Re: [Dovecot] Password authentication and character set

2008-11-19 Thread Geert Hendrickx
On Wed, Nov 19, 2008 at 08:44:21AM +0200, Fredrik Grönqvist wrote: Yes, I agree that it should be in UTF-8. My specific problem is that about 80% (a rough estimate) of our users are on either Windows or webmail. Those having passwords containing umlauts etc can log on, using their current

Re: [Dovecot] Password authentication and character set

2008-11-19 Thread Geert Hendrickx
On Wed, Nov 19, 2008 at 01:54:48PM +0200, Fredrik Grönqvist wrote: Thanks for the info, a setup like this is what I opted for eventually. I added a note to that wiki page that the query also needs to return the nopassword -field for Dovecot 1.1+ to accept the NULL password: Ok, good catch (I

Re: [Dovecot] Password authentication and character set

2008-11-19 Thread Fredrik Grönqvist
19.11.2008 14:33, Geert Hendrickx wrote: In case someone else is looking for info about this, this workaround works for DB backed accounts, as you mention, but will probably not work with an LDAP (or other) backend. Right, it's just a hack that fits your particular setup. :-) For a

Re: [Dovecot] Password authentication and character set

2008-11-19 Thread Fredrik Grönqvist
19.11.2008 10:27, Geert Hendrickx wrote: On Wed, Nov 19, 2008 at 08:44:21AM +0200, Fredrik Grönqvist wrote: Yes, I agree that it should be in UTF-8. My specific problem is that about 80% (a rough estimate) of our users are on either Windows or webmail. Those having passwords containing

Re: [Dovecot] Mail.app Subscriptions

2008-11-19 Thread Timo Sirainen
On Sun, 2008-11-16 at 20:44 -0500, Neil wrote: I've noticed that when I go to Account Info in Mail.app, and then to the Subscription List tab, Mail.app will spin for a bit, and then give up, without showing any folders and all the buttons are grayed out. Does anyone know if this a

Re: [Dovecot] Bug in 1.1.4: New line required in ACL files

2008-11-19 Thread Timo Sirainen
On Thu, 2008-11-13 at 16:38 +0100, [EMAIL PROTECTED] wrote: Hello, just wanted to notify you about a bug i found in 1.1.4 ACL handling: Global ACLs are ignored, when there is no line break (i.e. owner lr is ignored while owner lr\n works). I didn't track this down to see if the same happens

Re: [Dovecot] patch: list shared namespace

2008-11-19 Thread Timo Sirainen
On Mon, 2008-11-03 at 13:03 +0100, Bernhard Herzog wrote: As you can see, the non-existing foo.foo isn't returned because its child foo.foo.foo also matches the pattern and is returned. But the non-existing foo.bar is returned because its children don't match the pattern. It took me

[Dovecot] mail_privileged_group not working for dotlock files (1.1.6)

2008-11-19 Thread Rob Mangiafico
Hello, Running dovecot 1.1.6 on centOS 5 and RHEL 5. With the settings: pop3_lock_session = yes mail_privileged_group = mail mail_location = mbox:~/:INBOX=/var/spool/mail/%u mbox_read_locks = fcntl mbox_write_locks = dotlock fcntl and /var/spool/mail permissions: drwxrwx--x 2 root mail

Re: [Dovecot] v1.1.6 released

2008-11-19 Thread Adam McDougall
Just wanted to mention that 1.1.6 seems fine so far in our testing, and I think the lack of reported problems on the mailing list is probably a very good sign! Timo Sirainen wrote: http://dovecot.org/releases/1.1/dovecot-1.1.6.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.6.tar.gz.sig

Re: [Dovecot] patch: list shared namespace

2008-11-19 Thread Timo Sirainen
All of this is now implemented. I think shared mailboxes/ACLs are now fully working. The only thing left is to avoid calling acl_lookup_dict_rebuild() after each ACL change, but rather just update the dict directly with the changes. Hmm. Wonder how quota behaves with shared mailboxes.. That's

Re: [Dovecot] Solving CVE-2008-4870

2008-11-19 Thread Timo Sirainen
On Thu, 2008-11-13 at 15:57 +0200, Timo Sirainen wrote: On Nov 13, 2008, at 1:03 PM, Michal Hlavinka wrote: Hi, we're trying to solve CVE-2008-4870 = rhbz#436287 = dovecot.conf is world readable - possible password exposure. This problem seems to be little more complicated than we

[Dovecot] CRAM-MD5 and proxy_maybe

2008-11-19 Thread David Jonas
When using proxy_maybe CRAM-MD5 authentication fails when the connection is proxied. Is this expected behavior? Is proxy_maybe too simplified for this case? We're using SQL so I could rewrite the query with IFs to fake proxy_maybe and return the password as NULL and nologin as Y, but if it works

Re: [Dovecot] Unbreakable NFS locking issues...

2008-11-19 Thread Rod Treweek
Hi all, I've got an isolated test environment set up now, and am trying to figure out how to get the index files to populate. So far, I cannot seem to get them to appear in the /usr/local/dovecot/indexes directory as referenced below. Here is the sql string: [EMAIL PROTECTED] /usr/local/etc]#

[Dovecot] New message notification

2008-11-19 Thread Juan Asensio Sánchez
Hi What is the best option to notify a user that a message has arrived? The intention is to write a script that connects to a jabber server and checks if the user is online, so then a message is sent to user notifying him that he has received a new message. The solution should be compatible with

Re: [Dovecot] v1.1.6 released

2008-11-19 Thread Brian Hayden
On Nov 19 2008, Adam McDougall wrote: Just wanted to mention that 1.1.6 seems fine so far in our testing, and I think the lack of reported problems on the mailing list is probably a very good sign! We're running 1.1.4 in production on one machine, and have tried 1.1.5. and 1.1.6 in our test

Re: [Dovecot] New message notification

2008-11-19 Thread Stephan Bosch
Juan Asensio Sánchez schreef: Hi What is the best option to notify a user that a message has arrived? The intention is to write a script that connects to a jabber server and checks if the user is online, so then a message is sent to user notifying him that he has received a new message. The

Re: [Dovecot] v1.1.6 released

2008-11-19 Thread Timo Sirainen
On Nov 19, 2008, at 10:29 PM, Brian Hayden wrote: On Nov 19 2008, Adam McDougall wrote: Just wanted to mention that 1.1.6 seems fine so far in our testing, and I think the lack of reported problems on the mailing list is probably a very good sign! We're running 1.1.4 in production on one

Re: [Dovecot] v1.1.6 released

2008-11-19 Thread Brian Hayden
On Nov 19 2008, Timo Sirainen wrote: 3. Don't use mbox. :) Heh! We're on that route, but there are a lot of complicating factors (including lots of users who have to be handled very delicately through a conversion). -- Brian Hayden UMN OIT Internet Services

Re: [Dovecot] Unbreakable NFS locking issues...

2008-11-19 Thread Timo Sirainen
On Nov 19, 2008, at 9:01 PM, Rod Treweek wrote: password_query = SELECT username as user, password, concat('/NFS1MAILDIR/mailSysV2/', maildir) as userdb_home, concat('maildir:/NFS1MAILDIR/ mailSysV2/',maildir, ':INDEX=/usr/local/dovecot/indexes/',maildir) as userdb_mail, 143 AS userdb_uid,

Re: [Dovecot] CRAM-MD5 and proxy_maybe

2008-11-19 Thread Timo Sirainen
On Nov 19, 2008, at 8:14 PM, David Jonas wrote: When using proxy_maybe CRAM-MD5 authentication fails when the connection is proxied. Is this expected behavior? Is proxy_maybe too simplified for this case? Fails how? We're using SQL so I could rewrite the query with IFs to fake

Re: [Dovecot] CRAM-MD5 and proxy_maybe

2008-11-19 Thread David Jonas
Timo Sirainen wrote: On Nov 19, 2008, at 8:14 PM, David Jonas wrote: When using proxy_maybe CRAM-MD5 authentication fails when the connection is proxied. Is this expected behavior? Is proxy_maybe too simplified for this case? Fails how? We're using SQL so I could rewrite the query with

Re: [Dovecot] Unbreakable NFS locking issues...

2008-11-19 Thread Rod Treweek
Hi Timo, Thanks Timo. This is great. I followed your instructions, and sure enough, everything is working as expected now. Thank you very very much. One question I have, What's the advantage of using prefetch? Is this a considerable performance benefit, or is it just more or less another

Re: [Dovecot] Auth Issues - Urgent - Help!

2008-11-19 Thread David Cunningham
Well, most of my issues are gone with adding auth cache. However, I am having an issue. Sometimes, even though cache incorrect passwords is disabled, new passwords do not work. It would seem that once a user logs in with one password successfully the cache does not automatically retry