[vchkpw] no mailbox here by that name (chkuser) ?
Hello, I'm managing an email server that recently started to refuse inbound mail to a few domains. I checked almost everything and the declaration seems to be exactly the same for others domains. For example : : 195.200.217.34 does not like recipient. Remote host said: 550 5.1.1 sorry, no mailbox here by that name (chkuser) Giving up on 195.200.217.34. Every address for this domain is refused (even aliases). # vadduser -v version: 5.4.17 vpopmail + mysql. No mysql connection error. Declaration in /var/qmail/control/(rcpthosts|virtualdomains|users/assign) is the same as other domains that works. User is declared in the vpopmail mysql database. I destroyed the domain and recreate it on the shell and in qmailadmin without success. User can authenticate in the webmail (squirrelmail, IMAP, dovecot). I googled a few hours on this subject without finding a clue. What else may I check ? Thans for your help, Julien Escario !DSPAM:4c88ade732716941516972!
Re: [vchkpw] no mailbox here by that name (chkuser) ?
Il 09/09/2010 11:50, Julien Escario ha scritto: Hello, I'm managing an email server that recently started to refuse inbound mail to a few domains. I checked almost everything and the declaration seems to be exactly the same for others domains. For example : : 195.200.217.34 does not like recipient. Remote host said: 550 5.1.1 sorry, no mailbox here by that name (chkuser) Giving up on 195.200.217.34. Every address for this domain is refused (even aliases). # vadduser -v version: 5.4.17 vpopmail + mysql. No mysql connection error. Declaration in /var/qmail/control/(rcpthosts|virtualdomains|users/assign) is the same as other domains that works. User is declared in the vpopmail mysql database. I destroyed the domain and recreate it on the shell and in qmailadmin without success. User can authenticate in the webmail (squirrelmail, IMAP, dovecot). I googled a few hours on this subject without finding a clue. What else may I check ? Thans for your help, Julien Escario Did you make ANY change in software recently? What does say your virtualdomains? Are there other domains working? Tonino -- in...@zioniInterazioni di Antonio Nati http://www.interazioni.it to...@interazioni.it !DSPAM:4c88c8fb32714400880215!
Re: [vchkpw] no mailbox here by that name (chkuser) ?
Le 09/09/2010 13:45, Tonix (Antonio Nati) a écrit : Il 09/09/2010 11:50, Julien Escario ha scritto: Did you make ANY change in software recently? No. The server only rebooted but some times ago ... What does say your virtualdomains? restaurantlatuilerie.fr:restaurantlatuilerie.fr Same for all domains. I just tried to pass over vpopmail with a .qmail-contact file : it works. Are there other domains working? Yeah several of them. Created with the same method. Does someone know exactly what are the tests made by chkuser whose can answer with this error ? (perhaps some file's owner check ...) Thanks, Julien Escario !DSPAM:4c88e09a32713185611609!
Re: [vchkpw] no mailbox here by that name (chkuser) ?
Il 09/09/2010 15:26, Julien Escario ha scritto: Le 09/09/2010 13:45, Tonix (Antonio Nati) a écrit : Il 09/09/2010 11:50, Julien Escario ha scritto: Did you make ANY change in software recently? No. The server only rebooted but some times ago ... What does say your virtualdomains? restaurantlatuilerie.fr:restaurantlatuilerie.fr Same for all domains. I just tried to pass over vpopmail with a .qmail-contact file : it works. Are there other domains working? Yeah several of them. Created with the same method. Does someone know exactly what are the tests made by chkuser whose can answer with this error ? (perhaps some file's owner check ...) Thanks, Julien Escario You could setup a version of qmail-smtpd with chkuser debug on, and run it on a different port, then see detailed log. You can add custom logging instructions if needed. Check http://www.interazioni.it/opensource/chkuser/documentation/chkuser_settings.html#Debugging for compilation instructions. But, before that, if you add a brand new domain, and simulate a delivery, do you have the same problem? Tonino Then -- in...@zioniInterazioni di Antonio Nati http://www.interazioni.it to...@interazioni.it !DSPAM:4c88e54e32712140553239!
Re: [vchkpw] no mailbox here by that name (chkuser) ?
Le 09/09/2010 15:46, Tonix (Antonio Nati) a écrit : Il 09/09/2010 15:26, Julien Escario ha scritto: Le 09/09/2010 13:45, Tonix (Antonio Nati) a écrit : Il 09/09/2010 11:50, Julien Escario ha scritto: You could setup a version of qmail-smtpd with chkuser debug on, and run it on a different port, then see detailed log. You can add custom logging instructions if needed. Check http://www.interazioni.it/opensource/chkuser/documentation/chkuser_settings.html#Debugging for compilation instructions. But, before that, if you add a brand new domain, and simulate a delivery, do you have the same problem? Yeah ! I think we made it ;-) Actually, creating another new domain reproduce the same problem. And I fianlly found what is different from the other domains : the content of .qmail-default. I changed from : | /var/lib/vpopmail/bin/vdelivermail '' bounce-no-mailbox To : | /var/lib/vpopmail/bin/vdelivermail '' delete And it works ! Yeah, I checked the message is in the maildir. I'll now have to check why bounce-no-mailbox is giving a chkuser error. Many thanks for your help, Julien Escario !DSPAM:4c88ec3232719815917165!
Re: [vchkpw] no mailbox here by that name (chkuser) ?
Il 09/09/2010 16:16, Julien Escario ha scritto: Le 09/09/2010 15:46, Tonix (Antonio Nati) a écrit : Il 09/09/2010 15:26, Julien Escario ha scritto: Le 09/09/2010 13:45, Tonix (Antonio Nati) a écrit : Il 09/09/2010 11:50, Julien Escario ha scritto: You could setup a version of qmail-smtpd with chkuser debug on, and run it on a different port, then see detailed log. You can add custom logging instructions if needed. Check http://www.interazioni.it/opensource/chkuser/documentation/chkuser_settings.html#Debugging for compilation instructions. But, before that, if you add a brand new domain, and simulate a delivery, do you have the same problem? Yeah ! I think we made it ;-) Actually, creating another new domain reproduce the same problem. And I fianlly found what is different from the other domains : the content of .qmail-default. I changed from : | /var/lib/vpopmail/bin/vdelivermail '' bounce-no-mailbox To : | /var/lib/vpopmail/bin/vdelivermail '' delete And it works ! Yeah, I checked the message is in the maildir. I'll now have to check why bounce-no-mailbox is giving a chkuser error. Many thanks for your help, Julien Escario You have a problem with chkuser setup... Could be it is linked to a old vpopmail library, before important changes... or something else like that (like not opening vpopmail.mysql). With that change (delete instead of bounce), you are excluding chkuser except chkuser logging. Double check your configuration, because "bounce" is better than "delete". Regards, Tonino -- in...@zioniInterazioni di Antonio Nati http://www.interazioni.it to...@interazioni.it !DSPAM:4c88f01b32711282214076!
Re: [vchkpw] no mailbox here by that name (chkuser) ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/09/2010 04:50 AM, Julien Escario wrote: > No mysql connection error. Check to be sure your MySQL server information in ~vpopmail/etc/vpopmail.mysql works, and that the server is responsive to queries. > User can authenticate in the webmail (squirrelmail, IMAP, dovecot) Dovecot caches information so it doesn't repeatedly hit the database. It will continue to authenticate users without a database backend. - -- /* Matt BrookingsGnuPG Key FAE0672C Software developer Systems technician Inter7 Internet Technologies, Inc. (815)776-9465 */ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkyI8DwACgkQIwet2/rgZyxDJACfcENy80nG/a78udL175MW4WtM jf0Ani44cRalQyjlKZ5eAj7ayJMo2hLo =fguS -END PGP SIGNATURE-
Re: [vchkpw] qmail/dovecot/vpopmail/oLDAP/sogo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/03/2010 05:24 PM, Peter Van den Wildenbergh wrote: > So will this work / support my needs? > > OpenLDAP > netqmail (anybody used Zinq - http://sourceforge.net/projects/zinq/ ) > dovecot - talking to LDAP > vpopmail for 'linking' LDAP and Qmail + virtual domain management > Sogo / imaps (no pop at all) with in a second stage Funabol > MySQL only for Sogo Agenda. Would like to use LDAP for AddressBooks & > User Auth Peter, the LDAP module in 5.5 is actively being re-written and uses the inetOrgPerson schema as a base for its user entries. It makes address books and single sign on easy. This will be available in beta form some time next week. I would recommend waiting for that. - -- /* Matt BrookingsGnuPG Key FAE0672C Software developer Systems technician Inter7 Internet Technologies, Inc. (815)776-9465 */ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkyI8cUACgkQIwet2/rgZyz6HwCglFanCaVnWsOvdp2B8O5cgzDX 17QAnREQqBnpvfMS+S1okGw5lQui2zIu =UK/n -END PGP SIGNATURE-
Re: [vchkpw] no mailbox here by that name (chkuser) ?
Le 09/09/2010 16:32, Tonix (Antonio Nati) a écrit : Il 09/09/2010 16:16, Julien Escario ha scritto: Le 09/09/2010 15:46, Tonix (Antonio Nati) a écrit : Il 09/09/2010 15:26, Julien Escario ha scritto: Le 09/09/2010 13:45, Tonix (Antonio Nati) a écrit : You have a problem with chkuser setup... Could be it is linked to a old vpopmail library, before important changes... or something else like that (like not opening vpopmail.mysql). Don't think it's a mysql access problem. I just checked and everything is fine, my vpopmail user can connect. I don't know exactly what to check for libraries. I just installed the debian package : # dpkg -l vpopmail-mysql ||/ NomVersionDescription +++-==-==- ii vpopmail-mysql 5.4.17-6 vpopmail with mysql backend With that change (delete instead of bounce), you are excluding chkuser except chkuser logging. Double check your configuration, because "bounce" is better than "delete". I dont think so. delete is what I want to remove those fake bounces that spammers are using now. Julien !DSPAM:4c88f2e232712018560058!
Re: [vchkpw] Pop-before-SMTP with Dovecot ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/03/2010 03:32 PM, Joe @ 3ZZZ wrote: > I don't see any errors, but the relay table never gets updated despite > successful pop logins. Am I missing something? Could it be because I > first configured Dovecot incorrectly (without the CFLAGS=") and if so > what do I remove or change to allow it to work after recompile? Dovecot caches information and does not reference vpopmail continually for authentication. It also does not support vpopmail's roaming users feature explicitly, and so roaming users cannot work. Switch to SMTP authentication. Roaming users is *bad* and should only be used by legacy systems. If you need some pointers on switching a large user base to SMTP authentication, let me know. - -- /* Matt BrookingsGnuPG Key FAE0672C Software developer Systems technician Inter7 Internet Technologies, Inc. (815)776-9465 */ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkyI8wMACgkQIwet2/rgZywTZACfbKicOcsl/aWeeONn1dvjTbQu JHcAnRQZr624d8Y65CfIB7jk4Q8zF2TO =t1sh -END PGP SIGNATURE-
Re: [vchkpw] no mailbox here by that name (chkuser) ?
Le 09/09/2010 16:33, Matt Brookings a écrit : -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/09/2010 04:50 AM, Julien Escario wrote: No mysql connection error. Check to be sure your MySQL server information in ~vpopmail/etc/vpopmail.mysql works, and that the server is responsive to queries. It is. User can authenticate in the webmail (squirrelmail, IMAP, dovecot) Dovecot caches information so it doesn't repeatedly hit the database. It will continue to authenticate users without a database backend. Ok, I won't rely on this test so. Julien !DSPAM:4c88f32432711273842712!
Re: [vchkpw] no mailbox here by that name (chkuser) ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/09/2010 09:44 AM, Julien Escario wrote: > I don't know exactly what to check for libraries. I just installed the > debian package : ps auwx | grep mysql > I dont think so. delete is what I want to remove those fake bounces that > spammers are using now. delete is bad. You want "bounce-no-mailbox". The "delete" setting accepts mail to bad recipients and silently drops it. It makes spammers think they're getting through to your users. You will get dictionary attacked. "bounce-no-mailbox" will reject during the SMTP session, no mail data will be transferred, and the spammer will give up. - -- /* Matt BrookingsGnuPG Key FAE0672C Software developer Systems technician Inter7 Internet Technologies, Inc. (815)776-9465 */ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkyI838ACgkQIwet2/rgZyyVRACfYxmuh/mTqCzk2Lif9livW7FL NN8An1QL0JBPOeJcsaNmqdH9y7thTDj9 =TmqI -END PGP SIGNATURE-
Re: [vchkpw] no mailbox here by that name (chkuser) ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/09/2010 09:45 AM, Julien Escario wrote: >> On 09/09/2010 04:50 AM, Julien Escario wrote: >>> No mysql connection error. >> >> Check to be sure your MySQL server information in >> ~vpopmail/etc/vpopmail.mysql works, and that the server is responsive >> to queries. > > It is. I am stumped then. vpopmail says it can't connect to your database, but your database is responsive. Not sure where to go from there. If you would like us to take a look at it, give us a call. - -- /* Matt BrookingsGnuPG Key FAE0672C Software developer Systems technician Inter7 Internet Technologies, Inc. (815)776-9465 */ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkyI9E8ACgkQIwet2/rgZyyQRQCfSeuJ/794IFQdgesAKvTihzXs zpAAn1mxxPW5pf3U51yKb8F0adX9UNR7 =cfR1 -END PGP SIGNATURE-
Re: [vchkpw] no mailbox here by that name (chkuser) ?
Le 09/09/2010 16:47, Matt Brookings a écrit : -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/09/2010 09:44 AM, Julien Escario wrote: I don't know exactly what to check for libraries. I just installed the debian package : ps auwx | grep mysql Nothing special : root 678 0.0 0.0 3608 696 pts/0S+ 16:51 0:00 grep mysql root 2421 0.0 0.0 2844 1084 ?SAug27 0:00 /bin/sh /usr/bin/mysqld_safe mysql 2460 0.3 20.0 1177528 416212 ? Sl Aug27 55:20 /usr/sbin/mysqld --basedir=/usr --datadir=/home/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 --socket=/var/run/mysqld/mysqld.sock root 2461 0.0 0.0 1748 452 ?SAug27 0:00 logger -p daemon.err -t mysqld_safe -i -t mysqld Mysql is listening on the port AND on the socket. In my configuration, I'm using socket ('localhost'). I dont think so. delete is what I want to remove those fake bounces that spammers are using now. delete is bad. You want "bounce-no-mailbox". The "delete" setting accepts mail to bad recipients and silently drops it. It makes spammers think they're getting through to your users. You will get dictionary attacked. "bounce-no-mailbox" will reject during the SMTP session, no mail data will be transferred, and the spammer will give up. Thanks for this explaination. I think I'll have to take my chkuser configuration from start. that's not a problem : I'm currently installing the replacement for this one ;-) Julien !DSPAM:4c88f52e32711498614991!
Re: [vchkpw] no mailbox here by that name (chkuser) ?
Le 09/09/2010 16:50, Matt Brookings a écrit : -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/09/2010 09:45 AM, Julien Escario wrote: On 09/09/2010 04:50 AM, Julien Escario wrote: No mysql connection error. Check to be sure your MySQL server information in ~vpopmail/etc/vpopmail.mysql works, and that the server is responsive to queries. It is. I am stumped then. I don't think so ;-) vpopmail says it can't connect to your database, but your database is responsive. Not sure where to go from there. If you would like us to take a look at it, give us a call. No need to bother you longer with this. As I said, I'll take all this setup from scratch in a few days. Thanks for your help guys, Julien !DSPAM:4c88f58d32711022318732!
Re: [vchkpw] qmail/dovecot/vpopmail/oLDAP/sogo
Matt Brookings wrote: Peter, the LDAP module in 5.5 is actively being re-written and uses the inetOrgPerson schema as a base for its user entries. It makes address books and single sign on easy. This will be available in beta form some time next week. I would recommend waiting for that. Cool... I can be a 'beta-tester' ;-) Regards Peter !DSPAM:4c891b2832711451586764!
Re: [vchkpw] qmail/dovecot/vpopmail/oLDAP/sogo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/09/2010 12:37 PM, Peter Van den Wildenbergh wrote: > Matt Brookings wrote: >> Peter, the LDAP module in 5.5 is actively being re-written and uses >> the inetOrgPerson schema as a base for its user entries. It makes >> address books and single sign on easy. >> >> This will be available in beta form some time next week. I would >> recommend waiting for that. >> > > Cool... I can be a 'beta-tester' ;-) I will send an email to the list when the new LDAP backend has been added to Subversion. I'll probably package up a snapshot too. - -- /* Matt BrookingsGnuPG Key FAE0672C Software developer Systems technician Inter7 Internet Technologies, Inc. (815)776-9465 */ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkyJI/8ACgkQIwet2/rgZywH6QCdEpR2fIdjEMuu2J9O7U66xJQB TTYAnRmkuAnsASR4kJ8oDISFaFTNgHpY =++Ge -END PGP SIGNATURE-
Re: [vchkpw] qmail/dovecot/vpopmail/oLDAP/sogo
On 10/09/10 02:14, Matt Brookings wrote: > On 09/09/2010 12:37 PM, Peter Van den Wildenbergh wrote: > > Matt Brookings wrote: > >> Peter, the LDAP module in 5.5 is actively being re-written and uses > >> the inetOrgPerson schema as a base for its user entries. It makes > >> address books and single sign on easy. > >> > >> This will be available in beta form some time next week. I would > >> recommend waiting for that. > >> > > > Cool... I can be a 'beta-tester' ;-) > > I will send an email to the list when the new LDAP backend has been > added to Subversion. I'll probably package up a snapshot too. I too am looking forward to the ldap release. We have just moved everything to ldap so it will be nice to keep everything in one place. Shane !DSPAM:4c8998d032711646211127!