January 2013 - dovecot

[Dovecot] Dovecot Virtual Users with Sendmail
by DormitionSkete＠hotmail.com 04 Jan '13

04 Jan '13

I'm trying to get Dovecot working with Virtual Users and Sendmail on OpenIndiana 151a7. OpenIndiana is the Open Source continuation of OpenSolaris after Oracle tried to kill it off a couple of years ago shortly after acquiring Sun Microsystems. I'm not sure if this is so much a Dovecot problem, as much of a Sendmail problem. I thought this would probably be a better list to start with, though. If not, please let me know. I initially used this Dovecot wiki page to approach this: Simple Virtual User Installation http://wiki2.dovecot.org/HowTo/SimpleVirtualInstall I had to make few minor changes, but I don't think anything significant to the problem I'm having. I can log into SquirrelMail with both virtual users, and with system users. I can send mail to system users from both virtual and system users. I can see the mail that I sent in the Sent Messages folder for both types of users. I just can't send mail to virtual users. When I try to, I get the following message: ERROR: Message not sent. Server replied: Requested action not taken: mailbox unavailable 550 5.1.1 <dswebstore@localhost>... User unknown My configuration info is as follows: systemuser@openindiana:~# /usr/local/sbin/dovecot --version 2.1.12 systemuser@openindiana:~# /usr/local/sbin/dovecot -n # 2.1.12: /usr/local/etc/dovecot/dovecot.conf # OS: SunOS 5.11 i86pc auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_uid = 101 info_log_path = /var/log/dovecot-info.log log_path = /var/log/dovecot.log mail_location = mbox:/home/vmail/%u/mail:INBOX=/var/mail/%u passdb { args = /usr/local/etc/dovecot/passwd driver = passwd-file } pop3_uidl_format = %g protocols = imap pop3 service auth { unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } ssl = no userdb { args = uid=vmail gid=vmail home=/home/vmail/%u driver = static } protocol lda { postmaster_address = systemuser@localhost } --- My dovecot password file looks something like this, though changed for obvious security reasons: systemuser:{PLAIN} systemuserPASS virtualuser1:{PLAIN}virtualuser1PASS virtualuser2:{PLAIN}virtualuser2PASS --- I read on this page that I needed to put the following in my sendmail dovecot.m4 file: Dovecot LDA with Sendmail http://wiki2.dovecot.org/LDA/Sendmail So this is my dovecot.m4 file, which shows up in my sendmail.cf file after recompiling my sendmail.mc file. ######################*****############## ### DOVECOT Mailer specification ### ##################*****################## Mdovecot, P=/usr/local/libexec/dovecot/dovecot-lda, F=DFMPhnu9, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP/HdrFromSMTP, T=DNS/RFC822/X-Unix, A=/usr/local/libexec/dovecot/dovecot-lda -d $u --- Finally, this is my sendmail.mc file: divert(-1) # # Copyright (c) 1983 Eric P. Allman # Copyright (c) 1988, 1993 # The Regents of the University of California. All rights reserved. # # Copyright 2009 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # This is a configuration file for SunOS 5.8 (a.k.a. Solaris 8) and later # subsidiary machines. It has support for local and SMTP mail. The # confFALLBACK_SMARTHOST macro is enabled, which means that messages will # be sent to that host (which is set to mailhost.$m [$m is the local domain]) # if MX records are unavailable. A short-cut rule is also defined, which # says if the recipient host is in the local domain, send to it directly # instead of the smart host. # # If you want to customize this further, copy it to a name appropriate # for your environment and do the modifications there. # divert(0)dnl VERSIONID(`sendmail.mc (Sun)') OSTYPE(`solaris8')dnl DOMAIN(`solaris-generic')dnl define(`confFALLBACK_SMARTHOST', `mailhost$?m.$m$.')dnl define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail')dnl FEATURE(local_procmail,`',`procmail -t -Y -a $h -d $u')dnl MAILER(`local')dnl MAILER(`smtp')dnl MAILER(`procmail')dnl MAILER(`dovecot')dnl LOCAL_NET_CONFIG R$* < @ $* .$m. > $* $#esmtp $@ $2.$m $: $1 < @ $2.$m. > $3 --- I think it is obvious that it is a problem with Sendmail not recognizing Dovecot's virtual users. But how do I fix it? If anyone could help me with this, I would *greatly* appreciate it. I've been picking away at this for about three weeks now, and I'm pretty much out of ideas of anything else to try. Cordially, Peter, hieromonk ---- Dormition Skete Monastery Website: http://www.DormitionSkete.org Convent Website: http://www.HolyApostlesConvent.org ----

5 16

Re: [Dovecot] Dovecot Virtual Users with Sendmail
by DormitionSkete＠hotmail.com 04 Jan '13

04 Jan '13

On Jan 2, 2013, at 4:14 PM, Andrzej A. Filip wrote: > On 01/02/2013 08:46 PM, DormitionSkete(a)hotmail.com wrote: >> On Jan 2, 2013, at 11:12 AM, Andrzej A. Filip wrote: >> >>> On 01/02/2013 06:53 PM, DormitionSkete(a)hotmail.com wrote: >>>> [...] >>>> This is the mail header from the mqueue: >>>> >>>> [...] >>>> MDeferred: dovecot mailer (/usr/local/libexec/dovecot/dovecot-lda) exited with EX_TEMPFAIL >>>> [...] >>> >>> Check dovecot's logs >>> If it does not help the push delivery of messages ni sendmail's queue in >>> verbose mode: "sendmail -Am -v -q" >> >> Well, the logs showed this: >> >> Sep 21 21:47:08 openindiana sendmail[1208]: [ID 702911 mail.warning] gethostbyaddr(10.211.55.6) failed: 2 >> Sep 21 21:47:08 openindiana sendmail[1208]: [ID 702911 mail.warning] gethostbyaddr(IPv6:fec0::fea9:21c:42ff:feed:5f38) failed: 2 > > I have asked for _dovecot's_ logs. Your problem may be caused e.g. by > sendail executing dovecot-lda "as wrong user". > >> So I put this in my /etc/hosts file: >> >> 10.211.55.6 localhost >> >> And I added DOVECOT to my /etc/hosts 127.0.0.1 line. > > *DO NOT* add DOVECOT (magic word in sendail config) to /etc/hosts. > >> This cleared the queue, but now all of the mail for the virtual users bounces with this: >> The original message was received at Wed, 2 Jan 2013 11:16:27 -0700 (MST) >> from openindiana [IPv6:::1] >> >> ----- The following addresses had permanent fatal errors ----- >> <hacwebstore@localhost> >> (reason: 550 5.1.1 User unknown) >> hacwebstore@DOVECOT >> (reason: 550 5.1.1 User unknown) >> (expanded from: <hacwebstore@localhost>) >> >> ----- Transcript of session follows ----- >> 550 5.1.1 hacwebstore@DOVECOT... User unknown >> 550 5.1.1 <hacwebstore@localhost>... User unknown >> >> >> >> Then I took the DOVECOT out of the 127.0.0.1 line, and it still bounces with the same error. >> >> How would I invoke this: "sendmail -Am -v -q" ? Change my startup script? > > It is intended as one time debug help. It should show in more verbose > way delivery attempts of messages staying in sendail's queue. > > > Another test: As root try to deliver message to virtual dovecot mailbox: > /usr/lib/dovecot-lda -d hacwebstore > Please forgive me, Andrzej. I did not realize you wanted me to actually send you the logs. I thought you only meant for me to look to see if there was anything helpful in them. They do not show much. If I restart dovecot and sendmail, this is basically what I get. If I try to send any mail, nothing shows up in dovecot's log. All that shows up anywhere is my logging into squirrelmail. network-dovecot-default.log [ Jan 2 21:52:07 Stopping because service restarting. ] [ Jan 2 21:52:07 Executing stop method ("/lib/svc/method/dovecot.sh stop"). ] [ Jan 2 21:52:07 Method "stop" exited with status 0. ] [ Jan 2 21:52:07 Executing start method ("/lib/svc/method/dovecot.sh start"). ] [ Jan 2 21:52:07 Method "start" exited with status 0. ] dovecot-info.log Jan 02 21:54:48 master: Info: Dovecot v2.1.12 starting up dovecot.log Jan 02 21:54:48 master: Warning: Killed with signal 2 (by pid=2587 uid=0 code=kill) syslog Sep 21 21:47:08 openindiana sendmail[1208]: [ID 702911 mail.warning] gethostbyaddr(10.211.55.6) failed: 2 Sep 21 21:47:08 openindiana sendmail[1208]: [ID 702911 mail.warning] gethostbyaddr(IPv6:fec0::fea9:21c:42ff:feed:5f38) failed: 2 --- systemuser@openindiana:~# /usr/local/libexec/dovecot/dovecot-lda -d hacwebstore I had to modify the path to get it to work in Solaris. When I ran it as above, it sent a blank email to hacwebstore. So, lda appears to be working, but sendmail doesn't? --- Here is the dovecot portion of my sendmail.cf file again, for your convenience. Does it appear ok to you? ######################*****############## ### DOVECOT Mailer specification ### ##################*****################## Mdovecot, P=/usr/local/libexec/dovecot/dovecot-lda, F=DFMPhnu9, S=EnvFromL/HdrFromL, R=EnvToL/HdrFromL, T=DNS/RFC822/X-Unix, A=/usr/local/libexec/dovecot/dovecot-lda -d $u --- I do have an odd behaviour I noticed in my syslog. It has the wrong date! Very odd. Thank you again, Andrzej, for all of your help with this. I appreciate it very much. Do you think it is solvable?

2 2

[Dovecot] clucene-config.h location
by Dimitri 04 Jan '13

04 Jan '13

By deafult, CLucene installs the clucene-config.h header to /usr/lib/CLucene, but fts-lucene tries to include it from /usr/include/CLucene and fails. Here is how it is fixed in Fedora, for instance: sed -i '/DEFAULT_INCLUDES *=/s|$| '"$(pkg-config --cflags libclucene-core)|" src/plugins/fts-lucene/Makefile.in Indeed, Lucene's pkgconfig file reflects the fact that some headers reside in /usr/lib/CLucene. It would be great if Dovecot used pkgconfig for CLucene. Thanks, Dimitri Mageia Linux packager

2 1

[Dovecot] Can't rename mailboxes, any ideas on how to fix?
by Howard Leadmon 04 Jan '13

04 Jan '13

I am running Dovecot 2.1.12 under FreeBSD, and I use Outlook 2010 with imap to connect to my server. I know I used to be able to rename mailboxes, as I do this every year at year end, but when I went to rename some mailboxes the start of this year, blamo up popped the message "CANNOT Renaming not supported across conflicting directory permissions". Then only thing that has really been updated here, is Dovecot itself, as I know the FBSD port updates when new versions are released. Any clues on what may have caused this, or how to best correct it? --- Howard Leadmon

2 2

[Dovecot] Dovecot 1.2.7 and Roundcube LIST-EXTENDED commands
by aristidis fesarlis 04 Jan '13

04 Jan '13

Hi all, we use Dovecot 1.2.7 with Maildir, and recently we have set up the latest Roundcube webmail. Inside its config file,it is mentioned that: // By default list of subscribed folders is determined using LIST-EXTENDED // extension if available. Some servers (dovecot 1.x) returns wrong results // for shared namespaces in this case. http://trac.roundcube.net/ticket/1486225 // Enable this option to force LSUB command usage instead. I notice that it seems to work fine, though. We don't have shared namespaces. So my question is: should I change it to LSUB, or will I have problems with my Maildir subscriptions? Thanks

2 1

[Dovecot] Dovecot auto subscribe imap public folder
by Marantz 04 Jan '13

04 Jan '13

Hi, I have a public folder up and running. This public folder is shared across the company, but when one user makes a new folder then it is not automatically visible to othe users. They need to subscribe manually. Is there a way to automatically subscribe to this? Kind regards, Robin -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecot-auto-subscribe-imap-public-fol… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Folder names
by James Starowitz 04 Jan '13

04 Jan '13

Running a pretty basic setup of imap +pop3 on version 2.1.10 Users are able to create folders in imap that contain "&" the folder on the backend reflects "&-" as it should, you can list folder, but then when you relog into imap then decides it can no longer subscribe to this folder due to invalid UTF characters. Essentially allowing users to lock themselves out by using a very common character in a folder name. Might one of the imap client compatibility plugins in imapd cause this quirkiness ? Should I be coming at this from another direction? Is this a bug?

2 1

[Dovecot] Kerberos/GSSAPI auth via .k5login file
by Jörg Herzinger 04 Jan '13

04 Jan '13

Hi, we are currently moving our mailserver to a new server with Dovecot, virtual users in LDAP, Passwords in Kerberos Setup. Everything works fine except for GSSAPI which seems to be a bit buggy. The thing is, that when using a .k5login [1] file it seems that SASL does not get passed the home directory specified userdb. In other words, mails for user1 (see below) are stored in /home/domain.at/user1, while the home dir defined in LDAP is /afs/domain.at/home/user1 (virtual users, so only dovecot, not the system does know about this user and home dir). If I do create a .k5login file in /home/domain.at/user1 with the content "someotheruser(a)DOMAIN.AT", then someotheruser should be able to authenticate himself as user1 via GSSAPI. However, this .k5login file is completely ignored. So it seems to me that the home is not passed on to SASL. If I do add ldap to my nsswitch (for testing only) I additionally have real system users. Now if I create a .k5login in their home defined in LDAP which now also the system knows about everything works just fine. It is still the wrong home since its the one in LDAP and not the one defined by dovecot but at least it shows that our setup is working. See also debug log output below, a failed GSSAPI attempt produces no log output at all. Our System is Debian Wheezy on an amd64 (virtualized), dovecot Version 2.1.7, filesystem is ext4. Everything is tested with Firefox 17.0 on an Ubuntu Lucid client. Example LDAP user (not all of it...): ===================== dn: uid=user1,ou=people,dc=domain,dc=at structuralObjectClass: inetOrgPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: qmailUser uid: username uidNumber: 12345 gidNumber: 100 mail: username(a)domain.at homeDirectory: /afs/domain.at/home/user1 userPassword: {sasl}user1(a)DOMAIN.AT And our dovecot userdb/passdb looks like this: ============================ root@mail201212 /etc/dovecot (git)-[master] # cat conf.d/10-auth.conf auth_gssapi_hostname = "$ALL" auth_krb5_keytab = /etc/dovecot/imap_smtp_mail201212.keytab auth_mechanisms = plain gssapi !include auth-virtual.conf.ext root@mail201212 /etc/dovecot (git)-[master] # cat conf.d/auth-virtual.conf.ext mail_uid = mailowner mail_gid = mailowner userdb { driver = ldap args = /etc/dovecot/ldap-userdb-user_g2.conf.ext } passdb { driver = pam } root@mail201212 /etc/dovecot (git)-[master] # cat /etc/dovecot/ldap-userdb-user_g2.conf.ext #http://www.postfix.org/ldap_table.5.html hosts = ldap1 ldap2 base = ou=people,dc=domain,dc=at user_attrs = uid=home=/home/domain.at/%$ user_filter = (&(objectClass=inetOrgPerson)(|(mail=%u)(mailalternateaddress=%u)(uid=%u))) Debug log output with system users (testing only) and a working GSSAPI auth: ================================================ Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_sqlite.so Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libmech_gssapi.so Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Dec 28 14:18:40 mail201212 dovecot: auth: Debug: passwd-file /etc/dovecot/shared_users: Read 1 users in 0 secs Dec 28 14:18:40 mail201212 dovecot: auth: Debug: auth client connected (pid=11875) Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client in: AUTH#0111#011GSSAPI#011service=imap#011secured#011session=1RaMgOnRZADAqCoq#011lip=192.168.43.100#011rip=192.168.42.42#011lport=993#011rport=55140 Dec 28 14:18:41 mail201212 dovecot: auth: Debug: gssapi(?,192.168.42.42,<1RaMgOnRZADAqCoq>): Using all keytab entries Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client out: CONT#0111#011 Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client in: CONT<hidden> Dec 28 14:18:41 mail201212 dovecot: auth: Debug: gssapi(user1(a)domain.at,192.168.42.42,<1RaMgOnRZADAqCoq>): security context state completed. Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client out: CONT#0111#011YIGZBgkqhkiG9xIBAgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvMQu0Yxgom2SVOHW25FpxDbqalw/8nuMN1XH78FJUzJ/7CIv9dlQNUrKjFywqS9kNOxQY2sJR 7Ii0hw3i7BGV3VPmoeRJOsbYD5ahBh74NKqxdacN6rLj/cO5vWCee6Oel3rPgLV8kEcOVZOdAt6y Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client in: CONT<hidden> Dec 28 14:18:41 mail201212 dovecot: auth: Debug: gssapi(user1(a)domain.at,192.168.42.42,<1RaMgOnRZADAqCoq>): Negotiated security layer Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client out: CONT#0111#011BQQF/wAMAAAAAAAAC5QPNQH///+qs6lgevrvypjd1l4= Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client in: CONT<hidden> Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client out: OK#0111#011user=user1 Dec 28 14:18:41 mail201212 dovecot: auth: Debug: master in: REQUEST#0111935278081#01111875#0111#0118d08e90a585981154d7c045ca230b1f9 Dec 28 14:18:41 mail201212 dovecot: auth: Debug: ldap(user1,192.168.42.42,<1RaMgOnRZADAqCoq>): user search: base=ou=people,dc=domain,dc=at scope=subtree filter=(&(objectClass=inetOrgPerson)(|(mail=user1)(mailalternateaddress=user1)(uid=user1))) fields=uid Dec 28 14:18:41 mail201212 dovecot: auth: Debug: ldap(user1,192.168.42.42,<1RaMgOnRZADAqCoq>): result: uid=user1 Dec 28 14:18:41 mail201212 dovecot: auth: Debug: master out: USER#0111935278081#011user1#011home=/home/domain.at/user1 Dec 28 14:18:41 mail201212 dovecot: imap-login: Login: user=<user1>, method=GSSAPI, rip=192.168.42.42, lip=192.168.43.100, mpid=11878, TLS, session=<1RaMgOnRZADAqCoq> Dec 28 14:18:41 mail201212 dovecot: imap(user1): Debug: Effective uid=996, gid=997, home=/home/domain.at/user1 Dec 28 14:18:41 mail201212 dovecot: imap(user1): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/maildir Dec 28 14:18:41 mail201212 dovecot: imap(user1): Debug: maildir++: root=/home/domain.at/user1/maildir, index=, control=, inbox=/home/domain.at/user1/maildir, alt= Dec 28 14:18:41 mail201212 dovecot: imap(user1): Debug: Namespace : type=public, prefix=PublicLists/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:/home/listcaptor/maildir/ Dec 28 14:18:41 mail201212 dovecot: imap(user1): Debug: maildir++: root=/home/listcaptor/maildir, index=, control=, inbox=, alt= [1] http://web.mit.edu/kerberos/krb5-current/doc/user/user_config/k5login.html -- Jörg Herzinger - EDV Team GLOBAL 2000 - Friends of the Earth Austria Neustiftgasse 36, A-1070 Wien tel +43-699-14200030 Dieses Mail wurde mit Oekostrom und Opensource Software erstellt.

3 2

[Dovecot] map_uid/GUID at IMAP level (IMAP extension?)
by Andrzej A. Filip 04 Jan '13

04 Jan '13

Is map_uid/guid going to be supported at IMAP protocol level? [via IMAP protocol extension] Specifically I would like to be able to: a) ask for mail_uid/GUID of specific message in mail store b) get list of folders containing copies of message with given mail_uid/GUID http://wiki2.dovecot.org/MailboxFormat/dbox#Multi-dbox Related: https://developers.google.com/google-apps/gmail/imap_extensions#access_to_t… [message to guid mapping] https://developers.google.com/google-apps/gmail/imap_extensions#access_to_g… [message to list of folders mapping]

2 1

[Dovecot] dovecot and avahi
by Robert Moskowitz 03 Jan '13

03 Jan '13

I am trying to figure out if I need avahi on my mail server. I see that POP3 and IMAP are services that Avahi can advertise/discover. Does Dovecot work with Avahi and how do you get POP3 and IMAP advertised? And perhaps more importantly, what clients look for mail services this way? I can't find any information on this in the Dovecot documentation ot googling. Perhaps my search fu is low this year. thank you

8 21