- dovecot - dovecot.org

[Dovecot] dsync mirror to convert from mbox (1.2x) to mdbox (2.2)
by Ken A 31 Mar '13

31 Mar '13

I'm converting mail from mbox to mdbox. I've copied mail over to a new system, and now I'm running dsync like this: dsync -u username mirror mbox:/folder_location/username:INBOX=/inbox_location/username That seemed to work, with a couple minor errors: > dsync(username): Warning: Our dotlock file /mail_location/username.lock was deleted (locked 20 secs ago, touched 20 secs ago) > dsync(username): Error: file_dotlock_delete() failed with mbox file /mail_location/username: No such file or directory Do I also need to specify where dovecot's indexes are for the old mbox files, or is this not needed for mbox conversions (when they are the source)? Thanks, Ken A.

3 3

[Dovecot] Dovecot METADATA support
by Bruce Marriner 31 Mar '13

31 Mar '13

I've been trying to work with dovecot metadata plugin and posted a question here related to that a few days ago here : http://www.dovecot.org/list/dovecot/2013-March/089241.html I just read today (e-mail on this list) from Timo Sirainen that >> >> Dovecot is getting close to having native METADATA support. >> I am very curious about this. When is "getting close" and I would guess this will be for v2.2? Will this support be the same as the dovecot-metadata-plugin in hg or something completely different? I'm sorry if I'm asking questions that have already been answered. My goal is to use Kolab3 with Dovecot instead of using Cyrus IMAP and Kolab requires metadata/annotation support. Right now I'm testing this using the dovecot-metadata-plugin but I am very interested it learning about native metadata support and testing it with Kolab 3. Any detail you can provide would be very appreciated. Bruce

2 3

[Dovecot] global mail_plugins
by Andreas Meyer 31 Mar '13

31 Mar '13

Hello! How do I know what is specified in the global mail_plugins? # doveconf |grep mail_plugins mail_plugins = mail_plugins = " quota sieve" mail_plugins = " quota imap_quota autocreate" mail_plugins = " sieve" Is it just what is defined in the dovecot.conf and when there is nothing defined there are no global mail_plugins per default? Andreas

2 1

[Dovecot] Cassandra support
by Goktug YILDIRIM 31 Mar '13

31 Mar '13

Hi, I've read some previous threads about Cassandra support. In a message at April 2012 it was written that it would take a few hours after doing some internal stuff. http://dovecot.markmail.org/search/?q=cassandra#query:cassandra%20order%3Ad… I wonder if there have been a progress since then? Or a better alternative came up? -- Goktug

3 2

[Dovecot] Custom Headers/Flags Support in dovecot
by Ramesh Natarajan 31 Mar '13

31 Mar '13

I am currently trying to evaluate if I can use dovecot to be used for my imap server like application. This is not an email application but a generic storage server that uses IMAP protocol to save and retrieve messages. The messages have standard From/To/Date headers and a lot of custom headers for threading conversations e.t.c. As a part of my application requirements I also need to support custom flags and have ability to set/change/retrieve them via IMAP. 1) Does Dovecot support custom flags to be set/changed/retrieved? 2) I understand dovecot optimizes standard RFC822 headers and flags in cache/index files for faster lookups and searches. Does custom headers and flags fall into this optimization algorithm? 3) I am planning to support multiple users and each mailbox may have upto 1000 folders. Each folder may have an average of 20 MIME encoded messages. I am planning to use local storage with single-dbox format. Do you see any issues with this? thanks Ramesh

2 1

[Dovecot] about maildirsize not updating
by mastertoilet＠netzero.net 31 Mar '13

31 Mar '13

Hi. i am currently using roundcube my webmail and configure using dovecot quota plugins. but it seems to not be updating the maildirsize when new mails comes.Deleting the maildirsize will recreate the files correctly.Is there any solutions to this problem with dovecot. ____________________________________________________________ How to Sleep Like a Rock Obey this one natural trick to fall asleep and stay asleep all night. http://thirdpartyoffers.netzero.net/TGL3231/51553ef81818d3ef72750st04duc

2 1

[Dovecot] Virtual - thread refs for labeled message
by Łukasz 31 Mar '13

31 Mar '13

Hi I hope you will understand my problem. I want to make virtual folder called "Virtual/label1-threads". This folder should have: 1. messages labeled fe. $label1 from INBOX and 2. messages from Sent folder inthread refs with those labeled. message1 <-- $label1 INBOX |----message2 <- Sent ------|-----message3 <- INBOX ..... Can anyone help me with this? -- Łukasz

2 1

[Dovecot] Conversion from Evolution maildir to imap
by Paul van der Vlis 31 Mar '13

31 Mar '13

Hello, A customer has a thin-client server with 100+ homedirs with Evolution. They are using POP3 and maildir. Now I want to switch to IMAP. Can I use Dovecot on this maildirs, or does Evolution use another kind of maildir? Does Dovecot change anything in the maildirs? Do I loose my flags this way, like "read" ? Normally I am using Cyrus IMAP. What I want to do is to install Dovecot to have access to the mail over IMAP because Dovecot can do maildir (Cyrus cannot). Then I can use imapsync to sync everything to Cyrus. Do you think that's a good idea? With regards, Paul van der Vlis. -- Paul van der Vlis Linux systeembeheer, Groningen http://www.vandervlis.nl/

2 1

[Dovecot] Managesieve Automatic Homedir Creation: File not Found Error
by linuxer＠netsteps.ch 31 Mar '13

31 Mar '13

Hi all, I'm running dovecot version 2.0.19 (Ubuntu 12.04) and I discovered some unexpected behaviour related to the Dovecot managesieve module. When connecting to the managesieve service from a client for the first time (e.g. roundcube webmail), I get an application error. This is logged by Dovecot: Error: sieve-storage: opendir(/var/.../exampledomain/exampleuser@exampledomain//sieve) failed: No such file or directory. At first glance I thought the problem was caused by the "//" in the directory path. I assume this is just a concatenation of the user virtual home directory (in my case "/var/.../exampledomain/exampleuser@exampledomain/" and the default sieve folder (~/sieve). While this looks wrong it seems not to be the actual problem (should be fixed though?) Then I noticed that the user home directory and sieve data were actually properly created despite the error. When connecting again, it worked without error. The problem can be reproduced by deleting the users virtual home directory and connecting again. A guess would be that the automatic creation of the virtual users homedir folder structure is some asychronous process not being completed in time. I also found this older thread with a similar issue: http://osdir.com/ml/dovecot-development/2010-05/msg00018.html Could also be worth mentioning that I'm running Dovecot on a virtualized host with possibly relatively poor I/O performance (maybe faster environments don't have this problem). Thanks for looking into this, and thx for the really neat dovecot software package! Cheers, L.

2 1

[Dovecot] ACL for root-level mailboxes
by Bradley Rintoul 31 Mar '13

31 Mar '13

Hello: I see in the documentation where it says that if mailboxes are created at the root level it will use the namespace's default ACL. I'm using Dovecot 2.0.9 so there is no default namespace defined, so I'm a bit handicapped here... Anyway, assuming I can figure out how to define a default namespace, how do I specify its ACL? Where would the file describing the access go? Sorry if this is a bit broad, but any help would be appreciated. Thanks, B. Rintoul

2 1

[Dovecot] Please help to make decision
by Tigran Petrosyan 30 Mar '13

30 Mar '13

Hi We are going to implement the "Dovecot" for 1 million users. We are going to use more than 100T storage space. Now we examine 2 solutions NFS or GFS2 via (Fibre Channel storage). Can someone help to make decision? What kind of storage solution we can use to achieve good performance and scalability.

8 9

[Dovecot] 3 node setup without cluster filesystem
by Michael 30 Mar '13

30 Mar '13

Hi everyone, short version: Is there any 3 host (two MX and one frontend IMAP) that can use a shared (iSCSI) ext4 volume? Long version: I am running a very complex setup right now with two MX, two proxies(lmtp/imap)/imap-frontends and two backends mounting an ocfs2 volume. I would like to reduce the complexity (and the number of hosts) and get rid of ocfs2. I ask myself if I can use an ext4 iSCSI-LUN using this setup: MX01 -> lmtp:unix:private/dovecot-lmtp -> mail_home: /var/mail MX02 -> lmtp:unix:private/dovecot-lmtp -> mail_home: /var/mail IMAP01 (imap) -> mail_home: /var/mail Regards Michael

4 3

[Dovecot] Restoring Mails via DSync
by Asai 29 Mar '13

29 Mar '13

Greetings, Can anyone give me a quick pointer to the right command to use for restoring backups made by dsync? I have our whole mail server backed up with it, but not sure how to restore... Any help would be greatly appreciated. -- --Asai

2 2

[Dovecot] changing flags automatically
by Lutz Preßler 28 Mar '13

28 Mar '13

Hello, (2.2:) there is no doveadm subcommand to change flags of messages, is it? The following should work reliably? # mark messages with subject $SUBJECT in mailbox $MAILBOX of user $USERID as read ( i=2 echo "1 SELECT "$MAILBOX doveadm search -u $USERID mailbox $MAILBOX subject "$SUBJECT" \ | while read g u do echo $i" UID STORE "$u" flags (\Seen)" i=$((i+1)); done echo "0 LOGOUT" ) | /usr/lib/dovecot/imap -u $USERID Greetings, Lutz

2 1

[Dovecot] Gmail like labels, three years later
by Pablo Vieira 27 Mar '13

27 Mar '13

On this post http://www.dovecot.org/list/dovecot/2011-June/059605.html I was asking about the possibility of using arbitrary labels on messages, much like Gmail does. On following replies, I was told about few tricks that might be used, that the IMAP protocol was being considering UTF-8 labels and ways to integrate them into the current system, etc., etc., etc. That sounds nice and all. I'm chiming in three years later only to know if things have changed, both at Dovecot and at the IMAP protocol. Are we closer to have proper labels on IMAP? Labels that help sorting messages in virtual folders where a message can belong in several of them? I consider "label vs folder" a done discussion (since labels can always include folders; a labels system can always be implemented as a folders system, but not viceversa; etc), so what's stopping development in that direction? Have any new energies being devoted to that cause? I just seen Dovecot is number 1 among IMAP servers by a large margin. Congratulations to the devs. Aleve.

3 6

Re: [Dovecot] Migrating password scheme
by Joseph Tam 27 Mar '13

27 Mar '13

Andreas wrote: > > I tried the userdb prefetch / postlogin script method to do some password > > manipulation, but it doesn't appear to work for me. In particular, I > > don't think this method works with > > > > userdb { > > driver = passwd-file > > args = /path/to/passwd-file userdb_pw=%w > > } > > > > From what i understand you have to set a userdb_<something> variable > with passdb and userdb prefetch set. The %w variable seems to be > already empty (again?) at userdb stage. Did all of that. The problem is not prefetching, but that you can't pass arguments via the args=.... Dovecot parses the entire line as a password file pathname. Timo Sirainen definitively writes: > With v2.1 try: > > userdb { > driver = passwd-file > args = /path/to/passwd-file > default_fields = pw=%w > } Thanks, Timo. This works beautifully. Furthermore, it doesn't need the userdb prefetch. Summarizing, the minimal incantation for passing dovecot variables to the post-login script is userdb { driver = passwd-file args = /var/dovecot/test/passwd default_fields = pw=%w } service imap { executable = imap postlogin ... } service pop3 { executable = imap postlogin ... } service postlogin { executable = script-login /path/to/postlogin-exec # Careful -- defaults to root user = $default_internal_user unix_listener postlogin { } } I've updated the Dovecot2 wiki, but I am unsure which userdb's "default_fields" applies to, and whether it just applies to postlogin scripts, so I documented it at http://wiki2.dovecot.org/AuthDatabase/PasswdFile Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Authentication failure messages in logs
by Nicolas Mora 27 Mar '13

27 Mar '13

Hello, I'm currently running dovecot on a debian stable and every day, I see this message dozens of time in my logs : Mar 16 11:27:57 hector dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=nicolas rhost=72.53.129.223 user=nicolas on the list archive, this message for example tells to comment out the pam section. http://www.dovecot.org/list/dovecot/2008-July/031966.html Except that my authentication needs pam... Is there any way to solve this without migrating to virtual users ? Thanks in advance Here is my dovecot -n output : # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 3.2.13-grsec-xxxx-grs-ipv6-64 x86_64 Debian 6.0.7 protocols: imap imaps managesieve sieve ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(managesieve): ssl_cert_file: /etc/ssl/localcerts/dovecot.pem ssl_key_file: /etc/ssl/localcerts/dovecot.key login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve lda: postmaster_address: postmaster(a)babelouest.org mail_plugins: sieve mail_plugin_dir: /usr/lib/dovecot/modules/lda sieve_dir: ~/ auth default: mechanisms: plain login passdb: driver: pam args: dovecot userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 plugin: sieve: ~/.dovecot.sieve

2 2

[Dovecot] Error Building v2.2
by Nikolaos Milas 27 Mar '13

27 Mar '13

Hello, I am trying to build Dovecot v2.2 (nightly version 20130326, which I have renamed and use as 2.2.0) on CentOS 6.4 x86_64 and I am having a problem: ... + ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu --target=x86_64-redhat-linux-gnu --program-prefix= --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib64 --libexecdir=/usr/libexec --localstatedir=/var --sharedstatedir=/var/lib --mandir=/usr/share/man --infodir=/usr/share/info 'INSTALL_DATA=install -c -p -m644' --docdir=/usr/share/doc/dovecot-2.2.0 --disable-static --disable-rpath --with-nss --with-shadow --with-pam --with-gssapi=plugin --with-ldap=plugin --with-sql=plugin --with-pgsql --with-mysql --with-sqlite --with-zlib --with-libcap --with-ssl=openssl --with-ssldir=/etc/pki/dovecot --with-solr --with-docs --with-bzlib configure: error: unrecognized option: --docdir=/usr/share/doc/dovecot-2.2.0 I found here: http://www.dovecot.org/list/dovecot/2011-April/058420.html that --docdir option exists when autoconf version > 2.60. Yet: $ rpm -qa | grep autoconf autoconf-2.63-5.1.el6.noarch So, what may be wrong? Please help. Thanks, Nick

2 12

[Dovecot] Problem when indexing maildir with a large number of folders
by Andre Rodier 27 Mar '13

27 Mar '13

Hello everybody, As part of a migration from exchange 2003 to dovecot, I have converted a lot of PST files for a user. I am importing his PST files in a maildir folder called 'Archives'. Actually, I reached about 770 'Archives' folders, and the total length of their names is about 59k characters. Thanks to wc! I am using Maildir++ I can run the doveadm index command on the private namespace, however, I am not able to do this on the virtual folders. Here the error I have: > doveadm(john smith): Panic: file mail-index-transaction-update.c: line 875 (mail_index_update_header_ext): assertion failed: (offset <= (uint16_t)-1 && size > <= (uint16_t)-1 && offset + size <= (uint16_t)-1) > doveadm(gareth walters): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7f9b7100714a] -> > /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7f9b7100720a] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f9b70fde82a] -> > /usr/lib/dovecot/libdovecot-storage.so.0(+0xb8079) [0x7f9b7130a079] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_storage_sync_init+0x788) > [0x7f9b6f1775a8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x33) [0x7f9b712cf3e3] -> > /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x27) [0x7f9b712cf507] -> doveadm(+0x16618) [0x7f9b719c8618] -> doveadm(+0x13346) [0x7f9b719c5346] -> > doveadm(+0x13e21) [0x7f9b719c5e21] -> doveadm(doveadm_mail_try_run+0x161) [0x7f9b719c62e1] -> doveadm(main+0x3d1) [0x7f9b719c4ef1] -> > /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f9b70c57ead] -> doveadm(+0x13125) [0x7f9b719c5125] > Aborted I can see I have reached a limit, but is there any configuration value I can use to increase this limit, please? Kind regards, André.

4 4

[Dovecot] Implementing Single instance attachment storage (SIS) with sdbox
by megodin＠inboxalias.com 27 Mar '13

27 Mar '13

Hi there, as I want to implement data dedupliction on my dovecot system (eg. a users sends the same attchment to 5 different users on my system so I only have to store the attachment one time and set pointers to the file) , I found out it could be possible with Single instance attachment storage (SIS), so I read several pages about SIS as it was quoted here (http://wiki2.dovecot.org/MailboxFormat/dbox) > dbox storage is extensible. Single instance attachment storage was already implemented as such extension. But I did not found any further intructions in Dovecot Wiki how to implement it - however, on Dovecots blog there was an older article from Timo which gave some indication how to get it work (http://blog.dovecot.org/2010/07/single-instance-attachment-storage.html) > mail_location = dbox:~/dbox:ATTACHMENTS=/attachments/$/$ But when I change my configuration according to this (I use sdbox as mail format), I just get a "Unknown setting: ATTACHMENTS" in my mail.err log. Can anybody give me a clue how to get this working? Thanks in advance! Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/produkte/basic/index.html _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

2 1

[Dovecot] Sieve Vacation for redirected email
by Dave Gattis 27 Mar '13

27 Mar '13

I posted this elsewhere, but under an old post. I apologize for the repeated question. Hello Dovecot Users, Dovecot 2.1.7 Our emails are redirected from the home office causing all vacation responses to fail with, "discarding vacation response for implicitly delivered message; no known (envelope) recipient address found in message headers". I need to use the Sieve Vacation option but cannot figure out how to get it working for us. If I send to the local address, it works fine. If I send to the redirect address, it fails with above error. Unfortunately, all of our emails are redirects from a single domain. There's got to be some way to make it work. Any help would be greatly appreciated, Dave Stephan Bosch-2 wrote > + Vacation extension: finally added support for using the original > recipient in vacation address check. It is also possible to disable > the recipient address check entirely. Check doc/vacation.txt for > configuration information.

5 4

[Dovecot] Importing emails from PST Archives
by Andre Rodier 27 Mar '13

27 Mar '13

Hello everyone, I am currently migrating a small company from exchange 2003 to Dovecot. So far, the most painful process has been the PST archives. (Except the inconditionals of Outlook) I have been able to create the directory structure using the last version of readpst, with the -r flag. But once this done, I have not been able to find one tool that worked correctly. Maybe the configuration I have is complex. The perl script to transform mbox files into maildirs in the dovecot distribution is old, and crashed many times in the middle of the process. I had a look to the script, and gave up trying to fix it. I found a python script that was supposed to crawl this folder structure, and to replicate it using IMAP commands, but it crashed as well, and restarting the process would import twice the same messages. The script is here: http://costela.net/2011/06/importing-an-outlook-pst-into-imap/ I found another python script that was working better, and seemed to be well written, but with one mbox to one IMAP folder only. It can be found here: http://imap-upload.svn.sourceforge.net/viewvc/imap-upload/trunk/ I have modified, and I have added some minor fixes: - Recursively traverse a folder structure, and replicate it using IMAP commands on the server. - Properly manage folder names with special characters. (dovecot can manage these characters using the listescape plugin). - Avoid taking all the resources of the server (A quirty hack that can change). I am not an expert in Python, and the script has been quickly writter to fit my needs. However I think it can be modified easily to any configuration. In the future, maybe this script can use the libpst python bindings to import the emails directly. The last version of the script, modified is here: https://github.com/arodier/EmailTools/tree/master/Migration. Do not hesitate to help me, to make the script as generic as possible, particularly if you are a python expert. I post this on this list, because I think you maybe interested if you are in the same case as me. The license is not specified, but I will probably use GPLv3. Regards, André

2 2

[Dovecot] Released Pigeonhole v0.2.4 for Dovecot v2.0.14
by Stephan Bosch 26 Mar '13

26 Mar '13

Hello Dovecot users, I release a new version of Pigeonhole tonight. This release extends the configuration capabilities of the include and vacation extensions, adds the ihave extension (RFC 5463), and fixes a few small other things. Judging by Timo's plans, this will be one of the last feature releases for Dovecot v2.0, since I'll be switching active development to Dovecot v2.1 once that matures a little more. Changelog v0.2.4: + Vacation extension: finally added support for using the original recipient in vacation address check. It is also possible to disable the recipient address check entirely. Check doc/vacation.txt for configuration information. + Include extension: made limits on the include depth and the total number of included scripts configurable. Check doc/include.txt for configuration information. + Implemented ihave extension. This allows checking for the availability of Sieve language extensions at 'runtime'. Actually, this is checked at compile time. At runtime the interpreter checks whether extensions that were not previously available are still unavailable. If the situation changed, the script is re-compiled and the ihave tests are evaluated again. + Sieve: optimized compilation of tests that yield constant results (i.e. known at compile tme), such as 'true' and 'false'. No code is produced anymore for script sections that are never executed. Also, semantics are not verified anymore in uncompiled script sections. + Made vnd.dovecot.debug extension available to the LDA plugin instead of only the command line tools. + Sieve: redirect action now adds X-Sieve-Redirected-From header (mainly for people using SPF/SRS). - Sieve: fixed bug in handling flags and keywords; in case of error an assertion was triggered. - Script storage: improved handling of unconfigured user home directory. Originally this would produce an unhelpful error message. - Imap4flags extension: prevent forcibly enabling imap4flags when imapflags is enabled. - Fixed various -Wunused-but-set-variable compiler warnings. - Include extension: forgot to check variable identifier syntax for 'global' command. - Sieve: fixed debug mode; no messages were logged in some situations. - sievec tool: forgot to enable -D (debug) parameter. The release is available as follows: http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.4.tar.gz http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.4.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.0 wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

2 1

[Dovecot] Per-user seen flags for public read-only mailboxes
by Guido Berhoerster 26 Mar '13

26 Mar '13

Hi, I have some trouble getting per-user SEEN-flags to work with read-only mailboxes in a public namespace. Basically, I'm following the wiki at http://wiki2.dovecot.org/SharedMailboxes/Public#Maildir:_Per-user_.2BAFw-Se… and the relevant configuration is as follows: namespace { inbox = yes location = prefix = separator = / type = private } namespace { location = maildir:/srv/mail/public:LAYOUT=fs:INDEX=~/public prefix = Public/ separator = / subscriptions = no type = public } plugin { acl = vfile ... } protocol imap { mail_plugins = " acl quota trash zlib autocreate imap_acl imap_quota imap_zlib" } I have a virtual-user setup with static userdb and there is no permissions problem since everything is created through dovecot: mail_gid = vmail mail_location = mdbox:~/mdbox mail_uid = vmail [...] userdb { args = uid=vmail gid=vmail home=/srv/mail/virtual/%n driver = static } The content of /srv/mail/public/dovecot-acl (and the one of all mailboxes below it) is: owner lrwstipekxa authenticated lr Users can access all mailboxes in the Public/ namespace and read the messages and I can see that dovecot.index.cache and dovecot.index.log are created under ~/public, however setting the SEEN flag for a message is ignored since the mailbox is read-only. Changing the ACL from authenticated lr to authenticated lrs allows user to set the SEEN flag, but globally on the actual mailbox. How can I get per-user SEEN flags to work? The Dovecot version is 2.0.9. Thanks, -- Guido Berhoerster

3 9

[Dovecot] Dovecot 2.1.15 on CentOS 6.4 with metadata-plugin
by Bruce Marriner 25 Mar '13

25 Mar '13

Hello, I hope somebody can help me with this :) I am trying to get Dovecot 2.1 working with Kolab 3.0 and to start that processes I need? to compile the Dovecot metadata plugin with Dovecot. For the plugin to compile correctly against the Dovecot source code Dovecot must first be patched with a patch from the plugin author (Dennis Schridde) that is currently not part of the Dovecot code (Timo, could this be added to Dovecot?) I am documenting this entire process and once it's finished it may also be helpful to the Dovecot community. You can see some of my progress, or lack of, and errors here : http://bmts.us/wiki/doku.php?id=article:kolab:dovecot In order to compile the plugin I have removed CentOS yum packages for autoconf, automake, and libtool and downloaded, compiled, and installed versions autoconf 2.69, automake 1.12.6, and libtool 2.4.2. If I download Dovecot (not from hg) I can run ./configure and make without any problems. But, to add the patch to Dovecot I need to run the autoreconf command and this is where I have trouble. [root@kolab dovecot-2.1.15]# autoreconf aclocal: warning: autoconf input should be named 'configure.ac', not 'configure.in' configure.in:284: warning: macro 'AM_ICONV' not found in library configure.in:284: error: possibly undefined macro: AM_ICONV If this token and others are legitimate, please use m4_pattern_allow. See the Autoconf documentation. autoreconf: /usr/local/bin/autoconf failed with exit status: 1 I read this is related to gettext, so I installed gettext 0.18.2 from source and now I get the following errors : [root@kolab dovecot-2.1.15]# autoreconf aclocal: warning: autoconf input should be named 'configure.ac', not 'configure.in' automake: warning: autoconf input should be named 'configure.ac', not 'configure.in' automake: warning: autoconf input should be named 'configure.ac', not 'configure.in' src/plugins/acl/Makefile.am:16: error: 'module_LTLIBRARIES' is used but 'moduledir' is undefined src/plugins/acl/Makefile.am:19: warning: variable 'lib01_acl_plugin_la_SOURCES' is defined but no program or src/plugins/acl/Makefile.am:19: library has 'lib01_acl_plugin_la' as canonical name (possible typo) src/plugins/acl/Makefile.am:14: warning: variable 'lib01_acl_plugin_la_LDFLAGS' is defined but no program or src/plugins/acl/Makefile.am:14: library has 'lib01_acl_plugin_la' as canonical name (possible typo) src/plugins/autocreate/Makefile.am:11: error: 'module_LTLIBRARIES' is used but 'moduledir' is undefined src/plugins/autocreate/Makefile.am:14: warning: variable 'lib20_autocreate_plugin_la_SOURCES' is defined but no program or src/plugins/autocreate/Makefile.am:14: library has 'lib20_autocreate_plugin_la' as canonical name (possible typo) src/plugins/autocreate/Makefile.am:9: warning: variable 'lib20_autocreate_plugin_la_LDFLAGS' is defined but no program or src/plugins/autocreate/Makefile.am:9: library has 'lib20_autocreate_plugin_la' as canonical name (possible typo) ... ... ... ... autoreconf: automake failed with exit status: 1

1 0

[Dovecot] doveadm with multiple commands
by Timo Sirainen 25 Mar '13

25 Mar '13

This has been in my TODO for a while and today I implemented it (but didn't dare to test it yet :) So the problem has been that you want to run for example: doveadm expunge -A mailbox Trash savedbefore 7d doveadm purge -A This is annoying because it scans through the users' mailboxes twice, wasting disk IO and CPU. So how to make it do the scan only once? The syntax I thought of today would be: doveadm multi [-A | -u wildcards] <separator string> <comand 1> [<separator string> <command 2> [...]] So the first two commands could be for example: doveadm multi -A : expunge mailbox Trash savedbefore 7d : purge The ':' character is the separator. Any other string could be used as well, for example "?SEP?" or whatever. Thoughts? Any better name for the command than "multi"?

6 13

[Dovecot] dsync replication: assertion failed: (ibc->value_input == NULL)
by Oli Schacher 25 Mar '13

25 Mar '13

current hg (33e78edac8f5) Mar 25 07:47:27 fumailsynctest2 dovecot: dsync-remote(<munged>): Panic: file dsync-ibc-stream.c: line 527 (dsync_ibc_stream_input_next): assertion failed: (ibc->value_input == NULL) Mar 25 07:47:27 fumailsynctest2 dovecot: dsync-remote(<munged>): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x5ebea) [0x7f67d85ffbea] -> /usr/lib64/dovecot/libdovecot.so.0(+0x5ec36) [0x7f67d85ffc36] -> /usr/lib64/dovecot/libdovecot.so.0(+0x1fcea) [0x7f67d85c0cea] -> dovecot/doveadm-server() [0x4258ec] -> dovecot/doveadm-server() [0x4268f6] -> dovecot/doveadm-server(dsync_brain_sync_mails+0x426) [0x41aa66] -> dovecot/doveadm-server(dsync_brain_run+0x162) [0x4172a2] -> dovecot/doveadm-server() [0x417940] -> dovecot/doveadm-server() [0x428410] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f67d860ed36] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f67d860fde7] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f67d860ecd8] -> dovecot/doveadm-server() [0x414fda] -> dovecot/doveadm-server() [0x40c71f] -> dovecot/doveadm-server() [0x41459a] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f67d860ed36] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f67d860fde7] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f67d860ecd8] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f67d85c5743] -> dovecot/doveadm-server(main+0x121) [0x414ce1] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x3400a1ecdd] -> dovecot/doveadm-server() [0x40c109] Mar 25 07:47:27 fumailsynctest2 dovecot: dsync-remote(<munged>): Fatal: master: service(doveadm): child 27336 killed with signal 6 (core dumped) (gdb) bt full #0 0x0000003400a328a5 in raise () from /lib64/libc.so.6 No symbol table info available. #1 0x0000003400a34085 in abort () from /lib64/libc.so.6 No symbol table info available. #2 0x00007f67d85ffbf8 in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:191 backtrace = 0x1baf510 "/usr/lib64/dovecot/libdovecot.so.0(+0x5ebea) [0x7f67d85ffbea] -> /usr/lib64/dovecot/libdovecot.so.0(+0x5ec36) [0x7f67d85ffc36] -> /usr/lib64/dovecot/libdovecot.so.0(+0x1fcea) [0x7f67d85c0cea] -> dovec"... #3 0x00007f67d85ffc36 in i_internal_fatal_handler (ctx=0x7ffffc4466c0, format=<value optimized out>, args=<value optimized out>) at failures.c:652 status = 0 #4 0x00007f67d85c0cea in i_panic (format=0x6ac8 <Address 0x6ac8 out of bounds>) at failures.c:263 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7ffffc446790, reg_save_area = 0x7ffffc4466d0}} #5 0x00000000004258ec in dsync_ibc_stream_input_next (ibc=0x1bda990, item=ITEM_MAILBOX_ATTRIBUTE, decoder_r=0x7ffffc446808) at dsync-ibc-stream.c:527 line_item = ITEM_NONE line = <value optimized out> error = <value optimized out> i = <value optimized out> __FUNCTION__ = "dsync_ibc_stream_input_next" #6 0x00000000004268f6 in dsync_ibc_stream_recv_mailbox_attribute (_ibc=0x1bda990, attr_r=0x7ffffc446878) at dsync-ibc-stream.c:1311 ibc = 0x1bda990 pool = 0x1bdabc0 decoder = <value optimized out> attr = 0x1bdabe0 value = <value optimized out> ret = <value optimized out> __FUNCTION__ = "dsync_ibc_stream_recv_mailbox_attribute" #7 0x000000000041aa66 in dsync_brain_recv_mailbox_attribute (brain=0x1bdc890) at dsync-brain-mails.c:68 attr = <value optimized out> input = <value optimized out> ret = <value optimized out> #8 dsync_brain_sync_mails (brain=0x1bdc890) at dsync-brain-mails.c:316 changed = false __FUNCTION__ = "dsync_brain_sync_mails" #9 0x00000000004172a2 in dsync_brain_run_real (brain=0x1bdc890, changed_r=0x7ffffc44698f) at dsync-brain.c:423 changed = false ret = true #10 dsync_brain_run (brain=0x1bdc890, changed_r=0x7ffffc44698f) at dsync-brain.c:452 _data_stack_cur_id = 5 ret = true #11 0x0000000000417940 in dsync_brain_run_io (context=0x1bdc890) at dsync-brain.c:41 brain = 0x1bdc890 changed = false try_pending = true #12 0x0000000000428410 in dsync_ibc_stream_input (ibc=0x1bda990) at dsync-ibc-stream.c:194 No locals. #13 0x00007f67d860ed36 in io_loop_call_io (io=0x1bc9f30) at ioloop.c:387 ioloop = 0x1bb5720 t_id = 4 #14 0x00007f67d860fde7 in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:215 ctx = 0x1bb8550 events = <value optimized out> event = 0x1bb85c0 ---Type <return> to continue, or q <return> to quit--- list = 0x1bbe320 io = <value optimized out> tv = {tv_sec = 4, tv_usec = 891617} msecs = <value optimized out> ret = 1 i = <value optimized out> call = <value optimized out> __FUNCTION__ = "io_loop_handler_run" #15 0x00007f67d860ecd8 in io_loop_run (ioloop=0x1bb5720) at ioloop.c:406 No locals. #16 0x0000000000414fda in cmd_dsync_server_run (_ctx=0x1bcb560, user=0x1bd49b0) at doveadm-dsync.c:862 ctx = 0x1bcb560 ibc = 0x1bda990 brain = 0x1bdc890 temp_prefix = 0x1baf378 #17 0x000000000040c71f in doveadm_mail_next_user (ctx=0x1bcb560, input=<value optimized out>, error_r=0x7ffffc446ae0) at doveadm-mail.c:309 error = <value optimized out> ret = 0 __FUNCTION__ = "doveadm_mail_next_user" #18 0x000000000041459a in doveadm_mail_cmd_server_run (conn=0x1bbe510) at client-connection.c:115 error = 0x7f67d85a1000 "\177ELF\002\001\001" ret = <value optimized out> #19 client_handle_command (conn=0x1bbe510) at client-connection.c:217 ctx = 0x1bcb560 flags = <value optimized out> cmd_name = <value optimized out> input = {module = 0x0, service = 0x42ce7c "doveadm", username = 0x1bad569 "<munged>", session_id = 0x0, local_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, remote_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, local_port = 0, remote_port = 0, userdb_fields = 0x0, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0} argc = 2 #20 client_connection_input (conn=0x1bbe510) at client-connection.c:317 args = 0x1bad5b0 _data_stack_cur_id = 3 line = <value optimized out> ok = true #21 0x00007f67d860ed36 in io_loop_call_io (io=0x1bbe2d0) at ioloop.c:387 ioloop = 0x1bb5720 t_id = 2 #22 0x00007f67d860fde7 in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:215 ctx = 0x1bb8550 events = <value optimized out> event = 0x1bb85c0 list = 0x1bbe320 io = <value optimized out> tv = {tv_sec = 2147483, tv_usec = 0} msecs = <value optimized out> ret = 1 i = <value optimized out> call = <value optimized out> __FUNCTION__ = "io_loop_handler_run" #23 0x00007f67d860ecd8 in io_loop_run (ioloop=0x1bb5720) at ioloop.c:406 ---Type <return> to continue, or q <return> to quit--- No locals. #24 0x00007f67d85c5743 in master_service_run (service=0x1bb55c0, callback=<value optimized out>) at master-service.c:550 No locals. #25 0x0000000000414ce1 in main (argc=1, argv=0x1bb53a0) at main.c:91 set_roots = {0x42cc00, 0x0} error = 0x0

2 1

[Dovecot] nopassword not working in Dovecot 2.2rc3?
by Christian Felsing 25 Mar '13

25 Mar '13

Hello, I got some problems while set up a test system for Client Cert Auth, therefore passwords are not requred. SELECT NULL AS password, 'Y' as nopassword, userid AS user FROM users WHERE userid = 'user(a)example.net' shows exactly what is expected, bur Dovecot does net regongnize 'Y' as nopassword: Mar 25 11:18:04 dovecot dovecot: auth: Debug: sql(user(a)example.net,192.168.200.6,<gndyHr3Y/gCwxigG>): query: SELECT NULL AS password, 'Y' as nopassword, userid AS user FROM users WHERE userid = 'user(a)example.net' Mar 25 11:18:04 dovecot dovecot: auth: sql(user(a)example.net,192.168.200.6,<gndyHr3Y/gCwxigG>): Empty password returned without nopassword Mar 25 11:18:06 dovecot dovecot: auth: Debug: client passdb out: FAIL#0112#011user=user(a)example.net Mar 25 11:18:07 dovecot dovecot: imap-login: Disconnected (auth failed, 2 attempts in 9 secs): user=<user(a)example.net>, method=PLAIN, rip=192.168.200.6, lip=192.168.200.22, TLS As shown on http://wiki2.dovecot.org/AuthDatabase/SQL select statement above should prevent Dovecot from verifying password. any hints? best regards Christian

1 0

[Dovecot] Dovecot v2 multiple domains
by Pavel Dimow 25 Mar '13

25 Mar '13

Hello, I would like to have multiple domains on same server (with different ip's) and I want that user logs with username with domain part for every domain, but I can't find any documentation on this. To be more precise I found a post regarding dovecot v1 that suggest making separate init scripts for every domain but it also suggest that dovecot v2 will support this in code. This is the post http://dovecot.org/pipermail/dovecot/2006-April/012455.html Am I missing something or this is not still possible?

2 2

[Dovecot] Dovecot DNS queries its own host many times a second
by Dominic Malolepszy 25 Mar '13

25 Mar '13

Hi, We have observed that Dovecot appears to make a DNS lookup of its own hostname many times a second. Each Dovecot server in our cluster appears to be doing around 50 queries per second to find out its own hostname. Rsyslog was the first thing we assumed was the cause, however stopping it did not help. Also the fact that at the time Dovecot was doing around 50 logins a second, seemed to correlate with it making these queries. Is there any reason why Dovecot would need to do a lookup of its own hosts IP address every time? Seems like a strange thing to do and not cache its own hostname. Dominic

3 2

[Dovecot] Confirmation Please - Dovecot for Email Delivery
by craig.dovecot＠noboost.org 25 Mar '13

25 Mar '13

Hi All, Spec: Centos 6.3x64 Dovecot-2.0.9-5.el6.x86_64 Goal: 1) Inbound emails are delivered by Dovecot and the UID/GID is determined by a local /etc/dovecot/users file. 2) I'd like to have IMAPS clients authenticate with Dovecot via LDAP. Questions: 1) I've attempted to ensure that Dovecot will always use the local password file for mail delivery as no actual password is needed. Then the LDAP server for when the IMAPS email client connects. This appears to be working as I expect, can anyone confirm/deny the below settings are correct? 2) Is there a Dovecot architecture diagram/documentation anywhere? Settings: ------------------------------------------------------------------------- File: dovecot.conf protocols = imap lmtp listen = * File: 10-auth.conf disable_plaintext_auth = yes auth_username_format = %Ln auth_mechanisms = plain !include auth-passwdfile.conf.ext !include auth-ldap.conf.ext File: auth-passwdfile.conf.ext mail_location = maildir:/home/%n/Maildir #passdb { # driver = passwd-file # args = username_format=%n /etc/dovecot/users #} userdb { driver = passwd-file args = username_format=%n /etc/dovecot/users } File: dovecot-ldap.conf.ext hosts = sysvm-ipa.noboost.org tls = yes tls_ca_cert_dir = /etc/openldap/certs auth_bind = yes auth_bind_userdn = uid=%u,cn=users,cn=accounts,dc=noboost,dc=org base = cn=users,cn=accounts,dc=noboost,dc=org pass_attrs = uid=user pass_filter = (&(objectClass=posixAccount)(uid=%u)) File: /etc/dovecot/users craig:x:890:432:Craig:/home/craig:/bin/bash ------------------------------------------------------------------------- cya Craig

1 0

[Dovecot] Reduce logging auth-worker
by Nick Edwards 25 Mar '13

25 Mar '13

Hello Timo We would like to reduce the logging by increasing severity, we don't use syslog since we use log_path = /var/log/dovecot/pop3.log Is there a way auth-worker can be made to log warn|error instead of info? Constantly 1/5th of the log file is filled with auth-work info connecting to mysql socket, which we do not need to see unless, well, we need to see it either via debug, or if there is a problem, I know this can be done from syslog, but we prefer not to use syslog, and the wiki does not indicate it can be done? Niki

6 11

[Dovecot] SiS attachment file larger than expected
by Erik Persson 25 Mar '13

25 Mar '13

Hello! Name's Erik and I have been using Dovecot for a few months and I so far quite happy with the software. To this list I am quite new though. After a testing period I have now been running a ~300 user system running CentOS 6 and Dovecot 2.1.14 with Postfix and SiS enabled. For the large part the system is running flawlessly but I have caught a few error messages: imap(censored(a)censored.domain): Error: Attachment file /mail/attachments/70/d0/70d04b12123bfb145983f5a674ee2e65029a4018aff1c6db51993b75f10bf101-117a1a3b06f54251e96200004d877aa0 larger than expected (370113) The total number of files that I have found complaints about in the log are less than 10 accessed by 3 users in a attachment file system that by now is housing 100k + files. The only common denominator I have found so far is that all the attachments are PDF files. Most if not all of the logged files are the only referenced link of the corresponding hash. Any idea what might be causing this and how it can be prevented? I do like to be a bit paranoid when it comes to data integrity. As I am not completely familiar with the dovecot tools I also wonder if there is a way to find the offending message in the mailbox other than trying to access it via a mail client? Best regards and keep up the good work! /Erik

2 2

[Dovecot] Reporting on user info
by Alex 24 Mar '13

24 Mar '13

Hi all, I've just installed fc18 with dovecot-2.1.15 and have all the usual services set up and running properly. Of course now management is interested in who is using what service, for how long. Are there any existing reporting features available from within dovecot to provide stats on mail usage over time? Ideally, I'd like to provide a log file and find out who used each service, how long they were logged in, and from where they logged in. It would also be interesting to have a real-time view of who's connected. Does any such utility exist? Thanks, Alex

2 1

[Dovecot] Replicator updates
by Timo Sirainen 24 Mar '13

24 Mar '13

Some new features in hg: - replicator now correctly saves/restores state on exit/startup. it won't immediately start resyncing everyone now always. - if sync fails for user, retry in 5 minutes - doveadm replicator status: Give overview of replication status - doveadm replicator status <usermask>: Show users' replication status - doveadm replicator replicate [-p <priority>] <usermask>: Replicate users now. replication_full_sync_interval was also changed to 24h by default. I was thinking that with that and a nightly cronjob running "doveadm replicator replicate '*'" the full syncs could only be done during night times.

1 0

Re: [Dovecot] Migrating password scheme
by Joseph Tam 24 Mar '13

24 Mar '13

I tried the userdb prefetch / postlogin script method to do some password manipulation, but it doesn't appear to work for me. In particular, I don't think this method works with userdb { driver = passwd-file args = /path/to/passwd-file userdb_pw=%w } because it doesn't understand arbitrary var=value in the args configuration. Dvoecot seems to accept the entire string as the pathname for a password file. Is there a way to pass the plaintext password to a post-login script using passwd-file userdb? Before this, I managed password manipulation by process tracing dovecot's auth process read() syscalls and parsing out the user/password from the second buffer argument. Quite a hack but it worked. Joseph Tam <jtam.home(a)gmail.com>

3 2

[Dovecot] Migarting password scheme
by lst_hoe02＠kwsoft.de 24 Mar '13

24 Mar '13

Hello, by the move to Dovecot we try to alter the password encryption stored in the database from MD5 to CRYPT-SHA256 along the Guide at http://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes. It's mostly working but i still have not found out how to pass the cleartext password to the re-encrypting script. According to the HowTo it should be enough to add "'%w' AS userdb_plain_pass" to the passdb query, to get a environment variable $PLAIN_PASS in the post-login script to pass along. This does not work eg. PLAIN_PASS is always empty. This is Dovecot 2.0.19 from Ubuntu 12.04 LTS. Thanks for any help Regards Andreas

3 9

[Dovecot] Disallow POP3 from deleting messages
by DormitionSkete＠hotmail.com 23 Mar '13

23 Mar '13

I'd like to use Dovecot as our IMAP server when our users are within our LAN, but I'd also like to give them the ability to access their emails via POP3 when they are outside the LAN. I know most POP3 clients will give their users the option of not deleting the messages from the server after they are downloaded, but is there any way to restrict them from being able to do so at the server level? In other words, I want to disallow the server from accepting the DELE command from POP3 clients. Is that possible? We have some accounts that multiple users need simultaneous access to. I don't want a user to decide to set up a POP3 account on his own on his iPad or something, and inadvertently blow the Inbox away for everybody else. We have a satellite connection, so our upload speeds are real slow. I think POP3 would give a lot better user experience than IMAP when they are outside the LAN. Any help or advice will be greatly appreciated. Peter, hieromonk ---- Dormition Skete Monastery Website: http://www.DormitionSkete.org Convent Website: http://www.HolyApostlesConvent.org ----

6 15

[Dovecot] discarding vacation response for message implicitly delivered
by dovecot＠noboost.org 22 Mar '13

22 Mar '13

Hi All, Spec: * Centos 6.3x64 * postfix-2.6.6-2.2.el6_1.x86_64 * dovecot-pigeonhole-2.0.9-5.el6.x86_64 * dovecot-2.0.9-5.el6.x86_64 Challenge: Does anyone have an explination regarding this message? ------------------------------------------------------------------- "Mar 22 12:15:22 chtvm dovecot: lmtp(7004, cht): C+EZBuObS1FcGwAAlnPEfg: sieve: msgid=<20130322011522.6D55D40389(a)chtvm.noboost.org>: discarding vacation response for message implicitly delivered to <cht(a)vacation.noboost.org>" ------------------------------------------------------------------- I'm getting it when passing traffic through to the Dovecot sieve vacation extension from a virtual domain. Regards, Craig

2 1

[Dovecot] Dovecot 2.2, Thunderbird And Client Certificates -> Login fails
by Christian Felsing 22 Mar '13

22 Mar '13

Hello, I stucked in Thunderbird authentication with X.509 client certs. This is my config (dovecot -n): $ /opt/dovecot/sbin/dovecot -n # 2.2.rc3: /opt/dovecot-2.2.rc3/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.0 auth_debug = yes auth_ssl_require_client_cert = yes auth_ssl_username_from_cert = yes auth_verbose = yes base_dir = /home/dovecot/ hostname = mail.ip6.li instance_name = dovecot-01 lda_mailbox_autocreate = yes mail_gid = dovecot mail_uid = dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = scheme=CRYPT username_format=%u /opt/dovecot/etc/dovecot/mailusers.993 driver = passwd-file } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/home/dovecot/shared-mailboxes sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)ip6.li protocols = imap pop3 lmtp sieve quota_full_tempfail = yes sendmail_path = /usr/lib/sendmail service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_ca = </opt/dovecot/etc/dovecot/ip6li-user-ca.pem ssl_cert = </opt/dovecot/etc/dovecot/mail.taunusstein.net.crt ssl_cert_username_field = emailAddress ssl_key = </opt/dovecot/etc/dovecot/mail.taunusstein.net.key ssl_require_crl = no ssl_verify_client_cert = yes userdb { args = username_format=%u /opt/dovecot/etc/dovecot/mailusers.993 driver = passwd-file } verbose_ssl = yes protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugin_dir = /opt/dovecot/lib/dovecot/lda mail_plugins = } protocol imap { mail_plugins = } protocol lmtp { mail_plugins = } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes ( in=%i : out=%o ) } protocol pop3 { mail_plugins = pop3_uidl_format = %08Xu%08Xv } Logfile shows this after Thunderbirds tries to get access: Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: auth: Debug: Loading modules from directory: /opt/dovecot-2.2.rc3/lib/dovecot/auth Mar 22 19:22:32 dovecot dovecot: auth: Debug: Read auth token secret from /home/dovecot//auth-token-secret.dat Mar 22 19:22:32 dovecot dovecot: auth: Debug: passwd-file /opt/dovecot/etc/dovecot/mailusers.993: Read 1 users in 0 secs Mar 22 19:22:32 dovecot dovecot: auth: Debug: auth client connected (pid=20082) Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate request A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Valid certificate: /CN=IP6LI Root Certification Authority Mar 22 19:22:32 dovecot dovecot: imap-login: Valid certificate: /CN=Intermediate CA for ip6.li users/OU=ip6.li Certificates/O=ip6.li/C=DE Mar 22 19:22:32 dovecot dovecot: imap-login: Valid certificate: /emailAddress=christian(a)felsing.lan/CN=Christian Felsing/OU=ip6.li Certificates/O=ip6.li/C=DE Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Warning: SSL alert: where=0x4004, ret=256: warning close notify [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.200.6, lip=192.168.200.22, TLS, session=<EfvjiYfYrgCwxigG> seems client cert is ok, but Dovecot does not like Thunderbirds method to handle TLS-Cert login w/o username and password. Hint http://dovecot.org/list/dovecot/2012-December/069771.html does not seem to be valid for Dovecot 2.2 On the other hand I think it is not a suitable method to include CRLs into CA file. Certificate should include a link to CRL or - better - an URL to OCSP. Does Dovecot support OCSP? best regards Christian

1 0

[Dovecot] Altmove doesn't working after a dsync.
by Breno Moreira 22 Mar '13

22 Mar '13

Hi guys, I'm having a problem with the altmove command after a mailbox migration using dsync. What I'm trying to do is move some users from a datacenter to another and, for that, I'm using the dsync feature. First thing I do is run the dsync mirror command, and this is working properly, but all mails are moved to the main path, ignoring the ALT statement in the mail location. So, what I tried to do was run the doveadm altmove to move the old mails to the new alternate storage, but it simply doesn't work or sometimes moves only few messages. After the user receives new messages, these new files are correctly moved. It can be problem with my search parameter in the altmove command? Or this is a normal result? Best Regards, Breno Moreira -- --------------------------------------------------------------------- Breno Moreira

3 7

[Dovecot] How do I enable dsync sieve script replication?
by Oli Schacher 22 Mar '13

22 Mar '13

Hi all, Thank you Timo for adding sieve script replication to dsync, much appreciated! Should this run out of the box with 2.2.rc3 and latest pigeonhole+patch or does this have to be enabled in the configuration somehow? I upgraded my dsync replication test setup, but it doesn't sync sieve so far, so I'm not sure if this is a config issue or if I maybe made a mistake while upgrading/patching. btw: not sure if you saw this bugreport, dsync over tcp still produces "no command given" errors randomly (http://www.dovecot.org/list/dovecot/2013-March/088751.html) Thanks Oli #dovecot -n: # 2.2.rc3: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.22.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_master_user_separator = * auth_mechanisms = plain login dict { acl = mysql:/etc/dovecot/dovecot-dict-shares.conf quotadict = mysql:/etc/dovecot/dovecot-dict-quota.conf } disable_plaintext_auth = no doveadm_password = <munged> listen = * login_greeting = Dovecot ready. mail_max_userip_connections = 50 mail_plugins = " quota notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { acl = vfile:/etc/dovecot/acls acl_shared_dict = proxy::acl mail_replica = tcp:<munged>:1337 quota = dict:::proxy::quotadict quota_rule = *:storage=10M:messages=1000 quota_rule2 = Spam:ignore quota_rule3 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = pop3 imap lmtp sieve service aggregator { fifo_listener replication-notify-fifo { user = fumail } unix_listener replication-notify { user = fumail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = fumail mode = 0660 user = fumail } user = root } service dict { unix_listener dict { mode = 0600 user = fumail } } service doveadm { inet_listener { port = 1337 } } service imap { vsz_limit = 2 G } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } process_min_avail = 5 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve { vsz_limit = 2 G } service pop3 { vsz_limit = 2 G } service quota-warning { executable = script /usr/local/bin/quotawarning.py unix_listener quota-warning { mode = 0666 user = fumail } user = fumail } service replicator { process_min_avail = 1 } ssl_cert = </etc/ssl/<munged>.crt ssl_key = </etc/ssl/<munged>.key userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { imap_client_workarounds = mail_plugins = " quota notify replication acl imap_acl quota imap_quota" } protocol pop3 { mail_plugins = " quota notify replication quota" pop3_uidl_format = %08Xu%08Xv } protocol sieve { managesieve_logout_format = bytes ( in=%i : out=%o ) } protocol lmtp { deliver_log_format = from=<%f> msgid=%m action=<%$> subject=%s mail_plugins = " quota notify replication sieve quota" postmaster_address = postmaster@<munged> quota_full_tempfail = yes } -- message transmitted on 100% recycled electrons

1 0

[Dovecot] v2.2 dsync_brain_lock() FLOCK compatibility issue on Solaris 11.1
by Walter Steiner 22 Mar '13

22 Mar '13

Hello, On Oracle Solaris 11.1 (Solaris gcc-45 package set) core libraries do not provide flock() anymore. in file: src/doveadm/dsync/dsync-brain.c in function: dsync_brain_lock() around line: 234 is a (maybe unintentional) fix reference to FLOCK locks. if (file_wait_lock(brain->lock_fd, brain->lock_path, F_WRLCK, FILE_LOCK_METHOD_FLOCK, brain->lock_timeout, &brain->lock) <= 0) { resulting in a runtime error about unsupported flock() locks. (HAVE_FLOCK is not set by configure script) Personally, I have just changed "FLOCK" to "FCNTL". [ I have tried brain->lock->lock_method but this seems not to be the correct way => compile time error: dereferencing pointer to incomplete type ] Walter

2 1

Re: [Dovecot] Problem with Prefetch User Database
by megodin＠inboxalias.com 22 Mar '13

22 Mar '13

> Dovecot only sees the PAM-authentication part) > > > PAM does not return userdb-relevant information. You cannot use > userdb > prefetch. > > You could switch to first ask a ldap passdb and then, for users that > have > another password in LDAP, pam. I use PAM because of the easyness of blocking specific validated users - you can just add/remove them in a plain text file. Easy administration will be necessary because of the planned huge amount of users on the system (28.000), and sometimes blocking a user is highly time-dependent (e.g. if one answers to a phising mail and sending out his credentials which are then abused for sending spam). I would go over LDAP if there is an equivalent easy way to solve this over LDAP (easy blocking out users by e.g editing a plain text file) - is there any? Thanks, Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/produkte/basic/index.html _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

2 1

[Dovecot] [dovecot-2.1.15] mdbox corruption, doveadm force-resync can't repair it (throws segfault)
by Marcin Mirosław 22 Mar '13

22 Mar '13

Hi Timo, hi all! Today i noticed imap throws segmentation faults and dumps cores. I looked into logs I can see: 2013-03-07T12:12:52.257986+01:00 meteor dovecot: imap(marcinxxx(a)kolekcja.mejor.pl) <7sRXtFPXYAA+eX93>: Error: Corrupted dbox file /dane/domeny/mejor.pl/mail/marcin//.mdbox/mailinglists/storage/m.75 (around offset=2779212): EOF reading msg header (got 0/30 bytes) 2013-03-07T12:12:52.258052+01:00 meteor dovecot: imap(marcinxxx(a)kolekcja.mejor.pl) <7sRXtFPXYAA+eX93>: Disconnected: Internal error occurred. Refer to server log for more information. [2013-03-07 12:12:52] in=5940 out=6637723 2013-03-07T12:12:52.258595+01:00 meteor dovecot: imap(marcinxxx(a)kolekcja.mejor.pl) <7sRXtFPXYAA+eX93>: Warning: fscking index file /dane/domeny/mejor.pl/mail/marcin//.mdbox/mailinglists/storage/dovecot.map.index 2013-03-07T12:12:52.285176+01:00 meteor dovecot: imap(marcinxxx(a)kolekcja.mejor.pl) <7sRXtFPXYAA+eX93>: Warning: mdbox /dane/domeny/mejor.pl/mail/marcin//.mdbox/mailinglists/storage: rebuilding indexes 2013-03-07T12:12:55.618752+01:00 meteor dovecot: imap(marcinxxx(a)kolekcja.mejor.pl) <7sRXtFPXYAA+eX93>: Fatal: master: service(imap): child 25626 killed with signal 11 (core dumped) Here is backtrace: echo -e "bt\nbt full" |gdb -q /usr/libexec/dovecot/imap 'core-1362654775-8-11-!usr!libexec!dovecot!imap-25626' [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". warning: no loadable sections found in added symbol-file system-supplied DSO at 0x2c831788000 Core was generated by `dovecot/imap'. Program terminated with signal 11, Segmentation fault. #0 rebuild_mailbox_multi (trans=0x751c14c870, view=<optimized out>, rebuild_ctx=0x751c14cbf0, ctx=0x751c007c00, mbox=<optimized out>) at mdbox-storage-rebuild.c:433 433 mdbox-storage-rebuild.c: Nie ma takiego pliku ani katalogu. (gdb) #0 rebuild_mailbox_multi (trans=0x751c14c870, view=<optimized out>, rebuild_ctx=0x751c14cbf0, ctx=0x751c007c00, mbox=<optimized out>) at mdbox-storage-rebuild.c:433 #1 rebuild_mailbox (vname=<optimized out>, ctx=0x751c007c00, ns=<optimized out>) at mdbox-storage-rebuild.c:546 #2 rebuild_namespace_mailboxes (ns=<optimized out>, ctx=0x751c007c00) at mdbox-storage-rebuild.c:577 #3 rebuild_mailboxes (ctx=0x751c007c00) at mdbox-storage-rebuild.c:597 #4 mdbox_storage_rebuild_scan (ctx=0x751c007c00) at mdbox-storage-rebuild.c:905 #5 mdbox_storage_rebuild_in_context (storage=0x751bf477a0, atomic=<optimized out>) at mdbox-storage-rebuild.c:928 #6 0x000002c8316c7703 in mdbox_storage_rebuild (storage=0x751bf477a0) at mdbox-storage-rebuild.c:944 #7 0x000002c8316c4d85 in mdbox_mailbox_close (box=0x751c0134b0) at mdbox-storage.c:195 #8 0x000002c8316f195e in mailbox_close (box=0x751c0134b0) at mail-storage.c:984 #9 0x000002c8316f19e7 in mailbox_free (_box=<optimized out>) at mail-storage.c:997 #10 0x000000751aabc869 in client_destroy (client=0x751bf6e220, reason=<optimized out>) at imap-client.c:213 #11 0x000000751aabcc7a in client_input (client=0x751bf6e220) at imap-client.c:843 #12 0x000002c83163a4b6 in io_loop_call_io (io=0x751bf939c0) at ioloop.c:379 #13 0x000002c83163b647 in io_loop_handler_run (ioloop=<optimized out>) at ioloop-epoll.c:213 #14 0x000002c831639eb0 in io_loop_run (ioloop=0x751bf26350) at ioloop.c:398 #15 0x000002c831620827 in master_service_run (service=0x751bf26200, callback=<optimized out>) at master-service.c:544 #16 0x000000751aac65e5 in main (argc=1, argv=0x751bf26040) at main.c:389 (gdb) #0 rebuild_mailbox_multi (trans=0x751c14c870, view=<optimized out>, rebuild_ctx=0x751c14cbf0, ctx=0x751c007c00, mbox=<optimized out>) at mdbox-storage-rebuild.c:433 new_seq = 17683 hdr = 0x751c004ae0 data = 0x751c08348c expunged = false uid = 8877 map_uid = 127994 new_dbox_rec = {map_uid = 127994, save_date = 1362612657} rec = 0x0 old_seq = <optimized out> #1 rebuild_mailbox (vname=<optimized out>, ctx=0x751c007c00, ns=<optimized out>) at mdbox-storage-rebuild.c:546 box = 0x751bf7af30 mbox = 0x751bf7af30 rebuild_ctx = 0x751c14cbf0 ret = <optimized out> sync_ctx = 0x751c0132b0 view = 0x751c004f20 trans = 0x751c14c870 error = <optimized out> #2 rebuild_namespace_mailboxes (ns=<optimized out>, ctx=0x751c007c00) at mdbox-storage-rebuild.c:577 _data_stack_cur_id = 3 iter = 0x751c000340 info = <optimized out> ret = 0 #3 rebuild_mailboxes (ctx=0x751c007c00) at mdbox-storage-rebuild.c:597 storage = <optimized out> ns = <optimized out> #4 mdbox_storage_rebuild_scan (ctx=0x751c007c00) at mdbox-storage-rebuild.c:905 data = 0x751c00c2c0 data_size = 8 #5 mdbox_storage_rebuild_in_context (storage=0x751bf477a0, atomic=<optimized out>) at mdbox-storage-rebuild.c:928 ctx = 0x5137d1b10001f3fa ret = 0 #6 0x000002c8316c7703 in mdbox_storage_rebuild (storage=0x751bf477a0) at mdbox-storage-rebuild.c:944 atomic = 0x751bf983f0 ret = <optimized out> #7 0x000002c8316c4d85 in mdbox_mailbox_close (box=0x751c0134b0) at mdbox-storage.c:195 mstorage = <optimized out> #8 0x000002c8316f195e in mailbox_close (box=0x751c0134b0) at mail-storage.c:984 No locals. #9 0x000002c8316f19e7 in mailbox_free (_box=<optimized out>) at mail-storage.c:997 box = 0x751c0134b0 #10 0x000000751aabc869 in client_destroy (client=0x751bf6e220, reason=<optimized out>) at imap-client.c:213 cmd = <optimized out> __FUNCTION__ = "client_destroy" #11 0x000000751aabcc7a in client_input (client=0x751bf6e220) at imap-client.c:843 cmd = 0x2c83163a1fe <io_loop_context_activate+78> output = 0x0 bytes = 208 __FUNCTION__ = "client_input" #12 0x000002c83163a4b6 in io_loop_call_io (io=0x751bf939c0) at ioloop.c:379 ioloop = 0x751bf26350 t_id = 2 #13 0x000002c83163b647 in io_loop_handler_run (ioloop=<optimized out>) at ioloop-epoll.c:213 ctx = 0x751bf266c0 events = 0x0 event = 0x751bf26730 list = 0x751bf6fff0 io = <optimized out> tv = {tv_sec = 4, tv_usec = 921146} msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> #14 0x000002c831639eb0 in io_loop_run (ioloop=0x751bf26350) at ioloop.c:398 No locals. #15 0x000002c831620827 in master_service_run (service=0x751bf26200, callback=<optimized out>) at master-service.c:544 No locals. #16 0x000000751aac65e5 in main (argc=1, argv=0x751bf26040) at main.c:389 set_roots = {0x751aacdfa0 <imap_setting_parser_info>, 0x0} login_set = {auth_socket_path = 0x751bf1dd40 "/run/dovecot/auth-master", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x751aac5e80 <login_client_connected>, failure_callback = 0x751aac5b90 <login_client_failed>} service_flags = <optimized out> storage_service_flags = <optimized out> username = <optimized out> c = <optimized out> (gdb) quit doveadm -v force-resync -u marcinxxx(a)kolekcja.mejor.pl "mailinglists.*" doveadm(marcinxxx(a)kolekcja.mejor.pl): Warning: fscking index file /dane/domeny/mejor.pl/mail/marcin//.mdbox/mailinglists/storage/dovecot.map.index doveadm(marcinxxx(a)kolekcja.mejor.pl): Warning: mdbox /dane/domeny/mejor.pl/mail/marcin//.mdbox/mailinglists/storage: rebuilding indexes Segmentation fault How should I repair mdbox file? I have another question, `doveadm force-resync -A "*"` doesn't do resync inside namespace. Is it feature or bug?;) Thanks, Marcin # 2.1.15: /etc/dovecot/dovecot.conf # OS: Linux 3.7.5-hardened-r1 x86_64 Gentoo Base System release 2.1 auth_cache_size = 1 k auth_mechanisms = login digest-md5 cram-md5 plain deliver_log_format = msgid=%m: from=%f: phys=%p: virt=%w %$ dict { quota = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_attachment_dir = /dane/domeny/zalaczniki mail_attachment_min_size = 10000 k mail_cache_min_mail_count = 20 mail_gid = mail mail_log_prefix = "%s(%u) <%{session}>: " mail_plugins = autocreate quota notify mail_log stats zlib mail_privileged_group = mail mail_uid = mail maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_preallocate_space = yes mdbox_rotate_interval = 60 days mdbox_rotate_size = 50 M namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } # 2.1.15: /etc/dovecot/dovecot.conf # OS: Linux 3.7.5-hardened-r1 x86_64 Gentoo Base System release 2.1 auth_cache_size = 1 k auth_mechanisms = login digest-md5 cram-md5 plain deliver_log_format = msgid=%m: from=%f: phys=%p: virt=%w %$ dict { quota = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_attachment_dir = /dane/domeny/zalaczniki mail_attachment_min_size = 10000 k mail_cache_min_mail_count = 20 mail_gid = mail mail_log_prefix = "%s(%u) <%{session}>: " mail_plugins = autocreate quota notify mail_log stats zlib mail_privileged_group = mail mail_uid = mail maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_preallocate_space = yes mdbox_rotate_interval = 60 days mdbox_rotate_size = 50 M namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } postmaster_address = postmaster(a)mejor.pl protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = mail mode = 0660 user = root } } service dict { unix_listener dict { user = mail } } service stats { fifo_listener stats-mail { mode = 0600 user = mail } } ssl_cert = </etc/ssl/gwiazdka.mejor.pl.pem ssl_key = </etc/ssl/gwiazdka.mejor.pl.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lda { mail_plugins = autocreate quota notify mail_log stats zlib sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = autocreate quota notify mail_log stats zlib imap_quota imap_stats imap_zlib }

2 5

[Dovecot] 2.2.rc2: problem with acl_shared_dict
by Lutz Preßler 22 Mar '13

22 Mar '13

Hello, 2.2.rc2, configuration as before: acl_shared_dict=file:... The contents of this file is used for e.g. LISTing shared mailboxes. But even with file and directory beeing world writable, it's not written into on SETACL commands. Instead, at least sometimes (it seems to make a difference if GETACL is used before in the session) the imap process crashes on SETACL or DELETEACL. Feb 26 00:31:52 host dovecot: imap(13373, user) K64y8ZTWOgB/AAAB: Fatal: master: service(imap): child 13373 killed with signal 11 (core dumps disabled) Anything to do for further debugging? Working correctly with 2.1.15. Greetings, Lutz

2 2

[Dovecot] director's imap/pop3 login timeout
by Angel L. Mateo 21 Mar '13

21 Mar '13

Hello, We have two (load balanced) director servers in front of 4 dovecot backend servers. Yesterday we had a problem at backend servers for some users (our SSO was down, so IMAP users couldn't authenticate) and this triggered a problem in director servers where almost nobody could open a new session. In our director's logs I could see errors like this: Mar 20 20:52:47 myotis41 dovecot: imap-login: proxy(<user>): Login failed to 155.54.211.162:143: [UNAVAILABLE] Temporary authentication failure. [myotis32:2013-03-20 19:52:47] So, it seems it was trying to authenticate for 1 hour, after that it timed out the login. But this timeout is too long. Is this a director timeout? Or a backend timeout? How can I reduce it? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 1

[Dovecot] Log DNS revese IP address
by Juan Bernhard 21 Mar '13

21 Mar '13

Hi list. Is it possible to log the DNS reverse address of every login? I didnt find a variable *%{hostname}* but the wiki say it only works on *deliver_log_format* and not on *login_log_format_elements* Something like this: Mar 21 13:49:33 mailserver dovecot: pop3-login: Login: user=<myuser>, method=PLAIN, rip=10.10.10.15, lip=10.10.10.1, mpid=18712, *host=client02.example.com* Thanks! Regards. Juan

2 1

[Dovecot] dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<xxx>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, TLS, session=<1pBG/03XogB/AAAB>
by pvsuja 21 Mar '13

21 Mar '13

Hi, I have set up ImapcProxy based on the wiki2 page. My server is set up for no plain text auth without starttls. When I am trying to login in the proxy server, I am getting an error Unknown username/password. The log says: *dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<xxx>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, TLS, session=<1pBG/03XogB/AAAB>* The server log: *dovecot: imap-login: Disconnected (tried to use disabled plaintext auth): rip=10.x.x.x, lip=10.x.x.y* Through wireshark, I found the username and password is going in plain text only to the server. How will I enable starttls in ImapcProxy before any communication starts? Thanks and regards, Suja -- View this message in context: http://dovecot.2317879.n4.nabble.com/dovecot-imap-login-Aborted-login-auth-… Sent from the Dovecot mailing list archive at Nabble.com.

4 5

[Dovecot] Problem with Prefetch User Database
by megodin＠inboxalias.com 21 Mar '13

21 Mar '13

Hi there Community, I am currently setting up a Dovecot Mailserver, which works fine with some basic configuration (Dovecot + Sendmail). Sending and receiving Mails is just fine. For improving timings, I wanted to activate the prefetch user database - but apparently it doesn't seem to work correctly - I hope you can help me out! When I activate the prefetch user database, every time I get a "passdb didn't return userdb entries" from my mail.debug logs. Here's my config: passdb { driver = pam } # (I authenticate via PAM which is itself configured to ask ldap server, ldap returns it back to PAM - so Dovecot only sees the PAM-authentication part) userdb { driver = prefetch } userdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } # My userdb is going over ldap. Relevant parts of /etc/dovecot/dovecot-ldap.conf.ext: . .. user_attrs = uidNumber=50014,gidNumber=2084,modem-quota=quota_rule=*:storage=%$ user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uidNumber==50014,gidNumber=2084 I'm not sure.... maybe it's because of the PAMLDAPPAM? Or am I missing out something other fundamental? Thanks for any insights, Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/produkte/basic/index.html _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

2 1