- dovecot - dovecot.org

[Dovecot] Process parameters tuning
by Angel L. Mateo 14 Jul '11

14 Jul '11

Hi, I'm having problems with director and lmtp for delivering messages to my dovecot farm. Also I have a warning like this: doveconf: Warning: service auth { client_limit=4096 } is lower than required under max. load (5048) doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (2003) So I'm trying to tune processes parameters, but I haven't found a complete description of these parameters. All I've found are examples. Questions are about client_limit, service_count, process_limit and process_min_avail. I think that process_limit and process_min_avail are the maximum of running processes for a service and the minimuf of idle process, respectively. But I don't completely understand what exactly are client_limit and service_count, Service_count means how many times a process is reused. If you configure it as 1 means that every time a process ends its connections, it dies. If you configure as 0, when the connections ends, then the process remains idle waiting for new connections. Isn't it? But what does client_limit means? The number of clients that a process can handle? Then number that can handle concurrently? Can a process handle more than one client concurrently? The documentation at http://wiki2.dovecot.org/LoginProcess simply says: * Otherwise new processes are created only once an existing one's connection count reaches client_limit * Default client_limit * process_limit = 1000*100 = 100k connections Does this mean that a process handle a maximun of client_limit connections concurrently? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

1 0

[Dovecot] IMAP access based on username & IP
by Andrei Dumitrescu 14 Jul '11

14 Jul '11

Hello, I have all the users and passwords in separate files like in the configuration below. I want that a specific user (ex: joe(a)domain.con) to be able to read mails using imaps only from a specific IP. All the other users should be able to read email from any IP. How can I do that? Thank you Imap version: #dovecot --version 1.2.12 dovecot.conf: # 1.2.12: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35-28-server x86_64 Ubuntu 10.10 ext4 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot.info ssl_cert_file: /etc/ssl/certs/dovecot1.crt ssl_key_file: /etc/ssl/private/dovecot1.key ssl_cipher_list: ALL:!LOW:!SSLv2 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_greeting: IMAP ready. login_processes_count: 7 login_max_processes_count: 84 verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: maildir:/var/spool/vmail/%d/%n fsync_disable: yes mbox_write_locks: fcntl dotlock imap_client_workarounds: delay-newmail netscape-eoh tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)example.com sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain login user: mail username_format: %Lu passdb: driver: pam args: session=yes dovecot passdb: driver: passwd-file args: /etc/dovecot/dovecot_passwd userdb: driver: passwd args: blocking=yes userdb: driver: passwd-file args: /etc/dovecot/dovecot_users socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384

2 1

[Dovecot] Director lmtp timeout errors
by Angel L. Mateo 13 Jul '11

13 Jul '11

Hello, I have configured two dovecot servers with director acting as lmtp/imap/pop proxy server with 8 dovecot backend servers. In our test environment we had no problem, but when we migrated to production environment, our mail list server (it delivers mail through lmtp) is having a lot of errors like this: 451 4.4.0 Remote server not answering (DATA output timeout) (in reply to end of DATA command)) I have found this same issue in some posts to this list, but I can't find any solution Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

1 0

[Dovecot] Dovecot 2.0.13 and removing IMAP folders in thunderbird
by Christian Roessner 13 Jul '11

13 Jul '11

Hi, I use Dovecot-2.0.13 with mdbox and Thunderbird (IMAP). I have dozens of imap folders and sometimes I wish to delete several folders: First Problem: If I remove a folder under TB, it get moved to my Trash folder. After that I close TB, which also purges the trash. When I come back, the deleted folder and its content is still there. There is no way to remove it with TB. On the server side I see that the folder is listed under mailboxes/Trash and in the subscriptions file, a last line shows that Trash/foldername is subscribed. If I remove that line and the mailboxes-folder, then TB is happy again. Second problem: If I have two folders a and b, both containing a folder example: a/example b/example I only can delete one folder. By deleting the second one, the IMAP server tells me that there already exists on folder named example. I am not sure, if this is thunderbird or dovecot related, but both problems are really annoying. Am I missing some configuration? Thunderbird is Ubuntu's packaged version 3.1.10. Thanks for any ideas and help in advance and don't get me wrong: I really love dovecot ;-) Best wishes Christian -- Roessner-Network-Solutions Bachelor of Science Informatik 50°34.725'N, 08°40.904'O, Nahrungsberg 81, 35390 Giessen F: +49 641 5879091, M: +49 176 93118939 USt-IdNr.: DE225643613 http://www.roessner-network-solutions.com

3 5

[Dovecot] How to turn off "plus" delivery
by gene 13 Jul '11

13 Jul '11

I use a lot of plus-style addresses (me+stuff(a)example.com) except I use underscore as the separator rather than plus (me_stuff(a)example.com) My mail logs are full of messages where dovecot looks for a mailbox named "stuff", fails, then delivers to my inbox. Is there a way to turn that off so that dovecot automatically delivers to my inbox? Thanks! Here are the details: > dovecot --version 1.2.15 > dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.38-8-server x86_64 Ubuntu 11.04 info_log_path: /dev/null log_timestamp: %Y-%m-%d %H:%M:%S ssl_cert_file: /etc/ssl/server.crt ssl_key_file: /etc/ssl/server.key ssl_cipher_list: ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock imap_client_workarounds: outlook-idle delay-newmail lda: postmaster_address: postmaster(a)xxxxxxxxx.com postmaster_address: postmaster(a)xxxxxxxxx.com mail_plugins: sieve quota_full_tempfail: yes deliver_log_format: msgid=%m: %$ rejection_reason: Your message to <%t> was automatically rejected:%n%r postmaster_address: postmaster(a)xxxxxxxxx.com mail_plugins: sieve quota_full_tempfail: yes deliver_log_format: msgid=%m: %$ rejection_reason: Your message to <%t> was automatically rejected:%n%r auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/dovecot-auth mode: 432 user: postfix group: postfix plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve sieve: ~/.dovecot.sieve sieve_dir: ~/sieve > cat ~/.dovecot.sieve require ["regex","fileinto"]; if header :regex ["X-Bogosity"] ["^ *Spam,"] { fileinto "caughtspam"; stop; } # excerpt from mail.log: postfix/pipe[32255]: BE4FCE24069: to=<gene_att(a)xxxxxxxxxx.com>, relay=bogo_filter, delay=1.2, delays=0.13/0.01/0/1.1, dsn=2.0.0, status=sent (delivered via bogo_filter service) postfix/qmgr[28916]: BE4FCE24069: removed postfix/cleanup[32254]: DBA1EE2406E: message-id=<1310331364610.sdc.29057010.18396.155116668(a)connect2.wireless.att-mail.com> postfix/qmgr[28916]: DBA1EE2406E: from=<sdc.29057010.18396.155116668(a)connect2.wireless.att-mail.com>, size=7859, nrcpt=1 (queue active) dovecot: deliver(gene): sieve: msgid=<1310331364610.sdc.29057010.18396.155116668(a)connect2.wireless.att-mail.com>: failed to store into mailbox 'att': Mailbox doesn't exist: att dovecot: deliver(gene): sieve: script /home/gene/.dovecot.sieve failed with unsuccessful implicit keep dovecot: deliver(gene): msgid=<1310331364610.sdc.29057010.18396.155116668(a)connect2.wireless.att-mail.com>: save failed to att: Mailbox doesn't exist: att dovecot: deliver(gene): msgid=<1310331364610.sdc.29057010.18396.155116668(a)connect2.wireless.att-mail.com>: saved mail to INBOX postfix/local[32261]: DBA1EE2406E: to=<gene_att(a)xxxxxxxxxx.com>, relay=local, delay=0.05, delays=0.01/0.01/0/0.03, dsn=2.0.0, status=sent (delivered to command: /usr/lib/dovecot/deliver -c /etc/dovecot/conf.d/01-dovecot-postfix.conf -n -m "${EXTENSION}") postfix/qmgr[28916]: DBA1EE2406E: removed

2 1

[Dovecot] missing +r perm:
by Max Dunlap 12 Jul '11

12 Jul '11

This is probably a really simple issue but I am not sure how to tackle it. sudo dovecot -n: http://pastie.org/2179100 The error message in mail.log: http://pastie.org/2179032 Dovecot.conf says: mail_privileged_group: mail I thought of added the user dovecot to the group mail in hopes of solving the permissions problem, but it didn't seem to make a difference. Any ideas?

5 15

[Dovecot] need help with metadata plugin
by Helga Mayer 12 Jul '11

12 Jul '11

Hello, I've downloaded the metadata plugin from http://hg.intevation.org/kolab/dovecot-metadata-plugin compiled it without errors, made the entries as described in README in dovecot.conf. Only ANNOTATEMORE or anything else additional doesn't show up in the capabilties. Is there anything wrong with my configuration? What I see is: telnet localhost 143 Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. a001 login myaccount secret a001 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS ACL RIGHTS=texk] Logged in Output of dovecot -n: # 1.2.12: /etc/dovecot.conf # OS: Linux 2.6.18-238.9.1.el5 x86_64 Scientific Linux SL release 5.5 (Boron) listen(default): 192.168.0.104:143 127.0.0.1:143 listen(imap): 192.168.0.104:143 127.0.0.1:143 listen(pop3): *:110 ssl_listen(default): <testserver address>:993 ssl_listen(imap): <testserver address>:993 ssl_listen(pop3): <testserver address>:995 ssl_cert_file: /etc/ssl/certs/imapd.pem ssl_key_file: /etc/ssl/certs/imapd.pem disable_plaintext_auth(default): no disable_plaintext_auth(imap): no disable_plaintext_auth(pop3): yes login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_max_processes_count: 2048 max_mail_processes: 2048 first_valid_uid: 200 mail_drop_priv_before_exec(default): yes mail_drop_priv_before_exec(imap): yes mail_drop_priv_before_exec(pop3): no mail_executable(default): /etc/mail/bin/acl-groups mail_executable(imap): /etc/mail/bin/acl-groups mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_process_size: 1024 mail_plugins(default): acl imap_acl lazy_expunge mail_plugins(imap): acl imap_acl lazy_expunge mail_plugins(pop3): lazy_expunge mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 mail_log_max_lines_per_sec: 0 namespace: type: private separator: / location: maildir:/maildir/%1n/%u:LAYOUT=fs inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: .EXPUNGED/ location: maildir:/maildir/expunged/%1n/%u:LAYOUT=fs hidden: yes list: no subscriptions: yes namespace: type: shared separator: / prefix: Shared/%%u/ location: maildir:/maildir/%%1n/%%u:LAYOUT=fs list: children namespace: type: public separator: / prefix: Groups/ location: maildir:/maildir/public:LAYOUT=fs list: children lda: postmaster_address: postmaster@<our.domain> mail_plugins: acl auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/spool/postfix/private/auth-master mode: 384 user: postfix group: postfix plugin: acl: vfile acl_shared_dict: proxy::acl_dict lazy_expunge: .EXPUNGED/ metadata_dict: proxy:/var/run/dovecot/dict-server:metadata dict: acl_dict: mysql:/etc/dovecot-dict-sql.conf metadata: sqlite:/etc/metadata-dict.conf /var/run/dovecot total 8 srw------- 1 root root 0 Jul 8 11:04 auth-worker.27644 srwxrwxrwx 1 root root 0 Jul 8 11:04 dict-server lrwxrwxrwx 1 root root 17 Jul 8 11:04 dovecot.conf -> /etc/dovecot.conf drwxr-x--- 2 root amavis 4096 Jul 8 11:04 login -rw------- 1 root root 6 Jul 8 11:04 master.pid Kind Regards Helga Mayer Helga Mayer Universität Hohenheim Kommunikations-, Informations- und Medienzentrum (630) IT-Dienste | Mail Schloss-Westhof-Süd | 70599 Stuttgart Tel.: +49 711 459-22838 | Fax: +49 711 459-23449 https://kim.uni-hohenheim.de *************************************************************************** A: Because we read from top to bottom, left to right. Q: Why should i start my reply below the quoted text?

1 1

Re: [Dovecot] POP3 vs. IMAP Load/Memory usage in Dovecot 1.0.15
by David Ledger 12 Jul '11

12 Jul '11

At 01:59 -0500 12/7/11, Stan Hoeppner wrote: >On 7/12/2011 1:12 AM, Rainer Frey wrote: >> >> On 11.07.2011, at 17:03, Stan Hoeppner wrote: >> >>> The R410 is a two socket Xeon box with max 2 x 6 core CPUs. The 24 CPUs >>> you see is the result of HyperThreading being enabled. I'd disable HT >>> if I were you, or those boxen mine. >> >> Why? > >It's a troubleshooting step. HT can cause weird problems with some >systems/kernels. It can also decrease performance with some workloads. > As with anything, if it doesn't provide benefit, turn if off to reduce >complexity and potential problems. Or, another way, HT only helps when having twice as many (apparent) processors running at half the (effective) speed is good for your specific workload. Just because it's a band-waggon it doesn't mean you have to jump onto it. David -- David Ledger - Freelance Unix Sysadmin in the UK. HP-UX specialist of hpUG technical user group (www.hpug.org.uk) david.ledger(a)ivdcs.co.uk www.ivdcs.co.uk

1 0

[Dovecot] Many "Error: Corrupted index cache file /XXX/dovecot.index.cache: invalid record size"
by Florent Bautista 11 Jul '11

11 Jul '11

Hi all, I just joigned this list, so I'm sorry if this problem has already been reported. I'm running Dovecot 2.0.13 on many servers, one for POP/IMAP access, others for LDA, others for authentification only, etc. All servers are accessing a shared file system, based on MooseFS (www.moosefs.org) The FS is mounted using FUSE. All my Dovecot servers have this configuration : mail_fsync = always mail_nfs_index = yes mail_nfs_storage = yes mmap_disable = yes (as adviced for NFS installation). But I'm still getting errors like this in POP/IMAP logs : Error: Corrupted index cache file /my_moosefs_fs/domain/user/indexes/.INBOX/dovecot.index.cache: invalid record size Sometimes my Dovecot LDA repairs these files, but then it happens again... All my servers are running Debian 6 over KVM virtualization. Have you ever encountered this ? Do you think this is a Dovecot problem or MooseFS problem ? Thank you a lot for your answers. -- Florent Bautista ------------------------------------------------------------------------ Ce message et ses éventuelles pièces jointes sont personnels, confidentiels et à l'usage exclusif de leur destinataire. Si vous n'êtes pas la personne à laquelle ce message est destiné, veuillez noter que vous avez reçu ce courriel par erreur et qu'il vous est strictement interdit d'utiliser, de diffuser, de transférer, d'imprimer ou de copier ce message. This e-mail and any attachments hereto are strictly personal, confidential and intended solely for the addressee. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this message is strictly prohibited. ------------------------------------------------------------------------

1 2

[Dovecot] Dovecot NFS locking issue
by satish patel 11 Jul '11

11 Jul '11

Hi All, We had 15 imap/pop UW-imap servers behind load balancer and mail storage was NFS for almost around ~30,000 users on it. Currently we migrate UW-imap to dovecot with fcntl NFS locking. After migration on dovecot it started error related locking see following error Error: fcntl() failed with mbox file /home/w/a/wahmed/.inbox: No locks available Error: fcntl() failed with mbox file /home/e/d/edurand/.inbox: No locks available Look like my NFS locking getting overload or something its (netapps NFS server) what you suggest to fix this issue ? how uw-imap was working with NFS before ? Appreciate your help. -S

2 2

[Dovecot] Dovecot indexes
by Mike Prispan 11 Jul '11

11 Jul '11

Hi, could someone answer my following questions about dovecot indexes? - If I delete dovecot indexes, it recreates them without any problem, right? - If dovecot recreates indexes, it does not affect users (they don't have to download all emails again, seen flag is not lost etc.) or is there any problem? - If I use mail_location = ...:INDEX=MEMORY, it recreates indexes every time dovecot is (re)started, right? Does it have any negative effect except performance/resources? - Is there any difference in indexes for mbox and maildir (related to previous questions)? Thanks Mike

3 2

[Dovecot] compressed folder bug
by Giulio Casella 11 Jul '11

11 Jul '11

I found a strange behaviour in dovecot compressed folder, maybe a bug. It happens only if you have one (and just one!) email in a gz compressed folder. I'm talking about a mbox server. Step to reproduce: - create a new folder, using any client (I think this step is not important, it happens also if tou create this folder server-side). - copy one message (any message) into newly created folder (using your favourite drag-n-drop gesture, saving in that folder using you character client (mutt,...), etc.) - if your client automatically subscribe to newly created folders, unsubscribe from it - On your server "gzip newfolder" - On your client subscribe "newfolder.gz" - Try to access you newfolder This is what I get in logfiles: Jul 11 14:08:08 myhostname dovecot: imap(giulio): Error: Next message unexpectedly lost from mbox file /home/giulio/Mail/testfolder.gz at 9082 (cached) Jul 11 14:08:08 myhostname dovecot: imap(giulio): Error: read(/home/giulio/Mail/testfolder.gz) failed: Invalid argument (uid=1) Jul 11 14:08:08 myhostname dovecot: imap(giulio): Disconnected: Internal error occurred. Refer to server log for more information. [2011-07-11 14:08:08] bytes=2045/23657 The funniest thing is that if I have a folder with more than one message it works like a charm. Some info about me: - dovecot version 2.0.13 - gentoo linux, with kernel 2.6.38-gentoo-r6 - system running on a VMWare virtual machine (32bit) - reiserfs filesystem my dovecot -n output: ------------------------------------------------------------------------ # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.38-gentoo-r6 i686 Gentoo Base System release 2.0.2 auth_mechanisms = plain login disable_plaintext_auth = no listen = * mail_gid = mail mail_location = mbox:~/Mail:INBOX=/var/mail/%u:INDEX=~/ mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = * driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } service imap-login { inet_listener imap { address = imap.mydomain.it } inet_listener imaps { address = imap.mydomain.it } } service pop3-login { inet_listener pop3 { address = pop.mydomain.it } inet_listener pop3s { address = pop.mydomain.it } } ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key syslog_facility = local6 userdb { driver = passwd } protocol lda { mail_plugins = sieve } protocol imap { mail_plugins = " zlib" plugin { zlib_save = gz zlib_save_level = 6 } } local imap.dsi.unimi.it { disable_plaintext_auth = no } local pop.dsi.unimi.it { disable_plaintext_auth = no } local imap.dsi.unimi.it { protocol imap { ssl_cert = </etc/pki/CA/certs/imap.mydomain.it.pem ssl_key = </etc/pki/CA/certs/imap.mydomain.it.key } } local pop.dsi.unimi.it { protocol pop3 { pop3_uidl_format = %08Xv%08Xu ssl_cert = </etc/pki/CA/certs/pop.mydomain.it.pem ssl_key = </etc/pki/CA/certs/pop.mydomain.it.key } } ------------------------------------------------------------------------ Any ideas? TIA, gc -- Giulio Casella giulio at dsi.unimi.it System and network manager Computer Science Dept. - University of Milano

1 0

[Dovecot] Lots of LMTP errors Remote server not answering (DATA output timeout) (in reply to end of DATA command))
by Angel L. Mateo 11 Jul '11

11 Jul '11

Hello, I have configured two dovecot servers with director acting as lmtp/imap/pop proxy server with 8 dovecot backend servers. In our test environment we had no problem, but when we migrated to production environment, our mail list server (it delivers mail through lmtp) is having a lot of errors like this: 451 4.4.0 Remote server not answering (DATA output timeout) (in reply to end of DATA command)) Proxy and backend servers are not loaded. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

1 2

[Dovecot] dsync and compressed folders
by Giulio Casella 11 Jul '11

11 Jul '11

I'm trying to migrate my old dovecot server (mbox based) to a new one (maildir based), both are version 2.0.13. I'm using dsync: oldserver# dsync -u username backup ssh root@newserver dsync -u username Everything is working like a charm but when it tries to convert compressed folder I got an error: dsync-local(username): Error: Failed to sync mailbox OldMails/2008.gz: Mailbox isn't a valid mbox file. Both old and new installations support compressed folder via zlib plugin. If I'm not wrong dsync doesn't support compressed folder, does it? And, if so, are there any chances to have dsync support gzip'ed folders in the (near) future? Many thanks in advance, gc -- Giulio Casella giulio at dsi.unimi.it System and network manager Computer Science Dept. - University of Milano

1 0

[Dovecot] n00b here -- pop email deletion
by Glenn English 11 Jul '11

11 Jul '11

I'm running Dovecot IMAP and POP3 on Debian. But it look's like it's keeping mail in the user's inbox on the server until it's deleted by the user. I thought POP servers deleted email as soon as it was downloaded, but apparently not, according to dovecot.org. Is there something in the Dovecot conf I can do to get rid of all this redundant crud? I see several conversations on the 'Net about "quotas" that look like they might keep stuff around for a few days or weeks, then delete. That sounds lovely, but I don't understand them enough to try to make it happen. dovecot -n: > # 1.0.15: /etc/dovecot/dovecot.conf > log_timestamp: %Y-%m-%d %H:%M:%S > protocols: imap pop3 > ssl_listen: * > ssl_disable: yes > disable_plaintext_auth: no > login_dir: /var/run/dovecot/login > login_executable(default): /usr/lib/dovecot/imap-login > login_executable(imap): /usr/lib/dovecot/imap-login > login_executable(pop3): /usr/lib/dovecot/pop3-login > login_max_processes_count: 12 > mail_privileged_group: mail > mail_executable(default): /usr/lib/dovecot/imap > mail_executable(imap): /usr/lib/dovecot/imap > mail_executable(pop3): /usr/lib/dovecot/pop3 > mail_plugin_dir(default): /usr/lib/dovecot/modules/imap > mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap > mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 > pop3_uidl_format(default): > pop3_uidl_format(imap): > pop3_uidl_format(pop3): %08Xu%08Xv > auth default: > mechanisms: plain login > passdb: > driver: pam > userdb: > driver: passwd > socket: > type: listen > client: > path: /var/spool/postfix/private/auth > mode: 432 > user: postfix > group: postfix -- Glenn English

4 9

[Dovecot] LDA/Sieve and vacation: empty envelope sender
by Roberto Puzzanghera 10 Jul '11

10 Jul '11

Hello everyone, while testing a vacation/reject sieve rule I get: lda(sender(a)mydomain.xyz): Error: sieve: envelope sender address '<>@mail.domain.xyz' is unparsable follows an empty Return-Path: <"<>"@mail.domain.xyz> and the reject of the message itself by the recipient's MTA (syntax error). Unfortunately I had no luck when googling for similar issues, after a couple of hours of debugging. qmail/vpopmail dovecot 2.0.12 pigeonhole-0.2.3 Thanks in advance for any hint Roberto Puzzanghera

1 0

[Dovecot] OATH/OTP?
by Cor Bosman 10 Jul '11

10 Jul '11

Hey all, has anyone ever successfully implemented some form of OTP system with dovecot? Im looking at setting up an OATH/HOTP-TOTP based OTP for our services, but the webmail service (which uses dovecot) is a difficult one. Any info on implementations would be appreciated, Regards, Cor

1 0

[Dovecot] SASL
by Friedrich Locke 09 Jul '11

09 Jul '11

Dear list members, i am looking for a pop3 server and would like to know dovecot pop3 closer. In my current infra structure all my users have a single login and one password. I have been authenticating unix, web, ldap, smtp against saslauthd server. It is possible to have dovecot pop3 authenticate by contacting saslauthd too ? Another question: All my user information are keeped inside LDAP using qmail.schema. Can dovecot pop3 look into ldap an return information about user mail directory, etc .... ? Thanks in advance.

2 5

[Dovecot] IMAP not working remotely
by Ondřej Bouda 09 Jul '11

09 Jul '11

Hello, I am trying to set up Dovecot 2.0.9 on Fedora 14. The problem I would like to ask for resolution is that IMAP is not working when connecting to the server from another network. More precisely: - POP3 is working entirely OK, - IMAP is working OK when clients are connecting using local network addresses, like 192.168.0.100, - when a client connects from outside, thus using remote IP address, or even from the server itself using the remote IP address of the server, the following happens: the client correctly connects, but the server sends no greeting (neither the configured login_greeting nor the server IMAP capabilities) and does not respond to the commands. In the server log, I get the following record a while after trying to connect (and actually trying to login): Jul 08 23:24:16 imap-login: Info: Disconnected: Inactivity (no auth attempts): rip=<remote-server-address>, lip=192.168.0.100 Both routing and firewall are OK. The client really connects to dovecot (hence the log message), as seen from a telnet session: Trying a.b.c.d... Connected to example.tld (a.b.c.d). Escape character is '^]'. (and then nothing else) The most confusing for me is the fact that POP3 is configured quite the same and works fine, as well as IMAP on the local network. I tried to change address in the inet_listener imap configuration, but if a wrong address setting was the cause, the client would not get connected at all. As I have spent a pretty long time unsuccessfully searching for a cause, I am asking for some help. Thanks for your time, Ondrej Bouda dovecot -n output follows: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35.11-83.fc14.x86_64 x86_64 Fedora release 14 (Laughlin) ext4 auth_mechanisms = plain login cram-md5 digest-md5 ntlm disable_plaintext_auth = no first_valid_gid = 502 first_valid_uid = 502 last_valid_gid = 502 last_valid_uid = 502 log_path = /var/log/dovecot login_greeting = Welcome mail_location = maildir:/var/mail/virtual/%d/%n passdb { args = scheme=plain username_format=%u /etc/dovecot/passwd driver = passwd-file } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = dovecot-auth } service imap-login { inet_listener imap { address = * port = 143 } } service pop3-login { inet_listener pop3 { address = * port = 110 } } ssl = no userdb { args = username_format=%u /etc/dovecot/passwd driver = passwd-file } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv }

1 1

[Dovecot] auth_username_chars question
by Linda Walsh 09 Jul '11

09 Jul '11

I notice there is a space after the = in the default setting: #auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ Is that space part of the syntax or required? If not, does that mean 'space' is included in the default list of allowed characters? If not, then is the space after the '=' required? -- If not, the implication would seem to be that space is 'ignored'. If that's the case, how does one include 'space' in the list of allowed characters? Also, how does one include the "\" character in the list of allowed characters? I.e. is anything accepted, literally, after the first non-space char after the '=' sign? I.e. any spaces after the first non-space char would be taken as valid character, and '\' would also be a literal character? (not that'd I'd be using windows's clients or anything that would, on occasion, pass "DOMAINAME\user" as the calling user trying to log into a 'user' account....or anything....*ahem*...) Overrode it w/some hard-coded hacks, but would like dovecot to me more robust and handle weird input and do the right thing with it (I know that's always a challenging concept for some people, since the answers and ability to arrive at 'correct' is always 'contextual', and so many people want absolute rules that apply all the time in all cases, but...I think thats a diagnosable psychological condition ;-) ).

1 0

[Dovecot] dovecot-auth: gkr-pam: error looking up user information for: IP ?
by babajaga 08 Jul '11

08 Jul '11

I am receiving a lot of error messages dovecot-auth: gkr-pam: error looking up user information for: <user> Unfortunately, I do not see the IP of the remote client, trying to break in. Is there any possibility to get it ? Would be useful to block the IP. -- View this message in context: http://old.nabble.com/dovecot-auth%3A-gkr-pam%3A-error-looking-up-user-info… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] How users subscribe to a shared mailbox ?
by Frank Bonnet 08 Jul '11

08 Jul '11

Hello I have MBOX format mailboxes and would like to build some shared mailboxes for some groups of users. I've read the doc and I think I've understood the concept but ... how my users will subscribe to the shared mailbox I build for them ? Thanks

1 0

[Dovecot] Info: Disconnected: IMAP session state is inconsistent, please relogin
by Frank Bonnet 08 Jul '11

08 Jul '11

hello again I have those messages for ONE user the IMAP folders are accessed by several clients at the same time ( this is a special account used by several people ) Thanks for any infos

1 0

[Dovecot] redirect IMAP --> IMAPS
by Frank Bonnet 08 Jul '11

08 Jul '11

Hello Is it possible to configure Dovecot (2) to "redirect" IMAP connexions to IMAPS ? I know it would be possible with ipfw on the server but I wonder if dovecot has such capability. thanks

2 1

[Dovecot] Possible bug in shared namespace variable?
by Tom Clark 08 Jul '11

08 Jul '11

As you would have seen earlier I've created a shared mailbox with the following namespace: namespace { type = shared separator = . prefix = Shared.%%n. location = maildir:/var/vpopmail/domains/%%d/%%n/Maildir:INDEX=~/Maildir/Shared/%%n subscriptions = no list = children } This works perfectly, but for some reason the %%n variable in the location maildir is blank. Everywhere else %%n is used works (e.g. the prefix and INDEX). This means for the shared mailbox under support(a)mailbox.com I get a folder Mailder in the domain folder: /var/vpopmail/domains/mailbox.com/Maildir instead of /var/vpopmail/domains/mailbox.com/support/Maildir. Has anyone else come across this?

1 0

[Dovecot] Shared mailbox not showing in list
by Tom Clark 08 Jul '11

08 Jul '11

I've setup a shared folder on my server which isn't showing in the list command for the user it's shared with. Can someone help? I have done everything correctly I believe. The user sharing their mailbox is support@, while I'm the user being shared with, tom@ namespace { type = shared separator = . prefix = Shared.%%u. location = maildir:%%h/Maildir:INDEX=~/Maildir/Shared/%%u subscriptions = no list = children } mail_plugins = acl protocol imap { mail_plugins = $mail_plugins imap_acl } plugin { acl = vfile } # Support for multiple domains plugin { acl_shared_dict = file:/var/vpopmail/domains/%d/shared-mailboxes } This what is in the dict file says: shared/shared-boxes/user/tom@mailbox.com/support@mailbox.com When running a GETACL as support(a)mailbox.com I get: 3 getacl Support * ACL "Support" "tom(a)mailbox.com" lr "support(a)mailbox.com" lrwstipekxacd 3 OK Getacl completed. However when I do a LIST "" * as tom(a)mailbox.com It doesn't have any mention of the Shared maildir. * LIST (\HasChildren) "." "Sent" * LIST (\HasNoChildren) "." "Sent.Drafts" * LIST (\HasNoChildren) "." "Sent Messages" * LIST (\HasNoChildren) "." "Trash" * LIST (\HasChildren) "." "INBOX"

1 1

[Dovecot] Trash handling?
by Mason Loring Bliss 07 Jul '11

07 Jul '11

Hello, all. I've recently switched over to Dovecot from a long stretch of using Courier IMAP, and there's one thing I don't have working that I'd quite like. With Courier I had a magic trash folder in which things I deleted would live for a specified amount of time, after which they'd be deleted. I see how to get the expiry behaviour I want, but not the magic saving-to-mailbox functionality. lazy_expunge looks similar but not precisely what I want. Is there a default way to get expunged messages moved to a different mailbox but not a different namespace? Thanks in advance for clues. -- Mason Loring Bliss mason(a)blisses.org Ewige Blumenkraft! (if awake 'sleep (aref #(sleep dream) (random 2))) -- Hamlet, Act III, Scene I

1 0

[Dovecot] passdb/userdb via UNIX socket?
by Peter Mogensen 07 Jul '11

07 Jul '11

Hi, I've been running some performance tests - especially delivery (LDA and LMTP) and it seems there's room for improvement. At least it would be nice to get rid of the fork() and pipe to deliver LDA and the fork of the checkpasswd script for userdb lookup. I've tried LMTP to not fork deliver (*), but checkpasswd still takes time (ok, maybe because it's written on perl as of now). But I was wondering, why there's no passdb/userdb plugin for talking to a local authentication daemon over a UNIX socket? Have I missed something? Is there a thirdparty patch for this? /Peter *: Using Postfix "virtual" LDA seems much faster than asking Postfix to pipe data to "deliver". ... but then of course, I get no dovecot indexing by the LDA.

1 0

[Dovecot] Sieve scripts not run
by Veikko "Wexi" Skurnik 07 Jul '11

07 Jul '11

Hi I have a dovecot/postfix mail server with virtual user and LDAP authentication but for some reason the sieve scripts in user's maildirs are not run. Here's my dovecot -n: # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.38-8-server x86_64 Ubuntu 11.04 auth_debug_passwords = yes auth_mechanisms = plain login auth_username_format = %Ln auth_verbose = yes base_dir = /var/run/dovecot/ first_valid_gid = 120 first_valid_uid = 111 hostname = mail.websovellukset.fi log_path = /var/log/dovecot.log login_greeting = Omnibyte Dovecot ready. mail_debug = yes mail_gid = vmail mail_location = /var/vmail/%n mail_uid = vmail maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = maildir:User quota quota_rule = *:storage=2G quota_rule2 = Trash:storage=+200M sieve = /var/vmail/%n/dovecot.sieve sieve_dir = /var/vmail/%n/sieve } postmaster_address = postmaster(a)websovellukset.fi protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = postfix mode = 0600 user = postfix } user = $default_internal_user } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 1 } service imap { process_limit = 1024 vsz_limit = 256 M } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } ssl_cert = </etc/ssl/certs/websovellukset.crt ssl_key = </etc/ssl/private/websovellukset.key ssl_key_password = 0mn1p4ssu userdb { args = /usr/local/etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lda { mail_plugins = " sieve" } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_id_log = * imap_id_send = * imap_idle_notify_interval = 2 mins imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k mail_max_userip_connections = 10 mail_plugins = } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 } I can telnet to the Managesieve server and it also works with Roundcube but whatever the sieve script contains, nothing happens. I've also looked into the logs but cannot find any errors related to this... TIA Wexi -- * Veikko "Wexi" Skurnik: +358(44)5288338 * * wexi(a)wexin.net Wexi@IRCNet wexi79@skype * * Rudolf Koivun tie 191 38250 Sastamala * * "Kosminen balanssi ei saa järkkyä" *

2 2

Re: [Dovecot] Patch for vpopmail roaming users support
by Nicolas Croiset (Campus Grenoble 90,8) 07 Jul '11

07 Jul '11

Hi Matt, I try on my setup the patch you made last month and the /home/vpopmail/etc/open-smtp leaves empty. If I go back with the vpopmail mode, it is working. I don't understand what's happened really. Bye. -- +------------------------------------------------------------+ | E-mail : Nicolas.Croiset(a)brume.org | | Annuaire des radios AM/FM/DMB : http://www.annuradio.fr/ | +------------------------------------------------------------+

1 0

[Dovecot] Logging a special message into Dovecot source code
by Meisam Navaki 06 Jul '11

06 Jul '11

Hi, I wanna modify Dovecot source code.For that,I need to know how can we log a special message into Dovecot source code? I tried to write a function to write a message in a file and added it to Dovecot source code,but it didn't work. I'm wondering if we can use Dovecote logging functions,but I don't know what are those functions and how can we use them. Thanks in advance. -- *Regards Meisam Navaki Arefi, * *System Programmer, * ** *Bayan Co. * * *

2 2

[Dovecot] Public Mailbox & ACLs
by Tom Clark 06 Jul '11

06 Jul '11

Hi, I'm having a problem I can't get my head around. I'm trying to setup a public mailbox that is hidden from all users unless granted access through an ACL. My folder structure is (migrated from a Courier IMAP/Qmail server): /var/spool/maildir - main public folder (contains a few .qmail files to redirect mail to the correct subfolder) /var/spool/maildir/Support - support public folder (a public folder rather than a maildir) /var/spool/maildir/Support/.SubFolder1 - support sub folder 1 (a maildir) /var/spool/maildir/Support/.SubFolder2 - support sub folder 2 (another maildir) /var/spool/maildir/System /var/spool/maildir/System/.SubFolder1 /var/spool/maildir/System/.SubFolder2 I couldn't get the namespace working correctly to just have 1 folder called "Shared" (you just got an empty folder when trying to subscribe). I ended up making 2 namespaces below: namespace { type = public separator = . prefix = Shared.Support. location = maildir:/var/spool/maildir/Support:INDEX=~/Maildir/Support subscriptions = no } namespace { type = public separator = . prefix = Shared.System. location = maildir:/var/spool/maildir/System:INDEX=~/Maildir/System subscriptions = no } This allowed me to get the result I was looking for. Using an ACL I get a Shared->Support/System->Subfolders view. However the problem is when a user is not in the ACL they can still see the Shared->Support/System folders (just none of the subfolders) and obviously can't subscribe. Could someone let me know what I am doing wrong and if there is a better way of doing this? Many thanks, Tom

2 8

[Dovecot] sieve problem email silently discard
by ml＠smtp.fakessh.eu 06 Jul '11

06 Jul '11

hello folks hello Timo hello all the guru I met a few times the problem or an email that passes through a sieve script is silently discard after delivery but never returned to the inbox all testimonials are welcome my dovecot -n ~]# /usr/sbin/dovecot -n # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32.2-xxxx-grs-ipv6-32 i686 CentOS release 5.6 (Final) auth_mechanisms = plain login base_dir = /var/run/dovecot/ lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = [::] log_path = /var/log/maillog log_timestamp = %Y-%m-%d %H:%M:%S login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_debug = yes mail_location = maildir:~/Maildir mail_max_userip_connections = 20 managesieve_notify_capability = mailto managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus virustest namespace { inbox = yes location = prefix = separator = . } passdb { driver = pam } plugin { autocreate = Trash autocreate2 = Junk autocreate3 = Sent autocreate4 = Drafts autosubscribe = Trash autosubscribe2 = Junk autosubscribe3 = Sent autosubscribe4 = Drafts plugin = $mail_plugins autocreate managesieve sieve sieve = ~/.dovecot.sieve sieve_before = /var/sieve-scripts/roundcube.sieve sieve_dir = ~/sieve sieve_global_path = whatever } protocols = sieve imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0600 user = postfix } unix_listener auth-master { mode = 0666 } unix_listener auth-userdb { mode = 0666 } vsz_limit = 64 M } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { address = * , [::] port = 993 } process_limit = 128 vsz_limit = 64 M } service imap { client_limit = 1 service_count = 0 } service managesieve-login { inet_listener managesieve-login { address = * , [::] port = 2000 } process_limit = 128 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { address = * , [::] port = 995 } process_limit = 128 vsz_limit = 64 M } ssl_ca = </etc/pki/tls/certs/class3.crt ssl_cert = </etc/pki/tls/certs/r13151.ovh.net.cert ssl_key = </etc/pki/tls/private/r13151.ovh.net.key ssl_verify_client_cert = yes userdb { driver = passwd } version_ignore = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_max_line_length = 64 k mail_plugins = " autocreate" } protocol pop3 { mail_plugins = autocreate pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s } protocol lda { hostname = r13151.ovh.net mail_plugins = autocreate sieve postmaster_address = postmaster(a)fakessh.eu sendmail_path = /usr/lib/sendmail } protocol sieve { managesieve_implementation_string = dovecot managesieve_logout_format = bytes ( in=%i : out=%o ) managesieve_max_line_length = 65536 } egrep lda /var/Log/maillog 2011-07-03 19:47:15lda: Debug: Loading modules from directory: /usr/lib/dovecot 2011-07-03 19:47:15lda: Debug: Module loaded: /usr/lib/dovecot/lib20_autocreate_plugin.so 2011-07-03 19:47:15lda: Debug: Module loaded: /usr/lib/dovecot/lib90_sieve_plugin.so 2011-07-03 19:47:15lda(fakessh): Debug: Effective uid=500, gid=100, home=/home/fakessh 2011-07-03 19:47:15lda(fakessh): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir 2011-07-03 19:47:15lda(fakessh): Debug: maildir++: root=/home/fakessh/Maildir, index=, control=, inbox=/home/fakessh/Maildir 2011-07-03 19:47:15lda(fakessh): Debug: Namespace : Using permissions from /home/fakessh/Maildir: mode=0775 gid=-1 2011-07-03 19:47:15lda(fakessh): Debug: userdb lookup skipped, username taken from USER environment 2011-07-03 19:47:15lda(fakessh): Debug: none: root=, index=, control=, inbox= 2011-07-03 19:47:15lda(fakessh): Debug: Destination address: fakessh(a)r13151.ovh.net (source: user@hostname) 2011-07-03 19:47:15lda(fakessh): Debug: sieve: using sieve path for user's script: /home/fakessh/.dovecot.sieve 2011-07-03 19:47:15lda(fakessh): Debug: sieve: executed before user's script(1): /var/sieve-scripts/roundcube.sieve 2011-07-03 19:47:15lda(fakessh): Debug: sieve: opening script /var/sieve-scripts/roundcube.sieve 2011-07-03 19:47:15lda(fakessh): Debug: sieve: script binary /var/sieve-scripts/roundcube.svbin successfully loaded 2011-07-03 19:47:15lda(fakessh): Debug: sieve: binary save: not saving binary /var/sieve-scripts/roundcube.svbin, because it is already stored 2011-07-03 19:47:15lda(fakessh): Debug: sieve: executing script from /var/sieve-scripts/roundcube.svbin 2011-07-03 19:47:15lda(fakessh): Info: sieve: msgid=<6EBEE5FC-62B1-4C73-B26E-DEBFD6E26DB6(a)shorewall.net>: marked message to be discarded if not explicitly delivered (discard action) -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7 gpg --keyserver pgp.mit.edu --recv-key 092164A7

3 6

[Dovecot] share an IMAP folder ?
by Frank Bonnet 06 Jul '11

06 Jul '11

Hello Is it possible to share an Imap folder for a user with another one ? user a > imap-folder1 ^ user b >------| Could user a share his folder "imap-folder1" with user b in readonly mode ? I use "real" users ( not virtuals ) Thanks a lot.

5 4

[Dovecot] Problems with acl and shared namespace
by Udo Lembke 06 Jul '11

06 Jul '11

Hi, i'm a dovecot-newbie and also new at this mailinglist. I'm try to configure an mailserver with dovecot2, postfix and postfixadmin. At this time i struggle with acl and shared namespace. My goal is, that every user get an archive-area on an separate storage without quota (quota isn't running yet). With: namespace { type = private separator = / prefix = "archiv/%u/" location = maildir:/var/data/archiv/%d/%n:INDEX=/var/data/indexes/archiv/%u:LAYOUT=fs inbox = no subscriptions = yes list = yes } I see the folder, but i can't subscribe them (with thunderbird, or roundcube). With roundcube i can add a new folder below - so i use the trick autocreate5 = archiv/%u/archiv autosubscribe5 = archiv/%u/archiv This is as workaround ok - or is this a "must be"?. But the user should also be able to share parts of the archiv-mailbox with other users (partly on different domains). If i change the type of namespace to shared, i can't access the archiv-folder. The logfile shows problems with the acl (but also with private namespace): Jun 30 11:15:11 imap(test(a)example.com): Debug: Namespace : type=shared, prefix=archiv/test(a)example.com/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:/var/data/archiv/example.com/test:INDEX=/var/data/indexes/… Jun 30 11:15:11 imap(test(a)example.com): Debug: fs: root=/var/data/archiv/example.com/test, index=/var/data/indexes/archiv/test(a)example.com, control=, inbox= Jun 30 11:15:11 imap(test(a)example.com): Debug: acl: initializing backend with data: vfile Jun 30 11:15:11 imap(test(a)example.com): Debug: acl: acl username = test(a)example.com Jun 30 11:15:11 imap(test(a)example.com): Debug: acl: owner = 0 Jun 30 11:15:11 imap(test(a)example.com): Debug: acl vfile: Global ACL directory: (none) Jun 30 11:15:11 imap(test(a)example.com): Debug: Namespace : Using permissions from /var/data/mail/example.com/test: mode=0700 gid=-1 Jun 30 11:15:11 imap(test(a)example.com): Debug: acl vfile: file /var/data/archiv/example.com/test/dovecot-acl not found Jun 30 11:15:11 imap(test(a)example.com): Debug: autocreate: Failed to create mailbox archiv: Permission denied Jun 30 11:15:11 imap(test(a)example.com): Debug: Namespace archiv/test(a)example.com/: Using permissions from /var/data/archiv/example.com/test: mode=0700 gid=-1 Jun 30 11:15:11 imap(test(a)example.com): Debug: acl vfile: file /var/data/mail/example.com/test/dovecot-acl not found I'm wondering about "...dovecot-acl not found" because dovecot create an file "dovecot-acl-list" : # ls -l /var/data/archiv/example.com/test/ drwx------ 5 dovecot dovecot 4096 30. Jun 10:30 archiv -rw------- 1 dovecot dovecot 0 30. Jun 10:30 dovecot-acl-list Must the acl first initialized? My first try fails also: doveadm acl set -u test(a)example.com archiv/test(a)example.com/archiv test(a)example.com lrw doveadm(test(a)example.com): Fatal: Invalid ID: test(a)example.com Not clear for me, what kind of id doveadm needs... I use 2.0.13 for testing. I put my config at the end of the mail. I'm happy if someone can hit me in the right direction, where i make the mistake. Best regards Udo # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.39-2.slh.1-aptosid-amd64 x86_64 Debian wheezy/sid auth_debug = yes auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes auth_verbose_passwords = plain first_valid_gid = 119 first_valid_uid = 110 info_log_path = /var/log/dovecot.log last_valid_uid = 119 lda_mailbox_autocreate = yes mail_debug = yes mail_gid = 119 mail_plugins = acl autocreate quota mail_uid = 110 mbox_very_dirty_syncs = yes namespace { inbox = yes list = yes location = maildir:/var/data/mail/%d/%n:INDEX=/var/data/indexes/mail/%u:LAYOUT=fs prefix = separator = / subscriptions = yes type = private } namespace { inbox = no list = yes location = maildir:/var/data/archiv/%d/%n:INDEX=/var/data/indexes/archiv/%u:LAYOUT=fs prefix = archiv/%u/ separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = file:/var/data/dovecot/shared-mailboxes autocreate = Trash autocreate2 = Spam autocreate3 = Drafts autocreate4 = Sent autocreate5 = archiv/%u/archiv autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Drafts autosubscribe4 = Sent autosubscribe5 = archiv/%u/archiv quota = dict:User quota::proxy::quota quota_rule2 = Trash:storage=+55M sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postdrop mode = 0660 user = postfix } unix_listener auth-userdb { group = dovecot mode = 0660 user = dovecot } } service dict { unix_listener dict { group = dovecot mode = 0660 user = dovecot } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = acl autocreate quota } protocol lda { mail_plugins = acl autocreate quota } protocol imap { mail_plugins = acl autocreate quota acl imap_acl }

1 2

[Dovecot] Dovecot communication with sasl in dovecot source code
by Meisam Navaki 06 Jul '11

06 Jul '11

Hi all, I'm reading dovecot source codes(2.0.13),and I need to know how dovecot communicate with sasl? I traced the source code from cmd_login function,and found out something about sasl_callback. but i never found where this function called and also I couldn't understand how sasl inform the dovecot from authentication result. I'll be thankful if someone could help me out.

3 4

[Dovecot] proxying user logged in with master user
by Miguel Cabeça 06 Jul '11

06 Jul '11

Hello, I'm running dovecot 1.2.15 and I'm having a problem proxying a user to another host, when this user is logged in with a masteruser. I have two dovecot servers configured to serve half of the users locally and to proxy the other half to the other host. Proxying is done using the masteruser feature (username*proxy) and it works as expected as the following test shows: # nc localhost 143 * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=GSSAPI] Dovecot ready. 01 LOGIN ist90001 password_for_ist90001 01 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS QUOTA] Logged in ^C And the corresponding log entry: Jul 6 13:10:06 mail1 dovecot: imap-login: proxy(ist90001): started proxying to X.Y.Z.W:143/ist90001*proxy: user=<ist90001>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jul 6 13:10:09 mail1 dovecot: imap-login: proxy(ist90001): disconnecting 127.0.0.1 The ist90001 is proxied to the other host as expected and as configured. The problem occurs when I try to use another masteruser to log into the server: # nc localhost 143 * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=GSSAPI] Dovecot ready. 01 LOGIN ist90001*super password_for_super_masteruser 01 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS QUOTA] Logged in ^C But this time the user isn't proxied to the other host. Instead he is logged in this host: Jul 6 13:11:14 mail1 dovecot: imap-login: Login: user=<ist90001>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jul 6 13:11:16 mail1 dovecot: IMAP(ist90001): Connection closed bytes=0/292 Is this the intended behavior or a bug? I was expecting the user to be logged in with the password of the super masteruser, and then be proxied to the other host as it happens when the user is logged in with it's own password. I can provide any configuration details if needed. Best Regards Miguel Cabeça

1 0

[Dovecot] hardcoded patch for dovecot v2 - authentication (ldap ) and mail location configuration with domain determined by IP
by DaLiV＠apollo.lv 05 Jul '11

05 Jul '11

for hg changeset 12866:537d4b6d9a7a need help for creating/movement array "lip2user" in each code part to loadable settings array from configuration files in config must contain many rows by 3 fields : ip,ldapdn,resolved

1 0

[Dovecot] Invitation to connect on LinkedIn
by Carla Tironi Farinati via LinkedIn 05 Jul '11

05 Jul '11

LinkedIn ------------ Carla Tironi Farinati requested to add you as a connection on LinkedIn: ------------------------------------------ Michael A., I'd like to add you to my professional network on LinkedIn. - Carla Accept invitation from Carla Tironi Farinati http://www.linkedin.com/e/458g9e-gpr9bmdf-3e/V7LnuFRIQXpYNGb2yum6IE4IQU3ZkP… View invitation from Carla Tironi Farinati http://www.linkedin.com/e/458g9e-gpr9bmdf-3e/V7LnuFRIQXpYNGb2yum6IE4IQU3ZkP… ------------------------------------------ Why might connecting with Carla Tironi Farinati be a good idea? Carla Tironi Farinati's connections could be useful to you: After accepting Carla Tironi Farinati's invitation, check Carla Tironi Farinati's connections to see who else you may know and who you might want an introduction to. Building these connections can create opportunities in the future. -- (c) 2011, LinkedIn Corporation

1 0

[Dovecot] Converting from qpopper mbox to dovecot maildir
by list＠airstreamcomm.net 05 Jul '11

05 Jul '11

We have an older mail server using qpopper and the mbox format which we need to update to dovecot and maildir format. I have read through the docs on migrating from mbox to maildir, as well as a few nuggets on how to migrate from qpopper to dovecot, and I was wondering if I could get some suggestions on best practices for this specific migration. Would the built in dovecot conversion plugin be a viable method to migrate users? We will be migrating to dovecot 2.0.12 from qpopper 4.0.5. Thanks.

1 0

[Dovecot] Dovecot 2.0.13 file backend quota
by Christopher Stolzenberg 05 Jul '11

05 Jul '11

Hello, I want to set a uniform quota for each mailbox. (2000 MB per mailbox, no message limit) plugin { quota = dict:User quota::file:%h/Maildir/dovecot-quota quota_rule = *:storage=2000M quota_warning = storage=85%% quota-warning 85 %u protocol imap { mail_plugins = quota imap_quota } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = sieve quota } Is that enough or missing something? -- Christopher

1 0

[Dovecot] Dovecot 2.0.13 problem with LMTP
by Innocenzi, Cinzia 05 Jul '11

05 Jul '11

Hello, we have dovecot 2.0.13 installed in our RHEL5 servers. We use dovecot as a lmtp proxy on the front end mail relays and dovecot for back end lmtp/pop/imap. All our servers have RHEL5.6 64-bit and dovecot 2.0.13 installed, and the back end has also an ext3 mbox file-system mounted. Sometimes we have mails that get stuck on our postfix queue with the following error: Remote server not answering (timeout in DATA input) (in reply to end of DATA command) In our logs we only see the fact that the connection times out after 1 minute and gets disconnected: Jun 22 11:56:53 back-end dovecot: lmtp(3256): Connect from a.b.c.d Jun 22 11:57:53 back-end dovecot: lmtp(3256): Disconnect from a.b.c.d: Connection closed Jun 22 11:56:53 front-end dovecot: lmtp(16397): Connect from a.b.c.d Jun 22 11:57:53 front-end dovecot: lmtp(16397): Disconnect from a.b.c.d: Disconnected for inactivity We've tried to recalculate the mbox quota using "doveadm quota recalc -n ..." command and flushed our mail queue, but the mail still gets stuck on the postfix queue with the same error. It doesn't happen for every single mail, it's random. I'm attaching the output of dovecot -n for both servers. Can you please help us? Regards CINZIA INNOCENZI Technical Consulting HP Enterprise Services Telephone +39 06.6542.5758 Email cinzia.innocenzi(a)hp.com<mailto:cinzia.innocenzi@hp.com> Via Achille Campanile, 85 / Rome, Italy 00143 [cid:image001.jpg@01CC30D7.612C3210]

3 12

[Dovecot] imap idle and concurrent connections
by Wolfgang Rosenauer 05 Jul '11

05 Jul '11

Hi, in my testing dovecot (1.2 in that case) seems to not notify all idling clients about new "recent" mails but only one of them. The others get usually a message about the new number of mails after some time but never recent ones. Only one client gets notified about a new mail. Is that a known issue or something which might be configuration specific? Wolfgang

3 4

Re: [Dovecot] Exim and Dovecot2 SASL: 435 Unable to authenticate at present
by Sergey Urushkin 04 Jul '11

04 Jul '11

On Mon, 4 Jul 2011 12:38:01 +0200, Andraž 'ruskie' Levstik wrote: > :2011-06-28T21:38:Sergey Urushkin: > >> Hi. I had working Exim 4.71 and Dovecot 1.2.9 SASL configuration on >> Ubuntu >> Lucid, but needed some features from dovecot2, so I installed 2.0.13 >> from >> https://launchpad.net/~carsten-uppenbrink-net/+archive/dovecot2 . >> Now I get >> Subj error while trying to authenticate via dovecot auth-client >> socket. >> However IMAP auth works fine with 2.0.13 and smtp auth worked fine >> until >> upgrade, so I think there is something wrong with dovecot2. >> >> Dovecot logs stay empty even with auth_debug*, just one string >> "auth: Debug: >> Loading modules from bla...". But here is another information that >> may help. >> And if it's needed I can build dovecot myself to ensure that >> ppa-build isn't >> guilty. Or debug some another way. > > If this is still relevant. > > This has been fixed in a later than 4.71 exim - specifically > 4.72(current version is 4.76) so just upgrade and it will work. Thanks, it's working after upgrading. As you adviced, I wanted to check if the latest version works before posting exim bug report. Well, no bug - no report is needed. > > Regards -- Best regards, Sergey Urushkin

1 0

Re: [Dovecot] virtual users
by /dev/rob0 04 Jul '11

04 Jul '11

On Mon, Jul 04, 2011 at 02:58:34PM +0300, Amira Othman wrote: > Iam using dovecot-1.0.7-7.el5 and postfix-2.3.3-2.3.el5_6 on centos > 5.6 I want to configure mail server without system account .I can > send using the virtual account but can't receive and I have this in > log file > > relay=local, delay=0.02, delays=0.02/0/0/0, dsn=5.1.1, > status=bounced (unknown user: "hoda") This is a Postfix problem, not a Dovecot one. It says that the recipient domain is in this list: > mydestination = $myhostname, localhost.$mydomain, localhost, > $mydomain ... but the "hoda" user or alias does not exist in /etc/passwd nor /etc/aliases. See: http://www.postfix.org/VIRTUAL_README.html http://www.postfix.org/ADDRESS_CLASS_README.html The "upgrade" advice is very good. You should not be starting out with something so long past the end of its support. Follow up on Postfix issues on the Postfix list. However, your issue will probably be solved with some time in the documentation. -- Offlist mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header

1 1

Re: [Dovecot] virtual users
by Charles Marcus 04 Jul '11

04 Jul '11

On 2011-07-04 7:58 AM, Amira Othman wrote: > Iam using dovecot-1.0.7-7.el5 and postfix-2.3.3-2.3.el5_6 Need I say it? Upgrade. Both are now unsupported/EOL for a long time now... -- Best regards, Charles

1 0

Re: [Dovecot] Replication problem I have. And how I think I can get around problem.
by Peter Dolding 04 Jul '11

04 Jul '11

> Mon, 04 Jul 2011 10:46:31 Ed W > On 03/07/2011 07:20, Peter Dolding wrote: > > Now what I need to be able to deal with the problem. > > Have you considered a new Dovecot storage backend? I have plotted some > designs on a napkin a few times.. Consider some kind of storage server > with "eventually consistent" replication capabilities. This could be > used for the metadata storage for all the emails (ie FROM, TO, DATE, > SUBJECT and all the other non body parts you might search on) > Remember I am new to the Dovecot source code. How to code a Dovecot Storage backend it where I might have to start. Really I don't care if the servers are ever fully consistent other than the fact they both contain the same emails. Of course read status shared would be nice. If that status information is out so be it. "eventually consistent" is a deadly thing to try to aim for. Its a simple fact of what needs to be backed up. If a user is at one physical location all the time and connecting to the same server all the time they will not ever see that the 2 servers are not 100 percent synced. For my usage cases lot of times 100 percent synced will be more wasted effort. Roughly synced will be more than suitable. Of course what I am talking about can be used as an foundation to get data from point a to point b. > > Your replication engine can now work in conjunction with Dovecot to sync > changes between servers as quickly as possible, eg if desired implement > a two phase commit when the LDA delivers new emails, so that all storage > servers confirm they have received the new email. You could if you wish > implement quorum support (ie some server which was offline for some mail > deliveries proxies requests to another storage block until it's caught > up syncing) > You are missing something here. My sync's due to issues maybe chaos. So both servers may have been running split from each other both received emails the other has not had users accessing them. Both with users in using the web and local email clients. While all that is going on the servers have to sync. This is very much the worst case. I am sane. I am prepared to give up the users ability to change client programs between servers to make it be able to work. So IMAP unique identifies not be replicated ever. Basically any identifier that cannot be based of a server id + a unique number for server be only unique to the server its on. Basically I cannot ensure quickly and most of the time I don't really need that. As long as the email without breakage is not lost in the server for greater than 15 min without reaching person wanting to read it that would be fine for normal operations. This is still faster than exchange working with pop email accounts. Basically Ed W. I am saying this is the worst I can get away with in a working office. I have gone through the protocals I would most likely ever need to use from a business point of view. pop3 I know basically does not really give a stuff if what is hiding behind is multi master or single master. User might receive a few extra emails if they change between servers. Nothing system killing. As long as the user gets the emails in the end that is the important bit if they a copy for each server bad luck at least they got the email. Too many copies is not a issue from business point of view not getting the copy in the first place is an issue. smtp messages directly from multi locations outgoing does not give a stuff. imap4 who ever invented this protocol for what I want todo I fell like strangling. The id system completely sends you to hell. Business point of view this might be a issue if uses change between servers due to having to download everything again. activesync/Z-push Ok nice. ID are 64 char in size with no defined contents. No ascending order no trouble basically. So nothing stopping me doing server_id:then unique number. So that is most mobile devices covered. Message might disappear when moving between not totally synced servers. Message will catch up as syncs do. So from business usage annoying but issue is not long lasting. Ie custom backend on Z-push and mobile devices will work mostly fine with chaos between the storage servers. MAPI is 64 chars to 512 chars. for ID's. Again nothing in protocol stopping server_id:then unique number. Web applications much of a muchness. Since either they will connect to the same server as the http server at each location so be protected or can be hooked onto a new protocol to know they are connecting to a multi server back end and detect if there are issues going on. Mostly as bad as activesync if you change between hosting locations email syncs might not have caught up with you so a message might disappear temp. So only imap4 is requiring syncing so ids are in order. Question does everyone need imap4 server locations to be interchangeable. I know I don't. Since most people out the office either use web mail or activesync. Only in office will be using imap4. Now I cannot see any fast sane way for imap4 for other than make it id only unique to each server and maybe create like imap 5 for multi server with the option to run locally as a imap5 to imap4 converter. Reason you ask server when it synced with X server and you find out that is older than the copies you have you don't replace. So the client is hiding server to server sync issues. Sometimes the best solution is look at everything and see what is limiting you and deprecate it. If we don't need id aligned we don't need real-time connection. We don't need as reliable of an network. So failures are less. I guess everyone who has tried to sync has attempted to battle the imap protocal. I am mostly the first strange person who has said stuff syncing imap and just go straight past its defect and make the storage work. Simple fault in imap design make the complete back end replication a pain in but when it should be so simple. I have decided of someone else wants imap to be synced let that be their problem. Simple each location stores what they receive. and forwards to all other locations as those locations come on line and the other locations do the reverse. I like the idea of natural event syncing. That the items pure naturally sync with each other. No reprocessing to force syncing due to least amount conflicting data created. Possible for pop MAPI and activesync/Z-push todo natural syncing. IMAP the evil thing just does not want to play ball with natural syncing and it wants to set up events of conflicting data. IMAP might force a real-time synced server in some cases. A master server handing out IMAP id numbers for new messages is one possibility so removing the need change id's on the mail after it is stored. If my web interfaces are using something other than IMAP I could possibly say use webmail until fixed. Worst issues I can see is message read status and other times like that. Where user might have marked a message unread at X on one server and at Y time marked it back read on a different server. But these are more niggles. Better to have the users annoyed by minor niggles and working than unable to work because its broken. Dependable replications the more parts you use the more areas you have for failure. So far my research on what is possible seams to be coming out to reasonable. Hopefully once I have this idea fully ironed out I can start getting into code. I rarely code. But this is a true case I have a problem so I have motivation. Peter Dolding

1 0

[Dovecot] virtual users
by Amira Othman 04 Jul '11

04 Jul '11

Hello All; Iam using dovecot-1.0.7-7.el5 and postfix-2.3.3-2.3.el5_6 on centos 5.6 I want to configure mail server without system account .I can send using the virtual account but can't receive and I have this in log file relay=local, delay=0.02, delays=0.02/0/0/0, dsn=5.1.1, status=bounced (unknown user: "hoda") my main.cf is myhostname = mail.domain.com mydomain = mydomain.com myorigin = $mydomain inet_interfaces = all mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain mynetworks = *.*.*.*/24, 127.0.0.0/8 relay_domains = home_mailbox = Maildir/ #home_mailbox = Mailbox/ alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases mail_spool_directory = /var/spool/mail #SASL configuration smtpd_sasl_auth_enable = yes broken_sasl_auth_clients = yes smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous #permit SASL suthentication is added smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_destination smtpd_sender_restrictions = reject_unknown_sender_domain smtpd_sasl_local_domain = smtpd_sasl_authenticated_header = yes smtpd_tls_auth_only = no smtp_use_tls = yes smtpd_use_tls = yes smtp_tls_note_starttls_offer = yes smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout = 3600s tls_random_source = dev:/dev/urandom mailbox_command = /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME #Hide the login banner smtpd_banner = $myhostname ESMTP #Disable verify function and using of TLS transport encryption between server and client disable_vrfy_command = yes virtual_mailbox_base = /home/vmail/ virtual_mailbox_maps = hash:/etc/postfix/virtual virtual_uid_maps = static:511 virtual_gid_maps = static:512 virtual_alias_maps = hash:/etc/postfix/virtual sender_bcc_maps = hash:/etc/postfix/bcc my dovecot.conf if ## Dovecot configuration file protocols = imap imaps pop3 pop3s disable_plaintext_auth = no shutdown_clients = yes ## ## Logging ## log_path = /var/log/dovecot.log ## ## SSL settings ## ## ## Login processes ## mail_location = maildir:~/Maildir ## ## IMAP specific settings ## protocol imap { # list of plugins to load. mail_plugins = quota imap_quota #mail_plugin_dir = /usr/lib/dovecot/imap # The list is space-separated. #imap_client_workarounds = outlook-idle imap_client_workarounds = delay-newmail outlook-idle netscape-eoh } ## ## POP3 specific settings ## protocol pop3 { pop3_uidl_format = %08Xu%08Xv # Required on x86_64 kernels login_process_size = 64 # list of plugins to load. mail_plugins = quota #pop3_client_workarounds = pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } ## ## LDA specific settings ## protocol lda { # Address to use when sending rejection mails. postmaster_address = postmaster(a)example.com } ## ## Authentication processes ## # Executable location #auth_krb5_keytab = auth default { # NOTE: See also disable_plaintext_auth setting. mechanisms = plain login # authentication to actually work. <doc/wiki/PasswordDatabase.PAM.txt> passdb pam { } passdb passwd-file { # Path for passwd-file args = /etc/dovecot/passwd } userdb passwd { } userdb static { args = uid=511 gid=512 home=/home/vmail/%d/%n } user = root socket listen { client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } dict { #quota = mysql:/etc/dovecot-dict-quota.conf } ## ## Plugin settings ## plugin { } Amira Othman Server Administrator <http://www.cairosource.com/> www.cairosource.com 6 EL Nil EL Abyad, Mohandiseen Cairo, Egypt Direct: +2 02 3303 7175 Mobile: +2 012 220 4165 The information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer.

1 0

[Dovecot] Exim and Dovecot2 SASL: 435 Unable to authenticate at present
by Sergey Urushkin 04 Jul '11

04 Jul '11

Hi. I had working Exim 4.71 and Dovecot 1.2.9 SASL configuration on Ubuntu Lucid, but needed some features from dovecot2, so I installed 2.0.13 from https://launchpad.net/~carsten-uppenbrink-net/+archive/dovecot2 . Now I get Subj error while trying to authenticate via dovecot auth-client socket. However IMAP auth works fine with 2.0.13 and smtp auth worked fine until upgrade, so I think there is something wrong with dovecot2. Dovecot logs stay empty even with auth_debug*, just one string "auth: Debug: Loading modules from bla...". But here is another information that may help. And if it's needed I can build dovecot myself to ensure that ppa-build isn't guilty. Or debug some another way. Thanks. dovecot -n: # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-31-server x86_64 Ubuntu 10.04.2 LTS auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login apop auth_verbose = yes disable_plaintext_auth = no first_valid_gid = 8 first_valid_uid = 8 hostname = mail.domain.lan last_valid_gid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * mail_gid = mail mail_location = maildir:~/ mail_plugins = " quota trash" mail_privileged_group = mail mail_uid = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = scheme=CRAM-MD5 username_format=%n /etc/dovecot/passwd.d/%d.passwd driver = passwd-file } plugin { autocreate = Trash autocreate2 = Junk autocreate3 = Drafts autocreate4 = Templates autocreate5 = Sent autosubscribe = Trash autosubscribe2 = Junk autosubscribe3 = Drafts autosubscribe4 = Templates autosubscribe5 = Sent quota = maildir:user quota quota_rule = *:storage=200M sieve = ~/dovecot.sieve sieve_dir = ~/sieve trash = /etc/dovecot/dovecot-trash.conf.ext } postmaster_address = postmaster(a)domain.lan protocols = " imap sieve pop3 sieve" service auth { unix_listener auth-client { mode = 0600 user = Debian-exim } unix_listener auth-userdb { mode = 0600 user = mail } } service managesieve-login { inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = username_format=%n /etc/dovecot/passwd.d/%d.passwd driver = passwd-file } protocol lda { mail_plugins = " quota trash sieve" } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags mail_plugins = " quota trash imap_quota" } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } ################## swaks --to test(a)domain.lan --from=test(a)domain.lan --auth --auth-user=test(a)domain.lan --auth-password=111111 --server 127.0.0.1 -tlsc: (the same without tls, apop) === Trying 127.0.0.1:465... === Connected to 127.0.0.1. === TLS started w/ cipher DHE-RSA-AES256-SHA <~ 220 mail.domain.lan, ESMTP ready ~> EHLO mail.domain.lan <~ 250-mail.domain.lan Hello mail.domain.lan [127.0.0.1] <~ 250-SIZE 26214400 <~ 250-PIPELINING <~ 250-AUTH PLAIN LOGIN <~ 250 HELP ~> AUTH LOGIN <~* 435 Unable to authenticate at present ~> AUTH PLAIN AHRlc3RAZG9tYWluLmxhbgAxMTExMTE= <~* 435 Unable to authenticate at present *** No authentication type succeeded ~> QUIT <~ 221 mail.domain.lan closing connection === Connection closed with remote host. ##################### exim -d+auth output: Exim version 4.71 uid=0 gid=0 pid=29270 D=fbb95cfd Berkeley DB: Berkeley DB 4.8.24: (August 14, 2009) Support for: crypteq iconv() IPv6 PAM Perl Expand_dlfunc GnuTLS move_frozen_messages Content_Scanning DKIM Old_Demime Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql sqlite Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp Fixed never_users: 0 Size of off_t: 8 GnuTLS compile-time version: 2.8.5 GnuTLS runtime version: 2.8.5 changed uid/gid: forcing real = effective uid=0 gid=0 pid=29270 auxiliary group list: <none> seeking password data for user "root": cache not available getpwnam() succeeded uid=0 gid=0 configuration file is /etc/exim4/exim4.conf log selectors = 0000cefe 00233821 cwd=/ 4 args: /usr/sbin/exim4 -bd -q30m -d+auth trusted user admin user seeking password data for user "Debian-exim": cache not available getpwnam() succeeded uid=103 gid=105 seeking password data for user "Debian-exim": using cached result getpwnam() succeeded uid=103 gid=105 seeking password data for user "mail": cache not available getpwnam() succeeded uid=8 gid=8 originator: uid=0 gid=0 login=root name=root 29270 LOG: MAIN 29270 IPv6 socket creation failed: Address family not supported by protocol 29270 LOG: MAIN 29270 Failed to create IPv6 socket for wildcard listening (Address family not supported by protocol): will use IPv4 29270 listening on all interfaces (IPv4) port 25 29270 LOG: MAIN 29270 IPv6 socket creation failed: Address family not supported by protocol 29270 LOG: MAIN 29270 Failed to create IPv6 socket for wildcard listening (Address family not supported by protocol): will use IPv4 29270 listening on all interfaces (IPv4) port 465 29270 pid written to /var/run/exim4/exim.pid 29270 changed uid/gid: running as a daemon 29270 uid=103 gid=105 pid=29270 29270 auxiliary group list: 105 999 29270 LOG: MAIN 29270 exim 4.71 daemon started: pid=29270, -q30m, listening for SMTP on port 25 (IPv4) and for SMTPS on port 465 (IPv4) 29270 set_process_info: 29270 daemon: -q30m, listening for SMTP on port 25 (IPv4) and for SMTPS on port 465 (IPv4) 29270 daemon running with uid=103 gid=105 euid=103 egid=105 29270 SIGALRM received 29270 1 queue-runner process running 29270 Listening... 29271 Starting queue-runner: pid 29271 29271 exec /usr/sbin/exim4 -q 29270 child 29271 ended: status=0x0 29270 0 queue-runner processes now running 29270 Listening... 29270 Connection request from 127.0.0.1 port 58341 29270 search_tidyup called 29270 1 SMTP accept process running 29270 Listening... 29279 sender_fullhost = [127.0.0.1] 29279 sender_rcvhost = [127.0.0.1] 29279 Process 29279 is handling incoming connection from [127.0.0.1] 29279 host in host_lookup? no (option unset) 29279 set_process_info: 29279 handling incoming connection from [127.0.0.1] I=[127.0.0.1]:465 29279 initializing GnuTLS as a server 29279 read D-H parameters from file 29279 initialized D-H parameters 29279 certificate file = /etc/ssl/certs/dovecot.pem 29279 key file = /etc/ssl/private/dovecot.pem 29279 initialized certificate stuff 29279 host in tls_verify_hosts? no (option unset) 29279 host in tls_try_verify_hosts? no (option unset) 29279 initialized GnuTLS session 29279 gnutls_handshake was successful 29279 cipher: TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32 29279 host in host_reject_connection? no (option unset) 29279 duplicate IP address 127.0.0.1 (MX=-1) removed 29279 gethostbyname2 looked up these IP addresses: 29279 name=localhost address=::1 29279 name=localhost address=127.0.0.1 29279 host in sender_unqualified_hosts? yes (matched "localhost") 29279 duplicate IP address 127.0.0.1 (MX=-1) removed 29279 gethostbyname2 looked up these IP addresses: 29279 name=localhost address=::1 29279 name=localhost address=127.0.0.1 29279 host in recipient_unqualified_hosts? yes (matched "localhost") 29279 host in helo_verify_hosts? no (option unset) 29279 host in helo_try_verify_hosts? no (option unset) 29279 host in helo_accept_junk_hosts? no (option unset) 29279 SMTP>> 220 mail.domain.lan, ESMTP ready 29279 tls_do_write(7f10202175a0, 31) 29279 gnutls_record_send(SSL, 7f10202175a0, 31) 29279 outbytes=31 29279 Process 29279 is ready for new message 29279 smtp_setup_msg entered 29279 Calling gnutls_record_recv(7f102023f0c0, 7f1020241e40, 4096) 29279 SMTP<< EHLO mail.domain.lan 29279 mail.domain.lan in helo_lookup_domains? no (end of list) 29279 sender_fullhost = (mail.domain.lan) [127.0.0.1] 29279 sender_rcvhost = [127.0.0.1] (helo=mail.domain.lan) 29279 set_process_info: 29279 handling TLS incoming connection from (mail.domain.lan) [127.0.0.1] I=[127.0.0.1]:465 29279 host in pipelining_advertise_hosts? yes (matched "*") 29279 host in auth_advertise_hosts? yes (matched "*") 29279 tls_do_write(7f10202229c8, 119) 29279 gnutls_record_send(SSL, 7f10202229c8, 119) 29279 outbytes=119 29279 SMTP>> 250-mail.domain.lan Hello mail.domain.lan [127.0.0.1] 29279 250-SIZE 26214400 29279 250-PIPELINING 29279 250-AUTH PLAIN LOGIN 29279 250 HELP 29279 Calling gnutls_record_recv(7f102023f0c0, 7f1020241e40, 4096) 29279 SMTP<< AUTH LOGIN 29279 dovecot authentication 29279 received: VERSION 1 1 29279 received: MECH PLAIN plaintext 29279 received: MECH LOGIN plaintext 29279 received: MECH APOP private dictionary active 29279 received: SPID 29280 29279 received: CUID 1 29279 received: COOKIE cf735efce15b21bbb10568c4a762017c 29279 SMTP>> 435 Unable to authenticate at present 29279 tls_do_write(7f10202175a0, 39) 29279 gnutls_record_send(SSL, 7f10202175a0, 39) 29279 outbytes=39 29279 LOG: MAIN REJECT 29279 auth_login authenticator failed for (mail.domain.lan) [127.0.0.1] I=[127.0.0.1]:465: 435 Unable to authenticate at present: authentication socket protocol error 29279 Calling gnutls_record_recv(7f102023f0c0, 7f1020241e40, 4096) 29279 SMTP<< AUTH PLAIN AHRlc3RAZG9tYWluLmxhbgAxMTExMTE= 29279 host in smtp_accept_max_nonmail_hosts? yes (matched "*") 29279 dovecot authentication 29279 received: VERSION 1 1 29279 received: MECH PLAIN plaintext 29279 received: MECH LOGIN plaintext 29279 received: MECH APOP private dictionary active 29279 received: SPID 29280 29279 received: CUID 2 29279 received: COOKIE 06f8b3d9441b40b4069f53cdd0d128a4 29279 SMTP>> 435 Unable to authenticate at present 29279 tls_do_write(7f10202175a0, 39) 29279 gnutls_record_send(SSL, 7f10202175a0, 39) 29279 outbytes=39 29279 LOG: MAIN REJECT 29279 auth_plain authenticator failed for (mail.domain.lan) [127.0.0.1] I=[127.0.0.1]:465: 435 Unable to authenticate at present: authentication socket protocol error 29279 Calling gnutls_record_recv(7f102023f0c0, 7f1020241e40, 4096) 29279 SMTP<< QUIT 29279 SMTP>> 221 mail.domain.lan closing connection 29279 tls_do_write(7f10202175a0, 37) 29279 gnutls_record_send(SSL, 7f10202175a0, 37) 29279 outbytes=37 29279 tls_close(): shutting down TLS 29279 LOG: smtp_connection MAIN 29279 SMTP connection from (mail.domain.lan) [127.0.0.1] I=[127.0.0.1]:465 closed by QUIT 29279 search_tidyup called 29270 child 29279 ended: status=0x0 29270 0 SMTP accept processes now running 29270 Listening... -- Best regards, Sergey Urushkin

3 2

[Dovecot] Replication problem I have. And how I think I can get around problem.
by Peter Dolding 04 Jul '11

04 Jul '11

I have two servers in two different locations. Neither what you would call 100 percent safe from being turned off. Most staff use web based email. This backs onto imap server. I do know I will have to deal with contact lists and other items. in that client. Worst part is the link between them may get broken so both servers may be receiving email and back active at the same time. I can see 1 very clear way around this problem. If I accept that the imap ids at each of the server will be that server only. Since users are mostly using webbased they are not going to notice. If they do notice because they have connected to a different domain address stiff bad luck. Now what I need to be able to deal with the problem. 1 a unique server id on each message for the server the message was received on. 1 a unique server receive id for each message as imap like id for service recieved messages for message received directly not synced. 1 logs for messages deleted and changes that are not current server server id. This should be pritty simple todo. Basically 1 log per server flushed when synced with the server it owns to. 1 a sync function that deletes and changes messages that have been deleted or changed at other locations and compares other servers current messages against copies retained at the mirroring location. Now with this. Each new message to each store gets the next imap id along with system wide unique combination of sever id and service receive id. No modifications of already recieved messages ids. Since I am not careing if the imap id are matched between servers. Fairly much able to use a custom for of imap syncing working off the server id's and server receive ids. Of course this solution should be fairly fault torrent. Since each server can directly store any message they receive. Also it should be possible to trace back to what server the message came from in case of spam problems or equal. Now my biggest problem can I attach my own custom attributes to incoming mail to the store and access that information effectively. Since with that information I will be able to do a form of live synced storage. Personally I see imap id design as a defect in protocal since it never allowed server id along with it this is why imap 100 percent synced message stores cannot be run on independent servers with unstable network connects well. Nothing comes without a price. This solution does not require clustered file systems or a constant active connection between servers so able to operate in areas of disruption. It does not block the servers from receiving emails at any time either. Problem is of course is if someone connects a client directly from 1 server to another. Mail will have to be re-downloaded. Also I have to check of z-push/ActiveSync depends on the imap ids being dependable across the network if not most hand held devices will not be a problem. If it don't then only imap has a problem. I can live with that. Ie if local email server down use web mail until local mail server is fixed. Old rule of networking 40 to 50 percent functional network staff can normally still get stuff done. 0 percent functional you have downtime. Now if I can get the email storage fault torrent and to remain operational in case of fault I then can focus on getting the web base applications using a equal system for contacts and other things. So each location can remain fairly operational no matter what. This way if a server disappeared for good only thing that would have to be changed is syncing. Wise move is to allow servers to be defined more than 1 server id. Ie a server gone for good remaining server gets told to take over responsibility for the old servers id messages. New replacement server given a new id and everything keeps on going nice. Anyone else with a better idea or advice how to add my own custom ids in a way they cannot be distrupted and are simple to search. If it works push for server id's in imap5? Ie imap5 clients being able to cope with the event that an email store is spreed between multi servers that may not be connected all the time. Peter Dolding

2 1