- dovecot - dovecot.org

[Dovecot] Authentication difficulties
by Timo Sirainen 30 Dec '04

30 Dec '04

There are constantly pretty basic questions in this list (and in my inbox) about how to get user authentication work correctly. This means that the documentation how it all works is either bad, or people don't find it easily. Any ideas how to improve it? I did this now: - Documentation link in dovecot.org now points directly to Wiki, so people don't go read the outdated documents - Upcoming 1.0-tests and 0.99.13 will contain doc/USE-WIKI-INSTEAD file pointing to Wiki: http://dovecot.org/list/dovecot-cvs/2004-December/003928.html - Updated comments in dovecot-example.conf: http://dovecot.org/list/dovecot-cvs/2004-December/003924.html - Added pointers to Wiki in dovecot-example.conf: http://dovecot.org/list/dovecot-cvs/2004-December/003927.html How good are the Wiki documents about user authentication in general? The content should probably be split somehow to "getting started" vs. "everything there is to know about it" and "system users" vs. "virtual users". I'm not really sure how to best do that though. I think the Wiki in general could be better organized. Wish I knew how.

3 2

[Dovecot] Maildir owner importance
by Roi Efrati 29 Dec '04

29 Dec '04

I have set up a directory (/var/local/virtualdir/) as the maildir with a special user/group (virtualmail) and in it I create directories for each domain (example1.tld, example2.tld etc) and sub dir's for each mailbox). Only at the moment, apart from the first one, they are all created as with user root as the owner. How important is to have all the directory tree owned by the same user group (virtualmail:virtualmail) ?

4 11

[Dovecot] bug in 99.13-rc2 in ldap md5 patch
by Farkas Levente 29 Dec '04

29 Dec '04

hi, it takes me another hour do debug it again, although i already report it for both joshua and timo. the original patch for openldap's md5 crypt has a small bug. in passdb-ldap.c the schema is already PLAIN-MD5 since that was set in the other part of the original patch in password-scheme.c. do anybody use dovecot with ldap and md5 password? i don't think so:-( this patch would be useful to apply before the final 0.99.13. anyway in the current 1.0 series the PLAIN-MD5 and LDAP-MD5 schema are different. at least plain_md5_verify and plain_md5_generate differ from ldap_md5_verify and ldap_md5_generate. why? -- Levente "Si vis pacem para bellum!" --- dovecot-0.99.13/src/auth/passdb-ldap.c.lfarkas 2004-12-22 17:06:25.000000000 +0100 +++ dovecot-0.99.13/src/auth/passdb-ldap.c 2004-12-22 17:06:56.000000000 +0100 @@ -109,12 +109,11 @@ } /* Special case for OpenLDAP's MD5 type */ - if (strcasecmp(scheme, "MD5") == 0) { + if (strcasecmp(scheme, "PLAIN-MD5") == 0) { buf = buffer_create_static(data_stack_pool, 16); if (base64_decode(password, strlen(password), NULL, buf) == 1 && buffer_get_used_size(buf) == 16) { password = binary_to_hex(buffer_get_data(buf, NULL), 16); - scheme = "PLAIN-MD5"; } }

2 4

[Dovecot] 0.99.13-rc3
by Timo Sirainen 29 Dec '04

29 Dec '04

http://dovecot.org/rc/ One more. Added LDAP-MD5 password scheme and changed non-$1$-MD5 passwords to use it. This is how it's done in 1.0-tests.

1 0

[Dovecot] dovecot_auth / pam_mysql login errors
by Roi Efrati 29 Dec '04

29 Dec '04

I am getting this errors at the maillog file : Dec 29 12:22:10 websrv dovecot-auth: pam_sm_authenticate called. Dec 29 12:22:10 websrv dovecot-auth: host changed. Dec 29 12:22:10 websrv dovecot-auth: database changed. Dec 29 12:22:10 websrv dovecot-auth: dbuser changed. Dec 29 12:22:10 websrv dovecot-auth: dbpasswd changed. Dec 29 12:22:10 websrv dovecot-auth: table changed. Dec 29 12:22:10 websrv dovecot-auth: usercolumn changed. Dec 29 12:22:10 websrv dovecot-auth: passwdcolumn changed. Dec 29 12:22:10 websrv dovecot-auth: crypt changed. Dec 29 12:22:10 websrv dovecot-auth: sqllog changed. Dec 29 12:22:10 websrv dovecot-auth: db_connect called. Dec 29 12:22:10 websrv dovecot-auth: returning 0 . Dec 29 12:22:10 websrv dovecot-auth: db_checkpasswd called. Dec 29 12:22:10 websrv dovecot-auth: pam_mysql: where clause = Dec 29 12:22:10 websrv dovecot-auth: SELECT password FROM email_users WHERE log in='myname' Dec 29 12:22:10 websrv dovecot-auth: sqlLog called. Dec 29 12:22:10 websrv dovecot-auth: returning 0 . Dec 29 12:22:10 websrv dovecot-auth: returning 0. ## And then: Dec 29 12:22:10 websrv dovecot-auth: pam_mysql: setcred called but not implemen ted. Dec 29 12:22:10 websrv dovecot-auth: pam_mysql: acct_mgmt called but not implem ented. Dont panic though :) Dec 29 12:22:10 websrv pop3-login: Internal login failure: myname [xxx.xxx.xxx.xxx] As much as I was trying to find reading material on them I have not maneged to find something that will help me. If anybody can shed some light on how to fix my server...

1 0

[Dovecot] Deleting a message through IMAP
by Doug Eubanks 28 Dec '04

28 Dec '04

I have been having a problem with the test releases...I am now using Test 59. When I delete a message using SquirrelMail (IMAP) the message stays in the message list....but you can't open it anymore because it can't be found, if I logout and log back in...the message is gone from the list. I thought it could be a problem with the cache, so I added mail_never_cache_fields = MessagePart Envelope Body only to recieve Dec 24 09:23:34 news dovecot: IMAP(admin): mail_never_cache_fields: Invalid cache field name 'Body', ignoring Any ideas? This problem has plagued me for a while and I always go back to using the and older test like 22 and the problem isn't there... Doug

3 2

[Dovecot] Moving existing MD5 passwords to LDAP?
by Ben Beuchler 28 Dec '04

28 Dec '04

I have a dovecot installing working quite well for around 1000 users using passwd-file authentication. I'm moving to LDAP and would sure love to be able to migrate the existing MD5 passwords. I've tried using ldapmodify to set "userPassword" to {CRYPT}$1$H8JE0k5X$y.ptShgYbOgWF.99lX88N1 and {MD5}$1$H8JE0k5X$y.ptShgYbOgWF.99lX88N1 In both cases, ldapmodify exits without errors but I cannot bind using the new password. Any ideas? -Ben -- Ben Beuchler There is no spoon. insyte(a)emt-p.org -- The Matrix

2 1

[Dovecot] bidirectional synchronization of dovecot-managed maildirs
by James Leifer 28 Dec '04

28 Dec '04

Hello and happy holidays, I've been thinking about high performance bidirectional synchronizing the mail on my laptop (which is frequently disconnected) and my workstation at work (which is always on and receives all inbound mail). Both run dovecot on top of maildir. I've been playing with offlineimap, unison (which I already use for all my non-mail files), as well as the gnus agent (in IMAP "disconnected mode"). None of these solutions is really satisfactory: * offlineimap treats a message refile between folders as a delete-plus-resend; * unison doesn't understand the semantics of flag changes at the end of files in maildirs; it also has to stat all the files (which can become slow) to detect changes; * gnus agent can't refile messages between folders when in disconnected mode. Perhaps there are better disconnected IMAP modes available for other MUAs, but, it seems like a more general solution would be appropriate. In particular, the "uniq" field of a maildir filename is an easy way of tracking the identity of a message as it gets refiled. My question: would it be difficult to patch dovecot so that it maintained the *same* uniq when copying messages between folders? What about adding hooks that get triggered whenever dovecot copies or deletes messages? These hooks could log the changes. Later, when one tries to sync, one merges the changes from both replicas and then applies them. I'm aware that dovecot has an option to do copies as hardlinks, which is a good start, but still requires one to stat the files to discover which have the same inode. This is *much* slower than simply listing the directories and comparing maildir "uniq" fields. I'm aware that this invariant wouldn't be maintained if other programs modified the maildirs under dovecot's nose, but I'm willing to exclude this possibility. Suggestions? Best regards, -James Leifer

3 4

[Dovecot] dspam plugin
by Johannes Berg 27 Dec '04

27 Dec '04

The first version is available at http://johannes.sipsolutions.net/edit/Projects/dovecot-dspam-integration/co… I'm calling dspam for every message, that seemed easier for now. I will probably integrate Tom's idea about storing the messages until a cron-job picks them up at night by just storing signatures into mysql, in which case its easy to do with a single query: INSERT INTO new_spam (user, signature, isspam) VALUES (<user>, <signature>, <isspam>) ON DUPLICATE KEY UPDATE isspam = <isspam> with given values for <user>, <signature> and <isspam> and a key on (user, signature). For now, however, calling dspam for every message works good enough for me, and seems to work. Regards, Johannes

1 0

[Dovecot] Worthwile to use quotas?
by Peter Clark 24 Dec '04

24 Dec '04

I'm aware that dovecot doesn't support Maildir++ quotas yet (pity). However, is it still worthwhile to set up something like Postfix + Maildrop to use quotas, or is dovecot's lack of support just going to throw a wrench in the works? Thanks, :Peter

4 6