Displaying 20 results from an estimated 1000 matches similar to: "Proxying when src and dest on non standard ports"
2014 Dec 15
0
Userdb's and IMAP proxying
Hello Timo,
In order to plan a migration, I want to setup an IMAP proxy (proxy_maybe) with
a dovecot server (I'm running the old dovecot-2.1.15 but I could upgrade or use a proxy
only dovecot-2.2.x server)/LDAP pass et userdb's.
I'm won't be in charge of the migration itself but I think the idea will be to
migrate a chunk of users each night and then let the proxy send them to
2012 Jun 22
1
Dovecot proxy/director and mail pop3/imap backend service on same server
Hi all,
I am interested in running a Dovecot Proxy(with Director) on the same
server as
the main Dovecot IMAP/POP3 service. I have a basic Proxy/Director
configuration working,
however I am struggling with getting the Proxy and IMAP/POP3 service to
coexist on
the same server. I plan to use three IMAP/POP3 servers with a NFS/maildir
backend,
and I am playing with Dovecot 2.1.5 at the moment.
I
2015 Jan 08
0
auth-deny : from file to LDAP
On Thu, Jan 08, 2015 at 02:48:47PM +0100, hummel at pasteur.fr wrote:
> Hello Timo,
> a) should I
>
> . change the driver of the first passdb from passwd-file to ldap
> . for user to be rejected, add an LDAP attribute named "foo" with a value of "yes" and map it with something like this :
>
> pass_attrs = ....,foo=deny in dovecot-ldap.conf.ext ?
>
2009 Jan 28
1
Confused about permissions needed for shared mailbox
Hello,
let me re-state, hopefully in clearer terms, what I tried to described in a previous thread :
With dovecot-1.1.8/Maildir/LDAP pass/userdb (prefetch), I'm trying to set up a
Maildir ".box" shared in rw between 2 users in a "Public" namespace. I can't
get it to work unless I chmod 777 everything, which obiously is not what I
want.
1) am I correct thinking that
2009 Jan 28
1
Public namespace permissions documentation/questions
Hello Timo,
In my trials to setup a shared namespace with dovecot-1.1.8/LDAP passdb/userdb
(prefetch)/Maildir, I found out that :
1) ACL are mandatory (at least if the acl plugin is triggered in dovecot.conf)
Am I correct ?
I'm still not sure if we can do without ACL at all (only with unix permissions and system_user userdb extra field).
2) the system_user userdb extra field is
2016 Dec 06
2
Dovecot: Mails flagged as read get flagged as unread
Hi all
We experience some unexpected behavior with dovecot. It happens that
emails marked as read get marked as unread (MUA is Thunderbird on port
143). Unfortunately this happens randomly, reproducing this issue is
difficult. We could not find any pattern, it happens rarely.
We are running dovecot version 2.2.24 on Debian Jessie (backports
repository).
/root at dovecot01:~# dovecot --version//
2009 Jan 27
3
Symlink shared mailboxes and system_user extra field
Hello,
I'm trying to set up, as explained in the wiki, shared mailboxes with symlink.
I'm running dovecot-1.1.8 with LDAP pass/userdb. The Maildir layout goes like this :
/courriel/boites/foobar : Maildir of user foobar (nfs)
/courriel/meta/foobar : control files of user foobar (nfs)
/var/dovecot/indexes : indexes (locally stored)
I created :
/courriel/boites/doveshared/.box/ :
2015 Jan 09
2
auth-deny : from file to LDAP
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Thu, 8 Jan 2015, Thomas HUMMEL wrote:
> On Thu, Jan 08, 2015 at 02:48:47PM +0100, hummel at pasteur.fr wrote:
>> Hello Timo,
>
>> a) should I
>>
>> . change the driver of the first passdb from passwd-file to ldap
>> . for user to be rejected, add an LDAP attribute named "foo" with a value of
2017 Jul 09
0
pigeonhole-0.4.14
Sure !
# 2.2.24 (a82c823): /usr/local/etc/dovecot/dovecot.conf
# Pigeonhole version 0.4.14 (099a97c)
# OS: Linux 4.4.2-hardened x86_64 Gentoo Base System release 2.2
auth_mechanisms = plain login
auth_verbose = yes
default_client_limit = 4096
default_internal_user = mailer
default_process_limit = 300
dict {
sqlquota = pgsql:/usr/local/etc/dovecot/dovecot-dict-sql.conf.ext
}
2015 Jan 08
2
auth-deny : from file to LDAP
Hello Timo,
I want to deny access to some users. For now I'm doing it using 2 passdb's and listing users in a text file.
!include auth-deny.conf.ext -> passwd-file driver
!include auth-ldap.conf.ext -> ldap driver
I want to do the same using only LDAP. I'm not quite sure how to do it :
a) should I
. change the driver of the first passdb from passwd-file to ldap
. for user
2011 Mar 25
1
Ignored proxy_maybe var and no local login when "host = Proxy FQDN"
Hi help is preciated,
PROBLEM
The dovecot-ldap.conf of "proxy server A" is working when the "host"
attribute is the FQDN of other server:
pass_attrs = uid=user,userPassword={SSHA}password,\
=proxy_maybe=,maildrop=host,=port=143,=destuser=%u,=starttls=any-cert
pass_filter = (&(objectClass=posixAccount)(uid=%u))
CASES
When the "host" attribute is the
2010 Aug 31
2
My "%%" variables in the namespace settings do not appear to be expanding.
Hello,
I've been using the dovecot 1.2.x branch server software for a
while now. With the advent of the 2.0.x branch going 'stable' I
decided to attempt a migration and make use of some of the features
that I've not needed before. One of these is the shared
folder/namespace feature. No luck. I've hit a wall and can not
determine the problem. At the
2012 Dec 04
1
dovecot backend on director ?
Hello Timo,
The last time I checked my understanding about director was that :
1. backend/"real" imap servers should not be on the same host (or the same dovecot instance) to
avoid proxying loops.
Is it still the case with the latest 2.1 stable release ? Is there a plan to be
able to run director and real server on the same host, thus requiring only 2
hosts instead of 4 to have
2020 Sep 28
1
custom userdb server, Exim, and proxying
Hi all,
We have Exim using Dovecot for authentication. Dovecot, in turn, consults a custom internal server that answers Dovecot?s userdb queries.
When IMAP connections arrive, for some users we want to forward those connections--without authentication--to an external IMAP server. For these users, we return ?proxy_maybe? and ?nopassword? in the authn response from our userdb server. This tells
2012 Feb 25
1
Proxying improvements in v2.1.2
I just committed a couple of features that will make life easier for some types of proxying setups:
1. IMAP proxying has already for a while supported sending local/remote IP/port to backend server, which can use it for logging and other purposes. I've now implemented this for POP3 as well, although only the remote IP/port is forwarded, not local IP/port. I implemented this also for LMTP in
2013 Nov 27
1
proxy_maybe & director incompatibility
Hi Folks,
I spent quite some time yesterday understanding how proxy works along with the director. I came to the conclusion that proxy_maybe and director cannot be used together, but this isn?t a true incompatibility so much as caused by the way things are handled and the order they are processed in.
The way proxy_maybe works is that it is processed by the auth provider once it gets the
2008 Oct 13
1
Get an extra_field in login process
Hi.
I have an auth plugin where an extra_field is filled. Somewhere, in login
process I need to log the authentication command and the extra_field, I was
trying to do it in login-common/client-common.c, adding a new variable to
login_log_format_elements and trying to get the fileld from environment,
but, I could not find any way to do it, the getenv returns null everytime.
Anyone can suggest
2008 Nov 19
2
CRAM-MD5 and proxy_maybe
When using proxy_maybe CRAM-MD5 authentication fails when the connection
is proxied. Is this expected behavior? Is proxy_maybe too simplified for
this case?
We're using SQL so I could rewrite the query with IFs to fake
proxy_maybe and return the password as NULL and nologin as Y, but if it
works that way couldn't it work with proxy_maybe?
This works:
password_query = \
SELECT NULL AS
2013 Feb 19
3
Dovecot 2.2. proxy_maybe and twice SSL connections
Hello.
1. I have two identically hosts
2. I have set up replication between two hosts
3. I have
'Y' AS proxy_maybe
in password_query.
4. password_query returns one of this one hosts
5. I set this parameters in dovecot config:
disable_plaintext_auth = yes
ssl = yes
auth_mechanisms = plain login
for enforce use encrypted connections by client programs.
2008 Nov 26
3
Dovecot Proxy with MySQL auth
We are looking at deploying several pop/imap servers to house the mail for
15,000 or more mailbox accounts. We are contemplating on the design and are
looking at using MySQL auth (we already have a MySQL environment in place
for our user auth to live) and proxy_maybe so each server can proxy for all
the others and we just have a network load balancer distribute the incoming
connections to all of