Re: Looking for GSSAPI config [was: Looking for NTLM config example]

2016-06-27 Thread Mark Foley
Aki, To review your 5 points: On Mon, 27 Jun 2016 09:18:54 +0300 Aki Tuomi wrote: > 1. Functional AD or Kerberos environment > 2. Time synced against your KDC (which is your Domain Controller on Windows) > 3. /etc/krb5.conf configured > 4. Both forward / reverse DNS names correct for clients an

Re: Looking for GSSAPI config [was: Looking for NTLM config example]

2016-06-27 Thread Mark Foley
aki.tu...@dovecot.fi wrote: > As mentioned before, you can use ldap as userdb instead of static userdb. > Username matching in AD environment should be done against userPrincipalName > attribute. Do you see any problem with my continuing to use: userdb { driver = passwd } ... with gssapi?

Re: Looking for GSSAPI config [was: Looking for NTLM config example]

2016-06-27 Thread Mark Foley
Jan, thanks for your helpful reply. You wrote: > With Dovecot I got the SSO working with Kerberos, and this part is > working great. Other parts (shared mailboxes, that sort of stuff) aren't > working for me yet. ... I'm the opposite. My mailbox setup has been working great for a year and a ha

Re: Where Dovecot stores subscribtions for shared folder

2016-06-27 Thread A. Schulze
Hello, my location: location = maildir:%%h/Maildir:INDEX=~/.dovecot.shared/%%u/:INDEXPVT=~/.dovecot.shared/%%u/:CONTROL=~/.dovecot.shared/%%u/ Am 27.06.2016 um 14:21 schrieb Miloslav Hůla: could please someone hint me, where Dovecot stores subscribtions for shared folder? Our configuration

Re: Looking for GSSAPI config [was: Looking for NTLM config example]

2016-06-27 Thread aki . tuomi
> On June 28, 2016 at 12:02 AM Jan Jurkus wrote: > > > Hi, > > I'm not entirely happy with the static userdb, because of the > limitations with kerberos/pam, but this can of course be changed rather > easily. The hardest part is to get the SSO working. > One of the limitiations is stated her

Re: Looking for GSSAPI config [was: Looking for NTLM config example]

2016-06-27 Thread Jan Jurkus
Hi, On 27-06-2016 08:58, Mark Foley wrote: > So, I'm apparently lacking in the kerberos stuff. Here's the problem -- > Samba4 uses Heimdal > Kerberos and when I provisioned my domain apparently none of these needed > kerberos files were > set up. I can, however, kerberos authenticate from domai

Re: Looking for NTLM config example

2016-06-27 Thread aki . tuomi
> On June 27, 2016 at 8:50 PM Gregory Sloop wrote: > > > > > TT> On 6/27/2016 2:45 AM, Mark Foley wrote: > >> While continuing to test gssapi, I thought I check out your suggestion on > >> NTLM v1. I did set > >> Thunderbird to NTLM v1 ... > > TT> You are aware, I hope, that NTLM v1 is well

Re: Looking for NTLM config example

2016-06-27 Thread Gregory Sloop
TT> On 6/27/2016 2:45 AM, Mark Foley wrote: >> While continuing to test gssapi, I thought I check out your suggestion on >> NTLM v1. I did set >> Thunderbird to NTLM v1 ... TT> You are aware, I hope, that NTLM v1 is well over 20 years old and TT> is trivially compromised today. Basically, it's

Re: Looking for NTLM config example

2016-06-27 Thread Tom Talpey
On 6/27/2016 2:45 AM, Mark Foley wrote: While continuing to test gssapi, I thought I check out your suggestion on NTLM v1. I did set Thunderbird to NTLM v1 ... You are aware, I hope, that NTLM v1 is well over 20 years old and is trivially compromised today. Basically, it's about as secure as s

doveadm purge -A includes users with gid outside of limits and then reports error

2016-06-27 Thread Michal Hlavinka
Hi, one our user reported that when he runs "doveadm purge -A" it goes through users that don't have gid in the first_valid_gid-last_valid_git range and it reports error. For example: doveadm(dovenull): Error: user dovenull: Mail access for users with GID 996 not permitted (see first_valid_g

External mail attachments storage cleanup

2016-06-27 Thread Николай Мананков
Hi, I have set up mdbox backend witch saving mail attachments to external files option. Dovecot store attachments to external files but never delete them. Why?

Suggestion: Split login_trusted_networks

2016-06-27 Thread Peter Mogensen
Hi, For the upcoming 2.3 development, I'd like to re-suggest this: It seems the use of login_trusted_networks is overloaded. Example: * It's used for indicating which hosts you trust to provide XCLIENT remote IP's. (like a proxy) * It's used for indicating from which hosts you trust logins eno

Where Dovecot stores subscribtions for shared folder

2016-06-27 Thread Miloslav Hůla
Hi, could please someone hint me, where Dovecot stores subscribtions for shared folder? Our configuration: namespace { disabled = no hidden = no ignore_on_failure = no inbox = no list = children location = maildir:/vmail/user/%%n/Maildir:INDEXPVT=/vmail/user/%n/Maildir/Shared/%%n

Re: Mailboxes on NFS or iSCSI

2016-06-27 Thread Miloslav Hůla
Hi, thank you both for hints. I'm still not sure what to choose, so I'll probably test it on some dev installation. Kind regards, Milo Dne 23.06.2016 v 8:05 Götz Reinicke - IT Koordinator napsal(a): Hi, Am 22.06.16 um 16:40 schrieb Miloslav Hůla: Hello, we are running Dovecot (2.2.13-12~

Re: fts_solr crashs

2016-06-27 Thread M. Koehler
Hi Aki, Am 27.06.2016 um 11:14 schrieb Aki Tuomi: On 27.06.2016 12:11, M. Koehler wrote: I´ve set up in dovecot 2.2.24-1~auto+49 (from dovecot repo) fts_solr and fts_tika - jetti8 (from Debian Jessie) and latest tika-server running on a seperate machine. But if I want to rescan all messages for

Re: fts_solr crashs

2016-06-27 Thread Aki Tuomi
On 27.06.2016 12:11, M. Koehler wrote: > Hi, > > I´ve set up in dovecot 2.2.24-1~auto+49 (from dovecot repo) fts_solr > and fts_tika - jetti8 (from Debian Jessie) and latest tika-server > running on a seperate machine. But if I want to rescan all messages > for reindexing for instance all attachmen

fts_solr crashs

2016-06-27 Thread M. Koehler
Hi, I´ve set up in dovecot 2.2.24-1~auto+49 (from dovecot repo) fts_solr and fts_tika - jetti8 (from Debian Jessie) and latest tika-server running on a seperate machine. But if I want to rescan all messages for reindexing for instance all attachments with "doveadm -v index -u u...@domain.tld