- dovecot - dovecot.org

[Dovecot] post-login scripting failing with "denied access to user" v2.1.7
by Frank 29 Jan '14

29 Jan '14

I am trying to have a default sieve rule for new mailboxes that can be edited by users using the round cube sieve plugin. It would actually be better executed when a new user is created but my postfixadmin runs on a separate machine so that's a bit tricky. The "sieve-default =" setting won't quite achieve what I want as I want users to be able to edit the default rule (to adjust SPAM level) Mail works fine before I add my post-login script to 10-master.conf ---------------------- service imap { # tell imap to do post-login lookup using a socket called "imap-postlogin" executable = imap imap-postlogin } service imap-postlogin { # all post-login scripts are executed via script-login binary executable = script-login /etc/dovecot/custom_sieve/postlogin.sh # the script process runs as the user specified here (v2.0.14+): user = mail # also tried $default_internal_user and root # this UNIX socket listener must use the same name as given to imap executable unix_listener imap-postlogin { } } After adding this setting, login fails and gives the error below. It certainly looks like a permission issue, but I have checked my script is executable and owned by vmail:vmail. The bash script executes fine as the mail user. The other possibility is that dovecot is denying access to the $HOME variable, but that seems unlikely. Nevertheless, I am stuck! Log shows: ------------------ dovecot: master: Dovecot v2.1.7 starting up (core dumps disabled) dovecot: auth-worker(17522): mysql(database1): Connected to database postfixadmin dovecot: imap-login: Login: user=<test2(a)fqdn.net>, method=PLAIN, rip=10.0.3.120, lip=10.0.1.180, mpid=17524, TLS, session=<+blqxxxxxxxxxM> dovecot: imap(test2(a)fqdn.net): Post-login script denied access to user test2(a)fqdn.net BASH script: /etc/dovecot/custom_sieve/postlogin.sh -------------------------------------------------- #!/bin/sh if [ ! -f $HOME/dovecot.sieve ] # if file doesn't exist then mkdir -p $HOME/sieve cp /etc/dovecot/custom_sieve/default.sieve $HOME/sieve/managesieve.sieve ln -s $HOME/sieve/managesieve.sieve $HOME/dovecot.sieve fi DEFAULT SIEVE RULE: /etc/dovecot/custom_sieve/default.sieve ----------------------------------- require ["fileinto"]; # rule:[SPAM] if header :contains "X-Spam-Level" "**********" { fileinto "Junk"; } Config ======= # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.3 ext4 dict { sqldomainquota = mysql:/etc/dovecot/dovecot-sql-domain.conf sqluserquota = mysql:/etc/dovecot/dovecot-dict-sql-user.conf } mail_location = maildir:/home/vmail/%d/%n/Maildir:INDEX=/home/vmail/%d/%n/Maildir/indexes mail_plugins = " quota" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User Quota::proxy::sqluserquota quota_rule2 = Trash:storage=+100M sieve = ~/../.dovecot.sieve sieve_dir = ~/../sieve } protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-postlogin { executable = script-login /var/spool/mail/postlogin.sh user = vmail } service imap { executable = imap imap-postlogin } ssl_cert = </etc/ssl/mailserver/mailserver.pem ssl_key = </etc/ssl/mailserver/private/mailserver_dcp.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " quota sieve" postmaster_address = hidden(a)fqdn.net } protocol imap { mail_plugins = " quota imap_quota" }

2 2

Re: [Dovecot] Architecture for large Dovecot cluster
by Joseph Tam 28 Jan '14

28 Jan '14

Sven Hartge <sven(a)svenhartge.de> wrote: > Interesting datapoint: NetApp Deduplication did only recover about 1% of > storage space with mdbox-based mail storage, while on an maildir-based > mail storage, the rate was about 15%. (This was tested with a copy of > real user data, so is accurate for my workload.) Just a guess, but I expect the difference is because NetApp de-dupes by checksumming blocks and mark whole blocks as duplicates if they have the same checksum. The message body has the same block offset in maildir (i.e. the start of a message is at byte 0), whereas mdbox might align message body anywhere in a block, so you might have 512 different block configurations for the same message. I don't know whether message alignment would be a worthwhile optimization for mdbox. Joseph Tam <jtam.home(a)gmail.com>

2 1

Re: [Dovecot] Architecture for large Dovecot cluster
by Stan Hoeppner 28 Jan '14

28 Jan '14

This went to me only so bringing back on list. On 1/24/2014 11:09 AM, Tom Johnson wrote: > Is anybody using the Object Storage plugin for large-scale > installations? I've not used it. > We're considering it, but are thinking of an in-house > S3 storage system (riak, or ceph, or ?) Looking to support perhaps > 300k users. I was thinking that if we use a bank of dovecot servers > (with director) with ssds as cache, we might be able to consolidate > all the storage on something like a riak cluster, which would make > scaling simple and inexpensive - certainly much less than a NetApp > solution. Everything costs less than a NetApp...except an EMC. > If anyone has any first-hand experience (or even > off-the-top-of-their-head thoughts), I'd love to hear them) Distributed filesystems give you the advantage of a single filesystem namespace with massive amounts of storage, fairly easy addition of storage space, and distributed replication to allow failure of a storage node without service interruption. Replication mitigates node failure, but not disk failure, so you still need RAID in each node. So you have RAID6 in a node and filesystem block mirroring amongst nodes. Thus storage utilization is -worse- than direct attach, CFS on SAN, or NFS head attached RAID10 and far worse than RAID6 in these 3 setups. And if using large SSD cache you'd surely use RAID6 with DAS, CFS, or NFS. You'd need half as many disk drives vs DFS. Each DFS expansion, assuming the typical model, entails the cost of a server, RAID HBA (unless using md) and disks, not strictly buying disks as with DAS, CFS/SAN, or NFS filer. Then you also need more switch ports, more power connections, greater UPS capacity due to all the CPUs, RAM, etc in the nodes. And you'll have a higher electric bill. So while a distributed filesystem storage architecture may seem less expensive it may not be. And just as one can build a DIY DFS cluster, one can also build a DIY NFS cluster instead of buying a NetApp, saving significant cash on the front end box and on disks since you'd need half as many vs a distributed filesystem architecture, though failure of one node may not be quite as graceful as with a NetApp losing a controller board. -- Stan

3 4

[Dovecot] Replication - what am I doing wrong?
by IT geek 31 27 Jan '14

27 Jan '14

Hi, I'm having issues getting replication working, and I'm not also not having much luck finding help on it. So I'm wondering... am I not asking the right questions? Or am I not providing enough information... or do we just not know how this aspect of the technology works? If it's the former, then any pointers on what questions to ask or information to provide would be very helpful. If the community genuinely doesn't know how this works then that's okay too - I will look at another solution (if one exists) and try to move on. But if I can get this working then that would be amazing as I really like Dovecot and would be gutted to move away from it. -Mark

2 2

[Dovecot] managesieve - point me in the right direction?
by erik 27 Jan '14

27 Jan '14

Hi, I am using Dovecot 2.1.16. I'm trying to get Roundcube to talk to the managesieve plugin. Postfix/Dovecot/Roundcube all exist on the same server. I'd like to get managesieve working. I've gone through a few guides, such as: https://wiki.archlinux.org/index.php/dovecot#Sieve But so far roundcube won't connect to the managesieve plugin. ("Cant reach server"). I see that port 4190 is listening and I can telnet to that port: Connected to localhost. Escape character is '^]'. "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave" "NOTIFY" "mailto" "SASL" "PLAIN LOGIN" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready." I'm not sure what else to check. Any help appreciated!

2 1

[Dovecot] Panic: file index-mailbox-check.c: line 75 (index_mailbox_check_add): assertion failed: (box->notify_min_interval > 0)
by Kevin Holly 27 Jan '14

27 Jan '14

Hey guys, i have a weird problem i'm trying to fix since 5 months now, but i really couldn't find any explanation, why this happens and how it can be fixed. My client is Thunderbird, my dovecot version is 2.1.7-7 from the official Debian repo. If you want to see my config i'll grab all the fils together and send it to you. This is the error i'm always getting when my client tries to get new mails, which i want to get rid off: http://sprunge.us/NZhf Jan 25 11:49:30 old dovecot: auth-worker(15979): Debug: sql(root(a)hallowe.lt,81.217.212.85): query: SELECT password FROM mailbox WHERE username = 'root(a)hallowe.lt' Jan 25 11:49:30 old dovecot: auth: Debug: client out: OK#0111#011user=root(a)hallowe.lt Jan 25 11:49:30 old dovecot: auth-worker(15979): Debug: sql(root(a)hallowe.lt,81.217.212.85): SELECT CONCAT('maildir:/var/vmail/',maildir) AS mail, 1000 AS uid, 1000 AS gid FROM mailbox WHERE username = 'root(a)hallowe.lt' Jan 25 11:49:30 old dovecot: auth: Debug: master out: USER#0113983671297#011root@hallowe.lt#011mail=maildir:/var/vmail/hallowe.lt/root/#011uid=1000#011gid=1000 Jan 25 11:49:30 old dovecot: imap-login: Login: user=<root(a)hallowe.lt>, method=PLAIN, rip=81.217.212.85, lip=10.111.56.107, mpid=17606, TLS, session=<rQGqOsnwuABR2dRV> Jan 25 11:49:30 old dovecot: imap(root(a)hallowe.lt): Debug: Effective uid=1000, gid=1000, home= Jan 25 11:49:30 old dovecot: imap(root(a)hallowe.lt): Debug: quota: No quota setting - plugin disabled Jan 25 11:49:30 old dovecot: imap(root(a)hallowe.lt): Debug: maildir++: root=/var/vmail/hallowe.lt/root, index=, control=, inbox=/var/vmail/hallowe.lt/root, alt= Jan 25 11:49:30 old dovecot: imap(root(a)hallowe.lt): Panic: file index-mailbox-check.c: line 75 (index_mailbox_check_add): assertion failed: (box->notify_min_interval > 0) Jan 25 11:49:30 old dovecot: imap(root(a)hallowe.lt): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7f858118714a] -> /usr/lib/dovecot/libdovecot.so.0(+0x4418e) [0x7f858118718e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f858115e82a] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x99027) [0x7f858146b027] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x4ccc9) [0x7f858141ecc9] -> dovecot/imap(cmd_idle+0x66) [0x7f8581907c96] -> dovecot/imap(command_exec+0x3c) [0x7f858190dedc] -> dovecot/imap(+0x11f2e) [0x7f858190cf2e] -> dovecot/imap(+0x11fda) [0x7f858190cfda] -> dovecot/imap(client_handle_input+0x11d) [0x7f858190d23d] -> dovecot/imap(client_input+0x65) [0x7f858190db35] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f8581194016] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f8581194cc7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f8581193a28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f8581180483] -> dovecot/imap(main+0x297) [0x7f85819053e7] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f8580dd7ead] -> dovecot/imap(+0xa561) [0x7f8581905561] Jan 25 11:49:30 old dovecot: imap(root(a)hallowe.lt): Fatal: master: service(imap): child 17606 killed with signal 6 (core dumps disabled) I asked for this in the irc already but got no answer. I would be really happy if someone can help me with this. Thank you very much! Best regards, Kevin Holly - root(a)hallowe.lt - http://hallowe.lt/

2 3

[Dovecot] outlook will not sync
by Eric Broch 27 Jan '14

27 Jan '14

Dovecot users list, I started having problems with Outlook not syncing with Dovecot a public imap folder upon issuing a send/receive in the client; eventually Outlook timed out, and I received the following error in the Dovecot log. Jan 23 09:20:23 imap(user(a)mydom.com): Error: FETCH [] for mailbox projects.myfolder UID 120 got too little data: 7744 vs 7759 Jan 23 09:20:23 imap(user(a)mydom.com): Error: Maildir filename has wrong W value: /home/vpopmail/domains/mydom.com/shared/projects/.myfolder/cur/1384292337.M440452P9788.mail.mydom.com,S=265901,W=269597:2,Sc Jan 23 09:20:23 imap(user(a)mydom.com): Error: Corrupted index cache file /home/vpopmail/domains/mydom.com/shared/projects/.myfolder/dovecot.index.cache: Broken virtual size for mail UID 120 Jan 23 09:20:23 imap(user@mydom): Info: Disconnected: FETCH failed bytes=175/270387 However, I've since removed the file manually, deleted the old folder and recreated it and Outlook will still not sync even in the absence of the above error. Has anyone seen this issue--slow to no Outlook performance with dovecot--before, and/or does anyone have a solution or point me in the right direction? Thanks! Eric I'm using dovecot 2.0.17 with the following configuration # 2.0.17 (684381041dc4+): /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-371.1.2.el5 x86_64 CentOS release 5.10 (Final) auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 32 M auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain login digest-md5 cram-md5 auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 60 default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_proxy_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 first_valid_gid = 1 first_valid_uid = 89 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k import_environment = TZ info_log_path = last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/libexec/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = /var/log/dovecot.log log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot toaster ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 20 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib64/dovecot mail_plugins = mail_privileged_group = mail_save_crlf = no mail_temp_dir = /tmp mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index_disable = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace { hidden = no inbox = yes list = yes location = prefix = INBOX. separator = . subscriptions = yes type = private } namespace { hidden = no inbox = no list = yes location = maildir:/home/vpopmail/domains/acemt.com/shared/projects prefix = projects. separator = . subscriptions = yes type = public } passdb { args = cache_key=%u webmail=127.0.0.1 deny = no driver = vpopmail master = no pass = no } plugin { quota = maildir } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv postmaster_address = protocols = imap quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s sendmail_path = /usr/sbin/sendmail service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 4096 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0600 user = } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </var/qmail/control/servercert.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_client_cert = ssl_client_key = ssl_key = </var/qmail/control/servercert.pem ssl_key_password = ssl_parameters_regenerate = 168 ssl_verify_client_cert = no submission_host = syslog_facility = mail userdb { args = cache_key=%u quota_template=quota_rule=*:backend=%q driver = vpopmail } valid_chroot_dirs = verbose_auth = no verbose_proctitle = no verbose_ssl = no version_ignore = no protocol imap { imap_client_workarounds = delay-newmail }

3 2

[Dovecot] dsync failed
by Mario Arnold 26 Jan '14

26 Jan '14

Hello, Since i updated to 2.2.10 there is a problem with dsync: dsync -v -u test(a)vtlx.de backup $SSH -i $KEY -p $PORT $RHOST dsync -u test(a)vtlx.de dsync-remote(test(a)vtlx.de): Error: Mailbox INBOX: Failed to set attribute vendor/vendor.dovecot/pvt/server/sieve/files/t1: Internal attributes cannot be changed directly doveconf -n # 2.2.10 (6018854c8c91): /etc/dovecot/dovecot.conf # OS: Linux 3.12.6-domU i686 Debian jessie/sid ext3 ... managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave ... plugin { ... sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } ... protocols = " imap lmtp sieve pop3" Do I need to reconfigure something? Thank you for any hints -- 中華人民共和國

1 0

[Dovecot] userdb maildir permission denied in 2.1.7
by Chris 26 Jan '14

26 Jan '14

Dear All, I'm using version 2.1.7 which currently ships with debian stable. I'd like to use userdb { driver = passwd-file args = username_format=%n /etc/dovecot/users default_fields = uid=vmail gid=vmail override_fields = skip = never result_failure = continue result_internalfail = continue result_success = return-ok } from [1]. The error message is: Jan 25 14:02:03 post1 dovecot: lda(chris): Error: user chris: Initialization failed: Namespace '': stat(/home/vmail/chris/Maildir) failed: Permission denied (euid=1000(chris) egid=1000(chris) missing +x perm: /home/vmail/chris, dir owned by 1001:1001 mode=0700) The skip and result_* commands aren't supported. My users file: chris:{MD5-CRYPT}$1$3uC3URg......:::/home/vmail/chris/:/bin/false:: Dovecot should access the Maildir with vmail:vmail (1001:1001) and not chris:chris (1000:1000)! Thank you in advance! - Chris [1] http://wiki2.dovecot.org/UserDatabase

2 2

[Dovecot] dovecot produces messages dupes after nfs problems
by Patrick Westenberg 25 Jan '14

25 Jan '14

Hi everyone, some days ago I had trouble with my NFS-Server (high delays) which caused dovecot lmtp to deliver the same message several times (up to 10x). I recognized some old/unused .nfsXXXX files in the maildirs which seemed to be index files. I deleted them and everything was fine again. However, there are still 2-3 mailboxen where mails (old and new ones) are delivered multiple times. All duplicates have no "received from" headers. Seperate lmtp log shows only one delivery. Any hint or advice what might be wrong? Regards Patrick # 2.2.2: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 auth_mechanisms = plain login disable_plaintext_auth = no dotlock_use_excl = no hostname = mb02.wk-serv.net listen = 172.17.1.2 log_path = /var/log/dovecot.log login_trusted_networks = 172.17.1.3 172.17.1.4 mail_fsync = always mail_gid = vmail mail_home = /var/mail/%d/%n mail_location = maildir:~/Maildir mail_plugins = quota mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spamverdacht { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User quota::file:%h/Maildir/dovecot-quota quota_rule2 = INBOX.Trash:ignore quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_after = /usr/local/etc/dovecot/sieve/sieve_after.sieve sieve_default = /usr/local/etc/dovecot/sieve/default.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service lmtp { executable = lmtp -L inet_listener lmtp { address = 172.17.1.2 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/etc/dovecot/quota_warning.sh unix_listener quota-warning { user = vmail } user = root } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { info_log_path = /var/log/dovecot-lmtp.log mail_plugins = quota sieve } protocol imap { mail_max_userip_connections = 30 mail_plugins = quota imap_quota }

3 5

[Dovecot] Architecture for large Dovecot cluster
by Murray Trainer 25 Jan '14

25 Jan '14

Hi All, I am trying to determine whether a mail server cluster based on Dovecot will be capable of supporting 500,000+ mailboxes with about 50,000 IMAP and 5000 active POP3 connections. I have looked at the Dovecot clustering suggestions here: http://blog.dovecot.org/2012/02/dovecot-clustering-with-dsync-based.html and some other Dovecot mailing list threads but I am not sure how many users such a setup will handle. I have a concern about the I/O performance of NFS in the suggested architecture above. One possible option available to us is to split up the mailboxes over multiple clusters with subsets of domains. Is there anyone out there currently running this many users on a Dovecot based mail cluster? Some suggestions or advice on the best way to go would be greatly appreciated. Thanks Murray

9 10

[Dovecot] Dovecot on Solaris 10 Segmentation Fault
by Thomas 24 Jan '14

24 Jan '14

Hello, make check on Solaris 10 throws a segmentation fault. The error is independent of the compiler (SunStudio/GCC) and processor architecture (SPARC/x86) and 32 or 64 bit binary. Dovecot Version: 2.2.10 OS: Solaris 10/SPARC & x86 SunStudion Compiler cc: Sun C 5.10 SunOS_sparc Patch 141861-10 2012/11/07 GCC gcc version 3.4.3 (csl-sol210-3_4-branch+sol_rpath) The error occurs first in: src/lib-http/test-http-url Line 317/318: test_out(t_strdup_printf("url->user = %s", urlp->user), urlp->user == urlt->user); (if commenting out these lines, then it segfaults just in the next test) %make check <--- cut out lot of good output ---> http date invalid [42]: parse Sun Nov 6 08:49:37 0000 ............... : ok http date invalid [42] ............................................... : ok 0 / 150 tests failed http url valid [0]: http_url_parse(http://localhost) ................. : ok http url valid [0]: url->host_name = localhost ....................... : ok http url valid [0]: url->port = (unspecified) ........................ : ok http url valid [0]: url->host_ip = (unspecified) ..................... : ok /bin/bash: line 1: 28764 Segmentation Fault (core dumped) ./$bin gmake[2]: *** [check-test] Error 1 gmake[2]: Leaving directory `/data/obj/dovecot-2.2.10/src/lib-http' gmake[1]: *** [check-recursive] Error 1 gmake[1]: Leaving directory `/data/obj/dovecot-2.2.10/src' gmake: *** [check-recursive] Error 1 % pstack /var/core/core.test-http-url.28764 core '/var/core/core.test-http-url.28764' of 28764: ./test-http-url ff122d50 strlen (3365e, ffbff6fc, ffbfecf9, 0, 0, 0) + 50 ff191c3c vsnprintf (4a638, 10e, 33650, ffbff6f8, 7ffffc00, 2400) + 6c 0002be0c t_strdup_printf (4a638, 2340, 48118, 2e, 48110, e) + 6c 0001635c ???????? (0, 0, 47800, 335c4, 80000000, 40000000) 0001924c test_run (fffd3268, 2cc00, ffbff94c, 2380, 2000, 47e94) + 6c 00016008 _start (0, 0, 0, 0, 0, 0) + 108 % dbx test-http-url /var/core/core.test-http-url.28884 (dbx) examine 0xff122d5c: strlen+0x005c: 0x98132101 (dbx) regs current frame: [1] g0-g1 0x00000000 0x00000000 0x00000000 0x0004a638 g2-g3 0x00000000 0x0004a3bc 0x00000000 0x0004a3b8 g4-g5 0x00000000 0x0004a3c8 0x00000000 0x00000270 g6-g7 0x00000000 0x00000000 0x00000000 0xff272a00 o0-o1 0x00000000 0x00000000 0x00000000 0xfffffaf0 o2-o3 0x00000000 0x00000000 0x00000000 0xffbff798 o4-o5 0x00000000 0x00000000 0x00000000 0x0000002b o6-o7 0x00000000 0xffbfe920 0x00000000 0xff18f498 l0-l1 0x00000000 0x00000073 0x00000000 0x00000000 l2-l3 0x00000000 0x00000000 0x00000000 0x00001000 l4-l5 0x00000000 0x00000000 0x00000000 0x00000000 l6-l7 0x00000000 0xff236c99 0x00000000 0x00000000 i0-i1 0x00000000 0x0003365e 0x00000000 0xffbff8dc i2-i3 0x00000000 0xffbfeed9 0x00000000 0x00000000 i4-i5 0x00000000 0x00000000 0x00000000 0x00000000 i6-i7 0x00000000 0xffbff7b0 0x00000000 0xff191c3c y 0x00000000 0x00000000 ccr 0x00000000 0xfe401005 pc 0x00000000 0xff122d50:strlen+0x50 ld [%o2], %o1 npc 0x00000000 0xff122d54:strlen+0x54 sethi %hi(0x1010000), %o4 (dbx) dis 0xff122d3c 0xff122d3c: strlen+0x003c: be,pn %icc,strlen+0xcc ! 0xff122dcc 0xff122d40: strlen+0x0040: btst 255, %o1 0xff122d44: strlen+0x0044: be,pn %icc,strlen+0xcc ! 0xff122dcc 0xff122d48: strlen+0x0048: inc %o2 0xff122d4c: strlen+0x004c: inc %o2 0xff122d50: strlen+0x0050: ld [%o2], %o1 0xff122d54: strlen+0x0054: sethi %hi(0x1010000), %o4 0xff122d58: strlen+0x0058: sethi %hi(0x80808000), %o5 0xff122d5c: strlen+0x005c: bset 257, %o4 0xff122d60: strlen+0x0060: bset 128, %o5 % truss -f ./test-http-url <--- cut out the beginning of output ---> 28884: open("/platform/SUNW,SPARC-Enterprise-T5220/lib/libc_psr.so.1", O_RDONLY) = 3 28884: mmap(0x00010000, 9244, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_ALIGN, 3, 0) = 0xFF0E0000 28884: munmap(0xFF0E2000, 1052) = 0 28884: close(3) = 0 28884: getpid() = 28884 [28883] 28884: brk(0x0004A3A8) = 0 28884: brk(0x000543A8) = 0 28884: sysinfo(SI_HOSTNAME, "badile", 255) = 7 28884: getpid() = 28884 [28883] 28884: ioctl(1, TCGETA, 0xFFBFF664) = 0 28884: fstat64(1, 0xFFBFF580) = 0 http url valid [0]28884: write(1, " h t t p u r l v a l".., 18) = 18 : http_url_parse(http://localhost)28884: write(1, " : h t t p _ u r l _ p".., 34) = 34 ................. : ok 28884: write(1, " . . . . . . . . . . .".., 24) = 24 http url valid [0]28884: write(1, " h t t p u r l v a l".., 18) = 18 : url->host_name = localhost28884: write(1, " : u r l - > h o s t _".., 28) = 28 ....................... : ok 28884: write(1, " . . . . . . . . . . .".., 30) = 30 http url valid [0]28884: write(1, " h t t p u r l v a l".., 18) = 18 : url->port = (unspecified)28884: write(1, " : u r l - > p o r t ".., 27) = 27 ........................ : ok 28884: write(1, " . . . . . . . . . . .".., 31) = 31 http url valid [0]28884: write(1, " h t t p u r l v a l".., 18) = 18 : url->host_ip = (unspecified)28884: write(1, " : u r l - > h o s t _".., 30) = 30 ..................... : ok 28884: write(1, " . . . . . . . . . . .".., 28) = 28 28884: Incurred fault #6, FLTBOUNDS %pc = 0xFF122D50 28884: siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000 28884: Received signal #11, SIGSEGV [default] 28884: siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000 % apptrace -f ./test-http-url <--- cut out the beginning of output ---> 28897:-> test-http-url -> libc.so.1:int fputs(const char * = 0x33618 "url->host_ip = (unspecified)", FILE * = 0xfef2759c) : url->host_ip = (unspecified) 28897:<- test-http-url -> libc.so.1:fputs() = 0x1c 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x20, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x20 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:size_t fwrite(const void * = 0x33e28, size_t = 0x1, size_t = 0x3, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:fwrite() = 0x3 28897:-> test-http-url -> libc.so.1:size_t fwrite(const void * = 0x33e2c, size_t = 0x1, size_t = 0x2, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:fwrite() = 0x2 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0xa, FILE * = 0xfef2759c) ..................... : ok 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0xa 28897:-> test-http-url -> libc.so.1:int vsnprintf(char * = 0x4a638 "", size_t = 0x10e, const char * = 0x33650 "url->user = %s", va_list = 0xffbff998) apptrace: ./test-http-url: Segmentation Fault(Core dump) Any help about this? Cheers Thomas

2 1

[Dovecot] passphrases
by Benjamin Connelly 24 Jan '14

24 Jan '14

Is there any way to configure the dovecot-sql.conf.ext "connect =" line to use a password= string that contains spaces? (I've tried single quotes, double quotes, escaping the space with backslash. . .) Ben

2 1

[Dovecot] questions about SETQUOTA
by Michael Cramer 24 Jan '14

24 Jan '14

hi, i tried to setup my configuration to use the SETQUOTA command but the only thing i got is: 3 setquota "User quota" (storage 12345) 3 OK Setquota completed. but nothing is changed in database. i modified the password_query and the user_query to return the admin and userdb_admin field, both set to y. all other changes that are done are like in the wiki http://wiki2.dovecot.org/Quota/Configuration enabling debug doesn't show anything in debug.log

2 2

[Dovecot] Dovecot imap-postlogin failed
by Sayajin 24 Jan '14

24 Jan '14

*** This is 2 posts combined into one which I had asked on linuxquestions.org and never got an answer *** Hi, In short I am trying to run a bash script which will then update a mysql database with the last login date/time & last IP for each mailbox. I have searched google dead but still cant figure out what im doing wrong or if there is some issue with the centos 6 rpm's for dovecot. -- - 1st i had the default dovecot in the centos 6 repo's which is version: 2.0.9 - I read that there was an issue with the script-login binary which was fixed in version 2.0.14, so i updated dovecot to version 2.2.7. - This sadly did not fix my issue with the bash script excecuting. In my /etc/dovecot/conf.d/10-master.conf i have the following service imap { executable = imap imap-postlogin } service imap-postlogin { executable = script-login /var/www/lighttpd/mail-admin/scripts/lastLogin.sh } But when i try login i still get the same error as with the previous version: - Nov 27 14:44:36 dovecot: imap(MaIlBoX(a)DoMaIn.co.za): Error: net_connect_unix(/var/run/dovecot/imap-postlogin) failed: No such file or directory - One thing i did notice on the one site was that someone had a ls of their /var/run/dovecot directory, and in there was a binary called imap-postlogin. - But i dont have that binary anywhere on my server, with the old or new version of dovecot. Please any help would be appreciated. ===================================================== ===================================================== Ok well i tried a few other things and got it working a bit more. So the variables that i needed are now being set correctly etc, but im getting authentication errors now which I was not before. my setup in 10-master.conf now looks like the following: service imap-postlogin { executable = script-login /var/www/lighttpd/mail-admin/scripts/lastLogin.sh unix_listener imap-postlogin { user = root } } service imap { executable = imap imap-postlogin } My lastLogin.sh bash script has the following in it for debugging echo "$(date +%Y.%m.%d-%H:%M:%S)"; echo "User: ${USER}" >> /tmp/tracking.log 2>&1; echo "Home: ${HOME}" >> /tmp/tracking.log 2>&1; echo "Client IP: ${IP}" >> /tmp/tracking.log 2>&1; echo "Server IP: ${LOCAL_IP}" >> /tmp/tracking.log 2>&1; The output to my /tmp/tracker.log is the following User: user(a)domain.com Home: /var/spool/mail/domain.com/user Client IP: x.x.x.x Server IP: y.y.y.y The Authentication Error I am getting now dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so dovecot: auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat dovecot: auth: Debug: auth client connected (pid=25865) dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011session=VPOQpNvsPwDELro2#011lip=X.X.X.X#011rip=Y.Y. Y.Y#011lport=143#011rport=58175 dovecot: auth: Debug: client passdb out: CONT#0111#011 dovecot: auth: Debug: client in: CONT#0111#011AHN1cHBvcnRAYmxhY2tsaXN0Ym94LmNvbQBzQHlAajFu (previous base64 data may contain sensitive data) dovecot: auth-worker(25868): Debug: Loading modules from directory: /usr/lib64/dovecot/auth dovecot: auth-worker(25868): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so dovecot: auth-worker(25868): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so dovecot: auth-worker(25868): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so dovecot: auth-worker(25868): Debug: sql(user=user(a)domain.com,Y.Y.Y.Y): query: SELECT CONCAT(mailboxes.local_part,'@',domains.fqdn) as `user`, mailboxes.password AS `password`,'/var/spool/mail/domain.com/user' AS `userdb_home`, 8 AS `userdb_uid`, 12 AS `userdb_gid` FROM `mailboxes`, `domains` WHERE mailboxes.local_part = 'user' AND mailboxes.active = 1 AND mailboxes.domain_name = domains.fqdn AND domains.fqdn = 'domain.com' AND domains.active = 1 dovecot: auth: Debug: client passdb out: OK#0111#011user=user(a)domain.com dovecot: auth: Debug: master in: REQUEST#0112408185857#01125865#0111#0117b2d33b66e121f24e5393e87c3ae855f#011session_pid=25870#011requ est_auth_token dovecot: auth-worker(25868): Debug: sql(user=user(a)domain.com,Y.Y.Y.Y): SELECT '/var/spool/mail/domain.com/user' AS `home`, 8 AS `uid`, 12 AS `gid` dovecot: auth: Debug: master userdb out: USER#0112408185857#011user=user@domain.com#011home=/var/spool/mail/domain.com/user#011uid=8#011gid=12#011auth_token=505201029f52ca4318f4a283c1ad5449afd407d3 dovecot: imap-login: Login: user=<user=user(a)domain.com>, method=PLAIN, rip=Y.Y.Y.Y, lip=X.X.X.X, mpid=25870, TLS, session=<VPOQpNvsPwDELro2> dovecot: imap(user=user(a)domain.com): Debug: Effective uid=8, gid=12, home=/var/spool/mail/domain.com/user dovecot: imap(user=user(a)domain.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/spool/mail/domain.com/user dovecot: imap(user=user(a)domain.com): Debug: maildir++: root=/var/spool/mail/domain.com/user, index=, indexpvt=, control=, inbox=/var/spool/mail/domain.com/user, alt= -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecot-imap-postlogin-failed-tp46436.… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] doveadm stats top exit with error
by Andreas Schulze 23 Jan '14

23 Jan '14

Hello, looks like a cosmetical problem but I like to mention it though: doveadm stats top is interactive. To exit I press as usual CTRL+C and get ^Cdoveadm(root): Error: close(-1[doveadm-stats.c:496]) failed: Interrupted system call It's dovecot-2.2.10. Andreas

1 0

[Dovecot] Writing an FTS plugin
by John Morrissey 23 Jan '14

23 Jan '14

Hi, I'm having some trouble writing an FTS plugin that uses notmuch (http://notmuchmail.org/) as the backend. As a proof of concept, I'm adding a hardcoded UID to the search results in the plugin's lookup handler: seq_range_array_add(&result->definite_uids, 1, 42); but this UID is never returned by IMAP SEARCH commands. I know the plugin is being used, since I'm also syslogging immediately before the call to seq_range_array_add(). Interestingly, SEARCH commands return correct results (based on the mailbox content and the search terms specified), but I'm not sure where those results are coming from. The notmuch plugin is the only configured FTS plugin: mail_plugins = $mail_plugins fts fts_notmuch plugin { fts = notmuch } What might I be doing wrong? Additionally, notmuch returns message filenames, which I'll need to translate to UIDs. I've seen maildir_uidlist_get_uid(), but I'm not sure where to get the struct maildir_uidlist arg it needs. notmuch only supports the Maildir format, so using a maildir_* function seems a reasonably safe assumption, but is there a better way? john -- John Morrissey _o /\ ---- __o jwm(a)horde.net _-< \_ / \ ---- < \, www.horde.net/ __(_)/_(_)________/ \_______(_) /_(_)__

1 1

[Dovecot] IMAP ANNOTATE Extension RFC5257
by Sebastian Schlatow 23 Jan '14

23 Jan '14

Hello, Does Dovecot support the IMAP ANNOTATE Extension RFC5257 http://tools.ietf.org/html/rfc5257? If not, are there any plans to implement the extension? If not, why there is no plan to implement this feature? Regards Sebastian

5 6

[Dovecot] Problem with LDA. When vacation auto-reply sent, the field from=<>.
by Dmitry 23 Jan '14

23 Jan '14

Hi, My problem is that when vacation auto-reply sent the field from=<> Because of this does not work "sender_dependent_relayhost_maps" in postfix. My scheme is: There are several postfix on different machines 1.1.1.1 - domain1 2.2.2.2 - domain2 3.3.3.3 - domain3 All they send messages to one server virtual_transport = lmtp:10.10.10.10:24 where mail is stored. In 10.10.10.10 installed dovecot 2.2.9, dovecot-pigeonhole 0.4.2 and another posfix In postfix inet_interfaces = 10.10.10.10 sender_dependent_relayhost_maps = hash:$config_directory/relayhost_maps relayhost_maps @domain1 [1.1.1.1] @domain2 [2.2.2.2] @domain3 [3.3.3.3] Sieve script make from Roundcube require ["vacation"]; # rule:[autoreply] if true { vacation :days 1 :subject "Test." "Test."; } (if add [":from" string] nothing changes) The letter comes, script fulfills, vacation auto-reply sent. But either /usr/sbin/sendmail -i -f <> -- user@senddomain or, if write in 15-lda.conf submission_host = 10.10.10.10:25 postfix log Jan 1 00:00:00 mail pf-OUT/cleanup[6098]: 4CD104A8A4: message-id=<dovecot-sieve-1390316174-295666-0@mail> Jan 1 00:00:00 mail pf-OUT/qmgr[5950]: 4CD104A8A4: from=<>, size=693, nrcpt=1 (queue active) How to make dovecot and dovecot-pigeonhole write in field MAIL FROM:? Also, I noticed that does not work protocol lda { .. # remember to give proper permissions for these files as well log_path = /var/log/dovecot-lda-errors.log info_log_path = /var/log/dovecot-lda.log } from http://wiki2.dovecot.org/LDA Logs are not written. Thanks and regards, Dmitry

3 6

[Dovecot] beginners sieve: copy not move to subfolder?
by voytek＠sbt.net.au 22 Jan '14

22 Jan '14

I'm trying to learn how do basic stuff with sieve; I pasted this from a tutorial, it works fine, mail is delivered to 'friends' BUT, what should I do to keep mail in main inbasket as well as, copy to subbasket ? tried 'copy' but failed so far main_script: line 6: error: unknown command 'copy' (only reported once at first occurence). even after I added 'copy' to 'require' still failed ? ------------------------------------ require ["fileinto", "reject"]; # Daffy Duck is a good friend of mine. if address :is "from" "daffy.duck(a)example.com" { fileinto "friends"; }

3 2

[Dovecot] IDLE dropping EXISTS events on mass message arrival
by Eric Wong 22 Jan '14

22 Jan '14

Hi, I'm not sure if this is some throttling/DoS protection or a bug. I didn't see notice anything like it mentioned looking at the NEWS file from hg, this is on 2.1.7 on Debian stable. I have a client doing IDLE on INBOX.vomiteer. When individual messages arrive with some time interval in between them, I get EXISTS events for each message as expected. However, when I store a bunch of messages at once (via tag + mass copy in mutt on a fast-ish connection), I get a few EXISTS events (sometimes one, sometimes two) even though I copied a lot of new messages over. I expected to get an EXISTS event for each message which arrived, but perhaps there's some sort of DoS/throttling mechanism. strace -t -s4096 output of the dovecot process below: fd=13 is inotify, you'll see large read(13, ... indicating multiple filenames from inotify. However, only one EXISTS message got written to the socket. I've filtered out the gettimeofday syscalls for brevity. 07:30:02 epoll_wait(9, {}, 6, 3937) = 0 07:30:06 stat64("/home/ew/.maildir/.INBOX.vomiteer/cur", {st_mode=S_IFDIR|0700, st_size=12288, ...}) = 0 07:30:06 stat64("/home/ew/.maildir/.INBOX.vomiteer/new", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 07:30:06 stat64("/home/ew/.maildir/.INBOX.vomiteer/new", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 07:30:06 stat64("/home/ew/.maildir/.INBOX.vomiteer/cur", {st_mode=S_IFDIR|0700, st_size=12288, ...}) = 0 07:30:06 stat64("/home/ew/.maildir/.INBOX.vomiteer/dovecot.index.log", {st_mode=S_IFREG|0600, st_size=25920, ...}) = 0 07:30:06 fstat64(10, {st_mode=S_IFREG|0600, st_size=25920, ...}) = 0 07:30:06 epoll_wait(9, {}, 6, 7865) = 0 07:30:14 setsockopt(11, SOL_TCP, TCP_CORK, [1], 4) = 0 07:30:14 write(11, "* OK Still here\r\n", 17) = 17 07:30:14 setsockopt(11, SOL_TCP, TCP_CORK, [0], 4) = 0 07:30:14 time(NULL) = 1390289414 07:30:14 epoll_wait(9, {{EPOLLIN, {u32=4159555408, u64=4159555408}}}, 6, 22124) = 1 07:30:17 read(13, "\2\0\0\0\200\0\0\0\t\365\r\0000\0\0\0001390289417.M94623P14841.dcvr,S=1580,W=1619:2,S\0\0\2\0\0\0\200\0\0\0\n\365\r\0000\0\0\0001390289417.M94624P14841.dcvr,S=1580,W=1619:2,S\0\0\2\0\0\0\200\0\0\0\v\365\r\0000\0\0\0001390289417.M94625P14841.dcvr,S=1422,W=1460:2,S\0\0\2\0\0\0\200\0\0\0\f\365\r\0000\0\0\0001390289417.M94626P14841.dcvr,S=1422,W=1460:2,S\0\0\2\0\0\0\200\0\0\0\r\365\r\0000\0\0\0001390289417.M94627P14841.dcvr,S=1861,W=1907:2,S\0\0\2\0\0\0\200\0\0\0\16\365\r\0000\0\0\0001390289417.M94628P14841.dcvr,S=1861,W=1907:2,S\0\0\2\0\0\0\200\0\0\0\17\365\r\0000\0\0\0001390289417.M94629P14841.dcvr,S=4732,W=4854:2,S\0\0\2\0\0\0\200\0\0\0\20\365\r\0000\0\0\0001390289417.M94630P14841.dcvr,S=4732,W=4854:2,S\0\0\2\0\0\0\200\0\0\0\21\365\r\0000\0\0\0001390289417.M94631P14841.dcvr,S=4028,W=4128:2,S\0\0\2\0\0\0\200\0\0\0\22\365\r\0000\0\0\0001390289417.M94632P14841.dcvr,S=4028,W=4128:2,S\0\0\2\0\0\0\200\0\0\0\23\365\r\0000\0\0\0001390289417.M94633P14841.dcvr,S=3865,W=3968:2,S\0\0\2\0\0\0\200\0\0\0\24\365\r\0000\0\0\0001390289417.M94634P14841.dcvr,S=3865,W=3968:2,S\0\0", 32768) = 768 07:30:17 epoll_wait(9, {{EPOLLIN, {u32=4159555408, u64=4159555408}}}, 6, 499) = 1 07:30:17 read(13, "\2\0\0\0\200\0\0\0\25\365\r\0000\0\0\0001390289417.M94635P14841.dcvr,S=4092,W=4189:2,S\0\0\2\0\0\0\200\0\0\0\26\365\r\0000\0\0\0001390289417.M94636P14841.dcvr,S=4092,W=4189:2,S\0\0\2\0\0\0\200\0\0\0\27\365\r\0000\0\0\0001390289417.M94637P14841.dcvr,S=1517,W=1552:2,S\0\0\2\0\0\0\200\0\0\0\30\365\r\0000\0\0\0001390289417.M94638P14841.dcvr,S=1517,W=1552:2,S\0\0", 32768) = 256 07:30:17 epoll_wait(9, {}, 6, 498) = 0 07:30:17 stat64("/home/ew/.maildir/.INBOX.vomiteer/new", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 07:30:17 stat64("/home/ew/.maildir/.INBOX.vomiteer/cur", {st_mode=S_IFDIR|0700, st_size=12288, ...}) = 0 07:30:17 stat64("/home/ew/.maildir/.INBOX.vomiteer/dovecot.index.log", {st_mode=S_IFREG|0600, st_size=26328, ...}) = 0 07:30:17 fstat64(10, {st_mode=S_IFREG|0600, st_size=26328, ...}) = 0 07:30:17 pread64(10, "\200\200\200\207@\0\0\20\0\0\0\0\0\0\0\0$\0\0\0\0\0\0\0\1\0\0\0\200\200\200\214\0\1\0\20\0\0$\0\337!\336R\344\231\2L\0\0\0\0\t\"\336R\t\"\336R\0\0\0\0\t\"\336R\0\0\0\0007\n\0\0\200\200\200\204 \0\0\20@\0\4\0\234e\0\0\200\200\200\242\2\0\0\20\317\0\0\0\10\0\0\0\320\0\0\0\10\0\0\0\321\0\0\0\10\0\0\0\322\0\0\0\10\0\0\0\323\0\0\0\10\0\0\0\324\0\0\0\10\0\0\0\325\0\0\0\10\0\0\0\326\0\0\0\10\0\0\0\327\0\0\0\10\0\0\0\330\0\0\0\10\0\0\0\331\0\0\0\10\0\0\0\332\0\0\0\10\0\0\0\333\0\0\0\10\0\0\0\334\0\0\0\10\0\0\0\335\0\0\0\10\0\0\0\336\0\0\0\10\0\0\0\200\200\200\207@\0\0\20\1\0\0\0\0\260\2L\0\0\0\0\4\0\4\0\1\0\0\0\200\200\200\242\0\2\0\20\317\0\0\0\250\275\0\0\320\0\0\0\234\277\0\0\321\0\0\0|\301\0\0\322\0\0\0|\304\0\0\323\0\0\0\200\307\0\0\324\0\0\0|\312\0\0\325\0\0\0h\315\0\0\326\0\0\0\\\320\0\0\327\0\0\0\224\323\0\0\330\0\0\0\210\325\0\0\331\0\0\0h\327\0\0\332\0\0\0h\332\0\0\333\0\0\0l\335\0\0\334\0\0\0h\340\0\0\335\0\0\0T\343\0\0\336\0\0\0H\346\0\0\200\200\200\204 \0\0\0200\0\4\0\337\0\0\0", 8192, 25920) = 408 07:30:17 pread64(10, "", 8192, 26328) = 0 07:30:17 stat64("/home/ew/.maildir/.INBOX.vomiteer/dovecot.index.log", {st_mode=S_IFREG|0600, st_size=26328, ...}) = 0 07:30:17 fstat64(10, {st_mode=S_IFREG|0600, st_size=26328, ...}) = 0 07:30:17 time(NULL) = 1390289417 07:30:17 setsockopt(11, SOL_TCP, TCP_CORK, [1], 4) = 0 07:30:17 write(11, "* 32 EXISTS\r\n", 13) = 13 07:30:17 setsockopt(11, SOL_TCP, TCP_CORK, [0], 4) = 0 07:30:17 epoll_wait(9, <unfinished ...> (Nothing happened after this) # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.9.2-x86_64-xxxxxx x86_64 Debian 7.3 auth_mechanisms = plain login log_timestamp = "%Y-%m-%d %H:%M:%S " mail_fsync = never mail_location = maildir:~/.maildir mail_max_userip_connections = 666 mail_privileged_group = mail passdb { driver = shadow } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { inet_listener imap { address = 127.0.0.1 port = 1434 } process_limit = 10 process_min_avail = 1 } service imap { process_limit = 32 } service pop3-login { process_limit = 10 process_min_avail = 1 } service pop3 { process_limit = 32 } ssl = no userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)dcvr.yhbt.net } -- Eric Wong

2 1

[Dovecot] AD Kerberos and Dovecot
by Christian Felsing 22 Jan '14

22 Jan '14

Hello, I got stucked on Kerberos auth with Dovecot: Jan 22 17:48:36 test dovecot: auth: Error: LDAP: binding failed (dn cn=AUTH\_ldap): Local error, SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Credentials cache file '/tmp/krb5cc_1003' not found) kinit and and ldapsearch with gssapi auth are working. Are there instructions how to set up Kerberos auth with Dovecot and Active Directory? How does Dovecot handle Kerberos tickets? best regards Christian

1 0

[Dovecot] master password
by Marc Perkel 21 Jan '14

21 Jan '14

This is probably easy but how would a set a secret static master password so that if I typed it in for any login it would be happy? I can't use the * separator method in this case because it screws up squirrelmail.

2 1

[Dovecot] Shared mailboxes / IMAP folder performance
by Sebastian Schlatow 21 Jan '14

21 Jan '14

Hello, how performant is an IMAP shared folder / mailbox if it contains 2 million mails? Is it possible two have such a quantity of mails in a shared folder? Is it possible to search that shared folder for mails in a fast way? Regards Sebastian

2 3

[Dovecot] Failure in doveconf
by Andrew Ray 21 Jan '14

21 Jan '14

I ran into a problem while configuring dovecot. Quickly reading the paragraph below, I saw "yes" as one of the options, and put that into the config, as below: # In case of password mismatches, log the attempted password. Valid values are # no, plain and sha1. sha1 can be useful for detecting brute force password # attempts vs. user simply trying the same password over and over again. # You can also truncate the value to n chars by appending ":n" (e.g. sha1:6). auth_verbose_passwords = yes The result from doveconf -n was: doveconf: Error: x�η doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf: 0pη (where the error message was always a changing, apparently random set of characters.) So I managed, by going back through the config file and commenting out options, to find this was the problem and then finally read what are the acceptable values. Any other place that I have tried to give a non acceptable value I get a reasonable error message with line number and problem. Well, now I fixed my original problem, but something needs to be adjusted in the error handling code. Sincerely, Andrew Ray -- Andrew Ray +1 404-418-5443 +421 (0) 917 832 253 http://guns.freedomlives.net/

1 0

[Dovecot] forwarded message is broken in 2.2.10 with pigeonhole-0.4.2
by Burckhard Schmidt 21 Jan '14

21 Jan '14

Hi, forwarding a message with sieve like redirect:copy "me(a)other.domain"; was working without any problem until dovecot-2.1.17, dovecots lmtp and dovecot-2.1-pigeonhole-0.3.5. Using dovecot-2.2.10 , dovecots lmtp and dovecot-2.2-pigeonhole-0.4.2 the structure of a forwarded message is broken. Content of a message is not displayed or an attachment (for instance pdf) can not be opened by (different) clients. Writing a html mail or plain one makes no different. I have compared two messages and the main different is a missing Content-Type: multipart/alternative; boundary="...." to encapsulate the body of the forwarded message. Was it lost in sieve? Here parts of a "well" forwarded message: Return-Path: ... ... Received: by mails.cms.hu-berlin.de (Postfix, from userid 29) id A78C738734; Tue, 14 Jan 2014 17:10:54 +0100 (CET) X-Sieve: Pigeonhole Sieve 0.3.5 X-Sieve-Redirected-From: schmidt(a)mails.cms.hu-berlin.de Delivered-To: <schmidt(a)mails.cms.hu-berlin.de> Received: from mails.cms.hu-berlin.de by suncom1 (Dovecot) with LMTP id p8HoIn9h1VKnTwAA9XuJ/g for <schmidt(a)mails.cms.hu-berlin.de>; Tue, 14 Jan 2014 17:10:54 +0100 ... Message-ID: <52D5618D.6050905(a)gmail.com> Date: Tue, 14 Jan 2014 17:10:53 +0100 From: xy <xy(a)gmail.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: schmidt(a)hu-berlin.de Subject: from gmail with attachment Content-Type: multipart/mixed; boundary="------------070108020005050001040207" X-ENVELOPE-TO: <me(a)other.domain> This is a multi-part message in MIME format. --------------070108020005050001040207 Content-Type: multipart/alternative; boundary="------------090806050202050708030507" --------------090806050202050708030507 Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 8bit Hallo. text --------------090806050202050708030507 Content-Type: text/html; charset=ISO-8859-15 Content-Transfer-Encoding: 8bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-15"> </head> <body text="#000000" bgcolor="#FFFFFF"> Hallo. text P. </body> </html> --------------090806050202050708030507-- --------------070108020005050001040207 Content-Type: application/pdf; name="auftrag-2014-eng-Hinweise.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="auftrag-2014-eng-Hinweise.pdf" JVBERi0xLjYNJeLjz9MNCjcyIDAgb2JqDTw ... ... c3RyZWFtDWVuZG9iag1zdGFydHhyZWYNCjExNg0KJSVFT0YNCg== --------------070108020005050001040207-- message end Now a broken message without "Content-Type: multipart/alternative;": Return-Path: ... ... Received: by mail5.cms.hu-berlin.de (Postfix, from userid 29) id 47C4C6D46E; Tue, 14 Jan 2014 17:43:54 +0100 (CET) X-Sieve: Pigeonhole Sieve 0.4.2 X-Sieve-Redirected-From: testuser(a)mail5.cms.hu-berlin.de Delivered-To: <testuser(a)mail5.cms.hu-berlin.de> Received: from mail5.cms.hu-berlin.de by suncom5 (Dovecot) with LMTP id mnY0AEpp1VLsaQAA0tuC1A for <testuser(a)mail4.cms.hu-berlin.de>; Tue, 14 Jan 2014 17:43:54 +0100 ... Message-ID: <52D56948.1090704(a)gmail.com> Date: Tue, 14 Jan 2014 17:43:52 +0100 From: xy <xy(a)gmail.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: testuser(a)hu-berlin.de Subject: from gmail with attachment Content-Type: multipart/mixed; boundary="------------030506080302040201020604" X-ENVELOPE-TO: <me(a)other.domain> This is a multi-part message in MIME format. --------------030506080302040201020604 Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit text. --------------030506080302040201020604 Content-Type: application/pdf; name="auftrag-2014-eng-Hinweise.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="auftrag-2014-eng-Hinweise.pdf" JVBERi0xLjYNJeLjz... ... c3RyZWFtDWVuZG9iag1zdGFydHhyZWYNCjExNg0KJSVFT0YNCg== --------------030506080302040201020604-- message end -- Mit freundlichen Grüßen --- Burckhard Schmidt Abteilung Systemsoftware und Kommunikation ZE Computer- und Medienservice der Humboldt-Universität zu Berlin Postanschrift: Unter den Linden 6, 10099 Berlin Standort: Rudower Chaussee 26; 12489 Berlin Tel.: +49-30-2093-70058 Fax: +49-30-2093-2959 Mail: bschmidt(a)cms.hu-berlin.de

3 12

[Dovecot] Dovecot doesn't seem to report all subfolders to Thunderbird
by dovecot＠voidptr.de 21 Jan '14

21 Jan '14

Hi, I've recently migrated my emails from a Yahoo account to my own mailserver on a VPS. Ever since then, Thunderbird seems to have issues with the mailbox's directory structure: When I start Thunderbird, it immediately deletes the local copies of all 3rd-level folders (i.e. subfolders of a subfolder of a folder in the mailbox root). Since that didn't happen with the Yahoo account, I assume it's some kind of error or misconfiguration of Dovecot. Here's an example of the mailbox structure: voidptr.de '-> University '-> IEEE '-> Conference "University" and "IEEE" work without problems, but "Conference" gets deleted locally every time I start Thunderbird. When I collapse and re-expand "University" in the folder panel, all subfolders (including "Conference") reappear, but Thunderbird has to re-download the contents of "Conference", since it deleted the local copies earlier. It looks as if Dovecot only reported the topmost two folder levels when Thunderbird requests a folder list... Is there any way I can change that behavior? Nils $ doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab078.22 x86_64 Debian 7.3 auth_verbose = yes mail_location = maildir:~/Maildir:LAYOUT=fs namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = subscriptions = yes } passdb { args = scheme=SHA512-CRYPT username_format=%n /etc/dovecot/users driver = passwd-file } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imaps { port = 0 } } ssl = required ssl_cert = </etc/ssl/certs/own/voidptr.de.pem ssl_key = </etc/ssl/certs/own/voidptr.de.key userdb { args = username_format=%n /etc/dovecot/users default_fields = home=/home/%n driver = passwd-file }

3 4

[Dovecot] Sieve Filter based on Email Body
by Roman Gelfand 21 Jan '14

21 Jan '14

Is it possible to file emails based on the contents of email body? If yes, can you point me to an example. Thanks in advance

2 1

[Dovecot] A variable for the unix user or home path would be useful in some cases
by interfaSys sàrl 20 Jan '14

20 Jan '14

Hello, In our hosting environment, we let users share mailboxes across all their domains and think it's best if the shared mailbox listing (in a file) stays in their unix home path. That would be: /home/USER/imap/shared-mailboxes.db Unfortunately, it seems there is no way to generate that path using a variable. Something like this would be convenient: acl_shared_dict = file:%v/imap/shared-mailboxes.db Instead, we have to use something like this: acl_shared_dict = file:~/../../../shared-mailboxes.db which only works for virtual users. Did somebody solve this another way? Could we have the unix user or home path as a variable? Or could we have a modifier giving us the path or the unix user based on the unix UID? Cheers, Olivier

1 0

Re: [Dovecot] imap abort after upgrade from 2.2.4 to 2.2.7
by morrison 20 Jan '14

20 Jan '14

When I did upgrade, 2.2.7 was the latest release. When I ran into the problem, I checked back and found 2.2.8 and 2.2.9 were released shortly one after another. It seemed these releases were sort of buggy. I would like to know if what I described in my previous email was an known issue and was addressed before upgrade to 2.2.10. We are using dovecot as our internal mail service. So stable is most important to us. Regards,

1 0

[Dovecot] mail check
by Paolo 20 Jan '14

20 Jan '14

Is there some simple script that parsing the dovecot.info.log can give me a list of the mail checks for a user (better if reports also the type (POP/IMAP), and result of the sessions (Ok/Fail/Error/...))? Regards, Paolo

2 2

[Dovecot] auth_default_realm, pam_krb5, gssapi
by Sergey Urushkin 20 Jan '14

20 Jan '14

Hi, Just writing here my note about auth_default_realm, pam_krb5 and gssapi. It seems that 'pam' passdb and 'gssapi' auth_mechanism doesn't honor 'auth_default_realm' setting, at least in several setups I deal with. Here is a part of the config: passdb { args = max_requests=100 cache_key=%u%r dovecot driver = pam } auth_default_realm = REALM.COM auth_mechanisms = plain login apop gssapi auth_username_format = %Uu The problem is that pam_krb5 strips default realm from username (by default), even if auth_default_realm is specified and even if user logs in as 'user1(a)realm.com' (with domain part). A part of auth.log: mail auth: pam_krb5(dovecot:auth): user USER1 authenticated as USER1(a)REALM.COM The same for GSSAPI auth, if specified authorization name doesn't contain domain part. A part of mail.log: mail dovecot: imap-login: Login: user=<USER1>, method=GSSAPI, rip=172.16.0.1, lip=192.168.1.1, mpid=5828, TLS, session=<bpzvRmDwPACsFwCX> For several reasons I do need username inside dovecot to contain domain part. So, I found a solution to this problem - modifying /etc/krb5.conf this way: [libdefaults] default_realm = REALM.COM [realms] REALM.COM = { auth_to_local = RULE:[1:$1@$0] } This will add realm part to the local username despite using default realm. Maybe it's better to put this example to the wiki? Tested with ubuntu 12.04 and dovecot 2.2.10, mit kerberos 1.10, amd64. Taking the opportunity, I'd like to ask, is there a way to make usernames case insensitive while using GSSAPI. The case: klist shows: Principal: user1(a)REALM.COM username in thunderbird 'uSer1(a)REALM.COM'. Dovecot gives me this message (I use auth_username_format=%Uu for pam_krb5 to be able to login with lowercase realm): dovecot: auth: gssapi(USER1(a)REALM.COM,172.16.0.1,<IIgwMGbw3ACsFgA4>): User not authorized to log in as USER1(a)REALM.COM As I know kerberos usernames are case insensitive (user part), at least kinit and windows against AD works that way. Seems that k5credentials passdb extra field will not help here too. Does anyone have an idea? Thanks. -- Best regards, Sergey Urushkin

1 0

[Dovecot] New document on troubleshooting Dovecot IMAP
by Steve Litt 20 Jan '14

20 Jan '14

Hi all, Check out my new document on troubleshooting Dovecot IMAP: http://www.troubleshooters.com/emailtech/imap_troubleshooting.htm Thank you to all those, on this mailing list and on the #dovecot IRC channel, for helping me with this. Thanks, SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance

2 1

[Dovecot] Shared Folters with LDA/Sieve
by Dieter Knopf 19 Jan '14

19 Jan '14

Hello, i'm searching for a way to use Shared mailboxes with Sieve Filtering. I need global email addresses like: info(a)foo.tld contact(a)foo.tld help(a)foo.tld Every address with own Sieve-rules for filtering and sorting of incoming mails. Now every user needs access to this folders, but how? How should i create the "global" addresses? I already found http://wiki2.dovecot.org/SharedMailboxes/Public , but that's just a public namespace. Is there any FAQ available for this? Thank you very much Dieter

4 4

[Dovecot] Dovecot - not pulling pop3s email from virtual mbox
by Ganesh Hariharan 18 Jan '14

18 Jan '14

Hi All, I am bit strugging to get this work, and bit perplexed to set the right configuration to get this work, btw: I am using passdb without any DB based auth. the latest logs after debug mode setting is below Jan 16 09:27:04 ns dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/auth/libdriver_sqlite.so Jan 16 09:27:04 ns dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/auth/libmech_gssapi.so Jan 16 09:27:04 ns dovecot: auth: Error: passwd-file /etc/dovecot/users: User info(a)ghhdomain.com has invalid GID '/var/spool/mail/ghhdomain/info/' Jan 16 09:27:04 ns dovecot: auth: Debug: passwd-file /etc/dovecot/users: Read 0 users Jan 16 09:27:04 ns dovecot: auth: Fatal: No passdbs specified in configuration file. CRAM-MD5 mechanism needs one Jan 16 09:27:04 ns dovecot: master: Error: service(auth): command startup failed, throttling Please see my configs 10-mail.conf mail_location = maildir:/var/spool/mail/%d/%n 10-ssl.conf # SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt> ssl = yes ssl_cert = </etc/postfix/newcert.pem ssl_key = </etc/postfix/newkey.pem auth-system.conf.ext #passdb { #driver = passwd-file #args = scheme=cram-md5 username_format=%u /etc/dovecot/passwd #} userdb { driver = passwd-file args = username_format=%u /etc/dovecot/users } auth-passwdfile.conf.ext passdb { driver = passwd-file args = scheme=CRYPT username_format=%u /etc/dovecot/users } users file look like this info(a)ghhdomain.com: {CRAM-MD5}e02d374fde0dc75a17a557039a3a5338c7743304777dccd376f332bee68d2cf6:503:503 I created using doveadm pw , and pasted the output to the above file Please let me know what went wrong, and what I need to do now... thanks G. userdb { driver = passwd-file args = username_format=%u /etc/dovecot/users I have made a mess of these configuration after many tries.. yet not sure what is the simple steps to make it work

2 7

[Dovecot] Sizing MTA servers
by Murray Trainer 18 Jan '14

18 Jan '14

Hi All, This is probably a bit off-topic but does anyone have any idea about sizing MTA servers. We have about 200,000 emails/hr incoming and outgoing. I am intending using Exim and Spamassassin on each MTA. How many servers using recent hardware would I need to cope with this mail throughput? What is more important on the servers, CPU or RAM? Should I have mail going both directions on each server or dedicate a pair each for incoming and outgoing mail> Thanks for any feedback. Murray

5 5

[Dovecot] doveconf base_dir
by Andreas Schulze 18 Jan '14

18 Jan '14

Hello, today I run the command "doveadm auth cache flush" for the first time. # doveadm auth cache flush doveadm(root): Error: userdb lookup: connect(/var/run/dovecotauth-master) failed: No such file or directory 0 cache entries flushed # base_dir was the only item contain 'run' and it did not end with a / So I tried to set base_dir to /var/run/dovecot/ and could now rerun "doveadm auth cache flush" without problems. I compile dovecot from source and found --with-rundir=/var/run/dovecot as an option to configure. I changed to /var/run/dovecot/, recompile and removed the base_dir setting in dovecot.conf again. Now "doveadm auth cache flush" work out of the box. doveconf -d base_dir is var/run/dovecot/. Finaly I compiled dovecot with --localstatedir=/var and removed --with-rundir from configure. The resulting package had again base_dir = /var/run/dovecot so "doveadm auth cache flush" don't work. looks like somewhere the missing / should be added in case base_dir has no trailing / without special configuration. Andreas

1 0

[Dovecot] imap abort after upgrade from 2.2.4 to 2.2.7
by morrison 17 Jan '14

17 Jan '14

Hi, I used to use dovecot 2.2.4. I saw lots of warnings saying 'Extension header update points outside header size'. I upgraded to dovecot 2.2.7, based on the discussion in mail list. Now, I see lots of imap aborts around: src/lib-index/mail-index-transaction-export.c:203: i_assert(u32.offset + u32.size <= ext_hdr_size); I also noticed, in some mailbox, imap process kept abort until all index files in the mailbox were manually deleted. Did someone run into the same problem and any solution to this? Thanks,

4 4

[Dovecot] Dovecot IMAP proxy for gmail IMAP server
by CM Reddy 17 Jan '14

17 Jan '14

Hi All, I am experimenting to use Dovecot as an IMAP proxy to GMAIL server. I would like configure my localhost as an Dovecot IMAP proxy and trying to access my GMAIL using the Thunderbird email client. Please share the steps to configure and access my mails from GMAIL server. - Thanks CM Reddy

2 1

[Dovecot] Use dovecot for enterprise
by ♥ NiNJA ♂ 17 Jan '14

17 Jan '14

Hi guys I like to know is it possible to create Unlimited number of email accounts with Unlimited Storage in each email ? Does anybody do it ? Does dovecot good enough for having more than millions of users ? Thanks :-)

3 2

[Dovecot] Changing user specific configs one at a time using userdb text file to override defaults...
by Charles Marcus 17 Jan '14

17 Jan '14

Hi all, Ok, I'm now interested in testing converting users one at a time to mdbox+SIS, but want to make sure I understand how to do this. It appears the best way - for smaller installations at least - is to just use a simple text file userdb to override the defaults, then once all of the users have been converted, change the defaults and remove the userdb txt file overrides. So, would love to hear details from others who have done something like this. Thx! -- Best regards, Charles

1 0

[Dovecot] Getting more out of the %w variable.
by Julian PG 17 Jan '14

17 Jan '14

Hello Dovecot community, I have a backend database application that handles all system wide user authentication (from web to mail and more). Passwords are not stored in plain text. So I would like to support more than PLAIN. Perhaps at least CRAM-MD5 or DIGEST-MD5 for example. Even though connections over TLS are encouraged (and even enforced). Some MUA and users still think its a better idea than PLAIN (even sent over an encrypted session). I have a vague memory of getting some warnings with thunderbird in regards to the use of PLAIN. Of course the %w variable would have to include the challenge as well as the response. Or perhaps even a seperate variable for the challenge? Or course at the moment the %w variable is an empty string for anything other than PLAIN. This would make some users and MUAs happy (even though pointless over TLS - I agree). Your thoughts would be appreciated. Regards, Julian. -- Not time for sigs!

2 1

[Dovecot] Received: header showing 127.0.0.1 after switch to dovecot LDA?
by Charles Marcus 16 Jan '14

16 Jan '14

Hi all, I'm guessing this is correct behavior, but wanted to make sure... I noticed that for locally delivered messages (between 2 local users inside our domain, so they never leave the server), the first Received: header line content changed after I switched to the dovecot LDA. Before, using postfix/virtual for delivery, the header looked like this: Received: from [192.168.1.25] (client.example.com [192.168.1.25]) by smtp.example.com (Postfix) with ESMTPSA id 67E33A20542; Wed, 6 Jun 2012 10:55:55 -0400 (EDT) But now it looks like this: Received: from [127.0.0.1] (client.example.com.com [192.168.1.14]) by smtp.example.com (Postfix) with ESMTPSA id 4EEF7802AF325 for <me(a)example.com>; Wed, 15 Jan 2014 18:29:17 -0500 (EST) so, 2 questions... 1. Why does it show 127.0.0.1 instead of the client IP, and 2. Why did postfix/virtual include the "for <me(a)example.com>;" but the dovecot LDA doesn't? Thanks, -- Best regards, Charles

2 1

[Dovecot] Replication file sizes
by IT geek 31 16 Jan '14

16 Jan '14

Hi, I'm using Dovecot 2.2.9 to replicate my mailbox to a remote server. My mailbox on ServerA is 235Mb, but on ServerB it ends up being 358Mb. Does anyone know why this is? Shouldn't they be the same size? doveconf -n from ServerA: # 2.2.9: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.2 cobalt auth_mechanisms = plain login doveadm_password = secret doveadm_port = 12345 first_valid_uid = 1003 last_valid_uid = 1020 listen = 192.168.1.1 mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_plugins = " notify replication" passdb { driver = passwd } plugin { mail_replica = tcp:serverb.test.com } protocols = imap service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0600 } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service doveadm { inet_listener { port = 12345 } } service imap-login { inet_listener imap { port = 0 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl_cert = </etc/openssl/certs/servera.test.com.crt ssl_key = </etc/openssl/private/serverb.test.com.key userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)test.com

1 0

[Dovecot] Dovecot 2 separate login for POP3 connections ?
by BONNET, Frank 16 Jan '14

16 Jan '14

Hello Is it possible to configure a separate logfile for incoming POP3 connections ( dovecot 2.2.9 ) thanks

3 3

[Dovecot] mail-filter always results in corrupted indexes
by martijn.list 16 Jan '14

16 Jan '14

Hi, I'm experimenting with the mail-filter plugin but whenever I add anything to a message, it always results in an corrupted cache: from the logs: Dec 14 16:09:55 ciphermail-webmail dovecot: imap(martijn=djigzo.com(a)ciphermail.private): Error: Corrupted index cache file /var/vmail/martijn=djigzo.com(a)ciphermail.private/dovecot.index.cache: Broken physical size for mail UID 76 Dec 14 16:09:55 ciphermail-webmail dovecot: imap(martijn=djigzo.com(a)ciphermail.private): Error: read() failed: Invalid argument Dec 14 16:10:02 ciphermail-webmail dovecot: imap(martijn=djigzo.com(a)ciphermail.private): Error: Cached message size smaller than expected (773 < 777) Dec 14 16:10:02 ciphermail-webmail dovecot: imap(martijn=djigzo.com(a)ciphermail.private): Error: Maildir filename has wrong S value, renamed the file from /var/vmail/martijn=djigzo.com@ciphermail.private/cur/1387033802.M114583P9631.ciphermail-webmail,S=773,W=791:2, t A do-nothing filter that just sends the input to the output works but whenever I add something trivial to the message, the cache is always corrupted. I using Dovecot 2.2.9.1 (from the deb archives). I use the following trivial test to add some XXX chars and and later remove them. In mail-filter.sh I append some chars and in mail-filter-out I filter these chars out (this is just a test) cat > /tmp/dovecot-in.txt echo "XXX" >> /tmp/dovecot-in.txt cat /tmp/dovecot-in.txt mail-filter-out: cat > /tmp/dovecot-out.txt sed -i /XXX/d /tmp/dovecot-out.txt cat /tmp/dovecot-out.txt Any idea what I'm doing wrong? Kind regards, Martijn Brinkers

5 6

Re: [Dovecot] Couldn't drop privileges
by Joseph Tam 16 Jan '14

16 Jan '14

From: CM Reddy <cmreddy(a)armor5.com> > userdb { > args = username_format=%u /etc/dovecot/users > driver = passwd-file > } > ... > Log information: > ... > Jan 13 16:42:44 cmreddy-Lenovo-G500s dovecot: imap(armor5): Error: user > armor5: Couldn't drop privileges: User is missing GID (see mail_gid setting) Fairly self-explanatory, isn't it? It appears your userdb does not specify GID for a user. Either define it, or ... In share/doc/dovecot/example-config/conf.d/10-mail.conf: # System user and group used to access mails. If you use multiple, userdb # can override these by returning uid or gid fields. You can use either numbers # or names. <doc/wiki/UserIds.txt> #mail_uid = ... if all your users share the the same GID, set it here. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] [Dovecot auth crash]
by Jeremy SPIESSER 16 Jan '14

16 Jan '14

Hi, I have a problem with dovecot auth and i don't know what happen .. running dovecot 2.1.7 When i try a login with user there is a crash in auth process: Jan 16 02:56:52 az-mail14 dovecot: auth: Panic: file auth-request.c: line 618 (auth_request_is_disabled_master_user): assertion failed: (request->requested_login_user != NULL) Jan 16 02:56:52 az-mail14 dovecot: auth: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7fcc4b30d14a] -> /usr/lib/dovecot/libdovecot.so.0(+0x4418e) [0x7fcc4b30d18e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fcc4b2e482a] -> dovecot/auth(+0x14af2) [0x7fcc4b78eaf2] -> dovecot/auth(auth_request_verify_plain+0x22) [0x7fcc4b790102] -> dovecot/auth(+0x1da10) [0x7fcc4b797a10] -> dovecot/auth(auth_request_handler_auth_continue+0xe2) [0x7fcc4b791cf2] -> dovecot/auth(+0x10420) [0x7fcc4b78a420] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7fcc4b31a016] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7fcc4b31acc7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7fcc4b319a28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fcc4b306483] -> dovecot/auth(main+0x323) [0x7fcc4b788863] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7fcc4a70cead] -> dovecot/auth(+0xea75) [0x7fcc4b788a75] Jan 16 02:56:52 az-mail14 dovecot: auth: Fatal: master: service(auth): child 28622 killed with signal 6 (core dumps disabled) Jan 16 02:56:52 az-mail14 dovecot: imap-login: Warning: Auth connection closed with 1 pending requests (max 0 secs, pid=28621, EOF) Jan 16 02:56:53 az-mail14 dovecot: auth: Panic: file auth-request.c: line 618 (auth_request_is_disabled_master_user): assertion failed: (request->requested_login_user != NULL) Jan 16 02:56:53 az-mail14 dovecot: auth: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7f262370d14a] -> /usr/lib/dovecot/libdovecot.so.0(+0x4418e) [0x7f262370d18e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f26236e482a] -> dovecot/auth(+0x14af2) [0x7f2623b8eaf2] -> dovecot/auth(auth_request_verify_plain+0x22) [0x7f2623b90102] -> dovecot/auth(+0x1da10) [0x7f2623b97a10] -> dovecot/auth(+0x127f3) [0x7f2623b8c7f3] -> /usr/lib/dovecot/libdovecot.so.0(+0x390e5) [0x7f26237020e5] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f262371a016] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f262371acc7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f2623719a28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f2623706483] -> dovecot/auth(main+0x323) [0x7f2623b88863] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f2622b0cead] -> dovecot/auth(+0xea75) [0x7f2623b88a75] Jan 16 02:56:53 az-mail14 dovecot: auth: Fatal: master: service(auth): child 28632 killed with signal 6 (core dumps disabled) Jan 16 02:56:53 az-mail14 dovecot: imap-login: Warning: Auth connection closed with 1 pending requests (max 0 secs, pid=28621, EOF) Jan 16 02:57:13 az-mail14 dovecot: imap-login: Disconnected (auth process communication failure): user=<>, method=PLAIN, rip=172.16.21.3, lip=172.16.21.100, TLS, session=<yDZIvQzwogCsEBUD> Dovecot run with this config file: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.3 ext4 auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 10000 default_idle_kill = 1 mins default_internal_user = dovecot default_login_user = dovenull default_process_limit = 1000 default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins director_username_hash = %u disable_plaintext_auth = yes dotlock_use_excl = no doveadm_allowed_commands = doveadm_password = doveadm_proxy_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} first_valid_gid = 1 first_valid_uid = 500 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_ssl = no imapc_ssl_ca_dir = imapc_ssl_verify = yes imapc_user = %u import_environment = TZ info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/lib/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}> login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 10 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = maildir:/data/vmail/%d/%n/Maildir:INDEX=/dev/shm/dovindex/%u mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib/dovecot/modules mail_plugins = mail_prefetch_count = 100 mail_privileged_group = mail_save_crlf = no mail_shared_explicit_inbox = yes mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = yes passdb { args = /data/vmail/conf/dovecot_shadow default_fields = deny = no driver = passwd-file master = yes override_fields = pass = no } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_password = pop3c_port = 110 pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_ca_dir = pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = protocols = quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_full_sync_interval = 12 hours replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0666 user = $default_internal_user } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 4096 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 1 G } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 ssl = no } inet_listener sieve_deprecated { address = port = 2000 ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = </etc/ssl/gandi.pem ssl_cert = </etc/ssl/cert-azuria.net.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_key = </etc/ssl/azuria.key ssl_key_password = ssl_parameters_regenerate = 1 weeks ssl_protocols = !SSLv2 ssl_require_crl = yes ssl_verify_client_cert = no stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_session_min_time = 15 mins stats_user_min_time = 1 hours submission_host = syslog_facility = mail userdb { args = uid=1003 gid=1003 home=/data/vmail/%d/%n/Maildir default_fields = driver = static override_fields = } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no protocol imap { imap_idle_notify_interval = 2 mins imap_max_line_length = 1 M mail_max_userip_connections = 10000 } protocol pop3 { pop3_enable_last = yes pop3_fast_size_lookups = no pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-userdb log_path = /data/vmail/log/dovecot-deliver.log mail_plugins = cmusieve quota postmaster_address = postmaster(a)azuria.net } I try to find answers on forums and the internet but I found nothing. Can you help me with this problem? Thanks you! -- -- *Jeremy SPIESSER * 34 bd des Italiens 75009 Paris *tel:*01 44 54 30 00 *mob:*06 22 12 81 75 *fax:*01 70 24 83 67 www.azuria.net <http://www.azuria.net/> prefix et peering <https://lg.azuria.net/>

1 0

[Dovecot] EAGAIN in dict proxy
by Richard Platel 15 Jan '14

15 Jan '14

Hello, We’re using a custom program to manage quotas talking to dovecot via the dovecot dict proxy protocol over a unix socket: plugin { quota = dict:User quota::proxy:/var/run/auth_proxy_dovecot/quotasocket:quota } Dovecot gets slammed with quota requests periodically, seemingly because Thunderbird thought it would be a good idea to hardcode having a quota check at 45 seconds past the minute, and thus every Thunderbird client makes several GETQUOTAROOT requests simultaneously. This causes dovecot to make many client connections to the quota proxy, and many of them fail with EAGAIN. In the log we see: Jan 15 16:52:46 imap25 dovecot: imap(rplatel(a)tucows.com): Error: net_connect_unix(/var/run/auth_proxy_dovecot/quotasocket) failed: Resource temporarily unavailable And the client gets: * QUOTAROOT Spam "User quota"[0d][0a] * QUOTA "User quota" ()[0d][0a] * BAD Internal quota calculation error[0d][0a] 19 OK Getquotaroot completed.[0d][0a] Thunderbird transparently disconnects and reconnects at this point but obviously this is not ideal. Writing some toy programs, I found that even making a forked server with several processes doing nothing but accept()ing on the listening socket, with a high number for the listen queue, it’s easy to overwhelm it with simultaneous clients who then get EAGAIN. If the clients do indeed immediately try again, they are successful. (An INET listening socket does not seem to have this problem, incidentally) All of this is a long-winded way of saying that I believe in lib-dict/dict-client.c:client_dict_connect() the call to net_connect_unix should be a call to net_connect_unix_with_retries() with a small timeout. It would also be useful for us if an INET socket could be used.

1 0

[Dovecot] int/ext mailserver
by Mr.Pine 15 Jan '14

15 Jan '14

I 'm using potfix-dovcote as an internal mail server(local.myco.com) and wan to run another potfix-dovcote as an external mail server (myco.com) on Internet.75% of my users should only work internally(no external mail) but the rest of users (25%)should be able to send mail to external network! These users have the same username on myco.com. I use smtp_generic_maps to map int username of these users to ext. one. For eg. All email send by test(a)local.myco.com map to test(a)myco.com. So anyone got these mails can reply them. I know that getmail is the tools that can get mails from users external mailbox and put them into int. mailbox. 1. I have a root access to ext mail server. But do not know my ext user password!. How can I use getmail to move ext mail to internal one?! 2. What is your idea about syncing users password in internal/external mail server?! I think its needed for getmail! 3. How can I restrict my internal users to send mail only internally!? I appreciated any help!! TNX

2 1