- dovecot - dovecot.org

[Dovecot] RE: Internal login failure
by Jaeson Schultz 13 Dec '04

13 Dec '04

Hello, I should have sent my first message in plain text instead of HTML so it would show up better in the list archives. Anyhow, I am using the latest release of Dovecot, v0.99.12.1. Seeing as how I don't need the cyrus-sasl2 to be compiled in, I have just rebuilt dovecot without it. Unfortunately I am still getting the same results... [jaeson@shell01 ~]$ telnet co-nundrum imap Trying 207.7.137.6... Connected to co-nundrum. Escape character is '^]'. * OK dovecot ready. 1 LOGIN jaeson secret 1 OK Logged in. * BYE Internal login failure. Error report written to server log. Connection closed by foreign host. The dovecot logs still indicate an "Internal login failure", but offers no extra explanation as to why. dovecot-auth: Dec 13 11:43:04 Info: PGSQL: Performing query: SELECT password FROM user_accounts WHERE username='jaeson' imap-login: Dec 13 11:43:04 Info: Internal login failure: jaeson [216.39.112.19] dovecot: Dec 13 11:43:04 Error: child 25784 (auth) killed with signal 11 I am wondering that since I see the auth_passdb query, shouldn't I also be seeing a log entry for the auth_userdb query as well, or does this happen once the imap process is started? Any advice for how to track down the source of the problem is appreciated. ~Jaeson [This E-mail scanned for viruses]

1 0

[Dovecot] Re: Corrupted index files in 0.99.12.1
by Brady Wetherington 13 Dec '04

13 Dec '04

--- dovecot-request(a)dovecot.org Wrote: > From: Matthias Andree <matthias.andree(a)gmx.de> > Brady Wetherington <brady(a)netservnyc.com> writes: > > > Would my old, corrupted index files be of any use to anyone? I still > > have that directory sitting somewhere. Is it perhaps 'bad' to run two > > copies of Dovecot? I don't know exactly what I was doing, but I can > > easily imagine accessing one of my Dovecots using my webmail setup, and > > one using straight IMAP - is that an unsupported setup? > > I'd think the way to go is to use one Dovecot installation for both IMAP > logins by remote clients as well as the webmail system. > > -- > Matthias Andree I would think the exact same thing, and I would _love_ to run only one copy of Dovecot. But I run vpopmail, and I need to make IMAP available only to users who have IMAP 'enabled' (the guys who pay more money). But I need webmail available for _all_ users (even the cheapskates), and my webmail of course uses IMAP behind the scenes. So my solution is one copy of regular Dovecot on port 143, which respects the NO_IMAP flag from vpopmail, and one copy of modified Dovecot, which I patched to ignore the NO_IMAP flag, on port 144 - and then I configured my webmail software to talk to port 144. That copy of Dovecot will eventually only listen to the local network for connections, though currently it listens for anyone. A solution I already tried was having Dovecot run by being invoked from a copy of tcpserver, which used a .cdb 'rules' database which set certain environment variables based upon the users IP address. I patched my copy of Dovecot to listen for those environment variables and pay attention/ignore NO_IMAP based upon those environment variables, but it looks like environment variables get clobbered when dovecot invokes the authenticator process from within imap-login (And the code seems to say that it blows out the environment, too). And I'm willing to bet that it would only work on first invoke of dovecot from imap-login, too, even if it didn't blow out the environment (because the authentication process stays running). All this stuff is, I'm sure, a thousand times easier in something like courier-imap, but I like Dovecot, so I'd rather run two copies of Dovecot than one of courier-imap. So if anyone has any possible direction to go on a solution that lets me run only one Dovecot, I'd love that. Until then, I'm stuck with my hack-ey two-Dovecot solution. I also _think_ I found out the problem, what was corrupting my indexes, though I'm not sure. I think one of the messages in my Maildir was 'unreadable' by Dovecot (well, that's what the logs say). Which seems to completely blow out the index. I got rid of the file, so lets keep fingers crossed that that solves it...

2 1

[Dovecot] 1.0-test57 LDAP dovecot-auth SIGABRT
by Thomas Hummel 13 Dec '04

13 Dec '04

Hi, I'm experiencing the following problem when runnig dovecot-1.0-test set up to authenticate users against openldap, while the corresponding setup with dovecot-0.99.11 works fine : . my platform : FreeBSD 5.3-RELEASE-p1 . dovecot version : dovecot-1.0-test57 . openldap version : openldap-2.1.27 - Description : When I talk IMAP to the dovecot server, I can connect on port 143 and receive the 'Dovecot ready' greeting message, but when I issue the command 'x LOGIN username userpass', the following message is written to the log file : ---------------------------------------------------------------------- 'dovecot: Dec 13 16:40:26 Error: auth(default): dovecot-auth in free(): error: chunk is already free dovecot: Dec 13 16:40:26 Error: child 17260 (auth) killed with signal 6' ---------------------------------------------------------------------- - here's a gdb backtrace of the dovecot-auth running process as it happens : (gdb) continue Continuing. Program received signal SIGABRT, Aborted. 0x1826e1d7 in kill () from /lib/libc.so.5 (gdb) bt full #0 0x1826e1d7 in kill () from /lib/libc.so.5 No symbol table info available. #1 0x1826327e in raise () from /lib/libc.so.5 No symbol table info available. #2 0x182d5627 in abort () from /lib/libc.so.5 No symbol table info available. #3 0x18279389 in ldexp () from /lib/libc.so.5 No symbol table info available. #4 0x182793cd in ldexp () from /lib/libc.so.5 No symbol table info available. #5 0x1827a2c1 in ldexp () from /lib/libc.so.5 No symbol table info available. #6 0x1827a513 in ldexp () from /lib/libc.so.5 No symbol table info available. #7 0x1827a644 in free () from /lib/libc.so.5 No symbol table info available. #8 0x080502c7 in ldap_input (context=0x2c) at db-ldap.c:172 request = (struct ldap_request *) 0x806a580 timeout = {tv_sec = 0, tv_usec = 0} res = (LDAPMessage *) 0x806a5a0 ret = 0 msgid = 405650150 #9 0x0805cea8 in io_loop_handler_run (ioloop=0x8075340) at ioloop-poll.c:184 data = (struct ioloop_handler_data *) 0x806a160 pollfd = (struct pollfd *) 0x2 tv = {tv_sec = 0, tv_usec = 268537} io = (struct io *) 0x806a300 t_id = 2 msecs = 0 ret = 0 call = 1 #10 0x0805c8e5 in io_loop_run (ioloop=0x8075340) at ioloop.c:218 No locals. #11 0x08051174 in main (argc=1, argv=0x0) at main.c:296 master = (struct auth_master_connection *) 0x8075500 i = 1 env = 0x4598 <Error reading address 0x4598: Bad address> pid = 0 master_p = (struct auth_master_connection **) 0x8075400 size = 1 (gdb) detach Detaching from program: /usr/local/dovecot-1.0-test57/libexec/dovecot/dovecot-auth, process 17804 (gdb) - here are the configure options I passed when compiling openldap and dovecot : - dovecot ./configure --prefix=/usr/local/dovecot-1.0-test57 --with-ldap --with-cyrus-sasl2 --with-rawlog --with-ssl=openssl --with-storages=mbox,maildir - openldap ./configure --prefix=/usr/local/openldap-2.1.27 --with-threads --with-tls=openssl --enable-dynamic --with-cyrus-sasl --enable-ldbm --enable-crypt --enable-lmpasswd --enable-ldap --enable-meta --enable-rewrite --enable-null --enable-monitor --enable-bdb --with-ldbm-api=berkeley --enable-spasswd --enable-wrappers -- Thomas Hummel <hummel(a)pasteur.fr>

1 0

[Dovecot] Problem with LDAP and Dovecot
by Peter Clark 13 Dec '04

13 Dec '04

I am trying to set up Dovecot so that it uses LDAP, but I keep getting this error message in /var/log/syslog: Dec 12 03:38:17 mydomain dovecot-auth: LDAP: ldap_search() failed (filter user_filter = (mail=user(a)mydomain.tld)) Bad search filter Relevant configuration files: /etc/dovecot-ldap.conf: hosts = localhost dn = cn=dovecot,ou=sysAccounts,dc=mydomain,dc=tld dnpass = password ldap_version = 3 base = ou=mailAccounts,dc=mydomain,dc=tld deref = never scope = subtree user_attrs = mail,,,,, user_filter = (mail=%u) pass_attrs = mail,userPassword pass_filter = user_filter = (mail=%u) default_pass_scheme = CRYPT user_global_uid = 5000 user_global_gid = 5000 /etc/dovecot.conf: protocols = imap imaps pop3s imap_listen = 127.0.0.1 imaps_listen = * pop3s_listen = * ssl_cert_file = /etc/ssl/mydomain.tld/Cert.pem ssl_key_file = /etc/ssl/mydomain.tld/PrivateKey.pem disable_plaintext_auth = yes login = imap login_user = dovecot login = pop3 verbose_proctitle = yes first_valid_uid = 5000 last_valid_uid = 5000 first_valid_gid = 5000 last_valid_gid = 5000 mail_extra_groups = mail valid_chroot_dirs = /var/mail/virtualmail default_mail_env = maildir:/var/mail/virtualmail/%n/Maildir auth = default auth_mechanisms = plain auth_userdb = ldap /etc/dovecot-ldap.conf auth_passdb = ldap /etc/dovecot-ldap.conf auth_user = dovecot auth_verbose = yes auth_debug = no In /etc/ldap/slapd.conf: access to attribute=userPassword by dn="cn=admin,dc=mydomain,dc=tld" write by dn="cn=dovecot,ou=sysAccounts,dc=mydomain,dc=tld" read by anonymous auth by self write by * none Output of 'slapcat | grep dovecot': dn: cn=dovecot,ou=sysAccounts,dc=mydomain,dc=tld cn: dovecot sn: dovecot I've even tried changing the dn to admin, but I still get the same error. What am I doing wrong? :Peter

3 3

[Dovecot] Ximian Evolution Issue
by Adam Todorski 13 Dec '04

13 Dec '04

Hi This may be a problem with Dovecot and it may be a problem with Evolution, I'm trying to narrow it down. I'm using Evolution 2.0.2 on Fedora Core 3 x86_64 to connect over SSL to Dovecot 0.99.11 on Debian testing (Sarge) on an i686 using Maildir for the mail store. Specifically, when I open a folder with more than a few dozen messages in it I get the following error (with the carroted fields populated): Error while Opening folder imap://<username>@<mailserver>/<folder>. Incomplete server response: no information provided for message <message number>. Thanks for any leads on this! Adam

2 1

[Dovecot] Corrupted index files in 0.99.12.1
by Brady Wetherington 12 Dec '04

12 Dec '04

Hi - I've got two copies of Dovecot installed on my server (don't worry, talking to two different sockets for authentication, with two different sets of filenames using options in configure), and I found at least one instance where the index file for my INBOX (on my own account, in fact) got corrupted. So badly so that when I connected via IMAP and selected my INBOX, it said there were no messages there - but if I logged in via sqWebMail (ugh), it said all my messages were there. Note that it didn't give the 'NO can't use index file' message. I moved the .INBOX directory to another filename, and then re-logged in and found that all was well (it regenerated the index files correctly). Would my old, corrupted index files be of any use to anyone? I still have that directory sitting somewhere. Is it perhaps 'bad' to run two copies of Dovecot? I don't know exactly what I was doing, but I can easily imagine accessing one of my Dovecots using my webmail setup, and one using straight IMAP - is that an unsupported setup? I'd also be happy to discuss why I'm using two copies of Dovecot, but that's a whole other discussion :)

2 1

Re: [Dovecot] Timeouts with outlook express
by Daniel 11 Dec '04

11 Dec '04

Hi Yes I have all the outlook workarounds enabled. Interestingly the progress bar dose not move until the whole email has been downloaded. Normally this moves bit by bit as the mail downloads. But as I said the email is downloading, there is network traffic. Any ideas? Regards Daniel On Thu, 2004-12-09 at 07:45 +0000, Andrew Hutchings wrote: > Hi Daniel, > > Have you tried turning on th outlook-no-nuls workaround in dovecot? > > Regards > Andrew > > On Thu, 2004-12-09 at 15:22 +0800, Daniel wrote: > > Hi > > > > I am using Dovecot 0.99.12.1 (just upgraded) on a site with about 1500 > > mailboxes. One thing I have noticed is when the client outlook express > > is receiving a large mail via pop3 it gets a time out. There is traffic. > > If you click on the "wait" button in the dialogue the mail continues to > > download. > > > > This seem to relate to the "Server Timeouts" setting under mail account > > Properties/advance. If this setting is set higher the dialogue come only > > after this time has passed. > > > > If the mail take a long time to download if say is very big the user may > > have to click "Wait" a number of time even if the time out setting is > > set to the largest amount. > > > > It funny because the mail is downloading, So the pop3 server has not > > stopped responding as outlook express say it has. Strange. > > > > What is happening here? and is there a work around for it. Do I have a > > setting wrong. > > > > Regards > > Daniel ROwe > > > >

2 1

[Dovecot] SQL + AUTH command bug?
by Andrew Hutchings 10 Dec '04

10 Dec '04

Hi, While investigating the problem with Thunderbird auths I found the following happening: Escape character is '^]'. +OK Dovecot ready. CAPA +OK CAPA TOP USER UIDL RESP-CODES PIPELINING SASL PLAIN . AUTH PLAIN + + + -ERR Authentication failed. This is what is happening during a Thunderbird connection, when each '+' happens dovecot does an sql query on the sql server for user '?'. This was asserting mech.c until Timo did the bugfix last night. I currently have dovecot authing via 3 separate sql password tables as it is a migration from 3 old servers. If you try any other auth method (which shouldn't work anyway in my case) it doesn't talk to the SQL servers and just comes back as: -ERR Authentication failed. Regards Andrew -- Andrew Hutchings Systems Operator / Developer / Linux Guru Netserve Consultants Ltd. http://www.domaincity.co.uk/

5 10

Re: [Dovecot] When the 1.0 release is planed?
by Kim Culhan 10 Dec '04

10 Dec '04

On Thu, December 9, 2004 15:07, Andrew Velikoredchanin said: > Wouter Van Hemel: > >>> >>> What part of 1.0-test now not fully tested? >>> >>> >>> >> >> For me, the latest test releases have been pretty stable. But if you're >> not going to offer imap, you might as well run a simple pop server such as popa3d >> (http://www.openwall.com/popa3d/) It's quite secure AFAIK -- >> at least, it's written by Solar Designer and uses a multiple-fork model. > > No. popa3d not support mysql userdb. :( > > >> But it probably would help dovecot if you would give the test releases a >> try, the last bugs (if any) are hardest to find. That way, you would have a stable dovecot >> sooner. > > Yes, of couse. FWIW, dovecot CVS (development version) has been running here for several weeks with pop3s users having no problems we can find. -kim' __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

4 4

[Dovecot] Exim4 authentication patch
by Andrey Panin 10 Dec '04

10 Dec '04

Hello all, attached patch makes possible to use dovecot as an authentication backend for Exim 4. Reasons beyond this patch are simple: exim's authenticators require use of plaintext passwords and NTLM code in exim is quite outdated and hairy. Patch generated against Exim 4.43, but should apply to earlier versions too. Patch adds new 'dovecot' authenticator, which can be used as such: ntlm: driver = dovecot public_name = NTLM server_socket = /var/authentication_socket_path server_set_id = $1 cram: driver = dovecot public_name = CRAM-MD5 ... Authenticator has only one parameter 'server_socket', it's value used as path for dovecot's authentication socket. Authenticator can be used for server authentication only. Hope it will be useful for someone. Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke(a)donpac.ru | PGP key: wwwkeys.pgp.net

2 1