- dovecot - dovecot.org

Re: [Dovecot] make check error for Pigeonhole v0.3.4 for Dovecot v2.1.16
by Stephan Bosch 09 Apr '13

09 Apr '13

On 4/8/2013 8:16 PM, Giam Teck Choon wrote: > Hi, > > When I compile Pigeonhole v0.3.4 with Dovecot v2.1.16 until make check > output as below from my rpmbuild output: > > Test case: ./tests/extensions/mailbox/execute.svtest: > 1: Test 'MailboxExists - None exist' SUCCEEDED > 2: Test 'MailboxExists - Not all exist' SUCCEEDED > 3: Test 'MailboxExists - One exists' SUCCEEDED > 4: Test 'MailboxExists - All exist' SUCCEEDED > 5: Test ':Create' SUCCEEDED > PASS: 5 tests succeeded. > Test case: ./tests/extensions/date/basic.svtest: > 1: Test 'Defaults' SUCCEEDED > 2: Test 'Count' SUCCEEDED > 3: Test 'Invalid' SUCCEEDED > 4: Test 'Comparison' FAILED: date is invalid: 2009-07-23 > FAIL: 1 of 4 tests failed. > RPM build errors: > make: *** [tests/extensions/date/basic.svtest] Error 1 > error: Bad exit status from /var/tmp/rpm-tmp.CIcpqx (%check) > Bad exit status from /var/tmp/rpm-tmp.CIcpqx (%check) You're not the first one to notice: http://hg.rename-it.nl/dovecot-2.1-pigeonhole/rev/bc2126771d00 This is one of those genuine phase-of-the-moon kind of bugs :) Hmm, maybe I should make a new release for this problem already. Regards, Stephan.

2 1

[Dovecot] "No such file or directory" error setting up dict quota for mdbox
by ADRIAN SANTOS MARRERO 09 Apr '13

09 Apr '13

Hi, I've some troubles setting up the dict based quota plugin for mdbox, it always returns a error when lmtp tries to deliver an e-mail: Apr 8 12:40:16 mb07 dovecot: lmtp(3001, asmarre(a)ull.es) Error: fstat(/sharedfs/10.4.1.107/ull.es/54/asmarre/dovecot-quota.lock) failed: No such file or directory Apr 8 12:40:16 mb07 dovecot: lmtp(3001, asmarre(a)ull.es) Error: file dict commit: file_dotlock_open(/sharedfs/ 10.4.1.107/ull.es/54/asmarre/dovecot-quota) failed: No such file or directory Apr 8 12:40:16 mb07 dovecot: lmtp(3001, asmarre(a)ull.es) Error: dict quota: Quota update failed, it's now desynced In fact lmtp does create the dovecot-quota.lock file but it does not update the dovecot-quota file. If I run "doveadm quota recalc -u asmarre" it works and updates the dovecot-quota file. The version of dovecot that I'm using is 2.0.19 and the configuration is: # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-32-generic x86_64 Ubuntu 12.04.2 LTS mail_debug = yes mail_location = mdbox:%h mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = dict:User quota::file:%h/dovecot-quota quota_rule = *:storage=1G quota_warning = storage=95%% quota-warning 95 quota_warning2 = storage=85%% quota-warning 85 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)ull.es protocols = " imap lmtp sieve pop3" service lmtp { inet_listener lmtp { port = 24 } } service managesieve-login { inet_listener sieve_deprecated { port = 2000 } } service quota-warning { executable = script /opt/ccti/correo/buzones/quota_warning.sh unix_listener quota-warning { user = dovecot } user = dovecot } ssl_cert = </etc/ssl/certs/www.ull.es.chain.crt ssl_key = </etc/ssl/private/www.ull.es.key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota sieve zlib } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { pop3_no_flag_updates = yes pop3_uidl_format = %v.%u } Thanks in advance.

1 1

[Dovecot] LMTP Setup/Design Help Request
by Matthias Hofer 09 Apr '13

09 Apr '13

Hi altogether, I am switching from dbmail 2.2 to dovecot 2.1.7, and I was able to do a successful transition of IMAP. But I had a very hard time with receiving mail, and in the end -- after loads of reading and debugging -- I broke down and failed. This is why I am asking you for your kind help. I only have virtual users and have set mail_uid = dovemail mail_gid = dovemail For authentication, I simply use (for now) a flat file: passdb { driver = passwd-file args = scheme=PLAIN username_format=%u /etc/dovecot/mypasswd.file } # cat /etc/dovecot/mypasswd.file user1:{PLAIN}userpw1 user2:{PLAIN}userpw2 user3:{PLAIN}userpw3 And everything works fine with IMAP. I am completely domain-agnostic here. But I was not able to use this fine setup to receive mails with my postfix. I tried about 13 different configurations, some with considerable changes dovecot-config, the passwd-file or postfix, but I could not find a single variant working. In this situation, I would be very happy if somebody could give me a hint, which would be the prudent way to configure dovecot, LDA/LMTP and postfix based on the setup above. Thank you very much in advance, and have a great time, Matthias Hofer

3 2

[Dovecot] repeating dsync - questions
by Bob Gustafson 08 Apr '13

08 Apr '13

I'm moving/converting email from one system to another The source system is: Dual core x86_64 6GB memory 180 GB raid1 disks ext4 Fedora 9 Dovecot 1.0.15 Maildir format The destination system is: Dual core x86_64 2GB memory 1TB raid1 disks ext4 Fedora 18 Dovecot 2.1.15 sdbox format I am moving mail in a series of steps: 0) cd ( to mail user home directory ) mkdir Maildir 1) # rsync mail from source system (hoho4) to current (hoho0) time rsync -arv --times hoho4:/home/bobgus/Maildir/ /home/bobgus/Maildir/ This step takes about 37 minutes the first time 2) # dsync mirror/convert to sdbox format on current system time dsync mirror maildir:~/Maildir This step takes about 858 minutes (!!) Looking at -D messages indicates that dsync is deciding between duplicates much of the time. Looking at the results in a mail browser (Evolution), it seems fine, although the latest mails are not there. 3) # pick up more current mail - use same script as in 1) time rsync -arv --times hoho4:/home/bobgus/Maildir/ /home/bobgus/Maildir/ This step takes about 5 minutes although this varies depending on the amount of new mail. 4) # repeat the 2) dsync step time dsync mirror maildir:~/Maildir This is where things look peculiar. When I look at the directory of sdbox/mailboxes, I see duplicated directories [bobgus@hoho0 sdbox]$ cd mailboxes [bobgus@hoho0 mailboxes]$ ls Apple Mail To Do Apple Mail To Do_2a47983780615e5179600000ba55d82c Deleted Messages Deleted Messages_2847983780615e5179600000ba55d82c Drafts Drafts_2447983780615e5179600000ba55d82c Important Important_2947983780615e5179600000ba55d82c INBOX INBOX_1547983780615e5179600000ba55d82c Sent Sent_2547983780615e5179600000ba55d82c Trash Trash_2747983780615e5179600000ba55d82c The 2nd dsync step has not completed yet. I'm wondering whether the extra directory will be magically moved into the older directory. (This is unlikely because the file names are duplicated in the new directory) ------- Is this expected behavior? Are there command changes I can make to speed up the process? Eliminate the duplicate directories?

3 14

[Dovecot] dovecot 2 variables
by Pavel Dimow 08 Apr '13

08 Apr '13

Hi, I am trying to use separate configurations for ldap authentication thus providing users with the ability to only use username without domain part. Now according to documentation this should be possible http://wiki2.dovecot.org/AuthDatabase/PasswdFile but I keep getting error in my dovecot.log like this auth: Error: Can't open configuration file /etc/dovecot/%l/dovecot-ldap.conf: No such file or directory Why does dovecot does not expand %l to local ip address?

6 11

[Dovecot] dsync replication: quota counted twice
by Oli Schacher 08 Apr '13

08 Apr '13

Hi I enabled quota + warnings in my replication test setup and now whenever a mail gets delivered the quota is counted twice (probably due to both servers using the same mysql quota backend) and quota warnings are fired too early. After a doveadm quota recalc -u <username> the quota is correct again. How do I make dovecot only count the quota on the server where the mail was added originally? dovecot -n is the same as in my previous message to the list today http://www.dovecot.org/list/dovecot/2013-April/089558.html (thanks Timo for the hint in this thread btw, changing the permissions made the errors go away) Thanks Oli -- message transmitted on 100% recycled electrons

2 4

[Dovecot] Dovecot Configuration
by Andreas K. 08 Apr '13

08 Apr '13

Can somebody, please, point me in the right direction in finding a COMPLETE and EXACT definition of the Dovecot configuration hierarchy. In other words what configuration options exist both at the top level but also at each subconfiguration elements (ex. sections etc). While my C is a bit rusty, I can still make sense of source code and with a bit of effort I will figure it out. I have been going through the src/config/all-settings.c but still have large gaps. A hint in the right direction on how the config works might help clarify and speed things up. Thanks Andreas Kasenides

1 0

[Dovecot] Problem with fts lucene, on solaris 10
by Pigi 08 Apr '13

08 Apr '13

Hi all, I'm planning to migrate my courier-imap imap server to dovecot, but I'm experiencing a strange issue with fts-lucene plugin. Basically, every time I start a search, the log starts to write: Apr 05 19:30:53 indexer: Error: Indexer worker disconnected, discarding 1 requests for XXXXXX Apr 05 19:30:53 indexer-worker(XXXXX): Fatal: master: service(indexer-worker): child 809 killed with signal 11 (core not dumped) Apr 05 19:30:53 imap(XXXXXX): Error: indexer failed to index mailbox INBOX Apr 05 19:30:56 indexer-worker(XXXXX): Error: lucene index /home/XXXXX/Maildir/lucene-indexes: IndexWriter() failed (#1): Lock obtain timed out When trussing the indexer-worker pid I can see it ends with: ...SNIP... 527: brk(0x005A7840) = 0 527: brk(0x005AD840) = 0 527: pread64(16, " I G E N E R I C I < /".., 8170, 24514) = 8170 527: brk(0x005AD840) = 0 527: brk(0x005B3840) = 0 527: Incurred fault #5, FLTACCESS %pc = 0xFEBD6DDC 527: siginfo: SIGBUS BUS_ADRALN addr=0x005B50BA 527: Received signal #10, SIGBUS [default] 527: siginfo: SIGBUS BUS_ADRALN addr=0x005B50BA I cannot get a core, but either root ( user that is starting the dovecot ) than the user XXXXX have unlimited coresize XXXXX /home/XXXXXXX > ulimit -a time(seconds) unlimited file(blocks) unlimited data(kbytes) unlimited stack(kbytes) 8192 coredump(blocks) unlimited nofiles(descriptors) 256 vmemory(kbytes) unlimited root # ulimit -a core file size (blocks, -c) unlimited data seg size (kbytes, -d) unlimited file size (blocks, -f) unlimited open files (-n) 1024 pipe size (512 bytes, -p) 10 stack size (kbytes, -s) 8192 cpu time (seconds, -t) unlimited max user processes (-u) 29995 virtual memory (kbytes, -v) unlimited The mailbox for user XXXXXX ( Maildir stile, for speed-up migration ) has ~ 4000 messages. The search ends, but I think it don't use the lucene plugin ( it crashes ). I'm sure I'm missing something, but I can't really find what. All stuff have been self compiled, using standard flags as per "configure" scripts. Thanks for any hint. Pigi here the environment: uname -a SunOS puma 5.10 Generic_137137-09 sun4u sparc SUNW,Sun-Fire-V240 ( yes, I know, it's quite old ;) ) ======= dovecot --version 2.1.15 ======= doveconf -n # 2.1.15: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4u debug_log_path = /usr/local/dovecot/var/log/dovecot-debug.log disable_plaintext_auth = no first_valid_uid = 100 info_log_path = /usr/local/dovecot/var/log/dovecot-info.log log_path = /usr/local/dovecot/var/log/dovecot.log mail_location = maildir:~/Maildir mail_plugins = " fts fts_lucene" namespace { inbox = yes location = prefix = INBOX. separator = . } passdb { driver = pam } plugin { fts = lucene fts_lucene = whitespace_chars=@. } service imap-login { inet_listener imap { port = 144 } } service indexer-worker { drop_priv_before_exec = yes } service pop3-login { inet_listener pop3 { port = 112 } } ssl = no userdb { driver = passwd } ============= gcc -v Reading specs from /usr/sfw/lib/gcc/sparc-sun-solaris2.10/3.4.3/specs Configured with: /sfw10/builds/build/sfw10-patch/usr/src/cmd/gcc/gcc-3.4.3/configure --prefix=/usr/sfw --with-as=/usr/ccs/bin/as --without-gnu-as --with-ld=/usr/ccs/bin/ld --without-gnu-ld --enable-languages=c,c++ --enable-shared Thread model: posix gcc version 3.4.3 (csl-sol210-3_4-branch+sol_rpath) ============= clucene clucene-core-2.3.3.4 libstemmer_c libtextcat-2.2 openssl-1.0.1e

2 6

[Dovecot] checkpassword protocol
by dovecot.pkoch＠dfgh.net 08 Apr '13

08 Apr '13

Hi, I'm writing a checkpassword script in order to support our OTP token as a fallback for client certificate authentication. Here are two questions: 1) It seems to me that the username and the password will be delivered to my script both on file descriptor 3 and via the environment variables AUTH_USER and AUTH_PASSWORD. May I ignore file descriptor 3 and use the environment variables or may it happen that these variables will have differnet content from what is sent via fd 3? 2) There seems to be some undocumented interaction between dovecot and my script via file descriptor 4. Seems that whatever I write to fd 4 will show up in syslog (unless it contains newlines). Can I use this "feature" to send error messages from my script to dovecot? What data does dovecot expect on fd 4? Peter

3 5

[Dovecot] ssl_require_crl does not work as expected
by dovecot.pkoch＠dfgh.net 08 Apr '13

08 Apr '13

Hi I'm trying to use dovecot with client certificates. We produce our certificates with our on CA and we do NOT use certificate revocation lists. So I put "ssl_require_crl = no" into 10-ssl.conf. I did not find a solution neither in the wiki nor somewhere else, so I finally started to read the source. My impression is that openssl will always try to use CRLs. If "ssl_require_crl = no" dovecot will use CRLs but tries to ignore openssl error codes X509_V_ERR_UNABLE_TO_GET_CRL and X509_V_ERR_CRL_HAS_EXPIRED. This is done in ssl_verify_client_cert() in ssl-proxy-openssl.c line 871, namely i_info("proxy=%d, require_crl=%d, error=%d", proxy->client_proxy, proxy->set->ssl_require_crl, ctx->error ); if (proxy->client_proxy && !proxy->set->ssl_require_crl && (ctx->error == X509_V_ERR_UNABLE_TO_GET_CRL || ctx->error == X509_V_ERR_CRL_HAS_EXPIRED)) { /* no CRL given with the CA list. don't worry about it. */ preverify_ok = 1; } With my setup proxy->client_proxy is 0. I added the i_info() to check this and with this modification my syslog shows: Apr 7 13:01:16 d600 dovecot: master: Dovecot v2.1.15 starting up (core dumps disabled) Apr 7 13:01:21 d600 dovecot: auth: Debug: Loading modules from directory: /usr/dovecot/lib/dovecot/auth Apr 7 13:01:21 d600 dovecot: auth: Debug: auth client connected (pid=26175) Apr 7 13:01:22 d600 dovecot: imap-login: proxy=0, require_crl=0, error=3 Apr 7 13:01:22 d600 dovecot: imap-login: Invalid certificate: unable to get certificate CRL: /CN=...user cert.../C=DE Apr 7 13:01:22 d600 dovecot: imap-login: proxy=0, require_crl=0, error=3 Apr 7 13:01:22 d600 dovecot: imap-login: Invalid certificate: unable to get certificate CRL: /CN=...intermedieate cert.../C=DE Apr 7 13:01:22 d600 dovecot: imap-login: proxy=0, require_crl=0, error=3 Apr 7 13:01:22 d600 dovecot: imap-login: Invalid certificate: unable to get certificate CRL: /CN=Root-CA.../C=DE I dont know what the proxy-stuff is about so instead of ignoring CRL-related errors I tried to disable CRL-checking. I therefore commented out two lines in ssl_proxy_ctx_verify_client() in ssl-proxy-openssl.c line 1004, namely: // X509_STORE_set_flags(store, X509_V_FLAG_CRL_CHECK | // X509_V_FLAG_CRL_CHECK_ALL); This tells OpenSSL not to check CRLs. Of course in production code this should be done only if "ssl_require_crl = no". Similar code is contained in iostream-openssl-context.c, namely in routine ssl_iostream_ctx_verify_remote_cert() Is this a bug? Peter

2 1

[Dovecot] client limit and STARTTLS
by David Benfell 08 Apr '13

08 Apr '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, I'm migrating from one system to another. Both are Arch Linux, but copying the configurations and just modifying them for IP addresses and hostnames didn't work. Here's doveconf -n # 2.1.15: /etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=256 } is lower than required under max. load (3072) doveconf: Warning: service anvil { client_limit=256 } is lower than required under max. load (2051) # OS: Linux 3.8.4-1-ARCH x86_64 base_dir = /var/run/dovecot/ default_client_limit = 256 default_process_limit = 1024 login_trusted_networks = 10.8.0.0/16 127.0.0.0/8 mail_location = maildir:~/Maildir mail_max_userip_connections = 30 passdb { args = failure_show_msg=yes driver = pam } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </big/www/ssl/www.cybernude.org_publickey.pem ssl_key = </big/www/ssl/www.cybernude.org_privatekey.pem userdb { driver = passwd } Obvious first question: I can't figure out how to make dovecot happy with the client and process limits. I'm not terribly worried about going overboard here, though I have a very small number of users; the migration is to a much more capable system. But I would like to stop looking at the warning. It doesn't seem to matter what I put where--it keeps complaining. Second question: STARTTLS isn't working. What am I missing? Sorry if this is something that should be obvious; I'm fighting a similar battle with postfix and I'm being pushed around the bend while I really need to be working on other things. Thanks! -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJRXy6nAAoJELJhbl/uPb4SsTAQALIkmDwCwPlCNPtJr482lVNj vsNHX4TvTy0Xu4adtxFqJQM30EoEpu4A983CTm81jUFYKqDIBRJ3SAVOGf58lCQ1 uJhoyL0yhCaO9Zh7WZKdmhB+Jnek2+Rz2cpfOP4VseLL7Lg3OIwI4K/YiDAIcwnW do/tvuJEL6SDDcDA3gOjDJ7gkykg34tJ02nnG65Yau0y563FT7npXKFnwGSn1X0+ GTFUwpZx5xp90eUZBLoTBPcnXohKlWhYxa2POHgm7eraK8k+aD9/2zlThQL6/qIx HQKcSkZjB1CTgKGysp+msaR/gS5HiHILadB3opP8p7baGNG9jhifKE6LJavREH8p PsxxCpTnf8d+xbbJVeDx6cyz7NQ8rNLals1qtPLAY4F04Uh400FjJov/dJruBISZ QvASZPOtyZHuswUnSTtX22WOg2QIvyO5GyzqPGZ/0+MtgbtJxwizsyCTEFuTkq+r RvsW1cltVsDKCFCCcjrkRzWu+xbDrkX42tNUnhi4YSJ5wcKQMRiqQBTtyCYT88sy Ws9WtNaElOERxQeydmizvxIuFIoLapdPtfyRDSGoDOo0Cnq/QSIzvQNdOVbqqSBt hcIVDNHTw8O5UfOhhbo+YT8QIBwD8J/uPxLfV72ep7nQBJh8XOymHJXGtQR8+H4x 6aey6+bafQ/YHtuS63bz =4qNn -----END PGP SIGNATURE-----

4 4

[Dovecot] v2.2.rc6 released
by Timo Sirainen 08 Apr '13

08 Apr '13

http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc6.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc6.tar.gz.sig Some more fixes to bugs I noticed today while trying out some new things in production. Note especially the replicator-doveadm socket change, see http://wiki2.dovecot.org/Replication for how to configure it. This change allowed local replicator to notify the remote replicator about user being synced. * replicator: Don't create replicator-doveadm socket by default. This way doveadm replicator commands don't accidentally start an unconfigured replicator server. + replicator: Have remote dsync notify the remote replicator that a user was just synced. This way the replicators are kept roughly in sync. + Added ssl_client_ca_file to specify the CA certs as a file. This is needed (instead of ssl_client_ca_dir) in RedHat-based systems. + Added "doveadm fs" commands, mainly to debug lib-fs backends. - Mailbox list indexes weren't using proper file permissions based on the root directory.

2 2

[Dovecot] mdbox and folders containing both messages and sub-folders
by Rich Wales 08 Apr '13

08 Apr '13

I've got Dovecot 2.2r5 (Ubuntu package version 2:2.2.0~rc5-0~auto+1 from the "testing-auto/dovecot-2.2" repository on xi.rename-it.nl) running on a brand-new Ubuntu 12.04.2 server. I'm trying to configure Dovecot (using the "mdbox" mailbox format) to allow folders to contain both messages and sub-folders. However, it's not working consistently. I need to have folders with both messages and sub-folders because I'm trying to migrate mail from an existing (but soon-to-be-retired) Cyrus server, and the existing body of mail has folders of this sort. I'm currently using the following configuration line: mail_location = mdbox:~/mdbox:DIRNAME=.indexes:INDEX=~/mdbox/indexes and am using the Larch program to do an IMAP-to-IMAP copy of one of my family member's mail from the old Cyrus server to the new Dovecot server. When I examine the "mailboxes" directory tree, I see some directories that (correctly) contain both the renamed ".indexes" directory and also directories for IMAP subfolders. However, the Larch output is showing many errors of the form "mailbox cannot contain messages", and some of the messages could not be migrated because of this problem. Am I doing something wrong? Or is the "folders containing both messages and sub-folders" feature simply broken for the "mdbox" format -- meaning presumably that I'll be forced either to use the Maildir format, or else abandon Dovecot entirely and install Cyrus on my new mail server instead? Rich Wales richw(a)richw.org

7 14

[Dovecot] autocreate mailbox but no sub folders
by Arnaud Abélard 08 Apr '13

08 Apr '13

Hello, We have been using lda_mailbox_autocreate to avoid to intialize empty mailboxes upon account creations. This does the job allright except that dovecot-lda is also allowed to autocreate sub folders which is a problem when using addresses extensions (adress+folder(a)domain.tld) It's easy for a malicious user to flood a mailbox with tons of subfolders. Is there a way to tell dovecot-lda it can only create the initial mailbox and maybe some special folders but nothing else? Thanks, Arnaud -- Arnaud Abélard jabber: arnaud.abelard(a)univ-nantes.fr / twitter: ArnY Administrateur Système DSI Université de Nantes -

2 1

[Dovecot] replicator/dsync over tcp
by Michael Grimm 08 Apr '13

08 Apr '13

Hi -- I am testing replicator/dsync over tcp, and I did run into some issues. First of all I did need to extend http://wiki2.dovecot.org/Replication to get dsync over tcp running without ssl: | # dsync over tcp default port | # | doveadm_port = 12345 | service doveadm { | # running dsync over tcp and using ssl | # added-->| user = vmail | inet_listener { added-->| address = 1.2.3.4 | port = 12345 | # ssl = yes | } | } | plugin { | # this host replicates to remote host | # | mail_replica = tcp:SERVER-A.TLD That didn't work ... | dovecot: doveadm(test): Error: doveadm_password not set, can't authenticate to remote server ... thus, I needed to add: added-->| local 1.2.3.4 { added-->| # password for client authentication by doveadm server added-->| # added-->| doveadm_password = secret added-->| # allow client to only use specified list of commands (default is all): added-->| # added-->| #doveadm_allowed_commands = added-->| } 1. Question: may one include "secret" from a file? Well, that runs like a charm! Now, I did try to add ssl by activating "ssl = yes" in 'service doveadm' (see above) and adding ... | # used by replicator/dsync over tcp | # | ssl_client_ca_dir = /<path-to>/ssl/certs ... and ... | mail_replica = tcps:SERVER-A.TLD But, this didn't work (logfile at remote server): | dovecot: doveadm(test): Invalid certificate: self signed certificate: /OU=dovecot server/CN=OTHER-NAME.TLD/emailAddress=postmaster(a)OTHER-NAME.TLD | dovecot: doveadm(test): Error: SERVER-A.TLD: Received invalid SSL certificate | dovecot: doveadm(test): Error: sync: Disconnected from remote The OTHER-NAME.TLD is served by my additional settings used by my MUAs: | ssl_cert = </<path-to>/ssl/certs/OTHER-NAME.TLD.pem | ssl_key = </<path-to>/ssl/private/OTHER-NAME.TLD.pem I did supply SERVER-A.TLD certs and private certificates at both servers as well, but dovecot seems to use those of OTHER-NAME.TLD for replicator/dsync instead :-( 2. Question: May I config the certificate that should be used for replicator/dsync and that might be different from those used by my MUAs (other then pointing to '/<path-to>/ssl/certs')? I am quite sure that I screwed my config somehow, but I cannot find the cause. Thus, someone? Thanks, and with kind regards, Michael

2 4

[Dovecot] v2.1.16 released
by Timo Sirainen 07 Apr '13

07 Apr '13

http://dovecot.org/releases/2.1/dovecot-2.1.16.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.16.tar.gz.sig + Added quota-status policy service for Postfix + Added "doveadm batch" command to run multiple commands before moving onto the next user (useful only with -A and -u <usermask>) + Added forwards compatibility for v2.2 index files - mdbox: Index rebuilding crashed in some situations - Fixed a race condition with setting \Recent flags - Fixed a crash when decoding a specific message (decoding is done for SEARCH TEXT/BODY and with full text search indexing, so this couldn't fully DoS a user)

7 24

Re: [Dovecot] [Dovecot-de] Dovecot Quota via policy service abfragen
by Andreas Meyer 07 Apr '13

07 Apr '13

Ralf Hildebrandt <Ralf.Hildebrandt(a)charite.de> wrote: > * Andreas Meyer <anmeyer(a)anup.de>: > > > Habe ich jetzt neben quota_grace = 10%% auch rausgenommen. > > Gut. > > > Apr 7 19:38:35 delta postfix/smtpd[23037]: connect from p54B32BC9.dip.t-dialin.net[84.179.43.201] > > Apr 7 19:38:36 delta postfix/smtpd[23037]: setting up TLS connection from p54B32BC9.dip.t-dialin.net[84.179.43.201] > > Apr 7 19:38:36 delta postfix/smtpd[23037]: TLS connection established from p54B32BC9.dip.t-dialin.net[84.179.43.201]: TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits) > > Apr 7 19:38:37 delta postfix/smtpd[23037]: NOQUEUE: client=p54B32BC9.dip.t-dialin.net[84.179.43.201], sasl_method=CRAM-MD5, sasl_username=anmeyer(a)anup.de > > Apr 7 19:39:01 delta postfix/smtpd[23139]: connect from localhost[127.0.0.1] > > Apr 7 19:39:01 delta postfix/smtpd[23139]: 9C1BA1B30FB0: client=localhost[127.0.0.1] > > Apr 7 19:39:01 delta postfix/cleanup[23142]: 9C1BA1B30FB0: message-id=<20130407193818.62d8c328(a)itxnew.bitcorner.intern> > > Apr 7 19:39:01 delta postfix/qmgr[22234]: 9C1BA1B30FB0: from=<anmeyer(a)anup.de>, size=1492149, nrcpt=1 (queue active) > > Apr 7 19:39:01 delta postfix/smtpd[23139]: disconnect from localhost[127.0.0.1] > > Apr 7 19:39:02 delta postfix/smtpd[23037]: disconnect from p54B32BC9.dip.t-dialin.net[84.179.43.201] > > Apr 7 19:39:02 delta postfix/pipe[23143]: 9C1BA1B30FB0: to=<miles(a)anup.de>, relay=dovecot, delay=0.56, delays=0.33/0/0/0.23, dsn=4.3.0, status=deferred (temporary failure) > > Na dann sind deine Restrictions falsch und die Mail wird "OK"'ed bevor > der Policy Server gefragt wird. > > > Ich habe warn_if_reject check_policy_service inet:127.0.0.1:12340 > > ziemlich am Anfang der recipient_restrictions gesetzt nachdem ich > > den check am Ende hatte noch nach postgrey. > > > > smtpd_recipient_restrictions = > > ---> hier einbauen <--- > ist ja nur zum Test > > > check_sender_access hash:/etc/postfix/access_sender, > > permit_mynetworks, > > permit_sasl_authenticated, > > reject_invalid_helo_hostname, > > reject_unlisted_recipient, > > warn_if_reject check_policy_service inet:127.0.0.1:12340 > > reject_unknown_sender_domain, > > check_sender_access pcre:/etc/postfix/umlaute.pcre, > > check_recipient_access pcre:/etc/postfix/umlaute.pcre, > > reject_unauth_destination, > > reject_rbl_client bl.spamcop.net, > > reject_rbl_client zen.spamhaus.org, > > check_client_access cidr:/etc/postfix/client.cidr, > > check_policy_service inet:127.0.0.1:10023 That did the trick! The order of the recipient_restricitons was wrong. Apr 7 20:24:55 delta postfix/smtpd[23806]: connect from p54B32BC9.dip.t-dialin.net[84.179.43.201] Apr 7 20:24:55 delta postfix/smtpd[23806]: setting up TLS connection from p54B32BC9.dip.t-dialin.net[84.179.43.201] Apr 7 20:24:56 delta postfix/smtpd[23806]: TLS connection established from p54B32BC9.dip.t-dialin.net[84.179.43.201]: TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits) Apr 7 20:24:56 delta postfix/smtpd[23806]: NOQUEUE: reject: RCPT from p54B32BC9.dip.t-dialin.net[84.179.43.201]: 552 5.2.2 <miles(a)anup.de>: Recipient address rejected: Quota exceeded (mailbox for user is full); from=<anmeyer(a)anup.de> to=<miles(a)anup.de> proto=ESMTP helo=<itxnew.bitcorner.intern> Apr 7 20:24:56 delta postfix/smtpd[23806]: lost connection after RCPT from p54B32BC9.dip.t-dialin.net[84.179.43.201] Apr 7 20:24:56 delta postfix/smtpd[23806]: disconnect from p54B32BC9.dip.t-dialin.net[84.179.43.201] The MUA does not get rid of the mail, when it would exceed the quota. But now the next problem. I cannot send this mail and get the following with smtpd_recipient_restrictions = check_policy_service inet:127.0.0.1:12340 check_sender_access hash:/etc/postfix/access_sender, permit_mynetworks, permit_sasl_authenticated, .... Apr 7 20:31:43 delta postfix/smtpd[23820]: connect from p54B32BC9.dip.t-dialin.net[84.179.43.201] Apr 7 20:31:44 delta postfix/smtpd[23820]: setting up TLS connection from p54B32BC9.dip.t-dialin.net[84.179.43.201] Apr 7 20:31:45 delta postfix/smtpd[23820]: TLS connection established from p54B32BC9.dip.t-dialin.net[84.179.43.201]: TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits) Apr 7 20:31:46 delta postfix/smtpd[23820]: warning: problem talking to server 127.0.0.1:12340: Success Apr 7 20:31:46 delta postfix/smtpd[23820]: NOQUEUE: reject: RCPT from p54B32BC9.dip.t-dialin.net[84.179.43.201]: 451 4.3.5 Server configuration problem; from=<anmeyer(a)anup.de> to=<dovecot(a)listen.jpberlin.de> proto=ESMTP helo=<itxnew.bitcorner.intern> Apr 7 20:31:46 delta postfix/smtpd[23820]: lost connection after RCPT from p54B32BC9.dip.t-dialin.net[84.179.43.201] Apr 7 20:31:46 delta postfix/smtpd[23820]: disconnect from p54B32BC9.dip.t-dialin.net[84.179.43.201] the mail is not sent out. I deactivated the check to get sent mail sent. Andreas

1 0

[Dovecot] IDLE and inactivity
by Andreas Meyer 07 Apr '13

07 Apr '13

Good day! Apr 07 10:59:40 imap(anmeyer(a)anup.de): Info: Disconnected: Disconnected in IDLE in=725 out=2546 Apr 07 10:59:59 imap(anmeyer(a)anup.de): Info: Disconnected for inactivity in=952 out=25789 Please someone explain to me the IDLE state and the inactivity state an what the numbers at in= and out= means! Andreas

2 1

Re: [Dovecot] [Dovecot-de] Dovecot Quota via policy service abfragen
by Andreas Meyer 07 Apr '13

07 Apr '13

Hallo Waffenmeister! Ralf Hildebrandt <Ralf.Hildebrandt(a)charite.de> wrote: > > Apr 7 14:07:52 delta postfix/qmgr[19078]: 1D8921B31260: from=<anmeyer(a)anup.de>, size=1492149, nrcpt=1 (queue active) > > Apr 7 14:07:53 delta postfix/pipe[19091]: 1D8921B31260: to=<miles(a)anup.de>, relay=dovecot, delay=2542, delays=2542/0.01/0/0.29, dsn=4.3.0, status=deferred (temporary failure) > > Ich sehe hier nur einen Fehler vom transport "dovecot". > > > plugin { > > quota = maildir:User quota > > quota_grace = 10%% > > quota_rule = *:storage=500MB > > quota_rule2 = Trash:storage=+10%% > > > > quota_status_success = DUNNO > > quota_status_nouser = DUNNO > > quota_status_overquota = 552 5.2.2 Mailbox is full / Mailbox ist voll > > Lass mal das quota_status_overquota feld weg. Habe ich jetzt neben quota_grace = 10%% auch rausgenommen. Apr 7 19:38:35 delta postfix/smtpd[23037]: connect from p54B32BC9.dip.t-dialin.net[84.179.43.201] Apr 7 19:38:36 delta postfix/smtpd[23037]: setting up TLS connection from p54B32BC9.dip.t-dialin.net[84.179.43.201] Apr 7 19:38:36 delta postfix/smtpd[23037]: TLS connection established from p54B32BC9.dip.t-dialin.net[84.179.43.201]: TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits) Apr 7 19:38:37 delta postfix/smtpd[23037]: NOQUEUE: client=p54B32BC9.dip.t-dialin.net[84.179.43.201], sasl_method=CRAM-MD5, sasl_username=anmeyer(a)anup.de Apr 7 19:39:01 delta postfix/smtpd[23139]: connect from localhost[127.0.0.1] Apr 7 19:39:01 delta postfix/smtpd[23139]: 9C1BA1B30FB0: client=localhost[127.0.0.1] Apr 7 19:39:01 delta postfix/cleanup[23142]: 9C1BA1B30FB0: message-id=<20130407193818.62d8c328(a)itxnew.bitcorner.intern> Apr 7 19:39:01 delta postfix/qmgr[22234]: 9C1BA1B30FB0: from=<anmeyer(a)anup.de>, size=1492149, nrcpt=1 (queue active) Apr 7 19:39:01 delta postfix/smtpd[23139]: disconnect from localhost[127.0.0.1] Apr 7 19:39:02 delta postfix/smtpd[23037]: disconnect from p54B32BC9.dip.t-dialin.net[84.179.43.201] Apr 7 19:39:02 delta postfix/pipe[23143]: 9C1BA1B30FB0: to=<miles(a)anup.de>, relay=dovecot, delay=0.56, delays=0.33/0/0/0.23, dsn=4.3.0, status=deferred (temporary failure) > > Also ich vermisse das reject-warning von postfix und es hat auch nicht den > > Anschein, dass postfix den Status der Quota bei dovecot über port 12340 > > abfrägt. > > Naja, vielleicht steht es an der falschen Stelle in den Restrictions! > Das muss passieren BEVOR irgendwas ein OK zurückgibt. Ich habe warn_if_reject check_policy_service inet:127.0.0.1:12340 ziemlich am Anfang der recipient_restrictions gesetzt nachdem ich den check am Ende hatte noch nach postgrey. smtpd_recipient_restrictions = check_sender_access hash:/etc/postfix/access_sender, permit_mynetworks, permit_sasl_authenticated, reject_invalid_helo_hostname, reject_unlisted_recipient, warn_if_reject check_policy_service inet:127.0.0.1:12340 reject_unknown_sender_domain, check_sender_access pcre:/etc/postfix/umlaute.pcre, check_recipient_access pcre:/etc/postfix/umlaute.pcre, reject_unauth_destination, reject_rbl_client bl.spamcop.net, reject_rbl_client zen.spamhaus.org, check_client_access cidr:/etc/postfix/client.cidr, check_policy_service inet:127.0.0.1:10023 Andreas

1 0

[Dovecot] v2.2.rc5 released
by Timo Sirainen 07 Apr '13

07 Apr '13

http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc5.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc5.tar.gz.sig One more API change that required also a Pigeonhole modification. A few other random fixes. I'm planning on making v2.2.0 release on Monday. Please test before that. :)

7 7

Re: [Dovecot] MOSTLY SOLVED: Re: client limit and STARTTLS
by Reindl Harald 07 Apr '13

07 Apr '13

Am 07.04.2013 12:36, schrieb David Benfell: > On 04/07/2013 03:15 AM, Reindl Harald wrote: >> Am 06.04.2013 10:09, schrieb David Benfell: >>> So I changed it again: >>> >>> default_process_limit = 128 default_client_limit = 512 >>> >>> And now it seems to be fine. But I'm mystified because what you >>> say is the case on your system, that is, that the process limit >>> needs to be greater than the client limit, is what I would >>> expect: wouldn't each client require at least one process? > >> no, 512x128 = 65536 connections each process can serve >> default_client_limit clients > > Thanks a million! I had no idea that was how it worked. I would think > that 65536 would be enough. ;-) http://wiki2.dovecot.org/LoginProcess High-performance mode: It works by using a number of long running login processes, each handling a number of connections. This loses much of the security benefits of the login process design, because in case of a security hole (in Dovecot or SSL library) the attacker is now able to see other users logging in and steal their passwords, read their mails, etc. Default client_limit * process_limit = 1000*100 = 100k connections vsz_limit should be increased to avoid out of memory errors, especially if you're using SSL/TLS.

1 0

[Dovecot] The sieve_extprograms plugin included in main Pigeonhole 0.4 source tree
by Stephan Bosch 07 Apr '13

07 Apr '13

Hi, I think the sieve_extprograms is mature enough for an initial release and that is why I've included the sieve_extprograms plugin into the main Pigeonhole v0.4 source tree. It is still a plugin, but is no longer provided as a separate package. This should make things easier. It will be released along with Pigeonhole v0.4.0. Regards, Stephan.

1 0

Re: [Dovecot] script to detect dictionary attacks
by Stephen Davies 07 Apr '13

07 Apr '13

Here is the simplex script that I use to filter attacking sites. I should be easy to add your extra bits (email etc). Cheers, Stephen #! /bin/sh d=`date +"%b %d"` grep "$d" /var/log/mail/info.log|grep ruleset=check_rcp | gawk '{split($0,q,/[\[\]]/);print "/sbin/iptables -A INPUT -s " q[4] "/32 -j DROP"}' | sort -u > /tmp/fw$$ #reset iptable to base /etc/rc.d/rc.fw > /dev/null 2>&1 #add new filter(s) . /tmp/fw$$ rm -f /tmp/fw$$ -- ============================================================================= Stephen Davies Consulting P/L Phone: 08-8177 1595 Adelaide, South Australia. Mobile:040 304 0583 Records & Collections Management.

1 0

[Dovecot] Released Pigeonhole v0.3.4 for Dovecot v2.1.16
by Stephan Bosch 06 Apr '13

06 Apr '13

Hello Dovecot users, Much time passed since I last released a new Pigeonhole, so quite a few unreleased fixes were pending until now. Development of new features is shifted to the upcoming Pigeonhole v0.4 for Dovecot v2.2. I intend to release v0.4.0 shortly after Dovecot v2.2.0. Changelog v0.3.4: * Changed error handling to be less of a nuisance for administrators. Strictly user-caused errors are only reported in user log. Some errors are logged as info instead. * Sieve: Changed behavior of redirect in case of a duplicate message delivery or a mail loop. If a duplicate is detected the implicit keep is canceled, as though the redirect was successful. This prevents getting local deliveries. The original SMTP recipient is used when it is available to augment the entry in the LDA duplicate database. This way, duplicates are only detected when (initially) addressed to the same recipient. + Sieve vnd.dovecot.duplicate extension: added new features to the duplicate test, making it possible to manually compose the key value for duplicate checking. This extension is in the process of being standardized: https://tools.ietf.org/html/draft-bosch-sieve-duplicate-01 + Sieve date extension: generate warning when invalid date part is specified. - Sieve editheader extension: fixed crash occurring when addheader :last was used. - Sieve include extension: fixed missing error cleanup that caused a resource leak. - Sieve vacation extension: fixed determination of From: address for when sieve_vacation_dont_check_recipient is active. - Sieve tools: the -D option wasn't enabled and documented for all tools. - Sieve dict script storage: fixed potential segfault occurring when dict initialization fails. - ManageSieve: fixed bug in skipping of CRLF at end of AUTHENTICATE command. - ManageSieve: fixed handling of unknown commands pre-login. - Fixed compile on Mageia Linux. The release is available as follows: http://www.rename-it.nl/dovecot/2.1/dovecot-2.1-pigeonhole-0.3.4.tar.gz http://www.rename-it.nl/dovecot/2.1/dovecot-2.1-pigeonhole-0.3.4.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

[Dovecot] password encryption
by Jim Pazarena 06 Apr '13

06 Apr '13

I have just come to the realization that password encryption using the crypt function in linux, ONLY USES THE FIRST 8 CHARS. I have written routines using crypt allowing 16+ chars, and find that anything past 8 is ignored. Wow. Is there a way around this that can be used in dovecot, as well as encryption routines for an email front end? (not system users). It's the integration with dovecot which is the most important.

4 3

[Dovecot] not showing subfolders on INBOX
by David Benfell 05 Apr '13

05 Apr '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Apologies if a duplicate message. I initially sent the following from a non-subscribed email address (my usual address, but not the one that works when I'm having trouble with mail). First, I'm pretty sure I screwed up something with dovecot. The symptom appears in both thunderbird and mutt. I'm moving my server from a VPS to a dedicated server. *Both* are Arch Linux systems. Here's the dovecot -n output: # 2.1.15: /etc/dovecot/dovecot.conf # OS: Linux 3.8.4-1-ARCH x86_64 base_dir = /var/run/dovecot/ default_client_limit = 3000 default_process_limit = 1000 login_trusted_networks = 10.8.0.0/16 127.0.0.0/8 mail_location = maildir:~/Maildir mail_max_userip_connections = 30 passdb { args = failure_show_msg=yes driver = pam } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </home/www/ssl/www.cybernude.org_publickey-apache.pem ssl_key = </home/www/ssl/www.cybernude.org_privatekey.pem userdb { driver = passwd } One detail, the kernel version, is different from what is indicated above. munich is the new system; atlanta is the old one: Linux munich.parts-unknown.org 3.8.4-1-ARCH #1 SMP PREEMPT Wed Mar 20 22:10:25 CET 2013 x86_64 GNU/Linux Linux atlanta.parts-unknown.org 3.6.10-1-ARCH #1 SMP PREEMPT Tue Dec 11 09:40:17 CET 2012 x86_64 GNU/Linux I literally copied this configuration, so it's the same on both systems. But on the new system, I'm not seeing subfolders in INBOX. I also copied my Maildir from the old system to the new system, so it should--I thought, anyway--be okay. What did I do wrong? And how should I fix it? Thanks! -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJRXhA2AAoJELJhbl/uPb4STkEP/2Nx3VPh0HkZW6dN4wpwyGgG MklUzErLiA8+BM+gsEzSTASq+wWkmet9/9gSSYhgRhTbaamw+ymY+VvRzjUuMOE/ Bi1Q1QfOSe2H0AymMmO8ClQX0KeKZruf+a3ezuxL/ccYeFAoF3UmlsV5JuXzh/yS 62TknVV/mnpmikTTADSF1YkCsv11pErAPCfuXS18C1C4RivylpXdnDKANCrK1/CT E00Je3uvTzc7ed7I6QuEzZyFT7CQP49DJpYIbP7570vLHl7zFJvYSfg3IWBRqFVn iiPqQ2h9pbsxM3D4ucvuiDBM17556ep80+PXAWmc/SNEH8ArGWOGqJTjVNSnqyqP j27M15F/G68kjqp/VIaJzii6/c6C4PsB8dV5vDG/rxKmpAGr6gWrv6FZ+hkmhdQn /S+AcOeIwrqeWPEWLM4OtEt3hqjvvHtstkuw2M3iUdDdraWbzPLAT2aX2Xj7zrbc h7yRBM5G74fKXZhm3iC+6I3YeIjrzy4FGj7IxP1ubhVvbGwBInBc2h0nMX7+u/xV xTwqKomuQh4nBiZNdZ+YMkaHvN5GaiYEiO8ZOAceZZ9OYuuGg8QodsaHetWkJAcL x6SkgeYmwXTRsOaXulSdUAsLqDlaz5pV0daairRee31pJ5jOdJAPYFiDKvYFXfQN FetIUFxuPYWUxS37WpI3 =pI8L -----END PGP SIGNATURE-----

2 2

[Dovecot] manually updating dovecot 1 config to dovecot 2
by Felipe Gasper (cPanel) 05 Apr '13

05 Apr '13

Is there documentation somewhere on how to update a dovecot 1 configuration file to dovecot 2’s preferred formats? We’re looking to provide Dovecot 2 with cPanel; having that documentation would help us update the config file templates that we ship. Thank you! -- Felipe Gasper cPanel, Inc.

3 4

[Dovecot] doveadm mailbox list/stats etc. and shared mailboxes/ACLs
by Lutz Preßler 05 Apr '13

05 Apr '13

Hello, 2.2.0rc3: host:~# doveadm mailbox list -u testuser INBOX INBOX.test INBOX.bla INBOX.bla.blubb INBOX.shared INBOX.virtual INBOX.shared.user1 INBOX.shared.user1.privat INBOX.shared.user1.test INBOX.shared.user1.test.test2 INBOX.shared.user1.Trash INBOX.shared.user1.in2009 [... all mailboxes of user1] Only user1.test and user1.test.test2 have ACLs that allow testuser to access them. host:~# doveadm mailbox status -u testuser all INBOX.shared.user1.privat INBOX.shared.user1.privat messages=37 recent=0 uidnext=70 uidvalidity=1060291494 unseen=7 highestmodseq=1 vsize=1618757 guid=9a71cb399c249d4ce10e0000c93908ca Access with search and fetch (and probably any other doveadm command) is possible, too. Is this how it's supposed to work? Commands in testuser IMAP session respects ACLs. Lutz

2 3

[Dovecot] v2.2.rc4 released
by Timo Sirainen 05 Apr '13

05 Apr '13

http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc4.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc4.tar.gz.sig A lot of small random fixes. Some last minute major cleanups/fixes to lib-http and lib-ssl-iostream error handling, which makes them much easier to debug if something goes wrong (so e.g. if https site has invalid certificate, the caller gets error message saying that, including the part of the cert that couldn't be validated). I don't have anything important left in my v2.2 TODO. It passes all my tests. So I'm hoping for v2.2.0 release any day now. + Added "doveadm replicator" commands - Larger changes to lib-http and lib-ssl-iostream error handling. The API caller can now get the exact error message as a string. - Various bugfixes to LDAP changes in rc3

1 0

[Dovecot] replicator process
by Lutz Preßler 04 Apr '13

04 Apr '13

Hello Timo, 2.2rc3: replication unconfigured (no "replica" in doveconf -n output), # doveadm replicator status starts the dovecot/replicator process, which keeps running, leading to "sync: User has no mail_replica in userdb" errors for each user every 5 minutes. Same after "doveadm replicator replicate some-even-nonexisting-user". Lutz

2 1

[Dovecot] Outlook 2013 - mounting folders with XLIST
by Hajo Locke 04 Apr '13

04 Apr '13

Hello, i do some tests with dovecot 2.1.7 and activated a default special-use config. To get it work with outlook 2013, i also added XLIST to imap capability string. basically this is working. is somebody also using special-use folders successful with outlook 2013? In my understanding of special-use extension, every client should map its own local folders to corresponding folders on server. Real Name of folder on server should be irrelevant, if a folder "aaa" is marked as \Sent, then a Client should show this folder as "Sent" "Sent Items" or "Gesendete Objekte", just like local preferences. Outlook 2013 seems to work slightly different. Outlook 2013 seems to really use the marked folder on server regardless of local preferences. If i mark Drafts as \Drafts, outlook 2013 will use this for drafts even in german environment. Did somebody other notice this behaviour? Is it possible to adjust some settings in outlook 2013 fo fix this? Otherwise the serveradmin is forced to provide special-use folders per every single user and let them choose how his folders should be named? What experience did others make who use special-use folders in productive environment? Thanks, Hajo

3 15

[Dovecot] v2.2 getting NULL pointer reference with shared namespace in mailbox_tree?
by Walter Steiner 04 Apr '13

04 Apr '13

I stumbled over another segmentation fault: # /m/sw/dc/a/libexec/dovecot/imap -u cyrtest1 Debug: Loading modules from directory: /m/sw/dc/2.2-20130322/lib/dovecot Debug: Module loaded: /m/sw/dc/2.2-20130322/lib/dovecot/lib15_notify_plugin.so Debug: Module loaded: /m/sw/dc/2.2-20130322/lib/dovecot/lib20_mail_log_plugin.so Debug: auth input: cyrtest1(a)iai.uni-bonn.de uid=13004 gid=13004 home=/m/d/user/cyrtest1 Debug: changed username to cyrtest1(a)iai.uni-bonn.de Debug: Effective uid=13004, gid=13004, home=/m/d/user/cyrtest1 Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:/m/d/imap/mbox/m/cyrtest1 Debug: fs: root=/m/d/imap/mbox/m/cyrtest1, index=, indexpvt=, control=, inbox=, alt= Debug: Namespace user: type=shared, prefix=user/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=yes location=sdbox:/m/d/imap/mbox/m/%n Debug: shared: root=/var/run/dovecot/, index=, indexpvt=, control=, inbox=, alt= * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in as cyrtest1(a)iai.uni-bonn.de . namespace * NAMESPACE (("" "/")) (("user/" "/")) NIL . OK Namespace completed. . lsub "" * Segmentation fault (core dumped) I'm not familiar with gdb / debugging. gdb bt full is following but I'm afraid line numbers are not yet correct, are they? Compiler is gcc 4.5.2 output of make command while building dovecot does not show "-O"... (also tried "-O0" before ... as mentioned on some web pages) file src/lib-storage/mailbox-tree.c function mailbox_tree_traverse() line number 103: for (name = path;; path++) { if (*path != tree->separator && *path != '\0') ^^^^^^^^^^^^^^^ and tree is 0x0 #0 0xffff80ffb73d91cb in mailbox_tree_traverse (tree=0x0, path=0x472830 "user", create=false, created_r=0xffff80ffbffff187) at mailbox-tree.c:41 41 i_assert(mailbox_node_size >= sizeof(struct mailbox_node)); (gdb) bt full #0 0xffff80ffb73d91cb in mailbox_tree_traverse (tree=0x0, path=0x472830 "user", create=false, created_r=0xffff80ffbffff187) at mailbox-tree.c:41 node = (struct mailbox_node **) 0x10 parent = (struct mailbox_node *) 0x0 name = 0x472830 "user" str = (string_t *) 0x44d658 #1 0xffff80ffb73d9417 in mailbox_tree_lookup (tree=0x0, path=0x472830 "user") at mailbox-tree.c:41 _data_stack_cur_id = 5 node = (struct mailbox_node *) 0x0 created = false #2 0xffff80ffb73f01c6 in mailbox_list_set_subscription_flags (list=0x46c4d0, vname=0x472830 "user", flags=0x4725e8) at mailbox-list-subscriptions.c:47 node = (struct mailbox_node *) 0xffff80ffbf760030 #3 0xffff80ffb73eb4bc in mailbox_list_ns_prefix_return (ctx=0x472540, ns=0x46c400, has_children=false) at mailbox-list-iter.c:98 subs_ns = (struct mail_namespace *) 0x46c400 box = (struct mailbox *) 0xffff80ffb73ecae8 existence = 4294934783 ret = 0 __FUNCTION__ = "mailbox_list_ns_prefix_return" #4 0xffff80ffb73eb9d8 in mailbox_list_ns_iter_try_next (_ctx=0x472540, info_r=0xffff80ffbffff2c8) at mailbox-list-iter.c:98 ctx = (struct ns_list_iterate_context *) 0x472540 ns = (struct mail_namespace *) 0x3 info = (const struct mailbox_info *) 0x0 error = MAIL_ERROR_NONE errstr = 0x472540 "(&G" has_children = false __FUNCTION__ = "mailbox_list_ns_iter_try_next" #5 0xffff80ffb73ebb8d in mailbox_list_ns_iter_next (_ctx=0x472540) at mailbox-list-iter.c:98 info = (const struct mailbox_info *) 0x0 #6 0xffff80ffb73ec7f7 in mailbox_list_iter_next_call (ctx=0x472540) at mailbox-list-iter.c:98 info = (const struct mailbox_info *) 0x63207361206e6920 set = (const struct mailbox_settings *) 0x646567676f4c205d #7 0xffff80ffb73ecad8 in mailbox_list_iter_next (ctx=0x472540) at mailbox-list-iter.c:98 _data_stack_cur_id = 4 info = (const struct mailbox_info *) 0xffff80ffbf770030 #8 0x000000000041ac70 in cmd_list_continue (cmd=0x46d900) at ../../src/lib/array.h:197 ctx = (struct cmd_list_context *) 0x46d9f8 info = (const struct mailbox_info *) 0x41ae1a flags = 0 str = (string_t *) 0x44d410 mutf7_name = (string_t *) 0x44d560 name = 0xffff80ffbffff3a0 "0ôÿ¿ÿ\200ÿÿ!µA" ret = 0 #9 0x000000000041b521 in cmd_list_full (cmd=0x46d900, lsub=true) at ../../src/lib/array.h:197 client = (struct client *) 0x46d0f0 args = (const struct imap_arg *) 0x4721c8 list_args = (const struct imap_arg *) 0xffff80ffbc1f8e79 arg_count = 4294934783 ctx = (struct cmd_list_context *) 0x46d9f8 patterns = {arr = {buffer = 0x46da38, element_size = 8}, v = 0x46da38, v_modifiable = 0x46da38} ref = 0x46da28 "" pattern = 0x46da30 "*" patterns_strarr = (const char * const *) 0x46da70 str = (string_t *) 0x44d2b8 #10 0x000000000041b61d in cmd_lsub (cmd=0x46d900) at cmd-lsub.c:8 No locals. #11 0x0000000000424697 in command_exec (cmd=0x46d900) at imap-commands.c:99 hook = (const struct command_hook *) 0x457ec0 ret = false #12 0x00000000004235fb in client_command_input (cmd=0x46d900) at imap-client.c:119 client = (struct client *) 0x46d0f0 command = (struct command *) 0xffff80ffbffff4d0 __FUNCTION__ = "client_command_input" #13 0x00000000004238fb in client_command_input (cmd=0x46d900) at imap-client.c:119 client = (struct client *) 0x46d0f0 command = (struct command *) 0x45ce58 __FUNCTION__ = "client_command_input" #14 0x0000000000423a1b in client_handle_next_command (client=0x46d0f0, remove_io_r=0xffff80ffbffff55d) at imap-client.c:119 No locals. #15 0x0000000000423a9b in client_handle_input (client=0x46d0f0) at imap-client.c:119 _data_stack_cur_id = 3 ret = false remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #16 0x0000000000423c2e in client_input (client=0x46d0f0) at imap-client.c:119 cmd = (struct client_command_context *) 0x4663e8 output = (struct ostream *) 0x467968 bytes = 12 __FUNCTION__ = "client_input" #17 0xffff80ffb753c1de in io_loop_call_io (io=0x458690) at ioloop.c:26 ioloop = (struct ioloop *) 0x457d00 t_id = 2 #18 0xffff80ffb753d851 in io_loop_handler_run (ioloop=0x457d00) at ioloop-poll.c:96 ctx = (struct ioloop_handler_context *) 0x455420 pollfd = (struct pollfd *) 0x45c6a8 tv = {tv_sec = 57, tv_usec = 597544} io = (struct io_file *) 0x458690 msecs = 57598 ret = 0 call = true #19 0xffff80ffb753c281 in io_loop_run (ioloop=0x457d00) at ioloop.c:26 No locals. #20 0xffff80ffb74d40c2 in master_service_run (service=0x457bd0, callback=0x430806 <client_connected>) at master-service.c:75 No locals. #21 0x0000000000430b1f in main (argc=3, argv=0xffff80ffbffff718) at main.c:70 set_roots = {0x439ce0, 0x0} login_set = {auth_socket_path = 0x0, postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0, failure_callback = 0, request_auth_token = 1} service_flags = 3 storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_USERDB_LOOKUP username = 0xffff80ffbffff9cb "cyrtest1" c = -1 And without the shared namespace "user" no such crash! # 20130322: /m/sw/dc/2.2-20130322/etc/dovecot/dovecot.conf # OS: SunOS 5.11 i86pc zfs auth_debug = yes auth_debug_passwords = yes auth_default_realm = iai.uni-bonn.de auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = sha1 base_dir = /var/run/dovecot/ debug_log_path = /tmp/dcd imapc_features = rfc822.size imapc_host = mailbox.iai.uni-bonn.de imapc_list_prefix = INBOX imapc_master_user = ... imapc_password = ... imapc_port = 993 imapc_ssl = imaps imapc_ssl_verify = no imapc_user = %n log_path = /tmp/dce mail_debug = yes mail_gid = dovemail mail_location = sdbox:/m/d/imap/mbox/m/%n mail_plugins = notify mail_log mail_uid = dovemail namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / subscriptions = yes type = private } namespace user { hidden = no list = children location = sdbox:/m/d/imap/mbox/m/%%n prefix = user/%%u/ separator = / type = shared } passdb { args = scheme=CRYPT username_format=%u /m/d/etc/user/pw driver = passwd-file } passdb { args = username_format=%n /m/d/etc/user/global/pw-master-giat driver = passwd-file master = yes pass = yes } passdb { args = username_format=%n /m/d/etc/user/global/pw-master-top driver = passwd-file master = yes pass = yes } passdb { args = username_format=%n /m/d/etc/user/global/pw-master-top driver = passwd-file } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mailbox_create save flag_change mail_log_fields = uid box msgid size } protocols = imap pop3 service auth-worker { user = doveauth } service auth { user = doveauth } service imap-login { process_min_avail = 4 service_count = 1 } service imap { executable = imap process_limit = 1024 } service pop3 { executable = pop3 process_limit = 64 } ssl_cert = </m/sw/dc/a/etc/dovecot/ssl/certs/dovecotCert.pem ssl_key = </m/sw/dc/a/etc/dovecot/ssl/keys/dovecotKey.pem syslog_facility = local6 userdb { args = username_format=%u /m/d/etc/user/db driver = passwd-file override_fields = uid=dovemail gid=dovemail home=/m/d/user/%n } userdb { args = username_format=%n /m/d/etc/user/global/db-master default_fields = quota_rule=*:storage=512M driver = passwd-file override_fields = uid=dovemail gid=dovemail home=/m/d/user/global/%n }

2 7

[Dovecot] problem with dovecot lmtp via director
by Piotr Rotter 04 Apr '13

04 Apr '13

Hello, I have strange problem with delivering mails via dovecot lmtp via director and i have not idea what is wrong. After server restart bigger mails does not delivered. Postfix servers log that: 2013-04-04T19:55:38.919624+02:00 kurier9 postfix/lmtp[16620]: 3ZhWF337X5z89h3: to=<piotr.rotter(a)active24.pl>, relay=192.168.67.1[192.168.67.1]:24, delay=1987, delays=1987/0/0/0.04, dsn=4.3.0, status=deferred (host 192.168.67.1[192.168.67.1] said: 451 4.3.0 Temporary internal failure (in reply to end of DATA command)) 2013-04-04T19:58:41.238926+02:00 kurier9 postfix/lmtp[16620]: 3ZhWF337X5z89h3: to=<piotr.rotter(a)active24.pl>, relay=192.168.67.1[192.168.67.1]:24, delay=2170, delays=1990/0/0/180, dsn=4.4.2, status=deferred (conversation with 192.168.67.1[192.168.67.1] timed out while sending message body) Director server log something like that: 2013-04-04T20:00:45+02:00 r1 dovecot: lmtp(18447): Disconnect from 192.168.67.24: Temporary internal failure (in DATA) Dovecot servers log that: 2013-04-04T20:03:37.347279+02:00 k1 dovecot: lmtp(9380): Disconnect from 192.168.111.1: Connection closed (in RCPT TO) Please help because I have not idea what is wrong and queue growing up. Best regards Piotr Rotter

2 3

[Dovecot] Crash while moving mail between private folder and shared folder
by Christian Felsing 04 Apr '13

04 Apr '13

Hello, while moving a mail from a private folder (inbox) to a shared folder and back to private folder Dovecot 2.2rc3 crashes: ---cut here--- Mar 23 09:57:44 dovecot dovecot: imap-login: Login: user=<john.doe(a)example.net>, method=PLAIN, rip=192.168.200.6, lip=192.168.200.22, mpid=19423, TLS Mar 23 09:57:44 dovecot dovecot: imap(john.doe(a)example.net): Panic: file mail-namespace.c: line 654 (mail_namespace_find): assertion failed: (ns != NULL) Mar 23 09:57:44 dovecot dovecot: imap(john.doe(a)example.net): Error: Raw backtrace: /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(+0x608fa) [0x7f82f65b28fa] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(+0x6093e) [0x7f82f65b293e] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f82f657435b] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot-storage.so.0(mail_namespace_find_unalias+0) [0x7f82f686b590] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot-storage.so.0(mail_namespace_find_unalias+0x19) [0x7f82f686b5a9] -> /opt/dovecot-2.2.rc3/lib/dovecot/lib10_quota_plugin.so(+0x57bd) [0x7f82f51127bd] -> /opt/dovecot-2.2.rc3/lib/dovecot/lib10_quota_plugin.so(quota_test_alloc+0xcb) [0x7f82f511424b] -> /opt/dovecot-2.2.rc3/lib/dovecot/lib10_quota_plugin.so(quota_try_alloc+0x3d) [0x7f82f511445d] -> /opt/dovecot-2.2.rc3/lib/dovecot/lib10_quota_plugin.so(+0xb00b) [0x7f82f511800b] -> /opt/dovecot-2.2.rc3/lib/dovecot/lib01_acl_plugin.so(+0xc7cb) [0x7f82f552d7cb] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot-storage.so.0(mailbox_copy+0x5f) [0x7f82f687274f] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot-storage.so.0(mailbox_move+0x10) [0x7f82f6872810] -> dovecot-01/imap() [0x40d29d] -> dovecot-01/imap(command_exec+0x3c) [0x4161ec] -> dovecot-01/imap() [0x415250] -> dovecot-01/imap() [0x41530a] -> dovecot-01/imap(client_handle_input+0x115) [0x4155c5] -> dovecot-01/imap(client_input+0x72) [0x415972] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f82f65c20e6] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd7) [0x7f82f65c2f37] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f82f65c1c28] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f82f6579473] -> dovecot-01/imap(main+0x270) [0x40b950] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f82f61e6ead] -> dovecot-01/imap() [0x40baad] Mar 23 09:57:44 dovecot dovecot: imap(john.doe(a)example.net): Fatal: master: service(imap): child 19423 killed with signal 6 (core dumps disabled) Mar 23 09:57:44 dovecot dovecot: imap-login: Login: user=<john.doe(a)example.net>, method=PLAIN, rip=192.168.200.6, lip=192.168.200.22, mpid=19425, TLS Mar 23 09:57:44 dovecot dovecot: imap(john.doe(a)example.net): Panic: file mail-namespace.c: line 654 (mail_namespace_find): assertion failed: (ns != NULL) Mar 23 09:57:44 dovecot dovecot: imap(john.doe(a)example.net): Error: Raw backtrace: /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(+0x608fa) [0x7f66ed9a58fa] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(+0x6093e) [0x7f66ed9a593e] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f66ed96735b] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot-storage.so.0(mail_namespace_find_unalias+0) [0x7f66edc5e590] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot-storage.so.0(mail_namespace_find_unalias+0x19) [0x7f66edc5e5a9] -> /opt/dovecot-2.2.rc3/lib/dovecot/lib10_quota_plugin.so(+0x57bd) [0x7f66ec5057bd] -> /opt/dovecot-2.2.rc3/lib/dovecot/lib10_quota_plugin.so(quota_test_alloc+0xcb) [0x7f66ec50724b] -> /opt/dovecot-2.2.rc3/lib/dovecot/lib10_quota_plugin.so(quota_try_alloc+0x3d) [0x7f66ec50745d] -> /opt/dovecot-2.2.rc3/lib/dovecot/lib10_quota_plugin.so(+0xb00b) [0x7f66ec50b00b] -> /opt/dovecot-2.2.rc3/lib/dovecot/lib01_acl_plugin.so(+0xc7cb) [0x7f66ec9207cb] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot-storage.so.0(mailbox_copy+0x5f) [0x7f66edc6574f] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot-storage.so.0(mailbox_move+0x10) [0x7f66edc65810] -> dovecot-01/imap() [0x40d29d] -> dovecot-01/imap(command_exec+0x3c) [0x4161ec] -> dovecot-01/imap() [0x415250] -> dovecot-01/imap() [0x41530a] -> dovecot-01/imap(client_handle_input+0x115) [0x4155c5] -> dovecot-01/imap(client_input+0x72) [0x415972] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f66ed9b50e6] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd7) [0x7f66ed9b5f37] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f66ed9b4c28] -> /opt/dovecot-2.2.rc3/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f66ed96c473] -> dovecot-01/imap(main+0x270) [0x40b950] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f66ed5d9ead] -> dovecot-01/imap() [0x40baad] Mar 23 09:57:44 dovecot dovecot: imap(john.doe(a)example.net): Fatal: master: service(imap): child 19425 killed with signal 6 (core dumps disabled) Mar 23 09:57:46 dovecot dovecot: imap(john.doe(a)example.net): Disconnected: Logged out in=192 out=1118 ---cut here--- Following config was used: ---cut here--- # 2.2.rc3: /opt/dovecot-2.2.rc3/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.0 ext4 auth_ssl_require_client_cert = yes auth_ssl_username_from_cert = yes auth_verbose = yes auth_verbose_passwords = plain base_dir = /home/dovecot/ hostname = mail.ip6.li instance_name = dovecot-01 lda_mailbox_autocreate = yes login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_gid = dovecot mail_location = maildir:/home/vmail/%d/%u/Maildir mail_plugins = quota mail_uid = dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = failure_show_msg=yes dovecot driver = pam } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = maildir:User quota quota_grace = 10%% quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)ip6.li protocols = imap pop3 lmtp sieve quota_full_tempfail = yes sendmail_path = /usr/lib/sendmail service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_ca = </opt/dovecot/etc/dovecot/ip6li-user-ca.pem ssl_cert = </opt/dovecot/etc/dovecot/mail.ip6.li.crt.pem ssl_cert_username_field = emailAddress ssl_key = </opt/dovecot/etc/dovecot/mail.ip6.li.key.pem ssl_require_crl = no ssl_verify_client_cert = yes userdb { args = allow_all_users=yes uid=vmail gid=vmail home=/home/vmail/%d/%u driver = static } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugin_dir = /opt/dovecot/lib/dovecot mail_plugins = quota sieve acl } protocol imap { mail_plugins = quota acl imap_acl imap_quota } protocol lmtp { mail_plugins = quota sieve } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes ( in=%i : out=%o ) } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } ---cut here--- best regards Christian

3 4

[Dovecot] maildirsize problem
by mastertoilet＠netzero.net 04 Apr '13

04 Apr '13

i am currently using roundcube my webmail and configure using dovecot quota plugins. but it seems to not be updating the maildirsize when new mails comes.Deleting the maildirsize will recreate the files correctly.Is there any solutions to this problem with dovecot. Either you're not using dovecot-lda to deliver the mails, or you haven't configured quota plugin correctly for it. dovecot -n output and logs about a mail delivery would help. My configuration is using Centos 6.dovecot 2.1.1.and i have configure the quota plugin.but i am not sure what you mean by dovecot-lda.i just follow the guides on the internet and skim through dovecots documentation.i am using the local unix account for mail account not using virtual users.here is my configuration: [root@mail ~]# dovecot -n # 2.1.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.el6.x86_64 x86_64 CentOS release 6.3 (Final) base_dir = /var/run/dovecot/ mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = " quota" maildir_broken_filename_sizes = yes mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_id_log = * imap_idle_notify_interval = 2 mins mail_plugins = " quota imap_quota" } protocol pop3 { mail_plugins = " quota imap_quota" } i am still not sure why maildirsize is not updating.thanks ____________________________________________________________ How to Sleep Like a Rock Obey this one natural trick to fall asleep and stay asleep all night. http://thirdpartyoffers.netzero.net/TGL3231/515ce5588c8f765586e9dst01duc

2 1

[Dovecot] Error : File too large
by Kavish Karkera 03 Apr '13

03 Apr '13

Hi , When accessing mails through webmail(roundcube), we were getting below error's in huge Please help to know .. what this error is related to.. dovecot version , we are using is 2.1.15 Mar 28 15:37:47 imapserver dovecot: imap(cel_default): Error: rename(/mail/mailstore/linoquery.com/lino_default/Maildir/new/1364463180.M5…, /mail/mailstore/linoquery.com/lino_default/Maildir/cur/1364463180.M563166P30867.imapserver,S=3263,W=3309:2,) failed: File too large Thanks, Kavish Karkera

3 4

[Dovecot] Username and Email
by Dan Clovis 03 Apr '13

03 Apr '13

Ave Maria! I'm completely new to Dovecot, I was just wondering if the username (POP3) can be completely different to the POP3 email? God Bless Dan

2 1

Re: [Dovecot] sieve-filter ignoring separator
by Stephan Bosch 03 Apr '13

03 Apr '13

Op 4/3/2013 1:56 PM, Isak Rubin schreef: > Here you go You're using the listescape plugin. Try putting that in the global mail_plugins setting, e.g.: # usually located in /etc/dovecot/conf.d/10-mail.conf mail_plugins = listescape protocol lda { mail_plugins = $mail_plugins sieve autocreate } protocol imap { mail_plugins = $mail_plugins autocreate } Regards, Stephan.

3 5

[Dovecot] Mongo backend for userdb and passdb
by Damien Churchill 03 Apr '13

03 Apr '13

Hi, I was wondering if any work had been made (out of tree) or has been planned for a mongo driver? If not is it something that would be of any interest for being included? Regards, Damien

2 10

[Dovecot] sieve-filter ignoring separator
by Isak Rubin 03 Apr '13

03 Apr '13

It seems like running sieve-filter from the console ignores the separator setting, thus not letting me filter into folder names containing dots. Normal delivery using lda handles it just fine, but not when using the sieve-filter command. Character not allowed in mailbox name: '.' Is there anyway to override this or is patching and recompiling the source my only option? # dovecot --version 2.1.9 /Isak

3 5

[Dovecot] Sieve vacation issue - Dovecot + Postfix + LDA
by Ivan Bogdanovic 03 Apr '13

03 Apr '13

Hi to all, I have an issue with Dovecot Sieve on sending vacation message... Actually Sieve is working and I can use all the filters but just vacation is causing a problem and only in specific case... I have Dovecot + Postfix + LDA running on Ubuntu 11 without MySql database for users but I'm using virtusertable instead. The problem is when linux user ( mail user ) is different from mail allias in virtusertable... Example: ivan(a)domain.com > ivan1 ( from virtusertable ). When alias and user are the same sieve vacation works just fine but when it's not the sieve script collects the user(ivan1)(a)domain.com in from instead ivan(a)domain.com and this is when mail log shows like "discarded message because of implicitily no known envelope in message header etc... Is there a way to adjust sieve to pickup the recipient address from mail header or whatever and not to collect the user...? I was trying to play with postfix master.cf using dovecot-lda switches -f ${sender} -a (or -d ) ${recipient} but without success... Did anyone had this kind of problem? I would really appreciate some hints on fixing this issue... Thanks, Ivan

2 1

[Dovecot] Separate log file for Sieve
by Ewald Dieterich 03 Apr '13

03 Apr '13

I use log_path = /var/log/dovecot/error.log info_log_path = /var/log/dovecot/info.log debug_log_path = /var/log/dovecot/debug.log to log to different files. Since I don't consider Sieve errors as severe as "real" Dovecot errors I would like to keep them away from the error log. Is it possible to configure a separate log file for Sieve?

3 3

[Dovecot] LDAP: error with iterate_query
by Evgeny Basov 02 Apr '13

02 Apr '13

Hello. Used 2.2.rc3. Try LDAP search: # ldapsearch -LLL -D "uid=dovecot,ou=Services,o=m" -b "ou=C,o=m" -w 1 -s subtree "(objectClass=mailUser)" mail dn: uid=test,dc=m.u,ou=C,o=m mail: test(a)m.u dn: uid=basov,dc=m.u,ou=C,o=m mail: basov(a)m.u mail: wow(a)m.u dn: uid=postmaster,dc=m.u,ou=C,o=m mail: postmaster(a)m.u dn: uid=ogo,dc=rest.com,ou=C,o=m mail: ogo(a)rest.com All is fine. Dovecot's config file: uris = ldapi://%2fvar%2frun%2fopenldap%2fslapd.sock dn = uid=dovecot,ou=Services,o=m dnpass = 1 debug_level = 128 auth_bind = yes auth_bind_userdn = uid=%n,dc=%d,ou=C,o=m ldap_version = 3 base = ou=C,o=m deref = never scope = subtree user_attrs = \ =home=/var/vmail/%d/%n/, \ =proxy_maybe=y, \ =nodelay=y, \ =host=%{ldap:mailHost}, \ =quota_rule=*:storage=%{ldap:mailQuota}M user_filter = (&(objectClass=mailUser)(uid=%n)) iterate_attrs = mail=user iterate_filter = (objectClass=mailUser) Request for one user: # doveadm user -u basov(a)mega.ru userdb: basov(a)m.u home : /var/vmail/m.u/basov/ proxy_maybe: y nodelay : y host : mailsys quota_rule: *:storage=20M log file: dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth dovecot: auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat dovecot: auth: Debug: master in: USER#0111#011basov(a)m.u#011service=doveadm dovecot: auth: Debug: ldap(basov(a)m.u): user search: base=ou=C,o=m scope=subtree filter=(&(objectClass=mailUser)(uid=basov)) fields=mailHost,mailQuota dovecot: auth: Debug: ldap(basov(a)m.u): result: mailHost=mailsys mailQuota=20; mailQuota,mailHost unused dovecot: auth: Debug: ldap(basov(a)m.u): result: mailHost=mailsys mailQuota=20 dovecot: auth: Debug: userdb out: USER#0111#011basov@m.u#011home=/var/vmail/m.u/basov/#011proxy_maybe=y#011nodelay=y#011host=mailsys#011quota_rule=*:storage=20M dovecot: auth: Fatal: master: service(auth): child 4156 killed with signal 11 (core dumps disabled) all looks good. Try iterate query for all users: # doveadm user *@* doveadm(root): Error: User listing returned failure doveadm(root): Fatal: user listing failed log file: dovecot: auth: Debug: master in: LIST#0111#011user=*@*#011service=doveadm dovecot: auth-worker(4185): Debug: ldap: iterate: base=ou=C,o=m scope=subtree filter=(objectClass=mailUser) fields=mail dovecot: auth-worker(4185): Error: ldap(*@*): LDAP search returned multiple entries dovecot: auth-worker(4185): Fatal: master: service(auth-worker): child 4185 killed with signal 11 (core dumps disabled) dovecot: auth-worker(4187): Debug: Loading modules from directory: /usr/lib64/dovecot/auth Is it error of rc3 release or somebody wrong in my configuration?

2 1

[Dovecot] Active Directory and Dovecot NTLM Authentication problem
by BINOTTO Luis SIDOR 02 Apr '13

02 Apr '13

Hello everyone... I have a problem when I use NTLM authentication with dovecot. The authentication is made only in PLAIN TEXT. The scenario is: Debian Squeeze 6.0.6 Dovecot 2.1.7 Samba 3.5.6. Samba is correctly configured into the domain. The error: (extract from syslog) Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: Login for user []\[test2]@ [SIRP00000733] failed due to [winbind client not authorized to use winbindd_pam _auth_crap. Ensure permissions on /var/run/samba/winbindd_privileged are set cor rectly.] Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: [2013/04/02 09:47:41.832579 , 0] utils/ntlm_auth.c:888(manage_squid_ntlmssp_request) Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: NTLMSSP BH: NT_STATUS_ACC ESS_DENIED Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: winbind: ntlm_auth exited w ith exit code 0 Dovecot configuration: (dovecot -n) # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.6 ext3 auth_mechanisms = plain login ntlm auth_use_winbind = yes disable_plaintext_auth = no mail_location = maildir:/mailboxes/Administrativos/%Lu namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap pop3" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = uid=16343 gid=16343 home=/mailboxes/Administrativos/%Lu driver = static } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = } protocol pop3 { mail_plugins = pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } Pam configuration: /etc/pam.d/dovecot auth sufficient pam_krb5.so account sufficient pam_krb5.so /etc/krb5.conf [libdefaults] default_realm = SIDOR.NET clockskew =300 [realms] SIDOR.NET = { kdc = sirprddc1.sidor.net kdc = sirprddc2.sidor.net kdc = sirprddc3.sidor.net admin_server = sirprddc1.sidor.net default_domain = sidor.net } [domain_realm] .sidor.net = SIDOR.NET sidor.net = SIDOR.NET [login] krb4_convert = true krb4_get_tickets = false [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmin.log [appdefaults] pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false retain_after_close = false minimum_uid = 0 try_first_pass = true } /etc/samba/smb.conf #======================= Global Settings ======================= [global] ## Browsing/Identification ### security = ADS workgroup = sidorve realm = SIDOR.NET winbind use default domain = yes server string = %h wins support = no wins server = 10.50.30.51 dns proxy = no #### Debugging/Accounting #### syslog = 0 panic action = /usr/share/samba/panic-action %d ####### Authentication ####### encrypt passwords = yes ############ Misc ############ domain master = no local master = no prefered master = no winbind separator = \\ idmap uid = 10000-29000 idmap gid = 10000-29000 template shell = /bin/bash template homedir = /home/%D/%U winbind enum groups = yes winbind enum users = yes winbind refresh tickets = yes auth methods = winbind The Logs Syslog Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: [2013/04/02 09:47:41.832426,0] utils/ntlm_auth.c:598(winbind_pw_check) Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: Login for user []\[test2]@ [SIRP00000733] failed due to [winbind client not authorized to use winbindd_pam _auth_crap. Ensure permissions on /var/run/samba/winbindd_privileged are set cor rectly.] Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: [2013/04/02 09:47:41.832579 , 0] utils/ntlm_auth.c:888(manage_squid_ntlmssp_request) Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: NTLMSSP BH: NT_STATUS_ACC ESS_DENIED Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: winbind: ntlm_auth exited w ith exit code 0 Apr 2 09:47:42 sirprdsvcmsg02 lrmd: [1598]: debug: rsc:Administr_fs:16: monitor Apr 2 09:47:47 sirprdsvcmsg02 dovecot: imap-login: Login: user=<test2>, method= PLAIN, rip=10.50.2.150, lip=10.50.30.90, mpid=23706, session=<n/6DZmHZxAAKMgKW> PLAIN, rip=10.50.2.150, lip=10.50.30.90, mpid=23706, session=<n/6DZmHZxAAKMgKW> Apr 2 09:47:47 sirprdsvcmsg02 dovecot: auth: Error: [2013/04/02 09:47:47.408887 , 0] utils/ntlm_auth.c:598(winbind_pw_check) Apr 2 09:47:47 sirprdsvcmsg02 dovecot: auth: Error: Login for user []\[test2] @[SIRP00000733] failed due to [winbind client not authorized to use winbindd_pam _auth_crap. Ensure permissions on /var/run/samba/winbindd_privileged are set cor rectly.] Apr 2 09:47:47 sirprdsvcmsg02 dovecot: auth: Error: [2013/04/02 09:47:47.409203 , 0] utils/ntlm_auth.c:888(manage_squid_ntlmssp_request) Apr 2 09:47:47 sirprdsvcmsg02 dovecot: auth: Error: NTLMSSP BH: NT_STATUS_ACC ESS_DENIED Apr 2 09:47:47 sirprdsvcmsg02 dovecot: auth: Error: winbind: ntlm_auth exited w ith exit code 0 Apr 2 09:47:48 sirprdsvcmsg02 postfix/postfix-script[23819]: the Postfix mail s ystem is running: PID: 2390 Apr 2 09:47:53 sirprdsvcmsg02 dovecot: imap-login: Login: user=<test2>, method= PLAIN, rip=10.50.2.150, lip=10.50.30.90, mpid=23820, session=<iBXZZmHZxQAKMgKW> Auth.log Apr 2 09:52:35 sirprdsvcmsg02 auth: pam_krb5(dovecot:auth): user test2 authenti cated as test2(a)SIDOR.NET I hope someone could help me. Thanks in advance, Best Regards, Luis " Notificacion Automatica: Este mensaje y cualquier archivo que se adjunte contiene informacion privilegiada y confidencial. Es para uso exclusivo del destinatario. Si usted ha recibido esta comunicacion por error, por favor avisenos inmediatamente. Automatic notification: This e-mail and any file transmitted with it are confidential and may be legally privileged. It is intended solely for the addressee and may not be disclosed to or used by anyone other than the addressee. If you have received this e-mail by mistake , please advise the sender immediately"

1 0

[Dovecot] (no subject)
by Walter Steiner 02 Apr '13

02 Apr '13

I've run into a problem with `doveadm backup` (2.2 rc2 and 20130226) I did not notice in 2.1.15 doveadm backup [-Dv] -R -u cyrtest1(a)iai.uni-bonn.de -m INBOX imapc: => crashes (signal 6 with acl plugin configured, sig 11 without acl) If this is considered a bug (not just because of the crash but in the meaning of "my configuration should work") it would be great if it could be fixed.;-) If I can provide more detail (log, gdb bt full and doveconf -n follow the next paragraph) or test something I would be happy to to so. As I'm planning dsync replication of the two backends I thought it would be better to start things with the upcoming new dovecot 2.2 (dsync protocol) instead of 2.1.15. (?!) --- first some information about what I'm trying to do --- We want to replace our single cyrus 2.4 server with two backend servers (separate storage and all user mailboxes etc. each) Even if cyrus-to-cyrus should be much easier _and_ time is slipping away I want to take this one opportunity to switch to dovecot if possible. - Thank you very much for your great work on dovecot and all the efforts! - We want the IMAP clients to continue using their folders/messages etc so I want to reproduce the "cyrus structure" we are using for the last 14 years: - own user folders: INBOX and INBOX.subfolder ... - (if possible: other user folders: user.otheruser...) - converting as much as possible of existing data To get the folders/messages into the new dovecot server(s) I'm thinking about some repeated "doveadm mirror / backup -R ... imapc:" runs while the cyrus server is still in use. The first sync run will take several days but a few more and the time will be short enough to do the complete switch-over w/o surprises. Insertion: I played with 2.1.15 and namespaces but maybe I did not understand this well enough: doveadm backup -R -u userx [w or w/o -m INBOX and/or -n INBOX] imapc: => if cyrus userx has permissions on other users mailboxes these folders are also copied. ... copied _into_ the INBOX of (dovecot) userx. I too got the known problems with INBOX.INBOX. paths. I changed dsync-brain.c sources to skip "^user." folders and to cut the additional "INBOX." => seems okay... messages (only the expected) got transferred! --- To see if things still work as with 2.1.15 (no dsync source modification!) I did (as before with 2.1.15): doveadm backup [-Dv] -R -u cyrtest1(a)iai.uni-bonn.de -m INBOX imapc: => but it crashes (signal 6) doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: auth input: cyrtest1(a)iai.uni-bonn.de master_user=cyrtest1(a)iai.uni-bonn.de quota_rule=*:storage=512M uid=13004 gid=13004 home=/m/d/user/iai.uni-bonn.de/cyrtest1 doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Added userdb setting: plugin/master_user=cyrtest1(a)iai.uni-bonn.de doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Added userdb setting: plugin/quota_rule=*:storage=512M doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Effective uid=13004, gid=13004, home=/m/d/user/iai.uni-bonn.de/cyrtest1 doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:/m/d/imap/mbox/iai.uni-bonn.de/cyrtest1:INDEX=/m/d/imap/meta/iai.uni-bonn.de/cyrtest1:MAILBOXDIR=mailboxes/ doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: fs: root=/m/d/imap/mbox/iai.uni-bonn.de/cyrtest1, index=/m/d/imap/meta/iai.uni-bonn.de/cyrtest1, indexpvt=, control=, inbox=, alt= doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl: initializing backend with data: vfile:/m/d/etc/acl:cache_secs=300 doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl: acl username = cyrtest1(a)iai.uni-bonn.de doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl: owner = 1 doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: Global ACL directory: /m/d/etc/acl doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: reading file /m/d/etc/acl//.DEFAULT doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: file /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1/mailboxes/dovecot-acl not found doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : Using permissions from /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1: mode=0700 gid=default doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: file /m/d/etc/acl/INBOX not found doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: file /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1/mailboxes/INBOX/dbox-Mails/dovecot-acl not found dsync(cyrtest1(a)iai.uni-bonn.de): Debug: Effective uid=13004, gid=13004, home=/m/d/user/iai.uni-bonn.de/cyrtest1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc: dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc: root=, index=, indexpvt=, control=, inbox=, alt= dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Looking up IP address dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Connecting to 10.11.12.13:993 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Starting SSL handshake dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Server capabilities: IMAP4rev1 LITERAL+ ID ENABLE AUTH=LOGIN AUTH=PLAIN SASL-IR dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Authenticating as cyrusmaster for user cyrtest1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Server capabilities: IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxte QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SORT SORT=MODSEQ SORT=DISPLAY THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE LIST-EXTENDED WITHIN QRESYNC SCAN XLIST URLAUTH URLAUTH=BINARY LOGINDISABLED COMPRESS=DEFLATE IDLE dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Authenticated successfully dsync(cyrtest1(a)iai.uni-bonn.de): Debug: acl: initializing backend with data: vfile:/m/d/etc/acl:cache_secs=300 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: acl: acl username = cyrtest1(a)iai.uni-bonn.de dsync(cyrtest1(a)iai.uni-bonn.de): Debug: acl: owner = 1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: Global ACL directory: /m/d/etc/acl dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=recv_handshake dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=send_mailbox_tree_deletes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: reading file /m/d/etc/acl//.DEFAULT dsync(cyrtest1(a)iai.uni-bonn.de): Panic: file mailbox-list.c: line 1226: unreached dsync(cyrtest1(a)iai.uni-bonn.de): Error: Raw backtrace: /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot.so.0.0.0'default_fatal_finish+0x26 [0xffff80ff94f93b78] -> /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot.so.0.0.0'default_error_handler+0x0 [0xffff80ff94f93c07] -> /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot.so.0.0.0'i_fatal+0x0 [0xffff80ff94f93ee8] -> /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot-storage.so.0.0.0'mailbox_list_get_root_forced+0x48 [0xffff80ff94e46984] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_list_get_root_dir+0x25 [0xffff80ff94c6e3f6] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_list_get_path+0x1f [0xffff80ff94c6e4a4] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_backend_vfile_acllist_read+0x40 [0xffff80ff94c6e4ff] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_backend_vfile_acllist_refresh+0x87 [0xffff80ff94c6e904] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_backend_vfile_acllist_verify+0x44 [0xffff80ff94c6f0a0] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_backend_vfile_object_refresh_cache+0x24f [0xffff80ff94c6d2b4] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_backend_get_default_rights+0x28 [0xffff80ff94c6ad3b] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_mailbox_try_list_fast+0xb2 [0xffff80ff94c72a6b] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_mailbox_list_iter_init+0x188 [0xffff80ff94c72dee] -> /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot-storage.so.0.0.0'mailbox_list_iter_init_multiple+0x91 [0xffff80ff94e5a120] -> /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot-storage.so.0.0.0'mailbox_list_iter_init+0x39 [0xffff80ff94e59c96] -> /m/sw/dc/2.2-20130226/bin/doveadm'dsync_mailbox_tree_fill+0x103 [0x45443a] -> /m/sw/dc/2.2-20130226/bin/doveadm'dsync_brain_mailbox_trees_init+0x114 [0x448d1c] -> /m/sw/dc/2.2-20130226/bin/doveadm'dsync_brain_slave_recv_handshake+0x18d [0x4464d6] -> /m/sw/dc/2.2-20130226/bin/doveadm'dsync_brain_run_real+0xe7 [0x44681f] -> /m/sw/dc/2.2-20130226/bin/doveadm'dsync_brain_run+0x61 [0x4469c9] -> /m/sw/dc/2.2-20130226/bin/doveadm'cmd_dsync_run_local+0x325 [0x443a5a] -> /m/sw/dc/2.2-20130226/bin/doveadm'cmd_dsync_run+0x23d [0x44405d] -> /m/sw/dc/2.2-20130226/bin/doveadm'doveadm_mail_next_user+0x189 [0x4284ba] -> /m/sw/dc/2.2-20130226/bin/doveadm'doveadm_mail_single_user+0x157 [0x428680] -> /m/sw/dc/2.2-20130226/bin/doveadm'doveadm_mail_cmd+0x3bc [0x428f24] -> /m/sw/dc/2.2-20130226/bin/doveadm'doveadm_mail_try_run+0xac [0x42919b] -> /m/sw/dc/2.2-20130226/bin/doveadm'main+0x286 [0x4332b3] -> /m/sw/dc/2.2-20130226/bin/doveadm'_start+0x6c [0x427a8c] Abort (core dumped) Core was generated by `/m/sw/dc/a/bin/doveadm -Dv backup -R -u cyrtest1(a)iai.uni-bonn.de -m INBOX imapc'. Program terminated with signal 6, Aborted. [New process 94877 ] #0 0xffff80ff965aaaaa in _lwp_kill () from /lib/64/libc.so.1 (gdb) bt full #0 0xffff80ff965aaaaa in _lwp_kill () from /lib/64/libc.so.1 No symbol table info available. #1 0xffff80ff9659f2a1 in thr_kill () from /lib/64/libc.so.1 No symbol table info available. #2 0xffff80ff9654feb9 in raise () from /lib/64/libc.so.1 No symbol table info available. #3 0xffff80ff96526632 in abort () from /lib/64/libc.so.1 No symbol table info available. #4 0xffff80ff94f93b9f in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:142 backtrace = 0x48d720 "/m/sw/dc/2.2-20130226/lib/dovecot/libdovecot.so.0.0.0'default_fatal_finish+0x26 [0xffff80ff94f93b78] -> /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot.so.0.0.0'default_error_handler+0x0 [0xffff80ff94f93"... #5 0xffff80ff94f93c07 in default_fatal_handler (ctx=0xffff80ffbfffe890, format=0xffff80ff94ec64e9 "file %s: line %d: unreached", args=0xffff80ffbfffe870) at failures.c:142 status = 0 #6 0xffff80ff94f93ee8 in i_panic (format=0xffff80ff94ec64e9 "file %s: line %d: unreached") at failures.c:142 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 8, fp_offset = 48, overflow_arg_area = 0xffff80ffbfffe970, reg_save_area = 0xffff80ffbfffe8a0}} #7 0xffff80ff94e46984 in mailbox_list_get_root_forced (list=0x4b3150, type=MAILBOX_LIST_PATH_TYPE_DIR) at ../../src/lib/array.h:197 path = 0x0 #8 0xffff80ff94c6e3f6 in acl_list_get_root_dir (backend=0x4c4050, type_r=0xffff80ffbfffe9fc) at acl-backend-vfile-acllist.c:32 storage = (struct mail_storage *) 0x4f6440 rootdir = 0x495c00 "P@L" maildir = 0x2004f1400 <Address 0x2004f1400 out of bounds> #9 0xffff80ff94c6e4a4 in acl_list_get_path (backend=0x4c4050) at acl-backend-vfile-acllist.c:32 type = MAILBOX_LIST_PATH_TYPE_DIR #10 0xffff80ff94c6e4ff in acl_backend_vfile_acllist_read (backend=0x4c4050) at acl-backend-vfile-acllist.c:32 acllist = {mtime = -139639050474768, name = 0xffff80ff94f99fcf "H\211EøH\203}ø"} input = (struct istream *) 0x496348 st = {st_dev = 5295136, st_ino = 4807680, st_mode = 3221219920, st_nlink = 33521919, st_uid = 5203008, st_gid = 0, st_rdev = 66369, st_size = -139639772307599, st_atim = {tv_sec = -139639050474816, tv_nsec = 2496056624}, st_mtim = {tv_sec = 5295136, tv_nsec = -139639772307599}, st_ctim = {tv_sec = 1361888004, tv_nsec = 5182464}, st_blksize = 5295136, st_blocks = 4807280, st_fstype = "Ðêÿ¿ÿ\200ÿÿ\000\024O\000\000\000\000"} path = 0x495a70 " \201ÿ\224ÿ\200ÿÿ" line = 0x50cc20 "" p = 0x4f1400 "" fd = -32513 ret = 0 #11 0xffff80ff94c6e904 in acl_backend_vfile_acllist_refresh (backend=0x4c4050) at acl-backend-vfile-acllist.c:32 __FUNCTION__ = "acl_backend_vfile_acllist_refresh" #12 0xffff80ff94c6f0a0 in acl_backend_vfile_acllist_verify (backend=0x4c4050, name=0x50cc20 "", mtime=1361801276) at acl-backend-vfile-acllist.c:32 acllist = (const struct acl_backend_vfile_acllist *) 0x4f6460 #13 0xffff80ff94c6d2b4 in acl_backend_vfile_object_refresh_cache (_aclobj=0x496330) at ../../../src/lib/array.h:197 aclobj = (struct acl_object_vfile *) 0x496330 backend = (struct acl_backend_vfile *) 0x4c4050 old_validity = (struct acl_backend_vfile_validity *) 0x0 validity = {global_validity = {last_check = 0, last_read_time = 1361888004, last_mtime = 1361801276, last_size = 395}, local_validity = {last_check = 0, last_read_time = 0, last_mtime = 0, last_size = 0}, mailbox_validity = {last_check = 0, last_read_time = 0, last_mtime = 0, last_size = 0}} mtime = 1361801276 ret = 1 #14 0xffff80ff94c6ad3b in acl_backend_get_default_rights (backend=0x4c4050, mask_r=0xffff80ffbfffec98) at acl-backend.c:68 No locals. #15 0xffff80ff94c72a6b in acl_mailbox_try_list_fast (ctx=0x513f50) at acl-mailbox-list.c:63 alist = (struct acl_mailbox_list *) 0x4b33e0 backend = (struct acl_backend *) 0x4c4050 idxp = (const unsigned int *) 0x4b34b0 acl_mask = (const struct acl_mask *) 0xffff80ff94f708cf nonowner_list_ctx = (struct acl_mailbox_list_context *) 0xffff80ffbfffece0 ns = (struct mail_namespace *) 0x4b3080 update_ctx = {iter_ctx = 0x514000, tree_ctx = 0x513fe0, glob = 0xffff80ffbfffec90, leaf_flags = 2499353844, parent_flags = 4294934783, update_only = 0, match_parents = 0} name = 0x6bfffecb0 <Address 0x6bfffecb0 out of bounds> ret = 1 #16 0xffff80ff94c72dee in acl_mailbox_list_iter_init (list=0x4b3150, patterns=0xffff80ffbfffede0, flags=MAILBOX_LIST_ITER_NO_AUTO_BOXES) at acl-mailbox-list.c:63 _data_stack_cur_id = 3 alist = (struct acl_mailbox_list *) 0x4b33e0 ctx = (struct acl_mailbox_list_iterate_context *) 0x513f50 pool = (pool_t) 0x513f30 p = 0x0 i = 0 inboxcase = true #17 0xffff80ff94e5a120 in mailbox_list_iter_init_multiple (list=0x4b3150, patterns=0xffff80ffbfffede0, flags=MAILBOX_LIST_ITER_NO_AUTO_BOXES) at mailbox-list-iter.c:98 ctx = (struct mailbox_list_iterate_context *) 0xffff80ffbfffedc0 ret = 0 __FUNCTION__ = "mailbox_list_iter_init_multiple" #18 0xffff80ff94e59c96 in mailbox_list_iter_init (list=0x4b3150, pattern=0x4f3fb8 "INBOX", flags=MAILBOX_LIST_ITER_NO_AUTO_BOXES) at mailbox-list-iter.c:68 patterns = {0x4f3fb8 "INBOX", 0x0} #19 0x000000000045443a in dsync_mailbox_tree_fill (tree=0x511b20, ns=0x4b3080, box_name=0x4f3fb8 "INBOX") at dsync-mailbox-tree-fill.c:23 list_flags = MAILBOX_LIST_ITER_NO_AUTO_BOXES subs_list_flags = 4356 iter = (struct mailbox_list_iterate_context *) 0x2e00002e004f3f5f node = (struct dsync_mailbox_node *) 0x48d708 info = (const struct mailbox_info *) 0x512b30 list_pattern = 0x4f3fb8 "INBOX" ret = 0 __FUNCTION__ = "dsync_mailbox_tree_fill" #20 0x0000000000448d1c in dsync_brain_mailbox_trees_init (brain=0x4f3200) at dsync-brain-mailbox-tree.c:31 ns = (struct mail_namespace *) 0x4b3080 #21 0x00000000004464d6 in dsync_brain_slave_recv_handshake (brain=0x4f3200) at dsync-brain.c:97 ibc_set = (const struct dsync_ibc_settings *) 0x4ac4e0 __FUNCTION__ = "dsync_brain_slave_recv_handshake" #22 0x000000000044681f in dsync_brain_run_real (brain=0x4f3200, changed_r=0xffff80ffbfffef4e) at dsync-brain.c:97 changed = false ret = true #23 0x00000000004469c9 in dsync_brain_run (brain=0x4f3200, changed_r=0xffff80ffbfffef4e) at dsync-brain.c:97 _data_stack_cur_id = 2 ret = true #24 0x0000000000443a5a in cmd_dsync_run_local (ctx=0x49d2a0, user=0x4a5ce0, brain=0x4ac760, ibc2=0x4ac3e0) at ../../../src/lib/array.h:197 brain2 = (struct dsync_brain *) 0x4f3200 user2 = (struct mail_user *) 0x4b9720 set_parser = (struct setting_parser_context *) 0x4a3b50 set_line = 0x48c8a8 "mail_location=imapc:" path1 = 0x48d680 "/m/d/imap/mbox/iai.uni-bonn.de/cyrtest1/mailboxes" path2 = 0x0 brain1_running = true brain2_running = true changed1 = true changed2 = false ret = 0 __FUNCTION__ = "cmd_dsync_run_local" #25 0x000000000044405d in cmd_dsync_run (_ctx=0x49d2a0, user=0x4a5ce0) at ../../../src/lib/array.h:197 ctx = (struct dsync_cmd_context *) 0x49d2a0 ibc = (struct dsync_ibc *) 0x49c6c0 ibc2 = (struct dsync_ibc *) 0x4ac3e0 brain = (struct dsync_brain *) 0x4ac760 sync_ns = (struct mail_namespace *) 0x0 brain_flags = 13 remote_errors_logged = false status = 0 ret = 0 #26 0x00000000004284ba in doveadm_mail_next_user (ctx=0x49d2a0, input=0xffff80ffbffff0e0, error_r=0xffff80ffbffff148) at doveadm-mail.c:73 error = 0xffff80ffbffff278 "âõÿ¿ÿ\200ÿÿ" ret = 0 __FUNCTION__ = "doveadm_mail_next_user" #27 0x0000000000428680 in doveadm_mail_single_user (ctx=0x49d2a0, input=0xffff80ffbffff0e0, error_r=0xffff80ffbffff148) at doveadm-mail.c:73 __FUNCTION__ = "doveadm_mail_single_user" #28 0x0000000000428f24 in doveadm_mail_cmd (cmd=0x49cac8, argc=7, argv=0xffff80ffbffff278) at doveadm-mail.c:73 input = {module = 0x0, service = 0x4671b2 "doveadm", username = 0xffff80ffbffff5c0 "cyrtest1(a)iai.uni-bonn.de", session_id = 0x0, local_ip = {family = 0, u = {ip6 = {_S6_un = {_S6_u8 = '\0' <repeats 15 times>, _S6_u32 = {0, 0, 0, 0}, __S6_align = 0}}, ip4 = { S_un = {S_un_b = {s_b1 = 0 '\0', s_b2 = 0 '\0', s_b3 = 0 '\0', s_b4 = 0 '\0'}, S_un_w = {s_w1 = 0, s_w2 = 0}, S_addr = 0}}}}, remote_ip = {family = 0, u = {ip6 = {_S6_un = {_S6_u8 = '\0' <repeats 15 times>, _S6_u32 = {0, 0, 0, 0}, __S6_align = 0}}, ip4 = { S_un = {S_un_b = {s_b1 = 0 '\0', s_b2 = 0 '\0', s_b3 = 0 '\0', s_b4 = 0 '\0'}, S_un_w = {s_w1 = 0, s_w2 = 0}, S_addr = 0}}}}, local_port = 0, remote_port = 0, userdb_fields = 0x0, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0} ctx = (struct doveadm_mail_cmd_context *) 0x49d2a0 getopt_args = 0x48a778 "+dEfl:m:n:Nr:Rs:RAS:u:" wildcard_user = 0x0 error = 0x0 ret = 0 c = -1 #29 0x000000000042919b in doveadm_mail_try_run (cmd_name=0xffff80ffbffff5b3 "backup", argc=7, argv=0xffff80ffbffff248) at doveadm-mail.c:73 cmd__foreach_end = (const void *) 0x49cbd0 cmd = (const struct doveadm_mail_cmd *) 0x49cac8 cmd_name_len = 6 __FUNCTION__ = "doveadm_mail_try_run" #30 0x00000000004332b3 in main (argc=7, argv=0xffff80ffbffff248) at doveadm.c:63 service_flags = 10 cmd_name = 0xffff80ffbffff5b3 "backup" i = 16 quick_init = false c = -1 ---------------------------------------------------------------- 2) and without the acl plugin => crashes with signal 11 (crashes also for 2.2 doveadm backup -R with source server dovecot 2.1.15) That was the point I paniced also! doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: auth input: cyrtest1(a)iai.uni-bonn.de master_user=cyrtest1(a)iai.uni-bonn.de quota_rule=*:storage=512M uid=13004 gid=13004 home=/m/d/user/iai.uni-bonn.de/cyrtest1 doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Added userdb setting: plugin/master_user=cyrtest1(a)iai.uni-bonn.de doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Added userdb setting: plugin/quota_rule=*:storage=512M doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Effective uid=13004, gid=13004, home=/m/d/user/iai.uni-bonn.de/cyrtest1 doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:/m/d/imap/mbox/iai.uni-bonn.de/cyrtest1:INDEX=/m/d/imap/meta/iai.uni-bonn.de/cyrtest1:MAILBOXDIR=mailboxes/ doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: fs: root=/m/d/imap/mbox/iai.uni-bonn.de/cyrtest1, index=/m/d/imap/meta/iai.uni-bonn.de/cyrtest1, indexpvt=, control=, inbox=, alt= doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1 doesn't exist yet, using default permissions doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : Using permissions from /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1: mode=0700 gid=default dsync(cyrtest1(a)iai.uni-bonn.de): Debug: Effective uid=13004, gid=13004, home=/m/d/user/iai.uni-bonn.de/cyrtest1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc: dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc: root=, index=, indexpvt=, control=, inbox=, alt= dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Looking up IP address dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Connecting to 10.11.12.13:993 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Starting SSL handshake dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Server capabilities: IMAP4rev1 LITERAL+ ID ENABLE AUTH=LOGIN AUTH=PLAIN SASL-IR dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Authenticating as cyrusmaster for user cyrtest1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Server capabilities: IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxte QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SORT SORT=MODSEQ SORT=DISPLAY THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE LIST-EXTENDED WITHIN QRESYNC SCAN XLIST URLAUTH URLAUTH=BINARY LOGINDISABLED COMPRESS=DEFLATE IDLE dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Authenticated successfully dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=recv_handshake dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=send_mailbox_tree_deletes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=send_mailbox_tree_deletes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=send_mailbox_tree_deletes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=recv_mailbox_tree changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=send_mailbox_tree_deletes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=send_mailbox_tree_deletes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=recv_mailbox_tree dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=recv_mailbox_tree_deletes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=send_mailbox_tree_deletes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=recv_mailbox_tree changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=recv_mailbox_tree_deletes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=master_send_mailbox changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=recv_mailbox_tree dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=recv_mailbox_tree_deletes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=master_send_mailbox dsync(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1/mailboxes/INBOX doesn't exist yet, using default permissions dsync(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : Using permissions from /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1: mode=0700 gid=default dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=slave_recv_mailbox changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=recv_mailbox_tree_deletes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=master_send_mailbox changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=slave_recv_mailbox dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=done changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=master_send_mailbox dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=sync_mails changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=done dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in box 'INBOX' recv_state=mailbox send_state=mailbox dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out box 'INBOX' recv_state=mailbox send_state=mailbox changed=0 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=done changed=0 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=sync_mails dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=done changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=done dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in box 'INBOX' recv_state=mailbox send_state=mailbox dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out box 'INBOX' recv_state=changes send_state=mail_requests changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=done changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=done dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=changes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=changes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=done changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=done dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in box 'INBOX' recv_state=changes send_state=mail_requests dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out box 'INBOX' recv_state=changes send_state=mail_requests changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=done changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=done dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=changes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=mails changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=done changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=done dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in box 'INBOX' recv_state=changes send_state=mail_requests Segmentation fault (core dumped) Core was generated by `/m/sw/dc/a/bin/doveadm -Dv backup -R -u cyrtest1(a)iai.uni-bonn.de -m INBOX imapc'. Program terminated with signal 11, Segmentation fault. [New process 94912 ] #0 0x00000000004578cc in dsync_ibc_send_mail_request (ibc=0x4a9f20, request=0x5441c0) at dsync-ibc.c:38 38 return ibc->v.is_send_queue_full(ibc) ? (gdb) bt full #0 0x00000000004578cc in dsync_ibc_send_mail_request (ibc=0x4a9f20, request=0x5441c0) at dsync-ibc.c:38 __FUNCTION__ = "dsync_ibc_send_mail_request" #1 0x000000000044a6b1 in dsync_brain_send_mail_request (brain=0x4aa5e0) at dsync-brain-mails.c:25 request = (const struct dsync_mail_request *) 0x5441c0 __FUNCTION__ = "dsync_brain_send_mail_request" #2 0x000000000044ae95 in dsync_brain_sync_mails (brain=0x4aa5e0) at dsync-brain-mails.c:25 changed = true __FUNCTION__ = "dsync_brain_sync_mails" #3 0x00000000004468c5 in dsync_brain_run_real (brain=0x4aa5e0, changed_r=0xffff80ffbfffef4f) at dsync-brain.c:97 changed = false ret = true #4 0x00000000004469c9 in dsync_brain_run (brain=0x4aa5e0, changed_r=0xffff80ffbfffef4f) at dsync-brain.c:97 _data_stack_cur_id = 2 ret = false #5 0x0000000000443a44 in cmd_dsync_run_local (ctx=0x49d2a0, user=0x4a5b40, brain=0x4aa5e0, ibc2=0x4aa260) at ../../../src/lib/array.h:197 brain2 = (struct dsync_brain *) 0x4ef910 user2 = (struct mail_user *) 0x4b5650 set_parser = (struct setting_parser_context *) 0x4a39b0 set_line = 0x48c6b0 "mail_location=imapc:" path1 = 0x48d348 "/m/d/imap/mbox/iai.uni-bonn.de/cyrtest1/mailboxes" path2 = 0x0 brain1_running = true brain2_running = true changed1 = false changed2 = true ret = 0 __FUNCTION__ = "cmd_dsync_run_local" #6 0x000000000044405d in cmd_dsync_run (_ctx=0x49d2a0, user=0x4a5b40) at ../../../src/lib/array.h:197 ctx = (struct dsync_cmd_context *) 0x49d2a0 ibc = (struct dsync_ibc *) 0x4a9f20 ibc2 = (struct dsync_ibc *) 0x4aa260 brain = (struct dsync_brain *) 0x4aa5e0 sync_ns = (struct mail_namespace *) 0x0 brain_flags = 13 remote_errors_logged = false status = 0 ret = 0 #7 0x00000000004284ba in doveadm_mail_next_user (ctx=0x49d2a0, input=0xffff80ffbffff0e0, error_r=0xffff80ffbffff148) at doveadm-mail.c:73 error = 0xffff80ffbffff278 "âõÿ¿ÿ\200ÿÿ" ret = 0 __FUNCTION__ = "doveadm_mail_next_user" #8 0x0000000000428680 in doveadm_mail_single_user (ctx=0x49d2a0, input=0xffff80ffbffff0e0, error_r=0xffff80ffbffff148) at doveadm-mail.c:73 __FUNCTION__ = "doveadm_mail_single_user" #9 0x0000000000428f24 in doveadm_mail_cmd (cmd=0x49cac8, argc=7, argv=0xffff80ffbffff278) at doveadm-mail.c:73 input = {module = 0x0, service = 0x4671b2 "doveadm", username = 0xffff80ffbffff5c0 "cyrtest1(a)iai.uni-bonn.de", session_id = 0x0, local_ip = {family = 0, u = {ip6 = {_S6_un = {_S6_u8 = '\0' <repeats 15 times>, _S6_u32 = {0, 0, 0, 0}, __S6_align = 0}}, ip4 = { S_un = {S_un_b = {s_b1 = 0 '\0', s_b2 = 0 '\0', s_b3 = 0 '\0', s_b4 = 0 '\0'}, S_un_w = {s_w1 = 0, s_w2 = 0}, S_addr = 0}}}}, remote_ip = {family = 0, u = {ip6 = {_S6_un = {_S6_u8 = '\0' <repeats 15 times>, _S6_u32 = {0, 0, 0, 0}, __S6_align = 0}}, ip4 = { S_un = {S_un_b = {s_b1 = 0 '\0', s_b2 = 0 '\0', s_b3 = 0 '\0', s_b4 = 0 '\0'}, S_un_w = {s_w1 = 0, s_w2 = 0}, S_addr = 0}}}}, local_port = 0, remote_port = 0, userdb_fields = 0x0, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0} ctx = (struct doveadm_mail_cmd_context *) 0x49d2a0 getopt_args = 0x48a778 "+dEfl:m:n:Nr:Rs:RAS:u:" wildcard_user = 0x0 error = 0x0 ret = 0 c = -1 #10 0x000000000042919b in doveadm_mail_try_run (cmd_name=0xffff80ffbffff5b3 "backup", argc=7, argv=0xffff80ffbffff248) at doveadm-mail.c:73 cmd__foreach_end = (const void *) 0x49cb10 cmd = (const struct doveadm_mail_cmd *) 0x49cac8 cmd_name_len = 6 __FUNCTION__ = "doveadm_mail_try_run" #11 0x00000000004332b3 in main (argc=7, argv=0xffff80ffbffff248) at doveadm.c:63 service_flags = 10 cmd_name = 0xffff80ffbffff5b3 "backup" i = 16 quick_init = false c = -1 ------------------------------------------- # 20130226: /m/sw/dc/2.2-20130226/etc/dovecot/dovecot.conf # OS: SunOS 5.11 i86pc zfs auth_debug = yes auth_debug_passwords = yes auth_default_realm = iai.uni-bonn.de auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = sha1 base_dir = /var/run/dovecot/ debug_log_path = /tmp/dcdeb director_mail_servers = 10.8.130.2 10.8.130.1 director_servers = 10.8.130.22 10.8.130.21 imapc_features = rfc822.size imapc_host = mailbox.iai.uni-bonn.de imapc_master_user = cyrusmaster imapc_password = password imapc_port = 993 imapc_ssl = imaps imapc_ssl_verify = no imapc_user = %n instance_name = be lmtp_rcpt_check_quota = yes lmtp_save_to_detail_mailbox = yes log_path = /tmp/dcerr login_trusted_networks = 10.8.130.20/30 mail_attachment_dir = /m/d/imap/att mail_attachment_hash = %{size}=%{sha512} mail_attachment_min_size = 90 k mail_debug = yes mail_gid = 13004 mail_location = sdbox:/m/d/imap/mbox/%d/%n:INDEX=/m/d/imap/meta/%d/%n:MAILBOXDIR=mailboxes/ mail_uid = 13004 mdbox_rotate_interval = 1 days namespace { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . type = private } passdb { args = username_format=%n /m/d/etc/user/global/pw-master-giat driver = passwd-file master = yes pass = yes } passdb { args = username_format=%n /m/d/etc/user/global/pw-master-top driver = passwd-file master = yes pass = yes } passdb { args = username_format=%n /m/d/etc/user/global/pw-master-top driver = passwd-file } passdb { args = scheme=CRYPT username_format=%u /m/d/etc/user/%d/pw driver = passwd-file } plugin { acl = vfile:/m/d/etc/acl:cache_secs=300 acl_shared_dict = file:/m/d/etc/shared/mailboxes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mailbox_create save flag_change mail_log_fields = uid box msgid size quota = dict:INBOX quota::file:%h/quota quota_rule = *:storage=512M } service auth-worker { user = doveauth } service auth { user = doveauth } service imap-login { process_min_avail = 4 service_count = 1 } service imap { executable = imap wsdc-postlogin-imap process_limit = 1024 } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 2003 } } service pop3 { executable = pop3 wsdc-postlogin-pop3 process_limit = 64 } service wsdc-postlogin-imap { executable = script-login /m/sw/dc/local/wsdc-postlogin.sh-imap user = $default_internal_user } service wsdc-postlogin-pop3 { executable = script-login /m/sw/dc/local/wsdc-postlogin.sh-pop3 user = $default_internal_user } ssl_cert = </m/sw/dc/a/etc/dovecot/ssl/certs/dovecotCert.pem ssl_key = </m/sw/dc/a/etc/dovecot/ssl/keys/dovecotKey.pem syslog_facility = local6 userdb { args = username_format=%n /m/d/etc/user/global/db-master default_fields = quota_rule=*:storage=512M driver = passwd-file override_fields = uid=dovemail gid=dovemail home=/m/d/user/global/%n } userdb { args = username_format=%u /m/d/etc/user/%d/db default_fields = master_user=%u quota_rule=*:storage=512M driver = passwd-file override_fields = uid=dovemail gid=dovemail home=/m/d/user/%d/%n } verbose_proctitle = yes protocol imap { imap_id_send = name version os os-version support-url support-email mail_max_userip_connections = 3 mail_plugins = } protocol lmtp { debug_log_path = /tmp/lmtp.debug log_path = /tmp/lmtp.error mail_plugins = } protocol pop3 { mail_max_userip_connections = 1 pop3_lock_session = yes }

2 8

Re: [Dovecot] about maildirsize not updating
by mastertoilet＠netzero.net 02 Apr '13

02 Apr '13

Hi sorry for the delay. My configuration is using Centos 6.dovecot 2.1.1.and i have configure the quota plugin.but i am not sure what you mean by dovecot-lda.i just follow the guides on the internet and skim through dovecots documentation.i am using the local unix account for mail account not using virtual users.here is my configuration: [root@mail ~]# dovecot -n # 2.1.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.el6.x86_64 x86_64 CentOS release 6.3 (Final) base_dir = /var/run/dovecot/ mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = " quota" maildir_broken_filename_sizes = yes mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_id_log = * imap_idle_notify_interval = 2 mins mail_plugins = " quota imap_quota" } protocol pop3 { mail_plugins = " quota imap_quota" } i am still not sure why maildirsize is not updating.thanks. ---------- Original Message ---------- On 29.3.2013, at 9.11, mastertoilet(a)netzero.net wrote: > i am currently using roundcube my webmail and configure using dovecot quota plugins. but it seems to not be updating the maildirsize when new mails comes.Deleting the maildirsize will recreate the files correctly.Is there any solutions to this problem with dovecot. Either you're not using dovecot-lda to deliver the mails, or you haven't configured quota plugin correctly for it. dovecot -n output and logs about a mail delivery would help. ____________________________________________________________ How to Sleep Like a Rock Obey this one natural trick to fall asleep and stay asleep all night. http://thirdpartyoffers.netzero.net/TGL3231/515a5604dea5456046511st03duc

1 0

[Dovecot] loop when I enable
by Andreas Meyer 01 Apr '13

01 Apr '13

Hello! I have a nasty problem with a loop when I enable quota_warning. The mailbox fills up with thousands of email within seconds. This happens only with mbox'es retrieved with POP3. From MAILER-DAEMON Thu Mar 21 13:54:07 2013 From: support(a)anup.de Subject: Mailbox Quota-Warnung X-UID: 8036 Status: X-Keywords: Content-Length: 41 Ihre Mailbox ist jetzt zu below% belegt. # doveconf -n # 2.1.7: /usr/etc/dovecot/dovecot.conf auth_mechanisms = plain cram-md5 auth_verbose = yes disable_plaintext_auth = no hostname = delta.bitcorner.eu log_path = /var/log/dovecot1 mail_home = /var/spool/vhosts/%d/%n mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave vacation-seconds namespace inbox { inbox = yes location = prefix = } passdb { args = /etc/dovecot/passwd driver = passwd-file } plugin { autocreate = Trash autocreate2 = Drafts autocreate3 = Sent autosubscribe = Trash autosubscribe2 = Drafts autosubscribe3 = Sent quota = maildir:User quota quota_rule = *:storage=500MB quota_rule2 = Trash:storage=+10%% sieve = ~/.dovecot.sieve sieve_dir = ~/.sieve sieve_extensions = +vacation-seconds sieve_vacation_default_period = 10d sieve_vacation_max_period = 30d sieve_vacation_min_period = 1h } postmaster_address = postmaster(a)bitcorner.de protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { mode = 0666 user = vmail } user = vmail } ssl_cert = </etc/dovecot/ssl/hostcert.pem ssl_key = </etc/dovecot/ssl/hostkey.pem userdb { args = /etc/dovecot/passwd driver = passwd-file } protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log mail_plugins = quota quota sieve } protocol imap { imap_idle_notify_interval = 29 mins mail_max_userip_connections = 20 mail_plugins = quota quota imap_quota autocreate } protocol lmtp { mail_plugins = quota sieve } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } protocol pop3 { mail_max_userip_connections = 10 mail_plugins = quota quota pop3_uidl_format = %08Xu%08Xv } The problem occurs when I add the following to dovecot.conf: quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = -storage=100%% quota-warning below %u # user is no longer over quota The script executed looks like this: #!/bin/sh PERCENT=$1 USER=$2 cat << EOF | /usr/libexec/dovecot/dovecot-lda -d $USER -o "plugin/quota=maildir:User quota:noenforcing" From: support(a)anup.de Subject: Mailbox Quota-Warnung Ihre Mailbox ist jetzt zu $PERCENT% belegt. EOF What can I do? I wonder if there some solution with namespaces possible maybe? Thank you! Andreas

2 2

[Dovecot] stats: duration of sessions, commands
by Lutz Preßler 31 Mar '13

31 Mar '13

Hello Timo, I would like to have reset_timestamp (or another field) in stats dump output of levels session and command. Both session duration and individual command execution times would be interesting data to have. Greetings, Lutz

1 0

[Dovecot] Dovecot 2.2rc3 Client Cert Auth and Webmail -> auth_ssl_require_client_cert problem
by Christian Felsing 31 Mar '13

31 Mar '13

Hello, I would like to set up a Dovecot based mail system which uses X.509 Client Certificates for authentication. A webmail system based on Horde5 should use Dovecot as backend. For now Dovecot works with client certificates issued by my CA and Horde authenticates also with same client certs. Due to protocol it is impossible to use client certs presented by user to Horde for authentication at Dovecot, so Horde should be allowed to authenticate itself without or an arbitrary password to Dovecot. Horde and Dovecot are running in same protected LAN. Unfortunately Dovecot does not support different authentication methods on different IP addresses or ports. This does not work: remote 192.168.116.28/32 { auth_ssl_require_client_cert = no auth_ssl_username_from_cert = yes disable_plaintext_auth = no ssl = yes } Result is "doveconf: Fatal: Error in configuration file /opt/dovecot-2.2.rc3/etc/dovecot/conf.d/10-auth.conf line 103: Auth settings not supported inside local/remote blocks: auth_ssl_require_client_cert" Replacing "auth_ssl_require_client_cert = no" by "ssl_verify_client_cert = no" does not yield in an error, but it does nothing, Dovecot still insists for a client certificate. I afraid that I am trapped by this problem: http://dovecot.2317879.n4.nabble.com/Problem-with-requiring-client-certific… Is there any way to turn off client certs for specific local or remote IP addresses? best regards Christian

3 7

[Dovecot] Incorrect response when opening read-only mailboxes with per-user flags?
by Guido Berhoerster 31 Mar '13

31 Mar '13

After some debugging on the protocol level I've finally found the problem with per-user seen flags in read-only mailboxes. Dovecot actually does allow storing the seen flag on messages but AFAICS it does not communicate that correctly to clients, this is what its response to selecting a read-only mailbox with "lrs" ACL in effect for the logged in user looks like: 2 SELECT "Public/Test" * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 2 EXISTS * 0 RECENT * OK [UNSEEN 2] First unseen. * OK [UIDVALIDITY 1364221612] UIDs valid * OK [UIDNEXT 3] Predicted next UID * OK [HIGHESTMODSEQ 1] Highest 2 OK [READ-ONLY] Select completed. Shouldn't PERMANENTFLAGS contain \Seen here if per-user seen flags are enable and should it even be tagged READ-ONLY at all in this case? At least clients such as Python imaplib, IMAPClient, or Roundcube will open such mailboxes with EXAMINE and thus do not allow the modification of flags. -- Guido Berhoerster

3 4