Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Noel Butler
On Thu, 2010-07-01 at 21:43 -0700, Frank Cusack wrote:

> On 7/1/10 9:59 AM +0200 Steffen Kaiser wrote:
> > I do _not_ argue about security here. I really wonder why some distros
> > still allow ssh-access by default for every user and some don't. Even a
> > virtual-user based setup requires system users, so one cannot ignore uid
> > related security either.
> 
> huh?  no virtual user system i've ever setup, or could conceive of, requires
> system users (above and beyond what the mail system inherently requires, of
> course).


*nods* 
I assumed Steffen was meaning "a"  system user, as in the singular user
that mail/dovecot etc runs under, ie "vmail"
afterall, if it required one SU per VU, it kind of defeats the purpose.

Of course Web is different, I agree one SU per virtual host, however
there SU is really irrelevant to the users, its used only for things
like suexec etc, where all auth and user activity etc is done via their
VU details.



Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Frank Cusack

On 7/1/10 9:59 AM +0200 Steffen Kaiser wrote:

I do _not_ argue about security here. I really wonder why some distros
still allow ssh-access by default for every user and some don't. Even a
virtual-user based setup requires system users, so one cannot ignore uid
related security either.


huh?  no virtual user system i've ever setup, or could conceive of, requires
system users (above and beyond what the mail system inherently requires, of
course).


Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Noel Butler
On Thu, 2010-07-01 at 18:16 -0400, Charles Sprickman wrote:

> On Thu, 1 Jul 2010, Noel Butler wrote:
> 
> > (I wrote a script to convert from vpopmail structure to a better
> > structure when we moved from that mess to postfix/dovecot/mysql a few
> > years back, that conversion, including moving mail took all of 45
> > minutes, most of that was copying mail, in the early days I did not like
> > nor trust postfix, but are with it today and wouldnt use anything else
> > again, in case I change jobs I've always kept my converting script hehe)
> 
> Sounds like something to publish on the Dovecot wiki. :)
> 


I guess I could hey, wouldn't take too much sanitising (removal of
company specific requirements on top of mail converting) I don't think.

it was generlly designed to open a CDB file or MySQL table, take core
components of that and add it to the vmail MySQL DB, get each users mail
from the domain/A/1/blah  type format and move it
to  /var/vmail/domain/?/?/?/user/Maildir,  where as an example, the ?'s
would translate to be /n/o/e/noel/Maildir/... the structure we use with
Dovecot using dovecots LDA, we don't use postfix's.



> (says the guy who's supposed to do a vpopmail conversion)

hehehe  away from, I hope :) ? CDB? already using MySQL?


<>

[Dovecot] do Dovecot userdb and passwd filles need to be postmap'd

2010-07-01 Thread Hans Neukomm
Hi all

I am unsure if dovecot files like userdb and passwd 
also need to be postmap'd

i.e.
postmap userdb
or
userdb passwd 

when I use the typical data format for creating userdp
postmap outputs the error

 >  postmap
userdb  
   
postmap: warning: userdb, line 1: expected format: key whitespace value 

a clarification is welcome

greetings

hans



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] dovecot: pop3-login: Internal login failure - howto add dovecot users that are NO server users

2010-07-01 Thread Hans Neukomm

after another day of reading various howtos and trying - still errors

 >  dovecot -n
# 1.2.9: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.31.12-0.2-default x86_64 openSUSE 11.2 (x86_64)
base_dir: /var/run/dovecot/
protocols: pop3
ssl: no
disable_plaintext_auth: no
login_dir: /var/run/dovecot//login
login_executable: /usr/lib/dovecot/pop3-login
login_greeting: Godmail ready.
mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u
mail_debug: yes
mail_executable: /usr/lib/dovecot/pop3
mail_plugin_dir: /usr/lib64/dovecot/modules/pop3
lda:
  postmaster_address: postmas...@kriyayoga.com
  hostname: kriyayoga.com
  mail_plugin_dir: /usr/lib64/dovecot/modules/lda
  auth_socket_path: /var/run/dovecot/auth-master
auth default:
  mechanisms: plain cram-md5
  debug_passwords: yes
  passdb:
driver: passwd-file
args: /etc/dovecot/passwd
  userdb:
driver: static
args: uid=303 gid=303 home=/var/spool/mail/home/%u


mail-log shows for ever login attempt (via telnet - from localhost OR
from remote)

---

Jul  2 06:04:40 kriyayoga dovecot: auth(default):
passwd-file(hans,124.108.51.96): lookup: user=hans
file=/etc/dovecot/passwd
Jul  2 06:04:40 kriyayoga dovecot: auth(default):
passwd-file(hans,124.108.51.96): unknown user
Jul  2 06:04:42 kriyayoga dovecot: auth(default): client out:
FAIL#0111#011user=hans
Jul  2 06:04:47 kriyayoga dovecot: pop3-login: Aborted login (auth
failed, 1 attempts): user=, method=PLAIN, rip=124.108.51.96,
lip=78.46.101.111
Jul  2 06:05:09 kriyayoga dovecot: pop3-login: Disconnected: Inactivity
(auth failed, 1 attempts): user=, method=PLAIN, rip=127.0.0.1,
lip=127.0.0.1, secured

---

my userdb file contains:

hansmyplaintext-password-here

---

the goal still is the most simple solid install using virutal users only
- opensuse 11.2 - postfix smtp - dovecot POP3 only

the most important goal is to have at least ONE user - me (hans) with
about half dozen aliases such as abuse@ info@ webmaster@ and a few other
mail alias

the next step could be - but no absolute requirement - to have a FEW
(max a dozen) other virtual mail users

any tip or help welcome


greetings

hans



On Wed, 2010-06-30 at 15:50 -0400, Brent Bloxam wrote:

> Hans Neukomm wrote:
> 
> > any help or pointer to a solution or howto setup dovecot pop3 accounts
> > for non-system users would be MOST welcome
> > 
> > 
> > greetings
> > 
> > hans
> > 
> 
> See here: http://wiki.dovecot.org/AuthDatabase/PasswdFile
> 
> If you still need help after reading over that, post output of `dovecot -n`
> 




signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Charles Sprickman

On Thu, 1 Jul 2010, Noel Butler wrote:


(I wrote a script to convert from vpopmail structure to a better
structure when we moved from that mess to postfix/dovecot/mysql a few
years back, that conversion, including moving mail took all of 45
minutes, most of that was copying mail, in the early days I did not like
nor trust postfix, but are with it today and wouldnt use anything else
again, in case I change jobs I've always kept my converting script hehe)


Sounds like something to publish on the Dovecot wiki. :)

(says the guy who's supposed to do a vpopmail conversion)

C


Hrmm., boy, so far OT now I'll finish...

So, my recommendation, is to plan for what might be some day, rather
than wait until that "someday" arrives.





Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Noel Butler
On Thu, 2010-07-01 at 12:12 -0500, Stan Hoeppner wrote:


> > 
> > Mail Administration is not complicated, all too many people like to over
> > complicate their setups and only cause themselves work.
> > 
> > I've had more than one CEO in the past say to me that they like to see
> > key NOC staff doing nothing, because it says to them the network is
> > working perfectly.
> > 
> > All too many do not automate things or write scripts/cron tasks,
> > complicate their network and tinker, because as you said, they need to
> > feel indispensable, if only their managers had a clue.
> 
> I'd just get a huge kick out of cross posting what the two of you state here
> to spam-l and watching you get eaten alive due to this "runs itself if setup


cross posting our posts to lists which we, or at least, I, are not a
member of?
 I think that completely sums up who and what you are.


> right" hands off management approach to email systems.  Rich would send you
> home with your tails between your legs like little scared puppies.  Neither of
> you sub there so it wouldn't do any good.  T'would be very entertaining if you
> did though.
> 


How old are you? 16?
You clearly have NO idea, run along now lil boy and manage your tiny
SOHO box.

oh but as a parting shot, with all that mail we get, little spam, scams
or viruses gets to our users, that says we are doing something right,
and it hasn't been since around 2004 that we had any particular smtp
server in an DNSBL, and then it was only one of a dozen (0 day virus
infected windows weenie) , and although I was  once a member of the
"inner boys club" being spam-l,  Jerr'ys comment and my agreeance are
even more applicable to them, it totally amazes me how many SA's get
away with this 'self justification' of their employment, again., if only
their employers really knew.




Re: [Dovecot] address extension going into folder

2010-07-01 Thread Phil Howard
On Thu, Jul 1, 2010 at 10:56, Edgar Fuß  wrote:
>> But it (-n) will deliver (rather than reject) into the regular INBOX
>> if the folder for the extension does not exist?
> Yes, but isn't that what you were asking for?

Yes, but your statement was about what you did, and I wasn't sure if
your needs matched my needs.  I guess it does.


>> I wonder if that ${EXTENSION} works in master.cf.
> No. In master.cf, its ${extension}.

Time to give that a try.


Re: [Dovecot] dovecot 1.2.11/ thunderbird 3.1 - moving folders

2010-07-01 Thread Timo Sirainen
On Thu, 2010-07-01 at 12:53 -0700, Brad Davidson wrote:
> I don't see us being able to go to 2.0 until after it's been out of
> beta for a few months. I hate to see the 'current' branch being
> deprecated before we have a workable 'stable' alternative to upgrade
> to. I can see saying no to fixes for 1.0 and 1.1, but there are a fair
> number of folks that don't feel comfortable running beta releases in
> production.

2.0.rc1 will be out this week, maybe tomorrow.

And this bug has probably existed for years, and this is the first time
someone's noticed it. So I don't think it's such a huge deal for most
people.

But maybe I'll try to do some kind of a backport once rc1 is out.




Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Charles Marcus
On 2010-07-01 1:04 PM, Stan Hoeppner wrote:
> Charles Marcus put forth on 7/1/2010 6:39 AM:
>> On 2010-06-30 9:03 PM, Stan Hoeppner wrote:
>>> Charles Marcus put forth on 6/30/2010 5:11 PM:
 Virtual users are extremely simple to setup, no need for MySQL
 unless you have a bunch.

 That said, there is nothing wrong with using system users, if
 those users also have/need shell access, but if they don't
 virtual users is just as easy/legitimate as system users with
 no shell access.
 
 It's more a matter of the individuals skill level.

>>> So exactly what does this say about the skill level of people who have
>>> implemented, and continue to implement, both solutions, Charles?

>> That they are most likely capable of determining for themselves if/when
>> to use system user and when to use virtual users?
>>
>> I don't get the question...

> Apparently you did get the question because you answered it correctly.
> However, your answer contradicts your "skill level" assertion above.

No... my comment was simply offhand, and not intended to be exhaustively
comprehensive, and you decided to pick nits...

How about:

"It's more a matter of the individuals skill level, what they are used
to, their specific need(s) for the specific situation, what some PHB may
think is needed, and how much leeway said PHB gives you."

There are probably other conditions, so feel free to insert whatever
else you feel may 'complete' it to your satisfaction... ;)

-- 

Best regards,

Charles


Re: [Dovecot] dovecot 1.2.11/ thunderbird 3.1 - moving folders

2010-07-01 Thread Brad Davidson
> >> At this point thunderbird shows error-message when i start to delete
> >> folder1. It tells:
> >> [CANNOT] Mailbox is'nt selectable: folder1.
> >> AND
> >> [NONEXISTENT] Directory folder1 is'nt empty, can't delete it.
> >
> > Yeah, it's a bug. Fixed in v2.0 now .. but since v1.2's code is entirely
> > different here, I'm not sure if I should bother touching it anymore..
> >
> is there any workaround for me?
> I think a lot of people would be happy if this bug also could be fixed in
> 1.2 branch.
> v2 ist still  beta and as ISP you cant switch to new software within a few
> days, and our customers make trouble.

+1, I'd appreciate a patch for 1.2 if it's not a total pain to fix.

I don't see us being able to go to 2.0 until after it's been out of beta for a 
few months. I hate to see the 'current' branch being deprecated before we have 
a workable 'stable' alternative to upgrade to. I can see saying no to fixes for 
1.0 and 1.1, but there are a fair number of folks that don't feel comfortable 
running beta releases in production.

-Brad


Re: [Dovecot] dovecot 1.2.11/ thunderbird 3.1 - moving folders

2010-07-01 Thread Andre Hübner


- Original Message - 
From: "Timo Sirainen" 

To: "Andre Hübner" 
Cc: 
Sent: Thursday, July 01, 2010 6:42 PM
Subject: Re: [Dovecot] dovecot 1.2.11/ thunderbird 3.1 - moving folders



On Thu, 2010-07-01 at 17:37 +0200, Andre Hübner wrote:

i create folder1 for subfolders and in folder1 a folder2 for mails.
Now i create folder3 on toplevel like just like folder1 for subfolders. 
Now i drag/dop folder2 to folder3.
Thunderbird is moving this folder successful but in folder1/.imap i can 
still see a folder folder2 which is containing a dovecot.index.log
At this point thunderbird shows error-message when i start to delete 
folder1. It tells:

[CANNOT] Mailbox is'nt selectable: folder1.
AND
[NONEXISTENT] Directory folder1 is'nt empty, can't delete it.


Yeah, it's a bug. Fixed in v2.0 now .. but since v1.2's code is entirely
different here, I'm not sure if I should bother touching it anymore..



hui, did not expect this is a bug.
is there any workaround for me?
I think a lot of people would be happy if this bug also could be fixed in 
1.2 branch.
v2 ist still  beta and as ISP you cant switch to new software within a few 
days, and our customers make trouble.

But you are the master.

Thanks,
Andre



Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Jerry
On Thu, 01 Jul 2010 12:12:37 -0500
Stan Hoeppner  articulated:

> I'd just get a huge kick out of cross posting what the two of you
> state here to spam-l and watching you get eaten alive due to this
> "runs itself if setup right" hands off management approach to email
> systems.  Rich would send you home with your tails between your legs
> like little scared puppies.  Neither of you sub there so it wouldn't
> do any good.  T'would be very entertaining if you did though.

Here we go; no longer can you justify your position so now you attempt
to change the focus of it, and/or attach the responders of your post.

I stand by my assertion that a properly configured system basically
runs itself. Software updates, etc do on occasion require direct
intervention by the system maintainer; however, if I have to
reconfigure the system on a daily basis it is more than obvious that I
have failed to properly set it up to begin with. In virtually every
case when a serious problem has arose on the system, it could be
directly tied to the "PEBKC" principal.

By the way, I have no knowledge of this "Rich" individual, nor do I give
a F**K either. Obviously you are mesmerized by, and perhaps even
sexually attacked to him, so I suggest that you consult him from now on
when a problem arises.

-- 
Jerry ✌
dovecot.u...@seibercom.net

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the Reply-To header.
__

The Israelis are the Doberman pinschers of the Middle East.  They
treat the Arabs like postmen.

Franklyn Ajaye


Re: [Dovecot] Upgrade Too 1.2.11 Broke Everything

2010-07-01 Thread Timo Sirainen
On Thu, 2010-07-01 at 18:57 +0200, Marcel Grandemange wrote:
> I have done all sorts of work arounds now to continue operating without it
> by using /var/empty and all that , but now my squirrelmail doesn't work like
> it should anymore.

Uh. You're now using /var/empty, while originally your mails were in
~/mail/? It sounds like you've just kept breaking your setup worse and
worse. Do you have your original configs backed up? I'd suggest starting
again from there.

Looking at the original mails, the only problem I see is:

> user_query = SELECT maildir, concat('/var/mail/',maildir) AS home, 125 AS
> uid, 125 AS gid FROM mailbox WHERE username = '%u' AND active = '1'

1) don't return "maildir", it's ignored.

2) The /var/mail/ base dir is most likely wrong, if /var/mail/%u
contained mboxes. So your mail directories exist somewhere else. Find
them. This is why relative home dirs are no longer allowed, who knows
where they are..



Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Stan Hoeppner
Noel Butler put forth on 7/1/2010 5:32 AM:
> On Thu, 2010-07-01 at 06:14 -0400, Jerry wrote:
> 
> 
>> I agree. If the system is constructed correctly it certainly does not
>> need that sort of attention. There is software available that can
>> monitor the system to a high degree of satisfaction. However, Noel, I
>> firmly believe that there are OPs (SAs ?) that greatly exaggerate the
>> degree of difficulty of their job. I guess we all like to feel we are
>> indispensable.
>>
> 
> 
> I'm certain that's the case, anything setup correctly, you should be
> able to walk away and almost forget about it, the only thing to do is
> modify anti spam rules to catch variants of new spam, all of 1 mins
> work, tops, the rest of the time is helping manage the rest of the
> network :)
> 
> Mail Administration is not complicated, all too many people like to over
> complicate their setups and only cause themselves work.
> 
> I've had more than one CEO in the past say to me that they like to see
> key NOC staff doing nothing, because it says to them the network is
> working perfectly.
> 
> All too many do not automate things or write scripts/cron tasks,
> complicate their network and tinker, because as you said, they need to
> feel indispensable, if only their managers had a clue.

I'd just get a huge kick out of cross posting what the two of you state here
to spam-l and watching you get eaten alive due to this "runs itself if setup
right" hands off management approach to email systems.  Rich would send you
home with your tails between your legs like little scared puppies.  Neither of
you sub there so it wouldn't do any good.  T'would be very entertaining if you
did though.

-- 
Stan




Re: [Dovecot] Upgrade Too 1.2.11 Broke Everything

2010-07-01 Thread Jerry
On Thu, 1 Jul 2010 18:57:11 +0200
Marcel Grandemange  articulated:


> This is where the fault lies, ive fiddled till I got it working but I
> never had to specify a writable unique home directory in the past, it
> just worked. I create users via postfixadmin and tried to
> specify /var/mail/%u/ as the unique directory but of course it
> complains that dir doesn't exist then. I would have expected it to
> create it, itself. That would solve that issue.
> 
> I have done all sorts of work arounds now to continue operating
> without it by using /var/empty and all that , but now my squirrelmail
> doesn't work like it should anymore.

I had a similar problem at one time. It was due to the fact that
Dovecot did not have write permissions on the directory so it could not
create it. Perhaps your problem is similar.


-- 
Jerry ✌
dovecot.u...@seibercom.net

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the Reply-To header.
__

Speaking of purchasing a dog, never buy a watchdog that's
on sale.  After all, everyone knows a bargain dog never bites!


Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Stan Hoeppner
Charles Marcus put forth on 7/1/2010 6:39 AM:
> On 2010-06-30 9:03 PM, Stan Hoeppner wrote:
>> Charles Marcus put forth on 6/30/2010 5:11 PM:
>>> On 2010-06-29 4:16 PM, /dev/rob0 wrote:
 Virtual mailboxes have their place, of course, but they're overused,
 especially at small sites. I suppose this might be in part because 
 most HOWTOs are for virtual.
> 
>>> That's just plain silly. Virtual users are extremely simple to setup, no
>>> need for MySQL unless you have a bunch.
>>>
>>> That said, there is nothing wrong with using system users, if those
>>> users also have/need shell access, but if they don't virtual users is
>>> just as easy/legitimate as system users with no shell access.
>>>
>>> It's more a matter of the individuals skill level.
> 
>> So exactly what does this say about the skill level of people who have
>> implemented, and continue to implement, both solutions, Charles?
> 
> That they are most likely capable of determining for themselves if/when
> to use system user and when to use virtual users?
> 
> I don't get the question...

Apparently you did get the question because you answered it correctly.
However, your answer contradicts your "skill level" assertion above.  Which
drives my point home.

-- 
Stan


Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Stan Hoeppner
Noel Butler put forth on 7/1/2010 4:54 AM:
> On Thu, 2010-07-01 at 04:01 -0500, Stan Hoeppner wrote:
> 
> 
>> Anyone who isn't looking at mail logs or log summaries daily and taking 
>> action
>> on any problems needing attention doesn't count as a mail OP.
> 
> 
> 
> That's one of the most ridiculous things I've seen todate.
> Do you seriously expect ISP admins that may have for instance, 16 front
> end SMTP servers, each processing around 1.4 million connects a day, and
> accepting around 900K msgs each a day, are going to seriously sift
> through each servers logs every day?
> 
> I don't think thats going to happen anytime soon

Critically re-read what I posted above and then formulate a sane response 
please.

-- 
Stan


Re: [Dovecot] Upgrade Too 1.2.11 Broke Everything

2010-07-01 Thread Marcel Grandemange
> I have had dovecot working successfully for years now, however after a
> system update , dovecot refused to start up complaing that im not using
> absolute paths.

> In regards to this file the following was changed to make it work...
>
> mail_location = mbox:~:INBOX=/var/mail/%u
>
> Used to be:
>
> mail_location = mbox:~/mail/:INBOX=/var/mail/%u

>>Here you don't change any relative path, but change to base dir of your 
>>mailboxes, that should be wrong for any user using the default path.

Not sure what you mean here.

> user_query = SELECT maildir, concat('/var/mail/',maildir) AS home, 125 AS
> uid, 125 AS gid FROM mailbox WHERE username = '%u' AND active = '1'
>
> This query used to be:
>
> user_query = SELECT maildir, maildir AS home, 125 AS uid, 125 AS gid FROM
> mailbox WHERE username = '%u' AND active = '1'

>>I guess, the problem is in maildir, this is not absolute.



> Jun 29 11:52:05 thavinci dovecot: IMAP(m...@thavinci.za.net):
> stat(/var/mail/m...@thavinci.za.net/.imap/INBOX) failed: Not a directory

>>Your mysql query returns /var/mail/<> as home directory, where 
>>Dovecot puts files.

>>Please

>>a) post the content of one SQL record and

pdk...@thavinci.za.net  $1$06ae4b60$W/.iorSE/8ODJmh8Om4cf1  Tarun
Peedikayil  pdk...@thavinci.za.net  0   thavinci.za.net 2008-05-21
20:52:042008-05-21 20:52:04 1

I will be deleting this account so don't worry about the fact I disclosed
details ;>

>>b) make sure every user has an unique, writeable home directory.
>>http://wiki.dovecot.org/VirtualUsers/Home
>>(Note this applies to all user, but system users usually have an unique 
>>homedir)

This is where the fault lies, ive fiddled till I got it working but I never
had to specify a writable unique home directory in the past, it just worked.
I create users via postfixadmin and tried to specify /var/mail/%u/ as the
unique directory but of course it complains that dir doesn't exist then.
I would have expected it to create it, itself. That would solve that issue.

I have done all sorts of work arounds now to continue operating without it
by using /var/empty and all that , but now my squirrelmail doesn't work like
it should anymore.

Advise?

>>Regards,

>>- -- 
>>Steffen Kaiser
>>-BEGIN PGP SIGNATURE-
>>Version: GnuPG v1.4.6 (GNU/Linux)

>>iQEVAwUBTCyghL+Vh58GPL/cAQJWfggAoK15kZRU8rnYh8EvjNQ0/L3i9QZ5Ape5
>>J/fwSBqfcT1V4rt2lvmYvhLVWvf/tQAM61s1IgAVpfOz5O78b2BecvkAhA3NfNjm
>>vT25B+RwFFzGVCUhWPrWSk84DsH5wLlnrkb10jtMXtwpvVwEAR4ecPhEjb6I7bhO
>>uk67a6KWyqkxHc9f8WzpoHZTiX1zCRZDeiDJkFE96fqD6ZrLdb0Fo6bHNu2rq5kx
>>0y3ak5Lz8X4LgEeW2EGiCJ4BzwWA4VzVDadw7MXF1cIIVCO+0g7SgNm8FQdEW3CJ
>>WVay/dNCyBSJ/EYiJmUM7hkYpSpMJ8lU5kI7waUq/in3Ga/mjysY4w==
>>=tRvl
>>-END PGP SIGNATURE-



Re: [Dovecot] dovecot 1.2.11/ thunderbird 3.1 - moving folders

2010-07-01 Thread Timo Sirainen
On Thu, 2010-07-01 at 17:37 +0200, Andre Hübner wrote:
> i create folder1 for subfolders and in folder1 a folder2 for mails.
> Now i create folder3 on toplevel like just like folder1 for subfolders. Now i 
> drag/dop folder2 to folder3.
> Thunderbird is moving this folder successful but in folder1/.imap i can still 
> see a folder folder2 which is containing a dovecot.index.log
> At this point thunderbird shows error-message when i start to delete folder1. 
> It tells:
> [CANNOT] Mailbox is'nt selectable: folder1.
> AND
> [NONEXISTENT] Directory folder1 is'nt empty, can't delete it.

Yeah, it's a bug. Fixed in v2.0 now .. but since v1.2's code is entirely
different here, I'm not sure if I should bother touching it anymore..




[Dovecot] dovecot 1.2.11/ thunderbird 3.1 - moving folders

2010-07-01 Thread Andre Hübner
Hello List,

customers telled me problem when moving folders in thunderbird which i can 
confirm. Following setup on my side:
dovecot 1.2.11 with mbox.
Thunderbird 3.1 with ready mailaccount and "Server supports folders that 
contain sub-folders and messages" is disabled.

i create folder1 for subfolders and in folder1 a folder2 for mails.
Now i create folder3 on toplevel like just like folder1 for subfolders. Now i 
drag/dop folder2 to folder3.
Thunderbird is moving this folder successful but in folder1/.imap i can still 
see a folder folder2 which is containing a dovecot.index.log
At this point thunderbird shows error-message when i start to delete folder1. 
It tells:
[CANNOT] Mailbox is'nt selectable: folder1.
AND
[NONEXISTENT] Directory folder1 is'nt empty, can't delete it.

What to do now?
Is error on my or thunderbirds side?
Parts of my config needed?

Thanks,
Andre



Re: [Dovecot] dovecot 2.0, imap-login killed with signal 11

2010-07-01 Thread Timo Sirainen
On Thu, 2010-07-01 at 17:13 +0200, Burckhard Schmidt wrote:
> > gdb -p
..
> Program received signal SIGSEGV, Segmentation fault.
> 0xfed57544 in ?? ()
> (gdb) bt full
> #0  0xfed57544 in ?? ()
> No symbol table info available.
> 
> I think no "good" result.

Yeah, not useful. I think with Solaris you need to do it like:

gdb /usr/dovecotBeta6/libexec/dovecot/imap-login 




Re: [Dovecot] dovecot 2.0, imap-login killed with signal 11

2010-07-01 Thread Burckhard Schmidt



Am 01.07.2010 16:49, schrieb Timo Sirainen:

On Thu, 2010-07-01 at 16:42 +0200, Burckhard Schmidt wrote:


imap(userx): Info: Disconnected: Logged out byte...
master: Error: service(imap-login): child 20241 killed with signal 11
(core not dumped - set drop_priv_before_exec=yes)


Can you get gdb backtrace? The easiest would be if you managed to attach
gdb into the correct imap-login process:


gdb -p
cont

bt full


Attaching to process 20797
Retry #1:
Retry #2:
Retry #3:
Retry #4:
[New LWP 1]
0xfedcc568 in ?? ()
(gdb) cont
Continuing.

Program received signal SIGSEGV, Segmentation fault.
0xfed57544 in ?? ()
(gdb) bt full
#0  0xfed57544 in ?? ()
No symbol table info available.

I think no "good" result.
I'll try next nithly.



Also it's possible that it's already been fixed. You could try latest
nightly snapshot. http://dovecot.org/nightly/




--
Regards --- Burckhard Schmidt


Re: [Dovecot] address extension going into folder

2010-07-01 Thread Edgar Fuß
> But it (-n) will deliver (rather than reject) into the regular INBOX
> if the folder for the extension does not exist?
Yes, but isn't that what you were asking for?

> I wonder if that ${EXTENSION} works in master.cf.
No. In master.cf, its ${extension}.


Re: [Dovecot] dovecot 2.0, imap-login killed with signal 11

2010-07-01 Thread Timo Sirainen
On Thu, 2010-07-01 at 16:42 +0200, Burckhard Schmidt wrote:

> imap(userx): Info: Disconnected: Logged out byte...
> master: Error: service(imap-login): child 20241 killed with signal 11 
> (core not dumped - set drop_priv_before_exec=yes) 

Can you get gdb backtrace? The easiest would be if you managed to attach
gdb into the correct imap-login process:


gdb -p 
cont

bt full

Also it's possible that it's already been fixed. You could try latest
nightly snapshot. http://dovecot.org/nightly/




[Dovecot] dovecot 2.0, imap-login killed with signal 11

2010-07-01 Thread Burckhard Schmidt

Hello,

I have 2.0.beta6 (3156315704ef) on Solaris.

A user can login, if he makes logout  imap-login will be killed with 
signal 11.


I tried both:
passdb driver ldap  and userdb driver ldap,
or
passdb driver shadow and userdb driver passwd.

processes

dovecot 20236 20235   0 14:40:28 ?  0:00 dovecot/anvil
root 20237 20235   0 14:40:28 ? 0:00 dovecot/log
root 20235 1   0 14:40:28 ? 0:00 
/usr/dovecotBeta6/sbin/dovecot -c /usr/dovecotBeta6/etc/dovecot/dovecot.conf


Login:
imap-login: Info: Login: user=, method=PLAIN, rip=..., lip=..., 
mpid=20565, TLS


dovecot 20236 20235   0 14:40:28 ?  0:00 dovecot/anvil
root 20242 20235   0 14:41:59 ? 0:00 dovecot/config
root 20244 20235   0 14:41:59 ? 0:00 dovecot/ssl-params
nobody4 20241 20235   0 14:41:59 ?  0:00 dovecot/imap-login
dovecot 20243 20235   0 14:41:59 ?  0:00 dovecot/auth
root 20245 20244   1 14:41:59 ? 0:13 dovecot/ssl-params
root 20237 20235   0 14:40:28 ? 0:00 dovecot/log
root 20235 1   0 14:40:28 ? 0:00 
/usr/dovecotBeta6/sbin/dovecot -c /usr/dovecotBeta6/etc/dovecot/dovecot.conf

sysdov 20246 20235   0 14:42:08 ?   0:00 dovecot/imap

Logout:
imap(userx): Info: Disconnected: Logged out byte...
master: Error: service(imap-login): child 20241 killed with signal 11 
(core not dumped - set drop_priv_before_exec=yes)

master: Warning: Killed with signal 15 (by pid=20250 uid=0 code=kill)

dovecot 20236 1   0 14:40:28 ?  0:00 dovecot/anvil
root 20245 1   1 14:41:59 ? 1:39 dovecot/ssl-params
root 20237 1   0 14:40:28 ?0:00 dovecot/log

dovecot -n
# 2.0.beta6 (3156315704ef): /usr/dovecotBeta6/etc/dovecot/dovecot.conf
# OS: SunOS 5.10 sun4v
auth_cache_ttl = 0 s
auth_debug = yes
auth_debug_passwords = yes
auth_username_chars = abcdefghijklmnopqrstuvwxyz01234567890
auth_verbose = yes
default_client_limit = 6244
default_login_user = nobody4
first_valid_gid = 20
first_valid_uid = 20
listen = 141.20.1.125
log_path = /var/log/dovecot
mail_gid = sysdov
mail_location = 
maildir:~/maildir:INDEX=/addons/index/%u:CONTROL=~/control:LAYOUT=fs

mail_uid = sysdov
namespace {
  inbox = yes
  ...

passdb {
  args = /usr/dovecotBeta6/etc/ldapauth.conf
  driver = ldap
}
...
service auth {
  client_limit = 6244
  unix_listener auth-userdb {
mode = 01204
  }
}
...
userdb {
  args = /usr/dovecotBeta6/etc/ldapuser.conf
  driver = ldap
}

configure:
--prefix=/usr/dovecotBeta6 --exec-prefix=/usr/dovecotBeta6 
CFLAGS="-I/opt/csw/include -I/usr/include/security" 
LDFLAGS="-L/opt/csw/lib" LIBS="-llber" --with-gssapi=no --with-sql=yes 
--with-pgsql=no --with-mysql=no --with-sqlite=yes --with-bsdauth=no 
--with-vpopmail=no -with-ssl=openssl -with-ssldir=/opt/csw/etc/ssl 
--with-ldap=yes --with-pam=yes --with-nss=no --with-gnu-ld


Install prefix . : /usr/dovecotBeta6
File offsets ... : 64bit
I/O polling  : poll
I/O notifys  : none
SSL  : yes (OpenSSL)
GSSAPI . : no
passdbs  : static passwd passwd-file shadow pam checkpassword 
ldap sql

 : -bsdauth -sia -vpopmail
userdbs  : static prefetch passwd passwd-file checkpassword ldap sql
 : -vpopmail -nss
SQL drivers  : sqlite
 : -pgsql -mysql


--
Burckhard Schmidt



Re: [Dovecot] Upgrade Too 1.2.11 Broke Everything

2010-07-01 Thread Steffen Kaiser

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 1 Jul 2010, Marcel Grandemange wrote:


I have had dovecot working successfully for years now, however after a
system update , dovecot refused to start up complaing that im not using
absolute paths.



In regards to this file the following was changed to make it work...

mail_location = mbox:~:INBOX=/var/mail/%u

Used to be:

mail_location = mbox:~/mail/:INBOX=/var/mail/%u


Here you don't change any relative path, but change to base dir of your 
mailboxes, that should be wrong for any user using the default path.



user_query = SELECT maildir, concat('/var/mail/',maildir) AS home, 125 AS
uid, 125 AS gid FROM mailbox WHERE username = '%u' AND active = '1'

This query used to be:

user_query = SELECT maildir, maildir AS home, 125 AS uid, 125 AS gid FROM
mailbox WHERE username = '%u' AND active = '1'


I guess, the problem is in maildir, this is not absolute.


Jun 29 11:52:05 thavinci dovecot: IMAP(m...@thavinci.za.net):
stat(/var/mail/m...@thavinci.za.net/.imap/INBOX) failed: Not a directory


Your mysql query returns /var/mail/<> as home directory, where 
Dovecot puts files.


Please

a) post the content of one SQL record and

b) make sure every user has an unique, writeable home directory.
http://wiki.dovecot.org/VirtualUsers/Home
(Note this applies to all user, but system users usually have an unique 
homedir)


Regards,

- -- 
Steffen Kaiser

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBTCyghL+Vh58GPL/cAQJWfggAoK15kZRU8rnYh8EvjNQ0/L3i9QZ5Ape5
J/fwSBqfcT1V4rt2lvmYvhLVWvf/tQAM61s1IgAVpfOz5O78b2BecvkAhA3NfNjm
vT25B+RwFFzGVCUhWPrWSk84DsH5wLlnrkb10jtMXtwpvVwEAR4ecPhEjb6I7bhO
uk67a6KWyqkxHc9f8WzpoHZTiX1zCRZDeiDJkFE96fqD6ZrLdb0Fo6bHNu2rq5kx
0y3ak5Lz8X4LgEeW2EGiCJ4BzwWA4VzVDadw7MXF1cIIVCO+0g7SgNm8FQdEW3CJ
WVay/dNCyBSJ/EYiJmUM7hkYpSpMJ8lU5kI7waUq/in3Ga/mjysY4w==
=tRvl
-END PGP SIGNATURE-


Re: [Dovecot] address extension going into folder

2010-07-01 Thread Phil Howard
On Thu, Jul 1, 2010 at 08:47, Edgar Fuß  wrote:
> With Postfix, I use
> mailbox_command = DOVECOT_LDA -n -e -m "${EXTENSION}"
> where DOVECOT_LDA is the path do dovecot's deliver. The -n switch prevents 
> creation of the IMAP folder.
> See http://wiki.dovecot.org/LDA

But it (-n) will deliver (rather than reject) into the regular INBOX
if the folder for the extension does not exist?

I'm using Postfix, but with dovecot as a transport.

main.cf has:
virtual_transport = dovecot

master.cf has:
dovecot   unix  -   n   n   -   -   pipe
  flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f
${sender} -d ${us...@${nexthop}

dovecot.conf has:
mail_location = maildir:/home/mail/%Ld/%Ln/mail

I wonder if that ${EXTENSION} works in master.cf.  I guess I gotta go
back to Postfix for reading.  I assumed this would be a Dovecot
problem.


[Dovecot] Upgrade Too 1.2.11 Broke Everything

2010-07-01 Thread Marcel Grandemange
Good Day.

I have had dovecot working successfully for years now, however after a
system update , dovecot refused to start up complaing that im not using
absolute paths.
It took a bit of hacking to get it working again as can be seen by the sql
query, however now imap doesn't work anymore because of that change. Im
lost!!

dovecot --version
1.2.11


dovecot -n
# 1.2.11: /usr/local/etc/dovecot.conf
# OS: FreeBSD 8.1-PRERELEASE amd64
protocols: imap pop3
listen(default): *
listen(imap): *
listen(pop3): *:110
ssl: no
disable_plaintext_auth: no
login_dir: /var/run/dovecot/login
login_executable(default): /usr/local/libexec/dovecot/imap-login
login_executable(imap): /usr/local/libexec/dovecot/imap-login
login_executable(pop3): /usr/local/libexec/dovecot/pop3-login
login_greeting: thavinci Ready
verbose_proctitle: yes
first_valid_uid: 125
first_valid_gid: 125
mail_access_groups: postfix
mail_privileged_group: postfix
mail_location: mbox:~:INBOX=/var/mail/%u
mail_executable(default): /usr/local/libexec/dovecot/imap
mail_executable(imap): /usr/local/libexec/dovecot/imap
mail_executable(pop3): /usr/local/libexec/dovecot/pop3
mail_plugin_dir(default): /usr/local/lib/dovecot/imap
mail_plugin_dir(imap): /usr/local/lib/dovecot/imap
mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3
imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh
tb-extra-mailbox-sep
imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh
tb-extra-mailbox-sep
imap_client_workarounds(pop3):
pop3_client_workarounds(default):
pop3_client_workarounds(imap):
pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh
lda:
  postmaster_address: postmas...@example.com
  sendmail_path: /usr/sbin/sendmail
auth default:
  passdb:
driver: sql
args: /usr/local/etc/dovecot-mysql.conf
  passdb:
driver: sql
args: /usr/local/etc/dovecot-mysql.conf
  userdb:
driver: sql
args: /usr/local/etc/dovecot-mysql.conf
  userdb:
driver: sql
args: /usr/local/etc/dovecot-mysql.conf


In regards to this file the following was changed to make it work...

mail_location = mbox:~:INBOX=/var/mail/%u

Used to be:

mail_location = mbox:~/mail/:INBOX=/var/mail/%u

 grep -v '^ *\(#.*\)\?$' dovecot-mysql.conf
driver = mysql
default_pass_scheme = CRYPT
connect = host=xx.xx.xx.xx dbname=nameofdb user=dbuser password=dbpassword
password_query = SELECT password FROM mailbox WHERE username = '%u' AND
active = '1'
user_query = SELECT maildir, concat('/var/mail/',maildir) AS home, 125 AS
uid, 125 AS gid FROM mailbox WHERE username = '%u' AND active = '1'

This query used to be:

user_query = SELECT maildir, maildir AS home, 125 AS uid, 125 AS gid FROM
mailbox WHERE username = '%u' AND active = '1'

A snapshot of the maillog during failure

Jun 29 11:50:15 thavinci postfix/qmgr[1469]: BA3DD9B4C9: removed
Jun 29 11:50:49 thavinci dovecot: imap-login: Login:
user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
secured
Jun 29 11:50:49 thavinci dovecot: IMAP(m...@thavinci.za.net): Connection
closed bytes=53/372
Jun 29 11:52:05 thavinci dovecot: imap-login: Login:
user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
secured
Jun 29 11:52:05 thavinci dovecot: IMAP(m...@thavinci.za.net): Connection
closed bytes=53/372
Jun 29 11:52:05 thavinci dovecot: imap-login: Login:
user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
secured
Jun 29 11:52:05 thavinci dovecot: IMAP(m...@thavinci.za.net):
stat(/var/mail/m...@thavinci.za.net/.imap/INBOX) failed: Not a directory
Jun 29 11:52:05 thavinci last message repeated 2 times
Jun 29 11:52:05 thavinci dovecot: IMAP(m...@thavinci.za.net): open() failed
with subscription file /var/mail/m...@thavinci.za.net/.subscriptions: Not a
directory
Jun 29 11:52:05 thavinci dovecot: IMAP(m...@thavinci.za.net): Connection
closed bytes=306/4046


As can be seen somehow it's trying to write to the mbox file and I have no
idea why!


And this is the db structure!

SET FOREIGN_KEY_CHECKS=0;
-- 
-- Table structure for `mailbox_copy`
-- 
DROP TABLE IF EXISTS `mailbox_copy`;
CREATE TABLE `mailbox_copy` (
  `username` varchar(255) NOT NULL DEFAULT '',
  `password` varchar(255) NOT NULL DEFAULT '',
  `name` varchar(255) NOT NULL DEFAULT '',
  `maildir` varchar(255) NOT NULL DEFAULT '',
  `quota` int(10) NOT NULL DEFAULT '0',
  `domain` varchar(255) NOT NULL DEFAULT '',
  `created` datetime NOT NULL DEFAULT '-00-00 00:00:00',
  `modified` datetime NOT NULL DEFAULT '-00-00 00:00:00',
  `active` tinyint(1) NOT NULL DEFAULT '1',
  PRIMARY KEY (`username`),
  KEY `username` (`username`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 COMMENT='Postfix Admin - Virtual
Mailboxes';

-- 
-- Records of mailbox_copy
-- 





Re: [Dovecot] address extension going into folder

2010-07-01 Thread Edgar Fuß
With Postfix, I use
mailbox_command = DOVECOT_LDA -n -e -m "${EXTENSION}"
where DOVECOT_LDA is the path do dovecot's deliver. The -n switch prevents 
creation of the IMAP folder.
See http://wiki.dovecot.org/LDA


[Dovecot] address extension going into folder

2010-07-01 Thread Phil Howard
Is it possible with a simple config change to make address extensions,
e.g. alice+sa...@example.com, go into a folder, e.g. .INBOX.sales, and
do so ONLY if that folder already exists (and just go into INBOX if it
does not exist)?


Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Phil Howard
On Thu, Jul 1, 2010 at 02:28, Frank Cusack  wrote:
> On 6/30/10 6:11 PM -0400 Charles Marcus wrote:
>>
>> That's just plain silly. Virtual users are extremely simple to setup, no
>> need for MySQL unless you have a bunch.
>
> I agree. I am always in favor of virtual users, it just gives you a lot
> more flexibility. I find system users MORE complicated to setup, actually.
> You have to worry about system security in addition to IMAP stuff.  You
> always have to refactor things down the road and starting off with system
> users just makes it more unpleasant.

I find a system-user scheme more complicated only when there is not a
one-to-one relationship between the system user base and the usernames
in one domain.  I tend to use a non-system-user scheme more, now,
because of things like having different sets of users in different
domains, where, if not now, possibly in the future, a LHS will
conflict with a system user, meaning I have to map the relationships.
In cases where there is one domain and LHS will be the same as the
system user forever (about 3 to 5 years in internet time), I'll use
system users (with role accounts either forwarded or as real system
users, depending on need).  Otherwise, the multi-domain,
multi-user-set, all stored under one system user, scheme (that I don't
like to call virtual because there is nothing virtual about it once
you avoid thinking in terms of system users) works quite well.  A
hybrid, where one or more domains are designated for system users,
could still coexist with the multi-domain scheme.


Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Charles Marcus
On 2010-06-30 9:03 PM, Stan Hoeppner wrote:
> Charles Marcus put forth on 6/30/2010 5:11 PM:
>> On 2010-06-29 4:16 PM, /dev/rob0 wrote:
>>> Virtual mailboxes have their place, of course, but they're overused,
>>> especially at small sites. I suppose this might be in part because 
>>> most HOWTOs are for virtual.

>> That's just plain silly. Virtual users are extremely simple to setup, no
>> need for MySQL unless you have a bunch.
>>
>> That said, there is nothing wrong with using system users, if those
>> users also have/need shell access, but if they don't virtual users is
>> just as easy/legitimate as system users with no shell access.
>>
>> It's more a matter of the individuals skill level.

> So exactly what does this say about the skill level of people who have
> implemented, and continue to implement, both solutions, Charles?

That they are most likely capable of determining for themselves if/when
to use system user and when to use virtual users?

I don't get the question...

-- 

Best regards,

Charles


Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Noel Butler
On Thu, 2010-07-01 at 06:14 -0400, Jerry wrote:


> I agree. If the system is constructed correctly it certainly does not
> need that sort of attention. There is software available that can
> monitor the system to a high degree of satisfaction. However, Noel, I
> firmly believe that there are OPs (SAs ?) that greatly exaggerate the
> degree of difficulty of their job. I guess we all like to feel we are
> indispensable.
> 


I'm certain that's the case, anything setup correctly, you should be
able to walk away and almost forget about it, the only thing to do is
modify anti spam rules to catch variants of new spam, all of 1 mins
work, tops, the rest of the time is helping manage the rest of the
network :)

Mail Administration is not complicated, all too many people like to over
complicate their setups and only cause themselves work.

I've had more than one CEO in the past say to me that they like to see
key NOC staff doing nothing, because it says to them the network is
working perfectly.

All too many do not automate things or write scripts/cron tasks,
complicate their network and tinker, because as you said, they need to
feel indispensable, if only their managers had a clue.


<>

Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Jerry
On Thu, 01 Jul 2010 19:54:44 +1000
Noel Butler  articulated:


> On Thu, 2010-07-01 at 04:01 -0500, Stan Hoeppner wrote:
> 
> 
> > Anyone who isn't looking at mail logs or log summaries daily and
> > taking action on any problems needing attention doesn't count as a
> > mail OP.
> 
> That's one of the most ridiculous things I've seen todate.
> Do you seriously expect ISP admins that may have for instance, 16
> front end SMTP servers, each processing around 1.4 million connects a
> day, and accepting around 900K msgs each a day, are going to
> seriously sift through each servers logs every day?
> 
> I don't think thats going to happen anytime soon

I agree. If the system is constructed correctly it certainly does not
need that sort of attention. There is software available that can
monitor the system to a high degree of satisfaction. However, Noel, I
firmly believe that there are OPs (SAs ?) that greatly exaggerate the
degree of difficulty of their job. I guess we all like to feel we are
indispensable.

I might add that I am a strong believer in virtual users. It is easier,
cleaner and removes potential security problems.

Just my 2¢.

-- 
Jerry ✌
dovecot.u...@seibercom.net

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the Reply-To header.
__

"Everyone is entitled to be stupid, but some abuse the privilege."

Anonymous


Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Noel Butler
On Thu, 2010-07-01 at 04:01 -0500, Stan Hoeppner wrote:


> Anyone who isn't looking at mail logs or log summaries daily and taking action
> on any problems needing attention doesn't count as a mail OP.



That's one of the most ridiculous things I've seen todate.
Do you seriously expect ISP admins that may have for instance, 16 front
end SMTP servers, each processing around 1.4 million connects a day, and
accepting around 900K msgs each a day, are going to seriously sift
through each servers logs every day?

I don't think thats going to happen anytime soon




Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Stan Hoeppner
Steffen Kaiser put forth on 7/1/2010 2:59 AM:

>> It's more a matter of the individuals skill level.
> 
> Well, a "system user" setup requires almost no skill of mail-related
> stuff ;-)

Setup? I'd agree--not a lot of skill required.  Managing it afterward?  That
requires mail admin skills, regardless of virtual or system user accounts.  It
requires admin skills if the box is actually managed correctly that is.
Anyone who isn't looking at mail logs or log summaries daily and taking action
on any problems needing attention doesn't count as a mail OP.

-- 
Stan


Re: [Dovecot] dovecot ldap search result ordering?

2010-07-01 Thread Steffen Kaiser

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sat, 26 Jun 2010, chasye wrote:


pass_attrs = mail=user, uid=userdb_home=/home/xadmin/%d/%$,userPassword=password
pass_filter = (&(objectClass=posixAccount)(uid=%u))
default_pass_scheme = SSHA

user_attrs = mail=user, uid=home=/home/xadmin/%d/%$
user_filter = (&(objectClass=posixAccount)(|(mail=%u)(mailAlias=%u)))

It works fine, but some account failed to get their domain in pass_attrs.
I check the log.
when it success, the result order is "mail, uid, userPassword"
when it failed, the order is "userPassword, uid, mail"

we just use a username to login. I think dovecot cant get the domain before
username changed to "usern...@domain". So can dovecot sort the result


I guess you have to drop the uid=userdb_home and rely on the second query.

Regards,

- -- 
Steffen Kaiser

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBTCxNrb+Vh58GPL/cAQIydAf/fB07yAHzzJQdeXNutnA8NEikLyJ8oevL
Vblt2clSEWM8tkTJK42EC9916lOhKA/EOmGvuRjgSfoal1AJlVTptiQjxCaELeS6
5afwC2aEvvIYRKOaw42S98TYOzr5V0HU3QcxQmlMRxpB9cESzIG5Pw6Z9Ol52whJ
HJd+3MO29LUdHcgn8yxxsuk+VowPn8CL4WK0WiDhpLFMc2z5Z6SkthqyGOOAtvkj
y35pAiTBx/DiOPEtU+VLu6IRddtL4GYYnMvAn05b63sZO9e1CquVpbr5Qb3q2I52
w5HFeqYKqH9zBZD3xdYxUdrSSK8tU5WfjUYYcnZzQlYv5oeWYS3NaQ==
=tbno
-END PGP SIGNATURE-


Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Steffen Kaiser

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 30 Jun 2010, Charles Marcus wrote:


On 2010-06-29 4:16 PM, /dev/rob0 wrote:

Virtual mailboxes have their place, of course, but they're overused,
especially at small sites. I suppose this might be in part because
most HOWTOs are for virtual.


That's just plain silly. Virtual users are extremely simple to setup, no
need for MySQL unless you have a bunch.


Hmm, I understood Rob's post arguing that almost every Unix daemon "just 
plainly works" with system users. And, IMO, this is true for both: MTA and 
Dovecot. The requirements are low, because you have system tools to create 
users, installed daemons are pre-packaged to use them. Install, and you 
are set.


I do _not_ argue about security here. I really wonder why some distros 
still allow ssh-access by default for every user and some don't. Even a 
virtual-user based setup requires system users, so one cannot ignore uid 
related security either.


I also don't argue about flexibility.

Rob is talking about a newbie setup (IMHO) and I do agree to him. Once one 
got accustomed to the field of mail-related services, one can make 
decisions.



It's more a matter of the individuals skill level.


Well, a "system user" setup requires almost no skill of mail-related stuff 
;-)


Regards,

- -- 
Steffen Kaiser

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBTCxK27+Vh58GPL/cAQKcfAgAkhTpfP+VIrWhreopLsULoqV5dyFCy3gd
+Tx+BnKfy3or/nHjke0sSVzdf6O6NUuv5TW33d9vKSXGNXhQz4A7XtqxaU3K6Ze1
hm9gFYAfPNtSGEe1v8d+rxnugYmDfW8NV+03Wx0qRM2bmFZeYZQOFztRCpsIcAe8
DHMUCCWaJ2DZMc6LqxssripgwW9H8rIyiBWKbWyduqkuF52S07BL+RPJPzRfBgZc
vnF0vFE8SiDVsp6kc3ofW86Mm8FS/efQEXyqomeafdzyScrZZg4gisXECNrcJTey
luKuhgAZa7bwkKZi91xpf+zoI8UQghk5vmoGocL++9UjJafju35NZQ==
=Q5PF
-END PGP SIGNATURE-


Re: [Dovecot] Dovecot LDA/LDAP

2010-07-01 Thread Steffen Kaiser

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 30 Jun 2010, Frank den Hartog wrote:

My system runs CentOS 5.5, Postfix 2.3.3 and Dovecot 1.2.11. I try to set up 
Dovecot LDA. But whatever I'm trying, I fail.


2010-06-30T18:28:12.585128+02:00 h1690641 postfix/pipe[26443]: 84F012A00A55: 
to=, relay=dovecot, delay=0.07, delays=0.03/0.01/0/0.02, 
dsn=5.1.1, status=bounced (user unknown)


Looks like the user t...@domain.com does not exist. First start is to turn 
on logging (http://wiki.dovecot.org/Logging) and verify that Dovecot 
LDAP and LDAP are used at all and then check the LDAP item of test.


Regards,

- -- 
Steffen Kaiser

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBTCxBQb+Vh58GPL/cAQLG+Qf/Y1tvItqOjVjz02cVsNMZIbqtVWMmobpp
DmfBB3XwGlUKr6OBAugJkA/npQL5eJLsk4kKlbNU4kx2ujwqGaSNIdM47iqJ6cEQ
GtJC2wA5kHNMw9cCQXeTUgb3Vo9Ny8q1iYtcp79HphYE5xdgdesDFOHLZ5CLvx6W
RmEyes7O14lKyQ+nFwI5SruTQ75tr8RaVD3FphOgH5p/laOeNGfh29UPqBJriwBh
GpVjsse3I/ArRuNWBDgfMLx82UXo5Yf8kkna7jOKhlHsmRKyS8eDMlPWMC/WnN+H
fxIN+5+rg1+0A0Wsn/rD6PJLFIPzDJrXWrErtK0gwUmhTj254B+1EA==
=+wAQ
-END PGP SIGNATURE-


Re: [Dovecot] system v. virtual mailboxes, was Re: Thunderbird problem

2010-07-01 Thread Noel Butler
On Wed, 2010-06-30 at 18:11 -0400, Charles Marcus wrote:


> but if they don't virtual users is
> just as easy/legitimate as system users with no shell access.



I agree, virtual users are not only easier to deal with, it gives you
greater flexibility, but most importantly, better security.
in the mid nineties I started pooling my own mail onto my own server
using system users, yes, lazy %$$* i was :)
By  early 2000 I had not only my domain but several friends domains as
well, a  PITA to administer, as ever wanted change had to wait for me, I
refused to run any of the scripts around that permitted user management
as I felt none were secure and ended up having 'root', I then
migrated to using sendmail front end to what we used at my employers, a
qmail-vpopmail solution (IMHO having qmail exposed was and is, like
having M$ exchange exposed), this made things easier they can add/delete
do whatever to their own users, so more free time for me, infact I've
not had to do anything for any of them since, except, add their new
domains, but it was a painful task converting all of them from mbox to
maildir, it took nigh on 15 hours.
(incidently we also used dovecot for pop3 as well as imap inplace of
vpopmails pop3,  much saner solution.)

(I wrote a script to convert from vpopmail structure to a better
structure when we moved from that mess to postfix/dovecot/mysql a few
years back, that conversion, including moving mail took all of 45
minutes, most of that was copying mail, in the early days I did not like
nor trust postfix, but are with it today and wouldnt use anything else
again, in case I change jobs I've always kept my converting script hehe)

Hrmm., boy, so far OT now I'll finish...

So, my recommendation, is to plan for what might be some day, rather
than wait until that "someday" arrives.


<>