- dovecot - dovecot.org

[Dovecot] Configuring Dovecot for use with Active Directory
by Phil Anslemo 12 Jan '07

12 Jan '07

Hello, My server is configured as follows: FreeBSD 6.1 OpenLDAP 2.3.27 Cyrus SASL 2.1.21 Dovecot 1.0.rc15 I have PostFix configured to use SASL for SMTP AUTH, which in turn leverages OpenLDAP to verify users in Active Directory. I do not have, nor want to in the future, local users in FreeBSD, so I've configured PostFix for Virtual Mailboxes. Everything is working and I'm getting ready to configure Dovecot, but need clarification. I want to make sure my dovecot-ldap.conf is properly configured and need another set of eyes to look at it (of course dovecot.conf should also be correct, but one thing at a time). Here's my dovecot-ldap.conf file: hosts = 192.168.0.240 #uris = dn = cn=<BINDUSER>,ou=IT,ou=Central Office,dc=<DOMAIN>,dc=local dnpass = <>PASSWORD #sasl_bind = no #sasl_mech = #sasl_realm = #sasl_authz_id = auth_bind = yes #auth_bind_userdn = ldap_version = 3 base = dc=<DOMAIN>, dc=local deref = never scope = subtree #user_filter = (&(objectClass=posixAccount)(uid=%u)) #pass_attrs = uid=user,userPassword=password #pass_attrs = uid=user,userPassword=password,homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid #pass_filter = (&(objectClass=posixAccount)(uid=%u)) #default_pass_scheme = CRYPT user_global_uid = 101 user_global_gid = 101 Your help is appreciated. Thanks, uxphreak ____________________________________________________________________________________ Do you Yahoo!? Everyone is raving about the all-new Yahoo! Mail beta. http://new.mail.yahoo.com

1 0

[Dovecot] RC16 is a lot slower that RC7
by Marc Perkel 11 Jan '07

11 Jan '07

I tried RC16 from RC7 and like other releases since RC7 it is significantly slower. I'm still trying to figure out why. But I have again switched back. Do new version take up a lot more ram perhaps? I'm running with a gig of ram, and I'm running a few other apps. It's not a fast computer, just an old 754 pin semptron. But the point is that RC7 runs a lot faster than RC16.

2 2

[Dovecot] rc17 Linux RPM distribution rebuild trouble.
by Serge D 11 Jan '07

11 Jan '07

The question is addressed to Linux RPM-packagers. Hello! I was trying to rebuild rc17 binaries from dovecot-1.0-1_38.rc17.at.src.rpm taken at ATrpms <http://ATrpms.net/>. The process fails with following messages: -------------------- Making install in imap-quota make[3]: Entering directory `/usr/src/asplinux/BUILD/dovecot-1.0.rc15/src/plugins/imap-quota' make[4]: Entering directory `/usr/src/asplinux/BUILD/dovecot-1.0.rc15/src/plugins/imap-quota' make[4]: Target `install-exec-am' does not require perform any command. test -z "/usr/lib/dovecot/imap" || mkdir -p -- "/var/tmp/dovecot-1.0-0_34.rc15-root/usr/lib/dovecot/imap" mkdir: `/var/tmp/dovecot-1.0-0_34.rc15-root/usr/lib/dovecot/imap' exists, but it is not a directory make[4]: *** [install-imap_moduleLTLIBRARIES] Error 1 ------------------- As I have not so much experience at RPM-packaging, so would be thankful for the ideas how to fix it? Kind regards, - Serge.

2 5

[Dovecot] mbox-rewrite errors
by T. Horsnell 11 Jan '07

11 Jan '07

I've noticed a burst of about 12000 of these mbox-rewrite msgs in the log, spread over about 10 minutes. They are always for the same person (XXX'd out here), and have not occurred before or since. There's no evidence of device problems in the message log. Jan 10 17:46:43 ls1 imap-login: Login: XXX [::ffff:10.2.0.1] Jan 10 17:46:43 ls1 imap(XXX): file mbox-rewrite.c: line 429 (mbox_write_header): assertion failed: (hdr_parsed_size.physical_size == hdr_size) Jan 10 17:46:43 ls1 dovecot: child 6004 (imap) killed with signal 6 Jan 10 17:46:43 ls1 dovecot: child 6006 (imap) killed with signal 6 Jan 10 17:46:43 ls1 dovecot: child 6008 (imap) killed with signal 6 Jan 10 17:46:43 ls1 imap-login: Login: XXX [::ffff:10.2.0.1] Jan 10 17:46:43 ls1 imap(XXX): file mbox-rewrite.c: line 429 (mbox_write_header): assertion failed: (hdr_parsed_size.physical_size == hdr_size) Jan 10 17:46:43 ls1 imap-login: Login: XXX [::ffff:10.2.0.1] Jan 10 17:46:43 ls1 imap(XXX): file mbox-rewrite.c: line 429 (mbox_write_header): assertion failed: (hdr_parsed_size.physical_size == hdr_size) Jan 10 17:46:43 ls1 imap-login: Login: XXX [::ffff:10.2.0.1] Jan 10 17:46:43 ls1 dovecot: child 6010 (imap) killed with signal 6 Jan 10 17:46:43 ls1 dovecot: child 6012 (imap) killed with signal 6 Jan 10 17:46:43 ls1 imap(XXX): file mbox-rewrite.c: line 429 (mbox_write_header): assertion failed: (hdr_parsed_size.physical_size == hdr_size) Do I need to worry? I'm still using dovecot-0.99.11-4 on a RHEL4 Opteron box. Cheers, Terry.

1 0

[Dovecot] 1.0.rc17 released
by Timo Sirainen 11 Jan '07

11 Jan '07

http://dovecot.org/releases/dovecot-1.0.rc17.tar.gz http://dovecot.org/releases/dovecot-1.0.rc17.tar.gz.sig - MySQL authentication caused username to show up as "OK" in rc16.

5 9

Re: [Dovecot] LDAP authentication stops working...
by "Αποστόλης Παπαγια ννάκης (Apostolis Papagiannakis)" 11 Jan '07

11 Jan '07

> > Date: Wed, 10 Jan 2007 16:07:03 +0100 > From: "J.M. Maurer" <mmaurer(a)betterbe.com> > Subject: Re: [Dovecot] LDAP authentication stops working... > To: dovecot(a)dovecot.org > Message-ID: <1168441623.11613.3.camel(a)sigma.lan.uwog.net> > Content-Type: text/plain > > On Tue, 2007-01-09 at 09:54 +0000, Gavin Henry wrote: > >> > <quote who="Adrian Close"> >> >>> > > Hi all, >>> > > >>> > > I'm running dovecot-1.0.rc17 on OpenBSD 3.9, using userdb and passdb >>> > > methods of "ldap" (SSL on 636/tcp) in addition to "passwd". >>> > > >>> > > Occasionally (generally after a few hours of operation, but not always), >>> > > LDAP-based logins stop working (e.g. hang/timeout after POP3 PASS >>> > > command). Accounts with local passwords (as opposed to accounts with a >>> > > password field of "x") still work fine at this point. >>> >> > >> > We also get this. Twice a day we have to restart dovecot, using userdb and >> > passdb via LDAP, with userdb_prefetch. >> > > Just to add: we moved from rc<something before 5> to rc15 recently, and > we now also see a lot of hangs with > > The result handler for the initial ldap_search to find the dn to bind to > is never called. I assume Timo fscked something up recently in my > auth_bind code ;-P > > Anyway, restarting ldap every hour or so with cron does the job :-| > > I'd debug this if I had the time, but I won't have before next week. > > Cheers, > Marc > > > > --- I haven't documented it properly (yet) but when using rc15 with userdb_prefetch + passdb + ldap_authbind (200-500 concurrent clients) directly with LDAP it operates OK only for a few minutes. After a while authentication freezes. On the LDAP server (openldap v2.2.28) I see countless log entries such as: " slapd[24721]: connection_input: conn=1134942 deferring operation: binding". Dovecot show I tried to increase various dovecot and openldap limits without success. Until the problem is solved, I use Dovecot with getpwnam (/etc/passwd) + pamldap which works always OK. Could anybody please verify that direct LDAP userdb_prefetch, passdb, auth_bind work ok with openldap under heavy stress? Is it possible that multiple concurrent LDAP bind requests and searches under different LDAP credentials through the very same TCP connection produce some kind of spourious problem? Apostolis Papagiannakis Aristotle University of Thessaloniki, Greece

1 0

[Dovecot] [sfs: dovecot-auth file descriptor usage]
by Steven F Siirila 10 Jan '07

10 Jan '07

I am re-posting this message from last Friday, as I have seen no replies. It is critical that we address this problem, since until then we cannot put more than a few hundred users on our server. If Dovecot-auth TRULY needs to keep open a file descriptor for every single login session, we will have to start looking at alternatives. In short: Help! ----- Forwarded message from Steven F Siirila <sfs> ----- Date: Fri, 5 Jan 2007 13:55:38 -0600 From: Steven F Siirila <sfs> To: dovecot(a)dovecot.org Subject: dovecot-auth file descriptor usage User-Agent: Mutt/1.4.2.1i In dovecot-auth (rc15) we experienced problems when the file descriptors reached 256 (due to a Solaris fdopen() call described previously). The issue was that there was one file descriptor being used for every imap-login and pop3-login process (in our environment of SSL-only that means one for every active IMAP and POP connection). Mods were made (and appear in rc16) to close out the descriptor in question after using it during authentication (as I understand it). However, I am still seeing plenty of file descriptors left open in rc16 (one per session). For example, on a Solaris 9 server with 9 IMAP connections open here is an lsof excerpt of dovecot-auth: dovecot-a 26071 root 7u unix 105,136 0t79 3190 /devices/pseudo/tl@0:ticots->/var/opt/dovecot/run/dovecot/login/default (0x3000d084250) dovecot-a 26071 root 8u unix 105,140 0t80 3190 /devices/pseudo/tl@0:ticots->/var/opt/dovecot/run/dovecot/login/default (0x3c9c4227b68) dovecot-a 26071 root 9u unix 105,149 0t79 3190 /devices/pseudo/tl@0:ticots->/var/opt/dovecot/run/dovecot/login/default (0x3cbaa7680b8) dovecot-a 26071 root 10u unix 105,266 0t79 3190 /devices/pseudo/tl@0:ticots->/var/opt/dovecot/run/dovecot/login/default (0x3cbaa765d48) dovecot-a 26071 root 11u unix 105,160 0t79 3190 /devices/pseudo/tl@0:ticots->/var/opt/dovecot/run/dovecot/login/default (0x3cbaa7667e0) dovecot-a 26071 root 12u unix 105,255 0t79 3190 /devices/pseudo/tl@0:ticots->/var/opt/dovecot/run/dovecot/login/default (0x3cbaa769288) dovecot-a 26071 root 13r DOOR 265,0 0t0 50 /var/run (swap) (door to nscd[7752]) dovecot-a 26071 root 14u unix 105,258 0t79 3190 /devices/pseudo/tl@0:ticots->/var/opt/dovecot/run/dovecot/login/default (0x30002dc4008) dovecot-a 26071 root 15u unix 105,282 0t80 3190 /devices/pseudo/tl@0:ticots->/var/opt/dovecot/run/dovecot/login/default (0x30003185738) dovecot-a 26071 root 16u unix 105,141 0t80 3190 /devices/pseudo/tl@0:ticots->/var/opt/dovecot/run/dovecot/login/default (0x30003185ac8) With the modification made, shouldn't these no longer accumulate? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593 ----- End forwarded message ----- -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 2

[Dovecot] pre-1.0.rc6 / index file problems? try this
by Timo Sirainen 10 Jan '07

10 Jan '07

People who have had "duplicate header extension" and whatever other random index file corruption problems, please see if this fixes anything: http://dovecot.org/list/dovecot-cvs/2006-December/007315.html The change is also in the latest nightly snapshot (http://dovecot.org/ nightly/dovecot-latest.tar.gz). You could in general treat the latest snapshot as "pretty much the same as the 1.0.rc16 release", so some testing for it would be nice. I've updated autotools that were used to build the snapshot, does anyone have problems with compiling the snapshot? I'm going to build the 1.0rc16 release using the same autotools. rc16 has several changes intended to make Mac OS X's HFS+ happy. This is mostly because currently the only computer I have is a Powerbook. I'll get a new Linux machine in a couple of weeks hopefully. I've still about 50 unread/possibly unanswered mails. I'll try to get to them soon. Here's a list of all the important changes: * IMAP: When trying to fetch an already expunged message, Dovecot used to just disconnect client. Now it instead replies with dummy NIL data. * Priority numbers in plugin names have changed. If you're installing from source, you should delete the existing plugin files before installing the new ones, otherwise you'll get errors. * Maildir: We're using rename() to move files from tmp/ to new/ now. See http://wiki.dovecot.org/MailboxFormat/Maildir -> "Issues with the specification" for reasoning why this is safe. This makes saving mails faster, and also makes Dovecot usable with Mac OS X's HFS+ (after you also set dotlock_use_excl=yes, see below). + Added dotlock_use_excl setting. If enabled, dotlocks are created directly using O_EXCL flag, instead of by creating a temporary file which is hardlinked. O_EXCL is faster, but may not work with NFS. + If Dovecot crashes with Linux or Solaris, it'll log a "Raw backtrace". It's worse than gdb's backtrace, but better than nothing. + Added maildir_copy_preserve_filename=yes setting. + Added a lazy-expunge plugin to allow users to unexpunge their mails. + maildir quota: Added ignore setting to maildir quota, which allows ignoring quota in Trash mailbox. + dict quota: If dictionary doesn't yet contain the quota, calculate it by going through all the mails in all the mailboxes. + login_log_format_elements: Added %a=local port and %b=remote port - Doing a STATUS command for a selected mailbox (not a recommended IMAP client behavior) caused Dovecot to sync the mailbox silently. This could have lost eg. EXPUNGE events from clients, causing them to use wrong sequence numbers. - deliver was treating boolean settings set to "no" as if they were "yes" (they were supposed to be commented out for "no") - Running "dovecot" with -a or -n option while Dovecot was running deleted all authentication sockets, which caused all the future logins to fail. - maildir: RENAME and DELETE didn't touch control directory if it was different from maildir or index dir. - We treated internal userdb lookup errors as "user unknown" errors. In such situations this caused deliver to think the user didn't exist and the mail get bounced. - pam: Setting cache_key crashed - shared maildir: dovecot-keywords file's mode wasn't taken from dovecot-shared file. - dovecotpw wasn't working with PowerPC

4 7

[Dovecot] 1.0.rc16 released
by Timo Sirainen 10 Jan '07

10 Jan '07

http://dovecot.org/releases/dovecot-1.0.rc16.tar.gz http://dovecot.org/releases/dovecot-1.0.rc16.tar.gz.sig If you've had problems with getting errors about index files sometimes being corrupted, please try if this release fixes it. If you've reported any bugs that this release hasn't fixed, please report them again so I know they still didn't get fixed and that I didn't forget them. * IMAP: When trying to fetch an already expunged message, Dovecot used to just disconnect client. Now it instead replies with dummy NIL data. * Priority numbers in plugin names have changed. If you're installing from source, you should delete the existing plugin files before installing the new ones, otherwise you'll get errors. * Maildir: We're using rename() to move files from tmp/ to new/ now. See http://wiki.dovecot.org/MailboxFormat/Maildir -> "Issues with the specification" for reasoning why this is safe. This makes saving mails faster, and also makes Dovecot usable with Mac OS X's HFS+ (after you also set dotlock_use_excl=yes, see below). + Added dotlock_use_excl setting. If enabled, dotlocks are created directly using O_EXCL flag, instead of by creating a temporary file which is hardlinked. O_EXCL is faster, but may not work with NFS. + If Dovecot crashes with Linux or Solaris, it'll log a "Raw backtrace". It's worse than gdb's backtrace, but better than nothing. + Added maildir_copy_preserve_filename=yes setting. + Added a lazy-expunge plugin to allow users to unexpunge their mails. + maildir quota: Added ignore setting to maildir quota, which allows ignoring quota in Trash mailbox. + dict quota: If dictionary doesn't yet contain the quota, calculate it by going through all the mails in all the mailboxes. + login_log_format_elements: Added %a=local port and %b=remote port + Added -i and -o options to rawlog to restrict logging only to input or output. - Doing a STATUS command for a selected mailbox (not a recommended IMAP client behavior) caused Dovecot to sync the mailbox silently. This could have lost eg. EXPUNGE events from clients, causing them to use wrong sequence numbers. - deliver was treating boolean settings set to "no" as if they were "yes" (they were supposed to be commented out for "no") - Running "dovecot" with -a or -n option while Dovecot was running deleted all authentication sockets, which caused all the future logins to fail. - maildir: RENAME and DELETE didn't touch control directory if it was different from maildir or index dir. - We treated internal userdb lookup errors as "user unknown" errors. In such situations this caused deliver to think the user didn't exist and the mail get bounced. - pam: Setting cache_key crashed - shared maildir: dovecot-keywords file's mode wasn't taken from dovecot-shared file. - dovecotpw wasn't working with PowerPC

4 6

Re: [Dovecot] 1.0.rc17 released
by Janne Johansson 10 Jan '07

10 Jan '07

Ouch didn't get the maillist on the receiver list. > > > 2007/1/10, Thomas Zajic <zlatko(a)zlatko.fdns.net>: > > > > * John Peacock, 2007-01-09 19:35 > > > > > [...] > > > When trying to move large numbers of messages to Trash using > > Thunderbird > > > 1.5.0.9, I would get "Lost connection with server" messages at > > anything > > > over about 1500 messages. The strange thing is that when I checked > > the > > > trash folder, the deleted messages were there multiple times, i.e. > > > everytime I attempted to move all messages to Trash, plus everytime it > > > > > failed until I got below the magic number. > > > [...] > > > > I think this is a Thunderbird problem rather than a Dovecot one. I had > > the same thing happening recently when I moved last year's logfiles to > > my archive folder (36000+ messages). > > > > I had this on 1.0rc10, and moved to 1.0rc15 and it went away (or pushed > the limits > over the number of messages I wanted to delete) and I was also using > Thunderbird 1.5.0.x. > I'll report if it happens to me again. > > > -- Some mornings, it's just not worth gnawing through the straps...

3 3

[Dovecot] dovecot cannot access the then new created folders by squirrel mail?
by shamsurrahman 10 Jan '07

10 Jan '07

hi, i use dovecot and squirrelmail wwbmail to access my mails in fc6, every thing is working ok, but the only thing quirrel mail can create new folders but can't acces or open them for example i created folder accounts by squirrelmail it was created but can't open, this is the permissions for the accounts in the ~/mail/: drwx------ 2 jaan jaan 4096 Jan 8 07:14 accounts -rwxr-xr-x 1 jaan jaan 0 Jan 8 20:35 draftbox any one can help please?

2 1

[Dovecot] Dovecot's deliver trouble (...probably bug?)
by Serge D 10 Jan '07

10 Jan '07

Hello everybody! I am a Linux admin trying to move my mail system based on qmail to the software which is more spam-protected: exim4 + dovecot-1.0rc15 + pgsql . I've downloaded and rebuild dovecot from src.rpm (for fc4). During the testing stage I've discovered two troubles: 1) the problem with deliver (...I'm not sure it's a really bug). Here is relevant part of my /var/log/messages : ------- Jan 3 10:40:37 serge deliver(serge(a)test.net): auth input: serge(a)test.net Jan 3 10:40:37 serge deliver(serge(a)test.net): auth input: home=/var/spool/mail/test.net/serge/ Jan 3 10:40:37 serge deliver(serge(a)test.net): auth input: uid=500 Jan 3 10:40:37 serge deliver(serge(a)test.net): auth input: gid=12 Jan 3 10:40:37 serge deliver(serge(a)test.net): setuid(500) failed: Operation not permitted ------- -- my system is fc4 based Linux. uid/gid are according to /etc/dovecot-sql.conf : user_query = SELECT maildir AS home, 500 AS uid, 12 AS gid FROM mailbox WHERE username = '%n@%d' AND active='1' I was trying to chown 500.12 /var/spool/mail -R , chmod u+s ...etc, but it does not helps. Please, help. I don't want another MDA, people adviced me dovecot as good and well tested solution. I have already spent about two work days to configure and test it... 2) Because of mentioned above problem deliver generates a bounce message for exim, and here is a bug with e-mail in the header. It was taken "as is" from the queue of Exim -- have a look at "Return-path:", "envelope-from" and "Sender:" Because of these errors exim can not deliver the message back to sender. It freezes it, ...trying again, ...freezes ... etc... -------------------------------------------------- 1H252L-0004jZ-F3-D This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: serge(a)test.net local delivery failed ------ This is a copy of the message, including all the headers. ------ Return-path: <"testuser(a)test.net"@test.net> Received: from serge.lc.test.net ([10.0.0.5]) by serge.lc.test.net with esmtpa (Exim 4.62) (envelope-from <"testuser(a)test.net"@test.net>) id 1H252K-0004jT-U5 for serge(a)test.net; Wed, 03 Jan 2007 14:16:05 +0200 Message-ID: <459B9E84.9070607(a)test.net> Date: Wed, 03 Jan 2007 14:16:04 +0200 From: test uset <testuser(a)test.net> User-Agent: Thunderbird 1.5 (X11/20060119) MIME-Version: 1.0 To: serge(a)test.net Subject: =?KOI8-R?Q?=D4=C5=D3=D4_=D0=D2=CF=C8=CF=D6=C4=C5=CE=C9=D1?= Content-Type: text/plain; charset=KOI8-R; format=flowed Content-Transfer-Encoding: 8bit Sender: "testuser(a)test.net"@test.net Test message body. ------------------------------------ Here is an original message from e-mail client ( just to make sure that it was made proper way): ------------------------------------ > From - Wed Jan 03 18:18:54 2007 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00800000 Message-ID: <459BD76D.4090903(a)test.net> Date: Wed, 03 Jan 2007 18:18:53 +0200 From: test uset <testuser(a)test.net> User-Agent: Thunderbird 1.5 (X11/20060119) MIME-Version: 1.0 To: serge(a)test.net Subject: =?KOI8-R?Q?=D4=C5=D3=D4_=D0=D2=CF=C8=CF=D6=C4=C5=CE=C9=D1?= Content-Type: text/plain; charset=KOI8-R; format=flowed Content-Transfer-Encoding: 8bit Test message body. ---------------------------------------------------------- As for POP3 with dovecot, it seems working OK. Dovecot generates mail directories according to the user data returned by SQL, and creates index files proper way - everything with given uid.gid = 500.12 ... If you will need some extra piece of information, or my configs or logs -- please feel free to ask for it. Any kind of help: advices, URLs, patches, etc.., are welcome. I badly need to bring up this new system as soon as possible. Thank you in advance. Best regards, Serge www.cis.by

4 4

[Dovecot] deliver rewrites envelop-sender
by Ralf Becker 10 Jan '07

10 Jan '07

Hello, we are currently using sendmail, procmail, uwimap and qpopper. We are planing to replace uwimap and qpopper with dovecot. Which seems to be a very good idea :-) But: Sendmail and Procmail will not be replaced. Now I've realized that deliver rewrites existing "From <....> ..." header lines to ">From <...> ..." and adds it's own "From "-line. Example: -------- My procmailrc end with :0 | deliver -d beckerr Mails are deliver to my INBOX, but * From beckerr(a)fh-trier.de Sun Jan 07 17:37:43 2007 * Received: ... * From: ... is rewritten to * From MAILER-DAEMON Sun Jan 07 17:37:44 2007 * > From beckerr(a)fh-trier.de Sun Jan 07 17:37:43 2007 * Received: ... * From: ... Is there a (simple) way to prevent deliver from doing so? OR In case "-f <envelop sender>" is not given, could deliver 1) read the envelop sender address from the "From <...>" line, 2) remove the line and 3) add it's own using the formally extracted sender address? This sounds best for me and would cover the problem most effective... BTW: I've found the "dovecot deliver patch for procmail" and it looks really good (http://dovecot.org/pipermail/dovecot/2006-July/014656.html) but it seems to me, that the "From " line problem is solved by optionally removing the whole line, so deliver would use it's own default "From MAILER-DAEMON "-line ... and this in fact the problem Regards, Ralf -- ______________________________________________________________________ Dipl.-Inform. (FH) Ralf Becker Rechenzentrum (r/ft) der FH Trier (Network|Mail|Web|Firewall) University of applied sciences Administrator Schneidershof, D-54293 Trier Mail: beckerr(a)fh-trier.de Fon: +49 651 8103 499 WWW: http://www.fh-trier.de/~beckerr Fax: +49 651 8103 214 PGP: http://www.fh-trier.de/~beckerr/pgp ICQ: <available> ______________________________________________________________________ Wenn Gott gewollt haette, dass E-Mail in HTML geschrieben wuerden, endeten Gebete traditionell mit </amen>. (Tom Listen)

2 4

[Dovecot] Disable TLS on port 143?
by Jackie Hunt 10 Jan '07

10 Jan '07

Hi all, Is there a way to disable the TLS support provided by Dovecot on port 143? I'd like to run SSL on 993, so as far as I can tell I can't use ssl_disable, since the will disable SSL. I'm looking for the equivalent of an ssl_disable_tls setting. Thanks much, Jackie --- Jackie Hunt ACNS Voice: (970) 663-3789 Colorado State University FAX: (970) 491-1958 Fort Collins, CO 80523 Email: jackie.hunt(a)colostate.edu

7 13

[Dovecot] [minor] stale auth-worker sockets
by Luigi Rosa 09 Jan '07

09 Jan '07

I was fooling around the /var/run/dovecot directory and I noticed a lot of stale auth-worker.xxxxx sockets, probably left there by unexpected termination of old versions of Dovecot. Just to know who does what, have I to clean up the stale sockets, or a future version of Dovecot will get rid of this unused sockets? Ciao, luigi -- / +--[Luigi Rosa]-- \ Syntactic sugar causes cancer of the semi-colons;

2 1

[Dovecot] dovecot rc7 assert, core
by Jeff A. Earickson 09 Jan '07

09 Jan '07

Hi, Wow, I haven't had an assert/core in dovecot in a long time. Here goes: Setup: Solaris 10, dovecot built with gcc 4.1.1, imap and imaps only. User's home directory lives on a ZFS filesystem, but I don't think that makes a difference. So does every other user here (>3K). Assert: IMAP(mulepri): file message-body-search.c: line 393 (message_body_search_ctx): assertion failed: (input->v_offset <= part->physical_pos) gdb backtrace and other poking at the core is attached. Jeff Earickson Colby College

2 1

Re: [Dovecot] Automatic mail script?
by Antonio Casado Rodríguez 09 Jan '07

09 Jan '07

Hi, if you use dirsize: http://www.cpan.org/modules/by-authors/id/R/RM/RMALAFAIA/postmmon/ if you use maildir++: http://www.ual.es/personal/acasado/mdsmon/ Andreas Andersson escribió: > Hello! > > I am setting up a Dovecot mailserver for around 2000 people with: > sendmail + dovecot + squirrelmail + spamassassin and some plugins. > > I have the Imap quota working in mboxes with this quota commands: > > plugin { > # 10MB quota limit > quota = dirsize:storage=10240 > } > > It worked good in Squirrelmail, but the person that only use some imap > program (outlook, eudora) don't get the info when theirs account will > be full of mail. > > So can someone give me a good script for a automatic mail. I want to > send a mail to a user when they are nearly exceeded their limits, so > they can start cleaning theirs account. > > Are this possible or how should I solve this problem? > > /Andreas

1 0

[Dovecot] DSA certificate with Dovecot doesn't seem to work.
by Václav Haisman 09 Jan '07

09 Jan '07

Hi, I tried to use DSA certificate today and it did not work very well. Is Dovecot supposed to work only with RSA? -- Vaclav Haisman

2 2

[Dovecot] Automatic mail script?
by Andreas Andersson 08 Jan '07

08 Jan '07

Hello! I am setting up a Dovecot mailserver for around 2000 people with: sendmail + dovecot + squirrelmail + spamassassin and some plugins. I have the Imap quota working in mboxes with this quota commands: plugin { # 10MB quota limit quota = dirsize:storage=10240 } It worked good in Squirrelmail, but the person that only use some imap program (outlook, eudora) don't get the info when theirs account will be full of mail. So can someone give me a good script for a automatic mail. I want to send a mail to a user when they are nearly exceeded their limits, so they can start cleaning theirs account. Are this possible or how should I solve this problem? /Andreas

1 0

[Dovecot] unable to read mail - file istream-raw-mbox.c: line 499...
by Chris H. 08 Jan '07

08 Jan '07

Greetings all, I (nor anyone else) am suddely unable to read mail. Dovecot dumps the following in it's log: # BEGIN LOG ENTRIES # dovecot: Jan 07 18:15:52 Info: imap-login: Login: user=<username>, method=PLAIN, rip=::1, lip=::1, TLS dovecot: Jan 07 18:15:52 Error: IMAP(username): file istream-raw-mbox.c: line 499 (istream_raw_mbox_get_body_size): assertion failed: (rstream->mail_size != (uoff_t)-1) dovecot: Jan 07 18:15:52 Error: child 1584 (imap) killed with signal 6 # END LOG ENTRIES # NOTE: 'username' represents the users name at that time. The users subscribed to folders all show up. But no mail is visable. Dovecot is leaving username.lock files in /var/mail as well. It doesn't do this on my other servers running dovecot. They are using older versions of dovecot tho. Does anyone know what might be causing these problems? Relavent info follows: Dovecot version: 1.0.r15 OS: freebsd-5.5 Thank you for all your time and consideration. -- panic: kernel trap (ignored) ----------------------------------------------------------------- FreeBSD 5.4-RELEASE-p12 (SMP - 900x2) Tue Mar 7 19:37:23 PST 2006 /////////////////////////////////////////////////////////////////

1 1

[Dovecot] trouble debugging
by Aaron Solochek 07 Jan '07

07 Jan '07

I want to switch away from bincimap, and I am having some trouble getting dovecot up and running. Something isn't working (I suspect it's a permissions problem) but the logs aren't really telling me anything interesting. I can authenticate and get a list of folders, but when I try to select a folder, I get the "Internal error" message that tells me to check the server logs. The server log shows: Jan 5 19:43:42 sausage dovecot: imap-login: Login: user=<aarons>, method=plain, rip=XXX, lip=XXX, TLS Jan 5 19:43:43 sausage dovecot: IMAP(aarons): Effective uid=1000, gid=1000 Jan 5 19:43:43 sausage dovecot: IMAP(aarons): Namespace: type=private, prefix=, sep=/, inbox=yes, hidden=no, subscriptions=no Jan 5 19:43:43 sausage dovecot: IMAP(aarons): maildir: data=/XXX/aarons/Maildir Jan 5 19:43:43 sausage dovecot: IMAP(aarons): maildir: root=/XXX/aarons/Maildir, index=/XXX/aarons/Maildir, control=, inbox= How can I get better debugging info? I've tried all the debugging options in dovecot.conf. Thank you. -Aaron

2 7

[Dovecot] Is there any way to setup a super password?
by Xueron Nee 07 Jan '07

07 Jan '07

Hi Can I set up a super password and use it to login as any user. Thanks! -- Xueron Nee <xueron(a)gmail.com>

2 2

[Dovecot] the variables in mail_location doesn't work anymore.
by Contact Address 06 Jan '07

06 Jan '07

greeting all. is it just me or anybody having the same problem. the variables in mail_location doesn't work anymore. i use this parameter on my dovecot.conf mail_location = maildir:/www/vmail/%d/%n it doing just fine on the rc15, but doesn't work in rc16. my rc16 debug result: Jan 6 18:20:25 host dovecot: auth-worker(default): sql(kontak(a)ramdhani.net,127.0.0.1): SELECT maildir, 1001 AS uid, 1001 AS gid FROM mailbox WHERE username = 'kontak(a)ramdhani.net' AND active = '1' Jan 6 18:20:25 host dovecot: auth(default): master out: USER 3 OK kontak(a)ramdhani.net maildir=ramdhani.net/kontak/ uid=1001 gid=1001 Jan 6 18:20:25 host dovecot: IMAP(OK): Effective uid=1001, gid=1001 Jan 6 18:20:25 host dovecot: IMAP(OK): Loading modules from directory: /usr/local/lib/dovecot/imap Jan 6 18:20:25 host dovecot: IMAP(OK): Module loaded: /usr/local/lib/dovecot/imap/lib10_quota_plugin.so Jan 6 18:20:25 host dovecot: IMAP(OK): Module loaded: /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so Jan 6 18:20:25 host dovecot: IMAP(OK): maildir: data=/www/vmail/OK Jan 6 18:20:25 host dovecot: IMAP(OK): maildir: root=/www/vmail/OK, index=/www/vmail/OK, control=, inbox= my rc15 debug result: Jan 6 18:45:24 host dovecot: auth-worker(default): sql(kontak(a)ramdhani.net,127.0.0.1): SELECT maildir, 1001 AS uid, 1001 AS gid FROM mailbox WHERE username = 'kontak(a)ramdhani.net' AND active = '1' Jan 6 18:45:24 host dovecot: auth(default): master out: USER 15 kontak(a)ramdhani.net maildir=ramdhani.net/kontak/ uid=1001 gid=1001 Jan 6 18:45:24 host dovecot: IMAP(kontak(a)ramdhani.net): Effective uid=1001, gid=1001 Jan 6 18:45:24 host dovecot: IMAP(kontak(a)ramdhani.net): Loading modules from directory: /usr/local/lib/dovecot/imap Jan 6 18:45:24 host dovecot: IMAP(kontak(a)ramdhani.net): Module loaded: /usr/local/lib/dovecot/imap/lib01_quota_plugin.so Jan 6 18:45:24 host dovecot: IMAP(kontak(a)ramdhani.net): Module loaded: /usr/local/lib/dovecot/imap/lib02_imap_quota_plugin.so Jan 6 18:45:24 host dovecot: IMAP(kontak(a)ramdhani.net): maildir: data=/www/vmail/ramdhani.net/kontak Jan 6 18:45:24 host dovecot: IMAP(kontak(a)ramdhani.net): maildir: root=/www/vmail/ramdhani.net/kontak, index=/www/vmail/ramdhani.net/kontak, control=, inbox=

1 0

[Dovecot] mails are not showing in the inbox
by Gyanchand Maurya 06 Jan '07

06 Jan '07

Hi All, I have configured dovecot but I am not able to recieve mails using web browser.and through out look its working fine. Reghards Gyan

1 0

[Dovecot] PostLogin Scripting issue
by Cassidy B. Larson 06 Jan '07

06 Jan '07

Trying out the post-login scripting Timo added recently. Wanting to run a SQL query, as detailed in the example on the Wiki. However, my "USER" env variable is set to "OK" instead of the username. DOVECOT_VERSION=1.0.rc16 RESTRICT_GID_FIRST=127 USER=OK All the other variables (MAIL, HOME, etc) are fine with the correct username. Am I missing something obvious? Thanks, -c

2 4

[Dovecot] postfix + dovecot auth problem.
by subscriber＠viliar.net.ru 06 Jan '07

06 Jan '07

Hello All! I use postfx 2.3.5 + dovecot (pop3/imap/lda/auth daemon for postfix) rc15. root@post /etc/postfix# grep dovecot main.cf smtpd_sasl_type = dovecot virtual_transport = dovecot dovecot_destination_recipient_limit = 1 root@post /etc/dovecot# grep password_query dovecot-sql.conf password_query = SELECT mail as user, cryptp as password, CONCAT('/home/vmail/',homedir,'/',maildir,'/') as userdb_home, uid as userdb_uid, gid as userdb_gid, CONCAT('dirsize:/home/vmail/',homedir,'/',maildir,'/',':storage=',quota/1024) as userdb_quota, nice as userdb_nice, hosts as allow_nets FROM users WHERE mail = '%u' and access = 'Y' and %Ls = 'Y'; When I insert allow_nets (and it should be used without userdb_ prefix) into password_query I could not send any more letters. In logs next: Dec 19 11:25:30 post dovecot: auth-worker(default): sql(mail(a)example.com): query: SELECT mail as user, cryptp as password, CONCAT('/home/vmail/',homedir,'/',maildir,'/' ) as userdb_home, uid as userdb_uid, gid as userdb_gid, CONCAT('dirsize:/home/vmail/',homedir,'/',maildir,'/',':storage=',quota/1024) as userdb_quota, nice as userdb_nice , hosts as allow_nets FROM users WHERE mail = 'mail(a)example.com' and access = 'Y' and smtp = 'Y'; Dec 19 11:25:30 post dovecot: auth-worker(default): passdb(mail(a)example.com): allow_nets check failed: Remote IP not known As I understand, postfix does not transfer to dovecot auth daemon rip ( remote ip ). And it is looks like allow_nets it is impossible to use together with dovecot sasl auth in postfix. Do we have any workaround on it? A. -------------- "Hic Jacet Ego" gpg key: http://viliar.net.ru/darkside_blues.gpg

1 0

[Dovecot] Dovecot LDA failure in RC16
by Steven F Siirila 05 Jan '07

05 Jan '07

After upgrading a test server from rc15 to rc16, Postfix was no longer able to deliver mail via Dovecot deliver: Jan 5 11:00:59 testhost postfix/local[8873]: 497282EFE: to=<testuser@testhost>, relay=local, delay=1.2, delays=0.13/0.02/0/1, dsn=5.3.0, status=bounced (Command died with status 89: "/opt/dovecot/libexec/dovecot/deliver -f "$SENDER"") Should "status 89" mean something to me? How can I debug this? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 4

[Dovecot] Crash in rc15
by Steven F Siirila 05 Jan '07

05 Jan '07

We just experienced another crash in rc15. Here is the full backtrace: (gdb) bt full #0 0xff1c12a4 in .L423 () from /lib/libc.so.1 No symbol table info available. #1 0xff15fe20 in __wcsxfrm_std () from /lib/libc.so.1 No symbol table info available. #2 0xff140040 in getutline () from /lib/libc.so.1 No symbol table info available. #3 0x000786a8 in i_internal_panic_handler ( fmt=0x9ae80 "file %s: line %d (%s): assertion failed: (%s)", args=0xffbff598) at failures.c:382 No locals. #4 0x00078190 in i_panic ( format=0x9ae80 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:180 No locals. #5 0x000867d4 in p_strdup_until (pool=0xac54c, start=0xb8128, end=0x0) at strfuncs.c:151 size = 4294213336 mem = 0xac54c "" __PRETTY_FUNCTION__ = "p_strdup_until" #6 0x00035280 in mbox_get_index_dir (storage=0xb7c08, name=0xb8128 "~-~-~") at mbox-storage.c:448 p = 0x0 #7 0x00035cac in mbox_mailbox_delete (_storage=0xb7c08, name=0xb8128 "~-~-~") at mbox-storage.c:901 index_dir = 0xb812d "" path = 0xb8128 "~-~-~" st = {st_dev = 22282293, st_pad1 = {0, 0, 0}, st_ino = 1049, st_mode = 33152, st_nlink = 1, st_uid = 101321, st_gid = 1000, st_rdev = 0, st_pad2 = {0, 0}, st_size = 0, st_atim = {tv_sec = 1168024501, tv_nsec = 972872000}, st_mtim = {tv_sec = 1168024501, tv_nsec = 972872000}, st_ctim = {tv_sec = 1168024501, tv_nsec = 972872000}, st_blksize = 8192, st_blocks = 0, st_fstype = "ufs", '\0' <repeats 12 times>, st_pad4 = {0, 0, 0, 0, 0, 0, 0, 0}} #8 0x00069d3c in mail_storage_mailbox_delete (storage=0xb7c08, name=0xb8128 "~-~-~") at mail-storage.c:295 No locals. #9 0x0001e8a4 in cmd_delete (cmd=0xb7e14) at cmd-delete.c:44 client = (struct client *) 0xb812d storage = (struct mail_storage *) 0xb7c08 mailbox = (struct mailbox *) 0xbf1a8 name = 0xb8128 "~-~-~" #10 0x0002287c in _client_input (context=0xb7dd0) at client.c:381 cmd = (struct client_command_context *) 0xb7e14 ret = 124928 #11 0x0007e3bc in io_loop_handler_run (ioloop=0xb56c8) at ioloop-poll.c:199 ctx = (struct ioloop_handler_context *) 0xb5700 pollfd = (struct pollfd *) 0x2 tv = {tv_sec = 9, tv_usec = 990017} io = (struct io *) 0xb6658 t_id = 2 msecs = 9990 ret = 0 call = true #12 0x0007dc9c in io_loop_run (ioloop=0xb56c8) at ioloop.c:281 No locals. #13 0x0002ab24 in main (argc=-4195379, argv=0xab800, envp=0xac400) at main.c:280 No locals. (gdb) quit -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 2

[Dovecot] rc15 errors
by Nicolas STRANSKY 05 Jan '07

05 Jan '07

Hi, Since I installed rc15 I'm seing the following errors in logs of a server with several hundreds of pop3 and imap users. All the indexes have been erased and recreated after installation. Dec 21 21:06:46 rouge dovecot: pop3-login: inotify_init() failed: Too many open files The maildir mailboxes are on NFS, but the indexes are local. What should be done to correct this error ? These two error have appeared only once: Dec 22 11:02:07 rouge dovecot: IMAP(xxxxxx): file client.c: line 378 (client_handle_input): assertion failed: (!client->disconnected) Dec 22 11:02:07 rouge dovecot: child 31833 (imap) killed with signal 6 Dec 22 12:43:20 rouge dovecot: IMAP(xxxxxx): free(): invalid pointer 0x5bbbe0! Dec 22 12:43:20 rouge dovecot: child 26938 (imap) killed with signal 11 Dec 22 12:43:20 rouge kernel: imap[26938]: segfault at 0000000000000018 rip 00002b328a17e527 rsp 00007fff20bbb230 error 6 This one seems to have disappeared after patching src/lib-index/mail-index.c as you suggested on the list. Dec 21 14:15:44 rouge dovecot: child 21826 (imap) killed with signal 11 Dec 21 14:15:44 rouge kernel: imap[21826]: segfault at 0000000000000098 rip 0000000000425bf8 rsp 00007fffd7433b10 error 4 Are these errors harmful ? Regards, -- Nico Jamais un orateur n'a pensé en parlant ; jamais un auditeur n'a pensé en écoutant. -+- Émile Chartier, dit Alain (1868-1951), Propos sur l'éducation -+-

3 2

[Dovecot] suse spec for rc16 fixed
by Robert Schetterer 05 Jan '07

05 Jan '07

Hi Timo, hi all i fixed my spec , my failure i didnt looked exactly to it ( i had to change paths to modules ) now its compiling sorry Robert -- Diese Nachricht wurde auf Viren und andere gefährliche Inhalte untersucht und ist - aktuelle Virenscanner vorausgesetzt - sauber.

1 0

[Dovecot] Failed proxy auth drops connection for IMAP/POP3 proxy in 1.0-RC15
by Bruce Walter 05 Jan '07

05 Jan '07

Hello, I was seeing an odd behavior in a proxy-only configuration of dovecot. When a user entered an incorrect password in either IMAP or POP3, the Dovecot connection would be immediately dropped, sometimes with the auth failure message, sometimes without (a timing issue). I believe I have tracked down the cause to the code commented out in the attached diff. It appears that the proxy handlers are giving the client the go-ahead to attempt authorization again and then dismantling the proxy session. I believe the correct behavior would be to allow LOGOUT or QUIT to end the session and do the tear-down in client_destroy. The commented code all gets executed (with more error checking) in client_destroy, so there shouldn't be any memory leaks that I can see. Please advise if this seems correct or let me know of a different method of fixing. Thunderbird does 'Bad Things (tm)' when the connection is dropped without an authorization failed message... It doesn't re-prompt for the password and the user appears to have correctly authenticated, but the session just sits and no mail can be retrieved. Thanks, - Bruce -- __________________________ Bruce M. Walter Senior Network Manager Rho, Inc 6330 Quadrangle Drive Suite 500 Chapel Hill, NC 27517 T: 919.408.8000 x332 F: 919.408.0999

2 2

[Dovecot] Getting "Can't resolve address no: Name or service not known" error when starting Dovecot
by Francesco Piraneo Giuliano 05 Jan '07

05 Jan '07

Hi gentlemen! After running for six month Dovecot 0.99.14 I decided to upgrade to 1.0rc15. Actually Dovecot is running under Slackware Linux 10.2 and I got the package from http://www.linuxpackages.net. Problems? Yes, one! When I try to startup Dovecot program hung: Fatal: Can't resolve address no: Name or service not known I'm not a Dovecot or IMAP guru and I can't imagine what kind of address number (I think is complaining about the machine's IP address) or "name" or "service" that it doesn't know! I googled for the entire afternoon for someone that meet the same problem but I got no interesting clues... Yesterday I installed also iptables and I thought the two things are related so I disabled iptables but... nothing! Here some valuables (I hope!) informations for the good guys that want to help my desperate soul... Thank you again and I hope everybody enjoy the Christmas holidays... Bye! Francesco P.S.: I hope also that the Dovecot team develop an online documentation that reflect the versatility and complexity of the program.... ;-) dovecot --version 1.0.rc15 dovecot --build-options Build options: ioloop=poll notify=inotify ipv6 openssl SQL drivers: Passdb: checkpassword passwd passwd-file shadow Userdb: checkpassword passwd prefetch passwd-file static dovecot -n # /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/errors.log info_log_path: /var/log/dovecot/info.log protocols: imap listen: *:143 ssl_listen: no ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_max_processes_count: 8 mail_location: mbox:/home/mail/%u:INBOX=/var/mail/%u auth default: cache_size: 128 cache_ttl: 60 count: 8 passdb: driver: shadow userdb: driver: passwd Follows the full configuration file: # Base directory where to store runtime data. base_dir = /var/run/dovecot/ # Protocols we want to be serving: imap imaps pop3 pop3s # If you only want to use dovecot-auth, you can set this to "none". protocols = imap # IP or host address where to listen in for connections. It's not currently # possible to specify multiple addresses. "*" listens in all IPv4 interfaces. listen = 192.168.1.100 protocol imap { listen = *:143 } # Disable LOGIN command and all other plaintext authentications disable_plaintext_auth = no # Should all IMAP and POP3 processes be killed when Dovecot master process # shuts down. shutdown_clients = yes # Use this logfile instead of syslog(). /dev/stderr can be used if you want to # use stderr for logging (ONLY /dev/stderr - otherwise it is closed). log_path = /var/log/dovecot/errors.log # For informational messages, use this logfile instead of the default info_log_path = /var/log/dovecot/info.log # Prefix for each line written to log file. % codes are in strftime(3) # format. log_timestamp = "%b %d %H:%M:%S " # Syslog facility to use if you're logging to syslog. Usually if you don't # want to use "mail", you'll use local0..local7. Also other standard # facilities are supported. syslog_facility = mail ## ## SSL settings ## ssl_listen = no # Disable SSL/TLS support. ssl_disable = yes ## ## Login processes ## # Directory where authentication process places authentication UNIX sockets # which login needs to be able to connect to. login_dir = /var/run/dovecot/login # User to use for the login process. login_user = dovecot # Set max. process size in megabytes. login_process_size = 32 # Should each login be processed in it's own process (yes), or should one # login process be allowed to process multiple connections (no)? login_process_per_connection = yes # Number of login processes to keep for listening new connections. login_processes_count = 3 # Maximum number of login processes to create. login_max_processes_count = 8 # Greeting message for clients. login_greeting = Dovecot ready. # Space-separated list of elements we want to log. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c # Login log format. %$ contains login_log_format_elements string, %s contains # the data we want to log. login_log_format = %$: %s ## ## Mailbox locations and namespaces ## # Location for users' mailboxes. mail_location = mbox:/home/mail/%u:INBOX=/var/mail/%u ## ## IMAP specific settings ## protocol imap { # Login executable location. login_executable = /usr/libexec/dovecot/imap-login # IMAP executable location. mail_executable = /usr/libexec/dovecot/imap } ## ## Authentication processes ## # Executable location auth_executable = /usr/libexec/dovecot/dovecot-auth # Set max. process size in megabytes. auth_process_size = 256 # Authentication cache size in kilobytes. 0 means it's disabled. auth_cache_size = 128 # Time to live in seconds for cached data. auth_cache_ttl = 60 # List of allowed characters in username. auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth default { # Space separated list of wanted authentication mechanisms mechanisms = plain # /etc/shadow or similiar, using getspnam(). passdb shadow { } # /etc/passwd or similar, using getpwnam() userdb passwd { } # User to use for the process. user = root # Number of authentication processes to create count = 8 } ## ## Dictionary server settings ## dict { } ## ## Plugin settings ## plugin { }

3 6

[Dovecot] POP3S doesn't work anymore
by Johann Burkard 05 Jan '07

05 Jan '07

Hello, I use 1.0_rc15 on Gentoo Linux and since upgrading from the previous version (0.97 something?), POP3S stopped working. My USE flags are USE="[...]maildir [...] pop3d" I configured Dovecot to use POP3S: -- 8< -- # Protocols we want to be serving: # imap imaps pop3 pop3s #protocols = imap imaps protocols=pop3s -- >8 -- The pop3 binary exists: -- 8< -- # cd /usr/libexec/dovecot/ # dir total 3224 -rwxr-xr-x 1 root root 56596 Dec 10 22:51 checkpassword-reply* -rwxr-xr-x 1 root root 708532 Dec 10 22:51 deliver* -rwxr-xr-x 1 root root 144664 Dec 10 22:51 dict* -rwxr-xr-x 1 root root 276188 Dec 10 22:51 dovecot-auth* -rwxr-xr-x 1 root root 56596 Dec 10 22:51 gdbhelper* -rwxr-xr-x 1 root root 785052 Dec 10 22:51 imap* -rwxr-xr-x 1 root root 178516 Dec 10 22:51 imap-login* -rwxr-xr-x 1 root root 708428 Dec 10 22:51 pop3* -rwxr-xr-x 1 root root 170188 Dec 10 22:51 pop3-login* -rwxr-xr-x 1 root root 94476 Dec 10 22:51 rawlog* -rwxr-xr-x 1 root root 60928 Dec 10 22:51 ssl-build-param* -- >8 -- However only IMAPS is used: -- 8< -- # /etc/init.d/dovecot restart * Stopping dovecot... [ ok ] * Starting dovecot... [ ok ] # netstat -l Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:imaps *:* LISTEN tcp 0 0 *:imap2 *:* LISTEN [...] -- >8 -- Any hints? Thanks, Johann

2 2

[Dovecot] deliver as LMTP server?
by Barry Warsaw 05 Jan '07

05 Jan '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 One other question; has anybody considered writing a tool that integrates Dovecot's deliver script and an LMTP server? I'm architecting my system so that my internet facing SMTP is Postfix, but the mail folders live on a different machine. Right now, I'm considering putting a highly restricted Postfix on the internal machine, which only accepts forwards from the external machine. IWBNI I could eliminate that extra Postfix process by just letting the external one deliver to an LMTP on the internal machine, which was integrated with Dovecot's deliver. Does anything like that exist? I have a reasonably robust Python LMTP server in the current Mailman trunk. Would it be insane to try to marry that with deliver? ;) - -Barry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iQCVAwUBRZC95XEjvBPtnXfVAQJgDQP+PxNPZ2453Bb8poBbwtgKAZjwmAJnX4L3 SzipzaoEE8/P8oj/sRwwRO19ViTPmXGZTgQQTF8ipqNL2YAL73QlyeLypzu0ZBBi WyplPkgFlgMeS5rnk9ibyejerO+JdsZt6zKnyKDqdhnhVsgTwvzMsNlu6MaWqtl8 fXPd5Gur6+M= =HGgh -----END PGP SIGNATURE-----

4 5

[Dovecot] Client transaction logging in dovecot.
by Tan Shao Yi 05 Jan '07

05 Jan '07

Hi, Seasons greetings! :) May I know if it's possible to log the commands issued by clients in dovecot? For instance, RETR and DELE commands in POP3 and their equivalent in IMAP? I can't seem to be able to find the appropriate configuration key. Thanking in advance. Cheers. Tan Shao Yi

2 3

[Dovecot] Problems with dovecot-sieve on Debian Etch using dovecot LDA
by Samir M. Nassar 05 Jan '07

05 Jan '07

I am running debian etch with dovecot 1.0 rc15 from the debian repository with postfix 2.3 I am using virtual users in a postgreSQL database as taken from the dovecot wiki while making use of the password field for authentication I am using deliver as LDA and I am attempting to use the sieve plugin but try as I might I can't seem to get it working. Am I wrong in thinking that a sieve daemon should become active when dovecot starts? Here is my .dovecot.sieve require "fileinto"; if address :is "from" "foo@example" { fileinto ".INBOX.test"; } else { # The rest goes into INBOX # default is "implicit keep", we do it explicitly here keep; } Here is my dovecot.conf: base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/info.log log_timestamp: %Y-%m-%d %H:%M:%S syslog_facility: mail protocols: imaps listen: *:143 ssl_listen: ssl_disable: no ssl_ca_file: ssl_cert_file: xxxx.pem ssl_key_file: xxxx.pem ssl_key_password: ssl_parameters_regenerate: 168 ssl_cipher_list: ssl_verify_client_cert: no disable_plaintext_auth: no verbose_ssl: no shutdown_clients: yes nfs_check: yes version_ignore: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_user: dovecot login_greeting: Dovecot ready. login_log_format_elements: user=<%u> method=%m rip=%r lip=%l %c login_log_format: %$: %s login_process_per_connection: yes login_chroot: yes login_greeting_capability: no login_process_size: 32 login_processes_count: 3 login_max_processes_count: 128 login_max_connections: 256 valid_chroot_dirs: mail_chroot: max_mail_processes: 1024 verbose_proctitle: no first_valid_uid: xxxx last_valid_uid: xxxx first_valid_gid: xxxx last_valid_gid: xxxx mail_extra_groups: default_mail_env: mail_location: maildir:/home/%d/mailboxes/%n mail_cache_fields: flags mail_never_cache_fields: imap.envelope mail_cache_min_mail_count: 0 mailbox_idle_check_interval: 30 mail_debug: no mail_full_filesystem_access: no mail_max_keyword_length: 50 mail_save_crlf: no mail_read_mmaped: no mmap_disable: no mmap_no_write: no lock_method: fcntl maildir_stat_dirs: no maildir_copy_with_hardlinks: no mbox_read_locks: fcntl mbox_write_locks: dotlock fcntl mbox_lock_timeout: 300 mbox_dotlock_change_timeout: 120 mbox_min_index_size: 0 mbox_dirty_syncs: yes mbox_very_dirty_syncs: no mbox_lazy_writes: yes dbox_rotate_size: 2048 dbox_rotate_min_size: 16 dbox_rotate_days: 1 umask: 63 mail_drop_priv_before_exec: no mail_executable: /usr/lib/dovecot/imap mail_process_size: 256 mail_plugins: mail_plugin_dir: /usr/lib/dovecot/modules/imap mail_log_prefix: %Us(%u): imap_max_line_length: 65536 imap_capability: imap_client_workarounds: outlook-idle pop3_no_flag_updates: no pop3_enable_last: no pop3_reuse_xuidl: no pop3_lock_session: no pop3_uidl_format: pop3_client_workarounds: pop3_logout_format: top=%t/%p, retr=%r/%b, del=%d/%m, size=%s auth default: mechanisms: login realms: default_realm: cache_size: 0 cache_ttl: 3600 executable: /usr/lib/dovecot/dovecot-auth user: root chroot: username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ username_translation: username_format: %n@%d master_user_separator: anonymous_username: anonymous krb5_keytab: verbose: yes debug: yes debug_passwords: yes ssl_require_client_cert: no ssl_username_from_cert: no count: 1 worker_max_count: 30 process_size: 256 passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf deny: no pass: no master: no userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 438 user: group: master: path: /var/run/dovecot/auth-master mode: 438 user: group: Thank you very much, Samir M. Nassar

8 31

[Dovecot] file descriptor leak?
by Steven F Siirila 04 Jan '07

04 Jan '07

We are having problems with the latest Dovecot 1.0 (RC15) regarding file descriptors > 255 being handed off to fdopen() via crypt() via PAM(?). This is a problem on Solaris 10 due to the fact that the stdio library does not support file descriptors > 255 (in order to remain binary-compatibile with older binaries). Here are the messages we run into if we get too many (~250?) concurrent IMAP/POP sessions: Jan 3 13:03:14 hostname dovecot-auth[5799]: crypt: fdopen(265) failed: Too many open files Jan 3 13:03:14 hostname dovecot-auth[5799]: crypt: fdopen(265) failed: Too many open files Jan 3 13:03:15 hostname dovecot: auth(default): pam(username,10.1.1.1): Child process died Jan 3 13:03:15 hostname dovecot: auth(default): PAM: Child 5799 died with signal 11 Questions: 1) Is there a file descriptor leak, or are there supposed to be this many open pipes in dovecot-auth? (master dovecot has way more than 256 at this point, but apparently does not use stdio.) 2) Has anyone tried compiling Dovecot in 64-bit mode (-xarch=v9)? I have tested the fact that this removes the >255 fd limitation in Solaris 9/10. 3) Has anyone even run into this problem on Solaris? I imagine anyone with more than 250 or so simultaneous IMAP/POP sessions would have had to run into it by now. 4) Anyone have any suggested workarounds (besides compiling in 64-bit mode)? We have upwards of 4500 simultaneous IMAP connections alone on some of our servers (running UW IMAP still), so we obviously need to address this problem before we can fully deploy dovecot in our environment. -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 4

[Dovecot] Too many open files
by Daniel Cox 04 Jan '07

04 Jan '07

I am running Dovecot 1.0rc15 on NetBSD 3.1 with only a few connections. It is built from pkgsrc-2006Q3, with mail/dovecot/ updated to HEAD. kqueue is a default build option - I haven't tried without yet. Mail directories/indexes are on a Linux 2.6.16.29 NFS file system, I have set these options and it performs well: mmap_disable=yes lock_method=fcntl FYI. rc7 had very high CPU use with the same options, which rc15 seems to have fixed :-) I also have this problem with dovecot-nightly-20060225 (1.0beta3) on NetBSD 2.1RC3 using a local ffs file system. This appears in /var/log/maillog: Jan 4 18:44:42 server dovecot: pipe() failed: Too many open files # ps ax|grep dovecot 723 ?? Ss 2:14.15 /usr/pkg/sbin/dovecot 822 ?? S 0:07.79 dovecot-auth # sysctl proc.723.rlimit proc.723.rlimit.descriptors.soft = 64 proc.723.rlimit.descriptors.hard = 1772 If I change /etc/login.conf to contain: ----- default|default class:\ :openfiles-max=2048:\ :openfiles-cur=1024: ----- Then login as root and /etc/rc.d/dovecot restart, the new soft limit is applied which helps but only delays the error. I haven't worked out how to make this happen automatically on restart. NOTE: hard never goes above kern.maxfiles which is 1772 (I think the kernel needs to be recompiled to increase further). proc.21494.rlimit.descriptors.soft = 1024 proc.21494.rlimit.descriptors.hard = 1772 # fstat -p 21494 root dovecot 21494 45* pipe 0xcc4e0138 <- 0xcc4e0648 rn Shows an increasing number of pipe files open. This NetBSD 3.1 system is a test server which I can experiment with if there is anything further I can do to help find the problem. Thank you, Daniel.

2 1

Re: [Dovecot] POP3 account + forward to somewhere else
by Duncan Morgan 04 Jan '07

04 Jan '07

Please ignore this question. I seem to have stepped on some toes here. -----Original Message----- From: Duncan Morgan [mailto:duncan@gen2solutions.ca] Sent: Thursday, January 04, 2007 9:10 PM To: dovecot(a)dovecot.org Subject: POP3 account + forward to somewhere else Hello, I would like to set up a POP account which also forwards email elsewhere. In qmail for example it is easy to set up by creating a dot qmail file inside the users mailbox. How can this be done with Postfix? For awareness I'm using Postfix + Dovecot for POP3 authentication. Thanks, Duncan

1 0

[Dovecot] Corrupted transaction log
by Paul Warren 04 Jan '07

04 Jan '07

I've just installed dovecot and am trying to use it to access my Maildir folders. Unfortunately: 1 SELECT INBOX 1 NO Internal error occurred. Refer to server log for more information. [2006-12-22 18:06:11] Log says: Dec 22 17:55:56 sphinx dovecot: IMAP(pdw): Corrupted transaction log file /home/pdw/Maildir/dovecot.index.log: record size too small (type=0x20, offset=24, size=0) Dec 22 17:55:57 sphinx dovecot: IMAP(pdw): Unexpected transaction log desync with index /home/pdw/Maildir/dovecot.index Dec 22 17:55:57 sphinx dovecot: IMAP(pdw): Unexpected transaction log desync with index /home/pdw/Maildir/dovecot.index Any clues? Deleting ~/Maildir/dovecot* doesn't seem to help. I can't find any documentation relating to the transaction log, or an explanation of why a fresh install of dovecot might choose to create a corrupt one. thanks, Paul

2 3

[Dovecot] POP3 account + forward to somewhere else
by Duncan Morgan 04 Jan '07

04 Jan '07

Hello, I would like to set up a POP account which also forwards email elsewhere. In qmail for example it is easy to set up by creating a dot qmail file inside the users mailbox. How can this be done with Postfix? For awareness I'm using Postfix + Dovecot for POP3 authentication. Thanks, Duncan

2 1

[Dovecot] Allow plaintext auth from local network?
by Marc Haber 04 Jan '07

04 Jan '07

Hi, I have dovecot 1.0rc15 on Debian and would like to allow plaintext auth not only from the local IP address but from the entire local network, but not from everywhere. Is that configurable? I am looking for something like "allow_plaintext_auth = 10.8.0.0/24". Greetings Marc -- ----------------------------------------------------------------------------- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834 Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835

2 2

[Dovecot] path field in mysql quota
by Marshal Newrock 04 Jan '07

04 Jan '07

What is the path field for in the quota table in mysql? Is the username not enough information for storing and updating quotas? -- Marshal Newrock, Ideal Solution LLC http://www.idealso.com

2 3

[Dovecot] Custom login_greeting per virtual server?
by Cassidy B. Larson 04 Jan '07

04 Jan '07

Just a quick question, nothing broke. I setup about 5 virtual servers. It's great! I can define which protocols to listen on per server. Just curious why I can specify a unique "login_dir" per server, but not a unqiue login_greeting? Appears dovecot always shows the first login_greeting from the first virtual server. Intended this way? -c

2 8

[Dovecot] customizable idle login timeouts?
by Cassidy B. Larson 04 Jan '07

04 Jan '07

We're in the process of migrating from mbox over to maildir. I'm running into a problem with the proxy and timeouts. Appears the idle timeout is set to 60 seconds. This is a bit too low for some of our large mbox files :( Any plans on adding the: #define CLIENT_LOGIN_IDLE_TIMEOUT 60 #define AUTH_REQUEST_TIMEOUT to the .conf file to be tunable on the fly? I ended up just patching the couple of files in question, but it'd be nice.. Cassidy

2 2

[Dovecot] Urgent - Setup DoveCot with Plesk
by iSquareOne LLC 03 Jan '07

03 Jan '07

Hey, all, I am trying to setup DoveCot with Plesk. But I could not go through the last step. Setup: MySQL 5.0.22 Qmail Plesk 7.5 DoveCot v1.0 RC15 The problem: I setup sql.conf for user query and password query. I tried different ways, DoveCot always says "Authentication failed". Here are my two SQLs. user_query = SELECT concat('/var/qmail/mailnames/', d.name, '/', m.mail_name) as home, concat('/var/qmail/mailnames/', d.name, '/', m.mail_name) as mail, 101 AS uid, 12 AS gid, 'dirsize:storage=1000000' AS quota FROM accounts a, mail m, domains d WHERE a.id = m.account_id AND d.id=m.dom_id AND m.mail_name='%n' AND d.name='%d' I manully fill in %n=admin and %d=test.com to test it and it worked fine The result is: home,mail,uid,gid,quota "/var/qmail/mailnames/test.com/admin","/var/qmail/mailnames/test.com/admin","101","12","dirsize:storage=1000000" password_query = SELECT concat(m.mail_name, '@',d.name) as user, a.password as password, concat('/var/qmail/mailnames/', d.name, '/', m.mail_name) as userdb_home, concat('maildir:/var/qmail/mailnames/', d.name, '/', m.mail_name) as userdb_mail, 101 as userdb_uid, 12 as userdb_gid FROM accounts a, mail m, domains d WHERE a.id = m.account_id AND d.id=m.dom_id AND m.mail_name='%n' AND d.name='%d' The result is: user,password,userdb_home,userdb_mail,userdb_uid,userdb_gid "admin(a)test.com","password","/var/qmail/mailnames/test.com/admin","maildir:/var/qmail/mailnames/test.com/admin","101","12" I don't know what DoveCot is expecting to get from the SQL result. Please let me know if I missed anything. Thank you very much! __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

[Dovecot] Error reading configuration file
by Justin Pearce 03 Jan '07

03 Jan '07

Good day, I seem to be having an issue using dovecot 1.0 rc15. I compiled the source with the following configure command: CPPFLAGS="-I/usr/local/include/mysql" LDFLAGS="-L/usr/local/lib/mysql" -lmysqlclient" ./configure -with-mysql -with-sql-drivers=mysql Did make and make install and set the dovecot-example.conf to dovecot.conf and tried running the program and got the following error: Error: Error in configuration file on line 50: expecting '=' Line 50 of the default config is a comment, which struck me as odd. So, I uninstalled and tried building with no options. I did a make uninstall, removed the /usr/local/lib/dovecot directory did make and make install and tried the program. This time it didn't crash about the config file, but the mail.err log notes that the child processes died on an error 89, apparently unable to figure our what pam was. I'm wondering why the thing seems to work if I do not build for mysql but if I want mysql, it breaks in the manner it does? Is it a bug, or am I doing it wrong (which is a real possibility). Any help soon would be appreciated, as my boss keeps asking 'So, when is that mail server going to be done?'. :) Justin Pearce Information Technology/Programming Price Video Productions JustinP(a)PriceVideo.com 361-572-3810 800-733-3810 Fax: 361-572-3894 www.PriceVideo.com

6 7

[Dovecot] DvCot/PstFix Virtual Domains Virtual Users PAM Authentication - How pls
by Kyle 03 Jan '07

03 Jan '07

Hi Folks, I'm hoping some one can set me straight here please. Postfix 2.1.5 Dovecot 0.99.11-2 I have Postfix set up on a new box with Virtual Domains and Virtual Users using MailDir format with their mail homes in /var/spool/mail/<domain>/<user> I want Dovecot to login using PAM Authentication. The idea is to host multiple domains which each have multiple aliases which resolve to one email account for their respective domain but using a user name which actually _is_ a system user. So I might have; jo(a)abc.com joe(a)abc.com joey(a)abc.com pete(a)abc.com peter(a)abc.com jo(a)xyz.com joe(a)xyz.com joey(a)xyz.com pete(a)xyz.com peter(a)xyz.com where 'joe' and 'peter' are both system users each with mail homes of; /var/spool/mail/abc.com/joe /var/spool/mail/abc.com/peter /var/spool/mail/xyz.com/joe /var/spool/mail/xyz.com/peter In my dovecot.conf, I have; auth_userdb = static uid=89 gid=89 home=/var/spool/mail/%d/%u auth_passdb = pam If I login with just 'joe', I get; Fatal: chdir(/var/spool/mail//joe) failed with uid 89: Not a directory Fair enough, that sounds logical to me. But if I then login with 'joe(a)abc.com', I get; PAM: pam_authenticate(joe(a)abc.com) failed: Authentication failure So it appears Dovecot is checking PAM for 'joe(a)abc.com' rather than just 'joe'. How can I make it check for just 'joe' please? -- ------------------------------------------------------------------------ Kind Regards Kyle

2 1

[Dovecot] configured mechanisms don't work
by Eggert Ehmke 03 Jan '07

03 Jan '07

Hi, I am new to this list and to dovecot. Forgive me if I ask long discussed items. I managed to install postfix and dovecot 1.0.rc15 on a Debian Sarge server out of the backports. It works so far, I can send emails via smtp to postfix, they are stored in the virtual mailboxes of some users, and I can get them via IMAP from dovecot. However, in dovecot.conf I configured mechanisms = plain login digest-md5 cram-md5 when I connect to the server via telnet 143, I get this: 2 CAPABILITY * CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS STARTTLS LOGINDISABLED 2 OK Capability completed. So I can't authenticate using cram-md5. What may I be missing? Regards & happy new year! Eggert

2 1

[Dovecot] determining connection type/port in logs
by Glenn Leavell 03 Jan '07

03 Jan '07

Is there a way to configure logging to indicate what connection type was used to authenticate? I'd like to be able to tell from the logs whether the user used STARTTLS on port 143 or an SSL-wrapped connection on port 993. Using RC15 with auth_verbose=yes gives us the following log entries during login and logout (lines wrapped for convenience): # login port 143 with STARTTLS: Jan 3 14:17:24 tony dovecot: [ID 107833 local5.info] imap-login: Login: user=<glenn>, method=plain, rip=10.0.0.2, lip=192.168.1.2, TLS Jan 3 14:17:41 tony dovecot: [ID 107833 local5.info] IMAP(glenn): Disconnected: Logged out # login port 993/SSL Jan 3 14:19:11 tony dovecot: [ID 107833 local5.info] imap-login: Login: user=<glenn>, method=plain, rip=10.0.0.2, lip=192.168.1.2, TLS Jan 3 14:19:20 tony dovecot: [ID 107833 local5.info] IMAP(glenn): Disconnected: Logged out Turning on auth_debug=yes added some additional info, but I still wasn't able to tell what port or connection type was used. Thanks very much, Glenn -- Glenn Leavell <glenn(a)usg.edu> Office of Information and Instructional Technology Board of Regents of the University System of Georgia

2 1