Re: Dovecot/Rainloop 2.0.13-1_129.el5

2016-05-05 Thread Chris Smith

> On 5 May 2016, at 21:03, Edgar Pettijohn  wrote:
> 
> 
> 
> On 05/05/16 14:40, Chris Smith wrote:
>> I configured Dovecot on our mail server under Centos 5.3 (I think) some 
>> while ago now (about 2 years) and, to the best of my knowledge,it had been 
>> working correctly all that time.
>> 
>> However, one of the team wanted to use webmail while away from base and 
>> found that, although he could receive emails OK, he was unable to reply or 
>> send fresh emails. When he pressed Send he got a message “Authentication 
>> failed" in a pop-up box.
>> 
>> He assured me that sending mail had been working and I was certain that I 
>> had tested that aspect when I was setting Dovecot up, at least for local 
>> mail.
>> 
>> I tried to send email from my Dovecot account and had the same problem.
>> 
>> Our MTA is sendmail and that is not configured to authenticate on outgoing 
>> mail, The configuration for sendmail hasn’t changed at least since the last 
>> update in 16 March 2015 (sendmail 8.13.8-10.el5_11).
>> 
>> Dovecot uses php-5.5.5 in this set up.
>> 
>> The relevant entry in /var/log/maillog when I attempt to send an email from 
>> Dovecot is:
>> 
>> May  5 16:34:29 firewall dovecot: auth: Debug: auth client connected 
>> (pid=13001)
>> May  5 16:34:29 firewall dovecot: auth: Debug: client in: AUTH   1   
>> PLAIN   service=imapsecured lip=127.0.0.1   rip=127.0.0.1   lport=143
>>rport=51861 resp=AGNocmlzADB1dFkwdUcwNDkh
>> May  5 16:34:29 firewall dovecot: auth: Debug: pam(chris,127.0.0.1): lookup 
>> service=dovecot
>> May  5 16:34:29 firewall dovecot: auth: Debug: pam(chris,127.0.0.1): #1/1 
>> style=1 msg=Password:
>> May  5 16:34:29 firewall dovecot: auth: Debug: client out: OK1   
>> user=chris
>> May  5 16:34:29 firewall dovecot: auth: Debug: master in: REQUEST
>> 2607546369  13001   1   0bcf2e3a108cd9cd18eaff4b7de9c428
>> May  5 16:34:29 firewall dovecot: auth: Debug: passwd(chris,127.0.0.1): 
>> lookup
>> May  5 16:34:29 firewall dovecot: auth: Debug: master out: USER  
>> 2607546369  chris   system_groups_user=chrisuid=514 gid=100 
>> home=/home/chris
>> May  5 16:34:29 firewall dovecot: imap-login: Login: user=, 
>> method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=13002, secured
>> May  5 16:34:29 firewall dovecot: imap(chris): Disconnected: Logged out 
>> bytes=11/334
>> May  5 16:34:29 firewall sendmail[13003]: u45FYTtd013003: 
>> localhost.localdomain [127.0.0.1] did not issue MAIL/EXPN/VRFY/ETRN during 
>> connection to MTA
> Looks like a rainloop issue. Apparently it isn't speaking to sendmail 
> correctly.

You are quite correct. I had misconfigured the domain to require 
authentication. All is working now. Many thanks

> 
> 
>> 
>> 
>> The webmail server and our mail server are the same system. The firewall is 
>> open for port 143.
>> 
>> It is only send from Dovecot that fails authentication, all other outgoing 
>> mail is sent correctly.
>> 
>> Does anyone have any idea where else I can look for clues as to why there is 
>> this behaviour?
>> 
>> Suplementary question: what does the “Sign me” check box on the webmail log 
>> in page do?
>> 
>> Many thanks.
>> 
>> Chris


Dovecot/Rainloop 2.0.13-1_129.el5

2016-05-05 Thread Chris Smith
I configured Dovecot on our mail server under Centos 5.3 (I think) some while 
ago now (about 2 years) and, to the best of my knowledge,it had been working 
correctly all that time.

However, one of the team wanted to use webmail while away from base and found 
that, although he could receive emails OK, he was unable to reply or send fresh 
emails. When he pressed Send he got a message “Authentication failed" in a 
pop-up box.

He assured me that sending mail had been working and I was certain that I had 
tested that aspect when I was setting Dovecot up, at least for local mail.

I tried to send email from my Dovecot account and had the same problem.

Our MTA is sendmail and that is not configured to authenticate on outgoing 
mail, The configuration for sendmail hasn’t changed at least since the last 
update in 16 March 2015 (sendmail 8.13.8-10.el5_11).

Dovecot uses php-5.5.5 in this set up.

The relevant entry in /var/log/maillog when I attempt to send an email from 
Dovecot is:

May  5 16:34:29 firewall dovecot: auth: Debug: auth client connected (pid=13001)
May  5 16:34:29 firewall dovecot: auth: Debug: client in: AUTH  1   PLAIN   
service=imapsecured lip=127.0.0.1   rip=127.0.0.1   lport=143   
rport=51861 resp=AGNocmlzADB1dFkwdUcwNDkh
May  5 16:34:29 firewall dovecot: auth: Debug: pam(chris,127.0.0.1): lookup 
service=dovecot
May  5 16:34:29 firewall dovecot: auth: Debug: pam(chris,127.0.0.1): #1/1 
style=1 msg=Password: 
May  5 16:34:29 firewall dovecot: auth: Debug: client out: OK   1   
user=chris
May  5 16:34:29 firewall dovecot: auth: Debug: master in: REQUEST   
2607546369  13001   1   0bcf2e3a108cd9cd18eaff4b7de9c428
May  5 16:34:29 firewall dovecot: auth: Debug: passwd(chris,127.0.0.1): lookup
May  5 16:34:29 firewall dovecot: auth: Debug: master out: USER 2607546369  
chris   system_groups_user=chrisuid=514 gid=100 home=/home/chris
May  5 16:34:29 firewall dovecot: imap-login: Login: user=, 
method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=13002, secured
May  5 16:34:29 firewall dovecot: imap(chris): Disconnected: Logged out 
bytes=11/334
May  5 16:34:29 firewall sendmail[13003]: u45FYTtd013003: localhost.localdomain 
[127.0.0.1] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA


The webmail server and our mail server are the same system. The firewall is 
open for port 143.

It is only send from Dovecot that fails authentication, all other outgoing mail 
is sent correctly.

Does anyone have any idea where else I can look for clues as to why there is 
this behaviour?

Suplementary question: what does the “Sign me” check box on the webmail log in 
page do?

Many thanks.

Chris

[Dovecot] Dovecot does not update acl_shared_dict file

2012-10-30 Thread Chris Smith

Hi all,

Firstly, thanks for all your effort with this software. Much appreciated.

I am having a slight issues trying to enable reading of other users  
mailboxes. The docs are a little sparse for those that aren't  
mailadmin heros, I wonder if anyone could please help me see where I  
am going wrong.


I would like to allow some users to list and read the mailboxes of  
others. E.g:
When User1 logs in, they are presented with a list of their own  
folders, and those of User2, User3, etc to which they have (e.g.  
read/list) access


I followed the instructions on the wiki (for Version 1.X)- there are  
two concepts here:

1. Grant some [e.g. list/read] access on a mailbox folder to a particular user
2. Enable the acl_shared_dict to allow dovecot to track (and display  
to IMAP clients) the folders to which they have access. This will take  
the form of a BDB file:

/var/lib/dovecot/shared-mailboxes.db
This file can only be updated by using the SETACL command. *This is  
where I have the problem*. The SETACL command does nothing.


No matter how hard I try, I cannot get dovecot to update this file.  
The only indication I have that the file exists and is readable by  
dovecot is the disappearance from the logs of the line:

No acl_shared_dict setting - shared mailbox listing is disabled
So I can see that dovecot knows the file is there because it does not  
complain any more.


The file is there (because I created it myself, although it is empty:  
size = 0), and in a moment of weakness I made sure it could be updated  
(this will be changed back!):

ls -l /var/lib/dovecot/shared-mailboxes.db
-rwxrwxrwx 1 dovecot dovecot 0 2012-10-30 12:27  
/var/lib/dovecot/shared-mailboxes.db


But if I try to update the ACL, absolutely nothing happens:
[ > command ]  [ < reply ]


telnet localhost 143
< * OK  [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID  
ENABLE STARTTLS AUTH=CRAM-MD5] Email server

a login [User2] [pass]


< a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID  
ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND  
UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1  
CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH ACL  
RIGHTS=texk] Logged in

a SETACL Inbox [User 1] rl

< a OK Setacl complete.

At this time, in the dovecot log (with debug enabled):
2012-10-30 13:55:24 IMAP([User2]): Info: Namespace : Using permissions  
from /home/mailboxes/[domain]/[User1]: mode=0770 gid=-1
2012-10-30 13:55:24 IMAP([User2]): Info: acl vfile: reading file  
/home/mailboxes/[domain]/[User1]/dovecot-acl
2012-10-30 13:55:24 IMAP([User2]): Info: acl vfile: reading file  
/home/mailboxes/[domain]/[USer1]/dovecot-acl


Can anyone please help me track down what I'm doing wrong here?! It's  
driving me mad! Thanks for your time if you've read this far!!


As requested:
dovecot --version
1.2.9

base_dir: /var/run/dovecot/
log_path: /var/log/dovecot
info_log_path: /var/log/dovecot.info
log_timestamp: %Y-%m-%d %H:%M:%S
protocols: imaps imap
listen: 127.0.0.1:143
ssl_listen: 37.235.54.98
ssl_cert_file: /etc/ssl/dovecot.crt
ssl_key_file: /etc/ssl/private/dovecot.key
login_dir: /var/run/dovecot/login
login_executable: /usr/lib/dovecot/imap-login
login_greeting: Email server
valid_chroot_dirs: /var/spool/vmail
mail_location: maildir:/home/mailboxes/%d/%n
mail_debug: yes
mbox_write_locks: fcntl dotlock
mail_plugins: acl imap_acl
lda:
  postmaster_address: [ valid@ddress ]
auth default:
  mechanisms: plain cram-md5
  verbose: yes
  passdb:
driver: passwd-file
args: /etc/dovecot/passwd
  userdb:
driver: passwd-file
args: /etc/dovecot/users
  socket:
type: listen
client:
  path: /var/spool/postfix/private/auth-client
  mode: 432
  user: postfix
  group: postfix
master:
  path: /var/spool/postfix/private/auth-master
  mode: 384
  user: postfix
  group: postfix
plugin:
  acl: vfile
  acl_shared_dict: file:/var/lib/dovecot/shared-mailboxes.db
  acl: vfile:/etc/dovecot/acls