configure script. Here is the configure. Note that the library search paths also include the Solaris specific sparcv9 paths so nothing special is required in the configure script to account for these platform specific paths. This is exactly the same method the we use to build php as a 64 bit app successfully. However, the configrue script needs to locate the /opt/include/mysql directory and also needs to find /opt/lib/mysql to at least trigger that it found the mysql installation. Even though /opt/lib/mysql is the path to the 32 bit library, the link tests will pass because the supplied LDFLAGS contain the path to the 64 bit library. CFLAGS="-O3 -m64 -mcpu=ultrasparc -L/opt/lib/sparcv9 -L/opt/lib/sparcv9/mysql -R/opt/lib/sparcv9 -R/opt/lib/sparcv9/mysql" \ CXXFLAGS="-O3 -m64 -mcpu=ultrasparc -L/opt/lib/sparcv9 -L/opt/lib/sparcv9/mysql -R/opt/lib/sparcv9 -R/opt/lib/sparcv9/mysql" \ LDFLAGS="-O3 -m64 -mcpu=ultrasparc -L/opt/lib/sparcv9 -L/opt/lib/sparcv9/mysql -R/opt/lib/sparcv9 -R/opt/lib/sparcv9/mysql" \ ./configure --prefix=/opt \ --localstatedir=/var \ --enable-shared \ --disable-static \ --libdir=/opt/lib/sparcv9 \ --with-ssldir=/opt/ssl \ --with-ssl=openssl \ --with-storages=maildir,mbox \ --with-mysql The next problem was that dovecot-auth failed to link: /bin/bash ../../libtool --tag=CC --mode=link gcc -std=gnu99 -O3 -m64 -mcpu=ultrasparc -L/opt/lib/sparcv9 -R/opt/lib/sparcv9 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/opt/include -export-dynamic -O3 -m64 -mcpu=ultrasparc -L/opt/lib/sparcv9 -R/opt/lib/sparcv9 -o dovecot-auth auth.o auth-cache.o auth-client-connection.o auth-master-connection.o auth-master-listener.o auth-module.o auth-request.o auth-request-handler.o auth-stream.o auth-worker-client.o auth-worker-server.o db-ldap.o db-sql.o db-passwd-file.o main.o mech.o mech-anonymous.o mech-plain.o mech-login.o mech-cram-md5.o mech-digest-md5.o mech-ntlm.o mech-gssapi.o mech-rpa.o mech-apop.o passdb.o passdb-blocking.o passdb-bsdauth.o passdb-cache.o passdb-ldap.o passdb-passwd.o passdb-passwd-file.o passdb-pam.o passdb-checkpassword.o passdb-shadow.o passdb-sia.o passdb-vpopmail.o passdb-sql.o userdb.o userdb-blocking.o userdb-ldap.o userdb-passwd.o userdb-passwd-file.o userdb-prefetch.o userdb-static.o userdb-vpopmail.o userdb-sql.o libpassword.a ../lib-settings/libsettings.a ../lib-ntlm/libntlm.a ../lib-sql/libsql.a ../lib/liblib.a -lpam -L -L/opt/lib/mysql -L/opt/lib/sparcv9/mysql -lmysqlclient -lz -lm -export-dynamic -ldl -lsocket -lnsl -lrt mkdir .libs gcc -std=gnu99 -O3 -m64 -mcpu=ultrasparc -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/opt/include -O3 -m64 -mcpu=ultrasparc -o dovecot-auth auth.o auth-cache.o auth-client-connection.o auth-master-connection.o auth-master-listener.o auth-module.o auth-request.o auth-request-handler.o auth-stream.o auth-worker-client.o auth-worker-server.o db-ldap.o db-sql.o db-passwd-file.o main.o mech.o mech-anonymous.o mech-plain.o mech-login.o mech-cram-md5.o mech-digest-md5.o mech-ntlm.o mech-gssapi.o mech-rpa.o mech-apop.o passdb.o passdb-blocking.o passdb-bsdauth.o passdb-cache.o passdb-ldap.o passdb-passwd.o passdb-passwd-file.o passdb-pam.o passdb-checkpassword.o passdb-shadow.o passdb-sia.o passdb-vpopmail.o passdb-sql.o userdb.o userdb-blocking.o userdb-ldap.o userdb-passwd.o userdb-passwd-file.o userdb-prefetch.o userdb-static.o userdb-vpopmail.o userdb-sql.o -L/opt/lib/sparcv9 libpassword.a ../lib-settings/libsettings.a ../lib-ntlm/libntlm.a ../lib-sql/libsql.a ../lib/liblib.a -lpam -L/db/src/dovecot/dovecot-1.0.rc17_64bit/src/auth -L/opt/lib/mysql -L/opt/lib/sparcv9/mysql /opt/lib/mysql/libmysqlclient.so -L/opt/lib -lposix4 -lgen -lssl -lcrypto -lz -lm -ldl -lsocket -lnsl -lrt -R/opt/lib/mysql -R/opt/lib/mysql -R/opt/lib/sparcv9 ld: fatal: file /opt/lib/mysql/libmysqlclient.so: wrong ELF class: ELFCLASS32 ld: fatal: File processing errors. No output written to dovecot-auth What is odd about the above is that the input to libtool is completely correct but the resulting gcc command converted -lmysqlclient to an absolute path of /opt/lib/mysql/libmysqlclient.so which is wrong for a 64 bit build - hence the link failure. Why this happened is a mystery to me? If it had been left alone as -lmysqlclient the link would have been successful because the correct 64 bit library would have been found automatically. To get around this problem I added -lmysqlclient to the LDFLAGS input to the configure script which works but isn't very conventional. It would be much cleaner if the --with-mysql had a [=DIR] option and the configure script used the same basic logic that is used in the php configure script for locating the mysql stuff. In addition it is essential that hard paths, especially to shared objects don't get generated during the build since that will block the automatic searching of libraries. -- *Bob Atkins * /President/CEO/ *DigiLink, Inc. <http://www.digilink.net>* Business Inter-net-working */The Cure for the Common ISP!/* Phone: (310) 577-9450 Fax: (310) 577-3360 eMail: bob(a)digilink.net

2 1

[Dovecot] Vpopmail auth with vchkpw
by Rick Romero 19 Jan '07

19 Jan '07

Hey Guys, I'm using vpopmail, and was told here that I need to use the vchkpw passwd module to authenticate AND get my lastauth data updated. It works like a charm, but I've come across another minor issue. vchkpw sets the 'connection-type' based on the variable TCPLOCALPORT If that's not set, it defaults to pop. What this does in my environment is cause someone who is denied POP access to also not be able to use IMAP (or webmail) because that variable is not set. Is it possible to have Dovecot set that variable, based on the port the user connected to, prior to calling vchkpw? Or can I Set that in here somehow? passdb checkpassword { args = /usr/local/vpopmail/bin/vchkpw } userdb prefetch { } } Thanks Rick

2 1

[Dovecot] patch for serdb-ldap which allows set user_global_mail variable
by Taras 19 Jan '07

19 Jan '07

--- dovecot-1.0.rc17/src/auth/db-ldap.~h 2007-01-15 03:23:09.000000000 +0200 +++ dovecot-1.0.rc17/src/auth/db-ldap.h 2006-11-07 18:47:00.000000000 +0200 @@ -38,6 +38,7 @@ const char *default_pass_scheme; const char *user_global_uid; const char *user_global_gid; + const char *user_global_mail; /* ... */ int ldap_deref, ldap_scope; --- dovecot-1.0.rc17/src/auth/db-ldap.~c 2007-01-15 03:23:09.000000000 +0200 +++ dovecot-1.0.rc17/src/auth/db-ldap.c 2006-11-19 15:42:41.000000000 +0200 @@ -67,6 +67,7 @@ DEF(SET_STR, default_pass_scheme), DEF(SET_STR, user_global_uid), DEF(SET_STR, user_global_gid), + DEF(SET_STR, user_global_mail), { 0, NULL, 0 } }; @@ -93,7 +94,8 @@ MEMBER(pass_filter) "(&(objectClass=posixAccount)(uid=%u))", MEMBER(default_pass_scheme) "crypt", MEMBER(user_global_uid) "", - MEMBER(user_global_gid) "" + MEMBER(user_global_gid) "", + MEMBER(user_global_mail) NULL }; static struct ldap_connection *ldap_connections = NULL; --- dovecot-1.0.rc17/src/auth/userdb-ldap.~c 2007-01-15 03:23:09.000000000 +0200 +++ dovecot-1.0.rc17/src/auth/userdb-ldap.c 2006-12-21 18:06:28.000000000 +0200 @@ -72,7 +72,7 @@ const char *name; char *attr, **vals; unsigned int i; - bool seen_uid = FALSE, seen_gid = FALSE; + bool seen_uid = FALSE, seen_gid = FALSE, seen_mail = FALSE ; reply = auth_stream_reply_init(auth_request); auth_stream_reply_add(reply, NULL, auth_request->user); @@ -94,6 +94,7 @@ return NULL; seen_gid = TRUE; } else if (*name != '\0') { + if (strcmp(name, "mail") == 0) {seen_mail = TRUE;} for (i = 0; vals[i] != NULL; i++) { auth_stream_reply_add(reply, name, vals[i]); @@ -126,6 +127,16 @@ auth_stream_reply_add(reply, "gid", dec2str(conn->set.gid)); } + if (!seen_mail) { + if (*conn->set.user_global_mail != '\0') { + const struct var_expand_table *vars; + vars = auth_request_get_var_expand_table(auth_request, auth_request_str_escape); + string_t *str; + str = t_str_new(512); + var_expand(str, conn->set.user_global_mail, vars); + auth_stream_reply_add(reply, "mail", str_c(str)); + } + } return reply; } --- dovecot-1.0.rc17/doc/dovecot-ldap.~conf 2007-01-15 03:23:09.000000000 +0200 +++ dovecot-1.0.rc17/doc/dovecot-ldap.conf 2006-11-07 18:47:00.000000000 +0200 @@ -114,3 +114,9 @@ # If the UID/GID is still found from LDAP reply, it overrides these values. #user_global_uid = #user_global_gid = + +# You can use same mail path all user accounts if you really want to. +# Same variables can be used as for filter, see user_filter +# If the 'mail' variable is still found from LDAP reply, it overrides these value. +#user_global_mail = +

2 2

[Dovecot] LDAPS
by Osvaldo Sarubbi 19 Jan '07

19 Jan '07

Hello...what's hap with LDAPS?...with the "hosts" parameter of dovecot-ldap.conf, don't work Thanks... kenobi

2 1

[Dovecot] Shared folder
by Stefan Klatt 19 Jan '07

19 Jan '07

Hi, first.. i'm new on this list :-) and use dovecot 1.01rc17 under fedora core 5. And i read the list of the last 4 moth and didn't found answers to my questions........ now i work with shared folders and got it running on the following configuration: namespace private { seperator = . prefix = location = maildir:/srv/imapd/user/%u/maildir inbox = yes } namespace public { seperator = . prefix = Public. location = maildir:/imapd/shared/public/maildir:CONTROL=/imapd/user/%u/shared-settings/public/control:INDEX=/imapd/user/%u/shared-settings/public/index hidden = no } location is one line :-) I have different questions to this configuration: if i use "hidden = no" at the private namespace, the complete namespace isn't viewable, if i use "hidden = yes" i see the prefix "private" at the foldernames in my emailclient. Shouldn't be a non existing hidden option the same like "hidden = no"? if use / as the seperator like dokumented at the wiki it doesn't work. with a dot like the seperator at the directories for the emailfolder it works. is there a way to implement ACL for virtuell user in this configuration? The namespace could be a very interesting idea to give other user access to the own mailbox (e.g. for holiday), but for this each user need it's own acl-file which he can change.... And the special folder like Inbox must be viewable from another user. The both last could be realized with an option like "ACL = /imapd/user/%u/rights" to include an file with acldefinition at the namespacedefiniton. Another way could be a option like "ACL_R = user, user, group, group" inside of the namespacedefinition with definition of user and group outside of the namespacedefintion. For me a LDAP request would the best way :-) i realize the complete emailconfiguration with ldap. Stefan

3 4

[Dovecot] How change the order POP checks mail.
by Andreas Andersson 19 Jan '07

19 Jan '07

Hello! I have a problem with the POP when I want to use mbox and Maildirs. The old users are now using uw-imap, but in the future should theres old e-mail be in mbox format and the new e-mails in maildirs. I'am using this code and its worked fine in Squirrelmail and IMAP. namespace private { separator = / inbox = yes hidden = no prefix = "mbox/" location = mbox:~/mail:INBOX=/var/mail/%u } namespace private { separator = / prefix = location = maildir:~/Maildir } but not with POP, I can't find any mail. When I only searching for mbox mail, it worked great. I think thats the problem are the pop who first searching for Maildirs and then mailboxes. So how could I get the Dovecot POP server to first check the mailboxes and then the maildirs? Or how should I go around this problem? Thanks! Andreas Andersson

3 2