- dovecot - dovecot.org

[Dovecot] IMAP, POP, LMTP response time
by adarshvs 10 Apr '14

10 Apr '14

Hi, How do I retrieve the /response time/ metrics for imap, pop, lmtp and smtp. Any suggestions will be very helpful. Thank you. -- View this message in context: http://dovecot.2317879.n4.nabble.com/IMAP-POP-LMTP-response-time-tp47500.ht… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Heartbleed openssl vulnerability?
by John Rowe 10 Apr '14

10 Apr '14

Do we know if dovecot is vulnerable to the heartbleed SSL problem? I'm running dovecot-2.0.9 and openssl-1.01, the latter being intrinsically vulnerable. An on-line tool says that my machine is not affected on port 993 but it would be nice to know for sure if we were vulnerable for a while. (Naturally I've blocked it anyway!). Thanks John

9 20

[Dovecot] Director NFS backups
by Murray Trainer 10 Apr '14

10 Apr '14

Hi All, What is the recommended method of taking backups of user mailboxes when using the Director setup with NFS backend mail storage? Is there any way to avoid the likely NFS locking issues by backing up the filesystem directly or do I have to do some sort of dsync method. If I have to use dsync can I dsync the mailboxes to compressed copies of the mailboxes without requiring another dovecot server to do the dsync. Thanks for you responses. Murray

1 0

Re: [Dovecot] POP3 sessions
by Joseph Tam 10 Apr '14

10 Apr '14

<doctor(a)doctor.nl2k.ab.ca> writes: > Is their a way in the config file to not lock > POP3 sessions in dovecot for only 1 user? That ought to be the default: http://wiki2.dovecot.org/POP3Server (Section Session locking) Did you set pop3_lock_session=yes somewhere? Locking is good if the client connection is stable: if you disable locking, you could end up with a scrambled mailbox as two or more users access it at the same time. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Error: broken sync positions in index file
by Alejandro Angelico 10 Apr '14

10 Apr '14

Hi everybody, I'm runing dovecot 2.2.12 and a user mailbox got the "broken sync positions in index file" error twice in the last 20 days. this is an extract from the maillog maillog First Error -------------------- Mar 23 16:13:25 andromeda dovecot: pop3-login: Login: user=<myuser(a)mydomain.com>, method=PLAIN, rip=187.237.107.24, lip=207.7.90.83, mpid=3983, session=<5KSEbU310wC77WsY> Mar 23 16:13:27 andromeda dovecot: pop3(myuser(a)mydomain.com): Error: broken sync positions in index file /home/myuser/mail/mydomain.com/myuser/dovecot.index Mar 23 16:13:27 andromeda dovecot: pop3(myuser(a)mydomain.com): Warning: fscking index file /home/myuser/mail/mydomain.com/myuser/dovecot.index Mar 23 16:13:27 andromeda dovecot: pop3(myuser(a)mydomain.com): Error: Fixed index file /home/myuser/mail/mydomain.com/myuser/dovecot.index: log_file_tail_offset 164 -> 144 Mar 23 16:13:27 andromeda dovecot: pop3(myuser(a)mydomain.com): Panic: file mail-transaction-log.c: line 350 (mail_transaction_log_set_mailbox_sync_pos): assertion failed: (file_offset >= log->head->saved_tail_offset) Mar 23 16:13:27 andromeda dovecot: pop3(myuser(a)mydomain.com): Fatal: master: service(pop3): child 3983 killed with signal 6 (core dumps disabled) Mar 23 16:13:27 andromeda dovecot: pop3: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0 [0xb7e59350] -> /usr/lib/dovecot/libdovecot.so.0 [0xb7e593cd] -> /usr/lib/dovecot/libdovecot.so.0 [0xb7e58c64] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_transaction_log_set_mailbox_sync_pos+0x9a) [0xb7f8c1aa] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_commit+0x9c) [0xb7f82a5c] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0xb7f00f2b] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0xb7f0034a] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0xb7f006ba] -> /usr/lib/dovecot/libdovecot-storage.so.0(maildir_storage_sync_init+0xc1) [0xb7f00851] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x39) [0xb7f33b79] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x3d) [0xb7f365ad] -> dovecot/pop3(client_create+0x2e2) [0x804c5e2] -> dovecot/pop3 [0x804afec] -> dovecot/pop3 [0x804b607] -> /usr/lib/dovecot/libdovecot.so.0 [0xb7e1033a] -> /usr/lib/dovecot/libdovecot.so.0 [0xb7e10622] -> /usr/li maillog Second Error -------------------- Apr 9 17:22:00 andromeda dovecot: imap-login: Login: user=<myuser(a)mydomain.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=29811, secured, session=<ZteFh6P2uAB/AAAB> Apr 9 17:22:00 andromeda dovecot: imap(myuser(a)mydomain.com): Error: Transaction log file /home/myuser/mail/mydomain.com/myuser/dovecot.index.log seq 4: log_file_tail_offset update shrank it (284 vs 420 sync_offset=268) Apr 9 17:22:00 andromeda dovecot: imap(myuser(a)mydomain.com): Error: broken sync positions in index file /home/myuser/mail/mydomain.com/myuser/dovecot.index Apr 9 17:22:00 andromeda dovecot: imap(myuser(a)mydomain.com): Warning: fscking index file /home/myuser/mail/mydomain.com/myuser/dovecot.index Apr 9 17:22:00 andromeda dovecot: imap(myuser(a)mydomain.com): Error: Fixed index file /home/myuser/mail/mydomain.com/myuser/dovecot.index: log_file_tail_offset 420 -> 284 Apr 9 17:22:00 andromeda dovecot: imap(myuser(a)mydomain.com): Panic: file mail-transaction-log.c: line 350 (mail_transaction_log_set_mailbox_sync_pos): assertion failed: (file_offset >= log->head->saved_tail_offset) Apr 9 17:22:00 andromeda dovecot: imap(myuser(a)mydomain.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0 [0xb7d9ae4f] -> /usr/lib/dovecot/libdovecot.so.0 [0xb7d9aecd] -> /usr/lib/dovecot/libdovecot.so.0 [0xb7d9a744] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_transaction_log_set_mailbox_sync_pos+0x9a) [0xb7ecf60a] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_commit+0x9c) [0xb7ec5e5c] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0xb7e43f8b] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0xb7e433aa] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0xb7e4371a] -> /usr/lib/dovecot/libdovecot-storage.so.0(maildir_storage_sync_init+0xc1) [0xb7e438b1] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x39) [0xb7e76d19] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x3d) [0xb7e7974d] -> dovecot/imap(cmd_select_full+0x23e) [0x805721e] -> dovecot/imap(cmd_select+0x19) [0x8057bf9] -> dovecot/imap(command_exec+0x33) [0x805c9a3] -> dovecot/imap [0x805b6df] -> dove Apr 9 17:22:00 andromeda dovecot: imap(myuser(a)mydomain.com): Fatal: master: service(imap): child 29811 killed with signal 6 (core dumps disabled) Deleting dovecot.index.* files solved the problem both times, but I'm wondering if something is wrong because it's always the same mailbox. Before deleting dovecot.index I run doveadm with this oputput: root@myserver [/home/myuser/mail/.myuser@mydomain_com]# doveadm index -u myuser INBOX doveadm(myuser): Fatal: User doesn't exist root@myserver [/home/myuser/mail/.myuser@mydomain_com]# doveadm index -u myuser(a)mydomain.com INBOX doveadm(myuser(a)mydomain.com): Error: Transaction log file /home/myuser/mail/mydomain.com/myuser/dovecot.index.log seq 4: log_file_tail_offset update shrank it (284 vs 420 sync_offset=268) doveadm(myuser(a)mydomain.com): Error: broken sync positions in index file /home/myuser/mail/mydomain.com/myuser/dovecot.index doveadm(myuser(a)mydomain.com): Warning: fscking index file /home/myuser/mail/mydomain.com/myuser/dovecot.index doveadm(myuser(a)mydomain.com): Error: Fixed index file /home/myuser/mail/mydomain.com/myuser/dovecot.index: log_file_tail_offset 420 -> 284 doveadm(myuser(a)mydomain.com): Panic: file mail-transaction-log.c: line 350 (mail_transaction_log_set_mailbox_sync_pos): assertion failed: (file_offset >= log->head->saved_tail_offset) doveadm(myuser(a)mydomain.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0 [0xb7d35e4f] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x43) [0xb7d35f63] -> /usr/lib/dovecot/libdovecot.so.0 [0xb7d35744] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_transaction_log_set_mailbox_sync_pos+0x9a) [0xb7e6a60a] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_commit+0x9c) [0xb7e60e5c] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0xb7ddef8b] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0xb7dde3aa] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0xb7dde71a] -> /usr/lib/dovecot/libdovecot-storage.so.0(maildir_storage_sync_init+0xc1) [0xb7dde8b1] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x39) [0xb7e11d19] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x3d) [0xb7e1474d] -> doveadm [0x80595db] -> doveadm [0x80558de] -> doveadm(doveadm_mail_try_run+0x293) [0x8055d03] -> doveadm(main+0x3bd) [0x805eb5d] -> /lib/libc.so.6(__libc_start_main+0xdc) [0xb7b89ebc] -> doveadm [0x8055061] Aborted Is there anything else I should try? or just wait to see if this happens again? the mailbox is not very big, around 38Mb in 84 mails. Thanks! Alex

1 0

[Dovecot] Override maildir for just a few users
by Charles Marcus 10 Apr '14

10 Apr '14

Hi all, Currently, I have mail_location = maildir:~/Maildir set and all passdb and userdb lookups are SQL based (doveconf -n pasted below). However, I want to override the users maildir location - and *only* the maildir location - for just a few users. I was thinking the easiest way would be to add a simple flat file based userdb that is checked before the SQL based one, where I can define a different maildir for these users. So, basically, dovecot checks the flat file first, and if the user isn't found, falls back to SQL. I still want all AUTH to go through SQL... It seems like this should be fairly simple, but after reading the wiki for a few days, I'm just not sure... This is on a production box, so I have to be careful (note to self - MUST set up testing box for things like this)... Is anyone else doing anything like this, and if so would you be willing to share sanitized configs? Thx, -- Best regards, Charles

3 2

[Dovecot] Sieve (randomly?) flagging messages as \\Seen \\Deleted
by Emanuele Balla (aka Skull) 09 Apr '14

09 Apr '14

Hi, I'm trying to debug (without great results, so far) a very weird behaviour in my environment. Sorry if this came out in another form before, but I've not been able to find out anything resembling what I'm experiencing, so far... OS is a debian wheezy and dovecot is the version provided by the OS: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.4 The system uses postfix with virtual users, credentials and maildir locations stored on mysql, local delivery through LMTP and sieve+managesieve available to users (although managesieve only listens on localhost and is only usable through the webmail interface). FWIW, I've been running 10-20 systems just like this one (mostly with earlier dovecot versions and using LDA when LMTP wasn't available yet) for many years, and this is the very first time I'm so puzzled I end up searching for help here :-| Even though the system has been working for months (more or less 1 year now) without big changes, a strange behaviour appeared (or became evident enough to be noticed) in the last few days, apparently involving sieve and some sort of "default/hidden" action triggered by something. Or at least that's what I ended up supposing. The problem in short: Messages I expected to find in certain folders were simply not there, although sieve logs reported them as delivered in those same folders. By manually inspecting the maildir, I actually found the messages, but they were all flagged as \\Seen + \\Deleted and therefore not displayed by the MUA (ThunderBird in my case). I initially supposed this to be a TB issue, 'cause nothing in my sieve script ever flags messages that way, but I could not find anything on my client explaining that. Then I received a notification from one of my users saying he was experiencing exactly the same, except he's using mutt as IMAP client; that restricted the issue to server-side interactions only, but nothing useful could be found in logfiles... This is the "relevant" portion of a "dovecot -n" output: [...] plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +vacation-seconds +editheader sieve_vacation_default_period = 2d sieve_vacation_dont_check_recipient = yes sieve_vacation_max_period = 30d sieve_vacation_min_period = 2s sieve_vacation_use_original_recipient = no } [...] protocol lmtp { mail_plugins = sieve hostname = alternativename.bofhland.org } There is no sieve_(before|after) script in addition to what users create for themselves. The mailboxes are relatively low-traffic; most of the traffic is caused by a single role address translated into multiple-recipients alias going to many of the users (100-300 messages per day). Almost all the users using sieve rely on it to store traffic for that role-address in a dedicated folder, including the mutt user and myself. Not that's all that important, but means that most of the misbehaviours observed (but not all) are observed in these folders. I enabled mail_debug, but there's nothing unusual in there AFAICT: it just says: - using the following location for user's Sieve script: /blabla/.dovecot.sieve - opening script /blabla/.dovecot.sieve - script binary /blabla/.dovecot.svbin successfully loaded - not saving binary /blabla/.dovecot.svbin, because it is already stored - executing script from /blabla/.dovecot.svbin - stored mail into mailbox 'DedicatedFolder' And it does, except the message happens to be flagged as seen and deleted... In order to try restricting what may be causing the issue, I added... removeflag "\\Deleted"; removeflag "\\Seen"; ...to the rule sending messages to the dedicated folder cited above for my mailbox. The problem apparently disappeared for me as long as I kept those in place. This should mean (I suppose) that the decision of flagging messages that way is taken before the users' sieve scripts are applied (sort of "hidden sieve_before"). The problem is hard to replicate as it's apparently not deterministic: the same message is being flagged for one user but not for the other, different messages between the same people and with the same thread are sometimes flagged and sometimes not. Something is surely triggering whatever is causing this, but it's not evident enough for me to point a finger and say "ha ha!" (https://www.youtube.com/watch?v=rX7wtNOkuHo) So, a question for people knowing pigeonhole's internals: does it ever choose to mark messages as described above for any reason? If yes, I may be triggering this behavior with something I recently added/modified, and at least I'll have something to focus my investigation on. :-| Any other suggestion is obviously welcome...

3 6

[Dovecot] sieve pigeonhole vacation filter responding when recipient is not explicitly listed
by Milan Cvetkovic 09 Apr '14

09 Apr '14

Hi dovecot.org, When I set up vacation filter for a mailbox, the vacation response is generated even though none of the addresses in the email are same as the mailbox address itself. I have example email sent to "aliastouser(a)mpathix.com" which gets delivered to "user(a)my.domain.com" by dovecot-lda. The invocation command is: # /usr/lib/dovecot/dovecot-lda \ -d user \ -f john.doe(a)somewhere.com \ -a aliastouser(a)mpathix.com \ -p /tmp/test.email # cat /tmp/test.email Message-ID: <test3> From: John Doe <john(a)somewhere.com> To: aliastouser(a)mpathix.com Subject: test3 vacation response as aliastouser This is the only line in test.email. Here is the vacation filter: if true { vacation :days 1 :addresses ["user(a)my.domain.com"] text: Please ignore this message, I am only testing vacation filter . ; } /var/log/mail.log shows that sieve vacation sends vacation, (and after succeeding attempts, discards due to already sent address) Apr 9 13:37:21 mx01 dovecot: lda(user): sieve: <test3>: sent vacation response to <john(a)somewhere.com> Apr 9 13:37:21 mx01 dovecot: lda(user): sieve: msgid=<test3>: stored mail into mailbox 'INBOX' ... Apr 9 13:40:15 mx01 dovecot: lda(user): sieve: msgid=<test3>: discarded duplicate vacation response to <john(a)somewhere.com> Apr 9 13:40:15 mx01 dovecot: lda(user): sieve: msgid=<test3>: stored mail into mailbox 'INBOX' Attached is the doveconf -n output. Any help is appreciated. Milan.

2 2

[Dovecot] Prevent sieve redirects to external domains
by adarshvs 09 Apr '14

09 Apr '14

Hi, Is there any way to disable sieve forwards to all domains except one. Users should be able to forward their mails to only one specific domain. If not then any idea on how this feature can be implemented ??. -- View this message in context: http://dovecot.2317879.n4.nabble.com/Prevent-sieve-redirects-to-external-do… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

Re: [Dovecot] Heartbleed openssl vulnerability?
by Jake Alley 09 Apr '14

09 Apr '14

It's an interesting issue. In my experience "stale" passwords are rarely used to compromise systems. However, passwords tend to end up on sticky notes and even worse, in email databases regardless. As far as compromised email passwords, they seem to mostly come from infected clients and insecure public logins as far as I can tell. A server can control the later, but not the former. I know of a major accounting software that forces Admin users to change their passwords every few months under certain circumstances. Those passwords always end up in emails to fellow users, so in that case forcing people to change seems to be definitely counterproductive. IMV the moral of the story is that you can't crypt your way into a 100% secure world. You need other forms of checks & reconciliations that are disjoint from purely cryptographic infrastructure. For instance ask Mt. Gox and Bitcoin if they agree in hindsight, and Heartbleed is a very good example of this concept. Thanks, Jake On 4/9/2014 10:27 AM, Reindl Harald wrote: "change passwords from time to time is always clever" is a strawmans argument with no context to the issue, forcing people to change their passwords all the time for no good reasons leads mostly to completly insecured passwords to remember them easier or have them on a sticky on the screen or under the keyboard the word "counterproductive" describes that policies perfectly

1 0

[Dovecot] Migration to Dovecot 2.2.12 - How to trigger full site indexing
by kadafax＠gmail.com 09 Apr '14

09 Apr '14

Hi list, We are in the process of migrating our old (dovecot 1.2.4 based) mail system to the new one: - Centos 6 x86_64 - Dovecot 2.2.12 - Users in an openldap directory - clucene FTS I'm trying to trigger a full indexing for all the user and all their mailboxes (avoiding them to individually trigger it using a search within their MUA). I'm trying to use the "doveadm index" command. First question, is there some sort of 'wildcard' option for the name of the mailbox to index, as I dont know all the mailboxes's names the users have created (beside the regular Sent Inbox Trash and Drafts ? Second question I've tried: # doveadm -D index -A Sent which gave me: doveadm(root): Error: User listing returned failure doveadm: Error: Failed to iterate through some users Can the '-A' option work with ldap backend ? Thanks a lot and have a nice day, kfx --------------------------------------------- # 2.2.12: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.11.2.el6.x86_64 x86_64 CentOS release 6.5 (Final) ext4 auth_cache_size = 10 M auth_debug = yes auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes auth_verbose_passwords = sha1 base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot-debug.log default_vsz_limit = 2 G hostname = mydomain.com info_log_path = /var/log/dovecot.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * log_path = /var/log/dovecot-error.log login_greeting = Welcome login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_debug = yes mail_gid = vmail mail_location = maildir:/var/vmail/%Ln mail_plugins = fts fts_lucene quota stats mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = maildir:/var/vmail/%Ln mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = type = private } passdb { args = /usr/local/etc/dovecot/deny-users deny = yes driver = passwd-file } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts = lucene fts_autoindex = yes fts_autoindex_max_recent = 1000 fts_lucene = whitespace_chars=@ quota = maildir:User quota quota_rule = *:storage=20GB quota_rule2 = Trash:storage=+200M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = /var/sieve-scripts/%Ln.sieve sieve_dir = /var/vmail/%Ln/home/sieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 30 secs stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } postmaster_address = postmaster(a)mydomain.com protocols = imap pop3 sieve sieve service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0777 user = vmail } } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 5 } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = nobody } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_cert = </etc/pki/tls/certs/mail.mydomain.com.pem ssl_key = </etc/pki/tls/private/mail.mydomain.com.key userdb { args = uid=12347 gid=12347 home=/var/vmail/%Ln/home allow_all_users=yes driver = static } verbose_proctitle = yes protocol lda { mail_plugins = fts fts_lucene quota stats sieve virtual } protocol imap { mail_plugins = fts fts_lucene quota stats imap_quota virtual imap_stats }

2 2

[Dovecot] POP3 sessions
by The Doctor 09 Apr '14

09 Apr '14

Is their a way in the config file to not lock POP3 sessions in dovecot for only 1 user? -- Member - Liberal International This is doctor(a)nl2k.ab.ca Ici doctor(a)nl2k.ab.ca God,Queen and country!Never Satan President Republic!Beware AntiChrist rising! http://www.fullyfollow.me/rootnl2k Look at Psalms 14 and 53 on Atheism C'est temps pour le Quebec de voter aujourd'hui.

2 1

[Dovecot] Dovecot LDAP issue
by Deeztek Support 08 Apr '14

08 Apr '14

Dovecot version: 2.0.19 ------------------------------------------------------- grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-ldap.conf hosts = server.domain.tld:389 ldap_version = 3 auth_bind = yes dn = vmail(a)domain.tld dnpass = somepassword base = ou=testou,dc=domain,dc=tld scope = subtree deref = never user_filter = (&(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) pass_filter = (&(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) pass_attrs = userPassword=password default_pass_scheme = CRYPT user_attrs = =home=/var/vmail/vmail1/%Ld/%Ln/Maildir/,=mail=maildir:/var/vmail/vmail1/%Ld/%Ln/Maildir ----------------------------------------------------- I'm authenticating users through AD and it seems to work with no problems. Unfortunately, when I try to send e-mail from a user who's not in the testou container I get the following error: Sender address rejected: User unknown in virtual mailbox table> #SMTP#. I'm assuming this happens because dovecot is not able to to lookup up that user since that user is outside the testou container. A lot of the AD users are in different places inside the AD structure and I need to be able to configure dovecot to look from the root of the AD structure down. I changed the base to this: base = dc=domain,dc=tld but it simply fails to lookup any users at that point. How would I go about getting dovecot to start at the top of the domain and look at every nested OU within AD? thanks a lot D

6 12

[Dovecot] Debugging doveadm expunge
by Andy Hawkins 08 Apr '14

08 Apr '14

Hi, I'm a recent convert to dovecot, and in general it is all working fine. However, I have a number of cron jobs set up to purge old messages from mailboxes. These don't seem to be doing what I would expect. Is there any way of debugging this process? Some way of seeing what messages it's checking, and why each one matches or fails to match? For example, I'm running this: doveadm expunge -u andy mailbox "News Reports" savedbefore 90d from the crontab of user 'andy'. I'd expect the specified folder to only contain 90 messages (I get one 'News Report' per day) but in actual fact there are 1428 in there! Any advice would be appreciated. Thanks Andy

2 2

Re: [Dovecot] Connection refused userdb lookup ..dovecot/auth-userdb
by Simon 08 Apr '14

08 Apr '14

On Tue, Apr 1, 2014 at 11:29 PM, Steffen Kaiser < skdovecot(a)smail.inf.fh-brs.de> wrote: > >>>>>>>>> >>>>>>>>> > What's the output of: >>> >>> lsof -c dovecot|grep auth-userdb >>> >>> [root@vmail1 ~]# lsof -c dovecot|grep auth-userdb >> dovecot 3147 root 38u unix 0xffff88004fce0680 0t0 24739 >> /var/run/dovecot/auth-userdb >> > > Dovecot is configured to use /var/run/dovecot/auth-userdb whereas your LDA > uses /usr/local/dovecot/var/run/dovecot/auth-userdb . You do not have > symlinks to merge both locations, do you? > > Check, why the Dovecot LDA is using another config file. Found it!!!!!!! Thank youm thank you, thank you... this was delivery config in postfix that was using /usr/local/dovecot/var/run/dovecot/auth-userdb. DUH! Simon

1 0

[Dovecot] dsync replication questions
by Nikolaos Milas 07 Apr '14

07 Apr '14

I am running two servers with Dovecot v2.2.12 on CentOS x86_64 (5.10 and 6.5 respectively) and users are virtual over ldap. I have setup our main internal server (vmail.example.com) with dsync replication according to the first part of http://wiki2.dovecot.org/Replication. The second one (vmail1.example.com) will be the failover server which we want to be a real-time mirror (but can be manipulated directly and it should propagate changes back to vmail.example.com) When I started the server (vmail.example.com) mirroring started and completed fine (after a few hours). However, since then, I am not seeing a continued mirroring between the two. I would expect changes to one of the masters to be propagated in real time to the other - which does not happen. If I manually run (on vmail.example.com) dsync -u imaptester mirror ssh -l root vmail1.example.com dsync -u imaptester then these two accounts are synced. Question 1: Shouldn't mirroring continue automatically in real time (having configured it as in the first part of http://wiki2.dovecot.org/Replication)? If not, what should I do to enable such a real-time (or near-real-time) sync? Note that I have not configured "replication_dsync_parameters" as noted at the above page. Question 2: Where can I find documentation about "replication_dsync_parameters" and about "the doveadm sync command" (referred to at the same page)? I have not been able to locate such a documentation/wiki page. Question 2a: What do options "-d -N -l 30 -U" signify in "replication_dsync_parameters = -d -N -l 30 -U"? Thanks, Nick

4 11

[Dovecot] Regarding SSHA512 Password Scheme
by Joy 07 Apr '14

07 Apr '14

Dear Expert, I am having issue with using SSHA512 Password Schemes with my openldap server. I have used doveadm utility to create password and able to verify the same but trying to login to IMAP is failing tried debug the auth part but no success so far. I am using the latest version of dovecot. Please share your views .. Thanks

2 1

[Dovecot] Dovecot IMAP Authentication issue with Vpopmail
by Arup 07 Apr '14

07 Apr '14

Hello All, i've configured a qmail server (for office) under Ubuntu 12.04 server following this guide- http://www.connor.net.au/tutorials/qmail/qmaillite/ everything working just fine except dovecot IMAP. i've followed this section for dovecot- http://www.connor.net.au/tutorials/q...te/dovecot.php<http://www.connor.net.au/tutorials/qmail/qmaillite/dovecot.php> but when i go to telnet 143 and try to login with username/password, it failed and showing error: ** BYE Internal error occurred. Refer to server log for more information.Connection closed by foreign host.* i think there may be some authentication issue with vpopmail and dovecot. POP and SMTP both working. but why not IMAP? i can't also use webmail (i.e. squirrelmail) as it don't working with IMAP. it's showing- *connection dropped by IMAP server *error while trying to login. i'm looking forward to a solution here. any qmail+vpopmail expert here? plz help. Thanks in advance. B/R

1 0

[Dovecot] Unknown setting: plugin after fresh install
by Patrik Karisch 04 Apr '14

04 Apr '14

Hi guys, I've installed dovecot 2.1.7 on a Debian Wheezy, tweaked some parameters little bit, but I can't restart it (dovecot -n also fails) and get this error: doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/90-acl.conf line 11: Unknown setting: plugin doveconf: Error: managesieve-login: dump-capability process returned 89 Wether I uncomment this plugin line, I get the error on another file (example 90-quote.conf). Seems a little bit weird. What have I done false? Thanks Patrik -- PRIVACY IS NOT A CRIME! So please encrypt your emails using PGP/GnuPG. My PGP Key-ID: 0x42D6DEA0 / 0x28B8F6E242D6DEA0 PGP Fingerprint: 4C1F ED51 047A D0E2 6C20 F3F7 28B8 F6E2 42D6 DEA0

2 2

[Dovecot] mdbox with mail_attachment_dir per user in 2.2.12
by Pavel Stano 04 Apr '14

04 Apr '14

Hello, we have 2 netapp arrays with 2 volumes and we need to store our mail data in one or other volume for every user. We want keep data for one user in one volume only. So we would like to have 2 separate mail_attachment_dir, one on every volume. But in latest version 2.2.12 it look like it is only possible to set one global mail_attachment_dir. I have an idea with 2 separate dovecot instances per machine with different mail_attachment_dir. Or it is possible to somehow specify it per user ? Thanks -- [ Ohodnotte kvalitu mailu: http://nicereply.com/websupport/Stano/ ] Pavel Stano | Troubleshooter http://WebSupport.sk *** BERTE A VYCHUTNAVAJTE ***

2 2

[Dovecot] imap / IPv6 problems?
by Egbert 04 Apr '14

04 Apr '14

Hi, I have this intermittant problem. When sending an email it *sometimes* takes ages before the process finishes. The process seems to hang in moving the message to the sent items" folder". When I disable the IPv6 stack in the network config (this is MS Windows 7), the hanging process immedialetely completes! This makens me think that is has to do with the IP stacks. Another observed effect is a long "rotating wheel" when just klicking on an imap folder before the listing in the right pane updates. Here the same trick solves the problem. I use Thunderbird on W7 as client and have my mail (3 accounts) on a remote mailserver. I have full control over that server which can become handy... Th emailserver is Ubuntu 12.04 LTS with postfix and Dovecot (2.0.19) from the standard repo's. My IPv6 connections is a native IPv6 from my ISP (xs4all.nl). I have no reason to think that the IPv 6 connecition itself is the problem. Any advise to investigate this problem is welcome. Egbert Jan, NL

2 1

[Dovecot] xz compression
by T.B. 04 Apr '14

04 Apr '14

Hello Timo, I've successfully setup xz compression for my Dovecot installation using the version 2.2.12 from Debian unstable. Together with the activation of the "Single Instance Attachment Storage", this reduced the mail storage utilization for 20 mail accounts by 74%. *My question:* (For this test just one user was logged in. OS = Debian Wheezy, AMD64) After conversion of my mail storage, IMAP read by Thunderbird worked perfectly. But IMAP write and LMTP write was not possible.* *xz compression seems to need a higher vsz_limit than its default value of 256M without compression. Before the conversion, 256M was enough with the plugins "**acl fts fts_solr" and " imap_zlib". 512M was still not enough for xz compression, 1024M works OK but I'm not sure since this is a relative large increase. My new setting: /etc/dovecot/conf.d/10-master.conf: service imap { vsz_limit=1024M } The absolute minimum to successfully send an empty mail is 710MB (700MB still produces out of memory)! _*Is this normal behaviour? What is a recommended value for "service imap {vsz_limit = }"?*_ I recommend to add this "_vsz_limit"_-increase to the wiki (http://wiki2.dovecot.org/Plugins/Zlib) to make others life easier. Error log below. * **My config & how I converted:* /etc/dovecot/conf.d/10-mail.conf: mail_plugins = *zlib *acl fts fts_solr /etc/dovecot/conf.d/90-plugin.conf: # Enable these only if you want compression while saving: zlib_save_level = 9 # 1..9 zlib_save = xz For "Single Instance Attachment Storage": /etc/dovecot/conf.d/10-mail.conf: # Directory root where to store mail attachments. Disabled, if empty. mail_attachment_dir = /srv/vmail/mail_attachments For compressed IMAP access ( to reduce the bandwidth usage of IMAP ) (has nothing to do with storage space): /etc/dovecot/conf.d/20-imap.conf: protocol imap { mail_plugins = $mail_plugins *imap_zlib* } Previous storage format was standard mdbox Format. To convert a single user, I used dsync from the command line: dsync -u user(a)domain.de mirror mdbox:/srv/converted_vmail/user@domain.de/ After conversion (~2 hours per account), I moved the original mail folder of the user to a backup location and replaced it by the converted folders from "/srv/converted_vmail/user(a)domain.de/". (Pay attention that the directory structure matches!, I had to adjust ist.) *My Problem:* *After conversion IMAP read by Thunderbird worked perfectly**. But IMAP write and **LMTP write was not possible**.** **/var/log/dovecot.log showed that vsz_limit**was to restrictive:* Log: Apr 03 14:13:14 imap(user(a)domain.de): Fatal: lzma: Out of memory Apr 03 14:13:14 imap(user(a)domain.de): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x674f0) [0x7f8538fd54f0] -> /usr/lib/dovecot/libdovecot.so.0(+0x675ce) [0x7f8538fd55ce] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f8538f90678] -> /usr/lib/dovecot/modules/lib20_zlib_plugin.so(o_stream_create_lzma+0xeb) [0x7f8538393ecb] -> /usr/lib/dovecot/modules/lib20_zlib_plugin.so(+0x2c14) [0x7f8538390c14] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_save_begin+0x43) [0x7f85392bdc23] -> dovecot/imap [user(a)domain.de 192.168.1.42 append](+0xd824) [0x7f8539788824] -> dovecot/imap [user(a)domain.de 192.168.1.42 append](cmd_append+0x10e) [0x7f8539788a6e] -> dovecot/imap [user(a)domain.de 192.168.1.42 append](command_exec+0x3c) [0x7f853979390c] -> dovecot/imap [user(a)domain.de 192.168.1.42 append](+0x178ff) [0x7f85397928ff] -> dovecot/imap [user(a)domain.de 192.168.1.42 append](+0x179b5) [0x7f85397929b5] -> dovecot/imap [user(a)domain.de 192.168.1.42 append](client_handle_input+0x125) [0x7f8539792cd5] -> dovecot/imap [user(a)domain.de 192.168.1.42 append](client_input+0x75) [0x7f8539793065] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x27) [0x7f8538fe55c7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd7) [0x7f8538fe6357] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f8538fe5168] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f8538f95723] -> dovecot/imap [user(a)domain.de 192.168.1.42 append](main+0x2c4) [0x7f8539787324] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f8538be6b45] -> dovecot/imap [user(a)domain.de 192.168.1.42 append](+0xc490) [0x7f8539787490] Apr 03 14:13:14 imap-login: Debug: SSL alert: close notify [192.168.1.42] Apr 03 14:13:14 imap(user(a)domain.de): Fatal: master: service(imap): child 23995 returned error 83 (Out of memory (service imap { vsz_limit=256 MB }, you may need to increase it) - set CORE_OUTOFMEM=1 environment to get core dump) ==============================================

3 2

[Dovecot] Crash in pop3 with version 2.2.12
by Urban Loesch 04 Apr '14

04 Apr '14

Hi, today I upgraded to version 2.2.12 under Debian Squeeze. I saw some people on the list they had the same problems with version 2.2.11, but which should have been fixed in version 2.2.12. My logfile shows: .. Mar 28 08:25:01 mailstore dovecot: pop3-login: Login: user=<ul(a)domain.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=34568, secured, session=<Jp6RmaX1YAB/AAAB> Mar 28 08:25:06 mailstore dovecot: pop3(ul(a)domain.net pid:34568 session:<Jp6RmaX1YAB/AAAB>): Fatal: master: service(pop3): child 34568 killed with signal 11 (core dumped) ... I made some more dubugging and I found that the pop3 process crashed on the "uidl" command. Here my output from telnet session: .. root@mailstore: # telnet localhost 110 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user ul(a)domain.net +OK pass PASS +OK Logged in. list +OK 5 messages: 1 3492 2 21924 3 3525 4 3472 5 3273 . uidl Connection closed by foreign host. ... Listing massages or retrieving messages works normally. Only on "uidl" command the services crashes. I made a backtrace. -----> start backtrace <----- Core was generated by `dovecot/pop3'. Program terminated with signal 11, Segmentation fault. #0 0x00007f9dd8ca488d in vfprintf () from /lib/libc.so.6 (gdb) bt full #0 0x00007f9dd8ca488d in vfprintf () from /lib/libc.so.6 No symbol table info available. #1 0x00007f9dd8cc6732 in vsnprintf () from /lib/libc.so.6 No symbol table info available. #2 0x00007f9dd904d0db in str_vprintfa (str=0x11aa4f8, fmt=0x409184 "%u %s", args=0x7ffffab4fff0) at str.c:155 args2 = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7ffffab500e0, reg_save_area = 0x7ffffab50010}} init_size = 4231558 pos = 0 ret = <value optimized out> ret2 = <value optimized out> __FUNCTION__ = "str_vprintfa" #3 0x00000000004055ff in client_send_line (client=0x11d1e50, fmt=<value optimized out>) at pop3-client.c:678 str = 0x11aa4f8 _data_stack_cur_id = 4 va = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7ffffab500e0, reg_save_area = 0x7ffffab50010}} ret = <value optimized out> __FUNCTION__ = "client_send_line" #4 0x00000000004073cd in list_uidls_saved_iter (client=0x11d1e50, ctx=0x11da3c0) at pop3-commands.c:666 found = true #5 list_uids_iter (client=0x11d1e50, ctx=0x11da3c0) at pop3-commands.c:693 str = <value optimized out> permanent_uidl = <value optimized out> found = <value optimized out> failed = <value optimized out> #6 0x0000000000407d88 in cmd_uidl (client=0x11d1e50, name=<value optimized out>, args=0x408880 "") at pop3-commands.c:874 ctx = 0x0 seq = <value optimized out> #7 client_command_execute (client=0x11d1e50, name=<value optimized out>, args=0x408880 "") at pop3-commands.c:938 No locals. #8 0x0000000000405870 in client_handle_input (client=0x11d1e50) at pop3-client.c:739 _data_stack_cur_id = 3 line = <value optimized out> args = 0x408880 "" ret = <value optimized out> #9 0x00007f9dd903c3d6 in io_loop_call_io (io=0x11d2760) at ioloop.c:388 ioloop = 0x11b2740 t_id = 2 #10 0x00007f9dd903d45f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:220 ctx = 0x11b2aa0 event = 0x11b3900 list = 0x11b44d0 io = 0x51 tv = {tv_sec = 9, tv_usec = 999326} msecs = <value optimized out> ret = 1 i = 0 call = false __FUNCTION__ = "io_loop_handler_run" #11 0x00007f9dd903c348 in io_loop_run (ioloop=0x11b2740) at ioloop.c:412 __FUNCTION__ = "io_loop_run" #12 0x00007f9dd8fea953 in master_service_run (service=0x11b25d0, callback=0x409186) at master-service.c:566 No locals. #13 0x0000000000404ac7 in main (argc=1, argv=0x11b2390) at main.c:277 set_roots = {0x4094e0, 0x0} login_set = {auth_socket_path = 0x11aa050 "/var/run/dovecot/auth-master", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x404ca0 <login_client_connected>, failure_callback = 0x404c50 <login_client_failed>, request_auth_token = 0} service_flags = <value optimized out> storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT username = 0x0 c = <value optimized out> (gdb) quit -----> end backtrace <----- And at least my pop3 configuration part: -----> start config <----- protocol pop3 { mail_plugins = " quota mail_log notify acl zlib stats" pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_lock_session = yes pop3_logout_format = bytes_sent=%o top=%t/%p, retr=%r/%b, del=%d/%m, size=%s uidl_hash=%u session=<%{session}> pop3_reuse_xuidl = yes } -----> end config <----- Setting "pop3_reuse_xuidl = no" has noe effect. Always the same crash. Thanks and regards Urban Loesch

4 6

[Dovecot] Use 1 userdb and LDAP passdb for mailbox without allow_all_users
by VALLIN Quentin 04 Apr '14

04 Apr '14

Hello everybody, I have a little pb with dovecot. I have been read on archive of dovecot mailing list that it's possible to have 1 static userdb with LDAP passdb (http://www.dovecot.org/list/dovecot/2010-November/055193.html) but when I try it I have an error message and my message is on the queue with "temporary failure" auth: Debug: master in: USER#0111#011quentinv#011service=lda auth: Debug: password(quentinv): passdb doesn't support credential lookups auth: Error: static(quentinv): passdb doesn't support lookups, can't verify user's existence auth: Debug: userdb out: FAIL#0111 lda: Error: user quentinv: Auth USER lookup failed lda: Fatal: Internal error occurred. Refer to server log for more information. auth: Debug: master in: USER#0111#011quentinv#011service=lda auth: Debug: password(quentinv): passdb doesn't support credential lookups auth: Error: static(quentinv): passdb doesn't support lookups, can't verify user's existence auth: Debug: userdb out: FAIL#0111 lda: Error: user quentinv: Auth USER lookup failed lda: Fatal: Internal error occurred. Refer to server log for more information. My imap connexion havn't any pb but LDA yes. Here is my dovecot.conf # 2.2.10: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 7.4 ext3 auth_debug = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 8 first_valid_uid = 15 listen = * login_greeting = Bienvenue sur courriel login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_fsync = never mail_gid = 8 mail_location = maildir:/var/mail/%n:CONTROL=/var/mail/%n/control:INDEX=/var/mail/%n/index mail_log_prefix = "%Us(%u): " mail_privileged_group = mail mail_uid = 15 passdb { args = /usr/local/dovecot/etc/dovecot-ldap.conf driver = ldap } plugin { quota = maildir quota_rule = *:storage=3145728 quota_rule2 = Trash:storage=+102400 quota_warning = storage=90%% /usr/local/dovecot/bin/quota-warning.sh 90 } protocols = imap service auth { executable = /usr/local/dovecot/libexec/dovecot/auth } service imap-login { chroot = login executable = /usr/local/dovecot/libexec/dovecot/imap-login process_limit = 400 process_min_avail = 3 service_count = 1 user = dovecot vsz_limit = 32 M } service imap { drop_priv_before_exec = no executable = /usr/local/dovecot/libexec/dovecot/imap process_limit = 512 } service pop3-login { chroot = login process_limit = 256 process_min_avail = 3 service_count = 1 user = dovecot vsz_limit = 32 M } service pop3 { drop_priv_before_exec = no process_limit = 512 } ssl_cert = ssl_cipher_list = ssl_key = </ userdb { args = uid=vmail gid=mail home=/var/mail/%n driver = static } valid_chroot_dirs = /var/mail protocol imap { imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k mail_max_userip_connections = 5 mail_plugins = quota imap_quota } protocol lda { deliver_log_format = msgid=%m: %$ hostname = courriel2.coria.fr mail_fsync = optimized mail_plugins = quota postmaster_address = postmaster(a)coria.fr<mailto:postmaster@coria.fr> rejection_reason = Your message to <%t> was automatically rejected : %n%r rejection_subject = Automatically rejected mail sendmail_path = /usr/lib/sendmail } And my dovecot-ldap.conf tls = no uris = ldap://x.x.x.x:389 ldap_version = 3 auth_bind = yes dn = userdn dnpass = pass base = ou=Users,dc=quentin,dc=local scope = subtree deref = never pass_filter = (&(SamAccountName=%n)(objectClass=person)(!(userAccountControl=514))) pass_attrs =uid=user, userPassword=password default_pass_scheme = CRYPT Sincerly, Quentin. [signature]

1 0

Re: [Dovecot] Disable maildir indexing and dovecot-uidlist on LMTP/LDA delivery
by Joseph Tam 04 Apr '14

04 Apr '14

Jouko Nikula <jonikula(a)gmail.com> writes: > Is there a way to use LMTP (or LDA) so that maildir index and > dovecot-uidlist are not updated? > > My setup is such that mail delivery sees user's maildir as write only. This > setup works well when using postfix for mail delivery, but when I try to > switch to dovecot LMTP the lmtp process wants to read the dovecot-uidlist > and fails on insufficient privileges. Is there a way around this without > exposing the maildir and mail home for read access? You could create MEMORY indices e.g. mail_location = maildir:~/Maildir:INDEX=MEMORY which will allow all the other processing like sieve to work. However, I would look at the cause of the "insufficient privileges": it is a symptom of something that could lead to other problems. Joseph Tam <jtam.home(a)gmail.com>

2 3

[Dovecot] dovecot 2.2.10 & fts_lucene: Failed to initialize backend
by Benjamin Podszun 03 Apr '14

03 Apr '14

Hey there. (Lesson to self: Don't try to be cute. Somehow a trademark sign breaks my setup and the rest of the mail is discarded? Sorry for the previous, incomplete post) Lurking most of the time here, currently I'm trying to make FTS work. As far as I understand [1], squat is deprecated, solr is a rather big dependency for my 'friends & family' type of installation: Lucene it is! My problem: The lucene backend isn't working, I get this error whenever I try to access it (be it doveadm fts or a search, triggering an index): # doveadm fts rescan -u dar(a)darklajid.de doveadm(dar(a)darklajid.de): Error: fts: Failed to initialize backend 'lucene': Unknown backend doveadm(dar(a)darklajid.de): Error: fts not enabled for user's namespace (null) Any ideas what I might be doing wrong here? All the details I could think of are below, any help would be appreciated. Regards, Ben -- Package information # pkg info dovecot2 dovecot2-2.2.10 Name : dovecot2 Version : 2.2.10 Installed on : Mon Mar 31 17:14:26 CEST 2014 Origin : mail/dovecot2 Architecture : freebsd:10:x86:64 Prefix : /usr/local Categories : mail ipv6 Licenses : MIT or LGPL21 Maintainer : bra(a)fsn.hu WWW : http://www.dovecot.org/ Comment : Secure and compact IMAP and POP3 servers Options : DOCS : off EXAMPLES : off GSSAPI : off KQUEUE : on LDAP : off LIBWRAP : off LUCENE : on MYSQL : off PGSQL : on SOLR : off SQLITE : off SSL : on VPOPMAIL : off Shared Libs required: libssl.so.8 libpq.so.5 libdovecot.so.0 libdovecot-storage.so.0 libdovecot-login.so.0 libdovecot-lda.so.0 libcrypto.so.8 libclucene-shared.so.1 libclucene-core.so.1 Shared Libs provided: libssl_iostream_openssl.so libdovecot.so.0 libdovecot-storage.so.0 libdovecot-sql.so.0 libdovecot-login.so.0 libdovecot-lda.so.0 libdovecot-compression.so.0 libauthdb_imap.so lib95_imap_stats_plugin.so lib90_stats_plugin.so lib30_imap_zlib_plugin.so lib21_fts_squat_plugin.so lib21_fts_lucene_plugin.so lib20_zlib_plugin.so lib20_virtual_plugin.so lib20_replication_plugin.so lib20_mailbox_alias_plugin.so lib20_mail_log_plugin.so lib20_listescape_plugin.so lib20_fts_plugin.so lib20_expire_plugin.so lib20_doveadm_fts_plugin.so lib20_doveadm_fts_lucene_plugin.so lib20_autocreate_plugin.so lib15_notify_plugin.so lib11_trash_plugin.so lib11_imap_quota_plugin.so lib10_quota_plugin.so lib10_doveadm_quota_plugin.so lib10_doveadm_expire_plugin.so lib10_doveadm_acl_plugin.so lib05_snarf_plugin.so lib05_pop3_migration_plugin.so lib02_lazy_expunge_plugin.so lib02_imap_acl_plugin.so lib01_acl_plugin.so -- Sure enough, the libraries are there/in places that look fine to me: # pkg info -l dovecot2 | grep -i fts /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.a /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.la /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.a /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.la /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so /usr/local/lib/dovecot/lib20_fts_plugin.a /usr/local/lib/dovecot/lib20_fts_plugin.la /usr/local/lib/dovecot/lib20_fts_plugin.so /usr/local/lib/dovecot/lib21_fts_lucene_plugin.a /usr/local/lib/dovecot/lib21_fts_lucene_plugin.la /usr/local/lib/dovecot/lib21_fts_lucene_plugin.so /usr/local/lib/dovecot/lib21_fts_squat_plugin.a /usr/local/lib/dovecot/lib21_fts_squat_plugin.la /usr/local/lib/dovecot/lib21_fts_squat_plugin.so -- Doveconf: # 2.2.10: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.0-RELEASE amd64 ufs first_valid_uid = 1 login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_home = /var/vmail/%d/%n mail_location = maildir:/var/vmail/%d/%n/Maildir mail_plugins = fts mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = mailbox Drafts { auto = no special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = create special_use = \Trash } prefix = separator = / } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { antispam_backend = dspam antispam_dspam_args = --user;%Lu;--source=error;--signature=%%s antispam_dspam_binary = /usr/local/bin/dspamc antispam_dspam_notspam = --class=innocent antispam_dspam_result_header = X-DSPAM-Result antispam_dspam_spam = --class=spam antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_spam = Spam;Junk antispam_trash = trash;Trash fts = lucene fts_lucene = whitespace_chars=@. sieve = ~/.dovecot.sieve sieve_before = /usr/local/etc/dovecot/sieve/before sieve_dir = ~/sieve } postmaster_address = postmaster(a)ben.sh protocols = imap lmtp sieve service auth-worker { user = vmail } service auth { unix_listener /var/prosody/private/auth { group = prosody mode = 0660 user = prosody } unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } user = dovecot } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } } service managesieve { process_limit = 128 } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 0 } } ssl = required ssl_cert = </usr/local/etc/dovecot/ssl/certs/ben.sh.pem ssl_cipher_list = EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4 ssl_key = </usr/local/etc/dovecot/ssl/private/ben.sh.key userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol sieve { mail_max_userip_connections = 10 managesieve_max_compile_errors = 5 } protocol lmtp { mail_plugins = quota sieve } protocol imap { mail_plugins = fts fts_lucene quota imap_quota antispam } 1: http://wiki2.dovecot.org/Plugins/FTS

2 3

[Dovecot] Disable maildir indexing and dovecot-uidlist on LMTP/LDA delivery
by Jouko Nikula 03 Apr '14

03 Apr '14

Hello all, Is there a way to use LMTP (or LDA) so that maildir index and dovecot-uidlist are not updated? My setup is such that mail delivery sees user's maildir as write only. This setup works well when using postfix for mail delivery, but when I try to switch to dovecot LMTP the lmtp process wants to read the dovecot-uidlist and fails on insufficient privileges. Is there a way around this without exposing the maildir and mail home for read access? Regards, Jouko Nikula

5 4

Re: [Dovecot] Is replication broken?
by IT geek 31 03 Apr '14

03 Apr '14

> > Honestly, for most setups I would recommend LMTP nowadays. >> > I don't use Postfix, but that page looks good: > http://wiki2.dovecot.org/HowTo/PostfixDovecotLMTP I followed the guide, but I received the following error: Apr 3 08:41:31 server1 postfix/lmtp[4084]: DE4321F83A: to=<user1(a)test.com>, relay=server1.test.com[private/dovecot-lmtp], delay=491, delays=490/0.21/0.02/0.02, dsn=5.1.1, status=bounced (host server1.test.com[private/dovecot-lmtp] said: 550 5.1.1 <user1(a)test.com> User doesn't exist: user1(a)test.com (in reply to RCPT TO command)) The solution was to add the following line to my dovecot.conf: auth_username_format = %Ln All is now working as expected. Now to crack on with replication... :-) -Mark

1 0

[Dovecot] dovecot 2.2.10 & fts_lucene: Failed to initialize backend
by Benjamin Podszun 03 Apr '14

03 Apr '14

Hey there. Lurking most of the time here, currently I'm trying to make FTS work™

1 0

Re: [Dovecot] Is replication broken?
by IT geek 31 03 Apr '14

03 Apr '14

> > Honestly, for most setups I would recommend LMTP nowadays. > I don't use Postfix, but that page looks good: > http://wiki2.dovecot.org/HowTo/PostfixDovecotLMTP > > You do not need to do anything special in postfix, if you use Dovecot's > LDA or LMTP, when you change the storage backend. Most importantly, that > way you can let UserDB return a different mail_location per recipient > without postfix knowing anything about the difference. > Thank you Steffen, I shall give that a go and report back with how I get on. -Mark

1 0

[Dovecot] nfs flush/fsync config settings problem
by Troton_admin 03 Apr '14

03 Apr '14

Hi, I need to place a maildir storage on a NFS filesystem, so I set up the config like this: mmap_disable = yes mail_nfs_storage = yes mail_nfs_index = yes mail_fsync = always lock_method = dotlock (also tried fcntl - local lockd is running, no success, now using dotlock, to be sure while debugging) The problem is that Dovecot (2.2.9/2.2.10 - the relevant code in mail-index.c is the same) logs a fatal error and quits the session (no daemon crash/coredump). Jan 07 14:13:31 auth: Debug: client in: AUTH 1 PLAIN service=pop3 session=fRCRJGHvbADDUKU9 lip=192.168.100.102 rip=IP_ADDR lport=1110 rport=48236 resp=AHRyb3RvbjEAdHJvdG9uMQ== (previous base64 data may contain sensitive data) Jan 07 14:13:31 auth: Debug: passwd-file(troton1,IP_ADDR,<fRCRJGHvbADDUKU9>): lookup: user=troton1 file=/usr/local/etc/dovecot/passwd-file Jan 07 14:13:31 auth: Debug: client passdb out: OK 1 user=troton1 Jan 07 14:13:31 auth: Debug: master in: REQUEST 1289355265 29049 1 4f9fdd9e4069fa503e8e6bcc09d4cf30 session_pid=29089 Jan 07 14:13:31 auth: Debug: passwd-file(troton1,IP_ADDR,<fRCRJGHvbADDUKU9>): lookup: user=troton1 file=/usr/local/etc/dovecot/passwd-file Jan 07 14:13:31 auth: Debug: master userdb out: USER 1289355265 troton1 uid=81 gid=81 home=/home/troton1 mail=maildir:~/Maildir Jan 07 14:13:31 pop3-login: Info: Login: user=<troton1>, method=PLAIN, rip=IP_ADDR, lip=192.168.100.102, mpid=29089, session=<fRCRJGHvbADDUKU9> Jan 07 14:13:31 pop3: Debug: Added userdb setting: mail=maildir:~/Maildir Jan 07 14:13:31 pop3(troton1): Debug: Effective uid=81, gid=81, home=/home/troton1 Jan 07 14:13:31 pop3(troton1): Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Jan 07 14:13:31 pop3(troton1): Debug: maildir++: root=/home/troton1/Maildir, index=, indexpvt=, control=, inbox=/home/troton1/Maildir, alt= Jan 07 14:13:31 pop3(troton1): Info: DEBUG1: fsync_mode=2 , mask=0 Jan 07 14:13:31 pop3(troton1): Info: DEBUG2: fsync_mode=2 flags=85 Jan 07 14:13:31 pop3(troton1): Debug: Namespace : Using permissions from /home/troton1/Maildir: mode=0700 gid=default Jan 07 14:13:31 pop3(troton1): Info: DEBUG2: fsync_mode=0 flags=85 The user/passdb is just a plaintext file, for debugging purposes. But what is strange, the messages system log shows: Jan 7 14:13:31 mailhub2 dovecot: pop3(troton1): Fatal: nfs flush requires mail_fsync=always That is obviously wrong, even its own doveconf -n utility shows the correct value. # doveconf -n | grep -E 'sync|nfs' mail_fsync = always mail_nfs_index = yes mail_nfs_storage = yes maildir_very_dirty_syncs = yes Affected code seems to be in the lib-index/mail-index.c file, mail_index_file function - around line 585 : // my custom debug line i_info("DEBUG2: fsync_mode=%u flags=%u", (unsigned int)(index->fsync_mode),(unsigned int)flags); if ((flags & MAIL_INDEX_OPEN_FLAG_NFS_FLUSH) != 0 && index->fsync_mode != FSYNC_MODE_ALWAYS) i_fatal("nfs flush requires mail_fsync=always"); The first time it sees fsync_mode=2 (which is correct value of FSYNC_MODE_ALWAYS), but next function call is with index->fsync_mode=0 and an error is raised, see the logfile above. Dovecot correctly creates its working files in user's home directory - dovecot-uidlist, dovecot-uidvalidity, dovecot-uidvalidity.52cbfd7b, dovecot.index.log . The complete (testing, not production) doveconf -n is: == # 2.2.10: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 7.3-RELEASE-p3 amd64 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = sha1 default_process_limit = 200 disable_plaintext_auth = no first_valid_uid = 81 imap_client_workarounds = delay-newmail tb-extra-mailbox-sep info_log_path = /var/log/dovecot.log last_valid_uid = 81 listen = 192.168.100.102 lock_method = dotlock mail_debug = yes mail_fsync = always mail_gid = 81 mail_location = maildir:%h/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_prefetch_count = 5 mail_uid = 81 mailbox_list_index = yes maildir_stat_dirs = yes maildir_very_dirty_syncs = yes mmap_disable = yes namespace inbox { inbox = yes location = mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . type = private } passdb { args = scheme=plain username_format=%n /usr/local/etc/dovecot/passwd-file driver = passwd-file } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid subject size } pop3_enable_last = yes pop3_save_uidl = yes protocols = imap pop3 service doveadm { inet_listener { port = 9292 } } service imap-login { inet_listener imap { port = 1143 } } service imap { process_limit = 250 } service pop3-login { inet_listener pop3 { port = 1110 } } service pop3 { process_limit = 200 } ssl = no userdb { args = username_format=%n /usr/local/etc/dovecot/passwd-file default_fields = uid=81 gid=0 home=/home/%n driver = passwd-file } protocol imap { mail_max_userip_connections = 5 } protocol pop3 { mail_max_userip_connections = 5 } == OS: 7.3-RELEASE-p3 FreeBSD 7.3-RELEASE-p3 #1 amd64 Affected Dovecot version: 2.2.9, 2.2.10 How to repeat: Anytime I enter the correct username/pass pair And I tried to place the homedir on a local disk too, and I got the same error as on NFS. Any ideas, what could possibly be wrong ? Is it a feature or a bug ? Thanks for your help. Regards, Troton

3 2

[Dovecot] how to enable debugging in imapc
by Tobias Oetiker 03 Apr '14

03 Apr '14

Hi Net, How can I enable debug messages in the imap-proxy client? Trying to figure why the imap-proxy mode does not work towards ngnix. specifically, how can i set conn->client->set.debug in ./src/lib-imap-client/imapc-connection.c cheers tobi -- Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland www.oetiker.ch tobi(a)oetiker.ch +41 62 775 9902 *** We are hiring IT staff: www.oetiker.ch/jobs ***

2 3

[Dovecot] Is replication broken?
by IT geek 31 03 Apr '14

03 Apr '14

Hi, Apologies for this being my 248th post about replication... The current error I'm getting is: Jan 30 12:10:54 Server1 dovecot: dsync-local(MailUser1): Error: dsync( Server2.test.com) read() failed: read((fd)) failed: Connection reset by peer Subsequent errors are: Jan 30 12:15:47 Server1 dovecot: dsync-local(MailUser1): Error: read( Server2.test.com) failed: EOF The above error is seen on Server1, after the initial sync completes of the first mailbox (Sent folder to be precise). Does anyone have an ideas as to what might be causing it? These are brand new rebuilds, running the latest build - I just can't seem to get this working. Bug maybe? Configs are as follows: Server1: # 2.2.10: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.2 cobalt auth_mechanisms = plain login doveadm_password = secret doveadm_port = 12345 first_valid_uid = 1003 last_valid_uid = 1020 listen = 192.168.1.1 login_greeting = test.com mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_plugins = " notify replication" passdb { driver = passwd } plugin { mail_replica = tcp:Server2.test.com } protocols = imap service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0600 } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { inet_listener imap { port = 0 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl_cert = </etc/openssl/certs/Server1.test.crt ssl_key = </etc/openssl/private/Server1.test.key userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)test.com } ServerB: # 2.2.10: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.1 cobalt auth_mechanisms = plain login doveadm_password = secret doveadm_port = 12345 listen = 192.168.1.2 login_greeting = test.com mail_location = mbox:~/mail:INBOX=/var/mail/%u passdb { driver = passwd } protocols = imap service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0600 } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service doveadm { inet_listener { port = 12345 } } service imap-login { inet_listener imap { port = 0 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl_cert = </etc/openssl/certs/Server2.test.com.crt ssl_key = </etc/openssl/private/Server2.test.com.key userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)test.com }

4 15

[Dovecot] Test outgoing email on director setup
by Murray Trainer 03 Apr '14

03 Apr '14

HI All, I have a several Exim MTA's relaying mail to a pair of director proxies via LMTP which then relayi to several mailstores via LMTP Incoming mail is working fine. My outgoing mail uses LMTP also in the reverse of above. How do I manually test outgoing mail on the mailstores and proxies as I only have dovecot and not exim installed on them? I have the following set in dovecot.conf for LMTP submission_host = mailproxy01:24 mailproxy02:24 Hopefully that works with multiple submission hosts to give redundancy? Thanks Murray

1 0

[Dovecot] Info on Config Sharing or Unfied Config?
by Jeffrey Walton 02 Apr '14

02 Apr '14

Is there a wiki page or other resource on configuration sharing between Postfix and Dovecot? Or is there a unified config file somewhere that I can use for mail components (like Postfix, Dovecot, Clam, and Spam Assassin)? I'm finding that I need to add the same information in multiple places. For example, Postfix users go in /etc/postif/vmailboxes, but Dovecot uses a user/password database stored in /var/mail/%d/%u (or other methods). And the same certificates and keys get entered multiple times. I think (or hope) there's something better, but I have not come across the resource.

2 1

Re: [Dovecot] Dovecot not honoring configuration settings (auth failure)
by Joseph Tam 02 Apr '14

02 Apr '14

Jeffrey Walton <noloader(a)gmail.com> writes: > passdb { > args = /var/mail/%d/users > driver = passwd-file > } > ... > userdb { > driver = passwd > } Your userdb and passdb are not using the same DB: did you intend this? Does the userdb have "user@domain" entries, rather than just "user" entries? The diagnostics I referred to in my last post would have been helpful here. > # postconf -n If you're having problems authenticating to the IMAP service, then you ought to concentrate on that problem: it's likely your LDA problem is dependent on that solution. Joseph Tam <jtam.home(a)gmail.com>

2 2

[Dovecot] Book on Postfix/Dovecot or Postfix/Dovecot/Clam/Spam Assassin?
by Jeffrey Walton 01 Apr '14

01 Apr '14

I'm looking for a book on Postfix/Dovecot or Postfix/Dovecot/Clam/Spam Assassin The blog posts and the mini-HowTo's I am reading lack the detail to be useful to me (due to my own ignorance). Amazon does not list any books for sale. There are some hits when searching for Dovecot, but I expect them to be one section with the quality of a blog post or mini-HowTo. (I have two books on Red Hat and Fedora administration, and the discussions don't meet the quality of a blog post). Does anyone know of a book on Postfix/Dovecot or Postfix/Dovecot/Clam/Spam Assassin? If there are no books with a structured treatment, then O'Reilly is always looking for authors: http://oreilly.com/oreilly/author/intro.csp.

3 3

[Dovecot] Dovecot not honoring configuration settings (auth failure)
by Jeffrey Walton 01 Apr '14

01 Apr '14

My dovecot.conf has the following: # No results when searching the wiki disable_plaintext_auth = no # http://wiki2.dovecot.org/Authentication/Mechanisms auth_mechanisms = plain login digest-md5 cram-md5 When I attempt to run imapsync, I receive an error: Host2: <host> says it has NO CAPABILITY for AUTHENTICATE LOGIN imapsync also dumps the helo string, and it is missing: Host2: * OK [CAPABILITY IMAP4rev1 LITERAL+ ... STARTTLS AUTH=PLAIN] Dovecot ready. I've restarted the dovecot service with 'service dovecot restart' and even rebooted the machine. There is nothing reported in any on the log files (/var/mail/dovecot.log and /var/log/mail.<level>). Any ideas why dovecot is not honoring the setting in its config file? ********** # dovecot --version 2.1.7 # doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.4 disable_plaintext_auth = no log_path = /var/log/dovecot.log mail_location = mbox:~/mail:INBOX=/var/mail/%u namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } ... prefix = } passdb { args = /var/mail/%d/users driver = passwd-file } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap pop3" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd }

5 12

Re: [Dovecot] Connection refused userdb lookup ..dovecot/auth-userdb
by Simon 01 Apr '14

01 Apr '14

On Mon, Mar 31, 2014 at 7:37 PM, Steffen Kaiser < skdovecot(a)smail.inf.fh-brs.de> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > On Mon, 31 Mar 2014, Simon wrote: > > On 3/24/2014 7:10 PM, Simon <greminn(a)gmail.com> wrote: >>>>>> >>>>>>> Mar 13 09:55:44 vmail1 dovecot: lda: Error: userdb lookup: >>>>>>> connect(/usr/local/dovecot/var/run/dovecot/auth-userdb) >>>>>>> failed: Connection refused >>>>>>> >>>>>> > What's the output of: > > lsof -c dovecot|grep auth-userdb > > [root@vmail1 ~]# lsof -c dovecot|grep auth-userdb dovecot 3147 root 38u unix 0xffff88004fce0680 0t0 24739 /var/run/dovecot/auth-userdb

2 1

[Dovecot] Deduplicate not processing all messages - bug?
by Jiri Bourek 01 Apr '14

01 Apr '14

Hello, I'm trying to create automated backup recovery using "doveadm import" and "doveadm deduplicate". During testing I noticed that deduplicate only deletes some duplicates and has to be called multiple times to find them all. Here's what I've been trying (in shell commands): First, expunge inbox (the end result is the same even if you delete only some messages): # doveadm expunge -u test mailbox inbox all # ls /home/mailboxes/test/cur | wc -l 0 Then import data from backup - twice, so duplicates are created (again, if you don't delete all messages and call import only once, resulting behaviour is the same.) # doveadm import -u test maildir:/home/test "" mailbox INBOX # doveadm import -u test maildir:/home/test "" mailbox INBOX # ls /home/mailboxes/test/cur | wc -l 1046 Then try to deduplicate # doveadm deduplicate -u test mailbox INBOX # ls /home/mailboxes/test/cur | wc -l 1040 And again # doveadm deduplicate -u test mailbox INBOX # ls /home/mailboxes/test/cur | wc -l 1029 And so on until the message count holds on 523 Each repetition removes 10 - 30 duplicates so eventually all duplicates are removed if "doveadm deduplicate" is called enough times in a row. I also noticed that when I repeat the test, import the backup again and call deduplicate, the steps - how many messages are removed at one time - are the same. That is I start with 1046 messages in the mailbox, after first run there's 1040, then 1029 and so on. My guess would be the behaviour depends on what is stored in the mailbox, but that's pretty much all I can figure out on my own at this time. My question is - is this intended behaviour, ie. are you supposed to run doveadm deduplicate as long as the number of messages in the mailbox keeps changing? Or is it a bug? Tried to Google for the answer but no luck, so thanks for any answers. Tested on Dovecot version 2.2.9 and 2.2.12 (both from Debian repositories.)

2 1

[Dovecot] [Bug] doveadm pw Fatal: open(/etc/dovecot/dovecot.conf) failed: Permission denied
by Dwain Blazej 01 Apr '14

01 Apr '14

dovecot --version => 2.1.7 When I as a normal user the command: doveadm pw -s sha512-crypt -p example_password the command exit with return code 89 and the message doveconf: Fatal: open(/etc/dovecot/dovecot.conf) failed: Permission denied If I make Dovecot's configuration files world readable the error goes away. Please remove configuration file dependencies from "doveadm pw".

4 4

[Dovecot] Specifying passwd-file with virtual domains?
by Jeffrey Walton 01 Apr '14

01 Apr '14

I'm trying to use virtual domains and I'm suffering a disconnect. I have two domains - foo.com and bar.com. On the filesystem, they are located at /var/mail/foo.com/ and /var/mail/bar.com/. Users are located at /var/mail/foo.com/john/, /var/mail/bar.com/jane/, etc. There are two password files with <user>:<scheme><password> entries. The scheme is {PLAIN}. They are located at /var/mail/foo.com/users and /var/mail/bar.com/users. According to the wiki, these are passwd-file databases (http://wiki2.dovecot.org/AuthDatabase/PasswdFile) I specified the following in my dovecot.conf. passdb { args = /var/mail/%d/users driver = passwd-file } Attempts to use the configuration result in an authentication failure. Here's an entry from dovecot.log when the failure happens: Mar 31 16:04:12 imap-login: Info: Disconnected (auth failed, 1 attempts in 5 secs): user=<jeff(a)foo.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.1.1, secured, session=<n5/ajez1FgB/AAAB> What exactly goes where to have Dovecot use the 'users' files to authenticate users? Thanks in advance and my apologies for the question. Two days of blog posts, mini-HowTo's and mailing lists has only help me discover ways to do things incorrectly. ********** # dovecot --version 2.1.7 # doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.4 disable_plaintext_auth = no log_path = /var/log/dovecot.log login_trusted_networks = 127.0.0.1 mail_location = mbox:~/mail:INBOX=/var/mail/%u namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } ... prefix = } passdb { args = /var/mail/%d/users driver = passwd-file } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap pop3" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd }

2 1

Re: [Dovecot] Dovecot not honoring configuration settings (auth failure)
by Joseph Tam 01 Apr '14

01 Apr '14

Jeffrey Walton <noloader(a)gmail.com> writes: > I specified the following in my dovecot.conf. > > passdb { > args = /var/mail/%d/users > driver = passwd-file > } > > Attempts to use the configuration result in an authentication failure. > Here's an entry from dovecot.log when the failure happens: > > Mar 31 16:04:12 imap-login: Info: Disconnected (auth failed, 1 > attempts in 5 secs): user=<jeff(a)foo.com>, method=PLAIN, rip=127.0.0.1, > lip=127.0.1.1, secured, session=<n5/ajez1FgB/AAAB> Just to confirm, your <user> specified in the passdb corresponds to what is being authenticated (i.e. client is authenticating as "jeff(a)foo.com", not "jeff")? Otherwise, you'll need to add domains to your passdb, or configure "username_format=%n" Joseph Tam <jtam.home(a)gmail.com>

2 2

[Dovecot] Fwd: Dovecot not honoring configuration settings (auth failure)
by Reindl Harald 01 Apr '14

01 Apr '14

boah how i hate that "reply all" attitude leading to break "reply to list" and leads in off-list replies -------- Original-Nachricht -------- Betreff: Re: [Dovecot] Dovecot not honoring configuration settings (auth failure) Datum: Tue, 01 Apr 2014 00:02:42 +0200 Von: Reindl Harald <h.reindl(a)thelounge.net> Organisation: the lounge interactive design An: noloader(a)gmail.com Am 31.03.2014 23:47, schrieb Jeffrey Walton: > On Mon, Mar 31, 2014 at 5:39 PM, Reindl Harald <h.reindl(a)thelounge.net> wrote: >> >> Am 31.03.2014 23:37, schrieb Jeffrey Walton: >>> My dovecot.conf has the following: >>> >>> # No results when searching the wiki >>> disable_plaintext_auth = no >>> >>> # http://wiki2.dovecot.org/Authentication/Mechanisms >>> auth_mechanisms = plain login digest-md5 cram-md5 >>> >>> When I attempt to run imapsync, I receive an error: >>> >>> Host2: <host> says it has NO CAPABILITY for AUTHENTICATE LOGIN >>> >>> imapsync also dumps the helo string, and it is missing: >>> >>> Host2: * OK [CAPABILITY IMAP4rev1 LITERAL+ ... STARTTLS >>> AUTH=PLAIN] Dovecot ready. >>> >>> I've restarted the dovecot service with 'service dovecot restart' and >>> even rebooted the machine. >>> >>> There is nothing reported in any on the log files >>> (/var/mail/dovecot.log and /var/log/mail.<level>). >>> >>> Any ideas why dovecot is not honoring the setting in its config file? >> >> and the settings are *really* in /etc/dovecot/dovecot.conf >> or in some ".d"-folder which may or may not be included? > I believe they are in /etc/dovecot/dovecot.conf: > > # cat /etc/dovecot/dovecot.conf | grep -i auth_ > auth_mechanisms = plain login digest-md5 cram-md5 my local machine is configured like below for years and it works well, post the whole config-file and strip only what is really needed to keep secret # provided services protocols = imap # configure ssl ssl = yes ssl_cert = </etc/postfix/certs/localhost.pem ssl_key = </etc/postfix/certs/localhost.pem ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES2$ ssl_prefer_server_ciphers = yes ssl_parameters_regenerate = 0 # configure imap-proxy service imap-login { inet_listener imap { address = * port = 143 } inet_listener imaps { address = * port = 993 } vsz_limit = 128M service_count = 0 process_min_avail = 1 process_limit = 1 client_limit = 200 } # default settings imap_capability = IMAP4 IMAP4rev1 ACL RIGHTS=texk NAMESPACE CHILDREN SORT QUOTA THREAD=ORDEREDSUBJECT UNSELECT I$ login_greeting = login_log_format_elements = %u %r %m %c login_log_format = %{login_status}: %s pop3_client_workarounds = outlook-no-nuls oe-ns-eoh mail_max_userip_connections = 100 auth_mechanisms = CRAM-MD5 DIGEST-MD5 APOP LOGIN PLAIN SCRAM-SHA-1 disable_plaintext_auth = no shutdown_clients = no version_ignore = yes

2 2

[Dovecot] maildir backup
by Ramon Orrù 31 Mar '14

31 Mar '14

Hi everybody, I'm trying to backup a dovecot instance, and i'm looking for a method to "snapshot" dovecot maildir in a properly way, and backup whole snapshot in a second step (tar). I read about dsync, end, if i'm not going wrong, it dumps correctly also dovecot indexes; is it the tool i need? Thank you for any hint. Ramon

3 2

[Dovecot] sieve mailbox in IMAP mailboxes
by Luigi Rosa 31 Mar '14

31 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have installed latest pigeonhole-sieve Everything works as expected but in IMAP folders I have a "dovecot" folder with a "sieve" subfolder Mail storage is maildir. I remember a setting that tells dovecot to ignore directories and do not display them as IMAP folders, but I acannot find it. Any hints? # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.5.1.el6.centos.plus.i686 i686 CentOS release 6.5 (Final) ext4 auth_cache_negative_ttl = 0 auth_cache_size = 1 M auth_cache_ttl = 5 hours auth_failure_delay = 3 secs auth_mechanisms = plain login digest-md5 cram-md5 base_dir = /var/run/dovecot/ disable_plaintext_auth = no lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes login_greeting = Ready. mail_location = maildir:/var/spool/mail/%u/ mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Bozze { special_use = \Drafts } mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox "Posta eliminata" { special_use = \Trash } mailbox "Posta inviata" { special_use = \Sent } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = logwatch(a)meti.it protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = </etc/dovecot/certs/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem syslog_facility = local5 userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lmtp { mail_plugins = sieve } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep delay-newmail imap_idle_notify_interval = 2 mins imap_logout_format = bytes=%i/%o mail_max_userip_connections = 20 } protocol pop3 { mail_max_userip_connections = 3 pop3_client_workarounds = oe-ns-eoh outlook-no-nuls pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_uidl_format = %08Xu%08Xv } Ciao, luigi - -- / +--[Luigi Rosa]-- \ Everyone lies, Michael. The innocent lie because they don't want to be blamed for something they didn't do. The guilty lie because they have no other choice. --Jeffrey Sinclair, "And the Sky Full of Stars" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJTMwRTAAoJEO5WT/qgw4yKqmEP/AwHAF5MvG9nXbK7s6G4q4xf 0XG8fVef6CcWLnL+VWdFXxpL8aINmYlMJxlKp7wq1jVRGhnhdVJWM/zp5V/aZ3ql J/QR5LRuBJaJDdzHFP+Mlmf8mnl1iczc0bWRQpbJ+uiQJbd4RiPH4TM+RtJor5E3 3Wa2JOXpbJUEHtVaCpu5dSv26YaLtj3seRXQ3jgMruePOpab6qJSDt7BAaBSwTS/ IMlMXe0oRULTVIYX+Rf+n2sp/8a3XlBO3MU325JOaW3zLEsEQ89EE0/QUnMb6Rnf 5bu+Dn8Y1KeA8UJBKb+0CjVLrNLI0MeukzylLO43UL8iFfdHhgLo7hzh9L4HNVIs qk5fot9c0Q2/DDWUTO/lxMXaE1uZxxdPaAHQiTz/A7FbWQqtM5QtuP5z+NQprFqo f8cyCUETlGdde9CoBCmLZLSs3GlV7sjimJwL3xd4SP21S2fJvpkZcHWNKXl7btm9 UnQJCTXli1WdwrsY+vSiLUIPZJG8jg3F5NkCV55rWH21OnkmvUG0MKQW5Icggb9V W8K5EI66S3soMFSIyiGWf5iPDU8KyYd1GA6/pDESksJhbDKktPn5Dq4LgWNuIwp0 ZgvCHNcO1ZPH2T7VpDPBOEYeYHICrUfKLX7I9/v8RM9pbIRsjYXd0FgqwNDIXRyq daB394iwfQUmGbjjvcSZ =D9b8 -----END PGP SIGNATURE-----

2 3

[Dovecot] check the user number
by ihab 31 Mar '14

31 Mar '14

There is a way to check the number of user using the system at anytime -- View this message in context: http://dovecot.2317879.n4.nabble.com/check-the-user-number-tp47327.html Sent from the Dovecot mailing list archive at Nabble.com.

3 2

[Dovecot] possible quota bug ?
by fernando.figaro＠uol.com.br 31 Mar '14

31 Mar '14

Hi, I'm using dovecot 2.2.5 with quota (maildir backend), zlib and expunge plugins. When I list maildirsize file, I get: 1073741824S 17952 16 If I receive a new message (example: 1204 bytes compressed and 2524 bytes plain text), the quota file is write correctly (2524 1 entry). When I move the message to trash folder (or between user custom folders) the file have wrong entries: 1073741824S 17952 16 2524 1 1204 1 (this is the size of the compressed message) -2524 -1 I coudn't find any relation with the config settings causing this problem and checked the changelog since 2.2.5. Had someone had this same problem? Thanks, Fernando

4 6

Re: [Dovecot] Connection refused userdb lookup ..dovecot/auth-userdb
by Simon 31 Mar '14

31 Mar '14

On Thursday, March 13, 2014, Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Thu, 13 Mar 2014, Simon wrote: > > Ive taken a look at this and cant quite figure out what is going on here. >> I have tested all the SQL permissions, and also changed the unix_listener >> auth-userdb mode to 0666 (as instructed elsewhere to try and solve this >> issue), but cannot seem to work out what the issue is. >> > > what happens if you connect to that socket manually, e.g.: > > # sudo -u <lda-user> socat - UNIX:/usr/local/dovecot/var/ > run/dovecot/auth-userdb > VERSION 1 1 > SPID 1746 > > Maybe first try as root, then with the partucular users. > Thanks for the reply! I tried this as root and got the following: [root@vmail1 ~]# socat - UNIX:/usr/local/dovecot/var/run/dovecot/auth-userdb 2014/03/16 20:57:05 socat[24404] E connect(3, AF=1 "/usr/local/dovecot/var/run/dovecot/auth-userdb", 48): Connection refused Seems a bit wierd that I can't connect as root? Simon

4 12

[Dovecot] still issues with metadata support
by Mihai Badici 31 Mar '14

31 Mar '14

On dovecot 2.2.12 compiled from source I use ActiveSync with kolab-syncroton. When running a test i have this imap log: [29-Mar-2014 22:58:25 +0200]: [F658] S: A0004 OK Getmetadata completed. [29-Mar-2014 22:58:25 +0200]: [F658] C: A0005 SETMETADATA INBOX (/private/vendor/kolab/activesync "{\"DEVICE\":{\"601099122\":{\"ID\": \"a5daac4806642a1cfeceb53aea32e86218c4d512\",\"TYPE\": \"TestActiveSyncConnectivity\",\"ALIAS\":null}},\"FOLDER\":{\"601099122\": {\"S\":1}}}") [29-Mar-2014 22:58:26 +0200]: [F658] S: A0005 OK Setmetadata completed. [29-Mar-2014 22:58:26 +0200]: [F658] C: A0006 GETMETADATA "*" (/private/vendor/kolab/activesync) [29-Mar-2014 22:58:26 +0200]: [F658] S: A0006 NO Mailbox doesn't exist: * [29-Mar-2014 22:58:26 +0200]: [F658] C: A0007 GETMETADATA "*" (/private/vendor/kolab/folder-type /shared/vendor/kolab/folder-type) [29-Mar-2014 22:58:26 +0200]: [F658] S: A0007 NO Mailbox doesn't exist: * [29-Mar-2014 22:58:26 +0200]: [F658] C: A0008 GETMETADATA "*" (/private/vendor/kolab/folder-type /shared/vendor/kolab/folder-type) [29-Mar-2014 22:58:26 +0200]: [F658] S: A0008 NO Mailbox doesn't exist: * [29-Mar-2014 22:58:26 +0200]: [F658] C: A0009 GETMETADATA "*" (/private/vendor/kolab/folder-type /shared/vendor/kolab/folder-type) [29-Mar-2014 22:58:26 +0200]: [F658] S: A0009 NO Mailbox doesn't exist: * [29-Mar-2014 22:58:26 +0200]: [F658] C: A0010 GETMETADATA "*" (/private/vendor/kolab/folder-type /shared/vendor/kolab/folder-type) [29-Mar-2014 22:58:26 +0200]: [F658] S: A0010 NO Mailbox doesn't exist: * [29-Mar-2014 22:58:26 +0200]: [F658] C: A0011 GETMETADATA "*" (/private/vendor/kolab/folder-type /shared/vendor/kolab/folder-type) [29-Mar-2014 22:58:26 +0200]: [F658] S: A0011 NO Mailbox doesn't exist: * It looks like GETMETADATA "*" is still not expanded , even we have this part of code in cmd-getmetadata.c: else if (strchr(mailbox, '*') == NULL && strchr(mailbox, '%') == NULL) { ns = client_find_namespace(cmd, &mailbox); if (ns == NULL) return TRUE; return cmd_getmetadata_mailbox(ctx, ns, mailbox); } else { /* wildcards in mailbox name. this isn't supported by RFC 5464, but it was in the earlier drafts and is already used by some software (Horde). */ const char *patterns[2]; patterns[0] = mailbox; patterns[1] = NULL; -- Mihai Bădici http://mihai.badici.ro

2 3