Re: External Program for Authentication?

2018-05-16 Thread Sami Ketola
> On 16 May 2018, at 22.18, Marc Perkel wrote: > > Is it possible to run a bash script for authentication where a 0 exit code > indicates success and a non-zero is failure? What I'm trying to do is create > a shadow IMAP server that authenticates against a different server.

Re: Maillog warning

2018-05-16 Thread forums
It"s good, no more message at the restart. --- ## Philippe - Forums Le 2018-05-16 22:23, Christian Kivalo a écrit : > On 2018-05-16 21:53, for...@mehl-family.fr wrote: > >> # DOVECOT -N >> >> ==> see attachment > This looks overly complicated for a doveconf-n output but it seems

Re: Maillog warning

2018-05-16 Thread Christian Kivalo
On 2018-05-16 21:53, for...@mehl-family.fr wrote: # DOVECOT -N ==> see attachment This looks overly complicated for a doveconf-n output but it seems to work... # GREP -B2 -A1 'MAIL_PLUGINS =' /ETC/DOVECOT/CONF.D/* /etc/dovecot/conf.d/10-mail.conf-#auth_socket_path =

Re: [ceph-users] dovecot + cephfs - sdbox vs mdbox

2018-05-16 Thread Webert de Souza Lima
Thanks Jack. That's good to know. It is definitely something to consider. In a distributed storage scenario we might build a dedicated pool for that and tune the pool as more capacity or performance is needed. Regards, Webert Lima DevOps Engineer at MAV Tecnologia *Belo Horizonte - Brasil* *IRC

Re: [ceph-users] dovecot + cephfs - sdbox vs mdbox

2018-05-16 Thread Webert de Souza Lima
Hello Danny, I actually saw that thread and I was very excited about it. I thank you all for that idea and all the effort being put in it. I haven't yet tried to play around with your plugin but I intend to, and to contribute back. I think when it's ready for production it will be unbeatable. I

Re: Maillog warning

2018-05-16 Thread forums
# DOVECOT -N ==> see attachment # GREP -B2 -A1 'MAIL_PLUGINS =' /ETC/DOVECOT/CONF.D/* /etc/dovecot/conf.d/10-mail.conf-#auth_socket_path = /var/run/dovecot/auth-userdb /etc/dovecot/conf.d/10-mail.conf-#mail_plugin_dir = /usr/lib/dovecot/modules /etc/dovecot/conf.d/10-mail.conf:#mail_plugins

Re: External Program for Authentication?

2018-05-16 Thread Christian Kivalo
On 2018-05-16 21:18, Marc Perkel wrote: Is it possible to run a bash script for authentication where a 0 exit code indicates success and a non-zero is failure? What I'm trying to do is create a shadow IMAP server that authenticates against a different server. That way my server will use the

Re: [ceph-users] dovecot + cephfs - sdbox vs mdbox

2018-05-16 Thread Danny Al-Gaaf
Hi, some time back we had similar discussions when we, as an email provider, discussed to move away from traditional NAS/NFS storage to Ceph. The problem with POSIX file systems and dovecot is that e.g. with mdbox only around ~20% of the IO operations are READ/WRITE, the rest are metadata IOs.

Re: Maillog warning

2018-05-16 Thread Christian Kivalo
On 2018-05-16 21:07, for...@mehl-family.fr wrote: OK. I renamed "conf.d/90-quota.conf" to "conf.d/13-quota.conf" and I have no more this message. This doesn't really fix your problem, you just removed the signs of it. The order of the files in /etc/dovecot/conf.d matters. Please provide the

Re: [ceph-users] dovecot + cephfs - sdbox vs mdbox

2018-05-16 Thread Webert de Souza Lima
Hello Jack, yes, I imagine I'll have to do some work on tuning the block size on cephfs. Thanks for the advise. I knew that using mdbox, messages are not removed but I though that was true in sdbox too. Thanks again. We'll soon do benchmarks of sdbox vs mdbox over cephfs with bluestore backend.

External Program for Authentication?

2018-05-16 Thread Marc Perkel
Is it possible to run a bash script for authentication where a 0 exit code indicates success and a non-zero is failure? What I'm trying to do is create a shadow IMAP server that authenticates against a different server. That way my server will use the same passwords as an existing server. So

Re: Maillog warning

2018-05-16 Thread forums
OK. I renamed "conf.d/90-quota.conf" to "conf.d/13-quota.conf" and I have no more this message. Thank's. --- ## Philippe - Forums Le 2018-05-16 20:53, Sami Ketola a écrit : >> On 16 May 2018, at 20.16, for...@mehl-family.fr wrote: >> >> I have comment the line... >> >> But

Re: Maillog warning

2018-05-16 Thread Christian Kivalo
On 2018-05-16 19:16, for...@mehl-family.fr wrote: I have comment the line... But now I see other warning : _WARNING: /ETC/DOVECOT/CONF.D/OLD-90-QUOTA.CONF LINE 39: GLOBAL SETTING MAIL_PLUGINS WON'T CHANGE THE SETTING INSIDE AN EARLIER FILTER AT /ETC/DOVECOT/CONF.D/15-LDA.CONF LINE 13 (IF

Re: Maillog warning

2018-05-16 Thread Sami Ketola
> On 16 May 2018, at 20.16, for...@mehl-family.fr wrote: > > I have comment the line... > > But now I see other warning : > > Warning: /etc/dovecot/conf.d/OLD-90-quota.conf line 39: Global setting > mail_plugins won't change the setting inside an earlier filter at >

dovecot + cephfs - sdbox vs mdbox

2018-05-16 Thread Webert de Souza Lima
I'm sending this message to both dovecot and ceph-users ML so please don't mind if something seems too obvious for you. Hi, I have a question for both dovecot and ceph lists and below I'll explain what's going on. Regarding dbox format (https://wiki2.dovecot.org/MailboxFormat/dbox), when using

Re: Maillog warning

2018-05-16 Thread forums
I have comment the line... But now I see other warning : _WARNING: /ETC/DOVECOT/CONF.D/OLD-90-QUOTA.CONF LINE 39: GLOBAL SETTING MAIL_PLUGINS WON'T CHANGE THE SETTING INSIDE AN EARLIER FILTER AT /ETC/DOVECOT/CONF.D/15-LDA.CONF LINE 13 (IF THIS IS INTENTIONAL, AVOID THIS WARNING BY MOVING THE

Re: Maillog warning

2018-05-16 Thread forums
I just have thus to comment on the line in the file? --- ## Philippe - Forums Le 2018-05-16 18:52, Sami Ketola a écrit : >> On 16 May 2018, at 19.49, for...@mehl-family.fr wrote: >> >> Hi, >> >> In my maillog I see this warning message at every reception of e-mail: >> >>

Re: Maillog warning

2018-05-16 Thread Sami Ketola
> On 16 May 2018, at 19.49, for...@mehl-family.fr wrote: > > Hi, > > In my maillog I see this warning message at every reception of e-mail: > > status=sent (delivered via dovecot service (doveconf: Warning: > /etc/dovecot/conf.d/90-quota.conf line 39: Global setting mail_plugins won't >

Maillog warning

2018-05-16 Thread forums
Hi, In my maillog I see this warning message at every reception of e-mail: _STATUS=SENT (DELIVERED VIA DOVECOT SERVICE (DOVECONF: WARNING: /ETC/DOVECOT/CONF.D/90-QUOTA.CONF LINE 39: GLOBAL SETTING MAIL_PLUGINS WON'T CHAN._ It is just a warning, the e-mail was delivered. I don't find

Re: 2.3.1 with quota and lmtp; message may be sent more than once

2018-05-16 Thread Frank Ebert
Hi, thank you very much for your reply. Your solution seems to be a good workaround, until the patch from Stephan is available. Since I activated this setting in postfix, the problem doesn't appear any more. Frank Am Tue, 1 May 2018 23:43:13 +0300 schrieb Christos Chatzaras

Re: 2.3.1 with quota and lmtp; message may be sent more than once

2018-05-16 Thread Frank Ebert
Thanx! Frank Am Tue, 15 May 2018 11:53:09 +0200 schrieb Stephan Bosch : > Op 14-5-2018 om 23:43 schreef Stephan Bosch: > > Op 14/05/2018 om 23:17 schreef Stephan Bosch: > >> > >> > >> Op 01/05/2018 om 10:12 schreef Frank Ebert: > >>> Hi, > >>> > >>> I have another

dovecot 2.3 on Ubuntu 18.04 LTS

2018-05-16 Thread Jean-Daniel Dupas
Hello, I'm running dovecot 2.3 from repo.dovecot.org on ubuntu 16.04 LTS, and I'm wondering if there is a scheduled date for the release of the bionic package in that repository. The Ubuntu mainstream version is based on the 2.2 branch, which prevent us to use it.

Dovecot send duplicated certificates when using ssl_alt_cert

2018-05-16 Thread Jean-Daniel Dupas
Hello, I'm running dovecot 2.3.1 (c5a5c0c82) and trying to experiment with using both RSA and ECDSA certificates. My configuration is as follow: ssl_alt_cert =

Re: end-to-end encryption

2018-05-16 Thread Gandalf Corvotempesta
Il giorno mer 16 mag 2018 alle ore 12:02 Aki Tuomi ha scritto: > To be strict, 'end to end' would mean that the SENDER would encrypt it > on his station, and RECEIVER would only decrypt it on his station. > Everything else is not end-to-end =) Yes, of course, but this

Re: Postfix/Dovecot permissions for new mailboxes

2018-05-16 Thread Aki Tuomi
https://wiki.dovecot.org/VirtualUsers/Home On 16.05.2018 13:42, telsch wrote: > Yes, this settings work as i expected, but i didn't found > documentation for > mail_home= > > Thanks > > On 15.05.2018 20:10, Aki Tuomi wrote: >> >> Well, that's not what I asked you to try... >> >> try >> >>

Re: Postfix/Dovecot permissions for new mailboxes

2018-05-16 Thread telsch
Yes, this settings work as i expected, but i didn't found documentation for mail_home= Thanks On 15.05.2018 20:10, Aki Tuomi wrote: Well, that's not what I asked you to try... try mail_home=/var/spool/mail/%u mail_location=mdbox:~/ Aki On 15 May 2018 at 20:03 telsch

Re: end-to-end encryption

2018-05-16 Thread Jochen Bern
On 05/16/2018 12:01 PM, Aki Tuomi wrote: > On 16.05.2018 12:56, Jochen Bern wrote: >> Considering the keywords "dovecot" and "sieve", that would still not be >> "end to end" and not even "MSA to MX"(-ish) but merely "encrypted >> storage upon/after final delivery", wouldn't it ... ? > > To be

Re: end-to-end encryption

2018-05-16 Thread Aki Tuomi
On 16.05.2018 12:56, Jochen Bern wrote: > On 05/16/2018 06:07 AM, Aki Tuomi wrote: >>> On 15 May 2018 at 22:43 Gandalf Corvotempesta >>> wrote: >>> Is possible to implement and end-to-end encryption with dovecot, where >>> server-side there is no private key to

Re: Re: end-to-end encryption

2018-05-16 Thread Jochen Bern
On 05/16/2018 06:07 AM, Aki Tuomi wrote: >> On 15 May 2018 at 22:43 Gandalf Corvotempesta >> wrote: >> Is possible to implement and end-to-end encryption with dovecot, where >> server-side there is no private key to decrypt messages? > > You could probably

Re: end-to-end encryption

2018-05-16 Thread tobisworld
Yes the server need to know the pubKey for encryption and the client need access to the privKey to decrypt. The correct pubKey is determined from gpg based on the rcpt address Cheers tobi Am 16.05.2018 um 11:30 schrieb Gandalf Corvotempesta: > Il giorno mer 16 mag 2018 alle ore 11:19

Re: end-to-end encryption

2018-05-16 Thread Gandalf Corvotempesta
Il giorno mer 16 mag 2018 alle ore 11:19 ha scritto: > I personally use gpgit https://github.com/EtiennePerot/gpgit > Which does the encryption of messages. Then I use a sieve script which > calls gpgit for every msg and encrypts before saving into mailbox If I understood

Re: end-to-end encryption

2018-05-16 Thread tobisworld
Hi I personally use gpgit https://github.com/EtiennePerot/gpgit Which does the encryption of messages. Then I use a sieve script which calls gpgit for every msg and encrypts before saving into mailbox Cheers tobi Am 16.05.2018 um 10:24 schrieb Gandalf Corvotempesta: > Il giorno mer 16 mag 2018

Re: end-to-end encryption

2018-05-16 Thread Gandalf Corvotempesta
Il giorno mer 16 mag 2018 alle ore 06:09 Aki Tuomi ha scritto: > You could probably automate this with sieve and e.g. GnuPG, which would mean that all your mails are encrypted without server having key to decrypt this. Any guide or sample to look for ?

Re: end-to-end encryption

2018-05-16 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 15 May 2018, Gandalf Corvotempesta wrote: I was looking at protonmail.com Is possible to implement and end-to-end encryption with dovecot, where server-side there is no private key to decrypt messages? Maybe the term "end-to-end