Re: [Dovecot] Configuring dovecot to use tcp wrappers

2013-04-11 Thread Joseph Tam
"Max Pyziur" wrote: I've put in a test ip address in /etc/hosts.deny like so: dovecot: 166.84.1.2 Maybe imap: 166.84.1.2 imaps: 166.84.1.2 pop3: 166.84.1.2 pop3s: 166.84.1.2 Joseph Tam

[Dovecot] How to prevent delivery to mailboxes over quota at SMTP-time

2013-04-11 Thread Ralf Hildebrandt
Hi! I wrote a little something about how to prevent delivery to mailboxes over quota while still being in the SMTP dialogue: http://sys4.de/en/blog/2013/04/08/postfix-dovecot-mailbox-quota/ (Postfix/Dovecot-2.2) -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 Mü

Re: [Dovecot] Reading dovecot-uidlist by external program (locking)

2013-04-11 Thread Andrzej A. Filip
On 04/11/2013 10:39 PM, Andrzej A. Filip wrote: > How to lock dovecot-uidlist file before reading by an external program? > [perl script] I have been too "sending happy". http://wiki2.dovecot.org/MailboxFormat/Maildir The dovecot-uidlist file doesn't need to be locked for reading.

[Dovecot] Reading dovecot-uidlist by external program (locking)

2013-04-11 Thread Andrzej A. Filip
How to lock dovecot-uidlist file before reading by an external program? [perl script]

Re: [Dovecot] Configuring dovecot to use tcp wrappers

2013-04-11 Thread Max Pyziur
On Thu, 11 Apr 2013, lists-dovecot wrote: [... snip ...] I've put in a test ip address in /etc/hosts.deny like so: dovecot: 166.84.1.2 And then I execute the following from 166.84.1.2 to port 110: bash-3.2$ telnet SiteWhereImConfiguringDovecot 110 Trying SiteWhereImConfiguringDovecot... C

Re: [Dovecot] Questions about the upcoming Object Storage Plugin for 2.2

2013-04-11 Thread Timo Sirainen
On 11.4.2013, at 15.31, Charles Marcus wrote: > I'm curious and have questions about the new Object Storage Plugin (OSP), and > how it can be leveraged by an SMB like us. I'll give some more complete answers and examples and such within a few days.. Or probably better if I write down some scen

Re: [Dovecot] Problem with fts lucene, on solaris 10

2013-04-11 Thread Timo Sirainen
On 11.4.2013, at 18.29, Pigi wrote: > Sorry for top posting, but I have no additional info on this. > BTW I need to refresh the question as I have tried squat, and I'm biting the > dust with the already known problems > ( "Corrupted squat uidlist file" or "Panic: file squat-trie.c:" ). > > Is

Re: [Dovecot] Configuring dovecot to use tcp wrappers

2013-04-11 Thread Max Pyziur
> On 5.4.2013, at 18.19, Max Pyziur wrote: > >> So my question relates to the second part of the configuration examples >> in the links above: >> >> service tcpwrap { >> unix_listener login/tcpwrap { >>group = $default_login_user >>mode = 0600 >>user = $default_login_user >> } >> } >

Re: [Dovecot] [PATCHES] NetBSD support, authentication buffer size

2013-04-11 Thread Timo Sirainen
On Thu, 2013-04-11 at 15:41 +, Emmanuel Dreyfus wrote: > On Thu, Apr 11, 2013 at 12:57:45PM +, Emmanuel Dreyfus wrote: > > Perhaps [MASTER_AUTH_MAX_DATA_SIZE] could be configurable? > > I tried to add a configuration option for that, but dovecot design > makes a good job at separating mast

Re: [Dovecot] [PATCHES] NetBSD support, authentication buffer size

2013-04-11 Thread Emmanuel Dreyfus
On Thu, Apr 11, 2013 at 12:57:45PM +, Emmanuel Dreyfus wrote: > Perhaps [MASTER_AUTH_MAX_DATA_SIZE] could be configurable? I tried to add a configuration option for that, but dovecot design makes a good job at separating master and login structures, hence The Right Way is not obvious. Anu sugg

Re: [Dovecot] Problem with fts lucene, on solaris 10

2013-04-11 Thread Pigi
Sorry for top posting, but I have no additional info on this. BTW I need to refresh the question as I have tried squat, and I'm biting the dust with the already known problems ( "Corrupted squat uidlist file" or "Panic: file squat-trie.c:" ). Is there some pointer on where/how to find assist on

Re: [Dovecot] Easy way to make all mailboxes of a user read-only

2013-04-11 Thread Robert Schetterer
Am 11.04.2013 15:00, schrieb Timo Sirainen: > On 11.4.2013, at 15.07, Stephan von Krawczynski wrote: > >> I try to configure dovecot to make all imap accesses read-only for a certain >> user. I thought this would be possible by creating a global acl file (here >> "global-acl") like: > > Sorry, t

Re: [Dovecot] Questions about the upcoming Object Storage Plugin for 2.2

2013-04-11 Thread Charles Marcus
On 2013-04-11 9:55 AM, Charles Marcus wrote: Would the plugin support the ability to use two different storage 'namespaces', e.g., one for primary email storage (stored on S3's 'Standard' storage tier), and one for 'older or 'archived' emails stored on the much cheaper 'Glacier' system/tier?

Re: [Dovecot] Easy way to make all mailboxes of a user read-only

2013-04-11 Thread Stephan von Krawczynski
On Thu, 11 Apr 2013 16:35:32 +0300 Timo Sirainen wrote: > On 11.4.2013, at 16.24, Stephan von Krawczynski wrote: > > >> The MTA can work as it used to, if it can just set a group-read permission > >> to the files. So your read-only user would belong to that read-only-group. > >> I'm not sure

Re: [Dovecot] Questions about the upcoming Object Storage Plugin for 2.2

2013-04-11 Thread Charles Marcus
On 2013-04-11 8:31 AM, Charles Marcus wrote: Third - I'm a little confused by the Amazon S3 pricing page, Specifically, the 'Request Pricing' shown here: http://aws.amazon.com/s3/pricing/ Also... Would the plugin support the ability to use two different storage 'namespaces', e.g., one for

Re: [Dovecot] v2.2.rc7 released

2013-04-11 Thread Oli Schacher
On Thu, 11 Apr 2013 12:22:50 +0300 Timo Sirainen wrote: > Those errors come from your script. I don't see anything in the quota > warning change that could have changed a behavior in your script. > Maybe your script changed also around the same time? > yeah, sorry. there was indeed a change at

Re: [Dovecot] Easy way to make all mailboxes of a user read-only

2013-04-11 Thread Timo Sirainen
On 11.4.2013, at 16.24, Stephan von Krawczynski wrote: >> The MTA can work as it used to, if it can just set a group-read permission >> to the files. So your read-only user would belong to that read-only-group. >> I'm not sure how Postfix assigns permissions, but if it can't do that you >> cou

Re: [Dovecot] Easy way to make all mailboxes of a user read-only

2013-04-11 Thread Stephan von Krawczynski
On Thu, 11 Apr 2013 16:15:23 +0300 Timo Sirainen wrote: > On 11.4.2013, at 16.07, Stephan von Krawczynski wrote: > > > On Thu, 11 Apr 2013 16:00:22 +0300 > > Timo Sirainen wrote: > > > >> On 11.4.2013, at 15.07, Stephan von Krawczynski wrote: > >> > >>> I try to configure dovecot to make al

Re: [Dovecot] Easy way to make all mailboxes of a user read-only

2013-04-11 Thread Stephan von Krawczynski
On Thu, 11 Apr 2013 16:00:22 +0300 Timo Sirainen wrote: > On 11.4.2013, at 15.07, Stephan von Krawczynski wrote: > > > I try to configure dovecot to make all imap accesses read-only for a certain > > user. I thought this would be possible by creating a global acl file (here > > "global-acl") li

Re: [Dovecot] Easy way to make all mailboxes of a user read-only

2013-04-11 Thread Timo Sirainen
On 11.4.2013, at 16.07, Stephan von Krawczynski wrote: > On Thu, 11 Apr 2013 16:00:22 +0300 > Timo Sirainen wrote: > >> On 11.4.2013, at 15.07, Stephan von Krawczynski wrote: >> >>> I try to configure dovecot to make all imap accesses read-only for a certain >>> user. I thought this would be

Re: [Dovecot] Easy way to make all mailboxes of a user read-only

2013-04-11 Thread Stephan von Krawczynski
On Thu, 11 Apr 2013 15:08:31 +0200 Reindl Harald wrote: > > > Am 11.04.2013 15:05, schrieb Stephan von Krawczynski: > > Let me explain some more details, that seem important to understand: > > > > I cannot use acl files per folder/mailbox because the MTA creates folders > > dynamically (re-ord

Re: [Dovecot] Easy way to make all mailboxes of a user read-only

2013-04-11 Thread Reindl Harald
Am 11.04.2013 15:05, schrieb Stephan von Krawczynski: > Let me explain some more details, that seem important to understand: > > I cannot use acl files per folder/mailbox because the MTA creates folders > dynamically (re-orders mails in folders) why does the MTA that? normally the MTA should o

Re: [Dovecot] Easy way to make all mailboxes of a user read-only

2013-04-11 Thread Stephan von Krawczynski
On Thu, 11 Apr 2013 16:00:22 +0300 Timo Sirainen wrote: > On 11.4.2013, at 15.07, Stephan von Krawczynski wrote: > > > I try to configure dovecot to make all imap accesses read-only for a certain > > user. I thought this would be possible by creating a global acl file (here > > "global-acl") li

Re: [Dovecot] Easy way to make all mailboxes of a user read-only

2013-04-11 Thread Stephan von Krawczynski
Let me explain some more details, that seem important to understand: I cannot use acl files per folder/mailbox because the MTA creates folders dynamically (re-orders mails in folders). So I really would need some idea to tell dovecot to let a certain user access his mailbox/folders read-only, no m

Re: [Dovecot] Dovecot distribution configuration files source

2013-04-11 Thread Timo Sirainen
On 11.4.2013, at 15.19, Dave Gattis wrote: > Where can I find unaltered distribution config files (/etc/dovecot/ and > /etc/dovecot/config.d/) for Dovecot 2.1.7? I upgraded from version 1 and had > to butcher them to get it working. Now that I understand it better, I'd like > to do it right.

Re: [Dovecot] Easy way to make all mailboxes of a user read-only

2013-04-11 Thread Timo Sirainen
On 11.4.2013, at 15.07, Stephan von Krawczynski wrote: > I try to configure dovecot to make all imap accesses read-only for a certain > user. I thought this would be possible by creating a global acl file (here > "global-acl") like: Sorry, there is still no "default ACLs" feature in Dovecot. The

Re: [Dovecot] [PATCHES] NetBSD support, authentication buffer size

2013-04-11 Thread Emmanuel Dreyfus
On Thu, Apr 11, 2013 at 02:54:01PM +0300, Timo Sirainen wrote: > > This is for pam_saml. The webmail sends a signed SAML assertion as the > > password, and the PAM module validates it. > The pam_saml could easily be changed to use AUTHENTICATE PLAIN instead. pam_saml is not the component that cho

[Dovecot] Questions about the upcoming Object Storage Plugin for 2.2

2013-04-11 Thread Charles Marcus
Hi Timo, I'm curious and have questions about the new Object Storage Plugin (OSP), and how it can be leveraged by an SMB like us. First, am I reading this right where it could be used as a kind of 'live/realtime backup' solution, where everything is stored *both* locally and in the cloud, wi

[Dovecot] Dovecot distribution configuration files source

2013-04-11 Thread Dave Gattis
Where can I find unaltered distribution config files (/etc/dovecot/ and /etc/dovecot/config.d/) for Dovecot 2.1.7? I upgraded from version 1 and had to butcher them to get it working. Now that I understand it better, I'd like to do it right. -- Dave

Re: [Dovecot] My old email is not stored

2013-04-11 Thread Charles Marcus
On 2013-04-11 5:00 AM, HylkeB wrote: I see now, took some time for me to sink in. Is there any way on the server to disable the pop3 protocol, so all email users cant accidently use pop3 and delete all their old emails? I suppose i would have to do something like the following on the server:

[Dovecot] Easy way to make all mailboxes of a user read-only

2013-04-11 Thread Stephan von Krawczynski
Hello all, I try to configure dovecot to make all imap accesses read-only for a certain user. I thought this would be possible by creating a global acl file (here "global-acl") like: user= lr and plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 } But that seems to be ignored. Wh

Re: [Dovecot] Proxying, pertinent values and features, SNI

2013-04-11 Thread Ed W
On 04/04/2013 03:56, Christian Balzer wrote: 2. Despite the fact that it will be trivial for anybody to determine that OEM A is now hosted with us, a SAN SSL makes all the SANs visible in one go, something they probably don't want. But someone smart enough to be able to look at a certificate,

Re: [Dovecot] [PATCHES] NetBSD support, authentication buffer size

2013-04-11 Thread Timo Sirainen
On 11.4.2013, at 14.58, m...@netbsd.org (Emmanuel Dreyfus) wrote: >> By this I think you don't mean special authentication mechanisms, or even >> AUTHENTICATE PLAIN mechanism, but you mean that someone is using LOGIN >> command in such a kludgy way that the password field is over 1024 >> bytes lon

Re: [Dovecot] [PATCHES] NetBSD support, authentication buffer size

2013-04-11 Thread Emmanuel Dreyfus
Timo Sirainen wrote: > By this I think you don't mean special authentication mechanisms, or even > AUTHENTICATE PLAIN mechanism, but you mean that someone is using LOGIN > command in such a kludgy way that the password field is over 1024 > bytes long? This is for pam_saml. The webmail sends a s

Re: [Dovecot] [PATCH proposal] make dsync preserve pop3_uidl_format

2013-04-11 Thread Timo Sirainen
On Thu, 2013-04-11 at 08:28 +, Mark Zealey wrote: > I ran into an issue yesterday (dovecot 2.0) whereby when we dsync messages > from a local machine (sdbox) to a remote (Maildir) which have different > pop3_uidl_formats configured, the uidl format is not preserved. There doesn't > seem to

Re: [Dovecot] Postfix/Dovecot/lmtp with virtual and local users

2013-04-11 Thread Timo Sirainen
On Thu, 2013-04-11 at 11:04 +0200, David Obando wrote: > Hi, > > thanks for the answer. > Do I understand you right that currently it's not possible to manage > both system users and virtual users in a dovecot 2 and lmtp setup? If you have only a single domain, set auth_username_format=%Ln and co

Re: [Dovecot] Maildirs location migration

2013-04-11 Thread Thomas Hummel
On Thu, Apr 11, 2013 at 01:09:18PM +0300, Timo Sirainen wrote: > Which is probably a few seconds, so I don't see this as much of a problem. Ok, thanks. -- Thomas Hummel | Institut Pasteur | Groupe Exploitation et Infrastructure

Re: [Dovecot] Maildirs location migration

2013-04-11 Thread Timo Sirainen
On 11.4.2013, at 13.07, Thomas Hummel wrote: >> It doesn't matter if new connections arrive during the final dsync, >> because they are using the new format already. dsync merges changes, it >> doesn't destroy any changes. > > It doesn't destroy changes but the user may see an incorrect state fo

Re: [Dovecot] Maildirs location migration

2013-04-11 Thread Thomas Hummel
On Wed, Apr 10, 2013 at 09:21:40PM +0300, Timo Sirainen wrote: > Not if you kick the users out at the correct time: > > - dsync > - switch user to new format > - kick users > - final dsync > > It doesn't matter if new connections arrive during the final dsync, > because they are using the ne

Re: [Dovecot] [PATCHES] NetBSD support, authentication buffer size

2013-04-11 Thread Timo Sirainen
On 11.4.2013, at 11.41, Emmanuel Dreyfus wrote: > Here are a few unintegrated patches, just tested against 2.2rc7: > > 1) NetBSD's getmntinfo uses struct statvfs while other BSD use struct statfs > http://ftp.espci.fr/shadow/manu/patch-ak > > 2) NetBSD 5.x net_getunixcred() support. Build on N

Re: [Dovecot] v2.2.rc7 released

2013-04-11 Thread Timo Sirainen
On 11.4.2013, at 9.06, Oli Schacher wrote: >> * Running dsync no longer triggers quota warnings. > > Not sure if you saw my last post about this change.. it works but > now maillog always shows these empty error messages after executing the > quota script: > > Apr 11 07:55:08 fumailsynctes

Re: [Dovecot] Postfix/Dovecot/lmtp with virtual and local users

2013-04-11 Thread David Obando
Hi, thanks for the answer. Do I understand you right that currently it's not possible to manage both system users and virtual users in a dovecot 2 and lmtp setup? You were talking about "adding a generic passdb/userdb { auth_username_format } setting". Are there any plans to do so? What are your

Re: [Dovecot] My old email is not stored

2013-04-11 Thread HylkeB
>> Well, receiving ALL mails again, might not be too handy, but 14 days >> is a quite short time. So can i change the pop3 settings so old >> emails are stored for e.g. 3 months instead of 14 days? And just >> curious, where can i disable the configuration that pop3 deletes >> received me

[Dovecot] [PATCHES] NetBSD support, authentication buffer size

2013-04-11 Thread Emmanuel Dreyfus
Hi Here are a few unintegrated patches, just tested against 2.2rc7: 1) NetBSD's getmntinfo uses struct statvfs while other BSD use struct statfs http://ftp.espci.fr/shadow/manu/patch-ak 2) NetBSD 5.x net_getunixcred() support. Build on NetBSD, but not tested (I am testing on NetBSD 6.0): http:/

[Dovecot] [PATCH proposal] make dsync preserve pop3_uidl_format

2013-04-11 Thread Mark Zealey
Hi there, I ran into an issue yesterday (dovecot 2.0) whereby when we dsync messages from a local machine (sdbox) to a remote (Maildir) which have different pop3_uidl_formats configured, the uidl format is not preserved. There doesn't seem to be any way to force this in the code, although I sus