- dovecot - dovecot.org

[Dovecot] MS Exchange IMAP Proxy
by Terry Carmen 06 Dec '11

06 Dec '11

I need to make the IMAP interface of an Exchange 2000 server available on the net, however I would like to give it a little protection, and believe Dovecot's IMAP proxy might be appropriate. Does anybody have a *really simple* config that would allow IMAP pass-through to a single Exchange server? The examples I've seen all assume some sort of load balancing, which isn't an issue here, so I'd like to eliminate the need for an unnecessary database server. Does Dovecot do any cleanup of the IMAP commands that would be useful in protecting Exchange (from this, http://www.cvedetails.com/cve/CVE-2007-0221/ for example), or am I barking up the wrong tree? If Dovecot isn't helpful for this, can anybody point me to a better resource? Thanks! Terry

7 25

[Dovecot] Strange quota problem
by Jan-Frode Myklebust 05 Dec '11

05 Dec '11

I have a strange problems with quota on v2.0.14. We have an ldap user directory, and all users should have a mailQuota defined there. My problem is that some users gets the quota enforced, while others don't, and "doveadm user" doesn't seem to agree with "doveadm quota ge gett" Ref: $ doveadm user janfrode(a)example.net userdb: janfrode(a)example.net home : /usr/local/atmail/users/j/a/janfrode(a)example.net mailQuota : quota_rule=*:storage=2100000 $ doveadm -f tab quota get -u janfrode(a)example.net Quota name Type Value Limit % UserQuota STORAGE 760 1000000 0 UserQuota MESSAGE 62 - 0 Why limit 1000000 instead of 2100000 ? $ doveadm user omar(a)example.net userdb: omar(a)example.net home : /usr/local/atmail/users/o/m/omar(a)example.net mailQuota : quota_rule=*:storage=1000000 $ sudo doveadm -f tab quota get -u omar(a)example.net Quota name Type Value Limit % UserQuota STORAGE 0 - 0 UserQuota MESSAGE 0 - 0 $ doveadm user testkunde(a)example.net userdb: testkunde(a)example.net home : /usr/local/atmail/users/t/e/testkunde(a)example.net mailQuota : quota_rule=*:storage=1000000 $ doveadm -f tab quota get -u testkunde(a)example.net Quota name Type Value Limit % UserQuota STORAGE 33918 - 0 UserQuota MESSAGE 137 - 0 Why no storage limit ? Config below: ------------------------------------------------------------------ $ grep -v ^# /etc/dovecot/dovecot-ldap.conf.ext |grep -v ^$ hosts = ldapm1.example.net:389 ldapm2.example.net:389 auth_bind = yes auth_bind_userdn = uid=%n,ou=people,o=%d,o=ISP,o=example,c=NET base = ou=people,o=%d,o=ISP,o=example,c=NET deref = never scope = onelevel user_attrs = mailMessageStore=home, mailLocation=mail, mailQuota=mailQuota=quota_rule=*:storage=%$ user_filter = (&(objectClass=examplePerson)(uid=%n)) $ doveconf -n # 2.0.14: /etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=4396 } is lower than required under max. load (4521) # OS: x86_64 Red Hat Enterprise Linux Server release 5.x (Tikanga) auth_verbose = yes auth_verbose_passwords = sha1 disable_plaintext_auth = no mail_gid = 3000 mail_location = maildir:~/:INDEX=/indexes/%1u/%1.1u/%u mail_plugins = quota mail_uid = 3000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = maildir:UserQuota sieve = /sieve/%1u/%1.1u/%u/.dovecot.sieve sieve_dir = /sieve/%1u/%1.1u/%u sieve_max_script_size = 1M } protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { client_limit = 4396 } service imap-login { inet_listener imap { address = * port = 143 } } service imap-postlogin { executable = script-login /usr/local/sbin/imap-postlogin.sh } service imap { executable = imap imap-postlogin process_limit = 2048 } service lmtp { client_limit = 1 inet_listener lmtp { address = * port = 24 } process_limit = 25 } service managesieve-login { inet_listener sieve { address = * port = 4190 } service_count = 1 } service pop3-login { inet_listener pop3 { address = * port = 110 } } service pop3-postlogin { executable = script-login /usr/local/sbin/pop3-postlogin.sh } service pop3 { executable = pop3 pop3-postlogin process_limit = 2048 } ssl = no userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota sieve } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = UID%u-%v } protocol sieve { managesieve_logout_format = bytes=%i/%o } ------------------------------------------------------------------ -jf

2 2

[Dovecot] Single instance storage
by Guy Deleeuw 05 Dec '11

05 Dec '11

Hello, Could you confirm that the SIS is integrated and functional in the latest version of Dovecot? Regards Guy

1 0

[Dovecot] (no subject)
by Mark Zealey 05 Dec '11

05 Dec '11

1 0

[Dovecot] Dovecot crash non stop: "uid 0: exited on signal 11"
by Amaury Le Pivain 05 Dec '11

05 Dec '11

Hi all, I have an old physical freebsd 6.2 server running Dovecot 1.0.7. I wanted to virtualised it. So, I did a dd from the physical server and then I restored it on then now Virtual Machine. I booted the server, all services are running just fine excepted Dovecot. I tried to investigate the log as much as I can but i'm not getting any usefull pieces of information. The only entries I have in the log files are the following: /*log: /var/log/messages:*/ /Dec 5 09:53:35 hostname kernel: pid 33815 (imap), uid 0: exited on signal 11 Dec 5 09:53:39 hostname kernel: pid 33820 (imap), uid 0: exited on signal 11 Dec 5 09:54:22 hostname kernel: pid 33910 (pop3), uid 0: exited on signal 11 Dec 5 09:55:22 hostname kernel: pid 34071 (pop3), uid 0: exited on signal 11 Dec 5 09:55:47 hostname kernel: pid 34103 (imap), uid 0: exited on signal 11 Dec 5 09:56:13 hostname kernel: pid 34143 (pop3), uid 0: exited on signal 11 Dec 5 09:56:21 hostname kernel: pid 34164 (pop3), uid 0: exited on signal 11 Dec 5 09:56:26 hostname kernel: pid 34180 (imap), uid 0: exited on signal 11 Dec 5 09:56:40 hostname kernel: pid 34201 (imap), uid 0: exited on signal 11 Dec 5 09:56:49 hostname kernel: pid 34227 (imap), uid 0: exited on signal 11/ /*log: /mail/log/dovecot.log:* dovecot: Dec 05 10:13:46 Info: imap-login: Login: user=<test-amaury(a)mydomain.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Dec 05 10:13:46 Error: child 36621 (imap) killed with signal 11/ I'm also running a squirrelmail as a webmail and here when I refresh a folder content 3/5 times I'm getting an error: /Error: Connection dropped by IMAP server Query: SELECT "INBOX.Corbeille"/ I'm using Dovecot version 1.0.7 on a freebsd 6.2 and my dovecot.conf is: dovecot -n /# 1.0.7: /usr/local/etc/dovecot.conf base_dir: /mail/ log_path: /mail/log/dovecot.log protocols: imap pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /mail//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: POP3/IMAP ready. verbose_proctitle: yes first_valid_gid: 0 mail_extra_groups: mail mail_location: maildir:~/Maildir fsync_disable: yes maildir_copy_with_hardlinks: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota trash mail_plugins(imap): quota imap_quota trash mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: default_realm: tropik.nc passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf socket: type: listen master: path: /mail/auth-master mode: 384 user: vmail group: vmail plugin: quota: maildir trash: /usr/local/etc/dovecot-trash.conf/ Thank you for your help! Sincerely, -- Amaury Le Pivain Offratel/Lagoon Tel: 28.88.99

2 1

[Dovecot] Plugin for munin
by Patrick Westenberg 04 Dec '11

04 Dec '11

Hi there, is anyone using munin to monitor connections to dovecot? If someone does, which plugin is used? Regards Patrick

3 2

[Dovecot] Core Dump upon IMAP Login with latest HG (2.1) c067025026ed
by Thomas Leuxner 04 Dec '11

04 Dec '11

Dec 4 07:27:41 spectre dovecot: imap-login: Login: user=<tlx(a)leuxner.net>, method=PLAIN, rip=84.58.184.122, lip=1.2.3.4, mpid=30987, TLS Dec 4 07:27:42 spectre dovecot: imap-login: Login: user=<tlx(a)leuxner.net>, method=PLAIN, rip=84.58.184.122, lip=1.2.3.4, mpid=30990, TLS Dec 4 07:27:42 spectre dovecot: master: Error: service(imap): child 30990 killed with signal 11 (core dumped) Dec 4 07:27:48 spectre dovecot: imap(tlx(a)leuxner.net): Connection closed in=142 out=410 Dec 4 07:27:48 spectre dovecot: imap-login: Login: user=<tlx(a)leuxner.net>, method=PLAIN, rip=84.58.184.122, lip=1.2.3.4, mpid=30992, TLS Dec 4 07:27:48 spectre dovecot: master: Warning: Killed with signal 15 (by pid=31013 uid=0 code=kill) [ GDB Backtrace] #0 0x00007fa68d36f978 in mailbox_settings_find (user=0x22162f0, vname=0x21ec318 "INBOX") at mail-storage.c:610 box_set__foreach_end = <value optimized out> box_set = <value optimized out> #1 0x00007fa68d371003 in mailbox_alloc (list=<value optimized out>, vname=0x21ec318 "INBOX", flags=MAILBOX_FLAG_DROP_RECENT) at mail-storage.c:643 _data_stack_cur_id = 4 new_list = 0x22149b0 storage = 0x221b760 box = 0x222a9f0 __FUNCTION__ = "mailbox_alloc" #2 0x000000000040d8de in select_open (cmd=0x22259c0, readonly=false) at cmd-select.c:285 client = 0x2224e30 status = {messages = 2808, recent = 0, unseen = 0, uidvalidity = 0, uidnext = 0, first_unseen_seq = 0, first_recent_uid = 0, last_cached_seq = 0, highest_modseq = 834, keywords = 0x0, permanent_flags = 0, nonpermanent_modseqs = 0, permanent_keywords = 0, allow_new_keywords = 0} flags = 8 ret = <value optimized out> #3 cmd_select_full (cmd=0x22259c0, readonly=false) at cmd-select.c:419 client = 0x2224e30 ctx = <value optimized out> args = 0x2228218 list_args = 0x7fffbe1e9a58 mailbox = 0x21ec318 "INBOX" ret = <value optimized out> __FUNCTION__ = "cmd_select_full" #4 0x000000000041134d in command_exec (cmd=0x22259c0) at imap-commands.c:147 hook = 0x21f5b40 ret = <value optimized out> #5 0x000000000041031e in client_command_input (cmd=0x22259c0) at imap-client.c:673 client = 0x2224e30 command = <value optimized out> __FUNCTION__ = "client_command_input" #6 0x00000000004103fd in client_command_input (cmd=0x22259c0) at imap-client.c:724 client = 0x2224e30 command = 0x0 __FUNCTION__ = "client_command_input" #7 0x0000000000410625 in client_handle_next_command (client=0x2224e30) at imap-client.c:765 size = 18 #8 client_handle_input (client=0x2224e30) at imap-client.c:777 _data_stack_cur_id = 3 ret = false remove_io = <value optimized out> handled_commands = false __FUNCTION__ = "client_handle_input" #9 0x0000000000410f4f in client_input (client=0x2224e30) at imap-client.c:816 cmd = <value optimized out> output = 0x2225828 bytes = <value optimized out> __FUNCTION__ = "client_input" #10 0x00007fa68d0fbf36 in io_loop_call_io (io=0x22258d0) at ioloop.c:377 ioloop = 0x21f4630 t_id = 2 #11 0x00007fa68d0fcf6f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:213 ctx = 0x21f4850 event = 0x21f48c0 list = 0x2225920 io = 0x22162f0 tv = {tv_sec = 29, tv_usec = 928551} msecs = <value optimized out> ret = <value optimized out> i = 0 call = false #12 0x00007fa68d0fbed8 in io_loop_run (ioloop=0x21f4630) at ioloop.c:396 No locals. #13 0x00007fa68d0e9433 in master_service_run (service=0x21f44f0, callback=0x21ec318) at master-service.c:499 No locals. #14 0x0000000000419141 in main (argc=1, argv=0x21f4370) at main.c:375 set_roots = {0x41c020, 0x0} service_flags = <value optimized out> storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT postlogin_socket_path = 0x0 username = 0x0 c = <value optimized out> [ doveconf -n ] # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.3 auth_cache_size = 16 k auth_verbose = yes mail_location = mdbox:~/mdbox mail_plugins = acl quota stats namespace { hidden = no inbox = yes location = prefix = separator = / type = private } namespace { list = yes location = mdbox:/var/vmail/public prefix = Public/ separator = / subscriptions = no type = public } passdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } plugin { acl = vfile:/var/vmail/conf.d/%d/acls:cache_secs=300 mail_log_events = expunge mailbox_delete quota = dict:user::file:%h/mdbox/dovecot-quota quota_rule = *:storage=1GB quota_rule2 = Trash:storage=+10%% sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/vmail/conf.d/%d/sieve stats_refresh = 30s stats_track_cmds = yes } protocols = imap lmtp quota_full_tempfail = yes service auth-worker { user = doveauth } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = doveauth } service imap-login { inet_listener imap { address = 1.2.3.4 port = 143 } inet_listener imaps { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_ca = </etc/ssl/certs/SSL123_CA_Bundle.pem ssl_cert = </etc/ssl/certs/host_domain_tld.crt ssl_key = </etc/ssl/private/host_domain_tld.key syslog_facility = local1 userdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = acl quota stats sieve } protocol imap { mail_plugins = acl quota stats imap_acl imap_quota mail_log notify imap_stats }

1 0

[Dovecot] Questions about single intance storage
by Maria Arrea 03 Dec '11

03 Dec '11

Hello We are using dovecot 2.0.16 with mdbox+zlib. We are now testing SiS (Single Instance Storage) and I have 5 questions: 1º Is possible to "dedup" existing mdboxes? 2º Are attachments compressed with zlib if mdboxes already use zlib? 3º I have plenty CPU to spare, should I use a low value of mail_attachment_min_size , like 16KB ? 4º Can I "undo" SiS if I have problems? 5º We use bacula to save indexes & mdboxes, and we recover mailboxes using doveadm import when a user "makes a fatal mistake" wiping all her Inbox. If we enable SiS I am not really sure how can we safely restore a user's INBOX if that user has SiS attachments. Thank you for your (great) support. Maria

2 1

[Dovecot] lda/sieve ignores quota from ldap
by Jens Meißner 03 Dec '11

03 Dec '11

Hello, I'm using Dovecot 2.0 with Sieve as MDA and Postfix as MTA. The Postfix delivery command is /usr/lib/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT". I have set a default quota with quota_rule = *:storage=1G. Some users should have a larger quota. This is defined in a ldap directory and I have set user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,mailQuota=quota_rule=*:storage=%$. The imap_quota plugin shows the right quota for all users but the lda ignores the quota rule from ldap. If a user is over default quota but not over his ldap defined quota I get the following error message: From: Mail Delivery Subsystem <postmaster@[…]> Your message to <[…]> was automatically rejected: Quota exceeded (mailbox for user is full) The log file shows the following: Nov 30 18:21:17 […] dovecot: lda([…]): Error: sieve: msgid=<20111130172116.7F065A07D@[…]>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full) Nov 30 18:21:17 […] dovecot: lda([…]): Error: sieve: script /var/mail/[…]/dovecot.sieve failed with unsuccessful implicit keep (user logfile /var/mail/[…]/dovecot.sieve.log may reveal additional details) Nov 30 18:21:17 […] dovecot: lda([…]): msgid=<20111130172116.7F065A07D@[…]>: rejected: Quota exceeded (mailbox for user is full) dovecot.sieve.log: error: msgid=<20111130172116.7F065A07D@[…]>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full). What is wrong? What must I do to getting this to work? Thanks in advance. Regards Jens doveconf -n: # 2.0.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-xen-amd64 x86_64 Debian 6.0.3 nfs mail_location = maildir:/var/mail/%u mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = maildir quota_rule = *:storage=1G sieve = /var/mail/%u/dovecot.sieve sieve_dir = /var/mail/%u/sieve } protocols = " imap sieve pop3" ssl_cert = </etc/dovecot/ssl/mail.crt ssl_key = </etc/dovecot/ssl/mail.key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { mail_plugins = quota imap_quota ssl_cert = </etc/dovecot/ssl/imap.crt ssl_key = </etc/dovecot/ssl/imap.key } protocol pop3 { ssl_cert = </etc/dovecot/ssl/pop.crt ssl_key = </etc/dovecot/ssl/pop.key } protocol lda { mail_plugins = quota sieve } /etc/dovecot/dovecot-ldap.conf.ext: hosts = […] dn = uid[…] dnpass = […] auth_bind = yes base = […] user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,mailQuota=quota_rule=*:storage=%$

2 2

[Dovecot] can not get t'bird to create folder
by sean darcy 02 Dec '11

02 Dec '11

dovecot-2.0.16 on Fedora 15. thunderbird-8.0 I can access dovecot from thunderbird, imap maildir. But when I try to create a new folder, nothing happens. I'm not using LAYOUT=fs, so I have added, tb-extra-mailbox-sep, which didn't seem relevant anyhow. Any help appreciated. sean

2 2

[Dovecot] Authentication listener configuration
by Rainer Frey 02 Dec '11

02 Dec '11

Hi, I'm wondering about the authentication listeners that dovecot uses. In many configurations I see: service auth { unix_listener auth-userdb { Does any component of dovecot use this listener internally (lmtp, lda ...) and does that read the config and search for the listener, or is the exact name "auth-userdb" expected? Is this maybe dependent on the userdb? Which ones need it? And if I want to use postfix SMTP auth, should I define a second listener, or just re-configure that default one to postfix's needs? Also, in which cases do I need to define an auth-worker service, and a unix_listener for it? I don't find this in the documentation, if that's caused by my lacking search skills, please just send apointer. Thanks Rainer

1 2

[Dovecot] dsync(root): Fatal: execvp() failed: No such file or directory
by Yaroslav Boychuk 02 Dec '11

02 Dec '11

Hi everybody, I try to convert mbox to maildir using local locations /root/mail is a dir with mboxes /root/INBOX is mbox file h=/root dsync -f -v mirror \ mbox:$h/mail:INBOX=$h/INBOX \ maildir:$h/Maildir:CONTROL=$h/dovecot:INDEX=$h/dovecot \ as result I have dsync(root): Fatal: execvp(mbox:/root/mail:INBOX=/root/INBOX) failed: No such file or directory dsync-local(root): Error: read() from worker server failed: EOF thank you for any help FreeBSD, dovecot 2.0.15

2 2

[Dovecot] LDAP Authentication - Home Directory Creation
by Stephen Bowman 02 Dec '11

02 Dec '11

How does everyone handle this case? Users are authenticated by LDAP, and do not have accounts on the IMAP/dovecot server. When a new user is added to LDAP, the home directory (/home/newuser) needs to be created on the IMAP/dovecot server so dovecot can create the mail directories inside it (/home/newuser/mail/). Obviously I can come up with a few custom solutions, utilizing cron, but I feel like there's a cleaner solution out there. Thanks!

5 8

[Dovecot] dovecot-lda quota rule
by Micah Anderson 01 Dec '11

01 Dec '11

I really like the feature where you can define quota rules with percents which trigger off of the default values[0] (so you can set the Trash to allow for 10% more of the user's quota for example). What I would really love in dovecot would be for the ability to configure a quota rule for dovecot-lda. I would like to configure things so we don't bounce emails for users until they are well over quota, the IMAP quota plugin is a really great way to notify people that they are over quota because it fails to write to other folders.... that should be enough to get people's attention that they need to deal with things, but bouncing is harsh. Is there a way to do this now that I haven't seen? thanks! micah 0. http://wiki2.dovecot.org/Quota/Configuration --

3 6

[Dovecot] can't get sieve to sort virus into spam
by sean darcy 01 Dec '11

01 Dec '11

I can't get sieve to put virus files in the SPAM folder. dovecot -n # 2.0.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.38.8-32.fc15.i686.PAE i686 Fedora release 15 (Lovelock) auth_debug_passwords = yes info_log_path = /var/log/dovecot-info.log log_path = /var/log/dovecot.log mail_access_groups = mail mail_home = /home/vmail/%d/%n mail_location = maildir:~/mail mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { antispam_backend = dspam-exec antispam_dspam_args = --deliver;--user;%u antispam_dspam_binary = /usr/bin/dspam antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_spam = Spam antispam_trash = trash;Trash;Deleted Items; Deleted Messages sieve = /home/vmail/%d/%n/dovecot.sieve.script sieve_dir = /home/vmail/%d/%n/dovecot.sieve/ sieve_global_dir = /var/lib/dovecot/sieve/global/ sieve_global_path = /var/lib/dovecot/sieve/default.sieve } service auth { unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } user = vmail } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol lmtp { mail_plugins = quota sieve } protocol imap { mail_plugins = " antispam" } cat /var/lib/dovecot/sieve/default.sieve require "fileinto"; if header :contains "X-DSPAM-Result" "Virus" { fileinto "SPAM"; } if header :contains "X-DSPAM-Result" "Spam" { fileinto "SPAM"; } and there is a folder SPAM: cat mail/subscriptions Sent Trash Drafts SPAM yet : Content-Type: multipart/alternative; boundary=14dae9399d3b9b67cc04b2d60790 X-DSPAM-Result: Virus X-DSPAM-Processed: Mon Nov 28 21:03:47 2011 X-DSPAM-Confidence: 1.0000 X-DSPAM-Probability: 1.0000 X-DSPAM-Signature: 4ed43d8341479178914901 --14dae9399d3b9b67cc04b2d60790 Content-Type: text/plain; charset=ISO-8859-1 X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* does not end up into SPAM, or anyplace else, including inbox. How do I make this work? sean

3 4

[Dovecot] second active directory
by Айдар Камалов 30 Nov '11

30 Nov '11

Hello! There is dovecot authenticating through AD. All is working well, if authentication is just one of AD. But there is another AD, and working with 2 AD's dovecot don't recognizes last AD user's home directory. For example, if user name in the second AD - 1developer and Mail - it-2c(a)zakamye.ru then dovecot creates folder /var/mail/zakamye.ru/1cdeveloper but it should be /var/mail/zakamye.ru/it-2c. What I do wrong?( And, if I change the order of viewing AD, does not work precisely the second AD: passdb ldap-DUSLYK { driver = ldap args = /etc/dovecot/dovecot-DUSLYK.conf } userdb ldap-DUSLYK { driver = ldap args = /etc/dovecot/dovecot-DUSLYK-users.conf } passdb ldap-DUSL-OFFICE { driver = ldap args = /etc/dovecot/dovecot-DUSL-OFFICE.conf } userdb ldap-DUSL-BASE { driver = ldap args = /etc/dovecot/dovecot-DUSL-OFFICE-users.conf } Sorry for my bad english, but maybe you can understand logs and configs: http://pastebin.com/mtk4XsNE -- Айдар А. Камалов, Системный администратор ООО "ТД Дуслык" г. Наб. Челны, пос. Сидоровка Тел.: +7 (8552) 47-01-99 доб. 3025 Тел.: +7 (8552) 70-65-15 доб. 280 Сот.: +7 (919) 621-28-52 E-mail: akam(a)zakamye.ru

1 1

[Dovecot] Fault tolerant architecture
by Marcelo Salhab Brogliato 30 Nov '11

30 Nov '11

Hi, I'm new to this list and want your help. I'm the mail admin for some domains in Rio de Janeiro - Brazil. Today we have only one machine running dovecot (imap+pop3) with local mail. We are migrating to two virtual machines in kvm running in separate hosts. Then we have two main problems: - How to share mail files to both dovecots? We've been thinking about NFS using local indexes. Is this a good approach? - How do we have a fault tolerant mail servers? Our first solutions is using two IP addresses in our DNS records. About NFS using local indexes, I'm configuring a test server. But how to configure local indexes when my mail_location comes from sql (userdb_home actually). I'm using dovecot 1.2.9. I guess you already had some of these problems or maybe in another architecture these neither exists. Thanks for any help, Marcelo

4 3

[Dovecot] Best setup for performance and fault tolerance
by Donny Brooks 30 Nov '11

30 Nov '11

Hello all. I am in need of some guidance. First a little background. Currently our mail server is on physical hardware (Dell server with 2x 2.8GHz Xeon w/ 4GB ram, raid5 array, single gigabit nic) running on Fedora 11 and postfix-2.5.6-3.fc11.x86_64 with dovecot-1.2.11-3.fc11.x86_64. Mailstore is via Maildir format that was converted from mbox about a year ago. This same machine is also our PDC with samba, Master LDAP, slave MySQL replication, primary DNS, and home server for about 20 users. We have approximately 200 end users that have mailboxes on the server ranging from 1KB to 20GB in size. Total mail store is currently at 300GB. About 75 of the users are currently POP access and their mail will be moved to the server soon and setup as IMAP. This is calculated to add roughly another 150GB of mail for a total of 450GB mail store. Being a state agency we have to keep the mail indefinitely for public record reasons. We use a mixture of Thunderbird as an IMAP client and SOGo for web access. Now to the problem: Recently we have been having super slow access to the mail server. Turns out the load was insanely high partially due to the samba home server portion, which is being moved off as we speak, and the other part is due to people searching their mail. Just yesterday one of our users nearly brought the entire agency to its knees by performing a search on her 8GB of mail via IMAP. Since the server is old in both hardware and software I have been tasked with moving it to newer hardware and a newer OS. We currently have 3 virtual servers running Xen and a SAN. The new setup will be placed in the virtual environment. I will probably run Fedora 16 as the OS but am open to Centos, Fedora, or Ubuntu. Now to the question: What is the best way to setup Dovecot so that it is tuned for performance and high available? We have been running with this single point of failure for years so as long as we are moving the mail server we might as well build in some redundancy. To solve the searching problem I thought of maybe setting up some type of indexing. I do kind of want to break the various services out on to separate virtual machines for a little more fault tolerance, but that is not totally necessary. What do you think of things like iRedmail? I see it's usefulness but the not being able to separate services kind of defeats the purpose, plus I want to setup a high available MySQL cluster and possibly OpenLDAP or 389 cluster so iRedMail may not be the best solution. Sorry for the long email but I am trying to get all the information out there at once so it will help get more directed responses in the shortest amount of time. I look forward to any and all input on this matter -- Donny B MDAH

2 1

[Dovecot] Indexes to MLC-SSD
by Patrick Westenberg 29 Nov '11

29 Nov '11

Hi all, is anyone on this list who dares/dared to store his index files on a MLC-SSD? Regards, Patrick

9 26

[Dovecot] 2.0.16 - auth with vpopmail won´t work anymore
by Werner Schöller 29 Nov '11

29 Nov '11

Hi, after upgrading from 2.0.15 to 2.0.16 authentication with vpopmail won´t work anymore. 2.0.x and 1.2.x works (this output is from 2.0.15): Nov 28 18:29:21 mail dovecot: auth: Debug: auth client connected (pid=3855) Nov 28 18:29:21 mail dovecot: auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=10.114.57.11 rip=10.114.57.11 lport=143 rport=37693 resp=d3NjaG9lbGxlckBodGwtcGVyZy5hYy5hdAB3c2Nob2VsbGVyQGh0bC1wZXJnLmFjLmF0AGRpYWJsbw== Nov 28 18:29:21 mail dovecot: auth-worker: Debug: vpopmail(wschoeller(a)htl-perg.ac.at,10.114.57.11): lookup user=wschoeller domain=htl-perg.ac.at Nov 28 18:29:21 mail dovecot: auth: Debug: client out: OK 1 user=wschoeller(a)htl-perg.ac.at Nov 28 18:29:21 mail dovecot: auth: Debug: master in: REQUEST 4001103873 3855 1 7a21a4d39cc6b187b3b14dc4cfbf077a Nov 28 18:29:21 mail dovecot: auth-worker: Debug: vpopmail(wschoeller(a)htl-perg.ac.at,10.114.57.11): lookup user=wschoeller domain=htl-perg.ac.at Nov 28 18:29:21 mail dovecot: auth: Debug: master out: USER 4001103873 wschoeller(a)htl-perg.ac.at uid=89 gid=89 home=/var/vpopmail/domains/htl-perg.ac.at/wschoeller Nov 28 18:29:21 mail dovecot: imap-login: Login: user=<wschoeller(a)htl-perg.ac.at>, method=PLAIN, rip=10.114.57.11, lip=10.114.57.11, mpid=3856, secured Nov 28 18:29:21 mail dovecot: imap(wschoeller(a)htl-perg.ac.at): Disconnected: Logged out bytes=29/405 Nov 28 18:29:21 mail dovecot: auth: Debug: auth client connected (pid=3858) 2.0.16 doesn´t work: Nov 28 18:43:15 mail dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/auth Nov 28 18:43:15 mail dovecot: auth: Debug: auth client connected (pid=27392) Nov 28 18:43:15 mail dovecot: auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=10.114.57.11 rip=10.114.57.11 lport=143 rport=42768 resp=d3NjaG9lbGxlckBodGwtcGVyZy5hYy5hdAB3c2Nob2VsbGVyQGh0bC1wZXJnLmFjLmF0AGRpYWJsbw== Nov 28 18:43:15 mail dovecot: auth-worker: Debug: Loading modules from directory: /usr/lib/dovecot/auth Nov 28 18:43:15 mail dovecot: auth-worker: Debug: vpopmail(wschoeller(a)htl-perg.ac.at,10.114.57.11): lookup user=wschoeller domain=htl-perg.ac.at Nov 28 18:43:15 mail dovecot: auth-worker: vpopmail(wschoeller(a)htl-perg.ac.at,10.114.57.11): Password mismatch Nov 28 18:43:15 mail dovecot: auth-worker: Error: md5_verify(wschoeller(a)htl-perg.ac.at): Not a valid MD5-CRYPT or PLAIN-MD5 password Nov 28 18:43:15 mail dovecot: auth-worker: Error: smd5_verify(wschoeller(a)htl-perg.ac.at): SMD5 password too short Nov 28 18:43:15 mail dovecot: auth-worker: Error: ssha_verify(wschoeller(a)htl-perg.ac.at): SSHA password too short Nov 28 18:43:15 mail dovecot: auth-worker: Error: ssha256_verify(wschoeller(a)htl-perg.ac.at): SSHA256 password too short Nov 28 18:43:15 mail dovecot: auth-worker: Error: ssha512_verify(wschoeller(a)htl-perg.ac.at): SSHA512 password too short Nov 28 18:43:15 mail dovecot: auth-worker: Warning: Invalid OTP data in passdb Nov 28 18:43:15 mail dovecot: auth-worker: Debug: vpopmail(wschoeller(a)htl-perg.ac.at,10.114.57.11): CLEARTEXT(mypassword) != '', try OTP scheme instead Nov 28 18:43:17 mail dovecot: auth: Debug: client out: FAIL 1 user=wschoeller(a)htl-perg.ac.at Nov 28 18:43:17 mail dovecot: imap-login: Aborted login (auth failed, 1 attempts): user=<wschoeller(a)htl-perg.ac.at>, method=PLAIN, rip=10.114.57.11, lip=10.114.57.11, secured Dovecot -n: # 2.0.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.36-gentoo-r8 i686 Gentoo Base System release 1.12.14 auth_debug = yes auth_debug_passwords = yes disable_plaintext_auth = no first_valid_uid = 89 listen = * mail_location = maildir:~/.maildir namespace { hidden = no inbox = yes list = yes location = prefix = INBOX. separator = . type = private } passdb { args = webmail=127.0.0.1 driver = vpopmail } service auth { user = root } ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key userdb { driver = vpopmail } Just a wild guess - but is it possible that the reason could be found here: http://hg.dovecot.org/dovecot-2.0/rev/b99da8b1ecef Thanks for any suggestions. Best regards, Werner

1 0

[Dovecot] squat fts not working on 2.1rc1
by Metro Domain Admin 28 Nov '11

28 Nov '11

Hello, I tried to upgrade from 2.0.15 to 2.1.rc1 over the weekend but ran into some problems with squat. My two largest mailboxes were corrupted, producing this error: Nov 27 17:38:12 kerio1 dovecot[42860]: imap(bigmailbox): Error: Corrupted squat uidlist file /var/mail/metro-email.com/bigmailbox/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index.search.uids: wrong indexid There is a good chance that I had shot my own foot, by forgetting to update postfix's dovecot-lda reference to the new instance. I had also enabled an inet based LMTP listener, although it is not being used yet. Even using non-corrupted indexes, it seemed that FTS was not being used. A basic search such as this one took many minutes to complete: doveadm search -u jsample mailbox INBOX body eps I found messages like this in mail.log after performing the search: Nov 27 18:21:39 kerio1 dovecot[42860]: indexer-worker(jsample): Indexed 0 messages in Drafts Nov 27 18:21:39 kerio1 dovecot[42860]: indexer-worker(jsample): Indexed 0 messages in INBOX When I rolled back to 2.0.15, the same search returned almost immediately. The larger mailboxes went quickly again, but only after they had a chance to rebuild. A few other notes about our configuration: We are on PPC, with the stats service disabled (because of kqueue issue discussed earlier). I made some minor changes in my config since the previous installed version (diff below). mail_location override is in place for all users via password file, e.g.: userdb_mail=mdbox:/var/mail/metro-email.com/jsample/mdbox Thanks, Tony kerio1:~ metroadmin$ /opt/dovecot-2.1.rc1/bin/doveconf -n -c /opt/dovecot-2.1.rc1/etc/dovecot/dovecot.conf # 2.1.rc1: /opt/dovecot-2.1.rc1/etc/dovecot/dovecot.conf # OS: Darwin 9.8.0 Power Macintosh auth_cache_negative_ttl = 0 auth_cache_size = 1 M auth_mechanisms = plain login lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_proxy = yes mail_location = maildir:%h mail_plugins = fts fts_squat mail_log notify mail_privileged_group = mail maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave editheader mdbox_rotate_size = 10 M namespace { inbox = yes location = prefix = separator = / } passdb { args = scheme=CRYPT username_format=%u /opt/dovecot-2.1.rc1/etc/dovecot/users driver = passwd-file } plugin { fts = squat mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size from subject sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)metro-email.com protocols = imap lmtp service auth { unix_listener /var/spool/postfix/private/auth { group = _postfix mode = 0660 user = _postfix } unix_listener auth-userdb { group = mail mode = 0660 user = metroadmin } } service imap { executable = imap postlogin } service lmtp { inet_listener lmtp { address = 192.168.20.10 127.0.0.1 port = 24 } } service postlogin { executable = script-login rawlog -t } service stats { fifo_listener stats-mail { mode = 00 } } ssl_cert = </opt/local/apache2/conf/ssl_startcom/server.crt ssl_key = </opt/local/apache2/conf/ssl_startcom/server.key userdb { args = username_format=%u /opt/dovecot-2.1.rc1/etc/dovecot/users driver = passwd-file } verbose_proctitle = yes protocol imap { mail_max_userip_connections = 16 } Here is a diff between the current/working and attempted configs: kerio1:~ metroadmin$ diff k1.curr k1.new2 1c1 < # 2.0.15: /opt/dovecot-2.0.15/etc/dovecot/dovecot.conf --- > # 2.1.rc1: /opt/dovecot-2.1.rc1/etc/dovecot/dovecot.conf 9a10 > lmtp_proxy = yes 15c16 < managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave --- > managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave editheader 24c25 < args = scheme=CRYPT username_format=%u /opt/dovecot-2.0.15/etc/dovecot/users --- > args = scheme=CRYPT username_format=%u /opt/dovecot-2.1.rc1/etc/dovecot/users 50a52,57 > service lmtp { > inet_listener lmtp { > address = 192.168.20.10 127.0.0.1 > port = 24 > } > } 53a61,65 > service stats { > fifo_listener stats-mail { > mode = 00 > } > } 57c69 < args = username_format=%u /opt/dovecot-2.0.15/etc/dovecot/users --- > args = username_format=%u /opt/dovecot-2.1.rc1/etc/dovecot/users kerio1:~ metroadmin$

1 0

[Dovecot] Which FTS to use!
by Henrique Santos Fernandes 27 Nov '11

27 Nov '11

Hello, i am currently using squat dovecot, but some users that have lots os emails ( 1GB ) are complaining about speed. Iam using dovecot 2.0.13 on debian 6 my squat conf is plugin { fts = squat fts_squat = partial=4 full=5 } I am thinking in maybe start to use Solr, so any one can help me with an decision? I am probably gonna update dovecot to 2.1 next year. and them maybe change the FTS plugin. This year i will get 10k disk only to store the dovecot index, rigth now they are saved on the same storage that the mails are and also change the "full" parameter to something like 10 or 15 I know i will use more disk space for it, but it will make a lot of differences right? it will match the message without the need of opening it for any search smaller than 10 character i guess. But this will be enough? or Solr or Lucene still better? Anyway, i am not current updating the indexes automatic, but i am planing on it, just not sure what is better, the command doveadm index or doveadm search... with one is better to do the task? Thanks! []'sf.rique

2 2

[Dovecot] Dovecot 1.2 ACL problem.
by Rajeev Sharma 26 Nov '11

26 Nov '11

Sir, I have migrate from courier-imap to dovecot without any problem but on courier in have shared folder which access on the basis on rights. I have manage these folders in dovecot but i have one problem all the shared folder is accessible by all user whether they have rights or not i have place dovecot-acl in shared folder and assign user my dovecot-acl is user=rajeev(a)teamsg.in tr. But all other user which is not listing on dovecot-acl also able to access these folder. Here is the output of dovecot -n. # 1.2.17: /usr/local/etc/dovecot.conf # OS: Linux 2.6.18-194.3.1.el5 i686 CentOS release 5.5 (Final) base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log ssl_listen: 192.168.0.251:993 ssl_cert_file: /var/qmail/control/servercert.pem ssl_key_file: /var/qmail/control/servercert.pem login_dir: /var/run/dovecot//login login_executable: /usr/local/libexec/dovecot/imap-login first_valid_uid: 508 last_valid_uid: 508 mail_location: maildir:~/Maildir namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes namespace: type: shared separator: . prefix: INBOX.Shared. location: maildir:/home/vpopmail/domains/sgcricket.com/Maildir/Out:INDEX=~/Maildir/Sh… list: children auth default: user: vpopmail passdb: driver: vpopmail userdb: driver: vpopmail plugin: acl: vfile Please help whats wrong i am doing. Rajeev Sharma.

1 0

[Dovecot] Seen flag getting lost
by Edgar Fuß 26 Nov '11

26 Nov '11

We have two dovecot 1.2 instances sharing Maildirs on NFS. Indexes are local to the individual servers. Occasionally (no idea how to trigger this), the Seen flag gets lost on some messages. I've verified that actually the ``S'' is missing from the filename. I suspect something like server A caching the flags, server B setting Seen, and then server A flushing its cache for another change so overwriting what B changed. Any ideas short of switching to 2.0?

6 8

[Dovecot] v2.1.rc1 released
by Timo Sirainen 25 Nov '11

25 Nov '11

http://dovecot.org/releases/2.1/rc/dovecot-2.1.rc1.tar.gz http://dovecot.org/releases/2.1/rc/dovecot-2.1.rc1.tar.gz.sig I'll probably release v2.1.0 pretty soon, unless people report some new bugs. I know v2.1 is already being used to serve mails to tens (or hundreds?) of thousands of users, so it should be pretty stable. Most of the changes since v2.1.beta1 have been for rather small issues. Many of the fixed bugs exist also in v2.0, but since they are so minor I didn't bother backporting the fixes. As new features since v2.1.beta1 there are the things I did also for v2.0.16, and: * ssl_client_cert/key: Proxying can now send SSL certificate to backend server * ssl_crypto_device for enabling hardware encryption * SCRAM-SHA-1 authentication mechanism support by Florian Zeitz * passdb/userdb checkpassword: Export all auth %variables to AUTH_* environment. * maildir_broken_filename_sizes setting for people upgrading from other maildir servers that wrote tons of broken S=<size> values And as a reminder, here are the biggest new things since v2.0: * Plugins now use UTF-8 mailbox names rather than mUTF-7: acl, autocreate, expire, trash, virtual * auth_username_format default changed to %Lu. If you really want case sensitive usernames, set it back to empty. * Solr full text search backend changed to use mailbox GUIDs instead of mailbox names, requiring reindexing everything. solr_old backend can be used with old indexes to avoid reindexing, but it doesn't support some newer features. + imapc (= IMAP client) storage allows using a remote IMAP server to be used as storage. This allows using Dovecot as a smart (caching) proxy or using dsync to do migration from remote IMAP server. + Mailbox indexing via queuing indexer service (required for Lucene) + Lucene full text search (FTS) backend rewritten with support for different languages + FTS finally supports "OR" search operation + FTS supports indexing attachments via external programs + IMAP FUZZY extension, supported by Lucene and Solr FTS backends + Mailbox list indexes + Statistics tracking via stats service. Exported via doveadm stats. + Autocreate plugin creates/subscribes mailboxes physically only when the mailbox is opened for the first time. Mailbox listing shows the autocreated mailboxes even if they don't physically exist. + Password and user databases now support default_fields and override_fields settings to specify template defaults/overrides. - listescape plugin works perfectly now

6 8

[Dovecot] How to create home directories for virtual users?
by Olli Räisänen 25 Nov '11

25 Nov '11

Hello, I,m using Dovecot 1.2.9, now finishing a migration from Courier IMAP. Documentation (http://wiki.dovecot.org/VirtualUsers/Home) says that home directory should not be the same as mail directory. When I create new user accounts with PostfixAdmin the mail directory is not a problem but is there some smart way to create the home directory as well (locating it for instance in '/srv/vmail/%d/%n/home')? Regards, Olli

5 8

[Dovecot] Problem with lmtp proxy
by Miguel Tormo 24 Nov '11

24 Nov '11

Hello everyone, I have set up postfix to deliver mails to dovecot (2.0.16) using LMTP. On the other hand, I've successfully configured the IMAP proxy setting in dovecot in order to be able to distribute mailboxes among different servers. I wanted to do the same proxy at LMTP level, but it's not working. If I put lmtp_proxy = no, then everything works ok (assuming the mailbox is local), but when I set lmtp_proxy = yes then the user is not found when deliverying the message via LMTP, so the mail remains in the postfix queue. Users are validated through active directory. However, this AD hasn't the SFU installed, thus its LDAP schema doesn't provide me with the required uid, gid, etc. To solve this, I have winbind configured in the system, so I'm doing this: - To validate users *and* be able to set the proxy extra fields, I use ldap as "passdb" (I believe it's not possible to use proxies with PAM). I'm using some LDAP field to store the host that has the user's mailbox. - In order to get the user account data that is not available in the AD, I use passwd as "userdb". I know that when using LMTP with proxy, a passdb needs to be configured. I assume this is needed for the service to lookup for the appropriate host to send the message. So, initially I set ldap as the passdb for LMTP, but just because it didn't work I put both ldap and passwd, and even a userdb (passwd), but the problems remain the same. Anyway the ldap should be the right one as it is there where I have the host information for each user. I think I'm missing something but I can't find what it is. To summarize: with lmtp_proxy = no it does work, with lmtp_proxy = yes it doesn't. Thank you for your help! This is my current config: ************* dovecot -n ************** # 2.0.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.37-gentoo-edicom-1104 x86_64 Gentoo Base System release 1.12.14 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_username_format = %n auth_verbose = yes base_dir = /var/run/dovecot/ listen = * lmtp_proxy = yes login_trusted_networks = 127.0.0.1 mail_debug = yes mail_location = maildir:~/maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)domain.com protocols = imap pop3 sieve lmtp quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = root mode = 0600 user = root } } service imap { vsz_limit = 512 M } service lmtp { inet_listener lmtp { address = 192.168.0.90 port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key submission_host = 192.168.0.22 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { passdb { args = driver = passwd } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = driver = passwd } } protocol lda { mail_plugins = sieve } protocol imap { imap_client_workarounds = delay-newmail } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } **************************************************** ************** cat dovecot-ldap.conf.ext ************** hosts = dcserver:389 dn = cn=binduser,cn=Users,dc=edicom,dc=es dnpass = bindpassword tls = no debug_level = -1 auth_bind = yes ldap_version = 3 base = CN=Users,DC=domain,DC=com deref = never scope = subtree user_filter = (&(memberOf=CN=correo,OU=Alfresco,DC=edicom,DC=es)(sAMAccountName=%u)) pass_attrs = userPassword=password,=proxy_maybe=Y,physicalDeliveryOfficeName=host pass_filter = (&(memberOf=CN=correo,OU=Alfresco,DC=edicom,DC=es)(sAMAccountName=%u)) **************************************************** The results I get in the log: **************************************************** dovecot [2011-11-24 15:53:39] [warning] master: Warning: Killed with signal 15 (by pid=10437 uid=0 code=kill) dovecot [2011-11-24 15:53:40] [info] master: Dovecot v2.0.16 starting up (core dumps disabled) dovecot [2011-11-24 15:53:50] [debug] lmtp(10506): Debug: none: root=, index=, control=, inbox=, alt= dovecot [2011-11-24 15:53:50] [info] lmtp(10506): Connect from local dovecot [2011-11-24 15:53:50] [debug] auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_bind dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_simple_bind dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_sasl_bind dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_send_initial_request dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_new_connection 1 1 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_int_open_connection dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_connect_to_host: TCP dcserver:389 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_new_socket: 17 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_prepare_socket: 17 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_connect_to_host: Trying 192.168.0.67:389 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_pvt_connect: fd: 17 tm: -1 async: 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_open_defconn: successful dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_send_server_request dovecot [2011-11-24 15:53:50] [debug] auth: Debug: master in: PASS 1 myuser(a)domain.com service=lmtp dovecot [2011-11-24 15:53:50] [debug] auth: Debug: password(myuser): passdb doesn't support credential lookups dovecot [2011-11-24 15:53:50] [debug] auth: Debug: password(myuser): passdb doesn't support credential lookups dovecot [2011-11-24 15:53:50] [debug] auth: Debug: password(myuser): passdb doesn't support credential lookups dovecot [2011-11-24 15:53:50] [debug] auth: Debug: master out: FAIL 1 dovecot [2011-11-24 15:53:50] [err] lmtp(10506): Error: user myuser(a)domain.com: Auth PASS lookup failed dovecot [2011-11-24 15:53:50] [debug] lmtp(10506): Debug: auth input: dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_result ld 0x16518d0 msgid -1 dovecot [2011-11-24 15:53:50] [err] auth: Error: wait4msg ld 0x16518d0 msgid -1 (timeout 0 usec) dovecot [2011-11-24 15:53:50] [err] auth: Error: wait4msg continue ld 0x16518d0 msgid -1 all 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ** ld 0x16518d0 Connections: dovecot [2011-11-24 15:53:50] [err] auth: Error: * host: domain.com port: 389 (default) dovecot [2011-11-24 15:53:50] [err] auth: Error: refcnt: 2 status: Connected dovecot [2011-11-24 15:53:50] [err] auth: Error: last used: Thu Nov 24 15:53:50 2011 dovecot [2011-11-24 15:53:50] [err] auth: Error: dovecot [2011-11-24 15:53:50] [err] auth: Error: dovecot [2011-11-24 15:53:50] [err] auth: Error: ** ld 0x16518d0 Outstanding Requests: dovecot [2011-11-24 15:53:50] [err] auth: Error: * msgid 1, origid 1, status InProgress dovecot [2011-11-24 15:53:50] [err] auth: Error: outstanding referrals 0, parent count 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ld 0x16518d0 request count 1 (abandoned 0) dovecot [2011-11-24 15:53:50] [err] auth: Error: ** ld 0x16518d0 Response Queue: dovecot [2011-11-24 15:53:50] [err] auth: Error: Empty dovecot [2011-11-24 15:53:50] [err] auth: Error: ld 0x16518d0 response count 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_chkResponseList ld 0x16518d0 msgid -1 all 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_chkResponseList returns ld 0x16518d0 NULL dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_int_select dovecot [2011-11-24 15:53:50] [err] auth: Error: read1msg: ld 0x16518d0 msgid -1 all 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: read1msg: ld 0x16518d0 msgid 1 message type bind dovecot [2011-11-24 15:53:50] [err] auth: Error: read1msg: ld 0x16518d0 0 new referrals dovecot [2011-11-24 15:53:50] [err] auth: Error: read1msg: mark request completed, ld 0x16518d0 msgid 1 dovecot [2011-11-24 15:53:50] [err] auth: Error: request done: ld 0x16518d0 msgid 1 dovecot [2011-11-24 15:53:50] [err] auth: Error: res_errno: 0, res_error: <>, res_matched: <> dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_free_request (origid 1, msgid 1) dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_parse_result dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_msgfree dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_result ld 0x16518d0 msgid -1 dovecot [2011-11-24 15:53:50] [err] auth: Error: wait4msg ld 0x16518d0 msgid -1 (timeout 0 usec) dovecot [2011-11-24 15:53:50] [err] auth: Error: wait4msg continue ld 0x16518d0 msgid -1 all 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ** ld 0x16518d0 Connections: dovecot [2011-11-24 15:53:50] [err] auth: Error: * host: domain.com port: 389 (default) dovecot [2011-11-24 15:53:50] [err] auth: Error: refcnt: 1 status: Connected dovecot [2011-11-24 15:53:50] [err] auth: Error: last used: Thu Nov 24 15:53:50 2011 dovecot [2011-11-24 15:53:50] [err] auth: Error: dovecot [2011-11-24 15:53:50] [err] auth: Error: dovecot [2011-11-24 15:53:50] [err] auth: Error: ** ld 0x16518d0 Outstanding Requests: dovecot [2011-11-24 15:53:50] [err] auth: Error: Empty dovecot [2011-11-24 15:53:50] [err] auth: Error: ld 0x16518d0 request count 0 (abandoned 0) dovecot [2011-11-24 15:53:50] [err] auth: Error: ** ld 0x16518d0 Response Queue: dovecot [2011-11-24 15:53:50] [err] auth: Error: Empty dovecot [2011-11-24 15:53:50] [err] auth: Error: ld 0x16518d0 response count 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_chkResponseList ld 0x16518d0 msgid -1 all 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_chkResponseList returns ld 0x16518d0 NULL dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_int_select dovecot [2011-11-24 15:53:50] [info] lmtp(10506): Disconnect from local: Client quit (in reset) ****************************************************

3 4

[Dovecot] Questions about Proxy/Director (was: Re: Indexes to MLC-SSD)
by Patrick Westenberg 24 Nov '11

24 Nov '11

Jan-Frode Myklebust schrieb: > MTA -(lmtp)--> dovecot-director ---(lmtp)---> backend-server1 > \---(lmtp)---> backend-server2 > > > IMAP-user -(imap)--> dovecot-director --(imap) --> backend-server1 > \--(imap) --> backend-server2 In this scenario it should be possible to use a non cluster filesystem to store my mails, isn't it? Patrick

2 1

[Dovecot] modules directory
by Johannes Berg 24 Nov '11

24 Nov '11

Hi! I'm a little confused with how plugin loading works in dovecot 2, I can't seem to make it load from $(moduledir)/imap/. Is that intended to work? Just a configuration issue? Reason I ask is that I ported my antispam plugin (I know there's a fork, but I still like mine better) to dovecot 2 and the default "make install" no longer loads properly with just "mail_plugins = antispam". So is $(moduledir)/imap/ no longer used? I also notice acl/imap_acl now, but I still see subdirectories for at least auth. Should I install into just $(moduledir)/ now? johannes

2 4

Re: [Dovecot] Solaris hardware crypto engines
by Martin Preen 24 Nov '11

24 Nov '11

Hello, after serveral tests (and reading a lot of howto's) I'm now fairly convinced that the Solaris HW-crypto engine is not automatically used. Even when dovecot ist compiled with the OpenSSL version provided by Solaris. Currently I have only a T1-CPU available for testing (Sun Fire T2000) and after patching src/login-common/ssl-proxy-openssl.c (Dovecot 1.2.17) with ENGINE *e; ENGINE_load_builtin_engines(); ENGINE_init((e=ENGINE_by_id("pkcs11"))); ENGINE_set_default_RSA(e); ENGINE_set_default_DSA(e); ENGINE_set_default_ciphers(e); in ssl_proxy_init() and inserting ENGINE_cleanup(); in ssl_proxy_deinit() the crypto device gets used. I'm sure that this is not the whole story since this only seems to affect the IMAP login. One has to use the specific SSL-engine and the ENGINE/EVP calls (as stated in the various articles). Is there any chance that Dovecot gets updated/patched for this ? E.g. Like the SSLCryptoDevice setting in Apache's mod_ssl. Regards. Martin Chris Hoogendyk wrote: > > On 4/18/11 6:30 AM, Martin Preen wrote: >> Hello, >> I tried to find out how about to use the hardware crypto engines under >> Solaris (Sun Fire T2000). It seems, that its not just a compilation >> issue: >> >>> For operations that are to be offloaded, it is necessary to restrict >>> use to subset >> > of OpenSSL functions (the EVP_ functions) and explicitly indicate >> the use of the PKCS11 >> > engine; something like the following works for bulk ciphers (the >> process for RSA is similar): >>> >>> ENGINE *e; >>> ENGINE_load_builtin_engines(); >>> e = ENGINE_by_id("pkcs11"); >>> ENGINE_set_default_ciphers(e); >>> EVP_CIPHER_CTX_init (&ctx); >>> EVP_EncryptInit (&ctx, EVP_des_cbc (), key, iv); >>> EVP_EncryptUpdate (.....); >> >> Since I'm not familiar with SSL programming, I wonder if it's possible to >> modify the dovecot 1.2.x source code. Maybe someone has already tried >> this >> or can give me hint. > > You don't want to do that. > > The objective is for the ssl engine to be low level and basically > invisible to layers of application above that use it. So, build openssl > properly and it just works for everything else. > > I'm not at work today, so I don't have reference to my notes. Ah, just > found an email I sent to my colleagues -- copied it below. --------------------------------------------------------------- Martin Preen, Universität Freiburg, Institut für Informatik Georges-Koehler-Allee 52, Raum EG-006, 79110 Freiburg, Germany phone: ++49 761 203-8250 preen(a)informatik.uni-freiburg.de fax: ++49 761 203-8242 swt.informatik.uni-freiburg.de/~preen

3 6

[Dovecot] seting acl for master user?
by oni-neko＠gmx.net 24 Nov '11

24 Nov '11

Hello! I'm sorry, but i don't really understand it the way it is written in the wiki, so i'm trying my luck here =) i followed the wiki for creating a master user (the non-sql-version) and i can login as another user via this master user. my dovecot version is 1.2.9 on an ubuntu server 10.4.3 lts. what i don't get is the acl-setting, so that the master-user can access all the other users mails and folders. i made the changes in the dovecot.conf as written in the wiki: protocol imap { mail_plugins = acl imap_acl } protocol lda { mail_plugins = sieve acl } plugin { acl = vfile:/etc/dovecot/acls } in my case I only want the master user (called cyrus) to be able to do everything with/in all mailboxes, so I made a file /etc/dovecot/acls/default that reads "user=cyrus lrwstipekxa". i'm pretty sure i'm missing something rather obvious here, but somehow i'm just stuck. any help would be greatly appreciated. thanks in advance =) silvana -- NEU: FreePhone - 0ct/min Handyspartarif mit Geld-zurück-Garantie! Jetzt informieren: http://www.gmx.net/de/go/freephone

3 3

[Dovecot] Problem with Outlook 2010
by pch0317 24 Nov '11

24 Nov '11

Hi, Maybe this time somebody help. Thanks -------- Original Message -------- Subject: Problem with Outlook 2010 Date: Tue, 07 Jun 2011 20:20:56 +0100 From: pch0317 <pch0317(a)gmail.com> To: Dovecot Mailing List <dovecot(a)dovecot.org> Hi, I use dovecot 2.0. I have problem with Outlook 2010. This application freezes for about 2 minutes when I move or delete messages. Other applications such as Outlook Express and Thunderbird work correctly. Has anyone had similar problem? Thanks

3 3

[Dovecot] "%d" does not expand to domain on wildcard search
by Ramiro Blanco 24 Nov '11

24 Nov '11

Hi, I found that doing a wildcard search with doveadm doesn't expand the %d global variable when doing a wildcard search like: doveadm search *@domain ALL LARGER 10000k doveadm(root): Error: User listing returned failure doveadm: Error: Failed to iterate through some users In /var/log/dovecot.log: Nov 22 20:48:07 auth-worker: Debug: ldap: iterate: base=vd=%d,dc=domain scope=subtree filter=(&(objectClass=VirtualMailAccount)(accountActive=TRUE)) fields=mail Nov 22 20:48:07 auth-worker: Error: ldap(?): ldap_search((&(objectClass=VirtualMailAccount)(accountActive=TRUE))) failed: No such object Is this a bug? Configs: #file /usr/local/etc/dovecot/dovecot-ldap.conf.ext: hosts = x.x.x.x dn = cn=dovecot,dc=domain dnpass = mypass auth_bind = yes auth_bind_userdn = mail=%u,vd=%d,dc=domain ldap_version = 3 base = vd=%d,dc=domain deref = never scope = subtree user_attrs = mailbox=mail=maildir:/home/vmail/domains/%$,quota=quota_rule=*:storage=%$,vdHome=home=%$/%d/%1u/%1.1u/%n,=uid=504,=gid=12 user_filter = (&(&(objectClass=VirtualMailAccount)(mail=%u))(accountActive=TRUE)) pass_attrs = userPassword=password,mail=user pass_filter = (&(&(objectClass=VirtualMailAccount)(mail=%u))(accountActive=TRUE)) iterate_attrs = mail=user iterate_filter = (&(objectClass=VirtualMailAccount)(accountActive=TRUE)) default_pass_scheme = CRYPT # 2.0.16: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.3.1.el5 x86_64 CentOS release 5.5 (Final) ext3 auth_mechanisms = plain login dict { expire = pgsql:/usr/local/etc/dovecot/dovecot-dict-sql.conf.ext } hostname = localhost lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot.log mail_gid = 12 mail_location = maildir:/home/vmail/domains/%d/%1u/%1.1u/%n mail_plugins = quota autocreate expire mail_privileged_group = mail mail_uid = 504 managesieve_notify_capability = mailto managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus virustest passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { autocreate = Enviados autocreate2 = Papelera autocreate3 = Borrador autocreate4 = Spam autosubscribe = Enviados autosubscribe2 = Papelera autosubscribe3 = Borrador autosubscribe4 = Spam expire = Papelera expire2 = Papelera/* expire3 = Spam expire4 = Spam/* expire_dict = proxy::expire quota = maildir:User quota quota_rule = *:storage=100M quota_rule2 = Papelera:storage=+100M sieve = ~/sieve/dovecot.sieve sieve_before = /usr/local/etc/sieve/spam.sieve sieve_dir = ~/sieve sieve_global_dir = /usr/local/etc/sieve/ } postmaster_address = postmaster@d <postmaster(a)uvq.edu.ar>omain protocols = imap sieve pop3 service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service managesieve-login { inet_listener sieve { port = 4190 } vsz_limit = 64 M } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lda { mail_plugins = quota autocreate expire } protocol imap { mail_plugins = quota autocreate expire imap_quota } protocol sieve { mail_plugins = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o } -- Ramiro Blanco

2 9

[Dovecot] Random Loss of Connection with Thunderbird and Dovecot
by Jay Welch 24 Nov '11

24 Nov '11

Hi, Dovecot Version: 1.2.16 OS: CENTOS 5.5 I am having issues with Thunderbird connecting to Dovecot at random times. Usually an error comes up and states that Thunderbird cannot connect to the server. The only way I have been able to fix this is reset/repair the network connection or reboot the computer. Is there any parameters I can change in Dovecot to fix this issue? Does anyone know what is likely going on? I have been reading forums and I cannot find anything. Thanks

2 1

[Dovecot] Excluding some system users after configuration
by Nanitous 24 Nov '11

24 Nov '11

Dear readers, Consider an installed Postfix configuration (2.3.3) on CentOS. Now I want to install Dovecot (alas only version 1.0.7.7 is available) to provide IMAP services for a few system users, but not all. Most importantly the mail delivery by postfix for some of these system user /must/ not change after the installation of Dovecot. How can I prevent the installation of Dovecot to touch some specific system user accounts? Thanks in advance, /Twan

2 1

[Dovecot] How to disable pop3 in version 2?
by Knute Johnson 24 Nov '11

24 Nov '11

I'm about to bring up a new mail server running Ubuntu 11.10 with Dovecot 2. I've been using 1.2 all along and there are a bunch more config files in 2. In 1.2 I just edited the protocols statement but I can't find one in version 2. Is there a way to disable pop3 or do I just firewall the ports? And a related question, I've been using imaps on port 993 but I hear that's not the best solution anymore, I should be using imap with STARTTLS? How do I disable imaps? Thanks, -- Knute Johnson

2 4

Re: [Dovecot] Seg fault in dovecot/auth 2.0.15
by Mark Goldey 24 Nov '11

24 Nov '11

Sorry about the HTML. I removed the string "-O2" from the /auth Makefile and, for good measure, did make clean, make and make install for all of Dovecot. Still, it crashed when trying to log in via IMAP (webmail). Core dumped, here's the backtrace. [snip] Core was generated by `dovecot/auth -w'. Program terminated with signal 11, Segmentation fault. #0 0x00000000 in ?? () (gdb) bt full #0 0x00000000 in ?? () No symbol table info available. #1 0x0805b0c7 in auth_worker_handle_user (client=0x82754d0, id=2, args=0x82601c8) at auth-worker-client.c:405 auth_request = 0x82776e8 userdb_id = 1 #2 0x0805b630 in auth_worker_handle_line (client=0x82754d0, line=0x82757da "2\tUSER\t1\tuser=mgoldXX@goldey.net\tservice=imap\toriginal_username=mgoldXX@goldey.net\trequested_login_user\tlip=127.0.0.1\trip=127.0.0.1\tlport=143\trport=47574\tsecured=1\tsuccessful=1\tmech=PLAIN") at auth-worker-client.c:534 args = 0x82601c0 id = 2 ret = false #3 0x0805b890 in auth_worker_input (client=0x82754d0) at auth-worker-client.c:614 _data_stack_cur_id = 3 line = 0x82757da "2\tUSER\t1\tuser=mgoldXX@goldey.net\tservice=imap\toriginal_username=mgoldXX@goldey.net\trequested_login_user\tlip=127.0.0.1\trip=127.0.0.1\tlport=143\trport=47574\tsecured=1\tsuccessful=1\tmech=PLAIN" ret = 183 #4 0xb7726021 in io_loop_call_io (io=0x8275688) at ioloop.c:384 ioloop = 0x8268398 t_id = 2 #5 0xb77270d3 in io_loop_handler_run (ioloop=0x8268398) at ioloop-epoll.c:213 ctx = 0x8273f38 event = 0x8273f78 list = 0x82756b0 io = 0xbf80049f tv = {tv_sec = 2147483, tv_usec = 0} msecs = 1 ret = 1 i = 0 j = 0 call = 192 #6 0xb7725fa0 in io_loop_run (ioloop=0x8268398) at ioloop.c:405 No locals. #7 0xb7711baa in master_service_run (service=0x82682e8, callback=0x805e466 <worker_connected>) at master-service.c:481 No locals. #8 0x0805e7aa in main (argc=2, argv=0x82681c0) at main.c:298 c = -1 And, for good measure: (gdb) fr 1 #1 0x0805b0c7 in auth_worker_handle_user (client=0x82754d0, id=2, args=0x82601c8) at auth-worker-client.c:405 405 auth_request->userdb->userdb->iface-> (gdb) p *auth_request->userdb->userdb $1 = {args = 0x8268d10 "", cache_key = 0x0, blocking = true, id = 1, init_refcount = 1, iface = 0x807b320} (gdb) p *auth_request->userdb->userdb->iface $2 = {name = 0x8074f3d "vpopmail", preinit = 0x8069a27 <vpopmail_preinit>, init = 0, deinit = 0, lookup = 0x806975f <vpopmail_lookup>, iterate_init = 0, iterate_next = 0, iterate_deinit = 0} This is all Greek to me, but I'm happy to do more troubleshooting. --mhg

2 1

[Dovecot] 1.2.15 can't get zlib working
by Stan Hoeppner 24 Nov '11

24 Nov '11

Following these instructions: http://wiki.dovecot.org/Plugins/Zlib I enabled zlib and restarted Dovecot. I made a backup copy of a 68MB mbox file and moved it to a non mail directory. The mbox file is an existing TBird IMAP folder in my UNIX user mail directory. It is an archive of a defunct mailing list. It was a regular IMAP folder prior to attempting this. I was able to access all emails in the folder. It worked fine. I gzipped the original mbox file down to 14MB and removed the write flag with chmod. I launched TBird and received the following error in Activity Manager when accessing this IMAP folder: The current operation on '1-Spam-l' did not succeed. The mail server for account stan(a)hardwarefreak.com responded: Mailbox doesn't exist: 1-Spam-l I deleted the Dovecot index files and the TBird 1-Spam-l.msf file which didn't help. Curiously, there are no entries in either dovecot.err or dovecot.log, giving not even the slightest hint as to where I should troubleshoot. Kinda sucks when one follows instructions exactly, simple instructions at that, and it doesn't work, and generates zero log errors. A bit frustrating... Any ideas? /$ la /home/stan/mail/1-Spam-l.gz -r-------- 1 stan stan 14M Oct 28 2010 /home/stan/mail/1-Spam-l.gz # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.38.6 i686 Debian 6.0.3 xfs log_path: /var/log/dovecot.err info_log_path: /var/log/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap ssl_parameters_regenerate: 0 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_process_per_connection: no login_process_size: 16 login_processes_count: 1 login_max_processes_count: 1 login_max_connections: 8 max_mail_processes: 4 mail_privileged_group: mail mail_location: mbox:/home/%u/mail:INBOX=/var/mail/%u mailbox_idle_check_interval: 15 mbox_write_locks: fcntl mbox_very_dirty_syncs: yes mbox_lazy_writes: no mail_plugins: fts fts_squat zlib imap_client_workarounds: tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)hardwarefreak.com mail_plugins: sieve auth default: worker_max_count: 1 process_size: 16 passdb: driver: pam args: max_requests=1 userdb: driver: passwd plugin: fts: squat fts_squat: partial=4 full=10 -- Stan

2 5

[Dovecot] doveadm import assertion failed
by Micah Anderson 24 Nov '11

24 Nov '11

Restoring a user's mailbox yesterday resulted in 'doveadm import' panic'ing with an assertion failure and giving a backtrace: /usr/bin/doveadm import -u <user> mdbox:/maildir/riseup.net/a/<user>/.daily.1/mdbox restored_from_backups/daily1 all doveadm(<user>): Error: Transaction log /maildir/riseup.net/a/<user>/.daily.1/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index.log: duplicate transac tion log sequence (3) doveadm(<user>): Error: Transaction log /maildir/riseup.net/a/<user>/.daily.1/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index.log: duplicate transac tion log sequence (3) doveadm(<user>): Panic: file mail-transaction-log-file.c: line 187 (mail_transaction_log_file_add_to_list): assertion failed: ((*p)->hdr.file_se q < file->hdr.file_seq) doveadm(<user>): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3fd1a) [0x7f05152bbd1a] -> /usr/lib/dovecot/libdovecot.so.0(default_f atal_handler+0x32) [0x7f05152bbe02] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f051529519f] -> /usr/lib/dovecot/libdovecot-storage.so .0(+0xa596a) [0x7f05159e696a] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_transaction_log_file_open+0x1f8) [0x7f05159e7bc8] -> /usr/lib/ dovecot/libdovecot-storage.so.0(mail_transaction_log_find_file+0xd0) [0x7f05159e46e0] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_transa ction_log_view_set+0xcb) [0x7f05159e8bdb] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_map+0xbe) [0x7f05159dff6e] -> /usr/lib/ dovecot/libdovecot-storage.so.0(mail_index_map+0x86) [0x7f05159d1816] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x9a6da) [0x7f05159db6da] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_begin_to+0x56) [0x7f05159db956] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_ index_sync_begin+0x1e) [0x7f05159dc21e] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_sync_begin+0x121) [0x7f05159bbb41] -> /usr/lib/dove cot/libdovecot-storage.so.0(mdbox_sync+0x46) [0x7f05159bc1f6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_storage_sync_init+0x43) [0x7f 05159bc293] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x31) [0x7f0515974031] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x27) [0x7f05159748b7] -> /usr/bin/doveadm(doveadm_mail_iter_init+0x8b) [0x40c9db] -> /usr/bin/doveadm() [0x40c284] -> /usr/bin/doveadm() [0x40a673] -> /usr/bin/doveadm(doveadm_mail_single_user+0x61) [0x40a731] -> /usr/bin/doveadm() [0x40a95d] -> /usr/bin/doveadm(doveadm_mail_try_run+0x141) [0x40ad71] -> /usr/bin/doveadm(main+0x381) [0x4107e1] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f0514b2dc4d] -> /usr/bin/doveadm() [0x409e59] This is with 2.0.15. Micah --

2 1

[Dovecot] v2.1.beta1 released
by Timo Sirainen 23 Nov '11

23 Nov '11

http://dovecot.org/releases/2.1/beta/dovecot-2.1.beta1.tar.gz http://dovecot.org/releases/2.1/beta/dovecot-2.1.beta1.tar.gz.sig Here's the first beta release of Dovecot v2.1. This version has already been tested quite a lot, so I'm not expecting any major bugs. So please upgrade and see if you can find any problems. I'm optimistic about getting rc1 released this year and perhaps even v2.1.0. Since alpha2 there have been a lot of fixes, especially to imapc backend. There are probably also some small new features, but nothing huge. As a reminder, here's the largest changes since v2.0: * Plugins now use UTF-8 mailbox names rather than mUTF-7: acl, autocreate, expire, trash, virtual * auth_username_format default changed to %Lu. If you really want case sensitive usernames, set it back to empty. * Solr full text search backend changed to use mailbox GUIDs instead of mailbox names, requiring reindexing everything. solr_old backend can be used with old indexes to avoid reindexing, but it doesn't support some newer features. + imapc (= IMAP client) storage allows using a remote IMAP server to be used as storage. This allows using Dovecot as a smart (caching) proxy or using dsync to do migration from remote IMAP server. + Mailbox indexing via queuing indexer service (required for Lucene) + Lucene full text search (FTS) backend rewritten with support for different languages + FTS finally supports "OR" search operation + FTS supports indexing attachments via external programs + IMAP FUZZY extension, supported by Lucene and Solr FTS backends + Mailbox list indexes + Statistics tracking via stats service. Exported via doveadm stats. + Autocreate plugin creates/subscribes mailboxes physically only when the mailbox is opened for the first time. Mailbox listing shows the autocreated mailboxes even if they don't physically exist. + Password and user databases now support default_fields and override_fields settings to specify template defaults/overrides. - listescape plugin works perfectly now

3 5

[Dovecot] dovecot as an imap "client"
by David LEROUX 23 Nov '11

23 Nov '11

Hi, I need to get emails from one of my users imap account on a server which is not managed by us to his local imap mailbox. I'm almost sure that I've read some times that dovecot would be able to do that, kind of imap relay, but I can't find it again. I'm not sure to be very clear. Thanks, -- David

4 4

[Dovecot] [PATCH] SCRAM-SHA-1 authentication
by Florian Zeitz 23 Nov '11

23 Nov '11

Hy, over the last days I have implemented SCRAM-SHA-1 in Dovecot's 2.1 branch. It does not do SCRAM-SHA-1-PLUS, but should be extendable enough to introduce it later. There are some checks for the message format which (assuming the client acts correclty) are not strictly necessary during parsing. This is partially in the hope that it might aid client implementers, partially because it (IMHO) improves readability when checking against the RFC. Also errors found in this way could be sent to the client, this is however strictly OPTIONAL in the RFC, for now they are just logged. Some of the variable names are rather long. This is in order to have them match the terms introduced in the RFC, again I expect it to help readability (maybe my recent Objective-C programming showing though). I do feel somewhat insecure about my usage of some lib functions. Hopefully no API has been abused too much. I also note that there are a lot of fields in the scram_auth_request struct. I think they are all there for a reason, however feel free to prove me wrong. Attached is a hg export. It also includes a hmac-sha1 implementation, an adaption off of the hmac-md5 implementation already in Dovecot. I guess those should eventually be merged into a hash-independent hmac implementation, but I figured this would have to do for now. The implementation has been tested against GNU SASL and does appear to work fine. (The command line was `gsasl -m SCRAM-SHA-1 -a user -p pass --imap host` for those curious) Regards Florian "Florob" Zeitz

3 5

[Dovecot] Can't delete sub-folder
by pch0317 23 Nov '11

23 Nov '11

Hi list, I have problem with deleting sub-folder. I use thunderbird 8.0 as a client and dovecot 2.0.9 with imap protocol as a server. I use dovecot with tb-extra-mailbox-sep parameter. I use mbox mailboxes and thunderbird with *not checked* option 'server supports folders that contain sub-folders and messages' so when I create sub-folder I can choose between 'folders only' and 'messages only'. When I try to delete 'parent' folder which contain 'messages only' folder, error message appear: [ALREADYEXISTS] Mailbox has children, delete them first. Ok, so I delete 'message only' folder first and try to delete parent folder, but the same error appear: [ALREADYEXISTS] Mailbox has children, delete them first. When I list mailboxes from console I see inside 'parent' folder ".imap" folder. When I delete .imap folder from console and then delete parent folder from thunderbird, parent folder is deleted correctly. Which application create this ".imap" hidden folder and how solve this problem. Thanks

2 1

[Dovecot] Problem compiling dovecot 2.1 Beta1 under Solaris 10 on SPARC
by Jürgen Obermann 23 Nov '11

23 Nov '11

Hello, compiling dovecot 2.1 Beta1 under Solaris 10 on SPARC with Sun Studio 11 stops with the following error: Making all in lib-imap-client gmake[3]: Entering directory `/net/fileserv/export/sunsrc/src/dovecot-2.1.beta1/src/lib-imap-client' source='imapc-client.c' object='imapc-client.lo' libtool=yes \ DEPDIR=.deps depmode=none /bin/bash ../../depcomp \ /bin/bash ../../libtool --tag=CC --mode=compile cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-ssl-iostream -I../../src/lib-mail -I../../src/lib-imap -I/usr/local/include -fast -xarch=v8plusa -I/usr/sfw/include -c -o imapc-client.lo imapc-client.c libtool: compile: cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-ssl-iostream -I../../src/lib-mail -I../../src/lib-imap -I/usr/local/include -fast -xarch=v8plusa -I/usr/sfw/include -c imapc-client.c -KPIC -DPIC -o .libs/imapc-client.o "imapc-client.h", line 21: warning: enumerator value overflows INT_MAX (2147483647) libtool: compile: cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-ssl-iostream -I../../src/lib-mail -I../../src/lib-imap -I/usr/local/include -fast -xarch=v8plusa -I/usr/sfw/include -c imapc-client.c -o imapc-client.o >/dev/null 2>&1 source='imapc-connection.c' object='imapc-connection.lo' libtool=yes \ DEPDIR=.deps depmode=none /bin/bash ../../depcomp \ /bin/bash ../../libtool --tag=CC --mode=compile cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-ssl-iostream -I../../src/lib-mail -I../../src/lib-imap -I/usr/local/include -fast -xarch=v8plusa -I/usr/sfw/include -c -o imapc-connection.lo imapc-connection.c libtool: compile: cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-ssl-iostream -I../../src/lib-mail -I../../src/lib-imap -I/usr/local/include -fast -xarch=v8plusa -I/usr/sfw/include -c imapc-connection.c -KPIC -DPIC -o .libs/imapc-connection.o "../../src/lib-imap/imap-util.h", line 6: warning: useless declaration "imapc-client.h", line 21: warning: enumerator value overflows INT_MAX (2147483647) "imapc-connection.c", line 1446: operand cannot have void type: op "==" "imapc-connection.c", line 1446: operands have incompatible types: const void "==" pointer to struct imapc_command {pointer to struct pool {..} pool, pointer to struct buffer {..} data, unsigned int send_pos, unsigned int tag, enum imapc_command_flags {IMAPC_COMMAND_FLAG_RETRIABLE(4), IMAPC_COMMAND_FLAG_PRELOGIN(2), IMAPC_COMMAND_FLAG_SELECT(1)} flags, pointer to struct imapc_connection {..} conn, pointer to struct imapc_client_mailbox {..} box, union {..} streams, pointer to function(pointer to const struct imapc_command_reply {..}, pointer to void) returning void callback, pointer to void context, unsigned int idle :1, unsigned int wait_for_literal :1} cc: acomp failed for imapc-connection.c gmake[3]: *** [imapc-connection.lo] Error 1 gmake[3]: Leaving directory `/net/fileserv/export/sunsrc/src/dovecot-2.1.beta1/src/lib-imap-client' Viele Grüße, Jürgen Obermann Hochschulrechenzentrum der Justus-Liebig-Universität Gießen Heinrich-Buff-Ring 44 Tel. 0641-9913054

2 5

[Dovecot] Unique message IDs?
by Alexander Chekalin 23 Nov '11

23 Nov '11

Hello, I'm working with indexing my mail box. What I need is to have index in which mailing specified header string is located. I work with the messages via IMAP. I know that sounds like FTS can help me but no, I don't want to index whole message nor I want to patch FTS source to make it to index headers only. I need a way to identify message across my mail box. The idea is that I can move messages between IMAP folders and the index still should be able to identify it. What I want to know, will UID strings be unique across all my messages no matter which IMAP folder it belongs now to, or the UID can change if I move message? If I remove dovecot-uidlist from the folder will UIDs of messages in the folder be changed? What happened if I put a message to the given IMAP folder (and dovecot-uidlist will record UID for it), then shut down dovecot, and (given maildir storage model) move the message's file info another folder in the same mail box - after I start dovecot, will the UID for the message be the same or not? Thank you in advance, Alexander Chekalin

3 6

[Dovecot] dsync strange duplicate directories
by Frank 23 Nov '11

23 Nov '11

Hello, i'm testing whether dsync will help me in setting up a redundant master - master imap setup and experience this: 1. Master 1 dovecot is running, master 2 dovecot is down 2. I use rsync to create an exact copy of the master 1 maildir on master 2 3. I start up master 2 dovecot 4. I do a dsync on master 2: dsync -D -u test(a)example.com mirror ssh root@master1 dsync -D -u test(a)example.com Now what i see is this: Each mail directory is duplicated on master 1 and master 2 to a directory name with some MD5 hash value (as it seems) e.g. before dsync: ls -a /home/vmail/example.com/test/Maildir cur new .Drafts .Junk .Sent ... after dsync: ls -a /home/vmail/example.com/test/Maildir cur new .Drafts .Drafts_af61060f6f9fcb4efc0a00002691362e .Junk .Junk_b261060f6f9fcb4efc0a00002691362e .Sent .Sent_b261060f6f9fcb4efc0a00002691362e ... The new directories contain the same files as the original directories. What am i doing wrong? Thanks for the help Frank

1 0

[Dovecot] disable imap info logging
by Chris Young 22 Nov '11

22 Nov '11

Is there a way to disable the imap info logging? My logs are filling with tons of login/logout messages Nov 22 18:23:25 imap-login: Info: Login: user=<USER1>, method={method}, rip=10.86.189.79, lip=10.86.189.82, mpid=22488 Nov 22 18:23:25 imap(USER1): Info: Disconnected: Logged out bytes=54/726

2 1

[Dovecot] No duplicates on imap copy?
by Alexander Chekalin 22 Nov '11

22 Nov '11

Hello, when from my script I try to copy messages from one imap folder into another own (within the same imap mailbox). That works perfectly, but... If I copy the same message N times from one folder into another one, in the destination folder I see N copies of the same message, each with its own UID. I wonder if there any way to deduplicate folder content (so in the destination folder I'll get only one copy of each message)? I'd implement something like that myself in my script but I just don't know which part of the messages should I compare - probably md5 of headers? Thank you in advance! Yours, Alexander Chekalin

2 1

Re: [Dovecot] Solaris hardware crypto engines
by Damon Atkins 22 Nov '11

22 Nov '11

Here are some blogs on the topic. http://wikis.sun.com/display/CryptoPerf/Using+the+UltraSPARC+cryptographic+… Solaris 10 # /usr/sfw/bin/openssl engine -c -t # cc -fast*-I /usr/sfw/include -L /usr/sfw/lib -lcrypto* aes_test.c -o aes_test.out http://blogs.oracle.com/DanX/entry/sparc_t4_openssl_engine http://blogs.oracle.com/DanX/entry/where_s_the_crypto_libraries http://blogs.oracle.com/DanX/entry/solaris_x86_aesni_openssl_engine http://blogs.oracle.com/chichang1/entry/rsa_performance_of_sun_fire Here is some info from my intel box Solaris 11 # /usr/bin/openssl engine -c -t (aesni) Intel AES-NI engine (no-aesni) % no-aesni means no aes H/W acceleration [ available ] (dynamic) Dynamic engine loading support [ unavailable ] (pkcs11) PKCS #11 engine support [RSA, DSA, DH, RAND, DSA] [ available ] $ isainfo -v # My cpu does not have 'aes' support 64-bit amd64 applications cx16 sse3 sse2 sse fxsr mmx cmov amd_sysc cx8 tsc fpu 32-bit i386 applications ahf cx16 sse3 sse2 sse fxsr mmx cmov sep cx8 tsc fpu # ldd /opt/dovecot/libexec/dovecot/ssl-build-param **** libssl.so.1.0.0 => /lib/libssl.so.1.0.0 *** *** libcrypto.so.1.0.0 => /lib/libcrypto.so.1.0.0* *** libc.so.1 => /lib/libc.so.1 libnsl.so.1 => /lib/libnsl.so.1 libsocket.so.1 => /lib/libsocket.so.1 librt.so.1 => /lib/librt.so.1 libsendfile.so.1 => /lib/libsendfile.so.1 libmp.so.2 => /lib/libmp.so.2 libmd.so.1 => /lib/libmd.so.1 libm.so.2 => /lib/libm.so.2 ./configure --prefix=/opt/dovecot --with-ldap=yes --with-gssapi --with-ssldir=/etc/openssl Install prefix . : /opt/dovecot File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : yes passdbs ........ : passwd passwd-file shadow pam checkpassword ldap : -bsdauth -sia -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword ldap : -sql -vpopmail -nss SQL drivers .... : : -pgsql -mysql -sqlite Note Under OpenSolaris I did the following: CPPFLAGS=-I/usr/sfw/include LDFLAGS=-R/usr/sfw/lib ./configure --prefix=/opt/dovecot --with-ldap=yes --with-gssapi --with-ssldir=/etc/openssl (most likely Solaris 10 is the same as above, openssl may look old but I believe it is patched with compatible *fixes* from current openssl so application do not break. Apparently it took 5mths to update Solaris 11 to OpenSSL 1.0 and test everything) Cheers Damon.

1 0

[Dovecot] Dovecot Log analysis
by Thomas Hummel 21 Nov '11

21 Nov '11

Hello, Before writing them myself, I'd like to figure out if some tools exist (anvil ? ...) and how to use them to extract from dovecot logs things like who is doing what and how hard or how fast in order to do some rate limiting. For instance, I'd like to be able to identify, slow or block users who . read or write to much / slice of time . login/logout too often / slice of time Note : I'm still using the 1.2.x branch. Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Groupe Exploitation et Infrastructure

2 1