- dovecot - dovecot.org

[Dovecot] PAM authentification problem
by Vladislav Kyjasko 17 Mar '06

17 Mar '06

Hi everybody, we try to migrate our IMAP service from uw-imap to dovecot because of horrible server slowdown when a lot of people poking in theirs huge imap folders. So, I try to run testing instance of dovecot on different imap port (12143) I have trouble with authentication by PAM module of MIT Kerberos. It successfuly works for authentificate users of wu-imap but not for dovecot. I see in dovecot.log messages like that : Info: Dovecot v1.0.beta3 starting up Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip=10.0.0.154 rip=10.0.0.148 Info: auth(default): client out: CONT 1 Info: auth(default): client in: CONT 1 AGtDNLamUjvADNLamUjQRsbw== Error: auth(default): pam(kyyashko,10.0.0.148): Child process died Info: auth(default): shadow(kyyashko,10.0.0.148): invalid password field Error: auth(default): PAM: Child 6748 died with signal 11 Info: auth(default): client out: FAIL 1 user=kyyashko temp Almost all users are in kerberos DB and has in local shadow field "*KRB*" instead of encrypted password. So, line "shadow ... invalid password field" is OK (when I made a local password in shadow the login was success) My dovecot.conf looks like: sl_disable = yes protocol imap { listen = *:12143 } auth_default_realm = FZU.CZ auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb pam { } userdb passwd { } user = root } original /etc/pam.d/dovecot I introdused by lines auth sufficient pam_krb5.so auth required pam_unix2.so use_first_pass nullok or tryed to substitute whole file pam.d/dovecot by actualy working one of imap: #%PAM-1.0 auth sufficient pam_krb5.so auth required pam_unix2.so use_first_pass nullok auth required pam_unix2.so account required pam_unix2.so but similary fruitless. Which direction I have to dig? P.S. Dovecot was built from dovecot-1.0.beta3-6.src.rpm on SuSE 9.0 with the same result like from dovecot-1.0.beta3.tar.bz2 :(

2 3

[Dovecot] Converting huge mbox to Dovecot mbox + indexes
by Bertrand Leboeuf 17 Mar '06

17 Mar '06

Migrating from UW IMAP/Qpopper mbox to Dovecot mbox. I have ~500 users, some with HUGE mbox (500MB-1GB), is there a script to create the Dovecot indexes at night to help speed up the migration process. Any idea. Thanks Bertrand Leboeuf leboeuf(a)emt.inrs.ca

2 1

[Dovecot] Install/configure on FC4 with maildir and mysql
by Netlink Tech 17 Mar '06

17 Mar '06

Hello, I have a FC4 x64 server that I am configuring/testing. It had dovecot 0.99 loaded after I did a yum update. That worked great with mbox, the passwd file, and test users in /home/users/username. I would like to be able to authenticate virtual users by 'username(a)domain.com' and have them be able to use squirrelmail or Outlook/Outlook Express to access their email. Users have no reason to have a login (shell) account on this machine. I also would like to use the maildir format for performance. I also have hundreds of users currently on a RH9 mail server using qpopper in mbox format, hashed mail spool. Questions: 1)Is a mysql database the best way to support "user(a)domain.com" email users? (they don't have any reason for a shell account on this machine) 2)What version of dovecot should I be using? I prefer RPMs and at http://www.dovecot.org/list/dovecot/2006-February/011467.html I found http://fedora.ivazquez.net/yum/4/x86_64/RPMS.alternatives/dovecot-1.0-0.iva… I installed this and then configured procmail for maildir delivery. I configured dovecot-sql.conf for mysql driver...but the mysql driver does not appear to be compiled in this rpm. 3)Anyone have any general tips on how to configure such a beast? Thanks, Curt

5 8

Re: [Dovecot] what are those .nfsXXXXX files with mbox ?
by Bertrand Leboeuf 16 Mar '06

16 Mar '06

Thanks, Dovecot seems to create a lot because of the indexes, but they dissapear with the cron. -Bert >From: Jeff Ballard <ballard(a)engr.wisc.edu> > > >There should be a cron job on the server that deletes those > >>From /var/spool/cron/crontabs/root: > >15 3 * * 0 /usr/lib/fs/nfs/nfsfind > >Looking at /usr/lib/fs/nfs/nfsfind: ># less /usr/lib/fs/nfs/nfsfind >#!/bin/sh ># Copyright (c) 1993 by Sun Microsystems, Inc. > >#ident "@(#)nfsfind.sh 1.7 00/07/17 SMI" ># ># Check shared NFS filesystems for .nfs* files that ># are more than a week old. ># ># These files are created by NFS clients when an open file ># is removed. To preserve some semblance of Unix semantics ># the client renames the file to a unique name so that the ># file appears to have been removed from the directory, but ># is still usable by the process that has the file open. >[snip] > >-Jeff > >-- >-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- >Jeff Ballard <ballard(a)engr.wisc.edu> 608-265-5090 >Unix Systems Manager, Computer-Aided Engineering Center >

1 0

Re: [Dovecot] what are those .nfsXXXXX files with mbox ?
by Bertrand Leboeuf 16 Mar '06

16 Mar '06

Thanks, there just seems to be a lot of them >From: tblader <tblader(a)flambeau.com> > >Those are files NFS creates when the file it had locked/open/writing to was >nuked or moved before it had a chance to complete. IIRC, they cannot be >removed until the NFS daemon has given up on them [1]. > >[1] - from experience, not TFM > > > >leboeuf(a)emt.inrs.ca wrote: >> On Solaris 9, using: >> >> default_mail_env = mbox:~/mail:INBOX=/var/mail/%u >> >> Here is a listing of ~/mail >> >> with UW IMAP: >> >> .: >> total 8 >> drwx------ 2 testu3 sysadmin 512 Mar 14 14:40 . >> drwxr-xr-x 4 testu3 sysadmin 512 Mar 14 14:40 .. >> -rw------- 1 testu3 sysadmin 496 Mar 14 14:40 Drafts >> -rw------- 1 testu3 sysadmin 496 Mar 14 14:40 Sent Items >> >> with Dovecot: >> >> .: >> total 16 >> drwx------ 3 testu3 sysadmin 512 Mar 14 14:52 . >> drwxr-xr-x 4 testu3 sysadmin 512 Mar 14 14:40 .. >> drwx------ 5 testu3 sysadmin 512 Mar 14 14:52 .imap >> -rw------- 1 testu3 sysadmin 6 Mar 14 14:52 .nfsAEBA5 >> -rw------- 1 testu3 sysadmin 11 Mar 14 14:52 .nfsCEBA5 >> -rw------- 1 testu3 sysadmin 7 Mar 14 14:52 .nfsEEBA5 >> -rw------- 1 testu3 sysadmin 496 Mar 14 14:40 Drafts >> -rw------- 1 testu3 sysadmin 496 Mar 14 14:40 Sent Items >> >> ./.imap: >> total 10 >> drwx------ 5 testu3 sysadmin 512 Mar 14 14:52 . >> drwx------ 3 testu3 sysadmin 512 Mar 14 14:52 .. >> drwx------ 2 testu3 sysadmin 512 Mar 14 14:53 Drafts >> drwx------ 2 testu3 sysadmin 512 Mar 14 14:53 INBOX >> drwx------ 2 testu3 sysadmin 512 Mar 14 14:53 Sent Items >> >> ./.imap/Drafts: >> total 30 >> drwx------ 2 testu3 sysadmin 512 Mar 14 14:53 . >> drwx------ 5 testu3 sysadmin 512 Mar 14 14:52 .. >> -rw------- 1 testu3 sysadmin 112 Mar 14 14:53 .nfs0FBA5 >> -rw------- 1 testu3 sysadmin 10272 Mar 14 14:52 .nfs2FBA5 >> -rw------- 1 testu3 sysadmin 144 Mar 14 14:53 dovecot.index >> >> ./.imap/INBOX: >> total 66 >> drwx------ 2 testu3 sysadmin 512 Mar 14 14:53 . >> drwx------ 5 testu3 sysadmin 512 Mar 14 14:52 .. >> -rw------- 1 testu3 sysadmin 216 Mar 14 14:53 .nfs00CA5 >> -rw------- 1 testu3 sysadmin 17408 Mar 14 14:53 .nfs20CA5 >> -rw------- 1 testu3 sysadmin 360 Mar 14 14:52 .nfs5FBA5 >> -rw------- 1 testu3 sysadmin 10272 Mar 14 14:52 .nfs8FBA5 >> -rw------- 1 testu3 sysadmin 360 Mar 14 14:53 dovecot.index >> >> ./.imap/Sent Items: >> total 54 >> drwx------ 2 testu3 sysadmin 512 Mar 14 14:53 . >> drwx------ 5 testu3 sysadmin 512 Mar 14 14:52 .. >> -rw------- 1 testu3 sysadmin 88 Mar 14 14:53 .nfs40CA5 >> -rw------- 1 testu3 sysadmin 10272 Mar 14 14:53 .nfs60CA5 >> -rw------- 1 testu3 sysadmin 88 Mar 14 14:52 .nfsBFBA5 >> -rw------- 1 testu3 sysadmin 10272 Mar 14 14:52 .nfsDFBA5 >> -rw------- 1 testu3 sysadmin 144 Mar 14 14:53 dovecot.index >> >> what are the .nfsXXXXX files for ? >> >> Thanks >> >> Bertrand Leboeuf >> leboeuf(a)emt.inrs.ca >> >> > >-- > >Flambeau Inc. Technology Center >Email : tblader(a)flambeau.com >Keyserver: http://pgp.mit.edu KeyID: 0x00E9EC2C >? http://www.google.com/search?q=what+is+gnupg

3 2

[Dovecot] virtual users
by tblader 16 Mar '06

16 Mar '06

Hello All. I've been reading the virtual user howto but cant get the login working. dovecot.conf is below [0] if anyone can offer some pointers. I'm confused about the format of /etc/imap.passwd [1] also. Does the "pass" word in the example need to be plaintext, or the MD5 string from do. Also, what is the significance of "{plain}"? If there are docs I've missed, please RTFM with a link. Thanks [0] - dovecot.conf ----------------------------------- protocols = imap imaps mail_debug = no protocol imap { } protocol pop3 { } auth_verbose = no auth_debug = no auth_debug_passwords = no auth default { mechanisms = plain passdb passwd-file { args = /etc/imap.passwd } userdb passwd { } userdb passwd-file { args = /etc/imap.passwd } user = root } plugin { } [1] ------------------------ testuser:{plain}pass:65500:65500::/var/spool/mail/testuser

1 1

Re: [Dovecot] Migrating UW-IMAP to Dovecot on Solaris 9
by Bertrand Leboeuf 16 Mar '06

16 Mar '06

Thanks, Found out that we were using Qpopper X-UIDL so I am using pop3_reuse_xuidl = yes >From: lenny(a)edpausa.com > >if you're using wu-imap, you'll need this for pop to work. > >pop3_uidl_format = %08Xv%08Xu > >and if your site is relatively big, dovecot may run out of file >descriptors, you may need to use this. > >/usr/bin/plimit -n 8192,8192 `cat /usr/local/var/run/dovecot/master.pid` > > >and watch the logs :) > > >> In the process of migrating to Dovecot 1.0beta3, any tips or >> step-by-step instructions that might relate to Solaris 9. >> >> Thanks >> >> Bertrand Leboeuf >> leboeuf(a)emt.inrs.ca >> >> >

1 0

[Dovecot] Help: Limit x minutes for POP3 Access
by Adnae Mac Uthidir 16 Mar '06

16 Mar '06

Hi, IŽm looking for a solution to limit the pop3 access for a time. I have the idea that all users should be allowed an 5 minute access to the pop3 but I canŽt find a solution for that. best regards ans thx for your help Sascha Wolf

1 0

Re: [Dovecot] Imap crashes when trying to move messages
by ambroz.bizjak＠guest.arnes.si 16 Mar '06

16 Mar '06

> On 2006-03-15 23:39:40 +0100, ambroz.bizjak(a)guest.arnes.si wrote: > > > The imap process crashes when SquirrelMail wants to move a message to > > > another folder. I have run imap in gdb and talked to it the same way > > > SquirrelMail does and got a backtrace. > > > > > > I am using Dovecot beta3. I am using it in combination with XMail, > > > which has maildir databases. > > > My system is Gentoo Linux on x86. > > > The same version of Dovecot works great for me on amd64 with exactly > > > the same config. > > > > > > > I got more info. The mailboxes I was using were directly copied from > > another server which was also using Dovecot. After I deleted all files > > named *dovecot* in the maildirs, the imap process no nolger crashes. > > can you ask which dovecot version they had running on the other server? > looks like some broken index files. It's my server and it's still running and working properly. Dovecot version is (as on the newer server) beta3, but the first Dovecot running was beta2 I think. Imap works properly on that server. Anyway Dovecot shouldn't crash ever if the index files are broken!

1 0

[Dovecot] Shared Folders Problem. Bug?
by Adam M. Dunn 16 Mar '06

16 Mar '06

I'm trying to get shared folders to work, and I've noticed a few issues. I created a private and public namespace, the private one with autodetection for Maildir or Mbox, and the public one for a public folder. Something like this: namespace private { separator = / inbox = yes prefix = location = } namespace public { separator = / prefix = Public/ location = maildir:/var/mail/public } My plan is to eventually setup a public area for users to drop Spam and Ham into for my spam bayesan filter. The problem is the Wiki says if you drop a file in the public area called 'dovecot-shared' with the same permissions and ownership, that any new files dovecot creates there will use those same attributes. This does not seem to be the case. I created a Maildir folder identical to the one on the Wiki, named everything 'dovecot:dovecot' since my dovecot server will be running as that user, as well as the 'dovecot-shared' file. I get permission denied errors in syslog when I try to access it via an IMAP client. The only way I can make it work is ignore the dovecot-share file and put all users in a common unix group and make the Public folder group 'rwx'. Also, I would like to be able to make the Public folder writable, but not readable. It seems if I take the read bit away, my IMAP clients complain. Does anyone know how to make that work? One thing about the namespaces while I'm at it. I had to put my private namespace first followed by the public one. If I reversed them, all the subfolders except the inbox in my mail directories disappear from the client. Is that a bug too? Thanks, Adam

1 0