Re: Winbind auhentication

2023-03-10 Thread Luciano Mannucci
On Fri, 10 Mar 2023 14:22:26 -0500
"John Stoffel"  wrote:

> Now you don't say if your local user account works or not,
> but I'd work on getting just the AD part (really, you're using
> windind?) first.
Yes the local user works.
 
> Also, have you compared your postfix and dovecot setups?  There are
> good docs out there on how you combine them to use the same
> authentication backend.
Well, postfix doesn't need to authenticate users: it accepts all if
it comes from mynetworks.
I know it is not wise; it is just a test to explore single sign on
with didderent sources.
 
> And the info you posted really don't help much, since you don't post
> any log messages from when the authentication fails.  That will tell
> you more I'm sure.
Apologies, you are absolutely right. Here they are:

Mar 10 14:59:12 auth: Debug: Loading modules from directory: 
/usr/local/lib/dovecot/auth
Mar 10 14:59:12 auth: Debug: Module loaded: 
/usr/local/lib/dovecot/auth/lib20_auth_var_expand_crypt.so
Mar 10 14:59:12 auth: Debug: Read auth token secret from 
/var/run/dovecot/auth-token-secret.dat
Mar 10 14:59:12 auth: Debug: auth client connected (pid=4221)
Mar 10 14:59:25 auth: Debug: client in: AUTH1   PLAIN   service=pop3
session=yQtBK4z2lOzAqIoPlip=192.168.138.18  rip=192.168.138.15  
lport=110   rport=60564 resp=AG1jcwBrYXE5LnBpcA== (previous base64 data 
may contain sensitive data)
Mar 10 14:59:25 auth: Debug: passwd(mcs,192.168.138.15,): 
Performing passdb lookup
Mar 10 14:59:25 auth: Debug: passwd(mcs,192.168.138.15,): 
cache miss
Mar 10 14:59:25 auth-worker(4223): Debug: Loading modules from directory: 
/usr/local/lib/dovecot/auth
Mar 10 14:59:25 auth-worker(4223): Debug: Module loaded: 
/usr/local/lib/dovecot/auth/lib20_auth_var_expand_crypt.so
Mar 10 14:59:25 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): Server 
accepted connection (fd=13)
Mar 10 14:59:25 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): 
Sending version handshake
Mar 10 14:59:25 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): 
auth-worker<1>: Handling PASSV request
Mar 10 14:59:25 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): 
auth-worker<1>: passwd(mcs,192.168.138.15,): Performing 
passdb lookup
Mar 10 14:59:25 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): 
auth-worker<1>: passwd(mcs,192.168.138.15,): lookup
Mar 10 14:59:25 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): 
auth-worker<1>: passwd(mcs,192.168.138.15,): Finished passdb 
lookup
Mar 10 14:59:25 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): 
auth-worker<1>: Finished
Mar 10 14:59:25 auth: Debug: passwd(mcs,192.168.138.15,): 
Finished passdb lookup
Mar 10 14:59:25 auth: Debug: auth(mcs,192.168.138.15,): Auth 
request finished
Mar 10 14:59:25 auth: Debug: client passdb out: OK  1   user=mcs
Mar 10 14:59:25 auth: Debug: master in: REQUEST 980549633   42211   
19c7b19fec4f0dee8512545a1ae27501session_pid=4224
Mar 10 14:59:25 auth: Debug: passwd(mcs,192.168.138.15,): 
Performing userdb lookup
Mar 10 14:59:25 auth: Debug: passwd(mcs,192.168.138.15,): 
userdb cache miss
Mar 10 14:59:25 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): 
auth-worker<2>: Handling USER request
Mar 10 14:59:25 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): 
auth-worker<2>: passwd(mcs,192.168.138.15,): Performing 
userdb lookup
Mar 10 14:59:25 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): 
auth-worker<2>: passwd(mcs,192.168.138.15,): lookup
Mar 10 14:59:25 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): 
auth-worker<2>: passwd(mcs,192.168.138.15,): Finished userdb 
lookup
Mar 10 14:59:25 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): 
auth-worker<2>: Finished
Mar 10 14:59:25 auth: Debug: passwd(mcs,192.168.138.15,): 
Finished userdb lookup
Mar 10 14:59:25 auth: Debug: master userdb out: USER980549633   mcs 
system_groups_user=mcs  uid=1001gid=1001home=/home/mcs  
auth_mech=PLAIN
Mar 10 14:59:25 pop3-login: Info: Login: user=, method=PLAIN, 
rip=192.168.138.15, lip=192.168.138.18, mpid=4224, session=
Mar 10 14:59:32 pop3(mcs)<4224>: Info: Disconnected: Logged 
out top=0/0, retr=0/0, del=0/0, size=0
Mar 10 14:59:35 auth: Debug: auth client connected (pid=4225)
Mar 10 14:59:59 auth: Debug: client in: AUTH1   PLAIN   service=pop3
session=q5FJLYz2n+zAqIoPlip=192.168.138.18  rip=192.168.138.15  
lport=110   rport=60575 resp=** (previous base64 data may 
contain sensitive data)
Mar 10 14:59:59 auth: Debug: passwd(geoplan,192.168.138.15,): 
Performing passdb lookup
Mar 10 14:59:59 auth: Debug: passwd(geoplan,192.168.138.15,): 
cache miss
Mar 10 14:59:59 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): 
auth-worker<3>: Handling PASSV request
Mar 10 14:59:59 auth-worker(4223): Debug: conn unix:auth-worker (uid=0): 
auth-worker<3>: passwd(geoplan,192.168.138.15,): Perform

Winbind auhentication

2023-03-10 Thread Luciano Mannucci


Helo all!

I'm trying to set up a dovecot server so that it authenticates local
user via /etc/passwd (I'm on a Freebsd 13.1) and via winbindd for
those that it cannot find localy. The samba suite is alive and well,
postfix gets happily mail from domain users and saves it with correct
name and permissions from the windows domain. If I try to authenticate
a domain user via wbinfo it works, with dovecot it doesn't.
I guess I'v forgot something in the dovecot config... :)

Here is my doveconf -n:

# 2.3.20 (80a5ac675d): /usr/local/etc/dovecot/dovecot.conf
# Pigeonhole version 0.5.20 (149edcf2)
# OS: FreeBSD 13.1-RELEASE-p5 powerpc  ufs
# Hostname: numeron.mcs.it
auth_cache_size = 30 k
auth_debug_passwords = yes
auth_mechanisms = plain ntlm login
auth_use_winbind = yes
auth_username_format = %n
auth_winbind_helper_path = /usr/local/bin/ntlm_auth
default_client_limit = 1128
default_vsz_limit = 712 M
disable_plaintext_auth = no
first_valid_uid = 0
info_log_path = /var/log/dovecot/logfile.info
listen = *
lock_method = flock
log_path = /var/log/dovecot/logfile
login_greeting = Dovecot at Nameron Ready.
mail_location = mbox:/var/spool/dovecot/%u:INBOX=/var/mail/%u
mail_plugins = fts
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character 
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy 
include variables body enotify environment mailbox date index ihave duplicate 
mime foreverypart extracttext
passdb {
  driver = passwd
}
protocols = imap pop3
service replication-notify-fifo {
  name = aggregator
}
service anvil-auth-penalty {
  name = anvil
}
service auth-worker {
  name = auth-worker
}
service auth-client {
  user = root
  name = auth
}
service config {
  name = config
}
service dict-async {
  name = dict-async
}
service dict {
  name = dict
}
service login/proxy-notify {
  name = director
}
service dns-client {
  name = dns-client
}
service doveadm-server {
  name = doveadm
}
service imap-hibernate {
  name = imap-hibernate
}
service imap {
  service_count = 0
  name = imap-login
}
service imap-urlauth {
  name = imap-urlauth-login
}
service imap-urlauth-worker {
  name = imap-urlauth-worker
}
service token-login/imap-urlauth {
  name = imap-urlauth
}
service imap-master {
  name = imap
}
service indexer-worker {
  name = indexer-worker
}
service indexer {
  name = indexer
}
service ipc {
  name = ipc
}
service lmtp {
  name = lmtp
}
service log-errors {
  name = log
}
service sieve {
  name = managesieve-login
}
service login/sieve {
  name = managesieve
}
service old-stats-mail {
  name = old-stats
}
service pop3 {
  process_limit = 255
  service_count = 1
  name = pop3-login
}
service login/pop3 {
  name = pop3
}
service replicator-doveadm {
  name = replicator
}
service login/stats-writer {
  unix_listener {
group = mail
mode = 0666
user = dovecot
path = stats-reader
  }
  unix_listener {
group = mail
mode = 0666
user = dovecot
path = stats-writer
  }
  name = stats
}
service submission {
  name = submission-login
}
service login/submission {
  name = submission
}
ssl = no
userdb {
  driver = passwd
}
protocol pop3 {
  pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
  pop3_enable_last = yes
  pop3_uidl_format = %08Xu%08Xv
  service replication-notify-fifo {
name = aggregator
  }
  service anvil-auth-penalty {
name = anvil
  }
  service auth-worker {
name = auth-worker
  }
  service auth-client {
name = auth
  }
  service config {
name = config
  }
  service dict-async {
name = dict-async
  }
  service dict {
name = dict
  }
  service login/proxy-notify {
name = director
  }
  service dns-client {
name = dns-client
  }
  service doveadm-server {
name = doveadm
  }
  service imap-hibernate {
name = imap-hibernate
  }
  service imap {
name = imap-login
  }
  service imap-urlauth {
name = imap-urlauth-login
  }
  service imap-urlauth-worker {
name = imap-urlauth-worker
  }
  service token-login/imap-urlauth {
name = imap-urlauth
  }
  service imap-master {
name = imap
  }
  service indexer-worker {
name = indexer-worker
  }
  service indexer {
name = indexer
  }
  service ipc {
name = ipc
  }
  service lmtp {
name = lmtp
  }
  service log-errors {
name = log
  }
  service sieve {
name = managesieve-login
  }
  service login/sieve {
name = managesieve
  }
  service old-stats-mail {
name = old-stats
  }
  service pop3 {
name = pop3-login
  }
  service login/pop3 {
name = pop3
  }
  service replicator-doveadm {
name = replicator
  }
  service login/stats-writer {
name = stats
  }
  service submission {
name = submission-login
  }
  service login/submission {
name = submission
  }
}
protocol lda {
  debug_log_path = /var/log/dovecot/lda-debug.log
  info_log_path = /var/log/dovecot/lda.info
  log_path = /var/log/dovecot/lda.err
  mail_debug = yes
  postmaster_address = l...@m

Re: Strange thing on log rotation front

2018-01-22 Thread Luciano Mannucci
On Sat, 20 Jan 2018 15:23:42 +0100
Andreas Jobs  wrote:

> Remove "U" from the flags:
> 
> U indicates that the file specified by path_to_pid_cmd_file will
>   contain the ID for a process group instead of a process.
Got the very same result:

Jan 22 15:00:00 master: Warning: Sent SIGKILL to 1 log processes

> And sometimes "B" (don't insert info message about log rotation) is useful
> too.
The only difference is that now I have no evidence of why the logfile.info
is empty.
I'll try to compile the last 2.2 version, mine is the 2.2.28 that comes
with freebsd.

Thanks anyway,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/

-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Strange thing on log rotation front

2018-01-19 Thread Luciano Mannucci

Hi all!

I've decided to rotate the dovecot logs automatically on my freebsd
10.4 server using the system's newsyslog feature. I started with
logfile.info putting the line

/var/log/dovecot/logfile.info  600  31*@T16  ZCU 
/var/run/dovecot/master.pid 30

which should send a SIGUSER to the master process, which it seems to
do for I see in the log file:

master: Warning: Sent SIGKILL to 1 log processes
master: Warning: Killed with signal 15 (by pid=69871 uid=0 code=kill)

though the log process doesn't die.

What did I do wrong?

my doveconf -n says:
root@baobab:/var/log/dovecot # doveconf -n 
# 2.2.28 (bed8434): /usr/local/etc/dovecot/dovecot.conf
# Pigeonhole version 0.4.17 (e179378)
# OS: FreeBSD 10.4-RELEASE-p3 amd64  ufs
auth_cache_size = 3 k
auth_debug = yes
auth_debug_passwords = yes
auth_mechanisms = plain login
auth_verbose = yes
default_client_limit = 1228
default_vsz_limit = 712 M
disable_plaintext_auth = no
first_valid_gid = 0
first_valid_uid = 100
info_log_path = /var/log/dovecot/logfile.info
listen = *
log_path = /var/log/dovecot/logfile
login_greeting = Dovecot at Baobab ready.
login_trusted_networks = 127.0.0.0/8 212.45.144.0/24 192.168.134.0/24
mail_location = 
mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u
maildir_copy_with_hardlinks = no
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character 
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy 
include variables body enotify environment mailbox date index ihave duplicate 
mime foreverypart extracttext
mbox_lock_timeout = 443 secs
namespace {
  inbox = yes
  location = 
  prefix = 
  separator = .
  type = private
}
passdb {
  driver = pam
}
plugin {
  mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename
  mail_log_fields = uid box msgid size
}
protocols = pop3 imap
service auth {
  unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user = postfix
  }
  user = root
}
service imap-login {
  inet_listener imaps {
address = *
  }
  process_limit = 512
}
service pop3-login {
  chroot = 
  executable = pop3-login -D
  inet_listener pop3s {
address = *
  }
  process_limit = 512
}
ssl_ca = http://www.lesassaie.IT/


master: Warning: Sent SIGKILL to 511 pop3-login processes

2017-09-07 Thread Luciano Mannucci

I have a lot of "master: Warning: Sent SIGKILL to 511 pop3-login processes"
in my log file. Should I worry?

(I'm running # 2.2.32 (dfbe293d4))

Thanks to all,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: Problem compiling dovecot 2.2.31 on Solaris

2017-07-21 Thread Luciano Mannucci
On Fri, 21 Jul 2017 15:04:59 +0100
James  wrote:

> from SUNWhea on S10 and system/header on S11.  Nevertheless it's missing 
> on Solaris 8 and 9. You can make your own, this worked for me on Solaris 
> 9 at least once, untested recently:
Worked!
Thanks!
Now it is complainig about openssl, I think:

../../src/lib-ssl-iostream/iostream-openssl.h:6:25: error: openssl/ssl.h: No 
such file or directory
In file included from test-http-client.c:12:

I'll try to install a modern version, hoping it'll compile... :)

Thanks again,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: Problem compiling dovecot 2.2.31 on Solaris

2017-07-21 Thread Luciano Mannucci
On Fri, 21 Jul 2017 09:27:18 -0400
Oscar del Rio  wrote:

> solaris 8 is way too old!
> I think you need Solaris 10 or newer
I know.
Though dovecot 2.2.5 compiles and runs:

nameron# doveconf -n 
# 2.2.5: /etc/dovecot/dovecot.conf
# OS: SunOS 5.8 sun4u  ufs

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: Problem compiling dovecot 2.2.31 on Solaris

2017-07-21 Thread Luciano Mannucci
On Fri, 21 Jul 2017 14:38:57 +0200
Levente  wrote:

> You are missing stdint.h. Try to locate that, and include the
> directory. However, this is odd, since it should be shipped with GCC
> itself.
You're right!
It is missing.

This is the output of gcc -v:

Reading specs from /opt/csw/gcc4/lib/gcc/sparc-sun-solaris2.8/4.0.2/specs
Target: sparc-sun-solaris2.8
Configured with: ../sources/gcc-4.0.2/configure --prefix=/opt/csw/gcc4 
--with-local-prefix=/opt/csw --without-gnu-as --with-as=/usr/ccs/bin/as 
--without-gnu-ld --with-ld=/usr/ccs/bin/ld --enable-threads=posix 
--enable-shared --enable-multilib --enable-nls --with-included-gettext 
--with-libiconv-prefix=/opt/csw --with-x --enable-java-awt=xlib 
--with-system-zlib --enable-languages=c,c++,f95,java,objc,ada
Thread model: posix
gcc version 4.0.2

Is it too old?

Thanks again,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Problem compiling dovecot 2.2.31 on Solaris

2017-07-21 Thread Luciano Mannucci

I'm trying to compile under SunOS 5.8 Generic_117350-28 sun4u sparc 
SUNW,Ultra-5_10
(I know it's a bit oldish :-) and I get this error:

/bin/bash ../../libtool  --tag=CC   --mode=compile gcc
-DHAVE_CONFIG_H -I. -I../.. -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes
-Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2
-Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2  -MT pkcs5.lo -MD
-MP -MF .deps/pkcs5.Tpo -c -o pkcs5.lo pkcs5.c libtool: compile: gcc
-DHAVE_CONFIG_H -I. -I../.. -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes
-Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2
-Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT pkcs5.lo -MD
-MP -MF .deps/pkcs5.Tpo -c pkcs5.c -fPIC -DPIC -o .libs/pkcs5.o pkcs5.c:9:20:
error: stdint.h: No such file or directory make[4]: *** [pkcs5.lo] Error 1

What have I missed?

I did:

./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var\
  --mandir=/usr/share/man --docdir=/usr/share/doc/packages/dovecot\
  --disable-ipv6 --enable-header-install\

make

Is it reasonable?

Thanks in advance,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: 2.2.29.8: YACD (Yet Another Core Dump)

2017-06-06 Thread Luciano Mannucci
On Tue, 6 Jun 2017 15:56:46 +0300
Aki Tuomi  wrote:

> This looks like a coprrupted mbox file
Ok, I issued 

# doveadm index -u paco_mcs INBOX

and got no errors.

I'll upgrade to 2.2.30.1 and see if it happens again...

Thanks,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


2.2.29.8: YACD (Yet Another Core Dump)

2017-06-06 Thread Luciano Mannucci

I'm getting this in my logfile, should I worry?:

Jun 06 12:28:47 imap(paco_mcs): Error: Next message unexpectedly corrupted in 
mbox file /var/spool/mail/paco_mcs at 639279728
Jun 06 12:28:47 imap(paco_mcs): Error: Unexpectedly lost From-line from mbox 
file /var/spool/mail/paco_mcs at 639279728
Jun 06 12:28:47 imap(paco_mcs): Panic: file mbox-sync.c: line 1338 
(mbox_sync_handle_eof_updates): assertion failed: (trailer_size <= 2)
Jun 06 12:28:47 imap(paco_mcs): Error: Raw backtrace: 
/usr/lib/dovecot/libdovecot.so.0(+0x9cd16) [0xb75e7d16] -> 
/usr/lib/dovecot/libdovecot.so.0(+0x9cd9f) [0xb75e7d9f] -> 
/usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb757104e] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(+0x81698) [0xb76d4698] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(mbox_sync+0x4b) [0xb76d71cb] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(+0x7728c) [0xb76ca28c] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(+0x778c6) [0xb76ca8c6] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(mail_get_stream_because+0x5f) 
[0xb768112f] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_open+0x811) [0xb774bef1] 
-> dovecot/imap() [0x8064c76] -> dovecot/imap() [0x80629c6] -> 
dovecot/imap(imap_fetch_more+0x31) [0x8063ed1] -> dovecot/imap(cmd_fetch+0x4bb) 
[0x805574b] -> dovecot/imap(command_exec+0x4a) [0x80613aa] -> dovecot/imap() 
[0x805f8d6] -> dovecot/imap() [0x805f961] -> 
dovecot/imap(client_handle_input+0x185) [0x805fcc5] -
 > dovecot/imap(client_input+0x71) [0x80601b1] -> 
 > /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x67) [0xb75ff997] -> 
 > /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xeb) 
 > [0xb76013ab] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x45) 
 > [0xb75ffa55] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x48) 
 > [0xb75ffc18] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2d) 
 > [0xb757c1ad] -> dovecot/imap(main+0x344) [0x806dbc4] -> 
 > /lib/libc.so.6(__libc_start_main+0xfe) [0xb73d6c2e]
Jun 06 12:28:48 imap(paco_mcs): Fatal: master: service(imap): child 4989 killed 
with signal 6 (core dumped)
Jun 06 12:28:52 imap(paco_mcs): Error: Next message unexpectedly lost from mbox 
file /var/spool/mail/paco_mcs at 1073259120 (noncached)
Jun 06 12:28:52 imap(paco_mcs): Error: Sync failed for mbox file 
/var/spool/mail/paco_mcs: Couldn't get body size for seq=11213

My doveconf -n:

# 2.2.29.1 (e0b76e3): /usr/local/etc/dovecot/dovecot.conf
# Pigeonhole version 0.4.17 (e179378)
# OS: Linux 3.0.101-105-pae i686 openSUSE 11.4 (i586) ext3
auth_cache_size = 3 k
auth_debug = yes
auth_debug_passwords = yes
auth_mechanisms = plain login
auth_verbose = yes
default_client_limit = 1249
default_vsz_limit = 712 M
disable_plaintext_auth = no
first_valid_gid = 0
first_valid_uid = 100
info_log_path = /var/log/dovecot/logfile.info
listen = *
log_path = /var/log/dovecot/logfile
login_greeting = Dovecot at Baobab ready.
login_trusted_networks = 127.0.0.0/8 212.45.144.0/24 192.168.134.0/24
mail_location = 
mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u
maildir_copy_with_hardlinks = no
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character 
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy 
include variables body enotify environment mailbox date index ihave duplicate 
mime foreverypart extracttext
mbox_lock_timeout = 443 secs
namespace {
  inbox = yes
  location = 
  prefix = 
  separator = .
  type = private
}
passdb {
  driver = pam
}
plugin {
  mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename
  mail_log_fields = uid box msgid size
}
protocols = pop3 imap
service auth {
  unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user = postfix
  }
  user = root
}
service imap-login {
  inet_listener imaps {
address = *
  }
  process_limit = 512
}
service pop3-login {
  chroot = 
  executable = pop3-login -D
  inet_listener pop3s {
address = *
  }
  process_limit = 512
}
ssl_ca = http://www.lesassaie.IT/


core from 2.2.29.1

2017-05-22 Thread Luciano Mannucci
I've got this in my logfile, should I worry?

May 19 14:45:04 imap(liscia_mcs): Panic: file mail-index-transaction-update.c: 
line 19 (mail_index_transaction_lookup): assertion failed: (seq >= 
t->first_new_seq && seq <= t->last_new_seq)
May 19 14:45:04 imap(liscia_mcs): Error: Raw backtrace: 
/usr/lib/dovecot/libdovecot.so.0(+0x9cd16) [0xb7568d16] -> 
/usr/lib/dovecot/libdovecot.so.0(+0x9cd9f) [0xb7568d9f] -> 
/usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb74f204e] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(+0xe3ebf) [0xb76b7ebf] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(+0xe730c) [0xb76bb30c] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(mail_index_lookup_uid+0x1d) 
[0xb76bf47d] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(mail_cache_decision_state_update+0xac) 
[0xb769ff8c] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(mail_cache_lookup_headers+0x7f) 
[0xb76a23bf] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xb2898) [0xb7686898] 
-> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_get_first_header+0xbf) 
[0xb768723f] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(mail_get_first_header+0x45) 
[0xb7601e95] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xb4fc1) [0xb7688fc1] 
-> /usr/lib/dovecot/libdovecot-storage.so.0(+
 0xb518f) [0xb768918f] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(index_mail_close+0x136) [0xb76896e6] 
-> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_save_cancel+0x6c) 
[0xb761085c] -> dovecot/imap() [0x8052e1d] -> dovecot/imap() [0x805303c] -> 
/usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x67) [0xb7580997] -> 
/usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xeb) 
[0xb75823ab] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x45) 
[0xb7580a55] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x48) [0xb7580c18] 
-> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2d) [0xb74fd1ad] -> 
dovecot/imap(main+0x344) [0x806dbc4] -> /lib/libc.so.6(__libc_start_main+0xfe) 
[0xb7357c2e]
May 19 14:45:04 imap(liscia_mcs): Fatal: master: service(imap): child 24082 
killed with signal 6 (core dumped)

Here is mi doveconf -n:

# 2.2.29.1 (e0b76e3): /usr/local/etc/dovecot/dovecot.conf
# Pigeonhole version 0.4.17 (e179378)
# OS: Linux 3.0.101-105-pae i686 openSUSE 11.4 (i586) ext3
auth_cache_size = 3 k
auth_debug = yes
auth_debug_passwords = yes
auth_mechanisms = plain login
auth_verbose = yes
default_client_limit = 1249
default_vsz_limit = 712 M
disable_plaintext_auth = no
first_valid_gid = 0
first_valid_uid = 100
info_log_path = /var/log/dovecot/logfile.info
listen = *
log_path = /var/log/dovecot/logfile
login_greeting = Dovecot at Baobab ready.
login_trusted_networks = 127.0.0.0/8 212.45.144.0/24 192.168.134.0/24
mail_location = 
mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u
maildir_copy_with_hardlinks = no
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character 
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy 
include variables body enotify environment mailbox date index ihave duplicate 
mime foreverypart extracttext
mbox_lock_timeout = 443 secs
namespace {
  inbox = yes
  location = 
  prefix = 
  separator = .
  type = private
}
passdb {
  driver = pam
}
plugin {
  mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename
  mail_log_fields = uid box msgid size
}
protocols = pop3 imap
service auth {
  unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user = postfix
  }
  user = root
}
service imap-login {
  inet_listener imaps {
address = *
  }
  process_limit = 512
}
service pop3-login {
  chroot = 
  executable = pop3-login -D
  inet_listener pop3s {
address = *
  }
  process_limit = 512
}
ssl_ca = http://www.lesassaie.IT/


Re: Problem with Userid

2017-05-03 Thread Luciano Mannucci
On Tue, 2 May 2017 20:30:42 +0300
Aki Tuomi  wrote:

> You need to either drop or chown the mailbox file.
Dropped.
It gets recerated (I sent a test mail):
drwx--2 alessandro_cmr   poppers   4096 May  3 12:13 
alessandro_cmr/

and the previous error in lda-error.log goes away. Now I have:

May 03 12:13:08 lda(alessandro_cmr): Info: 
msgid=: save failed to open mailbox INBOX: Opening INBOX failed: Permission 
denied

in lda.error. I think this is due to permissions of the indexes, that
are in another location: (from my doveconf -n)

mail_location = 
mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u

removing the directory /var/dovecot_indexes/alessandro_cmr fixes the
issue.

Should'nt dovecot-lda log the directory name in the lda-error.log file?
That would make debugging much easier...

Thanks a lot,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Problem with Userid

2017-05-02 Thread Luciano Mannucci

I have a problem with a physical user that was removed and recreated
whith same name and different uid. The home dir, the mailbox file and
the index directory where removed and recreated with the new uid/gid.

I can feed the mailbox via procmail, though dovecot-lda complains that
userids do not match:

May 02 15:27:33 lda(alessandro_cmr): Error:
stat(/var/spool/mailboxes/alessandro_cmr/INBOX) failed: Permission denied
(euid=3525(alessandro_cmr) egid=111(poppers) missing +x
perm: /var/spool/mailboxes/alessandro_cmr, dir owned by 1000:111 mode=0700)

doveadm auth cache flush says 28 entries flushed but the situation
does'nt change.

here's my doveconf -n:

# 2.2.29.1 (e0b76e3): /usr/local/etc/dovecot/dovecot.conf
# Pigeonhole version 0.4.17 (e179378)
# OS: Linux 3.0.101-105-pae i686 openSUSE 11.4 (i586) ext3
auth_cache_size = 3 k
auth_debug = yes
auth_debug_passwords = yes
auth_mechanisms = plain login
auth_verbose = yes
default_client_limit = 1249
default_vsz_limit = 712 M
disable_plaintext_auth = no
first_valid_gid = 0
first_valid_uid = 100
info_log_path = /var/log/dovecot/logfile.info
listen = *
log_path = /var/log/dovecot/logfile
login_greeting = Dovecot at Baobab ready.
login_trusted_networks = 127.0.0.0/8 212.45.144.0/24 192.168.134.0/24
mail_location = 
mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u
maildir_copy_with_hardlinks = no
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character 
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy 
include variables body enotify environment mailbox date index ihave duplicate 
mime foreverypart extracttext
mbox_lock_timeout = 443 secs
namespace {
  inbox = yes
  location = 
  prefix = 
  separator = .
  type = private
}
passdb {
  driver = pam
}
plugin {
  mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename
  mail_log_fields = uid box msgid size
}
protocols = pop3 imap
service auth {
  unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user = postfix
  }
  user = root
}
service imap-login {
  inet_listener imaps {
address = *
  }
  process_limit = 512
}
service pop3-login {
  chroot = 
  executable = pop3-login -D
  inet_listener pop3s {
address = *
  }
  process_limit = 512
}
ssl_ca = http://www.lesassaie.IT/


Re: Timeout Leak

2017-03-16 Thread Luciano Mannucci
On Thu, 16 Mar 2017 13:48:27 +0200
Aki Tuomi  wrote:

> These are always worth looking into. Please do post, also any auth debug
> logs are welcome.
Ok.

Theese the logfile lines:

Mar 14 18:06:12 master: Warning: Killed with signal 15 (by pid=7390 uid=0 
code=kill)
Mar 14 18:06:20 auth: Error: net_connect_unix(auth-worker) failed: Connection 
refused
Mar 14 18:06:42 auth: Warning: Timeout leak: 0x805e480 
(auth-request-handler.c:550)
Mar 14 18:06:42 auth: Warning: Timeout leak: 0x805e480 
(auth-request-handler.c:550)
Mar 14 18:06:42 auth: Warning: Timeout leak: 0x805e480 
(auth-request-handler.c:550)

Here is the logfile.info of the relevant minute (a bit longish, passwors 
censored :)...

Mar 14 18:06:01 pop3(l.radice_dls): Info: Disconnected: Logged out top=0/0, 
retr=0/0, del=0/7415, size=950442332
Mar 14 18:06:01 auth: Debug: auth client connected (pid=7375)
Mar 14 18:06:01 auth: Debug: client in: AUTH3   LOGIN   service=smtp
nologin lip=212.45.144.70   rip=89.248.171.132
Mar 14 18:06:01 auth: Debug: client passdb out: CONT3   VXNlcm5hbWU6
Mar 14 18:06:01 auth: Debug: client in: CONT3   
 (previous base64 data may contain sensitive data)
Mar 14 18:06:01 auth: Debug: client passdb out: CONT3   UGFzc3dvcmQ6
Mar 14 18:06:01 auth: Debug: client in: CONT3    (previous 
base64 data may contain sensitive data)
Mar 14 18:06:01 auth-worker(6538): Debug: pam(ad...@bilink.net,89.248.171.132): 
lookup service=dovecot
Mar 14 18:06:01 auth-worker(6538): Debug: pam(ad...@bilink.net,89.248.171.132): 
#1/1 style=1 msg=Password: 
Mar 14 18:06:02 auth: Debug: auth client connected (pid=7377)
Mar 14 18:06:02 auth: Debug: client in: AUTH1   PLAIN   service=pop3
session=zgbC17NKLOvAqAvRlip=192.168.134.44  
rip=192.168.11.209lport=110 rport=60204
Mar 14 18:06:02 auth: Debug: client passdb out: CONT1   
Mar 14 18:06:02 auth: Debug: client in: CONT1   
 (previous base64 data may contain 
sensitive data)
Mar 14 18:06:02 auth-worker(7121): Debug: 
pam(m.castrechini_mms,192.168.11.209,): lookup service=dovecot
Mar 14 18:06:02 auth-worker(7121): Debug: 
pam(m.castrechini_mms,192.168.11.209,): #1/1 style=1 
msg=Password: 
Mar 14 18:06:02 auth: Debug: client passdb out: OK  1   
user=m.castrechini_mms  
Mar 14 18:06:03 auth: Debug: master in: REQUEST 2912419841  73771   
e4d4a4c42ae38c0214a0def0bb0f0915session_pid=7378
Mar 14 18:06:03 auth: Debug: 
passwd(m.castrechini_mms,192.168.11.209,): userdb cache hit: 
system_groups_user=m.castrechini_mmsuid=3002gid=111 
home=/home/m.castrechini_mms
Mar 14 18:06:03 auth: Debug: master userdb out: USER2912419841  
m.castrechini_mms   system_groups_user=m.castrechini_mmsuid=3002
gid=111 home=/home/m.castrechini_mms
Mar 14 18:06:03 pop3-login: Info: Login: user=, 
method=PLAIN, rip=192.168.11.209, lip=192.168.134.44, mpid=7378, 
session=
Mar 14 18:06:03 pop3(m.castrechini_mms): Info: Disconnected: Logged out 
top=0/0, retr=0/0, del=0/0, size=0
Mar 14 18:06:03 auth-worker(6538): Info: pam(ad...@bilink.net,89.248.171.132): 
unknown user
Mar 14 18:06:05 auth: Debug: client passdb out: FAIL3   
user=ad...@bilink.net
Mar 14 18:06:06 auth: Debug: auth client connected (pid=7380)
Mar 14 18:06:06 auth: Debug: client in: AUTH1   PLAIN   service=pop3
session=khD317NKD+PAqAtYlip=192.168.134.44  rip=192.168.11.88   
lport=110   rport=58127 resp= (previous 
base64 data may contain sensitive data)
Mar 14 18:06:06 auth-worker(6538): Debug: 
pam(a.zurlo_mms,192.168.11.88,): lookup service=dovecot
Mar 14 18:06:06 auth-worker(6538): Debug: 
pam(a.zurlo_mms,192.168.11.88,): #1/1 style=1 msg=Password: 
Mar 14 18:06:06 auth: Debug: client passdb out: OK  1   
user=a.zurlo_mms
Mar 14 18:06:06 auth: Debug: master in: REQUEST 3493330945  73801   
e4c2a1b6ab1b7ede85f4fd8611a960c8session_pid=7382
Mar 14 18:06:06 auth: Debug: 
passwd(a.zurlo_mms,192.168.11.88,): userdb cache hit: 
system_groups_user=a.zurlo_mms uid=3005gid=111 
home=/home/a.zurlo_mms
Mar 14 18:06:06 auth: Debug: master userdb out: USER3493330945  
a.zurlo_mms system_groups_user=a.zurlo_mms  uid=3005gid=111 
home=/home/a.zurlo_mms
Mar 14 18:06:06 pop3-login: Info: Login: user=, method=PLAIN, 
rip=192.168.11.88, lip=192.168.134.44, mpid=7382, session=
Mar 14 18:06:06 pop3(a.zurlo_mms): Info: Disconnected: Logged out top=0/0, 
retr=0/0, del=0/0, size=0
Mar 14 18:06:06 auth: Debug: auth client connected (pid=7383)
Mar 14 18:06:06 auth: Debug: client in: AUTH1   PLAIN   service=pop3
session=KP/817NKEuPAqAtYlip=192.168.134.44  rip=192.168.11.88   
lport=110   rport=58130 
resp= (previous base64 data may 
contain sensitiv

Timeout Leak

2017-03-16 Thread Luciano Mannucci

Hello all,

I've got 3 occurences of this message in my log file:

auth: Warning: Timeout leak: 0x805e480 (auth-request-handler.c:550)

Can I ignore it, or is it a syhmptom of something wrong?

I'm running dovecot 2.2.28 (bed8434). I'll post my doveconf -n if it
is worth investigating further...

Cheers,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: pop3 login core dump

2017-02-14 Thread Luciano Mannucci
On Mon, 13 Feb 2017 16:45:21 +0100
Luciano Mannucci  wrote:

> where am I supposed to add the -D option in order to get the core file
> dumped so I can examine it?
I think I've got it. I've set my config to:

service pop3-login {
  executable = pop3-login -D
  inet_listener pop3s {
address = *
  }
  process_limit = 512
}

Now I have to wait till next SIGSEV...

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: pop3 login core dump

2017-02-13 Thread Luciano Mannucci
On Mon, 13 Feb 2017 16:45:21 +0100
Luciano Mannucci  wrote:

> where am I supposed to add the -D option in order to get the core file
> dumped so I can examine it?
Ops, forgotten to post my doveconf.

Here is it:

# 2.2.27 (c0f36b0): /usr/local/etc/dovecot/dovecot.conf
# Pigeonhole version 0.4.15 (97b3da0)
# OS: Linux 3.0.101-105-pae i686 openSUSE 11.4 (i586) ext3
auth_cache_size = 3 k
auth_debug = yes
auth_debug_passwords = yes
auth_mechanisms = plain login
auth_verbose = yes
default_client_limit = 1228
default_vsz_limit = 712 M
disable_plaintext_auth = no
first_valid_gid = 0
first_valid_uid = 100
info_log_path = /var/log/dovecot/logfile.info
listen = *
log_path = /var/log/dovecot/logfile
login_greeting = Dovecot at Baobab ready.
login_trusted_networks = 127.0.0.0/8 212.45.144.0/24 192.168.134.0/24
mail_location = 
mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u
maildir_copy_with_hardlinks = no
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character 
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy 
include variables body enotify environment mailbox date index ihave duplicate 
mime foreverypart extracttext
namespace {
  inbox = yes
  location = 
  prefix = 
  separator = .
  type = private
}
passdb {
  driver = pam
}
plugin {
  mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename
  mail_log_fields = uid box msgid size
}
protocols = pop3 imap
service auth {
  unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user = postfix
  }
  user = root
}
service imap-login {
  inet_listener imaps {
address = *
  }
  process_limit = 512
}
service pop3-login {
  inet_listener pop3s {
address = *
  }
  process_limit = 512
}
ssl_ca = http://www.lesassaie.IT/


pop3 login core dump

2017-02-13 Thread Luciano Mannucci

Hello!

Sorry for my newbie question, I've notied some lines in my logfile
like this:

Feb 13 16:05:54 pop3-login: Fatal: master: service(pop3-login): child 10660
killed with signal 11 (core not dumped - add -D parameter to service pop3-login
{ executable } ...

where am I supposed to add the -D option in order to get the core file
dumped so I can examine it?

Thanks to all,

luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: Conditional SASL authentication

2015-02-24 Thread Luciano Mannucci
On Tue, 24 Feb 2015 19:00:32 +0100
Reindl Harald  wrote:

> so you allow random envelope senders on your servers?
> why?
I know it is not necessarily a good idea... :)
It is basicaly to allow fake home addresses from the office for some
managers.

Thanks for the smtpd_recipient_restrictions list, it sounds interesting!

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: Conditional SASL authentication

2015-02-24 Thread Luciano Mannucci
On Tue, 24 Feb 2015 19:00:09 +0100
Benny Pedersen  wrote:

> no, when this happend disable smtp auth, but not login, then send a mail 
> why smtp auth is disabled
This way, I'll block everybody, not only the troyan victims.

luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: Conditional SASL authentication

2015-02-24 Thread Luciano Mannucci
On Tue, 24 Feb 2015 18:56:03 +0100
Reindl Harald  wrote:

> * if you cahnge the pwd SASL auth is taken away
True.
But this way the user will be unable to read his/her mail, including
my message saying "Hey, you've got a new virus!".

Thanks anyway,

luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Conditional SASL authentication

2015-02-24 Thread Luciano Mannucci

Hello,

I have a few users that are often hit by a trojan virus that steals
e-mail user and password. Having a very little (if not null) power on
their machines, I need to be able to block the outgoing mail wich is
handled by postfix via dovecot SASL.
Blocking it at dovecot level would be optimal, for the virus doesn't
necessarily use the e-mail of the user as its from, just the user and
password for the authentication phase.

Is it feasible?

AdvThanksAnce,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: Test / can you see my mail??

2014-08-12 Thread Luciano Mannucci
On Tue, 12 Aug 2014 11:20:03 +0200
Michael Ludwig  wrote:

> I hope this mail is readable to all of you?
Nope, I can't... :-)

l.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: [Dovecot] v2.2.11 released

2014-02-12 Thread Luciano Mannucci
On Wed, 12 Feb 2014 16:01:57 +0200
Teemu Huovila  wrote:

> Please find attached a patch that addresses this problem. Apply on top of
> 2.2.11 sources with hg import .
> 
> br,
> Teemu Huovila
Thanks 4 the patch!
Seems to work 4 me. (I applied it using "patch command, I don't have
mercurial installed)

Cheers,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: [Dovecot] Problem compiling 2.2.5

2013-08-21 Thread Luciano Mannucci
On Wed, 21 Aug 2013 10:34:48 -0400
Oscar del Rio  wrote:

> Correction.  OpenCSW no longer supports Solaris 8.
> But they still have a "legacy" repository where you could get gcc3 and 
> try to compile dovecot.
Yes, I've noticed there's no more "unstable" repository for 5.8...

> http://mirror.opencsw.org/opencsw/legacy/sparc/5.8
Yes. Though, "testing" seems to have newer software. There is even a
dovecot 11.1.1 and a rich gcc 4:

http://mirror.opencsw.org/opencsw/testing/sparc/5.8/

Thanks again,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: [Dovecot] Problem compiling 2.2.5

2013-08-21 Thread Luciano Mannucci
On Tue, 20 Aug 2013 16:43:31 -0400
Oscar del Rio  wrote:

> opencsw.org might have dovecot 2.2.4 for Solaris 8
Thanks for the pointer.
I'll have a look.

Thanks again,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: [Dovecot] Problem compiling 2.2.5

2013-08-21 Thread Luciano Mannucci
On Tue, 20 Aug 2013 22:29:08 +0200
Axel Luttgens  wrote:

> Wouldn't
> 
>   unsigned char * prefix_text
> 
> be equivalent in such a context?
It should. That's the first thing I tried.
It dumps core, tough...

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


[Dovecot] Problem compiling 2.2.5

2013-08-20 Thread Luciano Mannucci

I'm trying to upgrade a very old sparcstation running Solaris 8 which
is running dovecot 1.x for few users. All I have for the task is good
old gcc 2.95.2. The poor sod complains because it can't compute the
sizeof(unsigned char prefix_text[]) at line 13 of log-error-buffer.c.
Can I help it by - say - putting a constant between the '[]'?
Or is it unfair? :-)
I don't think it's woth modifying the distribution only for us owning
machines that should be in a museum by now...

Thanks for the good software, BTW,

luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: [Dovecot] Logging commands

2011-04-20 Thread Luciano Mannucci
On Wed, 20 Apr 2011 18:10:26 +0300
Timo Sirainen  wrote:

> Like Frank already replied, http://wiki2.dovecot.org/Plugins/MailLog is
> probably the best solution for this. But to get the exact commands you
> could also use http://wiki2.dovecot.org/Debugging/Rawlog
Many thanks to all.
I thimk I'll start with the maillog plugin.

Cheers,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


[Dovecot] Logging commands

2011-04-20 Thread Luciano Mannucci

Hello all,

is there a way to make dovecot log the commands it gets from its
clients both in imap and pop3? I need to log when messages are
deleted so I can tell to the customer when and from which IP address
his/her mailbox was emptied.
I'm trying to track down problems with M$ Windows Live Mail clients
that seem to loose messages now and then.

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.lesassaie.IT/


Re: [Dovecot] EVERYONE USING DOVECOT PLEASE SIGN: Thanks, Administrators of Dovecot!

2010-08-17 Thread Luciano Mannucci
On Tue, 17 Aug 2010 12:28:50 -0400
Jerrale G  wrote:

> *Our gratitude  goes to, but not limited to:*
> 
> *Timo Sirainen and Charles Marcus*
> 
> 
> *We apologize if we have missed anyone and ask that EVERYONE using 
> dovecot would express their thanks and gratitude by signing this thread, 
> to also include any people beyond the mentioned.*
We too!

luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.mannucci.ORG/


Re: [Dovecot] 2.0 not starting

2010-08-17 Thread Luciano Mannucci
On Tue, 17 Aug 2010 18:13:30 +0200
Luigi Rosa  wrote:

> Change
> 
> listen = *, ::
> 
> to
> 
> listen = *
> 
Works!
I added a "listen = *".

I had no "listen" directive in my config, though. Maybe the default
changed from "*" to "*, ::"...

Many thanks!

luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.mannucci.ORG/


Re: [Dovecot] 2.0 not starting

2010-08-17 Thread Luciano Mannucci
On Tue, 17 Aug 2010 16:57:24 +0200
Oliver Eales  wrote:

> That is a problem with the ipv6 config on your machine. Dovecot tries to 
> (also) bind to the ipv6 ANY address.
Ohh, I see...
There is no more --disable-ipv6...
I have no IPV6 on my machine (as well as no IPX, appletalk... :). Is
there a way to tell dovecot not trying to use non-existing protocols
(or more accurately: not running protocols)?

Cheers to all,

luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.mannucci.ORG/


[Dovecot] 2.0 not starting

2010-08-17 Thread Luciano Mannucci

Hi everybody,

I tried to upgrade my 1.2.13 dovecot to 2.0. The configure/make/install
process seemed to work flawlessly. I created the dovenull user, converted
my config with

#src/config/doveconf -n -c /etc/dovecot.conf  > /tmp/dovecot.conf

and moved the result manually to /etc/dovecot. By typing "dovecot" (after
having stopped the previous instance :), I get:

Error: service(pop3-login): listen(::, 110) failed: Address already in use
Error: service(imap-login): listen(::, 143) failed: Address already in use
Fatal: Failed to start listeners

tough nor "netstat -ta" nor "lsof -i" do show anything using port 110
or 143.

What did I wrong? 

Here is my doveconf -n:

baobab:/usr/src/local/mail/dovecot/current/dovecot-2.0.0 # doveconf -n
# 2.0.0: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.27.45-0.1-pae i686 openSUSE 11.1 (i586) ext3
doveconf: Warning: Dovecot was last started using /etc/dovecot.conf, but this
config is /etc/dovecot/dovecot.conf auth_cache_size = 3072
auth_debug = yes
auth_mechanisms = plain login
auth_username_format = %Lu
auth_verbose = yes
disable_plaintext_auth = no
first_valid_gid = 0
first_valid_uid = 100
info_log_path = /var/log/dovecot/logfile.info
log_path = /var/log/dovecot/logfile
login_greeting = Dovecot at Baobab ready.
mail_location =
mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u
maildir_copy_with_hardlinks = no namespace {
  inbox = yes
  location = 
  prefix = 
  separator = .
  type = private
}
passdb {
  driver = pam
}
plugin {
  quota = maildir
  quota_rule = *:storage=300M
}
protocols = pop3 imap
service auth {
  unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user = postfix
  }
  user = root
}
service imap-login {
  inet_listener imaps {
address = 212.45.144.44, 212.45.144.70, 192.168.134.44
  }
  process_limit = 512
}
service pop3-login {
  inet_listener pop3s {
address = 212.45.144.44, 212.45.144.70, 192.168.134.44
  }
  process_limit = 512
}
ssl_ca = http://www.mannucci.ORG/


[Dovecot] Converting layouts

2010-02-09 Thread Luciano Mannucci

Hello,

I'm using dovecot 1.2.10 with mbox format (which implies layout=fs)
and I would like to switch to maildir++ layout without changing format
in order to implement subfolders for IMAP users. I understand that I
should move the INDEX location to avoid some namespace conflict (it
would be a good idea anyway: I'll move them on another disc :).

Now I have

mail_location = mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u

in my /etc/dovecot.conf. I think it should become somethink like

mail_location=mbox:/var/spool/mailboxes/%u:LAYOUT=Maildir++:INBOX=/var/spool/mail/%u:INDEX=/var/dovecot_indexes

I'll have to rename folders for IMAP users, right?
Is there some script that does just that?
Some other needed black magic for .subscriptions?

Thanks to all in advance,

Luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.mannucci.ORG/


[Dovecot] Smooth mailbox to maildir migration

2009-02-10 Thread Luciano Mannucci

Hi all,

I have a postfix+procmail+dovecot installation, now running basicaly
on pop3 hence mailbox format, with few thousand users and less than
twenty gigabytes mail.
I need to move all of them to maildir, to take advantage of IMAP
subfolders that do not work with mbox format (so I'm told :).
Of course I cannot safely stop the service for more than a bunch of
seconds...

What I'm about to do:

create a second dovecot instance to cope with imap client configured
for maildir (and possibly pop3 on another port for those using both),
which means a dovecot launched with -c /path/to/alternate.conf and a
new /etc/init.d/dovecot2-theRevenge having the proper -i option given
to startproc in order to make it ignore the other instance.

for each user:

convert the mailbox with some sort of mb2mb (which is the better one?)

create a .procmailrc with a proper DEFAULT= bearing the magic trailing
slash indicating maildir to procmail for each converted user.

And I'm done...

Have I forgotten something?
Is there a better way?
Any one else tryed such a thing?

Cheers to all,

luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: posthams...@sublink.sublink.org
 / \  AND POSTINGS/   WWW: http://www.mannucci.ORG/


Re: [Dovecot] 1.1 Beta 1 Works!

2007-09-25 Thread Luciano Mannucci
On Tue, 25 Sep 2007 10:43:14 +0200
"Jan van den Berg" <[EMAIL PROTECTED]> wrote:

> It's the file descriptors limit you can set/change this with ulimit -n
> x.
> 
> Also check the ulimit entry in man bash.
Thanks!
It works now as a charm :)
I fixed the default in /etc/sysconfig/ulimit, so it may survive to
a reboot...

Thanks again,

luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: [EMAIL PROTECTED]
 / \  AND POSTINGS/   WWW: http://www.mannucci.ORG/


[Dovecot] 1.1 Beta 1 Works!

2007-09-25 Thread Luciano Mannucci

Wow!
I'm running 1.1 Beta 1 on OpenSuSE linux 10.2.
It seems not bad at all.
The only thing I've not quite well understood is this message,
that pops up when I start dovecot:

Warning: fd limit 1024 is lower than what Dovecot can use under full load (more 
than 1536). Either grow the limit or change login_max_processes_count and 
max_mail_processes settings

Where does dovecot take this 1024 fd limit? My machine-wise limit
is some orders of magnitude bigger, af far as I can tell by reading
/proc/sys/fs/file-max...

luciano.
-- 
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: [EMAIL PROTECTED]
 / \  AND POSTINGS/   WWW: http://www.mannucci.ORG/


Re: [Dovecot] v1.1.alpha4 released / about dbox

2007-09-09 Thread luciano mannucci


On Sep 8, 2007, at 3:08, Timo Sirainen wrote:


Lots of fixes since alpha3.

I tried it on a SuSE 10.2, running alpha 3.
Same configure, same config files.
I'm getting a lot of:
dovecot: Sep 09 20:32:31 Fatal: execv(/usr/libexec/dovecot/pop3- 
login) failed: T

oo many open files
dovecot: Sep 09 20:32:31 Fatal: execv(/usr/libexec/dovecot/imap- 
login) failed: T

oo many open files
in the log file and no one is able to access the mail.
I reverted to alpha3 and everything is working fine now.

My dovecot -n (seen from the alpha3) looks like this:
baobab:/var/log/dovecot # dovecot -n
# 1.1.alpha3: /etc/dovecot.conf
log_path: /var/log/dovecot/logfile
info_log_path: /var/log/dovecot/logfile.info
protocols: imap imaps pop3 pop3s
ssl_listen: *
ssl_ca_file: /etc/ssl/ca.crt
disable_plaintext_auth: no
login_dir: /var/run/dovecot/login
login_executable(default): /usr/libexec/dovecot/imap-login
login_executable(imap): /usr/libexec/dovecot/imap-login
login_executable(pop3): /usr/libexec/dovecot/pop3-login
login_greeting: Dovecot at Baobab ready.
login_max_processes_count: 512
first_valid_uid: 100
first_valid_gid: 0
mail_location: mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u
maildir_copy_with_hardlinks: no
mail_executable(default): /usr/libexec/dovecot/imap
mail_executable(imap): /usr/libexec/dovecot/imap
mail_executable(pop3): /usr/libexec/dovecot/pop3
mail_plugins(default): quota imap_quota
mail_plugins(imap): quota imap_quota
mail_plugins(pop3): quota
mail_plugin_dir(default): /usr/lib/dovecot/imap
mail_plugin_dir(imap): /usr/lib/dovecot/imap
mail_plugin_dir(pop3): /usr/lib/dovecot/pop3
imap_client_workarounds(default): outlook-idle delay-newmail
imap_client_workarounds(imap): outlook-idle delay-newmail
imap_client_workarounds(pop3):
pop3_enable_last(default): no
pop3_enable_last(imap): no
pop3_enable_last(pop3): yes
pop3_client_workarounds(default):
pop3_client_workarounds(imap):
pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh
auth default:
  mechanisms: plain login
  cache_size: 3072
  username_format: %Lu
  verbose: yes
  debug: yes
  debug_passwords: yes
  passdb:
driver: pam
  userdb:
driver: passwd
  socket:
type: listen
client:
  path: /var/spool/postfix/private/auth
  mode: 432
  user: postfix
  group: postfix
plugin:
  quota: maildir::dirsize
  quota_rule: *:storage=300M

luciano.
--
 /"\ /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL/  E-MAIL: [EMAIL PROTECTED]
 / \  AND POSTINGS/   WWW: http://www.mannucci.ORG/