- dovecot - dovecot.org

FTS Solr = No search results for Body Search - (serious issue, please help)
by Kevin Laurie 24 Feb '15

24 Feb '15

Hi, I have been trying to get FTS to work with dovecot. When I search from my client (roundcube webmail) I am able to get results for From, To and Subject fields expect Body on my Apache Solr engine. Could this be a schema related problem? This is output for the Subject: 8025 [main] INFO org.eclipse.jetty.server.AbstractConnector ? Started SocketConnector@0.0.0.0:8983 9001 [searcherExecutor-6-thread-1] INFO org.apache.solr.core.SolrCore ? [collection1] Registered new searcher Searcher@7dfcb28[collection1] main{StandardDirectoryReader(segments_4g:789:nrt _6z(4.10.2):C16672 _44(4.10.2):C6996 _56(4.10.2):C3672 _64(4.10.2):C4000 _8y(4.10.2):C3143 _7v(4.10.2):C673 _7b(4.10.2):C830 _85(4.10.2):C3754 _7k(4.10.2):C3975 _8f(4.10.2):C1516 _7n(4.10.2):C67 _9a(4.10.2):C677 _8o(4.10.2):C38 _8v(4.10.2):C40 _9l(4.10.2):C2705 _8x(4.10.2):C43 _90(4.10.2):C16 _9b(4.10.2):C22 _9d(4.10.2):C44 _9f(4.10.2):C84 _9h(4.10.2):C83 _9i(4.10.2):C356 _9j(4.10.2):C84 _9k(4.10.2):C296 _9m(4.10.2):C83 _9n(4.10.2):C57)} 155092 [qtp433527567-13] INFO org.apache.solr.core.SolrCore ? [collection1] webapp=/solr path=/select params={sort=uid+asc&fl=uid,score&q=subject:"price"&fq=%2Bbox:ac553604f7314b54e62300003555fc1a+%2Buser:"user(a)domain.net"&rows=107178} hits=1237 status=0 QTime=1918 This is output for the From / To: 3374412 [qtp1728413448-16] INFO org.apache.solr.core.SolrCore ? [collection1] webapp=/solr path=/select params={sort=uid+asc&fl=uid,score&q=subject:"dave"+OR+from:"dave"+OR+to:"dave"&fq=%2Bbox:ac553604f7314b54e62300003555fc1a+%2Buser:"bob(a)email.net"&rows=107161} hits=571 status=0 QTime=706 3379438 [qtp1728413448-18] INFO org.apache.solr.servlet. SolrDispatchFilter ? [admin] webapp=null path=/admin/info/logging params={_=1424714397078&since=1424711021771&wt=json} status=0 QTime=0 When I search the body text, the client searches for a little time before it stops and I have no results .

1 0

New maildir default permissions
by Jan Krcmar 24 Feb '15

24 Feb '15

hi, i'm trying to configure dovecot to create maildir directories of new users with specific permissions. i'm ending with this dovecot: auth: Debug: sql(blabla,::1,<HJ/.>): query: SELECT data_user.username, data_user.password, 500 AS userdb_uid, 500 AS userdb_gid, 500 as mail_access_groups, 750 as mode, '/var/mail/' AS userdb_home, concat('maildir:/var/mail/', data_ldap.maildir) AS userdb_mail, concat('*:bytes=', data_ldap.quota) AS userdb_quota_rule FROM data_user LEFT JOIN data_ldap ON data_user.ldap_id=data_ldap.id WHERE lower(username) = 'blabla' AND active=true dovecot: auth: Debug: client passdb out: OK#0111#011user=blabla#011mail_access_groups=500#011mode=750 dovecot: auth: Debug: master in: REQUEST#0111075576833#0115939#0111#. dovecot: auth: Debug: prefetch(blabla,::1,<HJ/.>): success dovecot: auth: Debug: master userdb out: USER#0111075576833#011blabla#011uid=500#011gid=500#011home=/var/mail/#011mail=maildir:/var/mail/b/blabla#011quota_rule=*:bytes=100M dovecot: imap-login: Login: user=<blabla>, method=PLAIN, rip=::1, lip=::1, mpid=5940, secured, session=<HJ/.> dovecot: imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so dovecot: imap: Debug: Added userdb setting: mail=maildir:/var/mail/b/blabla dovecot: imap: Debug: Added userdb setting: plugin/quota_rule=*:bytes=100M dovecot: imap(blabla): Debug: Effective uid=500, gid=500, home=/var/mail/ dovecot: imap(blabla): Debug: Quota root: name=User quota backend=maildir args= dovecot: imap(blabla): Debug: Quota rule: root=User quota mailbox=* bytes=104857600 messages=0 dovecot: imap(blabla): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/b/blabla dovecot: imap(blabla): Debug: maildir++: root=/var/mail/b/blabla, index=, control=, inbox=/var/mail/b/blabla, alt= dovecot: imap(blabla): Debug: Namespace : /var/mail/b/blabla doesn't exist yet, using default permissions dovecot: imap(blabla): Debug: Namespace : Using permissions from /var/mail/b/blabla: mode=0700 gid=-1 could anyone tell me, how to set the default permissions? it uses mode=700, and i need mode=750 instead i'm using dovecot 2.1.17 thanks fous

1 0

Dovecot 2.2.15, Panic: array.h: line 197 (array_idx_i): assertion failed: (idx * array->element_size < array->buffer->used)
by thomas.hofmann＠post.ch 24 Feb '15

24 Feb '15

Hi all Version: 2.2.15 OS: SLES11 SP3 x86_64 Problem with replication for some users: Log Server 1: Feb 24 09:29:42 v063ik dovecot: dsync-local(user(a)domain.com): Error: read(v063il.pnet.ch) failed: <no error> Log Server 2: Feb 24 09:29:42 v063il dovecot: dsync-server(user(a)domain.com): Panic: file ../../../src/lib/array.h: line 197 (array_idx_i): assertion failed: (idx * array->element_size < array->buffer->used) Feb 24 09:29:42 v063il dovecot: dsync-server(user(a)domain.com): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x75f63) [0x7fac77eeaf63] -> /usr/lib64/dovecot/libdovecot.so.0(+0x75ff6) [0x7fac77eeaff6] -> /usr/lib64/dovecot/libdovecot.so.0(+0x27595) [0x7fac77e9c595] -> /usr/lib64/dovecot/modules/lib01_acl_plugin.so(+0x71ba) [0x7fac772c41ba] -> /usr/lib64/dovecot/modules/lib01_acl_plugin.so(acl_attribute_iter_next+0x64) [0x7fac772c5bb4] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xb11ca) [0x7fac782071ca] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_storage_mailbox_delete_pre+0xd8) [0x7fac782074a8] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_storage_mailbox_delete+0x9) [0x7fac782075a9] -> /usr/lib64/dovecot/modules/lib15_notify_plugin.so(+0x2080) [0x7fac76eaa080] -> /usr/lib64/dovecot/modules/lib01_acl_plugin.so(+0xea66) [0x7fac772cba66] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_delete+0x2f) [0x7fac781db70f] -> dovecot/doveadm-server [10.1.100.49 user(a)domain.com recv_mailbox_tree_deletes](dsync_brain_mailbox_tree_sync_change+0x319) [0x7fac786b6249] -> dovecot/doveadm-server [10.1.100.49 user(a)domain.com recv_mailbox_tree_deletes](dsync_brain_recv_mailbox_tree_deletes+0x212) [0x7fac786b54d2] -> dovecot/doveadm-server [10.1.100.49 user(a)domain.com recv_mailbox_tree_deletes](dsync_brain_run+0x5eb) [0x7fac786b28db] -> dovecot/doveadm-server [10.1.100.49 user(a)domain.com recv_mailbox_tree_deletes](+0x1ef7d) [0x7fac786b2f7d] -> dovecot/doveadm-server [10.1.100.49 user(a)domain.com recv_mailbox_tree_deletes](+0x3203f) [0x7fac786c603f] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x49) [0x7fac77efcc29] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xb4) [0x7fac77efde24] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7fac77efccc9] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fac77efcd58] -> dovecot/doveadm-server [10.1.100.49 user(a)domain.com recv_mailbox_tree_deletes](+0x104c0) [0x7fac786a44c0] -> dovecot/doveadm-server [10.1.100.49 user(a)domain.com recv_mailbox_tree_deletes](+0x135c3) [0x7fac786a75c3] -> dovecot/doveadm-server [10.1.100.49 user(a)domain.com recv_mailbox_tree_deletes](+0x1d3d2) [0x7fac786b13d2] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x49) [0x7fac77efcc29] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xb4) [0x7fac77efde24] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7fac77efccc9] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fac77efcd58] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fac77ea14d3] Feb 24 09:29:42 v063il dovecot: dsync-server(user(a)domain.com): Fatal: master: service(doveadm): child 12663 killed with signal 6 (core dumped) Backtrace of core dump of server 2: v063il:/usr/lib64/dovecot # gdb /usr/lib/dovecot/doveadm-server /data/vmail/epost.ch/1003539/core GNU gdb (GDB) SUSE (7.5.1-0.7.29) Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-suse-linux". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/dovecot/doveadm-server...done. [New LWP 12509] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Missing separate debuginfo for /lib64/libbz2.so.1 Try: zypper install -C "debuginfo(build-id)=9d16aacb0b213c6ff10b2f162549f2cefee24697" Missing separate debuginfo for /lib64/libgcc_s.so.1 Try: zypper install -C "debuginfo(build-id)=3b149eccd897f1f37dce50ad22614043eba757a2" Core was generated by `dovecot/doveadm-server'. Program terminated with signal 6, Aborted. #0 0x00007fe4cc640885 in *__GI_raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 64 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory. (gdb) bt full #0 0x00007fe4cc640885 in *__GI_raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 pid = <optimized out> selftid = <optimized out> #1 0x00007fe4cc641e61 in *__GI_abort () at abort.c:92 act = {__sigaction_handler = {sa_handler = 0x1, sa_sigaction = 0x1}, sa_mask = {__val = {140620662524321, 32, 4294967295, 33, 140620662296361, 140620658199328, 140620670309600, 206158430224, 4294967295, 140736446740304, 157882997, 2994704, 140620661813248, 4294967295, 33, 0}}, sa_flags = -856089480, sa_restorer = 0x7fe400000001} sigs = {__val = {32, 0 <repeats 15 times>}} #2 0x00007fe4cc9fcf82 in default_fatal_finish (type=<optimized out>, status=0) at failures.c:202 backtrace = 0x7fe4cee02c90 "/usr/lib64/dovecot/libdovecot.so.0(+0x75f63) [0x7fe4cc9fcf63] -> /usr/lib64/dovecot/libdovecot.so.0(+0x75ff6) [0x7fe4cc9fcff6] -> /usr/lib64/dovecot/libdovecot.so.0(+0x27595) [0x7fe4cc9ae595] -> /usr/"... #3 0x00007fe4cc9fcff6 in i_internal_fatal_handler (ctx=0x7fffc1ea3890, format=<optimized out>, args=<optimized out>) at failures.c:666 status = 0 #4 0x00007fe4cc9ae595 in i_panic (format=<optimized out>) at failures.c:276 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fffc1ea3970, reg_save_area = 0x7fffc1ea38b0}} #5 0x00007fe4cbdd61ba in array_idx_i (idx=<optimized out>, array=<optimized out>) at ../../../src/lib/array.h:197 __FUNCTION__ = "array_idx_i" #6 acl_default_object_list_next (iter=<optimized out>, rights_r=<optimized out>) at acl-api.c:216 No locals. #7 0x00007fe4cbdd7bb4 in acl_attribute_iter_next_acl (aiter=<optimized out>) at acl-attributes.c:193 No locals. #8 acl_attribute_iter_next (iter=0x7fe4cede87f0) at acl-attributes.c:219 key = 0x0 #9 0x00007fe4ccd191ca in mailbox_delete_all_attributes (t=0x7fe4ceddbf80, type=MAIL_ATTRIBUTE_TYPE_SHARED) at index-storage.c:632 iter = 0x7fe4cede87f0 key = <optimized out> ret = 0 #10 0x00007fe4ccd194a8 in mailbox_expunge_all_data (box=<optimized out>) at index-storage.c:670 No locals. #11 index_storage_mailbox_delete_pre (box=0x7fe4cede5cb0) at index-storage.c:707 status = {messages = 3435634784, recent = 32740, unseen = 3470679216, uidvalidity = 32740, uidnext = 3470679216, first_unseen_seq = 32740, first_recent_uid = 1, last_cached_seq = 0, highest_modseq = 140620699884664, highest_pvt_modseq = 140620668173509, keywords = 0x0, permanent_flags = MAIL_FLAGGED, permanent_keywords = 0, allow_new_keywords = 0, nonpermanent_modseqs = 0, no_modseq_tracking = 0, have_guids = 0, have_save_guids = 0, have_only_guid128 = 0} #12 0x00007fe4ccd195a9 in index_storage_mailbox_delete (box=0x30dd) at index-storage.c:764 ret = <optimized out> #13 0x00007fe4cb9bc080 in notify_mailbox_delete (box=0x7fe4cede5cb0) at notify-storage.c:231 lbox = 0x7fe4cede65f0 #14 0x00007fe4cbddda66 in acl_mailbox_delete (box=0x7fe4cede5cb0) at acl-mailbox.c:190 ret = 0 #15 0x00007fe4ccced70f in mailbox_delete (box=0x7fe4cede5cb0) at mail-storage.c:1357 ret = <optimized out> #16 0x00007fe4cd1c8249 in dsync_brain_mailbox_tree_sync_change (brain=0x7fe4cedbc7d0, change=0x7fe4cedd5c60) at dsync-brain-mailbox-tree-sync.c:182 box = 0x7fe4cede5cb0 destbox = <optimized out> errstr = <optimized out> func_name = 0x7fe4cd1dedf5 "mailbox_delete" storage_name = <optimized out> error = <optimized out> ret = 1 __FUNCTION__ = "dsync_brain_mailbox_tree_sync_change" #17 0x00007fe4cd1c74d2 in dsync_brain_mailbox_trees_sync (brain=<optimized out>) at dsync-brain-mailbox-tree.c:295 No locals. #18 dsync_brain_recv_mailbox_tree_deletes (brain=0x7fe4cedbc7d0) at dsync-brain-mailbox-tree.c:471 node = 0x0 status = 0x7fe4cd1de985 "not found" deletes = 0x7fe4cedc32b0 i = 30 count = 30 sep = <optimized out> __FUNCTION__ = "dsync_brain_recv_mailbox_tree_deletes" #19 0x00007fe4cd1c48db in dsync_brain_run_real (changed_r=<optimized out>, brain=<optimized out>) at dsync-brain.c:568 No locals. #20 dsync_brain_run (brain=0x7fe4cedbc7d0, changed_r=0x7fffc1ea3d5f) at dsync-brain.c:608 _data_stack_cur_id = 5 ret = true #21 0x00007fe4cd1c4f7d in dsync_brain_run_io (context=<optimized out>) at dsync-brain.c:89 brain = 0x7fe4cedbc7d0 changed = false try_pending = true #22 0x00007fe4cd1d803f in dsync_ibc_stream_input (ibc=0x7fe4cedba7b0) at dsync-ibc-stream.c:199 No locals. #23 0x00007fe4cca0ec29 in io_loop_call_io (io=0x7fe4cedba660) at ioloop.c:498 ioloop = 0x7fe4ced58110 t_id = 4 __FUNCTION__ = "io_loop_call_io" #24 0x00007fe4cca0fe24 in io_loop_handler_run_internal (ioloop=<optimized out>) at ioloop-epoll.c:220 ctx = 0x7fe4ceda5920 event = 0x7fe4ceda5a60 list = 0x7fe4cedba640 io = 0x30dd tv = {tv_sec = 59, tv_usec = 997329} msecs = <optimized out> ret = <optimized out> call = false __FUNCTION__ = "io_loop_handler_run_internal" #25 0x00007fe4cca0ecc9 in io_loop_handler_run (ioloop=0x30dd) at ioloop.c:545 No locals. #26 0x00007fe4cca0ed58 in io_loop_run (ioloop=0x7fe4ced58110) at ioloop.c:522 __FUNCTION__ = "io_loop_run" #27 0x00007fe4cd1b64c0 in cmd_dsync_server_run (_ctx=0x7fe4ceda4310, user=0x7fe4cedb0d60) at doveadm-dsync.c:1043 ibc = 0x7fe4cedba7b0 brain = 0x7fe4cedbc7d0 temp_prefix = <optimized out> state_str = 0x0 sync_type = <optimized out> name = 0x7fe4ced7c730 "SSL 10.1.100.49" process_title_prefix = 0x7fe4ced46da8 "10.1.100.49 " #28 0x00007fe4cd1b95c3 in doveadm_mail_next_user (ctx=0x7fe4ceda4310, input=<optimized out>, error_r=0x7fffc1ea3f00) at doveadm-mail.c:314 error = <optimized out> ip = <optimized out> ret = 0 __FUNCTION__ = "doveadm_mail_next_user" #29 0x00007fe4cd1c33d2 in doveadm_mail_cmd_server_run (input=<optimized out>, ctx=<optimized out>, conn=<optimized out>) at client-connection.c:123 No locals. #30 client_handle_command (args=<optimized out>, conn=<optimized out>) at client-connection.c:232 ctx = 0x7fe4ceda4310 flags = <optimized out> cmd_name = <optimized out> input = {module = 0x0, service = 0x7fe4cd1db44b "doveadm", username = 0x7fe4ced44679 "user(a)domain.com", session_id = 0x0, local_ip = {family = 2, u = { ip6 = {__in6_u = {__u6_addr8 = "\n\001d2", '\000' <repeats 11 times>, __u6_addr16 = {266, 12900, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {845414666, 0, 0, 0}}}, ip4 = {s_addr = 845414666}}}, remote_ip = {family = 2, u = {ip6 = {__in6_u = {__u6_addr8 = "\n\001d1", '\000' <repeats 11 times>, __u6_addr16 = {266, 12644, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {828637450, 0, 0, 0}}}, ip4 = {s_addr = 828637450}}}, local_port = 24042, remote_port = 43404, userdb_fields = 0x0, flags_override_add = (unknown: 0), flags_override_remove = (unknown: 0), no_userdb_lookup = 0} argc = <optimized out> #31 client_connection_input (conn=0x7fe4ced77dd0) at client-connection.c:345 args = <optimized out> _data_stack_cur_id = 3 line = <optimized out> ok = <optimized out> #32 0x00007fe4cca0ec29 in io_loop_call_io (io=0x7fe4ced76d80) at ioloop.c:498 ioloop = 0x7fe4ced4b730 t_id = 2 __FUNCTION__ = "io_loop_call_io" #33 0x00007fe4cca0fe24 in io_loop_handler_run_internal (ioloop=<optimized out>) at ioloop-epoll.c:220 ctx = 0x7fe4ced57f80 event = 0x7fe4ced50f10 list = 0x7fe4ced76de0 io = 0x30dd tv = {tv_sec = 2147483, tv_usec = 0} msecs = <optimized out> ret = <optimized out> call = false __FUNCTION__ = "io_loop_handler_run_internal" #34 0x00007fe4cca0ecc9 in io_loop_handler_run (ioloop=0x30dd) at ioloop.c:545 No locals. #35 0x00007fe4cca0ed58 in io_loop_run (ioloop=0x7fe4ced4b730) at ioloop.c:522 __FUNCTION__ = "io_loop_run" #36 0x00007fe4cc9b34d3 in master_service_run (service=0x7fe4ced4b5c0, callback=0x30dd) at master-service.c:566 No locals. #37 0x00007fe4cd1c3bbb in main (argc=1, argv=0x7fe4ced4b390) at main.c:92 set_roots = {0x7fe4cd3e8cc0 <doveadm_setting_parser_info>, 0x0} error = 0x7fe4cd1b60b0 <_start> "1\355I\211\321^H\211\342H\203\344\360PTL\213\005*.#" (gdb) Thanks for help. Thom

1 0

Permissions problem with mdbox maildir
by Emanuel Evans 24 Feb '15

24 Feb '15

Hi! Apologies if this has come up before, or if this is a duplicate posting (I tried posting before but I think it got lost). Anyways, I'm trying to set up an IMAP server with dovecot, and everything seems to be more or less working except that I periodically see error messages like this in my logs: Feb 18 01:01:15 stark dovecot: lmtp(31956, root(a)aleme.nu) Error: link(/var/decrypted/vmail/aleme.nu/root/mailboxes/INBOX/dbox-Mails/dovecot.index, /var/decrypted/vmail/aleme.nu/root/mailboxes/INBOX/dbox-Mails/dovecot.index.backup.tmp) failed: Operation not permitted I'm assuming it's a permissions problem with my maildir, but I can't figure out what the relevant process is in order to fix it. The maildir is owned by vmail with permissions set to 700; here is the output of dovecot -n: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.8 fuse.encfs mail_gid = vmail mail_location = mdbox:/var/decrypted/vmail/%d/%n mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { antispam_allow_append_to_spam = no antispam_dspam_args = --user;root;deliver=;--source=error;--client antispam_spam = Junk antispam_trash = Trash sieve = ~/.dovecot.sieve sieve_before = /var/lib/dovecot/sieve/before sieve_dir = ~/sieve sieve_global_dir = /var/lib/dovecot/sieve/global } protocols = " imap lmtp sieve" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } service_count = 1 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail } ... <ssl stuff> ... userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n driver = static } protocol lmtp { mail_plugins = " sieve" } protocol imap { mail_plugins = " antispam" } As you can see, I'm keeping the maildir on an encfs-encrypted volume, in case that's relevant. Please let me know any ideas for why this might be happening. Thanks in advance! Emanuel

2 4

[Dovecot] Sieve vacation not working
by Phill Edwards 24 Feb '15

24 Feb '15

I've been trying all night to get vacation working in my .dovecot.sieve file. The way our email works is we have one account on dovecot which serves my mail and my wife's and we use procmail and sieve to put the emails in different folders depending on who it's for. I'm trying to set up a vacation reply on my wife's email address (aaaaaaaa@optus* below) so people can update to her new address. Here's my file with the email addresses masked: require ["fileinto", "vacation"]; if address :is "to" "xxxxxxxxxxxxxxx(a)ozemail.com.au" { fileinto "Phill_OzEmail_Folder"; stop; } elsif address :is "to" "yyyyyyyyyyyyyyyyy(a)optusnet.com.au" { fileinto "Phill_Optus_Folder"; stop; } elsif address :matches "to" "aaaaaaaa@optus*" { vacation "Please update my email address to bbbbbbbbb(a)exemail.com.au"; fileinto "Sarah_Optus_Folder"; stop; } else { keep; stop; } The problem I'm having is that no auto-replies are sent. I removed .dovecot.lda-dupes and that didn't help; so then I touched it and now it's a 0 byte file and that didn't help. There is no dovecot.sieve.err file and I can't see anything in /var/log/dovecot.log which gives any message about why this wouldn't work. The emails to aaaaaaa@optus* get filed into the right folder so I know the matching is working. I've also tried a reject recipe and that worked fine, so I know that it can send an email if it chooses to. So it's a complete black box mystery as to why it just won't send a reply. Regards, Phill

5 9

indexing mails required?
by Kevin Laurie 23 Feb '15

23 Feb '15

Hi, I just got solr working and would like to do FTS. Do I need to index? I have 20GB email account that is getting indexed using the following command(it seems to be taking a while):- doveadm index -u user(a)domain.net INBOX Is this common? Please advise Thanks Kevin

1 0

Dovecot 2.1.7 random login fails
by Dario Meloni 23 Feb '15

23 Feb '15

From: Dario Meloni <mellon85(a)gmail.com> Subject: Dovecot 2.1.7 intermittent login issues Newsgroups: gmane.mail.imap.dovecot X-Draft-Attribution: X-Draft-Attribution-Author: X-Draft-Attribution-Date: X-Draft-Attribution-Id: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Hello, Dovecot version 2.1.7, running in a debian:stable docker container. I am having a weird issues with dovecot failing randomly sometimes with pop3 sometimes with imap but only in case of SSL for example from the logs I can see this: Feb 17 07:48:32 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write session ticket A [172.17.2.5] Feb 17 07:48:32 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [172.17.2.5] Feb 17 07:48:32 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write finished A [172.17.2.5] Feb 17 07:48:32 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [172.17.2.5] Feb 17 07:48:32 imap-login: Warning: SSL: where=0x20, ret=1: SSL negotiation finished successfully [172.17.2.5] Feb 17 07:48:32 imap-login: Warning: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [172.17.2.5] Feb 17 07:48:32 imap-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [172.17.2.5] Feb 17 07:48:32 pop3-login: Fatal: read(ssl-params) failed: Permission denied and from the debug log: Feb 17 07:48:32 auth: Debug: auth client connected (pid=21) Feb 17 07:48:32 auth: Debug: client in: AUTH 1 PLAIN service=pop3 session=[REDACTED] lip=172.17.2.11 rip=172.17.2.5 lport=110 rport=38967 resp=[REDACTED] Feb 17 07:48:32 auth-worker(16): Debug: pam(test,172.17.2.5): lookup service=dovecot Feb 17 07:48:32 auth-worker(16): Debug: pam(test,172.17.2.5): #1/1 style=1 msg=Password: Feb 17 07:48:32 auth: Debug: client out: OK 1 user=test Feb 17 07:48:32 auth: Debug: master in: REQUEST 951582721 21 1 1fb51b26a3656db28fa3d333bd7568a4 Feb 17 07:48:32 auth: Debug: passwd(test,172.17.2.5,[REDACTED]): lookup Feb 17 07:48:32 auth: Debug: master out: USER 951582721 test system_groups_user=test uid=1000 gid=8 home=/home/test Feb 17 07:48:32 pop3(test): Debug: Effective uid=1000, gid=8, home=/home/ test Feb 17 07:48:32 pop3(test): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=/var/mail/test Feb 17 07:48:32 pop3(test): Debug: fs: root=/home/test/mail, index=, control=, inbox=/var/mail/test, alt= Feb 17 07:48:32 pop3(test): Debug: Namespace : Using permissions from / home/test/mail: mode=0700 gid=-1 Feb 17 07:48:32 auth: Debug: auth client connected (pid=23) I checked in the code and found that the issue is from ssl-params.c apparently not being able to read from a file descriptor that it already opened... Any idea?

2 4

Using Dovecot IMAPC to collect mail
by Иван Колосов 23 Feb '15

23 Feb '15

Hi list. I was looking at Dovecot's imapc feature for some time. I am aiming to use Dovecot with imapc as a kind of "store-and-forward" proxy. If I understand imapc correctly, there are two connections at work — one between the client and Dovecot and one between Dovecot and backend. When the client asks Dovecot for mail, Dovecot will retrieve mail from the backend and then send it to the client. So the question is, is it possible to configure Dovecot with imapc in such a way that it would store the mail it passes to the client? Should I use mail filter plugin to do this? I am also quite confused about authentication in this setting. Let's assume we use 'plain' authentication mechanism, then what happens? I guess that the client just sends Dovecot its credentials, and Dovecot tries to authenticate with them at the backed, responding to the client accordingly. Is this true? Thanks.

1 1

Why doesn't index see my #ARCHIVE/ namespace?
by Larry Rosenman 22 Feb '15

22 Feb '15

thebighonker.lerctr.org /home/ler $ doveadm -D -v index \#ARCHIVE/2015/01/INBOX doveadm(ler): Debug: Loading modules from directory: /usr/local/lib/dovecot doveadm(ler): Debug: Module loaded: /usr/local/lib/dovecot/lib20_fts_plugin.so doveadm(ler): Debug: Module loaded: /usr/local/lib/dovecot/lib21_fts_lucene_plugin.so doveadm(ler): Debug: Module loaded: /usr/local/lib/dovecot/lib90_stats_plugin.so doveadm(ler): Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm doveadm(ler): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: Undefined symbol "acl_user_module" (this is usually intentional, so just ignore this message) doveadm(ler): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: Undefined symbol "expire_set_lookup" (this is usually intentional, so just ignore this message) doveadm(ler): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: Undefined symbol "quota_user_module" (this is usually intentional, so just ignore this message) doveadm(ler): Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib10_doveadm_sieve_plugin.so doveadm(ler): Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so doveadm(ler): Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so doveadm(ler): Debug: Effective uid=1002, gid=1002, home=/home/ler doveadm(ler): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=~/mail/INBOX doveadm(ler): Debug: fs: root=/home/ler/mail, index=, indexpvt=, control=, inbox=/home/ler/mail/INBOX, alt= doveadm(ler): Debug: Namespace archive: type=private, prefix=#ARCHIVE/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=mbox:~/MAILARCHIVE doveadm(ler): Debug: mbox: INBOX defaulted to /home/ler/MAILARCHIVE/inbox doveadm(ler): Debug: fs: root=/home/ler/MAILARCHIVE, index=, indexpvt=, control=, inbox=/home/ler/MAILARCHIVE/inbox, alt= doveadm(ler): Debug: Ignoring unknown cache field: pop3.order doveadm(ler): Debug: Ignoring unknown cache field: binary.parts doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable doveadm(ler): Info: #ARCHIVE/2015/01/INBOX: Caching mails seq=3..3366 doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable 3364/3364 thebighonker.lerctr.org /home/ler $ thebighonker.lerctr.org /home/ler $ doveconf -n >/tmp/doveconf.out thebighonker.lerctr.org /home/ler $ cat /tmp/doveconf.out # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.6 (3e924b1b6c5c+) # OS: FreeBSD 10.1-STABLE amd64 auth_default_realm = lerctr.org auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org auth_username_format = %Ln lda_mailbox_autocreate = yes lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_attribute_dict = file:mail/.imap/dovecot-mail-attributes mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_plugins = fts fts_lucene stats mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate vacation-seconds editheader namespace archive { hidden = no inbox = no list = yes location = mbox:~/MAILARCHIVE prefix = "#ARCHIVE/" separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox Junk { special_use = \Junk } mailbox SENT { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam } plugin { fts = lucene fts_autoindex = yes fts_lucene = whitespace_chars=@. normalize no_snowball recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +editheader +vacation-seconds stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0666 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </etc/ssl/certs/CHAIN.crt ssl_key = </etc/ssl/certs/thebighonker.lerctr.org.key.open userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = fts fts_lucene sieve } protocol lda { mail_plugins = fts fts_lucene sieve } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags imap_metadata = yes mail_max_userip_connections = 50 mail_plugins = fts fts_lucene stats imap_stats } thebighonker.lerctr.org /home/ler $ -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com US Mail: 108 Turvey Cove, Hutto, TX 78634-5688

1 0

multiple ldap userdb and passdb
by lejeczek 20 Feb '15

20 Feb '15

hi everybody. I wonder if such a scenario is possible. if yes would I configure multiple passdb using ldap driver or within one clause set up multiple args? How would this work? many thanks P.

3 5

Dovecot Director Issue/Bug when host=""
by Julian De Marchi 20 Feb '15

20 Feb '15

heya-- Been playing with dovecot today as I was learning about the features I haven't used yet like the director/proxy stuff. I setup a basic dovecot stack today which is 1 director and 1 IMAP dovecot server behind it. I have one user setup in MySQL and when I first changed from proxy mode to director mode I left the host column populated with the IMAP server. Once I confirmed this was working I then changed host to "" not NULL. When I then preformed my next check I got these errors(no details omitted as this is a test system): Feb 20 14:57:19 smtp-test dovecot: auth-worker(15423): Debug: sql(email3(a)example.com,10.107.0.8): query: SELECT email as user, password, host, 'Y' AS proxy_maybe, 'user' AS master, 'password' AS pass, 'any-cert' AS 'ssl' FROM virtual_users WHERE email='email3(a)example.com'; Feb 20 14:57:19 smtp-test dovecot: auth: Error: proxy(email3(a)example.com,10.107.0.8,<Zz0b430PigAKawAI>): DNS lookup for failed: Invalid input from dns-client Feb 20 14:57:19 smtp-test dovecot: auth: Error: close((null)) failed: Bad file descriptor When I changed the host data from "" to NULL all worked as expected. So the question is: is this a bug with the error output? It was kind of hard for me to diagnose at first without leaning on support in the freenode channel. This is very repeatable as it is a proper error, you can't resolve "". --julian

1 0

Xi autobuilds restored
by Stephan Bosch 19 Feb '15

19 Feb '15

Hi, Xi had problems for more than a month now. I finally managed to access it yesterday, but it was a bit more broken than I anticipated. I had to re-install the whole system. It should now work as before. It is now Debian stable/amd64, so that is now also the master release, which is always built first. Regards, Stephan.

1 0

Re: lazy_expunge + mdbox
by fernando.figaro＠uol.com.br 19 Feb '15

19 Feb '15

It appears to me that this issue is related to how lazy_expunge and last_instance work with mdbox - that is different from maildir. With maildir, the message is moved to the expunged namespace only when the last copy is removed (example: from trash folder). With mdbox, first time when you move message from one folder to another, dovecot creates a copy in the expunge namespace. When you delete messages or expunge them from Trash folder (example, nightly 'doveadm expunge' cronjob) they are simply deleted because they already have copies at expunged namespace. @Timo, is that correct ? This is what I could understand from my tests. Thanks, Fernando De: fernando.figaro(a)uol.com.br Enviada: Quarta-feira, 4 de Fevereiro de 2015 23:15 Para: dovecot(a)dovecot.org Assunto: lazy_expunge + mdbox Hi, I'm studying an issue related to mdbox and lazy_expunge. If it is active in the imap configuration, when you delete a message (copy to new folder + expunge old folder), a copy is also sent to the expunge namespace. I realize that is something related to mdbox and lazy_expunge_only_last_instance and found almost no references except this one (http://hg.dovecot.org/dovecot-2.2/file/24d6708cea76/TODO) lazy_expunge_only_last_instance=yes + mdbox doesn't work, because refcounts don't update immediately One other suggestion I found was to disable 'move' capability. Does anyone has other news regarding this issue ? Thanks, Fernando

1 0

doveadm sync out of memory
by Casey Stone 18 Feb '15

18 Feb '15

Hello: I've been looking forward to getting my mail server up to Dovecot 2.2+ to be able to use the sync mechanism. I run my own mail server just for myself, with a few different accounts, and want to keep a master and backup server in sync. I'm running the Ubuntu server 14.04.1 mail stack which features Dovecot 2.2.9 (and Postfix). My setup is to use system users (userdb passwd / passdb pam) with ~/Maildir. I'll post full sanitized output of dovecot -n if it seems necessary. I have not enabled any plugins (do I need the replicator plugin active?) I have in my conf a doveadm_password defined. Anyway, after setting up an ssl listener on the main machine and after considerable struggles with SSL, I was able to run doveadm sync from the backup server successfully for a small mailbox (around 78 MB) with this command: doveadm sync -R tcps:mainserver.example.com:12345 Since I run this command as the system user on the backup server (same system users as main server) it 'just works' for the correct single user with no further options required. My plan is to run a daily cron job to sync once daily for each user. The problem is when I try to sync a larger mailbox, say 1 GB, dsync-server on the remote (master) machine throws fatal error 83 Out of Memory. I already raised vsz_limit to 512 MB. Problems probably arise with mailboxes around 200 MB though I haven't tested specifically. So my question is, is this expected and I will need to give my VM much more memory to be able to use dovecot sync, or do I have something set wrong, or is it a bug? Thanks for your help.

2 5

how to run dovecot imap on separate server from postfix?
by Robert Fantini 18 Feb '15

18 Feb '15

Hello we are using version 2.2.13 on debian. currently imap runs on the same system as postfix , spamassassin and other mail related software. I'd like to move dovecot imapd and mail storage to its own system. I've search google and wiki and could not see how to do so. could someone please point me in the direction to that done? I like reading documentation.. here is more info on our set up: postfix: # grep dovecot /etc/postfix/* /etc/postfix/main.cf:mailbox_transport = lmtp:unix:private/dovecot-lmtp /etc/postfix/main.cf:smtpd_sasl_type = dovecot kind regards Rob Fantini

2 9

Permissions for shared mail don't work
by Damien Desfontaines 17 Feb '15

17 Feb '15

Hello, (Sorry if you already received this mail. I sent it without having subscribed to the list, but I never got any confirmation; so I assumed it has been filtered by the anti-spam or something.) I'm using dovecot v.2.1.7 on Debian Sid, and the output of dovecot -n is available here: http://paste.fulltxt.net/C-O I'm trying to make the mailbox of (system) user "spam" available to user "ted". I followed these instructions: http://wiki2.dovecot.org/SharedMailboxes/Permissions and it doesn't seem to work. To be more precise: - I manually (and recursively) changed the permissions of all files in ~spam/Mail to 660 (and 770 for the directories); - I manually (and recursively) changed the group owner of everything in ~spam/Mail to "mailperso", where "mailperso" is a group whose users are spam and ted; - I added « mail_access_groups=mailperso » into my dovecot config; - and I restarted dovecot. But still, when I send a new email to spam, it appears as being owned by group "spam" and having permissions set to 600, so I can't access it with user "ted". I also tried to set the setgid bit for ~spam/Mail, it didn't change anything, and when I recursively set the setgid for all subdirectories of ~spam/Mail, it gives new mails the correct group (mailperso) but not the correct permissions. Have I missed something, or is this a bug? Thanks in advance and best regards, Damien

3 8

Help with archive server
by Joy 17 Feb '15

17 Feb '15

Hi, I want to build a system where 6 months old mail to be moved to archive server to keep my mailbox clean and fast. Is there any way to achieve the same using any pre-built binary shipped with dovecot ? Thanks and Regards Joy

2 2

Re: Re: Cannot delete folders from Maildir in only one account
by Christian Vielhauer 17 Feb '15

17 Feb '15

Hi Steffen thanks for your reply. I found that permissions of some folders are different than others… After chmod all permissions to the same go= permissions, it works. No matter what happens to generate different permissions for only this one account. Because all other accounts are correct. I will have a look at this from time to time. As soon it not happens agains this thread is solved. On Mon, 16 Feb 2015, Christian Vielhauer wrote: > I try to delete the folder „test" from Thunderbird 31.4.0 (Win), Webmail (Sogo 2.2.16), or Mail 8.2 (Mac Yosemite), but I am not able to delete in this account. > Nevertheless I am able to create new folders. These new folders are not deleteable, too. What's the returned description sctring, if you try to delete the folder manually via telnet? > dovecot 2.2.9 on Ubuntu 14.04 LTS 64-bit > > In /var/log/mail.{err,log} I cannot see any errors. What does Dovecot log? It usually logs to somewhere else. > In another account it works without any problems. (create and delete folders) - -- Steffen Kaiser

1 0

auth: Fatal: No passdbs specified in configuration file
by rub zorghy 17 Feb '15

17 Feb '15

Hi, I upgraded to 20150213 (f10725a5eed8+). I chose LDAP as the authentication source for Dovecot. Compilation succeeds. Starting dovecot from command line : /usr/local/sbin/dovecot -c /usr/local/etc/dovecot/ The error log contains : "dovecot: auth: Fatal: No passdbs specified in configuration file. PLAIN mechanism needs one" It works properly with Dovecot 2.0.9. Any clues or suggestions, anything I could try...? Thanks, This is the output of dovecot -n: # 20150213 (f10725a5eed8+): /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-504.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.6 (Santiago) doveconf: Warning: Dovecot was last started using /usr/local/etc/dovecot/, but this config is /usr/local/etc/dovecot/dovecot.conf auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no mail_debug = yes mail_gid = 5000 mail_location = maildir:~/Maildir:LAYOUT=fs mail_plugins = " quota acl" mail_uid = 5000 mbox_write_locks = fcntl namespace { list = children location = maildir:/store/vmail/public:LAYOUT=fs prefix = public/ separator = / subscriptions = no type = public } namespace inbox { inbox = yes location = prefix = } passdb { args = /usr/local/etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = maildir quota_rule = *:storage=50M quota_rule2 = Trash:storage=+5M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } service auth { client_limit = 9516 unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service imap-login { process_min_avail = 2 service_count = 0 } service imap { process_limit = 8192 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem syslog_facility = local5 userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_ssl = yes

2 1

Cannot delete folders from Maildir in only one account
by Christian Vielhauer 17 Feb '15

17 Feb '15

Hi I try to delete the folder „test" from Thunderbird 31.4.0 (Win), Webmail (Sogo 2.2.16), or Mail 8.2 (Mac Yosemite), but I am not able to delete in this account. Nevertheless I am able to create new folders. These new folders are not deleteable, too. dovecot 2.2.9 on Ubuntu 14.04 LTS 64-bit In /var/log/mail.{err,log} I cannot see any errors. In another account it works without any problems. (create and delete folders) Have you any hint, I can try? Chris

2 1

Dovecot fsync question
by Christian Binder Stadt Freilassing 17 Feb '15

17 Feb '15

Hello, I followed these steps in http://wiki2.dovecot.org/MailLocation/LocalDisk # Default to no fsyncing mail_fsync = never protocol lda { # Enable fsyncing for LDA mail_fsync = optimized } protocol lmtp { # Enable fsyncing for LMTP mail_fsync = optimized } This gives quite a good performance, but I'm not sure about the risks. Does it mean that things like *put a Sent Mail to Sent folder *change status of mails really don't get synced to disk for a long time (hours??). Or do we talk about seconds and everything is fine when dirty pages get synced by the system. cat /proc/meminfo | grep 'Dirty' lets me assume that there are always just a few KB in the dirty pages and these are written to disk every few seconds. Are the dovecot "mail_fsync = never" transactions inclduded there? Thanks a lot! Christian

1 0

Re: /etc/ssl/certs/dovecot.pem erased by OpenSuse's update mechanism
by dovecot＠lists.killian.com 17 Feb '15

17 Feb '15

On 2015/2/16 16:28, Jochen Bern wrote: > On 02/16/2015 04:23 PM, Reindl Harald wrote: >>> "The CA file should contain the certificate(s) followed by the >>> matching CRL(s). Note that the CRLs are required to exist. For a >>> multi-level CA place the certificates in this order: >>> >>> Issuing CA cert >>> Issuing CA CRL >>> Intermediate CA cert >>> Intermediate CA CRL >>> Root CA cert >>> Root CA CRL" >> >> that is how you can and should build your PEM files for *every* SSL > ^^^^^^^ >> aware software > > NACK. I have set up CentOS 6 servers a little more than two years ago > with that format used for dovecot and OpenVPN, including verification > that the functionality was there. Last month we had a need to revoke a > client's certs and it turned out that OpenVPN had silently stopped > honoring the CRLs somewhere along the update path (dovecot still > enforces them). I had to QuickFix the OpenVPN config from the above > monolithic file over to a CApath > > https://www.openssl.org/docs/ssl/SSL_CTX_load_verify_locations.html#notes > > to successfully lock the disgraced client out. > > Regards, > J. Bern OpenVPN has --crl-verify that takes a file as well as a directory. I guess what you're saying is that accepts, but silently ignores the CRLs if put in the cert file. It would be nicest if all the software wanted things configured things the same way. Personally I like the way Dovecot does it, but having things be uniform would be even better. From my quick survey, a lot of the programs (or at least their documentation) doesn't support CRLs at all. Postfix wants multiple certificates specified by different .cf entries (it appears to not support CRLs--at least they aren't mentioned in documentation): smtpd_tls_cert_file smtpd_tls_key_file smtpd_tls_dcert_file smtpd_tls_dkey_file smtpd_tls_eccert_file smptd_tls_eckey_file smtpd_tls_CAfile Apache2.4 wants SSLCertificateFile SSLCertificateKeyFile repeated multiple times for different cert types. Making it worse, Apache2.4.8 wants the whole cert chain in the above, but earlier versions wanted SSLCertificateChainFile to have the non-leaf chain. Courier IMAP SSL wants TLS_CERTFILE specifying a file containing both the certificate and private key catenated. OpenVPN wants ca certificate chain used for signing.pem cert certificate.pem key privatekey.pem crl-verify crl.pem OpenLDAP appears similar to OpenVPN with (appears not to support CRLs): TLSCACertificatePath TLSCertificateFile TLSCertificateKeyFile Racoon wants (appears not to support CRLs): certificate_type x509 certfile keyfile ca_type x509 ca.pem But the man page doesn't talk about where the chain goes. So it appears one should generate the following file formats to satisfy all the software out there: 1. cert standalone (OpenVPN, Racoon, OpenLDAP, Postfix, Apache 2.4.7 and earlier) 2. cert chain (Apache 2.4.8 and later) 3. cert ca crl chain (Dovecot) 4. ca chain (OpenVPN, Racoon?, OpenLDAP, Postfix, Apache 2.4.7 and earlier) 5. crl chain (OpenVPN) 6. cert, key catenation (Courier IMAP) Getting all these configured the same way isn't going to happen, so I guess the next best thing would be a cookbook. Anyone know of one? -Earl

1 0

Re: Controlling inactivity timeout for IMAP
by Joseph Tam 17 Feb '15

17 Feb '15

Andr? Peters writes: > > I have a problem with a user who uses a wireless carrier that keeps > > changing his IP as he travels throughout the city. From the perspective > > of our dovecot IMAP server, the user keeps logging in from another IP, > > and after a short while, hits up against the mail_max_userip_connections > > limit. It takes 30 minutes before those orphaned connections times out. > > > > Is there any way to decrease the IMAP idle timeout other than to > > recompile dovecot with a new value? > > > > imap-common.h:#define CLIENT_IDLE_TIMEOUT_MSECS (60*30*1000) > > > > For example, will this work? > > > > service imap { > > idle_kill = 600 > > } > > I was following this in hope someone would answer. > > As a workaround I recommend to set up a POP3 connection with a low > polling interval (besides using a TCP Proxy...). I'll give that a try -- I'll probably still get the odd orphaned process if the client changed address in the middle of a POP session. To close this out, I'll relate my experiments to asnwer the question I posed above in case it's of use to someone. Changing pre-authentication timeouts. The default is 3 minutes hardcoded at diff -r -U0 a/src/lib-master/master-interface.h b/src/lib-master/master-interface.h --- a/src/lib-master/master-interface.h Mon Jun 2 04:50:10 2014 +++ b/src/lib-master/master-interface.h Sat Feb 14 18:41:39 2015 @@ -99,1 +99,1 @@ -#define MASTER_LOGIN_TIMEOUT_SECS (3*60) +#define MASTER_LOGIN_TIMEOUT_SECS (31) Changing it to 31s still seems overly generous, but you can not set it lower unless you also change the next define /* auth server should abort auth requests before that happens */ #define MASTER_AUTH_SERVER_TIMEOUT_SECS (MASTER_LOGIN_TIMEOUT_SECS - 30) I really don't understand what this is about, but if this becomes zero, authentication breaks. Maybe (MASTER_LOGIN_TIMEOUT_SECS>>1) would be a safer definition. $ date; netcat 127.0.0.1 143; date Mon Feb 16 15:23:44 EST 2015 * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Ready. * BYE Disconnected for inactivity. Mon Feb 16 15:24:15 EST 2015 Changing post-authentication IMAP idle timeout The default (RFC minimum) is 30 minutes, which can be changed here diff -r -U0 a/src/imap/imap-common.h b/src/imap/imap-common.h --- a/src/imap/imap-common.h Mon Jun 2 04:50:10 2014 +++ b/src/imap/imap-common.h Sat Feb 14 18:44:24 2015 @@ -5,1 +5,1 @@ -#define CLIENT_IDLE_TIMEOUT_MSECS (60*30*1000) +#define CLIENT_IDLE_TIMEOUT_MSECS (60*15*1000) I also tried changing it in dovecot.conf service imap { idle_kill = 630 } but after recompiling/reconfiguring with both options, idle_kill has no influence. $ date ; echo . login user password | netcat 127.0.0.1 143 ; date Mon Feb 16 15:47:10 EST 2015 * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Ready. . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in * BYE Disconnected for inactivity. Mon Feb 16 16:02:11 EST 2015 General notes: Dovecot is chock full of these ad-hoc/default/RFC timeout definitions. The interaction of these timeouts between dovecot's internal components as well as remote clients is complex, and could cause problems if you change them. For example, our webmail system opens persistent IMAP connections, and if you set dovecot's idle timeout less than the webmail's idle timeout, the user will get an annoying re-login requests. It would be nice if this problem of mobile WiFi mail readers acquiring (and abandoning) new IPs could be handled in a more gracious way (reaping on a expedited schedule or LRU basis), but unless you really have to and know what you are doing, I would suggest not modifying timeouts. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: /etc/ssl/certs/dovecot.pem erased by OpenSuse's update mechanism
by dovecot＠lists.killian.com 17 Feb '15

17 Feb '15

Why not /etc/dovecot/private? That's where I put my dovecot certs. Dovecot's needs are a bit different from other software, and so it is unclear whether the files won't be unique to it. For example, I haven't seen the following before I read it on the Dovecot wiki: "The CA file should contain the certificate(s) followed by the matching CRL(s). Note that the CRLs are required to exist. For a multi-level CA place the certificates in this order: Issuing CA cert Issuing CA CRL Intermediate CA cert Intermediate CA CRL Root CA cert Root CA CRL" On 2015/2/16 06:42, Wolfgang Gross wrote: > On 16 Feb 2015 at 21:59, Nick Edwards wrote: > >> This directory in later times is where more and more distros are >> putting system wide server CA type certs, most distros are moving to >> this path, so the package maintainer should fix their script, maybe to >> /etc/ssl/private or such. > > Maybe not in /etc/ssl/private for security reasons? > 10-ssl.conf uses the same file name for certificate and private key; better > change this, too. > >> >> On 2/16/15, Wolfgang Gross <WGross(a)uni-hd.de> wrote: >>> Hi, >>> >>> this is not a genuine Dovecot bug, more a nuisance. >>> It applies to OpenSuse 13.2 but maybe also to other Linux's. >>> >>> The standard installation of Dovecot (especially 10-ssl.conf) places the >>> certificate dovecot.pem in /etc/ssl/certs. >>> Sometimes during updates does OpenSuse renew all certificates in >>> /etc/ssl/certs >>> and erases dovecot.pem. This blocks further access to the mailbox. >>> >>> I found a similar report here: >>> https://bbs.archlinux.de/viewtopic.php?id=27288 >>>

3 2

Re: /etc/ssl/certs/dovecot.pem erased by OpenSuse's update mechanism
by dovecot＠lists.killian.com 16 Feb '15

16 Feb '15

Thanks for the note. I had never seen anything in the postfix and apache documentation that the CRLs could be intermingled with the CRTs in the CRT file. The documentation for those programs suggests putting the CRLs in a separate file (e.g. apache SSLCARevocationFile) or doesn't talk about putting CRLs in with the certs (e.g. postfix smtpd_tls_cert_file). If it works to put them all in one file for those programs, that's good to know. On 2015/2/16 07:23, Reindl Harald wrote: > > Am 16.02.2015 um 15:53 schrieb dovecot(a)lists.killian.com: >> Why not /etc/dovecot/private? That's where I put my dovecot certs. Dovecot's needs are a bit different from other software, and so it is unclear whether the files won't be unique to it. For example, I haven't seen the following before I read it on the Dovecot wiki: >> >> "The CA file should contain the certificate(s) followed by the matching CRL(s). Note that the CRLs are required to exist. For a multi-level CA place the certificates in this order: >> >> Issuing CA cert >> Issuing CA CRL >> Intermediate CA cert >> Intermediate CA CRL >> Root CA cert >> Root CA CRL" > > that is how you can and should build your PEM files for *every* SSL aware software, Apache and Postfix are happy with exactly that format > > i go even so far and include the CDHE and DHE params there which means in case of a recent httpd you can make DHE compatible which most clients even if your RSA certificate is 4096 Bit (read the hint about 2.4.7 or later at http://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslcertificatefile if you want to know why) > > there is also no need to place that certs below /etc/dovecot at all nor have them readable for anybody but root, we have our wildcard certificate on a unique location synced to all servers offering SSL and again Dovecot, Postfix and Apache are happy to read the PEM root-only PEM files at startup and that's it

2 1

Migrate from Courier to Dovecot - shared folders - can't subscribe
by Никита Борисенков 16 Feb '15

16 Feb '15

Hello, I try to migrate from Courier to Dovecot and i have a trouble with shared folders. Shared mailbox is visible in list, but i can't subscribe to it. user - bna(a)test.sunlink.ru shared folder - mail-rack(a)test.sunlink.ru Here is a raw log: LOGIN-AND-FIND-SUBSCRIBED-IN: 2 namespace 3 ENABLE CONDSTORE 4 ID ("name" "Thunderbird" "version" "31.4.0") 5 list (subscribed) "" "INBOX.*" 6 list (subscribed) "" "shared.*" 7 list "" "INBOX" 8 select "INBOX" (CONDSTORE) 9 myrights "INBOX" 10 getacl "INBOX" 11 getquotaroot "INBOX" 12 UID fetch 33:* (FLAGS) 13 IDLE DONE 14 list (subscribed) "" "INBOX.*" 15 list "" "INBOX.%" 16 list "" "INBOX.%.%" 17 list (subscribed) "" "shared.*" 18 list "" "shared.%" 19 list "" "shared.%.%" 20 IDLE DONE 21 list "" "shared.shared/%" 22 list "" "shared.shared/%/%" 23 IDLE DONE 24 list "" "shared.mail-rack.%" 25 list "" "shared.mail-rack.%.%" 26 IDLE DONE 27 close 28 logout LOGIN-AND-FIND-SUBSCRIBED-OUT: 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE NOTIFY QUOTA ACL RIGHTS=texk] Logged in * NAMESPACE (("INBOX." ".")) (("shared." ".")) NIL 2 OK Namespace completed. * ENABLED CONDSTORE 3 OK Enabled. * ID ("name" "Dovecot") 4 OK ID completed. * LIST (\Subscribed) "." INBOX.Archives * LIST (\Subscribed) "." INBOX.Drafts * LIST (\Subscribed) "." INBOX.Junk * LIST (\Subscribed) "." INBOX.Sent * LIST (\Subscribed) "." INBOX.Trash * LIST (\Subscribed) "." INBOX.INBOX.1 * LIST (\Subscribed) "." INBOX.1 5 OK List completed. 6 OK List completed. * LIST (\HasChildren) "." INBOX 7 OK List completed. * FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $Forwarded Junk) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $Forwarded Junk \*)] Flags permitted. * 24 EXISTS * 0 RECENT * OK [UIDVALIDITY 1423308312] UIDs valid * OK [UIDNEXT 39] Predicted next UID * OK [HIGHESTMODSEQ 675] Highest 8 OK [READ-WRITE] Select completed (0.000 secs). * MYRIGHTS INBOX lrwstipekxacd 9 OK Myrights completed. * ACL INBOX bna(a)test.sunlink.ru lrwstipekxacd 10 OK Getacl completed. * QUOTAROOT INBOX "User quota" * QUOTA "User quota" (STORAGE 79458 512000) 11 OK Getquotaroot completed. * 24 FETCH (UID 32 FLAGS (\Seen NonJunk)) 12 OK Fetch completed. + idling 13 OK Idle completed. * LIST (\Subscribed) "." INBOX.Archives * LIST (\Subscribed) "." INBOX.Drafts * LIST (\Subscribed) "." INBOX.Junk * LIST (\Subscribed) "." INBOX.Sent * LIST (\Subscribed) "." INBOX.Trash * LIST (\Subscribed) "." INBOX.INBOX.1 * LIST (\Subscribed) "." INBOX.1 14 OK List completed. * LIST (\HasNoChildren \UnMarked) "." INBOX.1 * LIST (\HasNoChildren \UnMarked \Sent) "." INBOX.Sent * LIST (\HasNoChildren \UnMarked \Junk) "." INBOX.Junk * LIST (\HasNoChildren \UnMarked \Drafts) "." INBOX.Drafts * LIST (\HasNoChildren \UnMarked) "." INBOX.Archives * LIST (\HasNoChildren \Trash) "." INBOX.Trash 15 OK List completed. * LIST (\HasNoChildren \UnMarked) "." INBOX.INBOX.1 16 OK List completed. 17 OK List completed. * LIST (\HasChildren) "." shared.mail-rack 18 OK List completed. * LIST (\HasNoChildren \UnMarked) "." shared.mail-rack.Trash 19 OK List completed. + idling 20 OK Idle completed. 21 OK List completed. 22 OK List completed. + idling 23 OK Idle completed. * LIST (\HasNoChildren \UnMarked) "." shared.mail-rack.Trash 24 OK List completed. 25 OK List completed. + idling 26 OK Idle completed. 27 OK Close completed. * BYE Logging out 28 OK Logout completed. SUBSCRIBE-IN: 2 ENABLE CONDSTORE 3 ID ("name" "Thunderbird" "version" "31.4.0") 4 subscribe "shared.mail-rack" 5 list (subscribed) "" "INBOX.*" 6 list (subscribed) "" "shared.*" 7 list "" "INBOX" 8 logout SUBSCRIBE-OUT: 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE NOTIFY QUOTA ACL RIGHTS=texk] Logged in * ENABLED CONDSTORE 2 OK Enabled. * ID ("name" "Dovecot") 3 OK ID completed. 4 NO [CANNOT] This namespace has no subscriptions * LIST (\Subscribed) "." INBOX.Archives * LIST (\Subscribed) "." INBOX.Drafts * LIST (\Subscribed) "." INBOX.Junk * LIST (\Subscribed) "." INBOX.Sent * LIST (\Subscribed) "." INBOX.Trash * LIST (\Subscribed) "." INBOX.INBOX.1 * LIST (\Subscribed) "." INBOX.1 5 OK List completed. 6 OK List completed. * LIST (\HasChildren) "." INBOX 7 OK List completed. * BYE Logging out 8 OK Logout completed. As I understood from documentation if "shared." namespace have "subscription = no" then there shall be a parent namespace to match, before "shared.". But i have inbox namespace with prefix "INBOX." Where I was mistaken in a configuration? $ dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-xen-686 i686 Debian 7.8 xfs auth_mechanisms = plain login auth_verbose = yes dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_gid = 8 first_valid_uid = 8 info_log_path = /var/log/dovecot.log lda_mailbox_autocreate = yes listen = 172.27.65.34, 87.244.0.24 log_path = /var/log/dovecot.error.log mail_debug = yes mail_gid = mail mail_location = maildir:/var/virtmail/%d/%n mail_plugins = acl quota mail_uid = mail mailbox_list_index = yes maildir_very_dirty_syncs = yes namespace { hidden = no ignore_on_failure = yes list = children location = maildir:/var/virtmail/%%d/%%n prefix = shared.%%n. separator = . subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_defaults_from_inbox = yes acl_shared_dict = file:/var/virtmail/%d/shared-mailboxes.db antispam_allow_append_to_spam = no antispam_backend = pipe antispam_pipe_program = /root/sa-learn-pipe.sh antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_spam = Junk;Spam;SPAM antispam_trash = Trash antispam_unsure = Unsure quota = dict:User quota::proxy::quota quota_grace = 10%% quota_rule = *:storage=300M quota_rule2 = INBOX.Trash:storage=+100M quota_rule3 = INBOX.Sent:storage=+50M quota_rule4 = INBOX.SPAM:ignore quota_rule5 = INBOX.Junk:ignore quota_warning = storage=95%% quota-warning 95 %u sieve = ~/.dovecot.sieve sieve_after = /etc/dovecot/sieve/after sieve_before = /etc/dovecot/sieve/before sieve_dir = ~/sieve } protocols = " imap lmtp" service auth { unix_listener auth-client { mode = 0660 user = Debian-exim } } service dict { unix_listener dict { group = mail mode = 0600 user = mail } } service quota-warning { executable = script /root/quota-warning.sh unix_listener quota-warning { user = mail } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = acl quota sieve } protocol imap { mail_plugins = acl quota imap_acl imap_quota mail_log notify antispam } protocol lda { mail_plugins = acl quota sieve } /var/log/dovecot.log Feb 13 18:21:06 imap-login: Info: Login: user=<bna(a)test.sunlink.ru>, method=PLAIN, rip=87.244.6.122, lip=87.244.0.24, mpid=28110, session=<rYcXyfkOEQBX9AZ6> Feb 13 18:21:06 script-login: Debug: Added userdb setting: plugin/quota_rule=*:bytes=500M Feb 13 18:21:06 imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib15_notify_plugin.so Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_mail_log_plugin.so Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_antispam_plugin.so Feb 13 18:21:06 imap: Debug: Added userdb setting: plugin/quota_rule=*:bytes=500M Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Effective uid=8, gid=8, home=/var/virtmail/test.sunlink.ru/bna Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota root: name=User quota backend=dict args=:proxy::quota Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=* bytes=524288000 messages=0 Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Trash bytes=+104857600 messages=0 Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Sent bytes=+52428800 messages=0 Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.SPAM ignored Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Junk ignored Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota warning: bytes=498073600 (95%) messages=0 reverse=no command=quota-warning 95 bna(a)test.sunlink.ru Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota grace: root=User quota bytes=52428800 (10%) Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: dict quota: user=bna(a)test.sunlink.ru, uri=proxy::quota, noenforcing=0 Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Namespace inbox: type=private, prefix=INBOX., sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/virtmail/test.sunlink.ru/bna Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: maildir++: root=/var/virtmail/test.sunlink.ru/bna, index=, indexpvt=, control=, inbox=/var/virtmail/test.sunlink.ru/bna, alt= Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = bna(a)test.sunlink.ru Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 1 Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Namespace : type=shared, prefix=shared.%n., sep=., inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/var/virtmail/%d/%n Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: shared: root=/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = bna(a)test.sunlink.ru Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 0 Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Archives/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Drafts/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Junk/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Sent/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Trash/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.INBOX.1/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.1/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota root: name=User quota backend=dict args=:proxy::quota Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=* bytes=524288000 messages=0 Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Trash bytes=+104857600 messages=0 Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Sent bytes=+52428800 messages=0 Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.SPAM ignored Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Junk ignored Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota warning: bytes=498073600 (95%) messages=0 reverse=no command=quota-warning 95 mail-rack(a)test.sunlink.ru Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota grace: root=User quota bytes=52428800 (10%) Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: dict quota: user=mail-rack(a)test.sunlink.ru, uri=proxy::quota, noenforcing=0 Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: maildir++: root=/var/virtmail/test.sunlink.ru/mail-rack, index=, indexpvt=, control=, inbox=/var/virtmail/test.sunlink.ru/mail-rack, alt= Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = mail-rack(a)test.sunlink.ru Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 1 Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: maildir++: root=/var/virtmail/test.sunlink.ru/mail-rack, index=, indexpvt=, control=, inbox=/var/virtmail/test.sunlink.ru/mail-rack, alt= Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = bna(a)test.sunlink.ru Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 0 Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: reading file /var/virtmail/test.sunlink.ru/mail-rack/dovecot-acl Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Namespace shared.mail-rack.: Using permissions from /var/virtmail/test.sunlink.ru/mail-rack: mode=0700 gid=default Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Namespace INBOX.: Using permissions from /var/virtmail/test.sunlink.ru/bna: mode=0700 gid=default Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/dovecot-acl not found Feb 13 18:21:08 imap(bna(a)test.sunlink.ru): Debug: Namespace shared.: Using permissions from : mode=0700 gid=default Feb 13 18:21:08 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/mail-rack/.Trash/dovecot-acl not found Feb 13 18:21:13 imap-login: Info: Login: user=<bna(a)test.sunlink.ru>, method=PLAIN, rip=87.244.6.122, lip=87.244.0.24, mpid=28114, session=<j+Z5yfkOEgBX9AZ6> Feb 13 18:21:13 script-login: Debug: Added userdb setting: plugin/quota_rule=*:bytes=500M Feb 13 18:21:13 imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib15_notify_plugin.so Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_mail_log_plugin.so Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_antispam_plugin.so Feb 13 18:21:13 imap: Debug: Added userdb setting: plugin/quota_rule=*:bytes=500M Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Effective uid=8, gid=8, home=/var/virtmail/test.sunlink.ru/bna Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota root: name=User quota backend=dict args=:proxy::quota Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=* bytes=524288000 messages=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Trash bytes=+104857600 messages=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Sent bytes=+52428800 messages=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.SPAM ignored Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Junk ignored Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota warning: bytes=498073600 (95%) messages=0 reverse=no command=quota-warning 95 bna(a)test.sunlink.ru Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota grace: root=User quota bytes=52428800 (10%) Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: dict quota: user=bna(a)test.sunlink.ru, uri=proxy::quota, noenforcing=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Namespace inbox: type=private, prefix=INBOX., sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/virtmail/test.sunlink.ru/bna Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: maildir++: root=/var/virtmail/test.sunlink.ru/bna, index=, indexpvt=, control=, inbox=/var/virtmail/test.sunlink.ru/bna, alt= Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = bna(a)test.sunlink.ru Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 1 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Namespace : type=shared, prefix=shared.%n., sep=., inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/var/virtmail/%d/%n Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: shared: root=/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = bna(a)test.sunlink.ru Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota root: name=User quota backend=dict args=:proxy::quota Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=* bytes=524288000 messages=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Trash bytes=+104857600 messages=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Sent bytes=+52428800 messages=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.SPAM ignored Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Junk ignored Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota warning: bytes=498073600 (95%) messages=0 reverse=no command=quota-warning 95 mail-rack(a)test.sunlink.ru Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota grace: root=User quota bytes=52428800 (10%) Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: dict quota: user=mail-rack(a)test.sunlink.ru, uri=proxy::quota, noenforcing=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: maildir++: root=/var/virtmail/test.sunlink.ru/mail-rack, index=, indexpvt=, control=, inbox=/var/virtmail/test.sunlink.ru/mail-rack, alt= Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = mail-rack(a)test.sunlink.ru Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 1 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: maildir++: root=/var/virtmail/test.sunlink.ru/mail-rack, index=, indexpvt=, control=, inbox=/var/virtmail/test.sunlink.ru/mail-rack, alt= Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = bna(a)test.sunlink.ru Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: reading file /var/virtmail/test.sunlink.ru/mail-rack/dovecot-acl Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Archives/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Drafts/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Junk/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Sent/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Trash/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.INBOX.1/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.1/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Namespace shared.mail-rack.: Using permissions from /var/virtmail/test.sunlink.ru/mail-rack: mode=0700 gid=default Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Namespace INBOX.: Using permissions from /var/virtmail/test.sunlink.ru/bna: mode=0700 gid=default Feb 13 18:21:16 imap(bna(a)test.sunlink.ru): Info: Disconnected: Logged out in=196 out=921 Feb 13 18:21:16 imap(bna(a)test.sunlink.ru): Info: Disconnected: Logged out in=664 out=2824

1 0

dovecot 2.2.15 script_after not executed
by Florin Portase 16 Feb '15

16 Feb '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello guys, I'm having troubles making "script_after" to exec sieve scripts:: So: plugin { quota = maildir quota_rule2 = INBOX.Trash:ignore quota_rule3 = INBOX.Sent:ignore sieve = ~/Maildir/sieve/dovecot1.sieve sieve_before = /etc/dovecot/sieve/global.sieve sieve_after = ~/Maildir/sieve/01_vacation.sieve sieve_dir = ~/Maildir/sieve sieve_global_dir = /etc/dovecot/sieve/ sieve_quota_max_scripts = 50 expire = INBOX.Trash expire2 = INBOX.Spam expire3 = INBOX.Junk zlib_save = bz2 } ll /home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/ total 28 - -rw-------. 1 vpopmail vchkpw 912 Feb 11 19:15 01_vacation.sieve - -rw-------. 1 vpopmail vchkpw 212 Feb 11 19:13 01_vacation.svbin drwx------. 2 vpopmail vchkpw 4096 Feb 11 00:02 after lrwxrwxrwx. 1 vpopmail vchkpw 13 Feb 11 19:15 dovecot1.sieve -> filters.sieve - -rw-------. 1 vpopmail vchkpw 878 Feb 11 19:16 dovecot1.svbin - -rw-------. 1 vpopmail vchkpw 1268 Feb 11 18:48 filters.sieve - -rw-------. 1 vpopmail vchkpw 932 Feb 11 18:55 new.sieve drwx------. 2 vpopmail vchkpw 4096 Feb 11 19:15 tmp And here is the debug output: Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: file script: Opened script `01_vacation' from `/home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/01_vacation.sieve' Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: executed after user's Sieve script(3): /home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/01_vacation.sieve Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Opening script 1 of 3 from `/etc/dovecot/sieve/global.sieve' Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Loading script /etc/dovecot/sieve/global.sieve Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Script binary /etc/dovecot/sieve/global.svbin successfully loaded Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: binary save: not saving binary /etc/dovecot/sieve/global.svbin, because it is already stored Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Executing script from `/etc/dovecot/sieve/global.svbin' Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Opening script 2 of 3 from `/home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/dovecot1.sieve;name=filters' Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Loading script /home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/dovecot1.sieve;name=filters Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Script binary /home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/dovecot1.svbin is not up-to-date Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Script `filters' from /home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/dovecot1.sieve;name=filters successfully compiled Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Executing script from `/home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/dovecot1.sieve;name=filters' Feb 11 19:16:10 lda(portase.florin(a)medianetork.ro): Info: sieve: msgid=<CAAa=MneAO6+wwLh3M8nz1z6Mi2Ae2aDMdrSakJA_-PYCwCvbCA(a)mail.gmail.com>: stored mail into mailbox 'INBOX.Gmail' If I change symlink from dovecot1.sieve -> filters.sieve to dovecot1.sieve -> 01_vacation.sieve vacation filter is working I think I miss something, but have no clue what's wrong. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJU26DNAAoJECEzxtLP+204zckH/R05yYi2iLFrXpYgNE0noyDu f1sAXPHk1UC75Wz0FMLRP/QR4K4ocF4TnZAC8a0e0rLdwILZ2ys7LUL1GkF5D/m6 MLotbZh01pWaI4+C7I6Nw0GeCMBYC1VFFrh/fxVcijdICA5H6v6VmiZs7/AyWq/3 OcmzHeLD0MgHcU7l2zD7MFszYnUTGaJoqztYMzz9Mzzgff7Gw4RioJTh3PDCu/Wp gAXPcX0/8fssSRBnmsIKs7bzUxhsXnFwisq+d6xYa4O/2tG1vU1YmmsGGj9YGIAR x5wKyCcPAeOWnZZ0rLvweVs+KMr91Dl4czteMsV71ZxNzMpLIUXdtrqAGYrHeZU= =PIJn -----END PGP SIGNATURE-----

3 6

Re: script-login help
by Jorge Bastos 14 Feb '15

14 Feb '15

Hi andre Well thats the thing. Im still on 2.2.23 as i use debian sid. Anyway i dont see any info on how to get the login ip or protocol. Is is possible?André Peters <andre.peters(a)debinux.de> wrote:Hi, I just want to remind you of this plugin: http://wiki2.dovecot.org/Plugins/LastLogin - maybe an option? André Am 14.02.2015 um 00:49 schrieb Jorge Bastos: > Hi, > > > > I'm trying to execute a bash script to update the last login, IP, and > protocol on the user's record, but I'm not being able 'cause I think this is > only for 2.2.24+ > > > > http://dovecot.org/pipermail/dovecot/2014-January/094610.html > > > > I'm on 2.2.23, any change/example to make it work here? > > > > Thanks in advanced, > > Jorge Bastos >

1 0

Re: script-login help
by André Peters 14 Feb '15

14 Feb '15

Hi, I just want to remind you of this plugin: http://wiki2.dovecot.org/Plugins/LastLogin - maybe an option? André Am 14.02.2015 um 00:49 schrieb Jorge Bastos: > Hi, > > > > I'm trying to execute a bash script to update the last login, IP, and > protocol on the user's record, but I'm not being able 'cause I think this is > only for 2.2.24+ > > > > http://dovecot.org/pipermail/dovecot/2014-January/094610.html > > > > I'm on 2.2.23, any change/example to make it work here? > > > > Thanks in advanced, > > Jorge Bastos >

1 0

script-login help
by Jorge Bastos 14 Feb '15

14 Feb '15

Hi, I'm trying to execute a bash script to update the last login, IP, and protocol on the user's record, but I'm not being able 'cause I think this is only for 2.2.24+ http://dovecot.org/pipermail/dovecot/2014-January/094610.html I'm on 2.2.23, any change/example to make it work here? Thanks in advanced, Jorge Bastos

1 0

curious when certain patches might become part of a release
by Benjamin Connelly 13 Feb '15

13 Feb '15

We ran in to this same problem others discussed in this thread: http://dovecot.org/list/dovecot/2014-November/098927.html and have also applied the patches (31262a892ba7 and 80ed82a93c1a) and it seems to have stopped the panics. We usually just use the FreeBSD ports tree to install software, so I'm looking forward to the time when we can go back to that. Will those patches be part of the next release? Benjamin

3 5

doveadm deduplicate commands
by Kevin Laurie 13 Feb '15

13 Feb '15

Hello, I just migrated my emails from gmail using getmail. In the process I got some emails that have been doubled or tripled How do I run the doveadm command to delete copies of same emails? I tried running the following:- doveadm deduplicate -u user(a)domain.net inbox but I get error:- doveadm(root): Fatal: Unknown argument INBOX Could someone share some way to automatically remove duplicated messages? Thanks Kevin

3 6

Dovecot FTS Sor Error
by Kevin Laurie 13 Feb '15

13 Feb '15

Hi, I have been trying to get fts solr to work for a while. Keep getting the error below(was wondering if this was schema related?) root@mail:/var/log# doveadm index -u user(a)domain.net inbox doveadm(thai(a)sicl.net): Error: fts_solr: Indexing failed: Server Error Below is from the apache solr output log:- Appreciate if someone can confirm the cause of this error. Thanks Kevin 2/13/2015, 11:30:53 PM ERROR SolrCore org.apache.solr.common.SolrException: Exception writing document id 1/3765be2ea8594f54780e00003555fc1a/useri(a)domain.net to the index; possible analysis error. org.apache.solr.common.SolrException: Exception writing document id 1/3765be2ea8594f54780e00003555fc1a/ochi(a)sicl.net to the index; possible analysis error. at org.apache.solr.update.DirectUpdateHandler2.addDoc(DirectUpdateHandler2.java:168) at org.apache.solr.update.processor.RunUpdateProcessor.processAdd(RunUpdateProcessorFactory.java:69) at org.apache.solr.update.processor.UpdateRequestProcessor.processAdd(UpdateRequestProcessor.java:51) at org.apache.solr.update.processor.DistributedUpdateProcessor.doLocalAdd(DistributedUpdateProcessor.java:926) at org.apache.solr.update.processor.DistributedUpdateProcessor.versionAdd(DistributedUpdateProcessor.java:1080) at org.apache.solr.update.processor.DistributedUpdateProcessor.processAdd(DistributedUpdateProcessor.java:692) at org.apache.solr.update.processor.LogUpdateProcessor.processAdd(LogUpdateProcessorFactory.java:100) at org.apache.solr.handler.loader.XMLLoader.processUpdate(XMLLoader.java:247) at org.apache.solr.handler.loader.XMLLoader.load(XMLLoader.java:174) at org.apache.solr.handler.UpdateRequestHandler$1.load(UpdateRequestHandler.java:99) at org.apache.solr.handler.ContentStreamHandlerBase.handleRequestBody(ContentStreamHandlerBase.java:74) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:135) at org.apache.solr.core.SolrCore.execute(SolrCore.java:1967) at org.apache.solr.servlet.SolrDispatchFilter.execute(SolrDispatchFilter.java:777) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:418) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:207) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1419) at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:455) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137) at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:557) at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231) at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1075) at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:384) at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193) at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1009) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135) at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:255) at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:154) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116) at org.eclipse.jetty.server.Server.handle(Server.java:368) at org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:489) at org.eclipse.jetty.server.BlockingHttpConnection.handleRequest(BlockingHttpConnection.java:53) at org.eclipse.jetty.server.AbstractHttpConnection.content(AbstractHttpConnection.java:953) at org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.content(AbstractHttpConnection.java:1014) at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:953) at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:240) at org.eclipse.jetty.server.BlockingHttpConnection.handle(BlockingHttpConnection.java:72) at org.eclipse.jetty.server.bio.SocketConnector$ConnectorEndPoint.run(SocketConnector.java:264) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:608) at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:543) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.lucene.store.AlreadyClosedException: this IndexWriter is closed at org.apache.lucene.index.IndexWriter.ensureOpen(IndexWriter.java:698) at org.apache.lucene.index.IndexWriter.ensureOpen(IndexWriter.java:712) at org.apache.lucene.index.IndexWriter.updateDocument(IndexWriter.java:1507) at org.apache.solr.update.DirectUpdateHandler2.addDoc0(DirectUpdateHandler2.java:240) at org.apache.solr.update.DirectUpdateHandler2.addDoc(DirectUpdateHandler2.java:164) ... 40 more Caused by: java.lang.OutOfMemoryError: Java heap space at org.apache.lucene.index.FreqProxTermsWriterPerField$FreqProxPostingsArray.<init>(FreqProxTermsWriterPerField.java:210) at org.apache.lucene.index.FreqProxTermsWriterPerField$FreqProxPostingsArray.newInstance(FreqProxTermsWriterPerField.java:230) at org.apache.lucene.index.ParallelPostingsArray.grow(ParallelPostingsArray.java:48) at org.apache.lucene.index.TermsHashPerField$PostingsBytesStartArray.grow(TermsHashPerField.java:252) at org.apache.lucene.util.BytesRefHash.add(BytesRefHash.java:292) at org.apache.lucene.index.TermsHashPerField.add(TermsHashPerField.java:151) at org.apache.lucene.index.DefaultIndexingChain$PerField.invert(DefaultIndexingChain.java:659) at org.apache.lucene.index.DefaultIndexingChain.processField(DefaultIndexingChain.java:359) at org.apache.lucene.index.DefaultIndexingChain.processDocument(DefaultIndexingChain.java:318) at org.apache.lucene.index.DocumentsWriterPerThread.updateDocument(DocumentsWriterPerThread.java:239) at org.apache.lucene.index.DocumentsWriter.updateDocument(DocumentsWriter.java:454) at org.apache.lucene.index.IndexWriter.updateDocument(IndexWriter.java:1511) at org.apache.solr.update.DirectUpdateHandler2.addDoc0(DirectUpdateHandler2.java:240) at org.apache.solr.update.DirectUpdateHandler2.addDoc(DirectUpdateHandler2.java:164) at org.apache.solr.update.processor.RunUpdateProcessor.processAdd(RunUpdateProcessorFactory.java:69) at org.apache.solr.update.processor.UpdateRequestProcessor.processAdd(UpdateRequestProcessor.java:51) at org.apache.solr.update.processor.DistributedUpdateProcessor.doLocalAdd(DistributedUpdateProcessor.java:926) at org.apache.solr.update.processor.DistributedUpdateProcessor.versionAdd(DistributedUpdateProcessor.java:1080) at org.apache.solr.update.processor.DistributedUpdateProcessor.processAdd(DistributedUpdateProcessor.java:692) at org.apache.solr.update.processor.LogUpdateProcessor.processAdd(LogUpdateProcessorFactory.java:100) at org.apache.solr.handler.loader.XMLLoader.processUpdate(XMLLoader.java:247) at org.apache.solr.handler.loader.XMLLoader.load(XMLLoader.java:174) at org.apache.solr.handler.UpdateRequestHandler$1.load(UpdateRequestHandler.java:99) at org.apache.solr.handler.ContentStreamHandlerBase.handleRequestBody(ContentStreamHandlerBase.java:74) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:135) at org.apache.solr.core.SolrCore.execute(SolrCore.java:1967) at org.apache.solr.servlet.SolrDispatchFilter.execute(SolrDispatchFilter.java:777) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:418) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:207) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1419) at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:455) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137)

1 0

[SOLVED] Thunderbird client certification validation fails with same profile but changed IMAP server software (Re: It works for two SMTP servers and cyrus-imap, why not Dovecot?)
by Daniel Dickinson 13 Feb '15

13 Feb '15

In hopes that searching may turn up the solution for others: The reason client certificate validation was failing in Thunderbird when it had previously succeeded with other servers (both IMAP and SMTP) is precisely that: the client and profile where the same ones used to connect to the server who's hostname hadn't changed, and email addresses and usernames were the same, and Thunderbird can't handle that. Keeping your existing Thunderbird profile when switching the IMAP server software running on the hosting server doesn't work even if you change all the configs that should matter (rename old accounts out of the way, replace the server they are supposed to be contacting with blank, and so on) and create new accounts within the same profile. The workaround for this bug in Thunderbird is to move the old profile out of the way and start fresh. The apparent cause of failure (invalid cert messages and other messages that make it look like it's a configuration or certificate/CA file issue) actually has nothing to do with the actual issue and is a major red herring. Sorry for the noise, back to regular scheduled program... Regards, Daniel On 2015-02-12 6:29 AM, Daniel Curran-Dickinson wrote: > Ok, the patch doesn't actually fix the bug. It appeared to do so in > that after running the server with the patch applied client certificate > validation succeeded, however, it appears this bug is actually > intermittent as, even with the patched package, the server is now > complaining that the client has not provided a valid SSL certificate. > > This is definitely not true as the certificates, and in general > verification of the same client-side certificates work, even with the > same Thunderbird client, with postfix, exim, and cyrus-imapd. > > In short dovecot has some bug that causes verification of certificates > presented by the client to fail, however the bug is not easy to debug as > sometimes config changes work, but later, running the same config, > things fail again. > > There appears to be some sort of caching even across client and server > restarts that is coming into play and confusing the issue. > > Anyone know of SSL caching issues with Window 8.1, particular > Thunderbird on that platform? > > Also why is this bug only affecting dovecot? There is some strangeness > going on here, and, from web searching for the same issue, it appears > others have run into the same issue and had no success in resolving it, > despite also doing everything according to documentation. > > With dovecot 2.2.9 from Ubuntu (i.e. not patched version): > The relevant config bits from dovecot -n are: > > auth_mechanisms = login plain digest-md5 cram-md5 > auth_ssl_require_client_cert = yes > ssl = required > ssl_ca = </path/to/ca.pem > ssl_cert = </path/to/cert.pem > ssl_key = </path/to/key.pem > ssl_protocols = !SSLv2 !SSLv3 > ssl_require_crl = no (yes or no makes no difference) > ssl_verify_client_cert = yes > > Oddly this doesn't appear in dovecot -n, though set > > disable_plaintext_auth = yes > > Client fails whether configured for encrypted passwords or not > Client fails whether using ssl = yes (imaps) on 993 or STARTTLS on 143 > > And yes I have followed the correct ordering of the CA followed by CRL > (and tried without CRL as well). > > In addition I have tried CA + intermediate and CA + crl + intermediate + > crl for startssl.com certificates as well as the above test with > self-signed CA (root CA + crl or just root CA). > > I have also just confirmed (by connecting and sending mail on port 587 > with STARTTLS and SSL required, with client certificate validation > required by postfix) that using the same certificate, same client, same > mail server, that SMTP AUTH + verification of client certificates succeeds. > > Since I've had the same client using the same certificates work with all > three of postfix (SMTP), exim (SMTP), and cyrus-imapd (IMAP), there is > not doubt that there is an issue with dovecot's handling of this scenario. > > I know I'm harping on this 'it works elsewhere' theme, but this bug has > been ignored for ages because of the assumption that user is doing > something wrong, and that is simply not the case, or if it is, dovecot > is very, very bad at indicating what the actual problem is. > > Line-ending are *nix line endings. > > Anything else that you want to suggest along with how to make dovecot > report what the actual problem is if there is some other magic formulae > to invoke? > > If I've missed something it's by no means obvious or explained clearly > anywhere. > > Regards, > > Daniel > > On 2015-02-11 2:33 AM, Daniel Dickinson wrote: >> Hi all, >> >> As I reported earlier (with a typo in the work [BUG]) client >> certification validation *does not* work even if you do everything >> exactly according to all documentation and attempts at helpful advice. >> >> I have seen this issue with both startssl.com and self-signed >> certificates, and based on what I've seen from searching the web, this >> is a problem that has gotten little attention because most people don't >> bother, but are more than willing to give out useless advice on how to >> make it work. >> >> Furthermore the issue does NOT occur with the cyrus-imap mail server, so >> it is definitely a server-side issue. >> >> The actual issue is that the code for calling OpenSSL that constructs >> the client certificate validation is in fact WRONG. >> >> I don't have a perfect patch as I was mostly interested in getting it >> working for my needs and didn't bother with constructing the list of CA >> names to send to the client, preferring to let OpenSSL handle all that >> sort of thing. >> >> What it comes down to is that the code, which probably worked at one >> point, was not correctly updated at some point and since then client >> side certificate validation has been BROKEN. >> >> I have patched against 2.2.9, however I have seen this problem in the >> versions in both Debian Wheezy and Debian Jessie as well. >> >> As you will see from the patch (which is an attachment as people tend to >> complain that patches get mangled when you inline them, and even if I >> have a good client I've gotten heck because the receiver didn't. >> >> Regards, >> >> Daniel >> >

1 0

Howto NTML
by Mark Foley 13 Feb '15

13 Feb '15

Has anyone gotten NTLM working with Dovecot and Outlook? I have a Samba4 domain controller / active directory running just fine on Linux Slackware64 14.1. PLAIN authenticiation works just fine if I create /etc/passwd accounts for the domain users. I've tried for over two weeks to get NTLM working from Outlook 2007 on a domain workstation without success. I end up with various permission errors and ultimately procmail won't deliver if I "adjust" mailbox folder permissions too liberally. Also it seems I have to log in each time in Outlook. If someone has made this work, I'd be very interesting in seeing the doveconf -n output, the permissions on the mailbox directories, the nsswitch.conf, and anything else you had to tweak to get this working. I'd really love to have AD authentication working on this setup! --Mark

2 2

examples of shared shared-mailboxes.db
by Kevin Laurie 13 Feb '15

13 Feb '15

Hello, I need help. i am trying to configure shared in boxes. I need to create a dictionary for shared inbox. how does 1 write shared-mailboxes.db dictionary? any example for the syntax/config? thanks kevin Below is part of the config i am trying to achieve:- plugin { acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db }

2 4

Enabling mod-sequences
by Luca Bertoncello 13 Feb '15

13 Feb '15

Hi list! I have Dovecot 1.2.9 from Ubuntu repositories on my server. Now I installed Horde and it give me sometimes the error "Mailbox does not support mod-sequences". Well, I must say, that I didn't know these mod-sequences, but I can' know all... Well, the question now is: how can I enable the support of the mod-sequences on the mailboxes of my Server? I searched in the Dovecot-Wiki, but I didn't found anything... Thanks a lot for your help Luca Bertoncello (lucabert(a)lucabert.de)

2 2

Dovecot dsync not replicating ".dovecot.sieve -> .sieve/managesieve.sieve" / setactive
by Martin Štefany 12 Feb '15

12 Feb '15

Hello, I've ran into problem with Dovecot and dsync replication. Everything works perfectly, including replication of sieve scripts, except fact that if user activates the 'managesieve' ruleset (I'm using currently Roundcubemail) on "mail1" host, it wouldn't be activated on "mail2" host, by creating symlink ".dovecot.sieve -> .sieve/managesieve.sieve". I've also tried to use 'replication_full_sync_interval', but symlink is not created anyway. I found 2 references already for this problem, but none came to any conclusion: http://dovecot.org/pipermail/dovecot/2014-June/096650.html http://www.dovecot.org/list/dovecot/2014-September/097857.html Here is the output from 'doveconf -n' from both hosts for reference :: mail1 :: # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-123.20.1.el7.x86_64 x86_64 CentOS Linux release 7.0.1406 (Core) auth_cache_size = 5 M auth_debug = yes auth_default_realm = example.com auth_gssapi_hostname = mail.example.com auth_krb5_keytab = /etc/dovecot/dovecot.keytab auth_mechanisms = plain gssapi auth_realms = example.com auth_verbose = yes doveadm_password = <secret> lmtp_save_to_detail_mailbox = yes mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = " fts fts_lucene notify quota replication virtual zlib" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox All { auto = create special_use = \All } mailbox Archives { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Templates { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap-passdb.conf.ext driver = ldap } plugin { fts = lucene fts_autoindex = yes fts_lucene = whitespace_chars=@. mail_replica = tcps:mail2.example.com:10993 quota = maildir:User quota quota_rule = *:storage=4GB quota_rule2 = Trash:storage=+50MB sieve = ~/.dovecot.sieve sieve_after = /srv/sieve/after.d/ sieve_before = /srv/sieve/before.d/ sieve_default = /srv/sieve/default.d/dovecot.sieve sieve_dir = ~/.sieve sieve_global_dir = /srv/sieve/ zlib_save = gz zlib_save_level = 9 } postmaster_address = postmaster(a)example.com protocols = imap lmtp sieve service aggregator { fifo_listener replication-notify-fifo { group = vmail mode = 0660 user = vmail } unix_listener replication-notify { group = vmail mode = 0660 user = vmail } } service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } service doveadm { inet_listener { port = 10993 ssl = yes } } service imap-login { inet_listener imaps { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { group = vmail mode = 0660 user = vmail } } ssl_ca = </etc/ipa/ca.crt ssl_cert = </etc/pki/tls/certs/dovecot.pem ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA ssl_client_ca_file = /etc/ipa/ca.crt ssl_client_cert = </etc/pki/tls/certs/dovecot.pem ssl_client_key = </etc/pki/tls/private/dovecot.key ssl_key = </etc/pki/tls/private/dovecot.key ssl_parameters_regenerate = 1 weeks ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap override_fields = gid=vmail home=/srv/vmail/example.com/%n } verbose_ssl = yes protocol lmtp { mail_plugins = " fts fts_lucene notify quota replication virtual zlib sieve" } protocol imap { mail_plugins = " fts fts_lucene notify quota replication virtual zlib imap_quota imap_zlib" } mail2 :: # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-123.20.1.el7.x86_64 x86_64 CentOS Linux release 7.0.1406 (Core) auth_cache_size = 5 M auth_debug = yes auth_default_realm = example.com auth_gssapi_hostname = mail.example.com auth_krb5_keytab = /etc/dovecot/dovecot.keytab auth_mechanisms = plain gssapi auth_realms = example.com auth_verbose = yes doveadm_password = <secret> lmtp_save_to_detail_mailbox = yes mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = " fts fts_lucene notify quota replication virtual zlib" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox All { auto = create special_use = \All } mailbox Archives { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Templates { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap-passdb.conf.ext driver = ldap } plugin { fts = lucene fts_autoindex = yes fts_lucene = whitespace_chars=@. mail_replica = tcps:mail1.example.com:10993 quota = maildir:User quota quota_rule = *:storage=4GB quota_rule2 = Trash:storage=+50MB sieve = ~/.dovecot.sieve sieve_after = /srv/sieve/after.d/ sieve_before = /srv/sieve/before.d/ sieve_default = /srv/sieve/default.d/dovecot.sieve sieve_dir = ~/.sieve sieve_global_dir = /srv/sieve/ zlib_save = gz zlib_save_level = 9 } postmaster_address = postmaster(a)example.com protocols = imap lmtp sieve service aggregator { fifo_listener replication-notify-fifo { group = vmail mode = 0660 user = vmail } unix_listener replication-notify { group = vmail mode = 0660 user = vmail } } service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } service doveadm { inet_listener { port = 10993 ssl = yes } } service imap-login { inet_listener imaps { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { group = vmail mode = 0660 user = vmail } } ssl_ca = </etc/ipa/ca.crt ssl_cert = </etc/pki/tls/certs/dovecot.pem ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA ssl_client_ca_file = /etc/ipa/ca.crt ssl_client_cert = </etc/pki/tls/certs/dovecot.pem ssl_client_key = </etc/pki/tls/private/dovecot.key ssl_key = </etc/pki/tls/private/dovecot.key ssl_parameters_regenerate = 1 weeks ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap override_fields = gid=vmail home=/srv/vmail/example.com/%n } verbose_ssl = yes protocol lmtp { mail_plugins = " fts fts_lucene notify quota replication virtual zlib sieve" } protocol imap { mail_plugins = " fts fts_lucene notify quota replication virtual zlib imap_quota imap_zlib" } And reference directory structure :: [root@mail1 ~]# tree -a /srv /srv ├── sieve │ ├── after.d │ ├── before.d │ │ ├── spam.sieve │ │ └── spam.svbin │ └── default.d └── vmail └── example.com └── <user> ├── .dovecot.lda-dupes ├── .dovecot.sieve -> .sieve/managesieve.sieve ├── .dovecot.svbin ├── Maildir │ ├── .All │ │ ├── cur │ │ ├── dovecot.index.log │ │ ├── dovecot-uidlist │ │ ├── maildirfolder │ │ ├── new │ │ └── tmp │ ├── .Archives │ │ ├── cur │ │ ├── dovecot.index.log │ │ ├── dovecot-uidlist │ │ ├── maildirfolder │ │ ├── new │ │ └── tmp │ ├── cur │ ├── dovecot.index.cache │ ├── dovecot.index.log │ ├── dovecot.index.thread │ ├── dovecot-keywords │ ├── dovecot.mailbox.log │ ├── dovecot-uidlist │ ├── dovecot-uidvalidity │ ├── dovecot-uidvalidity.54dbb6f0 │ ├── .Drafts │ │ ├── cur │ │ ├── dovecot.index.cache │ │ ├── dovecot.index.log │ │ ├── dovecot-uidlist │ │ ├── maildirfolder │ │ ├── new │ │ └── tmp │ ├── .Junk │ │ ├── cur │ │ ├── dovecot.index.log │ │ ├── dovecot-uidlist │ │ ├── maildirfolder │ │ ├── new │ │ └── tmp │ ├── lucene-indexes │ │ ├── _k.cfs │ │ ├── segments_17 │ │ └── segments.gen │ ├── maildirfolder │ ├── maildirsize │ ├── new │ ├── .Sent │ │ ├── cur │ │ ├── dovecot.index.cache │ │ ├── dovecot.index.log │ │ ├── dovecot-uidlist │ │ ├── maildirfolder │ │ ├── new │ │ └── tmp │ ├── subscriptions │ ├── .Templates │ │ ├── cur │ │ ├── dovecot.index.log │ │ ├── dovecot-uidlist │ │ ├── maildirfolder │ │ ├── new │ │ └── tmp │ ├── tmp │ └── .Trash │ ├── cur │ ├── dovecot.index.log │ ├── dovecot-uidlist │ ├── maildirfolder │ ├── new │ └── tmp └── .sieve ├── managesieve.sieve └── tmp [root@mail2 ~]# tree -a /srv /srv ├── sieve │ ├── after.d │ ├── before.d │ │ ├── spam.sieve │ │ └── spam.svbin │ └── default.d └── vmail └── example.com └── <user> ├── Maildir │ ├── .All │ │ ├── cur │ │ ├── dovecot.index.log │ │ ├── dovecot-uidlist │ │ ├── maildirfolder │ │ ├── new │ │ └── tmp │ ├── .Archives │ │ ├── cur │ │ ├── dovecot.index.log │ │ ├── dovecot-uidlist │ │ ├── maildirfolder │ │ ├── new │ │ └── tmp │ ├── cur │ ├── dovecot.index.cache │ ├── dovecot.index.log │ ├── dovecot-keywords │ ├── dovecot.mailbox.log │ ├── dovecot-uidlist │ ├── dovecot-uidvalidity │ ├── dovecot-uidvalidity.54dbb6f5 │ ├── .Drafts │ │ ├── cur │ │ ├── dovecot.index.cache │ │ ├── dovecot.index.log │ │ ├── dovecot-uidlist │ │ ├── maildirfolder │ │ ├── new │ │ └── tmp │ ├── .Junk │ │ ├── cur │ │ ├── dovecot.index.log │ │ ├── dovecot-uidlist │ │ ├── maildirfolder │ │ ├── new │ │ └── tmp │ ├── lucene-indexes │ │ ├── _k.cfs │ │ ├── segments_17 │ │ └── segments.gen │ ├── maildirfolder │ ├── maildirsize │ ├── new │ ├── .Sent │ │ ├── cur │ │ ├── dovecot.index.cache │ │ ├── dovecot.index.log │ │ ├── dovecot-uidlist │ │ ├── maildirfolder │ │ ├── new │ │ └── tmp │ ├── subscriptions │ ├── .Templates │ │ ├── cur │ │ ├── dovecot.index.log │ │ ├── dovecot-uidlist │ │ ├── maildirfolder │ │ ├── new │ │ └── tmp │ ├── tmp │ └── .Trash │ ├── cur │ ├── dovecot.index.log │ ├── dovecot-uidlist │ ├── maildirfolder │ ├── new │ └── tmp └── .sieve ├── managesieve.sieve └── tmp Thanks a lot for Dovecot anyway! ;) Martin

2 2

[Patch] Allow for more than one recipient_delimiter (a la postfix 2.11)
by Lennart Weller 12 Feb '15

12 Feb '15

Hey everyone, as my previous emails apparently got stuck in a spam filter I'll try this again. The patches attached here allow for more than one recipient delimiter in the address. Which is allowed in postfix since version 2.11. E.g. lhw+postfix(a)ring0.de would be equal to lhw-postfix(a)ring0.de if configured that way. Same as postfix only the first discovered delimiter is taken into account and the priority is first to last in the list. Lennart

1 0

Controlling inactivity timeout for IMAP
by Joseph Tam 12 Feb '15

12 Feb '15

I have a problem with a user who uses a wireless carrier that keeps changing his IP as he travels throughout the city. From the perspective of our dovecot IMAP server, the user keeps logging in from another IP, and after a short while, hits up against the mail_max_userip_connections limit. It takes 30 minutes before those orphaned connections times out. Is there any way to decrease the IMAP idle timeout other than to recompile dovecot with a new value? imap-common.h:#define CLIENT_IDLE_TIMEOUT_MSECS (60*30*1000) For example, will this work? service imap { idle_kill = 600 } Joseph Tam <jtam.home(a)gmail.com>

2 1

Missing amd64 on butobuild Server
by Dominik Breu 12 Feb '15

12 Feb '15

Hello List, is there a Reason why the build server at http://xi.rename-it.nl/debian/ aren’t delivering amd64 since nearly an month? best regards dominik

2 1

How to Delete an user and Purge attachements with a common directory mail_attachment_dir with SIS for all users.
by TN 12 Feb '15

12 Feb '15

Hello everybody, What is the best way to delete an user mailbox (ex: /var/mail/johndoe ) when all attachments (for all users) are in a common directory with SIS deduplication (ex: mail_attachment_dir = /var/mail/attachments ) ? Trying to delete user mailbox directory (rm) and do the command : doveadm -v purge -u johndoe leave all johndoe's attachments orphelin. Best regards, TN

2 2

[PATCH] Fix for client certificate validation does not work
by Daniel Dickinson 12 Feb '15

12 Feb '15

Hi all, As I reported earlier (with a typo in the work [BUG]) client certification validation *does not* work even if you do everything exactly according to all documentation and attempts at helpful advice. I have seen this issue with both startssl.com and self-signed certificates, and based on what I've seen from searching the web, this is a problem that has gotten little attention because most people don't bother, but are more than willing to give out useless advice on how to make it work. Furthermore the issue does NOT occur with the cyrus-imap mail server, so it is definitely a server-side issue. The actual issue is that the code for calling OpenSSL that constructs the client certificate validation is in fact WRONG. I don't have a perfect patch as I was mostly interested in getting it working for my needs and didn't bother with constructing the list of CA names to send to the client, preferring to let OpenSSL handle all that sort of thing. What it comes down to is that the code, which probably worked at one point, was not correctly updated at some point and since then client side certificate validation has been BROKEN. I have patched against 2.2.9, however I have seen this problem in the versions in both Debian Wheezy and Debian Jessie as well. As you will see from the patch (which is an attachment as people tend to complain that patches get mangled when you inline them, and even if I have a good client I've gotten heck because the receiver didn't. Regards, Daniel

2 2

Processing Maildir contents on message-by-message basis
by Jeff Kletsky 12 Feb '15

12 Feb '15

I (finally) moved over to Maildir storage here and would like to implement some "scripts" to manage taking actions on emails manually identified as misclassified as spam/ham. After reading through the Dovecot 2 description of how it works to try to see how it interacts with other processes changing the files. I'm concerned that I would be corrupting the message indexes if I just go hog-wild and run the scripts on the filesystem, rather than through Dovecot in some way. The types of actions taken would likely be: * Select a message from a given mailbox (the "source") * Potentially modify it drastically (remove spamassassin markup, for example) * Pipe the modified message to a mail-delivery agent (still running procmail here) and/or to sa-learn * Assuming successful completion of the pipe action(s), remove the source message from the mailbox While I can use doveadm to do bulk move/delete actions, I don't see a clear way to iterate through a set of messages and perform actions on them. First off, if I wrangle and mangle the message files directly, do I have to worry about the indexes, or do the indexes "magically" repair themselves in cases where the messages are either altered (including headers) or removed? Have I missed a way to iterate over messages and process it using external tools using the dovecot tools? Has this been discussed ad nauseum and I somehow missed it? (If so, for which I apologize profusely). Thanks, Jeff

2 1

Re:Invalid password in passdb: Not a valid MD5-CRYPT or PLAIN-MD5 password
by Ultramedia Libertad 12 Feb '15

12 Feb '15

When using CRYPT to encrypt the password, you must put the following in dovecot-sql.conf.ext default_pass_scheme = CRYPT I hope this can help more people, in addition to leave you as I did my query: password_query = \ SELECT password \ FROM users WHERE login = '%u -- editor de sueños

1 0

Per-protocol ssl_protocols settings
by Gionatan Danti 11 Feb '15

11 Feb '15

Hi all, I have a question regarding the "ssl_protocols" parameter. I understand that editing the 10-ssl.conf file I can set the ssl_protocols variable as required. At the same time, I can edit a single protocol file (eg: 20-pop3.conf) to set the ssl_protocols for a specific protocol/listener. I wander if (and how) I can create a different listener for another POP3 instance, for example listening on port 10995, and using another ssl_protocol setting. In short, I would like to create a different, firewalled pop3s service enabling the SSLv3 stack, while disabling it at system-wide settings. I am able to successfully create a new listener for port 10995, but I don't understand how to associate the ssl_protocols value to the new listener. Simply putting the ssl_protocols value into the listener section give me a configuration error. Thank you all. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it email: g.danti(a)assyoma.it - info(a)assyoma.it GPG public key ID: FF5F32A8

2 4

Invalid password in passdb: Not a valid MD5-CRYPT or PLAIN-MD5 password
by Ultramedia Libertad 11 Feb '15

11 Feb '15

Hi friends, I am migrating imap-courier to dovecot, I use openbsd+postfix+imap-courier, and now I'm trying to run openbsd+opensmtpd+dovecot. In the beginning it was a little traumante but it works OpenSMTPD correctly. Now I have configured dovecot, and I hope that your backend authorization is the same database that was used imap-courier. In /var/log/maillog receipt the following error auth-worker(2915): Error: sql(user(a)domain.tld,199.254.238.134): Invalid password in passdb: Not a valid MD5-CRYPT or PLAIN-MD5 password My /etc/dovecot/dovecot-sql.conf.ext password_query = \ SELECT login, password \ FROM users WHERE login = '%u' My database MySQL to start as well mysql> CREATE DATABASE mail; Query OK, 1 row affected (0.01 sec) mysql> use mail Database changed mysql> CREATE TABLE domains ( -> id INT NOT NULL PRIMARY KEY AUTO_INCREMENT, -> domain VARCHAR(255) NOT NULL UNIQUE); Query OK, 0 rows affected (0.02 sec) mysql> CREATE TABLE users ( -> id INT NOT NULL PRIMARY KEY AUTO_INCREMENT, -> login VARCHAR(255) NOT NULL UNIQUE, -> name VARCHAR(255) NOT NULL, -> password CHAR(13) NOT NULL, -> uid SMALLINT NOT NULL DEFAULT 2000, -> gid SMALLINT NOT NULL DEFAULT 2000, -> home VARCHAR(255) NOT NULL DEFAULT '/var/vmail', -> maildir VARCHAR(255) NOT NULL, -> quota VARCHAR(10) NOT NULL DEFAULT '10000000S'); Query OK, 0 rows affected (0.01 sec) mysql> CREATE TABLE alias_maps ( -> id INT NOT NULL PRIMARY KEY AUTO_INCREMENT, -> account VARCHAR(255) NOT NULL UNIQUE, -> alias VARCHAR(255) NOT NULL); Query OK, 0 rows affected (0.00 sec) mysql> GRANT SELECT ON mail.* to 'vmail'@'localhost' IDENTIFIED BY 'vmail'; Query OK, 0 rows affected (0.01 sec) mysql> FLUSH PRIVILEGES; Not for me this past this error to insert data in the database, I do this: mysql> INSERT INTO users (login, name, password, maildir) -> VALUES ('name(a)domain.tld', 'name lastname', ENCRYPT('pass'), -> 'domain.tld/name/'); Which helps me is well received Thanks for all -- editor de sueños

1 0

Server switching
by The Doctor 11 Feb '15

11 Feb '15

Quick question. We are using both IMAP and POP#. Question : how can you avoid retrieving an e-mail that has been already retrieved? -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca God,Queen and country!Never Satan President Republic!Beware AntiChrist rising! http://www.fullyfollow.me/rootnl2k Look at Psalms 14 and 53 on Atheism If you want to catch something, running after it isn't always the best way. -Lois McMaster Bujold

3 2

Best way to delete an user mailbox with mdbox format and all attachments detach/dedup ?
by Tan 11 Feb '15

11 Feb '15

Hello everybody, On a Dovecot 2.x, what is the best way to delete an user mailbox when : * all attachments for all users detach in a common directory (mail_attachment_dir = var/mail/attachments ). * attachments use SIS deduplication (mail_attachment_fs = sis posix) * mailbox are in mdbox Trying to delete user mailbox directory (rm) and do the command : doveadm -v purge -u johndoe , all attachments of this user are orphelins. In another way, is there a dovecot command to delete or to synchronize attachments ? Best regards, TaN

1 0

Slow replication
by Jonas Plitt 10 Feb '15

10 Feb '15

Hi, I'm running two Dovecot 2.2.9 Servers running replication. Users are the same. My Replication is very slow. Mails from Server one appear on Server two after 1-3 hours. Rarely i can see duplicated mails (Log message "Expunged message reappeared. Setting new UID"). This is my doveconf -n output: > # 2.2.9: /etc/dovecot/dovecot.conf > # OS: Linux 3.13.0-44-generic x86_64 Ubuntu 14.04.1 LTS > auth_cache_size = 10 M > auth_mechanisms = plain login > debug_log_path = /var/log/dovecot-debug.log > doveadm_password = ABC012456789ABC > doveadm_port = 12345 > imap_idle_notify_interval = 30 mins > info_log_path = /var/log/dovecot-info.log > listen = *,[::] > log_timestamp = "%Y-%m-%d %H:%M:%S " > login_greeting = Dovecot (Ubuntu) ready. > mail_fsync = always > mail_gid = vmail > mail_location = mbox:~/mail:INBOX=/var/mail/%u > mail_plugins = " notify replication zlib mail_log" > mail_privileged_group = vmail > mail_uid = vmail > mailbox_idle_check_interval = 1 mins > mbox_lazy_writes = no > namespace inbox { > inbox = yes > location = > prefix = > } > passdb { > args = /etc/dovecot/dovecot-sql.conf > driver = sql > } > passdb { > args = /etc/dovecot/dovecot-sql.conf > driver = sql > } > plugin { > mail_log_events = delete undelete expunge copy mailbox_delete > mailbox_rename > mail_log_fields = uid box msgid size > mail_replica = tcp:server2.mydomain.de:12345 > quota = dict:user::file:/var/vmail/%d/%n/.quotausage > replication_full_sync_interval = 1 hour > sieve = /var/vmail/%d/%n/.sieve > zlib_save = gz > zlib_save_level = 9 > } > postmaster_address = postmaster(a)mydomain.tld > protocols = imap pop3 > replication_max_conns = 30 > service aggregator { > fifo_listener replication-notify-fifo { > mode = 0666 > user = vmail > } > unix_listener replication-notify { > mode = 0666 > user = vmail > } > } > service auth { > unix_listener /var/spool/postfix/private/auth { > group = postfix > mode = 0660 > user = postfix > } > unix_listener auth-userdb { > group = vmail > mode = 0600 > user = vmail > } > user = root > } > service config { > unix_listener config { > user = vmail > } > } > service doveadm { > inet_listener { > port = 12345 > ssl = no > } > user = vmail > } > service imap-login { > client_limit = 1000 > inet_listener imap { > port = 143 > } > inet_listener imaps { > port = 993 > ssl = yes > } > process_limit = 500 > process_min_avail = 5 > service_count = 1 > } > service lmtp { > executable = lmtp -L > process_min_avail = 5 > unix_listener lmtp { > group = postfix > mode = 0666 > user = postfix > } > user = vmail > } > service pop3-login { > inet_listener pop3 { > port = 110 > } > inet_listener pop3s { > port = 995 > ssl = yes > } > } > service replicator { > process_min_avail = 1 > unix_listener replicator-doveadm { > group = vmail > mode = 0666 > user = vmail > } > unix_listener replicator { > group = vmail > mode = 0666 > user = vmail > } > } > ssl_ca = </etc/ssl/certs/startcom-bundle.pem > ssl_cert = </etc/ssl/certs/server2.pem > ssl_cipher_list = > EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH:EDH:HIGH:+RSA:+SHA: > MEDIUM:+RC4:RC4:!aNULL:!MD5:!eNULL:!LOW:!EXP:!DSS:!PSK:!SRP > ssl_dh_parameters_length = 2048 > ssl_key = </etc/ssl/private/server2.key > ssl_prefer_server_ciphers = yes > ssl_protocols = !SSLv2 !SSLv3 > ssl_require_crl = no > userdb { > args = /etc/dovecot/dovecot-sql.conf > driver = sql > } > userdb { > args = /etc/dovecot/dovecot-sql.conf > driver = sql > } > protocol imap { > imap_client_workarounds = delay-newmail > mail_max_userip_connections = 15 > mail_plugins = " notify replication zlib mail_log quota imap_quota > imap_zlib" > ssl_ca = </etc/ssl/certs/startcom-bundle.pem > ssl_cert = </etc/ssl/certs/imap-domain-de.crt > ssl_key = </etc/ssl/private/imap-domain-de.key > } > protocol pop3 { > mail_max_userip_connections = 10 > mail_plugins = " notify replication zlib mail_log quota" > pop3_uidl_format = %08Xu%08Xv > ssl_ca = </etc/ssl/certs/startcom-bundle.pem > ssl_cert = </etc/ssl/certs/server1.pem > ssl_key = </etc/ssl/private/server1.key > } > protocol lda { > info_log_path = /var/log/dovecot-lda.log > mail_plugins = " notify replication zlib mail_log" > } > Aditionally, I forced a "doveadm sync -f" using crontab twice a day. Can anybody give me a hint, please? -- regards, Jonas

1 0