Re: [qmailtoaster] So you heard me screaming then!

Tue, 17 May 2016 16:37:47 -0700 

Tony,
After hearing of your dilemma I decided to test the recommended upgrade (Courier to Dovecot) that I suggested to you, or forced you into. 


If you're interested, I set up a CentOS 5 QMT server with the old 
Courier IMAP4/IMAP4-SSL and Qmail POP3/POP3-SSL packages and copied the 
vpopmail mysql database, the vpopmail mailstore, and qmail/users/{assign 
cdb}, and a couple of the necessary control files from my CentOS 7 box 
(running Dovecot) to this CentOS 5 box. Upon testing with Outlook all 
authentication worked perfectly with Courier. I set up the whtc-qmt.repo 
and updated the CentOS 5 box to Dovecot replacing Courier IMAP/Authlib, 
and Qmail POP3 with Dovecot, and maildrop with maildrop-noauthlib . I 
did not use the perl convert script. Authentication upon opening Outlook 
was immediate on all accounts except for one which was successful upon 
restart of Outlook, there was no missing email or domains. All IMAP 
folders came in as they should after subscription. I did this twice, 
that is, created two CentOS 5 Courier servers, and converted them to 
Dovecot using whtc-qmt.repo. Aside from minor problems getting all 
supervise services turned off ALL authentication worked and NO domains 
were missing.



I did forget to turn off selinux the first time and this caused a 
problem starting Dovecot, but once selinux was off, Dovecot started 
after addition of 'listen = *' to '/etc/dovecot/toaster.conf' and 
everything worked as it should.



The supervise services are not removed (and turned off) because the 
older dovecot RPMS on the repo don't take care of this--the newest one, 
in the testing repo, does.


Eric


On 5/15/2016 10:51 PM, Eric wrote:

Did you revert the changes you made in squirrelmail configuration (from
the wiki) back to their pre-Dovecot (Courier) settings.

On 5/15/2016 9:41 PM, Tony White wrote:

Eirc,
  Short answer is no Dovecot.
Reverted to backup and disabled qmail whitehorsetc repo.
This stopped the Dovecot install and allowed the
server to be updated.
As to clients, the issue was firstly that Dovecot
was configured for SSL not TLS.
Other issue was to get clients to understand the difference
and get them to change their configuration.
Missing domains was resolved by reverting to backup.
Sending emails also resolved by reverting to backup.
Still having the odd issue with accounts not present using Squirrelmail.
They are being managed by creating a pop3 not imap account.

All in all a farce, one I never want to go through again.
It would have been easier to revert to courier if I had not
done the conversion to Dovecot on client accounts.

So a word of warning, make sure you have good backups.

Is there a better backup / restore as the current script takes
literally hours to to the backup?


best wishes
  Tony White

On 16/05/2016 11:52, Eric wrote:


So, you're up and running Dovecot on this server. Can you tell us what
you did to fix it after the upgrade...In case others my try the same?

How did you resolve no clients being able to connect?
How did you resolve Squirrelmail issues?
What happened to the missing domains?
How did you resolve the sending of emails?



On 5/15/2016 7:28 PM, Tony White wrote:

The conversion to Dovecot for squirrelmail was the issue here so I did
not think going
back was the way to go.



------------------------------------------------------------------------

*From:* Eric <[email protected]>
*To:* [email protected]
*Sent:* Monday, 16 May 2016, 11:18
*Subject:* Re: [qmailtoaster] So you heard me screaming then!


Did you remove Dovecot and reinstall Courier?


On 5/15/2016 7:03 PM, Tony White wrote:

Hi Eirc,
 Sorry it took s long to get back to you.

1. My email client keeps telling me that the account no longer exists.

2. I have restored from a backup and not updated again.

3. I have managed to get a copy of the clients emails up to the day

before.


4. Changing to dovecot caused issues on clients systems due to
security
enhancements like SSL.

5. Sending emails did not end up being an issue, because the pop3/imap
failed so did the smtp.

All is operating again now but I do think it is time to move on.



------------------------------------------------------------------------


*From:* Eric <[email protected]
<mailto:[email protected]>>
*To:* [email protected]

<mailto:[email protected]>

*Sent:* Sunday, 15 May 2016, 0:05
*Subject:* Re: [qmailtoaster] So you heard me screaming then!

Hi Tony,


After upgrade, you were able to log in and now you can't?
After upgrade, you were able to use Squirrelmail and now you can't?
You cannot send emails?
And, a couple of domains have disappeared from domains table?

What version of Dovecot?
Have you tried restarting Dovecot?

Here's a copy of my /etc/dovecot/toaster.conf
dovecot-2.2.19-3.qt.el5

listen = *
auth_cache_size = 32M
auth_mechanisms = plain login digest-md5 cram-md5
auth_username_format = %Lu
first_valid_uid = 89
first_valid_gid = 89
log_path = /var/log/dovecot.log
login_greeting = Dovecot toaster ready.
mail_plugins = $mail_plugins quota
plugin/quota = maildir
protocols = imap pop3
ssl_cert = </var/qmail/control/servercert.pem
ssl_key = </var/qmail/control/servercert.pem
# the following will likely be the default at some point
ssl_dh_parameters_length = 2048

namespace {
 inbox = yes
 location =
 prefix =
# prefix = INBOX.
# Use 'prefix = INBOX.' for Courier-IMAP compatible transparent
migration.
# This forces all client apps to create subfolders underneath/within
# the inbox instead of adjacent to it. It's not necessary to be that
way.
# FWIW, shubes thinks this setting is annoying/rediculous/retarded.
# As a practical example, having no prefix allows mobile users to
select
# which folders get synchronized. Otherwise their whole mailbox is
# synchronized, and they have no way to choose which folders they want
sync'd.
 separator = .
 type = private
}

passdb {
 args = cache_key=%u webmail=127.0.0.1
 driver = vpopmail
}
protocol imap {
 imap_client_workarounds = "delay-newmail"
 mail_plugins = $mail_plugins imap_quota
}
protocol pop3 {
 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
 pop3_fast_size_lookups = yes
 pop3_lock_session = yes
# pop3_uidl_format = UID%u-%v
}
userdb {
 args = cache_key=%u quota_template=quota_rule=*:backend=%q
 driver = vpopmail
}

plugin {
 quota = maildir:ignore=Trash
 quota_rule = ?:storage=0
}


As a very last resort:
Maybe you should go back to old server state, remove Dovecot and
reinstall courier-imap, pop3, and authlib.

Eric




On 5/13/2016 11:24 PM, Tony White wrote:

Hi Eric,
 I am at a loss now...
I cannot even login to my mail any more.
I added the lines you mentioned but the log file does not change.


best wishes
 Tony White

On 13/05/2016 12:32, Eric wrote:


In your /etc/dovecot/toaster.conf or /etc/dovecot/local.conf try
these
settings:

auth_verbose=yes
auth_debug=yes
auth_debug_passwords=yes

and check /var/log/maillog for verbose error reporting.





On 5/12/2016 7:39 PM, Tony White wrote:

Hi Eric,
 Conversion is completed!
I am still screaming however as clients are getting
confused and frustrated with the new imap setup.
 I have just had a client with a windows mobile phone
drop in to have his config changed and I could not get
it to work.
 Every time I tried to sync I got an error that "a certificate
receieved was not in its time frame" WTFDTM? My ssl
cert is a comodo for 3 years, noone else has the issue.
Any ideas?

Also FYI I had to delete an email account and recreate it
for the new imap. There must be some changes in imap
foler structures that it told me the TRYCREATE code failed
on Trash, Sent etc...

thanks again for the help.




------------------------------------------------------------------------


*From:* Eric <[email protected]

<mailto:[email protected]> <mailto:[email protected]
<mailto:[email protected]>>>

*To:* [email protected]

<mailto:[email protected]>

<mailto:[email protected]

<mailto:[email protected]>>

*Sent:* Friday, 13 May 2016, 4:54
*Subject:* Re: [qmailtoaster] So you heard me screaming then!

How's the conversion going, Tony?

On 5/12/2016 9:33 AM, Tony White wrote:

Hi Eric,
 I just sent an email back to you but it bounced
as it was bigger than 204800bytes in size.








--
Eric C. Broch
White Horse Technical Consulting
[email protected] <mailto:[email protected]>

<mailto:[email protected] <mailto:[email protected]>>

<mailto:[email protected] <mailto:[email protected]>

<mailto:[email protected] <mailto:[email protected]>>>

406-214-6802
                       _
ASCII ribbon campaign ( )
 against HTML e-mail  X
                     / \

---------------------------------------------------------------------


To unsubscribe, e-mail:

[email protected]

<mailto:[email protected]>

<mailto:[email protected]

<mailto:[email protected]>>

<mailto:[email protected]

<mailto:[email protected]>

<mailto:[email protected]

<mailto:[email protected]>>>

For additional commands, e-mail:

[email protected]

<mailto:[email protected]>

<mailto:[email protected]

<mailto:[email protected]>>

<mailto:[email protected]

<mailto:[email protected]>

<mailto:[email protected]

<mailto:[email protected]>>>










---------------------------------------------------------------------
To unsubscribe, e-mail:

[email protected]
<mailto:[email protected]>

<mailto:[email protected]

<mailto:[email protected]>>

For additional commands, e-mail:

[email protected]

<mailto:[email protected]>

<mailto:[email protected]

<mailto:[email protected]>>







--
Eric C. Broch
White Horse Technical Consulting
[email protected] <mailto:[email protected]>

<mailto:[email protected] <mailto:[email protected]>>

406-214-6802
                       _
ASCII ribbon campaign ( )
 against HTML e-mail  X
                     / \

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]

<mailto:[email protected]>

<mailto:[email protected]

<mailto:[email protected]>>

For additional commands, e-mail:

[email protected]
<mailto:[email protected]>

<mailto:[email protected]

<mailto:[email protected]>>






--
Eric C. Broch
White Horse Technical Consulting
[email protected] <mailto:[email protected]>
406-214-6802
                        _
ASCII ribbon campaign ( )
  against HTML e-mail  X
                      / \

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
<mailto:[email protected]>
For additional commands, e-mail:
[email protected]
<mailto:[email protected]>








---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]





--
Eric C. Broch
White Horse Technical Consulting
[email protected]
406-214-6802
                         _
ASCII ribbon campaign ( )
   against HTML e-mail   X
                        / \

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]




























					Reply via email to