Re: [Dovecot] Plugin development question

2007-08-24 Thread Gary Smith
> I think you should begin with Dovecot v1.1 code which makes it a lot
> easier. It has Cydir format that is really simple and serves as a
> pretty good example of how to implement a new backend.
> 
> Cydir is a mail_storage backend, but you'll probably need to also
> implement mailbox_list backend. Shouldn't be too difficult by looking
> at FS and Maildir++ backends I think.
> 
> By database do you mean SQL or something else? I've beginnings of SQL
> backend plugin already, but I don't remember if it was for v1.0 code
or
> some version of v1.1. http://dovecot.org/patches/mail-sql.tar.gz

Timo, 

Thanks for the information.  I can't go too much into the project but
yes, SQL is one of the stores.  This will definitely be helpful.  I will
download the 1.1 codebase and also take a look at your mail-sql patch as
a foundation for what I'm doing.

Gary


[Dovecot] Authentication using only TLS client certificates

2007-08-24 Thread Martin Lambers
Hi!

I'd like to configure dovecot to use only TLS client certificates for
authentication. After the user presented a client certificate and that
certificate was verified, no password-based authentication should be
necessary anymore.

Is this currently possible? Or would this require support for the SASL
EXTERNAL mechanism?

Regards,
Martin


Re: [Dovecot] Plugin development question

2007-08-24 Thread Timo Sirainen
On Fri, 2007-08-24 at 12:57 -0700, Gary Smith wrote:
> Hello, 
> 
> >From what I have read on the dovecot site, it's possible to create a
> plugin for a custom data store format.  We have emails in a custom
> format in a database and would like to create a plugin for accessing
> these emails through dovecot.  
> 
> Is there any supporting documentation from creating a plugin like this?
> Are there any samples?

I think you should begin with Dovecot v1.1 code which makes it a lot
easier. It has Cydir format that is really simple and serves as a pretty
good example of how to implement a new backend.

Cydir is a mail_storage backend, but you'll probably need to also
implement mailbox_list backend. Shouldn't be too difficult by looking at
FS and Maildir++ backends I think.

By database do you mean SQL or something else? I've beginnings of SQL
backend plugin already, but I don't remember if it was for v1.0 code or
some version of v1.1. http://dovecot.org/patches/mail-sql.tar.gz



signature.asc
Description: This is a digitally signed message part


[Dovecot] Plugin development question

2007-08-24 Thread Gary Smith
Hello, 

>From what I have read on the dovecot site, it's possible to create a
plugin for a custom data store format.  We have emails in a custom
format in a database and would like to create a plugin for accessing
these emails through dovecot.  

Is there any supporting documentation from creating a plugin like this?
Are there any samples?

TIA, 

Gary


Re: [Dovecot] Dovecot IMAP/POP3 Proxy with LDAP

2007-08-24 Thread Raphael Costa

Timo,

That was what I've done. It works...

pass_attrs =
uid=user,userPassword=password,qmailUID=proxy,mailHostAddress=host


Thanks,

On Fri, 2007-08-24 at 20:13 +0300, Timo Sirainen wrote:

> On Fri, 2007-08-17 at 11:18 -0300, Raphael Bittencourt S. Costa wrote:
> > Aug 17 09:22:29 bastion01 dovecot: auth(default):
> > ldap([EMAIL PROTECTED],10.0.1.1): result: qmailUID(proxy)=1033
> > mailHost(host)=mailserver-01..com.br
> > uid(user)[EMAIL PROTECTED]
> 
> It doesn't show "proxy" field in here.
> 
> > Aug 17 09:22:29 bastion01 dovecot: auth(default):
> > ldap([EMAIL PROTECTED],10.0.1.1): bind:
> > dn=cn=raphael.costa,ou=.com.br,ou=accounts,o=comMail
> > 
> > Aug 17 09:22:29 bastion01 dovecot: auth(default): client out: OK
> > 1   [EMAIL PROTECTED]   proxy
> > host=mailserver-01..com.br  pass=
> 
> But "proxy" is here anyway. How? What configuration do you have now in
> pass_attrs?
> 
> Also "host" needs to be an IP address, because no DNS lookup is done.
> 
> > Aug 17 09:22:29 bastion01 dovecot: auth(default): master in: REQUEST
> > 1   18709   1
> 
> So I don't really understand why it gets this far. It shouldn't do this
> if "proxy" field is set.
> 


Re: [Dovecot] [PATCH] Deliver doesn't enforce userdb quotas

2007-08-24 Thread Timo Sirainen
On Thu, 2007-08-23 at 14:28 +0200, Sergio Lopez wrote:
> While configuring the latest stable version of Dovecot (1.0.3), I've
> noticed that "deliver" always uses the quota arguments found in the
> configuration file, completely ignoring what userdb sends to it through
> the authentication service. This doesn't happen in the previous version
> I was used (1.0.rc15, comes with Debian "etch").

Unless you really need default quota, there's no need to have quota
defined in plugin section.

Anyway, I fixed this now properly for everything:
http://hg.dovecot.org/dovecot-1.0/rev/bc2b06d0fba6

I guess it's time for v1.0.4 soon.



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Dovecot should raise the limit of file descriptors at startup...

2007-08-24 Thread Timo Sirainen
On Fri, 2007-08-24 at 20:51 +0300, Timo Sirainen wrote:
> On Tue, 2007-08-21 at 15:08 +0200, Peter Eriksson wrote:
> > Perhaps the Dovecot master process should raise it's own limit to the
> > allowed maximum when it starts? (getrlimit()+setrlimit()), or be
> > user configurable?
> 
> I guess this could be a good idea. Added to v1.1: 
> http://hg.dovecot.org/dovecot/rev/0e08960275f8
> http://hg.dovecot.org/dovecot/rev/c6d6ce742a82

And fixes.. http://hg.dovecot.org/dovecot/rev/5ebf96e37a39



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Dovecot should raise the limit of file descriptors at startup...

2007-08-24 Thread Timo Sirainen
On Tue, 2007-08-21 at 15:08 +0200, Peter Eriksson wrote:
> Perhaps the Dovecot master process should raise it's own limit to the
> allowed maximum when it starts? (getrlimit()+setrlimit()), or be
> user configurable?

I guess this could be a good idea. Added to v1.1: 
http://hg.dovecot.org/dovecot/rev/0e08960275f8
http://hg.dovecot.org/dovecot/rev/c6d6ce742a82



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Kmail client desconnection

2007-08-24 Thread Timo Sirainen
On Fri, 2007-08-10 at 09:35 +0200, Jordi Espasa Clofent wrote:
> Hi all,
> 
> I have a Postfix+Dovecot working in beta/testing; it seems to run very 
> fine, but one beta-tester user says that kmail informs him about 
> frequent desconnections.

Check what logs show as the disconnection reason for the user. If there
is only "Disconnected", it means the connection somehow got
disconnected.



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Log format question...

2007-08-24 Thread Timo Sirainen
On Mon, 2007-08-13 at 18:44 -0600, Mike Cisar wrote:
> auth_username_format = %n

This setting drops the domain part permanently.

> passdb passwd-file {
>   args = /etc/vmail/shadow.%l
> }
> userdb passwd-file {
>   args = /etc/vmail/passwd.%l
> }

Unfortunately you can't tell Dovecot to look up only username from these
files without dropping the domain..

Perhaps it would be possible to set back the domain in these files
though. You could try adding "[EMAIL PROTECTED]" to extra fields in
shadow. Or "[EMAIL PROTECTED]" in passwd.



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] max_mail_processes

2007-08-24 Thread Timo Sirainen
On Wed, 2007-08-15 at 11:24 +0800, Tony Tsang wrote:
> Hello,
> 
> I have some doubts about max_mail_process option on dovecot.conf. When
> I set to 3, only 2 clients can be logged in at the same time. when I
> set it to 2, only 1 clients can be logged in. Why is the maximum
> number of concurrent clients is always 1 less than max_mail_process?

I can't reproduce this. If I set it to 2, I can create two connections.
Are you sure your clients just didn't create two connections?

> Is any other process is also counted as mail_process other than imap
> and pop3?

Only imap and pop3 are counted.



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Dovecot IMAP/POP3 Proxy with LDAP

2007-08-24 Thread Timo Sirainen
On Fri, 2007-08-17 at 11:18 -0300, Raphael Bittencourt S. Costa wrote:
> Aug 17 09:22:29 bastion01 dovecot: auth(default):
> ldap([EMAIL PROTECTED],10.0.1.1): result: qmailUID(proxy)=1033
> mailHost(host)=mailserver-01..com.br
> uid(user)[EMAIL PROTECTED]

It doesn't show "proxy" field in here.

> Aug 17 09:22:29 bastion01 dovecot: auth(default):
> ldap([EMAIL PROTECTED],10.0.1.1): bind:
> dn=cn=raphael.costa,ou=.com.br,ou=accounts,o=comMail
> 
> Aug 17 09:22:29 bastion01 dovecot: auth(default): client out: OK
> 1   [EMAIL PROTECTED]   proxy
> host=mailserver-01..com.br  pass=

But "proxy" is here anyway. How? What configuration do you have now in
pass_attrs?

Also "host" needs to be an IP address, because no DNS lookup is done.

> Aug 17 09:22:29 bastion01 dovecot: auth(default): master in: REQUEST
> 1   18709   1

So I don't really understand why it gets this far. It shouldn't do this
if "proxy" field is set.



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Dovecot IMAP/POP3 Proxy with LDAP

2007-08-24 Thread Timo Sirainen
On Thu, 2007-08-16 at 18:58 -0300, Raphael Bittencourt S. Costa wrote:

> Aug 16 16:22:36 bastion01 dovecot: auth(default): client out: OK
> 2   [EMAIL PROTECTED]
> host=mailserver-01..com.br

So it's returning host, but not proxy.

> pass_attrs =
> uid=user,userPassword=password,mailMessageStore=userdb_home,qmailUID=userdb_uid,qmailGID=userdb_gid,proxy,mailHost=host

You'll need to make this query return "proxy" field. I guess you don't
currently have "proxy" in your LDAP schema? Maybe mailHost=proxy would
work.



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Dovecot on different server than MTA

2007-08-24 Thread Timo Sirainen
On Mon, 2007-08-20 at 07:54 +0200, Geert Hendrickx wrote:
> would you be interested in implementing an LMTP interface for deliver?

Yes, but I'm interested in implementing many other things first. :)



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Couldn't init INBOX: BUG: Unknown internal error

2007-08-24 Thread Timo Sirainen
On Mon, 2007-08-20 at 09:56 +0200, Philipp Schmid wrote:
> hi,
> 
> I'm getting quite a few of these in the logs of our new dovecot mail  
> server:
> 
> Aug 20 09:50:03 mail2 dovecot: POP3(vwc406): Couldn't init INBOX: BUG:  
> Unknown internal error
> Aug 20 09:50:03 mail2 dovecot: POP3(vwc406): Mailbox init failed  
> top=0/0, retr=0/0, del=0/0, size=0

Do these patches make it log something more:

http://hg.dovecot.org/dovecot-1.0/rev/2c3124d7d2c2
http://hg.dovecot.org/dovecot-1.0/rev/68f23f982234

> any idea what the cause might be or how I can fix it?

Are there symlinks in new/ or cur/ that point to nonexisting files?



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Log Message Disconnected: Disconnected

2007-08-24 Thread Timo Sirainen
On Fri, 2007-08-24 at 19:20 +0300, Timo Sirainen wrote:
> > Aug 17 04:54:08 host dovecot: IMAP(uname): Disconnected: Disconnected
> > Aug 17 05:24:09 host dovecot: IMAP(uname): Disconnected: Disconnected
> > 
> > The disconnected messages for other users say "Disconnected: Logged Out".
> > I don't know for sure if these messages are related to his problem.  
> > Can anyone can shed some light on why Dovecot might indicate a "double
> > disconnect"?  
> 
> "Disconnected" means simply that the kernel told Dovecot that the
> connection got disconnected. The client didn't log out, and the
> connection wasn't idling over 30 minutes.

Well, this might log something more, but probably not:
http://hg.dovecot.org/dovecot-1.0/rev/a732e4d09ea3



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Log Message Disconnected: Disconnected

2007-08-24 Thread Timo Sirainen
On Thu, 2007-08-23 at 14:09 -0600, Jackie Hunt wrote:
> We just started running Dovecot this summer at our campus.
> Overall things have gone very well, and performance have
> improved since moving off of U of Wash.
> 
> We have run into an issue with a user running Thunderbird 
> 2.0.0.6 on Solaris.  He is seeing a very long response time (20mins+)
> on his first mailbox selection each morning when he comes into 
> work. 

You could set auth_verbose=yes to see if the problem is before or after
authentication.

> I looked at the Dovecot log, and the only think I can see that
> might be a bit out of the ordinary is two Disconnected messages
> that happen about 30 minutes apart each morning:
> 
> Aug 17 04:54:08 host dovecot: IMAP(uname): Disconnected: Disconnected
> Aug 17 05:24:09 host dovecot: IMAP(uname): Disconnected: Disconnected
> 
> The disconnected messages for other users say "Disconnected: Logged Out".
> I don't know for sure if these messages are related to his problem.  
> Can anyone can shed some light on why Dovecot might indicate a "double
> disconnect"?  

"Disconnected" means simply that the kernel told Dovecot that the
connection got disconnected. The client didn't log out, and the
connection wasn't idling over 30 minutes.



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Enabling IMAP namespaces for existing folders

2007-08-24 Thread Timo Sirainen
On Tue, 2007-08-21 at 16:24 -0400, Phil Edwards wrote:
> We'd like to start taking advantage of shared IMAP folders.  I've
> been 
> reading over the dovecot wiki and have only one question that I don't 
> see documented.  The docs point out that if we define any namespaces, we 
> must also explicitly define the private previously-default one.  My 
> question is:  are there any migration or transition steps that must be 
> taken there?  Will clients' configuration need to be modified in any way 
> when, e.g., their existing IMAP folders suddenly become part of a 
> private namespace?

Even though you didn't explicitly create a namespace, Dovecot internally
created it for you. So as long as you create an identical namespace your
clients don't see any difference. The identical namespace can be created
easily:

namespace private {
}

(or at least I'm pretty sure it fills out the defaults by itself)



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] rule of thumb for indexing overhead

2007-08-24 Thread Timo Sirainen
On Wed, 2007-08-22 at 21:55 -0700, WJCarpenter wrote:
> I realize it's hard to be precise about this, but does anyone have a
> feel or rule of thumb for a couple of aspects of indexing overhead?
> 
> 1.  Proportionally, how much space does it take for all 4 files?  If I
> want to give my users a quota of 100 MB for messages, how much real
> space should I plan for so that I won't run out of space for indexing?

It really depends on what IMAP client is being used. Something like
10-20% maybe.

> 2.  What's the overhead in rebuilding index files?  Suppose I use an
> LDA other than dovecot, so at least the INBOX index is frequently
> getting out of date.  Does it cost much (in CPU, memory, and disk IO)
> to rebuild the index files?  (I'm using maildir.)

Indexes aren't normally "rebuilt", they're "updated". And the update
overhead is practically nothing with maildir.

I just wrote this: http://wiki.dovecot.org/LDA/Indexing



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] SSL connections frozen on Dovecot 1.0.0

2007-08-24 Thread Timo Sirainen
On Thu, 2007-08-23 at 14:24 +0200, Thibault VINCENT wrote:
> - First case : s_client hangs on the first output "CONNECTED(0003)" and 
> there is no handshake at all;
> - Second case : like the first but the handshake starts after a few minutes;
> - Third case : the handshake goes fine but the "OK" server banner is never 
> sent (no response to commands);
> - Fourth case : the greeting banner is received but dovecot will never answer.
> 
> The configuration file is almost identical to the default and SSL certificate 
> is not the autogenerated one.
> Log files do not show dying process.

You could strace imap-login process to see what it's doing while the
connection is hanging, and what changes when the handshake starts. Set
login_processes_count=1 to make it easier to figure out what imap-login
process to strace.



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] removing IMAP keywords?

2007-08-24 Thread Timo Sirainen
On Fri, 2007-08-24 at 08:53 +0200, martin f krafft wrote:
> also sprach Kyle Wheeler <[EMAIL PROTECTED]> [2007.08.23.2103 +0200]:
> > Check out section 9, Formal Syntax. Specifically, "flag-keyword", which is 
> > defined to be an "atom", which is a sequence of ANY character except the 
> > "atom-specials". In other words, a flag-keyword is a string of one or more 
> > characters, not including (, ), {, " ", control characters, %, *, ", \, and 
> > ].
> 
> So this would mean we could use UTF-7 (RFC 2152) to encode pretty
> much anything in those tags.

It could be a good idea to talk about it first in imap-protocol list to
see if other people have better ideas.

> Is there a maximum length? I could not tell from the document.

No. Dovecot has a setting for the maximum length, which is 50 by
default. UW-IMAP has a limit of 30 I think. I don't know about others.

As for removing keywords, I was planning on implementing it for v1.1,
but it got delayed. The idea was anyway that if keyword is unused it
would be removed automatically after a while, possibly only if the
Maildir's 26 keyword limit is reached. I hadn't thought about exact
rules yet. In any case there is no IMAP command for it.



signature.asc
Description: This is a digitally signed message part


[Dovecot] How do I use sieve to move bounces?

2007-08-24 Thread Jef Driesen
How can I use sieve to move bounces and non delivery reports (i.e. 
anything with an empty envelope from) to a special mailbox? I placed 
this snippet at the start of my sieve script


require ["envelope", "fileinto"];
if envelope :is "from" "" {
fileinto "INBOX.Reports";
stop;
}

But mails are not moved to the reports mailbox, and they are still 
processed by the rest of the script.




Re: [Dovecot] Sieve Vacation cause deliver to die

2007-08-24 Thread Steffen Kaiser

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Fri, 24 Aug 2007, kc wrote:


Still having error with vacation. Compile ok, but run error!


At 13. Aug I gave you some hints in order to debug the permissions of your 
setup. I do not see no reply on it.



The script is ok, otherwise it cannot be compile. It will generate an error
log instead.


Aha. I hinted whether or not the compiled script used really is the
compilation of the script. Didst you verified it using sieved?

Bye,

- -- 
Steffen Kaiser

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBRs6B2S9SORjhbDpvAQJ0WAf+IRoF+M85LEh/sWcLQZqnfZRYdGHbcaAM
xbInorNg+WQMly84vvEged/vIFLPjbCULz+sSp32DH2GVljEdGu8VpSIRVpmpHS+
ocdwWw3V8VlE1YEWQqf4wFgFBrmsfcr5DD2ksEoQzGow9yL5+SNhZ8fF0qmUnoyG
WScrFFGkiMmHxYxyeVK3ZPgJvhK0ljiweIa+m7s7L86Oj/N+JlxKbjol1aH6lR/+
dpBCtG+z3wufXe3z1TscBb0rdUZH4/tCW8lba0bmDHjJG+m53P089PM7QTafn+HS
EZ/gaKmF52E+jUupJDLDe8wiTv8vCEjlT9UNWIFP9tBJSoXZyaoLtw==
=6SYE
-END PGP SIGNATURE-