Re: [Dovecot] dovecot %u variable problem....
Am 25.04.2012 08:17, schrieb Kris:
this was derived from the following query in
/etc/dovecot/dovecot-sql.conf.ext
user_query = SELECT home,uid,gid FROM users WHERE id = '%u'
i use like this
user_query = SELECT concat('/usr/local/virtual/', maildir) AS home, \
concat('*:bytes=', mailbox.quota) AS quota_rule, \
#when saving to Trash mailbox the user gets additional 50MB
Trash:storage=+50240 AS quota_rule2, \
#when saving to Sent mailbox the user gets additional 50MB
Sent:storage=+50240 AS quota_rule3, \
#when saving to Drafts mailbox the user gets additional 50MB
Drafts:storage=+50240 AS quota_rule4, \
#when saving to Templates mailbox the user gets additional 50MB
Templates:storage=+50240 AS quota_rule5, \
#when saving to Junk mailbox the user gets additional 50MB
Junk:storage=+50240 AS quota_rule6, \
#when saving to Archives mailbox the user gets additional 50MB
Archives:storage=+50240 AS quota_rule7, \
###
concat('maildir:/usr/local/virtual/', maildir) AS mail, \
CASE '%s' WHEN 'pop3' THEN NULL ELSE 'yes' END AS 'namespace/inbox/inbox', \
CASE '%s' WHEN 'pop3' THEN 'yes' ELSE NULL END AS
'namespace/virtual/inbox', \
1001 AS uid, 1001 AS gid FROM mailbox WHERE username = '%u' AND active = '1'
so no problem there
but then this happens when i attempt to send mail and this means the
user gets rejected because dovecot cant find the user id in the db
without the correct string (i.e. user@domain):
localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id
as user, crypt as password FROM users WHERE id= 'admin'
QuerySELECT id as user, crypt as password FROM users WHERE id= 'admin'
which is derived from the following query also in
/etc/dovecot/dovecot-sql.conf.ext
password_query = SELECT id as user, crypt as password FROM users WHERE
id= '%u'
and to further confuse me, this 'unchangeable' variable sometimes
decides to right itself without any obvious reason...
localhost dovecot: auth: Debug: sql(ad...@microhard.com,xx.xx.xx.xx):
query: SELECT id as user, crypt as password FROM users WHERE id=
'ad...@microhard.com'
im wondering if its something to do with my client dropping the domain,
or whether dovecot has an error, or some other thing ive overlooked...
password_query = SELECT username as user, password, \
1001 as userdb_uid, \
1001 as userdb_gid, \
/usr/local/virtual/%d/%u/ AS userdb_home, \
maildir:/usr/local/virtual/%d/%u/ AS userdb_mail \
FROM mailbox WHERE username = '%u' AND active = '1' AND (imap_allowed =
'1' or '%Ls' = 'pop3')
this should not fit to you ( postfixadmin full domain layout with
virtual plugin and quota additions ,clear text passwords etc), but
perhaps gives you ideas by compare,
what to fix at your side, however upgrade to dove latest 2.0.20
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
Re: [Dovecot] dovecot %u variable problem....
On Wed, Apr 25, 2012 at 07:17:18AM +0100, Kris wrote: [..] the problem is a variable in dovecot (%u) which is normally used as a full username in sql query strings (i.e. user@domain) and is simply dropping the domain for some reason... [..] and to further confuse me, this 'unchangeable' variable sometimes decides to right itself without any obvious reason... localhost dovecot: auth: Debug: sql(ad...@microhard.com,xx.xx.xx.xx): query: SELECT id as user, crypt as password FROM users WHERE id= 'ad...@microhard.com' im wondering if its something to do with my client dropping the domain, or whether dovecot has an error, or some other thing ive overlooked... Indeed, it seems some of your users try to authenticate with a username without the '@domain' part. You can either try to make your users comply or you can use auth_default_realm in your config: # Default realm/domain to use if none was specified. This is # used for both SASL realms and appending @domain to username # in plaintext logins. # #auth_default_realm = Dennis [..]
Re: [Dovecot] dovecot %u variable problem....
thanks for your help dennis... Indeed, it seems some of your users try to authenticate with a username without the '@domain' part. You can either try to make your users comply or you can use auth_default_realm in your config: in this case the users are me :) same username every time i connect, but each time i see a load of db lookups that are different but using this same u variable... # Default realm/domain to use if none was specified. This is # used for both SASL realms and appending @domain to username # in plaintext logins. # #auth_default_realm = ahhh, ok. only i have multiple domains, so how does that werk ? just put em all in ? cheerz Kris
Re: [Dovecot] dovecot %u variable problem....
On Wed, Apr 25, 2012 at 09:50:20AM +0100, Kris Weston wrote: thanks for your help dennis... Indeed, it seems some of your users try to authenticate with a username without the '@domain' part. You can either try to make your users comply or you can use auth_default_realm in your config: in this case the users are me :) same username every time i connect, but each time i see a load of db lookups that are different but using this same u variable... If it's no bug, I doubt it randomly changes the value for %u while the input is the same. So it seems the problem lies somewhere else. And if it is no layer 8 problem it must be the client ;) # Default realm/domain to use if none was specified. This is # used for both SASL realms and appending @domain to username # in plaintext logins. # #auth_default_realm = ahhh, ok. only i have multiple domains, so how does that werk ? just put em all in ? IIRC no, you can only name one default. Dennis
Re: [Dovecot] dovecot %u variable problem....
On 25.4.2012, at 9.49, Robert Schetterer wrote:
#when saving to Trash mailbox the user gets additional 50MB
Trash:storage=+50240 AS quota_rule2, \
#when saving to Sent mailbox the user gets additional 50MB
Sent:storage=+50240 AS quota_rule3, \
#when saving to Drafts mailbox the user gets additional 50MB
Drafts:storage=+50240 AS quota_rule4, \
#when saving to Templates mailbox the user gets additional 50MB
Templates:storage=+50240 AS quota_rule5, \
#when saving to Junk mailbox the user gets additional 50MB
Junk:storage=+50240 AS quota_rule6, \
#when saving to Archives mailbox the user gets additional 50MB
Archives:storage=+50240 AS quota_rule7, \
###
BTW. These are all static values and don't really need to be in SQL query:
plugin {
quota_rule2 = Trash:...
quota_rule3 = ...
...
}
1001 as userdb_uid, \
1001 as userdb_gid, \
/usr/local/virtual/%d/%u/ AS userdb_home, \
maildir:/usr/local/virtual/%d/%u/ AS userdb_mail \
Same for these. Also slightly confusing that your passdb and userdb lookups
return mail setting differently.
Re: [Dovecot] dovecot %u variable problem....
On 25.4.2012, at 9.17, Kris wrote: but then this happens when i attempt to send mail and this means the user gets rejected because dovecot cant find the user id in the db without the correct string (i.e. user@domain): localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id as user, crypt as password FROM users WHERE id= 'admin' What exactly is doing this lookup? SMTP AUTH? Maybe the client's SMTP authentication is configured without the @domain part in username?
Re: [Dovecot] dovecot %u variable problem....
Am 25.04.2012 12:45, schrieb Timo Sirainen:
On 25.4.2012, at 9.49, Robert Schetterer wrote:
#when saving to Trash mailbox the user gets additional 50MB
Trash:storage=+50240 AS quota_rule2, \
#when saving to Sent mailbox the user gets additional 50MB
Sent:storage=+50240 AS quota_rule3, \
#when saving to Drafts mailbox the user gets additional 50MB
Drafts:storage=+50240 AS quota_rule4, \
#when saving to Templates mailbox the user gets additional 50MB
Templates:storage=+50240 AS quota_rule5, \
#when saving to Junk mailbox the user gets additional 50MB
Junk:storage=+50240 AS quota_rule6, \
#when saving to Archives mailbox the user gets additional 50MB
Archives:storage=+50240 AS quota_rule7, \
###
BTW. These are all static values and don't really need to be in SQL query:
plugin {
quota_rule2 = Trash:...
quota_rule3 = ...
...
}
1001 as userdb_uid, \
1001 as userdb_gid, \
/usr/local/virtual/%d/%u/ AS userdb_home, \
maildir:/usr/local/virtual/%d/%u/ AS userdb_mail \
Same for these. Also slightly confusing that your passdb and userdb lookups
return mail setting differently.
thx timo, i will look at this, thats all historic but ever worked
currently i am still fighting with some upgrade issues to 2.1
just now some sieve experimental stuff failed , i will post about it
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
Re: [Dovecot] dovecot %u variable problem....
On 25/04/12 11:48, Timo Sirainen wrote: On 25.4.2012, at 9.17, Kris wrote: but then this happens when i attempt to send mail and this means the user gets rejected because dovecot cant find the user id in the db without the correct string (i.e. user@domain): localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id as user, crypt as password FROM users WHERE id= 'admin' What exactly is doing this lookup? SMTP AUTH? Maybe the client's SMTP authentication is configured without the @domain part in username? saslauthd via a query in dovecot-sql.conf.ext? after these suggestions im pretty sure nobody here has a clue about this, and this is not a known problem, i cant find anyone on the internet with it and the query is quite clearly coming up wrong and the unchangeable variable is quite clearly changing. the client can not be sending out different usernames every second surely. i put the username in myself in thunderbird, double, triple checked, made other accounts etc, the username changes by the second, ive watched the sql queries go in and they change for no obvious reason.
Re: [Dovecot] dovecot %u variable problem....
On 25.4.2012, at 18.52, Kris Weston wrote: On 25/04/12 11:48, Timo Sirainen wrote: On 25.4.2012, at 9.17, Kris wrote: but then this happens when i attempt to send mail and this means the user gets rejected because dovecot cant find the user id in the db without the correct string (i.e. user@domain): localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id as user, crypt as password FROM users WHERE id= 'admin' What exactly is doing this lookup? SMTP AUTH? Maybe the client's SMTP authentication is configured without the @domain part in username? saslauthd via a query in dovecot-sql.conf.ext? There is no saslauthd in Dovecot. after these suggestions im pretty sure nobody here has a clue about this, and this is not a known problem, i cant find anyone on the internet with it and the query is quite clearly coming up wrong and the unchangeable variable is quite clearly changing. To me it looks like the client isn't sending the domain. the client can not be sending out different usernames every second surely. i put the username in myself in thunderbird, double, triple checked, made other accounts etc, the username changes by the second, ive watched the sql queries go in and they change for no obvious reason. Show the full logs for a failing session, not just this one line. Even better would be full logs with auth_debug_passwords=yes, but in that case you'd better be using an unimportant password (some of the base64 encoded strings contain the password).
Re: [Dovecot] dovecot %u variable problem....
but then this happens when i attempt to send mail and this means the user gets rejected because dovecot cant find the user id in the db without the correct string (i.e. user@domain): localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id as user, crypt as password FROM users WHERE id= 'admin' What exactly is doing this lookup? SMTP AUTH? Maybe the client's SMTP authentication is configured without the @domain part in username? saslauthd via a query in dovecot-sql.conf.ext? There is no saslauthd in Dovecot. thats correct, its not in dovecot, its installed on the same machine. but regardless, its salsauthd. after these suggestions im pretty sure nobody here has a clue about this, and this is not a known problem, i cant find anyone on the internet with it and the query is quite clearly coming up wrong and the unchangeable variable is quite clearly changing. To me it looks like the client isn't sending the domain. so the client is changing its domain every coupla seconds for what reason, surely the thunderbird devs would have found this error? and even if thunderbird is sending it without the domain, the server should deal with thunderbird correctly, the user should not have to configure her thunderbird to work with dovecot rather than the other way round ? i dont believe this is the problem at all. the client can not be sending out different usernames every second surely. i put the username in myself in thunderbird, double, triple checked, made other accounts etc, the username changes by the second, ive watched the sql queries go in and they change for no obvious reason. Show the full logs for a failing session, not just this one line. Even better would be full logs with auth_debug_passwords=yes, but in that case you'd better be using an unimportant password (some of the base64 encoded strings contain the password). thanks for trying, but forget it, its clear to me from answers ive received that nobody has a clue about this problem. guess im on me own. cheers bye!
Re: [Dovecot] dovecot %u variable problem....
On 25.4.2012, at 21.28, Kris Weston wrote: but then this happens when i attempt to send mail and this means the user gets rejected because dovecot cant find the user id in the db without the correct string (i.e. user@domain): localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id as user, crypt as password FROM users WHERE id= 'admin' What exactly is doing this lookup? SMTP AUTH? Maybe the client's SMTP authentication is configured without the @domain part in username? saslauthd via a query in dovecot-sql.conf.ext? There is no saslauthd in Dovecot. thats correct, its not in dovecot, its installed on the same machine. but regardless, its salsauthd. saslauthd doesn't authenticate via Dovecot. It might authenticate via IMAP though. thanks for trying, but forget it, its clear to me from answers ive received that nobody has a clue about this problem. guess im on me own. cheers bye! The reason why nobody has a clue is because you haven't provided the full logs. We can only guess what the problem is. With full logs there would be no guessing necessary.
Re: [Dovecot] dovecot %u variable problem....
Den 2012-04-25 10:50, Kris Weston skrev: # auth_default_realm = ahhh, ok. only i have multiple domains, so how does that werk ? just put em all in ? if you use @ in imap/pop3 logins then the default for this setting is fine, if logins is without @ then you need to set it to the hostname of the machine where users is on, it cant be multiple hostnames on 127.0.0.1 :=) use localhost.example.org if unsure saslauthtest -u user -p passwd -r example.org OK or saslauthtest -u u...@example.org -p passwd OK
