Re: [Dovecot] smartsieve managesieve-login failure with dovecot 2.1.7

2013-10-08 Thread Simon B
On 8 Oct 2013 07:50, Wouter Berkepeis wou...@private-lotus.org wrote:

 Hello Benny,

 Thanks for your response. Ingo looks promising to me as a sufficient
 solution, but on the Ingo site one of the stated prerequisites is :

 (start quote)

 To function properly, Ingo *requires* the following:

 A working Horde installation

 Ingo runs within the Horde Application Framework
 http://www.horde.org/apps/horde, a set of common tools for web
 applications written in PHP. You must install Horde before installing
Ingo.

 (end quote)

 So, if I can install Ingo without Horde as you say, I would be more then
 happy.

 Btw, my remark about the LDAP authentication with Squirrelmail being too
 tricky to implement maybe wasn't described right. What I meant was it's
 not worth the efforts installing all this, just to be able to manage
 sieve filters from inside another program. I have installed Squirrelmail
 for just being able to look now and then at my e-mail at public places,
 I don't use it frequently.

 Anyway, thanks for your little help. :-)

A working horde installation is in this case the horde package.  If you
don't need to install webmail, address book, calendar, tasks, you don't
have to. Let alone the wiki, photo gallery, bookmark manager or ticket
interface.

Just install horde and Ingo and be done.

You may find it useful to install imp too -to take care of the
authentication, but you don't have to show it to the user.

And installing by pear couldn't be easier.  Why do you need a  debian
package?

Simon


Re: [Dovecot] smartsieve managesieve-login failure with dovecot 2.1.7

2013-10-08 Thread Benny Pedersen

Wouter Berkepeis skrev den 2013-10-08 07:49:
So, if I can install Ingo without Horde as you say, I would be more 
then

happy.


yes ingo needs horde framework, but not the full horde problem to run

Btw, my remark about the LDAP authentication with Squirrelmail being 
too

tricky to implement maybe wasn't described right.


you dont need auth in squirrelmail, its imap auth in the first place


What I meant was it's
not worth the efforts installing all this, just to be able to manage
sieve filters from inside another program. I have installed 
Squirrelmail
for just being able to look now and then at my e-mail at public 
places,

I don't use it frequently.


if all needed tools is missing in debian why use it ?

create a launchpad bug of have ingo installed via apt-get will be next 
step



Anyway, thanks for your little help. :-)


no problem



Re: [Dovecot] Transparent Migration from cyrus to dovecot

2013-10-08 Thread Jogi Hofmüller
Hi Ed,

Thanks for the encouragement!

Am 2013-10-06 22:56, schrieb Ed W:
 Make use of the proxy feature.  You can add a server entry into your
 userdb, that way you can literally move users over one by one and flip
 their server location.  You can easily test individual users and move
 them over individually.

One question still remains in my head.  The migration/dsync page [1]
states that 'The source IMAP/POP3 mailboxes shouldn't be modified while
dsync is running. Also dsync backup means that if the destination has
any changes that don't exist in source IMAP server, the changes are
deleted.'  So how does the setup behave *while* I migrate a user's mail?

I figured that I would start with a proxy entry for every user.  Then
disabling proxy for the first mailbox and start migrating it.  So new
mail would be delivered to the newly created dovecot mailbox while all
the mail from the old server would start appearing.  From the quote
above I take it that new mail *could* disappear.

OK, this is all still theory since I have not done any tests.  However,
the more I know beforehand, the better the process will work, I hope ;)

[1]  http://wiki2.dovecot.org/Migration/Dsync

Cheers!
-- 
j.hofmüller

Optimism doesn't alter the laws of physics. - Subcommander T'Pol



signature.asc
Description: OpenPGP digital signature


[Dovecot] cas proxy ticket as password

2013-10-08 Thread b m
Hi everybody. Hi I'm tryingto use CAS for authenticating in dovecot. I have 
installed pam_cas and when I try castest i get cas:authenticationSuccess 
for my service (imaps://mywebmail.com) But when I actually try to login, 
dovecot uses the PT from the cas server as password. Any ideas what I'm missing?
Thanks a lot.

Re: [Dovecot] SSL with startssl.com certificates

2013-10-08 Thread Dan Langille

On 2013-10-07 13:57, Bruno Tréguier wrote:

Le 06/10/2013 à 22:42, Dan Langille a écrit :
After a long delay, I'm ready to tackle this again.

[...]
Testing via the command line gives:

$ openssl s_client -connect imaps.unixathome.org:993
CONNECTED(0003)
depth=2 C = IL, O = StartCom Ltd., OU = Secure Digital Certificate 
Signing, CN = StartCom Certification Authority

verify error:num=19:self signed certificate in certificate chain
verify return:0

Ok, this is fine, and different from the result you were getting a few
weeks ago. Your cert chain is ok, it seems. The errornum=19:self 
signed

certificate in certificate chain is a normal errot, due to the fact
that you didn't tell openssl where to find a list of valid root certs.


All looks good.

/var/log/maillog shows:

Oct  6 20:06:28 imaps dovecot: imap-login: Login: user=dan, 
method=PLAIN, rip=98.111.147.220, lip=199.233.228.197, mpid=81052, TLS, 
session=fYUwEhjoVgBib5Pc
Oct  6 20:08:21 imaps dovecot: imap(dan): Disconnected: Logged out 
in=26 out=691



I have Thunderbird working just fine on my Macbook.

But my goal is mail.app on my iPhone and my Macbook.  When they try to 
connect, the mail server logs are:


Oct  6 20:20:25 imaps dovecot: imap-login: Warning: SSL failed: 
where=0x2002: SSLv3 read client certificate A [98.111.147.220]
Oct  6 20:20:25 imaps dovecot: imap-login: Disconnected (no auth 
attempts in 1 secs): user=, rip=98.111.147.220, lip=199.233.228.197, 
TLS handshaking: Disconnected, session=Ux8HRBjo7QBib5Pc


Yet, the same iPhone and Macbook connect fine to a dovecot 1.2.17 
installation.  That's my current IMAP server.  I'm moving to another 
server and failing so far.


Suggestions to use another client app or platform will not be 
entertained, because, clearly, this works with dovecot 1.


Well, sorry but no further suggestions as far as I'm concerned then,
except that some people tend to think that mail.app is pretty crappy 
and

behaves quite strangely in certain situations...


I have given up. As much as I'd like to solve this problem, I must move 
on.  I will resort to self-signed certificates.[1]  I had hoped to 
resolve the issue so that others can use the solution.


My thanks to those that have offered suggestions and help.

[1] - FYI, I am the only user of this IMAP server.

--
Dan Langille - http://langille.org/


[Dovecot] POP3 Setup help

2013-10-08 Thread Thomas I Higgins


I am lost as to what I am missing.  I am setting up dovecot 2.0.9 on a RHEL
6.4 machine as provided by my provider.  I have IMAP up and running, and I
have POP3 up and running.  Testing confirms this.  Also, if it makes a
difference, I enabled dovecot as my LDA.  Sendmail was setup as well due to
our 1.x version using it and I though I had to.  Anyway, everything is
working perfectly with the services, except the mail is sending to the
wrong location for POP.  I am trying to use Maildir for both services, but
it keeps delivering the POP3 mail to /var/spool/mail/u% instead of to
Maildir as specified in the configuration files.  I have rechecked every
setting at least twice and still can't see what I am doing wrong.  I
suppose I can use mbox and redirect after making the appropriate namespace
changes, but that has it's own potential drawbacks and seems more like a
kludge than the correct way around this (unless I misunderstand how it
should work).  Can anyone point me in the right direction on how to fix
this?

Thanks in advance,

Thomas Higgins

Re: [Dovecot] SSL with startssl.com certificates

2013-10-08 Thread Dan Langille

On Oct 8, 2013, at 8:59 AM, Dan Langille wrote:

 On 2013-10-07 13:57, Bruno Tréguier wrote:
 Le 06/10/2013 à 22:42, Dan Langille a écrit :
 After a long delay, I'm ready to tackle this again.
 [...]
 Testing via the command line gives:
 $ openssl s_client -connect imaps.unixathome.org:993
 CONNECTED(0003)
 depth=2 C = IL, O = StartCom Ltd., OU = Secure Digital Certificate Signing, 
 CN = StartCom Certification Authority
 verify error:num=19:self signed certificate in certificate chain
 verify return:0
 Ok, this is fine, and different from the result you were getting a few
 weeks ago. Your cert chain is ok, it seems. The errornum=19:self signed
 certificate in certificate chain is a normal errot, due to the fact
 that you didn't tell openssl where to find a list of valid root certs.
 All looks good.
 /var/log/maillog shows:
 Oct  6 20:06:28 imaps dovecot: imap-login: Login: user=dan, method=PLAIN, 
 rip=98.111.147.220, lip=199.233.228.197, mpid=81052, TLS, 
 session=fYUwEhjoVgBib5Pc
 Oct  6 20:08:21 imaps dovecot: imap(dan): Disconnected: Logged out in=26 
 out=691
 I have Thunderbird working just fine on my Macbook.
 But my goal is mail.app on my iPhone and my Macbook.  When they try to 
 connect, the mail server logs are:
 Oct  6 20:20:25 imaps dovecot: imap-login: Warning: SSL failed: 
 where=0x2002: SSLv3 read client certificate A [98.111.147.220]
 Oct  6 20:20:25 imaps dovecot: imap-login: Disconnected (no auth attempts in 
 1 secs): user=, rip=98.111.147.220, lip=199.233.228.197, TLS handshaking: 
 Disconnected, session=Ux8HRBjo7QBib5Pc
 Yet, the same iPhone and Macbook connect fine to a dovecot 1.2.17 
 installation.  That's my current IMAP server.  I'm moving to another server 
 and failing so far.
 Suggestions to use another client app or platform will not be entertained, 
 because, clearly, this works with dovecot 1.
 Well, sorry but no further suggestions as far as I'm concerned then,
 except that some people tend to think that mail.app is pretty crappy and
 behaves quite strangely in certain situations...
 
 I have given up. As much as I'd like to solve this problem, I must move on.  
 I will resort to self-signed certificates.[1]  I had hoped to resolve the 
 issue so that others can use the solution.
 
 My thanks to those that have offered suggestions and help.
 
 [1] - FYI, I am the only user of this IMAP server.


The problem *may* be with 4096 bit certificates. I've been able to connect with 
a 2048-bit, but not with a 4096-bit.

More testing to be done.

-- 
Dan Langille - http://langille.org



Re: [Dovecot] POP3 Setup help

2013-10-08 Thread Noel Butler

On 09/10/2013 03:40, Thomas I Higgins wrote:
I am lost as to what I am missing.  I am setting up dovecot 2.0.9 on a 
RHEL
6.4 machine as provided by my provider.  I have IMAP up and running, 
and I

have POP3 up and running.  Testing confirms this.  Also, if it makes a
difference, I enabled dovecot as my LDA.  Sendmail was setup as well 
due to

our 1.x version using it and I though I had to.  Anyway, everything is
working perfectly with the services, except the mail is sending to the
wrong location for POP.  I am trying to use Maildir for both services, 
but

it keeps delivering the POP3 mail to /var/spool/mail/u% instead of to
Maildir as specified in the configuration files.  I have rechecked 
every

setting at least twice and still can't see what I am doing wrong.  I
suppose I can use mbox and redirect after making the appropriate 
namespace
changes, but that has it's own potential drawbacks and seems more like 
a

kludge than the correct way around this (unless I misunderstand how it
should work).  Can anyone point me in the right direction on how to fix
this?

Thanks in advance,

Thomas Higgins


it's a lovely day here, but you must be far away and bad weather in 
between us, as my ESP doesnt seem to get through, so we'll have to 
revert to the old manual hard labour way by you executing doveconf -n , 
copy and pasting that output into a list reply.