[Dovecot] Wrong MySQL sintax, I can't login

2010-08-31 Thread Pablo
Hi guys:

I can't login as a user:

The output of mail.log:

Aug 31 08:39:45 socrates dovecot: auth(default): client in:
AUTH^I1^IPLAIN^Iservice=imap^Ilip=178.63.82.247^Irip=81.39.27.227^Ilport=143^Irport=33715^Iresp=AHBhYmxvLnJvZHJpZ3VlekBlc2N1ZWxhc3VwZXJpb3JkZWNvYWNoaW5nLmNvbQBwZXJpa2l0YS4=
Aug 31 08:39:45 socrates dovecot: auth-worker(default):
sql(pablo.rodrig...@escuelasuperiordecoaching.com,81.39.27.227):
query: SELECT password FROM mailbox WHERE username =
'pablo.rodrig...@escuelasuperiordecoaching.com'
Aug 31 08:39:45 socrates dovecot: auth(default): client out:
ok^i1^iuser=pablo.rodrig...@escuelasuperiordecoaching.com
Aug 31 08:39:45 socrates dovecot: auth(default): master in:
REQUEST^I65^I16796^I1
Aug 31 08:39:45 socrates dovecot: auth-worker(default):
sql(pablo.rodrig...@escuelasuperiordecoaching.com,81.39.27.227):
SELECT maildir, 1001 AS uid, 1001 AS gid FROM mailbox WHERE username =
'pablo.rodrig...@escuelasuperiordecoaching.com
Aug 31 08:39:45 socrates dovecot: auth-worker(default):
sql(pablo.rodrig...@escuelasuperiordecoaching.com,81.39.27.227): User
query failed: You have an error in your SQL syntax; check the manual
that corresponds to your MySQL server version for the right syntax to
use near ''pablo.rodrig...@escuelasuperiordecoaching.com' at line 1
Aug 31 08:39:45 socrates dovecot: auth(default): master out: FAIL^I65
Aug 31 08:39:45 socrates dovecot: imap-login: Internal login failure
(auth failed, 1 attempts):
user=pablo.rodrig...@escuelasuperiordecoaching.com, method=PLAIN,
rip=81.39.27.227, lip=178.63.82.247

My Dovecot version: 1.2.9

My Dovecot configuration:

# 1.2.9: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-23-server x86_64 Ubuntu 10.04.1 LTS reiserfs
log_timestamp: %Y-%m-%d %H:%M:%S
protocols: imap imaps pop3 pop3s
ssl_cert_file: /etc/ssl/mail/dovecot.crt
ssl_key_file: /etc/ssl/mail/dovecot.key
disable_plaintext_auth: no
login_dir: /var/run/dovecot/login
login_executable(default): /usr/lib/dovecot/imap-login
login_executable(imap): /usr/lib/dovecot/imap-login
login_executable(pop3): /usr/lib/dovecot/pop3-login
mail_location: maildir:/home/vmail/%u/
mail_debug: yes
mbox_write_locks: fcntl dotlock
mail_executable(default): /usr/lib/dovecot/imap
mail_executable(imap): /usr/lib/dovecot/imap
mail_executable(pop3): /usr/lib/dovecot/pop3
mail_plugin_dir(default): /usr/lib/dovecot/modules/imap
mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap
mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3
auth default:
  mechanisms: plain login
  verbose: yes
  debug: yes
  debug_passwords: yes
  passdb:
driver: sql
args: /etc/dovecot/dovecot-sql.conf
  userdb:
driver: sql
args: /etc/dovecot/dovecot-sql.conf
  socket:
type: listen
client:
  path: /var/spool/postfix/private/auth
  mode: 432
  user: postfix
  group: postfix
master:
  path: /var/run/dovecot/auth-master
  mode: 384
  user: vmail
  group: vmail

My Dovecot MySQL configuration:

driver=mysql
connect = host=localhost dbname=postfix user=postfix password=xx
default_pass_scheme = CRYPT
password_query = SELECT password FROM mailbox WHERE username = '%u'
user_query = SELECT maildir, 1001 AS uid, 1001 AS gid FROM mailbox
WHERE username = '%u

Can anyone help me? I've seen that log told me wrong syntax, but I
think upper query is right, isn't it? Any hint?

Thanks in advance :-)


Re: [Dovecot] Wrong MySQL sintax, I can't login

2010-08-31 Thread A.L.E.C
On 31.08.2010 08:42, Pablo wrote:

 driver=mysql
 connect = host=localhost dbname=postfix user=postfix password=xx
 default_pass_scheme = CRYPT
 password_query = SELECT password FROM mailbox WHERE username = '%u'
 user_query = SELECT maildir, 1001 AS uid, 1001 AS gid FROM mailbox
 WHERE username = '%u


No closing apostrophe here.

-- 
Aleksander 'A.L.E.C' Machniak http://alec.pl gg:2275252
LAN Management System Developer http://lms.org.pl
Roundcube Webmail Developer http://roundcube.net


Re: [Dovecot] Wrong MySQL sintax, I can't login

2010-08-31 Thread Pablo
Argh!

Two days looking at it...

Thank you very much Alec, and sorry :-(

2010/8/31 A.L.E.C a...@alec.pl:
 On 31.08.2010 08:42, Pablo wrote:

 driver=mysql
 connect = host=localhost dbname=postfix user=postfix password=xx
 default_pass_scheme = CRYPT
 password_query = SELECT password FROM mailbox WHERE username = '%u'
 user_query = SELECT maildir, 1001 AS uid, 1001 AS gid FROM mailbox
 WHERE username = '%u
                    

 No closing apostrophe here.

 --
 Aleksander 'A.L.E.C' Machniak http://alec.pl gg:2275252
 LAN Management System Developer http://lms.org.pl
 Roundcube Webmail Developer http://roundcube.net



Re: [Dovecot] permissions on auth-userdb

2010-08-31 Thread Egbert Jan van den Bussche

Op 31-8-2010 2:13, spamv...@googlemail.com schreef:

Hi..

im still trying to upgrade to 2.0.
Im getting:
dovecot: lda: Error: userdb lookup:
connect(/var/run/dovecot/auth-userdb) failed: Permission denied
(euid=1(vmail) egid=1(vmail) missing +r perm:
/var/run/dovecot/auth-userdb, euid is not dir owner)

the error is correct caus its owned by root. My Questions is who should own it ?
Im not sure how that works, what process/user calls the auth-userdb ?
The auth-userdb returns the args generated in master.conf, right ?

i think comment out the user and group setting in master.conf will fix
it but im not sure if that is the securest way.

the mails come from postfix via dovecot-lda

Hans

master.conf
service auth {
   # auth_socket_path points to this userdb socket by default. It's typically
   # used by dovecot-lda, doveadm, possibly imap process, etc. Its default
   # permissions make it readable only by root, but you may need to relax these
   # permissions. Users that have access to this socket are able to get a list
   # of all usernames and get results of everyone's userdb lookups.
   unix_listener auth-userdb {
 mode = 0600
 #user = vmail
 #group = vmail
   }

auth-ldap.conf.ext
passdb {
   driver = ldap
   args = /etc/dovecot/dovecot-ldap.conf.ext
}
userdb {
   driver = static
   args = uid=vmail gid=vmail home=/home/MAILBOXES/%u/
mail=/home/MAILBOXES/%u/mail
}
Had more or less the same fight with 1.2.9. I had to change auth user to 
the group 'shadow' (if /etc/shadow is owned by group shadow). Or run 
auth under the default user  'root'.


In your case it has to do with the passdb and/or userdb you use. In my 
case I had the problems with local users via pam.


HTH
Egbert Jan


[Dovecot] doveadm expunge -A mailbox Trash savedbefore 30d iterate_query LDAP

2010-08-31 Thread Tomislav Mihalicek

hi everyone

after doing this in shell
#/usr/local/dovecot-2.0.1/bin/doveadm expunge -u tmihal mailbox INBOX
savedbefore 1d
everything is working as it should but ...
#/usr/local/dovecot-2.0.1/bin/doveadm expunge -A mailbox INBOX savedbefore
1d
doveadm(root): Error: userdb list: Disconnected unexpectedly
doveadm: Error: Failed to iterate through some users

#cat /etc/dovecot2/dovecot-ldap.conf
tls = no
hosts   = blah
ldap_version= 3
auth_bind   = no
dn  = blah.blah
dnpass  = blah
scope   = onelevel
deref   = never
pass_attrs  = userPassword=password
default_pass_scheme = CRYPT
user_attrs  =
mail=%u,homeDirectory=home,mailQuotaSize=quota_rule=*:bytes=%$,mailQuotaCount=quota_rule2=*:messages=%$
base= ou=accounts,dc=xnet,dc=hr
user_filter =
((objectClass=qmailUser)(accountStatus=enabled)(enabledService=mail)(enabledService=%Ls%Lc)(|(mail=%u)(mailAlternateAddress=%u)))
pass_filter =
((objectClass=qmailUser)(accountStatus=enabled)(enabledService=mail)(enabledService=%Ls%Lc)(|(mail=%u)(mailAlternateAddress=%u)))
# Attributes and filter to get a list of all users
iterate_attrs   = mail=%u
iterate_filter  = (objectClass=qmailUser)

Aug 31 10:03:35 cartman2 dovecot: auth: Debug: master in: LIST  1
Aug 31 10:03:35 cartman2 dovecot: auth: Fatal: net_connect_unix(auth-worker)
failed: Permission denied
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: Loading modules from
directory: /usr/local/dovecot-2.0.1/lib/dovecot/auth
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: passwd-file
/etc/dovecot/passwd.masterusers: Read 1 users
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17731)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17729)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17734)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17735)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17737)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17739)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17742)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17741)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17740)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17730)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17738)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17733)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17743)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17728)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17736)
Aug 31 10:03:35 cartman2 dovecot: auth: Debug: auth client connected
(pid=17732)

any clues?
-- 
View this message in context: 
http://old.nabble.com/doveadm-expunge--A-mailbox-Trash-savedbefore-30d-iterate_query-LDAP-tp29580393p29580393.html
Sent from the Dovecot mailing list archive at Nabble.com.



[Dovecot] fetchmail wakeup

2010-08-31 Thread Peter Dungel
Does someone know, if in the new release of dovecot 2.x.x there is a feature
implemented, that wakes fetchmail or any other program on a client request,
or is the fetchmail wakeup plugin still the only way to do this (at least
I've not found any other, and that plugin never worked for me),..

 

Yours Peter



[Dovecot] Dovecot 1.x and 2.x on the same machine ?

2010-08-31 Thread Frank Bonnet

Hello

Would it be possible to run two instances of Dovecot
in order to test V 2 on the SAME machine that runs V 1

One Dovecot 1.x instance on std TCP ports
One Dovecot 2.x instance on custom TCP ports and custom directories

Thanks




Re: [Dovecot] fetchmail wakeup

2010-08-31 Thread Amon Ott
On Tuesday 31 August 2010 wrote Peter Dungel:
 Does someone know, if in the new release of dovecot 2.x.x there is a
 feature implemented, that wakes fetchmail or any other program on a client
 request, or is the fetchmail wakeup plugin still the only way to do this
 (at least I've not found any other, and that plugin never worked for me),..

You could replace the imap or pop3 helper program with a wrapper that first 
sends the fetchmail daemon a wakeup signal, waits a few secs and then calls 
the original.

Amon Ott
-- 
Dr. Amon Ott - m-privacy GmbH
Am Köllnischen Park 1, 10179 Berlin
Tel: +49 30 24342334
Fax: +49 30 24342336
Web: http://www.m-privacy.de
Handelsregister:
 Amtsgericht Charlottenburg HRB 84946
Geschäftsführer:
 Dipl.-Kfm. Holger Maczkowsky,
 Roman Maczkowsky
GnuPG-Key-ID: EA898571


[Dovecot] Help with Public Folder Configuration

2010-08-31 Thread Joy
Dear All,
   I am trying to use Public Folder feature of dovecot but
having some confusion with the configuration part as well as
understanding the same.

Here is output of doveconf -n which i think required to help me -

mail_location = maildir:~/Maildir

namespace {
  inbox = yes
  location =
  prefix =
  separator = .
  type = private
}
namespace {
  list = children
  location = maildir:/var/mail/public
  prefix = Public.
  separator = .
  subscriptions = no
  type = public
}

plugin {
  acl = vfile:/usr/local/dovecot/dovecot-acl/acl
}

 after making this configuration i also created subfolder inside
/var/mail/public

which looks like following:-

mail1:~# less /var/mail/public/
dovecot-acl-list  .Public/
mail1:~# less /var/mail/public/.Public/Maildir/
cur/ new/ tmp/


I have changed default permission to [ chown -R vmail:vmail /var/mail
] on base public folder.

Now I am able to see the public folder from webmail as well as from
thunderbird but no display for .Public folder.

I am expecting that .Public folder will be visible to all but no one
will be allowed to delete and make any change in that folder, I am
also using global ACL in my configuration.

Please let me know what i am doing wrong because not getting any error
in log, Correct me if i am understanding wrong.

Thanks


[Dovecot] My %% variables in the namespace settings do not appear to be expanding.

2010-08-31 Thread Kenneth Cope
Hello,

I've been using the dovecot 1.2.x branch server software for a
while now.  With the advent of the 2.0.x branch going 'stable' I
decided to attempt a migration and make use of some of the features
that I've not needed before.  One of these is the shared
folder/namespace feature.  No luck.  I've hit a wall and can not
determine the problem.  At the moment it looks like a bug to me,
but it may well be that I'm missing some related configuration, or
file permission.

I can not get the %% variable expansion in a namespace to work.
What I end up with, on an IMAP connection is a directory named, for
instance, '%h'.  The same goes for any of the %% variables used at
this point.  My current set-up is 'not' the same as the current
setup and I'm using virtual users that are not 'live' on the
current system.

I would really appreciate it if someone could cast an eye over my
config and let me know if I've missed something obvious.

Thanks.

Kenneth Cope
kenn...@copeonthe.net



I'm using a dovecot compiled with the following options:

./configure --prefix=/usr/local/dovecot-2.0.1 \
--enable-dependency-tracking INSTALL_DATA=install -c -p -m644 \
--docdir=/usr/local/dovecot-2.0.1/docs/ --disable-static \
--disable-rpath --with-nss --with-zlib --with-bzlib --with-libcap \
--with-ssl=openssl --with-ssldir=/usr/local/dovecot-2.0.1/etc/ssl \
--with-docs \


The 'test' configuration is as follows:

#  /usr/local/dovecot-2.0.1/bin/doveconf -n
# 2.0.1: /usr/local/dovecot-2.0.1/etc/dovecot/dovecot.conf
# OS: Linux 2.6.9-89.0.26.ELsmp i686 Red Hat Enterprise Linux ES
release 4 (Nahant Update 8) auth_debug = yes
auth_debug_passwords = yes
auth_mechanisms = plain login cram-md5 digest-md5 apop
auth_username_chars =
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_ @
auth_username_format = %Lu auth_verbose = yes
default_client_limit = 1
default_internal_user = mail
default_login_user = dovecot
disable_plaintext_auth = no
first_valid_gid = 12
first_valid_uid = 8
last_valid_gid = 12
last_valid_uid = 8
log_path = /usr/local/dovecot-2.0.1/dovecot.log
login_log_format_elements = [%p:%e] %Us(%u) method=%m rip=%r:%b
lip=%l:%a %c %k mail_debug = yes
mail_location = maildir:%h/
mail_log_prefix = [%p] %Us(%u): 
mail_max_keyword_length = 30
mail_plugins = quota imap_quota zlib acl
mailbox_idle_check_interval = 120 s
namespace {
  inbox = yes
  location = 
  prefix = 
  separator = .
  type = private
}
namespace {
  hidden = yes
  inbox = no
  list = no
  location = 
  prefix = INBOX
  separator = .
  type = private
}
namespace {
  list = children
  location = maildir:%%h:LAYOUT=maildir++:INDEX=~/shared.%Dn_%Dd
  prefix = shared/%...@%d.
  separator = .
  subscriptions = no
  type = shared
}
namespace {
  location = 
  prefix = 
}
passdb {
  args = scheme=CRYPT
username_format=%u /usr/local/dovecot-2.0.1/auth/passwd.dovecot driver
= passwd-file }
plugin {
  acl =
vfile:/usr/local/dovecot-2.0.1/etc/dovecot/global-acls:cache_secs=300
acl_shared_dict =
file:/usr/local/dovecot-2.0.1/var/lib/dovecot/shared-mailboxes
mail_log_events = all mail_log_fields = uid, box, msgid, from, subject,
size, vsize, flags mail_log_group_events = yes quota = maildir:User
quota quota_rule = ?:storage=400M
  quota_rule2 = Trash:storage=+10%
  zlib_save = gz
  zlib_save_level = 9
}
service auth-worker {
  user = $default_internal_user
}
service auth {
  unix_listener auth-userdb {
group = dovecot
mode = 0664
user = mail
  }
  user = $default_internal_user
}
service imap-login {
  inet_listener imap {
port = 9143
  }
  inet_listener imaps {
port = 9993
ssl = yes
  }
  process_min_avail = 10
  service_count = 1
}
service imap {
  process_limit = 1024
  vsz_limit = 268435456
}
service lmtp {
  unix_listener lmtp {
mode = 0666
  }
}
service pop3-login {
  inet_listener pop3 {
port = 9110
  }
  inet_listener pop3s {
port = 9995
ssl = yes
  }
}
service pop3 {
  process_limit = 1024
}
ssl_cert = /etc/ssl/mail.cert
ssl_key = /etc/ssl/mail.cert
userdb {
  args = username_format=%u /usr/local/dovecot-2.0.1/auth/passwd.dovecot
  driver = passwd-file
}
verbose_ssl = yes
protocol imap {
  imap_client_workarounds = delay-newmail
  imap_id_log = *
  imap_idle_notify_interval = 120 s
  imap_logout_format = bytes=%i/%o
  imap_max_line_length = 65536
  mail_max_userip_connections = 40
  mail_plugins = $mail_plugins imap_quota zlib imap_zlib imap_acl
}
protocol pop3 {
  mail_max_userip_connections = 40
  mail_plugins = $mail_plugins zlib
  pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
  pop3_enable_last = no
  pop3_lock_session = no
  pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
bytes=%i/%o pop3_reuse_xuidl = yes
  pop3_save_uidl = yes
  pop3_uidl_format = %Mf
}



The contents of .../var/run/dovecot


#  ls -lA 
total 12
srw---  1 root root   0 Aug 31 11:25 anvil

[Dovecot] istream_read like zlib, but without zlib

2010-08-31 Thread Alex Baule
Hy Timo !

I Made some modification in stream_read in zlib. I remove all zlib part,
because i don't need this, but i need to read a istream to change it.

Well, i create a size_t called supersize, with is a substitute for
stream-zs.avail_in.

The trouble is, my debug file have a lot of READ Plugin\n, and i think
it's because my read becomes a loop, i think it's because i don't know to
identify the EOF from the istream.

you can help me to identify the EOF and set it ?

Tks .!!!

static ssize_t i_stream_emx_read(struct istream_private *stream)
{
struct emx_istream *emxstream = (struct emx_istream *)stream;
const unsigned char *data;
uoff_t high_offset;
size_t size;
int ret;


fprintf(emxstream-debug,READ Plugin\n);
fflush(emxstream-debug);


high_offset = stream-istream.v_offset + (stream-pos - stream-skip);
if (emxstream-eof_offset == high_offset) {
i_assert(emxstream-high_pos == 0);
stream-istream.eof = TRUE;
return -1;
}

if (stream-pos  emxstream-high_pos) {
/* we're here because we seeked back within the read buffer. */
ret = emxstream-high_pos - stream-pos;
stream-pos = emxstream-high_pos;
emxstream-high_pos = 0;
return ret;
}
emxstream-high_pos = 0;

if (stream-pos + CHUNK_SIZE  stream-buffer_size) {
/* try to keep at least CHUNK_SIZE available */
if (!emxstream-marked  stream-skip  0) {
/* don't try to keep anything cached if we don't
   have a seek mark. */
i_stream_compress(stream);
}
if (stream-max_buffer_size == 0 ||
stream-buffer_size  stream-max_buffer_size)
i_stream_grow_buffer(stream, CHUNK_SIZE);

if (stream-pos == stream-buffer_size) {
if (stream-skip  0) {
/* lose our buffer cache */
i_stream_compress(stream);
}

if (stream-pos == stream-buffer_size)
return -2; /* buffer full */
}
}

if(emxstream-supersize == 0){
/* need to read more data. try to read a full CHUNK_SIZE */
i_stream_skip(stream-parent, emxstream-prev_size);
if (i_stream_read_data(stream-parent, data, size, CHUNK_SIZE-1)
== -1  size == 0) {
if (stream-parent-stream_errno != 0) {
stream-istream.stream_errno = stream-parent-stream_errno;
} else {
i_assert(stream-parent-eof);
stream-istream.stream_errno = EPIPE;
}
return -1;
}
emxstream-prev_size = size;

if (size == 0) {
/* no more input */
stream-istream.eof = TRUE;
i_assert(!stream-istream.blocking);
return 0;
}

fprintf(emxstream-debug,READ =|%s|= Plugin\n,data);
fflush(emxstream-debug);

memcpy(stream-w_buffer + stream-pos, data,size);
emxstream-supersize = size;
}


size = stream-buffer_size - stream-pos;
stream-pos += size;

if(stream-istream.eof == TRUE){
emxstream-eof_offset = stream-istream.v_offset + stream-pos;
i_stream_skip(stream-parent, emxstream-prev_size -
emxstream-supersize);
emxstream-supersize = 0;
emxstream-prev_size = 0;
}

if (size == 0) {
/* read more input */
return i_stream_emx_read(stream);
}
return size;
}


Re: [Dovecot] 2.0 migration weirdnesses: logs and hang

2010-08-31 Thread Kyle Wheeler

On Wednesday, August 25 at 03:34 PM, quoth Kyle Wheeler:

On Tuesday, August 24 at 12:17 AM, quoth Timo Sirainen:

On 23.8.2010, at 23.37, Kyle Wheeler wrote:

In that trace Dovecot has sent reply to everything mutt has 
asked for. Although it looks like mutt has skipped logging some 
of the commands it has sent (LIST commands, e.g. a0002 or 
a0042). Perhaps it sent something else that Dovecot didn't reply 
to yet? .. Get a log with Dovecot's rawlog: 
http://wiki2.dovecot.org/Debugging/Rawlog


I'm attaching the output of the rawlog.


Could you do once more with -bt options?


Attached. It looks like the rest of the commands in the same packet 
after mutt told Dovecot that it was DONE with IDLE were ignored.


Has this been dropped?

~Kyle
--
Every American expects and deserves clean air, and then we act on that 
belief, then we will set an example for the rest of the world to 
follow.

  -- George H. W. Bush


pgp70km3JptZa.pgp
Description: PGP signature


Re: [Dovecot] permissions on auth-userdb

2010-08-31 Thread spamvoll
The Question is if that Process needs to be root or not.
And as long as i dont know whos talking to that process and why it
runs as default as root i wouldnt touch it.

It would make sense if its running as root when userdb is pam to
access the files or its running as root because noone should have root
rights and so noone can read the whole userdb.
In that last case it would be really bad to switch the user from root
to vmail :)

In my case all mails are stored with user vmail, maybe user vmail
needs to be able to read the hole db

I dont know :) If someone know, let me know
Hans


2010/8/31 Egbert Jan van den Bussche egb...@vandenbussche.nl:
 Op 31-8-2010 2:13, spamv...@googlemail.com schreef:

 Hi..

 im still trying to upgrade to 2.0.
 Im getting:
 dovecot: lda: Error: userdb lookup:
 connect(/var/run/dovecot/auth-userdb) failed: Permission denied
 (euid=1(vmail) egid=1(vmail) missing +r perm:
 /var/run/dovecot/auth-userdb, euid is not dir owner)

 the error is correct caus its owned by root. My Questions is who should
 own it ?
 Im not sure how that works, what process/user calls the auth-userdb ?
 The auth-userdb returns the args generated in master.conf, right ?

 i think comment out the user and group setting in master.conf will fix
 it but im not sure if that is the securest way.

 the mails come from postfix via dovecot-lda

 Hans

 master.conf
 service auth {
   # auth_socket_path points to this userdb socket by default. It's
 typically
   # used by dovecot-lda, doveadm, possibly imap process, etc. Its default
   # permissions make it readable only by root, but you may need to relax
 these
   # permissions. Users that have access to this socket are able to get a
 list
   # of all usernames and get results of everyone's userdb lookups.
   unix_listener auth-userdb {
     mode = 0600
     #user = vmail
     #group = vmail
   }

 auth-ldap.conf.ext
 passdb {
   driver = ldap
   args = /etc/dovecot/dovecot-ldap.conf.ext
 }
 userdb {
   driver = static
   args = uid=vmail gid=vmail home=/home/MAILBOXES/%u/
 mail=/home/MAILBOXES/%u/mail
 }

 Had more or less the same fight with 1.2.9. I had to change auth user to the
 group 'shadow' (if /etc/shadow is owned by group shadow). Or run auth under
 the default user  'root'.

 In your case it has to do with the passdb and/or userdb you use. In my case
 I had the problems with local users via pam.

 HTH
 Egbert Jan



[Dovecot] Size limit for a single mail in the IMAP store?

2010-08-31 Thread Ralf Hildebrandt
Postfix has message_size_limit = 26214400, but that doesn't keep my
users from sending huge messages which canot be sent, but can be
stored in the IMAP Sent folder.

Is it possible to set a size limit for the size of a single mail?

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebra...@charite.de | http://www.charite.de



[Dovecot] Mail error in log

2010-08-31 Thread Ian macdonald
Hi All,

I am getting the following in the mail error log

deliver(julie): safe_mkstemp(/home/julie/.temp.geomail.10443.) failed:
Permission denied

This is correct julie does not have access to write to her home directory

Julie is a system user who is chrooted so her home is owned by root,
this is for when she logs in via sftp to retrieve files she can only
access folders below her home.

I am using Maildir and julie does have access  to ~Maildir, is there
any reason why deliver is attempting to use her user directory and not
her Maildir?

Cheers

Ian


Re: [Dovecot] Mail error in log

2010-08-31 Thread Charles Marcus
On 2010-08-31 10:30 AM, Ian macdonald ianma...@gmail.com wrote:
 I am using Maildir and julie does have access  to ~Maildir, is there
 any reason why deliver is attempting to use her user directory and not
 her Maildir?

Did you assign her a 'home' directory?

What version of dovecot? dovecot -n output?

-- 

Best regards,

Charles


Re: [Dovecot] Mail error in log

2010-08-31 Thread Ian macdonald
On Tue, Aug 31, 2010 at 3:35 PM, Charles Marcus
cmar...@media-brokers.com wrote:
 On 2010-08-31 10:30 AM, Ian macdonald ianma...@gmail.com wrote:
 I am using Maildir and julie does have access  to ~Maildir, is there
 any reason why deliver is attempting to use her user directory and not
 her Maildir?

 Did you assign her a 'home' directory?

 What version of dovecot? dovecot -n output?

 --

 Best regards,

 Charles

Hi,

Yes she has a home directory sorry not being clear, all mail users
have a home of the format /home/user and mail is in /home/user/Maildir
it is her home directory that is owned by root

dovecot -n below

cheers

Ian



# OS: Linux 2.6.32-24-server x86_64 Ubuntu 10.04.1 LTS ext3
log_timestamp: %Y-%m-%d %H:%M:%S
protocols: imaps pop3s
ssl_cert_file: /etc/ssl/certs/ssl-cert-dove.pem
ssl_key_file: /etc/ssl/private/ssl-cert-dove.key
login_dir: /var/run/dovecot/login
login_executable(default): /usr/lib/dovecot/imap-login
login_executable(imap): /usr/lib/dovecot/imap-login
login_executable(pop3): /usr/lib/dovecot/pop3-login
mail_privileged_group: mail
mail_location: maildir:/home/%u/Maildir
mbox_write_locks: fcntl dotlock
mail_executable(default): /usr/lib/dovecot/imap
mail_executable(imap): /usr/lib/dovecot/imap
mail_executable(pop3): /usr/lib/dovecot/pop3
mail_plugins(default): deleted_to_trash acl imap_acl
mail_plugins(imap): deleted_to_trash acl imap_acl
mail_plugins(pop3):
mail_plugin_dir(default): /usr/lib/dovecot/modules/imap
mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap
mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3
imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh
imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh
imap_client_workarounds(pop3):
pop3_client_workarounds(default):
pop3_client_workarounds(imap):
pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh
namespace:
  type: private
  separator: /
  inbox: yes
  list: yes
  subscriptions: yes
namespace:
  type: shared
  separator: /
  prefix: shared/%%u/
  location: maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u
  list: yes
lda:
  postmaster_address: ianma...@gmail.com
  mail_plugins: acl
auth default:
  passdb:
driver: pam
  userdb:
driver: passwd
  socket:
type: listen
client:
  path: /var/spool/postfix/private/auth
  mode: 432
  user: postfix
  group: postfix
master:
  path: /var/run/dovecot/auth-master
  mode: 384
plugin:
  deleted_to_trash_folder: Trash
  acl: vfile
  acl_shared_dict: file:/var/lib/dovecot/shared-mailboxes.db


Re: [Dovecot] Mail error in log

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 16:11 +0100, Ian macdonald wrote:
 On Tue, Aug 31, 2010 at 3:35 PM, Charles Marcus
 cmar...@media-brokers.com wrote:
  On 2010-08-31 10:30 AM, Ian macdonald ianma...@gmail.com wrote:
  I am using Maildir and julie does have access  to ~Maildir, is there
  any reason why deliver is attempting to use her user directory and not
  her Maildir?

If you tell Dovecot a user's home directory, Dovecot expects to be able
to use it.

   userdb:
 driver: passwd

One of these should work (in preferred order):

userdb passwd {
  args = home=
}

userdb passwd {
  args = home
}

userdb passwd {
  args = home=/home/%u/Maildir
}




[Dovecot] dovecot lda issue

2010-08-31 Thread Joy
I am using dovecot lda and everything is working fine for me except
the sieve rule which is built for rejecting mail from a specific
sender. message is being rejected but from address is not correct in
rejection mail which looks like the following :-

@mail.xyz.net

sieve rule :-

require 
[fileinto,envelope,reject,vacation,imap4flags,relational,comparator-i;ascii-numeric,regex,body,date];

if address :contains From x...@gmail.com
{
reject text:
Please do not send mail to me piyush 
.
;
}

Please let me know where is the issue with sieve rule or with lda setting :-

lda has been configured with the following parameter :-

postmaster_address = postmas...@xyz.net


Re: [Dovecot] permissions on auth-userdb

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 02:13 +0200, spamv...@googlemail.com wrote:
 Hi..
 
 im still trying to upgrade to 2.0.
 Im getting:
 dovecot: lda: Error: userdb lookup:
 connect(/var/run/dovecot/auth-userdb) failed: Permission denied
 (euid=1(vmail) egid=1(vmail) missing +r perm:
 /var/run/dovecot/auth-userdb, euid is not dir owner)

You're calling dovecot-lda as the user vmail:vmail, probably from your
MTA. Probably it's not being called by anyone else.

 service auth {
   # auth_socket_path points to this userdb socket by default. It's typically
   # used by dovecot-lda, doveadm, possibly imap process, etc. Its default
   # permissions make it readable only by root, but you may need to relax these
   # permissions. Users that have access to this socket are able to get a list
   # of all usernames and get results of everyone's userdb lookups.
   unix_listener auth-userdb {
 mode = 0600
 #user = vmail
 #group = vmail

Comment out the user/group lines above and that should work fine.



Re: [Dovecot] Size limit for a single mail in the IMAP store?

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 15:17 +0200, Ralf Hildebrandt wrote:
 Postfix has message_size_limit = 26214400, but that doesn't keep my
 users from sending huge messages which canot be sent, but can be
 stored in the IMAP Sent folder.
 
 Is it possible to set a size limit for the size of a single mail?

No, other than what quota restricts. IMAP restricts mail sizes to 4 GB,
but Dovecot actually allows larger sizes (I've never tried it though).
Why do you need this?




Re: [Dovecot] Dovecot 1.x and 2.x on the same machine ?

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 10:48 +0200, Frank Bonnet wrote:
 Hello
 
 Would it be possible to run two instances of Dovecot
 in order to test V 2 on the SAME machine that runs V 1
 
 One Dovecot 1.x instance on std TCP ports
 One Dovecot 2.x instance on custom TCP ports and custom directories

Just install the binaries to different directories and see
http://wiki.dovecot.org/RunningDovecot#Running_Multiple_Invocations_of_Dovecot 
http://wiki2.dovecot.org/RunningDovecot#Running_Multiple_Invocations_of_Dovecot
(they're slightly different).




[Dovecot] status of antispam plugin for DC 2.x ?

2010-08-31 Thread interfaSys sàrl
 Hello,
I saw that there is now an antispam plugin repository for the V2.x version.
It doesn't compile and it seems it cannot be configured like the old one.

Any ETA?

Cheers,
Olivier


[Dovecot] Dovecot upgrades break Blackberry instant email (BIS)

2010-08-31 Thread interfaSys sàrl
 Hello,
Just like when upgrading to 1.2, upgrading to 2.0.1 confuses RIM's BIS
servers and users don't have instant email anymore on their Blackberrys.
Under normal conditions, the BIS servers keep one open connection per
email account with Dovecot.
They're using IMAP IDLE to monitor changes and push them to devices very
quickly.

After an upgrade, all changes.
The BIS servers can't maintain an idling connection anymore, they just
poll the Dovecot server when they feel like it (every 2-15 minutes).
There is one way to fix this on the devices: The users have to re-create
the email account.

I don't find this very convenient and was wondering if there was
something that could be done on the Dovecot side?

Last time it happened, I tried clearing the indexes and resetting file
permissions, but nothing helped.

Cheers,

Olivier


Re: [Dovecot] dovecot - mac firewall problem

2010-08-31 Thread Timo Sirainen
On Sun, 2010-08-29 at 20:51 -0400, Patrick Fay wrote:
 Aug 26 20:43:45 hostname Firewall[55]: Deny ^L connecting from  
 XX.XX.XX.XX:37310 uid = 0 proto=6
 Aug 26 20:43:53 hostname Firewall[55]: Deny ^H?^U???^Z  connecting from 
 XX.XX.XX.XX:37310 uid = 0 proto=6
 
 Both of these are dovecot hits--but the name is different each time.  Also 
 the ?'s aren't really ? marks; they're trans-ascii characters with high 
 bits set that my mailer doesn't like very much.  It really looks like a 
 misdirected pointer or something somewhere, but I'm not familiar enough with 
 the codebase to know where to start looking, or if in fact it is something 
 else that is misconfigured.  Any thoughts on how to resolve this?

Dovecot doesn't identify itself anywhere really. I've no idea where your
firewall might be taking the name. The best I can guess is argv[0] given
to main(), but even that doesn't explain why it would break.




Re: [Dovecot] mixing 1.2 and 2.0?

2010-08-31 Thread Timo Sirainen
On Sun, 2010-08-29 at 17:07 +0200, Cor Bosman wrote:
 Hi all, anyone know if it's safe to mix a 1.2 environment with 2.0
 servers? Im planning on adding some 2.0 servers for test purposes, but
 now im wondering if thats going to mess up index files or other files
 for users selecting the test server and then switching back to our
 normal servers.

As long as you're not using dsync to do mirroring you should be fine
(two-way mirroring requires dovecot.mailbox.log that contains changes
such as mailbox deletions etc.)



Re: [Dovecot] Dovecot upgrades break Blackberry instant email (BIS)

2010-08-31 Thread Charles Marcus
On 2010-08-31 12:41 PM, interfaSys sàrl interfa...@gmail.com wrote:
 After an upgrade, all changes.
 The BIS servers can't maintain an idling connection anymore, they just
 poll the Dovecot server when they feel like it (every 2-15 minutes).
 There is one way to fix this on the devices: The users have to re-create
 the email account.

That sounds like a BIS bug rather than anything to do with dovecot...

-- 

Best regards,

Charles


Re: [Dovecot] Dovecot upgrades break Blackberry instant email (BIS)

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 17:41 +0100, interfaSys sàrl wrote:

 I don't find this very convenient and was wondering if there was
 something that could be done on the Dovecot side?

imap_capability = +IDLE

I'm thinking about making this default.. Assuming Blackberry people
don't happen to fix it themselves soon, which would be nice but maybe
not that realistic to expect. Anyway,
http://dovecot.org/list/dovecot/2010-April/048147.html explains what's
happening.




Re: [Dovecot] status of antispam plugin for DC 2.x ?

2010-08-31 Thread e-frog
On 31.08.2010 18:34, wrote interfaSys sàrl:
  Hello,
 I saw that there is now an antispam plugin repository for the V2.x version.
 It doesn't compile and it seems it cannot be configured like the old one.
 
 Any ETA?
 
 Cheers,
 Olivier

$ hg clone http://hg.dovecot.org/dovecot-antispam-plugin/
$ ./autogen.sh
$ ./configure prefix=/usr
$ make
$ make install

works for me...

configure checks for the file dovecot-config. If prefix is /usr it
expects the file under /usr/lib/dovecot/


Re: [Dovecot] status of antispam plugin for DC 2.x ?

2010-08-31 Thread Trever L. Adams
 On 08/31/2010 10:54 AM, e-frog wrote:

 $ hg clone http://hg.dovecot.org/dovecot-antispam-plugin/
 $ ./autogen.sh
 $ ./configure prefix=/usr
 $ make
 $ make install

 works for me...

 configure checks for the file dovecot-config. If prefix is /usr it
 expects the file under /usr/lib/dovecot/
Unfortunately there is no dspam backend yet. This is a killer for me.

Trever
-- 
millihelen, n.: The amount of beauty required to launch one ship. --
Unknown



signature.asc
Description: OpenPGP digital signature


Re: [Dovecot] dovecot - mac firewall problem

2010-08-31 Thread Peter A. Giessel

On 2010/08/28 at 16:57, p...@nd.edu (Patrick Fay) wrote:




Hi,
  I am running dovecot 1.2.11 on mac osx 1.5.8.  Everything works
perfectly with the application-level firewall off, but enabling the
application firewall prevents dovecot connections.


My suggestion would be to turn the application-level firewall in
System Preferences off and if you feel the need for a firewall,
use something like ipfw instead:
http://developer.apple.com/mac/library/documentation/Darwin/Reference/ManPages/man8/ipfw.8.html

It comes setup with the following configuration:

# ipfw show
65535 0 0 allow ip from any to any

So, you would have to configure it as you see fit.  Not as 
convient as

System Preferences, but it should allow you to write a firewall
configuration that works with Dovecot.



[Dovecot] configure forgets to add -lgcc_s under Solaris 10

2010-08-31 Thread Stephan Schulz

Hi all!

I built dovecot-1.2.14 on Solaris 10 with gcc as well as cc and had 
reproducible crashes of imap-login:


Aug 31 19:00:05 dovecot: Info: Dovecot v1.2.14 starting up
Aug 31 19:00:10 imap-login: Info: Login: user=someuser, method=PLAIN, 
rip=remote_ip, lip=local_ip
Aug 31 19:00:10 IMAP(someuser): Error: ld.so.1: imap: fatal: 
libgcc_s.so.1: open failed: No such file or directory

Aug 31 19:00:10 dovecot: Error: child 26222 (imap) killed with signal 9


To solution was to set the environment variable LIBS to -lgcc_s before 
running configure. I think this is a bug as this library should be added 
automatically by configure to the Makefile when considered necessary. 
The same problem applies to Dovecot-2.0.1 also, which gave the same 
error message.


regards,
Stephan

P.S. I found a similar message of this issue for version 1.0.rc27 but 
the suggestions didn't help (i.e. /usr/sfw/lib is already in the RPATH).


Re: [Dovecot] Dovecot upgrades break Blackberry instant email (BIS)

2010-08-31 Thread interfaSys sàrl - Rich Internet Applicatio ns
Worked perfectly!

Is it something that can be disabled after a few days or is there no
harm in keeping it in the config?

(And congrats on your work on Dovecot Timo. Great piece of software.)

On 31/08/2010 17:53, Timo Sirainen wrote:
 On Tue, 2010-08-31 at 17:41 +0100, interfaSys sàrl wrote:
 
 I don't find this very convenient and was wondering if there was
 something that could be done on the Dovecot side?
 
 imap_capability = +IDLE
 
 I'm thinking about making this default.. Assuming Blackberry people
 don't happen to fix it themselves soon, which would be nice but maybe
 not that realistic to expect. Anyway,
 http://dovecot.org/list/dovecot/2010-April/048147.html explains what's
 happening.
 
 


Re: [Dovecot] status of antispam plugin for DC 2.x ?

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 10:56 -0600, Trever L. Adams wrote:
 Unfortunately there is no dspam backend yet. This is a killer for me.

Well, I was hoping that there would be only one simple backend that just
executes a given binary/script. Then you'd have your script do whatever
is necessary for that backend. Scripts are easier to write/modify/add
than C code..




Re: [Dovecot] nfs director

2010-08-31 Thread Ariel Biener

We're a similar installation (60-70k users, FAS3050 cluster).

We have been using perdition (IMAP/POP redirector) software
for a while. The IMAP/POP.ourdomain A records point to 2 front ends,
which all they do is to redirect the IMAP/POP session to the a specific
mail server for each user, based on their LDAP mailhost entry.

We use postfix to deliver mail, and procmail is the LDA. We are running
a background
process on each mail server (3 mailservers which do SMTP/POP/IMAP, and
barely sweat
at it - 2xquad core Xeons with 8gig each), which monitors the maillog,
and if dovecot
sees a index corruption, the monitor fixes the problem (we used to see
these errors
when we still used mbox, not anymore though).

We run a periodic process, which gets statistics of usage from the mail
servers, and reassign
the users to mail servers in order to better distribute the load. Each
new user that is created gets
his mail server by a random function which choses one of the three.

Each mail server in the user LDAP entry is in fact a virtual address on
a load balancer, pointing to
the real mail server behind it, BUT also having a backup server for each
in case the real
server crashes, so assuming mailsrv1 crashes, mailsrv2 will take its
clients.

The setup works rather well, within the limitations of maildir and
netapp (mainly
full body search being slowish with very large mailboxes made out of 10s
of thousands
of files).

We used to not use the perdition directors in the past, and once we
started using them,
we saved alot of problems on a few fronts:

1. Index corruption issues
2. SSL termination - since the front ends to the SSL termination, the
backend servers access
from the front ends is clear text, saving CPU cycles from the
backends servers.

I haven't taken a look yet at Dovecot's solution for the director, but I
am writing this since I do think that it is
addressing a real life problem for any medium++ or larger installation
that uses NFS.

Oh, and Timo, I don't think we are just a couple of NFS users. Maildir
and NFS are not as uncommon as
you'd think, even in very large installations.

--Ariel

Brandon Davidson wrote:
 Noel,

 On 8/26/10 9:59 PM, Noel Butler noel.but...@ausics.net wrote:

   
 I fail to see advantage if anything it add in more point of failure, with
   
 i agree with this and it is why we dont use it

 we use dovecots deliver with postfix and have noticed no problems, not
 to say there was none, but if so, we dont notice it.
 

 We might be a slightly larger install than you (60k users, mail on FAS 3170
 Metrocluster), but we have noticed corruption issues and the director is
 definitely going to see use in our shop. We still use Sendmail+procmail for
 delivery, so no issue there... but we've got hordes of IMAP users that will
 leave a client running at home, at their desk, on their phone, and then will
 use Webmail on their laptop.

 Without the director, all of these sessions end up on different backend
 mailservers, and it's basically a crapshoot which Dovecot instance notices a
 new message first. NFS locking being what it is, odds are an index will get
 corrupted sooner or later, and when this happens the user's mail
 'disappears' until Dovecot can reindex it. The users inevitably freak out
 and call the helpdesk, who tells them to close and reopen their mail client.
 Maybe you're small enough to not run into problems, or maybe your users just
 have lower expectations or a higher pain threshold than ours. Either way,
 it's unpleasant for everyone involved, and quite easy to solve with the
 director proxy.

 Timo has been saying for YEARS that you need user-node affinity if you're
 doing NFS, and now he's done something about it. If you've already got a
 load balancer, then just point the balancer at a pool of directors, and then
 point the directors at your existing mailserver pool.

 shameless plug
 For health monitoring on the directors, check out:
 http://github.com/brandond/poolmon
 /shameless plug

 -Brad

   

-- 
 --
 Ariel Biener
 e-mail: ar...@post.tau.ac.il
 PGP: http://www.tau.ac.il/~ariel/pgp.html



Re: [Dovecot] configure forgets to add -lgcc_s under Solaris 10

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 19:03 +0200, Stephan Schulz wrote:

 To solution was to set the environment variable LIBS to -lgcc_s before 
 running configure. I think this is a bug as this library should be added 
 automatically by configure to the Makefile when considered necessary. 

But when is it necessary?.. Looks like in my Solaris installation it's
been automatically added to dovecot-auth and managesieve binaries, but
not elsewhere and Dovecot works just fine. The one special thing about
imap/pop3-login binaries is OpenSSL, maybe that's trying to include it
automatically?..




Re: [Dovecot] status of antispam plugin for DC 2.x ?

2010-08-31 Thread Giovanni Giorgi
Anyway I was able to use postifx+spamassassin+virtual plugin to catch  
and filter out spam,

It is optimal to prototype and testing!

Inviato da iPhone

Il giorno 31/ago/2010, alle ore 19.19, Timo Sirainen t...@iki.fi ha  
scritto:



On Tue, 2010-08-31 at 10:56 -0600, Trever L. Adams wrote:

Unfortunately there is no dspam backend yet. This is a killer for me.


Well, I was hoping that there would be only one simple backend that  
just
executes a given binary/script. Then you'd have your script do  
whatever

is necessary for that backend. Scripts are easier to write/modify/add
than C code..




Re: [Dovecot] dovecot lda issue

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 21:56 +0530, Joy wrote:
 I am using dovecot lda and everything is working fine for me except
 the sieve rule which is built for rejecting mail from a specific
 sender. message is being rejected but from address is not correct in
 rejection mail which looks like the following :-
 
 @mail.xyz.net

What Dovecot version? I think I fixed this already.




Re: [Dovecot] NTLM authentication does not work

2010-08-31 Thread Timo Sirainen
On Mon, 2010-08-30 at 12:21 -0500, Alexander Cherniak wrote:
 Windbind seems to work:
  [r...@acentos2 dovecot]# wbinfo -a wAlex%pass
  plaintext password authentication succeeded
  challenge/response password authentication succeeded
 
 Same is true for ntlm_auth helper:
  [r...@acentos2 dovecot]# /usr/bin/ntlm_auth --username=wAlex --password=pass
  NT_STATUS_OK: Success (0x0)

I don't much know of NTLM, but..

 But I couldn't get into Dovecot (with or without auth_use_winbind option):
 . login wAlex pass
 . NO [ALERT] Unsupported authentication mechanism.
..
 auth_mechanisms = ntlm

This error happens because you enabled NTLM mechanism, but disabled
PLAIN mechanism (LOGIN command uses PLAIN mechanism). If you want both
to work, use:

auth_mechanisms = plain ntlm

And note that winbind authentication only works for NTLM mechanism, not
for anything else. Maybe you need to figure out some other passdb to use
like LDAP or maybe some PAM plugin?..



Re: [Dovecot] configure forgets to add -lgcc_s under Solaris 10

2010-08-31 Thread Stephan Schulz



Am 31.08.2010 19:23, schrieb Timo Sirainen:

On Tue, 2010-08-31 at 19:03 +0200, Stephan Schulz wrote:


To solution was to set the environment variable LIBS to -lgcc_s before
running configure. I think this is a bug as this library should be added
automatically by configure to the Makefile when considered necessary.


But when is it necessary?.. Looks like in my Solaris installation it's
been automatically added to dovecot-auth and managesieve binaries, but
not elsewhere and Dovecot works just fine. The one special thing about
imap/pop3-login binaries is OpenSSL, maybe that's trying to include it
automatically?..



I build the binary with and without OpenSSL support but I get the same 
result. What else can I try (aside from using LIBS)? What is speaking 
agains adding the -lgcc_s if configure finds itself on Solaris?


regards,
Stephan


Re: [Dovecot] Lazy expunge plugin - delete folder result error.

2010-08-31 Thread Timo Sirainen
On Sun, 2010-08-29 at 19:31 -0700, Kui Zhang wrote:

 home = /mail/%Ld/%Ln
 mail_location = mdbox:/mail/%Ld/%Ln/mdbox
 
 When:
 location = mdbox:~/mdbox:MAILBOXDIR=expunged
 expunged folder gets created inside mail_location
 
 delete/expunge email  works
 delete/expunge folder works

This is correct. So why aren't you using it?..

 When:
 location = mdbox:~/expunged:MAILBOXDIR=expunged
 expunged folder gets created inside mail home
 
 delete/expunge email  works
 delete/expunge folder DOES NOT WORK.

This is wrong.

 Server Responded: CANNOT] Can't rename mailboxes across specified storages.

This is expected with the wrong configuration.

 when try to delete the same folder again.
 
 Server Responded: NONEXISTENT] Mailbox was deleted under us

This is still a bug .. I'll see about fixing it.



Re: [Dovecot] Passdb filter question - LDAP.

2010-08-31 Thread Timo Sirainen
On Mon, 2010-08-30 at 16:26 -0300, Lauro Costa G. Borges wrote:

pass_filter = ((objectclass=eduPerson)(mail=%u))
 pass_attrs = userPassword=userdb_password,eduPersonPrincipalName=userdb_user

userdb_password doesn't make much sense. Also userdb_user isn't
typically what you want.

It works, but changes the username to the value of
 edupersonprincipalname, and this changes the mailbox name. Dovecot
 accesses the wrong mailbox then (something like
 29859085...@example.org). 

Just remove the eduPersonPrincipalName from pass_attrs. It should
probably be just:

pass_attrs = userPassword=password




Re: [Dovecot] Running auth as root

2010-08-31 Thread Timo Sirainen
On Mon, 2010-08-30 at 14:15 +0200, Egbert Jan van den Bussche wrote:
 Hi,
 
 I seem to be forced to run the auth proces as root because I want to use 
 pam for local users. My gut feeling says that this is Not Good. Is there 
 another way?
 For the virtual users 'vmail' is good enough because that user may 
 access the MySQL database.

If your /etc/shadow is readable by shadow group, you can use
auth_user=something that uses shadow group as the primary group (maybe
create a new doveauth user).




Re: [Dovecot] auth: Fatal: Unknown passdb driver 'mysql'

2010-08-31 Thread Timo Sirainen
On Mon, 2010-08-30 at 08:18 +0100, Vaidas Jablonskis wrote:

 passdb {
   driver = mysql

driver = sql

   args = /etc/dovecot/dovecot-sql.conf.ext
 }
 
 userdb {
   driver = prefetch
 }
 
 userdb {
   driver = mysql

driver = sql

   args = /etc/dovecot/dovecot-sql.conf.ext
 } 

You specify driver=mysql inside dovecot-sql.conf.ext.



Re: [Dovecot] Possible erroneous aborted login attempts

2010-08-31 Thread Timo Sirainen
On Sun, 2010-08-29 at 23:02 -0400, Jerrale G wrote:
 Aug 29 22:51:27 server1 dovecot: imap-login: Aborted login (no auth 
 attempts): rip=(obfuscated), lip=173.50.101.12, TLS
 Aug 29 22:51:27 server1 dovecot: imap-login: Login: user=...
 
 before most every successful login, the same second of time, dovecot has 
 the above message.

Well, there's something wrong. Have you tried manually logging in with
telnet?

telnet localhost 143
a login username password

Does that log it? If not, try next from remote host. And maybe in case
it's related TLS try:

openssl s_client -connect localhost:993




Re: [Dovecot] configure forgets to add -lgcc_s under Solaris 10

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 19:57 +0200, Stephan Schulz wrote:
 What is speaking 
 agains adding the -lgcc_s if configure finds itself on Solaris?

Because it seems like unnecessary workaround. I haven't heard anyone
else complain about this than you in the recent years (other than I
guess the one other person whose mail you linked to). I'd at least want
to understand why this isn't a problem for all Solaris users. Can you
compile *anything* without -lgcc_s?




Re: [Dovecot] Lazy expunge plugin - delete folder result error.

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 19:13 +0100, William Blunn wrote:
 On 31/08/2010 19:00, Timo Sirainen wrote:
  On Sun, 2010-08-29 at 19:31 -0700, Kui Zhang wrote:
 
  location = mdbox:~/mdbox:MAILBOXDIR=expunged
   
 
 MAILBOXDIR: Ah, another directive which may appear in a location 
 specification.

This is a pretty special case that isn't probably needed anywhere else
except mdbox + lazy-expunge combination.

 So far I can remember:
 
 INBOX
 INDEX
 MAILBOXDIR
 
 and I think there is at least one I can't remember.
 
 Is there in the documentation a comprehensive list of these directives 
 which may appear in a location specification, what they do, how their 
 behaviour might differ between mailbox types etc. ?

I guess they should be added to http://wiki2.dovecot.org/MailLocation
some day. :)



Re: [Dovecot] Dovecot upgrades break Blackberry instant email (BIS)

2010-08-31 Thread Timo Sirainen
Well, if I change this in v2.0.2 then you don't need it anymore. If you
keep it anyway, you'll get a duplicate IDLE capability (actually you get
that already post-login), but I don't think that breaks anything.

On Tue, 2010-08-31 at 18:07 +0100, interfaSys sàrl - Rich Internet
Applications wrote:
 Worked perfectly!
 
 Is it something that can be disabled after a few days or is there no
 harm in keeping it in the config?
 
 (And congrats on your work on Dovecot Timo. Great piece of software.)
 
 On 31/08/2010 17:53, Timo Sirainen wrote:
  On Tue, 2010-08-31 at 17:41 +0100, interfaSys sàrl wrote:
  
  I don't find this very convenient and was wondering if there was
  something that could be done on the Dovecot side?
  
  imap_capability = +IDLE
  
  I'm thinking about making this default.. Assuming Blackberry people
  don't happen to fix it themselves soon, which would be nice but maybe
  not that realistic to expect. Anyway,
  http://dovecot.org/list/dovecot/2010-April/048147.html explains what's
  happening.
  
  
 




Re: [Dovecot] MainConfig for dovecot 2.0

2010-08-31 Thread Timo Sirainen
On Sat, 2010-08-28 at 02:22 +0200, Sascha Peters wrote:

 is there a reference for dovecot 2.0 in the new wiki? 

No.

 If not, when will be this page online? Thanks a lot.

If you write a script that generates MoinMoin output out of
example-config/ directory I'll put it online very soon after that. :)
Pending that, dunno.




Re: [Dovecot] NTLM authentication does not work

2010-08-31 Thread Alexander Cherniak
Thank you Timo,
I had a bad feeling that IMAP login always go for PLAIN authentication... What 
else can I use for debugging?
In my case both wbinfo and ntlm_auth do work, but Outlook doesn't.
I am new to Dovecot/Linux and running out of ideas. Can somebody recommend a 
good troubleshooting strategy?
Regards, Alex

-Original Message-
From: Timo Sirainen [mailto:t...@iki.fi] 
Sent: Tuesday, August 31, 2010 1:55 PM
To: Alexander Cherniak
Cc: dovecot@dovecot.org
Subject: Re: [Dovecot] NTLM authentication does not work

On Mon, 2010-08-30 at 12:21 -0500, Alexander Cherniak wrote:
 Windbind seems to work:
  [r...@acentos2 dovecot]# wbinfo -a wAlex%pass
  plaintext password authentication succeeded
  challenge/response password authentication succeeded
 
 Same is true for ntlm_auth helper:
  [r...@acentos2 dovecot]# /usr/bin/ntlm_auth --username=wAlex --password=pass
  NT_STATUS_OK: Success (0x0)

I don't much know of NTLM, but..

 But I couldn't get into Dovecot (with or without auth_use_winbind option):
 . login wAlex pass
 . NO [ALERT] Unsupported authentication mechanism.
..
 auth_mechanisms = ntlm

This error happens because you enabled NTLM mechanism, but disabled
PLAIN mechanism (LOGIN command uses PLAIN mechanism). If you want both
to work, use:

auth_mechanisms = plain ntlm

And note that winbind authentication only works for NTLM mechanism, not
for anything else. Maybe you need to figure out some other passdb to use
like LDAP or maybe some PAM plugin?..




Re: [Dovecot] (no subject)

2010-08-31 Thread Timo Sirainen
On Fri, 2010-08-27 at 14:49 -0500, Alexander Cherniak wrote:
 Hi,
 I'd like to use Global ACLs to limit user's access to individual folders 
 (e.g. read only).
 The dovecot-acl file limiting my user test:
  user=test lr
 works fine when I put it into the user's mailbox
  /home/vmail/test/Maildir/.Records
  but gets ignored in
  /etc/dovecot/acls/Records

Did you use /etc/dovecot/acls/Records
or /etc/dovecot/acls/Records/dovecot-acl? The first one is correct.




Re: [Dovecot] LDAP static userdb

2010-08-31 Thread Timo Sirainen
On Fri, 2010-08-27 at 17:07 +0200, spamv...@googlemail.com wrote:
 ive added
 args = uid=vmail gid=vmail home=/home/MAILBOXES/%u/ 
 mail=/home/MAILBOXES/%u/mail
 
 and it work.

That still does autodetection. You should have something like
mail=maildir:/home/MAILBOXES/%u/mail, but even simpler is if you just
remove mail from the above line and use:

mail_location = maildir:~/mail

 1) I have a user that can read the PW so i dont need auth_bind = yes, right?

Yeah.

 2) user_* and pass_* i dont need them anymore cause its always:
 home=/home/MAILBOXES/%u/
 mail=/home/MAILBOXES/%u/mail

user_* you don't need because you have static userdb, but pass_* is
still used (assuming you didn't change passdb too).



Re: [Dovecot] Is there a way to catch mailbox and message flag changes?

2010-08-31 Thread Timo Sirainen
On Fri, 2010-08-27 at 18:05 +1000, John O'Brien wrote:

 We have been trying to establish if there is a way to get some type of
 notification from Dovecot when a message is appended to a mailbox or
 when a message has its flags updated.
 
 These are the 2 use cases:
 A message is appended to the mailbox /Watch, we want to trigger
 processing of the message immediately it arrives.
 A message in the Inbox has its status changed from Unseen to Seen,
 we want to trigger some code to indicate the message has been
 processed.

http://wiki.dovecot.org/Plugins/MailLog can log these events, although
you'll get a lot of other notifications logged too then. There's not
much filtering support in it. You can of course modify the plugin
yourself to add such filters, shouldn't need too many lines of code.




Re: [Dovecot] vpopmail auth always return unknown user

2010-08-31 Thread Timo Sirainen
On Fri, 2010-08-27 at 16:15 +0200, Toorop wrote:

 I'm working on a setup of dovecot 2 + netqmail + vpopmail 5.5 but auth 
 doesn't works :(
..
 #1  0x0041f735 in vpopmail_lookup (auth_request=0x23c4358, 
 callback=0x410770 auth_request_userdb_callback) at
 userdb-vpopmail.c:99
  _module = 0x23b13f0

Yeah, vpopmail keeps changing their APIs in ways I have no idea what to
do to fix it. So here's my solution for now:

http://hg.dovecot.org/dovecot-2.0/rev/f90590836165

You can always use vpopmail's checkpassword binary or access its
database some other way (passdb/userdb sql?)




Re: [Dovecot] Problems Converting Maildir to mdbox

2010-08-31 Thread Timo Sirainen
On Sat, 2010-08-28 at 17:17 +0200, Kim Bisgaard wrote:

 Using this command ($1 is substituted for the user):
 dsync -u $1 -o mail_location=maildir:/data/mail/$1/mdir mirror 
 mdbox:/data/mail/$1/mdbox

I guess this should work.

 After having learned that I need to create the destination directory 
 first, I got this error:
 dsync(root): Fatal: Mail locations must use the same virtual mailbox 
 hierarchy separator (specify separator for the default namespace)
 
 Which I am afraid does not help me much - tried to set separator to '.' 
 in namespace but that only ended in lda/deliver refusing to deliver 
 mail. :-(

What error did lda give? You probably should add:

namespace {
  separator = /
  inbox = yes
}



[Dovecot] Static passdb support?

2010-08-31 Thread Brad Davidson
Timo,

Do you have any plans to add a static passdb? I'm essentially emulating
one with sqlite on my director - have it connect to /dev/null and return
three static fields for all queries. Works fine, but it would seem a
little cleaner to me if I could just do:

passdb {
  driver = static
  args = password='' nopasswd='Y' proxy='Y'
}


-Brad


Re: [Dovecot] status of antispam plugin for DC 2.x ?

2010-08-31 Thread interfaSys sàrl
 $ hg clone http://hg.dovecot.org/dovecot-antispam-plugin/
 $ ./autogen.sh
 $ ./configure prefix=/usr
 $ make
 $ make install
 
 works for me...
 
 configure checks for the file dovecot-config. If prefix is /usr it
 expects the file under /usr/lib/dovecot/

Doesn't work at all for me.

When running ./configure prefix=/usr I get a
DC_DOVECOT: not found

The path to dovecot-config is this
/usr/lib/dovecot/dovecot-config


Re: [Dovecot] doveadm expunge -A mailbox Trash savedbefore 30d

2010-08-31 Thread Timo Sirainen
On Mon, 2010-08-30 at 12:31 -0400, Jerrale G wrote:
 
 
 Timo or another admin needs to add this in the wiki. I know it is in the 
 example sql config file, which is where I got it 
 (/usr/share/doc/dovecot/example/dovecot-sql.conf.ext) but it is more 
 convenient in the wiki.

Well, the doveadm pages in wiki do mention it in -A parameter. I added
it now to http://wiki2.dovecot.org/AuthDatabase/SQL and added note/links
to http://wiki2.dovecot.org/Plugins/Expire

 I also added the same maildir parameters from the user_query in case the 
 iterate_query needed to know where the maildir is:
 CONCAT('/home/mail/', mailboxes.domain, '/', mailboxes.username, 
 '/mail/') AS maildir

That's not necessary. It does a userdb lookup for each user anyway.



Re: [Dovecot] doveadm expunge -A mailbox Trash savedbefore 30d iterate_query LDAP

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 01:09 -0700, Tomislav Mihalicek wrote:
 
 iterate_attrs   = mail=%u

This isn't right. You probably want mail=user

 Aug 31 10:03:35 cartman2 dovecot: auth: Fatal: net_connect_unix(auth-worker)
 failed: Permission denied 

I guess you've changed some default permission settings related to auth
processes. doveconf -n output would help giving the right answer, but
you should look into auth-worker service's unix_listener.




Re: [Dovecot] Size limit for a single mail in the IMAP store?

2010-08-31 Thread Ralf Hildebrandt
* Timo Sirainen t...@iki.fi:
 On Tue, 2010-08-31 at 15:17 +0200, Ralf Hildebrandt wrote:
  Postfix has message_size_limit = 26214400, but that doesn't keep my
  users from sending huge messages which canot be sent, but can be
  stored in the IMAP Sent folder.
  
  Is it possible to set a size limit for the size of a single mail?
 
 No, other than what quota restricts. IMAP restricts mail sizes to 4 GB,
 but Dovecot actually allows larger sizes (I've never tried it though).
 Why do you need this?

Exchange does it that way :)

We're encountering problems with the migration from Dovecot -
Exchange, because users can generate huge emails in Sent and Drafts
(which are never sent out, due to the size restrictions - but they're
in these folders). These messages cannot be migrated because they
exceed the maximum size Exchange will accept.

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebra...@charite.de | http://www.charite.de



Re: [Dovecot] Running auth as root

2010-08-31 Thread Egbert Jan van den Bussche

Op 31-8-2010 20:04, Timo Sirainen schreef:

On Mon, 2010-08-30 at 14:15 +0200, Egbert Jan van den Bussche wrote:

Hi,

I seem to be forced to run the auth proces as root because I want to use
pam for local users. My gut feeling says that this is Not Good. Is there
another way?
For the virtual users 'vmail' is good enough because that user may
access the MySQL database.


If your /etc/shadow is readable by shadow group, you can use
auth_user=something that uses shadow group as the primary group (maybe
create a new doveauth user).



TNX Timo. I have added vmail to the shadow group. Now it may read 
/etc/shadow.


Egbert Jan


Re: [Dovecot] Problems Converting Maildir to mdbox

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 20:49 +0200, Kim Bisgaard wrote:
  What error did lda give? You probably should add:
 Command output: doveconf: Fatal: Error in configuration file 
 /etc/dovecot/conf.d/10-mail.conf line 54: Unknown setting: separator )

That looks like it wasn't inside namespace {} or something else was
weird. Anyway, you should have gotten that same error simply by running
doveconf (or dovecot, or any Dovecot tool really).

 (maildir uses '.' (I think)) so I only added:
 namespace {
 separator = .
 }

You need inbox=yes there too (or maybe it's added there by default if
you have only one namespace, can't remember).

  namespace {
 separator = /
 inbox = yes
  }
 Intuitively I would have expected '.' and not '/' (default (m)dbox), 
 since I'm converting between maildir (.) and dbox(/) - right?

For dsync it doesn't matter if it's '.' or '/', both will work fine. But
if you have existing IMAP clients then you should preserve the separator
or they could become confused.



Re: [Dovecot] status of antispam plugin for DC 2.x ?

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 19:46 +0100, interfaSys sàrl wrote:
 
 
 When running ./configure prefix=/usr I get a
 DC_DOVECOT: not found 

You need DC_DOVECOT aclocal macro, which means dovecot.m4 file. Like
maybe the easiest is to just put it to /usr/share/aclocal/ or give some
parameter to something so aclocal -I /path/to/dovecot.m4/dir gets run.




Re: [Dovecot] Static passdb support?

2010-08-31 Thread Timo Sirainen
On Tue, 2010-08-31 at 11:46 -0700, Brad Davidson wrote:
 Timo,
 
 Do you have any plans to add a static passdb? 

v2.0 actually has it:

 I'm essentially emulating
 one with sqlite on my director - have it connect to /dev/null and return
 three static fields for all queries. Works fine, but it would seem a
 little cleaner to me if I could just do:
 
 passdb {
   driver = static
   args = password='' nopasswd='Y' proxy='Y'

args = nopassword=y proxy=y




Re: [Dovecot] configure forgets to add -lgcc_s under Solaris 10

2010-08-31 Thread Chris Hoogendyk



Timo Sirainen wrote:

On Tue, 2010-08-31 at 19:57 +0200, Stephan Schulz wrote:
  
What is speaking 
agains adding the -lgcc_s if configure finds itself on Solaris?



Because it seems like unnecessary workaround. I haven't heard anyone
else complain about this than you in the recent years (other than I
guess the one other person whose mail you linked to). I'd at least want
to understand why this isn't a problem for all Solaris users. Can you
compile *anything* without -lgcc_s?


I have compiled many many things on Solaris (9 and 10 on SPARC), 
including Dovecot. I've never had this particular issue. Part of the 
deal is that I have an environment file that I always source before 
doing any build work. It sets up all the paths that I need and makes 
sure the tools and libraries are going to be found. It defines CC, 
CFLAGS, CPPFLAGS, LDFLAGS and so on. It removes any inconsistencies from 
the system behavior when I am building software. When I forget to do 
that, configure will give me odd ball results. Then I just start over 
and do it right.


Make sure the path to the lib that contains libgcc_s.so, etc., is in 
your LD_LIBRARY_PATH, CFLAGS and LDFLAGS before running configure. 
Alternatively, you can use crle (man crle) to set up your load 
environment. But, I prefer to just build the software correctly in the 
first place.


On one of my older Solaris 9 systems, using a Sunfreeware version of gcc 
(and all the gnu tools), I have:


PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/usr/ucb:/usr/ccs/bin
export PATH
LD_LIBRARY_PATH=/usr/local/lib:/usr/lib:/usr/sfw/lib
export LD_LIBRARY_PATH
CPPFLAGS=-I/usr/local/include
export CPPFLAGS
CFLAGS=-L/usr/local/lib -R/usr/local/lib
export CFLAGS
LDFLAGS=-L/usr/local/lib -R/usr/local/lib
export LDFLAGS
CC=gcc
export CC

On my newer Solaris 10 systems it is more complicated, because I'm using 
gccfss.



--
---

Chris Hoogendyk

-
  O__   Systems Administrator
 c/ /'_ --- Biology  Geology Departments
(*) \(*) -- 140 Morrill Science Center
~~ - University of Massachusetts, Amherst 


hoogen...@bio.umass.edu

--- 


Erdös 4




Re: [Dovecot] (Single instance) attachment storage

2010-08-31 Thread Timo Sirainen
On Fri, 2010-08-27 at 09:41 -0700, Daniel L. Miller wrote:
 On 8/24/2010 4:19 PM, Timo Sirainen wrote:
  It depends on your configuration.. The attachment directory is a setting. I 
  was thinking that it it would typically be the same for all users, so if 
  you have two filesystems, you'd need to decide which one will have the 
  /attachments directory.
 
 Dunno if I can come up with a use case immediately, but I'll bet someone 
 will.  Would making the attachments folder a userdb option be a pain?

You can already override any setting from userdb, including
mail_attachment_dir.




Re: [Dovecot] (Single instance) attachment storage

2010-08-31 Thread Timo Sirainen
On Fri, 2010-08-27 at 09:34 -0700, Daniel L. Miller wrote:
 On 8/24/2010 4:35 PM, Timo Sirainen wrote:
  On 24.8.2010, at 23.16, Ed W wrote:
 
  At the moment I would claim that you are just automatically generating a 
  very complicated filename.  If you never trust your hash then you might as 
  well instead simply use one of the existing GUID algorithms, if you trust 
  your hash then you use that.  I don't really see the point of a halfway 
  house really?
  Oh and this current scheme of hash-guid + hashes/hash hard linking is 
  required in any case to keep track of reference counting. Unconditionally 
  trusting the hash wouldn't make it any simpler. With key-value databases 
  you'd have to figure out some other way to keep track of how many 
  references there are to the attachment.
 
 Can you append some trivial information from the data file to the hash 
 in generating the file name to help ensure uniqueness?  Like filesize, 

I guess size could be there at least optionally, I'm not sure about as
default.

 mimetype, 

I think different clients could use different MIME types sometimes,
causing unnecessary duplicates.

 and/or date?

I don't think attachments ever have dates? But if they did, again the
problem of causing unnecessary duplicates.



Re: [Dovecot] Problems Converting Maildir to mdbox

2010-08-31 Thread Kim Bisgaard

 On 31-08-2010 21:07, Timo Sirainen wrote:

On Tue, 2010-08-31 at 20:49 +0200, Kim Bisgaard wrote:

What error did lda give? You probably should add:

Command output: doveconf: Fatal: Error in configuration file
/etc/dovecot/conf.d/10-mail.conf line 54: Unknown setting: separator )

That looks like it wasn't inside namespace {} or something else was
weird. Anyway, you should have gotten that same error simply by running
doveconf (or dovecot, or any Dovecot tool really).


(maildir uses '.' (I think)) so I only added:
namespace {
separator = .
}

You need inbox=yes there too (or maybe it's added there by default if
you have only one namespace, can't remember).


namespace {
separator = /
inbox = yes
}

Intuitively I would have expected '.' and not '/' (default (m)dbox),
since I'm converting between maildir (.) and dbox(/) - right?

For dsync it doesn't matter if it's '.' or '/', both will work fine. But
if you have existing IMAP clients then you should preserve the separator
or they could become confused.

Just tried to do it again - I think first time was an error of mine - 
did not remove enough comments '#' from the config file - sorry! :-[ .


This seems to work:
namespace {
  inbox = yes
  location =
  prefix =
  separator = .
}

Thanks!!
Kim



Re: [Dovecot] status of antispam plugin for DC 2.x ?

2010-08-31 Thread interfaSys sàrl


On 31/08/2010 20:09, Timo Sirainen wrote:
 On Tue, 2010-08-31 at 19:46 +0100, interfaSys sàrl wrote:


 When running ./configure prefix=/usr I get a
 DC_DOVECOT: not found 
 
 You need DC_DOVECOT aclocal macro, which means dovecot.m4 file. Like
 maybe the easiest is to just put it to /usr/share/aclocal/ or give some
 parameter to something so aclocal -I /path/to/dovecot.m4/dir gets run.
 
 

I see...
All the server's m4 files are in /usr/local/share/aclocal
but probably because I used the /usr prefix when installing Dovecot,
dovecot put its m4 file in  /usr/share/aclocal/

Is there a way to prevent that when installing Dovecot?


Re: [Dovecot] (no subject)

2010-08-31 Thread Alexander Cherniak
Thank you Timo, 
For some reason I thought that Records was a directory with dovecot-acl file in 
it. It works as a charm now.

Unfortunately, mail clients do not always cooperate, Outlook in particular 
still allows to set message flags in folders without wst ACLs. Can somebody 
recommend comparative analysis with configuration options?


-Original Message-
From: Timo Sirainen [mailto:t...@iki.fi] 
Sent: Tuesday, August 31, 2010 2:24 PM
To: Alexander Cherniak
Cc: dovecot@dovecot.org
Subject: Re: [Dovecot] (no subject)

On Fri, 2010-08-27 at 14:49 -0500, Alexander Cherniak wrote:
 Hi,
 I'd like to use Global ACLs to limit user's access to individual folders 
 (e.g. read only).
 The dovecot-acl file limiting my user test:
  user=test lr
 works fine when I put it into the user's mailbox
  /home/vmail/test/Maildir/.Records
  but gets ignored in
  /etc/dovecot/acls/Records

Did you use /etc/dovecot/acls/Records
or /etc/dovecot/acls/Records/dovecot-acl? The first one is correct.





Re: [Dovecot] Problems Converting Maildir to mdbox

2010-08-31 Thread Kim Bisgaard
 On a side note: Postfix bounces the messages deliver cannot deliver - 
why does it not keep them in queues until deliver works again?


Aug 31 21:10:36 jukebox postfix/local[5087]: 910846B9D9: 
to=kim+dove...@alleroedderne.adsl.dk, relay=local, delay=0.07, 
delays=0.02/0/0/0.05, dsn=5.3.0, status=bounced (Command died with 
status 89: /usr/libexec/dovecot/deliver. Command output: doveconf: 
Fatal: Error in configuration file /etc/dovecot/conf.d/10-mail.conf line 
54: Unknown setting: separator )
Aug 31 21:10:36 jukebox postfix/cleanup[5086]: A239E6B9D6: 
message-id=20100831191036.a239e6b...@jukebox.alleroedderne.adsl.dk
Aug 31 21:10:36 jukebox postfix/qmgr[2218]: A239E6B9D6: from=, 
size=5386, nrcpt=1 (queue active)
Aug 31 21:10:36 jukebox postfix/bounce[5135]: 910846B9D9: sender 
non-delivery notification: A239E6B9D6

Aug 31 21:10:36 jukebox postfix/qmgr[2218]: 910846B9D9: removed


Best regards,
Kim



Re: [Dovecot] Static passdb support?

2010-08-31 Thread Brad Davidson
Awesome! I was just looking at wiki2 and didn't see it there. Any special 
caveats?

 -Original Message-
 From: Timo Sirainen [mailto:t...@iki.fi]
 
  Do you have any plans to add a static passdb?
 
 v2.0 actually has it:
 
 args = nopassword=y proxy=y
 



Re: [Dovecot] Lazy expunge plugin - delete folder result error.

2010-08-31 Thread Kui Zhang
On Tue, Aug 31, 2010 at 11:00 AM, Timo Sirainen t...@iki.fi wrote:
 On Sun, 2010-08-29 at 19:31 -0700, Kui Zhang wrote:

 home = /mail/%Ld/%Ln
 mail_location = mdbox:/mail/%Ld/%Ln/mdbox

 When:
 location = mdbox:~/mdbox:MAILBOXDIR=expunged
 expunged folder gets created inside mail_location

 delete/expunge email  works
 delete/expunge folder works

 This is correct. So why aren't you using it?..

 When:
 location = mdbox:~/expunged:MAILBOXDIR=expunged
 expunged folder gets created inside mail home

 delete/expunge email  works
 delete/expunge folder DOES NOT WORK.

 This is wrong.

 Server Responded: CANNOT] Can't rename mailboxes across specified storages.

 This is expected with the wrong configuration.

 when try to delete the same folder again.

 Server Responded: NONEXISTENT] Mailbox was deleted under us

 This is still a bug .. I'll see about fixing it.


Yes it is a bug, in my opinion. Location should allow any where within
the mail home dir.

Based on the doc here we should be able to use mixed storage types
mbox maildir etc

http://wiki.dovecot.org/Namespaces

if location is set to following, we get error prompt via client too.

location = maildir:~/mdbox/expunged


I have mail_location dynamically set in the databasewe only
convert few user to mdbox to start with. So mixed storage would be
nice.

Forgot to mention.

If we select prefix. .EXPUNGE imap generate a core dump.



(no debugging symbols found)...done.
(gdb) bt full
#0  0x00411cf8 in client_find_namespace (cmd=0xedd968,
mailbox=0xee02b0 .EXPUNGED, storage_name_r=0x7fffb0609248,
mailbox_status_r=0x7fffb060927c)
at imap-commands-util.c:52
ns = 0xedc300
storage_name = 0xee02b9 
p = value optimized out
storage_name_len = 0
#1  0x0040d692 in cmd_select_full (cmd=0xedd968,
readonly=false) at cmd-select.c:372
client = 0xedd208
box = value optimized out
ctx = value optimized out
args = 0xee01c0
list_args = value optimized out
status = value optimized out
mailbox = 0xee02b0 .EXPUNGED
storage_name = value optimized out
ret = value optimized out
__FUNCTION__ = cmd_select_full
#2  0x004101fd in client_command_input (cmd=0xedd968) at
imap-client.c:660
client = 0xedd208
command = value optimized out
__FUNCTION__ = client_command_input
#3  0x004102dd in client_command_input (cmd=0xedd968) at
imap-client.c:710
client = 0xedd208
command = 0xeb89c8
__FUNCTION__ = client_command_input
#4  0x00410505 in client_handle_next_command (client=0xedd208)
at imap-client.c:751
size = 25
#5  client_handle_input (client=0xedd208) at imap-client.c:763
_data_stack_cur_id = 3
ret = false
remove_io = value optimized out
handled_commands = false
__FUNCTION__ = client_handle_input
#6  0x00410e2f in client_input (client=0xedd208) at imap-client.c:802
cmd = value optimized out
output = 0xedd7e8
bytes = value optimized out
__FUNCTION__ = client_input
#7  0x7ff0b11f18d5 in ?? ()
No symbol table info available.
#8  0x00eb2436 in ?? ()
No symbol table info available.
#9  0x00010002 in ?? ()
No symbol table info available.
#10 0x000c in ?? ()
No symbol table info available.
#11 0x68c3 in ?? ()
No symbol table info available.
#12 0x in ?? ()
No symbol table info available.


Thanks for checking. Let me know if you need more info.

KuiZ


[Dovecot] doveadm quota get -u some...@ourdomains.com

2010-08-31 Thread Jerrale G

 With the expire running from mysql, on 2.0.1, we get no errors with:
  doveadm expunge -A mailbox Trash savedbefore 7d

we have the mail_plugins defined differently for each protocol 
({imap=quota,expire,imap_quota} {pop3=quota,expire} 
{lda=quota,expire,sieve}).


When trying doveadm quota get -u some...@ourdomains.com
the output is: doveadm(root): Fatal: Unknown command 'quota', but 
plugin quota exists. Try to set mail_plugins=quota

When adding an additional, global mail_plugins=quota,
we get: Segmentation fault

Is there a specific, proper way beyond the way I read of 1.2.x for 
defining the plugins. Please let me know how and what plugins I should 
define

Jerrale G


--




Jerrale G.
SC Senior Admin


Re: [Dovecot] doveadm quota get -u some...@ourdomains.com

2010-08-31 Thread Timo Sirainen
On 31.8.2010, at 21.42, Jerrale G wrote:

 we have the mail_plugins defined differently for each protocol 
 ({imap=quota,expire,imap_quota} {pop3=quota,expire} {lda=quota,expire,sieve}).

doveadm doesn't have a protocol. You must set it globally.



Re: [Dovecot] doveadm expunge -A mailbox Trash savedbefore 30d iterate_query LDAP

2010-08-31 Thread Tomislav Mihalicek

i tried mail=user no help... below is a dovecot - n output so take a look
please

# 2.0.1 (c5111fb65b0b): /etc/dovecot/dovecot.conf
# OS: Linux 2.6.26-2-amd64 x86_64 Debian 5.0.5
auth_debug = yes
auth_default_realm = xnet.hr
auth_verbose = yes
base_dir = /var/run/dovecot/
default_client_limit = 2000
default_process_limit = 200
default_vsz_limit = 536870912
disable_plaintext_auth = no
hostname = cartman.example.com
lda_mailbox_autocreate = yes
lda_mailbox_autosubscribe = yes
log_path =
login_greeting = MihaMail 0.0.1
mail_debug = yes
mail_gid = 10030
mail_location = maildir:~/Maildir:INDEX=~/index
mail_plugins = expire quota zlib autocreate virtual fts fts_squat zlib acl
imap_acl
mail_privileged_group = vmail
mail_uid = 10030
managesieve_notify_capability = mailto
managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap
fileinto reject envelope encoded-character vacation subaddress
comparator-i;ascii-numeric relational regex imap4flags copy include
variables body enotify environment mailbox date spamtest spamtestplus
virustest
passdb {
  args = /etc/dovecot/master-users
  driver = passwd-file
  master = yes
  pass = yes
}
passdb {
  args = /etc/dovecot/dovecot-ldap.conf.ext
  driver = ldap
}
plugin {
  auth_socket_path = /var/run/dovecot/auth-master
  autocreate = Drafts
  autocreate2 = Sent Items
  autocreate3 = Trash
  autocreate4 = Spam
  autosubscribe = Drafts
  autosubscribe2 = Sent Items
  autosubscribe3 = Trash
  autosubscribe4 = Spam
  expire = Trash 7 Trash/* 7 Spam 30
  expire_altmove = * 10
  expire_dict = proxy::expire
  mail_log_events = delete undelete expunge copy mailbox_delete
mailbox_rename
  mail_log_fields = uid box msgid size
  quota = maildir:User quota
  quota_warning = storage=95%% quota-warning 95 %u
  quota_warning2 = storage=85%% quota-warning 85 %u
  quota_warning3 = messages=95%% quota-warning 95 %u
  quota_warning4 = messages=85%% quota-warning 85 %u
  sieve = ~/dovecot.sieve
  sieve_dir = ~/sieve
  sieve_global_path = /etc/dovecot/sieve/default.sieve
  zlib_save = bz2
  zlib_save_level = 9
}
postmaster_address = postmas...@example.com
protocols = imap pop3 lmtp sieve
sendmail_path = /usr/lib/sendmail
service auth {
  unix_listener auth-userdb {
group = vmail
mode = 0600
user = vmail
  }
  user = $default_internal_user
}
service dict {
  unix_listener dict {
group = vmail
mode = 0600
user = vmail
  }
}
service imap-login {
  inet_listener imap {
port = 143
  }
  process_min_avail = 2
  service_count = 1
  vsz_limit = 134217728
}
service imap {
  process_limit = 1024
  vsz_limit = 536870912
}
service lmtp {
  unix_listener /var/spool/postfix-virus/private/dovecot-lmtp {
group = postfix
mode = 0660
user = postfix
  }
  unix_listener /var/spool/postfix/private/dovecot-lmtp {
group = postfix
mode = 0660
user = postfix
  }
}
service managesieve-login {
  inet_listener sieve {
port = 2000
  }
}
service pop3-login {
  inet_listener pop3 {
port = 110
  }
}
service pop3 {
  process_limit = 1024
}
service quota-warning {
  executable = script /usr/local/bin/quota-warning.sh
  unix_listener quota-warning {
mode = 0666
user = vmail
  }
  user = dovecot
}
ssl_cert = /etc/ssl/certs/dovecot.pem
ssl_key = /etc/ssl/private/dovecot.pem
userdb {
  args = /etc/dovecot/dovecot-ldap.conf.ext
  driver = ldap
}
verbose_proctitle = yes
protocol lmtp {
  mail_plugins = $mail_plugins sieve zlib
}
protocol lda {
  mail_plugins = $mail_plugins
}
protocol imap {
  imap_client_workarounds = delay-newmail tb-extra-mailbox-sep
  imap_logout_format = bytes=%i/%o
  imap_max_line_length = 65536
  login_greeting = MihaMail IMAP m...@example.com
  mail_max_userip_connections = 10
  mail_plugins = $mail_plugins imap_quota zlib imap_zlib
}

Timo Sirainen wrote:
 
 On Tue, 2010-08-31 at 01:09 -0700, Tomislav Mihalicek wrote:
 
 iterate_attrs   = mail=%u
 
 This isn't right. You probably want mail=user
 
 Aug 31 10:03:35 cartman2 dovecot: auth: Fatal:
 net_connect_unix(auth-worker)
 failed: Permission denied 
 
 I guess you've changed some default permission settings related to auth
 processes. doveconf -n output would help giving the right answer, but
 you should look into auth-worker service's unix_listener.
 
 
 
 

-- 
View this message in context: 
http://old.nabble.com/doveadm-expunge--A-mailbox-Trash-savedbefore-30d-iterate_query-LDAP-tp29580393p29588020.html
Sent from the Dovecot mailing list archive at Nabble.com.



[Dovecot] Wiki page for the 2.x version of the antispam plugin

2010-08-31 Thread interfaSys sàrl


Since I had to collect information from different places to get it
right, I decided to paste what I had into a wiki page.

http://wiki2.dovecot.org/Plugins/Antispam

Cheers,

Olivier



Re: [Dovecot] doveadm quota get -u some...@ourdomains.com

2010-08-31 Thread Jerrale G

 On 8/31/2010 5:03 PM, Timo Sirainen wrote:

On 31.8.2010, at 21.42, Jerrale G wrote:


we have the mail_plugins defined differently for each protocol 
({imap=quota,expire,imap_quota} {pop3=quota,expire} {lda=quota,expire,sieve}).

doveadm doesn't have a protocol. You must set it globally.



When adding an additional, global mail_plugins=quota,
we get: Segmentation fault



Jerrale G.
SC Senior Admin


Re: [Dovecot] Dovecot 1.x and 2.x on the same machine ?

2010-08-31 Thread Frank Bonnet

OK and Thank you for the great work you do Timo !!!

Le 31/08/2010 18:31, Timo Sirainen a écrit :

On Tue, 2010-08-31 at 10:48 +0200, Frank Bonnet wrote:

Hello

Would it be possible to run two instances of Dovecot
in order to test V 2 on the SAME machine that runs V 1

One Dovecot 1.x instance on std TCP ports
One Dovecot 2.x instance on custom TCP ports and custom directories


Just install the binaries to different directories and see
http://wiki.dovecot.org/RunningDovecot#Running_Multiple_Invocations_of_Dovecot 
http://wiki2.dovecot.org/RunningDovecot#Running_Multiple_Invocations_of_Dovecot
(they're slightly different).