Dav Rdrz
2019-Nov-14 13:41 UTC
Dovecot Master User: Access user's mailbox without owner's password
Hi, I hope you're all right. I describe below the scenario where the
problem occurs.
I'm trying to activate a master user [1] to be able to access all the
boxes of all users by imap.
I have configured the dovecot-master-users [2] file with the
appropriate permissions.
When I try to access, for example with roundcube, through
user at mydomain.com*my_master_user at not-exist.com
I see in the log, that it seems to ignore the master-user (*) and
tries to authenticate the Active Directory but with the master user's
password. Then it shows in the log the messages
auth: Info: ldap(user at mydomain.com,127.0.0.1,<6sFGXE6XLwB/AAAB> )
invalid credentials
auth: Debug: client passdb out: FAIL 1 user=user at mydomain.com
I have other test cases, but I need to validate the master user login that way.
I would appreciate any comments you can make and I am waiting to
answer any questions.
Regards,
[1] https://doc.dovecot.org/configuration_manual/authentication/master_users/
[2] https://docs.iredmail.org/dovecot.master.user.html
---------------------------------------------------------------------------------------
root at mail-01:/etc/dovecot# cat /etc/issue
Ubuntu 14.04.5 LTS \n \l
root at mail-01:/etc/dovecot# dpkg -l | grep dovecot | awk {'print $2"
"$3'}
dovecot-core 1:2.2.9-1ubuntu2.6
dovecot-imapd 1:2.2.9-1ubuntu2.6
dovecot-ldap 1:2.2.9-1ubuntu2.6
dovecot-lmtpd 1:2.2.9-1ubuntu2.6
dovecot-managesieved 1:2.2.9-1ubuntu2.6
dovecot-mysql 1:2.2.9-1ubuntu2.6
dovecot-pop3d 1:2.2.9-1ubuntu2.6
dovecot-sieve 1:2.2.9-1ubuntu2.6
root at mail-01:/etc/dovecot# cat dovecot.conf | grep -v '#' | grep -v
-e
'^$' | sed "s/REALDOMAIN/mydomain/g"
listen = * [::]
mail_plugins = quota mailbox_alias acl
protocols = pop3 imap sieve lmtp
mail_uid = 2000
mail_gid = 2000
first_valid_uid = 2000
last_valid_uid = 2000
log_path = /var/log/dovecot.log
auth_verbose = yes
auth_debug = yes
ssl_protocols = !SSLv2 !SSLv3
ssl = required
verbose_ssl = no
ssl_ca = </etc/ssl/certs/mydomain.com.ca-bundle
ssl_cert = </etc/ssl/certs/mydomain.com.crt
ssl_key = </etc/ssl/private/mydomain.com.key
ssl_cipher_list
ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
ssl_dh_parameters_length = 2048
ssl_prefer_server_ciphers = yes
disable_plaintext_auth = no
mail_location = maildir:%Lh/Maildir/:INDEX=%Lh/Maildir/
auth_default_realm = mydomain.com
auth_mechanisms = PLAIN LOGIN
service auth {
unix_listener /var/spool/postfix/private/dovecot-auth {
user = postfix
group = postfix
mode = 0666
}
unix_listener auth-master {
user = vmail
group = vmail
mode = 0666
}
unix_listener auth-userdb {
user = vmail
group = vmail
mode = 0660
}
}
service lmtp {
user = vmail
process_min_avail = 5
executable = lmtp -L
unix_listener /var/spool/postfix/private/dovecot-lmtp {
user = postfix
group = postfix
mode = 0600
}
inet_listener lmtp {
address = 127.0.0.1
port = 24
}
}
auth_master_user_separator = *
passdb {
driver = passwd-file
args = /etc/dovecot/dovecot-master-users
master = yes
}
userdb {
args = /etc/dovecot/dovecot-ldap.conf
driver = ldap
}
passdb {
args = /etc/dovecot/dovecot-ldap.conf
driver = ldap
}
plugin {
auth_socket_path = /var/run/dovecot/auth-master
quota = dict:user::proxy::quotadict
quota_rule = *:storage=3G
quota_warning = storage=100%% quota-warning 100 %u
quota_warning2 = storage=95%% quota-warning 95 %u
quota_warning3 = storage=90%% quota-warning 90 %u
quota_warning4 = storage=85%% quota-warning 85 %u
quota_grace = 10%%
acl = vfile
acl_shared_dict = proxy::acl
sieve_dir = %Lh/sieve
sieve = %Lh/sieve/dovecot.sieve
sieve_global_dir = /var/vmail/sieve
sieve_before = /var/vmail/sieve/dovecot.sieve
mailbox_alias_old = Sent
mailbox_alias_new = Sent Messages
mailbox_alias_old2 = Sent
mailbox_alias_new2 = Sent Items
}
service quota-warning {
executable = script /usr/local/bin/dovecot-quota-warning.sh
unix_listener quota-warning {
user = vmail
group = vmail
mode = 0660
}
}
service dict {
unix_listener dict {
mode = 0660
user = vmail
group = vmail
}
}
dict {
quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf
acl = mysql:/etc/dovecot/dovecot-share-folder.conf
}
protocol lda {
mail_plugins = $mail_plugins sieve
auth_socket_path = /var/run/dovecot/auth-master
log_path = /var/log/dovecot-sieve.log
lda_mailbox_autocreate = yes
lda_mailbox_autosubscribe = yes
postmaster_address = it at mydomain.com
}
protocol lmtp {
info_log_path = /var/log/dovecot-lmtp.log
mail_plugins = quota sieve
postmaster_address = postmaster
lmtp_save_to_detail_mailbox = yes
recipient_delimiter = +
}
protocol imap {
mail_plugins = $mail_plugins imap_quota imap_acl
imap_client_workarounds = tb-extra-mailbox-sep
mail_max_userip_connections = 30
}
protocol pop3 {
mail_plugins = $mail_plugins
pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
pop3_uidl_format = %08Xu%08Xv
mail_max_userip_connections = 30
}
service imap-login {
service_count = 1
process_limit = 500
}
service pop3-login {
service_count = 1
}
service managesieve-login {
inet_listener sieve {
address = 127.0.0.1
port = 4190
}
}
namespace {
type = private
separator = /
prefix inbox = yes
mailbox Sent {
auto = subscribe
special_use = \Sent
}
mailbox "Sent Messages" {
auto = no
special_use = \Sent
}
mailbox "Sent Items" {
auto = no
special_use = \Sent
}
mailbox Drafts {
auto = subscribe
special_use = \Drafts
}
mailbox Trash {
auto = subscribe
special_use = \Trash
}
mailbox "Deleted Messages" {
auto = no
special_use = \Trash
}
mailbox Junk {
auto = subscribe
special_use = \Junk
}
mailbox Spam {
auto = no
special_use = \Junk
}
mailbox "Junk E-mail" {
auto = no
special_use = \Junk
}
mailbox Archive {
auto = subscribe
special_use = \Archive
}
mailbox Archives {
auto = no
special_use = \Archive
}
}
namespace {
type = shared
separator = /
prefix = Shared/%%u/
location = maildir:%%Lh/Maildir/:INDEX=%%Lh/Maildir/Shared/%%u
subscriptions = yes
list = children
}
root at mail-01:/etc/dovecot# cat dovecot-ldap.conf | sed
"s/realdomain/mydomain/g"
hosts = active-directory:389
ldap_version = 3
auth_bind = yes
dn = domain\vmail
dnpass = Str0ngP4ssw0rd
base = ou=Organizational Unit,dc=domain,dc=com
scope = subtree
deref = never
user_filter (&(userPrincipalName=%n at
domain.com)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_filter (&(userPrincipalName=%n at
domain.com)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
#user_filter
(&(mail=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
#pass_filter
(&(mail=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
pass_attrs = userPassword=password
default_pass_scheme = CRYPT
user_attrs = \
#=mail=master_user, \
#mail=user, \
=user=%Ln at mydomain.com, \
=home=/var/vmail/vmail1/mydomain.com/%Ln/Maildir/, \
=mail=maildir:/var/vmail/vmail1/mydomain.com/%Ln/Maildir/, \
maxStorage=quota_rule=*:bytes=%$
root at mail-01:/etc/dovecot# ls -al dovecot-master-users
-r-x------ 1 dovecot dovecot 120 Nov 13 14:45 dovecot-master-users
Marcio Merlone
2019-Nov-19 12:03 UTC
Dovecot Master User: Access user's mailbox without owner's password
Sounds a lot like my problem, which I described some days ago here on the list, but no luck. Please report to the list if you make any progress. Regards, Em 14/11/2019 10:41, Dav Rdrz via dovecot escreveu:> Hi, I hope you're all right. I describe below the scenario where the > problem occurs. > I'm trying to activate a master user [1] to be able to access all the > boxes of all users by imap. > I have configured the dovecot-master-users [2] file with the > appropriate permissions. > When I try to access, for example with roundcube, through > user at mydomain.com*my_master_user at not-exist.com > I see in the log, that it seems to ignore the master-user (*) and > tries to authenticate the Active Directory but with the master user's > password. Then it shows in the log the messages > > auth: Info: ldap(user at mydomain.com,127.0.0.1,<6sFGXE6XLwB/AAAB> ) > invalid credentials > auth: Debug: client passdb out: FAIL 1 user=user at mydomain.com > > I have other test cases, but I need to validate the master user login that way. > > I would appreciate any comments you can make and I am waiting to > answer any questions. > > Regards, > > [1] https://doc.dovecot.org/configuration_manual/authentication/master_users/ > [2] https://docs.iredmail.org/dovecot.master.user.html > > --------------------------------------------------------------------------------------- > > root at mail-01:/etc/dovecot# cat /etc/issue > Ubuntu 14.04.5 LTS \n \l > > root at mail-01:/etc/dovecot# dpkg -l | grep dovecot | awk {'print $2" "$3'} > dovecot-core 1:2.2.9-1ubuntu2.6 > dovecot-imapd 1:2.2.9-1ubuntu2.6 > dovecot-ldap 1:2.2.9-1ubuntu2.6 > dovecot-lmtpd 1:2.2.9-1ubuntu2.6 > dovecot-managesieved 1:2.2.9-1ubuntu2.6 > dovecot-mysql 1:2.2.9-1ubuntu2.6 > dovecot-pop3d 1:2.2.9-1ubuntu2.6 > dovecot-sieve 1:2.2.9-1ubuntu2.6 > > root at mail-01:/etc/dovecot# cat dovecot.conf | grep -v '#' | grep -v -e > '^$' | sed "s/REALDOMAIN/mydomain/g" > listen = * [::] > mail_plugins = quota mailbox_alias acl > protocols = pop3 imap sieve lmtp > mail_uid = 2000 > mail_gid = 2000 > first_valid_uid = 2000 > last_valid_uid = 2000 > log_path = /var/log/dovecot.log > auth_verbose = yes > auth_debug = yes > ssl_protocols = !SSLv2 !SSLv3 > ssl = required > verbose_ssl = no > ssl_ca = </etc/ssl/certs/mydomain.com.ca-bundle > ssl_cert = </etc/ssl/certs/mydomain.com.crt > ssl_key = </etc/ssl/private/mydomain.com.key > ssl_cipher_list > ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA > ssl_dh_parameters_length = 2048 > ssl_prefer_server_ciphers = yes > disable_plaintext_auth = no > mail_location = maildir:%Lh/Maildir/:INDEX=%Lh/Maildir/ > auth_default_realm = mydomain.com > auth_mechanisms = PLAIN LOGIN > service auth { > unix_listener /var/spool/postfix/private/dovecot-auth { > user = postfix > group = postfix > mode = 0666 > } > unix_listener auth-master { > user = vmail > group = vmail > mode = 0666 > } > unix_listener auth-userdb { > user = vmail > group = vmail > mode = 0660 > } > } > service lmtp { > user = vmail > process_min_avail = 5 > executable = lmtp -L > unix_listener /var/spool/postfix/private/dovecot-lmtp { > user = postfix > group = postfix > mode = 0600 > } > inet_listener lmtp { > address = 127.0.0.1 > port = 24 > } > } > auth_master_user_separator = * > passdb { > driver = passwd-file > args = /etc/dovecot/dovecot-master-users > master = yes > } > userdb { > args = /etc/dovecot/dovecot-ldap.conf > driver = ldap > } > passdb { > args = /etc/dovecot/dovecot-ldap.conf > driver = ldap > } > plugin { > auth_socket_path = /var/run/dovecot/auth-master > quota = dict:user::proxy::quotadict > quota_rule = *:storage=3G > quota_warning = storage=100%% quota-warning 100 %u > quota_warning2 = storage=95%% quota-warning 95 %u > quota_warning3 = storage=90%% quota-warning 90 %u > quota_warning4 = storage=85%% quota-warning 85 %u > quota_grace = 10%% > acl = vfile > acl_shared_dict = proxy::acl > sieve_dir = %Lh/sieve > sieve = %Lh/sieve/dovecot.sieve > sieve_global_dir = /var/vmail/sieve > sieve_before = /var/vmail/sieve/dovecot.sieve > mailbox_alias_old = Sent > mailbox_alias_new = Sent Messages > mailbox_alias_old2 = Sent > mailbox_alias_new2 = Sent Items > } > service quota-warning { > executable = script /usr/local/bin/dovecot-quota-warning.sh > unix_listener quota-warning { > user = vmail > group = vmail > mode = 0660 > } > } > service dict { > unix_listener dict { > mode = 0660 > user = vmail > group = vmail > } > } > dict { > quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf > acl = mysql:/etc/dovecot/dovecot-share-folder.conf > } > protocol lda { > mail_plugins = $mail_plugins sieve > auth_socket_path = /var/run/dovecot/auth-master > log_path = /var/log/dovecot-sieve.log > lda_mailbox_autocreate = yes > lda_mailbox_autosubscribe = yes > postmaster_address = it at mydomain.com > } > protocol lmtp { > info_log_path = /var/log/dovecot-lmtp.log > mail_plugins = quota sieve > postmaster_address = postmaster > lmtp_save_to_detail_mailbox = yes > recipient_delimiter = + > } > protocol imap { > mail_plugins = $mail_plugins imap_quota imap_acl > imap_client_workarounds = tb-extra-mailbox-sep > mail_max_userip_connections = 30 > } > protocol pop3 { > mail_plugins = $mail_plugins > pop3_client_workarounds = outlook-no-nuls oe-ns-eoh > pop3_uidl_format = %08Xu%08Xv > mail_max_userip_connections = 30 > } > service imap-login { > service_count = 1 > process_limit = 500 > } > service pop3-login { > service_count = 1 > } > service managesieve-login { > inet_listener sieve { > address = 127.0.0.1 > port = 4190 > } > } > namespace { > type = private > separator = / > prefix > inbox = yes > mailbox Sent { > auto = subscribe > special_use = \Sent > } > mailbox "Sent Messages" { > auto = no > special_use = \Sent > } > mailbox "Sent Items" { > auto = no > special_use = \Sent > } > mailbox Drafts { > auto = subscribe > special_use = \Drafts > } > mailbox Trash { > auto = subscribe > special_use = \Trash > } > mailbox "Deleted Messages" { > auto = no > special_use = \Trash > } > mailbox Junk { > auto = subscribe > special_use = \Junk > } > mailbox Spam { > auto = no > special_use = \Junk > } > mailbox "Junk E-mail" { > auto = no > special_use = \Junk > } > mailbox Archive { > auto = subscribe > special_use = \Archive > } > mailbox Archives { > auto = no > special_use = \Archive > } > } > namespace { > type = shared > separator = / > prefix = Shared/%%u/ > location = maildir:%%Lh/Maildir/:INDEX=%%Lh/Maildir/Shared/%%u > subscriptions = yes > list = children > } > > root at mail-01:/etc/dovecot# cat dovecot-ldap.conf | sed > "s/realdomain/mydomain/g" > hosts = active-directory:389 > ldap_version = 3 > auth_bind = yes > dn = domain\vmail > dnpass = Str0ngP4ssw0rd > base = ou=Organizational Unit,dc=domain,dc=com > scope = subtree > deref = never > user_filter > (&(userPrincipalName=%n at domain.com)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) > pass_filter > (&(userPrincipalName=%n at domain.com)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) > #user_filter > (&(mail=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) > #pass_filter > (&(mail=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) > pass_attrs = userPassword=password > default_pass_scheme = CRYPT > user_attrs = \ > #=mail=master_user, \ > #mail=user, \ > =user=%Ln at mydomain.com, \ > =home=/var/vmail/vmail1/mydomain.com/%Ln/Maildir/, \ > =mail=maildir:/var/vmail/vmail1/mydomain.com/%Ln/Maildir/, \ > maxStorage=quota_rule=*:bytes=%$ > > > root at mail-01:/etc/dovecot# ls -al dovecot-master-users > -r-x------ 1 dovecot dovecot 120 Nov 13 14:45 dovecot-master-users-- *Marcio Merlone* TI - Administrador de redes *A1 Engenharia - Unidade Corporativa* Fone: +55 41 3616-3797 Cel: +55 41 99689-0036 https://a1.ind.br/ <https://a1.ind.br> -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20191119/8848b2f0/attachment.html>
John Stoffel
2019-Nov-19 15:59 UTC
Dovecot Master User: Access user's mailbox without owner's password
>>>>> "Marcio" == Marcio Merlone via dovecot <dovecot at dovecot.org> writes:Marcio> Sounds a lot like my problem, which I described some days ago Marcio> here on the list, but no luck. Please report to the list if Marcio> you make any progress. Marcio, Looking at your passdb { } block, you don't have the "result_sucess continue" option. Have you tried adding that to make it work? Marcio> Em 14/11/2019 10:41, Dav Rdrz via dovecot escreveu: Marcio> Hi, I hope you're all right. I describe below the scenario where the Marcio> problem occurs. Marcio> I'm trying to activate a master user [1] to be able to access all the Marcio> boxes of all users by imap. Marcio> I have configured the dovecot-master-users [2] file with the Marcio> appropriate permissions. Marcio> When I try to access, for example with roundcube, through Marcio> user at mydomain.com*my_master_user at not-exist.com Marcio> I see in the log, that it seems to ignore the master-user (*) and Marcio> tries to authenticate the Active Directory but with the master user's Marcio> password. Then it shows in the log the messages Marcio> auth: Info: ldap(user at mydomain.com,127.0.0.1,<6sFGXE6XLwB/AAAB> ) Marcio> invalid credentials Marcio> auth: Debug: client passdb out: FAIL 1 user=user at mydomain.com Marcio> I have other test cases, but I need to validate the master user login that way. Marcio> I would appreciate any comments you can make and I am waiting to Marcio> answer any questions. Marcio> Regards, Marcio> [1] https://doc.dovecot.org/configuration_manual/authentication/master_users/ Marcio> [2] https://docs.iredmail.org/dovecot.master.user.html Marcio> --------------------------------------------------------------------------------------- Marcio> root at mail-01:/etc/dovecot# cat /etc/issue Marcio> Ubuntu 14.04.5 LTS \n \l Marcio> root at mail-01:/etc/dovecot# dpkg -l | grep dovecot | awk {'print $2" "$3'} Marcio> dovecot-core 1:2.2.9-1ubuntu2.6 Marcio> dovecot-imapd 1:2.2.9-1ubuntu2.6 Marcio> dovecot-ldap 1:2.2.9-1ubuntu2.6 Marcio> dovecot-lmtpd 1:2.2.9-1ubuntu2.6 Marcio> dovecot-managesieved 1:2.2.9-1ubuntu2.6 Marcio> dovecot-mysql 1:2.2.9-1ubuntu2.6 Marcio> dovecot-pop3d 1:2.2.9-1ubuntu2.6 Marcio> dovecot-sieve 1:2.2.9-1ubuntu2.6 Marcio> root at mail-01:/etc/dovecot# cat dovecot.conf | grep -v '#' | grep -v -e Marcio> '^$' | sed "s/REALDOMAIN/mydomain/g" Marcio> listen = * [::] Marcio> mail_plugins = quota mailbox_alias acl Marcio> protocols = pop3 imap sieve lmtp Marcio> mail_uid = 2000 Marcio> mail_gid = 2000 Marcio> first_valid_uid = 2000 Marcio> last_valid_uid = 2000 Marcio> log_path = /var/log/dovecot.log Marcio> auth_verbose = yes Marcio> auth_debug = yes Marcio> ssl_protocols = !SSLv2 !SSLv3 Marcio> ssl = required Marcio> verbose_ssl = no Marcio> ssl_ca = </etc/ssl/certs/mydomain.com.ca-bundle Marcio> ssl_cert = </etc/ssl/certs/mydomain.com.crt Marcio> ssl_key = </etc/ssl/private/mydomain.com.key Marcio> ssl_cipher_list Marcio> ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA Marcio> ssl_dh_parameters_length = 2048 Marcio> ssl_prefer_server_ciphers = yes Marcio> disable_plaintext_auth = no Marcio> mail_location = maildir:%Lh/Maildir/:INDEX=%Lh/Maildir/ Marcio> auth_default_realm = mydomain.com Marcio> auth_mechanisms = PLAIN LOGIN Marcio> service auth { Marcio> unix_listener /var/spool/postfix/private/dovecot-auth { Marcio> user = postfix Marcio> group = postfix Marcio> mode = 0666 Marcio> } Marcio> unix_listener auth-master { Marcio> user = vmail Marcio> group = vmail Marcio> mode = 0666 Marcio> } Marcio> unix_listener auth-userdb { Marcio> user = vmail Marcio> group = vmail Marcio> mode = 0660 Marcio> } Marcio> } Marcio> service lmtp { Marcio> user = vmail Marcio> process_min_avail = 5 Marcio> executable = lmtp -L Marcio> unix_listener /var/spool/postfix/private/dovecot-lmtp { Marcio> user = postfix Marcio> group = postfix Marcio> mode = 0600 Marcio> } Marcio> inet_listener lmtp { Marcio> address = 127.0.0.1 Marcio> port = 24 Marcio> } Marcio> } Marcio> auth_master_user_separator = * Marcio> passdb { Marcio> driver = passwd-file Marcio> args = /etc/dovecot/dovecot-master-users Marcio> master = yes Marcio> } Marcio> userdb { Marcio> args = /etc/dovecot/dovecot-ldap.conf Marcio> driver = ldap Marcio> } Marcio> passdb { Marcio> args = /etc/dovecot/dovecot-ldap.conf Marcio> driver = ldap Marcio> } Marcio> plugin { Marcio> auth_socket_path = /var/run/dovecot/auth-master Marcio> quota = dict:user::proxy::quotadict Marcio> quota_rule = *:storage=3G Marcio> quota_warning = storage=100%% quota-warning 100 %u Marcio> quota_warning2 = storage=95%% quota-warning 95 %u Marcio> quota_warning3 = storage=90%% quota-warning 90 %u Marcio> quota_warning4 = storage=85%% quota-warning 85 %u Marcio> quota_grace = 10%% Marcio> acl = vfile Marcio> acl_shared_dict = proxy::acl Marcio> sieve_dir = %Lh/sieve Marcio> sieve = %Lh/sieve/dovecot.sieve Marcio> sieve_global_dir = /var/vmail/sieve Marcio> sieve_before = /var/vmail/sieve/dovecot.sieve Marcio> mailbox_alias_old = Sent Marcio> mailbox_alias_new = Sent Messages Marcio> mailbox_alias_old2 = Sent Marcio> mailbox_alias_new2 = Sent Items Marcio> } Marcio> service quota-warning { Marcio> executable = script /usr/local/bin/dovecot-quota-warning.sh Marcio> unix_listener quota-warning { Marcio> user = vmail Marcio> group = vmail Marcio> mode = 0660 Marcio> } Marcio> } Marcio> service dict { Marcio> unix_listener dict { Marcio> mode = 0660 Marcio> user = vmail Marcio> group = vmail Marcio> } Marcio> } Marcio> dict { Marcio> quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf Marcio> acl = mysql:/etc/dovecot/dovecot-share-folder.conf Marcio> } Marcio> protocol lda { Marcio> mail_plugins = $mail_plugins sieve Marcio> auth_socket_path = /var/run/dovecot/auth-master Marcio> log_path = /var/log/dovecot-sieve.log Marcio> lda_mailbox_autocreate = yes Marcio> lda_mailbox_autosubscribe = yes Marcio> postmaster_address = it at mydomain.com Marcio> } Marcio> protocol lmtp { Marcio> info_log_path = /var/log/dovecot-lmtp.log Marcio> mail_plugins = quota sieve Marcio> postmaster_address = postmaster Marcio> lmtp_save_to_detail_mailbox = yes Marcio> recipient_delimiter = + Marcio> } Marcio> protocol imap { Marcio> mail_plugins = $mail_plugins imap_quota imap_acl Marcio> imap_client_workarounds = tb-extra-mailbox-sep Marcio> mail_max_userip_connections = 30 Marcio> } Marcio> protocol pop3 { Marcio> mail_plugins = $mail_plugins Marcio> pop3_client_workarounds = outlook-no-nuls oe-ns-eoh Marcio> pop3_uidl_format = %08Xu%08Xv Marcio> mail_max_userip_connections = 30 Marcio> } Marcio> service imap-login { Marcio> service_count = 1 Marcio> process_limit = 500 Marcio> } Marcio> service pop3-login { Marcio> service_count = 1 Marcio> } Marcio> service managesieve-login { Marcio> inet_listener sieve { Marcio> address = 127.0.0.1 Marcio> port = 4190 Marcio> } Marcio> } Marcio> namespace { Marcio> type = private Marcio> separator = / Marcio> prefix Marcio> inbox = yes Marcio> mailbox Sent { Marcio> auto = subscribe Marcio> special_use = \Sent Marcio> } Marcio> mailbox "Sent Messages" { Marcio> auto = no Marcio> special_use = \Sent Marcio> } Marcio> mailbox "Sent Items" { Marcio> auto = no Marcio> special_use = \Sent Marcio> } Marcio> mailbox Drafts { Marcio> auto = subscribe Marcio> special_use = \Drafts Marcio> } Marcio> mailbox Trash { Marcio> auto = subscribe Marcio> special_use = \Trash Marcio> } Marcio> mailbox "Deleted Messages" { Marcio> auto = no Marcio> special_use = \Trash Marcio> } Marcio> mailbox Junk { Marcio> auto = subscribe Marcio> special_use = \Junk Marcio> } Marcio> mailbox Spam { Marcio> auto = no Marcio> special_use = \Junk Marcio> } Marcio> mailbox "Junk E-mail" { Marcio> auto = no Marcio> special_use = \Junk Marcio> } Marcio> mailbox Archive { Marcio> auto = subscribe Marcio> special_use = \Archive Marcio> } Marcio> mailbox Archives { Marcio> auto = no Marcio> special_use = \Archive Marcio> } Marcio> } Marcio> namespace { Marcio> type = shared Marcio> separator = / Marcio> prefix = Shared/%%u/ Marcio> location = maildir:%%Lh/Maildir/:INDEX=%%Lh/Maildir/Shared/%%u Marcio> subscriptions = yes Marcio> list = children Marcio> } Marcio> root at mail-01:/etc/dovecot# cat dovecot-ldap.conf | sed Marcio> "s/realdomain/mydomain/g" Marcio> hosts = active-directory:389 Marcio> ldap_version = 3 Marcio> auth_bind = yes Marcio> dn = domain\vmail Marcio> dnpass = Str0ngP4ssw0rd Marcio> base = ou=Organizational Unit,dc=domain,dc=com Marcio> scope = subtree Marcio> deref = never Marcio> user_filter Marcio> (&(userPrincipalName=%n at domain.com)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) Marcio> pass_filter Marcio> (&(userPrincipalName=%n at domain.com)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) Marcio> #user_filter Marcio> (&(mail=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) Marcio> #pass_filter Marcio> (&(mail=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) Marcio> pass_attrs = userPassword=password Marcio> default_pass_scheme = CRYPT Marcio> user_attrs = \ Marcio> #=mail=master_user, \ Marcio> #mail=user, \ Marcio> =user=%Ln at mydomain.com, \ Marcio> =home=/var/vmail/vmail1/mydomain.com/%Ln/Maildir/, \ Marcio> =mail=maildir:/var/vmail/vmail1/mydomain.com/%Ln/Maildir/, \ Marcio> maxStorage=quota_rule=*:bytes=%$ Marcio> root at mail-01:/etc/dovecot# ls -al dovecot-master-users Marcio> -r-x------ 1 dovecot dovecot 120 Nov 13 14:45 dovecot-master-users Marcio> -- Marcio> Marcio Merlone Marcio> TI - Administrador de redes Marcio> A1 Engenharia - Unidade Corporativa Marcio> Fone: +55 41 3616-3797 Marcio> Cel: +55 41 99689-0036 Marcio> https://a1.ind.br/
Apparently Analagous Threads
- Dovecot Master User: Access user's mailbox without owner's password
- Dovecot Master User: Access user's mailbox without owner's password
- postfix/smtpd[725]: fatal: no SASL authentication mechanisms
- Dovecot auth-worker error after cram-md5 auth
- confused with ssl settings and some error - need help