Re: Dovecot writing to mailbox user@domain

2014-10-06 Thread mourik jan heupink - merit

Hi John,

I'm guessing your problem is:
 mail_location = maildir:/var/vmail/%u/Maildir

%u means 'username', and perhaps this serves you better:
%n: User part in user@domain, same as %u if there's no domain.

so:
mail_location = maildir:/var/vmail/%n/Maildir

I've had this same problem too

MJ

On 10/06/2014 06:38 PM, John Oliver wrote:

centOS 6.5, dovecot-2.0.9-7.el6_5.1.x86_64

This is frustrating, because I had it working before... I could deliver
an email to a user user@domain, then connect to dovecot IMAP and see the
mail, no problem!  Then I was told we had to use cyrus, and I was
dealing with it for a few weeks.  Now we're back to dovecot, and the
last backup I had of that config has postfix delivering mail to
/var/vmail/username as I want and expect, but dovecot looks for and
creates /var/vmail/user@domain which I DON'T want

[joliver@test ~]$ dovecot -n
# 2.0.9: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-431.el6.x86_64 x86_64 CentOS release 6.5 (Final) ext4
auth_username_format = %Lu
mail_access_groups = mail
mail_location = maildir:/var/vmail/%u/Maildir
mail_privileged_group = mail
mbox_write_locks = fcntl
passdb {
   driver = pam
}
passdb {
   args = /etc/dovecot/dovecot-ldap.conf.ext
   driver = ldap
}
protocols = imap
ssl_cert = /etc/pki/dovecot/certs/dovecot.pem
ssl_key = /etc/pki/dovecot/private/dovecot.pem
userdb {
   driver = passwd
}
userdb {
   args = uid=504 gid=505 home=/var/vmail/%u
   driver = static
}
[joliver@test ~]$ cat /etc/dovecot/dovecot-ldap.conf.ext
hosts = localhost
auth_bind = no
ldap_version = 3
debug_level = 0
default_pass_scheme = SSHA
base = ou=Users,dc=test,dc=com
scope = subtree
pass_filter = ((objectClass=user)(uid=%u))
pass_attrs = mail=user,userPassword=password



Re: ot: accepting self certs into win pc?

2014-06-11 Thread mourik jan heupink - merit

Hi Frank, list,

On 6/10/2014 3:10, Frank Leonhardt wrote:

I get endless grief over this, but if you think Microsoft is bad, try
 Apple. I wrote some notes on it once:

http://blog.frankleonhardt.com/2012/certificate-errors-on-internet-explorer-9-and-how-to-stop-them/



I didn't mention it in the post, but IIRC this did work for making
some versions Outlook (and other Microsoft Mail things) happy at the
same time.


But do the above steps work for folks here..? I've tried them (IE 11,
win7, outlook 2013) but outlook keeps asking about (self signed) imaps
certificates.

Is it just me who cannot import self-signed certificates into microsoft
products anymore?

MJ


Re: ot: accepting self certs into win pc?

2014-06-11 Thread mourik jan heupink - merit
Apologies. I noticed only now that the certificate was issued for the 
real servername, and I'm using a dns alias to connect.


Sorry.

On 6/11/2014 10:56, mourik jan heupink - merit wrote:

Hi Frank, list,

On 6/10/2014 3:10, Frank Leonhardt wrote:

I get endless grief over this, but if you think Microsoft is bad, try
 Apple. I wrote some notes on it once:

http://blog.frankleonhardt.com/2012/certificate-errors-on-internet-explorer-9-and-how-to-stop-them/




I didn't mention it in the post, but IIRC this did work for making
some versions Outlook (and other Microsoft Mail things) happy at the
same time.


But do the above steps work for folks here..? I've tried them (IE 11,
win7, outlook 2013) but outlook keeps asking about (self signed) imaps
certificates.

Is it just me who cannot import self-signed certificates into microsoft
products anymore?

MJ


Re: ot: accepting self certs into win pc?

2014-06-11 Thread mourik jan heupink - merit

Hi Frank, list,


There is an option to fiddle (mentioned in the blog) to tell SOME MS
 software to ignore name mismatches. Make a wish and try it :-)


True, but:

Unfortunately it’s either on or off; you can’t set it to ignore a
mis-match for particular names only. Because of the risk that someone
might be impersonating your bank, you’d probably be best to leave
this one checked and put up with the red warnings.


So I think I'll just regenerate my certificate to match the hostname 
alias we use, instead of the actual hostname.


Anyway: your blog is appreciated, thank you! :-)


Re: [Dovecot] reload without shutting imap connections down

2013-07-16 Thread mourik jan heupink

Hi,


we have some problems with users who report connectionproblems to
dovecot sometimes. According to the logs there are dovecot reloads at
this times.
Seems that a reload also causes dovecot to shut all imapconnections down:

Just a wile guess:
Could it have something to do with the shutdown_clients setting, 
perhaps..?


Re: [Dovecot] dovecot enterprise release

2013-06-20 Thread mourik jan heupink


On 6/20/2013 10:54, Benny Pedersen wrote:

On the dovecot enterprise release pages, only debian 6 compatibility
is shown. Are there any plans to support wheezy? (as 7 is stable now,
and we are running it...)


apt-get source dovecot -b

will not work ?, if not then your enterprise is building on precompiled
problems


I'm not sure I understand..?


Re: [Dovecot] dovecot enterprise release

2013-06-20 Thread mourik jan heupink

dovecot is opensource, so why depend on someone that will not package it
for enterprise ?

get the tarballs. create a deb package. install, be happy



Ah right. :-)

But the advantage of using the http://www.dovecot.fi/ 'enterprise 
dovecot' would be that they provide up-to-date versions of dovecot.


And currently we're running debian wheezy with it's default dovecot, 
version 2.1.7.


MJ


[Dovecot] thunderbird detach attachment

2013-04-10 Thread mourik jan heupink

Hi all,

Thunderbird has an option to detach attachments from (for example) sent 
items. I've tried it, and it does not work, and also in the dovecot logs 
I don't see anything interesting meanwhile.


Before looking deeper into this: Does anyone here know if this option is 
known to work, or not?


We're running dovecot 2.1.7 on debian wheezy.

Removing unwanted attachments is a nice way to keep mail archives smaller...

Thanks,
MJ


Re: [Dovecot] thunderbird detach attachment

2013-04-10 Thread mourik jan heupink

Hi all,

Ow... too shortsighted..! You are right, it DOES work. The attachment is 
still there, but with empty contents.


Thanks and sorry to bother you!

MJ

On 4/10/2013 12:10 PM, Andreas Kasenides wrote:

This looks to work on my 17.0.5 Thunderbird on CentOS 6.4
(I guess Dovecot is not involved but running on 2.2.beta1).
It does detach the file, places it in the chosen folder, removes the
option to detach or delete from the message menu
but (nice indeed) remembers where you put the attachment and can still
show it if you click on it or save it again if you want to!!

But how do we know its been detached if it still shows in Thunderbird?
Looking into the actual message file I see the following at the end:

--020104000205010901050407
Content-Type: application/vnd.oasis.opendocument.text;
  name==?UTF-8?B?MjAxMzA0MDQtzpPOoy5vZHQ=?=
Content-Disposition: attachment; filename=20130404-??.odt
X-Mozilla-External-Attachment-URL:
file:///LocalData/tmp/20130404-%CE%93%CE%A3.odt
X-Mozilla-Altered: AttachmentDetached; date=Wed Apr 10 12:51:00 2013

You deleted an attachment from this message. The original MIME headers
for the attachment were:
Content-Type: application/vnd.oasis.opendocument.text;
  name==?UTF-8?B?MjAxMzA0MDQtzpPOoy5vZHQ=?=
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
  filename*=UTF-8''%32%30%31%33%30%34%30%34%2D%CE%93%CE%A3%2E%6F%64%74


--020104000205010901050407--

Nice!!

Andreas



On 10/04/13 11:50, mourik jan heupink wrote:

Hi all,

Thunderbird has an option to detach attachments from (for example)
sent items. I've tried it, and it does not work, and also in the
dovecot logs I don't see anything interesting meanwhile.

Before looking deeper into this: Does anyone here know if this option
is known to work, or not?

We're running dovecot 2.1.7 on debian wheezy.

Removing unwanted attachments is a nice way to keep mail archives
smaller...

Thanks,
MJ







Re: [Dovecot] Question regarding Postfix and Dovecot

2013-03-16 Thread mourik jan heupink



That's the old method, if my hazy memory is serving me half right
tonight, that will not permit recipient delimiter processing
To accommodate that suggest using -
-f ${sender} -d ${user}@${nexthop}

Ah interesting..! Is that perhaps why
dovecot_destination_recipient_limit=1
was needed, here..?


Re: [Dovecot] Question regarding Postfix and Dovecot

2013-03-15 Thread mourik jan heupink

Just a guess:

Is your dovecot-lda running as root? Because:

Operation not permitted (This

binary should probably be called with process group set to 8(mail) instead
of 1000(cryptodan))
this could mean it tries to become 8(mail) to be able to deliver, and 
it's not allowed to?


MJ


Re: [Dovecot] Question regarding Postfix and Dovecot

2013-03-15 Thread mourik jan heupink

dovecot   unix   -n  n   -   -   pipe
 flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/dovecot-lda -d
$(recipient)


I don't totally understand this stuff, but mine is different, and contains:

dovecot   unix  -   n   n   -   -   pipe
   flags=DROhu user=postfix:postfix argv=/usr/libexec/dovecot/dovecot-lda
   -f ${sender} -a ${recipient} -d ${user}@${nexthop}


And for what it's worth... here is mine:

dovecot unix - n n - - pipe
  flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/dovecot-lda -f 
${sender} -d ${recipient}


Re: [Dovecot] load sbub-mailbox

2013-01-14 Thread mourik jan heupink

Hoi Daniel,


Additional namespaces can be dynamically added via environment variables.

Try to add the oldspace namespace dynamically using PostLoginScripting
http://wiki2.dovecot.org/PostLoginScripting
if an old mailbox is available for $ENV{'USER'}


Thanks very much for your kind help and assistance!

Mourik Jan


Re: [Dovecot] load sbub-mailbox

2013-01-13 Thread mourik jan heupink

http://wiki2.dovecot.org/Variables states that %w only works for
Dovecot-auth so this does not seem to work for imap client proxy.
I read that, yes. However I didn't know how this works, but I expected 
dovecot-auth (whatever that may be) to perform the authentication to the 
old mailserver, so I thought: I guess %w must be available then...


Anyway, thanks for pointing that out.


I assume you will need to use a master user (masteruser) to login
on behalf of the actual user (loginuser), since the user should be
already authenticated when he sees the namespace oldmail.

Yep, I have just tried that approach, and it works fine. Thanks!

There is just one thing left to sort out:
From the moment we have migrated to dovecot, new accounts will not be 
(manually) created anymore on our old server, meaning: more and more 
mailboxes will become unavailable on the old server.


It seems (but I have not yet done a lot of testing) that if the imapc 
cannot 'mount' the old mailbox, the imap process 'dies'. (that's what 
squirrelmail tells me)


Since you know so much... :-) Do you happen to know a way to make the 
imapc non-mandatory..? Like: when 'mounting' fails: simply ignore it, 
and proceed as normal.


Thanks very much for you kind assistance!

Mourik Jan


Re: [Dovecot] load sbub-mailbox

2013-01-12 Thread mourik jan heupink

Hi list, Daniel,

Finalle got around to try this out. I need to use the same 
username/password as with the dovecot main mailbox, so I dedited your 
config sample like this:


imapc_host = old.mail.server
imapc_user = %u
imapc_password = %w

namespace {
  type = private
  separator = /
  prefix = oldmail/
  location = imapc:
  inbox = no
  hidden = no
  list = yes
}

However the %w is not expanded to the users password, but instead %w 
is tried as a password, and therefore obviously things fail.


Without adding imapc_user / imapc_password, I get the following error:

imap(username): Error: user username: Initialization failed: Namespace 
'oldmail/': imapc: missing imapc_password


How can I get the %w to expand properly, because I think then things 
would work...?


Regards,
Mourik Jan


I would try to create a private namespace oldmail
http://wiki2.dovecot.org/Namespaces
with an imapc proxy
http://wiki2.dovecot.org/HowTo/ImapcProxy

I didn't test it, but configuration could look like this:

imapc_host = oldmailserver
namespace {
   type = private
   separator = /
   prefix = oldmail/
   location = imapc:
   inbox = no
   hidden = no
   list = yes
}


Re: [Dovecot] load sbub-mailbox

2013-01-07 Thread mourik jan heupink

Hi Daniel, list,

Thanks for your answer, if this works, it would be simply awesome!

Meanwhile things have gotten a bit buzy here with higer priority things, 
but as soon as these are over, I'll give the idea below a try.


Thanks very much, and I'll report back..!

Mourik Jan


I would try to create a private namespace oldmail
http://wiki2.dovecot.org/Namespaces
with an imapc proxy
http://wiki2.dovecot.org/HowTo/ImapcProxy

I didn't test it, but configuration could look like this:

imapc_host = oldmailserver
namespace {
   type = private
   separator = /
   prefix = oldmail/
   location = imapc:
   inbox = no
   hidden = no
   list = yes
}





[Dovecot] load sbub-mailbox

2013-01-05 Thread mourik jan heupink

Hi,

We're about to migrate to dovecot (2.1.7 on wheezy), and I have a 
question about mail migration.


Our 'old' imap mailserver will remain available, and has the same 
usernames/passwords as our future dovecot mailserver.


The question: Is there an easy way to make the old mailboxes available 
under a subfolder (for example 'oldmail') in the mailboxes on the new 
mailserver?


A bit like mounting an old homedirectory under an 'oldfiles' directory 
on a new fileserver.


This way our users could access/migrate whatever folders they choose 
themselves, and we would not have migrate all messages to dovecot using 
scripts like imapcopy, etc.


Perhaps using the proxy functionality..?

Hope I make myself clear...?

Regards,
Mourik Jan