- dovecot - dovecot.org

[Dovecot] POP Log entries
by Ralf Hildebrandt 10 Feb '11

10 Feb '11

Disconnected: Logged out top=0/0, retr=0/0, del=0/3239, size=511881537 Disconnected: Logged out top=0/0, retr=2/316038, del=0/3238, size=511876309 What do the numbers mean? Especially since there are two numbers for each category... -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

2 1

[Dovecot] Error message with static userdb
by Carsten Laun-De Lellis 10 Feb '11

10 Feb '11

Hi all I am trying to migrate to dovecot 2.0.9 Dovecot starts without warnings but when I try to connect with a client I always got this error message in the log file: Feb 10 12:57:36 v37143 dovecot: master: Dovecot v2.0.9 starting up (core dumps disabled) Feb 10 12:57:56 v37143 dovecot: auth: Fatal: static userdb: Empty key (=) Feb 10 12:57:56 v37143 dovecot: master: Error: service(auth): command startup failed, throttling Feb 10 12:58:31 v37143 dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=17537, input bytes=0 Feb 10 12:58:56 v37143 dovecot: auth: Fatal: static userdb: Empty key (=) Feb 10 12:58:56 v37143 dovecot: master: Error: service(auth): command startup failed, throttling Feb 10 12:59:26 v37143 dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=17537, input bytes=0 Feb 10 12:59:26 v37143 dovecot: imap-login: Disconnected (no auth attempts): rip=217.91.177.10, lip=89.202.2.143 This is the output of dovecot n: # 2.0.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-028stab070.14 x86_64 Ubuntu 10.04.1 LTS reiserfs auth_mechanisms = plain login disable_plaintext_auth = no hostname = v37143.1blu.de mail_location = maildir:/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = maildir:/vmail/%d/%n prefix = separator = / type = private } passdb { args = /scripts/sql/dovecot/user_auth.sql driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/lib/dovecot/sieve/global sieve_global_path = /var/lib/dovecot/sieve/default.sieve } postmaster_address = root(a)delellis.net protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0660 user = vmail } } ssl_cert = </certs/mail/mailpublic.pem ssl_key = </certs/mail/mailkey.pem userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n allow_all_users = yes driver = static } protocol lda { mail_plugins = " sieve" } Any ideas ? Mit freundlichem Gruß Carsten Laun-De Lellis Dipl.-Ing. Elektrotechnik Certified Information Systems Auditor (CISA) Hauptstrasse 13 D-67705 Trippstadt Phone: +49 (6306) 992140 Mobile: +49 (151) 27530865 email: <mailto:carsten.laun-delellis@delellis.net> carsten.laun-delellis(a)delellis.net

2 1

[Dovecot] IMAP subfolders and MDBOX
by Frank Bonnet 10 Feb '11

10 Feb '11

Hello We actually use MBOX format on our mailhub but this does not permit to create IMAP subfolders. Many users are asking me fot this feature and I agree with them of course. My problem is to choose the format that will permit imap subfolders creation. Maildir is not my favorite format and I wonder about MDBOX. Does it permit imap subfolders creation ? It is possible to convert from MBOX to MDBOX in one shot ? Is it stable / mature enoug for a production server ( 4000 users ) ? Thank you

3 5

[Dovecot] /var/mail/<user> and mail group privileges
by Michal Hlavinka 10 Feb '11

10 Feb '11

Hi Timo, I'm facing problem with mail group privileges (again), because I've heard a few complains. I was looking at old emails and list archives, but still does not know the answer. In default (fedora/rhel) setup mail group and 0660 privileges are used. This means that when mail_location = mbox:~/mail:INBOX=/var/mail/%u is used, dovecot fails with first (and only first) attempt to select inbox (imap) or login (pop3). Shouldn't mkdir and chown make together a transaction? When it fails just for first time, it confuses some admins (this is the reason why I'm getting complains (bug reports) just because missing/wrong configuration). I think it a) should work even for first connection (ignore chown failure) or b)it should not work for following connection, so the behavior should be more consistent. Also it seems unclear what configuration option is required for making this work in new dovecot versions where configuration is split to mail_privileged_group and mail_access_groups. I see that after reading documentation in 10-mail.conf, some admins expects mail_privileged_group to be enough while mail_access_group is required to prevent fchown failure. Would it be possible to explicitly mention in the config file what option is required? I can add patch with this to our rpm, but we always prefer to be as close to the upstream as possible. Thanks Michal

2 4

[Dovecot] LDAP quota groups
by ian+dovecot＠comtek.co.uk 10 Feb '11

10 Feb '11

Is there any way to have a per-LDAP-group quota? The OpenLDAP folk's suggestions are to hack the source for an overlay (ideal, but it looks somewhat involved) or to do it at the application (Dovecot). I've added an LDAP userattr 'quotaMegaBytes' which is great for allowing me to override the server's default quota on a per-user basis, but ideally I'd be able to override the quota only for people who are member of a certain LDAP group. Perhaps I could override it for IMAP sessions with a postlogin script, but I can't see any way to apply it to deliver. Thanks for any suggestions, Ian

1 0

[Dovecot] Access rights after dsync
by Joan Moreau 10 Feb '11

10 Feb '11

Hi, It looks like the access rights are not correctly preserved after a dsync I have rwXr-X-- from my original folder (which is right) I have rwXrwXrwX in the "mirrored" fodler (which is very wrong) Not sure what cause this, but it looks like a bug Best, jm

2 1

[Dovecot] Dovecot 2.0.7 doesn't disassociate STDERR when it daemonizes.
by Virgil Champlin 10 Feb '11

10 Feb '11

At least it appears that way on my FreeBSD 8.1 system. This is probably unnoticeable in regular use but I happen to use CFengine(v2) for system configuration & monitoring. If it notices dovecot not running it tries to start it and hangs. I believe cfengine (cfagent) has created a pipe to monitor the start commmand's stderr and is waiting for this pipe to close. This never happens because the pipe has been inherited by dovecot which, in version 2, doesn't release stderr as part of its daemonization. Although cfengine could be more defensive, I believe dovecot should be disassociating from the inherited stderr. Looking at master/main.c, I see stdin, stdout & stderr being set to /dev/null in main() if they are inherited unassigned: do { null_fd = open("/dev/null", O_WRONLY); if (null_fd == -1) i_fatal("Can't open /dev/null: %m"); fd_close_on_exec(null_fd, TRUE); } while (null_fd <= STDERR_FILENO); But stderr is missing when a later dup2() is used to release any inherited values not covered by the above: if (dup2(null_fd, STDIN_FILENO) < 0 || dup2(null_fd, STDOUT_FILENO) < 0) i_fatal("dup2(null_fd) failed: %m"); Adding a dup2 for stderr to the above statement works in my simple test case but I'm unsure if there are other issues which may require delaying it. Dovecot 1.2.16 approaches this a little differently & does slightly delay the stderr dup2. The appended diff (v2.0.7) works for me but a more informed opinion might have a better suggestion. Thank you very much for your time. I just started using Dovecot and really like it. -virgil --- main.c.orig 2010-11-04 11:58:48.000000000 -0700 +++ main.c 2011-01-05 18:11:45.000000000 -0800 @@ -717,7 +717,8 @@ } if (dup2(null_fd, STDIN_FILENO) < 0 || - dup2(null_fd, STDOUT_FILENO) < 0) + dup2(null_fd, STDOUT_FILENO) < 0 || + dup2(null_fd, STDERR_FILENO) < 0) i_fatal("dup2(null_fd) failed: %m"); pidfile_path = -=-=-=-=-=-=-=-=-=-=-

2 1

[Dovecot] login_trusted_networks (v2.0.8)
by Don Buchholz 10 Feb '11

10 Feb '11

I just spent a bit puzzling over "login_trusted_networks". My problem was using "10.1.2/24" instead of "10.1.2.0/24". Here are some things I looked for during troubleshooting that didn't pan out: (1) No messages printed to syslog. (2) Search for "login_trusted_networks" on the Wiki (wiki2) failed. (3) Comments in example config file didn't specify expected format. Anyway, it works now. <shrug> - Don =================== 'doveconf -n' (redacted): > *[root@postal ~]# **doveconf -n* > # 2.0.8: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.9-67.0.1.ELsmp i686 Red Hat Enterprise Linux WS > release 4 (Nahant Update 6) ext3 > auth_username_format = %Lu > auth_verbose = yes > auth_verbose_passwords = sha1 > login_log_format_elements = user=<%u> service=%Us method=%m rip=%r > lip=%l mpid=%e %c > login_trusted_networks = xx.xx.x.0/24 xx.xx.xx.0/23 > mail_location = maildir:/Virtual_Users/%u/Mail > passdb { > driver = pam > } > passdb { > args = scheme=CRYPT username_format=%u /etc/dovecot/users > driver = passwd-file > } > ssl_ca = </etc/dovecot/ssl/iMove_2011_CAcert.pem > ssl_cert = </etc/dovecot/ssl/postal_cert.pem > ssl_key = </etc/dovecot/ssl/postal_key+req.pem > ssl_key_password = ******** > ssl_parameters_regenerate = 12 > userdb { > driver = passwd > } > userdb { > args = username_format=%u /etc/dovecot/users > driver = passwd-file > } > verbose_proctitle = yes > protocol imap { > ssl_cert = </etc/dovecot/ssl/imap_cert.pem > ssl_key = </etc/dovecot/ssl/imap_key+req.pem > ssl_key_password = </etc/dovecot/ssl/imap.pw > } > protocol pop3 { > ssl_cert = </etc/dovecot/ssl/pop3_cert.pem > ssl_key = </etc/dovecot/ssl/pop3_key+req.pem > ssl_key_password = </etc/dovecot/ssl/pop3.pw > } > *[root@postal ~]#*

2 1

[Dovecot] Error: FETCH [1] for mailbox badbox UID 1 got too little data: 2 vs 4
by Chris Wilson 10 Feb '11

10 Feb '11

Hi all, I can send myself a test message that causes Dovecot to crash when I open it in Alpine, with the following error: Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: FETCH [1] for mailbox badbox UID 1 got too little data: 2 vs 4 Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: Corrupted index cache file /home/chris/mail/.imap/badbox/dovecot.index.cache: Broken MIME parts for mail UID 1 Jan 12 14:52:52 one-mail dovecot: imap(chris): Disconnected: FETCH failed bytes=485/1394 I can do this as follows: $ touch ~/mail/badbox $ echo test | /usr/libexec/dovecot/dovecot-lda -m badbox $ cat ~/mail/badbox >From MAILER-DAEMON Wed Jan 12 14:52:29 2011 test X-IMAPbase: 1294843949 0000000001 X-UID: 1 Status: X-Keywords: Content-Length: 1 And then when I try to open badbox in Alpine (over IMAP), and then open this email, I get the error above, and the connection is aborted. I expect that the "test" line is not a valid header, but dovecot should not crash when opening it. Cheers, Chris. -- Aptivate | http://www.aptivate.org | Phone: +44 1223 760887 The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES Aptivate is a not-for-profit company registered in England and Wales with company number 04980791.

2 1

[Dovecot] Panic: file mailbox-list-maildir.c: line 133: unreached
by Holger Mauermann 10 Feb '11

10 Feb '11

I converted personal mailboxes from maildir to sdbox. Public mailboxes are still in maildir format, because I need per-user seen flags. However, if the user is subscribed to public mailboxes and the client sends 'LIST (SUBSCRIBED) "" *', dovecot crashes with: imap(holger(a)mauermann.org): Panic: file mailbox-list-maildir.c: line 133: unreached imap(holger(a)mauermann.org): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3756a) [0x7f25f7b1456a] -> /usr/lib/dovecot/libdovecot.so.0(+0x375b6) [0x7f25f7b145b6] -> /usr/lib/dovecot/libdovecot.so.0(+0x118ca) [0x7f25f7aee8ca] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x35cce) [0x7f25f7d8acce] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_is_valid_pattern+0x26) [0x7f25f7d80146] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x33a31) [0x7f25f7d88a31] -> /usr/lib/dovecot/libdovecot-storage.so.0(fs_list_iter_next+0x2f) [0x7f25f7d885cf] -> /usr/lib/dovecot/modules/lib01_acl_plugin.so(+0xb658) [0x7f25f6f2c658] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_iter_next+0xa) [0x7f25f7d7faba] -> dovecot/imap(+0xc529) [0x7f25f824d529] -> dovecot/imap(cmd_list_full+0x43e) [0x7f25f824e48e] -> dovecot/imap(+0x10dad) [0x7f25f8251dad] -> dovecot/imap(+0x10e8d) [0x7f25f8251e8d] -> dovecot/imap(client_handle_input+0x135) [0x7f25f82520c5] -> dovecot/imap(client_in put+0x62) [0x7f25f8252a22] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x48) [0x7f25f7b1f898] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7f25f7b2080f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f25f7b1f828] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f25f7b0dcf3] -> dovecot/imap(main+0x30f) [0x7f25f825b07f] -> /lib/libc.so.6(__libc_start_main+0xfe) [0x7f25f736cd8e] -> dovecot/imap(+0x9279) [0x7f25f824a279] master: Error: service(imap): child 32285 killed with signal 6 (core dumped) This does not happen with 'LSUB "" *' or with personal mailboxes in maildir format. Below is the gdb and doveconf -n output: (gdb) bt full #0 0x00007f25f7381ba5 in raise () from /lib/libc.so.6 No symbol table info available. #1 0x00007f25f73856b0 in abort () from /lib/libc.so.6 No symbol table info available. #2 0x00007f25f7b1457d in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:187 backtrace = 0x7f25f980d468 "/usr/lib/dovecot/libdovecot.so.0(+0x3756a) [0x7f25f7b1456a] -> /usr/lib/dovecot/libdovecot.so.0(+0x375b6) [0x7f25f7b145b6] -> /usr/lib/dovecot/libdovecot.so.0(+0x118ca) [0x7f25f7aee8ca] -> /usr/lib/do"... #3 0x00007f25f7b145b6 in i_internal_fatal_handler (ctx=0x7fff36a6acc0, format=<value optimized out>, args=<value optimized out>) at failures.c:645 status = 0 #4 0x00007f25f7aee8ca in i_panic (format=0x7e1d <Address 0x7e1d out of bounds>) at failures.c:259 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff36a6ad90, reg_save_area = 0x7fff36a6acd0}} #5 0x00007f25f7d8acce in maildir_is_valid_pattern (list=<value optimized out>, pattern=<value optimized out>) at mailbox-list-maildir.c:133 No locals. #6 0x00007f25f7d80146 in mailbox_list_is_valid_pattern (list=0x7f25f98422d0, pattern=0x7f25f980d410 "public") at mailbox-list.c:651 _data_stack_cur_id = 0 ret = <value optimized out> #7 0x00007f25f7d88a31 in fs_list_subs (ctx=0x7f25f9818b70) at mailbox-list-fs-iter.c:683 node = <value optimized out> flags = MAILBOX_SUBSCRIBED ns = <value optimized out> path = <value optimized out> dir = <value optimized out> fname = <value optimized out> storage_name = 0x7f25f980d410 "public" len = 0 st = {st_dev = 139801076486872, st_ino = 19, st_nlink = 139801053739543, st_mode = 128, st_uid = 0, st_gid = 1, __pad0 = 0, st_rdev = 139801046211004, st_size = 206158430224, st_blksize = 140734110281536, st_blocks = 140734110281344, st_atim = {tv_sec = 579820584960, tv_nsec = 139801076651024}, st_mtim = {tv_sec = 139801076728920, tv_nsec = 139801076766928}, st_ctim = {tv_sec = 139801076486872, tv_nsec = 536871048}, __unused = {128, 139801076731466, 139801046189669}} #8 0x00007f25f7d885cf in fs_list_iter_next (_ctx=0x7f25f9818b70) at mailbox-list-fs-iter.c:356 _data_stack_cur_id = 0 info = <value optimized out> __FUNCTION__ = "fs_list_iter_next" #9 0x00007f25f6f2c658 in acl_mailbox_list_iter_next_info (_ctx=<value optimized out>) at acl-mailbox-list.c:205 alist = 0x7f25f9835410 #10 acl_mailbox_list_iter_next (_ctx=<value optimized out>) at acl-mailbox-list.c:372 ctx = 0x7f25f98163f0 info = 0x7f25f98518d0 ret = <value optimized out> #11 0x00007f25f7d7faba in mailbox_list_iter_next (ctx=0x7e1d) at mailbox-list.c:1029 info = <value optimized out> #12 0x00007f25f824d529 in list_namespace_mailboxes (cmd=<value optimized out>) at cmd-list.c:377 info = 0x80 flags = 536871048 str = 0x7f25f980d2d8 ret = 1 ns = 0x0 name = 0x7f25f98518d0 "Public/public" #13 cmd_list_continue (cmd=<value optimized out>) at cmd-list.c:792 _data_stack_cur_id = 4 ctx = 0x7f25f9848458 #14 0x00007f25f824e48e in cmd_list_full (cmd=0x7f25f9848350, lsub=false) at cmd-list.c:957 client = 0x7f25f9847be0 args = 0x7f25f984ac08 list_args = 0x7f25f984acd0 arg_count = <value optimized out> ctx = 0x7f25f9848458 patterns = {arr = {buffer = 0x7f25f98484a8, element_size = 8}, v = 0x7f25f98484a8, v_modifiable = 0x7f25f98484a8} pattern = 0x7f25f984adc8 "*" patterns_strarr = <value optimized out> #15 0x00007f25f8251dad in client_command_input (cmd=0x7f25f9848350) at imap-client.c:661 client = 0x7f25f9847be0 command = <value optimized out> __FUNCTION__ = "client_command_input" #16 0x00007f25f8251e8d in client_command_input (cmd=0x7f25f9848350) at imap-client.c:711 client = 0x7f25f9847be0 command = 0x0 __FUNCTION__ = "client_command_input" #17 0x00007f25f82520c5 in client_handle_next_command (client=0x7f25f9847be0) at imap-client.c:752 size = 26 #18 client_handle_input (client=0x7f25f9847be0) at imap-client.c:764 _data_stack_cur_id = 3 ret = false remove_io = <value optimized out> handled_commands = false __FUNCTION__ = "client_handle_input" #19 0x00007f25f8252a22 in client_input (client=0x7f25f9847be0) at imap-client.c:803 cmd = <value optimized out> output = 0x7f25f98481c8 bytes = <value optimized out> __FUNCTION__ = "client_input" #20 0x00007f25f7b1f898 in io_loop_call_io (io=0x7f25f9848260) at ioloop.c:383 ioloop = 0x7f25f98155e0 t_id = 2 #21 0x00007f25f7b2080f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:213 ctx = 0x7f25f9815810 event = 0x7f25f9815880 list = 0x7f25f98482b0 io = 0x7e1d tv = {tv_sec = 1782, tv_usec = 549357} msecs = <value optimized out> ret = <value optimized out> i = 0 call = false #22 0x00007f25f7b1f828 in io_loop_run (ioloop=0x7f25f98155e0) at ioloop.c:404 No locals. #23 0x00007f25f7b0dcf3 in master_service_run (service=0x7f25f98154b0, callback=0x7e1d) at master-service.c:484 No locals. #24 0x00007f25f825b07f in main (argc=1, argv=0x7f25f9815370) at main.c:375 set_roots = {0x7f25f8460da0, 0x0} service_flags = <value optimized out> storage_service_flags = <value optimized out> postlogin_socket_path = 0x0 username = 0x0 c = <value optimized out> # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35-23-virtual x86_64 Ubuntu 10.10 auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 apop disable_plaintext_auth = no lmtp_save_to_detail_mailbox = yes mail_debug = yes mail_location = sdbox:~/dbox:DIRNAME=.dbox-mails mail_plugins = " quota acl zlib lazy_expunge" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace backup { hidden = yes list = no location = sdbox:~/expunged:DIRNAME=.dbox-mails prefix = .EXPUNGED/ separator = / type = private } namespace other { list = children location = sdbox:%%h/dbox:DIRNAME=.dbox-mails prefix = Shared/%%u/ separator = / subscriptions = no type = shared } namespace pub { list = children location = maildir:/var/spool/imap/public:INDEX=~/public prefix = Public/ separator = / subscriptions = no type = public } namespace user { inbox = yes location = prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = file:/var/spool/imap/shared-mailboxes.dict lazy_expunge = .EXPUNGED/ quota = dict:::file:%h/dbox/dovecot-quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+50M sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve rejection_subject = Mail delivery failed: %s service auth { unix_listener auth-exim { user = Debian-exim } unix_listener auth-userdb { user = vmail } } service lmtp { inet_listener lmtp { port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = " quota acl zlib lazy_expunge sieve" } protocol lda { mail_plugins = " quota acl zlib lazy_expunge sieve" } protocol imap { mail_plugins = " quota acl zlib lazy_expunge imap_quota imap_acl imap_zlib" } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh }

2 1

[Dovecot] courier-imap to dovecot-imap migration: missing TLS_TRUSTCERTS feature
by Uffe Jakobsen 10 Feb '11

10 Feb '11

Hi, I'm attempting an one-to-one migration from courier-imap to dovecot-imap. current state: Imap-server has a self signed certificate Every client/user has a self signed client certificate that is used for SSL/TLS client authentication. All certificates are self signed "standalone" cerfificates - no CA hierarchy/structure is made. With courier-imap we could just put every client certificate into a trusted cert file (or hashed directory for a larger number of clients) and courier-imap would check that through TLS_TRUSTCERTS. I would like to keep the current appproach and avoid the whole mini CA setup - that way I can also avoid reissuing new certs to all existing users. Question: can a similar setup be achieved with dovecot-imap ? I've already made numerous attempts with no luck. As far as I can see dovecot-imap does not seem to implement the concept of checking trusted (self signed standalone client) certs - even though it is based on openssl like courier-imap is - but I may be wrong here. I'm using dovecot-2.0.7 (from ports) on FreeBSD Thanks in advance. Kind regards Uffe Jakobsen

2 1

[Dovecot] dovecot not delivering emails in the right folder
by paulino＠calderonpale.com 10 Feb '11

10 Feb '11

Hello everyone, I'm having trouble getting postfix + dovecot to work correctly. It seems like Postfix is receiving and delivering the emails correctly but dovecot is placing/looking for them in the wrong folder therefore the clients aren't receiving any new emails. I switched from courier and followed a tutorial found here: http://library.linode.com/email/postfix/dovecot-mysql-debian-5-lenny Dovecot's log: deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: Module loaded: /usr/lib/dovecot/modules/lda/lib90_cmusieve_plugin.so deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: adomain.com/test/@adomain.com deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: uid=5000 deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: gid=5000 deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: home=/home/vmail/adomain.com/adomain.com/test/ deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: maildir: data=/home/vmail/adomain.com/adomain.com/test/ deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: maildir: root=/home/vmail/adomain.com/adomain.com/test, index=/home/vmail/adomain.com/adomain.com/test, control=, inbox= deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: cmusieve: Using sieve path: /home/vmail/globalsieverc deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: cmusieve: Executing script /home/vmail/globalsievercc deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: msgid=<AANLkTimZi7pD2eSFNipHtmS5HZVstk9UF6kjWEyqynz-(a)mail.gmail.com>: saved mail to INBOX It seems like is using a wrong folder value since it should be using /home/vmail/adomain.com/test. Another odd thing is that postfix is replacing the email address with /folder/user(a)adomain.com. Postfix after receiving an email: 3:48:04 domain postfix/smtpd[29365]: 8FDC1A339: client=mail-yx0-f169.google.com[209.85.213.169] Feb 5 03:48:04 domain postfix/cleanup[29369]: 8FDC1A339: message-id=<AANLkTimZi7pD2eSFNipHtmS5HZVstk9UF6kjWEyqynz-(a)mail.gmail.com> Feb 5 03:48:04 domain postfix/qmgr[27253]: 8FDC1A339: from=<xxx(a)gmail.com>, size=1815, nrcpt=1 (queue active) Feb 5 03:48:04 domain postfix/pipe[29370]: 8FDC1A339: to=<adomain.com/test/@adomain.com>, orig_to=<test(a)adomain.com>, relay=dovecot, delay=0.21, delays=0.2/0.01/0/0.01, dsn=2.0.0, status=sent (delivered via dovecot service) Feb 5 03:48:04 domain postfix/qmgr[27253]: 8FDC1A339: removed My config files: main.cf ============================== alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix inet_interfaces = all inet_protocols = all mailbox_size_limit = 0 message_size_limit = 30720000 mydestination = localhost, localhost.localdomain myhostname = adomain.com mynetworks = 127.0.0.0/8 myorigin = /etc/mailname proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps readme_directory = no recipient_delimiter = + relayhost = smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_tls_cert_file = /etc/postfix/cert.ca.crt smtpd_tls_key_file = /etc/postfix/cert.ca.key smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes virtual_alias_domains = virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf virtual_gid_maps = static:5000 virtual_mailbox_base = /home/vmail virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf virtual_transport = dovecot virtual_uid_maps = static:5000 dovecot.conf: ====================== protocols = imap imaps log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/home/vmail/%d/%n/Maildir mail_debug = yes disable_plaintext_auth = no ssl_cert_file = /etc/postfix/cert.crt ssl_key_file = /etc/postfix/cert.key namespace private { separator = . prefix = INBOX. inbox = yes } protocol lda { log_path = /home/vmail/dovecot-deliver.log auth_socket_path = /var/run/dovecot/auth-master postmaster_address = postmaster(a)adomain.com mail_plugins = cmusieve global_script_path = /home/vmail/globalsieverc } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } auth default { user = root mechanisms = plain login passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb static { args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } dovecot version: 1.0.15 # grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = mysql connect = host=127.0.0.1 dbname=mail user=mail_admin password=xxx default_pass_scheme = CRYPT password_query = SELECT email as user, password FROM users WHERE email='%u'; Thanks, any help/pointers will be greatly appreciated.

2 1

[Dovecot] pop3 index virtual question
by Robert Schetterer 10 Feb '11

10 Feb '11

Hi @ll, Timo, on 2.0.9 i have a user reporting pop3 leaving mails on the server does not work as desired i have namespace default { # type = private separator = / prefix = "" list = yes # hidden = no subscriptions = yes } namespace virtual { # type = private prefix = "virtual/" separator = / location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++ #location = virtual:/etc/dovecot/virtual hidden = yes list = no subscriptions= no } namespace real { # type = private prefix = "RealMails/" separator = / list = no hidden = yes } and pop3_uidl_format = %08Xu%08Xv before it was pop3_uidl_format = %g ( not sure what best ) # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes # won't change those UIDLs. Currently this works only with Maildir. #pop3_save_uidl = no my guess is that location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++ isnt enough should be location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++:INDEX=~/ to store/use indexes in the local maildir which is physical under /usr/local/virtual/domain/user@domain any meanings to this -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 6

[Dovecot] Using -s in "doveadm mailbox create"
by Christoph Pleger 10 Feb '11

10 Feb '11

Hello, it seems that "doveadm mailbox create" does not handle the mailbox parameters correctly if used with the "-s"-Parameter. I am using the following command in a script for adding new users: doveadm mailbox create -u "${ACCOUNT}" -s INBOX Drafts Sent Trash Spam Templates This creates mailboxes Drafts, Sent, Trash, Spam and Templates, but not INBOX. Likewise, when I omit INBOX in the command, only Sent, Trash, Spam and Templates are created, but not Drafts. With only one mailbox parameter, I get an error message about incorrect usage. When I enter the command without the "-s"-Parameter, all given mailboxes are created. As a workaround, I have to use the command without "-s" first and then call "doveadm mailbox subscribe". Regards Christoph

2 1

[Dovecot] Force STARTTLS on port 143 for !internalnetwork
by Ralf Hildebrandt 09 Feb '11

09 Feb '11

Hi! How can I force users which are connecting from OUTSIDE our newtworks to user STARTTLS on Port 143? Right now we resort to IMAPS on port 993, but an additional STARTTLS enabled login on the default port would make things easier! -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

3 5

[Dovecot] Dovecot + Solr does not index without break-imap-search?
by Jose Álvaro Domínguez Díaz 09 Feb '11

09 Feb '11

Hi folks, We are working with Dovecot 2.0.9 with Solr support and there is a thing, a little strange for us. Let me explain. We have this conf for Solr: plugin { ... fts = solr fts_solr = url=http:// solr.domain:8983/solr/ break-imap-search quota = maildir ... } With 'break-imap-search', Dovecot connects with solr, solr indexes all, searchs are fast and all works fine. BUT if we don't add 'break-imap-search', solr doesn't index anything. Logs don't report errors with debug/verbose options enabled. Somebody has any idea about this?. Thank you very much for all. Regards. -- Jose Álvaro Domínguez adominguez(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

2 1

[Dovecot] dsync problem
by Frank Bonnet 09 Feb '11

09 Feb '11

hello I try to convert from mbox to mdbox using dsync i get the followin error using the following command dsync mirror -u toto mbox:/user/toto:INBOX=/var/mail/toto I get this error message : mail3# dsync mirror -u toto mbox:/user/toto:INBOX=/var/mail/toto dsync(root): Fatal: execvp(-u) failed: No such file or directory dsync-local(root): Error: read() from worker server failed: EOF any infos welcome thanks

3 4

[Dovecot] Permissions in shared folders
by Lukas Haase 09 Feb '11

09 Feb '11

Hi, On my mail server I want to implement shared folders for each workgroup where there are many workgroups. One way would be to create a separate namespace for each workgroup. However, this does not scale well so I decided to use a single Shared mailbox and use ACLs: namespace public { separator = . prefix = Shared. location = maildir:/var/mail/shared:CONTROL=~/Maildir/shared } Each workgroup should get a subfolder in "Shared". Until now, this works, I create .Group1, .Group2 and assign correct group permissions and ACL files. However, now a user from group1 wants to create a subfolder in his IMAP folder. Since the permissions for /var/mail/shared/.Group1 are correct (writeable to group1 and the user is member of group1 and 'k' ACL permissions are active) I would expect it to work. However, for obvious reasons, the *sub*folder is created as /var/mail/shared/.Group1.Subfolder so it is actually not a subfolder in sense of the filesystem but rather a folder inside /var/mail/shared However, the user does (and should) not have write permissions to /var/mail/shared (only to /var/mail/shared/.Group1). Is there a way to overcome this problem? Why can't dovecot just use /var/mail/shared/.Group1/.Subfolder? Is there an option to do so? It would make everything a lot easier. The one option is to make /var/mail/shared world-writeable - which is not really a good option. A second option might be to use ACLs and give each group write permissions to /var/mail/shared. However, not even this seems very "clean" to me. What is the best way to handle this? Best regards, Luke

3 9

[Dovecot] ldap: LDAP attribute used multiple times. This is currently unsupported
by Lukas Haase 09 Feb '11

09 Feb '11

Hi, I have a problem when migrating from dovecot 1.0 to dovecot 1.2 (Debian lenny to Debian squeeze). In my dovecot-ldap.conf I have: user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,uid=system_groups_user I use the last parameter for the groups which I need for shared folders. If I only use this, everything works. However, I also use LDAP as passdb with prefetch: pass_attrs = uid=user,userPassword=password,homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid,uid=userdb_system_groups_user In this configuration I get the error in the subject line that uid is used multiple times. I know, but the message is somehow "weird" since it says it is *currently* unsupported. However, it seems to me that it is not supported any more. Is this true? Is there a reason for this? How can I fix this problem? Until now my shared folders do not works anymore because the group memberships are not assigned any more because of the missing system_groups_user parameter. Best regards, Luke

2 4

[Dovecot] critical feature from version 1 not migrated to version 2 = authentication configuration database per IP
by DaLiV＠apollo.lv 09 Feb '11

09 Feb '11

not possible make operation with dovecot version 2.x as was possible in version 1.x: requisites description: connect to dovecot service on IP1 - dovecot must serve users that related to domain1 located in database1 connect to dovecot service on IP2 - dovecot must serve users that related to domain2 located in database2 login must be with username that form not as "user@domain" but simple "user" databases may contain identical username, but they have different passwords existing version 1 config file, that allow such configuration: -------- /etc/dovecot.conf BEGIN ---------------- server mail.domain1.tld { protocols = imaps pop3s pop3 ssl_cert_file = /etc/pki/cert1.pem ssl_key_file = /etc/pki/cert1.key listen = 123.123.123.1 ssl_listen = 123.123.123.1 default_mail_env = mbox:/tmp:INBOX=/var/mail/domain1.tld/%n:INDEX=MEMORY pop3_uidl_format = %08Xu%08Xv auth default { mechanisms = plain passdb ldap { args= /etc/dovecot-ldap.conf.domain1.tld1 } userdb ldap { args= /etc/dovecot-ldap.conf.domain1.tld1 } } login_process_per_connection = yes login_max_processes_count = 4 login_processes_count = 1 } server mail.domain2.tld { protocols = imaps pop3s pop3 ssl_cert_file = /etc/pki/cert2.pem ssl_key_file = /etc/pki/cert2.key listen = 123.123.123.2 ssl_listen = 123.123.123.2 default_mail_env = mbox:/tmp:INBOX=/var/mail/domain2.tld/%n:INDEX=MEMORY pop3_uidl_format = %08Xu%08Xv auth default { mechanisms = plain passdb ldap { args= /etc/dovecot-ldap.conf.domain2.tld2 } userdb ldap { args= /etc/dovecot-ldap.conf.domain2.tld2 } } login_process_per_connection = yes login_max_processes_count = 4 login_processes_count = 1 } -------- /etc/dovecot.conf END ---------------- /etc/dovecot-ldap.conf.domain1.tld and /etc/dovecot-ldap.conf.domain2.tld refers to different ldap databases

2 2

[Dovecot] Great time savings backing a mdbox versus Maildir
by Javier Miguel Rodríguez 09 Feb '11

09 Feb '11

Hello I am writing to this mailing list to thanks Timo for dovecot 2 & mdbox. We have almost 30.000 active users and our life was sad with Maildir & backup: 24 hours for a full backup with bacula (zlib enabled maildirs, 1.4 TB). After switching to mdbox, the backup time is under 12 hours ! Instead of backing 17 millions files, with mdbox our backup is only of 1 million files, and that speeds up a lot the backup operation. Timo, here you have detailed info about the bacula backup jobs, you can use them in the wiki if you desire. If you need aditional info (hardware specs, dovecot config, etc) I can share it. *Maildir:* |//Job: Backup_Linux_buzon_us.2011-01-21_19.03.26_38 Backup Level: Full Client: "buzon_us" 2.0.3 (06Mar07) x86_64-redhat-linux-gnu,redhat,Enterprise release FileSet: "Full Buzon" 2011-01-21 19:03:26 Pool: "Pool_Linux_Buzones_US" (From Job resource) Catalog: "MyCatalog" (From Client resource) Storage: "File" (From command line) Scheduled time: 21-ene-2011 19:03:20 Start time: 21-ene-2011 19:03:29 End time: 22-ene-2011 19:46:45 Elapsed time:*1 day 43 mins 16 secs* Priority: 10 FD Files Written: 16,903,801 SD Files Written:*16,903,801* FD Bytes Written: 1,445,943,227,706 (1.445 TB) SD Bytes Written: 1,448,983,971,450 (1.448 TB) Rate:*16247.3 KB/s* Software Compression: None VSS: no Encryption: no Accurate: no Volume name(s): Buzones_US_2 Volume Session Id: 26 Volume Session Time: 1295511704 Last Volume Bytes: 1,450,628,892,676 (*1.450 TB*) Non-fatal FD errors: 0 SD Errors: 0 FD termination status: OK SD termination status: OK Termination: Backup OK//| *mdbox with mdbox_rotate_size=10m:* |Build OS: x86_64-redhat-linux-gnu redhat Enterprise release JobId: 3587 Job: Backup_Linux_buzon_us.2011-02-07_08.13.52_53 Backup Level: Full (upgraded from Incremental) Client: "buzon_us" 2.0.3 (06Mar07) x86_64-redhat-linux-gnu,redhat,Enterprise release FileSet: "Full Buzon" 2011-01-21 19:03:26 Pool: "Pool_Linux_Buzones_US" (From Job resource) Catalog: "MyCatalog" (From Client resource) Storage: "File" (From command line) Scheduled time: 07-feb-2011 08:13:44 Start time: 07-feb-2011 08:13:54 End time: 07-feb-2011 19:43:50 Elapsed time:*11 hours 29 mins 56 secs* Priority: 10 FD Files Written:*1,148,780* SD Files Written: 1,148,780 FD Bytes Written:*1,537,062,152,773 (1.537 TB)* SD Bytes Written: 1,537,218,147,402 (1.537 TB) Rate:*37130.7 KB/s* Software Compression: None VSS: no Encryption: no Accurate: yes Volume name(s): Buzones_US_4|Buzones_US_5 Volume Session Id: 101 Volume Session Time: 1296724657 Last Volume Bytes: 438,873,898,586 (438.8 GB) Non-fatal FD errors: 0 SD Errors: 0 FD termination status: OK SD termination status: OK Termination: Backup OK| Regards Javier de Miguel University of Seville

4 8

[Dovecot] sieve not working if i have override
by Paul A 08 Feb '11

08 Feb '11

Hi, I have a few domain that I'm overriding the mail_plugins, see password query below, however when I use this password query everything is working expect sieve gives me an error. How can I get around this problem? password_query = SELECT username as user, password, \ if('%d' IN ('virttest1.xxx.net', 'test2000.com'), \ 'quota imap_quota trash expire autocreate acl imap_acl',null) as userdb_mail_plugins, \ 101 as userdb_uid, 502 as userdb_gid, CONCAT('*:bytes=', CAST(quota AS CHAR)) AS quota_rule FROM mailbox WHERE username = '%u' Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Loading modules from directory: /usr/local/lib/dovecot Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Module loaded: /usr/local/lib/dovecot/lib10_quota_plugin.so Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Module loaded: /usr/local/lib/dovecot/lib11_trash_plugin.so Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Module loaded: /usr/local/lib/dovecot/lib20_expire_plugin.so Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Added userdb setting: mail_plugins=quota imap_quota trash expire autocreate acl imap_acl Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Loading modules from directory: /usr/local/lib/dovecot Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Module loaded: /usr/local/lib/dovecot/lib01_acl_plugin.so Feb 7 18:28:20 testip5 dovecot: managesieve: Error: dlopen(/usr/local/lib/dovecot/lib02_imap_acl_plugin.so) failed: /usr/local/lib/dovecot/lib02_imap_acl_plugin.so: undefined symbol: client_send_tagline Feb 7 18:28:20 testip5 dovecot: managesieve: Error: Can't load plugin imap_acl_plugin: Plugin is intended to be used only by imap binary (we're managesieve) Feb 7 18:28:20 testip5 dovecot: managesieve: Fatal: Couldn't load required plugins It also complains about imap_quota. Dovecot 2.x Thanks, paul

4 5

[Dovecot] converting from maildir to mdbox ?
by Jan-Frode Myklebust 08 Feb '11

08 Feb '11

I´m considering moving from maildir to mdbox, but don´t quite see how I should do the conversion with minimal downtime. Our userdb is ldap, and the we use this setting to point to the users maildirectory: user_attrs = mailMessageStore=mail=maildir:%$:INDEX=/indexes/%1u/%1.1u/%u,mailQuota=quota_rule=*:storage=%$ i.e. every user has a "mailMessageStore" attribute in LDAP that points to his INBOX. Any ideas for how we can migrate user by user to mdbox? Can we add a mailboxFormat attribute to LDAP, and somehow get that used in the user_attrs lookup ? Ideally have it default to maildir if not set, so that the current setup isn´t changed and only migrated users are affected. Or should we be keeping the mailboxFormat as a prefix in all mailMessageStore strings ? -jf

2 1

[Dovecot] How to recover a mail box from an assertion failure
by Michael Durket 08 Feb '11

08 Feb '11

I'm running Dovecot version 1.2.11 and getting this assertion error on a user's mail: Panic: file /home/durket/dovecot-1.2.11/src/lib-index/mail-transaction-log-view.c: line 290 (mail_transaction_log_view_set): assertion failed: (min_file_seq != max_file_seq || max_file_seq != view->head->hdr.file_seq || max_file_offset != (uoff_t)-1 || min_file_offset <= view->head->sync_offset) I realize that there are newer releases of Dovecot (that even may fix this bug) but what I need to know is if there's anything I can do (like having Dovecot recreate indexes or whatnot) that will recover the user's mail (short of having to reconstruct it from backups).

2 1

[Dovecot] Auto rebuild indexes?
by Willie Gillespie 08 Feb '11

08 Feb '11

Here's an easy question for you. I'm restoring some emails from a backup. Do I need to delete or otherwise manually rebuild the indexes? dovecot.index.cache dovecot.index.log dovecot-uidlist Or will Dovecot itself detect that something is amiss and handle it on first folder access? Using Maildir with Dovecot 1.2.9

3 3

[Dovecot] lmtp error at domains containing "-" sign
by ckubu 08 Feb '11

08 Feb '11

hallo, I have running dovecot 2.0.9. I want to deliver mail with rcipient prameter "-", we spoked about that at thread "LMTP with address extension" and after your patch and version 2.0.8 that works. But now, there's an another much greater problem. No mails to adresses, which domain-part contains an "-" sign wil be delivered (i.e. test(a)aku-punkt-berlin.de) lmtp is looking about the user "test@aku" instead of "test(a)aku-punkt-berlin.de" and the following logentries appears: Feb 3 10:46:36 vserver08 dovecot: auth: Debug: sql(test@aku): SELECT '/var/vmail/' || maildir as home, '5000' AS uid, '5000' AS gid, '*:bytes=' || quota as quota_rule FROM mailbox WHERE username = 'test@aku' and active = true Feb 3 10:46:36 vserver08 dovecot: auth: sql(test@aku): Unknown user Greatings Christoph

4 9

[Dovecot] best fine tune for 2.0.9
by fakessh ＠ 08 Feb '11

08 Feb '11

Hi Timo and the other directors of the following pigeonhole dovecot sieve I wonder what are the strengths and weaknesses of my config, and what do I need to change to stick more to a best configuration r13151 ~]# /usr/sbin/dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32.2-xxxx-grs-ipv6-32 i686 CentOS release 5.5 (Final) auth_mechanisms = plain login base_dir = /var/run/dovecot/ imap_capability = +IDLE listen = [::] log_path = /var/log/maillog log_timestamp = %Y-%m-%d %H:%M:%S login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_location = maildir:~/Maildir mail_max_userip_connections = 20 managesieve_notify_capability = mailto managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus virustest namespace { inbox = yes location = prefix = separator = . } passdb { driver = pam } plugin { plugin = autocreate managesieve sieve sieve = ~/.dovecot.sieve sieve_before = /var/sieve-scripts/roundcube.sieve sieve_dir = ~/sieve sieve_global_path = whatever } protocols = sieve imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { mode = 0666 } vsz_limit = 64 M } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { address = * , [::] port = 993 } process_limit = 128 vsz_limit = 64 M } service imap { client_limit = 5 service_count = 0 } service managesieve-login { inet_listener managesieve-login { address = * port = 2000 } process_limit = 128 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { address = * , [::] port = 995 } process_limit = 128 vsz_limit = 64 M } ssl_ca = </etc/pki/tls/certs/root.crt ssl_cert = </etc/pki/tls/certs/r13151.ovh.net.crt ssl_key = </etc/pki/tls/private/r13151.ovh.net.key ssl_verify_client_cert = yes userdb { driver = passwd } version_ignore = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_max_line_length = 64 k mail_plugins = autocreate } protocol pop3 { mail_plugins = autocreate pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s } protocol lda { hostname = r13151.ovh.net mail_plugins = autocreate sieve postmaster_address = postmaster(a)fakessh.eu sendmail_path = /usr/lib/sendmail } protocol sieve { managesieve_implementation_string = dovecot managesieve_logout_format = bytes ( in=%i : out=%o ) managesieve_max_line_length = 65536 } -- gpg --keyserver pgp.mit.edu --recv-key 092164A7 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7

2 2

[Dovecot] dovecot: imap-login: Error: net_connect_unix(imap) failed: Resource temporarily unavailable
by Kurt Hockenbury 08 Feb '11

08 Feb '11

We recently switched over mail servers to one running dovecot and postfix on RedHat Enterprise 6. The mail store is NFS on a NetApp filer, the index files are on local disk. We have about 6000 total active users, though not all of them access the system at the same time. All goes well for a while, then we start seeing errors like this in the log: dovecot: imap-login: Error: net_connect_unix(imap) failed: Resource temporarily unavailable imap-login: Internal login failure (auth failed, 1 attempts) And at this point, users can't log in. I don't know what Resource dovecot is running out of. The machine is a 12-core Xeon 2.27Ghz, with 24GB RAM. I have removed the 1024 nproc limit in /etc/security/limits.d/90-nproc.conf, and upped the nproc and nofile limits to 16384 and 65535 respectively, both in limits.conf, as well as adding ulimit statements in /etc/init.d/dovecot (belt and suspenders). I have tried adjusting dovecot.conf, but I'm obviously missing something. dovecot -n follows: # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.14.1.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.0 (Santiago) auth_master_user_separator = * auth_mechanisms = plain login default_client_limit = 5000 default_process_limit = 5000 disable_plaintext_auth = no mail_fsync = always mail_gid = 501 mail_location = maildir:~/Maildir:INDEX=/var/indexes/%n mail_nfs_storage = yes mail_plugins = quota mail_uid = 501 passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { quota = maildir:User quota quota_rule = *:storage=200M } service auth { client_limit = 32768 unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { process_min_avail = 12 service_count = 0 } service pop3-login { service_count = 0 } shutdown_clients = no ssl_cert = </etc/pki/postfix/certs/nexus.pem ssl_key = </etc/pki/postfix/private/nexus_key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol imap { mail_plugins = $mail_plugins imap_quota } Thanks, -Kurt Hockenbury

5 17

[Dovecot] Outlook 2010 IMAP disconnected
by Luigi Rosa 08 Feb '11

08 Feb '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 A customer moved from a previous version of Outlook to 2010. When he forces the synchronization of the IMAP folders he gets this error: Disconnected for inactivity. Protocollo: IMAP Server: mail.xxxxxxxxxxxxxxxxxxx Porta: 143 Codice errore: 0x800CCCDD Dovecot simply logs this: Feb 3 09:20:34 server dovecot: imap(xxxx): Disconnected: Logged out bytes=2488/534485 Feb 3 09:20:34 server dovecot: imap(xxxx): Disconnected: Logged out bytes=63/815 Where can I search to solve this issue? Ciao, luigi - -- / +--[Luigi Rosa]-- \ I'd be a vegetarian if bacon grew on trees. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk1KZj8ACgkQ3kWu7Tfl6ZQtHwCfTZPpFC5iHvL1+5EuxKAFlqWD DjcAn3rYU0Uwc13arHirb/5G3NuYcWX/ =LkGi -----END PGP SIGNATURE-----

5 9

[Dovecot] vpopmail passdb deadlock if tcprules binary is missing
by Teodor Milkov 07 Feb '11

07 Feb '11

Hello, I've just found that if vpopmail is compiled with --enable-roaming-users=y, but tcprules binary is missing there is kind of denial of service situation, which is not very obvious for debugging. I know this is result of misconfiguration and I suppose this is more of a vpopmail() bug, but it is somewhat hard to debug and causes greater harm to dovecot long running auth process than vpopmail's short living vchkpw process. Symptoms -------- Login to dovecot imap takes very long time. There are auth processes in D state: USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 9873 0.0 0.0 2884 1396 ? D 14:04 0:00 dovecot/auth -w root 11292 0.0 0.0 2884 1396 ? S 14:25 0:00 \_ dovecot/auth -w Cause ----- When new user has to be authenticated from vpopmail, the sequence of events goes something like this: * libexec/dovecot/auth -w process is doing the authentication (passdb-vpopmail.c) * passdb-vpopmail.c: at some point user is authenticated and open_smtp_relay() is called * vpopmail.c: open_smtp_relay() gets a write lock on ~vpopmail/etc/open-smtp.lock adds new IP to ~vpopmail/etc/open-smtp and calls update_rules() etc. to rebuild the tcp.cdb file * vpopmailc: tcprules_open() is called and it fork()s and tries to execv() tcprules * if tcprules is not found, execv() fails silently, and we are left with a forked libexec/dovecot/auth instance, which runs all over again up to the open_smtp_relay() point where it tries to obtain write lock on ~vpopmail/etc/open-smtp.lock again (it is already locked by parent) Hope this helps someone.

1 0

[Dovecot] maildrop and multi-dbox
by Manfred Lotz 07 Feb '11

07 Feb '11

Hi there, I'm using Dovecot 2.0.9-1 under Arch Linux. Currently, I have Maildir configured, and I move all my emails into dovecot by using this sequence: 1) cron starts fetchmail periodically under user manfred to collect my mails from various email accounts. 2) In ~/.fetchmailrc I have configured /usr/bin/maildrop as MDA. 3) In ~/.mailfilter (used by maildrop) I have extensive filtering in place and call bogofilter (by using xfilter) to classify spam mails. This works fine so far. Now I'd like to migrate to dovecot's new format multi-dbox. My question now: Is it correct that then I cannot longer use maildrop and would need to switch do dovecot-lda? -- Thanks, Manfred

3 4

[Dovecot] DoveCot 2.0.19: Problem compiling Solaris 10u9 x86 with dbox storage enabled
by Denny Schierz 07 Feb '11

07 Feb '11

hi, I can't compile DoveCot 2.0.19 with dbox enabled on our Solaris 10/U9: LDFLAGS="-L/opt/csw/lib -L/usr/lib -R/opt/csw/lib/" ./configure --prefix=/usr/local/dovecot/2.0.19 --with-ssl=openssl --with-rundir=/var/run/dovecot --with-storages=maildir,mbox,dbox --with-ldap=yes gmake -> ========================== [... ../../src/lib-storage/mailbox-list.h:250: warning: parameter has incomplete type mv -f .deps/mail-storage-callbacks.Tpo .deps/mail-storage-callbacks.Po gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-settings -I../../src/lib-dict -I../../src/lib-master -I../../src/lib-mail -I../../src/lib-imap -I../../src/lib-index -I../../src/lib-storage -I/opt/csw/include -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -MT main.o -MD -MP -MF .deps/main.Tpo -c -o main.o main.c In file included from ../../src/lib-storage/mail-storage.h:10, from imap-commands.h:6, from imap-client.h:4, from imap-common.h:17, from main.c:3: ../../src/lib-storage/mailbox-list.h:250: warning: parameter has incomplete type mv -f .deps/main.Tpo .deps/main.Po /bin/bash ../../libtool --tag=CC --mode=link gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -export-dynamic -L/opt/csw/lib -L/usr/lib -R/opt/csw/lib/ -o imap cmd-append.o cmd-capability.o cmd-cancelupdate.o cmd-check.o cmd-close.o cmd-copy.o cmd-create.o cmd-delete.o cmd-enable.o cmd-examine.o cmd-expunge.o cmd-fetch.o cmd-id.o cmd-idle.o cmd-list.o cmd-logout.o cmd-lsub.o cmd-namespace.o cmd-noop.o cmd-rename.o cmd-search.o cmd-select.o cmd-sort.o cmd-status.o cmd-store.o cmd-subscribe.o cmd-thread.o cmd-uid.o cmd-unselect.o cmd-unsubscribe.o cmd-x-cancel.o imap-client.o imap-commands.o imap-commands-util.o imap-expunge.o imap-fetch.o imap-fetch-body.o imap-search.o imap-search-args.o imap-settings.o imap-status.o imap-sync.o mail-storage-callbacks.o main.o ../../src/lib-storage/libdovecot-storage.la ../../src/lib-dovecot/libdovecot.la -export-dynamic -lrt -lnsl -lsocket -lrt -lsendfile libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o .libs/imap cmd-append.o cmd-capability.o cmd-cancelupdate.o cmd-check.o cmd-close.o cmd-copy.o cmd-create.o cmd-delete.o cmd-enable.o cmd-examine.o cmd-expunge.o cmd-fetch.o cmd-id.o cmd-idle.o cmd-list.o cmd-logout.o cmd-lsub.o cmd-namespace.o cmd-noop.o cmd-rename.o cmd-search.o cmd-select.o cmd-sort.o cmd-status.o cmd-store.o cmd-subscribe.o cmd-thread.o cmd-uid.o cmd-unselect.o cmd-unsubscribe.o cmd-x-cancel.o imap-client.o imap-commands.o imap-commands-util.o imap-expunge.o imap-fetch.o imap-fetch-body.o imap-search.o imap-search-args.o imap-settings.o imap-status.o imap-sync.o mail-storage-callbacks.o main.o -L/opt/csw/lib -L/usr/lib ../../src/lib-storage/.libs/libdovecot-storage.so /usr/local/dovecot/v2/dovecot-2.0.9/src/lib-dovecot/.libs/libdovecot.so ../../src/lib-dovecot/.libs/libdovecot.so -liconv -lnsl -lsocket -lrt -lsendfile -R/usr/local/dovecot/2.0.19/lib/dovecot -R/opt/csw/lib/ ld: warning: file ../../src/lib-dovecot/.libs/libdovecot.so: linked to /usr/local/dovecot/v2/dovecot-2.0.9/src/lib-dovecot/.libs/libdovecot.so: attempted multiple inclusion of file Undefined first referenced symbol in file dbox_storage ../../src/lib-storage/.libs/libdovecot-storage.so ld: fatal: Symbol referencing errors. No output written to .libs/imap collect2: ld returned 1 exit status gmake[3]: *** [imap] Error 1 gmake[3]: Leaving directory `/usr/local/dovecot/v2/dovecot-2.0.9/src/imap' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/usr/local/dovecot/v2/dovecot-2.0.9/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/usr/local/dovecot/v2/dovecot-2.0.9' gmake: *** [all] Error 2 ============================ compiling without dbox works. # pkgutil -a | grep iconv libiconv CSWiconv 1.9.2 1.3 MB cu denny

2 2

[Dovecot] Dovecot Or Debian, Boot-Time Error "Can't assign requested address"
by Sabahattin Gucukoglu 06 Feb '11

06 Feb '11

Hi all, I have a really weird problem, which for now I have solved by just binding to the IPv6 wildcard address "::". Using the latest packages from Debian unstable (1.x series), I set up a tunnel with tunnelbroker.net for IPv6. I assign two of the delegated addresses in my /48 using IP aliases in /etc/network/interfaces to my ethernet interface (eth0 and eth0:1). All other servers start and run, binding to the primary address (eth0) assigned. The packet forwarder is not necessary, so it isn't turned on using sysctl. But Dovecot will only start if I launch it using the init script after boot. Until then, in syslog there is always: Fatal: listen(2001:470:xxxx::1): Can't assign requested address Anybody have the slightest clue what's going on here? Debian bug, or Dovecot? I suspect some problem with initscript order, yet inspection shows no apparent problem; network starts up before services. Very, very odd. Cheers, Sabahattin

1 0

[Dovecot] Splitting up mail_location setting?
by Timo Sirainen 06 Feb '11

06 Feb '11

mail_location setting has started becoming a bit bloaty. I'm not actually even sure why I've kept adding more parameters to it rather than just adding new settings. It's also caused confusion, because people try things like: mail_location = mbox:/var/mail/%u mail_location = mbox:INBOX=/var/mail/%u Although the first one has been giving ok enough error message for a long time now and the second one also will give in v2.0.10, it still would be nicer if there wasn't any need for such confusion at all. The settings could instead be: mail_format = mbox mail_inbox_path = /var/mail/%u Then Dovecot could complain about mail_root_path being empty, which would be more understandable.. The mail_location setting itself would keep working probably forever for backwards compatibility (and also in some setups it would be difficult to split it when it comes from LDAP/SQL), although some of its parameters could maybe be dropped after a while (SUBSCRIPTIONS, DIRNAME, MAILBOXDIR). So if you did e.g.: mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_root_path = ~/mail2 The result would be same as mbox:~/mail2:INBOX=/var/mail/%u. Although this can also result in probably unwanted situation: mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_format = maildir mail_root_path = ~/Maildir Now the result would be maildir:~/Maildir:INBOX=/var/mail/%u. This can be avoided by setting mail_inbox_path="" explicitly. Or the other way around: mail_inbox_path = /var/mail/%u mail_location = maildir:~/Maildir:INBOX= Without the INBOX= the mail_inbox_path would be in use. Below are the setting names I thought about using: a) mail_location = maildir:~/Maildir:INBOX=~/Maildir/.INBOX:INDEX=~/indexes:CONTROL=~/control:LAYOUT=fs:SUBSCRIPTIONS=courier-subscriptions mail_format = maildir mail_root_path = ~/Maildir mail_inbox_path = ~/Maildir/.INBOX mail_index_path = ~/indexes mail_control_path = ~/control mail_directory_layout = fs mail_subscriptions_fname = courier-subscriptions b) mail_location = mdbox:~/mdbox:ALT=/alt/%u:LAYOUT=fs:DIRNAME=dbox-Mails:MAILBOXDIR=mailboxes mail_format = mdbox mail_root_path = ~/mdbox mail_alt_path = /alt/%u mail_dir_name = dbox-Mails mail_mailboxes_dir_name = mailboxes Thoughts?

3 2

Re: [Dovecot] Samba AD and Dovecot
by Jason Gunthorpe 06 Feb '11

06 Feb '11

On Fri, Feb 04, 2011 at 01:47:31PM -0700, Trever L. Adams wrote: > > There was a thread a month or so ago on how to do GSSAPI with AD and > > dovecot kerberos. It works great, and I highly recommend it for AD > > sites. Check the archives, it isn't really too hard. > I am not finding this. Do you happen to remember the subject? No, but it is pretty simple using latest everything (well, Debian squeeze).. Basically from scratch.. Notice this also sets up NTLM, which is supported by many roaming devices (ie phones). 1) Put this or similar in /etc/samba/smb.conf [global] workgroup = $NT_WORKGROUP$ realm = $REALM$ security = ads kerberos method = secrets and keytab 2) Confirm that hostname gives an unqualified name and hostname -f gives a fully qualified name. Confirm you have DNS setup properly (eg dig -t SRV _kerberos._udp.$REALM$ works OK) 3) Join the machine to AD $ net ads join -U 'user with AD privs' $ kinit AD_USER $ kvno host/`hostname -f` 4) Setup imap SPN: $ net ads keytab add imap $ net ads search cn=`hostname` | grep servicePrincipalName $ klist -k $ kvno imap/`hostname -f` The last three should report imap/`hostname -f` entries. 5) Setup dovecot.. Set these things in the config auth_use_winbind = yes mechanisms = plain gssapi gss-spnego login ntlm 6) Setup exim.. $ net ads keytab add smtp Use these in the dovecot config: client { path = /var/run/dovecot/auth-client mode = 0660 group = Debian-exim } } And this at the end of the exim.conf: dovecot_plain: driver = dovecot public_name = PLAIN server_socket = /var/run/dovecot/auth-client server_set_id=PLAIN-${quote:$auth1} dovecot_ntlm: driver = dovecot public_name = NTLM server_socket = /var/run/dovecot/auth-client server_set_id=NTLM-${quote:$auth1} dovecot_gssapi: driver = dovecot public_name = GSSAPI server_socket = /var/run/dovecot/auth-client server_set_id=GSSAPI-${quote:$auth1} dovecot_gssapi_spnego: driver = dovecot public_name = GSS-SPNEGO server_socket = /var/run/dovecot/auth-client server_set_id=GSS-SPNEGO-${quote:$auth1} 7) Setup openssh in sshd_config GSSAPIAuthentication yes GSSAPICleanupCredentials yes GSSAPIStrictAcceptorCheck yes Jason

2 2

[Dovecot] Best filesystem?
by Monika Janek 05 Feb '11

05 Feb '11

Hi everyone! What's the best filesystem to use for the mail spool? I'm debating between Debian with xfs or FreeBSD with zfs. I'm not sure which way to go. I'm migrating from cyrus. I have about 50 users so it's not a large setup. Cheers! Monika -- Monika Janek Systems Administrator, Side Effects Software Toronto, Ontario Canada 416-504-9876 x207 www.sidefx.com

14 43

[Dovecot] Question about managing multiple domains
by Sergio Moscoso 04 Feb '11

04 Feb '11

Actually we have configured a server (postfix,dovecot,mysql) with multiple domains, but the problem resides in that we don't want to login via POP3 using "user@domain" just using "user", because we'll migrate our actual platform (Qmail) to dovecot. Our users are logging to their mail boxes, using only user name. We want to ask if that's posible to use a function like a "vipmap" in qmail, that allow to map an IP address to a domain. We're using the dovecot 1.0.7, the configuration shows as follows: login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login first_valid_uid: 100 mail_location: maildir:~/Maildir/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: username_format: %Lu passdb: driver: sql args: /etc/dovecot-mysql.conf userdb: driver: static args: uid=101 gid=102 home=/home/vmail/%d/%n We'll apreciate your response, 'cause we coulnd't find information about this issuet and we didn't to find any clue that shows how can realize it. Thank you in advance. Sergio Moscoso

1 0

[Dovecot] EUID not changing when delivering to a mailbox
by rastik＠tereus.eu 04 Feb '11

04 Feb '11

Hello, I've set up virtual mailboxes and I'm using one uid/gid pair (mail/mail) to deliver almost all messages. Some accounts I'd like to have accessible by local Linux accounts as well, so postfix is delivering them using separate uids (gid stays the same). But I run into a problem when dovecot auth correctly fetches uid/gid from MySQL database, but still uses general mail uid to access the mailbox instead of user uid. This is what I have in dovecot log: dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=myipaddr rip=myipaddr lport=143 rport=55513 dovecot: auth(default): client out: CONT 1 dovecot: auth(default): client in: CONT<hidden> dovecot: auth-worker(default): sql(joe(a)mydomain.com,myipaddr): query: SELECT CONCAT('/var/mail/', maildir) AS userdb_home, username as user, password, CONCAT('*:bytes=', quota) AS userdb_quota_rule, uid, gid FROM mailbox WHERE username = 'joe(a)mydomain.com' AND active = 1 dovecot: auth(default): client out: OK 1 user=joe(a)mydomain.com uid=1000 gid=12 dovecot: auth(default): master in: REQUEST 11 17252 1 dovecot: auth(default): prefetch(joe(a)mydomain.com,myipaddr): success dovecot: auth(default): master out: USER 11 joe(a)mydomain.com home=/var/mail/mydomain.com/joe/ quota_rule=*:bytes=-1 dovecot: imap-login: Login: user=<joe(a)mydomain.com>, method=PLAIN, rip=myipaddr, lip=myipaddr, TLS dovecot: IMAP(joe(a)mydomain.com): opendir(/var/mail/mydomain.com/joe/Maildir) failed: Permission denied (euid=8(mail) egid=12(mail) missing +r perm: /var/mail/mydomain.com/joe/Maildir) dovecot: IMAP(joe(a)mydomain.com): stat(/var/mail/mydomain.com/joe/indexes/.INBOX) failed: Permission denied (euid=8(mail) egid=12(mail) missing +x perm: /var/mail/mydomain.com/joe/indexes) dovecot: IMAP(joe(a)mydomain.com): file_dotlock_create(/var/mail/mydomain.com/joe/Maildir/dovecot-uidlist) failed: Permission denied (euid=8(mail) egid=12(mail) missing +w perm: /var/mail/mydomain.com/joe/Maildir) dovecot: IMAP(joe(a)mydomain.com): opendir(/var/mail/mydomain.com/joe/Maildir/new) failed: Permission denied (euid=8(mail) egid=12(mail) missing +r perm: /var/mail/mydomain.com/joe/Maildir/new) dovecot: IMAP(joe(a)mydomain.com): stat(/var/mail/mydomain.com/joe/indexes/.INBOX) failed: Permission denied (euid=8(mail) egid=12(mail) missing +x perm: /var/mail/mydomain.com/joe/indexes) dovecot: IMAP(joe(a)mydomain.com): file_dotlock_create(/var/mail/mydomain.com/joe/Maildir/dovecot-uidlist) failed: Permission denied (euid=8(mail) egid=12(mail) missing +w perm: /var/mail/mydomain.com/joe/Maildir) ricola dovecot: IMAP(joe(a)mydomain.com): opendir(/var/mail/mydomain.com/joe/Maildir/new) failed: Permission denied (euid=8(mail) egid=12(mail) missing +r perm: /var/mail/mydomain.com/joe/Maildir/new) dovecot: IMAP(joe(a)mydomain.com): Disconnected: Logged out bytes=171/775 My configuration is: # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.36-hardened-r6 x86_64 Gentoo Base System release 2.0.1 ext4 listen: *, [::] ssl_cert_file: /etc/ssl/dovecot/server.pem ssl_key_file: /etc/ssl/dovecot/server.key login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login first_valid_uid: 8 last_valid_uid: 1999 first_valid_gid: 12 last_valid_gid: 12 mail_privileged_group: mail mail_uid: 8 mail_gid: 12 mail_location: maildir:/var/mail/%d/%n/Maildir/:INDEX=/var/mail/%d/%n/indexes lda: postmaster_address: postmaster(a)mydomain.com mail_plugins: quota auth default: mechanisms: plain login user: nobody verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail I'm not sure if I got the concept correctly, but I was expecting that dovecot will use uid from the database. I was not able to find any relevant information in the archives. If it was explained already in the past, please send me some keywords that would help me find it. Thank you, Rastislav Wartiak

2 1

[Dovecot] INBOX in mbox format and IMAP folders in maildir format ?
by Frank Bonnet 04 Feb '11

04 Feb '11

Hello Would it be possible to setup such configuration ? INBOX in /var/mail/ using MBOX format IMAP folders in Maildir format Thanks a lot !

2 1

[Dovecot] Dovecot 2 multiple address/port binding
by Thomas Hummel 04 Feb '11

04 Feb '11

Hello, Sorry, I know the topic has been talked about already but I searched the archives and I'm still unsure of the proper way to have dovecot (imap-login) listen to several addresses and/or several ports. 1. how do I translate dovecot-1 protocol imap { listen = xx.xx.xx.xx:143 yy.yy.yy.yy:143 ssl_listen = xx.xx.xx.xx:993 yy.yy.yy.yy:939 } I started by service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } but I don't know if I should add multiple "address" lines, other inet_listener {} sections, or multiple address on the same "address" line. 2. besides I don't know if it's possible to listen on the same address to several ports for the same "subservice" : for instance could I have an inet_listener imap {} listen on zz:zz:zz:zz:port1 and zz:zz:zz:zz:port2 ? Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] Ldap and secondary PosixGroups
by Matthieu Ambrosy 04 Feb '11

04 Feb '11

Hello all, I'm using "Pam Ldap" for my users (Debian Lenny). getent passwd : *m.ambrosy:x:2000:100:m.ambrosy:/home/m.ambrosy:/bin/bash* getent group : *l_admin:*:2000:m.ambrosy l_personnel:*:2001:m.ambrosy l_mail:*:2003:m.ambrosy* As you can see, in LDAP, user "m.ambrosy" (PosixAccount) is defined with gidNumber = 100 (local group "users") and uidNumber = 2000. Furthermore this user belongs to 3 secondary Ldap PosixGroup (l_admin 2000, l_personnel 2001, l_mail 2003). If /var/mail belongs to the primary group (100), no problem. If /var/mail belongs to l_mail (2003) : *mkdir(/var/mail/m.ambrosy) failed: Permission denied (euid=2000(m.ambrosy) egid=100(users) missing +w perm: /var/mail, euid is not dir owner* In fact, Dovecot seems to not see secondary groups for my user. It just checks the primary group (gidNumber). If I modify my Ldap user like this, getent passwd : *m.ambrosy:x:2000:2003:m.ambrosy:/home/m.ambrosy:/bin/bash *It works fine but my "l_mail" group must be secondary (like an option for some users), not the primary gidNumber. Can I do it in the conf file?* * Am I making myself clear? Regards, Matthieu.

3 2

[Dovecot] Improving lmtp performance
by Joseba Torre 04 Feb '11

04 Feb '11

Hi, yesterday I migrated and old version with sendmail + courier to a virtual machine (vmware) with postfix and dovecot 2.0.9. Everything worked fine, but with a more or less default setup for both dovecot and postfix, lmtp performance was pretty bad: a message was written to an inbox every 2 or 3 seconds. With that rate and a 5000+ and growing mail queue mail delivery was really slow. After searching both the wiki and this list I didn't find anything related to this. I tried a couple of things, and finally added process_min_avail = 10 to service lmtp entry in 10-master.conf and local_destination_concurrency_limit = 10 in postfix's main.cf Now mail delivery is really fast, and my mail queue was delivered in a very sort time. Is this the right solution, or there's a better setup to improve mail delivery performance? Also, if this is a common problem, may be something should appear in http://wiki2.dovecot.org/LMTP Thanks. -- Joseba Torre. Vicegerencia de TICs, área de Explotación

2 3

[Dovecot] disabling outgoing mail ?
by Per Jessen 03 Feb '11

03 Feb '11

We're using roundcube as a method of access to a read-only email archive served via imap/dovecot. I was thinking of disabling outgoing mails by fiddling with the roundcube code, but thought it might be possible to disable the outgoing functionality from dovecot? /Per Jessen, Zürich

2 2

[Dovecot] Quota ignore issue
by Tim Traver 03 Feb '11

03 Feb '11

Hi Timo, ok, in my dovecot setup, I have a setting to ignore messages in the Spam folder (I will put my dovecot -n at the end of the message), and a strange thing appears to be happening. If I do a quota recalc on an account, It creates the maildirsize file correctly, without the contents of the Spam folder calculated into the total used. But, it looks like when a new spam email is delivered, before the sieve rules in the lda can move it into the spam folder, it is added to the maildirsize file. Then, once it is moved into the Spam folder, if it is directly expunged from the folder, it isn't subtracted from maildirsize file. I am using roundcube as a webmail solution, and it recognizes the Spam folder and lets users directly empty the Spam folder instead of moving it to the trash, and then removing it. If I do move the mail from the Spam folder to the Trash folder, and then empty the trash, it then puts the subtraction in the maildirsize folder. So, either it shouldn't add it in the first place, or even though it is deleted directly from the Spam folder, it should be subtracted from the maildirsize folder, right? Hmmm...maybe its the structure of the default sieve command that I have that is making it want to add it? here is the default sieve script that I use in the sieve_after field : require "fileinto"; # rule:[Spam and Virus Tag] if anyof (header :contains "Subject" "[VIRUS-TAG]", header :contains "Subject" "[SPAM-TAG]") { fileinto "Spam"; stop; } Essentially, what is happening is that users are getting their quota filled up for messages that were in their Spam folder... Thanks, Tim. and here is my dovecot -n output : # 2.0.7: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.1-STABLE i386 auth_username_format = %Lu auth_username_translation = %@ auth_verbose = yes disable_plaintext_auth = no dotlock_use_excl = yes first_valid_uid = 100 listen = * lock_method = dotlock log_path = /local/logs/dovecot.errors mail_fsync = always mail_gid = 100 mail_location = maildir:%h/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota" mail_uid = 100 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags notify mmap_disable = yes passdb { args = /bin/checkpassword_dovecot_auth driver = checkpassword } plugin { quota = maildir:User quota quota_rule = Trash:storage=+100M quota_rule2 = Spam:ignore sieve = ~/.dovecot.sieve sieve_after = /home/mailboxes/sieve/to_spam_folder.sieve sieve_dir = ~/Maildir/sieve sieve_extensions = +notify +imapflags } protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = sn mode = 0600 user = sn } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /bin/checkpassword_dovecot_deliver driver = checkpassword } verbose_proctitle = yes verbose_ssl = yes protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { info_log_path = /local/logs/dovecot-deliver.log log_path = /local/logs/dovecot-deliver-errors.log mail_plugins = " quota sieve" } protocol imap { mail_plugins = " quota imap_quota" } protocol sieve { managesieve_sieve_capability = comparator-i;ascii-numeric fileinto reject vacation imap4flags notify include envelope body relational regex subaddress copy }

2 2

[Dovecot] Reproducable hang caused by IMAP server
by Matthias Scheler 03 Feb '11

03 Feb '11

Hello, I have problems with Dovecot 2.0.9 (and 2.0.8) under NetBSD/amd64 5.1. "mutt" hangs when I try to quit it after accessing a folder via IMAP. I can reproduce the problem with these steps: 1.) I run "mutt -f =foo" to access folder "foo" via IMAP. The folder contains about 10 messages in my case. 2.) I tag two of the messages and then save them to a *non existent* folder. When "mutt" asks whether the folder should be created I confirm the action. 3.) Finally I exit "mutt" and confirm the question whether the messages marked as deleted (by the save in step 2) should be deleted. 4.) "mutt" now hangs indefinitely. I've attached a packet capture of the above steps to this e-mail. As far as I can tell from the packet capture and debugging "mutt" with "gdb" it waits for the IMAP server to confirm the logout which never happens. I've never seen this problem with Dovecot 1.2.16. Here is the requested debugging information: Output of "dovecot --version": 2.0.9 Output of "doveconf -n": # 2.0.9: /etc/pkg/dovecot/dovecot.conf # OS: NetBSD 5.1_STABLE amd64 auth_mechanisms = cram-md5 digest-md5 plain login listen = *, [::] mail_debug = yes mail_location = mbox:~/Mail:INBOX=/var/mail/%u passdb { args = /etc/pkg/dovecot/passwd driver = passwd-file } pop3_uidl_format = %08Xv%08Xu protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/openssl/certs/dovecot.pem ssl_key = </etc/openssl/private/dovecot.pem userdb { driver = passwd } Kind regards -- Matthias Scheler http://zhadum.org.uk/

2 3

[Dovecot] Resource temporarily unavailable
by Len7hir 03 Feb '11

03 Feb '11

On very high traffic in POP3 I have flood of messages in my log: Feb 2 16:32:17 pp4 dovecot: pop3: Error: net_connect_unix(/var/run/dovecot/auth-master) failed: Resource temporarily unavailable What a Terrible Failure (WTF)? Can You help me resolve this problem? I've not found any info about auth-master problem :/ My settings: default_process_limit = 2000 default_client_limit = 4096 service pop3-login { service_count = 0 vsz_limit = 128M process_min_avail = 8 } FD limit in system = 32000 8 cpu, 28GB RAM about 50 login per second Different Error messages I've when set service_count = 1. Feb 2 10:21:29 pp4 dovecot: pop3-login: (5052) Disconnected: Connection queue full (no auth attempts) -- Len7hir

2 1

[Dovecot] STARTTLS problem
by Lucas -LandM- 03 Feb '11

03 Feb '11

Hi, We try to configure dovecot as usual (all our servers have dovecot+vpopmail+qmail or postfix). We set up dovecot with the next outcome: - imap ok - imaps ok - imap STARTTLS NOT OK Debug: root@s13:/home/lucas# gnutls-cli --starttls -p 143 ip Resolving 'ip'... Connecting to 'ip'... - Simple Client Mode: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot ready. *** Starting TLS handshake *** Non fatal error: Resource temporarily unavailable, try again. *** Fatal error: A TLS packet with unexpected length was received. *** Handshake has failed Same result with thunderbird and openssl. Log: Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv2/v3 read client hello A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client hello A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server hello A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write certificate A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server done A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [83.61.13.57] Feb 2 20:27:34 s13 dovecot: imap-login: Warning: SSL failed: where=0x2002: SSLv3 read client certificate A [83.61.13.57] Feb 2 20:27:34 s13 dovecot: imap-login: Disconnected (no auth attempts): rip=83.61.13.57, lip=109.200.5.221, TLS handshaking: Disconnected My config: # 2.0.9: /opt/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-27-server x86_64 Ubuntu 8.04 auth_mechanisms = plain login cram-md5 default_login_user = vpopmail disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 listen = ip mail_debug = yes mail_gid = 89 mail_uid = 89 passdb { driver = vpopmail } plugin { quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u setting_name = quota, trash } protocols = imap pop3 service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { process_limit = 1024 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { process_limit = 1024 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = vpopmail } verbose_ssl = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } protocol pop3 { mail_max_userip_connections = 3 pop3_client_workarounds = outlook-no-nuls ,oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } Any clue? Thank you in advanced, Lucas

2 5

[Dovecot] Signal 11 on deliver
by Matt 02 Feb '11

02 Feb '11

I just installed Postfix, MySQL, and Dovecot. Everything is working great (IMAP, POP, SMTP) except that I can't get incoming mail to deliver properly. Incoming mail logs the following: Feb 2 13:23:52 mail postfix/qmgr[2187]: CE0D41F0263: from=<mhoppes@[redacted]>, size=650, nrcpt=1 (queue active) Feb 2 13:23:52 mail postfix/pipe[3594]: CE0D41F0263: to=<mhoppes@[redacted]>, relay=dovecot, delay=0.32, delays=0.3/0/0/0.01, dsn=5.3.0, status=bounced (Command died with signal 11: "/usr/libexec/dovecot/deliver") Running /usr/libexec/dovecot/deliver -d mhoppes@[redacted] results in an e-mail being delivered to the recipient. Any thoughts on what my issue is?

2 2

[Dovecot] Can´t move folders in Outlook
by Mult´Moldes - Informatica 02 Feb '11

02 Feb '11

Hi, this is my first time in a mailing list, so I don´t know if I´m doing it right. My problem is that I cannot move a folder into another one, I can create them, move messages, etc, but I can´t move a folder, no matter what folder. It works fine With Thunderbird, but in Outlook Express or WLive Mail2009 it just doesn´t go! Must be something wrong with my .conf. I hope someone can help me please. dovecot --version 1.0.15 dovecot -n # 1.0.15: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap listen: 192.168.10.2:210 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:/var/mail/%u auth default: passdb: driver: pam userdb: driver: passwd

1 0

[Dovecot] override not working
by Paul A 02 Feb '11

02 Feb '11

Hi, I'm using dovecot 2.x and I'm using override so that only certain domains are allowed to use ACLs, however it does seem to be working even though I see the mail_plugins override in the logs. In the config file I have protocol imap { mail_plugins = quota imap_quota trash expire autocreate } Using the following password/user queries: password_query = SELECT username as user, password, if('%d'='virttest2.xxx.net', 'acl imap_acl',null) as mail_plugins, concat('/var/vmail/%d/', maildir) as userdb_home, concat('maildir:/var/vmail/%d/', maildir) as userdb_mail, 101 as userdb_uid, 502 as userdb_gid, CONCAT('*:bytes=', CAST(quota AS CHAR)) AS quota_rule FROM mailbox WHERE username = '%u' user_query = SELECT maildir, if('%d'='virttest2.xxx.net', 'acl imap_acl',null) as mail_plugins, 101 AS uid, 502 AS gid, CONCAT('*:bytes=', CAST(quota AS CHAR)) AS quota_rule FROM mailbox WHERE username = '%u' AND active = '1' Now in n the log I do see the mail_plugins override but for some reason I get an IMAP error when trying to share folders. out: OK 1 user=user20(a)virttest2.xxx.net mail_plugins=acl imap_acl quota_rule=*:bytes=512000000 ERROR: IMAP server does not support the ACL capability, sorry.

1 2