- dovecot - dovecot.org

[Dovecot] Problem with LDAP and Dovecot
by Peter Clark 13 Dec '04

13 Dec '04

I am trying to set up Dovecot so that it uses LDAP, but I keep getting this error message in /var/log/syslog: Dec 12 03:38:17 mydomain dovecot-auth: LDAP: ldap_search() failed (filter user_filter = (mail=user(a)mydomain.tld)) Bad search filter Relevant configuration files: /etc/dovecot-ldap.conf: hosts = localhost dn = cn=dovecot,ou=sysAccounts,dc=mydomain,dc=tld dnpass = password ldap_version = 3 base = ou=mailAccounts,dc=mydomain,dc=tld deref = never scope = subtree user_attrs = mail,,,,, user_filter = (mail=%u) pass_attrs = mail,userPassword pass_filter = user_filter = (mail=%u) default_pass_scheme = CRYPT user_global_uid = 5000 user_global_gid = 5000 /etc/dovecot.conf: protocols = imap imaps pop3s imap_listen = 127.0.0.1 imaps_listen = * pop3s_listen = * ssl_cert_file = /etc/ssl/mydomain.tld/Cert.pem ssl_key_file = /etc/ssl/mydomain.tld/PrivateKey.pem disable_plaintext_auth = yes login = imap login_user = dovecot login = pop3 verbose_proctitle = yes first_valid_uid = 5000 last_valid_uid = 5000 first_valid_gid = 5000 last_valid_gid = 5000 mail_extra_groups = mail valid_chroot_dirs = /var/mail/virtualmail default_mail_env = maildir:/var/mail/virtualmail/%n/Maildir auth = default auth_mechanisms = plain auth_userdb = ldap /etc/dovecot-ldap.conf auth_passdb = ldap /etc/dovecot-ldap.conf auth_user = dovecot auth_verbose = yes auth_debug = no In /etc/ldap/slapd.conf: access to attribute=userPassword by dn="cn=admin,dc=mydomain,dc=tld" write by dn="cn=dovecot,ou=sysAccounts,dc=mydomain,dc=tld" read by anonymous auth by self write by * none Output of 'slapcat | grep dovecot': dn: cn=dovecot,ou=sysAccounts,dc=mydomain,dc=tld cn: dovecot sn: dovecot I've even tried changing the dn to admin, but I still get the same error. What am I doing wrong? :Peter

3 3

[Dovecot] Ximian Evolution Issue
by Adam Todorski 13 Dec '04

13 Dec '04

Hi This may be a problem with Dovecot and it may be a problem with Evolution, I'm trying to narrow it down. I'm using Evolution 2.0.2 on Fedora Core 3 x86_64 to connect over SSL to Dovecot 0.99.11 on Debian testing (Sarge) on an i686 using Maildir for the mail store. Specifically, when I open a folder with more than a few dozen messages in it I get the following error (with the carroted fields populated): Error while Opening folder imap://<username>@<mailserver>/<folder>. Incomplete server response: no information provided for message <message number>. Thanks for any leads on this! Adam

2 1

[Dovecot] Corrupted index files in 0.99.12.1
by Brady Wetherington 12 Dec '04

12 Dec '04

Hi - I've got two copies of Dovecot installed on my server (don't worry, talking to two different sockets for authentication, with two different sets of filenames using options in configure), and I found at least one instance where the index file for my INBOX (on my own account, in fact) got corrupted. So badly so that when I connected via IMAP and selected my INBOX, it said there were no messages there - but if I logged in via sqWebMail (ugh), it said all my messages were there. Note that it didn't give the 'NO can't use index file' message. I moved the .INBOX directory to another filename, and then re-logged in and found that all was well (it regenerated the index files correctly). Would my old, corrupted index files be of any use to anyone? I still have that directory sitting somewhere. Is it perhaps 'bad' to run two copies of Dovecot? I don't know exactly what I was doing, but I can easily imagine accessing one of my Dovecots using my webmail setup, and one using straight IMAP - is that an unsupported setup? I'd also be happy to discuss why I'm using two copies of Dovecot, but that's a whole other discussion :)

2 1

Re: [Dovecot] Timeouts with outlook express
by Daniel 11 Dec '04

11 Dec '04

Hi Yes I have all the outlook workarounds enabled. Interestingly the progress bar dose not move until the whole email has been downloaded. Normally this moves bit by bit as the mail downloads. But as I said the email is downloading, there is network traffic. Any ideas? Regards Daniel On Thu, 2004-12-09 at 07:45 +0000, Andrew Hutchings wrote: > Hi Daniel, > > Have you tried turning on th outlook-no-nuls workaround in dovecot? > > Regards > Andrew > > On Thu, 2004-12-09 at 15:22 +0800, Daniel wrote: > > Hi > > > > I am using Dovecot 0.99.12.1 (just upgraded) on a site with about 1500 > > mailboxes. One thing I have noticed is when the client outlook express > > is receiving a large mail via pop3 it gets a time out. There is traffic. > > If you click on the "wait" button in the dialogue the mail continues to > > download. > > > > This seem to relate to the "Server Timeouts" setting under mail account > > Properties/advance. If this setting is set higher the dialogue come only > > after this time has passed. > > > > If the mail take a long time to download if say is very big the user may > > have to click "Wait" a number of time even if the time out setting is > > set to the largest amount. > > > > It funny because the mail is downloading, So the pop3 server has not > > stopped responding as outlook express say it has. Strange. > > > > What is happening here? and is there a work around for it. Do I have a > > setting wrong. > > > > Regards > > Daniel ROwe > > > >

2 1

[Dovecot] SQL + AUTH command bug?
by Andrew Hutchings 10 Dec '04

10 Dec '04

Hi, While investigating the problem with Thunderbird auths I found the following happening: Escape character is '^]'. +OK Dovecot ready. CAPA +OK CAPA TOP USER UIDL RESP-CODES PIPELINING SASL PLAIN . AUTH PLAIN + + + -ERR Authentication failed. This is what is happening during a Thunderbird connection, when each '+' happens dovecot does an sql query on the sql server for user '?'. This was asserting mech.c until Timo did the bugfix last night. I currently have dovecot authing via 3 separate sql password tables as it is a migration from 3 old servers. If you try any other auth method (which shouldn't work anyway in my case) it doesn't talk to the SQL servers and just comes back as: -ERR Authentication failed. Regards Andrew -- Andrew Hutchings Systems Operator / Developer / Linux Guru Netserve Consultants Ltd. http://www.domaincity.co.uk/

5 10

Re: [Dovecot] When the 1.0 release is planed?
by Kim Culhan 10 Dec '04

10 Dec '04

On Thu, December 9, 2004 15:07, Andrew Velikoredchanin said: > Wouter Van Hemel: > >>> >>> What part of 1.0-test now not fully tested? >>> >>> >>> >> >> For me, the latest test releases have been pretty stable. But if you're >> not going to offer imap, you might as well run a simple pop server such as popa3d >> (http://www.openwall.com/popa3d/) It's quite secure AFAIK -- >> at least, it's written by Solar Designer and uses a multiple-fork model. > > No. popa3d not support mysql userdb. :( > > >> But it probably would help dovecot if you would give the test releases a >> try, the last bugs (if any) are hardest to find. That way, you would have a stable dovecot >> sooner. > > Yes, of couse. FWIW, dovecot CVS (development version) has been running here for several weeks with pop3s users having no problems we can find. -kim' __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

4 4

[Dovecot] Exim4 authentication patch
by Andrey Panin 10 Dec '04

10 Dec '04

Hello all, attached patch makes possible to use dovecot as an authentication backend for Exim 4. Reasons beyond this patch are simple: exim's authenticators require use of plaintext passwords and NTLM code in exim is quite outdated and hairy. Patch generated against Exim 4.43, but should apply to earlier versions too. Patch adds new 'dovecot' authenticator, which can be used as such: ntlm: driver = dovecot public_name = NTLM server_socket = /var/authentication_socket_path server_set_id = $1 cram: driver = dovecot public_name = CRAM-MD5 ... Authenticator has only one parameter 'server_socket', it's value used as path for dovecot's authentication socket. Authenticator can be used for server authentication only. Hope it will be useful for someone. Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke(a)donpac.ru | PGP key: wwwkeys.pgp.net

2 1

[Dovecot] mech-plain patch
by Andrew Hutchings 10 Dec '04

10 Dec '04

Hi Guys, Unoffical patch for mech-plain so the AUTH PLAIN command works with SQL (and possibly other DBs). Thunderbird should work again after this. --- mech-plain.c 2004-12-10 01:56:51.065987304 +0000 +++ mech-plain.c 2004-12-10 01:53:16.974534152 +0000 @@ -27,7 +27,10 @@ authid = (const char *) data; authenid = NULL; pass = ""; - count = 0; + if (data_size == 0) + return; + + count = 0; for (i = 0; i < data_size; i++) { if (data[i] == '\0') { if (++count == 1) Regards Andrew -- Andrew Hutchings Systems Operator / Developer / Linux Guru Netserve Consultants Ltd. http://www.domaincity.co.uk/

1 1

[Dovecot] Help needed with debugging auth command
by Andrew Hutchings 10 Dec '04

10 Dec '04

Hi guys, OK, so I am trying to find out why the POP3 AUTH / IMAP AUTHORIZE command is not doing what it is supposed to (not sure if it just for me or what). I am getting as far as: sasl-server.c - line 123 - mech = auth_client_find_mech(auth_client, mech_name); auth_client_find_mech is in auth-client.c which is where I am getting lost. My guess is we are not returning back to sasl-server.c since we don't get an SASL auth or an 'Unsupported' error. If I try 'PLAIN' as the auth method as the parameter then it tries to login with no user or pass and fails. If I try anything else (I have configed to accept plain only) I get 'Authorization failed' and it doesn't even try to lookup the user/pass. Regards Andrew -- Andrew Hutchings Systems Operator / Developer / Linux Guru Netserve Consultants Ltd. http://www.domaincity.co.uk/

1 1

[Dovecot] SHA1
by Marco Herrn 10 Dec '04

10 Dec '04

Hi, I am currently installing doveot as POP and IMAP server, but I a have a few difficulties configuring it correctly. I use postgresql to store the user information. The passwords are stored SHA1 encrypted. Now I have the problem that dovecot isn't accepting the user. In dovecot-pgsql.conf I defined default_pass_scheme = SHA1 I am not quite sure about whether this is corrents, since it is not mentioned in the documentation, but it is mentioned in the wiki (under the name SHA) and it doesn't produce an error (as specifying SHA does). So I assume this is correct. But when I log in with a user I always geht the following log output: dovecot-auth: Dec 08 22:18:20 Info: PGSQL: Performing query: SELECT passwd FROM mailbox WHERE localpart = érwin' AND domainname ='poiu.de' dovecot-auth: Dec 08 22:18:20 Info: pgsql(erwin(a)poiu.de): Password mismatch imap-login: Dec 08 22:18:20 Info: Aborted login [82.82.66.4] dovecot-auth: Dec 08 22:18:20 Info: Login process 9 disconnected dovecot-auth: Dec 08 22:18:20 Info: Login process 9 connected dovecot-auth: Dec 08 22:18:20 Info: Login process 9 sent handshake: PID 22222 Is there a way to get a more excessive debugging? I already set auth_verbose and auth_debug to yes. Or does anyone have an idea what the problem can be here? Regards Marco -- It's better to be wanted for murder that not to be wanted at all. -- Marco Herrn _ ___ o ' (_)< _ _ _>(__'> o 0 (_X % >(_`> O o _; _;'7^'_ \;\ % (GnuPG/PGP-encrypted mail preferred) _;\ _.\ _.';;) ;,;_/; Key ID: 0x94620736 _ _'./_$'))_; );/$}/`fsc

3 7