- dovecot - dovecot.org

Dovecot dsync tcps sends incomplete certificate chain
by Juri 06 Jan '17

06 Jan '17

Hi, I'm trying to configure a Dovecot dsync service between two servers, using a tcp+ssl connection and a valid Let's Encrypt certificate. I followed the guide on the wiki (http://wiki.dovecot.org/Replication) using the tcps method, but when I launch the replication it fails writing on the log (/var/log/mail.err): (Server 1 - sync "client" )| Error: sync: Disconnected from remote: Received invalid SSL certificate: unable to get local issuer certificate: /CN=mail.dividebyzero.it (Server 2 - sync "server")| Error: doveadm client disconnected before handshake: <no error> If I try to connect to the server using openssl s_client, on the port 993 (imaps) the server correctly sends the full chain: $ openssl s_client -connect server1.fqdn:993 CONNECTED(00000003) depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3 verify return:1 depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 verify return:1 depth=0 CN = mail.dividebyzero.it verify return:1 --- Certificate chain 0 s:/CN=mail.dividebyzero.it i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 i:/O=Digital Signature Trust Co./CN=DST Root CA X3 ... while on the doveadm port it fails: $ openssl s_client -connect server1.fqdn:7557 CONNECTED(00000003) depth=0 CN = mail.dividebyzero.it verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 CN = mail.dividebyzero.it verify error:num=21:unable to verify the first certificate verify return:1 --- Certificate chain 0 s:/CN=mail.dividebyzero.it i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 ... I run Dovecot 2.2.13 on Debian 8.6: $ dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.6 auth_default_realm = dividebyzero.it auth_mechanisms = plain login doveadm_password = (redacted) doveadm_port = 7557 mail_location = maildir:~/Maildir mail_plugins = " notify replication" namespace inbox { (removed) } passdb { driver = pam } passdb { args = username_format=%n /etc/vmail/%d/passwd driver = passwd-file } plugin { mail_replica = tcps:otherserver.fqdn } protocols = " imap lmtp" service aggregator { fifo_listener replication-notify-fifo { user = dovecot } unix_listener replication-notify { user = dovecot } } service auth { unix_listener auth-client { group = Debian-exim mode = 0660 } unix_listener auth-userdb { user = vmail } } service doveadm { inet_listener { port = 7557 ssl = yes } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl = required ssl_cert = </etc/letsencrypt/live/mail.dividebyzero.it/fullchain.pem ssl_client_ca_file = /etc/letsencrypt/live/mail.dividebyzero.it/chain.pem ssl_key = </etc/letsencrypt/live/mail.dividebyzero.it/privkey.pem userdb { driver = passwd } userdb { args = uid=vmail gid=vmail home=/var/local/vmail/%d/%n driver = static } Is it a known problem, or has it been resolved in a subsequent version? If it is not, can you suggest me a workaround in the meantime? Thank you.

3 5

IMAP proxy for Exchange - encrypted backend Communication?
by tom 06 Jan '17

06 Jan '17

Hello, I try to setup a IMAP proxy for my old Exchange server. Running Dovecot v2.x on Centos 7. So far I follow http://wiki2.dovecot.org/HowTo/ImapcProxy and it seem to work. The only but major thing is with this setup - the communication between proxy and backend is not encrypted. :( To fix this, I changed the config and add: imapc_ssl=imaps imapc_port=993 but it doesnt work, because of verify failure of the self signed backend certificate: Jan 5 21:48:55 imap dovecot: imap(user1): Error: imapc(192.168.1.1:993): Couldn't initialize SSL context: Can't verify remote server certs without trusted CAs (ssl_client_ca_* settings) Jan 5 21:48:55 imap dovecot: imap(user1): Error: imapc(192.168.1.1:993): No SSL context Jan 5 21:48:55 imap dovecot: imap(user1): Error: imapc: Command failed: Disconnected from server Jan 5 21:48:55 imap dovecot: imap(user1): Error: user tkoenig: Initialization failed: Initializing mail storage from mail_location setting failed: Mailbox list driver imapc: Failed to access imapc backend Jan 5 21:48:55 imap dovecot: imap(user1): Error: Invalid user settings. Refer to server log for more information. I didnt found anything in the documentation which tells dovcot not verify the backend certificate. Is there a know way to get it runing? Many thanks for any hint! regrds, Tom

3 2

dovecot-pigeonhole running external script ends with signal 11
by Tobi 06 Jan '17

06 Jan '17

Hi, I'm running a dovecot 2.2.26 (self compiled) on a Centos 7. I have a sieve script which should run an external script (in filter mode) that encrypts the mail using the users pub key. I configured 90-plugin.conf as follows plugin { sieve_plugins = sieve_extprograms sieve_extensions = +vnd.dovecot.filter sieve_filter_bin_dir = /etc/dovecot/sieve-filters sieve_filter_exec_timeout = 10000 } The script is named SCRIPT and is called in my sieve script require "vnd.dovecot.filter"; if blabla { filter "SCRIPT" ["me(a)example.com"]; } the script returns the encrypted mail. I can call this SCRIPT without any error manually on the console as dovecot user (vmail). Also sieve-test "says" that the script called sucessfully su vmail sieve-test -e -t - -Tlevel=commands -r me(a)example.com -l /home/vmail/example.com/me/.Maildir /home/vmail/example.com/me/.dovecot.sieve /tmp/test.mail ... 23: filter action 23: execute program `SCRIPT' 23: executed program successfully 23: changed message ... info: msgid=<B5OEuIEvrCZzcoJ7A6fCF-ka2Nwz-Ze2UCO840Panvw.w7zr1vruaJMbDBwK63natps3v__yOgbhHy3ntACTU0s@redacted>: stored mail into mailbox 'INBOX'. sieve-test(vmail): Info: final result: success and I get the encrpted message in my mailbox. Just when it's called upon delivery via lmtp the script ends with signal 11 Jan 3 15:59:48 mbox2 dovecot: lmtp(me(a)example.com): Error: program `/etc/dovecot/sieve-filters/SCRIPT' terminated abnormally, signal 11 And in ~/.dovecot.sieve.log I can find the following .dovecot: line 23: error: filter action: failed to execute to program `SCRIPT': refer to server log for more information. [2017-01-03 15:59:48]. I have no idea why the manual call runs perfect and the call from sieve file ends up in this error. Does anyone have an idea how I could narrow down the source of this error? Or even better how to fix it? :-) Thanks for any answer tobi

4 8

dovecot.index.pvt view is inconsistent: error messages for public mailbox folder
by Andreas Ntaflos 04 Jan '17

04 Jan '17

Hi list, running Dovecot 2.2.27 on Ubuntu 14.04. A public mailbox "Public/Spam-Learning" in a public namespace with per-user "Seen" flags is configured like this: namespace pub { hidden = no inbox = no list = children location = maildir:/var/vmail/public:INDEXPVT=~/Maildir/public prefix = Public/ separator = / subscriptions = no type = public mailbox "Spam-Learning" { auto = subscribe } } The log files are full of error messages like these (got about 15000 in the last three days): 2017-01-03T11:19:28.242386+01:00 mailserver01 dovecot: imap(foo.bar(a)example.org): Error: /var/vmail/example.org/foo.bar/Maildir/public/.Spam-Learning/dovecot.index.pvt reset, view is now inconsistent 2017-01-03T11:19:28.248524+01:00 mailserver01 dovecot: imap(foo.bar(a)example.org): Error: /var/vmail/example.org/foo.bar/Maildir/public/.Spam-Learning/dovecot.index.pvt view is inconsistent 2017-01-03T11:23:50.209732+01:00 mailserver01 dovecot: imap(baz.quux(a)example.org): Error: /var/vmail/example.org/baz.quux/Maildir/public/.Spam-Learning/dovecot.index.pvt reset, view is now inconsistent 2017-01-03T11:23:50.775940+01:00 mailserver01 dovecot: imap(some.user(a)example.org): Error: /var/vmail/example.org/some.user/Maildir/public/.Spam-Learning/dovecot.index.pvt reset, view is now inconsistent 2017-01-03T11:25:38.419536+01:00 mailserver01 dovecot: imap(other.user(a)example.org): Error: /var/vmail/example.org/other.user/Maildir/public/.Spam-Learning/dovecot.index.pvt reset, view is now inconsistent 2017-01-03T11:34:14.351346+01:00 mailserver01 dovecot: imap(more.user(a)example.org): Error: /var/vmail/example.org/more.user/Maildir/public/.Spam-Learning/dovecot.index.pvt reset, view is now inconsistent 2017-01-03T11:41:37.488916+01:00 mailserver01 dovecot: imap(support.user(a)example.org): Error: /var/vmail/example.org/support.user/Maildir/public/.Spam-Learning/dovecot.index.pvt reset, view is now inconsistent This problem did not seem to manifest itself in Dovecot 2.2.25, we see it only after upgrading to 2.2.27. I am not sure what the effects are. It seems that messages moved to the Public/Spam-Learning folder are deleted after a short while (not by the sa-learn cron job, which runs every morning) but I currently cannot say if this is because a user deletes them explicitly or because Dovecot does something it shouldn't. So this observation is possibly not relevant. It also doesn't seem to matter what kind of IMAP client access the Spam-Learning folder. Our users use Thunderbird, Apple Mail, Outlook, Roundcube, Horde and various mobile clients as well. I have attached the output of doveconf -n for reference. What could be the issue here? Are we doing something wrong or is this a bug in Dovecot? Thanks! Andreas

1 0

expunging all mailboxes
by Michael Fox 03 Jan '17

03 Jan '17

Evidently, the 'doveadm expunge' command requires a "mailbox" to be defined in the search string. But is there a way tell it all mailboxes for a user? For example, something like: doveadm expunge -u user@domain mailbox ALL savedbefore 30d Thanks, Michael

4 10

two listeners with different "driver = " configs
by mj 03 Jan '17

03 Jan '17

Hi, I would like to have two seperate imap listeners, with different authentication settings, but the mailstore and userbase etc will be identical. I know I can do this: > service imap-login { > inet_listener imap { > port = 143 > } > inet_listener imap2 { > port = 144 > } > } But I'm unsure how to configure imap/143 with "driver = ldap" and imap2/144 with "driver = pam" Just to explain why i would like this: I am using pam-script-saml (https://github.com/ck-ws/pam-script-saml) to enable saml-based access to dovecot. I would like to have one listener 144 to only serve this saml authentication listener, and the regular 143 listener with driver = ldap. Is that config possible? Best regards, MJ

5 10

differential SETACL silently fails if no vfile exists
by Vincent Breitmoser 02 Jan '17

02 Jan '17

In version 2.2.13, with `acl = vfile`, setting a differential ACL permission doesn't work if there are no permissions set yet. Example IMAP log: b1 GETACL test * ACL test valodim lrwstipekxacd b1 OK Getacl completed. b2 SETACL test valodim -l b2 OK Setacl complete. b3 GETACL test * ACL test valodim lrwstipekxacd b3 OK Getacl completed. My expectation was that the file would be created with default permissions, and the requested change then applied. However, no acl permission is set and no vfile is created for this mailbox in the process. This does work as expected (and a file is created) if I set a non-differential ACL first: b4 SETACL test valodim lrwstipekxacd b4 OK Setacl complete. b5 GETACL test * ACL test valodim akxeilprwtscd b5 OK Getacl completed. b6 SETACL test valodim -l b6 OK Setacl complete. b7 GETACL test * ACL test valodim akxeiprwtscd b7 OK Getacl completed. - V

1 0

dovecot and sssd
by Günther J. Niederwimmer 02 Jan '17

02 Jan '17

Hello, is there a way to configure dovecot over sssd ? like driver = sss Thanks for a answer, -- mit freundlichen Grüssen / best regards Günther J. Niederwimmer

2 1

Re: FreeBSD / dovecot 2.2.27 / libwrap
by Jim Pazarena 30 Dec '16

30 Dec '16

It works ! It was THAT easy ! Can you suggest how to replace the hair I pulled out ? :-) On 2016-12-29 5:27 PM, Larry Rosenman wrote: > login_access_sockets = tcpwrap > > service tcpwrap { > unix_listener login/tcpwrap { > group = $default_login_user > mode = 0600 > user = $default_login_user > } > } > > > > On Thu, Dec 29, 2016 at 7:21 PM, Jim Pazarena <dovecot(a)paz.bz> wrote: > >> I have compiled dovecot2 for FreeBSD with the tcpwrap option. >> >> A tcpwrap binary gets built and resides in the FreeBSD directory >> /usr/local/libexec/dovecot >> >> an examination of the compiled options (using the FreeBSD pkg install >> dovecot2) confirms: LIBWRAP : on >> >> yet, when I adjust dovecot.conf with: login_access_sockets = tcpwrap >> >> I get the following logged error message: >> >> 20161229 17:02:49 imap-login: Error: connect(tcpwrap) failed: No such file >> or directory >> >> Is there any way to turn up some super logging so that I can find just >> what dovecot feels is the failure ? >> >> Or, does anyone have an idea how to figure this out? What little hair I >> have is rapidly getting pulled out in frustration! >> >> Thank you. >> >> >> >> -- >> Jim Pazarena dovecot(a)paz.bz >> > > -- Jim Pazarena dovecot(a)paz.bz

2 1

FreeBSD / dovecot 2.2.27 / libwrap
by Jim Pazarena 30 Dec '16

30 Dec '16

I have compiled dovecot2 for FreeBSD with the tcpwrap option. A tcpwrap binary gets built and resides in the FreeBSD directory /usr/local/libexec/dovecot an examination of the compiled options (using the FreeBSD pkg install dovecot2) confirms: LIBWRAP : on yet, when I adjust dovecot.conf with: login_access_sockets = tcpwrap I get the following logged error message: 20161229 17:02:49 imap-login: Error: connect(tcpwrap) failed: No such file or directory Is there any way to turn up some super logging so that I can find just what dovecot feels is the failure ? Or, does anyone have an idea how to figure this out? What little hair I have is rapidly getting pulled out in frustration! Thank you. -- Jim Pazarena dovecot(a)paz.bz

2 1

doveadm expunge -A Error: Dictionary commit failed
by Alessio Cecchi 29 Dec '16

29 Dec '16

Hi, with the latest dovecot-ee version (dovecot-ee-2.2.26.1-10) if I run “doveadm expunge -A mailbox Spam savedbefore 30d” dovecot an error: doveadm: Error: dict-client: Commit failed: Dict server timeout: No input for 1916.209 secs (1 commands pending, oldest sent 0.000 secs ago: C1) (reply took 0.000 secs) doveadm: Error: expire: Dictionary commit failed Probably also "doveadm quota recalc -A" fail. Everything worked fine up to version 2.2.24 I hope can be fixed. Thanks -- Alessio Cecchi Postmaster AT http://www.qboxmail.it http://www.linkedin.com/in/alessice

3 6

dovecot-ldap.conf.ext for FreeIPA usage
by Matt . 29 Dec '16

29 Dec '16

Hello, I'm figuring out how to auth users against FreeIPA and I wonder if someone did this without GSAPI. My users are stored in a mysql DB where I wonder what I shall use as authname, the username or the mailaddress. As the mailaddress is always unique it could be best but if a user has multiple mailaddresses under seperate domains username might be better. Any clue here and maybe an example for dovecot-ldap.conf.ext when using FreeIPA ? Thanks! Matt

2 1

IPv4/IPv6 mismatches of doveadm: Fatal: connect(fd00:b::1:12345) failed: Connection refused
by Michael Grimm 28 Dec '16

28 Dec '16

Hi — I recently extendend my IPsec tunnel between two mail servers to deal with IPv4 addresses in addition to IPv6 ones. (No specific reason for that.) I ran into an issue worth reporting. This is Dovecot v2.2.27 (c0f36b0) at FreeBSD STABLE-11. Previously: dovecot.conf: plugin { mail_replica = tcp:remote.test } service doveadm { inet_listener { address = [::] } } | local> host remote.test: remote.test has IPv6 address fd00:b::1 working well. Currently: dovecot.conf: plugin { mail_replica = tcp:remote.test } service doveadm { inet_listener { address = * } } | local> host remote.test: remote.test has address 10.2.0.1 remote.test has IPv6 address fd00:b::1 Now, Replication stops and throws an error like: | <mail.crit> local.test dovecot: doveadm(user): Fatal: connect(fd00:b::1:12345) failed: Connection refused If I either #) remove IPv6 from my lokal DNS, #) use "mail_replica = tcp:10.2.0.1", or #) define the appropriate IPv4 address of remote.test in /etc/hosts, then replication works as usual. Hmm, shouldn't doveadm be more persistent in using every IP address of that entry of mail_replica *before* throwing a "Fatal:" error? Or do I miss something, and it's a feature, instead? Regards, Michael

1 0

Versioning Problem
by Günther J. Niederwimmer 28 Dec '16

28 Dec '16

Hello List, I have installed dovecot 2.2.25 on three Systems with two I have a problem with doveadm / dsync ? first: # 2.2.25 (7be1766): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.14 (099a97c) # OS: Linux 3.10.0-514.2.2.el7.x86_64 x86_64 CentOS Linux release 7.3.1611 (Core) second: # 2.2.25 (7be1766): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.14 (099a97c) # OS: Linux 3.10.0-514.2.2.el7.x86_64 x86_64 CentOS Linux release 7.3.1611 (Core) But I have this Error in the Logs ? Dec 27 12:00:12 mx dovecot: doveadm(2a02:xxxx:xxxx:xxxx::218): Error: doveadm client not compatible with this server (mixed old and new binaries?) Dec 27 12:01:08 mx dovecot: doveadm(2a02:xxxx:xxxx:xxxx::218): Error: doveadm client not compatible with this server (mixed old and new binaries?) can any tell me why ? -- mit freundlichen Grüssen / best regards Günther J. Niederwimmer

1 0

Identify if a message_part is an attachment ?
by Sai Kiran Gummaraj 27 Dec '16

27 Dec '16

Hello, This is my first post to this group. I have read through the instructions before posting. I hope am doing the right thing. If not my sincere apologies. I am in the process of developing a dovecot IMAP plugin (over v2.2.25). The plugin works with mdbox/sdbox which has ability to keep attachments as external references (via SiS POSIX). The plugin must enable fetching attachment from REDIS instead of local-store. To accomplish this I was following dovecot via my debugger. I wanted to understand if there was a way to determine a message_part to be of an attachment type ? Thanks. -- Regards, Sai Kiran cmd_fetch() |_ imap_fetch_more() |_ imap_fetch_more_int() |_ imap_fetch_state *state = &ctx->state; state->cur_mail is NULL. search mailbox |_ mailbox_search_next(state->search_ctx, &state->cur_mail) |_ mailbox_search_next_nonblock (via vfunc) |_ index_storage_search_next_nonblock |_ search_more_with_prefetching(ctx, mail_r) |_ mail = index_search_get_mail(ctx) |_ allocates mail (vfunc mail_alloc) and calls hook. |_ also allocates index_mails ret = search_more_with_mail(ctx, mail); |_ call handler (*h) => fetch_body_msgpart |_ imap_msgpart_open |_ imap_msgpart_find_part(mail, msgpart, &part); /* only mail comes here */ mail (uid=1739, seq=5) msgpart (section_number = 2, fetch_type = FETCH_MIME_BODY, partial_offset = 0, partial_size = 512, decode_cte_to_binary = 0) |_ mail_get_parts(mail, &parts) /* atmail send msgpart */ |_ call to p->v.get_parts(mail, parts_r) (index_mail_get_parts) /* atmail over-ride this function */ |_ get_cached_parts(mail) /* sets data->part */ |_ get_unserialized_parts(index_mail) |_ get_serialized_parts(mail, &part_buf) |_ index_mail_cache_lookup_field |_ mail_cache_lookup_field |_ imap_msgpart_open_normal() |_ .. see call stack below ..

2 1

permissions and doveadm
by dovecot 26 Dec '16

26 Dec '16

I did an upgrade from OpenSUSE 13.1 to 13.2 (finally), and now doveadm fails. I went from an self-compiled source, to 'repsitory'-version (from version 2.1.6, to 2.2.13) luuk@opensuse:~/bin> id uid=1000(luuk) gid=100(users) groups=100(users),7(lp),33(video),118(vboxusers) luuk@opensuse:~/bin> doveadm quota recalc luuk@opensuse:~/bin> doveadm quota recalc -u luuk doveadm(luuk): Error: userdb lookup: connect(/usr/local/var/run/dovecot/auth-userdb) failed: Connection refused doveadm(luuk): Fatal: User lookup failed: Internal error occurred. Refer to server log for more information. Why is it that with the '-u' option, doveadm is getting a connection refused? -- Luuk

4 4

postlogin script - still confused
by Michael Fox 26 Dec '16

26 Dec '16

> You need to use executable = script-login -- /path/post-login.sh -a -r -g > note the double-dash. it tells getopt to stop processing arguments. > > Aki OK. Thanks. So let me make sure I have this right, since there is no syntax defined on the wiki - just an example which doesn't show the above syntax. The valid possibilities are: executable = script-login [-d] /path/script1 /path/script2 ... -or- executable = script-login [-d] -- /path/script1 -a -r -g -s In other words, I can either call multiple scripts, each with no arguments, or I can call one script with arguments. But I cannot call multiple scripts, some with arguments, some without arguments. Is that correct? If not, please show all valid syntax options. Also, regarding the exec "$@" line shown at the end of the wiki examples. If I pass arguments "-a -r -g -s" to my script, as in: executable = script-login -- /path/script1 -a -r -g -s then doesn't the exec "$@" line at the end become: exec -a -r -g -s And surely that's not right. So, could you please explain in words the purpose of the exec line at the end - what it does, why it's needed, and what to do if I'm sending arguments to my postlogin script? Thanks, Michael

1 0

Domains on different IPs
by Mark Constable 23 Dec '16

23 Dec '16

I want to supply separate Letsencrypt certificates for each virtual domain and seeing that SNI does not work I need to allocate separate IPs. Could anyone give some pointers, or keywords to search for, on... a) how to make dovecot listen for different domains on different IPs? b) how to configure separate SSL certs for each of these IPs?

3 2

The left angle bracket at the beginning of the certificate path
by Илья 22 Dec '16

22 Dec '16

dovecot 2.2.27 (c0f36b0) openSUSE Tumbleweed x86_64 https://forums.opensuse.org/showthread.php/521796-Dovecot-doveconf-Fatal-ex… Faced with an unpleasant situation, when ssl_client_ca_file options are specified path to the left angle bracket, as in options ssl_key ssl_cert ssl_ca path is so. This doveconf shows no syntax error, and the arrow moves to managesieve which there generally is not involved in any side. dovecot: doveconf: Fatal: execvp(/usr/lib/dovecot/managesieve) failed: Argument list too long dovecot: config: Error: managesieve-login: dump-capability process returned 89 I consider this a bug, and that it should not be. And explain why you need left angle brackets in the options ssl_key ssl_cert ssl_ca?

1 0

doveadm acl set negative rights not supported?
by Peter Benko 21 Dec '16

21 Dec '16

Hi all, I'm trying to set an ACL with negative rights. I have no problems setting it with standard IMAP commands, but I'm unable to do it with the doveadm acl command. I tried: sudo -u vmail doveadm acl set -u "user@domain" Spam user="-user@domain" lookup (notice the "-" before the username) Unfortunately, this adds a (positive) ACL for the user named "-user@domain" instead of adding a negative one for the user "user@domain". Am I messing up something or is negative ACL support missing from doveadm? I have not seen anything in the docs about this... Regards, Peter

2 2

unexpected behaviour of search queries with mixed AND and OR
by Juergen Raschke 20 Dec '16

20 Dec '16

Hello, I found out an unexpected behaviour of search queries with mixed "AND" and "OR". With search query "$ condA OR condB condC $" I get an error: Fatal: Use parenthesis when mixing ANDs and ORs if I switch left and right OR-part and use the query "$ condB condC OR condA $" I get a result, but it is not the expected result of the query "$ \( condB condC $ OR condA \)" I get the result of the query "$ condB OR condC OR condA $" which is more then suprising. The query "$ condB condC OR condA $" should either throw an error like "$ condA OR condB condC $" or deliever the result of "$ \( condB condC $ OR condA \)" Example: doveadm -f flow fetch -u USER guid $ savedbefore 21d OR seen savedbefore 5d $ | wc -l Fatal: Use parenthesis when mixing ANDs and ORs 0 doveadm -f flow fetch -u USER guid $ seen savedbefore 5d OR savedbefore 21d $ | wc -l 63690 doveadm -f flow fetch -u USER guid $ seen OR savedbefore 5d OR savedbefore 21d $ | wc -l 63690 doveadm -f flow fetch -u USER guid $ \( seen savedbefore 5d $ OR savedbefore 21d \) |wc -l 63247 doveadm -f flow fetch -u USER guid $ savedbefore 21d OR \( seen savedbefore 5d $ \) |wc -l 63247 doveconf -n # 2.2.24 (a82c823): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.9 (357ac0a0e68b+) # OS: Linux 3.16.0-0.bpo.4-amd64 x86_64 Debian 7.9 Mit freundlichen Gruessen, Juergen Raschke -- Mittwald CM Service GmbH & Co. KG Koenigsberger Strasse 6 Tel: +49-5772-293-100 32339 Espelkamp Fax: +49-5772-293-333 Geschaeftsfuehrer: Robert Meyer, HRA 6640, AG Bad Oeynhausen Komplementaerin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen

2 2

Latest Dovecot v2.2.devel (9bc8d9b) crashes on login and lmtp
by Thomas Leuxner 20 Dec '16

20 Dec '16

I was unable to produce an IMAP core but have been successful with LMTP. Basically it crashes right upon login or delivery: Dec 20 08:55:23 nihlus dovecot: master: Dovecot v2.2.devel (9bc8d9b) starting up for imap, lmtp Dec 20 08:56:15 nihlus dovecot: imap(tlx(a)leuxner.net): Fatal: master: service(imap): child 5710 killed with signal 11 (core not dumped) Dec 20 08:57:23 nihlus dovecot: lmtp(5967): Connect from local Dec 20 08:57:23 nihlus dovecot: lmtp(5967): Fatal: master: service(lmtp): child 5967 killed with signal 11 (core dumped) $ gdb /usr/lib/dovecot/lmtp core_lmtp.5967.nihlus.leuxner.net GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/lib/dovecot/lmtp...Reading symbols from /usr/lib/debug/.build-id/ec/199069dd786feb54e5af43f983ce9c3bb4c29c.debug...done. done. [New LWP 5967] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `dovecot/lmtp'. Program terminated with signal SIGSEGV, Segmentation fault. #0 __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:33 33 ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S: No such file or directory. #0 __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:33 No locals. #1 0x00007f9177db4779 in memcpy (__len=<optimized out>, __src=0x0, __dest=0x7f917a5c5bf8) at /usr/include/x86_64-linux-gnu/bits/string3.h:51 No locals. #2 p_strconcat (pool=<optimized out>, str1=<optimized out>) at strfuncs.c:218 args = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7ffdcadea060, reg_save_area = 0x7ffdcade9f90}} temp = 0x0 ret = <optimized out> len = 49 #3 0x00007f91780744fd in mdbox_storage_create (_storage=0x7f917a5c5930, ns=0x7f917a5b79d0, error_r=0x7ffdcadea1a0) at mdbox-storage.c:57 storage = 0x7f917a5c5930 dir = <optimized out> #4 0x00007f917805952b in mail_storage_create_full (ns=ns@entry=0x7f917a5b79d0, driver=<optimized out>, driver@entry=0x0, data=<optimized out>, flags=flags@entry=(unknown: 0), storage_r=storage_r@entry=0x7ffdcadea170, error_r=error_r@entry=0x7ffdcadea1a0) at mail-storage.c:395 storage = 0x7f917a5c5930 list = 0x7f917a5c3ca0 list_set = {layout = 0x7f91781083c6 "fs", root_dir = 0x7f917a52e100 "/var/vmail/domains/leuxner.net/tlx/mdbox", index_dir = 0x0, index_pvt_dir = 0x0, control_dir = 0x0, alt_dir = 0x0, inbox_path = 0x0, subscription_fname = 0x7f917810f234 "subscriptions", list_index_fname = 0x7f917810925e "dovecot.list.index", maildir_name = 0x7f917810bc17 "dbox-Mails", mailbox_dir_name = 0x7f917810c301 "mailboxes", escape_char = 0 '\000', broken_char = 0 '\000', utf8 = false, alt_dir_nocheck = false, index_control_use_maildir_name = false} list_flags = <optimized out> p = <optimized out> __FUNCTION__ = "mail_storage_create_full" #5 0x00007f91780598cc in mail_storage_create (ns=ns@entry=0x7f917a5b79d0, driver=driver@entry=0x0, flags=flags@entry=(unknown: 0), error_r=error_r@entry=0x7ffdcadea1a0) at mail-storage.c:416 storage = 0x7f917a5bfc90 #6 0x00007f9178051b89 in mail_namespaces_init_add (user=user@entry=0x7f917a5bfc90, ns_set=<optimized out>, unexpanded_ns_set=0x7f917a5c0178, ns_p=ns_p@entry=0x7ffdcadea200, error_r=error_r@entry=0x7ffdcadea290) at mail-namespace.c:195 mail_set = <optimized out> ns = 0x7f917a5b79d0 driver = 0x0 error = 0x0 ret = <optimized out> #7 0x00007f9178052cd9 in mail_namespaces_init (user=0x7f917a5bfc90, error_r=error_r@entry=0x7ffdcadea290) at mail-namespace.c:414 mail_set = 0x7f917a5c0c58 ns_set = 0x7f917a5c0f70 unexpanded_ns_set = 0x7f917a5c0150 namespaces = 0x0 ns_p = 0x7ffdcadea200 i = <optimized out> count = <optimized out> count2 = <optimized out> __FUNCTION__ = "mail_namespaces_init" #8 0x00007f9178060b65 in mail_storage_service_init_post (ctx=<optimized out>, error_r=0x7ffdcadea290, mail_user_r=<optimized out>, priv=0x7ffdcadea2a0, user=0x7f917a573910) at mail-storage-service.c:728 mail_set = 0x7f917a5c0c58 home = 0x7f917a59e761 "/var/vmail/domains/leuxner.net/tlx" mail_user = 0x7f917a5bfc90 #9 mail_storage_service_next_real (mail_user_r=<optimized out>, user=0x7f917a573910, ctx=<optimized out>) at mail-storage-service.c:1427 len = <optimized out> temp_priv_drop = <optimized out> priv = {uid = 5000, gid = 5000, uid_source = 0x7f9178107684 "userdb lookup", gid_source = 0x7f9178107684 "userdb lookup", home = 0x7f917a59e761 "/var/vmail/domains/leuxner.net/tlx", chroot = 0x7f917a52d458 ""} error = 0x7f917a5b3830 "" disallow_root = <optimized out> use_chroot = <optimized out> #10 mail_storage_service_next (ctx=<optimized out>, user=0x7f917a573910, mail_user_r=mail_user_r@entry=0x7f917a560b48) at mail-storage-service.c:1445 old_log_prefix = 0x7f917a5ba530 "lmtp(5967, tlx(a)leuxner.net) " #11 0x00007f9178789f55 in client_deliver (session=0x7f917a5bf880, src_mail=0x7f917a5bb060, rcpt=0x7f917a5621d0, client=0x7f917a560a10) at commands.c:837 set_parser = <optimized out> line = <optimized out> str = <optimized out> mail_error = 2052462064 ret = <optimized out> input = <optimized out> ns = <optimized out> delivery_time_started = {tv_sec = 1482220643, tv_usec = 129544} sets = <optimized out> storage = 0x7f917a5b3870 mail_set = <optimized out> username = 0x7f917a52d070 "tlx(a)leuxner.net" dctx = {pool = 0x0, set = 0x7f917a560a10, session = 0x0, timeout_secs = 0, session_time_msecs = 0, delivery_time_started = {tv_sec = 140262799447056, tv_usec = 140262799447168}, dup_ctx = 0x2, session_id = 0x7f9177d980d8 <i_stream_file_read+136> "H\211\305H\211\350H\301\350?\204\300D\017\266\350\017\205\030\001", src_mail = 0xf72, src_envelope_sender = 0xf65305b35804d500 <error: Cannot access memory at address 0xf65305b35804d500>, dest_user = 0x0, dest_addr = 0x7f917a561410 "\001", final_dest_addr = 0x7f917a561480 "q ", dest_mailbox_name = 0x2 <error: Cannot access memory at address 0x2>, dest_mail = 0x0, var_expand_table = 0x7f9177d93c33 <i_stream_read+83>, tempfail_error = 0x7f917a560a10 "", tried_default_save = 64, saved_mail = 71, save_dest_mail = 83, mailbox_full = 122, dsn = 145} lda_set = <optimized out> error = <optimized out> #12 client_deliver_next (session=0x7f917a5bf880, src_mail=0x7f917a5bb060, client=0x7f917a560a10) at commands.c:930 count = <optimized out> #13 client_input_data_write_local (input=<optimized out>, client=0x7f917a560a10) at commands.c:1026 src_mail = 0x7f917a5bb060 first_uid = 4294967295 session = 0x7f917a5bf880 old_uid = 0 #14 client_input_data_write (client=0x7f917a560a10) at commands.c:1161 input = 0x7f917a57d1f0 #15 client_input_data_handle (client=0x7f917a560a10) at commands.c:1256 data = <optimized out> size = 110 ret = <optimized out> #16 0x00007f9177d9d962 in io_loop_call_io (io=0x7f917a5615f0) at ioloop.c:599 ioloop = 0x7f917a534740 t_id = 2 __FUNCTION__ = "io_loop_call_io" #17 0x00007f9177d9efba in io_loop_handler_run_internal (ioloop=ioloop@entry=0x7f917a534740) at ioloop-epoll.c:222 ctx = 0x7f917a53a370 io = <optimized out> tv = {tv_sec = 299, tv_usec = 984106} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 j = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #18 0x00007f9177d9d9fc in io_loop_handler_run (ioloop=ioloop@entry=0x7f917a534740) at ioloop.c:648 No locals. #19 0x00007f9177d9dba8 in io_loop_run (ioloop=0x7f917a534740) at ioloop.c:623 __FUNCTION__ = "io_loop_run" #20 0x00007f9177d25a83 in master_service_run (service=0x7f917a5345e0, callback=<optimized out>) at master-service.c:641 No locals. #21 0x00007f9178788262 in main (argc=1, argv=0x7f917a534390) at main.c:125 set_roots = {0x7f917855e400 <lda_setting_parser_info>, 0x7f917898f580 <lmtp_setting_parser_info>, 0x0} service_flags = <optimized out> storage_service_flags = <optimized out> c = <optimized out>

2 1

Checking sieve
by Gerben Wierda 19 Dec '16

19 Dec '16

A simple question: I’ve installed roundcube on macOS Sierra with Server 5.2 and created a set of sieve rules in my dovecot setup. How can I check their functioning (other than send test mails) e.g. is there some logging I can set / look at? G

2 1

Upgrade from version 1 to 2
by Peter Fraser 19 Dec '16

19 Dec '16

Hi All I am upgrading from dovecot-1.2.17 to dovecot2-2.2.27_4. I configured version 2 from scratch. I have email in the maildir format. Would it be ok in theory if I simply copy over the email files from the version 1 server to the version 2 server or are there any hidden dangers here? Any problems with indexing? Thanks for any advice

2 1

Problem with default_process_limit max 200
by Jean-François Sénéchal 19 Dec '16

19 Dec '16

Hello, The default_process_limit parameter is limited to 200 On my server there is a lot of connection imap and this figure is quickly reached And users can no longer connect If I try to increase it I get this error message Warning: service auth { client_limit=1000 } is lower than required under max. load (1100) [....] Restarting IMAP/POP3 mail server: dovecotdoveconf: Warning: service auth { client_limit=1000 } is lower than required under max. load (1100) Warning: service auth { client_limit=1000 } is lower than required under max. load (1100) How do I solve this problem? My full config # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.11 auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes debug_log_path = /var/log/dovecot.debug default_process_limit = 200 dict { expire = mysql:/etc/dovecot/dovecot-dict-expire.conf.ext } disable_plaintext_auth = no first_valid_gid = 5000 first_valid_uid = 3000 imapc_features = rfc822.size fetch-headers imapc_host = mail.marche.be imapc_list_prefix = INBOX imapc_master_user = cyrus imapc_password = homer imapc_user = dherman info_log_path = /var/log/dovecot.log last_valid_gid = 5000 log_path = /var/log/dovecot.log mail_gid = 5000 mail_location = maildir:~/Maildir:LAYOUT=fs mail_plugins = " expire quota" mail_prefetch_count = 20 maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } passdb { args = /etc/dovecot/dovecot-master-users driver = passwd-file master = yes } passdb { driver = shadow } plugin { expire = Trash expire2 = Trash/* expire3 = Spam expire_cache = yes expire_dict = proxy::expire quota = maildir:User quota quota_grace = 10%% quota_rule = *:storage=150M quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=90%% quota-warning 90 %u sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/before.sieve sieve_dir = ~/sieve sieve_global_dir = /etc/dovecot/sieve/ stats_refresh = 30 secs stats_track_cmds = yes } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh postmaster_address = jf(a)marche.be protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 } } service dict { unix_listener dict { group = vmail mode = 0666 } } service imap-login { process_limit = 200 process_min_avail = 2 } service imap { process_limit = 1024 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3-login { inet_listener pop3 { port = 110 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = dovecot } ssl_ca = </etc/dovecot/ssl/server-ca.crt ssl_cert = </etc/dovecot/ssl/marche.crt ssl_dh_parameters_length = 2048 ssl_key = </etc/dovecot/private/marche.key ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { driver = passwd } protocol lmtp { mail_plugins = " expire quota sieve" postmaster_address = jf(a)marche.be } protocol imap { mail_max_userip_connections = 5 mail_plugins = " expire quota imap_quota" } protocol sieve { mail_max_userip_connections = 5 } protocol pop3 { mail_max_userip_connections = 5 mail_plugins = " expire quota" }

1 0

Renumbering UID on messages
by Ricardo Branco 19 Dec '16

19 Dec '16

I am having a problem with Horde due to large variations in email UID for a few users. At one time they were receiving thousands of emails a day, they have deleted all these messages but because they still have early emails in the mailbox the UID range from start to now is massive. We use Horde webmail and it creates an internal array based on range of messages but due to large UID range it eats though the ram. If I use dsync on a mailbox will the UIDs be renumbered? -- The information contained in or attached to this email is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorised to and must not disclose, copy, distribute, or retain any message or any part of it. If you have received an email in error, please contact the sender and delete the material from any computer. The contents of this email are not for publication unless specifically stated. Furthermore, the information contained in this message, and any attachment(s) thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of WENN or its subsidiaries and associated companies. We make every effort to keep our network free from viruses. However, you do need to check this e-mail and any attachments to it for viruses as we can take no responsibility for any computer virus which may be transferred by way of this e-mail. WENN Ltd: Registered Office: 4a Tileyard Studios, Tileyard Road, London, N7 9AH, England. Registered No: 4375163. Place of Registration: United Kingdom. USA Entertainment News Inc (d/b/a WENN): Registered Office: 352 7th Avenue, Suite 1105, New York, NY 10001-5657, USA The WENN name, design and related marks are trademarks of the WENN group of companies. (c) 2014 All Rights Reserved.

2 2

RFC 3501 violation in FETCH BODY responses
by Guilhem Moulin 18 Dec '16

18 Dec '16

Hi there, Quoting RFC 3501 sec. 7.4.2 “FETCH Response” (data item BODYSTRUCTURE): “A body type of type MESSAGE and subtype RFC822 contains, immediately after the basic fields, the envelope structure, body structure, and size in text lines of the encapsulated message.” According the ABNF (RFC 3501 sec. 9) the envelope structure is that of the ENVELOPE FETCH data item, and the env-{from,sender,reply-to,to,cc, bcc} fields are non-space-separated address lists: body-type-msg = media-message SP body-fields SP envelope SP body SP body-fld-lines envelope = "(" env-from SP … SP env-to SP … ")" env-from = "(" 1*address ")" / nil env-to = "(" 1*address ")" / nil While this is indeed the case for ‘FETCH … (ENVELOPE)’, for ‘FETCH … (BODY)’ dovecot 2.2.25 adds a space between addresses of an address list of the envelope structure of an encapsulated MESSAGE/RFC822 message. See the attached patch to ‘src/lib-imap/test-imap-bodystructure.c’, which currently (2.2.25) fails as follows test-imap-bodystructure.c:122: Assert failed: strcmp(str_c(str), testmsg_body) == 0 test-imap-bodystructure.c:129: Assert failed: strcmp(str_c(str), testmsg_bodystructure) == 0 imap bodystructure parser ............................................ : FAILED because the ‘env-to’ field of the envelope structure of the encapsulated MESSAGE/RFC822 message is printed as ((NIL NIL "sub-to1" "domain.org") (NIL NIL "sub-to2" "domain.org")) while it should be ((NIL NIL "sub-to1" "domain.org")(NIL NIL "sub-to2" "domain.org")) After a quick look at the source, this seems to be due to src/lib-imap/imap-bodystructure.c:imap_write_list, which always separates list items with spaces. In the case of an envelope, only the top-level list should be space-separated. Indeed, not adding a space between items of type IMAP_ARG_LIST in the recursive call makes the test pass again. Cheers, -- Guilhem.

2 1

Error while migrating mailbox with 'doveadm sync'
by Zhang Huangbin 18 Dec '16

18 Dec '16

Dear all, I successfully migrated hundreds of mailboxes with Dovecot 2.2.24 on OpenBSD 6.0 (amd64. Old server is OpenBSD 5.1, i386, Dovecot-2.0.17), but got error while migrating 3 mailboxes: # doveadm -o mail_fsync=never sync -1 -R -s '' -u user(a)domain.com imapc: dsync(user(a)domain.com): Panic: file mailbox-alias-plugin.c: line 77 (mailbox_symlink_exists): assertion failed: (ret > 0) Abort trap Same error while running ‘doveadm … backup …'. What does this error actually mean? How can i fix it? - Here’s full log running doveadm with ‘-D’ option: http://pastebin.com/Um5fbuNM - ‘dovecot -n’ on old server: http://pastebin.com/4E6xzFKU - ‘dovecot -n’ on new server: http://pastebin.com/4uHwQnMN I checked release notes of Dovecot 2.2.25/26/27, there’re 3 fixes related to 'doveadm sync’, but not sure whether it helps fix this issue. 2.2.26: + doveadm sync/backup: Added -I <max size> parameter to skip too large mails. + doveadm sync/backup: Fixed -t parameter and added -e for "end date”. 2.2.27: - doveadm sync -1: Fixed handling mailbox GUID conflicts.

1 1

Antispam plugin: insufficent error messages
by Volker Wysk 18 Dec '16

18 Dec '16

Hi! "Dovecot always logs a detailed error message if something goes wrong. If it doesn't, it's considered a bug and will be fixed." (http:// wiki2.dovecot.org/Logging) I'm trying to set up a spam filter with dovecot-antispam and dspam as backend. When I move a spam message from INBOX to Spam, I get this in syslog: Nov 28 21:15:58 desktop imap: antispam: mailbox_is_unsure(Spam): 0 Nov 28 21:15:58 desktop imap: antispam: mailbox_is_trash(INBOX): 0 Nov 28 21:15:58 desktop imap: antispam: mailbox_is_trash(Spam): 0 Nov 28 21:15:58 desktop imap: antispam: mail copy: from trash: 0, to trash: 0 Nov 28 21:15:58 desktop imap: antispam: mailbox_is_spam(INBOX): 0 Nov 28 21:15:58 desktop imap: antispam: mailbox_is_spam(Spam): 1 Nov 28 21:15:58 desktop imap: antispam: mailbox_is_unsure(INBOX): 0 Nov 28 21:15:58 desktop imap: antispam: mail copy: src spam: 0, dst spam: 1, src unsure: 0 There are no log entries about how dspam is called, or what goes on. Indeed, dspam doesn't get called at all. I know, because I've examined the antispam- plugin source code. There would be a log message if dspam was called. It's hard to study the source code, because there are hardly any comments. I have been able to trace the problem to function signature_extract_to_list() in signature.c. There, -1 is returned: int signature_extract_to_list(const struct signature_config *cfg, struct mailbox_transaction_context *t, struct mail *mail, struct siglist **list, enum classification wanted) { const char *const *signatures; struct siglist *item; signatures = get_mail_headers(mail, cfg->signature_hdr); if (!signatures || !signatures[0]) { if (!cfg->signature_nosig_ignore) { mail_storage_set_error(t->box->storage, ME(NOTPOSSIBLE) "antispam signature not found"); return -1; /* <-- HERE */ } else { return 0; } } while (signatures[1]) signatures++; item = i_new(struct siglist, 1); item->next = *list; item->wanted = wanted; item->sig = i_strdup(signatures[0]); *list = item; return 0; } So, what's happening is "antispam signature not found". My question: What does this mean? What's going on? My "dovecot -n" output is attached. Bye Volker

4 7

Managing Sieve on macOS 10.12 Sierra with Server 5.2?
by Gerben Wierda 17 Dec '16

17 Dec '16

I don’t know if this is considered OT, but dovecot has support for sieve. I had a rule set running under Mac OS X 10.8.5 Server 2.2.5 which I did maintain by hand on the server because a while before Mac OS X Server had dropped support for Squirrelmail. Now I wonder if there is a decent way to get sieve running again on macOS 10.12 Sierra with Server 5.2 G

1 0

Existing shared mailbox ... does not exist
by Ruga 17 Dec '16

17 Dec '16

Hello, Dovecot 2.2.26.0 Thunderbird 45.4.0 ESR Scenario: We have a shared mailbox with e-mails in its subdirectories. There are no e-mails in the shared mailbox itself. Example: /Shared <----------------------------------- empty /Shared/call_for_papers <-------------- empty /Shared/call_for_papers/AAMAS <-- populated ...more of the same... Problem: When selecting /Shared, Thunderbird chirps this message: "The current operation on 'Shared' did not succeed. The mail server for account @example.com responded: Mailbox doesn't exist: Shared/Shared (0.000 + 0.000 secs)."

1 3

Fwd: Re: making a plugin encrypt index data
by Aki Tuomi 16 Dec '16

16 Dec '16

> ---------- Original Message ---------- > From: Aki Tuomi <aki.tuomi(a)dovecot.fi> > To: micah anderson <micah(a)riseup.net> > Date: December 16, 2016 at 11:25 PM > Subject: Re: making a plugin encrypt index data > > When we released our encryption plugin, mail-crypt, it's capabilities include fs-crypt. This can be used to encrypt things like FTS indexes and attachments, and with suitable mail storage, such as obox, you can also encrypt indexes. > > To extend this support to dbox or maildir, does require rather involved changes in dovecot core, which currently has no support for fs-api in index handling. This might happen on v2.3 or v2.4, depending. > > I somehow suspect that the work estimate would exceed your budget. But it is going to happen, it's just matter of time. Can't give you any timeline though, since we have not decided on one yet. > > Aki > > > On December 16, 2016 at 9:53 PM micah anderson <micah(a)riseup.net> wrote: > > > > > > > > Hi Aki, > > > > Do you have any idea approximately when this would be planned for? > > > > We are also interested potentially paying for the ability to encrypt our > > indexes, as this is a major concern for us. We don't have a lot of money > > as a non-profit, but if there is a possibility of contract work, we > > would be interested to know what it would cost to do it. > > > > thanks, > > micah > > > > Aki Tuomi <aki.tuomi(a)dovecot.fi> writes: > > > > >> On December 16, 2016 at 6:48 PM micah anderson <micah(a)riseup.net> wrote: > > >> > > >> > > >> > > >> Hello, > > >> > > >> I'm encrypting mail on disk using a plugin[0], but the index files are > > >> not encrypted (specifically the dovecot.index.cache can be read). > > >> > > >> I want to do is encrypt index on disk, so I'm looking for how a plugin > > >> can achieve that by hooking into the right locations. Is that easily > > >> possible in a plugin? > > >> > > >> I can turn off those indexes by passing INDEX=MEMORY, but that isn't > > >> possible if I use sdbox/mdbox. > > >> > > >> thanks for any suggestions! > > >> micah > > >> > > >> 0. https://0xacab.org/riseuplabs/tofu-scrambler > > > > > > Hi! > > > > > > At the moment it's not possible without making new storage class. We are planning to add support for fs drivers for indexes at some point. > > > > > > Aki Tuomi > > > Dovecot Oy

1 0

service(indexer-worker): child 18977 killed with signal 11 (core dumped)
by Matteo Biagini 16 Dec '16

16 Dec '16

Hello to everybody, first of all: thanks a lot for your hard work and for this nice piece of software! After many search about the following SIGSEGV, I decide to post the backtrace and I hope to have avoided duplicated thread. The problem arise after I enable clucene fts. I tryed the clucene ports version (I am using OpenBSD) and a fixed version from github (Blue-Rocket/clucene::feature/pod) which contains FreeBSD fixes and others memory leak patches, but the problem persists. I built either dovecot-* and clucene-core with -g and the following logs are taken from that version. Maybe, I can do more debugging but I don't know how; some ideas? thanks a lot == LOG == Dec 16 12:30:34 mail02 dovecot: indexer-worker(user@hostname): Indexed 1 messages in Trash Dec 16 12:31:16 mail02 dovecot: imap-login: Login: user=<user@hostname>, method=PLAIN, rip=10.244.3.101, lip=10.244.3.200, mpid=90234, TLS, session=<68Ny6MRDml8K9ANl> Dec 16 12:31:16 mail02 dovecot: imap-login: Login: user=<user@hostname>, method=PLAIN, rip=10.244.3.101, lip=10.244.3.200, mpid=59810, TLS, session=<c7xz6MRDzV4K9ANl> Dec 16 12:31:16 mail02 dovecot: imap-login: Login: user=<user@hostname>, method=PLAIN, rip=10.244.3.101, lip=10.244.3.200, mpid=66756, TLS, session=<UtNz6MRDiJwK9ANl> Dec 16 12:31:16 mail02 dovecot: imap-login: Login: user=<user@hostname>, method=PLAIN, rip=10.244.3.101, lip=10.244.3.200, mpid=81959, TLS, session=<gJZ06MRD9HQK9ANl> Dec 16 12:31:16 mail02 dovecot: imap-login: Login: user=<user@hostname>, method=PLAIN, rip=10.244.3.101, lip=10.244.3.200, mpid=14099, TLS, session=<BL116MRD3DgK9ANl> Dec 16 12:31:16 mail02 dovecot: indexer-worker(user@hostname): Indexed 1 messages in INBOX Dec 16 12:32:18 mail02 dovecot: indexer-worker: Fatal: master: service(indexer-worker): child 18977 killed with signal 11 (core dumped) == GDB == (gdb) bt #0 strlen () at /usr/src/lib/libc/arch/amd64/string/strlen.S:152 #1 0x0000093434d7c120 in __vfprintf (fp=0x7f7fffff96c0, fmt0=0x9343cef79ae "Timeout leak: %p (%s:%u)", ap=Variable "ap" is not available. ) at /usr/src/lib/libc/stdio/vfprintf.c:885 #2 0x0000093434d9b068 in *_libc_vsnprintf (str=0x933ab0940b8 "Timeout leak: 0x9342f652300", n=120, fmt=0x9343cef79ae "Timeout leak: %p (%s:%u)", ap=0x7f7fffff9870) at /usr/src/lib/libc/stdio/vsnprintf.c:61 #3 0x000009343cdd4aa5 in str_vprintfa (str=0x933ab094078, fmt=0x9343cef79ae "Timeout leak: %p (%s:%u)", args=0x7f7fffff9870) at str.c:129 #4 0x000009343cdaacd1 in internal_handler (ctx=0x9343d22fab0, format=0x9343cef79ae "Timeout leak: %p (%s:%u)", args=0x7f7fffff9870) at failures.c:602 #5 0x000009343cdab839 in i_internal_error_handler (ctx=Variable "ctx" is not available. ) at failures.c:677 #6 0x000009343cdab3f4 in i_warning (format=0x9343cef79ae "Timeout leak: %p (%s:%u)") at failures.c:325 #7 0x000009343cdc107b in io_loop_destroy (_ioloop=Variable "_ioloop" is not available. ) at ioloop.c:741 #8 0x000009343cd485bd in master_service_deinit (_service=Variable "_service" is not available. ) at master-service.c:876 #9 0x0000093193802642 in main (argc=1, argv=0x7f7fffff9b28) at indexer-worker.c:83 (gdb) bt full #0 strlen () at /usr/src/lib/libc/arch/amd64/string/strlen.S:152 No locals. #1 0x0000093434d7c120 in __vfprintf (fp=0x7f7fffff96c0, fmt0=0x9343cef79ae "Timeout leak: %p (%s:%u)", ap=Variable "ap" is not available. ) at /usr/src/lib/libc/stdio/vfprintf.c:885 mbs = { __mbstate8 = "{\t\000\000\000\000\000\000\000\000\000\000r3\t\000\000\000\000\000\000\000\000\000\0004\t\000\000\001\000\000\000\000\000\000\000223\177\177\000\000\001\000\000\000\000\000\000\000\002\000\000\000\000\000\000\000\t216U\035\rP", '\0' <repeats 47 times>, __mbstateL = 10118011532464} mbseqlen = Variable "mbseqlen" is not available. == DOVECONF == # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: OpenBSD 6.0 amd64 auth_master_user_separator = * auth_mechanisms = PLAIN LOGIN base_dir = /var/run/dovecot dict { acl = mysql:/etc/dovecot/dovecot-share-folder.conf quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf } first_valid_uid = 2000 last_valid_uid = 2000 listen = * [::] login_greeting = Welcome mail_gid = 2000 mail_location = mdbox:%Lh/Maildir/:INDEX=%Lh/Maildir/ mail_plugins = quota mailbox_alias acl zlib fts fts_lucene trash mail_uid = 2000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mdbox_rotate_size = 60 M namespace { inbox = yes location = mailbox Archive { auto = no special_use = \Archive } mailbox Archives { auto = no special_use = \Archive } mailbox "Deleted Messages" { auto = no special_use = \Trash } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox "Junk E-mail" { auto = no special_use = \Junk } mailbox SPAM { auto = no special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Items" { auto = no special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Trash { auto = subscribe autoexpunge = 30 days special_use = \Trash } prefix = separator = / type = private } namespace { list = children location = mdbox:%%Lh/Maildir/:INDEX=%%Lh/Maildir/Shared/%%Ld/%%Ln prefix = Shared/%%u/ separator = / subscriptions = yes type = shared } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } passdb { args = /etc/dovecot/dovecot-master-users driver = passwd-file master = yes } plugin { acl = vfile acl_shared_dict = proxy::acl antispam_backend = MAILTRAIN antispam_mail_notspam = --ham antispam_mail_sendmail = /usr/local/bin/sa-learn-pipe.sh antispam_mail_spam = --spam antispam_signature = X-Spam-Flag antispam_signature_missing = move antispam_spam = Spam;Junk antispam_spam_pattern = spam;Spam;junk;Junk antispam_spam_pattern_ignorecase = SPAM;JUNK antispam_trash = trash;Trash;Deleted Items;Deleted Messages antispam_trash_pattern = trash;Trash;Deleted * antispam_trash_pattern_ignorecase = TRASH auth_socket_path = /var/run/dovecot/auth-master fts = lucene fts_autoindex = yes fts_lucene = whitespace_chars=@. mailbox_alias_new = Sent Messages mailbox_alias_new2 = Sent Items mailbox_alias_new3 = SPAM mailbox_alias_new4 = Spam mailbox_alias_old = Sent mailbox_alias_old2 = Sent mailbox_alias_old3 = Junk mailbox_alias_old4 = Junk quota = dict:user::proxy::quotadict quota_grace = 10%% quota_rule = *:storage=1G quota_warning = storage=100%% quota-warning 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=90%% quota-warning 90 %u quota_warning4 = storage=85%% quota-warning 85 %u sieve = %Lh/sieve/dovecot.sieve sieve_before = /var/vmail/sieve/dovecot.sieve sieve_dir = %Lh/sieve sieve_global_dir = /var/vmail/sieve sieve_max_redirects = 30 trash = /etc/dovecot/dovecot-trash.conf.ext zlib_save = lz4 zlib_save_level = 6 } protocols = pop3 imap sieve lmtp service auth { inet_listener { address = 127.0.0.1 port = 12345 } unix_listener /var/spool/postfix/private/dovecot-auth { group = _postfix mode = 0666 user = _postfix } unix_listener auth-master { group = vmail mode = 0666 user = vmail } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service imap-login { process_limit = 500 service_count = 1 } service lmtp { executable = lmtp -L inet_listener lmtp { address = 127.0.0.1 port = 24 } process_min_avail = 5 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = _postfix mode = 0600 user = _postfix } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { service_count = 1 } service quota-status { client_limit = 2 executable = quota-status -p postfix inet_listener { address = 127.0.0.1 port = 12340 } } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } } ssl = required ssl_cert = </etc/ssl/dovecot.crt ssl_cipher_list = EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH ssl_dh_parameters_length = 2048 ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 syslog_facility = local5 userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol lda { auth_socket_path = /var/run/dovecot/auth-master lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_plugins = quota mailbox_alias acl zlib fts fts_lucene trash sieve notify push_notification postmaster_address = root } protocol lmtp { lmtp_save_to_detail_mailbox = yes log_path = syslog mail_plugins = quota sieve notify push_notification postmaster_address = postmaster recipient_delimiter = + } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep imap_idle_notify_interval = 29 mins imap_max_line_length = 4 M mail_max_userip_connections = 30 mail_plugins = quota mailbox_alias acl zlib fts fts_lucene trash imap_quota imap_acl imap_zlib antispam } protocol pop3 { mail_max_userip_connections = 30 mail_plugins = quota mailbox_alias acl zlib fts fts_lucene trash pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv }

2 1

making a plugin encrypt index data
by micah anderson 16 Dec '16

16 Dec '16

Hello, I'm encrypting mail on disk using a plugin[0], but the index files are not encrypted (specifically the dovecot.index.cache can be read). I want to do is encrypt index on disk, so I'm looking for how a plugin can achieve that by hooking into the right locations. Is that easily possible in a plugin? I can turn off those indexes by passing INDEX=MEMORY, but that isn't possible if I use sdbox/mdbox. thanks for any suggestions! micah 0. https://0xacab.org/riseuplabs/tofu-scrambler

2 1

v2.2.27 Debian packages on xi.dovecot.fi
by Markus Schönhaber 16 Dec '16

16 Dec '16

Hi, at the moment I see only packages named *2.2.26* on xi.dovecot.fi. Can we expect packages for v2.2.27 to appear there? -- Regards mks

2 2

public folder subscriptions sync issue with ldap user/group in dovecot-acl
by Mike Fröhner 16 Dec '16

16 Dec '16

Hello people, I am having an issue with 'doveadm sync'. I am currently trying to have two dovecots behind an haproxy (works fine). Therefore I configured these two dovecot server (imap-1/imap-2) to sync throught dsync. This works just partly. The sync of the maiboxes is fine, but the sync of the subscriptions file just works partly. It works for private folder subscription, but not completly for public folder subscription. I found two issues, if I am using LDAP (user/groups) in dovecot ACLs. 1. I would like to subscribe 2 public folder (public/test/test1 and public/test/test2). My user (ldaptestuser) is an ldap user and this user is member of the ldap group (ldaptestgroup) which does have all dovecot-acl rights on these folders. imap-1 # cat /opt/mail/_public/publictest/.test*/dovecot-acl group=ldaptestgroup akxeilprwts group=ldaptestgroup akxeilprwts I am now connecting with my mail client to imap-1 (throught haproxy) and the subscription to this folder works. The file which is written looks like: imap-1 # cat /opt/mail/ldaptestuser/Mails/subscriptions Sent publictest/test/test1 publictest/test/test2 Now I am awaiting the synch to imap-2, but the file which it written looks like: imap-2 # cat /opt/mail/ldaptestuser/Mails/subscriptions Sent If I modify the dovecot-acl for .test1 to imap-1 # cat /opt/mail/_public/publictest/.test1/dovecot-acl group=ldaptestgroup akxeilprwts user=ldaptestuser akxeilprwts and execute the subscription again - the synced file looks like: imap-2 # cat /opt/mail/ldaptestuser/Mails/subscriptions Sent publictest/test/test1 The subscription of public folder test2 will also been synced, if I add my ldaptestuser to the acl file for this folder. 2. Another issue is to unsubscribe a public folder. If I unsubscribe folder test1, it is written to subscriptions file on the imap where I am connected, but it is NOT synced even if my user and group are configured at the dovecot-acl file. If I then unsubscribe a not public folder (like Sent), the former unsubscribed folder test1 is (faulty) subscribed again. But both imap do have the same subscriptions for my ldaptestuser user. I do have the behavior with dovecot-2.2.26 and dovecot-2.2.27 on CentOS-7 (selinux disabled). If you need more information like the dovecot -n or some other stuff give me a short notice. Mike;

2 4

autoexpunge=30d does not works :(
by Peter Hodur 16 Dec '16

16 Dec '16

Hello, just upgraded to Dovecot 2.2.27 and altered dovecot.conf to contain autoexpunge directive for Spam mailbox (yes it's migrated from Courier 3 years ago): namespace inbox { prefix = INBOX. separator = . inbox = yes mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Spam { auto = subscribe special_use = \Junk autoexpunge = 30d } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } } As I hope, when user logout (POP3 or IMAP) or after Postfix delivers mail via LMTP, Dovecot should check Spam folder for emails, which have ctime older than 30 days and deletes this emails. Recently I have tried this. I have tried login / logout and nothing happend. I have tried turning log verbosity to debug but I can not find any note in debug.log according to this. I would like to kindly ask someone for which this directive works to help me, what is wrong with my config or how can I debug it and find error. Thanks Pete

2 1

Possible solr and indexing bug
by Netfront Customer Service 16 Dec '16

16 Dec '16

Bug Report: We had one of our solr server down for a while, then observed a lot of "Warning: fscking index file " actions. Version 2.2.27 with auto fsck. A follow up investigation shows direct one to one relationship between solr error and subsequent fscking. The fscking lasts for quite a long time (for at least an hour) when the mailbox is concurrently accessed. Thank you. Netfront Hong Kong Dec 16 07:48:14 dovecot: pop3(glhk44): Disconnected: Logged out top=0/0, retr=0/0, del=0/221, size=143216382 Dec 16 08:13:20 dovecot: pop3-login: Login: user=<glhk44>, method=PLAIN, rip=4.5.6.7, lip=1.2.3.4, mpid=99633, TLS, session=<JzQEcLtDEooqYqt/> Dec 16 08:13:23 dovecot: pop3(glhk44): Disconnected: Logged out top=0/0, retr=0/0, del=0/221, size=143216382 Dec 16 08:39:10 dovecot: indexer-worker(glhk44): Indexed 1 messages in INBOX Dec 16 08:46:01 dovecot: indexer-worker(glhk44): Indexed 1 messages in INBOX Dec 16 08:53:33 dovecot: indexer-worker(glhk44): Indexed 1 messages in INBOX Dec 16 08:57:53 dovecot: indexer-worker(glhk44): Indexed 1 messages in INBOX Dec 16 09:00:39 dovecot: indexer-worker(glhk44): Indexed 1 messages in INBOX Dec 16 09:05:00 dovecot: indexer-worker(glhk44): Indexed 1 messages in INBOX Dec 16 09:09:32 dovecot: indexer-worker(glhk44): Indexed 1 messages in INBOX Dec 16 09:21:44 dovecot: indexer-worker(glhk44): Indexed 1 messages in INBOX Dec 16 09:24:59 dovecot: indexer-worker(glhk44): Indexed 1 messages in INBOX Dec 16 09:29:52 dovecot: indexer-worker(glhk44): Indexed 1 messages in INBOX Dec 16 09:31:08 dovecot: indexer-worker(glhk44): Indexed 1 messages in INBOX Dec 16 09:44:18 dovecot: imap-login: Login: user=<glhk44>, method=PLAIN, rip=6.7.8.9, lip=1.2.3.4, mpid=22866, session=<0yNKtbxDwuTaZxfh> Dec 16 09:44:18 dovecot: imap-login: Login: user=<glhk44>, method=PLAIN, rip=6.7.8.9, lip=1.2.3.4, mpid=22867, session=<GWJLtbxDw+TaZxfh> Dec 16 09:44:18 dovecot: imap-login: Login: user=<glhk44>, method=PLAIN, rip=6.7.8.9, lip=1.2.3.4, mpid=22868, session=<WBtOtbxDxOTaZxfh> Dec 16 09:44:18 dovecot: imap-login: Login: user=<glhk44>, method=PLAIN, rip=6.7.8.9, lip=1.2.3.4, mpid=22869, session=<ueZOtbxDxeTaZxfh> Dec 16 09:44:29 dovecot: pop3-login: Login: user=<glhk44>, method=PLAIN, rip=6.7.8.9, lip=1.2.3.4, mpid=23090, TLS, session=<iGL6tbxDsGDaZxfh> Dec 16 09:44:30 dovecot: imap-login: Login: user=<glhk44>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=23093, secured, session=<wOkJtrxDpkl/AAAB> Dec 16 09:44:31 dovecot: imap(glhk44): Connection closed in=0 out=404 Dec 16 09:45:34 dovecot: pop3(glhk44): Disconnected: Logged out top=0/0, retr=11/3587310, del=0/232, size=146803474 Dec 16 09:45:38 dovecot: imap(glhk44): Logged out in=202 out=4336 Dec 16 09:46:17 dovecot: imap-login: Login: user=<glhk44>, method=PLAIN, rip=6.7.8.9, lip=1.2.3.4, mpid=27449, session=<zLltvLxD0OTaZxfh> Dec 16 09:46:19 dovecot: imap-login: Login: user=<glhk44>, method=PLAIN, rip=6.7.8.9, lip=1.2.3.4, mpid=27550, session=<FtiHvLxD0eTaZxfh> Dec 16 09:46:20 dovecot: imap(glhk44): copy from INBOX: box=Deleted Messages, uid=1690, msgid=<RkJNAAAAAAqAgMEKAAAACoAA7m1Hw9Fq0(a)ShawsCrabHouse.fbmta.com>, size=6759 Dec 16 09:46:20 dovecot: imap(glhk44): delete: box=INBOX, uid=124159, msgid=<20161215164627444789108(a)sensioinc.cn>, size=127611 Dec 16 09:46:20 dovecot: imap(glhk44): expunge: box=INBOX, uid=124159, msgid=<20161215164627444789108(a)sensioinc.cn>, size=127611 Dec 16 09:46:28 dovecot: imap(glhk44): Error: fts_solr: Indexing failed: 503 Service Unavailable < ----------------------- solr error Dec 16 09:46:28 dovecot: indexer-worker(glhk44): Error: fts_solr: Indexing failed: 503 Service Unavailable Dec 16 09:46:28 dovecot: indexer-worker(glhk44): Error: Mailbox Deleted Messages: Transaction commit failed: FTS transaction commit failed: backend deinit Dec 16 09:46:28 dovecot: imap(glhk44): copy from INBOX: box=Deleted Messages, uid=1691, msgid=<20161215003910.C4439ABB653(a)smtp3.mthai.in.th>, size=17896 Dec 16 09:46:29 dovecot: indexer-worker(glhk44): Indexed 1 messages in Deleted Messages Dec 16 09:46:30 dovecot: imap(glhk44): delete: box=INBOX, uid=124164, msgid=<00c701d256b1$3bbbcfd0$b3336f70$@com>, size=107064 Dec 16 09:46:30 dovecot: imap(glhk44): expunge: box=INBOX, uid=124164, msgid=<00c701d256b1$3bbbcfd0$b3336f70$@com>, size=107064 Dec 16 09:46:31 dovecot: imap(glhk44): delete: box=INBOX, uid=124175, msgid=<00f201d256c2$a4db5f10$ee921d30$@com>, size=3518208 Dec 16 09:46:31 dovecot: imap(glhk44): expunge: box=INBOX, uid=124175, msgid=<00f201d256c2$a4db5f10$ee921d30$@com>, size=3518208 Dec 16 09:46:31 dovecot: imap(glhk44): copy from INBOX: box=Deleted Messages, uid=1692, msgid=<1616393.344200011xAAAAA(a)enterprisecommunicationnetwork.com>, size=47100 Dec 16 09:46:31 dovecot: imap(glhk44): Error: Corrupted transaction log file /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index.log seq 1268: file size shrank (28960 < 29056) (sync_offset=29056) <-------- fscking starts Dec 16 09:46:31 dovecot: imap(glhk44): Error: Index /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index: Lost log for seq=1268 offset=24900: Failed to map file seq=1268 offset=24900..18446744073709551615 (ret=0) (initial_mapped=1, reason=Index mapped) Dec 16 09:46:31 dovecot: imap(glhk44): Warning: fscking index file /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index Dec 16 09:46:31 dovecot: imap(glhk44): Error: Index /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index: Lost log for seq=1268 offset=24900: Failed to map file seq=1268 offset=24900..18446744073709551615 (ret=0) (initial_mapped=1, reason=Index mapped) Dec 16 09:46:31 dovecot: imap(glhk44): Warning: fscking index file /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index Dec 16 09:46:31 dovecot: imap(glhk44): Error: Index /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index: Lost log for seq=1268 offset=24900: Failed to map file seq=1268 offset=24900..18446744073709551615 (ret=0) (initial_mapped=1, reason=Index mapped) Dec 16 09:46:31 dovecot: imap(glhk44): Warning: fscking index file /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index Dec 16 09:46:31 dovecot: imap(glhk44): Error: Index /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index: Lost log for seq=1268 offset=24900: Failed to map file seq=1268 offset=24900..18446744073709551615 (ret=0) (initial_mapped=1, reason=Index mapped) Dec 16 09:46:31 dovecot: imap(glhk44): Warning: fscking index file /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index Dec 16 09:46:31 dovecot: imap(glhk44): Error: Index /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index: Lost log for seq=1268 offset=24900: Failed to map file seq=1268 offset=24900..18446744073709551615 (ret=0) (initial_mapped=1, reason=Index mapped) Dec 16 09:46:31 dovecot: imap(glhk44): Warning: fscking index file /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index Dec 16 09:46:31 dovecot: imap(glhk44): Error: Index /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index: Lost log for seq=1268 offset=24900: Failed to map file seq=1268 offset=24900..18446744073709551615 (ret=0) (initial_mapped=1, reason=Index mapped) Dec 16 09:46:31 dovecot: imap(glhk44): Warning: fscking index file /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index Dec 16 09:46:31 dovecot: indexer-worker(glhk44): Indexed 1 messages in Deleted Messages Dec 16 09:46:31 dovecot: imap(glhk44): Error: Index /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index: Lost log for seq=1268 offset=24900: Failed to map file seq=1268 offset=24900..18446744073709551615 (ret=0) (initial_mapped=1, reason=Index mapped) Dec 16 09:46:31 dovecot: imap(glhk44): Warning: fscking index file /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index Dec 16 09:46:31 dovecot: imap(glhk44): Error: Index /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index: Lost log for seq=1268 offset=24900: Failed to map file seq=1268 offset=24900..18446744073709551615 (ret=0) (initial_mapped=1, reason=Index mapped) Dec 16 09:46:31 dovecot: imap(glhk44): Warning: fscking index file /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index Dec 16 09:46:31 dovecot: imap(glhk44): Logged out in=833 out=13350 Dec 16 09:46:31 dovecot: imap(glhk44): copy from INBOX: box=Deleted Messages, uid=1693, msgid=<1616408.344200011xAAAAA(a)enterprisecommunicationnetwork.com>, size=44739 Dec 16 09:46:31 dovecot: indexer-worker(glhk44): Error: Transaction log file /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index.log: marked corrupted Dec 16 09:46:32 dovecot: indexer-worker(glhk44): Indexed 1 messages in Deleted Messages Dec 16 09:46:32 dovecot: imap(glhk44): Error: Corrupted transaction log file /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index.log seq 1268: Invalid transaction log size (28960 vs 24900): /home/glhk44/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index.log (sync_offset=289 60)

1 0

Configuration problem for secure virtual server
by Karsten Malcher 15 Dec '16

15 Dec '16

Hello, i want to configure a virtual mailsystem on an debian server with exim and dovecot. Because it is running on a V-Server, i want to store everythink in a LUKS encrypted contrainer. So i created a group crypt with the members Debian-exim (107), dovecot, (other users with encrypted content) All mails should be stored in /mail in the mounted container. Dovecot has this configuration: ======================================= passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } userdb { driver = static args = uid=Debian-exim gid=mail home=/mountpoint/mail/%d/%n } mail_uid = Debian-exim first_valid_uid = 107 last_valid_uid = 107 first_valid_gid = 8 last_valid_gid = 9 mail_location = maildir:/mountpoint/mail/%d/%n ======================================= The /mountpoint has the following rights: drwxrwx--- 5 root crypt 4,0K Dez 13 19:05 mountpoint The subdirectories are all owned by Debian-exim: drwxrwx--- 4 Debian-exim mail 4,0K Okt 23 17:05 mail The group mail has id 8 and the group crypt has id 9 The Problem is that dovecot will not go into the directory with group crypt! I always get the following error message: Dec 15 18:03:25 pop3(karsten@server): Error: user karsten@server: Initialization failed: Initializing mail storage from mail_location setting failed: stat(/mountpoint/mail/server/karsten) failed: Permission denied (euid=107(Debian-exim) egid=8(mail) missing +x perm: /mnt, we're not in group 9(crypt), dir owned by 0:9 mode=0770) Dec 15 18:03:25 pop3(karsten@server): Error: Invalid user settings. Refer to server log for more information. But dovecot is definitely in the group crypt! What i am doing wrong? Regards Karsten

2 3

imap Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0 on Fedora 24
by Robert Kudyba 15 Dec '16

15 Dec '16

Seems to be related to https://bugzilla.redhat.com/show_bug.cgi?id=1189198 <https://bugzilla.redhat.com/show_bug.cgi?id=1189198>. Separate note the link to Overview of all dovecot.org mailing lists <http://dovecot.org/mailman/listinfo> http://dovecot.org/mailman/listinfo <http://dovecot.org/mailman/listinfo> is broken as are the images on the page. Here’s the backtrace. dovecot[12438]: imap(username): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x91ab2) [0x7ff01e98cab2] -> /usr/lib64/dovecot/libdovecot.so.0(+0x91bad) [0x7ff01e98cbad] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7ff01e925f41] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xaa1ed) [0x7ff01ecc01ed] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_mail_get_first_header+0xd2) [0x7ff01ecc0652] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_get_first_header+0x3d) [0x7ff01ec4c88d] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xbe717) [0x7ff01ecd4717] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xbe952) [0x7ff01ecd4952] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read+0x53) [0x7ff01e997653] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7ff01e99807d] -> /usr/lib64/dovecot/libdovecot.so.0(message_parse_header_next+0x72) [0x7ff01e9748e2] -> /usr/lib64/dovecot/libdovecot.so.0(+0x73d91) [0x7ff01e96ed91] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read+0x53) [0x7ff01e997653] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7ff01e99807d] -> /usr/lib64/dovecot/libdovecot.so.0(message_parse_header_next+0x72) [0x7ff01e9748e2] -> /usr/lib64/dovecot/libdovecot.so.0(message_parse_header+0x4f) [0x7ff01e97527f] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xb0d4b) [0x7ff01ecc6d4b] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xb2e63) [0x7ff01ecc8e63] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_storage_search_next_nonblock+0x114) [0x7ff01ecc9574] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_search_next_nonblock+0x22) [0x7ff01ec56d52] -> dovecot/imap(+0x221ff) [0x559b559541ff] -> dovecot/imap(imap_search_start+0xd1) [0x559b559545c1] -> dovecot/imap(cmd_search+0xd3) [0x559b55946063] -> dovecot/imap(command_exec+0xa5) [0x559b5594d5d5] -> dovecot/imap(+0x19852) [0x559b5594b852] -> dovecot/imap(+0x198de) [0x559b5594b8de] -> dovecot/imap(client_handle_input+0x1b5) [0x559b5594bce5] -> dovecot/imap(client_input+0x82) [0x559b5594c262] dovecot[12438]: imap(username): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x91ab2) [0x7f77a0cd7ab2] -> /usr/lib64/dovecot/libdovecot.so.0(+0x91bad) [0x7f77a0cd7bad] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f77a0c70f41] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xaa1ed) [0x7f77a100b1ed] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_mail_get_first_header+0xd2) [0x7f77a100b652] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_get_first_header+0x3d) [0x7f77a0f9788d] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xbe717) [0x7f77a101f717] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xbe952) [0x7f77a101f952] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read+0x53) [0x7f77a0ce2653] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7f77a0ce307d] -> /usr/lib64/dovecot/libdovecot.so.0(message_parse_header_next+0x72) [0x7f77a0cbf8e2] -> /usr/lib64/dovecot/libdovecot.so.0(+0x73d91) [0x7f77a0cb9d91] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read+0x53) [0x7f77a0ce2653] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7f77a0ce307d] -> /usr/lib64/dovecot/libdovecot.so.0(message_parse_header_next+0x72) [0x7f77a0cbf8e2] -> /usr/lib64/dovecot/libdovecot.so.0(message_parse_header+0x4f) [0x7f77a0cc027f] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xb0d4b) [0x7f77a1011d4b] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xb2e63) [0x7f77a1013e63] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_storage_search_next_nonblock+0x114) [0x7f77a1014574] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_search_next_nonblock+0x22) [0x7f77a0fa1d52] -> dovecot/imap(+0x221ff) [0x563492d1d1ff] -> dovecot/imap(imap_search_start+0xd1) [0x563492d1d5c1] -> dovecot/imap(cmd_search+0xd3) [0x563492d0f063] -> dovecot/imap(command_exec+0xa5) [0x563492d165d5] -> dovecot/imap(+0x19852) [0x563492d14852] -> dovecot/imap(+0x198de) [0x563492d148de] -> dovecot/imap(client_handle_input+0x1b5) [0x563492d14ce5] -> dovecot/imap(client_input+0x82) [0x563492d15262] dovecot --version 2.2.26.0 (23d1de6) dovecot -n # 2.2.26.0 (23d1de6): /etc/dovecot/dovecot.conf # OS: Linux 4.8.4-200.fc24.x86_64 x86_64 Fedora release 24 (Twenty Four) mail_fsync = always mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u mail_nfs_index = yes mail_nfs_storage = yes mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_cipher_list = PROFILE=SYSTEM ssl_key = # hidden, use -P to show it userdb { driver = passwd }

1 0

Maildir: do message files need to have a unique name across all directories?
by Gerben Wierda 15 Dec '16

15 Dec '16

While testing a new mail server I created a temporary account and filled its mailbox (Milder, dovecot) with the contents of another account. That means the actual message files in each account have identical names. Is that a problem? (I’m asking because I see some weird behaviour of visible/invisible messages and I wonder if this could have been the reason). G

2 1

Re: FW: postlogin script
by Aki Tuomi 15 Dec '16

15 Dec '16

On 15.12.2016 05:54, Michael Fox wrote: >> Hi! >> >> You need to use executable = script-login -- /path/post-login.sh -a -r -g > -s >> note the double-dash. it tells getopt to stop processing arguments. >> >> Aki > Thanks Aki. So that let's me call a single script with arguments. Great. > What if there is more than one script? I'm unable to guess what the > complete syntax would be for calling more than one script, some of which may > have their own arguments. Please keep responses in the list. Maybe you could, I don't know, call multiple scripts in your script? > Also, can you help with my other two questions (below): > >> Question 1: >> >> The examples show the following at the end of the post-login.sh script: >> exec "$@" >> >> My understanding is that this would exec each of the command line arguments >> to the post-login.sh script. But, there are no arguments sent to the >> post-login.sh script in the examples. So what is this line supposed to do? It will execute something dovecot wants in order to import the env variables set in your question 2. >> >> >> Question 2: >> >> One of the examples shows exporting some environmental variables, followed >> by the above exec line: >> >> export MAIL=maildir:/tmp/test >> >> export USERDB_KEYS="$USERDB_KEYS mail" >> >> exec "$@" >> >> Now, I'm really confused. Can someone explain step-by-step why this does >> anything at all? > Michael Aki

1 1

LDAP cache clear ??
by Günther J. Niederwimmer 14 Dec '16

14 Dec '16

Hello, I have a big problem to clear the ldap cache ? Can any tell me a way to clear the passwords in dovecot when I have to change a password in LDAP? auth_cache_ttl: is not working thanks for a answer, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer

3 4

postlogin script
by Michael Fox 14 Dec '16

14 Dec '16

I'm using the postlogin service, following the examples in the wiki. But I can't find any documentation on the behavior (what's allowed/not allowed) of the script-login binary. So, some questions: Question 1: The examples show the following at the end of the post-login.sh script: exec "$@" My understanding is that this would exec each of the command line arguments to the post-login.sh script. But, there are no arguments sent to the post-login.sh script in the examples. So what is this line supposed to do? Question 2: One of the examples shows exporting some environmental variables, followed by the above exec line: export MAIL=maildir:/tmp/test export USERDB_KEYS="$USERDB_KEYS mail" exec "$@" Now, I'm really confused. Can someone explain step-by-step why this does anything at all? Question 3: I'd like to be able to pass some information to the post-login.sh script, such as the service (%s), as a positional parameter. For example: executable = script-login /path/post-login.sh %Ls Or even more explicitly: executable = script-login /path/post-login.sh imap But it appears that the script-login binary is expecting only script names to be passed to it so that it can handle more than one script. Is there a way to pass arguments to the different scripts? Thanks, Michael

2 2

random mmap_anon Cannot allocate memory in log
by Ricardo Branco 14 Dec '16

14 Dec '16

I am getting lots of these error messages in the log file, any idea why? vsz_limit = 512M Dec 14 00:50:12 lmtp(it@wenn.com)(it@wenn.com): Error: mmap_anon(211079168) failed: Cannot allocate memory -- The information contained in or attached to this email is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorised to and must not disclose, copy, distribute, or retain any message or any part of it. If you have received an email in error, please contact the sender and delete the material from any computer. The contents of this email are not for publication unless specifically stated. Furthermore, the information contained in this message, and any attachment(s) thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of WENN or its subsidiaries and associated companies. We make every effort to keep our network free from viruses. However, you do need to check this e-mail and any attachments to it for viruses as we can take no responsibility for any computer virus which may be transferred by way of this e-mail. WENN Ltd: Registered Office: 4a Tileyard Studios, Tileyard Road, London, N7 9AH, England. Registered No: 4375163. Place of Registration: United Kingdom. USA Entertainment News Inc (d/b/a WENN): Registered Office: 352 7th Avenue, Suite 1105, New York, NY 10001-5657, USA The WENN name, design and related marks are trademarks of the WENN group of companies. (c) 2014 All Rights Reserved.

2 1

Reprocessing MDBOX account to reduce m.* file count
by Ricardo Branco 14 Dec '16

14 Dec '16

Is there a way to force dovecot to reprocess a user account to refile the m.* files based on new config for max file size. Ive got one account at 22k files due to a 2M split.

2 2

mailboxes and capitalisation
by Thorsten Hater 14 Dec '16

14 Dec '16

Dear all, I have set up a series of special-use mailboxes in the default namespace differing by capitalisation of the names, mainly to capture multiple mailboxes with autoexpunge namespace inbox { ... mailbox Trash { auto = no autoexpunge = 30d special_use = \Trash } mailbox trash { auto = no autoexpunge = 30d special_use = \Trash } ... } However, doveconf -n reports only one mailbox, namely the second (lowercase t) and autoexpunge does not trigger for the first one (capital T). Removing the special use flag has no influence. namespace inbox { inbox = yes list = children location = ... mailbox trash { auto = subscribe special_use = \Trash } ... prefix = INBOX. separator = . subscriptions = yes type = private } Is this the intended behaviour? The example 15-mailboxes.conf seems to indicate otherwise and I would prefer the ability to set autoexpunge for both Trash and trash. (dovecot 2.2.26 built from source on Debian 8.0) Best regards, Thorsten

4 4

Simple way to get mailbox size by folder.
by Vijay Sarvepalli 13 Dec '16

13 Dec '16

Is there a simple way to get each mailbox size using dovecot's IMAP interface? The GETQUOTAROOT and GETQUOTA seems to work with the full maildir size and not the individual folders. I am finding a simple way for the webmail client to show usage of each folder. Thanks Vijay

4 6

replication and backend vpopmail
by Havrla 13 Dec '16

13 Dec '16

Heloo, please I need "replicate" dovecot / dsync. Prerequisite: doveadm user '*' [Root @ joe ~] # doveadm user '' ' Error: User listing Returned failure Fatal: user listing failed It probably does not work because I have: userdb{ args = cache_key =% u quota_template quota_rule = = *: backend = q% driver = vpopmail } The manual is written: iterate_query = SELECT email as user FROM mail_user But does not specify how to connect to MySQL database if vpopmail How to do it ? To make it simple, vpopmail domain = DB table example domain example.com = table example_com [root@franta ~]# mysql vpopmail MariaDB [vpopmail]> desc lhotkanet_cz; +-----------------+-----------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +-----------------+-----------+------+-----+---------+-------+ | pw_name | char(32) | NO | PRI | | | | pw_passwd | char(40) | YES | | NULL | | | pw_uid | int(11) | YES | | NULL | | | pw_gid | int(11) | YES | | NULL | | | pw_gecos | char(48) | YES | | NULL | | | pw_dir | char(160) | YES | | NULL | | | pw_shell | char(20) | YES | | NULL | | | pw_clear_passwd | char(16) | YES | | NULL | | +-----------------+-----------+------+-----+---------+-------+ 8 rows in set (0.00 sec) MariaDB [vpopmail]> Thank you. Havrla

1 0

Dovcot issues
by The Doctor 13 Dec '16

13 Dec '16

I am seeing issues with Thunderbird IMAP and POP3 and Entourage issues of non-deleting / repeating e-mail. Any one else gettting that? -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca God,Queen and country!Never Satan President Republic!Beware AntiChrist rising! http://www.fullyfollow.me/rootnl2k Look at Psalms 14 and 53 on Atheism Merry Christmas 2016 and Happy New Year 2017

2 4