search for: extrafields

Displaying 20 results from an estimated 216 matches for "extrafields".

2015 Mar 02
6
IP drop list
Dave McGuire writes: >> http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/AllowNets >> >> then setup fail2ban to manage extrafields > > Now that's a very interesting idea, thank you! I will investigate this. If you don't expect yor firewall to handle 45K+ IPs, I'm not how you expect dovecot will handle a comma separated string with 45K+ e...
2011 Jun 03
1
Extra plugins vía extrafield in ldap
Hi all, I'm using dovecot 2.0.9 and I have a config like this: dovecot.conf: passdb { args = /etc/dovecot/conf.d/passwd-ldap.conf driver = ldap } mail_plugins = $mail_plugins quota plugin { autocreate = INBOX.SPAM autocreate2 = INBOX.NoSPAM autosubscribe = INBOX.SPAM autosubscribe2 = INBOX.NoSPAM quota = maildir } protocol imap { mail_plugins = $mail_plugins imap_quota
2012 Apr 04
1
Proxy and SSO (single sign-on)
...ign-on. Both are pretty straightforward to configure in a single instance environment, but I don't know if they would work with proxy. For example, with GSSAPI there are two cases: 1) Just use gssapi mechanism, without PAM. Then, it a user presents a ticket the passdb ldap is not used, so the extrafields are never read. 2) Use gssapi and PAM (thus allowing using a kerberos password). But the extrafields feature isn't available with PAM passdb driver, so again the proxy won't work. The case for NTLM would fall into the first case, I think. Am I right regarding this scenario? Is there a wa...
2015 Mar 02
2
IP drop list
...ote: >> The other side of this equation, Postfix, has had this capability >> for years. Why it hasn't been added to dovecot is a mystery. It's >> the only thing (really, the ONLY thing!) that I dislike about dovecot. > > http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/AllowNets > > then setup fail2ban to manage extrafields Now that's a very interesting idea, thank you! I will investigate this. -Dave -- Dave McGuire, AK4HZ/3 New Kensington, PA
2015 Mar 09
3
Overriding dovecot.conf from Userdb Extras
Hi, I thought I read that anything from dovecot.conf can be overridden in a userdb lookup. Or a passdb lookup with "userdb_" prefix. But I tried for fun change log_path but it never worked. Is that because logging is special, already started logging before it comes to the passdb/userdb lookups? So are there some dovecot.conf settings that cannot be overridden? Thanks!
2018 May 15
1
Upgrading dovecot 2.2 to 2.3 without downtime when using proxy/director?
...is obsoleted. Unfortunately there's no easy way to upgrade directors to use the consistent hashing method without stopping the entire ring. The hard way would be to build a secondary director ring and start moving users to that ring in proxies. Added https://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy#moving <https://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy#moving> to explain further the hard way. -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20180515/e8df0172/attachment.html>
2016 Feb 17
2
dovecot Digest, Vol 154, Issue 14
Thanks, Hajo This mostly works, but we can?t seem to send an arbitrary mailbox name with UserDB, we have to initialize it in the config: "namespace/inbox/mailbox=Junk namespace/inbox/mailbox/Junk/name"="Spam" seems to initialize the folder somehow so that the subsequent "namespace/inbox/mailbox/Junk/auto"="subscribe" and
2014 Oct 22
2
special "what's my ip" pop account
Hello, I like to enable the allow_nets Feature (http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/AllowNets) for my customers. To help them knowing there own IP I imagine a special mailbox/loginuser at the pop3 server. That user could give a valid pop3 answer from a dummy pop3 server or simply throw a login error with customised answer containing the IP information. Has anybody done somet...
2012 Jun 22
1
Dovecot proxy/director and mail pop3/imap backend service on same server
...ports? Using the default ports will clearly cause loops. Can anyone kindly provide an example snippet of config that tells the director to use different port for IMAP and POP3 proxy? I have so far found the following pages helpful to what I am working on: http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy http://wiki2.dovecot.org/PasswordDatabase/ExtraFields http://wiki2.dovecot.org/Director Cheers, Aerion.
2011 Jan 11
4
Denying authentication
Hello, I've been running dovecot for over 3 years now and it works with no problems. I have it setup so that it authenticates users against Active Directory via LDAP and so far no problems. What I would like to know is if there is any way that I could deny access for users trying to access email via cellphones or email clients outside the company. I can
2010 Mar 12
1
patch: allow proxy to lookup host by name
...against 1.2.11. The patch is pretty straightforward, it's making it work within the restrictions of the login process that's more interesting. I have made some changes to the wiki (pending approval) to - enhance the discussion of proxy with LDAP http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy - discuss the implication of this patch w.r.t. the login_chroot configuration parameter: http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy/HostLookup Feedback is appreciated, particulary from a security standpoint. Cheers, -Martin Foster martin_foster at netlog.net dump of wik...
2007 Mar 26
3
proxy host specified as fqdn in userdb
Abstract from http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy > > host=s: The destination server's *IP address*. This field is required. > Note that currently it's required to use an IP address since no DNS > resolving is done. > Hello Timo, Here goes one more item for the v2.0 wishlist: Will it become possible to do doveco...
2019 Nov 24
2
Proxy GSSAPI + PLAIN authentication
...PI and PLAIN authentication. When authenticating with Kerberos, Dovecot uses master user and password to authenticate to backends (backends can be Cyrus or Exchange servers too) When authenticating with PLAIN passwords, Dovecot sends user's login and password to the backend. For GSSAPI, I use extrafields : k5principals=principal at REALM proxy=Y pass=masterpassword login_user=principal user=masteruser host=backend For PLAIN, I use a static driver : passdb { driver = static args = proxy=y host=cyrus password=%w } I can authenticate fine with Kerberos tickets and login/password on the backend....
2007 Sep 05
2
securing dovecot proxy connections
The wiki <http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy> page says this: "The connections created to the destination server can't be TLS/SSL encrypted.". Hrmm. Right now, with perdition, I'm forcing the use of STARTTLS on the internal connections. I'd just as soon get rid of perdition (to have one less moving part in my...
2007 Jul 30
2
IMAP-Proxy and LDAP?
I am doing some research on Dovecots IMAP-Proxy features mentioned in <http://wiki.dovecot.org/HowTo/ImapProxy> and <http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy>. The docs only mention SQL as backend to hold required data. Is it also possible to use LDAP? TIA, p at rick -- state of mind Agentur f?r Kommunikation, Design und Softwareentwicklung Patrick Koetter Tel: 089 45227227 Echinger Strasse 3 Fax: 089 45227226 85386 Ech...
2008 Nov 26
3
Dovecot Proxy with MySQL auth
...storage for the users local to that server and all of the authentication and target backend pop/imap server data would be stored in the same MySQL database. The problem we are running into is the documentation is not very clear on this type of scenario. http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy At the bottom of this page it gives a query example of "SELECT NULL AS password, ." but that does not seem to allow for us to use the proxy_maybe if the destination server is localhost (and therefore do not proxy) it does not seem that the above query will actually send the real...
2017 Nov 23
3
Dovecot LMTP Proxy + STARTTLS?
Hi I got dovecot 2.2.26 on a Centos7 with latest updates. Dovecot is configured to act as director and delivers to my two backend servers. I enabled lmtp proxy on director to listen on port 24. Now I see in msg headers that the connection to the lmtp proxy uses STARTTLS but the connection from proxy to backend seems to be unencrypted. Is it possible to enforce the use of STARTTLS in the
2016 Nov 17
2
BUG: nopassword doesn't work with CRAM-MD5
Hello. dovecot 2.2.26.0 When testing nopassword extra field (http://wiki2.dovecot.org/PasswordDatabase/ExtraFields) with CRAM-MD5 dovecot doesn't allow any password (while it should) and returns " Authentication failed" while in logs: Nov 17 08:22:34 auth-worker(1551): Info: sql(pepe,127.0.0.1,<Y8amDXpBptV/AAAB>): Requested CRAM-MD5 scheme, but we have a NULL password NULL is there b...
2018 Jun 25
2
Proxy lmtp to smtp server
...y a remote smtp server, the >> documentation says "It's possible to use Dovecot LMTP server as a >> proxy to remote LMTP or SMTP servers", but i do not find how to >> configure. Can anybody gel me to understand? > > https://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy > > However, the protocol field appears to be undocumented: > > https://github.com/dovecot/core/blob/master/src/lmtp/lmtp-proxy.c#L382 > This is also important: https://wiki2.dovecot.org/LMTP#LMTP_Proxying Regards, Stephan. -------------- next part -------------- An HTML att...
2008 Jan 14
2
Imap proxy with tls?
...at the remote server). Now I want to have a few computers at the same place to access the same account on the remote server. I have another server (call this the local server) at the local site to do this with but am not sure how to do it. The proxy setup http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy looks about right but that does not seem to support tls? I need tls going from the local server to the remote server. I want all emails on the remote server to be the same as on the local server. This way all clients at the local site have very fast access to email and can still get to the...