Re: Moving or "upgrading" from MD5 to SSHA512

2015-01-09 Thread Darren Pilgrim
On 1/9/2015 4:07 PM, Jyri Hovila [Turvamies.fi] wrote: Hello, world! I have a long-running Dovecot & Postfix installation using PostgreSQL back-end. Until now I've been using MD5 hashing but would like to "upgrade" to the salted SSHA512. Is there a way to configure Dovecot so that it would aut

Re: pop3 seen

2015-01-09 Thread David Saez
Hi I will prefer some way to flag the messages when they are seen by pop and/or imap On Friday, January 9, 2015, 1:25:55 PM, David wrote: Hi Is there a way to know if a message has been dowloaded via pop3 and not seen via imap ? I usually see such activity through monitoring of the Dovec

Re: pop3 seen

2015-01-09 Thread Duane Hill
On Friday, January 9, 2015, 1:25:55 PM, David wrote: > Hi > Is there a way to know if a message has been dowloaded via pop3 > and not seen via imap ? I usually see such activity through monitoring of the Dovecot logs. -- Duane Hill duih...@gmail.com "If at first you don't succeed, so much for

Re: dovecot on wheezy, best ssl configuration ?

2015-01-09 Thread Joseph Tam
m...@ruggedinbox.com writes: Our smtp server is postfix, can you please suggest a better 'ssl_protocols' and 'ssl_cipher_list' configuration ? We are running Debian 7 Wheezy A useful command to know is "openssl ciphers" run on the server that will tell you the ciphers available given a protoc

Moving or "upgrading" from MD5 to SSHA512

2015-01-09 Thread Jyri Hovila [Turvamies.fi]
Hello, world! I have a long-running Dovecot & Postfix installation using PostgreSQL back-end. Until now I've been using MD5 hashing but would like to "upgrade" to the salted SSHA512. Is there a way to configure Dovecot so that it would automatically detect the type of the hash stored in the da

Re: dovecot on wheezy, best ssl configuration ?

2015-01-09 Thread Robert Schetterer
Am 09.01.2015 um 22:30 schrieb m...@ruggedinbox.com: > On 2015-01-09 08:34, Charles Marcus wrote: >> On 1/9/2015 3:06 AM, Philipp Resch wrote: >>> It seems as if claws mail is preferring SSLv3 >> >> And since dovecot is really not affected by the poodle vulnerability, if >> you can't upgrade (I be

Kerberos problems with /dev/null as dovecot home

2015-01-09 Thread Roland Hopferwieser
Hi, this is for documentation if someone else has the same problem. After migration from Dovecot 1 to 2.2. it was no longer able use Kerberos (Heimdal). I found out that dovecot tries to read ~/.krb5/config in the home of the dovecot user. This file doesn't need to exist, but if the home is set to

Solaris 10 make check core dumps

2015-01-09 Thread Brian Eliassen
Hello everyone, I'm doing a standard build on Solaris 10 with Dovecot 2.2.15 without anything fancy: ./configure make make check make install Configure output looks like this: *** Install prefix . : /usr/local File offsets ... : 64bit I/O polling : poll I/O notifys : none SSL .

Re: dovecot on wheezy, best ssl configuration ?

2015-01-09 Thread ml
On 2015-01-09 08:34, Charles Marcus wrote: On 1/9/2015 3:06 AM, Philipp Resch wrote: It seems as if claws mail is preferring SSLv3 And since dovecot is really not affected by the poodle vulnerability, if you can't upgrade (I believe 2.2 is in the backports repo?), probably easiest to just r

Re: pop3 seen

2015-01-09 Thread David Saez
Hi this are my users, not me, i just want to have a way to delete old messages that have only been seen by pop3 Hi Is there a way to know if a message has been dowloaded via pop3 and not seen via imap ? Hey, Why don't you use only imap ? It would be so simpler. Regards,

Re: pop3 seen

2015-01-09 Thread Bertrand Caplet
> Hi > > Is there a way to know if a message has been dowloaded via pop3 > and not seen via imap ? Hey, Why don't you use only imap ? It would be so simpler. Regards, -- CHUNKZ.NET - dodgy DIYer and computer technician Bertrand Caplet, Flers (FR) Feel free to send encrypted/signed messages Key

pop3 seen

2015-01-09 Thread David Saez
Hi Is there a way to know if a message has been dowloaded via pop3 and not seen via imap ?

PROXY protocol

2015-01-09 Thread Hoggins!
Hello folks, Any plans on implementing the PROXY protocol to allow Dovecot being behind a TCP proxy, and still logging the real IP address of the users ? See : http://blog.haproxy.com/haproxy/proxy-protocol/ Thanks ! signature.asc Description: OpenPGP digital signature

Re: auth-deny : from file to LDAP

2015-01-09 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 9 Jan 2015, Thomas HUMMEL wrote: On Fri, Jan 09, 2015 at 09:00:53AM +0100, Steffen Kaiser wrote: The deny=yes is a special syntax: If this passdb matches -> deny, there is no ExtraField "deny". Thanks for your answer. That's what I though

Re: Corrupted index cache after migrating from maildir to mdbox

2015-01-09 Thread Tim
On 21.11.2014 14:04, Tim wrote: > On 21.11.2014 11:58, Toni Mattila wrote: >> Hi, >> >> I think your issue is due to your corrupted maildir sizes in filenames >> so you got corrupted index that way to your mdbox. That is not >> something you can easily fix afterwords other than fixing the maildir

Re: Authcache and user changing

2015-01-09 Thread Lazy
2015-01-09 9:16 GMT+01:00 Steffen Kaiser : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > On Mon, 29 Dec 2014, Lazy wrote: > >> >> I have noticed that during auth cache hits usernames are not updated. >> (We use ldap backend >> and change username with >> user_attrs = uid=user, mailMessage

Re: auth-deny : from file to LDAP

2015-01-09 Thread Thomas HUMMEL
On Fri, Jan 09, 2015 at 09:00:53AM +0100, Steffen Kaiser wrote: > The deny=yes is a special syntax: If this passdb matches -> deny, there is > no ExtraField "deny". Thanks for your answer. That's what I thought after my tests. This explains why I was still able to log in... > but keep in mind th

Re: dovecot on wheezy, best ssl configuration ?

2015-01-09 Thread Charles Marcus
On 1/9/2015 3:06 AM, Philipp Resch wrote: > It seems as if claws mail is preferring SSLv3 And since dovecot is really not affected by the poodle vulnerability, if you can't upgrade (I believe 2.2 is in the backports repo?), probably easiest to just reenable SSLv3...

Re: Authcache and user changing

2015-01-09 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 29 Dec 2014, Lazy wrote: I have noticed that during auth cache hits usernames are not updated. (We use ldap backend and change username with user_attrs = uid=user, mailMessageStore=home, mailQuotaSize=quota_rule=*:bytes=%$ cold cache lmtp

Re: Quota, doveadm, postfixadmin

2015-01-09 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 29 Dec 2014, Ricardo wrote: I'm not sure if I understood your question(s), so I summarize quota in a top post: you did not have posted your config, hence, if the quota is _not_ calculated each time, you query the quota, you get a cached v

Re: dovecot on wheezy, best ssl configuration ?

2015-01-09 Thread Philipp Resch
Am 09.01.2015 um 08:58 schrieb m...@ruggedinbox.com: > Hi thanks for your help! > Trying to set your same parameters, when restarting dovecot, gives the > error: > > doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf > line 136: Unknown setting: ssl_prefer_server_ciphers > dove

Re: auth-deny : from file to LDAP

2015-01-09 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 8 Jan 2015, Thomas HUMMEL wrote: On Thu, Jan 08, 2015 at 02:48:47PM +0100, hum...@pasteur.fr wrote: Hello Timo, a) should I . change the driver of the first passdb from passwd-file to ldap . for user to be rejected, add an LDAP attribu