SQLite user database

2017-07-14 Thread Levente Kovacs
Dear Dovecot users/developers, I installed dovecot, and want to use a sqlite database for users, and passwords. I continuously get user authentication errors. I suspect that the problem is with a password hashing. I used # doveadm pw -s SHA512-CRYPT Enter new password: Retype new password: {S

Cannot Authenticate user with Kerberos/GSSAPI

2017-07-14 Thread mark
My last message probably contained too much information. This one is more succient. I have a user, 'mark', who has been running a Thunderbird client on Windows to Dovecot server with Kerberos/GSSAPI authentication for over a year. I created a new Tbird account on a new Linux workstation for 'm

Global create ACL allows out of boundaries mailbox

2017-07-14 Thread Loïc Gomez
Hello Dovecot Team, During my tests I setup a global ACL allowing mailbox create for all authenticated users. Then, I made a mistake in Thunderbird, tried to create a mailbox directly on the "/shared/" special folder. Dovecot created a folder in the global root path of our mail store. Since I u

Re: SQLite user database

2017-07-14 Thread Joseph Tam
Levente Kovacs writes: I continuously get user authentication errors. I suspect that the problem is with a password hashing. I used # doveadm pw -s SHA512-CRYPT Enter new password: Retype new password: {SHA512-CRYPT}$6$1cCNWIMCTpuqmexO$cCq7nDEga1xza3967nZ.BFZaGWNoYwjnNfSCvZE/jGzYAY1hLWE1iHR1KYa

Re: Cannot Authenticate user with Kerberos/GSSAPI

2017-07-14 Thread Joseph Tam
m...@ohprs.org My last message probably contained too much information. This one is more succient. "Succint" may not be the right adjective, because I think this is the third copy I've seen. Here is the dovecot log when user dsmith attempts to connect to dovecot from the Tbird client: Wh

Re: Cannot Authenticate user with Kerberos/GSSAPI

2017-07-14 Thread Joseph Tam
On Fri, 14 Jul 2017, Joseph Tam wrote: ... successful authentication via GSSAPI! From the log files you've shown, you were able to authenticate "dsmith". Your mail reader tells you otherwise? Oops, I didn't see your previous comment "The Kerberos/GSSAPI ticket was not accepted by