dovecot - Mar 2018 - Accentuated email addresses stored in LDAP

Hello everyone,

I have successfully set up Dovecot with an LDAP backend, and everything
works like a charm, except one small use case.

I know it is possible, so if anyone knows a solution, thank you!

Basically, I just want to send an email to one of my email address,
which contains an accent, i.e. andr?@homebox.space....

Every other alias works, but not those with accents. They are correctly
stored in the LDAP database, using base64.

I suspect I would need to use base64 again before the lookup, but I
don't know how to do and if it is even possible.

My filter is set up as this:

filter=(&(objectClass=posixAccount)(|(uid=%n)(mail=%u)(mailLocalAddress=%u)))


It works perfectly for any email without accent.

Thanks for your help.
> Mar 18 22:14:28 homebox dovecot[24636]: auth: Debug: Loading modules from
directory: /usr/lib/dovecot/modules/auth
> Mar 18 22:14:28 homebox dovecot[24636]: auth: Debug: Loading modules from
directory: /usr/lib/dovecot/modules/auth
> Mar 18 22:14:28 homebox dovecot[24636]: auth: Debug: Module loaded:
/usr/lib/dovecot/modules/auth/libauthdb_ldap.so
> Mar 18 22:14:28 homebox dovecot[24636]: auth: Debug: Read auth token secret
from /var/run/dovecot/auth-token-secret.dat
> Mar 18 22:14:28 homebox dovecot[24636]: auth: Debug: LDAP initialization
took 7 msecs
> Mar 18 22:14:28 homebox dovecot[24636]: auth: Debug: auth client connected
(pid=0)
> Mar 18 22:14:28 homebox dovecot[24636]: quota-status(andr?@homebox.space):
Debug: Loading modules from directory: /usr/lib/dovecot/modules                 
Mar 18 22:14:28 homebox dovecot[24636]: quota-status(andr?@homebox.space):
Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so
> Mar 18 22:14:28 homebox dovecot[24636]: auth: Debug: master in: USER       
1        andr?@homebox.space        service=quota-status
> Mar 18 22:14:28 homebox dovecot[24636]: auth: Debug:
ldap(andr?@homebox.space): user search: base=dc=homebox,dc=space scope=subtree
filter=(&(objectClass=posixAccount)(|(uid=andr?)(mailLocalAddress=andr?@homebox.space)))
fields=homeDirectory,uidNumber,gidNumber,mail
> Mar 18 22:14:28 homebox dovecot[24636]: auth: Debug:
ldap(andr?@homebox.space): no fields returned by the server
> Mar 18 22:14:28 homebox dovecot[24636]: auth: ldap(andr?@homebox.space):
unknown user
> Mar 18 22:14:28 homebox dovecot[24636]: auth: Debug: userdb out: NOTFOUND  
1
> Mar 18 22:14:28 homebox dovecot[24636]: quota-status(andr?@homebox.space):
Debug: auth USER input:
> Mar 18 22:14:28 homebox postfix/smtpd[24734]: NOQUEUE: reject: RCPT from
smtpfr.rodier.me[164.132.53.161]: 554 5.7.1 <andr?@homebox.space>:
Recipient address rejected: Unknown user; from=<root at smtpuk.rodier.me>
to=<andr?@homebox.space> pro
> to=ESMTP helo=<smtpuk.rodier.me>
> Mar 18 22:14:28 homebox postfix/smtpd[24734]: disconnect from
smtpfr.rodier.me[164.132.53.161] ehlo=1 mail=1 rcpt=0/1 data=0/1 rset=1 quit=1
commands=4/6

Am 18.03.2018 um 23:25 schrieb Andr? Rodier:
> Every other alias works, but not those with accents. They are correctly
> stored in the LDAP database, using base64.
Why do you even think a character like '?' would be legal in the local 
part of an email address?

Alexander

On 19.03.2018 07:58, Alexander Dalloz wrote:
> Am 18.03.2018 um 23:25 schrieb Andr? Rodier:
>> Every other alias works, but not those with accents. They are correctly
>> stored in the LDAP database, using base64.
>
> Why do you even think a character like '?' would be legal in the
local
> part of an email address?
>
> Alexander
>
Hi!

This is slightly more complicated than that. UTF-8 is legal part of
local part of an email address, if SMTPUTF8 is used (as per RFC 6532).
Dovecot does not yet fully support UTF-8 in certain parts, particularly
we do not yet support RFC 6855 (IMAP Support for UTF-8), but we are
working on getting that to work, after which you can log in with UTF-8
usernames and passwords reliably.

Aki

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 18 Mar 2018, Andr? Rodier wrote:
> Every other alias works, but not those with accents. They are correctly
> stored in the LDAP database, using base64.
Despite Aki's answer, whether it works at all, I would expect the 
enconding in LDAP is UTF8 instead of base64.

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEVAwUBWq9ac8QnQQNheMxiAQIDPggAs2T7WwPYoHhIjl8r0Iyt00VFLnlqwECD
IqFYL+aznVC2KXWzhK8Q9wZyQk1NyjNtEZnPUmsET0YUF9CK2P7WfruKLhqIH6VU
ebLC7GXrCOeweaFsd81KFANyJ4XlsIkETceA6Myyzn6cgvYiaFptVa3n1y7LHx3P
6cmkCG0qwxM90+ucsZZkddkqCyaPQ8RbyFXTVp08ygAHIVhXALN5CWAR76B3KE1i
q9WBh4PMTxu50gJDYBPHwONrz6qJ8JznnSwOKpxu7cTVPmMrwunqd4+s4EfqLl85
k+4DKOyUYIUeNTILAZ4kutXBf796ZFXAd4ADybVV9Q1ghltvbVTE/Q==etDA
-----END PGP SIGNATURE-----