- dovecot - dovecot.org

"doveadm backup/sync" don't follow message moving even with MDBOX
by Jesus Cea 29 Sep '14

29 Sep '14

Using mdbox as the storage backend, moving a message from a mailbox to another just update a reference. The message is not fisically moved on the disk. I would expect "dsync" to use this fact when source and destination are mdbox. But it doesn't. Anybody else can confirm?. Any plan to implement it?. Thanks!. -- Jesús Cea Avión _/_/ _/_/_/ _/_/_/ jcea(a)jcea.es - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/ Twitter: @jcea _/_/ _/_/ _/_/_/_/_/ jabber / xmpp:jcea@jabber.org _/_/ _/_/ _/_/ _/_/ _/_/ "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/ "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/ "El amor es poner tu felicidad en la felicidad de otro" - Leibniz

1 0

dsync full sync
by Atıf CEYLAN 29 Sep '14

29 Sep '14

Hi all, I have 2 question. First: I use dovecot (version 2.2.9) with mdbox mail format. When I run dsync tool with "mirror" or "backup" parameters my source and destination directory synchronize correctly but if I delete some messages in user mailbox, deleted messages does not synced to destination. For example : atif(a)domain.com path is /mail/domain.com/atif/ and its size is 1GB. after first running the "dsync -u atif(a)domain.com backup mdbox:/backup/domain.com/atif/" command, size of "/backup/domain.com/atif/" is 1GB I deleted 300mb messages in atif mailbox then /mail/domain.com/atif/ is decreased to 700MB and I launched dsync command again. But /backup/domain.com/atif/ is not decreased to 700Mb. My backup directory still 1GB . I tried dsync with "-f , backup, mirror" parameters. Second problem, the first time the backup atif's quota size is increasing to x2. before backup : atif(a)domain.com quota size 1GB after backup: atif(a)domain.com quota size 2GB so I must run "doveadm quota recalc" command. Why? What is correct usage of mdbox mail format and dsync tool? -- M.Atıf CEYLAN

2 1

dsync mirror does not maintain changes between mailboxes
by Alan McGinlay 28 Sep '14

28 Sep '14

Hi, running: dsync -D -v -o mail_fsync=never mirror -R -f -u user@domain imapc: Where "domain" is a cyrus imap server does not do what the documentation says it does, not even close. After the first run to an empty mailbox on the dovecot 2.2.13 server all the mails (1.1GB) seem to be correctly synced. I send a test email to the dovecot server and it shows up correctly. Second run of the above dsync command, first thing that happens is all mails are deleted from the dovecot mailbox (yet the storage used by output of "du -m" doesn't change) and the sync appears to happen again from scratch however the disk space increases again! Now up to about 2GB and another run will take it up a few hundred mb more! I have tried with multiple different mail storage formats, maildir++, mdbox sdbox, all show the same (except maildir which just complains that INBOX can't be deleted on the second dsync run). This is frustrating beyond belief, please please anyone who has any insight let me know, the dsync debug output is a little huge to sanitize and post to the list but i can send it individually if anyone has any ideas! I am ready to give up totally on dovecot but at the same time I just wish it would work! doveconf -n # 2.2.13 (6bb26098a45c): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-67-virtual x86_64 Ubuntu 14.04.1 LTS auth_debug = yes auth_master_user_separator = * default_vsz_limit = 512 M disable_plaintext_auth = yes imapc_features = rfc822.size imapc_host = oldmailhost.domain.com imapc_master_user = cyradmin imapc_password = xxxxxxxx imapc_user = %u mail_gid = vmail mail_home = /var/vmail/domains/%d/%1n/%n mail_location = sdbox:~/sdbox mail_plugins = zlib notify quota fts fts_solr mail_prefetch_count = 30 mail_uid = vmail mailbox_list_index = yes managesieve_sieve_capability = fileinto imapflags namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts = solr fts_solr = url=http://localhost:8080/solr/ quota = dirsize:User quota quota_grace = 10%% quota_rule = *:storage=20G sieve = ~/.dovecot.sieve sieve_dir = /var/vmail/sieve/domain/%1d/%d/%1n/%n/ sieve_extensions = imapflags fileinto zlib_save = bz2 zlib_save_level = 5 } protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } vsz_limit = 512 M } service imap { process_limit = 1024 vsz_limit = 512 M } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_ssl = yes protocol lmtp { mail_plugins = zlib notify quota fts fts_solr quota sieve } protocol imap { mail_plugins = zlib notify quota fts fts_solr imap_quota } protocol sieve { managesieve_implementation_string = Cyrus timsievd v2.2.13 }

1 0

Re: Dovecot Sieve and Postfix header_checks Issue
by Joseph Tam 27 Sep '14

27 Sep '14

"Klaipedaville on Google" <klaipedaville(a)gmail.com> writes: > However, my header_checks file has just 5 lines of regexp as follows: > ... > /^From:.*\@.*\.tw/ REJECT Sorry, Taiwanese mail is not allowed. Can't speak about the other issues you are having, but is this regexp pattern what you want? Unless Postfix PCRE automatically right-anchors these regexps, aren't you rejecting mail from someone(a)mail.twinpeaks.org, or even twitter notifications (from *(a)bounce.twitter.com) Joseph Tam <jtam.home(a)gmail.com>

4 7

Dovecot Sieve and Postfix header_checks Issue
by Klaipedaville on Google 27 Sep '14

27 Sep '14

Hello List, I tried to subscribe but it's taking forever for the confirmation email to arrive so I thought I would ask away by emailing directly. My apologies in advance should this question appear twice. It may seem real simple to experts but I cannot really figure it out. I'll try to be concise: Dovecot version is 2.1.7. Its dovecot –n is real short one and follows right after my question. I have my Postfix 2.9.6 properties set like this: header_checks = /etc/path/to/myfile. Then I have Dovecot Sieve also configured and working fine. Now the trouble is that these two cannot be combined together can they? Dovecot Sieve and Postfix's header_checks? If I turn off header_checks in Postfix then Dovecot Sieve is working fine. If I vise versa turn off Dovecot Sieve then Postfix's header-checks are also working fine. However, when I keep them both turned on it also works but only partially and in this case Dovecot Sieve never bounces back any rejected massages remotely, the bounce happens only locally. That is I can see it in my logs that it was rejected locally but the message is never sent back to the sender saying something like, "Spam is rejected here". Thus the reject turns into a silent discard without telling the sender anything at all. Any ideas, help, advices how do I fix that? Would be really grateful for any suggestions / assistance at all. Many thanks in advance! P.S. I would like to use both because Dovecot Sieve is a very powerful and great plugin that uses Spamassassin's added tags and headers based on which I create my rules. Postfix in its turn has a very neat feature of checking the headers via regexp but Postfix does not see / detect Spamassassin's added headers at all because I passed delivery and authentication (which is a way better than Postfix's) to dovecot deliver. # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.6 ext4 auth_mechanisms = plain login cram-md5 scram-sha-1 auth_verbose = yes hostname = WindTalker info_log_path = /var/log/dovecot-sieve.log log_path = /var/log/dovecot-sieve-errors.log mail_location = maildir:/home/mvail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/passwd driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_default = /etc/dovecot/default.sieve sieve_dir = ~/sieve } pop3_uidl_format = %g postmaster_address = postmaster(a)example.com protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_ca = </etc/ssl/ca.crt ssl_cert = </etc/ssl//new.crt ssl_key = </etc/ssl/new.key userdb { args = uid=vmail gid=vmail home=/home/vmail/%u driver = static } protocol lda { mail_debug = yes mail_plugins = sieve } Regards, Dennis.

4 22

ALT storage question
by Ralf Hildebrandt 27 Sep '14

27 Sep '14

I want to migrate from a non-hashed storage to a hashed storage. So I set this up: mail_location = mdbox:/srv/vmail/%2.256Hu/%Lu/mdbox:ALT=/srv/vmail/%Ld/%Ln/mdbox I rsynced the "old" mdbox-style mailbox from another machine to to /srv/vmail/%Ld/%Ln/mdbox (/srv/vmail/charite.de/ralf.hildebrandt/mdbox in my case) The mail_location /srv/vmail/c5/ralf.hildebrandt(a)charite.de was non-existing. Then I connected using IMAP and tried to have a look at the INBOX: Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Effective uid=10000, gid=10000, home=/srv/vmail/c5/ralf.hildebrandt(a)charite.de Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Home dir not found: /srv/vmail/c5/ralf.hildebrandt(a)charite.de Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:/srv/vmail/c5/ralf.hildebrandt@charite.de/mdbox:ALT=/srv/vmail/charite.de/ralf.hildebrandt/mdbox Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: fs: root=/srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox, index=, indexpvt=, control=, inbox=, alt=/srv/vmail/charite.de/ralf.hildebrandt/mdbox Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace : /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox doesn't exist yet, using default permissions Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace : Using permissions from /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox: mode=0700 gid=default Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace : /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox/mailboxes/INBOX doesn't exist yet, using default permissions Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace : Using permissions from /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox: mode=0700 gid=default Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Error: Mailbox INBOX has existing files in alt path, rebuilding storage to avoid losing messages Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Error: Failed to autocreate mailbox INBOX: Internal error occurred. Refer to server log for more information. [2014-09-27 11:15:15] Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Warning: fscking index file /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox/storage/dovecot.map.index Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Info: Disconnected: Logged out in=58 out=623 What is "Mailbox INBOX has existing files in alt path, rebuilding storage to avoid losing messages" referring to? And why is this an error? After all that I reconnect, just to find an empty inbox. WTF? Why is the ALT storage being ignored? The ALT storage contains: total 8 drwxr-xr-x 6 vmail vmail 4096 Aug 18 15:25 mailboxes drwxr-xr-x 2 vmail vmail 4096 Sep 24 00:37 storage and those two directories contain: mailboxes: total 16 drwxr-xr-x 3 vmail vmail 4096 Aug 18 15:25 Drafts drwxr-xr-x 3 vmail vmail 4096 Aug 18 15:25 INBOX drwxr-xr-x 3 vmail vmail 4096 Aug 18 15:25 Sent drwxr-xr-x 3 vmail vmail 4096 Aug 18 15:25 Trash storage: -rw-r--r-- 1 vmail vmail 3552 Sep 25 14:47 dovecot.map.index.log -rw-r--r-- 1 vmail vmail 20015 Sep 25 13:51 m.1 On the other hand, just moving /srv/vmail/charite.de/ralf.hildebrandt/mdbox to /srv/vmail/c5/ralf.hildebrandt(a)charite.de worked like a charm! -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

1 0

Re: Is dovecot vulnerable to the shellshock/CVE-2014-6271 exploit?
by Joseph Tam 27 Sep '14

27 Sep '14

Timo Sirainen writes: >> Although I don't use it, it's plausible the checkpassword hook is also vulnerable >> via the MASTER_USER environment variable: >> >> http://wiki2.dovecot.org/AuthDatabase/CheckPassword > > This is one possibility, and it's the worst one because it could happen > before login. But it requires two things: > > 1. auth_username_chars setting must include the characters required in > the exploit, so "(){;" at least I guess. None of these characters are > enabled by default. But I think some people may have set this setting > to empty to allow all characters. > > 2. checkpassword must call bash, which also isn't done by default. > > Another possibility is is that in some setups the password (%w) may be > added to userdb fields, which ends up being exported to environment if > post-login scripts are used. Again Dovecot doesn't execute shell > automatically, but it may end up being executed by the configuration. > So this requires a valid username + password, and ability to change the > password to the bash exploit. Thanks for confirming what I suspected, Timo. The latter, if it is at all feasible, appears to be an "inside job" type of exploit, where the exploiter already has an account but can arbitrarily change their password. It's not as serious as the pre-login one, but worth addressing if the narrow circumstances of using post-login bash scripts apply. Joseph Tam <jtam.home(a)gmail.com>

1 0

doveadm penalty: who is 0.0.0.0?
by Peer Heinlein 27 Sep '14

27 Sep '14

Using doveadm penalty I just noticed a penalty for 0.0.0.0. Is this Postfix querying the auth-socket for his SASL-requests? I tried adding 0.0.0.0 to login_trusted_networks, but that doesn't help. Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

3 2

Re: director
by Chris Lasater 26 Sep '14

26 Sep '14

The configuration and run/base_dir directories can be where ever you like. The locations Eduardo stated are the most appropriate for dovecot installed with an RPM. Mine were compiled and set in the home directory, so they are in a slightly different location. As long as you use the -c to point to the correct configuration file you should be good. For mine I kept my dovecot config file in the default location and put the director one elsewhere and created an alias, so that I can start the director by just typing director. This might make things easier for you to manage, then you can just stop it by running "doveadm -i <instance_name> stop" alias director="sudo -E PATH=${PATH} LD_LIBRARY_PATH=${LD_LIBRARY_PATH} /home/user/dovecot/sbin/dovecot -c /home/user/dovecot/etc/dovecot/director.conf" On 09/23/2014 05:00 PM, jjhoffart wrote: >> Thanks for the replies, >> I am still fairly new to dovecot and still learning. This is a quick run down of my setup: 3 servers running iRedMail (this is a package that installs dovecot 2.1.7, postfix, and LDAP). All three servers share an NFS backend. The same 3 servers are also sitting behind a load balancer. What I want to do is use these three servers as directors and mail servers. So from the replies I have gotten I understand that I need to create 2 config files 1 for director and 1 for dovecot. Now my next question is do these config files need to be stored in /etc/dovecot or /var/run/dovecot? Also is creating the second config file as simple as copying and renaming the dovecot.conf file? >> >> On Sep 23, 2014, at 2:26 PM, Eduardo Ramos <eduardo(a)freedominterface.org> wrote: >> >>> Hi, >>> >>> In fact you don't NEED a director. You can use two dovecot servers sharing a NFS storage with a normal (backend) implementation. It's good to see that page: http://wiki2.dovecot.org/NFS for some good recomendations. >>> >>> You must have a base_dir for each instance of dovecot you want to run, and a dovecot.conf as well. One could be director and other backend. I suggest you have two separated configuration directories, /etc/dovecot-director and /etc/dovecot-backend. Each with the respective configuration. Start dovecot with "dovecot -c /etc/dovecot-director/dovecot.conf". Backend is the same. >>> >>> In order to help more, provide us more details about your environment and doulbts. >>> >>> On 09/23/2014 03:57 PM, jjhoffart wrote: >>>> Hello, >>>> I am currently trying to setup a cluster of mail servers. I currently have two servers I am trying to cluster together. These servers will also have a shared NFS backend. I have read on the site that I will need to configure director since I am using NFS. I have read through all of the documentation on director but still need a little guidance to get things up and running. One of the questions I have is about the base_dir on the Multiple Invocations section of the wiki. It states that I will need to change the bas_dir to the new run directory, not sure what needs to happen here, can anyone help me out?

3 3

Namespace configuration over SQL
by Ain 26 Sep '14

26 Sep '14

Hello! I had working setup, where namespace settings (including prefix) was queried over SQL. Now, after installing new Dovecot to new server (using same configuration), this is not working anymore. Log shows following error: """ Initialization failed: namespace configuration error: list=yes requires prefix=yes to end with separator """ relevant part from dovecot-sql.conf.ext: """ user_query = \ SELECT \ 1002 AS uid \ , 1003 AS gid \ , CONCAT('/www/home/vmail/domains/', SUBSTRING(d.name, 1, 1), '/', d.name, '/', u.username) AS home \ , namespace_prefix AS 'namespace/default/prefix' \ , 'yes' AS 'namespace/default/inbox' \ , '%s' AS 'mail_service' \ FROM vm_domain d \ INNER JOIN vm_user u ON u.vm_domain_id = d.id \ WHERE d.name = '%d' AND u.username = '%n' AND u.active = 1 AND d.active = 1 """ namespace_prefix can be empty or INBOX. doveconf -n output: """ # 2.2.13: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.3-RELEASE amd64 auth_debug = yes auth_verbose = yes disable_plaintext_auth = no listen = * mail_debug = yes mail_location = maildir:~/Maildir mmap_disable = yes namespace default { inbox = yes list = yes location = prefix = separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size mail_log_group_events = no } service imap { process_limit = 1480 } ssl_cert = </usr/local/etc/ssl/server.crt ssl_key = </usr/local/etc/ssl/server.key.unsecure userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol imap { imap_capability = IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE mail_max_userip_connections = 900 } protocol pop3 { mail_max_userip_connections = 300 } """ Seems like "prefix = " is interpreted as "prefix = yes". How I can solve this?

2 5

Is dovecot vulnerable to the shellshock/CVE-2014-6271 exploit?
by Joseph Tam 26 Sep '14

26 Sep '14

I'm right now handling this beach-ball sized grenade, and trying to figure out which of our services need to be locked down right away. Since dovecot passes values via environment variables based on user input (e.g. username, password, mailbox?) to auxilliary executables (including possibly bash shell scripts), is dovecot vulnerable to this exploit? (This is not a fault of dovecot, but rather bash's inadequate handling of environment variables.) For example, injection of this sort 1 LOGIN (){x;}exploit-code whatever I guess auth_username_chars would mitigate this particular attempt (assuming it can work), but other values such as mailbox names could also be injected post authentication. Can someone with working knowlegde of dovecot's internals confirm/deny whether this is a something that needs to be addressed? Joseph Tam <jtam.home(a)gmail.com>

4 4

How to configure dovecot imap to listen on multiple ports?
by Rick Thomas 26 Sep '14

26 Sep '14

I need my dovecot imap server to listen on ports 143, 993, and also 30143 and 30993. What syntax do I use in (I presume) the /etc/dovecot/conf.d/10-master.conf file to do this? Thanks! Rick

4 10

Does dovecot work OK on *BSD?
by Steve Litt 26 Sep '14

26 Sep '14

Hi all, I have a dovecot server on my Debian Wheezy desktop computer. My days with Debian are limited, and I'm investigating several 'BSD's: OpenBSD FreeBSD PCBSD NetBSD DragonflyBSD etc Is there any reason Dovecot wouldn't work on any of those? Does anyone know if those OS's have packages for Dovecot, or do I need to compile it myself? Thanks, SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance

10 9

Indexing of mailf fts clucene aborts
by Rainer M Krug 25 Sep '14

25 Sep '14

Hi I am trying lucene to index my email. To create the index, I run the following command and the indexing aborts: ,---- | 09:42:20 ~$ doveadm -Dv index -u rainerkrug 'RMKrugGMAIL.*' | doveadm(rainerkrug): Debug: Loading modules from directory: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot | doveadm(rainerkrug): Debug: Module loaded: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/lib20_fts_plugin.so | doveadm(rainerkrug): Debug: Module loaded: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/lib21_fts_lucene_plugin.so | doveadm(rainerkrug): Debug: Loading modules from directory: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm | doveadm(rainerkrug): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: dlopen(/usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so, 10): Symbol not found: _acl_user_module | Referenced from: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so | Expected in: flat namespace | in /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so (this is usually intentional, so just ignore this message) | doveadm(rainerkrug): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: dlopen(/usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so, 10): Symbol not found: _expire_set_deinit | Referenced from: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so | Expected in: flat namespace | in /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so (this is usually intentional, so just ignore this message) | doveadm(rainerkrug): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: dlopen(/usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so, 10): Symbol not found: _quota_user_module | Referenced from: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so | Expected in: flat namespace | in /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so (this is usually intentional, so just ignore this message) | doveadm(rainerkrug): Debug: Module loaded: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so | doveadm(rainerkrug): Debug: Module loaded: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so | doveadm(rainerkrug): Debug: Effective uid=501, gid=20, home=/Users/rainerkrug | doveadm(rainerkrug): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir | doveadm(rainerkrug): Debug: maildir++: root=/Users/rainerkrug/Maildir, index=, indexpvt=, control=, inbox=/Users/rainerkrug/Maildir, alt= | doveadm(rainerkrug): Debug: Ignoring unknown cache field: pop3.order | doveadm(rainerkrug): Debug: Ignoring unknown cache field: binary.parts | doveadm(rainerkrug): Info: RMKrugGMAIL.[Gmail].All Mail: Caching mails seq=2..49011 | 48700/49010Assertion failed: (numDocsInStore*8 == directory->fileLength( (docStoreSegment + "." + IndexFileNames::FIELDS_INDEX_EXTENSION).c_str() )), function closeDocStore, file /tmp/clucene-M0PS6G/src/core/CLucene/index/DocumentsWriter.cpp, line 210. | Abort trap: 6 `---- Any suggestions? I am using dovecot on a Mac, Maverich=ks, installed via homebrew. If you need any further info, please let me know. Thanks, Rainer -- Rainer M. Krug email: Rainer<at>krugs<dot>de PGP: 0x0F52F982

1 0

Quota Woes
by Art Stephens 25 Sep '14

25 Sep '14

Trying to get quota to show up in IMP - Horde 5.x Seems it is not working with dovecot Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. root@mail:~# dovecot --version 2.0.19 root@mail:~# dovecot -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.11.0-26-generic x86_64 Ubuntu 12.04.4 LTS auth_mechanisms = plain login disable_plaintext_auth = no mail_location = mbox:~/mail/:INBOX=/var/mail/%u mail_plugins = " quota" passdb { driver = pam } plugin { quota = fs:User quota quota_rule = *:storage=300M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } protocols = " imap pop3" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = " quota imap_quota" } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } root@mail:~# quotaon -pa group quota on / (/dev/mapper/mail--vg-root) is on user quota on / (/dev/mapper/mail--vg-root) is on What am I missing? -- Arthur Stephens Senior Networking Technician Ptera Inc. PO Box 135 24001 E Mission Suite 50 Liberty Lake, WA 99019 509-927-7837 ptera.com facebook.com/PteraInc | twitter.com/Ptera ----------------------------------------------------------------------------- "This message may contain confidential and/or propriety information, and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited. Please note that any views or opinions presented in this email are solely those of the author and are not intended to represent those of the company."

2 1

SSL issues when proxying
by Ralf Hildebrandt 25 Sep '14

25 Sep '14

I'm getting this in the log when proxying IMAP (three "valid certificate" messages, two "Invalid certificate" messages) Why is dovecot (acting as a proxy to another dovecot instance here) not recognizing the StartCom Extended Validation Server CA? . LOGIN ralf.hildebrandt(a)charite.de mypassword Sep 25 14:13:04 auth-worker(30859): Info: mysql(sql.charite.de): Connected to database mailservice Sep 25 14:13:04 imap-login: Debug: SSL: where=0x10, ret=1: before/connect initialization [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: before/connect initialization [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: unknown state [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1002, ret=-1: unknown state [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 read server hello A [127.0.0.1] Sep 25 14:13:04 imap-login: Info: Invalid certificate: unable to get local issuer certificate: /C=IL/O=StartCom Ltd./OU=StartCom Certification Authority/CN=StartCom Extended Validation Server CA Sep 25 14:13:04 imap-login: Info: Invalid certificate: certificate not trusted: /C=IL/O=StartCom Ltd./OU=StartCom Certification Authority/CN=StartCom Extended Validation Server CA Sep 25 14:13:04 imap-login: Info: Valid certificate: /C=DE/ST=Berlin/L=Berlin/postalCode=12205/street=Charitestrasse 1/O=Charite Universitaetsmedizin/CN=imap.charite.de/emailAddress=postmaster(a)charite.de/serialNumber=HRAxxxx/businessCategory=Private Organization/1.3.6.1.4.1.311.60.2.1.1=Mitte/1.3.6.1.4.1.311.60.2.1.2=Berlin/1.3.6.1.4.1.311.60.2.1.3=DE Sep 25 14:13:04 imap-login: Info: Valid certificate: /C=IL/O=StartCom Ltd./OU=StartCom Certification Authority/CN=StartCom Extended Validation Server CA Sep 25 14:13:04 imap-login: Info: Valid certificate: /C=DE/ST=Berlin/L=Berlin/postalCode=12205/street=Charitestrasse 1/O=Charite Universitaetsmedizin/CN=imap.charite.de/emailAddress=postmaster(a)charite.de/serialNumber=HRAxxxx/businessCategory=Private Organization/1.3.6.1.4.1.311.60.2.1.1=Mitte/1.3.6.1.4.1.311.60.2.1.2=Berlin/1.3.6.1.4.1.311.60.2.1.3=DE Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 read server certificate A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 read server key exchange A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 read server done A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 write client key exchange A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 write change cipher spec A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 write finished A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 flush data [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1002, ret=-1: SSLv3 read server session ticket A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1002, ret=-1: SSLv3 read server session ticket A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 read server session ticket A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 read finished A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1002, ret=1: SSL negotiation finished successfully [127.0.0.1] . OK [CAPABILITY ... -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

3 3

vsz_limit is 18,447 PB
by Dan Langille 25 Sep '14

25 Sep '14

I encountered this error on FreeBSD 9.3 with dovecot2-2.2.13_3 Short version; vsz_limit is 18,447 PB and it ran out of RAM. Suggestions for change? Sep 6 03:39:32 mailjail dovecot: imap(dan): Panic: file imap-fetch.c: line 556 (imap_fetch_more): assertion failed: (ctx->client->output_cmd_lock == NULL || ctx->client->output_cmd_lock == cmd) Sep 6 03:39:32 mailjail dovecot: imap(dan): Fatal: master: service(imap): child 71153 killed with signal 6 (core not dumped - set service imap { drop_priv_before_exec=yes }) Sep 6 03:59:41 mailjail dovecot: imap(dan): Fatal: pool_system_realloc(2097152): Out of memory Sep 6 03:59:41 mailjail dovecot: imap(dan): Fatal: master: service(imap): child 67732 returned error 83 (Out of memory (service imap { vsz_limit=256 MB }, you may need to increase it) - set CORE_OUTOFMEM=1 environment to get core dump) Background: I’m in the only user on this system, but this server is accessed by my phone, my laptop, my tablet, and perhaps a web interface. Here are the non-default values: $ doveconf -n # 2.2.13: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.3-RELEASE amd64 auth_mechanisms = plain login first_valid_gid = 1001 first_valid_uid = 1001 mail_location = maildir:~/Maildir mail_max_userip_connections = 80 mail_privileged_group = mail passdb { args = scheme=SHA512-CRYPT /var/db/dovecot.users driver = passwd-file } protocols = imap service imap-login { inet_listener imap { address = 10.0.0.1 } inet_listener imaps { port = 0 } } ssl = required ssl_ca = </usr/local/etc/ssl/ca.pem ssl_cert = </usr/local/etc/ssl/server.pem ssl_key = </usr/local/etc/ssl/mailjail.example.org.nopassword.key userdb { args = /var/db/dovecot.users driver = passwd-file } verbose_proctitle = yes verbose_ssl = yes But there are some interesting values when I look at the output of doveconf. Specifically, vsz_limit is 18,447 PB… yeah, that’s pretty big. service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = 10.0.0.1 port = 143 reuse_port = no ssl = no } inet_listener imaps { address = port = 0 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B }

4 7

Confusing wording on the wiki
by Alan McGinlay 24 Sep '14

24 Sep '14

Hi, I am confused by the wording of this Wiki entry: sieve = ~/.dovecot.sieve The path to the user's main active Sieve script. When ManageSieve is used, this is a symbolic link pointing to the active script in the sieve_dir directory. Avoid placing the active Sieve script inside the sieve_dir directory. So this should be a link *to* the active script in the sieve_dir directory however the active script shouldn't actually be in that directory???? http://wiki2.dovecot.org/Pigeonhole/Sieve/Configuration Confused :S /A

2 1

LMTP proxying
by Ralf Hildebrandt 24 Sep '14

24 Sep '14

How exactly is LMTP proxying supposed to work? According to the example on http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy I'm only seeing "proxy" in the password_query statements. But LMTP never sends a password. IMAP Proxying is working OK: Sep 24 12:51:09 imap-login: Info: proxy(ralf.hildebrandt(a)charite.de): started proxying to dovecot.charite.de:993: user=<ralf.hildebrandt(a)charite.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Sep 24 12:51:13 imap-login: Info: proxy(ralf.hildebrandt(a)charite.de): disconnecting 127.0.0.1 (Disconnected by server): user=<ralf.hildebrandt(a)charite.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured But LMTP is logging this: Sep 24 13:13:25 lmtp(17727): Info: Connect from 127.0.0.1 Sep 24 13:13:51 auth-worker(19603): Info: mysql(sql.posteo.local): Connected to database mailservice Sep 24 13:14:11 lmtp(17727, ralf.hildebrandt(a)charite.de) Info: save: box=INBOX, uid=1, msgid=, size=304 Sep 24 13:14:11 lmtp(17727, ralf.hildebrandt(a)charite.de) Info: pH2yN1WnIlQ/RQAAoQzodQ: msgid=unspecified: saved mail to INBOX Sep 24 13:14:11 dict: Info: mysql(sql.charite.de): Connected to database mailservice Sep 24 13:14:13 lmtp(17727): Info: Disconnect from 127.0.0.1: Client quit (in reset) Sep 24 13:15:29 master: Warning: Killed with signal 15 (by pid=25892 uid=0 code=kill) I read that there's no "default port for LMTP", but how can I adapt the query in such a way that the default port 24 is being used ONLY FOR LMTP? I'm using (snippet): ... NULL AS password, \ 'Y' AS nopassword, \ 'Y' AS proxy, 'dovecot.charite.de' AS host, 'any-cert' AS 'ssl', \ ... -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

3 3

Empty mailboxes
by Daniel Miller 24 Sep '14

24 Sep '14

This is driving me nuts. I need to rebuild a server - got a notification the main drive is failing, and it's been a year or two, so it's time. Got a new drive, fresh install of Ubuntu Tantric, started installing everything needed. Data stored on a RAID array - nicely available separate from the boot/operation drive. Did a fresh compile of Dovecot, copied over the configs from the old drive, mounted the RAID...and... Dovecot starts, authenticates users - and shows empty mailboxes. Nothing shown. Full panic - reboot on old drive. All mails present. Change back - no mail. Executing "doveadm user -u username" seems to give valid results. Mailbox location appears correct (using mdbox). I setup uid/gid the same - I thought it was a rights issue but everything looks correct. What can I do to try to find the stupid mistake I'm making? -- Daniel

3 4

quota recalc problem for big maildirs
by Dawid Stawiarski - nazwa.pl 24 Sep '14

24 Sep '14

hi, we use dovecot 2.2.13, and we've lately started using maildir quota (previously fs quota was used, right now it's "quota = maildir:User quota" changed from "quota = fs:User quota:user:inode_per_mail"). When the change was applied we didn't manually forced generating maildirsize files. So, when the first deliver happens (or the file grows larger then 5KB) it starts quota recalc. However for users with big maildirs, receiving email every couple of seconds, there are tens of delivery processes each doing its own recalc (as they open file for APPEND and there's no locking). What's even worse, after all the stats and getdents (it takes a lot of IO for 60GB account with 2M emails), deliver makes stat on 'new' dir and detects changes after which it unlinks freshly created maildirsize. So possibly this will never be finished as every process drops its own work. The same thing happened when we checked the native dovecot LMTP server (every connection has its own forked process - each running independently of the others). Is it a known unwanted "feature" of maildir quota (and we should use dict quota instead) or a bug that will be fixed? cheers, Dawid Stawiarski

2 2

Re: director
by Eduardo Ramos 23 Sep '14

23 Sep '14

The configuration use to be in /etc/dovecot, and the working dir is /var/run/dovecot. You should store your configuration file in the /etc/dovecot. The dovecot.conf file can be copied to dovecot-backend.conf and dovecot-director, for example, and you will use '-c' argument of dovecot binary to load on or another. If you do this, you will need create two separated working dir, that will be defined in base_dir on each configuration file. On 09/23/2014 05:39 PM, jjhoffart wrote: > Thanks for the replies, > I am still fairly new to dovecot and still learning. This is a quick run down of my setup: 3 servers running iRedMail (this is a package that installs dovecot 2.1.7, postfix, and LDAP). All three servers share an NFS backend. The same 3 servers are also sitting behind a load balancer. What I want to do is use these three servers as directors and mail servers. So from the replies I have gotten I understand that I need to create 2 config files 1 for director and 1 for dovecot. Now my next question is do these config files need to be stored in /etc/dovecot or /var/run/dovecot? Also is creating the second config file as simple as copying and renaming the dovecot.conf file? > > On Sep 23, 2014, at 2:26 PM, Eduardo Ramos <eduardo(a)freedominterface.org> wrote: > >> Hi, >> >> In fact you don't NEED a director. You can use two dovecot servers sharing a NFS storage with a normal (backend) implementation. It's good to see that page: http://wiki2.dovecot.org/NFS for some good recomendations. >> >> You must have a base_dir for each instance of dovecot you want to run, and a dovecot.conf as well. One could be director and other backend. I suggest you have two separated configuration directories, /etc/dovecot-director and /etc/dovecot-backend. Each with the respective configuration. Start dovecot with "dovecot -c /etc/dovecot-director/dovecot.conf". Backend is the same. >> >> In order to help more, provide us more details about your environment and doulbts. >> >> On 09/23/2014 03:57 PM, jjhoffart wrote: >>> Hello, >>> I am currently trying to setup a cluster of mail servers. I currently have two servers I am trying to cluster together. These servers will also have a shared NFS backend. I have read on the site that I will need to configure director since I am using NFS. I have read through all of the documentation on director but still need a little guidance to get things up and running. One of the questions I have is about the base_dir on the Multiple Invocations section of the wiki. It states that I will need to change the bas_dir to the new run directory, not sure what needs to happen here, can anyone help me out?

1 0

director
by jjhoffart 23 Sep '14

23 Sep '14

Hello, I am currently trying to setup a cluster of mail servers. I currently have two servers I am trying to cluster together. These servers will also have a shared NFS backend. I have read on the site that I will need to configure director since I am using NFS. I have read through all of the documentation on director but still need a little guidance to get things up and running. One of the questions I have is about the base_dir on the Multiple Invocations section of the wiki. It states that I will need to change the bas_dir to the new run directory, not sure what needs to happen here, can anyone help me out?

3 2

dsync error: Error: Can't delete mailbox INBOX: INBOX can't be deleted.
by Helge Kraak 23 Sep '14

23 Sep '14

Hello, I'm aware of these two threads http://www.dovecot.org/pipermail/dovecot/2012-March/thread.html#134311 http://dovecot.org/pipermail/dovecot/2012-June/thread.html#136488 but unfortunately I wasn't successful with my dsync mailbox migration attempt despite the information I could find there. I'm using iRedMail setup for the dovecot server. I made sure that the dovecot mailbox for the mail import had been freshly created and untouched before I tried to run the following command. Running this command: sudo doveadm -vvv -o imapc_host=s04.srv-net.de -o imapc_user=username -o imapc_password=password -o mail_fsync=never -o mail_prefetch_count=20 -o imapc_features=rfc822.size -o imapc_features=fetch-headers -o imapc_port=993 -o imapc_ssl=imaps -o imapc_ssl_ca_dir=/etc/ssl -o imapc_ssl_verify=no -o imapc_features=rfc822.size -o mailbox_list_index=no -D backup -R -u michael(a)domain.com imapc: I get the following output (I took out some lines obviously not relevant): doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(michael(a)domain.com): Debug: Added userdb setting: plugin/master_user=michael(a)domain.com doveadm(michael(a)domain.com): Debug: Added userdb setting: plugin/quota_rule=*:bytes=41943040000 doveadm(michael(a)domain.com): Debug: Effective uid=2000, gid=2000, home=/var/vmail/vmail1/domain.com/m/i/c/michael-2014.09.03.14.32.59/ doveadm(michael(a)domain.com): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir://var/vmail/vmail1/domain.com/m/i/c/michael-2014.09.03.14.… doveadm(michael(a)domain.com): Debug: maildir++: root=//var/vmail/vmail1/domain.com/m/i/c/michael-2014.09.03.14.32.59//Maild…, index=, control=, inbox=//var/vmail/vmail1/domain.com/m/i/c/michael-2014.09.03.14.32.59//Mail…, alt= doveadm(michael(a)domain.com): Debug: Namespace : type=shared, prefix=Shared/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=yes location=maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/Shared/%u doveadm(michael(a)domain.com): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt= dsync(michael(a)domain.com): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc: dsync(michael(a)domain.com): Debug: imapc: root=, index=, control=, inbox=, alt= dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Looking up IP address dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Connecting to 78.138.89.136:993 dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Starting SSL handshake dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN AUTH=LOGIN dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Authenticating as username dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS QUOTA dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Authenticated successfully dsync(michael(a)domain.com): Debug: Namespace : type=shared, prefix=Shared/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=yes location=maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/Shared/%u dsync(michael(a)domain.com): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt= dsync(michael(a)domain.com): Debug: Namespace : Using permissions from //var/vmail/vmail1/domain.com/m/i/c/michael-2014.09.03.14.32.59//Maildir: mode=0700 gid=-1 dsync(michael(a)domain.com): Error: Can't delete mailbox INBOX: INBOX can't be deleted. dsync(michael(a)domain.com): Info: Amazon: uidnext changed: 1056 != 1 dsync(michael(a)domain.com): Info: INBOX: only in dest (guid=3c68c835800a07547d45000029cbe4c2)= 1 dsync(michael(a)domain.com): Info: Deleted Messages: uidnext changed: 109 != 1 dsync(michael(a)domain.com): Info: MBA Mails: uidnext changed: 444 != 1 dsync(michael(a)domain.com): Info: Archive: highest_modseq changed: 0 != 1 dsync(michael(a)domain.com): Info: Spam: uidnext changed: 3 != 1 dsync(michael(a)domain.com): Info: Apple Mail To Do: highest_modseq changed: 0 != 1 dsync(michael(a)domain.com): Info: Jobsuche: uidnext changed: 22436 != 1 dsync(michael(a)domain.com): Info: Trash (Messages): uidnext changed: 697 != 1 dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Looking up IP address dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Connecting to IP-Adress:993 dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Starting SSL handshake dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN AUTH=LOGIN dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Authenticating as username dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS QUOTA dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Authenticated successfully dsync(michael(a)domain.com): Error: Trying to open a non-listed mailbox with guid=3c68c835800a07547d45000029cbe4c2 dsync(michael(a)domain.com): Error: msg iteration failed: Couldn't open mailbox 3c68c835800a07547d45000029cbe4c2 dsync(michael(a)domain.com): Error: Trying to open a non-listed mailbox with guid=3c68c835800a07547d45000029cbe4c2 dsync(michael(a)domain.com): Debug: imapc(s04.xxx.de:993): Disconnected sudo dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.6 auth_master_user_separator = * auth_mechanisms = PLAIN LOGIN dict { acl = mysql:/etc/dovecot/dovecot-share-folder.conf quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf } first_valid_uid = 2000 last_valid_uid = 2000 listen = * log_path = /var/log/dovecot.log mail_gid = 2000 mail_location = maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/ mail_plugins = quota mail_uid = 2000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = no special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } namespace { list = children location = maildir:/%%Lh/Maildir/:INDEX=/%%Lh/Maildir/Shared/%%u prefix = Shared/%%u/ separator = / subscriptions = yes type = shared } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } passdb { args = /etc/dovecot/dovecot-master-users-password driver = passwd-file master = yes } plugin { acl = vfile acl_shared_dict = proxy::acl auth_socket_path = /var/run/dovecot/auth-master quota = dict:user::proxy::quotadict quota_rule = *:storage=1G quota_warning = storage=85%% quota-warning 85 %u quota_warning2 = storage=90%% quota-warning 90 %u quota_warning3 = storage=95%% quota-warning 95 %u sieve = /%Lh/sieve/dovecot.sieve sieve_default = /var/vmail/sieve/dovecot.sieve sieve_dir = /%Lh/sieve sieve_global_dir = /var/vmail/sieve } protocols = pop3 imap sieve lmtp service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = vmail mode = 0666 user = vmail } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service imap-login { process_limit = 500 service_count = 1 } service lmtp { executable = lmtp -L inet_listener lmtp { port = 24 } process_min_avail = 5 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail } service pop3-login { service_count = 1 } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } } ssl = required ssl_cert = </etc/ssl/certs/iRedMail_CA.pem ssl_key = </etc/ssl/private/iRedMail.key userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol lda { auth_socket_path = /var/run/dovecot/auth-master lda_mailbox_autocreate = yes log_path = /var/log/dovecot-sieve.log mail_plugins = quota sieve postmaster_address = root } protocol lmtp { info_log_path = /var/log/dovecot-lmtp.log lmtp_save_to_detail_mailbox = yes mail_plugins = quota sieve postmaster_address = postmaster recipient_delimiter = + } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } Any assistance is highly appreciated. Thank you. Helge

2 3

sieve redirect to foreign email gets “Relay access denied”
by Henry Stack 23 Sep '14

23 Sep '14

I have a postfix mail server with sql authentication and I want to implement sieve on it. Sieve is working relative good, rules who contain 'fileinto' are executed perfectly. The problem is the redirect to other servers. I configured a rule in Sieve to redirect any email containing "redirect" in subject to a specified foreign destination. # So practically a email coming from sender(a)live.de for the local user testuser(a)server.net should be redirected to destination(a)gmail.com when the subject contains "redirect" if header :contains ["subject"] ["redirect"] {redirect "destination(a)gmail.com"; stop;} when I test it I get the following log entry /postfix/smtpd[32114]: NOQUEUE: reject: RCPT from mail.server.net[xx.xx.xx.xx]: 554 5.7.1 <destination(a)gmail.com>: Relay access denied; from=<sender(a)live.de> to=<destination(a)gmail.com> proto=ESMTP helo=<mail.server.net>/ How can I tell postfix to let dovecot/sieve relay the email? can somebody give a hint? postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix content_filter = smtp-amavis:[127.0.0.1]:10024 default_process_limit = 15 disable_vrfy_command = yes dovecot_destination_recipient_limit = 1 home_mailbox = mail/ inet_interfaces = all mailbox_size_limit = 0 mydestination = mail.server.net, localhost myhostname = mail.server.net mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = /etc/mailname readme_directory = no recipient_delimiter = + smtp_tls_note_starttls_offer = yes smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_use_tls = yes smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_data_restrictions = reject_unauth_pipelining smtpd_helo_restrictions = reject_unknown_helo_hostname smtpd_recipient_restrictions = permit_sasl_authenticated, reject_unknown_sender_domain, reject_unknown_reverse_client_hostname, reject_unknown_recipient_domain, reject_unverified_recipient, reject_unauth_destination, reject_rbl_client zen.spamhaus.org, reject_rhsbl_helo dbl.spamhaus.org, reject_rhsbl_sender dbl.spamhaus.org, check_policy_service inet:127.0.0.1:10023 smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_authenticated_sender_login_mismatch, reject_unknown_sender_domain smtpd_tls_auth_only = no smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key smtpd_tls_loglevel = 2 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes soft_bounce = no virtual_alias_domains = mysql:/etc/postfix/mysql_virtual_alias_domains.cf virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf virtual_mailbox_base = /var/vmail virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf virtual_mailbox_limit = 512000000 virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf virtual_transport = dovecot dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.6 auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot/dovecot.debug.log disable_plaintext_auth = no first_valid_gid = 99 first_valid_uid = 99 hostname = maxi.zp1.net info_log_path = /var/log/mail.info lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = xxx.xxx.xxx.xxx log_path = /var/log/dovecot/dovecot.log login_greeting = Dovecot ready, Sir. mail_debug = yes mail_gid = 99 mail_location = maildir:~/mail:LAYOUT=fs:INBOX=/var/vmail/%u/mail/ mail_plugins = acl mail_uid = 99 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { location = maildir:/var/mail/public prefix = Public/ separator = / subscriptions = no type = public } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_anyone = allow acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box from subject msgid size sieve = ~/.dovecot.sieve sieve_default = /var/lib/dovecot/sieve/default.sieve sieve_dir = ~/sieve sieve_global_dir = /var/lib/dovecot/sieve/global/ sieve_max_actions = 64 sieve_user_log = ~/.dovecot.sieve.log } postmaster_address = root(a)server.net protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = postfix mode = 0666 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem submission_host = smtp.server.net userdb { args = uid=vmail gid=vmail home=/var/vmail/%u driver = static } verbose_proctitle = yes protocol lda { mail_plugins = acl sieve } protocol imap { mail_plugins = acl autocreate acl imap_acl } protocol sieve { mail_max_userip_connections = 10 }

5 9

Dict protocol RFC
by Philipp Bruell 23 Sep '14

23 Sep '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi everyone, does someone know if there is a RFC protocol description of the dict protocol that dovecot is using for auth/quota/... requests? Haven't found anything on google yet. Best regards, Philipp -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJUDxl6AAoJEDL/SWo0Ta8F8nUH/1HvEwZQf7pd9/VMFdiThre2 T7M72ciqn/40uImdaxth3t1oWXnIcPMOR8dO2LVOX4nRUErDYPoVeL3T7mgyvoG5 oCNDxwJepIXFeW+pEKfXLM0GUGhi5xeUvwcahcv36yyMmC+YVR2+e14daZlp6FNf 4m5ZlLJnFzCiH29qJ4v9WATeybdasWtpQQzjTTmevtK/+9lPqDToIDoqo309F/Wc QQJqZCnPhUu0p8Nvg5qTMA6mwOz2NxtE/uQSuEg8clS30O56tqWKWBPvAeGsvtDM Y6BMqNK1oAo9AEZbYtf82mIG1wn5ny1ZYVocf8kVIaXDJWyMGM1PqDYae/5CjrE= =XI9B -----END PGP SIGNATURE-----

2 2

Announce: Plugin for iOS Push Email support
by Stefan Arentz 23 Sep '14

23 Sep '14

I’ve been hacking on a personal side project to support native iOS Push Email in Dovecot. This is specifically for people who are migrating their mail away from OS X Server while keeping their existing Push Email functionality. Native Push Email has some great advantages: it speeds up email notifications (usually within seconds of being handled by dovecot-lda) and it improves battery life since the native notifications flow over a single highly optimized connection to Apple’s infrastructure. Although this is at version 0.1, it is working pretty well for me and I am looking for some additional testers that are interested. Please note that it is not possible to use this project without legally running a copy of OS X Server. You can purchase OS X Server on the Mac App Store or download it for free if you are a registered Mac or iOS developer. This feature is enabled by two projects: https://github.com/st3fan/dovecot-xaps-plugin <https://github.com/st3fan/dovecot-xaps-plugin> https://github.com/st3fan/dovecot-xaps-daemon <https://github.com/st3fan/dovecot-xaps-daemon> Both projects contain a README that describes how to get things going. I have only developed and tested on Ubuntu 12.04.5 so ideally you run the same version if you are interested in playing with this project. You will need to compile some code and not be afraid of a little admin work. I am also interested in a code review. The Dovecot plugin API is barely documented and I had to guess a lot of things by looking at other plugins. An extra pair of eyes specifically on that code would be awesome. Also from a security perspective. Please file bugs! S.

7 10

Re: [wishlist] testsuite for sieve scripts, libsievetest
by Phil Carmody 23 Sep '14

23 Sep '14

> BTW: It would be nice, if I could just 'git clone' dovecot. Hi, Thomas, I happily use Felipe Contreras' excellent git-hg bridge, as I am far happier in a GIT environment than an Hg one: https://github.com/felipec/git/wiki/git-remote-hg The workflow couldn't be much easier, in particular if you set up a few aliases for the common sequences of tasks. $ hg clone http://hg.dovecot.org/dovecot-2.2 $ git clone "hg::/home/phil/dovecot-2.2" dovecot-2.2-git $ cd dovecot-2.2-git $ git checkout -b hacking $ # work... $ cd ../dovecot-2.2 $ hg pull -u $ cd ../dovecot-2.2-git $ git checkout master $ git rebase master hacking $ # more work... (OK, my workflow includes pushing too ;-) ) Hope that helps. Cheers, Phil

1 0

help with samba4 settings
by Robert Watson 23 Sep '14

23 Sep '14

I'm having a great deal of difficulty with integrating dovecot 2.0.9 with a new installation of samba4 4.1.11 and would appreciate anyones help who has this working. *Problem 1:* if dn= cn=Administrator,dc=ourhome,dc=net with dnpass = ***** ---------------I get NT_STATUS_LOGON_FAILURE but dn = "Administrator(a)ourhome.net" with dnpass = **** works I guess I shouldn't complain but why doesn't the first one work? *Problem 2:* can't seem to get a working set of usr_attrs/user_filter,pass_attrs/pass_filter to authenticate *dovecot-ldap.conf :* uris = ldap://localhost:389 dn = "Administrator(a)ourhome.net" dnpass = **** tls = no ldap_version = 3 base = cn=Users,dc=ourhome,dc=net scope = subtree user_filter = (&(objectClass=user)(sAMAccountName=%u)) user_attrs = sAMAccountName=user,userPassword=password,=mail=maildir:/var/vmail/%Ld/%n, =home=/var$ pass_filter = (&(objectClass=user)(sAMAccountName=%u)) pass_attrs = sAMAccountName=user,userPassword=password *dovecont.message log output:* *2014-09-22 14:44:50 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth* *2014-09-22 14:44:50 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so* *2014-09-22 14:44:50 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so* *2014-09-22 14:44:50 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so* *2014-09-22 14:44:50 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so* *2014-09-22 14:44:50 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so* *2014-09-22 14:44:50 auth: Debug: auth client connected (pid=5316)* *2014-09-22 14:45:00 auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=35148 resp=AEpvaG5Eb2UASm9obkRvZQ==* *2014-09-22 14:45:00 auth: Debug: ldap(JohnDoe,127.0.0.1): pass search: base=cn=Users,dc=ourhome,dc=net scope=subtree filter=(&(objectClass=user)(sAMAccountName=JohnDoe)) fields=sAMAccountName,userPassword* *2014-09-22 14:45:00 auth: Debug: ldap(JohnDoe,127.0.0.1): result: sAMAccountName(user)=JohnDoe* *2014-09-22 14:45:00 auth: Info: ldap(JohnDoe,127.0.0.1): No password returned (and no nopassword)* *2014-09-22 14:45:00 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth* *2014-09-22 14:45:00 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so* *2014-09-22 14:45:00 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so* *2014-09-22 14:45:00 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so* *2014-09-22 14:45:00 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so* *2014-09-22 14:45:00 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so* *2014-09-22 14:45:00 auth: Debug: pam(JohnDoe,127.0.0.1): lookup service=dovecot* *2014-09-22 14:45:00 auth: Debug: pam(JohnDoe,127.0.0.1): #1/1 style=1 msg=Password: * *2014-09-22 14:45:02 auth: Info: pam(JohnDoe,127.0.0.1): unknown user* *2014-09-22 14:45:04 auth: Debug: client out: FAIL 1 user=JohnDoe*

2 1

dsync annoyances
by Alan McGinlay 23 Sep '14

23 Sep '14

Hi! Every time I run dsync for a user against an old Cyrus server, the users mailbox in Dovecot increases by several hundred MB, these are not new emails. So the first dsync run gets the whole mailbox and subsequent runs get a bunch of duplicates or what? doveadm purge clears them all out but why is dsync behaving like this? I didn't happen in previous versions (2.2.13)

1 0

[wishlist] testsuite for sieve scripts, libsievetest
by Thomas Koch 23 Sep '14

23 Sep '14

Hi, I'm writing a test suite with Haskell for my sieve script. - Just to learn Haskell. But it might become something usable. The test suite calls sieve-test and parses the output. So it would of course be much simpler for me if the output of sieve-test would be easier to parse and if I'd know what output to expect. And it would be nice, if there would be an easy way to embed libsievetest as a C library. I looked into the source and the sieve-test binary does quite a bit of setup. This might be a nice hacking project for a beginner... BTW: It would be nice, if I could just 'git clone' dovecot. Thank you for dovecot!

2 1

doveadm with multiple instances on same machine(s)
by Will Yardley 22 Sep '14

22 Sep '14

Couple questions about running doveadm with multiple instances... I have Dovecot 2.2.13 on RHEL6 running across 3 boxes, each with a director and main instance running. When I try to lookup something on the main instance (which is handling user auth) via its auth-userdb socket directly, I get an error: # doveadm auth lookup -a /var/run/dovecot-main/auth-userdb myuser doveadm(root): Error: passdb lookup failed for myuser: Configured passdbs don't support crentials lookups When I use the default lookup map, I just get the proxy settings that are configured in the director instance's authdb. # doveadm auth lookup myuser passdb: myuser user : myuser proxy : y nopassword: y In addition, "doveadm director map" can't map the username -I get the error: doveadm(root): Error: User listing returned failure doveadm(root): Error: user listing failed [then I get the whole list, but with <unknown> for each user] The director itself doesn't have the LDAP passdb that the main dovecot instance talks to, but I have, in the director config: service doveadm { inet_listener { port = 8889 } } director_doveadm_port = 8889 local 192.168.x.x/24 { doveadm_password = XXXXXX } doveadm_proxy_port = 8888 And in the main config: service doveadm { inet_listener { port = 8888 } } local 192.168.x.x/24 { doveadm_password = XXXXXXX ## same password as above }

2 2

sieve redirect to foreign email gets “Relay access denied”
by Henry Stack 22 Sep '14

22 Sep '14

I have a postfix mail server with sql authentication and I want to implement sieve on it. Sieve is working relative good, rules who contain 'fileinto' are executed perfectly. The problem is the redirect to other servers. I configured a rule in Sieve to redirect any email containing "redirect" in subject to a specified foreign destination. # So practically a email coming from sender(a)live.de for the local user testuser(a)server.net should be redirected to destination(a)gmail.com when the subject contains "redirect" if header :contains ["subject"] ["redirect"] {redirect "destination(a)gmail.com"; stop;} when I test it I get the following log entry /postfix/smtpd[32114]: NOQUEUE: reject: RCPT from mail.server.net[xx.xx.xx.xx]: 554 5.7.1 <destination(a)gmail.com>: Relay access denied; from=<sender(a)live.de> to=<destination(a)gmail.com> proto=ESMTP helo=<mail.server.net>/ How can I tell postfix to let dovecot/sieve relay the email? can somebody give a hint? postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix content_filter = smtp-amavis:[127.0.0.1]:10024 default_process_limit = 15 disable_vrfy_command = yes dovecot_destination_recipient_limit = 1 home_mailbox = mail/ inet_interfaces = all mailbox_size_limit = 0 mydestination = mail.server.net, localhost myhostname = mail.server.net mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = /etc/mailname readme_directory = no recipient_delimiter = + smtp_tls_note_starttls_offer = yes smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_use_tls = yes smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_data_restrictions = reject_unauth_pipelining smtpd_helo_restrictions = reject_unknown_helo_hostname smtpd_recipient_restrictions = permit_sasl_authenticated, reject_unknown_sender_domain, reject_unknown_reverse_client_hostname, reject_unknown_recipient_domain, reject_unverified_recipient, reject_unauth_destination, reject_rbl_client zen.spamhaus.org, reject_rhsbl_helo dbl.spamhaus.org, reject_rhsbl_sender dbl.spamhaus.org, check_policy_service inet:127.0.0.1:10023 smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_authenticated_sender_login_mismatch, reject_unknown_sender_domain smtpd_tls_auth_only = no smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key smtpd_tls_loglevel = 2 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes soft_bounce = no virtual_alias_domains = mysql:/etc/postfix/mysql_virtual_alias_domains.cf virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf virtual_mailbox_base = /var/vmail virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf virtual_mailbox_limit = 512000000 virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf virtual_transport = dovecot dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.6 auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot/dovecot.debug.log disable_plaintext_auth = no first_valid_gid = 99 first_valid_uid = 99 hostname = maxi.zp1.net info_log_path = /var/log/mail.info lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = xxx.xxx.xxx.xxx log_path = /var/log/dovecot/dovecot.log login_greeting = Dovecot ready, Sir. mail_debug = yes mail_gid = 99 mail_location = maildir:~/mail:LAYOUT=fs:INBOX=/var/vmail/%u/mail/ mail_plugins = acl mail_uid = 99 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { location = maildir:/var/mail/public prefix = Public/ separator = / subscriptions = no type = public } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_anyone = allow acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box from subject msgid size sieve = ~/.dovecot.sieve sieve_default = /var/lib/dovecot/sieve/default.sieve sieve_dir = ~/sieve sieve_global_dir = /var/lib/dovecot/sieve/global/ sieve_max_actions = 64 sieve_user_log = ~/.dovecot.sieve.log } postmaster_address = root(a)server.net protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = postfix mode = 0666 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem submission_host = smtp.server.net userdb { args = uid=vmail gid=vmail home=/var/vmail/%u driver = static } verbose_proctitle = yes protocol lda { mail_plugins = acl sieve } protocol imap { mail_plugins = acl autocreate acl imap_acl } protocol sieve { mail_max_userip_connections = 10 }

2 1

Authentication using AD : bug ?
by Nicolas Cauchie 22 Sep '14

22 Sep '14

Hello, I've setup a mail server (still in test) with Postfix and Dovecot, authentication made using Active Directory. I authenticate my test user in AD well in Dovecot. However, if I change this user's password in AD, the old password still works for authentication in Dovecot and the new is working too. Is there a time to make Dovecot don't "remember" the old password or is it a bug ? Restarting Dovecot don't solve the problem. Do you already heard about this ? Please tell me what conf files you maybe need. Thanks in advance Nicolas signature -----

2 1

Re: LDAP and dovecot
by dovecot＠outputservices.com 22 Sep '14

22 Sep '14

For the record. I compiled dovecot to use the openldap libraries my openldap server uses. My email server and ldap server are on two different machines. So I just copied over my ldap libraries and placed them in the correct place and then compiled dovecot. I saw this clue in a different web page. Something about Solaris ldap libraries being bad. CPPFLAGS=-I/usr/local/openldap/include \ > LDFLAGS='-L/usr/local/openldap/lib -R/usr/local/openldap/lib' \ ./configure --prefix=/usr/local/tools/dovecot --with-ssl=openssl --with-solr --with-zlib --with-bzlib --with-ldap=yes This now allows me to authenticate with my openldap server. I am NOW able to authenticate to my ldap server. So my final configuration is: dovecot -n # 2.2.10: /usr/local/tools/dovecot/etc/dovecot/dovecot.conf # OS: SunOS 5.10 i86pc base_dir = /dovecot/var/run/dovecot log_path = /dovecot/log/log mail_location = mbox:~/posta:INBOX=/var/mail/%u:LAYOUT=maildir++:INDEX=~/posta/index:CONTROL=~/posta/control passdb { args = /dovecot/etc/dovecot/conf.d/ldap.settings driver = ldap } protocols = imap service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 } } ssl_cert = </dovecot/certs/dovecot.pem ssl_key = </dovecot/certs/dovecot.key ssl_prefer_server_ciphers = yes userdb { args = /dovecot/etc/dovecot/conf.d/ldap.settings driver = ldap } /dovecot/etc/dovecot/conf.d/ldap.settings hosts = ldap.outputservices.com tls = no auth_bind = yes ldap_version = 3 base = dc=ldap,dc=outputservices,dc=com Thank you all.

1 0

X-DOVECOT capabilities
by Timo Sirainen 22 Sep '14

22 Sep '14

Dovecot has a few hidden features currenly, which I know some webmails have been hardcoded to use. Maybe it would be nice to have these available in a bit more globally usable way and advertise some kind of X-DOVECOT capability? I don't really like the idea of having a ton of separate X-DOVECOT-* capabilities. Maybe instead just have X-DOVECOT-1 for the current functionality and when more is added X-DOVECOT-2 etc? Then describe in Dovecot wiki page what they actually contain. Thoughts? The current list of features are at least: - STATUS (X-SIZE): Sum of all RFC822.SIZEs in a mailbox. (More efficient than FETCHing them.) - STATUS (X-GUID): Show mailbox's GUID. - SEARCH X-SAVEDBEFORE, X-SAVEDON, X-SAVEDSINCE: Search with message's saved-timestamp. - FETCH X-SAVEDATE: Fetch message's saved-timestamp. - SEARCH & FETCH X-GUID: Search/fetch message GUID - SEARCH X-MAILBOX, FETCH X-MAILBOX, FETCH X-REAL-UID: With virtual mailboxes search/fetch the mail's physical mailbox name and message UID. - X-CANCEL <tag>: Stop a (long-running) command, which once in a while goes back to the main loop. For example SEARCH or FETCH.

1 0

how to solve : Dovecot version mismatch: Master is v2.1.7, lmtp is v2.2.13
by Dave Myers 22 Sep '14

22 Sep '14

Hello again dovecot list ;) I've recently upgraded my dovecot version from 2.1.7 to 2.2.13. both versions where installed from source. I upgraded why attempting to get lmtp working. I ultimately just coped the executable lmtp to the location that dovecot was expecting it to be in. but then the above error appeared. However when I get the info from dovecot I get the following... $ dovecot -n # 2.2.13: /usr/local/etc/dovecot/dovecot.conf so there seems to be an issue somewhere. I should note that I had copied my previous /conf.d/ files and then copied them back after the update. I guess that I have missed a switch during the build, or need to modify a line in the config somewhere that tells what the version is, but that doesn't explain why the dovecot -n returns the correct info, but the error reports something different. I am considering inserting the version_ignore=yes config option, but where should I insert it ? Thanks in advance. David -- Tel: + 33 6 50 14 39 34 email: david.myers.24j74(a)gmail.com Addres: 22 Rue de L'Eglise 77700 Coupvray. 77700 France

3 3

dovecot´s multiple quota roots
by Andreas Kasenides 22 Sep '14

22 Sep '14

I am trying to find out how Dovecot behaves when there are multiple quota roots. I could not find something authoritative on this. For example, on a nicely running server that used fs quota I now have in 90-quota.conf > plugin { > quota = fs:Mail Quota:user:mount=/Mail > quota2 = maildir:Mail User Quota > } When I do > > doveadm quota get -u atrige01 > Quota name Type Value Limit > % > Mail Quota STORAGE 80036 204800 > 39 > Mail User Quota STORAGE 79306 - > 0 > Mail User Quota MESSAGE 304 - > 0 Apparently both STORAGE quotas values are the same. The question is which of the two is being used by Dovecot. If I insert a limit on the maildir quota which of the two will be used? I am using Dovecot 2.2.12. thank you

1 0

numeric username
by Jernej Porenta 22 Sep '14

22 Sep '14

Heya, does dovecot support "numeric only" usernames (in format "^0-9+$")? We are unable to deliver emails to such usernames via LMTP: Sep 22 08:41:05 razor4 postfix/lmtp[2120]: D4FD91CDC11F: to=<231588(a)example.org>, relay=example.org[private/dovecot-lmtp], delay=217653, delays=217653/0.01/0.02/0, dsn=4.2.0, status=deferred (host example.org[private/dovecot-lmtp] said: 451 4.2.0 <231588(a)example.org> Permission denied (in reply to end of DATA command)) On normal username format (^[a-z][-a-z0-9]+$) everything is working fine. Permissions are the same as on other accounts: # ls -la .mailbox -rw-------+ 1 231588 users 0 Sep 19 20:13 .mailbox Using dovecot 2.2.13 with local accounts on RHEL and (relevant) configs: auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Ln auth_username_translation = ... lmtp_address_translate = ... passdb { args = cache_key=%u%s dovecot default_fields = deny = no driver = pam master = no name = override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never } ... service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 5 protocol = lmtp service_count = 0 type = unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } .... userdb { args = default_fields = driver = passwd name = override_fields = result_failure = continue result_internalfail = continue result_success = return-ok skip = never } Thank you in advance, cheers, Jernej

1 0

don't understand error message
by Robert Watson 22 Sep '14

22 Sep '14

new installation of Dovecot 2.0.9 on Centos # telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready. LOGIN JohnDoe JohnDoe LOGIN BAD First parameter in line is IMAP's command tag, not the command name. Add that before the command, like: a login user pass ^] telnet> quit Connection closed. What's generating this error? Using samba4 ad for passdb/userdb. Robert

2 1

Re: LDAP and dovecot
by dovecot＠outputservices.com 21 Sep '14

21 Sep '14

I am sorry. I am NOW able to authenticate to my ldap server. Thank you all.

2 1

Re: LDAP and dovecot
by dovecot＠outputservices.com 20 Sep '14

20 Sep '14

I was able to decipher the error after looking at some other web pages. I found I have to compile using the openldap libraries instead of the default Solaris ldap libraries. I compiled using the following: > LDFLAGS='-L/usr/local/openldap/lib -R/usr/local/openldap/lib' \ > ./configure --prefix=/tmp/tocevod --with-ssl=openssl --with-solr --with-zlib --with-bzlib --with-ldap=yes ldd on the ....libexec/dovecot/auth files shows the proper openldap libraries. libdovecot.so.0 => /usr/local/tools/dovecot/lib/dovecot/libdovecot.so.0 libpam.so.1 => /usr/lib/libpam.so.1 libldap-2.4.so.2 => /usr/local/openldap/lib/libldap-2.4.so.2 libsasl.so.1 => /usr/lib/libsasl.so.1 libssl.so.0.9.7 => /usr/sfw/lib/libssl.so.0.9.7 libcrypto.so.0.9.7 => /usr/sfw/lib/libcrypto.so.0.9.7 liblber-2.4.so.2 => /usr/local/openldap/lib/liblber-2.4.so.2 libresolv.so.2 => /usr/lib/libresolv.so.2 libgen.so.1 => /usr/lib/libgen.so.1 librt.so.1 => /usr/lib/librt.so.1 libnsl.so.1 => /usr/lib/libnsl.so.1 libsocket.so.1 => /usr/lib/libsocket.so.1 libsendfile.so.1 => /usr/lib/libsendfile.so.1 libc.so.1 => /usr/lib/libc.so.1 libgcc_s.so.1 => /usr/sfw/lib/libgcc_s.so.1 libcmd.so.1 => /usr/lib/libcmd.so.1 libmd.so.1 => /usr/lib/libmd.so.1 libaio.so.1 => /usr/lib/libaio.so.1 libmp.so.2 => /usr/lib/libmp.so.2 libscf.so.1 => /usr/lib/libscf.so.1 libdoor.so.1 => /usr/lib/libdoor.so.1 libuutil.so.1 => /usr/lib/libuutil.so.1 libssl_extra.so.0.9.7 => /usr/sfw/lib/libssl_extra.so.0.9.7 libcrypto_extra.so.0.9.7 => /usr/sfw/lib/libcrypto_extra.so.0.9.7 libm.so.2 => /usr/lib/libm.so.2 I am not able to authenticate to my ldap server. Thank you all.

1 0

Re: LDAP and dovecot
by Dave Ryan 19 Sep '14

19 Sep '14

Thank you all for your assistance. I was able to locate another web site that mentioned I needed to compile dovecot with my openldap libraries. I then compiled dovecot in the following manner: CPPFLAGS=-I/usr/local/openldap/include \ LDFLAGS='-L/usr/local/openldap/lib -R/usr/local/openldap/lib' \ ./configure --prefix=/tmp/tocevod --with-ssl=openssl --with-solr --with-zlib --with-bzlib --with-ldap=yes This then included the openldap libraries. I tested access and now it works. ldd on /dovecot/libexec/dovecot/auth showed the openldap libraries. libdovecot.so.0 => /usr/local/tools/dovecot/lib/dovecot/libdovecot.so.0 libpam.so.1 => /usr/lib/libpam.so.1 libldap-2.4.so.2 => /usr/local/openldap/lib/libldap-2.4.so.2 libsasl.so.1 => /usr/lib/libsasl.so.1 libssl.so.0.9.7 => /usr/sfw/lib/libssl.so.0.9.7 libcrypto.so.0.9.7 => /usr/sfw/lib/libcrypto.so.0.9.7 liblber-2.4.so.2 => /usr/local/openldap/lib/liblber-2.4.so.2 libresolv.so.2 => /usr/lib/libresolv.so.2 libgen.so.1 => /usr/lib/libgen.so.1 librt.so.1 => /usr/lib/librt.so.1 libnsl.so.1 => /usr/lib/libnsl.so.1 libsocket.so.1 => /usr/lib/libsocket.so.1 libsendfile.so.1 => /usr/lib/libsendfile.so.1 libc.so.1 => /usr/lib/libc.so.1 libgcc_s.so.1 => /usr/sfw/lib/libgcc_s.so.1 libcmd.so.1 => /usr/lib/libcmd.so.1 libmd.so.1 => /usr/lib/libmd.so.1 libaio.so.1 => /usr/lib/libaio.so.1 libmp.so.2 => /usr/lib/libmp.so.2 libscf.so.1 => /usr/lib/libscf.so.1 libdoor.so.1 => /usr/lib/libdoor.so.1 libuutil.so.1 => /usr/lib/libuutil.so.1 libssl_extra.so.0.9.7 => /usr/sfw/lib/libssl_extra.so.0.9.7 libcrypto_extra.so.0.9.7 => /usr/sfw/lib/libcrypto_extra.so.0.9.7 libm.so.2 => /usr/lib/libm.so.2 Thanks again.

1 0

dovecot doesn't see my mails ?
by Dave Myers 19 Sep '14

19 Sep '14

Dear dovecot users. I have an odd issue in that when I connect to my dovecot server from either a local or remote system I can't see my test emails (I have the impression that is is looking at the wrong location on disk). here are some details.... # dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-xen-amd64 x86_64 Debian 6.0.3 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login cram-md5 auth_verbose = yes auth_verbose_passwords = plain lda_mailbox_autocreate = yes log_path = /var/log/dovecot.log mail_debug = yes mail_gid = 1002 mail_home = /var/mail/virtual/%d/%n mail_location = maildir:~/mail/: mail_uid = 1002 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=SHA512-CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } protocols = imap service auth { unix_listener auth-client { mode = 0660 user = mail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } userdb { driver = passwd } verbose_ssl = yes when I connect (via openSSL from a remote system) openssl s_client -connect mail.exsportee.biz:993 CONNECTED(00000003) depth=0 C = fr, ST = coupvray, L = paris, O = exsportee, OU = facilitee, CN = scibearspace, emailAddress = david.myers(a)scibearspace.org verify error:num=18:self signed certificate verify return:1 depth=0 C = fr, ST = coupvray, L = paris, O = exsportee, OU = facilitee, CN = scibearspace, emailAddress = david.myers(a)scibearspace.org verify return:1 [.... security stuff removed....] * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot ready. auth login "websales(a)exsportee.biz" "testPassword" auth OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE] Logged in a list "" "*" * LIST (\HasNoChildren) "." "INBOX" a OK List completed. a select INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1411042633] UIDs valid * OK [UIDNEXT 1] Predicted next UID * OK [NOMODSEQ] No permanent modsequences a OK [READ-WRITE] Select completed. So I seem to have no mails in the inbox... so I check the dovecot log for the where it thinks it should be looking for the mail Sep 19 07:37:59 imap-login: Info: Login: user=<websales(a)exsportee.biz>, method=PLAIN, rip=85.170.90.200, lip=92.39.247.92, mpid=26570, TLS, session=<Cf4uLmYDlgBVqlrI> Sep 19 07:37:59 imap(websales(a)exsportee.biz): Debug: Effective uid=1002, gid=1002, home=/var/mail/virtual/exsportee.biz/websales Sep 19 07:37:59 imap(websales(a)exsportee.biz): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/mail/: Sep 19 07:37:59 imap(websales(a)exsportee.biz): Debug: maildir++: root=/var/mail/virtual/exsportee.biz/websales/mail, index=, control=, inbox=/var/mail/virtual/exsportee.biz/websales/mail, alt= So I can see that the directories that Dovecot is looking at are: home=/var/mail/virtual/exsportee.biz/websales location=maildir:~/mail/ So if I understand, dovecot is looking at [ /var/mail/virtual/exsportee.biz/websales/mail/ ] for my mail. When I run a listing of the directory I get the following.... # ls -al /var/mail/virtual/exsportee.biz/websales/mail/ total 44 drwx--S--- 5 vmail vmail 4096 Sep 18 12:46 . drwxr-sr-x 3 vmail vmail 4096 Sep 18 12:00 .. drwx--S--- 2 vmail vmail 4096 Sep 18 12:17 cur -rw------- 1 vmail vmail 248 Sep 18 12:23 dovecot.index.log -rw------- 1 vmail vmail 51 Sep 18 12:23 dovecot-uidlist -rw------- 1 vmail vmail 8 Sep 18 12:17 dovecot-uidvalidity -r--r--r-- 1 vmail vmail 0 Sep 18 12:17 dovecot-uidvalidity.541acd49 drwx--S--- 2 vmail vmail 4096 Sep 18 12:17 new -rw------- 1 vmail vmail 561 Sep 18 12:22 q1XUaj8-5382575 -rw------- 1 vmail vmail 517 Sep 18 12:00 q1XUaOD-5382570 -rw------- 1 vmail vmail 513 Sep 18 12:46 q1XUb60-5382584 drwx--S--- 2 vmail vmail 4096 Sep 18 12:17 tmp the 3 files q1xu[....] are test mails that I sent to myself, either internally from the localhost CLI, mutt or from my google mail account. I should note the following: ~ SWAKS can send mails out to external addresses also. ~ I cannot connect to my mail from any external clients (thunderbird) ~ I cannot connect to my mail localy using MUTT ~ I use exim4 (v4.7.2) as my MTA (if you want to see a config just ask). please help me resolve these issues. thanks in advance. David -- Tel: + 33 6 50 14 39 34 email: david.myers.24j74(a)gmail.com Addres: 22 Rue de L'Eglise 77700 Coupvray. 77700 France

4 9

Support of unicode in then recipient names
by Александр Егоров 19 Sep '14

19 Sep '14

Hi Dovecot Community, We are using ltmp to deliver messages through postfix to dovecot. During testing we have found that dovecot does not understand recipient email address if it is composed from national symbols : e.g. ยจฆฟคฏข(a)xn--22cdfh1b8fsa.xn--22cdfh1b8fsa Question is are there any plans to either add native support for such email addresses or to translate it to punycode and then try to find such a recipient? -- Александр Егоров (Alexander Yegorov)

1 0

Syslog PID
by Фадеев Виталий Львович 19 Sep '14

19 Sep '14

Hi! How to write PIDs to syslog? Example: Sep 19 00:57:00 hostname dovecot: pop3-login: Login: user=< username(a)domainname.com >, method=PLAIN, rip=XXX.XXX.XXX.XXX, lip=XXX.XXX.XXX.XXX, mpid=14407, TLS, session=<6LYlcmYDAQC4reGs> Sep 19 00:57:00 hostname dovecot: pop3( username(a)domainname.com ): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Sep 19 00:57:09 hostname exim[14423]: 2014-09-19 00:57:09 dovecot_login authenticator failed for s16010629.onlinehome-server.info (User) [82.165.16.9]: 535 Incorrect authentication data (set_id=front) Sep 19 00:57:09 hostname exim[14424]: 2014-09-19 00:57:09 dovecot_login authenticator failed for s16010629.onlinehome-server.info (User) [82.165.16.9]: 535 Incorrect authentication data (set_id=front I need it because i write all logs to postgresql and analyze them with Adiscon LogAnalyzer. Perhaps, per-process logs entry with PID would be better.

2 1

unable to see mail when using telnet / open ssl
by Dave Myers 19 Sep '14

19 Sep '14

Dear dovecot list. I'm setting up my own VPS and working through getting mail to work. Here is my dovecot -n $dovecot -n maildir:%h/%d/%n/mail : layout=fs # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-xen-amd64 x86_64 Debian 6.0.3 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login cram-md5 auth_verbose = yes auth_verbose_passwords = plain lda_mailbox_autocreate = yes log_path = /var/log/dovecot.log mail_debug = yes mail_gid = 1002 mail_home = /var/mail/virtual/%d/%n mail_location = maildir:~/mail: layout=fs mail_uid = 1002 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=SHA512-CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } protocols = imap service auth { unix_listener auth-client { mode = 0660 user = mail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } userdb { driver = passwd } verbose_ssl = yes I can successfully log into dovecot using telnet and open ssl from a remote terminal, so authentication and everything is working fine. From the above dovecot -n I asume that mails should be going to /var/mail/virtual/domain/user/mail However when I view this directory I can see a number of test mails that I have sent using echo "Hello me" | mail -s "Dovecot test" $USER (see http://wiki2.dovecot.org/FindMailLocation) Why am I not seeing them when I use telnet / openSSL to log in? All help is greately appreciated. -- Tel: + 33 6 50 14 39 34 email: david.myers.24j74(a)gmail.com Addres: 22 Rue de L'Eglise 77700 Coupvray. 77700 France

2 1

negative auth cache?
by Will Yardley 19 Sep '14

19 Sep '14

I am using Dovecot 2.2.13, which doesn't yet seem to have the $auth_cache_negative parameter. Should the negative cache value honor $auth_cache_ttl then? I had a problem where some of our ldap systems were reinitialized. Some users, presumably those who tried to login while their records were returning a failure, became unable to login after the records were once again returning normally. I currently have: auth_cache_size = 5 M auth_cache_ttl = 5 mins # Not yet implemented #auth_cache_negative = 2 mins yet the problem seemed to persist for more than an hour. Also, how can I flush the cache for a non-default instance's cache using doveadm -- "doveadm auth cache flush" doesn't seem to have an '-a' option AFAICT. # doveadm auth usage: doveadm [-Dv] [-f <formatter>] auth <command> [<args>] cache flush w

3 5

LDAP and dovecot
by dovecot＠outputservices.com 19 Sep '14

19 Sep '14

At my company I have users who are now becoming remote and using their mobile devices for email. I use Solaris 10 10/09 s10x_u8wos_08a X86 as an operating system and I now need a more secure email solution than the generic sendmail / imap solution. I want to use dovecot and postfix because I have read good reports on these products for ease of setup and use. I need to use both with SSL certificates and username / passwords for both receiving and sending emails. I am having difficulty getting dovecot to work with my ldap password solution. I have read all the documentation, there is a lot of it, and find it confusing. But I have tried very hard to get the solution to work. I have not compiled postfix because I want to use the dovecot authentication solution it mentions. Therefore I need to get dovecot to work first. I have dovecot 2.2.10 & postfix 2.11.1 with openldap 2.4.33. I have tested dovecot with /etc/passwd /etc/shadow password authentication and password flat files. Those work, but not what I need. I need to use ldap so the users only have to set one password. Below is the information I have. I have created self signed SSL certificates for testing purposes. We will get real SSL certificates once everything is operational. ********* I compiled dovecot with the following command: ./configure --prefix=/usr/local/tools/dovecot --with-ssl=openssl --with-solr --with-zlib --with-bzlib --with-ldap=yes ------------------------------------------- dovecot -n # 2.2.10: /usr/local/tools/dovecot/etc/dovecot/dovecot.conf # OS: SunOS 5.10 i86pc base_dir = /dovecot/var/run/dovecot log_path = /dovecot/log/log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = mbox:~/posta:INBOX=/var/mail/%u:LAYOUT=maildir++:INDEX=~/posta/index:CONTROL=~/posta/control passdb { args = /dovecot/etc/dovecot/tests/ldap.settings driver = ldap } protocols = imap service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 } } ssl_cert = </dovecot/certs/dovecot.pem ssl_key = </dovecot/certs/dovecot.key ssl_prefer_server_ciphers = yes userdb { args = /dovecot/etc/dovecot/tests/ldap.settings driver = ldap } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep } ------------------------------------------- /dovecot/etc/dovecot/tests/ldap.settings hosts = ldap.outputservices.com tls = no ldap_version = 3 base = dc=ldap,dc=outputservices,dc=com ------------------------------------------- If I use ldap for passwords: 2014-09-18 09:44:23 master: Info: Dovecot v2.2.10 starting up for imap 2014-09-18 09:44:33 auth: Fatal: LDAP: Buggy LDAP library returned wrong fd: 1 2014-09-18 09:44:33 master: Error: service(auth): command startup failed, throttling for 2 secs 2014-09-18 09:44:33 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<> , rip=137.106.101.127, lip=137.106.76.215, TLS handshaking, session=<d1Nt3FgD1wCJamV/> 2014-09-18 09:44:48 master: Warning: Killed with signal 15 (by pid=18992 uid=0 code=kill) ------------------------------------------- If I use a flat file for passwords: 2014-09-18 09:42:23 master: Info: Dovecot v2.2.10 starting up for imap 2014-09-18 09:43:05 imap-login: Info: Login: user=<dave>, method=PLAIN, rip=137.106.101.127, lip=137.106.76.215, mpid=16769, TLS, se ssion=<vAny1VgDywCJamV/> 2014-09-18 09:43:05 imap(dave): Debug: Effective uid=6010, gid=131, home=/export/home/sun/dave 2014-09-18 09:43:05 imap(dave): Debug: maildir++: root=/export/home/sun/dave/posta, index=/export/home/sun/dave/posta/index, indexpv t=, control=/export/home/sun/dave/posta/control, inbox=/var/mail/dave, alt= 2014-09-18 09:43:10 imap(dave): Info: Disconnected: Logged out in=223 out=1122 2014-09-18 09:43:22 master: Warning: Killed with signal 15 (by pid=17115 uid=0 code=kill) ------------------------------------------- If I use /etc/passwd /etc/shadow for passwords: 2014-09-18 09:39:56 master: Info: Dovecot v2.2.10 starting up for imap 2014-09-18 09:40:14 imap-login: Info: Login: user=<dave>, method=PLAIN, rip=137.106.101.127, lip=137.106.76.215, mpid=13053, TLS, se ssion=<uaT5zFgDwACJamV/> 2014-09-18 09:40:14 imap(dave): Debug: Effective uid=6010, gid=131, home=/export/home/sun/dave 2014-09-18 09:40:14 imap(dave): Debug: maildir++: root=/export/home/sun/dave/posta, index=/export/home/sun/dave/posta/index, indexpv t=, control=/export/home/sun/dave/posta/control, inbox=/var/mail/dave, alt= 2014-09-18 09:41:01 imap(dave): Info: Disconnected: Logged out in=219 out=1118 2014-09-18 09:41:33 master: Warning: Killed with signal 15 (by pid=14765 uid=0 code=kill) ------------------------------------------- I am using openldap 2.4.33. I compiled it using the following command: ./configure --enable-crypt --enable-ldap --enable-perl --prefix=/usr/local/openldap In the slapd.conf file I have placed the following: access to attrs=userPassword by dn="cn=dovecot,dc=ldap,dc=outputservices,dc=com" read by anonymous auth by self write by * none ------------------------------------------- In the ldap database I have the following dovecot user information: dn: uid=dovecot,ou=People,dc=ldap,dc=outputservices,dc=com uid: dovecot cn: Dovecot Email User objectClass: account objectClass: posixAccount objectClass: top objectClass: shadowAccount uidNumber: 505 gidNumber: 505 homeDirectory: /tmp structuralObjectClass: account entryUUID: f85d1e02-13e3-1033-9c4a-b7d2075f7ecd creatorsName: cn=admin,dc=ldap,dc=outputservices,dc=com createTimestamp: 20140117165553Z loginShell: /bin/tcsh entryCSN: 20140725160856.481921Z#000000#000#000000 modifiersName: cn=admin,dc=ldap,dc=outputservices,dc=com modifyTimestamp: 20140725160856Z ------------------------------------------- In the /etc/passwd file I have the following information: dovecot:x:505:505:Dovecot IMAP Server:/tmp:/bin/false dovenull:x:506:506:Dovecot IMAP Server:/tmp:/bin/false ------------------------------------------- I need assistance on this and also once I get dovecot running with ldap, I could use proper assistance with the postfix solution also. I want to stop solaris versions of sendmail and use dovecot & postfix. I am also a little confused on the mail_location setting. We use thunderbird as an email client and it sets the "local folders" just fine. But with imap it puts the Sent, Trash, Draft folders in the users "home" directory. With dovecot I have to put them in a different folder, I called it posta for now. It then makes them . Files. (.Sent, .Trash ?)

2 1

Panic: file index-status.c: line 131 (index_storage_get_open_status): assertion failed: (status_r->recent <= status_r->messages)
by Toni Mattila 19 Sep '14

19 Sep '14

Hi, Got a new one on 2.2.13: Sep 19 04:11:39 moxi dovecot: imap(cen(a)cor.ed): Error: Log synchronization error at seq=3,offset=144 for /Maildir/.Spam/dovecot.index: Extension record update for invalid uid=494 Sep 19 04:11:39 moxi dovecot: imap(cen(a)cor.ed): Warning: fscking index file /Maildir/.Spam/dovecot.index Sep 19 04:11:39 moxi dovecot: imap(cen(a)cor.ed): Panic: file index-status.c: line 131 (index_storage_get_open_status): assertion failed: (status_r->recent <= status_r->messages) Sep 19 04:11:39 moxi dovecot: imap(cen(a)cor.ed): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0 [0x1f2c1f] -> /usr/lib/dovecot/libdovecot.so.0 [0x1f2c9d] -> /usr/lib/dovecot/libdovecot.so.0 [0x1f2514] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_storage_get_open_status+0x4d1) [0xcee761] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_storage_get_status+0x42) [0xcee7f2] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0xcd7b3a] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_get_open_status+0x4c) [0xcbe7ac] -> dovecot/imap [0x806485a] -> dovecot/imap(imap_sync_more+0x5cd) [0x8064edd] -> dovecot/imap [0x8065192] -> dovecot/imap(cmd_sync_delayed+0x1de) [0x80655de] -> dovecot/imap(client_handle_input+0x1c8) [0x805baa8] -> dovecot/imap(client_input+0x71) [0x805bd71] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x48) [0x204d88] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xff) [0x20675f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x1e) [0x204 Sep 19 04:11:39 moxi dovecot: imap(cen(a)cor.ed): Fatal: master: service(imap): child 17680 killed with signal 6 (core dumped) (gdb) bt full #0 0x00b8f402 in __kernel_vsyscall () No symbol table info available. #1 0x0070af30 in raise () from /lib/i686/nosegneg/libc.so.6 No symbol table info available. #2 0x0070c911 in abort () from /lib/i686/nosegneg/libc.so.6 No symbol table info available. #3 0x001f2c14 in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:193 backtrace = 0x8760180 "/usr/lib/dovecot/libdovecot.so.0 [0x1f2c1f] -> /usr/lib/dovecot/libdovecot.so.0 [0x1f2c9d] -> /usr/lib/dovecot/libdovecot.so.0 [0x1f2514] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_storage_get_"... #4 0x001f2c9d in i_internal_fatal_handler (ctx=0xbf827d74, format=0xd219b0 "file %s: line %d (%s): assertion failed: (%s)", args=0xbf827d94 "\225��") at failures.c:657 status = 0 #5 0x001f2514 in i_panic (format=0xd219b0 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:267 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = 0xbf827d94 "\225��" #6 0x00cee761 in index_storage_get_open_status (box=0x877c968, items=<value optimized out>, status_r=0x87adaa8) at index-status.c:131 hdr = (const struct mail_index_header *) 0x87aabd0 __FUNCTION__ = "index_storage_get_open_status" #7 0x00cee7f2 in index_storage_get_status (box=0x877c968, items=139, status_r=0x87adaa8) at index-status.c:48 No locals. #8 0x00cd7b3a in index_list_get_status (box=0x877c968, items=139, status_r=0x87adaa8) at mailbox-list-index-status.c:165 No locals. #9 0x00cbe7ac in mailbox_get_open_status (box=0x877c968, items=139, status_r=0x87adaa8) at mail-storage.c:1539 __FUNCTION__ = "mailbox_get_open_status" #10 0x0806485a in imap_sync_finish (ctx=0x87ada90, aborting=false) at imap-sync.c:321 client = (struct client *) 0x877d9d0 ret = 0 #11 0x08064edd in imap_sync_more (ctx=0x87ada90) at imap-sync.c:621 str = (string_t *) 0x8760030 ret = 1 __FUNCTION__ = "imap_sync_more" #12 0x08065192 in cmd_sync_continue (sync_cmd=0x877e438) at imap-sync.c:659 cmd = <value optimized out> prev = <value optimized out> client = (struct client *) 0x877d9d0 ctx = (struct imap_sync_context *) 0x87ada90 ret = <value optimized out> __FUNCTION__ = "cmd_sync_continue" #13 0x080655de in cmd_sync_delayed (client=0x877d9d0) at imap-sync.c:749 _data_stack_cur_id = 3 #14 0x0805baa8 in client_handle_input (client=0x877d9d0) at imap-client.c:904 remove_io = false handled_commands = true __FUNCTION__ = "client_handle_input" #15 0x0805bd71 in client_input (client=0x877d9d0) at imap-client.c:931 cmd = <value optimized out> output = (struct ostream *) 0x877e320 bytes = 216 __FUNCTION__ = "client_input" #16 0x00204d88 in io_loop_call_io (io=0x877e3b8) at ioloop.c:441 ioloop = (struct ioloop *) 0x8768498 t_id = 2 __FUNCTION__ = "io_loop_call_io" #17 0x0020675f in io_loop_handler_run_internal (ioloop=0x8768498) at ioloop-epoll.c:220 ctx = <value optimized out> event = (const struct epoll_event *) 0x8769650 list = (struct io_list *) 0x8769f48 io = (struct io_file *) 0x6 tv = {tv_sec = 1787, tv_usec = 891154} msecs = <value optimized out> ret = 1 i = 0 j = 0 call = false __FUNCTION__ = "io_loop_handler_run_internal" #18 0x00204e2e in io_loop_handler_run (ioloop=0x8768498) at ioloop.c:488 No locals. #19 0x00204eb8 in io_loop_run (ioloop=0x8768498) at ioloop.c:465 __FUNCTION__ = "io_loop_run" #20 0x001ab42d in master_service_run (service=0x87683c0, callback=0x8066000 <client_connected>) at master-service.c:566 No locals. #21 0x08065e9f in main (argc=Cannot access memory at address 0x0 ) at main.c:400 login_set = {auth_socket_path = 0x8760038 "P", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x80660c0 <login_client_connected>, failure_callback = 0x8066060 <login_client_failed>, request_auth_token = 1} service_flags = <value optimized out> storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT username = 0x0 c = <value optimized out> set_roots = {0x806daa0, 0x0}

1 0