- dovecot - dovecot.org

[Dovecot] LDAP Authentication with multiple independent domains
by Alex Cherniak 20 Apr '11

20 Apr '11

Is it possible to authenticate users against multiple independent AD domains? In my dovecot-ldap.conf I entered two hosts: hosts = host1 host 2 auth_bind_userdn = %d\%n ldap_version = 3 base = cn=users,dc=%d,dc=net auth_bind = yes but OpenLDAP seems to stop authentication as soon as the first host succeeds or fails. I also tried to configure trust between the two, but it didn't work either. Please help...

2 1

[Dovecot] LDA null logging patch
by Joseph Tam 20 Apr '11

20 Apr '11

I don't really need logging of successful local deliveries since the MTA provides enough data. I can't get rid of LDA delivery logs by setting deliver_log_format = All this does is produce an empty log message e.g. Apr 16 01:22:05 dserver dovecot: lda(user): Timo, would you consider inclusion of this patch which will skip logging deliveries if deliver_log_format is empty: --- src/lib-lda/mail-deliver.c~ Sat Apr 16 01:27:23 2011 +++ src/lib-lda/mail-deliver.c Sat Apr 16 01:29:05 2011 @@ -100,2 +100,5 @@ + if (!(ctx->set->deliver_log_format) || !(*ctx->set->deliver_log_format)) + return; + va_start(args, fmt); Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Debug new emails?
by Beto Moreno 20 Apr '11

20 Apr '11

Hi guys. I would like to debug all the new emails arrive to the users mailbox, I have some issue with 1 users that claim that is losing some important emails. The issue that I are not logging to much info in dovecot, I had read the mail_log plugin wiki is not difficult to setup. I want to see went the users receive the new emails, because postfix have the log that say" "sent" from the envelop to the issue user, but I the user say that he didn't receive the email, check his emails and is true I didn't see those 2 emails that postfix send to the user mailbox. I check my spam server and is not blocking that envelop, the spam is not causing this. I'm using Centos 5.4 Postfix 2.3.x Dovecot 1.0.x,but reading mail_log plugin say that we need 1.2.x, can I still use this plugin or I have other options? Thanks!!!

3 3

[Dovecot] expire-tool skipping mailbox
by Alex Reinhart 20 Apr '11

20 Apr '11

Hello, I have dovecot set up with expire-tool to nuke Junk messages greater than 30 days old. On a server with many user accounts, it seems to work on most of them. However, on my user account, expire-tool skips my Junk folder entirely, despite it containing messages from January of this year. Here is the expire-tool --test output: Info: alex(a)scienceforums.net/Junk: timestamp 1284027481 (Thu Sep 9 05:18:01 2010) -> 1304023056 (Thu Apr 28 15:37:36 2011) Then it skips to the next mailbox. (Note that I intentionally set the timestamp back to force it to consider my mailbox.) I don't understand why it doesn't want to expunge my 2700 junk messages when it will expunge several thousand in other accounts happily. The expire plugin has been enabled for probably over a year, so all of the messages should be tracked. My only hypothesis is that it has something to do with variables in the mail_location; however, mail_location should be overridden by a user_query, though that contains variables too. Would this account for the issue? It seems unlikely, since other users on the server work just fine. dovecot -n output for the interested: # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-24-server x86_64 Ubuntu 10.04.2 LTS ext3 base_dir: /var/run/dovecot/ log_timestamp: %Y-%m-%d %H:%M:%S protocols: managesieve imaps pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 listen(managesieve): * ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_listen(managesieve): login_dir: /var/run/dovecot//login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login first_valid_uid: 150 last_valid_uid: 150 mail_privileged_group: mail mail_location: maildir:/var/vmail/%d/%u mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota expire mail_plugins(imap): quota imap_quota expire mail_plugins(pop3): quota expire mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve lda: mail_plugins: quota sieve expire postmaster_address: postmaster(a)xyloid.org sendmail_path: /usr/lib/sendmail auth_socket_path: /var/run/dovecot/auth-master sieve_global_path: /etc/dovecot/sieve.global auth default: user: nobody passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: quota: dict:user::proxy::quotadict quota_rule: *:storage=1G quota_rule2: Trash:storage=10%% quota_rule3: Junk:ignore sieve: /var/vmail/%d/%n/dovecot.sieve expire: Trash 7 Trash/* 7 Junk 30 expire_dict: proxy::expire dict: quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf expire: mysql:/etc/dovecot/dovecot-dict-expire.conf And dovecot-dict-expire.conf: connect = host=localhost dbname=mail user=mail password=[password] map { pattern = shared/expire/$user/$mailbox table = expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } } Thanks. - Alex Reinhart

2 2

[Dovecot] sieve-test ignores precedence and other for vacation
by Burckhard Schmidt 20 Apr '11

20 Apr '11

Hello, I'm using pigeonhole-0.2.3, it works fine. I tried to verify some build in checks of vacation concerning precedence or auto-submitted header lines. It looks like sieve-test ignores header lines like Auto-Submitted: auto-submitted Precedence: bulk Return-Path: MAILER-DAEMON@... if I have a vacation script like require ["vacation", "regex", "fileinto", "variables", "envelope"]; if allof (header :regex ["to"] ["address1", "address2"], header :matches "to" "*") { vacation :days 7 : ... "text"; } The email to test contains a line like Precedence: bulk or Return-Path: <MAILER-DAEMON@...> or Auto-Submitted: yes sieve-test -D -C script.sieve mail I get Performed actions: * send vacation message: => seconds : 604800 ... text of vacation message END MESSAGE Implicit keep: * store message in folder: INBOX sieve-test(root): Info: final result: success -- Regards --- Burckhard Schmidt

2 1

[Dovecot] sieve logging
by Carsten Laun-De Lellis 20 Apr '11

20 Apr '11

Hi all I have installed dovecot 2.0.8 and sieve. Everything works fine, but I wonder how can I log sieve actions? Any help? Mit freundlichem Gruß Carsten Laun-De Lellis Dipl.-Ing. Elektrotechnik Certified Information Systems Auditor (CISA) Hauptstrasse 13 D-67705 Trippstadt Phone: +49 (6306) 992140 Mobile: +49 (151) 27530865 email: <mailto:carsten.delellis@delellis.net> carsten.delellis(a)delellis.net

2 1

[Dovecot] Question about Outlook workarounds
by Michael Durket 19 Apr '11

19 Apr '11

Do the Outlook workarounds in Dovecot 1.x still apply to current versions of Outlook? Or has Microsoft fixed Outlook such that workarounds are no longer needed in Dovecot (and if so, after what version of Outlook can I remove the workaround settings in my dovecot.conf file)?

6 5

[Dovecot] Outlook double attachments
by Ladislav Pašek 19 Apr '11

19 Apr '11

Hello, does anybody have experience with delivery of double attachments into Outlook? I suppose that this would be a problem of Outlook 2010 but to be sure I'd like to ask here as we are using Dovecot 2.0.11 Best Regards Ladislav

2 1

Re: [Dovecot] Solaris hardware crypto engines
by Chris Hoogendyk 19 Apr '11

19 Apr '11

The attachment made the message too long for the forum. So I canceled the original. If you want the Sun article, you can google 05071387.pdf. The original went through to Martin. On 4/18/11 5:02 PM, Chris Hoogendyk wrote: > On 4/18/11 6:30 AM, Martin Preen wrote: >> Hello, >> I tried to find out how about to use the hardware crypto engines under >> Solaris (Sun Fire T2000). It seems, that its not just a compilation issue: >> >>> For operations that are to be offloaded, it is necessary to restrict use to subset >> > of OpenSSL functions (the EVP_ functions) and explicitly indicate the use of the PKCS11 >> > engine; something like the following works for bulk ciphers (the process for RSA is similar): >>> >>> ENGINE *e; >>> ENGINE_load_builtin_engines(); >>> e = ENGINE_by_id("pkcs11"); >>> ENGINE_set_default_ciphers(e); >>> EVP_CIPHER_CTX_init (&ctx); >>> EVP_EncryptInit (&ctx, EVP_des_cbc (), key, iv); >>> EVP_EncryptUpdate (.....); >> >> Since I'm not familiar with SSL programming, I wonder if it's possible to >> modify the dovecot 1.2.x source code. Maybe someone has already tried this >> or can give me hint. > > You don't want to do that. > > The objective is for the ssl engine to be low level and basically invisible to layers of > application above that use it. So, build openssl properly and it just works for everything else. > > I'm not at work today, so I don't have reference to my notes. Ah, just found an email I sent to my > colleagues -- copied it below. -- --------------- Chris Hoogendyk - O__ ---- Systems Administrator c/ /'_ --- Biology& Geology Departments (*) \(*) -- 140 Morrill Science Center ~~~~~~~~~~ - University of Massachusetts, Amherst <hoogendyk(a)bio.umass.edu> --------------- Erdös 4 -------- Original Message -------- Subject: building apps with ssl Date: Thu, 18 Mar 2010 11:30:42 -0400 From: Chris Hoogendyk<hoogendyk(a)bio.umass.edu> cool. I've got things working now so that I can build applications with the openssl built by Sun to tap into the cryptographic accelerators on the T2. It turns out that the /opt/coolstack stuff related to openssl is actually symlinks to /usr/sfw. So, in the Makefile, if I set the openssl directory to /usr/sfw, rather than the default /usr/local/openssl, it finds the includes, the libraries, and the binaries that are needed. Then I specifically point the certs directory (in the Makefile) to /usr/local/openssl/certs for local control. Then, for the example of uw-imap, everything builds just fine. This should simply apply to anything we need to build with openssl on any of the T5220s. One side note is that this was a custom Makefile. Applications that use ./configure would presumably find the openssl through the paths provided in /usr/local/src/env. In the process of figuring that out, I also found that one of the most recent Solaris 10 kernel patches that we have on imladris specifically addresses awareness of the crypto accelerators and included patches to the openssl related items in /usr/sfw. So, I'm pretty confident that everything is alright. It's interesting too that in the paper presented at ACM by Sun last year they said that a couple of classes of attacks on crypto processes were negated by running it directly on the CPU. One of them had to do with timing. I should forward that paper to you as well. OK, just attached it. -- --------------- Chris Hoogendyk - O__ ---- Systems Administrator c/ /'_ --- Biology& Geology Departments (*) \(*) -- 140 Morrill Science Center ~~~~~~~~~~ - University of Massachusetts, Amherst <hoogendyk(a)bio.umass.edu> --------------- Erdös 4

1 0

[Dovecot] Solaris hardware crypto engines
by Martin Preen 18 Apr '11

18 Apr '11

Hello, I tried to find out how about to use the hardware crypto engines under Solaris (Sun Fire T2000). It seems, that its not just a compilation issue: > For operations that are to be offloaded, it is necessary to restrict use to subset > of OpenSSL functions (the EVP_ functions) and explicitly indicate the use of the PKCS11 > engine; something like the following works for bulk ciphers (the process for RSA is similar): > > ENGINE *e; > ENGINE_load_builtin_engines(); > e = ENGINE_by_id("pkcs11"); > ENGINE_set_default_ciphers(e); > EVP_CIPHER_CTX_init (&ctx); > EVP_EncryptInit (&ctx, EVP_des_cbc (), key, iv); > EVP_EncryptUpdate (.....); Since I'm not familiar with SSL programming, I wonder if it's possible to modify the dovecot 1.2.x source code. Maybe someone has already tried this or can give me hint. Regards. Martin

2 1

Re: [Dovecot] 2.0.12 ipwd.c does not compile under solaris
by Joseph Tam 18 Apr '11

18 Apr '11

> From: Roger Fujii <rmf(a)lookhere.com> > > the new src/lib/ipwd.c introduced in 2.0.12 no longer compiles on > solaris. Under solaris, > the *_r routines doesn't pass in result as the last parameter and return > errno - it just returns result. > obviously a job for configure..... This was solved several Emails back about forcing the use of POSIX threading models (a workaround path is provided): http://www.dovecot.org/list/dovecot/2011-April/058602.html Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Dovecot v2.0.12 OpenBSD - getpwuid() error
by LEVAI Daniel 17 Apr '11

17 Apr '11

Hi! I've upgraded from 2.0.11 to 2.0.12. I've experienced errors during delivery with dovecot-lda. The error log attached contains the errors. Since then I had to downgrade to 2.0.11, to make it work again. When starting 2.0.12, it couldn't chown() the files under /var/dovecot (eg.: dict) to the user specified in the configuration file. Configuration: # doveconf -n # 2.0.11: /etc/dovecot/dovecot.conf # OS: OpenBSD 4.8 i386 auth_master_user_separator = * auth_mechanisms = plain login digest-md5 ntlm auth_verbose = yes base_dir = /var/dovecot/ default_internal_user = _dovecot default_login_user = _dovenull dict/quota = pgsql:/etc/dovecot/dovecot_dict-sql.conf first_valid_gid = 8000 first_valid_uid = 8000 info_log_path = /var/log/mail/dovecot.info listen = ip 127.0.0.1 log_path = /var/log/mail/dovecot.log mail_location = maildir:~/Maildir/ mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } passdb { args = /etc/dovecot/master_passdb-sql.conf driver = sql master = yes pass = yes } plugin/quota = dict:User quota::proxy::quota plugin/quota_rule = *:storage=100M plugin/quota_rule2 = Trash:storage=+50M plugin/sieve = ~/dovecot.sieve plugin/sieve_dir = ~/sieve plugin/sieve_global_dir = /var/mail_virtual/sieve/ plugin/sieve_max_script_size = 1M plugin/sieve_quota_max_scripts = 5 plugin/sieve_quota_max_storage = 5M protocols = pop3 imap sieve service auth { unix_listener /var/spool/postfix/private/auth { group = _postfix mode = 0660 } unix_listener /var/www/priv/dovecot-auth { group = www mode = 0660 } unix_listener auth-master { group = vmail mode = 0660 } } service dict { unix_listener dict { group = vmail mode = 0660 } } service imap-postlogin { executable = script-login /etc/dovecot/postlogin.sh user = root } service imap { executable = imap imap-postlogin } service managesieve-login { vsz_limit = 64 M } service pop3-postlogin { executable = script-login /etc/dovecot/postlogin.sh user = root } service pop3 { executable = pop3 pop3-postlogin } ssl = required ssl_cert = </etc/ssl/dovecot_cert.pem ssl_key = </etc/ssl/private/dovecot_key.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol lda { deliver_log_format = msgid=%m, from=%f, subject=%s: %$ mail_plugins = quota sieve postmaster_address = postmaster@domain sendmail_path = /usr/local/sbin/sendmail } Daniel -- LÉVAI Dániel PGP key ID = 0x83B63A8F Key fingerprint = DBEC C66B A47A DFA2 792D 650C C69B BE4C 83B6 3A8F

1 1

[Dovecot] pop3-login segfaults (new backtrace)
by interfaSys sàrl 17 Apr '11

17 Apr '11

Hello, A while back I reported that pop3-login was segfaulting, but my traces were not very helpful. Here is a new one. Let me know if it helps. #0 0x000000080090cf91 in _pthread_mutex_init_calloc_cb () from /lib/libc.so.7 No symbol table info available. #1 0x000000080090dc9d in _pthread_mutex_init_calloc_cb () from /lib/libc.so.7 No symbol table info available. #2 0x000000080090e9c5 in _pthread_mutex_init_calloc_cb () from /lib/libc.so.7 No symbol table info available. #3 0x00000008009116ec in _malloc_prefork () from /lib/libc.so.7 No symbol table info available. #4 0x00000008009143c4 in malloc () from /lib/libc.so.7 No symbol table info available. #5 0x000000080047774c in data_stack_init () from /dovecot-2.0-hg/src/lib-dovecot/.libs/libdovecot.so.0 No symbol table info available. #6 0x00007fffffffe260 in ?? () No symbol table info available. #7 0x000000004da57f53 in ?? () No symbol table info available. #8 0x0000000000000048 in ?? () No symbol table info available. #9 0x000000080049d5ae in lib_init () from /dovecot-2.0-hg/src/lib-dovecot/.libs/libdovecot.so.0 No symbol table info available. #10 0x000000004da031c7 in ?? () No symbol table info available. #11 0x0000000000054e94 in ?? () No symbol table info available. #12 0x0000000000403392 in ?? () No symbol table info available. #13 0x000000080049d609 in master_service_init () from /dovecot-2.0-hg/src/lib-dovecot/.libs/libdovecot.so.0 No symbol table info available. #14 0x0000000000403392 in ?? () No symbol table info available. #15 0x0000000000000048 in ?? () No symbol table info available. #16 0x00007fffffffe260 in ?? () No symbol table info available. #17 0x0000000000000001 in ?? () No symbol table info available. #18 0x0000000000403650 in pop3_login_setting_parser_info () No symbol table info available. #19 0x0000000000403392 in ?? () No symbol table info available. #20 0x00007fffffffe308 in ?? () No symbol table info available. #21 0x0000000000000000 in ?? () No symbol table info available. #22 0x0000000000000000 in ?? () No symbol table info available. #23 0x000000080044bf41 in main () from /dovecot-2.0-hg/src/login-common/.libs/libdovecot-login.so.0 No symbol table info available. #24 0x00007fffffffe308 in ?? () No symbol table info available. #25 0x00000001005333d0 in ?? () No symbol table info available. #26 0x0000000000000001 in ?? () No symbol table info available. #27 0x00007fffffffe308 in ?? () No symbol table info available. #28 0x0000000800ace8b0 in __stack_chk_guard () from /lib/libc.so.7 No symbol table info available. #29 0x0000000000000001 in ?? () No symbol table info available. #30 0x00007fffffffe2e0 in ?? () No symbol table info available. #31 0x00007fffffffe318 in ?? () No symbol table info available. #32 0x00007fffffffe308 in ?? () No symbol table info available. #33 0x0000000000000000 in ?? () No symbol table info available. #34 0x0000000000000000 in ?? () No symbol table info available. #35 0x0000000000401dae in _start () No symbol table info available. I'm using GCC 4.5 with gold. Using the standard linker creates a binary that doesn't crash. It's the only part of dovecot that has a problem. imap-login works fine. Cheers, Olivier

3 5

[Dovecot] 2.0.12 ipwd.c does not compile under solaris
by Roger Fujii 17 Apr '11

17 Apr '11

the new src/lib/ipwd.c introduced in 2.0.12 no longer compiles on solaris. Under solaris, the *_r routines doesn't pass in result as the last parameter and return errno - it just returns result. obviously a job for configure..... -- Roger Fujii<rmf(a)lookhere.com>

2 1

[Dovecot] Post-login script with LDAP virtual users
by Hideo GOTO 16 Apr '11

16 Apr '11

Dear sirs, I'm working on Post-login script for migrating 40K Courier-imap users to Dovecot. After reading related topics about post-login script in your documentation, mailing list, I cannot remove the problem described here-below. Is there any special config to add when users are virtual (authentication and user info is fed by LDAP server). I would be grad if anyone could give me advise. Phenomena: ========== Although the authentication and script execution is successfully done, Pop3 session is aborted just after that, leaving the following error message to syslog: /var/log/maillog: Feb 7 17:45:58 pop3migr dovecot: pop3(vuser1): Post-login script denied access to user vuser1 cf. "vuser1" is UID of a virtual account on the LDAP tree. Maildir is located at /var/spool/postfixdata/%u/Maildir, and is owned by linux local user "mailuser". Dovecot works perfect ,if post-login script configuration is commented out. Environment: Dovecot: dovecot-2.0.9 (built from source tar ball) OS: Linux / 2.6.30.10-105.2.23.fc11.x86_64 (Virtual machine on a xen server) Maidir: tested both with local file system and NFS (ext3, xfs) client: Using telnet on pop3 TCP port. All the pop3 users are virtual and does not have local login account ('authentication and user information is given by LDAP server). SMTP service is managed by Postfix: ( A single local login account is writing all mails to Maildir for all the virtual users. ) Thanks in advance.

4 5

Re: [Dovecot] coredump in dovecot 2.0.11
by k b 16 Apr '11

16 Apr '11

This is it: -------- [root@server00 spool]# service dovecot start Starting Dovecot Imap: [ OK ] [root@isteren spool]# gdb /usr/libexec/dovecot/imap core GNU gdb (GDB) Fedora (7.2-46.fc14) Copyright (C) 2010 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i686-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/libexec/dovecot/imap...Reading symbols from /usr/lib/debug/usr/libexec/dovecot/imap.debug...done. done. /var/spool/core: No such file or directory. (gdb) bt full No stack. (gdb) q Should i create the /var/spool/core (file or directory) first? --- On Sat, 4/9/11, Timo Sirainen <> wrote: > Subject: Re: [Dovecot] coredump in dovecot 2.0.11 > Date: Saturday, April 9, 2011, 12:29 PM > I'm guessing it either couldn't open > the binary file or the core file.. Even without debug > symbols it should print something. What's the full gdb > command you're giving and its output? > > On 9.4.2011, at 13.26, k b wrote: > > > apparently i cannot get it right, > > (gdb) bt full says: > > No stack. > > > > > > i did install the debuginfo files > > debuginfo-install dovecot-2.0.11-1.fc14.i686 > > > > but gdb still says No stack. > > > > > > > > > > > > > > --- On Sat, 4/9/11, Timo Sirainen <tss(a)iki.fi> wrote: > > > >> Subject: Re: [Dovecot] coredump in dovecot 2.0.11 > >> Cc: dovecot(a)dovecot.org > >> Date: Saturday, April 9, 2011, 9:01 AM > >> On 9.4.2011, at 9.37, k b wrote: > >> > >>> I can post the coredump but i will have to > clean it > >> first as i can see it contains a few emails. > >>> would it help to post the coredump or shuould > i skip > >> that? > >> > >> The core file itself isn't useful, because it's > highly > >> system specific. Posting a gdb backtrace from it > would be > >> very useful though. So basically: > >> > >> gdb /usr/libexec/dovecot/imap core > >> bt full > >> > >> > > > >

3 7

[Dovecot] Compiling Error with Dovecot 1.0.7 and Sieve 1.0.4
by Jay Welch 15 Apr '11

15 Apr '11

Hi, I am having compiling issues with Sieve and I am not sure what the error is stating. [root@iosmail dovecot-sieve-1.0.4]# make make all-recursive make[1]: Entering directory `/home/jayw/Desktop/dovecot-sieve-1.0.4' Making all in src make[2]: Entering directory `/home/jayw/Desktop/dovecot-sieve-1.0.4/src' Making all in libsieve make[3]: Entering directory `/home/jayw/Desktop/dovecot-sieve-1.0.4/src/libsieve' /bin/sh ../../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I../.. -I/usr/src/dovecot/dovecot-1.0.7 -I/usr/src/dovecot/dovecot-1.0.7/src/lib -I../../src @CFLAGS@ -MT addr.lo -MD -MP -MF .deps/addr.Tpo -c -o addr.lo addr.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I/usr/src/dovecot/dovecot-1.0.7 -I/usr/src/dovecot/dovecot-1.0.7/src/lib -I../../src @CFLAGS@ -MT addr.lo -MD -MP -MF .deps/addr.Tpo -c addr.c -fPIC -DPIC -o .libs/addr.o gcc: @CFLAGS@: No such file or directory make[3]: *** [addr.lo] Error 1 make[3]: Leaving directory `/home/jayw/Desktop/dovecot-sieve-1.0.4/src/libsieve' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/home/jayw/Desktop/dovecot-sieve-1.0.4/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/home/jayw/Desktop/dovecot-sieve-1.0.4' make: *** [all] Error 2 Also, I did not originally have the source files and I had to download them for *dovecot-config*. Not sure if that makes a difference or not. Much Appreciated -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 3

[Dovecot] Problem login in managesieve with email address
by Juan C. Blanco 15 Apr '11

15 Apr '11

Hello all, I have a installation of dovecot 1.2.16, sieve-0.1.18, managesieve-0.11.12 in dovecot-ldap.conf auth_bind=yes user_attrs = irisMailbox=home,fiMailQuotaSize=quota_rule=*:storage user_filter = (|(uid=%u)(mail=%u)) pass_attrs = userPassword=password,irisMailbox=userdb_home,fiMailQuotaSize=userdb_quota_rule=*:storage pass_filter = (|(uid=%u)(mail=%u)) I'm doing some test to authenticate using the full email address for authentication and this works fine for IMAP and POP3 but dows not work with MANAGESIEVE I have a test machine with dovecot 2.0.12 and pigeonhole-0.2.3 and the results are the same. ¿Do you known if there is any reason for this differente behaviour? Activating debug in dovecot this are the difference between IMAP and MANAGESIEVE authenticacion Apr 15 17:43:15 auth: Debug: auth client connected (pid=13832) Apr 15 17:43:15 auth: Debug: client in: AUTH 1 PLAIN service=sieve secured lip=138.100.8.17 rip=138.100.8.42 lport=2000 rport=52828 resp=<hidden> Apr 15 17:43:15 auth: Debug: auth(d0122(a)alumnos.fi.upm.es,138.100.8.42,master): Master user lookup for login: d0122 Apr 15 17:43:15 auth: Debug: cache(d0122(a)alumnos.fi.upm.es,138.100.8.42,master): hit: Apr 15 17:43:15 auth: Info: cache(d0122(a)alumnos.fi.upm.es,138.100.8.42,master): User unknown Apr 15 17:43:17 auth: Debug: client out: FAIL 1 user=d0122(a)alumnos.fi.upm.es Apr 15 17:43:17 managesieve-login: Info: Disconnected (auth failed, 1 attempts): user=<d0122(a)alumnos.fi.upm.es>, method=PLAIN, rip=138.100.8.42, lip=138.100.8.17, TLS Apr 15 17:43:18 auth: Debug: auth client connected (pid=13833) Apr 15 17:43:18 auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=138.100.8.17 rip=138.100.8.42 lport=993 rport=34094 resp=<hidden> Apr 15 17:43:18 auth: Debug: cache(d0122(a)alumnos.fi.upm.es,138.100.8.42): hit: <hidden> userdb_home=/mail/alumnos/d0/d0122 userdb_quota_rule=*:storage=10240 Apr 15 17:43:18 auth: Debug: client out: OK 1 user=d0122(a)alumnos.fi.upm.es Apr 15 17:43:18 auth: Debug: master in: REQUEST 413401089 13833 1 42fd9bf31349809a03f19a6a3b9730cc Apr 15 17:43:18 auth: Debug: userdb-cache(d0122(a)alumnos.fi.upm.es,138.100.8.42): miss Apr 15 17:43:18 auth: Debug: passwd-file(d0122(a)alumnos.fi.upm.es,138.100.8.42): lookup: user=d0122(a)alumnos.fi.upm.es file=/nas/mail/etc/passwd.master Apr 15 17:43:18 auth: Info: passwd-file(d0122(a)alumnos.fi.upm.es,138.100.8.42): unknown user Apr 15 17:43:18 auth: Debug: prefetch(d0122(a)alumnos.fi.upm.es,138.100.8.42): success Apr 15 17:43:18 auth: Debug: master out: USER 413401089 d0122(a)alumnos.fi.upm.es home=/mail/alumnos/d0/d0122 quota_rule=*:storage=10240 Apr 15 17:43:18 imap-login: Info: Login: user=<d0122(a)alumnos.fi.upm.es>, method=PLAIN, rip=138.100.8.42, lip=138.100.8.17, mpid=13834, TLS Thanks and best regards Juan C. Blanco -- +----------------------------------------------------------------+ | Juan C. Blanco | | | | Centro de Calculo | | | Facultad de Informatica U.P.M. | E-mail: jcblanco(a)fi.upm.es | | Campus de Montegancedo | | | Boadilla del Monte | Tel.: (+34) 91 336 7466 | | 28660 MADRID (Spain) | Fax : (+34) 91 336 6913 | +----------------------------------------------------------------+

1 0

[Dovecot] How to purge mailboxes manually [dovecot_1.2.15]
by Emilio Nacelle 15 Apr '11

15 Apr '11

Hi, we have a linux network at the office. Mainly ubuntu and debian systems. Each user has it's own mail client, thunderbird, evolution, etc. In the mail server we use as the local delivery agent, dovecot 1.2.15 and the protocol imap. The users mailbox are in the server at /var/mail. Due to some kind of problem the mails that are set for delete in the mail client are not being deleted in the mailbox (if we check the mbox the mails are marked to be purged). Unless the owner uses something lowlevel shell mail client like pine to do the purge, the mails start to pile filling the account. Is this some known bug with a fix, or is there some routine we can run as admins to actually purged the mails set for deletion? (Like the "doveadm purge" in dovecot 2.0) Thanks a lot, looking forward to your answers, Emilio P.S: we would really like not having to install dovecot 2.0 :)

2 1

[Dovecot] Released Pigeonhole v0.2.3 for Dovecot v2.0.12
by Stephan Bosch 14 Apr '11

14 Apr '11

Hello Dovecot users, It's been a while since the last Pigeonhole release. This new release adds support for the new vacation-seconds extension, which allows the vacation extension to reply more frequently than every day and allows specifying this interval in seconds instead of days. I've also fixed quite a few bugs that were reported in the last couple of months. Changelog v0.2.3: * Sieve-filter tool: finished implementing basic functionality. It is not quite ready yet, but it is available for those willing to experiment with it (needs --with-unfinished-features config to compile). Also includes man page. + Vacation extension now inhibits replies to messages from sender listed in :addresses, thus preventing replies to one of the user's other known addresses. + Vacation extension: implemented the (draft) vacation-seconds extension. This also adds min/max period configuration settings. Refer to doc/vacation.txt for configuration information. - ManageSieve: fixed bug in UTF-8 checking of string values. This is done by discarding the original implementation and migrating to the Dovecot API's UTF-8 functionality. - Sieve command line tools now avoid initializing the mail store unless necessary. This prevents sievec and sieve-dump from failing when executed by root for example. - Enotify extension: fixed inappropriate return type in mailto URI parse function, also fixing ARM compiler warning. - Vacation extension: fixed handling of sendmail errors. It produced an additional confusing success message in case of error. - Removed header MIME-decoding to fix erroneous address parsing. Applies to address test and vacation command. - Fixed segfault bug in extension configuration, triggered when unknown extension is mentioned in sieve_extensions setting. The release is available as follows: http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.3.tar.gz http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.3.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.0 wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

[Dovecot] solved: disable_plaintext_auth = no per IP
by Andreas Schulze 14 Apr '11

14 Apr '11

found: remote 192.0.2.143/32 { disable_plaintext_auth = no } ( http://dovecot.org/list/dovecot/2011-February/057282.html ) -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

1 0

[Dovecot] disable_plaintext_auth = no per IP
by Andreas Schulze 14 Apr '11

14 Apr '11

Hello, I have disable_plaintext_auth=yes enabled. ( dovecot-2.0.12 ) But for one internel host I like to allow plaintext. Can somebody point me to the configuration ? I did not found it in the wiki2 ... Thanks Andreas -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

2 1

Re: [Dovecot] [LDA] save failed to INBOX: Timeout while waiting for lock
by Timo Sirainen 14 Apr '11

14 Apr '11

On Thu, 2011-04-14 at 10:18 +0200, Frank Bonnet wrote: > >>> mail_location = mbox:%h/:INDEX=/var/cache/dovecot/index/%u:INBOX=/var/mail/%u > > > > That's the way mbox format works. One IMAP or POP3 client can lock the mailbox for a long time. LDA can either wait longer of fail and let MTA retry the delivery later. The default is: > > > > mbox_lock_timeout = 5 mins > > > > So apparently the LDA already waited for 5 minutes for the lock. > > > > (There is also actually mail_max_lock_timeout setting, but the default is 0 = disabled.) > > > > Should I do something to correct ? I don't really know if there is anything except switching away from mbox. > When the problem occured some users were unable to access their mailboxes How long does it occur? You'd need to find out what exactly is locking those mailboxes for that long. It could simply be the user's client. Or I guess it could be LDA itself, or anything really.. Difficult to say. Difficult also to tell easy way to debug this.. Or when this happens does it happen to many people at the same time? Is the system load really high at that time then?

2 3

[Dovecot] [LDA] save failed to INBOX: Timeout while waiting for lock
by Frank Bonnet 14 Apr '11

14 Apr '11

Hello I use LDA Dovecot 2 with SIEVE as Postfix delivery agent and I occasionally get such message in syslog. info.log:Apr 13 12:39:40 lda(xxxxxxxx): Info: msgid=<4DA484FF.5060903(a)gmail.com>: save failed to INBOX: Timeout while waiting for lock See below the doveconf -n trace Thanks for any info > # 2.0.11: /usr/local/etc/dovecot/dovecot.conf > # OS: FreeBSD 8.2-RELEASE amd64 > auth_worker_max_count = 100 > debug_log_path = /var/log/dovecot/debug.log > default_client_limit = 6144 > default_process_limit = 1024 > disable_plaintext_auth = no > info_log_path = /var/log/dovecot/info.log > log_path = /var/log/dovecot/dovecot.log > mail_location = mbox:%h/:INDEX=/var/cache/dovecot/index/%u:INBOX=/var/mail/%u > managesieve_notify_capability = mailto > managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date > mbox_write_locks = fcntl > passdb { > driver = passwd > } > plugin/sieve = ~/.dovecot.sieve > plugin/sieve_dir = ~/sieve > postmaster_address = postmaster(a)esiee.fr > protocols = imap pop3 sieve sieve > sendmail_path = /usr/local/sbin/sendmail > service auth { > client_limit = 7169 > } > service imap-login { > inet_listener imap { > port = 143 > } > inet_listener imaps { > port = 993 > ssl = yes > } > process_min_avail = 10 > service_count = 1 > vsz_limit = 1 G > } > service imap { > process_limit = 2048 > vsz_limit = 1 G > } > service managesieve-login { > inet_listener sieve { > port = 4190 > } > inet_listener sieve_deprecated { > port = 2000 > } > } > service pop3-login { > inet_listener pop3 { > port = 110 > } > inet_listener pop3s { > port = 995 > ssl = yes > } > } > ssl_ca = /etc/ssl/RENATER/chain-1828-mail.esiee.fr.pem > ssl_cert = </etc/ssl/RENATER/cert-1828-mail.esiee.fr.pem > ssl_key = </etc/ssl/RENATER/mail.esiee.fr.key > userdb { > driver = passwd > } > verbose_proctitle = yes > protocol lda { > info_log_path = /var/log/dovecot/dovecot-lda.log > log_path = /var/log/dovecot/dovecot-lda-errors.log > mail_plugins = " sieve" > } > protocol imap { > imap_client_workarounds = tb-extra-mailbox-sep > } > protocol sieve { > managesieve_implementation_string = Dovecot Pigeonhole > } > mail# dovecof -n > /tmp/doveconf.txt > dovecof: Command not found. > mail# doveconf -n > /tmp/doveconf.txt > mail# wc -l /tmp/doveconf.txt > 75 /tmp/doveconf.txt > mail# cat /tmp/doveconf.txt > # 2.0.11: /usr/local/etc/dovecot/dovecot.conf > # OS: FreeBSD 8.2-RELEASE amd64 > auth_worker_max_count = 100 > debug_log_path = /var/log/dovecot/debug.log > default_client_limit = 6144 > default_process_limit = 1024 > disable_plaintext_auth = no > info_log_path = /var/log/dovecot/info.log > log_path = /var/log/dovecot/dovecot.log > mail_location = mbox:%h/:INDEX=/var/cache/dovecot/index/%u:INBOX=/var/mail/%u > managesieve_notify_capability = mailto > managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date > mbox_write_locks = fcntl > passdb { > driver = passwd > } > plugin/sieve = ~/.dovecot.sieve > plugin/sieve_dir = ~/sieve > postmaster_address = postmaster(a)esiee.fr > protocols = imap pop3 sieve sieve > sendmail_path = /usr/local/sbin/sendmail > service auth { > client_limit = 7169 > } > service imap-login { > inet_listener imap { > port = 143 > } > inet_listener imaps { > port = 993 > ssl = yes > } > process_min_avail = 10 > service_count = 1 > vsz_limit = 1 G > } > service imap { > process_limit = 2048 > vsz_limit = 1 G > } > service managesieve-login { > inet_listener sieve { > port = 4190 > } > inet_listener sieve_deprecated { > port = 2000 > } > } > service pop3-login { > inet_listener pop3 { > port = 110 > } > inet_listener pop3s { > port = 995 > ssl = yes > } > } > ssl_ca = /etc/ssl/x.pem > ssl_cert = </etc/ssl/y.pem > ssl_key = </etc/ssl/x.key > userdb { > driver = passwd > } > verbose_proctitle = yes > protocol lda { > info_log_path = /var/log/dovecot/dovecot-lda.log > log_path = /var/log/dovecot/dovecot-lda-errors.log > mail_plugins = " sieve" > } > protocol imap { > imap_client_workarounds = tb-extra-mailbox-sep > } > protocol sieve { > managesieve_implementation_string = Dovecot Pigeonhole > }

2 1

[Dovecot] Login via IMAP with MySQL as user database not working
by Chris Martin 13 Apr '11

13 Apr '11

Hello all, I am migrating from Postfix/Cyrus/MySQL mail server to a recently installed dovecot 1.2.8 on a QNAP TS259 NAS via XDove. I am unable to login via IMAP (the only method I've tried and the only method I want). I am using an almost identical database as the current existing Postfix/Cyrus/MySQL setup (with the except of paths). I have been attempting to get this working (off and on) for the past 5 months. During that time I have researched and researched, but have not found a solution. The Maildir has been copied from the existing server to the Dovecot server and have run the script 'courier-dovecot-migrate.pl', which was found at http://www.dovecot.org/tools/courier-dovecot-migrate.pl In a nutshell: If I have the password_query string in the SQL config file (shown below) set to return only 1 field, i.e. the password, then the Dovecot authtest app succeeds. But if more than 1 field is returned (i.e.: user and password) the test fails. And if testing with telnet I get the message of "* BYE Internal login failure. Refer to server log for more information.". The logs indicate that the password check returned OK but the userdb read appears to fail. If I change the userdb_query to return only 1 field (such as only the uid), then the logs show the correct value is returned, and yet the telnet login fails. So it seems that anytime there are multiple fields returned from the SQL query, the result is failure at that step (password check or userdb read). Therefore userdb prefetch never works. The NAS doesn't utilize a syslog so it's of no help in debugging. Below are the config files and samples from log files (scrubbed): dovecot.conf- (NOTE: the 'home = /tmp' in the plugin section is an attempt at rawlog from http://wiki2.dovecot.org/Debugging/Rawlog ... which doesn't seem to work) # 1.2.8: /etc/dovecot/dovecot.conf # OS: Linux 2.6.33.2 i686 log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log log_timestamp: "%Y-%m-%d %H:%M:%S" protocols: imap ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/rawlog /usr/libexec/dovecot/imap-login login_user: _mailman last_valid_uid: 65000 first_valid_gid: 70 last_valid_gid: 65000 mail_debug: yes lda: postmaster_address: postmaster(a)example.com auth default: user: dovecot verbose: yes debug: yes debug_passwords: yes worker_max_count: 10 passdb: driver: sql args: /share/MD0_DATA/.qpkg/XDove/dovecot/etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /share/MD0_DATA/.qpkg/XDove/dovecot/etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 plugin: home: /tmp dovecot-sql.conf- driver = mysql connect = host=127.0.0.1 user=<myuser> password=<mypass> dbname=users2 default_pass_scheme = CRYPT password_query = SELECT user, crypt AS `password` FROM users WHERE user = '%u' AND account_enabled = 'y' AND allow_email = 'y' user_query = SELECT uid, gid, homedir AS home, maildir AS mail FROM users WHERE user = '%u' AND account_enabled = 'y' AND allow_email = 'y' Sample from log "dovecot-info.log"- "2011-04-13 10:12:00" auth(default): Info: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=36735 resp=AGNocmlzQNHhaWwuaG9tZWlwLm5ldABoYXBweTE= "2011-04-13 10:12:00" auth-worker(default): Info: sql(<user>@<domain>,127.0.0.1): query: SELECT user, crypt AS `password` FROM users WHERE user = '<user>@<domain>' AND account_enabled = 'y' AND allow_email = 'y' "2011-04-13 10:12:00" auth-worker(default): Info: auth(<user>@<domain>,127.0.0.1): username changed <user>@<domain> -> <User>@<Domain> "2011-04-13 10:12:00" auth-worker(default): Info: mysql: Connected to 127.0.0.1 (users2) "2011-04-13 10:12:02" auth(default): Info: client out: FAIL 1 user=<user>@<domain> temp Sample from log "dovecot.log"- "2011-04-13 10:12:00" auth(default): Error: worker-server( chris(a)sail.homeip.net,127.0.0.1) Aborted: Worker process died unexpectedly "2011-04-13 10:12:00" dovecot: Error: child 20136 (auth-worker) killed with signal 11 (core dumps disabled) If the password_query is changed to (only password returned): password_query = SELECT crypt AS `password` FROM users WHERE user = '%u' AND account_enabled = 'y' AND allow_email = 'y' then the logs are as follows: Sample from log "dovecot-info.log"- "2011-04-13 10:18:03" auth(default): Info: client in: AUTH 1 PLAIN service=imap secured lip=127. 0.0.1 rip=127.0.0.1 lport=143 rport=33662 resp=AGNocmlzQNHhaWwuaG9tZWlwLm5ldABoYXBweTE= "2011-04-13 10:18:03" auth-worker(default): Info: sql(<user>@<domain>,127.0.0.1): query: SELECT crypt AS `password` FROM users WHERE user = '<user>@<domain>' AND account_enabled = 'y' AND allow_email = 'y' "2011-04-13 10:18:03" auth(default): Info: client out: OK 1 user=<user>@<domain> "2011-04-13 10:18:03" auth(default): Info: master in: REQUEST 1 23395 1 "2011-04-13 10:18:03" auth-worker(default): Info: sql(<user>@<domain>,127.0.0.1): SELECT uid, gid, homedir AS home, maildir AS mail FROM users WHERE user = '<user>@<domain>' AND account_enabled = 'y' AND allow_email = 'y' "2011-04-13 10:18:03" auth(default): Info: master out: FAIL 1 "2011-04-13 10:18:03" imap-login: Info: Internal login failure (auth failed, 1 attempts): user=<<user>@<domain>>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured "2011-04-13 10:18:03" auth-worker(default): Info: mysql: Connected to 127.0.0.1 (users2) Sample from log "dovecot.log"- "2011-04-13 10:18:03" auth(default): Error: worker-server(<user>@<domain>,127.0.0.1): Aborted: Worker process died unexpectedly "2011-04-13 10:18:03" dovecot: Error: child 23383 (auth-worker) killed with signal 11 (core dumps disabled) And finally, if change the user_query (to return only homedir AS home): then the logs are as follows: Sample from log "dovecot-info.log"- "2011-04-13 10:22:56" auth(default): Info: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=35408 resp=AGNocmlzQNHhaWwuaG9tZWlwLm5ldABoYXBweTE= "2011-04-13 10:22:56" auth-worker(default): Info: sql(<user>@<domain>,127.0.0.1): query: SELECT crypt AS `password` FROM users WHERE user = '<user>@<domain>' AND account_enabled = 'y' AND allow_email = 'y' "2011-04-13 10:22:56" auth(default): Info: client out: OK 1 user=<user>@<domain> "2011-04-13 10:22:56" auth(default): Info: master in: REQUEST 1 23787 1 "2011-04-13 10:22:56" auth-worker(default): Info: sql(<user>@<domain>,127.0.0.1): SELECT homedir AS home FROM users WHERE user = '<user>@<domain>' AND account_enabled = 'y' AND allow_email = 'y' "2011-04-13 10:22:56" auth(default): Info: master out: USER 1 <user>@<domain> home=/Users/<user> "2011-04-13 10:22:56" imap-login: Info: Internal login failure (auth failed, 1 attempts): user=<<user>@<domain>>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Sample from log "dovecot.log"- "2011-04-13 10:22:56" dovecot: Error: User <user>@<domain> is missing UID (see mail_uid setting) Greatly appreciate any help that anyone can give. Chris

2 1

[Dovecot] Dovecot-lda and multiple records after filter.
by Басов Евгений 13 Apr '11

13 Apr '11

Hello. Some records in my LDAP base have same values in mail field: # extended LDIF # # LDAPv3 # base <ou=Mail, dc=ph, dc=local> with scope subtree # filter: (&(mail=someuser(a)p.ru)(|(AccountStatus=active)(accountStatus=shared))) # requesting: mailMessageStore # dn: cn=lala,ou=Mail,dc=ph,dc=local mailMessageStore: /var/mail/someuser/Maildir/ # Eset, Mail, ph.local dn: cn=Eset,ou=Mail,dc=ph,dc=local # admins, Mail, ph.local dn: cn=admins,ou=Mail,dc=ph,dc=local # search result search: 2 result: 0 Success # numResponses: 4 # numEntries: 3 Postfix with virtual_transport = virtual works fine: letter to "dn: cn=lala,ou=Mail,dc=ph,dc=local" stolen in mailMessageStore path and one for mailing list "dn: cn=admins,ou=Mail,dc=ph,dc=local"/"dn: cn=admins,ou=Mail,dc=ph,dc=local" are send to "dn: cn=lala,ou=Mail,dc=ph,dc=local". One of filter Postfix uses: (&(|(mail=%s)(mailAlternateAddress=%s))(|(AccountStatus=active)(accountStatus=shared))) So, set on dovecot-lda. main.cf: dovecot_destination_recipient_limit = 1 virtual_transport = dovecot #virtual_transport = virtual master.cf: dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${recipient} one place in dovecot-ldap.ext.conf: user_filter = (&(objectClass=qmailUser)(|(AccountStatus=active)(accountStatus=shared))(|(mail=%u)(mailAlternateAddress=%u))) pass_filter = (&(objectClass=qmailUser)(|(AccountStatus=active)(accountStatus=shared))(|(mail=%u)(mailAlternateAddress=%u))) user_attrs = mailMessageStore=home pass_attrs = uid=user,userPassword=password Send test letter: mutt -s "test $(date +%d/%m/%Y:%H.%M)" -- someuser(a)p.ru < /dev/null and get in log: dovecot: lda: Debug: Module loaded: /usr/lib64/dovecot/lib90_sieve_plugin.so dovecot: auth: Debug: master in: USER#0111#011someuser(a)p.ru#011service=lda dovecot: auth: Debug: ldap(someuser(a)p.ru): user search: base=ou=Mail, dc=ph, dc=local scope=subtree filter=(&(objectClass=qmailUser)(|(AccountStatus=active)(accountStatus=shared))(|(mail=someuser@p.ru)(mailAlternateAddress=someuser@p.ru))) fields=mailMessageStore dovecot: auth: Debug: ldap(someuser(a)p.ru): result: mailMessageStore(home)=/var/mail/someuser/Maildir/ dovecot: auth: Error: ldap(someuser(a)p.ru): user_filter matched multiple objects, aborting dovecot: auth: Debug: master out: FAIL#0111 dovecot: lda: Error: user someuser(a)p.ru: Auth USER lookup failed dovecot: lda: Debug: auth input: dovecot: lda: Fatal: Internal error occurred. Refer to server log for more information. postfix/pipe[3259]: 89001846: to=<someuser(a)p.ru>, relay=dovecot, delay=0.15, delays=0.07/0.01/0/0.07, dsn=4.3.0, status=deferred (temporary failure) As we can see mailMessageStore gets right value and… it's all. How can I get Postfix-like behavior from dovecot-lda? With best regards, Basov Evgeny.

1 0

[Dovecot] Problems with thunderbird
by Jim Knuth 13 Apr '11

13 Apr '11

Hello, Since the Upgrade on V 2.0.12 I can produce with Thunderbird no connection. With Roundcube it is easily possible. I have changed something in no configuration. Does somebody have a tip? # 2.0.12: /etc/dovecot/dovecot.conf # OS: Linux 2.6.29.4-default i686 Debian wheezy/sid auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * login_greeting = Mailserver ready. mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { driver = pam } plugin { autocreate = Entwurf autocreate2 = Spam autosubscribe = Entwurf autosubscribe2 = Spam quota = maildir:User quota quota_exceeded_message = Der Mail-Speicher ist voll. Siehe: http://www.art-domains.de/quota.html quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve_before = /etc/dovecot/sieve/global/global.sieve sieve_dir = %h/sieve sieve_global_dir = /etc/dovecot/sieve/global/ sieve_global_path = /etc/dovecot/sieve/global/global.sieve trash = /etc/dovecot/dovecot-trash.conf.ext } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 } } service imap-login { client_limit = 128 process_limit = 256 service_count = 0 vsz_limit = 64 M } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 vsz_limit = 64 M } service pop3-login { client_limit = 128 process_limit = 256 service_count = 0 vsz_limit = 64 M } service quota-warning { executable = script /usr/sbin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/passwd.quota driver = passwd-file } verbose_proctitle = yes protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } protocol imap { imap_client_workarounds = mail_fsync = never mail_plugins = " quota autocreate imap_quota trash" } protocol pop3 { mail_fsync = never mail_plugins = " quota trash" pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_lock_session = yes pop3_uidl_format = %v-%u } protocol lda { mail_fsync = optimized mail_plugins = " quota sieve trash" postmaster_address = postmaster(a)art-domains.de } protocol lmtp { mail_plugins = " quota sieve trash" } -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails!

2 4

Re: [Dovecot] Upgraded to Dovecot-1.2.16 and Sieve-1.1.8 but Still No Sieve Parameters
by Jay Welch 13 Apr '11

13 Apr '11

So I have to manually put in the parameters in the dovecot.conf file? I assumed that they would have been added to the dovecot-example.conf file once I installed Sieve. Am I correct? On 4/12/2011 12:48 PM, Frank Bonnet wrote: > this could help you > > http://wiki.dovecot.org/ManageSieve/Configuration > > Le 12/04/2011 21:43, Jay Welch a écrit : >> I have upgraded to a newer version of Dovecot and I have installed >> Sieve. Everything went smooth and with no errors but I still don't see >> any Sieve parameters in dovecot.conf file. I'm looking at >> /usr/local/etc/dovecot-example.conf. What could be the issue? >> >> Thanks >> -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 7

[Dovecot] information
by drum.lucas＠gmail.com 13 Apr '11

13 Apr '11

Hi! I have this in my dovecot logs... dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user access What is this? Anybody is traying login with user "access"? Spam? Vírus? thanks!!!! -- Atenciosamente; Graciously; *Lucas Possamai * http://psyscrew.posterous.com/ "Na palma da tua mão existem sonhos, felicidades e a força que te guia por um caminho, que somente você poderá trilhar, com o olhar tranquilo saberás onde chegar.o fim é apenas mais um ponto para inventar uma nova conquista."* *

1 0

Re: [Dovecot] Problem with expire plugin and expunge
by Christoph Pleger 13 Apr '11

13 Apr '11

Hello, > It looks like it expunged all the messages from Trash. Did you check if > that happened? Did it expunge too many messages? > > > Mar 18 09:50:28 joseph dovecot: imap(christoph): Debug: expire: Saving > > first message to Trash, updating timestamp to 1300438228 > > This happens, because it thinks the Trash was empty.. Is there any solution in sight for this? Is there some additional information I can give you for solving that problem? Regards Christoph

2 4

[Dovecot] Solaris 10 Compilation Issue with 2.0.12 (actually post 12690) [WORKAROUND PROVIDED]
by Peter Bray 13 Apr '11

13 Apr '11

Greetings, Post 12689:7f5735ab7c35 / 12690:02829f7f79c7 dovecot uses the reentrant version of get(password/group)* related functions. There are two variants of these functions on Solaris. To get the variant used by dovecot code based you need to define _POSIX_PTHREAD_SEMANTICS (see attached manual page). Initially I defined this just for the compilation of lib/src/ipwd.c, and got the code to compile / check / run successfully in my environment. After this worked I decided to try compiling the whole code base with CPPFLAGS="-D_POSIX_PTHREAD_SEMANTICS" ./configure .... This also seems to work fine. My environment uses IMAPS (X86) and Proxying IMAPS (SPARC). All code compiles / checks / runs (only 64-bit versions run tested) with the above CPPFLAGS modification on Oracle Solaris 10 Update 9 (both 32/64 bit on both X86 / SPARC with GCC 4.1.2) systems. Regards, Peter Bray Sydney, Australia PS: I have not investigated an appropriate way to modified configure.in to make this addition automatic.

2 1

Re: [Dovecot] SUMMARY: LDA vs LMTP, Cyrus SASL, verbose_proctitle
by Joseph Tam 13 Apr '11

13 Apr '11

Timo Sirainen <tss(a)iki.fi> wrote: > On Mon, 2011-04-11 at 18:19 -0700, Joseph Tam wrote: > > > Also, one significant advantage not mentioned for LMTP was that one > > delivery failure to multiple recipients can be disambiguated; LDA can only > > return an exit code to be tested by the MTA, but the MTA cannot know > > which recipient(s) generated the error. > > In almost all setups MTA delivers mails to LDA one at a time. Multiple > deliveries are useful only if you want to try to get the same mail file > hard linked to all recipients. So normally this is a non-issue. I guess my sendmail is not normal. The default configuration does pool multiple recipient delivery and run mail.local with all these users as arguments in one invocation. dovecot-lda doesn't seem to support multiple recipients per invocation, so this won't be a problem. The implication for sendmail users, though, is that multiple concurrent deliveries must be disabled if you use dovecot-lda (the 'm' flag must be removed from LOCAL_MAILER_FLAGS) as implicitely done in http://wiki2.dovecot.org/LDA/Sendmail I notice the 'A' flag is missing here: doesn't this kill aliasing? If and when I can fully test my setup, I will update this page. > > echo "main(int c,char**v){**v='x';sleep(9);}" | \ > > gcc -xc -o y -; ./y; rm y & > > ps -f > > IIRC /usr/ucb/ps shows the changes. Ah. I'll take your word for it since I only have the SysV stuff installed. Thanks for the info. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Best practices to migrate from mbox to Maildir++ and also changing the deliver method
by Julio C. Ortega 13 Apr '11

13 Apr '11

Greetings. Im about to move from mbox to Maildir++ and change the deliver method from procmail. I have less than 100 accounts, but there's a lot of mail (around 16GB) Apart from the documentation on Dovecot's site, anyone has good recommendations, and, if you have experience doing this migration any tips? Thanks for any info, and wishing you all a nice week -- ------------------------------------ Julio C. Ortega ONUVA http://www.onuva.com

2 1

[Dovecot] Upgraded to Dovecot-1.2.16 and Sieve-1.1.8 but Still No Sieve Parameters
by Jay Welch 12 Apr '11

12 Apr '11

I have upgraded to a newer version of Dovecot and I have installed Sieve. Everything went smooth and with no errors but I still don't see any Sieve parameters in dovecot.conf file. I'm looking at /usr/local/etc/dovecot-example.conf. What could be the issue? Thanks -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

[Dovecot] v2.0.12 released
by Timo Sirainen 12 Apr '11

12 Apr '11

http://dovecot.org/releases/2.0/dovecot-2.0.12.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.12.tar.gz.sig Many small fixes, plus some more noticeable: + doveadm: Added "move" command for moving mails between mailboxes. + virtual: Added support for "+mailbox" entries that clear \Recent flag from messages (default is to preserve them). - dbox: Fixes to handling external attachments - dsync: More fixes to avoid hanging with remote syncs - dsync: Many other syncing/correctness fixes - doveconf: v2.0.10 and v2.0.11 didn't output plugin {} section right BTW. I'm moving again next weekend, this time to Helsinki. Hopefully I'll be living there for a while. :)

2 1

[Dovecot] Questions about converting maildir to mdbox.
by Henrique Fernandes 12 Apr '11

12 Apr '11

First of all i would like to thanks Timo for the excellent job done in dovecot. We are using it in you prodution server with about 5 millions of emails and it is pretty good, only a performance problens but i guess it is realated to ocfs2 that we are using. So lets begin: We are using dovecot 2.0.6 with maildir in an ocfs2 partiton. It is pretty slow access in peak time, but it is related to ocfs2 as i said before, i am trying to mimimize the ocfs2 latancy by using mdbox. Another problem that we have are Full backup that takes about 24h and incremental takes about 13h I am thinking in converting some email for testing propose, but i am wondoring how would dovecot convert this, like if i convert all mail from maildir to mdbox it would make many mailbox based on this seetings ? Or in the first convert it would make a big mdbox file and after it it will rotate by day or it would make many boxes just based on size? mdbox_rotate_size = 5m mdbox_rotate_interval = 1d Well, another thing can i make rotate interval happens in a certain time of day? end from where it takes this time ? it rotates at midnight ? Another one!, if i lose the index files what really happens ? Sometimes in my server the index get corrupet and as i am reading mdbox index files held information that is not in other place. So what should i do to prevent any possible lose of data even if i lose the indexes? I was reading about backup restore also, but i did not get it pretty well. With maildir we simple restore the files and the index gets rebuilt! What should i do with mdbox ? Restore the files and the index ? But how about the other emails that the account got after the backup, how i should merge the multiple files and more importanet how do i merge the index files ? Well, sorry about my english! And Thanks alot guys! []'sf.rique

3 4

[Dovecot] Vpopmail and lastauth
by mailing＠securitylabs.it 12 Apr '11

12 Apr '11

Hello, I'm migrating many accounts to a new server with vpopmail 5.4.33 and dovecot 2.0.11. I've already vpopmail 5.4.32 and dovecot 1.2.16 on others servers running without problems. With dovecot 2.0.11 my lastauth file is not updated. This file usually is update on any access (smtp, pop3, imap) with the client's IP, for every mailbox. Now it's updated only when a client authenticate itself via SMTP (smtp-auth with qmail + vpopmail), and not with imap/pop3 access. My conf: # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.1 auth_cache_negative_ttl = 2 mins auth_cache_size = 1000 M auth_cache_ttl = 2 mins auth_mechanisms = plain cram-md5 apop auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@& disable_plaintext_auth = no first_valid_uid = 89 last_valid_uid = 95 lock_method = dotlock log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Server ready. mail_fsync = never mail_gid = vchkpw mail_location = maildir:~/Maildir mail_privileged_group = vchkpw mail_uid = vpopmail namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = webmail=127.0.0.1 driver = vpopmail } plugin/mail_log_events = delete expunge plugin/mail_log_group_events = plugin/quota = maildir plugin/quota_rule = ?:storage=0 pop3_uidl_format = %f protocols = imap pop3 service auth { unix_listener auth-userdb { group = vchkpw mode = 0600 user = vpopmail } } service imap-login { client_limit = 256 process_limit = 128 process_min_avail = 3 service_count = 1 } service imap { drop_priv_before_exec = yes process_limit = 256 vsz_limit = 256 M } service pop3-login { client_limit = 256 process_limit = 128 process_min_avail = 3 service_count = 1 } service pop3 { drop_priv_before_exec = yes process_limit = 256 vsz_limit = 256 M } ssl_cert = </usr/local/etc/dovecot/dovecot.crt ssl_key = </usr/local/etc/dovecot/dovecot.key userdb { args = quota_template=quota_rule=*:backend=%q driver = vpopmail } protocol imap { mail_max_userip_connections = 10 mail_plugins = " notify quota imap_quota mail_log" }

3 4

[Dovecot] SUMMARY: LDA vs LMTP, Cyrus SASL, verbose_proctitle
by Joseph Tam 12 Apr '11

12 Apr '11

A summary of answers I got to the questiosn I posed. > Is there a reason I should prefer LMTP over LDA for local delivery? Thanks for the responses I received. The benefits reported were more/better information logging, and service isolation. Also, one significant advantage not mentioned for LMTP was that one delivery failure to multiple recipients can be disambiguated; LDA can only return an exit code to be tested by the MTA, but the MTA cannot know which recipient(s) generated the error. This problem present can itself, for example, when one user has a full mailbox. An LDA will return EX_TEMPFAIL, and the message will be requeued, and delivery will be retried for all recipients (even those that were successfully delivered to). > The Wiki doesn't differentiates LMTP vs LDA with respect to sendmail > configuration, so am I correct that I just need to replace mail.local > with dovecot-lda, which will choose LDA/LMTP based on dovecot.conf? Not that simple, but I finally did find my answer in the Dovecot archives. It's too bad I had to spend hours tearing apart the sendmail docs before finding it http://www.dovecot.org/list/dovecot/2010-September/052936.html The .mc version of the configuration: # Use LMTP for local delivery over IPC channel FEATURE(`local_lmtp',`[IPC]') # Location of LMTP socket define(`LOCAL_MAILER_ARGS', `FILE /path/to/dovecot/lmtp') # Replace default sendmail LMTP options: the same options # with the 'P' flag removed so that the Return-Path is not # added (again?) define(`LOCAL_MAILER_FLAGS', `SXmnz9') MAILER(`local') I haven't tried this yet, but this is pretty close. > Also, can I consolidate authentication by configuring dovecot to use > what sendmail uses (Cyrus SASL) or vice versa? The Wiki hints this is > in the works. No response, so I guess the answer is no. > Lastly, toggling verbose_proctitle seems to have no effect on the output > of ps. Is verbose_proctitle broken for Solaris? The answer to is verbose_proctitle is broken for Solaris. There is no setproctitle(), and ps does not report changes to a process's argv[]: echo "main(int c,char**v){**v='x';sleep(9);}" | \ gcc -xc -o y -; ./y; rm y & ps -f You'll have to use "lsof", "pfiles" or "doveadm who" to get the information. Joseph Tam <jtam.home(a)gmail.com>

3 2

[Dovecot] Intermitent ldap auth problems benchmarking dovecot
by Maria Arrea 12 Apr '11

12 Apr '11

Hello We are using SLAMD (Distributed Load Generation Engine, www.slamd.com) to benchmark our dovecot server (ldap auth). We are simulating 2.000 simultaneous logins and 20% of them fail. We saw the following errors in the log: Apr 12 09:40:07 buzon dovecot: auth: Error: ldap(correo,192.168.4.153): Request queue is full (oldest added 1 secs ago) Apr 12 09:40:07 buzon dovecot: auth: Error: ldap(correo,192.168.4.153): Request queue is full (oldest added 1 secs ago) Apr 12 09:40:07 buzon dovecot: auth: Error: ldap(correo,192.168.4.153): Request queue is full (oldest added 1 secs ago) We increased auth_worker_max_count from 350 to 3500 (10x increase). Now we see the following errors (still 20% of logins fail): Apr 12 10:14:45 buzon dovecot: imap-login: Internal login failure (pid=29016 id=24783) (auth failed, 1 attempts): user=<correo>, method=PLAIN, rip=192.168.4.153, lip=192.168.4.80, mpid=21284 Apr 12 10:14:45 buzon dovecot: imap-login: Internal login failure (pid=29016 id=24784) (auth failed, 1 attempts): user=<correo>, method=PLAIN, rip=192.168.4.153, lip=192.168.4.80, mpid=21286 What are we doing wrong? We expect 1000 simultaneous imap sessions, we have 65.000 mailboxes. This is our doveconf -n output # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-238.5.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.6 (Tikanga) ext4 auth_debug = yes auth_master_user_separator = * auth_mechanisms = plain login auth_worker_max_count = 3500 base_dir = /var/run/dovecot/ default_client_limit = 5000 default_process_limit = 6500 disable_plaintext_auth = no imap_client_workarounds = tb-extra-mailbox-sep delay-newmail lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_fsync = never mail_gid = entrega mail_home = /buzones/%2.26Hn/%2.200Hn/%n/ mail_location = mdbox:/buzones/%2.26Hn/%2.200Hn/%n:INDEX=/indices_dovecot/indices/%2.26Hn/%2.200Hn/%n mail_max_userip_connections = 15000 mail_plugins = " zlib acl" mail_uid = entrega managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mdbox_rotate_interval = 1 days mdbox_rotate_size = 60 M passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } passdb { args = /etc/usuario_maestro.txt driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin/acl = vfile plugin/quota = dict:Cuota de usuario::file:/buzones/cuotas/%n plugin/quota_rule2 = Trash:storage=+10%% plugin/quota_warning = storage=95%% /usr/local/bin/quota-warning.sh 95 plugin/quota_warning2 = storage=80%% /usr/local/bin/quota-warning.sh 80 plugin/sieve = /buzones/%2.26Hn/%2.200Hn/%n/dovecot.sieve plugin/sieve_dir = /buzones//%2.26Hn/%2.200Hn/%n/sieve/ plugin/zlib_save = gz plugin/zlib_save_level = 9 protocols = pop3 imap sieve service anvil { client_limit = 25000 } service auth { client_limit = 28000 unix_listener auth-master { user = entrega } unix_listener auth-userdb { user = entrega } user = root } service imap-login { executable = /usr/libexec/dovecot/imap-login group = dovenull service_count = 0 } service imap { executable = /usr/libexec/dovecot/imap process_limit = 6000 } service managesieve-login { executable = /usr/libexec/dovecot/managesieve-login inet_listener sieve { port = 2000 } process_limit = 2000 } service managesieve { executable = /usr/libexec/dovecot/managesieve process_limit = 5000 } service pop3-login { executable = /usr/libexec/dovecot/pop3-login process_limit = 4000 service_count = 0 } service pop3 { executable = /usr/libexec/dovecot/pop3 process_limit = 4000 } ssl_ca = </etc/pki/generico/cacert.crt.pem ssl_cert = </etc/pki/generico/wildcard.crt ssl_key = </etc/pki/generico/wildcard-key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf driver = ldap } verbose_proctitle = yes protocol sieve { managesieve_implementation_string = dovecot managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 } protocol lda { hostname = us.es info_log_path = log_path = mail_fsync = optimized mail_plugins = sieve zlib postmaster_address = evcorreo(a)domain.es syslog_facility = mail } protocol imap { mail_plugins = zlib } protocol pop3 { mail_plugins = zlib pop3_enable_last = yes pop3_uidl_format = %g }

3 3

[Dovecot] Fwd: .dovecot.sieve as Mailbox
by Francisco Wagner C. Freire 12 Apr '11

12 Apr '11

---------- Forwarded message ---------- From: Francisco Wagner C. Freire <wgrcunha(a)gmail.com> Date: Tue, Apr 12, 2011 at 9:20 AM Subject: Re: [Dovecot] .dovecot.sieve as Mailbox To: Jan Phillip Greimann <jg(a)softjury.de> Yeah, i can do that, or change the user homedir, but i need some time to change scripts. But, is normal to dovecot show a file as a mailbox? And have any kind of option to hide this one? On Tue, Apr 12, 2011 at 9:15 AM, Jan Phillip Greimann <jg(a)softjury.de>wrote: > > > Am 12.04.2011 14:08, schrieb Francisco Wagner C. Freire: > > Hello, > Hi there, > > > > > I current using maildir and mail location is: > > *mail_location = maildir:%h:INDEX=%h/cache* > > > > Any tip to hide this to users? > > what's about > sieve_dir = ~/sieve > in 90-sieve.conf? > > must the sieve-files be in ~/ ? > > > > > Sorry for my bad english :) > Sorry for my bad english too ^^ > > Greetings Jan P. Greimann > Administrator (in training) > >

3 4

[Dovecot] .dovecot.sieve as Mailbox
by Francisco Wagner C. Freire 12 Apr '11

12 Apr '11

Hello, I current using dovecot 2.0.11 and with all other 2x versions occurring the same problem. When i create the file .dovecot.sieve and compiled one .dovecot.svbin on user homedir, the imap show it like a folder, example: doveadm mailbox list -u user(a)domain.com .. .. *dovecot.sieve* *dovecot.svbin* .. .. I current using maildir and mail location is: *mail_location = maildir:%h:INDEX=%h/cache* Any tip to hide this to users? Sorry for my bad english :) Att. Francisco Freire System Administrator

3 2

[Dovecot] trying to combine static userdb with LDAP passdb with per-user userdb_mail and userdb_home
by Igor Zinovik 12 Apr '11

12 Apr '11

Hello, dovecot users. I'm trying to cope with following problem I have single computer which will be going to be final destination for several virtual domains. Domains are stored in LDAP catalog. Dovecot will be working together with Postfix MTA running on same computer. I'm a bit confused how to achieve following thing: I want Postfix to use Dovecot LMTP server for mail delivery. All my mail is located under /var/vmail partition. I designed my own ldap schema and according to dovecot documentation that user should always has home and mail directory i added separate attributes for user home and mail. My typical user that is stored in LDAP has homeDirectory (which stores value like /var/vmail/domain.com/j/joe) and mailMessageStore (which stores value like /var/vmail/domain.com/j/joe/Maildir). All data under /var/vmail is owned by Postfix MTA user (which is called `postfix', uid=89). After reading dovecot documentation I understand that my setup needs to combine static userdb with LDAP passdb. But i also want dovecot to be able to deliver mail for local system users (that are stored in /etc/passwd). For system users i want to store their mail in $HOME/Mail. So i set mail_location = ~/Mail (which turns into /home/user/Mail), but for virtual (which are stored in LDAP) users i want to set mail (or maybe i should write here userdb_mail) to LDAP value mailMessageStore. Seems to me that LMTP server needs separate userdb query to fetch mail_location from LDAP. Setting mail_location = /var/vmail/%d/%n1/%u solves my problem, but I want dovecot to dynamically fetch maildir location from LDAP. Maybe in near future I would also store mail somewhere else not only under /var/vmail. And dovecot will fetch this information from LDAP. Here is excerpt from dovecot log when user tries to login: Apr 11 13:32:29 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Apr 11 13:32:29 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Apr 11 13:32:29 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Apr 11 13:32:29 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Apr 11 13:32:29 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Apr 11 13:32:29 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Apr 11 13:32:29 auth: Debug: auth client connected (pid=14748) Apr 11 13:32:29 auth: Debug: client in: AUTH 1 PLAIN service=imap lip=172.20.21.26 rip=172.20.20.216 lport=143 rport=1227 resp=<hidden> Apr 11 13:32:29 auth: Debug: ldap(joe(a)domain.com,172.20.20.216): pass search: base=pdomain=domain.com,ou=mail,dc=org,dc=ru scope=onelevel filter=(&(objectClass=mailAccount)(uid=joe)(accountStatus=TRUE)) fields=mail,userPassword,mailQuota,homeDirectory,mailMessageStore Apr 11 13:32:29 auth: Debug: ldap(joe(a)domain.com,172.20.20.216): result: mail(user)=joe(a)domain.com mailQuota(userdb_quota_rule=*:bytes=%$)=1073741824 mailMessageStore(userdb_mail)=/var/vmail/domain.com/p/joe/Maildir homeDirectory(userdb_home)=/var/vmail/domain.com/p/joe userPassword(password)=<hidden> Apr 11 13:32:29 auth: Debug: client out: OK 1 user=joe(a)domain.com Apr 11 13:32:29 auth: Debug: master in: REQUEST 2814377985 14748 1 5e00190b4fbfd1a4b8a50e13fa6562b1 Apr 11 13:32:29 auth: Debug: master out: USER 2814377985 joe(a)domain.com uid=89 gid=89 Apr 11 13:32:29 imap-login: Info: Login: user=<joe(a)domain.com>, method=PLAIN, rip=172.20.20.216, lip=172.20.21.26, mpid=14750 Apr 11 13:32:29 imap: Debug: Loading modules from directory: /usr/lib64/dovecot Apr 11 13:32:29 imap: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Apr 11 13:32:29 imap: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Apr 11 13:32:29 imap: Debug: Module loaded: /usr/lib64/dovecot/lib11_trash_plugin.so Apr 11 13:32:29 imap: Debug: Module loaded: /usr/lib64/dovecot/lib20_autocreate_plugin.so Apr 11 13:32:29 imap: Debug: Module loaded: /usr/lib64/dovecot/lib20_expire_plugin.so Apr 11 13:32:29 imap(joe(a)domain.com): Debug: Effective uid=89, gid=89, home= Apr 11 13:32:29 imap(joe(a)domain.com): Debug: Quota root: name=User quota backend=maildir args= Apr 11 13:32:29 imap(joe(a)domain.com): Debug: Quota rule: root=User quota mailbox=* bytes=1073741824 messages=0 Apr 11 13:32:29 imap(joe(a)domain.com): Debug: Quota warning: bytes=1020054732 (95%) messages=0 reverse=no command=/usr/libexec/dovecot/quota-warning.sh 95 joe(a)domain.com domain.com Apr 11 13:32:29 imap(joe(a)domain.com): Debug: Quota warning: bytes=966367641 (90%) messages=0 reverse=no command=/usr/libexec/dovecot/quota-warning.sh 90 joe(a)domain.com domain.com Apr 11 13:32:29 imap(joe(a)domain.com): Debug: Quota warning: bytes=858993459 (80%) messages=0 reverse=no command=/usr/libexec/dovecot/quota-warning.sh 80 joe(a)domain.com domain.com Apr 11 13:32:29 imap(joe(a)domain.com): Error: user joe(a)domain.com: Initialization failed: Initializing mail storage from mail_location setting failed: Home directory not set for user. Can't expand ~/ for mail root dir in: ~/Mail Apr 11 13:32:29 imap(joe(a)domain.com): Error: Invalid user settings. Refer to server log for more information. Here is my ldap query: pass_filter = (&(objectClass=mailAccount)(uid=%n)(accountStatus=TRUE)) # ldap_attr = dovecot_variable pass_attrs = mail=user, userPassword=password, mailQuota=userdb_quota_rule=*:bytes=%$,\ homeDirectory=userdb_home, mailMessageStore=userdb_mail What is the best way to do in my situation? Should i just add two attributes to each LDAP user like mailuid and mailgid and set both these variables to `postfix'. Or maybe i should just forget about mail for local system users and just user `prefetch' userdb. I'm just mazed about dovecot userdb and passdb queries. It so powerful but also so hard to understand. I would appreciate any help, since I peck dovecot authentication and userdb-passdb queries like woodpecker starting from last week. Do I understand right that dovecot during userdb fetches Unix UID which will be used to access data on disk? I just want postfix (uid=89) to allow to do this. Here is `dovecot -n' output: # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-238.1.1.1.el5 x86_64 CentOS release 5.5 (Final) auth_debug = yes auth_failure_delay = 3 secs auth_mechanisms = plain login auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 listen = * log_path = /var/log/dovecot login_greeting = Dovecot ready to serve. mail_debug = yes mail_fsync = always mail_location = maildir:~/Mail mail_nfs_index = yes mail_nfs_storage = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags mmap_disable = yes passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin/autocreate = &BBoEPgRABDcEOAQ9BDA- plugin/autocreate2 = &BCEEPwQwBDw- plugin/autosubscribe = &BBoEPgRABDcEOAQ9BDA- plugin/autosubscribe2 = &BCEEPwQwBDw- plugin/expire = &BBoEPgRABDcEOAQ9BDA- 7 &BCEEPwQwBDw- 30 plugin/login_executable = /usr/libexec/dovecot/managesieve-login plugin/mail_executable = /usr/libexec/dovecot/managesieve plugin/quota = maildir:User quota plugin/quota_rule = *:storage=1GB plugin/quota_warning = storage=95%% /usr/libexec/dovecot/quota-warning.sh 95 %u %d plugin/quota_warning2 = storage=90%% /usr/libexec/dovecot/quota-warning.sh 90 %u %d plugin/quota_warning3 = storage=80%% /usr/libexec/dovecot/quota-warning.sh 80 %u %d plugin/sieve_dir = /var/vmail/%d/%1n/%n/.dovecot.sieve plugin/sieve_extensions = +imapflags plugin/sieve_storage = /var/vmail/%d/%1n/%n/sieve protocols = pop3 imap lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { executable = /usr/libexec/dovecot/imap-login inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 1 } service imap { executable = /usr/libexec/dovecot/imap } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } } service managesieve-login { executable = /usr/libexec/dovecot/managesieve-login inet_listener sieve { port = 4190 } service_count = 1 } service managesieve { executable = /usr/libexec/dovecot/managesieve } service pop3-login { executable = /usr/libexec/dovecot/pop3-login inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } service_count = 1 } service pop3 { executable = /usr/libexec/dovecot/pop3 } service quota-warning { executable = script /usr/libexec/dovecot/quota-warning.sh user = dovecot } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=postfix gid=postfix driver = static } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_plugin_dir = /usr/lib64/dovecot mail_plugins = autocreate expire quota imap_quota trash } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_lock_session = yes pop3_uidl_format = %08Xu%08Xv } protocol lmtp { info_log_path = /var/log/dovecot-lmtp-info.log log_path = /var/log/dovecot-lmtp.log mail_plugins = quota sieve } Here is my typical LDAP user: dn: uid=joe,pdomain=domain.com,ou=mail,dc=org,dc=ru objectClass: top objectClass: uidObject objectClass: mailAccount accountStatus: TRUE mail: joe(a)domain.com mailQuota: 1073741824 mailMessageStore: /var/vmail/domain.com/j/joe/Maildir mailOwnerFirstName: Joe mailOwnerLastName: User registerPersonFirstName: Joe registerPersonLastName: User registerDate: 1301665769 homeDirectory: /var/vmail/domain.com/j/joe uid: joe userPassword: {SSHA}FvxQwgDycssHhfoMTtkzogZ0Nh43PpHL

1 1

Re: [Dovecot] IO rate quotas?
by Alan Brown 12 Apr '11

12 Apr '11

From: Timo Sirainen <tss(a)iki.fi> Subject: Re: [Dovecot] IO rate quotas? > So a single process that is reading files fast enough from disk can > cause disk IO to spike in a way that makes all other processes wait for > available disk IO? It's not a single process. Thunderbird's newest defaults are to syncronize every folder and it will open one connectrion per folder in order to do that. Appropriate disk/swappiness/readahead/cache tuning is required - along with enough ram to cope with several users trying this at once. The underlaying filesystem is also important. as a for-instance, this kind of load with maildir format will effectively _kill_ a GFS box. Our fix was to install systemwide defaults on managed systems to not synchronize (not needed, the home directories are on network storage anyway) and to ask people to check/unset this on laptops/etc

5 4

[Dovecot] hardlinks deliver not work
by Arnaud Yonnet 11 Apr '11

11 Apr '11

hello, I try to use the deliver dovecot with hardlinks. in command line, it's work with this command /usr/lib/dovecot/deliver -p themail -d user when i send mail with postfix. I received the mail for all users but it doesn't create hardlinks. i check with command line md5sum themail it same for all mail . but it don't create hardlinks. in my master.cf dovecot unix - n n - - pipe user=utilisateurmail:utilisateurmail argv=/usr/lib/dovecot/deliver -d ${user} have you got a solution ? thinks you Arnaud Yonnet ps, im sorry. my English is really poor....

3 4

[Dovecot] Over quota and send Mails
by Jim Knuth 11 Apr '11

11 Apr '11

Hello, if a user over quota is, he can do no mails more receive. So far, so good. But why he can do, nevertheless, mails do send? Has that to do something with dict option? -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte HTML-Mails! Zufallszitat: Richtig verheiratet ist erst der Mann, der jedes Wort versteht, das seine Frau nicht gesagt hat. (Alfred Hitchcock)

3 4

[Dovecot] domain variable still empty
by Andre Rodier 11 Apr '11

11 Apr '11

Hello all, First, thanks for your help with my previous NFS problem. I am trying to mount a mail server, with debian and dovecot 1.2. Until now, I have both shared and public folders working, on a NFS share. indexes are stored locally, as well as per user flags. Sive is also working :-) Now, I'd like to restrict sharing by domain, and for this, to use the "%d" variable When I authenticate, for instance using arodier@red2team, the authentication works. However, the "%d" variable is still empty, when I'd like it to contains "red2team" Here my config: -------------------------------------------------------------- # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.1 nfs4 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps managesieve ssl: required disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_greeting: Titan Ready mail_access_groups: mails mail_privileged_group: mails mail_uid: vmails mail_gid: mails mail_location: maildir:/home/emails/%d/%n/Maildir:INDEX=/var/mail/indexes/%n:CONTROL=/var/mail/indexes/%n mail_debug: yes mmap_disable: yes fsync_disable: yes mail_nfs_storage: yes lock_method: flock mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota acl imap_acl fts fts_squat mail_plugins(imap): quota imap_quota acl imap_acl fts fts_squat mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve namespace: type: private separator: / location: maildir:/home/emails/%d/%n/Maildir:INDEX=/var/mail/indexes/private/%n:CONTROL=/var/mail/indexes/private/%n inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: Shared/%%u/ location: maildir:/home/emails/%d/%%n/Maildir:INDEX=/var/mail/indexes/users/%n/%%n:CONTROL=/var/mail/indexes/users/%n/%%n list: children namespace: type: public separator: / prefix: Team/ location: maildir:/home/emails/%d/Public/Maildir/:INDEX=/var/mail/indexes/public/%n list: yes lda: postmaster_address: postmaster(a)red2group.com hostname: smtp1.red2group.com mail_plugins: quota acl sieve auth_socket_path: /var/run/dovecot/auth-master auth default: mechanisms: plain login default_realm: red2team username_format: %u verbose: yes debug: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 plugin: quota: maildir acl: vfile:/etc/dovecot/acls/:cache_secs=300 acl: vfile acl_shared_dict: proxy::acl sieve: /home/emails/%d/%n/Filters/Active.sieve sieve_dir: /home/emails/%d/%n/Filters fts: squat dict: quota: ldap:/etc/dovecot/dovecot-ldap.conf acl: mysql:/etc/dovecot/dovecot-mysql.conf -------------------------------------------------------------- This is now the content of the dovecot-ldap config -------------------------------------------------------------- auth_bind = yes base = dc=red2,dc=srv default_pass_scheme = PLAIN-MD5 hosts = callisto.red2.srv thebe.red2.srv ldap_version = 3 pass_filter = (&(objectClass=posixAccount)(uid=%n)) scope = subtree user_attrs = homeDirectory=home,gosaMailQuota=quota_rule=*:storage=%$M, mail_plugins user_filter = (&(objectClass=posixAccount)(uid=%n)) -------------------------------------------------------------- What surprise me is this line during the authentication: ===> auth(arodier(a)red2team,10.10.2.19): username changed arodier@red2team -> arodier Any idea, please ? I am stuck on that since two days ! Kind regards, André.

2 4

[Dovecot] INBOX empty after dsync
by Gary Chodos 11 Apr '11

11 Apr '11

After hearing so many good things about mdbox, I am testing it. I moved my Maildir to a test box, and did the conversion with dsync which reported no errors and appeared to go fine after I set: namespace { separator = / inbox = yes } and changed mail_location=mdbox:~/mdbox But the problem is that the Inbox now is empty in my imap client. What did I do wrong? I can see the emails are there if I grep for subject lines I know exist in my inbox within ~/mdbox, but in the imap client it is as if inbox is totally empty. All the other folders appear fine in imap client.

1 1

[Dovecot] Memory access mistake
by Jim Knuth 10 Apr '11

10 Apr '11

Hi, I have the following report after a cron job? Unfortunately, I do not know the English word. Memory access mistake/error? /tools/expunge: 2980 Speicherzugriffsfehler doveadm expunge -A mailbox Spam savedbefore 8d What can this lie with? What must I show in addition? dovecot-n or what? Thank you. # 2.0.11 (a0c1c6f7cf6e): /etc/dovecot/dovecot.conf # OS: Linux 2.6.29.4 i686 Debian wheezy/sid -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte HTML-Mails! Zufallszitat: Die Menschheit ist zu weit vorwärts gegangen, um sich zurückzuwenden, und bewegt sich zu rasch, um anzuhalten. [Churchill]

4 8

[Dovecot] Dovecot 2.0 config bug with SSL certificate per protocol?
by Andy Smith 09 Apr '11

09 Apr '11

Hi, yesterday I upgraded Dovecot from 1.2 to 2.0.11. I'd seen that there was a config file converter to make the upgrade smooth so was expecting it to be pretty quick and easy. In the end I spent a long time trying to get it working as it just wouldn't listen on the ssl ports, imaps and pop3s. I am using per portocol SSL certificates, as I was in version 1.2. The part of my config is as follows (as generated by doveconf): protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_plugins = fts fts_squat ssl = yes ssl_cert = </usr/local/etc/ssl.crt/imap.crt ssl_key = </usr/local/etc/ssl.key/imap.key } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv ssl = yes ssl_cert = </usr/local/etc/ssl.crt/pop3.crt ssl_key = </usr/local/etc/ssl.key/pop3.key } But when I started dovecot it was only listening on the non SSL ports for IMAP and POP3. I went through many things, adding in a service imap-login section with the SSL port set via inet_listener and spent ages googling for how to get it to work. In the end it turns out it was that the global ssl setting was set to "no", but I hadn't enabled this previously as this requires that there are global SSL certificates, which I don't have; I have specific certs for IMAP and for POP3. Also this isn't how dovecot 1.2 worked, there I specificed the protocols (pop3, pop3s, imap, imaps) and specificed the protocol certs and it worked. Anyway, I ended up just specifiing my pop3 certs as the global certs, this is then redefined in the pop3 protcol section etc. The config seems to work, but to me all this doesn't seem logical and doesn't work like in dovecot 1.2. Maybe this is something that can be cleaned up in the next version? thanks Andy.

3 5

[Dovecot] transferring imap folders
by Voytek Eymont 09 Apr '11

09 Apr '11

I have some old mail on courier-imap that I'd like to bring over some of the readme says I need to make Dovecot's inbox as "INBOX" not "Inbox" for courier-imap compatibility.. that seems to be already default, no ? also, my INBOX is mainly like 'sent/year/month' and some other 'work/this' subfolders is there a tool I need to use, or should just copy over dir tree from old server and suck'n'see ? dovecot --version 1.2.9 -- Voytek

2 1