mel llaguno | 1 Oct 2005 09:36

Red Hat ES 4 - dovecot-auth: Unknown password scheme SMD5

I have a couple of questions regarding the default dovecot packaged with 
RedHat ES 4. The dovecot version is 0.99.11-2.EL4.1 which I assume is 
considerably behind the current stable version of 0.99.14. Is it the 
fact that I am using an older version of dovecot that SSHA passwords in 
an openldap directory are not recognized and give the following error:

dovecot-auth: Unknown password scheme SMD5

?

LDAP  is working as expected for NFS maildirs.

I have dovecot 0.99.13 working on fedora core 3, but the stability of 
fedora leaves much to be desired and would like to get a stable, low 
maintenance install of dovecot on an enterprise supported linux.

Redhat does not have packages for 0.99.14 and I would rather compile 
from source if possible. I've specified --with-ldap as part of the 
configure script, but am wondering if there is anything more to add to 
support SSHA passwords.

Until dovecot 1.0 is proven in the field, it is not a consideration for 
the production environment this server is being used for.

Any help with this matter would be greatly appreciated.

TIA,

Mel Llaguno

(Continue reading)

Timo Sirainen | 1 Oct 2005 13:02
Picon
Picon
Favicon

Re: A Couple Of Issues (APOP Causes Auth SIGSEGV, Umask Setting Ineffective)

On Wed, 2005-09-28 at 13:10 +0100, Sabahattin Gucukoglu wrote:
> 1.  When I attempt APOP login of any variety on the POP3 server auth dies 
> with signal 11.  passwd-file is of course listed as a password database, 
> alongside shadow.  I get back "-ERR Internal authentication failure - 
> please try again later." or something like this and all subsequent 
> authentication in that session won't work (of course, auth is dead).  The 
> password entry is in /etc/dovecot.secrets (perms=0700,uid=0,gid=0) and 
> looks like:
> username:{PLAIN}cleartextpassword

Actually I have in my TODO that APOP is probably broken. So this
confirms it, I should look into it. What very quick to install POP3
Linux clients support APOP?

> 2.  Umask setting gone strange.  I set it, per example comment, to "7077" 
> rather than default of 0077 (just to be precise...).  

I think this is because 7077 is treated as decimal. Use 07077 so it gets
back to octal.

Timo Sirainen | 1 Oct 2005 13:07
Picon
Picon
Favicon

Re: A little request

On Wed, 2005-09-28 at 01:04 +0200, Riccardo Bini wrote:
> Hi all, I have a little request:
> It's possible to have the full user name in the logs? I mean this:
> dovecot: pop3(info): Logout. top=0/0, retr=0/ del=0/0, size=0
> 
> info <at> example.com instead of info. I use 10 real users and many vpopmail users.
> 
> I get in the log too many (info)... 8-(

mail_log_prefix = "%Us(%u): "

in config file sets this. But that's the default, so your problem
probably is something else. The user <at> domain users are all in vpopmail?
Probably something to do with it.. Is this with Dovecot 1.0alpha3?

Timo Sirainen | 1 Oct 2005 13:10
Picon
Picon
Favicon

Re: Using procmail with virtual users...

On Wed, 2005-09-28 at 14:07 +0200, Arnaud Guiton wrote:
> Hello all,
> 
> I've a working dovecot installation on my machine, using exim3, virtual
> users and maildirs.
> 
> I would like to add procmailrc rules for these (virtual) users, but i've not
> succeeded with that.
> The authentication is done with a passwd-file looking like this :
> testuser:password:uid:gid::/home/mail/testuser::chroot:maildir:/home/mail/testuser/Maildir/

Well, that's Dovecot's passwd-file which only dovecot-auth reads..

> i've put .procmailrc files in /home/mail/testuser/.procmailrc, but it this
> not taken into account, because the MTA never calls the procmail router as
> it resides after the dovecot one.
> 
> How is the proper way of using procmail with virtual user (and is it at
> least possible) ?

And procmail has no idea Dovecot even exists. This is anyway procmail's
problem, so maybe ask in some procmail list if no-one answers here.
Timo Sirainen | 1 Oct 2005 13:12
Picon
Picon
Favicon

Re: sudo /etc/init.d/dovecot start doesn't work

On Thu, 2005-09-29 at 20:29 -0700, Sam Fung wrote:
> I've been trying to get dovecot working with postfix with virtual
> domain setting.  I noticed that if I started dovecot with
> "sudo /usr/sbin/dovecot", everything would work fine.  But if I
> started with "sudo /etc/init.d/dovecot start", I would get the
> following permission error.  I checked "ps -ef | grep dovecot" and
> didn't find anything different. 

Most likely SELinux problem. Turn it off or fix its configuration.
Jakob Hirsch | 1 Oct 2005 14:11
Picon
Gravatar

Re: A Couple Of Issues (APOP Causes Auth SIGSEGV, Umask Setting Ineffective)

Timo Sirainen wrote:

> Actually I have in my TODO that APOP is probably broken. So this
> confirms it, I should look into it. What very quick to install POP3
> Linux clients support APOP?

fetchmail -v pop.your.host --proto apop --user bla

Sam Fung | 1 Oct 2005 20:01
Picon

Re: sudo /etc/init.d/dovecot start doesn't work

The problem went away after I upgraded to 1.0alpha3.... strange but at least it's all working.

-Sam

On 10/1/05, Timo Sirainen < tss <at> iki.fi> wrote:
On Thu, 2005-09-29 at 20:29 -0700, Sam Fung wrote:
> I've been trying to get dovecot working with postfix with virtual
> domain setting.  I noticed that if I started dovecot with
> "sudo /usr/sbin/dovecot", everything would work fine.  But if I
> started with "sudo /etc/init.d/dovecot start", I would get the
> following permission error.  I checked "ps -ef | grep dovecot" and
> didn't find anything different.

Most likely SELinux problem. Turn it off or fix its configuration.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQBDPm8XyUhSUUBViskRAukvAJ9injZmAzXaBJJVJr/7GH6YDFqhVACdF5Xa
JV6G//s+p0of2ToynuANu5s=
=worA
-----END PGP SIGNATURE-----



Riccardo Bini | 1 Oct 2005 21:15
Picon

Re: A little request

Alle 13:07, sabato 1 ottobre 2005, Timo Sirainen ha scritto:
> On Wed, 2005-09-28 at 01:04 +0200, Riccardo Bini wrote:
> > Hi all, I have a little request:
> > It's possible to have the full user name in the logs? I mean this:
> > dovecot: pop3(info): Logout. top=0/0, retr=0/ del=0/0, size=0
> >
> > info <at> example.com instead of info. I use 10 real users and many vpopmail
> > users.
> >
> > I get in the log too many (info)... 8-(
>
> mail_log_prefix = "%Us(%u): "
>
> in config file sets this. But that's the default, so your problem
> probably is something else. 
> The user <at> domain users are all in vpopmail? 
Yes. 
My log:
dovecot: pop3-login: Login: user=<user <at> domain>
dovecot: pop3(user): Logout. top=0/0, retr=0/ del=0/0, size=0

I would want:
dovecot: pop3-login: Login: user=<user <at> domain>
dovecot: pop3(user <at> domain): Logout. top=0/0, retr=0/ del=0/0, size=0

> Probably something to do with it.. Is this with Dovecot 1.0alpha3?
Yes

Rick

Dominik Werder | 2 Oct 2005 12:00
Picon

deliver: select destination folder

Hello,

I wanted a commandline switch within deliver to select the destination  
folder within an IMAP account, so I added the -f switch, heres the diff,  
the implementation is only "proof of concept"  hehe, I didnt checked if  
theres any security riscs in doing this. Could we add something like this  
to dovecot?

diff deliver.c.orig deliver.c
342c342
<       const char *destination, *mail;
---
>       const char *destination, *mail, *folder;
355a356
>       folder = NULL;
364a366,373
>               } else if (strcmp(argv[i], "-f") == 0) {
>                       /* destination folder */
>                       i++;
>                       if (i == argc) {
>                               i_fatal_status(EX_USAGE,
>                                              "Missing folder argument");
>                       }
>                       folder = argv[i];
378a388,391
>       if (folder == NULL) {
>               folder = "INBOX";
>       }
>
449c462
<       if (save_mail(storage, "INBOX", input) < 0)
---
>       if (save_mail(storage, folder, input) < 0)

bye!
Dominik

OpenMacNews | 2 Oct 2005 23:36
Favicon

can't access dovecot IMAP account w/TBird ... ok w/ other clients


hi all,

i'm using

	dovecot --version
		1.0.alpha3
	dovecot --build-options
		Build options: ioloop=poll openssl postgresql
		Passdb: checkpassword pam passwd passwd-file sql
		Userdb: checkpassword passdb passwd passwd-file sql static

on OSX 10.4.2.

i've set up for

	maildir: format
	PLAIN text AUTH, w/ "disable_plaintext_auth = yes"
	TLS support
	Private/, Public/ Shared/ namespaces

login and access with my Mulberry MUA has been just fine.

however, attemtping to access with Thunderboird v107 has been completely
unsuccessful.

T-Bird's "Server Settings" for my user are config'd as:

	Server Type: IMAP MailServer
	Server name: mail.testdomain.com  Port: 993  Default: 993
	User name: testuser <at> testdomain.com
	[X] User secure connection (SSL)
	[ ] User secure authentication

on access, T-Bird's status bar shows "Openeing folder ...", but never
continues on any further.  i never see my mailboxes, Namespaces, etc, as
I do in Mulberry.

my dovecot log shows:

dovecot: 2005.10.02 14:29:26 Info: auth(default): client in: AUTH
1       PLAIN   service=IMAP    secured lip=172.30.11.5 rip=172.30.11.6
dovecot: 2005.10.02 14:29:26 Info: auth(default): client out: CONT      1
dovecot: 2005.10.02 14:29:26 Info: auth(default): client in: CONT
1       AGJsYWtlcnNAb3BlbmV4ZWMuY29tAGJsYWtlcnM=
dovecot: 2005.10.02 14:29:26 Info: auth(default): client out: OK
1       user=testuser <at> testdomain.com
dovecot: 2005.10.02 14:29:26 Info: auth(default): master in: REQUEST
111     28213   1
dovecot: 2005.10.02 14:29:26 Info: auth(default): master out: USER
111     testuser <at> testdomain.com    uid=42  gid=42
dovecot: 2005.10.02 14:29:26 Info: imap(testuser <at> testdomain.com):
Effective uid=42, gid=42
dovecot: 2005.10.02 14:29:26 Info: imap(testuser <at> testdomain.com):
Namespace: type=private, prefix=Private/, sep=/, inbox=yes, hidden=no,
subscriptions=no
dovecot: 2005.10.02 14:29:26 Info: imap(testuser <at> testdomain.com):
maildir:
data=/var/Mail/MailHome/Domains/testdomain.com/Accounts/t/testuser/Maildir:INDEX=/var/Mail/MailHome/indexes/testdomain.com/testuser
dovecot: 2005.10.02 14:29:26 Info: imap(testuser <at> testdomain.com):
maildir:
root=/var/Mail/MailHome/Domains/testdomain.com/Accounts/t/testuser/Maildir,
index=/var/Mail/MailHome/indexes/testdomain.com/testuser, control=, inbox=
dovecot: 2005.10.02 14:29:26 Info: imap(testuser <at> testdomain.com):
Namespace: type=public, prefix=Public/, sep=/, inbox=no, hidden=no,
subscriptions=no
dovecot: 2005.10.02 14:29:26 Info: imap(testuser <at> testdomain.com):
maildir:
data=/var/Mail/MailHome/Domains/testdomain.com/Public/Maildir:INDEX=/var/Mail/MailHome/indexes/testdomain.com/public
dovecot: 2005.10.02 14:29:26 Info: imap(testuser <at> testdomain.com):
maildir: root=/var/Mail/MailHome/Domains/testdomain.com/Public/Maildir,
index=/var/Mail/MailHome/indexes/testdomain.com/public, control=, inbox=
dovecot: 2005.10.02 14:29:26 Info: imap(testuser <at> testdomain.com):
Namespace: type=shared, prefix=Shared/, sep=/, inbox=no, hidden=no,
subscriptions=no
dovecot: 2005.10.02 14:29:26 Info: imap(testuser <at> testdomain.com):
maildir:
data=/var/Mail/MailHome/Domains/testdomain.com/Shared/Maildir:INDEX=/var/Mail/MailHome/indexes/testdomain.com/shared
dovecot: 2005.10.02 14:29:26 Info: imap(testuser <at> testdomain.com):
maildir: root=/var/Mail/MailHome/Domains/testdomain.com/Shared/Maildir,
index=/var/Mail/MailHome/indexes/testdomain.com/shared, control=, inbox=
dovecot: 2005.10.02 14:29:26 Info: imap-login: Login:
u:<testuser <at> testdomain.com>, rIP:[10.0.0.6], lIP:[10.0.0.5], IMAP,
plain, TLS

which looks ok to me (?).

fwiw, TBird can access TLS+Plain accounts on CGatePro & CyrusIMAP
accounts i've tried w/ no problem ...

any suggestions/thoughts?

cheers,

richard

Gmane