Dsync Header Hashing

2016-03-03 Thread Richard Laager
Is there any way to disable the header hashing in dsync? I'm doing a one-time migration to Dovecot using imapc. The FETCHes for Date & Message-ID take a non-trivial amount of time and it's not clear to me if they have a function for a one-time migration. -- Richard

Re: Timout for LDAP connection

2016-03-03 Thread Gordon Grubert
On 03/03/2016 01:58 PM, Christian Schmidt wrote: Hi Steffen, On 03.03.2016 13:29, Steffen Kaiser wrote: I don't understand, where the downtime shall come from? Gordon wrote "this leads to an mailserver interruption when updating the local ldap daemon" What he meant IMHO was updating the loca

Re: Dovecot 2.2.21 - segfault

2016-03-03 Thread Robert Blayzor
> This doesn't make much sense. Is it reproducible? I’m not sure what triggered it exactly, was just completely random. Looking in the logs there was nothing at the time. If it happens again (with similar trace) will follow-up. -- Robert inoc.net!rblayzor XMPP: rblayzor.AT.inoc.net PGP Key: 78

Re: Dovecot 2.2.21 - segfault

2016-03-03 Thread Timo Sirainen
> On 03 Mar 2016, at 18:17, Robert Blayzor wrote: > > pid 31943 (dovecot), uid 0: exited on signal 11 (core dumped) > > > dovecot --version > 2.2.21 (5345f22) > > uname -a > FreeBSD 10.3-BETA2 #0 r295966M: amd64 > > > (gdb) bt full > #0 0x0008008eb037 in t_push (marker=0x0) at data-

Dovecot & Pigeon w/ MySQL

2016-03-03 Thread Jorge Bastos
Howdy, I'm looking for a good howto to have pigeon saving the sieve scripts on an mysql table. Can some point me to a good one? Dr. google doesn't show me much about it. Thanks in advanced, Jorge,

Dovecot error symbol mysql_options, version libmysqlclient_16 not defined in file libmysqlclient.so.18

2016-03-03 Thread Condor
Hello, Im using Dovecot version: 2.2.21 (5345f22) Here is my conf file: auth_debug = yes auth_mechanisms = plain login auth_socket_path = /usr/local/var/run/dovecot/auth-userdb auth_verbose = yes base_dir = /usr/local/var/run/dovecot/ debug_log_path = /var/log/dovecot.log default_login_user =

Dovecot 2.2.21 - segfault

2016-03-03 Thread Robert Blayzor
pid 31943 (dovecot), uid 0: exited on signal 11 (core dumped) dovecot --version 2.2.21 (5345f22) uname -a FreeBSD 10.3-BETA2 #0 r295966M: amd64 bt full #0 0x0008008eb037 in t_push (marker=0x0) at data-stack.c:133 133 data-stack.c: No such file or directory. in data-stack.c

Re: Found bug in quota-status + patch

2016-03-03 Thread Axel Luttgens
> Le 2 mars 2016 à 15:31, Timo Sirainen a écrit : > > >> On 08 Feb 2016, at 00:26, Thierry Coppey wrote: >> >> Hello, >> >> I’ve found a bug in the quota-status util (Dovecot 2.2.21, and probably >> below): it always return OK (sufficient quota) because it fails to load the >> user properly.

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread Osiris
On 03-03-16 14:23, Gedalya wrote: > On 03/03/2016 08:17 AM, dove...@flut.demon.nl wrote: >> On 03-03-16 14:09, Gedalya wrote: >>> On 03/03/2016 07:30 AM, Stephan Bosch wrote: BTW, I can imagine that Thunderbird can already do that, as it shares much of the Firefox code base. >>> Thunderb

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread Gedalya
On 03/03/2016 08:17 AM, dove...@flut.demon.nl wrote: > On 03-03-16 14:09, Gedalya wrote: >> On 03/03/2016 07:30 AM, Stephan Bosch wrote: >>> BTW, I can imagine that Thunderbird can already do that, as it shares much >>> of the Firefox code base. >> Thunderbird definitely does validate certificates

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread dovecot
On 03-03-16 14:09, Gedalya wrote: > On 03/03/2016 07:30 AM, Stephan Bosch wrote: >> BTW, I can imagine that Thunderbird can already do that, as it shares much >> of the Firefox code base. > Thunderbird definitely does validate certificates via OCSP, enabled by > default and I've run into that the

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread Gedalya
On 03/03/2016 07:30 AM, Stephan Bosch wrote: > BTW, I can imagine that Thunderbird can already do that, as it shares much of > the Firefox code base. Thunderbird definitely does validate certificates via OCSP, enabled by default and I've run into that the hard way a couple of times wrt StartSSL h

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread dovecot
On 03-03-16 13:58, aki.tu...@dovecot.fi wrote: >> On March 3, 2016 at 2:15 PM dove...@flut.demon.nl wrote: >> >> >> On 03-03-16 13:04, A. Schulze wrote: >>> dovecot: >>> So I would like to know if Dovecot is planning to feature OCSP stapling. That way I know for sure my "must staple" cert

Re: Timout for LDAP connection

2016-03-03 Thread Christian Schmidt
Hi Steffen, On 03.03.2016 13:29, Steffen Kaiser wrote: > I don't understand, where the downtime shall come from? Gordon wrote "this leads to an mailserver interruption when updating the local ldap daemon" What he meant IMHO was updating the local ldap server software - not the data held in the d

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread aki . tuomi
> On March 3, 2016 at 2:15 PM dove...@flut.demon.nl wrote: > > > On 03-03-16 13:04, A. Schulze wrote: > > > > dovecot: > > > >> So I would like to know if Dovecot is planning to feature OCSP stapling. > >> That way I know for sure my "must staple" certificates can be used by > >> Dovecot. And in

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread dovecot
On 03-03-16 13:04, A. Schulze wrote: > > dovecot: > >> So I would like to know if Dovecot is planning to feature OCSP stapling. >> That way I know for sure my "must staple" certificates can be used by >> Dovecot. And in my opinion, every TLS offering daemon should be up to >> par to the capabilitie

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread Stephan Bosch
Op 3-3-2016 om 13:04 schreef A. Schulze: dovecot: So I would like to know if Dovecot is planning to feature OCSP stapling. That way I know for sure my "must staple" certificates can be used by Dovecot. And in my opinion, every TLS offering daemon should be up to par to the capabilities of TL

Re: Timout for LDAP connection

2016-03-03 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 3 Mar 2016, Christian Schmidt wrote: On 03.03.2016 09:55, Gordon Grubert wrote: On 03/03/2016 09:09 AM, Christian Schmidt wrote: What about replicating the directory onto the dovecot host and send the ldap queries to localhost? of course,

Re: Timout for LDAP connection

2016-03-03 Thread Christian Schmidt
Hi Gordon, On 03.03.2016 09:55, Gordon Grubert wrote: > On 03/03/2016 09:09 AM, Christian Schmidt wrote: >> What about replicating the directory onto the dovecot host and send the >> ldap queries to localhost? > > of course, this would be possible. E.g., for our DNS we are using > exactly this so

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread Stephan Bosch
Op 3-3-2016 om 13:04 schreef A. Schulze: dovecot: So I would like to know if Dovecot is planning to feature OCSP stapling. That way I know for sure my "must staple" certificates can be used by Dovecot. And in my opinion, every TLS offering daemon should be up to par to the capabilities of TL

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread A. Schulze
dovecot: So I would like to know if Dovecot is planning to feature OCSP stapling. That way I know for sure my "must staple" certificates can be used by Dovecot. And in my opinion, every TLS offering daemon should be up to par to the capabilities of TLS.. Not lag behind :) What's your opinion o

Re: LMTP proxy does not pass RCPT TO: ... 5xx response back

2016-03-03 Thread Heiko Schlittermann
Hi Timo, sorry for the delay, but many thanks for your answer (I was busy with the current Exim release). Timo Sirainen (So 21 Feb 2016 02:57:55 CET): … > Right.. RCPT TO in proxy answers immediately when it has verified that the > user exists. It doesn't wait until it has connected to the back

Implementation of TLS OCSP Stapling

2016-03-03 Thread dovecot
Hi all, About a year ago, Torsten already asked for OCSP stapling (http://dovecot.org/pipermail/dovecot/2015-April/100632.html). Unfortunately, there was no answer to his question. Now RFC 7633 ("TLS Feature Extension", https://tools.ietf.org/html/rfc7633, a.k.a. "Must Staple") has landed, revoc

Re: Timout for LDAP connection

2016-03-03 Thread Gordon Grubert
Hello Christian, On 03/03/2016 09:09 AM, Christian Schmidt wrote: Hello Gordon, On 29.02.2016 16:18, Gordon Grubert wrote: we are using a round robin dns record for connections to our ldap system. This works fine for almost all cases. In particular, for dovecot does this mean, when an ldap ser

Re: Timout for LDAP connection

2016-03-03 Thread Christian Schmidt
Hello Gordon, On 29.02.2016 16:18, Gordon Grubert wrote: > we are using a round robin dns record for connections to our ldap > system. This works fine for almost all cases. In particular, for > dovecot does this mean, when an ldap server is stopped, dovecot > instantly reconnects to another ldap s

Re: Dual certificate

2016-03-03 Thread Jean-Baptiste Vignaud
On Wed, Mar 2, 2016 at 3:44 PM, Timo Sirainen wrote: > > > Would it work if you had a single .pem file containing both certs and a > single file containing both keys? > OK, just tried this configuration but only the first certificate is working. I used this order : rsa cert, ecdsa cert, interme