- dovecot - dovecot.org

[Dovecot] Merge mails from two mail_locations
by Patrick Westenberg 29 Mar '12

29 Mar '12

Hi guys, recently I had some trouble with my ocfs2 cluster and it unmounted itself from /var/mail. Unfortunately I received mails while my mailstore was unmounted and some mails are stored in /var/mail on the hosts local harddisk. Now I need to merge/move these locally stored mails to my ocfs2 mailstore but I don't know how to do this. Regards Patrick

2 1

[Dovecot] Need fast Maildir to mdbox conversion
by Jeff Gustafson 29 Mar '12

29 Mar '12

I looked around the 'Net to see if there might be a custom program for offline Maildir to mdbox conversion. So far I haven't turned up anything. The problem for us is that the dsync program simply takes a lot of time to convert mailboxes. I wonder if time could be saved with a program that is optimized to convert mailboxes without the fancy locking that dsync needs to do. Does have (or seen) a tool that could do this? We're hoping that converting away from Maildir will help us speed up the backup processes by reducing the number of files to process. ...Jeff

3 4

[Dovecot] Using getmail with sieve
by Orr, Steve 28 Mar '12

28 Mar '12

I'm trying to setup a personal "mailmover" where I use getmail to retrieve remote IMAP server mail and load it into my local Dovecot then filter all email on the Dovecot server side with sieve. (I'm using Dovecot v. 2.0.9 with IMAP/Maildir.) 1) From the docs I gather that Dovecot sieve will not work as mail is loaded by getmail and I need to refilter the email after it has been loaded with getmail, right? 2) In http://wiki2.dovecot.org/HowTo/RefilterMail it says, "This HOWTO helps you create a folder for mail that needs refiltering..." But contrary to the doc I don't see any actual instructions about creating said folder. The HOWTO assumes mail already exists in a folder called "REFILTER' but doesn't say how this folder was populated. "How to?" 3) As a test I manually created the "REFILTER" folder and put my inbox mail in it (with Thunderbird) then following the HOWTO I ran my getmail script and my sieve script performed as expected. 4) How do I automate this? I tried a new getmail script to run against the inbox and tag new email so a subsequent getmail script could move it into the REFILTER folder for later sieve processing. This seems like way too much work. The HOWTO doc seems incomplete or presumes other knowledge, especially for an IMAP server and email sieve nubie. TIA, D. B. ---------------------------------------------- $ dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-131.0.15.el6.i686 i686 Red Hat Enterprise Linux Server release 6.1 (Santiago) log_path = /var/log/dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = test@host1 protocols = imap lmtp service lmtp { user = test } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" }

1 0

[Dovecot] Dovecot upgrade from 1.2.x to 2.0.x: roundcube/squirrelmail sent folder doesn't work any more
by Gerhard Wiesinger 27 Mar '12

27 Mar '12

Hello, After upgrading from 1.2.x to 2.0.x I'm having problems using sent folder in Webmail applications like roundcube mail and squirrelmail. Relevant config dovecot.conf: mail_location = mbox:~:INBOX=/var/mail/%u Different LIST behaviour from rawlog: 1.2.x: with Prefix ~/Mail A002 LIST "" "~/Mail/sent" * LIST (\NoInferiors \UnMarked) "/" "~/Mail/sent" A002 OK List completed. 2.0.x: with Prefix ~/Mail A0003 LIST "" ~/Mail/sent A0003 OK List completed.: Configured prefix for private spaces in roundcube mail is ~/Mail . Roundcube Webmail application checks for existence of the folder but dovecot doesn't return anything in 2.x.latest. Is this by design? Any ideas to fix it by configuration? (I tried prefix Mail/ in roundcube mail without success) Thunderbird works well. Thnx. Ciao, Gerhard

1 0

[Dovecot] Problem with DOVECOT - long authentication time
by Jacek Kowalski 27 Mar '12

27 Mar '12

Hi all, I want to start new server with Postfix (I still have qmail ) and I think I have a problem with authentication in dovecot - it takes 3 seconds. Is this normal time? My configuration: Usernames: from MySQL Passwords: from Active Directory dovecot -n # 1.1.20: /etc/dovecot.conf # OS: Linux 2.6.18-274.7.1.el5 i686 CentOS release 5.7 (Final) ext3 log_path: /var/log/dovecot.log protocols: pop3 pop3s imap imaps listen: * ssl_cert_file: /etc/pki/tls/certs/iRedMail_CA.pem ssl_key_file: /etc/pki/tls/private/iRedMail.key login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_uid: 500 mail_gid: 500 mail_location: maildir:/xxx/%u:INDEX=/xxx/%u mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota zlib mail_plugins(imap): quota imap_quota zlib mail_plugins(pop3): quota zlib mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 lda: postmaster_address: postmaster(a)domain.com mail_plugins: cmusieve quota log_path: /var/log/sieve.log auth default: mechanisms: plain login default_realm: infor.pl username_format: %Lu debug: yes debug_passwords: yes passdb: driver: pam passdb: driver: sql args: /etc/dovecot-ldap.conf userdb: driver: sql args: /etc/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/dovecot-auth mode: 438 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 user: vmail group: vmail plugin: quota_warning: storage=85%% /usr/local/bin/dovecot-quota-warning.sh 85 quota_warning2: storage=90%% /usr/local/bin/dovecot-quota-warning.sh 90 quota_warning3: storage=95%% /usr/local/bin/dovecot-quota-warning.sh 95 quota: maildir quota_rule: *:storage=300M quota_rule2: *:messages=0 expire: Trash 7 Trash/* 7 Junk 30 expire_dict: proxy::expire auth_socket_path: /var/run/dovecot/auth-master sieve: /xxx/sieve/%Ld/%Ln/dovecot.sieve dict: expire: db:/xxx/expire.db grep -v '^ *$#.*$\?$' dovecot-mysql.conf driver = mysql default_pass_scheme = CRYPT connect = host=localhost dbname=xxx user=xxx password=xxx #password_query = SELECT password FROM mailbox WHERE username='%u' AND active='1' user_query = SELECT CONCAT(storagebasedirectory, '/', storagenode, '/', maildir) AS home, CONCAT('*:bytes=', quota*1048576) AS quota_rule FROM mailbox WHERE username='%u' AND active='1' AND enable%Ls%Lc='1' postfix: postfix-2.5.9-5.ired dovecot: dovecot-1.1.20-1_98.el5 mysql: mysql-server-5.0.77-4.el5_6.6 This is not a TCP connection problem, because i have results from tcpdump and wireshark. There is a information that Active directory is answering with password in 0,2 second. Regards Jacek

1 1

[Dovecot] quota ldap
by Alain DEFRANCE 27 Mar '12

27 Mar '12

hello all, i'm using quota + ldap with dovecot 2 in dovecot-ldap.conf.ext file i have the line : user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,quota=quota_rule=*:storage=%$B how can i add "Trash:storage= " to have more place for deleting messages like in 90-quota.conf file ? quota_rule2 = Trash:storage thanks for help regards -- *Alain DEFRANCE* - Ingénieur systèmes et réseaux Direction des systèmes d'information (DiSI) Centre d'Exploitation des Infrastructures Informatiques (CEDII) Cellule Réseau et Expertise Systèmes Bât Ile de France - RDC - Bureau 58 Université d'Evry Val d'Essonne 4, Bd F. Mitterrand - 91025 EVRY Cedex Tel : 01.69.47.80.69 - Fax : 01.69.47.80.24 Mail : alain.defrance(a)univ-evry.fr Site UEVE : http://www.univ-evry.fr

2 3

[Dovecot] Dovecot IMAP is broken after upgrade from 2.1.2 to 2.1.3
by Michael Neubert 27 Mar '12

27 Mar '12

Hello, I just upgraded my servers from Dovecot 2.1.2 to Dovecot 2.1.3-0~auto+5 by using Debian binaries from "http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.1 main". The config was not touched but now IMAP connections are not possible anymore (LMTP works fine). When I try to connect to a mailbox, the connect fails. Some log entries: ############################################################################################################### Mar 23 21:45:28 imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv2/v3 read client hello A [xxx.xxx.xxx.xxx] Mar 23 21:45:28 auth: Debug: auth client connected (pid=3431) Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client hello A [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server hello A [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write certificate A [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server done A [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read finished A [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write session ticket A [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write finished A [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x20, ret=1: SSL negotiation finished successfully [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap-login: Warning: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [xxx.xxx.xxx.xxx] Mar 23 21:45:28 auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=yyy.yyy.yyy.yyy rip=xxx.xxx.xxx.xxx lport=993 rport=51379 Mar 23 21:45:28 auth: Debug: client out: CONT 1 Mar 23 21:45:28 auth: Debug: client in: CONT 1 AG5lbWlAdmlzaXQtd29ybGQuZGUAUHJvNDUwLnN1 Mar 23 21:45:28 auth-worker(3433): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Mar 23 21:45:28 auth-worker(3433): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Mar 23 21:45:28 auth-worker(3433): Info: mysql(zzz.zzz.zzz.zzz): Connected to database dovecot Mar 23 21:45:28 auth-worker(3433): Debug: sql(username,xxx.xxx.xxx.xxx): query: SELECT password, 'directory' AS userdb_home, 'mail' AS userdb_uid, 'mail' AS userdb_gid FROM users WHERE username = 'username' AND domain = 'domain' AND active = 'Y' Mar 23 21:45:28 auth: Debug: client out: OK 1 user=username Mar 23 21:45:28 auth: Debug: master in: REQUEST 2286813185 3394 1 4727968fd3514dd45f623ad9f944e305 Mar 23 21:45:28 auth-worker(3433): Debug: sql(username,xxx.xxx.xxx.xxx): SELECT home, uid, gid FROM users WHERE username = 'username' AND domain = 'domain' Mar 23 21:45:28 auth: Debug: master out: USER 2286813185 username home=directory uid=8 gid=8 Mar 23 21:45:28 imap-login: Info: Login: user=<username>, method=PLAIN, rip=xxx.xxx.xxx.xxx, lip=yyy.yyy.yyy.yyy, mpid=3434, TLS Mar 23 21:45:28 imap-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [xxx.xxx.xxx.xxx] Mar 23 21:45:28 imap(username): Info: Connection closed in=0 out=303 ############################################################################################################### The MySQL authentification seems to work fine, but after this the connection is closed with the SSL alert. In Dovecot 2.1.2 everything worked fine. The SSL certifcate is also correct. Any hints are welcome to identify the problem. Thanks in advance. Beste wishes Michael

2 7

[Dovecot] Error: Couldn't create namespace 'Share/' Dovecot 2.1.3 ldap
by Tomislav Mihalicek 27 Mar '12

27 Mar '12

Mar 26 16:38:58 cartman dovecot: imap(miha(a)example.com): Error: Couldn't create namespace 'Share/' for user miha-share(a)example.com: userdb didn't return a home directory, but location used it (%h): maildir:%%h/Maildir:INDEX=%h/index/Shared/%%u Where is the problem, the same config worked with Dovecot 1.2.x -- View this message in context: http://old.nabble.com/Error%3A-Couldn%27t-create-namespace-%27Share-%27-Dov… Sent from the Dovecot mailing list archive at Nabble.com.

2 2

[Dovecot] dovecot-1.2.9: OK No messages copied
by Attila Sipos 26 Mar '12

26 Mar '12

Hi, When I issue an IMAP copy command using the wrong UID, the server gives an "OK No messages copied" response. This seems like the wrong response to me. If the UID doesn't exist, then it should respond with a "No" response - maybe something like "NO - copy error: bad UID" I believe "OK No messages copied" would only be a suitable response if the email with the supplied UID had already been known to be copied successfully. I am using dovecot 1.2.9 - has this been fixed in newer versions of dovecot? Regards Attila Attila Sipos Netcall Telecom Ltd Registered in England 2831215. Registered Office : 3rd Floor, Hamilton House, 111 Marlowes, Hemel Hempstead, Herts, HP1 1BB

2 7

[Dovecot] Many messages clustered around the same date.saved value
by Joseph Tam 26 Mar '12

26 Mar '12

Subject: Different user messages clustered around the same date.saved value After updating dovecot to 2.1.3, I can now use "doveadm expunge -A ..." to iterate through all user trash folders and expunge old messages. However, I noticed a strange thing: querying what would have been deleted doveadm -ftab fetch -A "date.saved" mailbox Trash savedbefore 7d showed many date.saved values are clustered around the same timestamp, even among different user's Trash mailbox. One user's trash mailbox having the same date.saved is explained by a user deleting a lot of message at one time, but I can't explain why many different users would have messages with the same (or closeby) date.saved value. For example, the output of the above query on my system showed the 10s window /2012-03-05 18:08:0[0-9]/ matched 7658 messages among 22 different user Trash mailboxes, which is statistically unlikely. I did't see anything special in the dovecot logs at this time to explain this. What would cause this? Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] dovecot.log warning
by Jitendra Bhaskar 26 Mar '12

26 Mar '12

Hi Guys, Just I installed dovecot-2.1.0 in centos 5.7. and did copy of all user data i.e home directory and mail data from previous server which was on dovecot 1.2.8 to new one. Every thing is working fine. Mails are going and coming. But in dovecot.log file I an getting like imap(user@example.com):Warning: fscking index file /home/ example.com/user/mail/.imap/VISA/dovecot.index Can any one specify why its coming and how can I fix it ? -- * Thanks & Regards * *Jitendra Kumar Bhaskar* Cell:- +91 7306311531 +91 8102997821

2 1

[Dovecot] delivering with maildrop
by Radim Kolar 26 Mar '12

26 Mar '12

Can somebody provide maildrop syntax for using deliver-lda as final delivery program during sorting mail in user mailfilter? i mean replacement for "to" statement if ( /^(To|Cc):.*dovecot@dovecot.org/:h ) { to $MAIL/.dovecot/ }

3 3

[Dovecot] migrating mailboxes on dovecot
by Spyros Tsiolis 25 Mar '12

25 Mar '12

Hello all, I want to ask about something I never did before. I have a dovecot/XMail/LAMP/Horde installation on a CentOS 5.5 32-bit system with two domains : domainA and domainB All the users used to have their mailboxes on domainA. However the personell dept decided that 90% of the users will have to have their mailboxes set to domainB and the other 10% will stay at domainA. So, I need to migrate those mailboxes from domainA to domainB. The only thing is I haven't done that ever. The directory structure is : "/var/MailRoot/domains/domainX/Username/Maildir/" and under there the usual suspects : cur (directory) dovecot.index.cache (file) dovecot-keywords (file) dovecot-uidvalidity (file) new (directory) tmp (directory) dovecot.index (file) dovecot.index.log (file) dovecot-uidlist (file) dovecot-uidvalidity.4cc055c6 (file) subscriptions (file) Using dovecot v1.2.15 Any help would be appreciated. Iam supposed to do this today !! :-) Thank you all, s. ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

4 5

[Dovecot] sysconfdir depreacted
by Noel Butler 25 Mar '12

25 Mar '12

The purpose of any build scripts --sysconfdir is to tell the configuration to build in a path for its binaries configuration file(s). Dovecot 2.1.3, seems to insist that that directory is now /etc/dovecot/ ignoring --sysconfdir=/etc as in 1.2.x and previous majors before that, is this a bug? if not, then I see no point of sysconfdir any more and it should be removed, if dovecot deliberately ignores what it is told to use.

7 16

[Dovecot] dovecot and cloudfile systems
by jackie sparks 24 Mar '12

24 Mar '12

I'm trying to store mailboxes in a cloudfile system and I am running into alot of problems using courier, between time skew, file locking and cache creation problems. I was wondering if dovecot has any problems using maildirs across a limited fuse file system. I cant lock files, This is accessed using the fuse library. I thought taking out the standard checking for return values would be a work around because everything imap daemon is doing can be done from a shell by hand except filelocking and setting times on files. I am doing this on Rack Spaces cloud files. This is something that not many if any are doing. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-= This e-mail (including attachments) is covered by the Electronic Communications Privacy Act, 18 U.S.C. Sections 2510-2521, is confidential, and is intended solely for the use of the individuals or entities to whom it is addressed. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, be advised that you have received this e-mail in error and that any use, dissemination, forwarding, printing, or copying of this e-mail and any file attachments is strictly prohibited. If you have received this e-mail in error, please immediately notify me by email at jackie.craig.sparks(a)live.com. You must destroy the original transmission and its contents.

2 3

Re: [Dovecot] kernel problem in RedHat? -- RH specific, or what linux kernels does this affect?
by Linda Walsh 24 Mar '12

24 Mar '12

Is this redhat's version of the kernel only? Or does it apply to other linux kernels and other distros? Any idea what linux kernel versions might cause this? (from main dovecot webpage news) Thu Mar 22 14:38:53 EET 2012 Red Hat/CentOS users: A recent kernel update <https://bugzilla.redhat.com/show_bug.cgi?id=681578> causes Dovecot to start failing after it has reached 1000 child processes. To fix this, downgrade your kernel until Red Hat releases a fixed kernel.

2 1

[Dovecot] Problems with upgrade 2.0.16 -> 2.1.3
by Joseph Tam 24 Mar '12

24 Mar '12

I ran into two issues trying to upgrade our dovecot installation (Solaris 10). 1) Does not compile with OpenSSL 0.9.7 Not a big deal, as I was able to successfully against OpenSSL 0.9.8, but does dovecot require OpenSSL >= 0.9.8 now? libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -std=gnu99 -O3 -fomit-frame-pointer -mcpu=ultrasparc -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -MT istream-openssl.lo -MD -MP -MF .deps/istream-openssl.Tpo -c istream-openssl.c -fPIC -DPIC -o .libs/istream-openssl.o iostream-openssl-context.c:9:28: openssl/engine.h: No such file or directory iostream-openssl-context.c: In function `ssl_iostream_deinit_global': iostream-openssl-context.c:431: warning: implicit declaration of function `ENGINE_finish' iostream-openssl-context.c:432: warning: implicit declaration of function `ENGINE_cleanup' ... 2) Dovecot's LDA does not work After stopping the the old dovecot, and starting dovecot 2.1.3 using tghe exact same config file, local mail delivery tempfails: Mar 23 02:51:51 server dovecot: auth: Error: getpeerucred() failed: Bad address Mar 23 02:51:51 server dovecot: auth: Error: userdb connection: Failed to get peer's credentials Mar 23 02:51:51 server dovecot: lda: Error: userdb lookup(j.tam): Disconnected unexpectedly Mar 23 02:51:51 server dovecot: lda: Fatal: Internal error occurred. Refer to server log for more information. # Sendmail reports stat=Deferred: local mailer (/var/dovecot/libexec/dovecot-lda) exited with EX_TEMPFAIL After seeing 2) in the logs, I had to revert back to 2.0.16. Any hints on what could be wrong? Joseph Tam <jtam.home(a)gmail.com> # 2.0.16: /var/dovecot/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4u nfs auth_cache_negative_ttl = 10 mins auth_cache_size = 64 k auth_cache_ttl = 1 days auth_failure_delay = 5 secs auth_master_user_separator = * auth_socket_path = /var/dovecot/run/auth-userdb auth_username_chars = abcdefghijklmnopqrstuvwxyz01234567890.-_ auth_worker_max_count = 1 base_dir = /var/dovecot/run default_vsz_limit = 64 M deliver_log_format = first_valid_gid = 10000 first_valid_uid = 10000 hostname = our.mail.domain last_valid_gid = 19999 last_valid_uid = 19999 lda_mailbox_autocreate = yes log_timestamp = login_greeting = Ready. mail_location = mbox:/nfs/home/%n/mail:INBOX=/nfs/mail/%n:INDEX=/data/dc-cache/%n mail_nfs_storage = yes mail_temp_dir = /var/tmp mbox_very_dirty_syncs = yes mbox_write_locks = dotlock_try fcntl namespace { inbox = yes location = prefix = separator = / } namespace { hidden = yes list = no location = prefix = / separator = / } namespace { hidden = yes list = no location = prefix = ~/mail/ separator = / } namespace { hidden = yes list = no location = prefix = mail/ separator = / } passdb { args = /var/dovecot/etc/master-users driver = passwd-file master = yes pass = yes } passdb { args = /var/yp/etc/passwd driver = passwd-file } postmaster_address = MAILER-DAEMON(a)our.mail.domain protocols = imap pop3 sendmail_path = /usr/lib/sendmail service auth-worker { user = dovecot } service auth { idle_kill = 1 hours } service imap-login { process_limit = 2 service_count = 0 } service imap { process_limit = 512 } service pop3-login { process_limit = 1 service_count = 0 } service pop3 { process_limit = 64 } shutdown_clients = no ssl_cert = </var/dovecot/etc/ssl/imap.pem ssl_key = </var/dovecot/etc/ssl/imap.pem syslog_facility = local0 userdb { args = /var/dovecot/etc/passwd driver = passwd-file } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_id_log = * mail_max_userip_connections = 12 ssl_cert = </var/dovecot/etc/ssl/imap.pem ssl_key = </var/dovecot/etc/ssl/imap.pem } protocol pop3 { mail_max_userip_connections = 3 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = io=%i/%o top=%t/%p, retr=%r/%b, del=%d/%m, size=%s uid=%u pop3_reuse_xuidl = yes ssl_cert = </var/dovecot/etc/ssl/pop.pem ssl_key = </var/dovecot/etc/ssl/pop.pem }

2 2

Re: [Dovecot] Dovecot 2.1.3 Proxy creates mailbox on proxy
by Ed Nitido 23 Mar '12

23 Mar '12

Ooops, didn't email the list... it working now thanks to Timo, solution below On Fri, Mar 23, 2012 at 4:14 PM, Timo Sirainen <tss(a)iki.fi> wrote: > >> On 23.3.2012, at 22.01, Ed Nitido wrote: >> >> > pass_attrs = >> uid=user,userPassword=password,=proxy,=master=doveadmin,=pass=xxxxxx >> >> I guess it doesn't like the "=proxy" part. I guess I should fix it. For >> now just set "=proxy=y". >> > >

1 0

[Dovecot] Advice for new dovecot / imap proxy? setup
by Luca Lesinigo 23 Mar '12

23 Mar '12

Hello list. I'm planning a new mail servers for our company's customers to replace the oldish Courier-IMAP based one, we already started to deploy some mail accounts on a dovecot-2.0 server as an early test. I'd like to implement the new system with dovecot-2 (I'll probably go straight to dovecot-2.1.x) and I'd like to get it right from the beginning so I'm here asking for some advice. The issue I'm investigating right now is how to manage a single IMAP / POP / SMTP / webmail "entry point" for multiple mail servers... in other words an IMAP proxy. It would be desirable for multiple reasons: - graceful migration from the current system: we'd make the mailserver hostname point to the proxy (along with its SSL certificates) and then the proxy would route each domain to the correct IMAP non-ssl server on our LAN. No need to update customer's systems configuration and we can move one domain at a time from the old to the new server, behind the scenes - be ready for similar migrations in the future (eg. right now we're still keeping the imap servers with the qmail MTA, but we'd like to switch to postfix+dovecot in the future) - be ready for sharding mail domains on multiple IMAP servers (if/when current hardware reach its capacity or needs to be swapped out for new gear) - be ready to serve traffic over IPv6 without touching our precious mailbox servers - isolate the mailbox servers from direct external access and just run IMAP on them, let other systems run ssl, pop3, smtp, webmail, etc... Ideally the 'proxy' system would run dovecot imap and pop3 (SSL protected) and Roundcube webmail (PHP, on https) and just speak IMAP to the underlying mail servers on our internal LAN. We'd like to support all the recent IMAP goodies to make modern users happy (IMAP IDLE, LEMONADE, etc) and possibly implement Maildir quota on the new backend mailbox server to improve our operations (currently we just run du in a cronjob once a day on the current mailserver, IMAP clients including the webmail do not know about quota and thus cannot show amount of free space). In addition to that, customer's will hit the SMTP server running on that 'proxy' system and this is good to keep its configuration separated from the SMTP server of the actual mail servers (which has a different configuration and is restricted to get connections only from our MX systems and not from outside sources). I'd like to know if that plan sounds reasonable or if there's something stupid in it. Also, is the proxy going to support all kind of IMAP stuff of the backend server (IDLE, CONDSTORE, Maildir quota, immediate notification of IDLE clients thanks to linux inotify, etc...) or will it limit me somehow? thanks, -- Luca Lesinigo

4 5

[Dovecot] Dovecot 2.1.3 Proxy creates mailbox on proxy
by Ed Nitido 23 Mar '12

23 Mar '12

Hey all, I've upgraded from a working Dovecot 2.0.17 Proxy with a master user setup to Dovecot 2.1.3 and I've merged my conf settings from 2.0.17 into 2.1.3. I'm able to start up dovecot proxy and telnet localhost, however it creates the users home director on the proxy server instead of going to the backend dovecot server (which has already been successfully upgraded to 2.1.3 from 2.0.17). In my old 2.0.17, I had the entire namespace section commented out in 10-mail.conf. To achieve the same in 2.1.3 I had to remove the file 15-mailboxes.conf, otherwise my error log would have the following if I just commented out the namespace section and left that file in place: *Error: user edward(a)dev.domain.com: Initialization failed: namespace configuration error: inbox=yes namespace missing* *Error: Invalid user settings. Refer to server log for more information.* So now I'm trying to figure out why the proxy doesn't get the mail server IP from director, when doveadm has the backend server listed *# doveadm director status* *mail server ip vhosts users* *192.168.12.205 100 0* Can anyone see something I've missed? Here's my doveconf output: # 2.1.3: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-openvz-amd64 i686 Debian 6.0.4 auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_mechanisms = plain login auth_socket_path = /usr/local/var/run/dovecot/auth-master auth_verbose = yes debug_log_path = /var/log/dovecot-debug.log director_doveadm_port = 542 director_mail_servers = 192.168.12.205 director_servers = 192.168.12.209 disable_plaintext_auth = no info_log_path = /var/log/dovecot-info.log listen = * lmtp_proxy = yes log_path = /var/log/dovecot-err.log mail_debug = yes mail_gid = vmail mail_location = maildir:%h/Maildir mail_plugins = " quota" mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/home/%d/shared-mailboxes quota = maildir:User quota quota_rule = *:storage=1G sieve = %h/.dovecot.sieve sieve_dir = ~/sieve sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 1M sieve_quota_max_scripts = 0 sieve_quota_max_storage = 0 } postmaster_address = postmaster(a)dev.domain.com protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0666 user = dovecot } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 541 } inet_listener { port = 542 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director inet_listener imap { port = 143 } } service lmtp { inet_listener lmtp { port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { user = postfix } } service managesieve-login { executable = managesieve-login director inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service pop3-login { executable = pop3-login director inet_listener pop3 { port = 110 } } ssl_cert = </usr/local/etc/dovecot/dovecot.pem ssl_key = </usr/local/etc/dovecot/dovecot.key userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = uid=vmail gid=vmail home=/home/%d/%u driver = static } verbose_proctitle = yes protocol lmtp { auth_socket_path = /usr/local/var/run/dovecot/director-userdb mail_plugins = " quota quota sieve" passdb { args = proxy=y nopassword=y port=24 driver = static } } protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log mail_plugins = " quota sieve" } protocol imap { mail_plugins = " quota imap_quota imap_acl acl" } protocol sieve { mail_max_userip_connections = 10 mail_plugins = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = managesieve_sieve_capability = } protocol pop3 { mail_plugins = " quota quota" pop3_fast_size_lookups = no pop3_uidl_format = %08Xu%08Xv }

2 2

[Dovecot] dovecot 2.1.3 dsync Unexpected finish reply
by Micah Anderson 23 Mar '12

23 Mar '12

I've been moving users from one system to another by doing a dsync mirror operation. The first dsync mirror takes some time, because of the number of users involved, so I am doing an initial sync, and then I direct the users to the new location and do a final 'freshening' sync to get any changes that happened during the longer sync. The problem seems to be with this freshening sync, it seems quite fragile breaking with things like: dsync-local(user(a)example.com): Error: msg-get failed: box=Spam uid=3034 guid=1ad456015ae9694f083b00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69096 guid=c22b541a71e4694fc93700001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69097 guid=4b6d6b13d0e9694f505700001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69098 guid=175b1c2e4aea694fc97100001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69099 guid=bfb08c1b3bee694f133e00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69100 guid=fa5d630c17ef694fa75f00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69101 guid=7ca96011dcef694f3f0400001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69102 guid=ef547107eff1694ff96700001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69103 guid=5597bc0519f2694f2e7000001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69104 guid=8336a53a54f5694fb21000001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69105 guid=96169d13c8fd694f831800001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69106 guid=af21a5183f036a4f263200001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69107 guid=d0fde3348e036a4ff44000001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69108 guid=4ce01d1a59056a4fee2200001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69109 guid=497f96066e056a4f322700001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69110 guid=ef34f505c0066a4fc26b00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69111 guid=81adcb2c6e076a4f751100001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69112 guid=a110841e8a076a4fa21500001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69113 guid=60d8e70a970d6a4fae2100001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69114 guid=7c6cb41572106a4ff13c00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69115 guid=aaf4d32b2f126a4ff21000001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69116 guid=ab52f43a58126a4ffd1800001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69117 guid=eb543a2179186a4fe45800001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69118 guid=cd7cb408a12a6a4f272100001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69119 guid=2ec02e2ef2326a4f9e1100001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69120 guid=e7a4552ff8336a4f7f6700001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69121 guid=0724b023d33a6a4f1b3300001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69122 guid=9985c91afe3b6a4f127100001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69123 guid=9300751b913d6a4f7a4000001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69124 guid=822ff806ae3f6a4f293b00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69125 guid=eac8ed1f2b426a4f164200001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69126 guid=4109561ae3426a4ff26700001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69127 guid=30bc832e5e496a4f563600001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69128 guid=c0b36410bd4b6a4f102b00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69129 guid=38a9d41a534d6a4ff40200001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69130 guid=b8e84d239b4d6a4fd11000001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69131 guid=f060ef22154f6a4f2b5c00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69132 guid=e2999c107c4f6a4f5a7600001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69133 guid=8d09280aae506a4f073500001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69134 guid=43d7ec3aa6556a4f963a00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69135 guid=c5800130d2556a4f594200001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69136 guid=83a91e08b4566a4f197100001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69137 guid=50cf9721f95e6a4f7e4400001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69138 guid=fda2a82886606a4f881700001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69139 guid=97ee1d1ad1636a4fc94d00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69140 guid=4f50671f85666a4f306100001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69141 guid=0fea590fb4666a4f7a6b00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69142 guid=f3210b02a5676a4ffa1f00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69143 guid=8d325a06686a6a4f2b3600001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69144 guid=0cbf1839f1756a4f8f6800001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69145 guid=d6209a2898796a4f671a00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69146 guid=576ade31da7d6a4f5f5700001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69147 guid=70a15b34247e6a4f445a00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69148 guid=3ff92631cd886a4ffd6300001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69149 guid=3ff2081568916a4f134d00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69150 guid=d1a67b0907ab6a4f546000001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69151 guid=3d4cb1197ee96a4fbf5f00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=INBOX uid=69152 guid=aae2542818266b4f7d1e00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2077 guid=c5a0930248e8694fb77c00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2078 guid=dce63e1a6bee694f470200001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2079 guid=dde63e1a6bee694f470200001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2080 guid=dee63e1a6bee694f470200001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2081 guid=dfe63e1a6bee694f470200001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2082 guid=a110b53585056a4fe81b00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2083 guid=a210b53585056a4fe81b00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2084 guid=93afeb1f7d0b6a4f694e00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2085 guid=ef2bb1098a2e6a4fcf1b00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2086 guid=d8ba601bee2e6a4f982f00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2087 guid=d9ba601bee2e6a4f982f00001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2088 guid=7e5b483b433d6a4fd93600001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2089 guid=7f5b483b433d6a4fd93600001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2090 guid=b08c5205ba646a4f106700001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2091 guid=805b483b433d6a4fd93600001d12b59f dsync-local(user(a)example.com): Error: msg-get failed: box=sent-mail uid=2092 guid=815b483b433d6a4fd93600001d12b59f dsync-local(user(a)example.com): Error: Unexpected finish reply: by ims-d13.mx.aol.com (8.14.1/8.14.1) with ESMTP id q2LEhqXZ017169; dsync-local(user(a)example.com): Error: Unexpected reply from server: Wed, 21 Mar 2012 10:43:52 -0400 dsync-local(user(a)example.com): Warning: Mailbox changes caused a desync. You may want to run dsync again. those final "Unexpected finish reply" and "Unexpected reply from server" are a bit surprising results. Running dsync again seems to resolve things, but there seems to be a bug here that is causing unexpected results to leak through to the dsync process? thanks, micah

1 1

Re: [Dovecot] sysconfdir depreacted
by Joseph Tam 23 Mar '12

23 Mar '12

On Fri, 23 Mar 2012, dovecot-request(a)dovecot.org wrote: >> See http://dovecot.org/list/dovecot/2009-January/036131.html > > Yes, I was also thinking about that, but it's about removing the > dovecot/ suffix from other directories as well. That might be > something worth doing (--without-package-suffix or something?). +1. I fake it now with symlinks (e.g. etc/dovecot -> .). Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Dovecot v2.1.3 (f30437ed63dc) Auth/Login Issues
by Thomas Leuxner 23 Mar '12

23 Mar '12

Hi, some change between ff5c341f8838 and f30437ed63dc seems to have broken auth: => Bad Login Mar 23 09:01:46 spectre dovecot: master: Dovecot v2.1.3 (f30437ed63dc) starting up [...] Mar 23 10:25:44 spectre dovecot: auth: Debug: auth client connected (pid=7266) Mar 23 10:25:45 spectre dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=188.138.0.199#011rip=80.187.102.243#011lport=143#011rport=62388#011resp=<hidden> Mar 23 10:25:45 spectre dovecot: auth: Debug: cache(tlx(a)leuxner.net,80.187.102.243): hit: <hidden>#011userdb_quota_rule=*:storage=5G#011userdb_acl_groups=PublicMailboxAdmins Mar 23 10:25:45 spectre dovecot: auth: Debug: client out: OK#0111#011user=tlx(a)leuxner.net Mar 23 10:25:45 spectre dovecot: auth: Debug: master in: REQUEST#0113958898689#0117266#0111#011bfc44f32051961b909e2b458440d645f Mar 23 10:25:45 spectre dovecot: auth: Debug: userdb-cache(tlx(a)leuxner.net,80.187.102.243): hit: tlx@leuxner.net#011uid=5000#011gid=5000#011home=/var/vmail/domains/leuxner.net/tlx#011quota_rule=*:storage=5G#011acl_groups=PublicMailboxAdmins Mar 23 10:25:45 spectre dovecot: auth: Debug: master out: USER#0113958898689#011tlx@leuxner.net#011uid=xxx#011gid=xxx#011home=/var/vmail/domains/leuxner.net/tlx#011quota_rule=*:storage=5G#011acl_groups=PublicMailboxAdmins Mar 23 10:25:45 spectre dovecot: imap-login: Login: user=<tlx(a)leuxner.net>, method=PLAIN, rip=80.187.102.243, lip=188.138.0.199, mpid=7267, TLS Mar 23 10:25:45 spectre dovecot: imap(tlx(a)leuxner.net): Connection closed in=0 out=319uthentication/login: => Good Login Mar 23 10:26:37 spectre dovecot: master: Dovecot v2.1.3 (ff5c341f8838) starting up [...] Mar 23 10:27:18 spectre dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Mar 23 10:27:18 spectre dovecot: auth: Debug: auth client connected (pid=9832) Mar 23 10:27:19 spectre dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=188.138.0.199#011rip=80.187.102.243#011lport=143#011rport=51647#011resp=<hidden> Mar 23 10:27:19 spectre dovecot: auth: Debug: cache(tlx(a)leuxner.net,80.187.102.243): miss Mar 23 10:27:19 spectre dovecot: auth: Debug: passwd-file /var/vmail/auth.d/leuxner.net/passwd: Read 1 users in 0 secs Mar 23 10:27:19 spectre dovecot: auth: Debug: passwd-file(tlx(a)leuxner.net,80.187.102.243): lookup: user=tlx(a)leuxner.net file=/var/vmail/auth.d/leuxner.net/passwd Mar 23 10:27:19 spectre dovecot: auth: Debug: client out: OK#0111#011user=tlx(a)leuxner.net Mar 23 10:27:19 spectre dovecot: auth: Debug: master in: REQUEST#0113656384513#0119832#0111#0114782efcbd0324b228bb85aaae916cfe6 Mar 23 10:27:19 spectre dovecot: auth: Debug: userdb-cache(tlx(a)leuxner.net,80.187.102.243): miss Mar 23 10:27:19 spectre dovecot: auth: Debug: passwd-file(tlx(a)leuxner.net,80.187.102.243): lookup: user=tlx(a)leuxner.net file=/var/vmail/auth.d/leuxner.net/passwd Mar 23 10:27:19 spectre dovecot: auth: Debug: master out: USER#0113656384513#011tlx@leuxner.net#011uid=xxx#011gid=xxx#011home=/var/vmail/domains/leuxner.net/tlx#011quota_rule=*:storage=5G#011acl_groups=PublicMailboxAdmins Mar 23 10:27:19 spectre dovecot: imap-login: Login: user=<tlx(a)leuxner.net>, method=PLAIN, rip=80.187.102.243, lip=188.138.0.199, mpid=9835, TLS Regards Thomas

1 0

[Dovecot] 2.1.2 (pop3|imap)-login crash
by Luca Palazzo 22 Mar '12

22 Mar '12

Hi Timo, hi all, after upgrading my server (both backends and load balancer) to 2.1.2 (from 2.0.17), I'm getting a log of login processes crashed in load balancer. Log lines are like: Mar 20 10:05:45 mailgw-lb dovecot: pop3-login: Fatal: master: service(pop3-login): child 27764 killed with signal 11 (core dumps disabled) Mar 20 10:06:17 mailgw-lb dovecot: imap-login: Fatal: master: service(imap-login): child 28468 killed with signal 11 (core dumps disabled) Stack trace of a crashed process is like: Program received signal SIGSEGV, Segmentation fault. [Switching to Thread -1220163904 (LWP 27764)] 0xb77cd176 in ssl_proxy_is_handshaked (proxy=0x0) at ssl-proxy-openssl.c:710 710 { (gdb) bt #0 0xb77cd176 in ssl_proxy_is_handshaked (proxy=0x0) at ssl-proxy-openssl.c:710 #1 0xb77c7295 in client_get_log_str (client=0x807b830, msg=0x804e290 "proxy(aaaaaa(a)dddddd.it): disconnecting x.x.x.x (Disconnected by server)") at client-common.c:469 #2 0xb77c73c6 in client_log (client=0x807b830, msg=0x804e290 "proxy(aaaaaaa(a)dddddd.it): disconnecting x.x.x.x (Disconnected by server)") at client-common.c:553 #3 0xb77c9a45 in login_proxy_free_reason (_proxy=<value optimized out>, reason=0x804e248 "Disconnected by server") at login-proxy.c:373 #4 0xb77ca9b5 in server_input (proxy=0x0) at login-proxy.c:93 #5 0xb7793762 in io_loop_call_io (io=0x8094180) at ioloop.c:380 #6 0xb7794cc9 in io_loop_handler_run (ioloop=0x8055480) at ioloop-epoll.c:213 #7 0xb77936f9 in io_loop_run (ioloop=0x8055480) at ioloop.c:399 #8 0xb777e4c8 in master_service_run (service=0x80553b0, callback=0xb77cc110 <client_connected>) at master-service.c:544 #9 0xb77cbcee in login_binary_run (binary=0x804ad80, argc=2, argv=0x80551c0) at main.c:406 #10 0x08049812 in main (argc=0, argv=0x0) at client.c:303 The strange part of the story is that not all process crash. I'm trying to figure out if only TLS/SSL process crash. Any idea? Thanks Luca

2 5

[Dovecot] 2.1: Error: Maildir filename has wrong S value, renamed the file from
by Ralf Hildebrandt 22 Mar '12

22 Mar '12

Hi! Starting with 2.1.1 we suddely encounter quite a lot of these messages: Mar 2 11:09:28 postamt dovecot: imap(username): Error: Maildir filename has wrong S value, renamed the file from /home/a/i/username/Maildir/.A*Teens.Eink&AOQ-ufe, Spenden etc/cur/1323207735.M64829P19819.postamt.charite.de,S=5137:2,S to /home/a/i/username/Maildir/.A*Teens.Eink&AOQ-ufe, Spenden etc/cur/1323207735.M64829P19819.postamt.charite.de,S=5137:2,S Mar 2 11:09:28 postamt dovecot: imap(username): Error: Maildir filename has wrong S value, renamed the file from /home/a/i/username/Maildir/.A*Teens.Eink&AOQ-ufe, Spenden etc/cur/1323207735.M64829P19819.postamt.charite.de,S=5137:2,S to /home/a/i/username/Maildir/.A*Teens.Eink&AOQ-ufe, Spenden etc/cur/1323207735.M64829P19819.postamt.charite.de,S=5137:2,S Mar 2 11:09:28 postamt dovecot: imap(username): Error: read(/home/a/i/username/Maildir/.A*Teens.Eink&AOQ-ufe, Spenden etc/cur/1323207735.M64829P19819.postamt.charite.de,S=5137:2,S) failed: Input/output error (uid=69) While this has (assumedly) been working with 2.0.18. Another issue with this: This fixes ONE file, and throws an error. Repeatedly accessing this folder fixes more files, until at some point all files were fixed. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

4 17

[Dovecot] Dovecot 2.1.3 on solaris with mysql - make fails
by Robert Hartzell 21 Mar '12

21 Mar '12

I'm trying to build 2.1.3 on solaris 11 11/11 with gcc 4.5.2 & sun studio 12.2 & 12.3 CPPFLAGS="-I/opt/openssl/include -I/usr/mysql/include/mysql" \ LDFLAGS="-L/opt/openssl/lib -L/usr/mysql/lib/mysql -R/opt/openssl/lib:/usr/mysql/lib/mysql" \ ./configure --prefix=/opt/dovecot \ --sysconfdir=/etc/opt \ --with-ssl=openssl \ --with-mysql make fails with both solaris standard openssl and my build of openssl. I'm also getting the same error using sunstudio mysql version is 5.1.37 The relevant output of make is on pastebin http://pastebin.com/aALHG0yL I have seen some reference to this with google but nothing thats very recent and no solutions. Anyone know how to get past this? Any tips on building dovecot on solaris? Pointers would be much appreciated. -- Robert

1 0

[Dovecot] dovecot runs from shell, but not xinetd
by Mark Jeghers 21 Mar '12

21 Mar '12

All, Below is my config. When I run dovecot from xinetd, I get these errors in the log: Mar 20 11:13:39 t4pserver2 dovecot: pop3-login: Login: user=<mark>, method=PLAIN, rip=::1, lip=::1, mpid=11624, secured Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Debug: Effective uid=500, gid=100, home=/home/mark Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Debug: fs: root=/var/spool/mailpop3, index=, control=, inbox=/var/spool/mailpop3/mark Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Error: stat(/var/spool/mailpop3/mark) failed: Permission denied Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Debug: Namespace : Using permissions from /var/spool/mailpop3: mode=0777 gid=-1 Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Error: stat(/var/spool/mailpop3/mark) failed: Permission denied Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Debug: Namespace : Using permissions from /var/spool/mailpop3: mode=0777 gid=-1 Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Error: stat(/var/spool/mailpop3/mark) failed: Permission denied Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Error: Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2012-03-20 11:13:39] Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Couldn't open INBOX top=0/0, retr=0/0, del=0/0, size=0 ...it acts as if it has no file permission, but it seems like it certainly should. Here is the files it is trying to access: [root@t4pserver2 ~]# ls -al /var/spool/mailpop3/ total 248656 drwxrwxrwx. 3 mail mail 4096 Mar 20 00:31 . drwxr-xr-x. 17 root root 4096 Mar 18 18:22 .. -rw-rw-r--. 1 ann users 58739 Mar 17 04:26 ann -rw-rw-r--. 1 annphone users 2708345 Mar 17 05:22 annphone -rw-rw-r--. 1 mail users 127272960 Mar 18 18:28 backups.tar -rw-rw-r--. 1 crimsonblues users 327563 Dec 3 14:38 crimsonblues drwxrwxrwx. 3 mark users 4096 Mar 20 00:31 .imap -rw-rw-r--. 1 mark users 0 Mar 18 13:09 mark -rw-rw-r--. 1 markphone users 124147068 Mar 18 04:21 markphone -rw-rw-r--. 1 nathan users 5119 Dec 22 18:52 nathan -rw-rw-r--. 1 root users 0 Mar 18 13:13 root -rw-rw-r--. 1 testuser users 58739 Mar 18 18:42 testuser -rw-rw-r--. 1 tim users 16212 Mar 18 15:51 tim Any ideas what is wrong? What is different running under xinetd? All the process run under the same user ids... Thanks, /Mark My config --------------------------------------------------------------- # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-220.7.1.el6.centos.plus.i686 i686 CentOS release 6.2 (Final) ext4 auth_debug = yes auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no doveadm_worker_count = 4 mail_debug = yes mail_gid = users mail_location = mbox:/var/spool/mailpop3:INBOX=/var/spool/mailpop3/%u mail_uid = root mbox_write_locks = fcntl passdb { args = /etc/passwd.dovecot driver = passwd-file } passdb { driver = shadow } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags mail_log_group_events = yes } protocols = pop3 ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd }

3 6

[Dovecot] replication howto
by Matteo Cazzador 21 Mar '12

21 Mar '12

Hello, excuse me but there is some documentation about replication now? I dont' understand where i must put the lines below (dovecot.conf? , 20-imap?) Excuse but it's not so clear for me cause i'm a new dovecot user. Another question, i use virtual users on mysql backend , so for replication i need to give ssh at every virtual users? Or i can use a only use a system ssh user? Thank's service aggregator { # give enough permissions for mail processes fifo_listener replication-notify-fifo { user = vmail mode = 0600 } unix_listener replication-notify { user = vmail mode = 0600 } } service replicator { # start replication at startup process_min_avail = 1 } plugin { # host1 replicates to host2 mail_replica = remote:vmail at host2.example.com # host2 replicates to host1 #mail_replica = remote:vmail at host1.example.com } #dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} service doveadm { # if you're using a single virtual user, set this to # start ssh as vmail (not root) user = vmail } -- Rispetta l'ambiente: se non ti è necessario, non stampare questa mail. ****************************************** Ing. Matteo Cazzador Email: mcazzador(a)gmail.com ******************************************

5 16

[Dovecot] issues migration from dovecot 1.2 to version 2
by Rajesh M 21 Mar '12

21 Mar '12

hi my system is a centos 5 with qmailtoaster i migrated my email server with around 5000 users from dovecot version 1.2 to version 2 i have two separate 2 tb hdd's storing webmail data of these users. the load on the server goes very high over 100 during peak load times and the imap connections get dropped frequently, webmail becomes very slow. however pop3 download works ok in the dovecot log file i get errors as such Warning: Maildir /homebackup/domains/xxxx/xxxx/Maildir/.ALL_INBOX MAIL: Synchronization took 71 seconds (20 new msgs, 0 flag change attempts, 0 expunge attempts) i had configured dovecot 1.2 using source but i had installed version 2 using qmailtoaster rpm i am a bit confused as to what settings are to be done for a very busy server note that the cpu system usage and ram usage are less but IO wait goes to around 80-90 percent can you please guide me or post some dovecot version 2 config file settings that are relevant to a busy server. rajesh

2 1

[Dovecot] mdbox and pop3 locking
by Ken A 21 Mar '12

21 Mar '12

With mdbox, what does dovecot lock when "pop3_lock_session(pop3): yes"? Specifically, I'm wondering if Dovecot LDA is able to deliver mail when a session is locked, if using mdbox, or if it will tempfail until the session is unlocked? Thanks, Ken -- Ken Anderson Pacific Internet - http://www.pacific.net

3 2

[Dovecot] auth tcp socket, Authentication client gave a PID 7542 of existing connection
by Alex Ha 21 Mar '12

21 Mar '12

Hi Dovecot-list! My setup consists of a dovecot server with lmtp delivery and 3 postfix mta servers in front. Previously the mtas authenticated (SASL) through the courier-authdaemond software to our mysql database. To get support for more password formats i migrated to dovecot for SASL authentification. Our postfix mtas connect to dovecot through a tcp-socket smtpd_sasl_auth_enable = yes smtpd_sasl_type = dovecot smtpd_sasl_path = inet:10.11.100.230:12345 smtpd_sasl_security_options = noanonymous smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = broken_sasl_auth_clients = yes 10.11.100.230 is our dovecot server. Please look at the attached doveconf.log to see my auth service configuration. I did the configuration according to the postfix SASL README. http://www.postfix.org/SASL_README.html#server_dovecot I tested the setup and everything worked fine but after 2 days i noticed these error messages in my mail.log: dovecot: auth: Error: BUG: Authentication client gave a PID 7542 of existing connection and also these messages from postfix: SASL LOGIN authentication failed: Connection lost to authentication server I get the dovecot error message about 3000 times a day and postfix message about 270 times. Please see my attached mail.log for a detailed trace. Thank you for your help :) Alex

3 6

[Dovecot] ssl_cert_username_field and subjectAltName?
by Nicolas KOWALSKI 21 Mar '12

21 Mar '12

Hello, Does dovecot support the subject Alternative Name email value [1] as ssl_cert_username_field? If so, how should it be specified in the configuration? Thanks. [1] http://www.openssl.org/docs/apps/x509v3_config.html#Subject_Alternative_Nam… -- Nicolas

1 1

[Dovecot] bug uni_utf8_str_is_valid(vname)
by Jernej Porenta 20 Mar '12

20 Mar '12

Heya, We are expiriencing issues with dovecot 2.1.1 on Linux with weird filenames in home directory of username. We are using mbox IMAP folders, with no special changes (mail_location = mbox:~/:INBOX=%h/.mailbox). Mar 6 13:37:17 machine dovecot: imap(username): Panic: file mail-storage.c: line 628 (mailbox_alloc): assertion failed: (uni_utf8_str_is_valid(vname)) Mar 6 13:37:17 machine dovecot: imap(username): Error: Raw backtrace: /opt/dovecot-2.1.1/lib/dovecot/libdovecot.so.0 [0x2ba41cb79450] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot.so.0 [0x2ba41cb794a6] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot.so.0 [0x2ba41cb78963] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0 [0x2ba41c87ebd5] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0 [0x2ba41c88c12c] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0(fs_list_iter_next+0x1b4) [0x2ba41c88c494] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0 [0x2ba41c885342] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0(mailbox_list_iter_next+0x234) [0x2ba41c885604] -> dovecot/imap [0x40b2d1] -> dovecot/imap(cmd_list_full+0x520) [0x40c1f0] -> dovecot/imap(cmd_list+0xb) [0x40c3eb] -> dovecot/imap(command_exec+0x37) [0x410427] -> dovecot/imap [0x40f4cd] -> dovecot/imap [0x40f582] -> dovecot/imap(client_handle_input+0x3f) [0x40f6cf] -> dovecot/imap(client_input+0x62) [0x410052] -> /opt/dovecot Mar 6 13:37:17 machine dovecot: imap(username): Fatal: master: service(imap): child 20873 killed with signal 6 (core dumps disabled) The bug is reproducible by using home folder structure available from: http://bit.ly/x8pTXS AFAIK, the problem lies in processing the file list of home folder, which can contain filenames that do not have proper UTF-8 encoding of filenames, which causes dovecot to crash. On the other hand, UTF-8 filenames created on the system by hand (using touch), are not displayed in IMAP LIST command (sample is included in the folder structure; single letter file). Cheers, Jernej

2 7

[Dovecot] Antispam plugin not compatible with Dovecot 2.1
by interfaSys sàrl 20 Mar '12

20 Mar '12

Here is what I get when I try to compile the antispam plugin agaisnt Dovecot 2.1 ************** mailbox.c: In function 'antispam_save_begin': mailbox.c:138:12: error: 'struct mail_save_context' has no member named 'copying' mailbox.c: In function 'antispam_save_finish': mailbox.c:174:12: error: 'struct mail_save_context' has no member named 'copying' Failed to compile mailbox.c (plugin)! gmake[3]: *** [mailbox.plugin.o] Error 1 ************** The other objects compile fine. Cheers, Olivier

4 5

[Dovecot] dovecot, sieve and vacation
by Cedric Jeanneret 20 Mar '12

20 Mar '12

Hi there ! Have a small problem with sieve and vacation: it seems to descard the vacation filter I created instead of sending back an email: Mar 20 11:56:28 hostname dovecot: deliver(virtual_user): sieve: msgid=unspecified: discarding vacation response for message implicitly delivered to <virtual_user@hostname> after searching a bit on the net, I stumbled on another (old) thread: http://www.mail-archive.com/dovecot@dovecot.org/msg25955.html I'm not really sure it's the same problem, as I'm sending the mail from another host (via telnet, for testing purpose). Other sieve rules (such as flagging, moving and so on) work fine. Only vacation is crapy. Here's the roundcube generated rule: require ["vacation"]; if true { vacation :days 2 "on holidays!"; } Any help welcome :) Cheers, C. Informations: # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-6-pve i686 Debian 6.0.4 simfs log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps pop3s managesieve listen(default): * listen(imap): * listen(pop3): * listen(managesieve): localhost:2000 ssl_cipher_list: ALL:!LOW:!SSLv2 login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login first_valid_uid: 8 mail_privileged_group: mail mail_uid: mail mail_gid: mail mail_location: maildir:/var/local/vmail/%n mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(pop3): bytes=%i/%o managesieve_logout_format(managesieve): bytes ( in=%i : out=%o ) lda: postmaster_address: foo(a)bar.com mail_plugins: sieve auth default: mechanisms: plain login user: mail passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf.ext userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf.ext socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: postfix group: mail plugin: home: /var/local/vmail/%u sieve: /var/local/vmail/%n/.dovecot.sieve sieve_dir: /var/local/vmail/%n/sieve sieve_extensions: +notify +imapflags

2 2

[Dovecot] Dsync Dovecot
by Jitendra Bhaskar 20 Mar '12

20 Mar '12

Hey Frnds, Could you tell me about the error : # dsync -Dv -u jitendra.b(a)example.com mirror jitendra.b(a)example.com doveadm(root): Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_lookup (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually intentional, so just ignore this message) doveadm(jitendra.b(a)example.com): Debug: Effective uid=3846, gid=3846, home=/home/example1.com/jitendra.b doveadm(jitendra.b(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:/home/ example.com/jitendra.b/mail:INBOX=/var/spool/example.com/jitendra.b doveadm(jitendra.b(a)example.com): Debug: fs: root=/home/ example.com/jitendra.b/mail, index=, control=, inbox=/var/spool/ example.com/jitendra.b, alt= dsync-local(jitendra.b(a)example.com): Debug: Namespace : Using permissions from /home/example.com/jitendra.b/mail: mode=0777 gid=-1 doveadm(jitendra.b): Fatal: User doesn't exist dsync-local(jitendra.b(a)example.com): Error: read() from worker server failed: EOF -- * Thanks & Regards * *Jitendra Kumar Bhaskar* Cell:- +91 7306311531 +91 8102997821

2 1

[Dovecot] Dovecot with postfix setup
by evolution age 20 Mar '12

20 Mar '12

Hey frnds, Could you suggest me any ebook or documentation for the setup of dovecot with postfix on centos 5.7 . I need it. -- Warm Regards Jitendra Kumar Bhaskar cell :- +91-8886742555

3 2

[Dovecot] IMAP and POP3 per SSL
by Lamprecht, Andreas 20 Mar '12

20 Mar '12

Hi! I'm new to this list and i could not find a way to search through the already posted articles, so please forgive me if this subject has been discussed before. Our security scanner stumbled over the IMAPs server i've set up recently using dovecot on a RedHat Enterprise 64bit Server. The security scanner found an error regarding a new SSL security leak named "BEAST". The exact error number is CVE-2011-3389. Details can be found here: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389 "The internet" has some workarounds for this problem. For example, in Apache webserver, you need to set SSLHonorCipherOrder On in apache config. This results in the following C-Code being executed: SSL_CTX_set_options(ctx, SSL_OP_CIPHER_SERVER_PREFERENCE); This setting tells OpenSSL not to honor the Ciper Order sent from the client, but prefer it's own configured set of CipherSuites. According to Qualis SSL Labs ( https://www.ssllabs.com/ssldb/index.html ), a webserver configured with this setting is not affected by that BEAST security leak. Is there a way to implement such a setting into Dovecot, too? I have created a very quick and dirty solution to avoid being listed on our internal security problem's list. This patch is for dovecot 2.0.9 which is included in Redhat Enterprise Linux 6.2: *** src/login-common/ssl-proxy-openssl.c 2010-12-30 10:42:54.000000000 +0100 --- src/login-common/ssl-proxy-openssl.c_1 2012-03-20 09:48:28.359508087 +0100 *************** *** 924,930 **** X509_STORE *store; STACK_OF(X509_NAME) *xnames = NULL; ! SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2); if (*set->ssl_ca != '\0') { /* set trusted CA certs */ store = SSL_CTX_get_cert_store(ssl_ctx); --- 924,930 ---- X509_STORE *store; STACK_OF(X509_NAME) *xnames = NULL; ! SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_CIPHER_SERVER_PREFERENCE ); if (*set->ssl_ca != '\0') { /* set trusted CA certs */ store = SSL_CTX_get_cert_store(ssl_ctx); Of course there should be a way to switch this setting on or off, but my C programming skills are rather basic ... So, maybe you have the time to look over it and implement a final solution for the BEAST problem. Greetings Andreas lamprecht

2 2

[Dovecot] INBOX cant be created
by Radim Kolar 20 Mar '12

20 Mar '12

Inbox does not exists on disk, but following command sequence will not create it. 2 select INBOX 2 NO Mailbox doesn't exist: INBOX 3 create INBOX 3 NO [ALREADYEXISTS] Mailbox already exists: INBOX i think its bug

4 5

[Dovecot] Problem with sieve
by Cédric Jeanneret 20 Mar '12

20 Mar '12

Hello List! I have a tiny-teeny problem with dovecot + sieve: it seems that the LDA doesn't run sieve, and thus doesn't filter my emails. Here's the sieve configuration: plugin { # Used by both the Sieve plugin and the ManageSieve protocol sieve=/var/local/vmail/%n/dovecot.sieve sieve_dir=/var/local/vmail/%n/sieve sieve_extensions = +notify +imapflags } The managesiege: protocol managesieve { # Specify an alternative address:port the daemon must listen on # (default: *:2000) listen = localhost:2000 managesieve_logout_format = bytes ( in=%i : out=%o ) } (this one is working fine, I can edit the filters through roundcube webmail, and the correct file (/var/local/vmail/%n/dovecot.sieve) is edited) the lda part: protocol lda { postmaster_address = foo(a)bar.com mail_plugins = sieve } I think all is in place to allow dovecot to use sieve... ? One more thing: dovecot --version 1.2.15 Any help will be welcomed :). Thanks in advance ! Cheers, C.

5 12

[Dovecot] Per-user IMAP enable - is it possible?
by Alexander Chekalin 20 Mar '12

20 Mar '12

Just wonder if it is possible to enable/disable IMAP4 on Dovecot (2.0.x as far) on per-user basis? The deal is simple: our policy is not to store a lot of mailing on mailserver (the user should store it locally), thus the 'use POP3' approach, but for a vary few users it is permitted to use IMAP4. But users sometimes simple miss the point that some mail clients (e.g. TB) 'prefer' to use IMAP4 first, and afterward I see mailbox full of mailings and no local store of it on user's workstation. Sound too complicated, but setting up two Dovecots is not something I'd love to do as well. Thank you for any ideas, Alexander

3 4

[Dovecot] Dsync Dovecot
by Jitendra Bhaskar 20 Mar '12

20 Mar '12

Hi guys, I am using dovecot-2.1.0 in centos 5.7, I configured dovecot with postfix in 2 system both system is having same configuration and os. I want to use dsync in mirror mode via ssh but I am not able to do it. When I followed the dsync wiki then I an unable to find the username : *dsync -u username mirror ssh -i id_dsa.dovecot mailuser(a)example.com dsync -u username* In the above command what will b user name and id_dsa.dovecot I am unable to understand. -- * Thanks & Regards * *Jitendra Kumar Bhaskar* Cell:- +91 7306311531 +91 8102997821

2 1

Re: [Dovecot] Using plaintext auth and SSL
by Jeff Simmons 20 Mar '12

20 Mar '12

On Monday, March 19, 2012 04:16:46 pm you wrote: > On 3/19/2012 4:04 PM, Jeff Simmons wrote: > > I'm working with a company that presently has a Linux mailserver which > > all users have (no shell) accounts on. Mail is accessed via pop3 with > > plaintext authentication. They want to move to a system using imap with > > SSL. I'm building them a new server. I'd like to offer both for a while > > so we can work the bugs out and migrate users over to SSL imap over > > time. It appears that in order to limit the imap connections to SSL I > > will need to run two separate instances of Dovecot. Is this correct? > > I only have SSL or TLS connections enabled and I only have one copy of > Dovecot running. Let me rephrase that. I want to run plaintext authentication pop3 and ssl/tls only authentication imap. The 'allow plaintext authentication' configuration directive appears to be global, meaning I will need to run two instances of dovecot for a while. Is that correct, or can this be done on a single instance of dovecot? -- Jeff Simmons jsimmons(a)goblin.punk.net Simmons Consulting - Network Engineering, Administration, Security "You guys, I don't hear any noise. Are you sure you're doing it right?" -- My Life With The Thrill Kill Kult

5 6

[Dovecot] Using plaintext auth and SSL
by Jeff Simmons 20 Mar '12

20 Mar '12

I'm working with a company that presently has a Linux mailserver which all users have (no shell) accounts on. Mail is accessed via pop3 with plaintext authentication. They want to move to a system using imap with SSL. I'm building them a new server. I'd like to offer both for a while so we can work the bugs out and migrate users over to SSL imap over time. It appears that in order to limit the imap connections to SSL I will need to run two separate instances of Dovecot. Is this correct? -- Jeff Simmons jsimmons(a)goblin.punk.net Simmons Consulting - Network Engineering, Administration, Security "You guys, I don't hear any noise. Are you sure you're doing it right?" -- My Life With The Thrill Kill Kult

1 0

[Dovecot] Creating an IMAP repo for ~100 users need some advice
by Kaya Saman 19 Mar '12

19 Mar '12

Hi, I am currently in the process of setting up an IMAP repository for round 100 users.... Currently the user authentication method is being handled via a Windows Domain Controller. The host OS for Dovecot will either be FreeBSD or CentOS. Would Dovecot be able to authenticate to either the DC directly or would we need to go through LDAP?? Additionally what would be the best method to store the **mail** information? - as in MySQL database or Maildir format; coinciding with this what is the best backup method in order to be able to do 'dump' backups or restore single emails?? Can anyone give me a hand with this? Regards, Kaya

8 21

[Dovecot] Accessing maildir snapshots through dovecot
by Laurent CARON 19 Mar '12

19 Mar '12

Hi, I'm currently having a fairly simple setup: - users (real, not virtual) - Maildir storage (over NFS) - 1 namespace I'm currently trying to render the storage snapshots available through dovecot (to allow my users to browse their mail history). dovecot.conf: namespace { inbox = yes location = prefix = INBOX. type = private } I did the following modifications: dovecot.conf: namespace snaps-h0 { prefix = INBOX.EmailBackup.h0. hidden = no list = yes inbox = no location = maildir:/home/.snapshot/hourly.0/%u/Maildir:INDEX=/var/tmp/dovecot/indexes/hourly.0/%u:CONTROL=/var/dovecot/control/hourly.0/%u type = private } Problem: I don't see the content of the inbox folder contained in the snapshots (subfolders are perfectly viewed). Do any of you have a clue on how to render it visible ? Thanks Laurent

3 3

[Dovecot] Building Dovecot RHEL RPMs with custom LDAP packages
by Nikolaos Milas 19 Mar '12

19 Mar '12

Hi, We are (still) mainly using CentOS 5 (5.8 x86_64). As CentOS / RHEL 5 standard OpenLDAP packages are rather old (2.3.x), we've been using LTB OpenLDAP packages (http://ltb-project.org/wiki/download#openldap) which get installed in non-standard file system locations. So, I would like to re-build Dovecot packages based on these OpenLDAP libraries, esp. because I see that dovecot RPM packages are built using OpenLDAP v2.3 libraries. I am not much experienced in building RPMs and preparing spec files. In http://dl.atrpms.net/all/dovecot.spec I see: ------------------------------------------------ BuildRequires: openldap-devel, cyrus-sasl-devel ... Obsoletes: %{name}-pgsql < %{epoch}:%{version}-%{release}, %{name}-mysql < %{epoch}:%{version}-%{release}, %{name}-sqlite < %{epoch}:%{version}-%{release}, %{name}-ldap < %{epoch}:%{version}-%{release}, $ Conflicts: %{name}-pgsql > %{epoch}:%{version}-%{release}, %{name}-mysql > %{epoch}:%{version}-%{release}, %{name}-sqlite > %{epoch}:%{version}-%{release}, %{name}-ldap > %{epoch}:%{version}-%{release}, $ ------------------------------------------------ So, I can change the former reference (openldap-devel) to: openldap-ltb-debuginfo, cyrus-sasl-devel Question 1: What other changes should we make in order to specify that we will be using LDAP libraries from: /usr/local/openldap/lib64 and include files from: /usr/local/openldap/include (rather than from /usr/lib64 and /usr/include, respectively, which are the standard file paths used in openldap-devel) Question 2: How the Obsoletes and Conflicts lines should be changed? Question 3: It seems to me (by reading the spec file) that the final Dovecot RPM (and the included executables) does not need any LDAP dynamic library in order to run with LDAP support (because I don't see any dependencies on openldap package). Can somebody please confirm? Any other associated info would be appreciated. Thanks, Nick

2 4

[Dovecot] importing plain mboxes to dovecot maildirs
by Radim Kolar 19 Mar '12

19 Mar '12

Is there way to import old plain mboxes via dsync? It complains about lack of index files: ponto:(admin)~>dsync mirror mbox:~/mail dsync(admin): Error: Failed to sync mailbox sent-mail: Mailbox GUIDs are not permanent without index files dsync(admin): Error: Failed to sync mailbox saved-messages: Mailbox GUIDs are not permanent without index files dsync(admin): Error: Failed to sync mailbox sent-mail-feb-2012: Mailbox GUIDs are not permanent without index files

2 3

[Dovecot] mdbox and filesystem quota
by Arkadiusz Miśkiewicz 18 Mar '12

18 Mar '12

http://wiki2.dovecot.org/MailboxFormat/dbox "Expunging a message only decreases the message's refcount. The space is later freed in "purge" step. This is typically done in a nightly cronjob when there's less disk I/O activity. " What happens if there is filesystem hard quota that is exceeded? Will dovecot allow to delete mails to free space without a need to wait for cronjob to do the purge? -- Arkadiusz Miśkiewicz PLD/Linux Team arekm / maven.pl http://ftp.pld-linux.org/

2 3

[Dovecot] POP3 Performance
by Mauricio López Riffo 17 Mar '12

17 Mar '12

Hi, We actually have a mail hosting solutions with aprox. 100 thousand of email account, where about 90% of a customers use POP3 like email configuration. About a few mounths (we perfomed a lot of migration throught mbox email software to Maildir with dovecot) but i can see that the performance is very poor and receive complaint about delays of autentications of accounts. The solution lives in Metrocluster Netapp storage, filesystem NFS, VMware as a virtualization (the mtas are a virtual machines lives in netapp too) about 4T of data mails and a 10G network connection (betwen mtas and nfs storage) All account information work in LDAP plataform (two servers in replicated mode, no high average or delays detected in this servers) When the traffic have a peak of 1800 concurrent connections POP3, all of service suffer a high load average (about 8 - 20 load average in each dovecot) and authenticacion takes about 2 -10 seconds (in low traffic, autenticacion takes about 60 miliseconds) Also, each dovecot instance lives un MTA server CentOS 5.8 x86_64 with 6G RAM (virtual machine) and share's hardware with a exim instance, like a MTA relay system (autenticated relay) Usage of network have peaks of 80Mbits (all dmz network have 1Gbits of bandwith) Attach of dovecot -n output: # 2.0.18: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-308.1.1.el5 x86_64 CentOS release 5.8 (Final) auth_debug_passwords = yes auth_default_realm = portalplata.cl auth_realms = portalplata.cl auth_verbose = yes auth_verbose_passwords = plain auth_worker_max_count = 100 base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot.log default_process_limit = 200 default_vsz_limit = 512 M disable_plaintext_auth = no first_valid_gid = 12 first_valid_uid = 8 lock_method = dotlock login_greeting = Dovecot mta10 mail_cache_min_mail_count = 5 mail_debug = yes mail_fsync = always mail_full_filesystem_access = yes mail_gid = 12 mail_location = maildir:%h/Maildir:INDEX=/data/cache/indexes/%2d/%1u/%2u/%u mail_nfs_storage = yes mail_plugins = " quota" mail_uid = 8 maildir_copy_with_hardlinks = no passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = box from subject quota = maildir } postmaster_address = mail(a)mail.com protocols = imap pop3 sendmail_path = /usr/lib/sendmail service auth { unix_listener auth-userdb { mode = 0600 user = exim } } service imap-login { service_count = 0 } service imap-postlogin { executable = script-login /usr/local/bin/postlogin.sh user = root } service imap { executable = imap imap-postlogin } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } service_count = 0 } service pop3 { process_limit = 1024 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = " quota" } protocol lda { mail_plugins = " quota" } protocol imap { imap_capability = mail_max_userip_connections = 10 mail_plugins = " quota autocreate notify quota imap_quota mail_log" plugin { autocreate = Sent Items autocreate2 = Spam autocreate3 = Drafts autocreate4 = Trash autosubscribe = Sent Items autosubscribe2 = Spam autosubscribe3 = Drafts autosubscribe4 = Trash } } protocol pop3 { mail_plugins = " quota quota notify mail_log" pop3_reuse_xuidl = yes pop3_save_uidl = yes pop3_uidl_format = %u } Output of account information in a LDAP: # nettester, email.net, MAIL, USERS, cl dn: uid=nettester,dc=email.net,o=MAIL,o=USERS,c=cl dc: email.net mailMessageStore: /export/mdir/3/12/nettester(a)email.net/Maildir uid: nettester cn: nettester(a)email.net sn: nettester(a)email.net gidNumber: 12 homeDirectory: /export/mdir/3/12/nettester(a)email.net mail: nettester(a)email.net uidNumber: 8 objectClass: mailUser objectClass: posixAccount objectClass: mailSetting loginShell: /bin/false description: enable service: pop3 service: imap service2: webmail mailRate: 200 mailQuota: 1024M deliveryMode: none mailReplyText: . Any suggestions? All ideas will be have a good receptions ;) Pd: Sorry my english -- Mauricio López Riffo Red Hat Certified Engineer 804006455319519 Administrador de Servicios Internet Área Ingeniería Gtd Internet S.A. http://www.grupogtd.com/ Moneda 920, Oficina 602 - Fono : +562 4139742

7 9