- dovecot - dovecot.org

Re: [Dovecot] Authentication by certificats (a bug or my misconfiguration)
by HenkJan Wolthuis 13 Jul '06

13 Jul '06

Hi Alexander, > > Thanks for the quick reply; rearranging the certs didn't seem to do > much for the setup; I guess I'm getting one thing wrong, which was the > cause for my followup. How can I make dovecot only rely on cert and no > furhter authentication for giving access to the user, when making > dovecot lift the user ID from the client cert? Hmm, i don't think that's the reason for the "invalid certificate" error. Another question: are the clientcertificates and the servercertificate signed by the same CA? In case you want the ssl-verify error in the logfiles: in src/logincommon/ssl-proxy-openssl.c, line 607 change: i_info("Invalid certificate: %s", buf); to: i_info("Invalid certificate: %s: %s, X509_verify_cert_error_string(ctx->error) ,buf); should help, (tested on beta8) (don't forget to recompile, install, restart ;-)) success! -- groeten, HenkJan Wolthuis

2 2

[Dovecot] Error logged while deleting folder
by Luigi Rosa 13 Jul '06

13 Jul '06

Scenario: Dovecot 1.0.rc2 server (fedora 5) Thunderbird 1.5.0.4 WinXP IMAP client Steps to reproduce the warning message whith Thunderbird client: * create a folder with Thunderbird * copy a message in that folder * delete the folder * empty trash Warning logged: Jul 13 06:27:25 mail dovecot: IMAP(lrosa): stat(/var/spool/mail2/lrosa/.Trash.zzz/new) failed: No such file or directory Jul 13 06:27:25 mail dovecot: IMAP(lrosa): inotify_rm_watch() failed: Invalid argument Does not happen with SquirrelMail 1.4.7 IMAP client Question: Is it Thunderburd bug or a Dovecot bug? Ciao, luigi -- / +--[Luigi Rosa]-- \ All general statements are false (including this one).

1 0

Re: [Dovecot] Quota over 2GB supported?
by Bill Boebel 13 Jul '06

13 Jul '06

On Tue, July 11, 2006 9:27 pm, ssoo(a)siliconfile.com said: > I'm using Courier-imap and gonna change to dovecot. > Courier-imap supports quota over 2GB size. > Does dovecot's Maildir++ quota support over 2GB? Yes, we are enforcing a 5GB per user quota using Dovecot's maildir++ quota support. This works with both 32-bit kernels and 64-bit. I know courier took some patching to make work with 32-bit kernels, but Dovecot supports it out of the box. The only caveat is the quota is only enforceable within one namespace, so make sure your Inbox and folders all use the same namespace. Bill

2 1

[Dovecot] Quota over 2GB supported?
by ssoo＠siliconfile.com 12 Jul '06

12 Jul '06

I'm using Courier-imap and gonna change to dovecot. Courier-imap supports quota over 2GB size. Does dovecot's Maildir++ quota support over 2GB?

7 8

[Dovecot] Corrupted index cache
by Joseph W. Breu 12 Jul '06

12 Jul '06

Upgraded from rc1 to rc2 and I am still getting the Corrupted index cache file warnings in syslog Jul 12 10:10:19 pop1.cfu.net dovecot: IMAP(breu(a)cfu.net): Corrupted index cache file /var/spool/mail/filer/storage//cfu.net/b/r/breu/dovecot.index.cache: invalid record size Is this something to be worried about? Is the cache just rebuilt upon notification of corruption? Thanks, --------------------------------------------------------- Joseph W. Breu, CCNA phone : +1.319.268.5228 Senior Network Administrator fax : +1.319.266.8158 Cedar Falls Utilities cell : +1.319.493.1686 support: +1.319.268.5221 url : http://www.cfu.net

1 0

[Dovecot] passwd authentication issues (ATTN: Petar)
by Bruce Lane 12 Jul '06

12 Jul '06

Hi, Petar, For whatever reason, I didn't see your most recent reply until I checked the web archives. To answer your questions... Is my dovecot running chrooted? Not that I know of. However, the option to (apparently) decide this is confusing at best. Here is what I have entered. # chroot login process to the login_dir. Only reason not to do this is if you # wish to run the whole Dovecot without roots. # http://wiki.dovecot.org/Rootless login_chroot = yes Now, my guts tell me that this WILL make it run chrooted. However, reading the material at this link... http://wiki.dovecot.org/Rootless ...says otherwise, and that setting this to 'no' would be making it run chrooted. For reference, this is the process line from ps -aux|grep dovecot root 3182 0.0 1.4 256 876 ? Ss Sun08PM 10:10.06 /usr/local/sbin/dovecot Also, something else just turned up in the process list that I'm not sure I understand. Specifically... root 1817 0.0 1.6 324 1056 ? S 8:53PM 0:00.19 dovecot-auth dovecot 2191 0.0 3.0 256 1940 ? S 8:53PM 0:00.97 imap-login root 3182 0.0 1.4 256 876 ? Ss Sun08PM 10:11.78 /usr/local/sbin/dovecot dovecot 6333 0.0 3.0 256 1940 ? S 8:53PM 0:00.93 imap-login dovecot 8133 0.0 3.0 256 1940 ? S 8:53PM 0:00.97 imap-login dovecot 8397 0.0 3.0 256 1940 ? S 8:53PM 0:00.96 imap-login dovecot 16144 0.0 3.0 256 1940 ? S 8:53PM 0:00.92 imap-login This has me deeply confused. I'm not running IMAP, I'm not interested in running IMAP, I don't want anything to do with IMAP. However, there's five processes for imap-login. What gives? On to your second question: Are /etc/pwd.db and /etc/spwd.db available? Yes, both are listed in the directory of /etc as follows. -rw-r--r-- 1 root wheel 40960 Jul 9 09:56 /etc/pwd.db -rw------- 1 root wheel 40960 Jul 9 09:56 /etc/spwd.db featherweb: {41} How "available" this makes them (I don't know what context you were asking in), I'm not sure. Just for giggles, I tried chaning the permissions on spwd.db so that it was world-readable. Doing so had no effect. I still get password failure errors when I try to authenticate a pop3s connection from the client program. One other question: Pegasus (the mail client) has two options for secure POP connections besides apop (which I've shelved for the moment): STLS and direct SSL connection. I've got it set to direct SSL at the moment. Does this sound right? Looking forward to the next set of replies. Thanks much. -=-=-=-=-=-=-=-=-=-=-=- Bruce Lane, Owner & Head Hardware Heavy, Blue Feather Technologies -- http://www.bluefeathertech.com kyrrin (at) bluefeathertech do/t c=o=m "If Salvador Dali had owned a computer, would it have been equipped with surreal ports?"

3 4

[Dovecot] Problems with deliver (LDA)
by Claus Alboege 12 Jul '06

12 Jul '06

Hi, I'm using Dovecot's (1.0.rc2) 'deliver' (no sieve) as LDA - calling it from a .qmail file. It seems that 'deliver' destroys "message/rfc822" attachments (forward as attachment). My .qmail file looks like this, and use qmail to deliver a copy directly to my Maildir, and 'deliver' to deliver a second copy of the same message to the same Maildir: % cat .qmail ./Maildir/ |preline /usr/libexec/dovecot/deliver After forwarding a message (as attachment) to my account, I get the following 2 files in my Maildir. Check the difference in size: % ls -l Maildir/new -rw------- 1 csa csa 2818 2006-07-06 09:29 1152170973.7420.silver -rw------- 1 csa csa 1372 2006-07-06 09:29 1152170973.P7422Q0M136220.silver Grepping for ^Content-* in the 2 mails show that a part is missing. % cd Maildir/new % grep ^Content * 1152170973.7420.silver:23:Content-Type: multipart/mixed; 1152170973.7420.silver:28:Content-Type: text/plain; charset = "iso-8859-1" 1152170973.7420.silver:29:Content-Transfer-Encoding: quoted-printable 1152170973.7420.silver:34:Content-Type: message/rfc822; name="Testing" 1152170973.7420.silver:35:Content-Transfer-Encoding: 7bit 1152170973.7420.silver:36:Content-Disposition: attachment; filename="Testing" 1152170973.7420.silver:64:Content-Transfer-Encoding: quoted-printable 1152170973.7420.silver:65:Content-Type: text/plain; charset="iso-8859-1" 1152170973.P7422Q0M136220.silver:24:Content-Type: multipart/mixed; 1152170973.P7422Q0M136220.silver:29:Content-Type: text/plain; charset = "iso-8859-1" 1152170973.P7422Q0M136220.silver:30:Content-Transfer-Encoding: quoted-printable 1152170973.P7422Q0M136220.silver:35:Content-Type: message/rfc822; name="Testing" 1152170973.P7422Q0M136220.silver:36:Content-Transfer-Encoding: 7bit 1152170973.P7422Q0M136220.silver:37:Content-Disposition: attachment; filename="Testing" (sorry for the long lines) The offset in linenumbers is caused the the From line added by 'deliver'. So, am I missing something here (execpt from the attachment) - is there anything in 'deliver' that could cause this behaviour? Please let me know if you need further information or details. Regards /Claus A

1 1

[Dovecot] Shared folders not woking for me
by Nagy László 12 Jul '06

12 Jul '06

Hello, I'm new to dovecot, please forgive me my silly questions. :-) My OS is FreeBSD 6.1. I just installed dovecot 1.0.beta9. I have created a public namespace this way: namespace public { separator = / prefix = Public/ location = maildir:/var/mail/public } namespace private { separator = / prefix = location = maildir:/home/%u/Maildir inbox = yes } Then I created a new group and added a user to it: pw groupadd das pw usermod testuser -g das Then I created some files in /var/mail/public: drwxrwx--- 2 testuser das 512 Jul 11 19:22 Tasks drwx------ 2 testuser mail 512 Jul 11 19:20 cur drwxrwx--- 2 testuser das 512 Jul 11 19:24 dovecot-shared drwx------ 2 testuser mail 512 Jul 11 19:20 new drwx------ 2 testuser mail 512 Jul 11 19:20 tmp Then I restarted dovecot, and I tried to subscribe to 'Tasks', but my email client (Thunderbird 1.5) does not allow it. My other problem is about the "inbox = yes" setting. The private namespace does have an inbox, and it shows up in thunderbird. But it does not show my e-mails. I know that I have emails, I can read them with the 'mail' command. Please help me. Laszlo

3 7

Re: [Dovecot] Dovecot and MySQL auth - initial setup issues
by James Bowling 11 Jul '06

11 Jul '06

If you setup is in a virtual mailbox setup then your query should look something like this: user_query = SELECT maildir, 500 AS uid, 500 AS gid FROM users WHERE id = '%u' Try that out, replacing the 500's with the appropriate uid and gid and let me know what you see then. Regards, James Bowling On Tue, 11 Jul 2006 17:01:41 +0100, Andrew Hearn <andrew(a)aa.nu> wrote: > James Bowling wrote: >> Are you using a password encryption scheme for your user passwords in >> the mysql db? You might want to enable the following to help debug the >> issue more in your dovecot.conf: >> >> auth_verbose = yes >> auth_debug = yes >> auth_debug_passwords = yes >> >> Restart Dovecot and then try logging in. This will spit out alot more >> information about the process and might give us a better look into your >> issue. >> > > > Thanks James, > > I'm using plain at the moment whilst testing and getting this working, > the database has a plain password, and > under auth default { I've now set: > mechanisms = plain > > > The log I now get is: > > dovecot: Jul 11 17:01:21 Info: auth(default): client in: AUTH 1 > PLAIN service=IMAP lip=::ffff:81.187.11.54 rip=::ffff:81.187.11.8 > resp=AGFuZHJld0BtYWlsLXRlc3QuYWFpc3AubmV0LnVrADIzNzQyNg== > dovecot: Jul 11 17:01:21 Info: auth-worker(default): > sql(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): query: SELECT > password FROM users WHERE id = 'andrew(a)mail-test.aaisp.net.uk' > dovecot: Jul 11 17:01:21 Info: auth(default): client out: OK 1 > user=andrew(a)mail-test.aaisp.net.uk > dovecot: Jul 11 17:01:21 Info: auth(default): master in: REQUEST > 4 17643 1 > dovecot: Jul 11 17:01:21 Info: auth-worker(default): > sql(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): SELECT maildir > FROM users WHERE id = 'andrew(a)mail-test.aaisp.net.uk' > dovecot: Jul 11 17:01:21 Error: auth-worker(default): > sql(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): Password query > didn't return uid, or it was NULL > dovecot: Jul 11 17:01:21 Info: auth(default): > passwd(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): unknown user > dovecot: Jul 11 17:01:21 Error: auth(default): > userdb(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): user not found > from userdb > dovecot: Jul 11 17:01:21 Info: auth(default): master out: NOTFOUND 4 > dovecot: Jul 11 17:01:21 Info: imap-login: Internal login failure: > user=<andrew(a)mail-test.aaisp.net.uk>, method=PLAIN, > rip=::ffff:81.187.11.8, lip=::ffff:81.187.11.54 > > > > I'm not sure why it's saying "Password query didn't return uid", that > that seems the issue. > > > I'll carry on playing... Andrew

1 0

Re: [Dovecot] Dovecot and MySQL auth - initial setup issues
by Andrew Hearn 11 Jul '06

11 Jul '06

James Bowling wrote: > Are you using a password encryption scheme for your user passwords in > the mysql db? You might want to enable the following to help debug the > issue more in your dovecot.conf: > > auth_verbose = yes > auth_debug = yes > auth_debug_passwords = yes > > Restart Dovecot and then try logging in. This will spit out alot more > information about the process and might give us a better look into your > issue. > Thanks James, I'm using plain at the moment whilst testing and getting this working, the database has a plain password, and under auth default { I've now set: mechanisms = plain The log I now get is: dovecot: Jul 11 17:01:21 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip=::ffff:81.187.11.54 rip=::ffff:81.187.11.8 resp=AGFuZHJld0BtYWlsLXRlc3QuYWFpc3AubmV0LnVrADIzNzQyNg== dovecot: Jul 11 17:01:21 Info: auth-worker(default): sql(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): query: SELECT password FROM users WHERE id = 'andrew(a)mail-test.aaisp.net.uk' dovecot: Jul 11 17:01:21 Info: auth(default): client out: OK 1 user=andrew(a)mail-test.aaisp.net.uk dovecot: Jul 11 17:01:21 Info: auth(default): master in: REQUEST 4 17643 1 dovecot: Jul 11 17:01:21 Info: auth-worker(default): sql(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): SELECT maildir FROM users WHERE id = 'andrew(a)mail-test.aaisp.net.uk' dovecot: Jul 11 17:01:21 Error: auth-worker(default): sql(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): Password query didn't return uid, or it was NULL dovecot: Jul 11 17:01:21 Info: auth(default): passwd(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): unknown user dovecot: Jul 11 17:01:21 Error: auth(default): userdb(andrew@mail-test.aaisp.net.uk,::ffff:81.187.11.8): user not found from userdb dovecot: Jul 11 17:01:21 Info: auth(default): master out: NOTFOUND 4 dovecot: Jul 11 17:01:21 Info: imap-login: Internal login failure: user=<andrew(a)mail-test.aaisp.net.uk>, method=PLAIN, rip=::ffff:81.187.11.8, lip=::ffff:81.187.11.54 I'm not sure why it's saying "Password query didn't return uid", that that seems the issue. I'll carry on playing... Andrew

2 1