[Solved] Re: exempt local auth-client UNIX socket from failed login penalty // add to login_trusted_networks ?

2016-06-28 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 29 Jun 2016, Timo Sirainen wrote: On 24 Jun 2016, at 13:33, Steffen Kaiser wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm using Dovecot v2.2 with unix_listener auth-client { } to verify passwords for a different service. Howeve

Re: Looking for GSSAPI config [was: Looking for NTLM config example]

2016-06-28 Thread Edgar Pettijohn
> On Jun 28, 2016, at 10:32 PM, Mark Foley wrote: > > Aki - partial success! I rebuilt my dovecot with ./config --with-gssapi, and > restarted. Now I > don't get that "Unknown authentication mechanism 'gssapi'" message in > maillog, and mail is > delivered successfully to the other domain use

Re: Looking for GSSAPI config [was: Looking for NTLM config example]

2016-06-28 Thread Mark Foley
Aki - partial success! I rebuilt my dovecot with ./config --with-gssapi, and restarted. Now I don't get that "Unknown authentication mechanism 'gssapi'" message in maillog, and mail is delivered successfully to the other domain users having PLAIN authentication. That's a big step. In examining m

Re: Looking for GSSAPI config [was: Looking for NTLM config example]

2016-06-28 Thread Mark Foley
Aki, you wrote: > Doh. Seems your dovecot isn't compiled with gssapi support? Can you compile > it yourself? > > I'll try to check status of NTLM this week. I'm OK with continuing to try gssapi, esp. if NTLM is restricted to v1. I do have the Dovecot sources and will peruse the possible options

Re: dsync unstable? (other strange detail)

2016-06-28 Thread Heiko Schlittermann
Timo Sirainen (Mi 29 Jun 2016 00:20:05 CEST): … > > Maybe, did you read my previous post with a similar subject? There I had > > an empty local destination and some nasty effects too. > > There was another mail with "highest than remote's UIDs" error. Do you mean > that one? I don't see others.

Re: dsync unstable? (other strange detail)

2016-06-28 Thread Timo Sirainen
On 29 Jun 2016, at 01:13, Heiko Schlittermann wrote: > > Timo Sirainen (Mi 29 Jun 2016 00:00:11 CEST): > … b) UID=16 suddenly appeared on Cyrus side even though it wasn't there earlier. This isn't allowed by IMAP standard. >> It's still strange if Cyrus is doing that. It's generally a

Re: dsync unstable? (other strange detail)

2016-06-28 Thread Heiko Schlittermann
Timo Sirainen (Mi 29 Jun 2016 00:00:11 CEST): … > >> b) UID=16 suddenly appeared on Cyrus side even though it wasn't there > >> earlier. This isn't allowed by IMAP standard. > It's still strange if Cyrus is doing that. It's generally a pretty well > behaving IMAP server. What version is it? * O

Re: FTS search used / useful on an IMAP proxy?

2016-06-28 Thread Timo Sirainen
On 28 Jun 2016, at 16:07, Luca Lesinigo wrote: > > We are preparing an IMAP proxy based on dovecot-2.2.22, basic proxy > functionality is already working and I’m trying to understand if having the > FTS service configured on the dovecot *proxy* would be of any use. > > I do suspect it would be

Re: dsync unstable? (other strange detail)

2016-06-28 Thread Timo Sirainen
On 29 Jun 2016, at 00:53, Heiko Schlittermann wrote: > > Hi, > Timo Sirainen (Di 28 Jun 2016 23:30:38 CEST): >>> >>> On successive runs of the above command I get: >>> >>> dsync(heiko): Warning: Deleting mailbox 'Serververwaltung.Mailinglisten >>> Anforderung': UID=16 GUID= is missing local

Re: Disabling passdb pam in local.conf

2016-06-28 Thread Patrick Ben Koetter
* Timo Sirainen : > Hmm. If you want to just kludge it, I guess you could do a 00-auth.conf: > > passdb { > driver = whatever you want for your real passdb > args = etc > result_failure = return > result_internalfail = return > } > > So even though pam is still in the config, it's just ne

Re: dsync unstable? (other strange detail)

2016-06-28 Thread Heiko Schlittermann
Hi, Timo Sirainen (Di 28 Jun 2016 23:30:38 CEST): > > > > On successive runs of the above command I get: > > > >dsync(heiko): Warning: Deleting mailbox 'Serververwaltung.Mailinglisten > > Anforderung': UID=16 GUID= is missing locally > > This means that on Dovecot side there are messages a

Re: Suggestion: Split login_trusted_networks

2016-06-28 Thread Timo Sirainen
> On 29 Jun 2016, at 00:49, Timo Sirainen wrote: > > On 27 Jun 2016, at 15:46, Peter Mogensen wrote: >> >> Hi, >> >> For the upcoming 2.3 development, I'd like to re-suggest this: >> >> It seems the use of login_trusted_networks is overloaded. >> >> Example: >> * It's used for indicating wh

Re: Suggestion: Split login_trusted_networks

2016-06-28 Thread Timo Sirainen
On 27 Jun 2016, at 15:46, Peter Mogensen wrote: > > Hi, > > For the upcoming 2.3 development, I'd like to re-suggest this: > > It seems the use of login_trusted_networks is overloaded. > > Example: > * It's used for indicating which hosts you trust to provide XCLIENT remote > IP's. (like a pr

Re: Disabling passdb pam in local.conf

2016-06-28 Thread Timo Sirainen
On 22 Jun 2016, at 09:48, Patrick Ben Koetter wrote: > > * Patrick Ben Koetter : >> * Marcus Rueckert : What am I missing? >>> >>> That 10-auth.conf is actually meant to be edited. most distros should >>> have configuration file handling pretty much figured out by now. so >>> none of your c

Re: exempt local auth-client UNIX socket from failed login penalty // add to login_trusted_networks ?

2016-06-28 Thread Timo Sirainen
On 24 Jun 2016, at 13:33, Steffen Kaiser wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi, > > I'm using Dovecot v2.2 with unix_listener auth-client { > } to verify passwords for a different service. However, it looks like that > auth_failure_delay effects all connects going

Re: dsync unstable? (other strange detail)

2016-06-28 Thread Timo Sirainen
On 27 Jun 2016, at 08:28, Heiko Schlittermann wrote: > > Hi, > > I'm trying to migrate from Cyrus (remote side) to Dovecot 2.2.24 (local). > On the local side the destinations folders, and indexes are empty. > > The command I'm using is > > doveadm \ >-o mail_plugins= \ >-o ima

Re: External mail attachments storage cleanup

2016-06-28 Thread Timo Sirainen
On 27 Jun 2016, at 16:11, Николай Мананков wrote: > > Hi, > > I have set up mdbox backend witch saving mail attachments to external files > option. Dovecot store attachments to external files but never delete them. You haven't run doveadm purge?

Re: chroot: Error: Temp file creation to /tmp

2016-06-28 Thread Timo Sirainen
On 28 Jun 2016, at 10:55, bvr wrote: > > > Hello, > > We are using dovecot (2.2.10) and it's working great! When I enable chrooting > by appending /./ to the homedirs I'm getting errors like this: > > mail1 dovecot[47074]: imap(user): Error: Temp file creation to > /tmp/dovecot.imap.mail1.70

Re: mail-search backtrace

2016-06-28 Thread Hugh Bragg
On 27/06/16 16:35, Aki Tuomi wrote: On 25.06.2016 08:25, Hugh Bragg wrote: On 22/05/16 05:17, Hugh Bragg wrote: On 13/04/16 06:41, Timo Sirainen wrote: On 09 Apr 2016, at 21:48, Hugh Bragg wrote: I'm repeatedly getting this error: Apr 07 04:37:27 imap(mymail@address): Panic: file mail-s

Re: FTS search used / useful on an IMAP proxy?

2016-06-28 Thread Michael Slusarz
> > On June 28, 2016 at 7:07 AM Luca Lesinigo wrote: > > We are preparing an IMAP proxy based on dovecot-2.2.22, basic proxy > functionality is already working and I’m trying to understand if having the > FTS service configured on the dovecot *proxy* would be of any use. > > I do

Re: Looking for GSSAPI config [was: Looking for NTLM config example]

2016-06-28 Thread aki . tuomi
> On June 28, 2016 at 5:17 PM Mark Foley wrote: > > > Aki - made your suggested changes, but no joy :( > > My /etc/krb5.conf: > > --SNIP > [libdefaults] > default_realm = HPRS.LOCAL > dns_lookup_realm = false > dns_lookup_kdc = true > > [libdefaults] > default_realm = HPR

Re: Looking for GSSAPI config [was: Looking for NTLM config example]

2016-06-28 Thread Mark Foley
Aki - made your suggested changes, but no joy :( My /etc/krb5.conf: --SNIP [libdefaults] default_realm = HPRS.LOCAL dns_lookup_realm = false dns_lookup_kdc = true [libdefaults] default_realm = HPRS.LOCAL dns_lookup_kdc = true kdc_timesync = 1 ccache_type = 4 forwardab

FTS search used / useful on an IMAP proxy?

2016-06-28 Thread Luca Lesinigo
We are preparing an IMAP proxy based on dovecot-2.2.22, basic proxy functionality is already working and I’m trying to understand if having the FTS service configured on the dovecot *proxy* would be of any use. I do suspect it would be useless, I guess dovecot in imap proxy mode just forwards a

Re: Looking for GSSAPI config [was: Looking for NTLM config example]

2016-06-28 Thread Aki Tuomi
On 28.06.2016 09:27, Mark Foley wrote: Aki, To review your 5 points: On Mon, 27 Jun 2016 09:18:54 +0300 Aki Tuomi wrote: 1. Functional AD or Kerberos environment 2. Time synced against your KDC (which is your Domain Controller on Windows) 3. /etc/krb5.conf configured 4. Both forward / reve

chroot: Error: Temp file creation to /tmp

2016-06-28 Thread bvr
Hello, We are using dovecot (2.2.10) and it's working great! When I enable chrooting by appending /./ to the homedirs I'm getting errors like this: mail1 dovecot[47074]: imap(user): Error: Temp file creation to /tmp/dovecot.imap.mail1.70079. failed: No such file or directory On the surface