Re: bug in acl_defaults_from_inbox option

2015-09-07 Thread Marco Giunta
On 2015-09-07 23:10, Timo Sirainen wrote: This happens to all boolean settings inside plugin {}. Not ideal, but also not something that will get fixed without some larger settings code changes. ok, no problem, but I didn't find this note on Dovecot wiki; maybe it is better to add it on a gener

Re: Dovecot and IPA

2015-09-07 Thread Kanwar Ranbir Sandhu
On Mon, 2015-09-07 at 23:15 +0200, Benny Pedersen wrote: > change password before debug logs > > then run debug > > change password > > paste it > > is safe Here's the in rawlog: 1441680001.046492 B1 AUTHENTICATE GSSAPI 1441680001.051720 YIICZQYJKoZIhvcSAQICAQBuggJUMIICUKADAgEFoQMCAQ6iBwM

Re: How to "Windows Authenticate"

2015-09-07 Thread Mark Foley
Comments interspersed with yours ... --Mark -Original Message- > Date: Sun, 06 Sep 2015 20:00:11 -0500 > From: Rick Romero > To: dovecot@dovecot.org > Subject: Re: How to "Windows Authenticate" > > Hmm. I would expect to see 'm...@hprs.com'. Whatever your full domain > name is. Full

Re: [Patch] Fix hang in safe_sendfile on SmartOS

2015-09-07 Thread Sebastian Wiedenroth
> Am 07.09.2015 um 21:34 schrieb Timo Sirainen : > > On 07/16/2015 06:03 PM, Sebastian Wiedenroth wrote: >> Fix hang in safe_sendfile on SmartOS >> >> The call to sendfile on SmartOS can fail with EOPNOTSUPP. This is a valid >> error >> code and documented in the man page. This error code needs

Re: [Dovecot] dsync replication errors

2015-09-07 Thread Timo Sirainen
On 08 Sep 2015, at 01:16, Gedalya wrote: > > On 02/17/2013 03:21 AM, Timo Sirainen wrote: >> Although there's still some mail >> duplication problem with maildir that doesn't log any errors about it. >> I'm not sure why that happens. > > While you're around, Timo :-) > > I've had such an issue

Re: Is it a bug when you move mail between namespaces....

2015-09-07 Thread Larry Rosenman
It doesn't in my current 2.2.18 setup with the config I posted. On Mon, Sep 7, 2015 at 5:22 PM, Timo Sirainen wrote: > It should. > > On 08 Sep 2015, at 01:01, Larry Rosenman wrote: > > should fts_autoindex handle that case? > > > On Mon, Sep 7, 2015 at 5:00 PM, Timo Sirainen wrote: > >> On 0

Re: Is it a bug when you move mail between namespaces....

2015-09-07 Thread Timo Sirainen
It should. > On 08 Sep 2015, at 01:01, Larry Rosenman wrote: > > should fts_autoindex handle that case? > > > On Mon, Sep 7, 2015 at 5:00 PM, Timo Sirainen > wrote: > On 09/08/2015 12:56 AM, Larry Rosenman wrote: > > that the fts data gets lost? > > All full text search b

Re: [Patch] Fix hang in safe_sendfile on SmartOS

2015-09-07 Thread Timo Sirainen
On 07 Sep 2015, at 23:19, Sebastian Wiedenroth wrote: > > >> Am 07.09.2015 um 21:34 schrieb Timo Sirainen : >> >> On 07/16/2015 06:03 PM, Sebastian Wiedenroth wrote: >>> Fix hang in safe_sendfile on SmartOS >>> >>> The call to sendfile on SmartOS can fail with EOPNOTSUPP. This is a valid >>>

Re: [Dovecot] dsync replication errors

2015-09-07 Thread Gedalya
On 02/17/2013 03:21 AM, Timo Sirainen wrote: Although there's still some mail duplication problem with maildir that doesn't log any errors about it. I'm not sure why that happens. While you're around, Timo :-) I've had such an issue recently with 2.2.18, using Maildir, where emails were being

Re: Is it a bug when you move mail between namespaces....

2015-09-07 Thread Larry Rosenman
should fts_autoindex handle that case? On Mon, Sep 7, 2015 at 5:00 PM, Timo Sirainen wrote: > On 09/08/2015 12:56 AM, Larry Rosenman wrote: > > that the fts data gets lost? > > All full text search backends are now implemented so that if you > copy/move mails, the mails need to be indexed again

Re: Is it a bug when you move mail between namespaces....

2015-09-07 Thread Timo Sirainen
On 09/08/2015 12:56 AM, Larry Rosenman wrote: > that the fts data gets lost? All full text search backends are now implemented so that if you copy/move mails, the mails need to be indexed again the destination folder. Alternative would be to index mails only with their GUIDs and have a GUID => {

Is it a bug when you move mail between namespaces....

2015-09-07 Thread Larry Rosenman
that the fts data gets lost? doveconf -n attached -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com US Mail: 7011 W Parmer Ln, Apt 1115, Austin, TX 78729-6961 doveconf.ler.out Description: Binary data

Re: How about an option to disbale headers? (was Re: Patch for "doveadm -f table" nit)

2015-09-07 Thread Timo Sirainen
On 07/03/2015 05:48 PM, Gedalya wrote: > On 05/24/2015 03:08 AM, Gedalya wrote: >> On 03/20/2015 02:47 PM, Timo Sirainen wrote: >>> Added -h parameter now to hg. >> >> Using 2.2.18. >> With -f table this behaves as expected, however with -t tab the output >> seems to include the separating tabs of

Re: Null deference pointer in dovecot-2.2.18

2015-09-07 Thread Timo Sirainen
These are all false positives. I added some asserts that hopefully get rid of two of the warnings. I couldn't really think of a way to nicely avoid the mail-index-fsck.c warning. http://hg.dovecot.org/dovecot-2.2/rev/06b884831f25 On 07/15/2015 06:07 AM, 吴迪 wrote: > Dear, > > > use our stat

Re: RFC 5465 (NOTIFY) violation: missing HIGHESTMODSEQ in initial STATUS responses

2015-09-07 Thread Timo Sirainen
Oh, and this was also fixed a week ago: http://hg.dovecot.org/dovecot-2.2/rev/238a34ad1ab0 On 07/19/2015 08:40 PM, Guilhem Moulin wrote: > Quoting RFC 5465 (NOTIFY): > >“If the NOTIFY command enables MessageNew, MessageExpunge, > AnnotationChange, or FlagChange notifications for a mailbox

Re: charset-iconv.c panic

2015-09-07 Thread Timo Sirainen
On 07/29/2015 04:02 PM, mihaiush wrote: > Hi, > > I have a mailbox where indexing fails with the following error: > > # /opt/dovecot2/bin/doveadm -c /tmp/dovecot.conf -o > mail_location=/tmp/skesselring index '*' > doveadm(root): Panic: file charset-iconv.c: line 132 (charset_to_utf8): > assertio

Re: Dovecot and IPA

2015-09-07 Thread Benny Pedersen
Kanwar Ranbir Sandhu skrev den 2015-09-07 22:58: Alright, I enabled it. I have some logs, but I'm not clear on what I should and shouldn't include here. Can I just copy and paste both in and out logs verbatim without inadvertently giving up my passwords or something?? change password before de

Re: NOTIFY regression: 2.18 no longer notifies of events in INBOX

2015-09-07 Thread Timo Sirainen
Fixed: http://hg.dovecot.org/dovecot-2.2/rev/fa979ccfa34c http://hg.dovecot.org/dovecot-2.2/rev/f600285c3df2 On 07/26/2015 06:50 PM, Guilhem Moulin wrote: > Here is an example with APPEND > > $ /usr/lib/dovecot/imap > S1: * PREAUTH [CAPABILITY IMAP4rev1 … MOVE NOTIFY SPECIAL-USE] Logged

Re: bug in acl_defaults_from_inbox option

2015-09-07 Thread Timo Sirainen
On 07/28/2015 06:13 PM, Marco Giunta wrote: > Hi at all, > there is a bug in in acl_defaults_from_inbox option: if you define it > with ANY value ('yes', 'no', 'whatyouwant', 'xxx') it acts like the > value is ALWAYS 'yes', and Dovecot enable it; the only way to disable > it, is comment it or delet

Re: Dovecot and IPA

2015-09-07 Thread Kanwar Ranbir Sandhu
On Mon, 2015-09-07 at 20:37 +0300, Timo Sirainen wrote: > It says "tried to use unsupported auth mechanism". In your later mail > you say that telnet shows AUTH=GSSAPI in capabilities. So that would > mean that the client isn't using AUTHENTICATE GSSAPI but something > else. I'd been considering t

Re: "NOTIFY SET (mailboxes INBOX (...))" crashes the IMAP client

2015-09-07 Thread Timo Sirainen
On 07/26/2015 07:00 PM, Guilhem Moulin wrote: > On Sun, 19 Jul 2015 at 19:21:16 +0200, Guilhem Moulin wrote: >> The "subtree" mailbox filter has the same problem, but the >> non-parameterized ones ("inboxes", "personal" and "subscribed") work >> fine. > > Actually there are further problem with th

Re: "NOTIFY SET (mailboxes INBOX (...))" crashes the IMAP client

2015-09-07 Thread Timo Sirainen
On 07/19/2015 08:21 PM, Guilhem Moulin wrote: > Hi list, > > The NOTIFY extension (RFC 5465) works fine for mailboxes in the "virtual/" > namespace, but it crashes the IMAP client when used with a mailbox in > the empty "" namespace: Fixed: http://hg.dovecot.org/dovecot-2.2/rev/fae5feef70af >

Re: How to "Windows Authenticate"

2015-09-07 Thread Rick Romero
Hmm.  I would expect to see 'm...@hprs.com'.  Whatever your full domain name is. It also won't look up /etc/shadow - Samba is doing the AD->Unix UID mapping.  Your AD users shouldn't be in there when all is said and done.  Well, at when I did a Samba4 install as a DC it still behaved like a Samb

Re: [Patch] Fix hang in safe_sendfile on SmartOS

2015-09-07 Thread Timo Sirainen
On 07/16/2015 06:03 PM, Sebastian Wiedenroth wrote: > Fix hang in safe_sendfile on SmartOS > > The call to sendfile on SmartOS can fail with EOPNOTSUPP. This is a valid > error > code and documented in the man page. This error code needs to be handled or > else dovecot will retry the sendfile cal

Re: Dovecot and IPA

2015-09-07 Thread Benny Pedersen
Peter Chiochetti skrev den 2015-09-07 20:21: dovecot is buildt with security in mind... using namebased gid or uid is not secure it might just still works, but its not secure Benny, where did you learn all this? not here, since no one care :) time for my own coffee break after a long day

Re: Dovecot 2.2.18 Panic: file index-mail-binary.c

2015-09-07 Thread Timo Sirainen
On 28 Jul 2015, at 10:12, Michael Borgelt wrote: > > Hi, > I got the following in my dovecot log's on an particular email message with > dovecot-imap. > > ---snip--- > Jul 28 08:42:11 hermes dovecot: imap(mborgelt): Panic: file > index-mail-binary.c: line 354 (blocks_count_lines): assertion fa

Re: question on autch cache parameters

2015-09-07 Thread Timo Sirainen
Fixed: http://hg.dovecot.org/dovecot-2.2/rev/b7f7ad2bc4d0 > On 05 Aug 2015, at 17:30, matthias lay wrote: > > Hi list, > > I have a question on auth caching in 2.2.18. > > I am using acl_groups for a master user, appended in a static userdb file > > # snip ### > ma

Re: Dovecot and IPA

2015-09-07 Thread Peter Chiochetti
Am 2015-09-07 um 19:47 schrieb Benny Pedersen: Kanwar Ranbir Sandhu skrev den 2015-09-07 19:29: I tried it for shits and giggles: no change. :( I'm still seeing the same problem. dovecot is buildt with security in mind... using namebased gid or uid is not secure it might just still works, b

Re: Dovecot and IPA

2015-09-07 Thread Benny Pedersen
Kanwar Ranbir Sandhu skrev den 2015-09-07 19:29: I tried it for shits and giggles: no change. :( I'm still seeing the same problem. dovecot is buildt with security in mind... using namebased gid or uid is not secure it might just still works, but its not secure

Re: Dovecot and IPA

2015-09-07 Thread Manuel Delgado
>From the first message I noted this: mailman02 dovecot: imap-login: Disconnected (tried to use unsupported auth > mechanism): user=<>, method=PLAIN, rip=1.1.1.1, lip=2.2.2.2, TLS, > session= It seems that your client is not using GSSAPI, but PLAIN instead. About your config: On Mon, Sep 7, 20

Re: Dovecot and IPA

2015-09-07 Thread Timo Sirainen
> On 07 Sep 2015, at 00:41, Kanwar Ranbir Sandhu > wrote: > > Hello, > > I'm trying to get Dovecot to use GSSAPI for authentication. I have an IPA > server on CentOS 7 with a bunch of my servers attached to the IPA domain, > including the server running Dovecot. > > I've followed official d

Re: Dovecot and IPA

2015-09-07 Thread Kanwar Ranbir Sandhu
On Mon, 2015-09-07 at 13:29 -0400, Kanwar Ranbir Sandhu wrote: > I tried it for shits and giggles: no change. :( I'm still seeing the > same problem. I forget to add some additional errors I've seen in the logs: http://pastebin.ca/3155329 -- Kanwar R.S. Sandhu

Re: Dovecot and IPA

2015-09-07 Thread Kanwar Ranbir Sandhu
On Mon, 2015-09-07 at 18:39 +0200, Benny Pedersen wrote: > Kanwar Ranbir Sandhu skrev den 2015-09-07 18:02: > > > args = uid=virtual gid=virtual home=/var/spool/mail/%d/%n/ > > uid and gid must be nummeric just like output from id > > id virtual > > make the args have same info I tried it fo

Re: Dovecot and IPA

2015-09-07 Thread Kanwar Ranbir Sandhu
On Mon, 2015-09-07 at 18:39 +0200, Benny Pedersen wrote: > Kanwar Ranbir Sandhu skrev den 2015-09-07 18:02: > > > args = uid=virtual gid=virtual home=/var/spool/mail/%d/%n/ > > uid and gid must be nummeric just like output from id > > id virtual > > make the args have same info That's never

Re: Dovecot and IPA

2015-09-07 Thread Benny Pedersen
Kanwar Ranbir Sandhu skrev den 2015-09-07 18:02: args = uid=virtual gid=virtual home=/var/spool/mail/%d/%n/ uid and gid must be nummeric just like output from id id virtual make the args have same info

Re: Dovecot and IPA

2015-09-07 Thread Kanwar Ranbir Sandhu
On Mon, 2015-09-07 at 17:07 +0200, Benny Pedersen wrote: > Kanwar Ranbir Sandhu skrev den 2015-09-07 16:47: > > > Kerberos + Dovecot apparently works really well, but not for > > me...yet. :( > > you choiced to use a precompiled problem from redhat, no ? Yes. Well, not Red Hat directly - I'm usi

Re: Dovecot and IPA

2015-09-07 Thread Kanwar Ranbir Sandhu
On Mon, 2015-09-07 at 09:14 -0600, Manuel Delgado wrote: > Hi Ranbir > > I've worked with freeIPA a little, but without your doveconf or some other > context information, it is difficult to identify the issue. Crap...I meant to include that. Here's what it looks like when I enable GSSAPI: # 2.

Re: Dovecot and IPA

2015-09-07 Thread Manuel Delgado
Hi Ranbir I've worked with freeIPA a little, but without your doveconf or some other context information, it is difficult to identify the issue. Regards, Manuel Delgado --- *Usuario Linux* *#520940 * Mag. Computaci

Re: Dovecot and IPA

2015-09-07 Thread Benny Pedersen
Kanwar Ranbir Sandhu skrev den 2015-09-07 16:47: Kerberos + Dovecot apparently works really well, but not for me...yet. :( you choiced to use a precompiled problem from redhat, no ? if you used freebsd or gentoo there whould only be learning curve left back to your problem, are you sure main

Re: Dovecot and IPA

2015-09-07 Thread Kanwar Ranbir Sandhu
On Sun, 2015-09-06 at 17:41 -0400, Kanwar Ranbir Sandhu wrote: > I've followed official documentation from Red Hat and read numerous wiki > articles on how to configure Dovecot to get it to use GSSAPI correctly. > I don't think I've done anything incorrectly, but it refuses to work. > This is th