Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Ralph Seichter
Timo Sirainen wrote: > dsync in Dovecot v2.0 tree is a new utility for syncing a mailbox in two > locations. I am very, very pleased to hear that you are working on this! Just at this moment, I am busy replacing a Dovecot IMAP based server with one with more powerful hardware, and until the tests

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Seth Mattinen
Timo Sirainen wrote: On Fri, 2009-07-17 at 12:06 -0700, Seth Mattinen wrote: So is this targeted as a kind of replication solution then? Either continuous replication or just one-off user moves/conversions without locking the mailbox and without losing changes done during the move/conversion.

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread joakim
Timo Sirainen writes: > On Sat, 2009-07-18 at 01:43 +0200, joa...@verona.se wrote: >> Timo Sirainen writes: >> >> > On Fri, 2009-07-17 at 22:31 +0200, joa...@verona.se wrote: >> >> This sounds really awesome! How testable is it? >> > >> > By "testable" do you mean "is it working now"? It should

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Timo Sirainen
On Sat, 2009-07-18 at 01:43 +0200, joa...@verona.se wrote: > Timo Sirainen writes: > > > On Fri, 2009-07-17 at 22:31 +0200, joa...@verona.se wrote: > >> This sounds really awesome! How testable is it? > > > > By "testable" do you mean "is it working now"? It should work except for > > mailbox del

Re: [Dovecot] dovecot 1.2rc5 fails to authenticate user via GSSAPI

2009-07-17 Thread Timo Sirainen
On Fri, 2009-07-17 at 19:33 -0400, Timo Sirainen wrote: > One thing I'm not really sure about in Kerberos is, does both MIT and > Heimdal require that you are using system users and to have NSS set up > in a way that Kerberos code can look up users with getpw*() functions? Ah, looking at the origi

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread joakim
Timo Sirainen writes: > On Fri, 2009-07-17 at 22:31 +0200, joa...@verona.se wrote: >> This sounds really awesome! How testable is it? > > By "testable" do you mean "is it working now"? It should work except for > mailbox deletions and renames. But I haven't really tested it, just ran > unit tests

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Timo Sirainen
Not really.. Another future thing might, though. :) On Sat, 2009-07-18 at 00:20 +0200, Christian Felsing wrote: > Does this mean true multi master operation ? That would make configs > with load balancers much easier :-) > > Timo Sirainen schrieb: > > dsync in Dovecot v2.0 tree is a new utility f

Re: [Dovecot] dovecot 1.2rc5 fails to authenticate user via GSSAPI

2009-07-17 Thread Timo Sirainen
On Wed, 2009-07-08 at 13:41 +0200, Michal Hlavinka wrote: > > I guess this fixes it again: > > http://hg.dovecot.org/dovecot-1.2/rev/f4ff64dd79a9 > > We've tested dovecot with all four available patches (it means up to date > mech-gssapi.c ) and it wokrs. I've been talking with the main Heimdal

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Christian Felsing
Does this mean true multi master operation ? That would make configs with load balancers much easier :-) Timo Sirainen schrieb: > dsync in Dovecot v2.0 tree is a new utility for syncing a mailbox in two > locations. Some things it can be used for:

[Dovecot] Client Cert Auth Problem

2009-07-17 Thread Christian Felsing
Hello, is there a config possible which supports both of following authentication schemes ? 1st: If user presents a client certificate, he can log in w/o username/password, where user id comes from CN. Accepting any password is not the right solution. 2nd: If user does not present a client certi

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Timo Sirainen
On Fri, 2009-07-17 at 17:01 -0400, Charles Marcus wrote: > Will this be configurable on a per mailbox basis? Or is it intended to > be server <-> server / all or nothing? You'll need to call it one user at a time in the proper environment (UNIX UID and GID set up right). How to do that and multipl

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Charles Marcus
On 7/17/2009 4:34 PM, Timo Sirainen wrote: >> So, when will 2.0 be in any kind of semi-usable state (by non-programmer >> types)? ;) > Dunno. And I'm still hoping to break its index files code completely > before stabilizing it :) You're obviously having way too much fun... time for a break... ;)

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Timo Sirainen
On Fri, 2009-07-17 at 22:31 +0200, joa...@verona.se wrote: > This sounds really awesome! How testable is it? By "testable" do you mean "is it working now"? It should work except for mailbox deletions and renames. But I haven't really tested it, just ran unit tests. :) And it pretty much requires u

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Timo Sirainen
On Fri, 2009-07-17 at 16:23 -0400, Charles Marcus wrote: > So, when will 2.0 be in any kind of semi-usable state (by non-programmer > types)? ;) Dunno. And I'm still hoping to break its index files code completely before stabilizing it :) signature.asc Description: This is a digitally signed me

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread joakim
Timo Sirainen writes: > dsync in Dovecot v2.0 tree is a new utility for syncing a mailbox in two > locations. Some things it can be used for: > > - Initially transfer a mailbox to another server via SSH > - A faster sync done to an existing mailbox, sending only changes > - A superfast sync ba

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Charles Marcus
On 7/17/2009 3:59 PM, Timo Sirainen wrote: > On Fri, 2009-07-17 at 15:57 -0400, Charles Marcus wrote: >>> I think even using dsync for backups should be considered as two-way >>> replication. If there really are some new mails in your backup server >>> that aren't in the primary server, it most lik

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Timo Sirainen
On Fri, 2009-07-17 at 15:57 -0400, Charles Marcus wrote: > > I think even using dsync for backups should be considered as two-way > > replication. If there really are some new mails in your backup server > > that aren't in the primary server, it most likely means you just lost > > some mails on you

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Charles Marcus
On 7/17/2009, Timo Sirainen (t...@iki.fi) wrote: > Either continuous replication or just one-off user moves/conversions > without locking the mailbox and without losing changes done during the > move/conversion. This just sounds great, and yes, I can definitely see a need for both. > I think even

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Timo Sirainen
On Fri, 2009-07-17 at 12:06 -0700, Seth Mattinen wrote: > So is this targeted as a kind of replication solution then? Either continuous replication or just one-off user moves/conversions without locking the mailbox and without losing changes done during the move/conversion. I think even using dsy

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Dave McGuire
On Jul 17, 2009, at 2:47 PM, Timo Sirainen wrote: dsync in Dovecot v2.0 tree is a new utility for syncing a mailbox in two locations. Some things it can be used for: - Initially transfer a mailbox to another server via SSH - A faster sync done to an existing mailbox, sending only changes -

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Seth Mattinen
Timo Sirainen wrote: > On Fri, 2009-07-17 at 11:59 -0700, Seth Mattinen wrote: >>> Now, the question is: Does anyone want dsync to only sync changes from >>> source to destination, instead of doing a full two-way sync? I think in >>> typical cases where you'd think you would want only one-way sync

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Timo Sirainen
On Fri, 2009-07-17 at 11:59 -0700, Seth Mattinen wrote: > > Now, the question is: Does anyone want dsync to only sync changes from > > source to destination, instead of doing a full two-way sync? I think in > > typical cases where you'd think you would want only one-way sync are > > also the cases

Re: [Dovecot] dsync - one or two ways?

2009-07-17 Thread Seth Mattinen
Timo Sirainen wrote: > dsync in Dovecot v2.0 tree is a new utility for syncing a mailbox in two > locations. Some things it can be used for: > > - Initially transfer a mailbox to another server via SSH > - A faster sync done to an existing mailbox, sending only changes > - A superfast sync base

[Dovecot] dsync - one or two ways?

2009-07-17 Thread Timo Sirainen
dsync in Dovecot v2.0 tree is a new utility for syncing a mailbox in two locations. Some things it can be used for: - Initially transfer a mailbox to another server via SSH - A faster sync done to an existing mailbox, sending only changes - A superfast sync based on modification sequences. - S

Re: [Dovecot] SMTP Auth Issue for non /etc/passwd accounts

2009-07-17 Thread Timo Sirainen
On Fri, 2009-07-17 at 13:28 -0400, Mark R. Baith wrote: > Timo - Sorry: We forwarded one of the many dovecot.confs > we've been playing with; (that one had auth turned off;) > > We're using "sendmail." Here's the auth dovecot.conf; Well, Sendmail doesn't support doing authentication via Dovecot

Re: [Dovecot] SMTP Auth Issue for non /etc/passwd accounts

2009-07-17 Thread Mark R. Baith
Timo - Sorry: We forwarded one of the many dovecot.confs we've been playing with; (that one had auth turned off;) We're using "sendmail." Here's the auth dovecot.conf; # 1.0.7: /etc/dovecot.conf protocols: imaps pop3s login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dov

Re: [Dovecot] SMTP Auth Issue for non /etc/passwd accounts

2009-07-17 Thread Timo Sirainen
On Fri, 2009-07-17 at 12:47 -0400, ma...@essic.umd.edu wrote: > auth default: > mechanisms: plain login > verbose: yes > debug: yes > debug_passwords: yes > passdb: > driver: passwd-file > args: /etc/dovecot/passwd > userdb: > driver: passwd-file > args: /etc/dovecot/use

Re: [Dovecot] SMTP Auth Issue for non /etc/passwd accounts

2009-07-17 Thread markb
Timo - As requested. Regards -M # 1.0.7: /etc/dovecot.conf protocols: imaps pop3s login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_debug

Re: [Dovecot] SMTP Auth Issue for non /etc/passwd accounts

2009-07-17 Thread Timo Sirainen
On Fri, 2009-07-17 at 11:50 -0400, Mark R. Baith wrote: > Folks - With Dovecot 1.0.7, we're seemingly unable to > authenticate users for out-going SMTP access who are > not residing directly within the main system passwd/shadow > files. Post your dovecot -n output. signature.asc Description: Th

Re: [Dovecot] RFC: Different quota for dovecot and deliver

2009-07-17 Thread Timo Sirainen
On Fri, 2009-07-17 at 10:51 +0200, Philipp Marek wrote: > What I'd like to achieve is that postfix uses the trigger value from the > Database as well, but that deliver allows a small bit more - say 5, 10, or > 20MB. Actually there shouldn't be a need to patch Dovecot to get this. You could just

[Dovecot] SMTP Auth Issue for non /etc/passwd accounts

2009-07-17 Thread Mark R. Baith
Folks - With Dovecot 1.0.7, we're seemingly unable to authenticate users for out-going SMTP access who are not residing directly within the main system passwd/shadow files. (I.e. the users seeded within our non-system "dovecot" userdbs & passwd files have no "smtp-auth" joy! (Ye olde "Relaying de

Re: [Dovecot] RFC: Different quota for dovecot and deliver

2009-07-17 Thread Philipp Marek
On Freitag, 17. Juli 2009, Philipp Marek wrote: > So I looked into the sources, and came up with the attached (untested, not > even compiled) patch against 1.2.1. ... > I've now looked into the sources, and tried to sketch the basic change that > I imagine; please see the attached patch. The newer

[Dovecot] RFC: Different quota for dovecot and deliver

2009-07-17 Thread Philipp Marek
Hello everybody, I've been with this question in IRC the last days, but no solution was found. So I looked into the sources, and came up with the attached (untested, not even compiled) patch against 1.2.1. Rationale --- I'd like to bounce on the external side, which is quite easy if

Re: [Dovecot] E-Mail Encryption

2009-07-17 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Jul 17, 2009 at 08:04:24AM -0400, Neal Becker wrote: > I've thought that it would be nice if my mail was always converted to > OpenPGP encrypted form. > > My setup is, I use fetchmail to pull in my mail to dovecot. Then I read it > using km

Re: [Dovecot] Question regarding layout.

2009-07-17 Thread Johan Hendriks
Curtis Maloney schreef: Johan Hendriks wrote: Hello all. I have a question regarding my mail flow. We have some users who are in a mail group (alias), and these alias receives a lot of attached documents. So i have the document in all the mailboxes of the alias. If the attached document is 2M

Re: [Dovecot] E-Mail Encryption

2009-07-17 Thread Neal Becker
I've thought that it would be nice if my mail was always converted to OpenPGP encrypted form. My setup is, I use fetchmail to pull in my mail to dovecot. Then I read it using kmail (which supports OpenPGP as well as S/MIME).

Re: [Dovecot] exim4 dovecot sasl problem

2009-07-17 Thread Nikita Koshikov
On Fri, 17 Jul 2009 01:36:32 -0700 (PDT) Tristan Rex Santiago wrote: > hi! > > i'm trying to do smtp authentication using dovecot and exim4 by following > this guide http://wiki.dovecot.org/HowTo/EximAndDovecotSASL. > > > for the exim4 part, i got an > > authenticator dovecot: cannot find au

Re: [Dovecot] Are host names a secret?

2009-07-17 Thread Pedro Lourenco Venda
On Thu, Jul 16, 2009 at 11:19 PM, Timo Sirainen wrote: > On Fri, 2009-07-17 at 00:12 +0200, Axel Luttgens wrote: >> > With large installations with multiple servers that could allow user >> > to >> > see e.g. if they're on the same server as someone else they know, or >> > when they get moved to a

Re: [Dovecot] E-Mail Encryption

2009-07-17 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Jul 16, 2009 at 09:36:30AM -0500, Justin Krejci wrote: > Some companies and governments in the United States at least have very > strict policy requirements regarding various aspects of security and > encryption. Understandable. >

Re: [Dovecot] Are host names a secret?

2009-07-17 Thread Robert Schetterer
Axel Luttgens schrieb: > Le 17 juil. 09 à 00:45, Ralph Seichter a écrit : > >> Axel Luttgens wrote: >> >>> [...] >>> What shouldn't be allowed wrt RFC rules, unless I'm wrong: at any time, >>> the user should be able to trace the path of a received message (an SMTP >>> server MUST add a Received h

[Dovecot] exim4 dovecot sasl problem

2009-07-17 Thread Tristan Rex Santiago
hi! i'm trying to do smtp authentication using dovecot and exim4 by following this guide http://wiki.dovecot.org/HowTo/EximAndDovecotSASL. for the exim4 part, i got an authenticator dovecot: cannot find authenticator driver "dovecot"  error after i entered the codes in /etc/exim4/exim4.conf.te

Re: [Dovecot] Are host names a secret?

2009-07-17 Thread Axel Luttgens
Le 17 juil. 09 à 00:45, Ralph Seichter a écrit : Axel Luttgens wrote: [...] What shouldn't be allowed wrt RFC rules, unless I'm wrong: at any time, the user should be able to trace the path of a received message (an SMTP server MUST add a Received header, never remove or modify such a he

Re: [Dovecot] Question regarding layout.

2009-07-17 Thread Curtis Maloney
Johan Hendriks wrote: Hello all. I have a question regarding my mail flow. We have some users who are in a mail group (alias), and these alias receives a lot of attached documents. So i have the document in all the mailboxes of the alias. If the attached document is 2MB and that is not rare, i

Re: [Dovecot] Problems with Expire Plugin

2009-07-17 Thread Robert Schetterer
Timo Sirainen schrieb: > On Fri, 2009-07-17 at 00:07 +0200, Robert Schetterer wrote: >> Timo Sirainen schrieb: >>> I'm getting tired of explaining again and again how expire plugin is >>> supposed to work, so I added now Example #1 timeline and Example #2 >>> timeline to http://wiki.dovecot.org/Plu

[Dovecot] Question regarding layout.

2009-07-17 Thread Johan Hendriks
Hello all. I have a question regarding my mail flow. We have some users who are in a mail group (alias), and these alias receives a lot of attached documents. So i have the document in all the mailboxes of the alias. If the attached document is 2MB and that is not rare, i have 10 times 2 MB on