Re: Headsup on feature removal

2020-03-29 Thread Daniel Miller
-- Original Message -- [...] To start, the following features are likely to be removed in next few releases of Dovecot. [...] - mailbox alias plugin Like autocreate, autosubscribe, and expire - Is there a built-in feature that makes this plugin obsolete? --- Daniel

Re: Headsup on feature removal

2020-03-19 Thread John Stoffel
> "Alessio" == Alessio Cecchi writes: Alessio> Il 19/03/20 02:01, John Stoffel ha scritto: Alessio> ### user_query for vpopmail Alessio> user_query = SELECT pw_dir AS home, 89 AS uid, 89 AS gid, Alessio> concat('*:backend=', pw_shell) AS quota_rule FROM vpopmail Alessio> WHERE pw_name = '

Re: Headsup on feature removal

2020-03-19 Thread Aki Tuomi
> On 19/03/2020 13:24 Alessio Cecchi wrote: > > > > > > > Il 19/03/20 02:01, John Stoffel ha scritto: > > > > Alessio> ### user_query for vpopmail > > Alessio> user_query = SELECT pw_dir AS home, 89 AS uid, 89 AS gid, > > Alessio> concat('*:backend=', pw_shell) AS quota_rule FROM vpo

Re: Headsup on feature removal

2020-03-19 Thread Alessio Cecchi
Il 19/03/20 02:01, John Stoffel ha scritto: Alessio> ### user_query for vpopmail Alessio> user_query = SELECT pw_dir AS home, 89 AS uid, 89 AS gid, Alessio> concat('*:backend=', pw_shell) AS quota_rule FROM vpopmail Alessio> WHERE pw_name = '%n' AND pw_domain = '%d' Careful! You need to explai

Re: Headsup on feature removal

2020-03-18 Thread John Stoffel
> "Alessio" == Alessio Cecchi writes: Alessio> Hi Aki and Remo, Alessio> switch from vpopmail driver to SQL driver (if you are using vpopmail with mysql as backend) is Alessio> very simple. Alessio> First you need to setup the right query for vpopmail database: Alessio> # cat /etc/dovecot/

Re: Headsup on feature removal

2020-03-18 Thread Alessio Cecchi
Hi Aki and Remo, switch from vpopmail driver to SQL driver (if you are using vpopmail with mysql as backend) is very simple. First you need to setup the right query for vpopmail database: # cat /etc/dovecot/dovecot-sql.conf.ext ### Vpopmail driver = mysql connect = host=192.168.1.2 dbname=vp

Re: Headsup on feature removal

2020-03-18 Thread Michael Peddemors
One way it can be done as well, using the 'vchkpw' part of vpopmail, which is 'checkpassword' compliant, however if that goes away ;) On 2020-03-18 10:26 a.m., Aki Tuomi wrote: Hi! I understand that it is not trivial to move away from vpopmail and does require changing a working system. But

Re: Headsup on feature removal

2020-03-18 Thread Aki Tuomi
Hi! I understand that it is not trivial to move away from vpopmail and does require changing a working system. But then again, one should be able to configure MySQL passdb/userdb with vpopmail schema. I am not familiar with vpopmail but if someone comes with instructions we can polish them a b

Re: Headsup on feature removal - password

2020-03-18 Thread Steve Litt
On Wed, 18 Mar 2020 17:37:31 +0200 (EET) Aki Tuomi wrote: > One of the various mail clients I use sends HTML only mails in some > situations. So you're taking your problem and making it our problem? SteveT Steve Litt March 2020 featured book: Troubleshooting: Why Bother? http://www.troublesh

Re: Headsup on feature removal

2020-03-18 Thread Remo Mattei
So I am on of the many users with qmail, and using vpopmail auth, I guess chatting with some other guys in the other mailing list we will convert to mysql driver but this is a lot of work for many people. I do understand dropping things out but a valid solutions needs to be proposed. Remo >

Re: Headsup on feature removal - password

2020-03-18 Thread Aki Tuomi
> On 18/03/2020 17:31 Hendrik Boom wrote: > > > On Wed, Mar 18, 2020 at 10:38:37AM -0400, Jerry wrote: > > On Wed, 18 Mar 2020 09:51:51 -0400, Hendrik Boom stated: > > >Was there any reason for this message to be HTML-only? > > > > Was there any reason to 'top post' and include the HTML text

Re: Headsup on feature removal - password

2020-03-18 Thread Hendrik Boom
On Wed, Mar 18, 2020 at 10:38:37AM -0400, Jerry wrote: > On Wed, 18 Mar 2020 09:51:51 -0400, Hendrik Boom stated: > >Was there any reason for this message to be HTML-only? > > Was there any reason to 'top post' and include the HTML text? Yes. (1) To indicate that my question was about the whole

Re: Headsup on feature removal - password

2020-03-18 Thread Jerry
On Wed, 18 Mar 2020 09:51:51 -0400, Hendrik Boom stated: >Was there any reason for this message to be HTML-only? Was there any reason to 'top post' and include the HTML text? -- Jerry pgp8kPbePAcFr.pgp Description: OpenPGP digital signature

Re: Headsup on feature removal - password

2020-03-18 Thread Hendrik Boom
Was there any reason for this message to be HTML-only? On Wed, Mar 18, 2020 at 07:13:12AM +0200, Aki Tuomi wrote: > > > > > > > > > > > > On 18/03/2020 00:06 Rupert Gallagher wrote: > > > > > > > >> Password

Re: Headsup on feature removal

2020-03-18 Thread Michael Peddemors
Amongst other plug-ins, yes.. On 2020-03-17 10:15 p.m., Aki Tuomi wrote: Those plugins can be resurrected with simple `git revert`. Are you planning on open sourcing your client id authetication plugin? Aki On 18/03/2020 01:44 Michael Peddemors < mich...@linuxmagic.com

Re: Headsup on feature removal

2020-03-18 Thread Philip Colmer
> Additionally, the mbox format will no longer receive new development. It will > still be > maintained, however its use beyond migrations and other limited use cases > will be discouraged. As someone who digs into instructions to find just the bits and pieces needed to get things going, is ther

Re: Headsup on feature removal

2020-03-17 Thread Aki Tuomi
Those plugins can be resurrected with simple `git revert`. Are you planning on open sourcing your client id authetication plugin? Aki On 18/03/2020 01:44 Michael Peddemors < mich...@linuxmagic.com> wrote:

Re: Headsup on feature removal - password

2020-03-17 Thread Aki Tuomi
On 18/03/2020 00:06 Rupert Gallagher wrote: > Password schemes: HMAC-MD5, RPA, SKEY, PLAIN-MD4, LANMAN, NTLM, SMD5 The web is flooded with plain text passwords and hashed passwords harvested from hacked servers. Dovecot sto

Re: Headsup on feature removal

2020-03-17 Thread Michael Peddemors
With these planned changes, you mention they will be removed from 'core', so is the intention to allow more of these legacy plugins to more to their own repo's for those that might still want to use them? Eg, more in the the path of plug-in architecture? Just curious for clarity. Oh, and hav

Re: Headsup on feature removal - password

2020-03-17 Thread Vesselin Kolev
Hello Rupert, Note the following - using X.509 certificates is an excellent idea for preventing password guessing, but you need to realize one very important thing before switching to X.509 certificate authentication. In TLSv<=1.2 the TLS handshake leaks the client X.509 certificate. Simply start

Re: Headsup on feature removal - password

2020-03-17 Thread Rupert Gallagher
> Password schemes: HMAC-MD5, RPA, SKEY, PLAIN-MD4, LANMAN, NTLM, SMD5 The web is flooded with plain text passwords and hashed passwords harvested from hacked servers. Dovecot stores passwords with the same scheme used for client authentication. Therefore, we use crammd5/hmac-md5. It does not l