- dovecot - dovecot.org

[Dovecot] Secure connection from "localhost" in jails
by Dirk Engling 02 Jul '06

02 Jul '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear dovecot developers, first: thanks for this really cool imapd, on my server it serves some hundred domains, all in all some thousand users, some having hundred thousand mails in their Maildirs (their spam boxes mostly). Since I put this installation in an FreeBSD geli encrypted disc image I had no choice but to choose an imapd with clever indexes - dovecot was perfect. However, since I reconfigured the disc image to work as a FreeBSD jail, I had some trouble with my web mail solution. Squirrelmail does not work with imaps (or at least not smoothly, out of the box, or whatever) and I didn't like to hack php to support SSL. Plus: there is no point in using ssl for a local connection. In a FreeBSD jail a sockets source address is always rewritten to the jails address, so squirrelmail opening a connection to dovecot will not come from 127.0.0.1 but from the same (jails) address, dovecot listens to. Still, dovecot only considers 'localhost' addresses as secure and allows LOGIN or PLAIN auth. With the little patch below dovecot allows clients from the jail to authenticate via LOGIN, when they connect from the IP it accepts connections at. Something similar is lurking around in pop3 auth code, I am sure, you get the point. Regards erdgeist ======== 8< ======== 8< ======== 8< ======== 8< ======== 8< ======== 8< dovecot-1.0.rc1/src/imap-login 18:59:44 #> diff -u client.c* - --- client.c Thu Jun 29 18:59:39 2006 +++ client.c_new Thu Jun 29 18:59:19 2006 @@ -411,7 +411,7 @@ const struct ip_addr *ip) { struct imap_client *client; - - const char *addr; + const char *addr, *local_addr; if (max_logging_users > CLIENT_DESTROY_OLDEST_COUNT && hash_size(clients) >= max_logging_users) { @@ -429,8 +429,10 @@ client->common.tls = ssl; addr = net_ip2addr(ip); + local_addr = net_ip2addr(local_ip); client->common.secured = ssl || (IPADDR_IS_V4(ip) && strncmp(addr, "127.", 4) == 0) || + (IPADDR_IS_V4(ip) && strncmp(addr, local_addr, strlen(local_addr)) == 0) || (IPADDR_IS_V6(ip) && (strcmp(addr, "::1") == 0 || strncmp(addr, "::ffff:127.", 11) == 0)); -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) iD8DBQFEpAu4ImmQdUyYEgkRAnC8AJ9W3L5XwjdTuLvGfUwmIjEfyq8sAQCdErPc v6JW46e9dfYBsKzAWprg2zw= =/IWt -----END PGP SIGNATURE-----

3 4

[Dovecot] Re: 1.0 RC1 status
by Ramunas 01 Jul '06

01 Jul '06

>If you think there's still something I should have replied to, please >re-send it because I've either missed it or just skipped it for some >reason.(Except there are still a couple of mails from this week I've >yet to reply to.) Timo look at this message - http://www.dovecot.org/list/dovecot/2006-June/013958.html. I compiled dovecot-latest (dovecot-20060618.tar.gz , configured --with-ioloop=poll), but same problem: Jun 19 07:43:25 srv1 dovecot: Dovecot v1.0.beta9 starting up Jun 19 07:43:26 srv1 dovecot: auth(default): pgsql: Connected to hosting Jun 19 07:44:09 srv1 dovecot: pop3-login: Login: user=<ramas>, method=PLAIN, rip=192.168.0.3, lip=192.168.0.6, TLS Jun 19 07:44:09 srv1 dovecot: POP3(ramas): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jun 19 19:18:21 srv1 dovecot: auth(default): sql(ramas,192.168.0.3): Password query failed: Jun 19 19:18:21 srv1 dovecot: auth(default): invalid I/O fd 8, callback 0x8065170 Jun 19 19:19:21 srv1 dovecot: pop3-login: Disconnected: Inactivity: method=PLAIN, rip=192.168.0.3, lip=192.168.0.6, TLS gdb /usr/libexec/dovecot/dovecot-auth 30056 GNU gdb Red Hat Linux (6.3.0.0-1.122rh) 0xffffe410 in __kernel_vsyscall () (gdb) x 0x8065170 0x8065170 <get_result>: 0x83e58955 (gdb) bt #0 0xffffe410 in __kernel_vsyscall () #1 0xb7debe3e in __lll_mutex_lock_wait () from /lib/libc.so.6 #2 0xb7d6b94c in _L_lock_100 () from /lib/libc.so.6 #3 0xb7d6b8ea in fflush () from /lib/libc.so.6 #4 0xb7e5a973 in pqFlush () from /usr/lib/libpq.so.3 #5 0xb7e57cb0 in PQconsumeInput () from /usr/lib/libpq.so.3 #6 0x0806518c in get_result () #7 0x0806abe8 in io_loop_handler_run () #8 0x0806a28c in io_loop_run () #9 0x08058da5 in main () Also tryed compile with epoll, got this error: Jun 19 06:55:23 srv1 dovecot: auth(default): sql(ramas,192.168.0.3): Password query failed: Jun 19 06:55:23 srv1 dovecot: pop3-login: Disconnected: user=<ramas>, method=PLAIN, rip=192.168.0.3, lip=192.168.0.6, TLS Jun 19 06:55:26 srv1 dovecot: auth(default): io_loop_handle_add: epoll_ctl(3, 9): No such file or directory Jun 19 06:55:26 srv1 dovecot: pop3-login: Disconnected: method=PLAIN, rip=192.168.0.3, lip=192.168.0.6, TLS Jun 19 06:55:26 srv1 dovecot: child 11758 (auth) returned error 89 Jun 19 06:55:27 srv1 dovecot: auth(default): pgsql: Connected to hosting Jun 19 06:55:27 srv1 dovecot: pop3-login: Login: user=<ramas>, method=PLAIN, rip=192.168.0.3, lip=192.168.0.6, TLS Jun 19 06:55:27 srv1 dovecot: POP3(ramas): Disconnected: Logged out top=0/0, retr=2/3429, del=2/2, size=3395 Users passwords stored on PostgreSQL (7.4.11) another server. Machine - Linux, kernel 2.6.16.20 Thank you. Ramunas

2 2

[Dovecot] Just one user experiencing server timeouts
by Fran Fabrizio 01 Jul '06

01 Jul '06

[dovecot-1.0-0.beta2.7 on Fedora Core 5, maildir formatted mail directories, various clients: thunderbird 1.5.0.4 from FC4 and WinXP, SquirrelMail 1.4.6-5.fc5 RPM, various recent versions of Pine from various Fedoras and Redhat 9] I have just one mail user who experiences server timeouts when trying to delete a message (move it to Trash) or other common operations. This user has 4.1GB of mail spread over 200+ Maildir-formatted folders, so I immediately expected sheer volume as the problem - this user has by far the most mail. This user experiences the problem from multiple Thunderbird installs, from SquirrelMail, and from Pine. However, I created a new user account using our standard account creation processes, and did a direct copy of olduser's Maildir to newuser's homedir. Then I did a chown -R newuser ~newuser/Maildir, set up an account in Thunderbird for newuser's account, and tried for an hour to get a server timeout doing all the same operations that cause the timeout on olduser's account, with no timeouts. I absolutely cannot duplicate the behavior, but when I watch olduser do this from any of the above named clients, I see the timeouts on about 10% of the operations. I've been looking into this off and on for weeks, but I am baffled. I can't think of what is so specific about this one user's account that is causing the trip up. Both home directories are stored on the same filesystem and as I mentioned I made an exact duplicate of Maildir. I'm completely out of ideas, does anyone have any thoughts? Does Dovecot do any data tracking on a per user basis that could be confusing it, some cache I can clear? Dovecot has been restarted numerous times since the trouble started. -- Fran Fabrizio Senior Systems Analyst Department of Computer and Information Sciences University of Alabama at Birmingham http://www.cis.uab.edu/ 205.934.0653

2 1

[Dovecot] Problems with Sent folder
by james edwards 01 Jul '06

01 Jul '06

We are using dovecot-0.99.13-3.FC3; the users use IMAP. I have had several of these today where the user cannot write to their Sent folder on the server. The users do own everything in their home dir: [root@jidmail lcrdjav]# file Sent Sent: ISO-8859 HTML document text What is up with the HTML, I am not used to seeing this in any of the IMAP folders ? -- James H. Edwards Network Systems Administrator Judicial Information Division jedwards(a)nmcourts.com

2 1

[Dovecot] patch to make sieved compile & work
by Steffen Kaiser 01 Jul '06

01 Jul '06

Hello, attached you'll find a patch to make the Sieve decompiler located in dovecot-sieve/src/libsieve compile & work. To compile sieved I've extracted the two commands from the make process for sievec, see the attached sieved.compile.sh. Bye, -- Steffen Kaiser

2 1

[Dovecot] rc1 & password debug
by Thomas Hummel 01 Jul '06

01 Jul '06

Hello Timo, I just launched rc1 with auth_verbose = yes auth_debug = yes #auth_debug_passwords = no and on a wrong password, I see my crypted passwd in the log : userPassword(password)={Crypt}xxxxxxxx Is that normal, since I assume that auth_debug_passwords defaults to no ? -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] Improving interaction/performance with Mail.app?
by Alan Schmitt 01 Jul '06

01 Jul '06

Hello, I'm using dovecot as my IMAP server just for me, and I access it from three machines, all using Apple Mail.app. Unfortunately the performance is really bad, especially when deleting or copying a lot of messages. I know this is the fault of Mail.app, whose IMAP support leaves a lot to desire, but I was wondering if there could be some dovecot configuration tricks that make the interaction smoother. Thanks a lot, Alan -- Alan Schmitt <http://alan.petitepomme.net/> The hacker: someone who figured things out and made something cool happen. .O. ..O OOO

4 8

[Dovecot] file_wait_lock with dovecot 0.99.14-1sarge
by Jorge Salamero Sanz 01 Jul '06

01 Jul '06

hi all, i've just installed dovecot from debian sarge and i get this error: Jun 28 16:31:50 server pop3(user): file_wait_lock() failed with custom flags file /mnt/nfs/users/user//mail/.customflags: No locks available (maildir in nfs) how seriously i should take it ? is it fixed in newer versions ? thanks !

2 1

RE: [Dovecot] APPEND bug in dovecot-20060628
by Bill Boebel 01 Jul '06

01 Jul '06

Timo, > >I'm running maildir quotas with rc1 (dovecot-20060628) and get the > >following when trying to APPEND: > >"NO Unknown error" > >System logs show: > >Quota: Couldn't get new message's size > > > >.... and the file isn't there (unknown if Dovecot removed it, or if the > >lack of the file is the cause of the error). > > I am seeing this problem as well. Running this morning's CVS. It is hitting this condition on line 229 of src/lib-storage/index/maildir/maildir-mail.c, in function maildir_mail_get_physical_size(): /* size can be included in filename */ if (!maildir_filename_get_size(fname, MAILDIR_EXTRA_FILE_SIZE, &size)) { if (_mail->uid != 0) { if (maildir_file_do(mbox, _mail->uid, do_stat, &st) <= 0) { return (uoff_t)-1; } } else { /* saved mail which hasn't been committed yet */ if (do_stat(mbox, fname, &st) <= 0) { >> line 229 >>>>>> return (uoff_t)-1; } } size = st.st_size; }

2 1

[Dovecot] 1.0rc1 location variable bug
by Chris Wakelin 01 Jul '06

01 Jul '06

I think I've found a bug in Dovecot 1.0 rc1 where if you have namespaces without the "location = " setting defined, it fails to use default_mail_env as it should. This seems to have been broken by :- 2006-06-16 18:13 Timo Sirainen <tss(a)iki.fi> * src/master/: auth-process.c, login-process.c, mail-process.c, main.c, master-settings.c: Settings parser nowadays returns "" instead of NULL when it reads an empty value from config file (due to some good reason I unfortunately didn't write to commit message and can't remember anymore). Fixed a lot of existing checks which checked for empty strings with NULL instead of "" checks. Looks like Timo missed (at least) one! I'm surprised nobody else has seen this. Do you all have "location" defined? Patch attached. Best Wishes, Chris -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, c.d.wakelin(a)reading.ac.uk IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094 --- dovecot-1.0.rc1.orig/src/master/mail-process.c Tue Jun 27 22:00:46 2006 +++ dovecot-1.0.rc1/src/master/mail-process.c Fri Jun 30 16:08:40 2006 @@ -161,7 +161,7 @@ for (i = 1; ns != NULL; i++, ns = ns->next) { t_push(); - location = ns->location != NULL ? ns->location : + location = *ns->location != '\0' ? ns->location : default_location; location = expand_mail_env(location, table); env_put(t_strdup_printf("NAMESPACE_%u=%s", i, location));

2 1