- dovecot - dovecot.org

Re: [Dovecot] Dovecot's as ip/user based login filter?
by Sysadmin 11 Apr '06

11 Apr '06

Tere. > Actually I do not know wheter Dovecot can do it by itself. > On my server I use a customized PAM-Module to authenticate and authorize > my users. The module also performs a check on the host where the users > comes from and checks wheter there is a rule to allow/deny access from > this host. > > I know this setup sounds an bit exotic, but it works quite nice for me > with the advantage to use this feature within other services than dovecot. > > It's sounds wonderful. Can You kindly share this customized pam module for me? -- Sysadmin

2 2

[Dovecot] SSHA Password Hashing
by Gavin Young 11 Apr '06

11 Apr '06

We are currently running a production mail server using version 0.990.99.11-2 (latest RPM from RHEL/CentOS). We would like to migrate more virtual domains off our courier imap server to dovecot but the courier imap user passswords are stored in LDAP and are SSHA hashed which is not supported by our current version of dovecot (CRYPT only). >From reading the mailing lists this feature is now available but I am hesitant to move a production server to a beta software release. Apart from waiting for a 1.0-final RPM, what is the simplest/best way for us to allow dovecot to read existing SSHA hashed passwords within LDAP? Any help would be much appreciated. Gavin

1 0

[Dovecot] anyone running with Horde mail?
by interfaSys sàrl - Rich Internet Applications 10 Apr '06

10 Apr '06

We have the exact same problem. Everything is fine with beta3, but the latest betas have problems with Horde. We are using FreeBSD and Horde 3.1. The logs show connections from 127.0.0.1. Login is successful, but the user is immediately disconnected. Best regards, Olivier Paroz interfaSys sàrl > Yes, our horde/imp webmail servers use dovecot beta3 with no > problems. > > We are running horde 2.2.5 on on Solaris 10 boxes. Dovecot uses pam > on the imap server (a Solaris 9 box). I've had no luck with beta4 > or beta5 so far. > > Jeff Earickson > Colby College

4 4

[Dovecot] Re: LDAP authentication via PAM
by Oscar A. Valdez 10 Apr '06

10 Apr '06

Luis Meléndez escribió: > Oscar A. Valdez wrote: > > I've configured dovecot to authenticate against a Fedora Directory > > Server. The mail server on which dovecot is installed has the > > nss_ldap and pam_ldap packages installed, and /etc/dovecot.conf has the > > following two lines: > > > > auth_userdb = ldap /etc/dovecot-ldap.conf > > auth_passdb = pam > > ... > > Is it possible to access the user database through PAM (auth_userdb = > > pam)? Since I'm running the nss_ldap and pam_ldap modules, it'd really > > be an LDAP query for users, and a query in /etc/passwd and /etc/group > > for dovecot (since it's a local user and group on the mail server). > > If you are using nss_ldap and have edited /etc/nsswitch.conf > accordingly, you should get it done with: > > auth_userdb = passwd > > It doesn't mean to use /etc/passwd, but the O.S. nss mechanism. Before trying to Luis' suggestion, I had the following in /var/log/messages: dovecot(pam_unix)[4691]: check pass; user unknown dovecot(pam_unix)[4691]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= dovecot-auth[4691]: pam_ldap: could not open secret file /etc/ldap.secret (No such file or directory) I suppose the first two entries are the lookup for the dovecot user in the DS, where it doesn't exist. And since I want anonymous binds to the DS, I haven't created file /etc/ldap.secret. Users were able to authenticate and get their mail. After changing to auth_userdb = passwd, all the messages went away, but the users weren't able to get their mail: Evolution gave me the following error: "Unable to get a valid greeting" from the mailserver. I went back to auth_userdb = ldap /etc/dovecot-ldap.conf, and then back to auth_userdb = passwd. Users can get their mail, but the messages are back in the log file. I'd appreciate help in understanding this behavior. -- Oscar A. Valdez

2 1

Re: [Dovecot] anyone running with Horde mail?
by interfaSys sàrl - Rich Internet Applications 10 Apr '06

10 Apr '06

I have: Imp, turba, ingo, kronolith, nag and mnemo. Auth is done through IMP. servers.php contains this: $servers['dovecot'] = array( 'name' => 'IMAP Server', 'server' => 'localhost', 'hordeauth' => 'full', 'protocol' => 'imap/notls', 'port' => 143, 'folders' => '', 'namespace' => '', 'maildomain' => '', 'smtphost' => '', 'smtpport' => 25, 'realm' => '', 'preferred' => '', 'acl' => array( 'driver' => 'rfc2086', ), 'dotfiles' => true, 'hierarchies' => array() ); PEAR Auth_SASL is installed Best regards, Olivier Paroz interfaSys sàrl > I have it working now with FreeBSD, the latest HOrde, and the > latest dovecot. > > What other Horde components do you have installed, and how do you > have > the authentication set up.

1 0

[Dovecot] Test version for production servers for shared folders
by Gavin Henry 10 Apr '06

10 Apr '06

Dear List, Is the latest test version suitable for production systems? Our current servers use 0.99 on FC4 and we would like to add shared folders via the test version. Has anyone migrated this way before? Thanks, Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

3 7

[Dovecot] Log format top=0/0 elements meaning?
by Sysadmin 10 Apr '06

10 Apr '06

Hello. Typical log text - top=0/0, retr=0/ del=0/0, size=0 I can figure out what means retr=0/ del=0/0, size=0, but what about top=0/0? It's static data, haven't seen any others numbers, than zeros there? -- Sysadmin

2 2

[Dovecot] Added Howto for installing RPMs of beta versions for Fedora Core
by Gavin Henry 10 Apr '06

10 Apr '06

Might as well update the wiki ;-) http://wiki.dovecot.org/PrebuiltBinaries -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

1 0

Re: [Dovecot] Dovecot's as ip/user based login filter?
by Sysadmin 10 Apr '06

10 Apr '06

Tere. > > If you're using PAM authentication then just use pam_group to restrict > it to a specific group. > > I'm using pam, but how to use this pam_group to allow connect all users from my networks a'la 192.168.0.0/24 and only some users from other network a'la 0.0.0.0 to connect to the port 993? -- Sysadmin

1 0

[Dovecot] Dovecot's as server based and mail filters and addressbooks holder?
by Sysadmin 10 Apr '06

10 Apr '06

Hello. I'm just wondering, that maybe is the time to change the imap -s format or add some more features, are in these day's most people, me also are so called mobile users. And imap is good solution for us but however still some basic things are missing, fore example: 1) Server side mail filters. I read mails from home, from office and from webmail. Now when I need to make mail filter, for example to collect all dovecot mails into one subfolder, I can do it in one computer, and they works, if the computer is online, but if I need to change them, reading email from the another computer, I can't do it. 2) Server side address book. Yes, I know, ldap is solution, but installing and configuring the ldap server for some simple global address book, is kind of overkill. And these rules/address book can be from client to see as subfolder, so every imap capable client can deal with them? Is this real on not? -- Sysadmin

6 6