Re: Adding extra fields from an external source

2014-12-02 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 1 Dec 2014, Ian Allison wrote: I realize I could expand my LDAP but I'm wary of just importing some random schema. Well, >>random<< schema ;-) you should know what you are doing. Check what is added to your LDAP and you'll be fine.

Re: best file system ?

2014-12-02 Thread Marcin Mirosław
W dniu 02.12.2014 o 08:41, Alessio Cecchi pisze: > > Il 01/12/2014 21:13, Marcin Mirosław ha scritto: >> W dniu 2014-12-01 o 18:19, Alessio Cecchi pisze: >>> Il 01/12/2014 17:24, absolutely_f...@libero.it ha scritto: Hi, I'm going to set up a new storage for our email users (about 10k).

Re: disabling certain ciphers

2014-12-02 Thread Reindl Harald
Am 02.12.2014 um 06:44 schrieb Will Yardley: On Mon, Dec 01, 2014 at 09:27:48PM -0800, Darren Pilgrim wrote: On 12/1/2014 4:43 PM, Will Yardley wrote: Can you use both ssl_protocols *and* ssl_cipher_list in the same config (in a way that's sane)? Is there a way to exclude these ciphers, whi

Re: Adding extra fields from an external source

2014-12-02 Thread Christian Rößner
> Am 02.12.2014 um 01:02 schrieb Ian Allison : > > Hi, > > I have an existing (Open)LDAP which I'm using with dovecot and I would > like to implement quotas. I have global quotas working, but I would like > per user quotas similar to what is described in the wiki > (http://wiki2.dovecot.org/Quot

R: Re: best file system ?

2014-12-02 Thread absolutely_f...@libero.it
Hi Angel, can you please share your dovecot configuration? What webmail are you using (if any)? Thank you >Messaggio originale >Da: ama...@um.es >Data: 02/12/2014 8.24 >A: >Ogg: Re: best file system ? > >El 01/12/14 a las 18:45, Sami Ketola escribió: >> >>> On 01 Dec 2014, at 18:24, abs

Re: disabling certain ciphers

2014-12-02 Thread Darren Pilgrim
On 12/2/2014 1:32 AM, Reindl Harald wrote: Am 02.12.2014 um 06:44 schrieb Will Yardley: On Mon, Dec 01, 2014 at 09:27:48PM -0800, Darren Pilgrim wrote: On 12/1/2014 4:43 PM, Will Yardley wrote: Can you use both ssl_protocols *and* ssl_cipher_list in the same config (in a way that's sane)?

Re: disabling certain ciphers

2014-12-02 Thread Darren Pilgrim
On 12/1/2014 9:44 PM, Will Yardley wrote: On Mon, Dec 01, 2014 at 09:27:48PM -0800, Darren Pilgrim wrote: On 12/1/2014 4:43 PM, Will Yardley wrote: Can you use both ssl_protocols *and* ssl_cipher_list in the same config (in a way that's sane)? Is there a way to exclude these ciphers, while s

Re: disabling certain ciphers

2014-12-02 Thread Reindl Harald
Am 02.12.2014 um 17:33 schrieb Darren Pilgrim: On 12/2/2014 1:32 AM, Reindl Harald wrote: ssl_cipher_list = HIGH:!RC4:!MD5:!SRP:!PSK:!aNULL:@STRENGTH ssl_dh_parameters_length = 2048 ssl_parameters_regenerate = 0 ssl_protocols = !SSLv2 !SSLv3 TLSv1 TLSv1.1 TLSv1.2 But why does ssl_protocols b

Re: disabling certain ciphers

2014-12-02 Thread Darren Pilgrim
On 12/2/2014 8:38 AM, Reindl Harald wrote: Am 02.12.2014 um 17:33 schrieb Darren Pilgrim: On 12/2/2014 1:32 AM, Reindl Harald wrote: ssl_cipher_list = HIGH:!RC4:!MD5:!SRP:!PSK:!aNULL:@STRENGTH ssl_dh_parameters_length = 2048 ssl_parameters_regenerate = 0 ssl_protocols = !SSLv2 !SSLv3 TLSv1 TL

Re: Adding extra fields from an external source

2014-12-02 Thread Ian Allison
On Tue, Dec 02, 2014 at 09:03:31AM +0100, Steffen Kaiser wrote: > > Nobody registered Dovecot attributes with IANA, because IMHO it is quite > implementor-specfic. Because of that, there cannot exist anything > "official". How many quota rules do you have? Others may have plenty more, > ... . But

Re: disabling certain ciphers

2014-12-02 Thread Will Yardley
On Tue, Dec 02, 2014 at 08:34:50AM -0800, Darren Pilgrim wrote: > On 12/1/2014 9:44 PM, Will Yardley wrote: > > On Mon, Dec 01, 2014 at 09:27:48PM -0800, Darren Pilgrim wrote: > >> On 12/1/2014 4:43 PM, Will Yardley wrote: > >>> Can you use both ssl_protocols *and* ssl_cipher_list in the same conf

Re: disabling certain ciphers

2014-12-02 Thread Will Yardley
I had some problems the first few times I restarted with ssl-params seeming to hang, but it finally works. I am able to get it to work with just: ssl = required ssl_dh_parameters_length = 4096 ssl_parameters_regenerate = 0 ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 ssl_cipher_li

Re: disabling certain ciphers

2014-12-02 Thread Darren Pilgrim
On 12/2/2014 10:05 AM, Will Yardley wrote: I had some problems the first few times I restarted with ssl-params seeming to hang, but it finally works. That would have been dovecot generating the 4096-bit DH parameters. It can take a bit, but Dovecot is quite fast at it. If Dovecot supported

Re: disabling certain ciphers

2014-12-02 Thread Will Yardley
On Tue, Dec 02, 2014 at 10:12:22AM -0800, Darren Pilgrim wrote: > On 12/2/2014 10:05 AM, Will Yardley wrote: > > I had some problems the first few times I restarted with ssl-params > > seeming to hang, but it finally works. > > That would have been dovecot generating the 4096-bit DH parameters. I

Re: disabling certain ciphers

2014-12-02 Thread Darren Pilgrim
On 12/2/2014 10:26 AM, Will Yardley wrote: In this case, it was consuming a lot of CPU for 5+ minutes, and the .dat.tmp file hadn't been updated since the process started, so I'm not sure if something went wrong. Yes, large DH parameters take time to generate, hence turning off regeneration.

Re: Working with Active Directory on Windows Server 2012 R2

2014-12-02 Thread Aaron Jenkins
I’ve fixed the issue by using a slightly different configuration. Particularly the problem was due to mistaking %u (user@domain) vs %n (just user). Here are the configuration files for anyone looking to get it working with Active Directory on 2012 R2 on Dovecot 2.2.9 (or similar, whatever comes

mail_location maildir:~/Maildir Invalid user settings[SOLVED]

2014-12-02 Thread soko.tica
Hallo list, I was having quite a hard time configuring dovecot on OpenBSD -current. The problem was default Maildir setting in 10-mail.conf, namely: mail_location maildir:~/Maildir was unable to locate user's home directory. As far as I can remember, it was the correct setting on OpenBSD-current

Unknown scheme SSHA256.HEX.b64

2014-12-02 Thread grundy
I'm getting a very strange error and I'm completely mystified by it. Thank you so much for taking a look! I recently migrated some users from another dovecot server to my own, and the previous admin had the passwords in their database using the SSHA256 scheme in HEX format. All the password hashes

Re: Unknown scheme SSHA256.HEX.b64

2014-12-02 Thread Pascal Volk
On 11/29/2014 04:04 AM, grundy wrote: > I'm getting a very strange error and I'm completely mystified by it. Thank > you so much for taking a look! > > I recently migrated some users from another dovecot server to my own, and > the previous admin had the passwords in their database using the SSHA2

Re: mail_location maildir:~/Maildir Invalid user settings[SOLVED]

2014-12-02 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 26 Nov 2014, soko.tica wrote: I was having quite a hard time configuring dovecot on OpenBSD -current. The problem was default Maildir setting in 10-mail.conf, namely: mail_location maildir:~/Maildir was unable to locate user's home director

Re: R: Re: best file system ?

2014-12-02 Thread Angel L. Mateo
El 02/12/14 a las 16:38, absolutely_f...@libero.it escribió: Hi Angel, can you please share your dovecot configuration? I have attached our doveconf -n output. We have two imap servers (with the same configuration) and two more acting as proxy (with director) in front of them. These last dir