- dovecot - dovecot.org

Re: [Dovecot] Authenticate user thru PAM
by Chris Wakelin 27 Aug '05

27 Aug '05

Adrian Mak wrote: > my mailsystem is using postfix and virtual mailbox which stored in mysql db. > SMTP AUTH is using PAM, pam-mysql to authenticate against a mysql db. > > I installed dovecot 0.99-14. In the dovecot example config file > it mentioned that auth_passdb can check against thru PAM but auth_userdb didn't > > Does it mean that auth_userdb should use other means e.g. /etc/passwd, > shadow, vpopmail, etc and in my case it is mysql. Right ? Yes, at least in 1.0-alpha1/stable, so I guess the same for 0.99. Dovecot can authenticate via mysql directly, of course (but I've never done it, so don't ask me how!) Chris -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, c.d.wakelin(a)reading.ac.uk IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094

1 0

Re: [Dovecot] Dovecot and Active Directory Authentication
by Chris Wakelin 27 Aug '05

27 Aug '05

Dave Smith wrote: > First off, sorry if this has been asked before - I have looked, honest. > > Is it possible to get dovecot to authenticate users against active > directory, treating the AD as a plain ldap server? I have this working > with cyrus saslauthd. > I have it working with PAM and pam_ldap in 1.0-stable/alpha1, but with userdb = passwd (we have users in NIS as well as AD). Search the mail archives for details! LDAP auth won't work directly as it expects to find a hashed version of the password. > I am using dovecot-0.99.11-2.EL4.1 on CentOS 4. Probably a good idea to upgrade to dovecot-1.0-stable or dovecot-1.0-alpha1 (0.99.11 is pretty old, even 0.99.14 is pretty well obsolete). Best Wishes, Chris -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, c.d.wakelin(a)reading.ac.uk IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094

1 0

[Dovecot] Wiki of dovecot.conf file
by Tim Schaefer 26 Aug '05

26 Aug '05

What would be extremely helpful is a really clean explanation of how to set up connections for MySQL. It would have to start with basic information and some real-world examples that make no assumptions, and clearly spell it out without confusion. In fact good examples reduce the need to subscribe to mailing lists and ask dumb questions! The current assumptions in the docs to date are that somehow non-geeks and those of us who have learned far more about email servers than we ever wanted to will somehow "get it" without decent examples. This has got to be the biggest problem using Dovecot. I've tried just about every pop-server I can find and I am about to give up on Dovecot if I can't get the connection to MySQL to work. I just want decent pop server that understands Maildir, now that I went through Cyrus SASL hell and got that working--again with incredibly poor documentation. And I don't give a rats-ass about IMAP, just need a pop server. Maybe IMAP later, for now just a pop server that understands Maildir and comes from open source. I'm using Postfix but it shouldn't matter. So far I've tried the following pop servers: nupop-1.3.9 -- can't compile qmail-1.03 -- a f**ing nightmare cyrus-imap/pop -- poor-to-no docs for pop server -- another nightmare vm-pop3d-1.1.6 -- works only on mbox flexpop-1.0.1 -- no docs , doesn't compile popular-1.5.5 -- docs are too sketchy for installation, too complicated and doesn't work I thought Dovecot would be the last one I have to screw with, but maybe I'm wrong... Thanks, Tim

2 1

[Dovecot] Compile trouble with mysql
by Tim Schaefer 26 Aug '05

26 Aug '05

Hi, I had a devil of a time compiling Dovecot with MySQL, but got it as follows: MYSQL=/usr export CPPFLAGS="-I${MYSQL}/include -I${MYSQL}/lib -I/usr/local/ssl/ -I/usr/local/ssl/include/ " export LDFLAGS="-L${MYSQL}/lib -R${MYSQL}/lib -I${MYSQL}/include -I${MYSQL}/lib -L/usr/local/lib -L/usr/local/ssl/lib" export SSL_FLAGS="-I/usr/local/ssl/ -I/usr/local/ssl/include/" export SSL_LIBS="-L/usr/local/lib -L/usr/local/ssl/lib" ./configure --localstatedir=/var --with-mysql=/usr ... Install prefix ...................... : /usr/local File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : dnotify Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with mail delivery agent .. : yes Building with user database modules . : static passdb passwd passwd-file checkpassword mysql (modules) Building with password lookup modules : passwd passwd-file shadow pam checkpassword mysql (modules) This is basically for somebody who RPM'd MySQL into /usr . I also figured out the less you give ./configure the better off you are. And...maybe you could help **me**.. :-) If you could post a few samples of how to actually connect to MySQL that would be great, for some reason I STILL cannot connect to MySQL even though I know the user/pass works for my dovecot userid. I know MySQL is compiled into dovecot but still cannot get the connect to work. I've tried: my dovecot.conf: auth default { mechanisms = plain passdb sql { args = /usr/local/etc/dovecot-mysql.conf } userdb sql { args = /usr/local/etc/dovecot-mysql.conf } } my dovecot-mysql.conf: driver = mysql connect = host=127.0.0.1 dbname=dovecot user=dovecot password=dovecot port=3306 connect = host=mydomain dbname=dovecot user=postfix password=postfix port=3306 connect = host=mydomain dbname=dovecot user=dovecot password=dovecot port=3306 connect = host=localhost dbname=dovecot user=dovecot password=dovecot port=3306 connect = host=/var/lib/mysql/mysql.sock dbname=dovecot user=dovecot password=dovecot port=3306 I get: Aug 26 10:45:35 dovecot: auth-worker(default_with_listener): mysql: Connect failed to (null) (dovecot): Access denied for user 'dovecot'@'localhost' (using password: YES) - waiting for 1 seconds before retry Aug 26 10:45:35 dovecot: auth-worker(default): mysql: Connect failed to (null) (dovecot): Access denied for user 'dovecot'@'localhost' (using password: YES) - waiting for 1 seconds before retry Aug 26 10:47:17 dovecot: Killed with signal 15 Aug 26 10:47:21 dovecot: auth-worker(default): mysql: Connect failed to (null) (dovecot): Access denied for user 'dovecot'@'localhost' (using password: YES) - waiting for 1 seconds before retry Help! Tim

1 0

[Dovecot] Compile trouble with mysql
by Tim Schaefer 26 Aug '05

26 Aug '05

1 0

[Dovecot] Dovecot.1.0.alpha1+mysql+mysql
by jigen 26 Aug '05

26 Aug '05

Hi, we are trying to track down the problem that prevents two mysql password databases from working. Instead of connecting to each database, it looks like dovecot tries to connect *twice* to the second specified. Do do this we just inserted some i_warning()s in the code. We noticed that passdb_sql_init (auth/passdb-sql.c) is called twice, once per configuration file, with the correct argument (path to config file). However, as you can see in the following maillog piece, this function calls sql_connect with the SAME parameters (the parameters of the second database). So the first call works and dovecot connects to the host correctly (lines 7-8), but in the second call dovecot finds the connection already up and obviously doesn't try again (last line). Could this be the origin of the problem? Now we are trying to understand why the argument to sql_connect isn't updated correctly. Maybe a bug in the linked list of sql_connection's? [...] dovecot: auth-worker(default): passdb_sql_init("/etc/dovecot/dovecot-mysql_django.conf") [...] dovecot: auth-worker(default): now calling sql_connect(passdb_sql_conn->db): [...] dovecot: auth-worker(default): passdb_sql_conn->config_path="/etc/dovecot/dovecot-mysql_debord.conf" [...] dovecot: auth-worker(default): passdb_sql_conn->set.connect="host=debord port=3306 dbname=posta_debord user=posta password=foobar" [...] dovecot: auth-worker(default): driver_mysql_connect: host=debord, user=posta, password=foobar. [...] dovecot: auth-worker(default): driver_mysql_connect: conn=0x3c00a6b0 [...] dovecot: auth-worker(default): actually connecting to debord [...] dovecot: auth-worker(default): mysql: Connected to debord (posta_debord) [...] dovecot: auth-worker(default): passdb_sql_init("/etc/dovecot/dovecot-mysql_debord.conf") [...] dovecot: auth-worker(default): now calling sql_connect(passdb_sql_conn->db): [...] dovecot: auth-worker(default): passdb_sql_conn->config_path="/etc/dovecot/dovecot-mysql_debord.conf" [...] dovecot: auth-worker(default): passdb_sql_conn->set.connect="host=debord port=3306 dbname=posta_debord user=posta password=foobar" [...] dovecot: auth-worker(default): driver_mysql_connect: host=debord, user=posta, password=foobar. [...] dovecot: auth-worker(default): driver_mysql_connect: conn=0x3c00a6b0 [...] dovecot: auth-worker(default): already connected to debord!!!! altivec & jigen

1 0

[Dovecot] Dovecot Virtual Users & Sendmail
by Chris Hogan 26 Aug '05

26 Aug '05

Not directly Dovecot, but a configuration problem. We have a working set-up with Dovecot+Procmail+Sendmail, using POP-before-SMTP. We want to be able to offer email accounts to some local schools, using SquirrelMail (keeps their costs & maintenance down). The whole arrangement is working, but we don't want to have to have 300+ School children as users of our Red Hat Enterprise server, so I've set up a passwd style file for authentication. This all works fine, they can access mailboxes & send emails, but to receive Sendmail is checking that they are unix users & bounces messages back if they aren't in /etc/passwd too. Has anybody ever got Sendmail working with Dovecot virtual users? Or is it time I switched to Postfix? Chris Hogan

3 2

[Dovecot] 1.0alpha1: assert and core
by Jeff A. Earickson 26 Aug '05

26 Aug '05

Hi, I've been running 1.0alpha1 in production since August 18, and got my first assert and core yesterday. Otherwise it has been running flawlessly. My setup: Sun E220R, Solaris 9, compiled dovecot with gcc 4.0.1, configured dovecot like so: #!/usr/bin/sh VERSION=1.0-alpha1 CC=gcc CFLAGS="-g -O" CPPFLAGS=-I/opt/openssl/include LDFLAGS=-L/opt/openssl/lib \ ./configure --prefix=/opt/dovecot.$VERSION --with-ssl=openssl \ --with-ssldir=/opt/openssl/ssl > configure.out The syslog message: Aug 25 04:15:43 emerald dovecot: [ID 107833 mail.error] IMAP(user): file mbox-sync-update.c: line 442 (mbox_sync_update_header_from): assertion failed: (ctx->mail.uid == 0 || ctx->mail.uid_broken || ctx->mail.uid == mail->uid) Gdb analysis of the resulting core file is attached, I hope this helps. The user's mailbox is 41003432 bytes in size. Jeff Earickson Colby College

1 0

[Dovecot] [Fwd: Re:Dovecot] Finally PEBKAC was Failed authentication to a mysql database (bug or PEBKAC?)]
by jigen 25 Aug '05

25 Aug '05

-----Forwarded Message----- From: jigen <jigen(a)metalabs.org> To: Timo Sirainen <tss(a)iki.fi> Subject: Re:Dovecot] Finally PEBKAC was Failed authentication to a mysql database (bug or PEBKAC?) Date: Sat, 20 Aug 2005 18:33:11 +0200 On Fri, 2005-08-19 at 16:56, Timo Sirainen wrote: > Dovecot just passes these values to Mysql library without doing anything > to them itself. So if it happens, it's Mysql library bug. It isn't a bug of mysql or dovecot. It's the most simple problem: mysql permissions :P In mysql 127.0.0.1 and localhost are differents things, and if you copy the user (posta in my case), it doesn't copy the password (and so it works without a password). And more: if you put password, you have to flush privileges. Finally PEBKAC :| > > One more question: how I can specify more different mysql-db conteining > > different users? > > I try in the following way: > > passdb sql { > > args = /etc/dovecot/dovecot-mysql_debord.conf > > } > > passdb sql { > > args = /etc/dovecot/dovecot-mysql_django.conf > > } > > This should work. After trying to authenticate against the first one it > should try the second. Although I'm not sure if I've tried two passdb > sqls before, maybe Dovecot has problems with that.. Well, I'll try once > I get home. I'm working on this problem, but at the moment it doesn't work. It always connects only to second db. Another PEBKAC? This is my configuration file, maybe there's something wrong. (i've cut out commented lines) ----dovecot.conf---- base_dir = /var/run/dovecot/ protocols = imap imaps pop3 pop3s ssl_disable = yes ssl_cert_file = /etc/ssl/django_posta.pem ssl_key_file = /etc/ssl/private/django_posta.pem verbose_proctitle = yes verbose_ssl = yes first_valid_uid = 507 last_valid_uid = 507 first_valid_gid = 507 last_valid_gid = 507 default_mail_env = maildir:/var/vmail/%d/%n@%d/ mail_full_filesystem_access = yes protocol imap { } protocol pop3 { } auth_verbose = yes auth_debug = yes auth default { mechanisms = plain passdb sql { args = /etc/dovecot/dovecot-mysql_debord.conf } passdb sql { args = /etc/dovecot/dovecot-mysql_django.conf } userdb static { args = uid=507 gid=507 } user = root count = 2 } --------------- ciao jigen

1 0

[Dovecot] Thread sorting problem
by Greg Trounson 24 Aug '05

24 Aug '05

I've just installed Dovecot on a Debian Sarge machine and am seeing some very strange thread sorting. In Mozilla Mail and Thunderbird on both Fedora and Debian clients my threads served up by Dovecot look like this (number denotes message time): |-11 | `-12 |-2 |-3 |-4 | `-5 | `-6 | `-7 | `-8 |-1 `-9 `-10 Where the exact same threads served by Sendmail/imap look like this: |-1 |-2 |-3 |-4 | `-5 | `-6 | `-7 | `-8 |-9 | `-10 |-11 | `-12 Squirrelmail shows the threads correctly in both cases too, so I suspect there might be something funny going on with how Thunderbird handles Maildir threads. I notice that Dovecot doesn't support the THREAD=ORDEREDSUBJECT capability, might that have something to do with it? thanks, Greg

3 2