- dovecot - dovecot.org

[Dovecot] FTS indexing
by Ralf Hildebrandt 11 Sep '12

11 Sep '12

I'm reacreating all FTS indices on all my users' INBOX folders: mkdir ~%s/Maildir/lucene-indexes && chown %s:users ~%s/Maildir/lucene-indexes doveadm index -u %s -q INBOX In "ps auxwww" I'm seeing this: tbudkevy 29186 3.7 0.0 6616 3056 ? S 18:11 0:15 dovecot/indexer-worker [tschuetz INBOX] how can a dovecot/indexer-worker actually access the INBOX of the user "tschuetz" (where "tbudkevy" doesn't have access, due to the different UID)...? Should ~%s/Maildir/lucene-indexes be filled after having run the command sequence for all users? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

2 5

[Dovecot] Quota less mailbox with mdbox
by Héctor Moreno Blanco 11 Sep '12

11 Sep '12

Good morning everyone, I have a little doubt about setting a quotaless mailbox with mdbox. Currently we have dovecot 2.0.10 with Maildir as mailbox system. We want to migrate to mdbox. The migration is simple and easy, but there are some configuration settings we cannot set to work properly. In our dovecot with Maildir we have the namespace INBOX with certain quota and another one without quota. This is working like a charm. Dovecot.conf: ... namespace { separator = . prefix = inbox = yes type = private } namespace { inbox = no location = prefix = INBOX. separator = . hidden = yes type = private list = no } namespace { location = maildir:%h/Maildir/_backup prefix = _backup. separator = . type = private } ... plugin/quota = maildir:_backup:ns= ... Dovecot-ldap.conf: ... pass_filter = (&(objectClass=qmailUser)(uid=%u)(accountActive=TRUE)) pass_attrs = uid=user,userPassword=password, mailQuotaSize=quota_rule=*:bytes=%$ user_attrs = mailMessageStore=home, mailQuotaSize=quota_rule=*:bytes=%$ user_filter = (&(objectClass=qmailUser)(|(mailAlternateAddress=%u)(mail=%u)(uid=%u))(accountActive=TRUE)) ... When migrated to mdbox and changing the configuration, we don't know how to get it work. We have also tried to follow the instructions from the wiki of dovecot2 without success. Could anyone give us a clue please? If additional information is needed, please let me know. Thank you very much in advanced. Kind regards. ________________________________ [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\logo_gmv.gif] Héctor Moreno Blanco División de Seguridad e Infraestructuras / Security and Infrastructures Division GMV Isaac Newton, 11 P.T.M. Tres Cantos E-28760 Madrid Tel. +34 91 807 21 00 Fax +34 91 807 21 99 www.gmv.com <http://www.gmv.com/> [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\icon_blog.gif]<http://www.gmv.com/b2_gmv> [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\icon_facebook.gif]<http://www.facebook.com/infoGMV> [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\icon_twitter.gif]<http://www.twitter.com/infoGMV_es> [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\icon_youtube.gif]<http://www.youtube.com/infoGMV> P Please consider the environment before printing this e-mail. ______________________ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. ______________________ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. ______________________

3 2

[Dovecot] Memory leak by getting the virtual size of a IMAP folder
by Dafan Zhai 11 Sep '12

11 Sep '12

Hi everyone, I am writing a dovecot statistic plugin, which calls the 'mailbox_get_metadata' function with MAILBOX_METADATA_VIRTUAL_SIZE as the 2nd parameter. enum mailbox_status_items metadata_items = MAILBOX_METADATA_VIRTUAL_SIZE; struct mailbox_metadata metadata; mailbox_get_metadata(mailbox, metadata_items, &metadata); but Valgrind finds a memory leak when this function is called: ---------------------------------------------------snip-------------------------------------------------------------- ==10304== 12,288 bytes in 3 blocks are definitely lost in loss record 74 of 76 ==10304== at 0x40222A4: calloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so) ==10304== by 0x416EE9F: block_alloc (mempool-alloconly.c:237) ==10304== by 0x416F16C: pool_alloconly_create (mempool-alloconly.c:140) ==10304== by 0x409C07D: mail_search_build_init (mail-search-build.c:187) ==10304== by 0x40C77F1: index_mailbox_get_metadata (index-status.c:200) ==10304== by 0x4067102: maildir_mailbox_get_metadata (maildir-storage.c:486) ==10304== by 0x409F78B: mailbox_get_metadata (mail-storage.c:1298) ==10304== by 0x490492D: mailbox_status_update (statistic-plugin.c:310) ==10304== by 0x4904E2E: statistic_mail_save (statistic-plugin.c:426) ==10304== by 0x41A054D: notify_contexts_mail_save (notify-plugin.c:61) ==10304== by 0x41A104F: notify_save_finish (notify-storage.c:143) ==10304== by 0x409EE94: mailbox_save_finish (mail-storage.c:1673) ---------------------------------------------------snip-------------------------------------------------------------- I have looked into the source code, and found that from the 'mail_search_build_init' function call in lib-storage/index/index-status.c:200 a pool is created, but the pool is not freed in the mailbox_search_deinit function call in lib-storage/index/index-status.c:218. This may be the reason of the memory leak. But I do not know how to free the pool. It seems to me that doveadm is having the same memory leak because it is using 'mail_search_build_init' too. ---------------------------------------------------snip-------------------------------------------------------------- # valgrind --leak-check=full doveadm mailbox status -u testuser1 vsize INBOX ==10457== Memcheck, a memory error detector ==10457== Copyright (C) 2002-2010, and GNU GPL'd, by Julian Seward et al. ==10457== Using Valgrind-3.6.1 and LibVEX; rerun with -h for copyright info ==10457== Command: doveadm mailbox status -u testuser1 vsize INBOX ==10457== INBOX vsize=41643319 ==10457== ==10457== HEAP SUMMARY: ==10457== in use at exit: 4,356 bytes in 3 blocks ==10457== total heap usage: 440 allocs, 437 frees, 539,124 bytes allocated ==10457== ==10457== 4,096 bytes in 1 blocks are definitely lost in loss record 3 of 3 ==10457== at 0x40222A4: calloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so) ==10457== by 0x41AEE9F: ??? (in /usr/lib/dovecot/libdovecot.so.0.0.0) ==10457== by 0x41AF16C: pool_alloconly_create (in /usr/lib/dovecot/libdovecot.so.0.0.0) ==10457== by 0x40DC07D: mail_search_build_init (in /usr/lib/dovecot/libdovecot-storage.so.0.0.0) ==10457== by 0x8057EB8: doveadm_mail_mailbox_search_args_build (in /usr/bin/doveadm) ==10457== by 0x805855A: ??? (in /usr/bin/doveadm) ==10457== by 0x8053A7B: doveadm_mail_single_user (in /usr/bin/doveadm) ==10457== by 0x8053D2B: ??? (in /usr/bin/doveadm) ==10457== by 0x80541CF: doveadm_mail_try_run (in /usr/bin/doveadm) ==10457== by 0x805B863: main (in /usr/bin/doveadm) ==10457== ==10457== LEAK SUMMARY: ==10457== definitely lost: 4,096 bytes in 1 blocks ==10457== indirectly lost: 0 bytes in 0 blocks ==10457== possibly lost: 0 bytes in 0 blocks ==10457== still reachable: 260 bytes in 2 blocks ==10457== suppressed: 0 bytes in 0 blocks ==10457== Reachable blocks (those to which a pointer was found) are not shown. ==10457== To see them, rerun with: --leak-check=full --show-reachable=yes ==10457== ==10457== For counts of detected and suppressed errors, rerun with: -v ==10457== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 122 from 35) ---------------------------------------------------snip-------------------------------------------------------------- Dovecot version: 2.1.9 OS: Linux 3.0.30-dist i686 maildir:~/Maildir:LAYOUT=fs:INBOX=~/Maildir/INBOX I have applied the following patches from the dovecot 2.1 branch fixing memory leaks: http://hg.dovecot.org/dovecot-2.1/rev/7bdbca7b0913 http://hg.dovecot.org/dovecot-2.1/rev/963482677c0b It would be nice if you could give me some hints how I can address this issue? Thanks in advance! Greetings, Dafan

2 2

[Dovecot] dovecot proxy ssl-parameter from database?
by Daniel Funke 11 Sep '12

11 Sep '12

Hi List, I want to migrate my IMAP-users from an old Courier-IMAP-Server to a new dovecot-Server. The old server supports IMAP without and with TLS. The new one only with TLS. To users should be migrated one by one with changing some client parameters. To leave the servername of the imap server I want to use the dovecot proxy during migration. the proxy uses a sql db to look for the old or new host for every user. So far all works fine. My question is the TLS or noTLS connection from the client to the proxy. How can I make the ssl-parameter user-dependant? clients to the old courier server should work without or with tls through the proxy and clients to the new dovecot server should only work WITH TLS between Client and proxy. (After migration of all clients the proxy should be switched off an all clients connect directly to the dovecot server.) I tried with http://wiki2.dovecot.org/UserDatabase/ExtraFields and returned a field "userdb_ssl" ("required" for host dovecot, "yes" for host courier). But it doesn't work. A migrated user can still login without tls to the proxy and the dovecot backend. Any ideas? Daniel Here is my doveconf -n # 2.1.9: /opt/dovecot/etc/dovecot/dovecot.conf doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (1503) # OS: Linux 2.6.32-279.2.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_mechanisms = plain login default_process_limit = 500 disable_plaintext_auth = no listen = * managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /opt/dovecot/etc/dovecot/sql.conf driver = sql } protocols = imap pop3 service imap-login { inet_listener imaps { port = 0 } } service pop3-login { inet_listener pop3s { port = 0 } } ssl_cert = </etc/pki/tls/certs/server.crt ssl_key = </etc/pki/tls/private/server.key userdb { driver = prefetch } verbose_proctitle = yes

2 1

[Dovecot] Alerts when process limits are met
by David Anderson 11 Sep '12

11 Sep '12

Hi, I've not found the answer to this question anywhere - please forgive me if I overlooked. I'd like to be able to be automatically alerted if process limits are hit (e.g. max POP3 logins). Is there a way that I can configure a script to be run, in the same way that I can with quota warnings? I can of course use logwatch, but this alerts me the next day, and logwatch can be noisy and it's easy to overlook. My motivation: for some reason my POP3 listener was hanging, and I had to restart dovecot (this is 2.0.9). But I was not aware - the process was still there, it was accepting connections (but not doing anything useful with them) and was actually managing to log the fact that the process limit was being hit (as more and more connections came in). If I could have been alerted I could have restarted dovecot earlier. Many thanks, David -- WordShell - WordPress fast from the CLI - www.wordshell.net

3 2

[Dovecot] ACL MySQL dict: to_user==from_user entries
by Roland Rosenfeld 11 Sep '12

11 Sep '12

Hi! We run dovecot 2.1.6 with ACL support and MySQL dict for shared/shared-boxes/user/$to/$from. When a user does a SETACL (via IMAP) to himself he is added as $to and $from to the MySQL dict. Se for example this IMAP conversation: 5 GETACL INBOX * ACL "INBOX" "user@domain" lrwstipekxacd 5 OK Getacl completed. 6 SETACL INBOX user@domain lrwstipekxacd 6 OK Setacl complete. 7 GETACL INBOX * ACL "INBOX" "user@domain" akxeilprwtscd 7 OK Getacl completed. As you can see, user@domain sets the ACL of his INBOX to the same value it was set before (reading it from the server after this idempotent write changed the order but none of the flags). But after "SETACL INBOX user@domain lrwstipekxacd" I see a new entry in my imap_acl_shares table where to_user and from_user both contain the value "user@domain". As far as I can see, this entry does not make much sense in the database, because every user should be able so see its own folders. But adding this line may blow up the database especially according to the full table scan problem for acl dict rebuild mentioned in http://www.dovecot.org/list/dovecot/2012-August/067548.html. Does it make sense to run a daily cron job, that removes all entries with from_user=to_user or may this cause other inconsistencies? If you need to have a look at my complete setup, it's in http://www.dovecot.org/list/dovecot/2012-July/067130.html, so I don't have to clone this here. Tschoeeee Roland

2 1

[Dovecot] imap_idle_notify_interval
by Andreas Meyer 11 Sep '12

11 Sep '12

Hi! I want to change the imap_idle_notify_interval t0 29 minutes and have edited the 20-imap.conf with imap_idle_notify_interval = 29 mins and restarted the server. doveconf -n shows me this: .... protocol imap { imap_idle_notify_interval = 29 mins mail_max_userip_connections = 10 mail_plugins = " quota imap_quota autocreate" } .... doveconf |grep idle shows me the following output: default_idle_kill = 1 mins imap_idle_notify_interval = 2 mins mailbox_idle_check_interval = 30 secs idle_kill = 0 idle_kill = 4294967295 secs idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 4294967295 secs idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 4294967295 secs idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 4294967295 secs idle_kill = 0 idle_kill = 4294967295 secs imap_idle_notify_interval = 29 mins I see two line of imap_idle_notify_interval. What is the right one? Greetings Andreas

2 2

[Dovecot] Is it possible to save only some messages compressed to mdbox? (2.1.6)
by Jost Krieger 11 Sep '12

11 Sep '12

I'm trying to save some messages as compressed (via zlib plugin) and it doesn't seem to work. Here's a log line (I'm logging to stderr): d k 1345467448.705591500 1345467448.705596500 1345467448.974808500 1650 <XXXXXXXXXXXXXXXXXXXXXXXXXX(a)YYY.ruhr-uni-bochum.de> local.jost.krieger+hirn(a)ruhr-uni-bochum.de 10909 80 Extra: -o plugin/zlib_save_level=9 -o plugin/zlib_save=bz2 lda(kriegjcb): Info: msgid=<20120820125728.58CC9172B6C(a)c2-4-7.noc.ruhr-uni-bochum.de>: saved mail to Hirn-2012-08 did 0+0+1 This probably doesn't make much sense to anyone except the last line but 1. It is a somewhat complicated qmail/maildrop/dovecot setup, which works for the standard cases. The Extra gets interpolated into the lda command and this works because an incorrect option blows up the delivery. The mails arrive uncompressed. So here's the questions: 1. Is it possible to have compressed/uncompressed mails mixed in an mdbox? 2. Will it work via "-o" in lda delivery? I tried to find out in the source but found it hard to see which options are pulled in when. Thanks Jost Krieger -- | Helft Spam ausrotten! HTML in Mail ist unhöflich. | | Postmaster, JAPH, manchmal Wahrsager am RZ der RUB | | Wahre Worte sind nicht gefällig, gefällige Worte sind nicht wahr.| | Lao Tse, Tao Te King 81 |

2 2

Re: [Dovecot] ChgrpNoPerm issue
by Joseph Tam 11 Sep '12

11 Sep '12

Robert JR <roundcube222(a)alaadin.org> writes: > The problem is /var/mail (Owner is > useraccount and the group us mail) , and here comes the problem > Dovecot > keeps trying to chown the imap folder inside the homedirectory with > user:mail account and since > And this is the reason of error that appears > in my log file. Dovecot is trying to keep the permission of your index caches consistent with that of your mailbox it indexes. The INBOX index cache is kept in your user's mail directory (as per your default settings), although you can change that location. > The option mail_access_groups=mail solve the problem.. > but I read it is not secure.. > With my current configutation, users login > with imap to read mail , can they use > any the mail_access_groups=mail > and read other poeple mail ? Yes, that's the security problem. > does my configutation > is a shard mailbox > and could be unsecure.. Could not parse your question/comment. > why didnot have > this issue with uw-imapd? and why dovecot try to chown the .imap > folder > with the mail group ? uw-imapd was not as picky. The extra consideration for group ownership is so that shared access to mailbox files, and their associated index caches, remain consistent. For example, if you shared a mailbox among your colleagues in group "staff" and the mailbox has group=staff,perm=g+rw, then the index caches will inherit those permissions, and members of group staff can access mailbox and indices alike. [You later write ...] > Sep 9 11:22:30 dovecot: pop3(r): Error: > fchown(/home/r/.imap/INBOX/dovecot.index.log.newlock, -1, 12(mail)) > failed: Operation not permitted (egid=501(r), group based on > /var/mail/r) > > i know that chmod 0600 /var/mail , will solve the problem > and i will no longer receive the above errors again You also have to make sure that autocreated INBOXs (i.e. a brand new account) does not start out with anything other than 0600. You may have to use dovecot's LDA or twist your LDA's arm to create mailboxes that way. I guess you can also avoid these errors by using memory indices, but you forego the advantages of persistent indices. > But my question is > that incase i did not set chmod /var/mail 0600, can i ignore such > errors, is these errors harmful ? if this errors keep coming and i > ignored them would this cause mbx corruption .. please advise No, you can't ignore these errors. They will break IMAP access to those mailboxes (as you will find out). Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] precise reading of plugin deleted to trash
by ml 10 Sep '12

10 Sep '12

hello timo and other dev after a precise reading of plugin deleted to trash it appears to me like things more varariables are declared NULL in the code. it appears to me as being possible to achieve actions even if messages with the same id appears several times in different INBOX when it is the exact order of things -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC2626742 gpg --keyserver pgp.mit.edu --recv-key C2626742 http://about.me/fakessh http://urlshort.eu fakessh @ http://gplus.to/sshfake http://gplus.to/sshswilting http://gplus.to/john.swilting https://lists.fakessh.eu/mailman/ This list is moderated by me, but all applications will be accepted provided they receive a note of presentation

1 0

[Dovecot] Chown ChgrpNoPerm problem
by Robert JR 10 Sep '12

10 Sep '12

Hello, I just have a one simple question. my logs has the following entries Sep 9 02:48:10 dovecot: pop3(r): Error: fchown(/home/r/mail/.imap/INBOX/dovecot.index.log.newlock, -1, 12(mail)) failed: Operation not permitted (egid=501(r), group based on /var/mail/r) Sep 9 11:22:30 dovecot: pop3(r): Error: fchown(/home/r/.imap/INBOX/dovecot.index.log.newlock, -1, 12(mail)) failed: Operation not permitted (egid=501(r), group based on /var/mail/r) i know that chmod 0600 /var/mail , will solve the problem and i will no longer receive the above errors again But my question is that incase i did not set chmod /var/mail 0600, can i ignore such errors, is these errors harmful ? if this errors keep coming and i ignored them would this cause mbx corruption .. please advise My dovecot conf is disable_plaintext_auth = no mail_debug = yes mail_location = mbox:~/mymail:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } Thanks. Robert

1 0

[Dovecot] ChgrpNoPerm issue
by Robert JR 09 Sep '12

09 Sep '12

I have dovecot version 2.0.9 I am confused about this article http://wiki2.dovecot.org/Errors/ChgrpNoPerm my mail_location = mbox:~/mymail:INBOX=/var/mail/%u So my inbox is at var/mail/ and my imap folder is /home/user/mymail The problem is /var/mail (Owner is useraccount and the group us mail) , and here comes the problem Dovecot keeps trying to chown the imap folder inside the homedirectory with user:mail account and since And this is the reason of error that appears in my log file. The option mail_access_groups=mail solve the problem.. but I read it is not secure.. With my current configutation, users login with imap to read mail , can they use any the mail_access_groups=mail and read other poeple mail ? does my configutation is a shard mailbox and could be unsecure.. my main quesion , for my current configuration , can i use mail_access_groups=mail safely or can some user use this to read other people mail ? attached my configuration. why didnot have this issue with uw-imapd? and why dovecot try to chown the .imap folder with the mail group ? dovecot -n output is # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.2.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) disable_plaintext_auth = no mail_debug = yes mail_location = mbox:~/mymail:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } [ Robert

1 0

[Dovecot] Sieve command line tool status for Refiltering
by Dieter Knopf 09 Sep '12

09 Sep '12

Hello, is there any update about the sieve command line tool? I really need some way to refilter my mails without loosings flags and without moving all messages in a different folder. This is possible with procmail via direct access to the file system without the need of getmail. Thanks

3 5

[Dovecot] Auth worker max line size
by Emmanuel Dreyfus 09 Sep '12

09 Sep '12

Hello I have been playing with some exotic authentication scheme with Dovecot and PAM. That involves sending really large base64 encoded data as the IMAP password, and I have hit a line limit in Dovecot, with AUTH_WORKER_MAX_LINE_LENGTH set to 1024. This limit is especially frustrating since other parts of the software use much larger limits: MAX_INBUF_SIZE 4096 MAX_IMAP_LINE 8192 AUTH_CLIENT_MAX_LINE_LENGTH 8192 I had to make the patch attached below to get my authentication working. I can live with this local patch, but given the much more liberal limits of MAX_INBUF_SIZE at 4096 makes we wonder if this 1024 limit on AUTH_WORKER_MAX_LINE_LENGTH could not be a bug. Or is there a security concern at using more than 1kB? Opinions? (please Cc: me, I'm not subscribed ot the list) --- src/auth/auth-worker-client.h.orig 2009-06-23 18:32:15.000000000 +0200 +++ src/auth/auth-worker-client.h 2009-06-23 18:32:33.000000000 +0200 @@ -1,8 +1,8 @@ #ifndef AUTH_WORKER_CLIENT_H #define AUTH_WORKER_CLIENT_H -#define AUTH_WORKER_MAX_LINE_LENGTH 1024 +#define AUTH_WORKER_MAX_LINE_LENGTH 4096 struct auth_worker_client *auth_worker_client_create(struct auth *auth, int fd); void auth_worker_client_destroy(struct auth_worker_client **client); void auth_worker_client_unref(struct auth_worker_client **client); -- Emmanuel Dreyfus manu(a)netbsd.org

3 5

[Dovecot] Vpopmail Dynamic Authentication Module
by Eric Sisolak 08 Sep '12

08 Sep '12

Hello, We currently use qmail with vpopmail for e-mail and are looking to switch from courier-imap to dovecot for IMAP on our RedHat EL 5 systems. Our goal is to use the dovecot RPM supplied by RH (v1.0.7) if at all possible. We can do this if we are able to dynamically load the vpopmail auth module. The wiki (http://wiki.dovecot.org/CompilingSource) notes that this should be possible: Dovecot can also dynamically load authentication modules from the $prefix/lib/dovecot/auth/ directory. Binary packages builders should use them for authentication modules which require external libraries (e. g. LDAP and vpopmail). There is no standard way to build them as modules currently, but something like this should work: gcc -shared -fPIC -DHAVE_CONFIG_H -DUSERDB_VPOPMAIL -DPASSDB_VPOPMAIL \-I../.. -I../lib userdb-vpopmail.c passdb-vpopmail.c -o vpopmail.so \-lvpopmail I had to modify the command to build the module, but was able to successfully build it: gcc -shared -fPIC -DHAVE_CONFIG_H -DUSERDB_VPOPMAIL -DPASSDB_VPOPMAIL -I../.. -I../lib -I/home/vpopmail/include -I/home/vpopmail/lib userdb-vpopmail.c passdb-vpopmail.c -o vpopmail.so -L/home/vpopmail/lib/libvpopmail.a I am unable to get the module to load properly. Dovecot built with --with-vpopmail works perfectly. When I start dovecot and it tries to load the module it reports: Aug 23 16:48:18 ctd-nix1 dovecot: Dovecot v1.0.7 starting up Aug 23 16:48:18 ctd-nix1 dovecot: auth(default): dlopen(/usr/lib64/dovecot/auth/vpopmail.so) failed: /usr/lib64/dovecot/auth/vpopmail.so: undefined symbol: vclose Aug 23 16:48:18 ctd-nix1 dovecot: auth(default): dlsym(passdb_vpopmail) failed: dovecot-auth: undefined symbol: passdb_vpopmail Aug 23 16:48:18 ctd-nix1 dovecot: auth(default): Unknown passdb driver 'vpopmail' (typo, or Dovecot was built without support for it? Check with dovecot --build-options) Aug 23 16:48:18 ctd-nix1 dovecot: Auth process died too early - shutting down Sometimes instead the last line is replaced with: Aug 23 15:02:45 ctd-nix1 dovecot: child 5412 (auth) returned error 89 Thanks! Eric

2 2

[Dovecot] problem about pop3 using dovecot
by bmalik 08 Sep '12

08 Sep '12

I upgraded dovecot from 1.1 to 2.1.8 pop3/imap works but i have a problem. i use pop3 protocol on outlook 2010 for my account. and i set keep my mails on the server for 5 days or until i delete them. These settings were working old dovecot1.1. But when i upgraded it to 2.1.8. if i even delete a mail from outlook the server doesn't delete or old mails are not deleted. what can be the problem ? thanks -- View this message in context: http://dovecot.2317879.n4.nabble.com/problem-about-pop3-using-dovecot-tp373… Sent from the Dovecot mailing list archive at Nabble.com.

4 7

Re: [Dovecot] about postlogin in dovecot2
by Joseph Tam 07 Sep '12

07 Sep '12

<bmalik(a)ihlas.net.tr> writes: > where do i have to locate the passwd-file in dovecot2 For what purpose? Master user? Password/user lookup? passdb { driver = passwd-file master = yes args = /anywhere/you/want/master-users pass = yes } passdb { driver = passwd-file args = /anywhere/you/want/passwd } userdb { driver = passwd-file args = /anywhere/you/want/passwd } Joseph Tam <jtam.home(a)gmail.com>

4 7

[Dovecot] Disconnect users for a distinct period of time?
by Michael Grimm 07 Sep '12

07 Sep '12

Hi -- Today, I've learned who to disable incoming mail delivery to dovecot (accepted by postfix), temporarily. Now, I would like to know if there is a way to make a "doveadm kick -A" a permanent disconnect until one would allow reconnects, again? This should be done *without* shutting down dovecot or *extensive* re-configuration. A "doveadm block -u <joe> -m 'sorry: running maintenance, please, come back later'" alike tool/funtionality would be ideal. Background: I would like to avoid any modification of my user's maildirs by a running dovecot server while modifying maildir formats, mdbox_rotate_size setting, and alike, where I would need doveadm/dsnyc access to userdb. (I know there a ways to achieve this without downtimes, and I have already done so.) I just want to be sure that I haven't overseen such a tool/functionality in the documentation. Did I or didn't I? Thanks and regards, Michael

3 2

[Dovecot] pop3 migration
by TeTeHacko 07 Sep '12

07 Sep '12

Hi, I have problems with pop3 migration, the server disconect the dovesync when fetching mails after 5 minutes with this error in server log: xx.xx.xx.xx [28F4] 11:54:05 <<< RETR 6548 xx.xx.xx.xx [28F4] 11:54:05 >>> +OK 47522 octets xx.xx.xx.xx [28F4] 11:54:05 <<< RETR 6549 xx.xx.xx.xx [28F4] 11:54:05 >>> +OK 355289 octets xx.xx.xx.xx [28F4] 11:54:05 <<< RETR 6550 xx.xx.xx.xx [28F4] 11:54:05 >>> +OK 9638 octets xx.xx.xx.xx [28F4] 11:54:05 <<< RETR 6551 xx.xx.xx.xx [28F4] 11:54:05 >>> +OK 2188 octets xx.xx.xx.xx [28F4] 11:59:05 >>> -ERR Command unrecognized: "" xx.xx.xx.xx [28F4] 11:59:05 *** <info(a)istan.cz> 6551 477693894 00:12:55 ERROR xx.xx.xx.xx [28F4] 11:59:05 Disconnected and this in dovecot log: dsync(info(a)istan.cz): Debug: imapc(mail.stable.cz:143): Authenticated successfully dsync(info(a)istan.cz): Debug: pop3c(mail.stable.cz): Looking up IP address dsync(info(a)istan.cz): Debug: pop3c(mail.stable.cz): Connecting to 88.86.120.212:110 dsync(info(a)istan.cz): Debug: pop3c(mail.stable.cz): Authenticating as info(a)istan.cz dsync(info(a)istan.cz): Error: pop3c(mail.stable.cz): Server disconnected unexpectedly dsync(info(a)istan.cz): Error: pop3_migration: Failed to get header for msg 1: Disconnected dsync(info(a)istan.cz): Error: pop3_migration: Failed to get header for msg 2: Disconnected dsync(info(a)istan.cz): Error: pop3_migration: Failed to get header for msg 3: Disconnected dsync(info(a)istan.cz): Error: pop3_migration: Failed to get header for msg 4: Disconnected is there any timeout in dovecot for 300s? can anybody point me where may be some problem? This error occurs everytime i test it and the mail box has cca 2GB, on small mailboxes is no problem, i try this patch: http://hg.dovecot.org/dovecot-2.1/rev/ab6a4455b27d on dovecot version 2.1.7 but the problem isn't solved. Thanks for help Tomas Herceg

2 2

[Dovecot] dsync mirror and sieve ?
by Xavier Beaudouin 07 Sep '12

07 Sep '12

Hi there, I am currently doing some extensive test with dsync, but it appear that : dsync -u <user> maildir:/path/to/new/Maildir doesn't seems to sync sieves rules. Is there a good way to sync sieves as well ? :p Regards, Xavier

2 1

Re: [Dovecot] Removing specific entry in user/auth cache
by Joseph Tam 07 Sep '12

07 Sep '12

Francisco Wagner C. Freire <wgrcunha(a)gmail.com> writes: > On Wed, Jun 27, 2012 at 9:24 AM, Timo Sirainen <tss(a)iki.fi> wrote: > >> On 27.6.2012, at 14.10, Angel L. Mateo wrote: >> >>> We have dovecot configured with auth cache. Is there any way to >> remove a specific entry (not all) from this cache? >> >> Nope. What do you need it for? > > I dont known about Angel, but for me is useful because sometimes i need to > deactivate smtp/imap/pop access from accounts, or change their home after > storage migration, and removing a specific record i can use a long time > cache. I'm not sure that the auth cache holds that information, but I think you can at least invalidate a particular auth cache entry by 1) Changing the user password (and save the previous hash) 2) Authenticate using the new credentials (and invalidate the auth cache entry). For example, you can just do a manual connection on your dovecot server x login someuser newpassword This will replace the cache entry with a new one. 3) When you are ready to put the account back online, change the password back to the original. A password mismatch forces a resync to your authentication system which will restore the auth cache. Joseph Tam <jtam.home(a)gmail.com>

4 8

[Dovecot] Managesieve segfault with dovecot 2.1.8
by Daniel Parthey 07 Sep '12

07 Sep '12

Hi, I'm getting segfaults and unexpected disconnects from managesieve server, when the Thunderbird SIEVE extension tries to validate SIEVE scripts agains Pidgeonhole in Dovecot 2.1.8. The extension says: "Server terminated unexpectedly the connection, click on reconnect to try again." It can be reproduced by simply calling CHECKSCRIPT followed by a string: mail01:~# telnet 127.0.0.1 19200 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. "IMPLEMENTATION" "Sieve" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave" "NOTIFY" "mailto" "SASL" "PLAIN" "VERSION" "1.0" OK "Mailbox" AUTHENTICATE "PLAIN" "AGRwYXJ0aGV5QGV4YW1wbGUub3JnAGRwYXJ0aGV5" OK "Logged in." CHECKSCRIPT {6+} abcdef Connection closed by foreign host. The server interrupts the connection and the logs show the following: # dovecot.log Sep 7 01:40:46 dovecot: mailbox: mail: managesieve(dparthey(a)example.org): Fatal: master: service(managesieve): child 31356 killed with signal 11 (core dumped) # kern.log Sep 7 01:40:46 kernel: [1417105.954609] managesieve[31356]: segfault at 0 ip 00007f1c415c4876 sp 00007fffb3731f88 error 4 in libc-2.11.1.so[7f1c41543000+17a000] Here is the backtrace: mail01:~# gdb /usr/lib/dovecot/managesieve /var/tmp/core.managesieve.31356 Core was generated by `dovecot-mailbox/managesieve'. Program terminated with signal 11, Segmentation fault. #0 0x00007f1c415c4876 in ?? () from /lib/libc.so.6 (gdb) bt full #0 0x00007f1c415c4876 in ?? () from /lib/libc.so.6 No symbol table info available. #1 0x000000000040b1c3 in sieve_storage_save_will_activate (ctx=0x257f1a0) at sieve-storage-save.c:328 _data_stack_cur_id = 4 scriptname = 0x25400ae "default.sieve" ret = <value optimized out> #2 0x00000000004065b0 in cmd_putscript_finish_parsing (cmd=0x2575cb8) at cmd-putscript.c:206 ehandler = <value optimized out> cpflags = <value optimized out> sbin = <value optimized out> errors = <value optimized out> _data_stack_cur_id = 0 script = <value optimized out> client = 0x2575c30 ctx = 0x2578180 args = 0x254bc68 ret = <value optimized out> #3 0x0000000000406838 in cmd_putscript_continue_script (cmd=0x2575cb8) at cmd-putscript.c:423 all_written = <value optimized out> client = 0x2575c30 ctx = 0x2578180 size = 39279968 #4 0x0000000000406caf in client_input_putscript (context=0x2575c30) at cmd-putscript.c:84 cmd = 0x2575cb8 __FUNCTION__ = "client_input_putscript" #5 0x00007f1c41d1d3e6 in io_loop_call_io (io=0x2575fd0) at ioloop.c:379 ioloop = 0x2548680 t_id = 2 #6 0x00007f1c41d1e46f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:213 ctx = 0x25489f0 event = 0x2548a60 list = 0x2576020 io = 0x0 tv = {tv_sec = 18, tv_usec = 988469} msecs = <value optimized out> ret = <value optimized out> i = 0 call = false #7 0x00007f1c41d1d388 in io_loop_run (ioloop=0x2548680) at ioloop.c:398 No locals. #8 0x00007f1c41d09653 in master_service_run (service=0x2548530, callback=0x25400ae) at master-service.c:543 No locals. #9 0x00000000004096ce in main (argc=1, argv=0x2548370) at main.c:308 set_roots = {0x610d60, 0x0} login_set = {auth_socket_path = 0x2540088 "/var/run/dovecot/auth-master", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x409810 <login_client_connected>, failure_callback = 0x409290 <login_client_failed>} service_flags = <value optimized out> storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT username = 0x0 c = <value optimized out> Regards Daniel -- https://plus.google.com/103021802792276734820

2 1

[Dovecot] thunderbird not connecting
by cc young 07 Sep '12

07 Sep '12

cannot get TB to recognize either pop3/s or imap/s server can connect just fine with: openssl s_client -connect ms1.myserver.net:993 . login ... but trying with TB /var/log/mail.log gets: dovecot: pop3-login: Aborted login (no auth attempts): rip=223.205.150.234, lip=xxx.xx.xx.xx dovecot: imap-login: Aborted login (no auth attempts): rip=223.205.150.234, lip=xxx.xx.xx.xx -- View this message in context: http://dovecot.2317879.n4.nabble.com/thunderbird-not-connecting-tp37389.html Sent from the Dovecot mailing list archive at Nabble.com.

6 8

[Dovecot] dovecotadm error
by Michael 07 Sep '12

07 Sep '12

When I use the following command: doveadm expunge -A mailbox Junk savedbefore 28d I get: doveadm(root): Error: User listing returned failure In the mail log file it says: dovecot: auth-worker(18549): Error: sql: Iterate query failed: Table 'system.users' doesn't exist (using built-in default iterate_query: SELECT username, domain FROM users) However this is setup: dovecot-sql.conf: iterate_query = SELECT username AS user FROM accounts though I have had to comment the following from dovecot.conf: #iteratedb { # args = /usr/local/etc/dovecot/dovecot-sql.conf # driver = sql #} because it errors on dovecot start up. I have already spent a bit of time on the Dovecot website and Google trying to find an answer. I want to get the expires plugin working. Any leads please? dovecot -n # 2.1.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.29.6-rt24-smp i686 Slackware 13.1.0 auth_master_user_separator = * auth_mechanisms = plain login dict { expire = mysql:/usr/local/etc/dovecot/dovecot-dict-expire.conf quotadict = mysql:/usr/local/etc/dovecot/dovecot-dict-sql.conf } disable_plaintext_auth = no first_valid_gid = 1000 first_valid_uid = 1000 mail_access_groups = dovecot mail_location = Maildir:%h/Maildir mail_plugins = " expire" mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } plugin { autocreate = Drafts autocreate2 = Junk autocreate3 = Sent autocreate4 = Trash autosubscribe = Drafts autosubscribe2 = Junk autosubscribe3 = Sent autosubscribe4 = Trash expire = Junk expire_dict = proxy::expire quota = dict:user::proxy::quotadict sieve = %h/.dovecot.sieve sieve_before = /var/lib/dovecot/sieve/before.sieve sieve_dir = %h/sieve sieve_global_dir = /var/lib/dovecot/sieve/global/ } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service dict { unix_listener dict { group = dovecot mode = 0660 } } service imap-login { inet_listener imap { address = DELETED } } service managesieve-login { executable = /usr/local/libexec/dovecot/managesieve-login } service managesieve { executable = /usr/local/libexec/dovecot/managesieve } ssl_cert = </etc/ssl/private/DELETED.pem ssl_key = </etc/ssl/private/DELETED.pem userdb { args = /usr/local/etc/dovecot/dovecot-sql.lda.conf driver = sql } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = autocreate quota imap_quota zlib imap_zlib } protocol pop3 { mail_plugins = quota } protocol lda { hostname = DELETED mail_plugins = quota sieve postmaster_address = DELETED sendmail_path = /usr/sbin/sendmail } protocol sieve { mail_debug = yes }

2 1

[Dovecot] different userdb and/or passdb for lmtp and pop3/imap?
by Gábor Lénárt 06 Sep '12

06 Sep '12

Dear All, I have a bit complex question about ldap based user/passdb with some twists caused by the LDAP schema I have to use. It's complex for me at least, since it's my first time to try to setup any dovecot install which is more than a "trivial" thing eg for some unix system users. What I'd like to do: Users are stored in LDAP with the following schema: storageMailUid: contains user's uid in x@z format, and it CAN be different than mail address. This value is used to login (pop3/imap) and to get the maildir path (well, home) in the form of /mailstorage/z/x/ regardless of the value of the "mail" attribute. If @z part is missing (I mean the user supplied login, not the LDAP!), some default value (example.com) should be treated (I guess that's easy: auth_default_realm may be enough, isn't it). It is NOT possible to login via pop3/imap with mail, only with storageMailUid! This storageMailUid can specify a string which is not even an existing mail address, of course. mail: contains user's mail address, or even mail addresses (there can be more mail addresses - more mail ldap attributes - for a single ldap entry). This attribute cannot be used for pop3/imap login, neither it counts to resolve the maildir path, it only counts when a mail is received: the location of the user's maildir must be got from storageMailUid. storageMailQuota: it contains the quota value (in bytes) for the given user, which should be enforced on receiving mail, or by using IMAP (not counting the Trash folder which is a fixed size for all users and it must be handled outside of this). All user maildirs have the same fixed unix UID/GID, which is not stored in LDAP, but must be configured statically. "Home directory" of the user is also not stored in LDAP, it must be got from storageMailUid LDAP parameter. Mails are received via LMTP only. I'd like to use prefetchdb to minimalize the amount of LDAP lookups (however I can live without that). I am unsure if auth_bind is OK, or it should not be used, currently I'd like to play with auth_bind, since it worked before on other servers well. I'm totally lost with the user_attrs/pass_attrs to create this kind of configuration. In case of static userdb, it was easy to set up: passdb { args = /etc/dovecot/dovecot-ldap-passdb.conf driver = ldap } userdb { args = uid=vmail gid=vmail home=/mailstorage/%Ld/%Ln driver = static } With this, pop3/imap worked (quota was not of the scope yet, though), however lmtp is not ("passdb doesn't support lookups, can't verify user's existence" which is odd for me, as userdb does not support it in my opinion). Please, give some suggestion how to set up userdb and passdb to support this configuration which works with the described scenario. I should also set iterate_filter and iterate_attrs I guess, so some doveadm commands can work then (-A stuffs, I guess). I am also not sure if auth service should be used or not (I mean extra configuration related): since I want LMTP not LDA, I guessed I don't need it, but I am not sure. I am also confused, because on receiving a mail (via LMTP) different kind of LDAP lookup is needed: then mail must be searched, but it's storageMailUid based lookup in case of pop3 or imap login ... Is it possible to give different userdb/passdb for lmtp and pop3/imap? In theory it's even possible to have x(a)example.com as mail and y(a)example.com as storageMailUid for one user, and the opposite for the another, so lookups cannot be done together for mail and storageMailUid. The LDAP schema/rest of the system works this way, not an option to change. Any help is greatly welcomed. Thanks a lot in advance, Gábor

1 1

[Dovecot] Anyone else seeing lots of random duplicate messages???
by Charles Marcus 06 Sep '12

06 Sep '12

Almost every message I'm getting through this list is duplicated, down to the same exact message-ID... Anyone else seeing this? Charles

6 8

[Dovecot] managesieve problem
by Léon Keijser 06 Sep '12

06 Sep '12

Hi, I'm using roundcube in combination with postfix (2.6.6), dovecot (2.0.9) and pigeonhole (2.0.9). All works well except sieve. I've already posted on the roundcube forum (http://www.roundcubeforum.net/index.php/topic,9690.0.html ) but was told I should ask here since it's more likely a dovecot issue rather than roundcube. The problem is that if I want to manage sieve filters from roundcube, I get this error in maillog: Sep 5 12:55:39 emperor dovecot: managesieve-login: Login: user=<leon(a)EXAMPLE.COM>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=1575, secured Sep 5 12:55:39 emperor dovecot: managesieve(leon(a)EXAMPLE.COM): Error: sieve-storage: stat((null)) failed: Bad address Sep 5 12:55:39 emperor dovecot: managesieve(leon(a)EXAMPLE.COM): Error: sieve-storage: stat((null)) failed: Bad address Sep 5 12:55:39 emperor dovecot: managesieve(leon(a)EXAMPLE.COM): Fatal: Failed to open Sieve storage The managesieve daemon is listening though: emperor ~ # netstat -tlpne | grep dovecot tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 0 1275042 362/dovecot tcp 0 0 0.0.0.0:2000 0.0.0.0:* LISTEN 0 1275037 362/dovecot tcp 0 0 0.0.0.0:4190 0.0.0.0:* LISTEN 0 1275035 362/dovecot tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 0 1275044 362/dovecot tcp 0 0 :::143 :::* LISTEN 0 1275043 362/dovecot tcp 0 0 :::2000 :::* LISTEN 0 1275038 362/dovecot tcp 0 0 :::4190 :::* LISTEN 0 1275036 362/dovecot tcp 0 0 :::993 :::* LISTEN 0 1275045 362/dovecot emperor ~ # telnet localhost 4190 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus" "NOTIFY" "mailto" "SASL" "PLAIN" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready." Before I paste any configuration files, I wanted to ask first if this is a common/known issue. Else, please let me know what additional information I should provide. Thanks in advance! kind regards, Léon

2 5

[Dovecot] Length of attachment filenames
by Fuhrmann, Hauke 06 Sep '12

06 Sep '12

Hi there, I have a beginners question to Dovecot: does it have a restriction on the supported length and character encodings of filenames of attachments? Can filenames be arbitrary large? Cheers, Hauke -- Diese E-Mail kann vertrauliche und/oder rechtlich geschuetzte Informationen enthalten. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtuemlich erhalten haben, informieren Sie bitte sofort den Absender durch eine Antwortmail und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. Wir danken fuer Ihre Kooperation. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient or have received this e-mail in error, you are on notice of its status. Please notify the sender immediately by reply e-mail and delete this e-mail from your systems. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly prohibited. Thank you for your cooperation.

3 2

[Dovecot] dovecot stats: useful data to gather
by Patrick Ben Koetter 06 Sep '12

06 Sep '12

Timo, following our discussion on dovecot stats at the LinuxTag 2012 my team and I sat down and put together a list of stat items we think to be useful in daily dovecot usage. Besides pulling together all the data we also think it would be useful to have an SNMP interface to access the stats. Our offer to create and contribute a standalone web interface for dovecot stats stands. Here are the stats we believe to be useful: Login/Logout - total number login success/time - total number login failure/time - total number per authentication mechanism - total number plain sessions - total number STARTTLS sessions - total number of currently connected users (pop3/pop3s/imap/imaps/managesieve) - login names of connected users (not really stats, but great for actions regarding those uses e.g. force logout) - total number logout commands/time - total number BYE responses (autologout) Mailbox state - Inflow rate (number incoming messages/time) - Deleted rate (number \Deleted flagged messages/time) - Expunge rate (number Expunge operations/time) - total number current messages mailboxes normal storage - total number current messages mailboxes alt storage - total number read messages mailboxes normal storage - total number read messages mailboxes alt storage - per user number current messages mailboxes normal storage - per user number current messages mailboxes alt storage - per user number read messages mailboxes normal storage - per user number read messages mailboxes alt storage Mailbox Quota - total number persons under soft-quota per quota - total number persons above or equal soft-quota per quota - total number persons above or equal hard-quota per quota Performance - minimum time to write a message - maximum time to write a message - average time to write a message - minimum time to modify a message - maximum time to modify a message - average time to modify a message - minimum time to delete a message - maximum time to delete a message - average time to delete a message - minimum time search operations - maximum time search operations - average time search operations Regards, p@rick -- state of mind () http://www.state-of-mind.de Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München Telefax +49 89 3090 4666 Amtsgericht München Partnerschaftsregister PR 563

5 5

Re: [Dovecot] thunderbird not connecting
by Joseph Tam 06 Sep '12

06 Sep '12

On Wed, 5 Sep 2012, Charles Marcus wrote > On 2012-09-05 6:23 AM, cc maco young <bangkokmaco(a)gmail.com> wrote: >> On Wed, Sep 5, 2012 at 12:02 AM, Stan Hoeppner<stan(a)hardwarefreak.com>wrote: >>> What does TB activity manager say? > >> Activity Manager is blank >> >> as an update, went to Claws email client. it had enough feedback and gave >> me enough ways to tweak - got everything going. >> >> went back to TB. recognized server, but no username/password. perhaps >> it's not letting the full email - which is the user name - through. but >> who knows? no feedback. > > You're looking at the wrong end. > > You need to be looking at your SERVER logs, not the Clients. Actually, I think he did supply that and it showed imap and pop3 not getting any auth information. > dovecot: pop3-login: Aborted login (no auth attempts): rip=223.205.150.234, > lip=xxx.xx.xx.xx > dovecot: imap-login: Aborted login (no auth attempts): rip=223.205.150.234, lip=xxx.xx.xx.xx There are other log options to verbosely log auth and ssl information, and that might help. I frequently see the above log messages when the client and the server get their security protocol (SSL/TLS) and ports crossed up (i.e. trying IMAP/SSL on port 143 or trying IMAP/TLS on port 993). Try fiddling with TB's setting here and see if anything shakes loose. You can also use openssl and simulate the server end and maybe that will shed light on the situation: (You'll have to read the man page yourself to find all the options) openssl s_server -accept 993 ... Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] mail_location / mail_home
by Denny Schierz 06 Sep '12

06 Sep '12

hi, I had a long (upgraded today from 2.0.17 to 2.1.9) time mail_location and mail_home at the same path, which I recognize know, that it wasn't a good idea, idea. On my testsystem I've set: mail_home = /imap/spool/%d/%1u/%u mail_location = maildir:~/:INDEX=~/ otherwise I don't have access to the mails anymore. Is that ok? cu denny

3 3

[Dovecot] Outlook 2013 imap specialuse RFC6154 XLIST
by Robert Schetterer 05 Sep '12

05 Sep '12

Hi, perhaps somebody wants to this --snip Microsoft® Outlook® 2013 Preview Outlook 2013 Preview implements the IMAP LIST extension specified in [RFC6154] as the XLIST command. ---snip taken out of [MS-STANOIMAP].pdf which zip you may download here http://msdn.microsoft.com/en-us/library/ee157124%28v=exchg.80%29 -- Best Regards MfG Robert Schetterer

3 6

[Dovecot] strange Folder in subscription list (was: Imap Ghost Folder)
by Sascha Zucca 05 Sep '12

05 Sep '12

Hi list, here's the complete Problem for easy reading again. Can someone reproduce this? I have a strange "ghostfolder" when using shares/%%n/ as prefix for shared namespace. If i swith only this setting to shares/%%u/ everything is just as wanted, only then the prefix is very long, so i would prefer the name. dovecot --version 2.1.7 dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-14-pve i686 Debian 6.0.5 simfs auth_mechanisms = plain login disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/vmail/%%d/%%n/Maildir mail_plugins = acl mail_privileged_group = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = / type = private } namespace { hidden = yes list = children location = maildir:/var/vmail/%%d/%%n/Maildir:INDEX=/var/vmail/%d/%n/Maildir/shared/%%u prefix = shares/%%n/ separator = / subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { acl = vfile acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db quota = dict:user::file:/var/vmail/%d/%n/.quotausage sieve = /var/vmail/%d/%n/.sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve quota } protocol imap { mail_plugins = quota imap_quota acl imap_acl } Thank you very much for your help Sascha -- Systemschmiede IT-Lösungen Zucca & Teves GbR August-Thyssen-Straße 2-4 52511 Geilenkirchen www.systemschmiede.com Tel.: 02451 - 9088390 Fax: 02451 - 9124070 Mobil: 0178 - 4073254 Ust.ID: DE248030393

1 0

Re: [Dovecot] finding messages deleted before timespec
by Joseph Tam 05 Sep '12

05 Sep '12

On Tue, 4 Sep 2012, Sven Hartge wrote: > I am searching for a search_query which only matches messages with the > flag \Deleted whose flag has been set 24h or longer ago. > > Doing something like > > doveadm expunge -A mailbox \* DELETED > > is not the solution, since it will expunge all deleted mails without > looking at the time when they have been deleted. > > Using savedbefore does not work either, since a message may have been > saved 2 years ago but only recently deleted. You could work out a cron job that does a "doveadm search ...", then diff it with one generated 24 hours ago, extract the common GID/UUIDs, then do a second pass to delete them. Not elegant, but it would probably work. (I just read the man page, and there doesn't seem to be an option to pipe the search like "doveadm search ... | doveadm expunge ...". You'll have to expunge one message at a time. Ugh.) Or maybe the advice "don't worry, be happy" applies here. I find that too many "mistake mitigation" features is counterproductive as users habitually relying on them, rather than being careful. Extending your grace period to a week will lessen the probability of this race condition. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Custom auth process in dovecot 2
by Richard Platel 04 Sep '12

04 Sep '12

Hi, I'm trying to upgrade from dovecot-1.1.x to 2.1.7. We have our own custom auth server process (because we want to do our own password validation and for other reasons) that listens on a UNIX domain socket and speaks the dovecot auth protocol. In dovecot 1.1 we could configure this with auth external { socket connect { master { path = /var/run/dovecot/auth.sock } } } as per http://wiki.dovecot.org/MainConfig I haven't been able to figure out how to do this in 2.1.7, is it possible?

2 1

[Dovecot] finding messages deleted before timespec
by Sven Hartge 04 Sep '12

04 Sep '12

Hi! I've been pondering about doveadm-search-query(7) and trying to formulate a search query for some time now and it seems there is no way to search for messages, which have been marked DELETED before a certain time. I want to use this to expunge all DELETED messages which have been in that state for 24h or longer. For example a cronjob runs at midnight to expunge those messages but a user deletes one just 10 minutes before that, this message should not be deleted until the day after. This is my first time diving deeper into IMAP search queries so I have the nagging feeling I am missing something important here. Grüße, Sven. -- Sigmentation fault. Core dumped.

3 4

[Dovecot] doveadm command to block a user?
by Angel L. Mateo 04 Sep '12

04 Sep '12

Hello, Is there any command to be able to lock imap access to a specific user? With doveadm kick I could close his connections, but I want to avoid future ones too and just for imap. Any way to do it? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868887590 Fax: 868888337

2 1

Re: [Dovecot] thunderbird not connecting
by Spyros Tsiolis 04 Sep '12

04 Sep '12

>________________________________ > From: "cc "maco" young" <bangkokmaco(a)gmail.com> >To: Spyros Tsiolis <stsiol(a)yahoo.co.uk> >Sent: Tuesday, 4 September 2012, 16:00 >Subject: Re: [Dovecot] thunderbird not connecting > > >On Tue, Sep 4, 2012 at 2:31 PM, Spyros Tsiolis <stsiol(a)yahoo.co.uk> wrote: > >> . . . . %< . . . . . %< . . . . . . . . > >what you showed is what I remember when I was last hacking in TB. now all options are gone. screenshot attached > > >think I know problem. got tired of TB - no options, no feedback. ok if everything works; otherwise sucks. > > >went to claws. they have actual messages, actual logs. had similar problem, but claws easily allowed me to override. see this: http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2199 > > >know my cert chain ok because http://www.sslshopper.com/ssl-checker.html checks chain ok > > >anyway, thanks for your help, and goodbye thunderbird > > > > I remember being stuck on this. I know what you are saying. Give it another go. Tinker with it. You'll get there. If you're fed up with TB, that's another thing. However, you _can_ get round this. I know I did. Just my 2c, Regards, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

1 0

[Dovecot] problems with ssl cert
by cc "maco" young 04 Sep '12

04 Sep '12

in conf.d/10-ssl.conf: ssl = yes ssl_cert = </etc/ssl/certs/ms1xxx.net.crt ssl_key = </etc/ssl/private/ms1.xxx.net.key when try to set up an account in thrunderbird, get /var/log/mail.log: imap-login: Disconnected (no auth attempts): rip=223.205.150.234, lip=xx.xx.xx.xx, TLS: SSL_read() failed: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown: SSL alert number openssl s_client -connect mail.myserver.com:993 - successful using the same cert in gning / chrome is successful, so think the cert is ok

2 1

Re: [Dovecot] thunderbird not connecting
by Spyros Tsiolis 04 Sep '12

04 Sep '12

>________________________________ > From: "cc "maco" young" <bangkokmaco(a)gmail.com> >To: Spyros Tsiolis <stsiol(a)yahoo.co.uk> >Sent: Tuesday, 4 September 2012, 9:42 >Subject: Re: [Dovecot] thunderbird not connecting > > >On Tue, Sep 4, 2012 at 12:59 PM, Spyros Tsiolis <stsiol(a)yahoo.co.uk> wrote: > > >> >>----- Original Message ----- >>> From: cc young <bangkokmaco(a)gmail.com> >>> To: dovecot(a)dovecot.org >>> Cc: >>> Sent: Tuesday, 4 September 2012, 7:21 >>> Subject: [Dovecot] thunderbird not connecting >>> >>> cannot get TB to recognize either pop3/s or imap/s server >>> >>> can connect just fine with: >>> >>> openssl s_client -connect ms1.myserver.net:993 >>> . login ... >>> >>> but trying with TB /var/log/mail.log gets: >>> >>> dovecot: pop3-login: Aborted login (no auth attempts): rip=223.205.150.234, >>> lip=xxx.xx.xx.xx >>> dovecot: imap-login: Aborted login (no auth attempts): rip=223.205.150.234, >>> lip=xxx.xx.xx.xx >>> >>> >>> >>> >>> -- >>> View this message in context: >>> http://dovecot.2317879.n4.nabble.com/thunderbird-not-connecting-tp37389.html >>> Sent from the Dovecot mailing list archive at Nabble.com. >>> >> >> >>Thunderbird is not the best of clients out there. >>It's ok but not the best. >> >>I am using TB on my sites and found out that it has many issues. >>Can you be a bit more specific ? >>Are you trying to connect to Secure IMAP ? (993) on dovecot ? >> >>In that case, as far as I remember you have to "fool" Thunderbird >>during the mail account set up process. >> >>It's a bit crazy, I know but it's true. I have documented everything. >>Let me know where the hickup is and I'll try to get the docs and >>let you know how to work around this. >> >>HTH, >> > > >right - trying to connect to Secure IMAP ? (993) on dovecot > > >not in love with thunderbird, but need to access via linux and ms > > >any help / insight would be wonderful > > Hi again, Taken from my docs . This is the first part for Mozilla Thunderbird setup. I've seen this work both on Win32 systems and linux systems (mainly Linux Mint). There's a part on pop3/smtp. I am sure you can skip that and do your own magic for those two protocols : Pre-Installation, Wizard Configuration -------------------------------------- During initial Thunderbird startup, the admin is greeted by a welcome window named “Mail Account Setup” Click on Cancel Installation ------------ Click on “Edit” -> “Account Settings” New window pops up Click on “Add” New window pops up Fill in “Description” (e.g. “Name Surname mailbox”) On “Server Name” enter the IP address (e.g. 192.168.3.5) On “Port” enter the SMTP port (e.g. 25) On “Security and Authentication” → “Connection Security” enter none On “Authentication Method” choose Password transmitted insecurely On “Username” enter the users' username including the FQDN (e.g. name(a)domain.gr) Click on OK From “Edit”, click on “Account Settings” From “Account Actions” click on “Add Mail Account” New windows pops up Enter in the same name for “Your name” Enter in the same e-mail address for “Email address” On “Password” enter in users' password Click on “Continue” then without waiting click on “Manual Config” Once “Manual Config” is clicked, thunderbird will allow the admin to perform additional configuration tasks For “Incoming” the admin will choose “IMAP”, Server Hostname will be set to the servers' IP address (again, 192.168.3.5) From “Port” choose “993” From “SSL” choose “SSL/TLS” From “Authentication” choose “Autodetect” For “Outgoing” the admin will let the “SMTP” option For “Server Hostname”, choose the same IP address (e.g. 192.168.3.5) For “Port” choose “25” For “SSL” choose “None” For “Authentication” choose “Normal Password” On the Username field, enter the full user name, e.g. “user(a)domain.xn--gr-02t Click on “Re-test” Click on “Create Account” Check on the “I understand the Risks” checkbox Click on “Create Account” Click on “Confirm Security Exception” Click on “OK” Hope this helps and best regards, Spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

1 0

[Dovecot] dovecot-antispam and Thunderbird, Outlook, etc.
by Eddy Ilg|univation 04 Sep '12

04 Sep '12

Hi, In the documentation of dovecot-antispam it is mentioned that moving mails out of the spam folders trains them as non-spam. I.e. thunderbird automatically deletes old spam messages (after a time limit, i.e. 14 days). Will this also train the old spam messages as non-spam? Cheers, Eddy

2 1

[Dovecot] Disable security for testing?
by Voytek Eymont 03 Sep '12

03 Sep '12

I want to offer 'plain' unsecure pop/imap access, just for temp. testing purpose, do I simply comment out ssl = required ? Voytek -- Swyped on Motrix with K-9 Mail. Please excuse my brevity.

5 11

[Dovecot] dovecot sasl + postfix issue
by tseveendorj 03 Sep '12

03 Sep '12

Hello, I'm trying to configure postfix + Dovecot SASL for user authenticated mail relay. I set following configuration on postfix queue_directory = /var/spool/postfix smtpd_sasl_auth_enable = yes smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_sasl_authenticated_header = yes smtpd_sasl_security_options = noanonymous smtpd_sasl_local_domain = $myhostname broken_sasl_auth_clients = yes smtpd_recipient_restrictions = reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination Following are dovecot -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-29-generic x86_64 Ubuntu 12.04.1 LTS auth_mechanisms = plain login digest-md5 base_dir = /var/run/dovecot/ mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r when I see telnet localhost 25 eberx@beastie:/etc/dovecot/conf.d$ telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 beastie ESMTP Postfix (Ubuntu) ehlo beastie 250-beastie 250-PIPELINING 250-SIZE 10240000 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN quit 221 2.0.0 Bye Connection closed by foreign host. there is no 250-AUTH How do I fix this ?

2 1

[Dovecot] Imap Ghost folder
by Sascha Zucca 03 Sep '12

03 Sep '12

Hi list, i have a strange "ghost" folder in my subscription list and just can't find out how to get rid of it. It seems to be someones Inbox, but it doesn't tell me whose. Here's a screenshot of Open-Xchanges Web-GUI: /http://s9.postimage.org/6aohh97ov/iehadjhb.jpg / As you can see there is an unamed folder just under Freigaben (Shares). In Thunderbird: /http://s12.postimage.org/z0n82k2u5/bjddgefg.jpg/ Now the Folder is "INBOX"...But it is noones Inbox, as the corresponding user (amazon e.g.) should be a prefix-folder right before the share. some output over Telnet: 1 lsub "" "*" * LSUB () "/" "INBOX" * LSUB () "/" "INBOX/Amazon" * LSUB () "/" "INBOX/Bestellung" * LSUB () "/" "Drafts" * LSUB () "/" "Sent Items" * LSUB () "/" "Spam" * LSUB () "/" "Trash" * LSUB () "/" "Freigaben/amazon/INBOX" 1 OK Lsub completed. 1 list "" "*" * LIST (\HasNoChildren) "/" "Trash" * LIST (\HasNoChildren) "/" "Sent Items" * LIST (\HasChildren) "/" "INBOX" * LIST (\HasNoChildren) "/" "INBOX/Amazon" * LIST (\HasNoChildren) "/" "INBOX/Bestellung" * LIST (\HasNoChildren) "/" "Spam" * LIST (\HasNoChildren) "/" "Drafts" * LIST (\Noselect \HasChildren) "/" "Freigaben/amazon" * LIST (\Noselect \HasNoChildren) "/" "Freigaben/" * LIST (\HasNoChildren) "/" "Freigaben/amazon/INBOX" 1 OK List completed. This looks a bit strange to me: * LIST (\Noselect \HasNoChildren) "/" "Freigaben/" But i don't know really if that is the ghostfolder. finally here's the interesting part in my dovecot.conf: / namespace private { separator = / prefix = #location defaults to mail_location. inbox = yes } namespace shared { separator = / prefix = Freigaben/%%n/ location = maildir:/var/mail/vhosts/%%d/%%n/:INDEX=/var/mail/vhosts/%%d/%%n/ subscriptions = no list = children inbox = no } / Any idea how to banish the ghost in the machine? Thank you very much Sascha -- Systemschmiede IT-Lösungen Zucca & Teves GbR August-Thyssen-Straße 2-4 52511 Geilenkirchen www.systemschmiede.com Tel.: 02451 - 9088390 Fax: 02451 - 9124070 Mobil: 0178 - 4073254 Ust.ID: DE248030393

4 17

[Dovecot] exclude a folder for lazy expunge (move to trash)
by Angel L. Mateo 03 Sep '12

03 Sep '12

Hello, I'm configuring lazy expunge plugin to act as a kind of backup of my user's emails. I'm getting a little problem because a lot of my users use "move to trash" behaviour in their email client (most of them are using thunderbird which has no option to hide deleted messages and is a hassle working with mark as deleted with it). The problem combining move to trash with lazy expunge is that messages are stored in the expunge namespace twice, first when it was deleted from the original folder and the second when is deleted from the trash. So... is there any way to exclude trash folder from lazy expunge plugin, so mails are stored in the expunge namespace only when they are deleted from their original folder and not from the trash? Another idea... We are purging trash folders with a cron running "doveadm purge" commands. Is there any way to run this command disabling lazy expunge plugin? Any other idea not to duplicate these emails? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

2 2

[Dovecot] [Postfix] SASL Auth. using Dovecot with password forwarding proxy configuration
by Adi Pircalabu 03 Sep '12

03 Sep '12

Hi, I'm relatively new to Dovecot and I did a bit of search but couldn't find a possible solution for the particular setup I'm working on. Basically I have an SMTP/POP/IMAP proxy setup running Postfix & Dovecot. IMAP/POP authentication is done using the password proxy feature, where the login credentials are passed to the backend server after a db lookup, which does the actual authentication. The POP/IMAP part is working fine. What I'm trying to do is to use Dovecot SASL implementation in Postfix to do SMTP authentication in a similar manner. The problem I have with my current configuration is that SMTP authentication succeeds if only the username matches, because password forwarding works if the authentication succeeds with any given password, as documented at http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy My question is, given the above: is there a way to get SMTP authentication properly in this scenario? The way I see it now, Dovecot SASL accepting the login if only the user matches isn't quite "complete", the auth process should go further and authenticate against the backend server, same as for POP/IMAP connections. Does this requirement make any sense? Maybe I'm missing something in Dovecot configuration to get the SMTP authentication work in password forwarding mode, few pointers will be highly appreciated. PopBSMTP is not an sensible alternative in my case. Here's my configuration, plus some dovecot auth_debug log entries. As you can see, SMTP authentication succeeds with any given password. ---Dovecot--- dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.2.1.el6.centos.plus.x86_64 x86_64 CentOS release 6.3 (Final) auth_cache_size = 4 k auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_ca = </etc/pki/tls/certs/ca-cert.pem ssl_cert = </etc/pki/tls/certs/_cert.pem ssl_key = </etc/pki/tls/certs/_key.pem userdb { driver = prefetch } grep -v "^$\|^#" /etc/dovecot/dovecot-sql.conf.ext driver = mysql connect = host=/var/lib/mysql/mysql.sock dbname=postfix user=postfix password=postfixpassword password_query = SELECT NULL AS password, 'Y' as nopassword, host, email, 'Y' AS proxy FROM mailbox WHERE email = '%u' ---Dovecot--- ---Postfix--- smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname broken_sasl_auth_clients = yes smtpd_sasl_type = dovecot smtpd_sasl_path = /var/spool/postfix/private/auth smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination ---Postfix--- ---/var/log/maillog--- (IMAP connection) Aug 31 11:20:20 centos6 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=192.168.1.222#011rip=192.168.1.56#011lport=993#011rport=44024#011resp=AGFAMGFkaXRlc3QubmV0ADEyM3F3ZVpYQw== Aug 31 11:20:20 centos6 dovecot: auth: Debug: cache(a(a)0aditest.net,192.168.1.56): miss Aug 31 11:20:20 centos6 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 31 11:20:20 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 31 11:20:21 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Aug 31 11:20:21 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Aug 31 11:20:21 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Aug 31 11:20:21 centos6 dovecot: auth: mysql: Connected to /var/lib/mysql/mysql.sock (postfix) Aug 31 11:20:21 centos6 dovecot: auth: Debug: sql(a(a)0aditest.net,192.168.1.56): query: SELECT NULL AS password, 'Y' as nopassword, host, email, 'Y' AS proxy FROM mailbox WHERE email = 'a(a)0aditest.net' Aug 31 11:20:21 centos6 dovecot: auth: Debug: client out: OK#0111#011user=a@0aditest.net#011host=BACKEND_SERVER_IP#011email=a@0aditest.net#011proxy#011pass=1234567890 Aug 31 11:20:21 centos6 dovecot: imap-login: Debug: Ignoring unknown passdb extra field: email Aug 31 11:20:21 centos6 dovecot: imap-login: proxy(a(a)0aditest.net): started proxying to BACKEND_SERVER_IP:143: user=<a(a)0aditest.net>, method=PLAIN, rip=192.168.1.56, lip=192.168.1.222, TLS [...] (SMTP connection) Aug 31 11:36:14 centos6 postfix/smtpd[11213]: connect from unknown[192.168.1.200] Aug 31 11:36:14 centos6 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: auth client connected (pid=11213) Aug 31 11:36:14 centos6 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.1.222#011rip=192.168.1.200#011resp=AGFAMGFkaXRlc3QubmV0AGFzZA== Aug 31 11:36:14 centos6 dovecot: auth: Debug: cache(a(a)0aditest.net,192.168.1.200): miss Aug 31 11:36:14 centos6 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Aug 31 11:36:14 centos6 dovecot: auth: mysql: Connected to /var/lib/mysql/mysql.sock (postfix) Aug 31 11:36:14 centos6 dovecot: auth: Debug: sql(a(a)0aditest.net,192.168.1.200): query: SELECT NULL AS password, 'Y' as nopassword, host, email, 'Y' AS proxy FROM mailbox WHERE email = 'a(a)0aditest.net' Aug 31 11:36:14 centos6 dovecot: auth: Debug: client out: OK#0111#011user=a@0aditest.net#011host=203.63.79.87#011email=a@0aditest.net#011proxy#011pass=anygivenpassword Aug 31 11:36:14 centos6 postfix/smtpd[11213]: C9620600A9: client=unknown[192.168.1.200], sasl_method=PLAIN, sasl_username=a(a)0aditest.net Aug 31 11:36:14 centos6 postfix/cleanup[11219]: C9620600A9: message-id=<20120831113614.72ed32df(a)adi.ddns.local> [...] ---/var/log/maillog--- -- Adi Pircalabu

3 5

[Dovecot] possible work plugin deleted_to_trash for otrher foler
by ml 03 Sep '12

03 Sep '12

Hi Timo in the present work would be possible to walk to another folder for deleted_to_trash please answer me -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC2626742 gpg --keyserver pgp.mit.edu --recv-key C2626742 http://about.me/fakessh http://urlshort.eu fakessh @ http://gplus.to/sshfake http://gplus.to/sshswilting http://gplus.to/john.swilting https://lists.fakessh.eu/mailman/ This list is moderated by me, but all applications will be accepted provided they receive a note of presentation

2 3

[Dovecot] Special Folder Mocking
by Eddy Ilg|univation 02 Sep '12

02 Sep '12

Dear Dovecot List, probably everyone knows the problem that different clients use different names for "Sent", "Trash" and so on. A simple question: Isn't it possible to advertise one imap folder with different names, depending on the client? E.g. if the client is Outlook, show the "Sent" folder as "Sent Elements" (translated from german) and if the client is Thunderbird, show the "Sent" folder as "Sent"? Best regards, Eddy Ilg

3 4

[Dovecot] New log entries with 2.0.19?
by Knute Johnson 02 Sep '12

02 Sep '12

I just upgraded my Ubuntu server from 11.10 to 12.04.1 and that upgraded Dovecot to 2.0.19. For some reason I'm getting a lot more (5 times) disconnect in IDLE and inactivity time outs. I'm using only IMAP with two users. Both users access the server from multiple devices, phone, tablet and desktop computer. I had previously set the max_userip_connections to 20 and rarely got the following limits exceeded message. That's probably being triggered when we are both home and using all of our devices on the same network. I've now changed it to 40 and we'll see how that does. The other is the IDLE and inactivity timeouts. I don't really understand how IDLE works and I couldn't find an inactivity timeout setting to play with. There are at this second 32 imap or imap-login processes running with only two phones and one desktop running. That's a few more than before the upgrade but not a lot. --------------------- Dovecot Begin ------------------------ Dovecot limits exceeded: max_userip_connections: penny from 216.240.58.138 to 216.240.58.140: 56 Time(s) Dovecot disconnects: Disconnected in IDLE: 485 Time(s) Inactivity: 343 Time(s) no auth attempts: 14 Time(s) no reason: 21 Time(s) Everything seems to be working OK so maybe I should just not worry about it? Thanks, knute... # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-29-generic x86_64 Ubuntu 12.04.1 LTS auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain login auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 60 default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_proxy_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 first_valid_gid = 1 first_valid_uid = 500 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k import_environment = TZ info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/lib/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib/dovecot/modules mail_plugins = mail_privileged_group = mail_save_crlf = no mail_temp_dir = /tmp mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index_disable = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no passdb { args = deny = no driver = pam master = no pass = no } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv postmaster_address = protocols = " imap" quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s sendmail_path = /usr/sbin/sendmail service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 4096 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0600 user = } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = port = 0 ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 0 ssl = no } inet_listener pop3s { address = port = 0 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_client_cert = ssl_client_key = ssl_key = </etc/ssl/private/dovecot.pem ssl_key_password = ssl_parameters_regenerate = 168 ssl_verify_client_cert = no submission_host = syslog_facility = mail userdb { args = driver = passwd } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no protocol imap { imap_capability = IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS mail_max_userip_connections = 40 } -- Knute Johnson

1 1

[Dovecot] Strange messages?
by Knute Johnson 02 Sep '12

02 Sep '12

The following messages show up in the output of a script that does some backup. This too is new with the upgrade to Ubuntu server 12.04.1 and dovecot 2.0.19. Anybody know what would generate these sorts of messages? Where or what would cause them? WARN: Duplicate profile 'Dovecot POP3', using last found WARN: Duplicate profile 'Dovecot Secure POP3', using last found WARN: Duplicate profile 'Dovecot IMAP', using last found WARN: Duplicate profile 'Dovecot Secure IMAP', using last found Thanks, -- Knute Johnson

1 0