Re: [Dovecot] dovecot %u variable problem....
Den 2012-04-25 10:50, Kris Weston skrev: # auth_default_realm = ahhh, ok. only i have multiple domains, so how does that werk ? just put em all in ? if you use @ in imap/pop3 logins then the default for this setting is fine, if logins is without @ then you need to set it to the hostname of the machine where users is on, it cant be multiple hostnames on 127.0.0.1 :=) use localhost.example.org if unsure saslauthtest -u user -p passwd -r example.org OK or saslauthtest -u u...@example.org -p passwd OK
Re: [Dovecot] dovecot %u variable problem....
On 25.4.2012, at 21.28, Kris Weston wrote: > but then this happens when i attempt to send mail and this means the user > gets rejected because dovecot cant find the user id in the db without the > correct string (i.e. user@domain): > localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id > as user, crypt as password FROM users WHERE id= 'admin' What exactly is doing this lookup? SMTP AUTH? Maybe the client's SMTP authentication is configured without the @domain part in username? >>> saslauthd via a query in dovecot-sql.conf.ext? >> There is no saslauthd in Dovecot. > > thats correct, its not in dovecot, its installed on the same machine. > but regardless, its salsauthd. saslauthd doesn't authenticate via Dovecot. It might authenticate via IMAP though. > thanks for trying, but forget it, its clear to me from answers ive received > that nobody has a clue about this problem. guess im on me own. cheers bye! The reason why nobody has a clue is because you haven't provided the full logs. We can only guess what the problem is. With full logs there would be no guessing necessary.
Re: [Dovecot] dovecot %u variable problem....
but then this happens when i attempt to send mail and this means the user gets rejected because dovecot cant find the user id in the db without the correct string (i.e. user@domain): localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id as user, crypt as password FROM users WHERE id= 'admin' What exactly is doing this lookup? SMTP AUTH? Maybe the client's SMTP authentication is configured without the @domain part in username? saslauthd via a query in dovecot-sql.conf.ext? There is no saslauthd in Dovecot. thats correct, its not in dovecot, its installed on the same machine. but regardless, its salsauthd. after these suggestions im pretty sure nobody here has a clue about this, and this is not a known problem, i cant find anyone on the internet with it and the query is quite clearly coming up wrong and the unchangeable variable is quite clearly changing. To me it looks like the client isn't sending the domain. so the client is changing its domain every coupla seconds for what reason, surely the thunderbird devs would have found this error? and even if thunderbird is sending it without the domain, the server should deal with thunderbird correctly, the user should not have to configure her thunderbird to work with dovecot rather than the other way round ? i dont believe this is the problem at all. the client can not be sending out different usernames every second surely. i put the username in myself in thunderbird, double, triple checked, made other accounts etc, the username changes by the second, ive watched the sql queries go in and they change for no obvious reason. Show the full logs for a failing session, not just this one line. Even better would be full logs with auth_debug_passwords=yes, but in that case you'd better be using an unimportant password (some of the base64 encoded strings contain the password). thanks for trying, but forget it, its clear to me from answers ive received that nobody has a clue about this problem. guess im on me own. cheers bye!
Re: [Dovecot] dovecot %u variable problem....
On 25.4.2012, at 18.52, Kris Weston wrote: > On 25/04/12 11:48, Timo Sirainen wrote: >> On 25.4.2012, at 9.17, Kris wrote: >> >>> but then this happens when i attempt to send mail and this means the user >>> gets rejected because dovecot cant find the user id in the db without the >>> correct string (i.e. user@domain): >>> localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id as >>> user, crypt as password FROM users WHERE id= 'admin' >> What exactly is doing this lookup? SMTP AUTH? Maybe the client's SMTP >> authentication is configured without the @domain part in username? >> > saslauthd via a query in dovecot-sql.conf.ext? There is no saslauthd in Dovecot. > after these suggestions im pretty sure nobody here has a clue about this, and > this is not a known problem, i cant find anyone on the internet with it and > the query is quite clearly coming up wrong and the unchangeable variable is > quite clearly changing. To me it looks like the client isn't sending the domain. > the client can not be sending out different usernames every second surely. i > put the username in myself in thunderbird, double, triple checked, made other > accounts etc, the username changes by the second, ive watched the sql queries > go in and they change for no obvious reason. Show the full logs for a failing session, not just this one line. Even better would be full logs with auth_debug_passwords=yes, but in that case you'd better be using an unimportant password (some of the base64 encoded strings contain the password).
Re: [Dovecot] dovecot %u variable problem....
On 25/04/12 11:48, Timo Sirainen wrote: On 25.4.2012, at 9.17, Kris wrote: but then this happens when i attempt to send mail and this means the user gets rejected because dovecot cant find the user id in the db without the correct string (i.e. user@domain): localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id as user, crypt as password FROM users WHERE id= 'admin' What exactly is doing this lookup? SMTP AUTH? Maybe the client's SMTP authentication is configured without the @domain part in username? saslauthd via a query in dovecot-sql.conf.ext? after these suggestions im pretty sure nobody here has a clue about this, and this is not a known problem, i cant find anyone on the internet with it and the query is quite clearly coming up wrong and the unchangeable variable is quite clearly changing. the client can not be sending out different usernames every second surely. i put the username in myself in thunderbird, double, triple checked, made other accounts etc, the username changes by the second, ive watched the sql queries go in and they change for no obvious reason.
Re: [Dovecot] dovecot %u variable problem....
Am 25.04.2012 12:45, schrieb Timo Sirainen:
> On 25.4.2012, at 9.49, Robert Schetterer wrote:
>
>> #when saving to Trash mailbox the user gets additional 50MB
>> "Trash:storage=+50240" AS quota_rule2, \
>> #when saving to Sent mailbox the user gets additional 50MB
>> "Sent:storage=+50240" AS quota_rule3, \
>> #when saving to Drafts mailbox the user gets additional 50MB
>> "Drafts:storage=+50240" AS quota_rule4, \
>> #when saving to Templates mailbox the user gets additional 50MB
>> "Templates:storage=+50240" AS quota_rule5, \
>> #when saving to Junk mailbox the user gets additional 50MB
>> "Junk:storage=+50240" AS quota_rule6, \
>> #when saving to Archives mailbox the user gets additional 50MB
>> "Archives:storage=+50240" AS quota_rule7, \
>> ###
>
> BTW. These are all static values and don't really need to be in SQL query:
>
> plugin {
> quota_rule2 = Trash:...
> quota_rule3 = ...
> ...
> }
>
>> 1001 as userdb_uid, \
>> 1001 as userdb_gid, \
>> "/usr/local/virtual/%d/%u/" AS userdb_home, \
>> "maildir:/usr/local/virtual/%d/%u/" AS userdb_mail \
>
> Same for these. Also slightly confusing that your passdb and userdb lookups
> return mail setting differently.
thx timo, i will look at this, thats all historic but ever worked
currently i am still fighting with some upgrade issues to 2.1
just now some sieve experimental stuff failed , i will post about it
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
Re: [Dovecot] dovecot %u variable problem....
On 25.4.2012, at 9.17, Kris wrote: > but then this happens when i attempt to send mail and this means the user > gets rejected because dovecot cant find the user id in the db without the > correct string (i.e. user@domain): > localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id as > user, crypt as password FROM users WHERE id= 'admin' What exactly is doing this lookup? SMTP AUTH? Maybe the client's SMTP authentication is configured without the @domain part in username?
Re: [Dovecot] dovecot %u variable problem....
On 25.4.2012, at 9.49, Robert Schetterer wrote:
> #when saving to Trash mailbox the user gets additional 50MB
> "Trash:storage=+50240" AS quota_rule2, \
> #when saving to Sent mailbox the user gets additional 50MB
> "Sent:storage=+50240" AS quota_rule3, \
> #when saving to Drafts mailbox the user gets additional 50MB
> "Drafts:storage=+50240" AS quota_rule4, \
> #when saving to Templates mailbox the user gets additional 50MB
> "Templates:storage=+50240" AS quota_rule5, \
> #when saving to Junk mailbox the user gets additional 50MB
> "Junk:storage=+50240" AS quota_rule6, \
> #when saving to Archives mailbox the user gets additional 50MB
> "Archives:storage=+50240" AS quota_rule7, \
> ###
BTW. These are all static values and don't really need to be in SQL query:
plugin {
quota_rule2 = Trash:...
quota_rule3 = ...
...
}
> 1001 as userdb_uid, \
> 1001 as userdb_gid, \
> "/usr/local/virtual/%d/%u/" AS userdb_home, \
> "maildir:/usr/local/virtual/%d/%u/" AS userdb_mail \
Same for these. Also slightly confusing that your passdb and userdb lookups
return mail setting differently.
Re: [Dovecot] dovecot %u variable problem....
On Wed, Apr 25, 2012 at 09:50:20AM +0100, Kris Weston wrote: > > thanks for your help dennis... > >Indeed, it seems some of your users try to authenticate with a > >username without the '@domain' part. > > > >You can either try to make your users comply or you can use > >auth_default_realm in your config: > > in this case the users are me :) > same username every time i connect, but each time i see a load of db > lookups that are different but using this same u variable... If it's no bug, I doubt it randomly changes the value for %u while the input is the same. So it seems the problem lies somewhere else. And if it is no layer 8 problem it must be the client ;) > > # Default realm/domain to use if none was specified. This is > > # used for both SASL realms and appending @domain to username > > # in plaintext logins. > > # > > #auth_default_realm = > > > > ahhh, ok. only i have multiple domains, so how does that werk ? > just put em all in ? IIRC no, you can only name one default. Dennis
Re: [Dovecot] dovecot %u variable problem....
thanks for your help dennis... Indeed, it seems some of your users try to authenticate with a username without the '@domain' part. You can either try to make your users comply or you can use auth_default_realm in your config: in this case the users are me :) same username every time i connect, but each time i see a load of db lookups that are different but using this same u variable... # Default realm/domain to use if none was specified. This is # used for both SASL realms and appending @domain to username # in plaintext logins. # #auth_default_realm = ahhh, ok. only i have multiple domains, so how does that werk ? just put em all in ? cheerz Kris
Re: [Dovecot] dovecot %u variable problem....
On Wed, Apr 25, 2012 at 07:17:18AM +0100, Kris wrote: [..] > the problem is a variable in dovecot (%u) which is normally used as > a full username in sql query strings (i.e. user@domain) and is > simply dropping the domain for some reason... [..] > and to further confuse me, this 'unchangeable' variable sometimes > decides to right itself without any obvious reason... > localhost dovecot: auth: Debug: > sql(ad...@microhard.com,xx.xx.xx.xx): query: SELECT id as user, > crypt as password FROM users WHERE id= 'ad...@microhard.com' > > im wondering if its something to do with my client dropping the > domain, or whether dovecot has an error, or some other thing ive > overlooked... Indeed, it seems some of your users try to authenticate with a username without the '@domain' part. You can either try to make your users comply or you can use auth_default_realm in your config: # Default realm/domain to use if none was specified. This is # used for both SASL realms and appending @domain to username # in plaintext logins. # #auth_default_realm = Dennis [..]
Re: [Dovecot] dovecot %u variable problem....
Am 25.04.2012 08:17, schrieb Kris:
> this was derived from the following query in
> /etc/dovecot/dovecot-sql.conf.ext
> user_query = SELECT home,uid,gid FROM users WHERE id = '%u'
i use like this
user_query = SELECT concat('/usr/local/virtual/', maildir) AS home, \
concat('*:bytes=', mailbox.quota) AS quota_rule, \
#when saving to Trash mailbox the user gets additional 50MB
"Trash:storage=+50240" AS quota_rule2, \
#when saving to Sent mailbox the user gets additional 50MB
"Sent:storage=+50240" AS quota_rule3, \
#when saving to Drafts mailbox the user gets additional 50MB
"Drafts:storage=+50240" AS quota_rule4, \
#when saving to Templates mailbox the user gets additional 50MB
"Templates:storage=+50240" AS quota_rule5, \
#when saving to Junk mailbox the user gets additional 50MB
"Junk:storage=+50240" AS quota_rule6, \
#when saving to Archives mailbox the user gets additional 50MB
"Archives:storage=+50240" AS quota_rule7, \
###
concat('maildir:/usr/local/virtual/', maildir) AS mail, \
CASE '%s' WHEN 'pop3' THEN NULL ELSE 'yes' END AS 'namespace/inbox/inbox', \
CASE '%s' WHEN 'pop3' THEN 'yes' ELSE NULL END AS
'namespace/virtual/inbox', \
1001 AS uid, 1001 AS gid FROM mailbox WHERE username = '%u' AND active = '1'
>
> so no problem there
>
> but then this happens when i attempt to send mail and this means the
> user gets rejected because dovecot cant find the user id in the db
> without the correct string (i.e. user@domain):
> localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id
> as user, crypt as password FROM users WHERE id= 'admin'
> QuerySELECT id as user, crypt as password FROM users WHERE id= 'admin'
> which is derived from the following query also in
> /etc/dovecot/dovecot-sql.conf.ext
> password_query = SELECT id as user, crypt as password FROM users WHERE
> id= '%u'
>
> and to further confuse me, this 'unchangeable' variable sometimes
> decides to right itself without any obvious reason...
> localhost dovecot: auth: Debug: sql(ad...@microhard.com,xx.xx.xx.xx):
> query: SELECT id as user, crypt as password FROM users WHERE id=
> 'ad...@microhard.com'
>
> im wondering if its something to do with my client dropping the domain,
> or whether dovecot has an error, or some other thing ive overlooked...
password_query = SELECT username as user, password, \
1001 as userdb_uid, \
1001 as userdb_gid, \
"/usr/local/virtual/%d/%u/" AS userdb_home, \
"maildir:/usr/local/virtual/%d/%u/" AS userdb_mail \
FROM mailbox WHERE username = '%u' AND active = '1' AND (imap_allowed =
'1' or '%Ls' = 'pop3')
this should not fit to you ( postfixadmin full domain layout with
virtual plugin and quota additions ,clear text passwords etc), but
perhaps gives you ideas by compare,
what to fix at your side, however upgrade to dove latest 2.0.20
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
[Dovecot] dovecot %u variable problem....
Hi guys n gals, im on an ubuntu 11 VPS on linode (dovecot version
2.013). ive spent a lot of time and googling trying to get postfix,
dovecot, ssl, saslauthd and mysql to all play nice together and im quite
close now but theres something going on i cant quite explain and id
really appreciate some help. I have been going for ten hours on this
today and it seems in direct conflict with what dovecot themselves say...
the problem is a variable in dovecot (%u) which is normally used as a
full username in sql query strings (i.e. user@domain) and is simply
dropping the domain for some reason...
From dovecot docs (http://wiki2.dovecot.org/Variables):
The variables that work everywhere are:
%uuser full username (e.g. user@domain)
so i have postfix and stuff set up ok to send at least and i know this
because ive tested it by hard-coding the string in the sql query myself
with a successful send...
but, anyway, the problem with the '%u' variable is it is doing stuff
like this: (from mail.log and mysql.log)
localhost dovecot: auth: Debug: sql(ad...@microhard.com,xx.xx.xx.xx):
SELECT home,uid,gid FROM users WHERE id = 'ad...@microhard.com'
this was derived from the following query in
/etc/dovecot/dovecot-sql.conf.ext
user_query = SELECT home,uid,gid FROM users WHERE id = '%u'
so no problem there
but then this happens when i attempt to send mail and this means the
user gets rejected because dovecot cant find the user id in the db
without the correct string (i.e. user@domain):
localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id
as user, crypt as password FROM users WHERE id= 'admin'
QuerySELECT id as user, crypt as password FROM users WHERE id= 'admin'
which is derived from the following query also in
/etc/dovecot/dovecot-sql.conf.ext
password_query = SELECT id as user, crypt as password FROM users WHERE
id= '%u'
and to further confuse me, this 'unchangeable' variable sometimes
decides to right itself without any obvious reason...
localhost dovecot: auth: Debug: sql(ad...@microhard.com,xx.xx.xx.xx):
query: SELECT id as user, crypt as password FROM users WHERE id=
'ad...@microhard.com'
im wondering if its something to do with my client dropping the domain,
or whether dovecot has an error, or some other thing ive overlooked...
my dovecot.conf looks a lot like this:
# 2.0.13: dovecot.conf
# OS: Linux 3.0.18-x86_64-linode24 x86_64 Ubuntu 11.10 ext3
first_valid_uid = 5000
last_valid_uid = 5000
login_greeting = I likes my ducks n geese I do.
mail_location = maildir:/var/spool/mail/virtual/%u
#enables logging all failed authentication attempts.
auth_verbose=yes
#enables all authentication debug logging (also enables auth_verbose).
Passwords are logged as .
auth_debug=yes
#does everything that auth_debug=yes does, but it also removes password
hiding.
auth_debug_passwords=yes
#enables all kinds of mail related debug logging, such as showing where
Dovecot is looking for mails.
mail_debug=yes
#enables logging SSL errors and warnings. Even without this setting if
connection is closed because of an SSL error, the error is logged as the
disconnection reason (v1.1+).
verbose_ssl=yes
passdb {
args = /etc/dovecot/dovecot-sql.conf.ext
driver = sql
}
plugin {
acl = vfile:/etc/dovecot/acls
#quota = maildir:storage=10240:messages=1000
trash = /etc/dovecot/trash.conf
}
protocols = " imap"
service auth {
unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user = postfix
}
unix_listener auth-master {
group = dovecot
mode = 0660
user = dovecot
}
user = dovecot
}
ssl_ca = /etc/pki/dovecot/certs/ca-bundle.crt
ssl_cert =
