Re: Dovecot writing to mailbox user@domain

2014-10-06 Thread mourik jan heupink - merit

Hi John,

I'm guessing your problem is:
 mail_location = maildir:/var/vmail/%u/Maildir

%u means 'username', and perhaps this serves you better:
%n: User part in user@domain, same as %u if there's no domain.

so:
mail_location = maildir:/var/vmail/%n/Maildir

I've had this same problem too

MJ

On 10/06/2014 06:38 PM, John Oliver wrote:

centOS 6.5, dovecot-2.0.9-7.el6_5.1.x86_64

This is frustrating, because I had it working before... I could deliver
an email to a user user@domain, then connect to dovecot IMAP and see the
mail, no problem!  Then I was told we had to use cyrus, and I was
dealing with it for a few weeks.  Now we're back to dovecot, and the
last backup I had of that config has postfix delivering mail to
/var/vmail/username as I want and expect, but dovecot looks for and
creates /var/vmail/user@domain which I DON'T want

[joliver@test ~]$ dovecot -n
# 2.0.9: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-431.el6.x86_64 x86_64 CentOS release 6.5 (Final) ext4
auth_username_format = %Lu
mail_access_groups = mail
mail_location = maildir:/var/vmail/%u/Maildir
mail_privileged_group = mail
mbox_write_locks = fcntl
passdb {
   driver = pam
}
passdb {
   args = /etc/dovecot/dovecot-ldap.conf.ext
   driver = ldap
}
protocols = imap
ssl_cert = /etc/pki/dovecot/certs/dovecot.pem
ssl_key = /etc/pki/dovecot/private/dovecot.pem
userdb {
   driver = passwd
}
userdb {
   args = uid=504 gid=505 home=/var/vmail/%u
   driver = static
}
[joliver@test ~]$ cat /etc/dovecot/dovecot-ldap.conf.ext
hosts = localhost
auth_bind = no
ldap_version = 3
debug_level = 0
default_pass_scheme = SSHA
base = ou=Users,dc=test,dc=com
scope = subtree
pass_filter = ((objectClass=user)(uid=%u))
pass_attrs = mail=user,userPassword=password



Re: ot: accepting self certs into win pc?

2014-06-11 Thread mourik jan heupink - merit

Hi Frank, list,

On 6/10/2014 3:10, Frank Leonhardt wrote:

I get endless grief over this, but if you think Microsoft is bad, try
 Apple. I wrote some notes on it once:

http://blog.frankleonhardt.com/2012/certificate-errors-on-internet-explorer-9-and-how-to-stop-them/



I didn't mention it in the post, but IIRC this did work for making
some versions Outlook (and other Microsoft Mail things) happy at the
same time.


But do the above steps work for folks here..? I've tried them (IE 11,
win7, outlook 2013) but outlook keeps asking about (self signed) imaps
certificates.

Is it just me who cannot import self-signed certificates into microsoft
products anymore?

MJ


Re: ot: accepting self certs into win pc?

2014-06-11 Thread mourik jan heupink - merit
Apologies. I noticed only now that the certificate was issued for the 
real servername, and I'm using a dns alias to connect.


Sorry.

On 6/11/2014 10:56, mourik jan heupink - merit wrote:

Hi Frank, list,

On 6/10/2014 3:10, Frank Leonhardt wrote:

I get endless grief over this, but if you think Microsoft is bad, try
 Apple. I wrote some notes on it once:

http://blog.frankleonhardt.com/2012/certificate-errors-on-internet-explorer-9-and-how-to-stop-them/




I didn't mention it in the post, but IIRC this did work for making
some versions Outlook (and other Microsoft Mail things) happy at the
same time.


But do the above steps work for folks here..? I've tried them (IE 11,
win7, outlook 2013) but outlook keeps asking about (self signed) imaps
certificates.

Is it just me who cannot import self-signed certificates into microsoft
products anymore?

MJ


Re: ot: accepting self certs into win pc?

2014-06-11 Thread mourik jan heupink - merit

Hi Frank, list,


There is an option to fiddle (mentioned in the blog) to tell SOME MS
 software to ignore name mismatches. Make a wish and try it :-)


True, but:

Unfortunately it’s either on or off; you can’t set it to ignore a
mis-match for particular names only. Because of the risk that someone
might be impersonating your bank, you’d probably be best to leave
this one checked and put up with the red warnings.


So I think I'll just regenerate my certificate to match the hostname 
alias we use, instead of the actual hostname.


Anyway: your blog is appreciated, thank you! :-)