- dovecot - dovecot.org

[Dovecot] dovecot
by Oleg D. 17 May '06

17 May '06

The old version was 1.0b3 from freebsd ports and all works fine. When I have upgrade freebsd ports and install a new 1.0b8 I see this error. Before I have installed a new version I have "make deinstall" all 1.0b3 package. (dovecot.conf was old with "ssl_disable = yes") Later I have add --without-ssl in port's Makefile and compile dovecot without ssl. But I have all the same seen "pop3-login: BUG: SSL..." When I have set "ssl_disable = no" I saw another error: "Error: SSL support not compiled in but ssl_disable=no" TS> On Tue, 2006-05-16 at 01:29 +0400, Oleg D. wrote: >> Hi >> >> I used dovecot 1.0b3 without ssl (FreeBSD) >> I just upgrage dovecot to new 1.0b8 with the same config file >> and I have this error in log: >> pop3-login: BUG: SSL initialization parameters not given while they should have been >> >> p.s >> In my dovecot.conf I have option "ssl_disable = yes" TS> What was the old version you used? Are you sure you upgraded all of the TS> binaries? I think this error usually happens when some of your binaries TS> are from older Dovecot installation while others are from newer.

1 0

[Dovecot] Horde/IMP setup
by Eric 16 May '06

16 May '06

does anyone else use Horde/IMP that can share their servers.php setup? I am getting weird behavior with IMP not showing my INBOX and sub folders, etc. and i am not sure if its an IMP issue or Dovecot. It was giving me problems yesterday, then it cleared up, but now its acting up again. mail clients like Thunderbird work fine tho. I am seeing this in the logs a lot: [Tue May 16 08:08:21 2006] [error] [client 67.133.211.52] PHP Warning: Invalid argument supplied for foreach() in /usr/local/www/horde/imp/lib/IMP.php on line 1197, referer: https://mikestammer.com/horde/services/portal/sidebar.php Line 1197 looks like this: foreach ($_SESSION['imp']['namespace'] as $key => $val) { if (!empty($key) && (strpos($mailbox, $key) === 0)) { $cache[$key][$mailbox] = $val; return $val; } } Anyone have any tips or ideas?

5 6

[Dovecot] Solaris 10 x64 - crash report
by Rob Shepherd 16 May '06

16 May '06

Dear dovecot-devel I have a newly built dovecot-1.0.beta8 crashing at start May 16 11:11:33 zorch dovecot: [ID 475045 mail.info] Dovecot v1.0.beta8 starting up May 16 11:11:34 zorch dovecot: [ID 920869 mail.error] Login process died too early - shutting down May 16 11:11:34 zorch dovecot: [ID 684838 mail.error] child 28853 (login) killed with signal 11 Built on Solaris 10u1 x64 with Studio11 sun compiler, using LDFLAGS=-L/opt/csw/lib -R/opt/csw/lib -lssl CPPFLAGS=-I/opt/csw/include ./configure --prefix=/usr/local/dovecot-1.0.beta8 --with-ldap which begat [12:40:20][root@zorch:/usr/local/dovecot-1.0.beta8/libexec/dovecot]$ ldd dovecot-auth libssl.so.0.9.8 => /opt/csw/lib/libssl.so.0.9.8 libcrypt_i.so.1 => /usr/lib/libcrypt_i.so.1 libpam.so.1 => /lib/libpam.so.1 libldap-2.3.so.0 => /opt/csw/lib/libldap-2.3.so.0 libsocket.so.1 => /lib/libsocket.so.1 libnsl.so.1 => /lib/libnsl.so.1 librt.so.1 => /lib/librt.so.1 libsendfile.so.1 => /lib/libsendfile.so.1 libc.so.1 => /lib/libc.so.1 libcrypto.so.0.9.8 => /opt/csw/lib/libcrypto.so.0.9.8 libdl.so.1 => /lib/libdl.so.1 libgen.so.1 => /lib/libgen.so.1 libcmd.so.1 => /lib/libcmd.so.1 liblber-2.3.so.0 => /opt/csw/lib/pentium/liblber-2.3.so.0 libresolv.so.2 => /lib/libresolv.so.2 libnet.so => /opt/csw/lib/i386/libnet.so libsasl2.so.2 => /opt/csw/lib/i386/libsasl2.so.2 libssl.so.0.9.8 => /opt/csw/lib/pentium/libssl.so.0.9.8 libcrypto.so.0.9.8 => /opt/csw/lib/pentium/libcrypto.so.0.9.8 libmp.so.2 => /lib/libmp.so.2 libmd5.so.1 => /lib/libmd5.so.1 libscf.so.1 => /lib/libscf.so.1 libaio.so.1 => /lib/libaio.so.1 libdoor.so.1 => /lib/libdoor.so.1 libuutil.so.1 => /lib/libuutil.so.1 libm.so.2 => /lib/libm.so.2 which is run using this grep -v '#'ed conf file > protocols = imap > ssl_disable = yes > login_user = dovecot > mail_debug = yes > default_mail_env = maildir:~/.maildir > protocol imap { > listen = *:145 > imap_client_workarounds = outlook-idle > } > > protocol pop3 { > } > auth_verbose = yes > auth_debug = yes > auth_debug_passwords = yes > auth default { > mechanisms = plain > passdb pam { > } > passdb ldap { > args = /usr/local/dovecot-1.0.beta8/etc/dovecot-ldap.conf > } > userdb passwd { > } > userdb ldap { > args = /usr/local/dovecot-1.0.beta8/etc/dovecot-ldap.conf > } > user = root > } > plugin { > } which begat -rw------- 1 root root 4212175 May 16 12:15 /usr/local/dovecot-1.0.beta8/var/run/dovecot/core I notice in the configure script, that it's building with the system ldap.h, which I don't think is openldap. however the bin is linked to the lib from blastwave.org which is openldap. How can I specify the correct inc/lib pair? if this is indeed the problem. Please tell me how to produce a backtrace if one is needed if this is an actual bug..... Cheers Rob -- Rob Shepherd | Computer and Network Engineer | Technium CAST | LL57 4HJ rob(a)techniumcast.com | 01248 671928 | 07776 210516

2 1

[Dovecot] Authentication Daemons
by Scott Penrose 16 May '06

16 May '06

Hi ho. My name is Scott Penrose - and I am experimenting with Dovecot as an IMAP replacement in our company. I have spent some time trying to write a plugin (sort of) for authentication and come to the conclusion that our instance is a little strange. So I though I would try plan B which is to write my own authentication module. This seems to have worked fairly well to start with but I have had some problems. For example, when connecting with a simple socket client (I have a socket client equiv of telnet) I see the VERSION, MECH ... DONE from the login/default socket, but nothing from the master socket. Both should be returning VERSION. Any ideas on that one? Thanks Scott

1 0

[Dovecot] Dovecot + Sendmail + virtusertable
by Chris Tata 16 May '06

16 May '06

Hello, I was wondering if there was a way to have dovecot authenticate using sendmail's virtusertable to map virtual users to system users. My goal is to allow virtual users (bob(a)domain.com) to authenticate via pop or imap using the full user@domain scheme. I tried enabling 'vpopmail' as passdb and userdb in the default namespace but I get this error: dovecot: May 15 23:05:21 Error: auth(default): Unknown passdb type 'vpopmail' Please advise. Thanks, Chris

1 0

[Dovecot] Missing mails after folder renaming
by Bob & Sabine von Knobloch 15 May '06

15 May '06

Dear List, I seem to have created myself a problem to which I can't find an answer. I am using Dovecot (0.99.13-4.FC2 on Fedora Core 2) with Mozilla Thunderbird on Windows XP and Linux as IMAP client software. I renamed a folder to a name that included spaces (it fitted the pupose better), then later realised that I would have to change my procmail rules to suit. As I wasn't sure what procmail would do with such folder names I renamed the folder back to it's original short name (all this changing was done in Thunderbird). The result is that all subfolders under the renamed folder exist in both forms: eg "Computer.SubjectA" and "Computer Projects.SubjectA", but the second versions are not seen by Thunderbird although they contain all my old mails (new mails are correctly delivered to the short name folders). I have tried to move the mails in these folders back to the short name folders but the indexing system (I assume) does not 'see' these maildir files. How can I fool the system into seeing all the old mails? Of course, I would like to know why the second renaming didn't work but don't have enough information to know if it's Thunderbird or Dovecot that isn't working correctly. As a second question, my Windows clients run in an NT domain (Samba) with roaming user profiles. The pathnames for some users become quite long and Windows throws a 'path too long' error when saving/loading the user profile from the DC. Is there a way of limiting the depth of folder nesting under Dovecot to avoid this problem? I have tried to search for answers but haven't found any yet. If there is already some information, I would be glad of a pointer to it. I am very pleased with the performance of Dovecot in all respects, thanks for the program. Bob von Knobloch.

4 3

[Dovecot] Anyone using Dovecot LDA on OS X?
by Dean Blackburn 15 May '06

15 May '06

I'm curious if anyone can get the LDA running on OS X, and what their experiences have been... We are still having index corruption issues that result in many temp files being created and client-side timeouts using a straight Postfix local delivery under 1.0beta7. The LDA does not come packaged with the Darwinports version of Dovecot, so any tips on compiling it would be most appreciated... Thanks, -deano

1 0

[Dovecot] dovecot ldap auth bind and different directories
by Andrew Bates 15 May '06

15 May '06

I have recently begun playing with Dovecot (1.0.beta8) and have run into an interesting scenario. The way my email system is set up is that users of different domains have completely different base dn's. For instance, if a user is part of test.com the bind dn would be uid=user,ou=People,dc=test,dc=com. The bind dn for user(a)domain.com would be uid=user,ou=People,dc=domain,dc=com. I could not seem to figure out a way to have the binddn adjusted based on a user's @domain so I modified auth-request.c and var-expand.c to include a new variable expansion concept. In the configuration I'm now able to include the following: auth_bind_userdn = uid=%n,ou=People,dc=%c2,dc=%c1 and %c1 will be expanded to the tld, %c2 will be expanded to the next level domain (domain or test in the above example). This will work up to 9 levels of subdomain (1-9). This is very similar in how postfix expands variables with ldap. I'm a bit rusty with my C, so I'd love some feedback on the patch. If this idea isn't included in the main code, that's fine, but I thought I'd contribute my experiences! Thanks for a great product everyone! Andrew =================================================================== --- dovecot-1.0.beta8/src/auth/auth-request.c 2006-04-12 22:00:06.000000000 -0400 +++ dovecot-1.0.beta8.new/src/auth/auth-request.c 2006-05-15 12:37:06.000000000 -0400 @@ -852,6 +852,7 @@ auth_request_get_var_expand_table(const struct auth_request *auth_request, const char *(*escape_func)(const char *)) { + char *str; static struct var_expand_table static_tab[] = { { 'u', NULL }, { 'n', NULL }, @@ -869,7 +870,27 @@ if (escape_func == NULL) escape_func = escape_none; - tab = t_malloc(sizeof(static_tab)); + /* count the number of domain components + in the given auth_request->user string + so we can allocate the correct sized + array + */ + int dc_count = 0; + str = strchr(auth_request->user, '@'); + while (str != NULL && *str != '\0' && str++) { + if (*str == '.') + dc_count++; + if (dc_count == 9) + break; + } + + /* allocate memory big enough for the static + tab plus each domain compononet. Since we + can only use 1-9 as identifiers, there is + no point in allocating more then 9 + */ + dc_count = (dc_count < 9 ? dc_count : 9); + tab = t_malloc(sizeof(static_tab) + (dc_count*(sizeof(char) + sizeof(char *)))); memcpy(tab, static_tab, sizeof(static_tab)); tab[0].value = escape_func(auth_request->user); @@ -886,6 +907,27 @@ tab[7].value = dec2str(auth_request->client_pid); if (auth_request->mech_password != NULL) tab[8].value = escape_func(auth_request->mech_password); + + char *domain = p_strdup(auth_request->pool, strchr(auth_request->user, '@')); + if (domain != NULL) { + int count = 0; + str = domain + strlen(domain); + do { + str--; + if (*str == '.' || *str == '@') { + *str = '\0'; + count++; + tab[count + 8].key = (char)(48+count); + tab[count + 8].value = escape_func(str+1); + } + if (*str == '@') { + count++; + tab[count + 8].key = '\0'; + tab[count + 8].value = NULL; + break; + } + } while (str != domain && count < 9); + } return tab; } =================================================================== --- dovecot-1.0.beta8/src/lib/var-expand.c 2006-04-12 22:00:06.000000000 -0400 +++ dovecot-1.0.beta8.new/src/lib/var-expand.c 2006-05-12 17:06:42.000000000 -0400 @@ -162,6 +162,11 @@ break; var = NULL; + + /* domain component expansion */ + if (*str == 'c') + str++; + for (t = table; t->key != '\0'; t++) { if (t->key == *str) { var = t->value != NULL ? t->value : "";

2 1

[Dovecot] re: ssl-build-param
by Jackie Hunt 15 May '06

15 May '06

Hi all, I posted a message last week about a problem with ssl-build-param, shown below. I may have a lead on this, and was hoping someone can confirm my theory. On AIX, a malloc of 0 bytes returns NULL, which is different than on Solaris and HP-UX (and probably Linux?) I'm guessing the NULL pointer returned is causing the abort of the ssl-build-param, since that was an unexpected result. Looking briefly at the code in ssl-init-openssl.c that seems reasonable. Can anyone please confirm this? And if so, any suggestions on the best way to proceed? Thanks much, Jackie --- Jackie Hunt ACNS Voice: (970) 663-3789 Colorado State University FAX: (970) 491-1958 Fort Collins, CO 80523 Email: jackie.hunt(a)colostate.edu > I'm trying to get dovecot up and running on an AIX 5.2 system > with openssl 0.9.8a. Everything compiles fine, but when I start > dovecot I find in the log: > > dovecot: May 08 13:39:14 Info: Dovecot v1.0.beta7 starting up > dovecot: May 08 13:39:14 Info: Generating Diffie-Hellman parameters for the firs > t time. This may take a while.. > dovecot: May 08 13:39:14 Error: ssl-build-param: Trying to allocate 0 bytes > dovecot: May 08 13:39:14 Error: child 18998 (ssl-build-param) killed with signal > 6 > I searched the archives of the mailing list and didn't have any luck. > Any help would be created appreciated. Please reply directly to me > as well as the list. Thanks much! > > Jackie

1 0

[Dovecot] Downloading Previous Versions??
by Jackie Hunt 15 May '06

15 May '06

Hi all, How do I get to previous versions of the dovecot source code? I wanted to download dovecot-1.0.beta7, but can't find it via the web, only the latest version (beta8). It's probably obvious how to do this...but I'm not seeing it. Thanks much! Jackie ---- Jackie Hunt ACNS Voice: (970) 663-3789 Colorado State University FAX: (970) 491-1958 Fort Collins, CO 80523 Email: jackie.hunt(a)colostate.edu

2 1

[Dovecot] beta8 compile error
by Thomas Hummel 15 May '06

15 May '06

Hello, On FreeBSD 5.4-RELEASE dovecot-1.0.beta8 build cause the following error : --------------------------------------------- make all-recursive Making all in src Making all in lib if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I /usr/local/include/db41 -I/usr/local/include -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -MT mempool-alloconly.o -MD -MP -MF ".deps/mempool-alloconly.Tpo" -c -o mempool-alloconly.o mempool-alloconly.c; then mv -f ".deps/mempool-alloconly.Tpo" ".deps/mempool-alloconly.Po"; else rm -f ".deps/mempool-alloconly.Tpo"; exit 1; fi mempool-alloconly.c: In function `check_nuls': mempool-alloconly.c:85: error: too many arguments to function `check_nuls' *** Error code 1 --------------------------------------------- Compiler used : munster# gcc -v Using built-in specs. Configured with: FreeBSD/i386 system compiler Thread model: posix gcc version 3.4.2 [FreeBSD] 20040728 -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 2

[Dovecot] dovecot and vmailmgr
by Mij 15 May '06

15 May '06

hello now that dovecot supports authentication with checkpassword-compatible modules, I tried to get it working for IMAP on a qmail + vmailmgr server. For a subtle detail, while claiming to be "a drop-in replacement for the standard checkpassword", checkvpw (auth module for vmailmgr) is not "drop in". It actually expects 2 args on its command line, not 1. So, a wrapper is needed to get it authenticating correctly with dovecot; a very simple one (argswrapper.c below). This wrapper is not sufficient though. In fact, vmailmgr represents user homes like this: $HOME_LOCUSER/users/virtual_username this is ok with default_mail_env = maildir:%h/users/%n $HOME_LOCUSER depends on the domain part of the user's email. The relation is held in /var/qmail/control/virtualdomains . However, on the local part (virtual_username) some rewriting is done on the username, as dots are replaced by ":". So in the end j.doe(a)foo.com becomes "~mxfoocom/users/j:doe". Now, var-expand does not support any rewriting. I patched it by adding another modifier, m_str_replace(), which replaces REPLACE_SOURCE with REPLACE_TARGET in a given string. By defining REPLACE_SOURCE to '.' and REPLACE_TARGET to ':' one accomplishes the vmailmgr username rewriting. This modifier is applied with "P", so: default_mail_env = maildir:%h/users/%Pn A better, general solution would be for dovecot to implement some kind of general rewriting, say with regexps and sed-like replacement rules, or with an external process in a cgi fashion. With this patch, dovecot gets the correct path for any user mailbox. However, there's a bug in dovecot storage modules (both maildir and mbox) which truncates the path in the first ":", when expecting ":INBOX" etc specifiers: /* <Maildir> [:INBOX=<dir>] [:INDEX=<dir>] [:CONTROL=<dir>] */ if (debug) i_info("maildir: data=%s", data); p = strchr(data, ':'); if (p == NULL) root_dir = data; else { root_dir = t_strdup_until(data, p); this way, a former data = /var/maildirs/foo/users/j:doe:INDEX=... is truncated to /var/maildirs/foo/users/j . This opens the much worse possibility for user "j:doe" to be accounted into user "j" account after authentication. It is difficult to get a solid fix here, because the grammar is ambiguous for INBOX, INDEX and CONTROL tokens. Since they are not separated with an illegal path symbol from the rest of the path in default_mail_env, it is not possible to state when a ":INBOX=" token belongs to the path and when it is a user directive. The Best is to move the specifiers into a different configuration directive. However, a more solid check with the current modus operandi is /* <Maildir> [:INBOX=<dir>] [:INDEX=<dir>] [:CONTROL=<dir>] */ if (debug) i_info("maildir: data=%s", data); /* extracting INBOX / INDEX / CONTROL suffices */ if (((p = strstr(data, ":INBOX=")) != NULL) || ((p = strstr(data, ":INDEX=")) != NULL) || ((p = strstr(data, ":CONTROL=")) != NULL)) { root_dir = t_strdup_until(data, p); which expects the full ":INBOX=" etc strings to be present in data instead of the single ":" separator. The patches that implement this for both {maildir,mailbox}-storage are also appended below. I will take a couple of hours tomorrow to wrap all the iter up on a web page here http://mij.oltrelinux.com/net/dovecot-qmail-vmailmgr/ All the patches are applied wrt 1.0-beta7 bye

2 4

[Dovecot] more unexpected results from 0.99.13 -> 1.0beta8 upgrade
by Alan Premselaar 15 May '06

15 May '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Just to give some more information about this: Apparently some of our POP3 users are saying that when they checked for new mail this morning that all the mail that was saved on the server was downloaded again as unread mail. I followed the guidelines in the wiki [1] with regards to upgrading from 0.99 to 1.0, made sure the .subscriptions and .customflags files were renamed to subscriptions and dovecot-keywords respectively yet the subscriptions were not maintained (i.e. users had to re-subscribe after the update) here's my config information, can you give me any hints as to what went wrong? [root@mail root]# dovecot -n protocols: imap imaps pop3 pop3s ssl_cert_file: /usr/share/ssl/certs/dovecot.pem ssl_key_file: /usr/share/ssl/private/dovecot.pem disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no verbose_proctitle: yes default_mail_env: maildir:~/Maildir:INDEX=/var/indexes/%u:CONTROL=/var/control/%u maildir_copy_with_hardlinks: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / location: maildir:~/Maildir:INDEX=/var/indexes/%u:CONTROL=/var/control/%u inbox: yes auth default: master_user_separator: * passdb: driver: pam userdb: driver: passwd [root@mail root]# dovecot --version 1.0.beta8 the machine is running RHEL 3 and kept up to date on a regular basis. Thanks, Alan [1] http://wiki.dovecot.org/UpgradingDovecot -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEZ9hBE2gsBSKjZHQRAnSuAJ929R90J8eBhi25528jwXN1HaR7mgCg42sv t16Eyhc3G+CSLVjTTdTzaEw= =OtX8 -----END PGP SIGNATURE-----

2 1

[Dovecot] Semi-OT: Backing up maildir
by Shayne Hardesty 15 May '06

15 May '06

We switched our mail server over from mbox to maildir a few months ago and couldn't be happier - the performance under normal load is incredible. However we now have a problem with backup.. Typically we would run tar on the mail server, sending its output to another server via ssh.. Like this: tar cfp - /home | gzip | ssh other.server (cd /backups && tar xfp -).. I have tried gzipping the stream on the source side, gzipping on the destination, and running without gzip, all three take an amazingly long time to complete (> 14 hours). Ours is a modest server with about 1300 users, about 300GB of mail total. The whole thing sits on hardware RAID-10, so I'm primarily guarding against a MAJOR hardware failure, a config blunder, or a hacker wiping out files. How do you guys back up your maildir? I've considered exporing the maildir with NFS and backing it up from another server.. Any opinions on that? Thanks, Shayne

7 6

[Dovecot] 1.0beta8 won't start: Fatal: Protocol imaps given more than once
by Mike Brudenell 15 May '06

15 May '06

Greetings - I've just built Dovecot 1.0beta8 and find it refuses to start. This under Solaris 10 on an Intel-based Sun system. The error message Dovecot displays (on standard error) in response to /usr/local/sbin/dovecot is Fatal: Protocol imaps given more than once I've checked through my configuration file and the only mention of "imaps" is here: # Protocols we want to be serving: # imap imaps pop3 pop3s protocols = imap imaps The same settings file worked OK with 1.0beta7. I've also tried using the standard dovecot-example.conf that comes with 1.0beta8 which has the "protocols" line commented out and, after adding appropriate settings for "ssl_cert_file" and "ssl_key_file", still have the same problem. I popped a few dubugging i_info() calls into src/master/main.c to try and see what was going on and the output was as follows: Info: set->protocols = >imap imaps< Info: imap: *fd = -1 Info: imaps: *fd = 0 Fatal: Protocol imaps given more than once The first line is displaying the value of the keywords in set->protocols The second and third are within the if/then/else sequence: the first for the "imap" keyword and the second for the "imaps" keyword. Then comes the fatal error, caused by the "fd" variable not being equal to -1 (it is "0" for "imaps") above. Changing the dovecot.conf file to read protocols = imap lets Dovecot start up OK. Changing it to protcols = imaps causes it to fail in the same way as before(!). Seems to be a problem with the initialisation of set->ssl_listen_fd therefore, as this should apparently be -1? Is this likely to be something I've got wrong (wouldn't have thought so as 1.0beta7 is happy with the same config file) or is there a problem in 1.0beta8? Cheers, Mike B-) -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

4 5

[Dovecot] FSF - dovecot
by Matt 14 May '06

14 May '06

Will dovecot always be open FREE source for all? I am currently migrating my www.digipanel.com from Courier to dovecot as I think courier is overly complicated and a pain in the arse to manage all those files. anyways, I have dovecot IMAP working with MySQL auth but reading the Maildir each time takes up to 30 secs to complete. ANy ideas why? Maybe a dns resolve issue? how can I fix..

1 0

[Dovecot] problems with 1.0beta[78] on RHEL3
by alan premselaar 14 May '06

14 May '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been running 0.99.13 on RHEL 3 for over a year now and finally decided to upgrade to the 1.0 series. unfortunately, I only have one RHEL 3 machine which is my production machine. So, while doing all my preliminary testing I was doing so on a FC 3 machine. I got everything to a stage where I felt comfortable doing the upgrade but I'm running into some problems on the RHEL 3 system. if I download the tarball, it compiles without problem. If I download the cvs or the src.rpm then I get autoconf errors complaining about not supporting AC_CONFIG_HEADER but requiring AM_CONFIG_HEADER. it also complains that the installed version of autoconf is too old, although it's the latest package for RHEL 3 (which means it has the same version number as the original installed package but all the updates are back-ported to it, right?) anyways, that's all trivial as the source compiles. the problem I'm running into is this: the quota plugin is returning the following errors in the mail log: May 13 02:02:13 mail dovecot: POP3(real_user): dlopen(/usr/lib/dovecot/pop3/lib01_quota_plugin.so) failed: /usr/lib/dovecot/pop3/lib01_quota_plugin.so: undefined symbol: mount point_get and also: May 13 02:03:03 mail dovecot: IMAP(real_user): quotactl(Q_GETQUOTA, /dev/sdb1) failed: Invalid argument can anyone offer any assistance with this? oh yeah, one last thing. following the wiki, during the upgrade i renamed the .subscription files to subscription in each user's Maildir directory (oh yeah, i'm using maildir format) but, the subscription information wasn't persistant. anything else i need to be aware of related to that? thanks alan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEZMCtE2gsBSKjZHQRAjRVAKCPgSxLQzyJ7lrhCYBSxnVeTJixtgCaA8G5 NtAoCZZWpdetBLGQsA0llrU= =K+09 -----END PGP SIGNATURE-----

2 3

[Dovecot] Problem with dovecot 1.0 make
by Bob Hope 14 May '06

14 May '06

When trying to build dovecot with MySQL support I got the following: /usr/local/mysql/lib/libmysqlclient.a(sha1.o)(.text+0x5c): In function `sha1_result': : multiple definition of `sha1_result' ../lib/liblib.a(sha1.o)(.text+0x880):/root/dovecot-1.0.alpha3/src/lib/sha1.c:233: first defined here /usr/lib/gcc-lib/i486-slackware-linux/3.3.4/../../../../i486-slackware-linux/bin/ld: Warning: size of symbol `sha1_result' changed from 158 in ../lib/liblib.a(sha1.o) to 126 in /usr/local/mysql/lib/libmysqlclient.a(sha1.o) collect2: ld returned 1 exit status make[3]: *** [dovecot-auth] Error 1 make[3]: Leaving directory `/root/dovecot-1.0.alpha3/src/auth' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/root/dovecot-1.0.alpha3/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/root/dovecot-1.0.alpha3' make: *** [all] Error 2 Any thoughts? Regards, Savage

5 10

[Dovecot] --enable-debug in 1.0beta8
by Mircea Nistor 13 May '06

13 May '06

It looks like there is an error in calling check_nuls for DEBUG In src/lib/ mempool-alloconly.c on line 85 you have check_nuls(block->prev, 0), which I think it should be check_nuls(block->prev); Can some developer confirm that? Thank you [root]#./configure --prefix=/opt/dovecot --enable-debug Install prefix ...................... : /opt/dovecot File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : dnotify Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword (modules) Building with password lookup modules : passwd passwd-file shadow pam checkpassword (modules) Building with SQL drivers ............: . if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/kerberos/include -MT mempool.o -MD -MP -MF ".deps/mempool.Tpo" -c -o mempool.o mempool.c; \ then mv -f ".deps/mempool.Tpo" ".deps/mempool.Po"; else rm -f ".deps/mempool.Tpo"; exit 1; fi if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/kerberos/include -MT mempool-alloconly.o -MD -MP -MF ".deps/mempool-alloconly.Tpo" -c -o mempool-alloconly.o mempool-alloconly.c; \ then mv -f ".deps/mempool-alloconly.Tpo" ".deps/mempool-alloconly.Po"; else rm -f ".deps/mempool-alloconly.Tpo"; exit 1; fi mempool-alloconly.c: In function `check_nuls': mempool-alloconly.c:85: too many arguments to function `check_nuls' make[3]: *** [mempool-alloconly.o] Error 1 make[3]: Leaving directory `/usr/src/dovecot-1.0.beta8/src/lib' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/src/dovecot-1.0.beta8/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/usr/src/dovecot-1.0.beta8' make: *** [all] Error 2

2 3

[Dovecot] SASL bind for LDAP
by Geert Jansen 13 May '06

13 May '06

Hi, would it be possible to add support for SASL binds to dovecot's LDAP userdb/passdb? This would be a nice feature as it would allow the use of SASL EXTERNAL binds to a local LDAP server, thereby removing the need for storing clear-text passwords in configuration files. Regards, Geert

2 4

[Dovecot] Freebsd 6.1 dovecot beta7: nss_dns.so1 not found
by pitun 13 May '06

13 May '06

Hello, FreeBSD 6.1 RELACE dovecot beta7 when enable: mail_plugins = quota imap_quota i've got: May 13 07:37:13 ranos dovecot: IMAP(pitun): module /usr/local/lib/dovecot/imap/lib01_quota_plugin.so: dlsym(quota_plugin_init) failed: Shared object "nss_dns.so.1" not found, required by "imap" May 13 07:37:13 ranos dovecot: child 9942 (imap) returned error 89 any help? -- PJ ---------------------------------------------------------------------- Poznaj Stefana! Zmien komunikator! >>> http://link.interia.pl/f1924

1 0

[Dovecot] LDA Sieve feature request
by Luca Corti 13 May '06

13 May '06

Hello, In http://wiki.dovecot.org/LDA I read # If there is no user-specific Sieve-script, global Sieve script is # executed if set. #global_script_path = so you can set global_script_path and override it using a per user script. It would be nice if the per user scripts could be optionally run after (or before maybe?) the global script. Another nice thing would be per-virtualdomain sieve scripts, but I think this is much more difficult. What do you think? -- Luca Corti PGP Key ID 1F38C091 BOFH excuse of the moment: The Borg tried to assimilate your system. Resistance is futile.

7 12

[Dovecot] pam_authenticate() failed:
by Sutton, Geoff 12 May '06

12 May '06

I'm having the same problem.... Did anyone find a solution? -- Geoff

1 0

[Dovecot] 1.0.beta8 released
by Timo Sirainen 12 May '06

12 May '06

Next release will probably be called 1.0.rc1. People just don't seem to like the beta name in the version number. :) Also I think we're nearing the final v1.0. * Fixed a security hole with mbox: "1 LIST .. *" command could list all directories and files under the mbox root directory, so if your mails were stored in eg. /var/mail/%u/ directory, the command would list everything under /var/mail. + Unless nfs_check=no or mmap_disable=yes, check for the first login if the user's index directory exists in NFS mount. If so, refuse to run. This is done only on first login to avoid constant extra overhead. + If we have plugins set and imap_capability unset, figure out the IMAP capabilities automatically by running imap binary at startup. The generated capability list isn't updated until Dovecot is restarted completely, so if you add or remove IMAP plugins you should restart. If you have problems related to this, set imap_capabilities setting manually to work around it. + Added auth_username_format setting - pop3_lock_session setting wasn't really working - Lots of fixes related to quota handling. It's still not working perfectly though. - Lots of index handling fixes, especially with mmap_disable=yes - Maildir: saving mails could have sometimes caused "Append with UID n, but next_uid = m" errors - flock() locking never timeouted because ignoring SIGALRM caused the system call just to be restarted when SIGALRM occurred (probably not with all OSes though?) - kqueue: Fixed "Unrecognized event". Patch by Vaclav Haisman

2 1

[Dovecot] dovecot: pipe() failed: Too many open files
by Obantec Support 12 May '06

12 May '06

Hi stable 1.0 on FC3 , first time i have seen this. May 11 19:40:00 proteus2 dovecot: pipe() failed: Too many open files May 11 19:40:05 proteus2 last message repeated 41406 times had to stop and re-start dovecot to free the error. Any ideas what caused it? Mark -- Obantec Support www.obantec.net 0845 458 3121 WebHosting and Domains Nominet UK Member & IPStag Holder CentralNic Accredited Reseller

2 1

[Dovecot] userdb prefetch not working with dovecot LDA?
by Luca Corti 12 May '06

12 May '06

Hello, I've configured MySQL authentication as follows. -- divecot-sql.conf -- driver = mysql connect = host=localhost dbname=postfix user=myuser password=mypass default_pass_scheme = PLAIN password_query = SELECT password FROM mailbox WHERE username = '%u' user_query = SELECT CONCAT('/var/vmail/', maildir, 'Maildir') AS home, '1234' AS uid, '1234' AS gid FROM mailbox WHERE username = '%u' -- dovecot.conf -- passdb sql { args = /usr/local/etc/dovecot-sql.conf } userdb sql { args = /usr/local/etc/dovecot-sql.conf } And both access (IMAP) and delivery (LDA) work correctly. Now I want to setup prefetching to reduce SQL queries, so I did -- dovecot-sql.conf -- driver = mysql connect = host=localhost dbname=postfix user=myuser password=mypass default_pass_scheme = PLAIN password_query = SELECT password, CONCAT('/var/vmail/', maildir, 'Maildir') AS userdb_home, '1234' AS userdb_uid, '1234' AS userdb_gid FROM mailbox WHERE username = '%u' -- dovecot.conf -- passdb sql { args = /usr/local/etc/dovecot-sql.conf } userdb prefetch { } Dovecot mail access (IMAP) works correctly, but when the LDA tries to deliver mail I get: May 11 16:25:00 ns1 dovecot: auth(default): prefetch(luca(a)example.com): passdb didn't return userdb entries May 11 16:25:00 ns1 postfix/pipe[11040]: 21E31847BC: to=<luca(a)example.com>, relay=dovecot, delay=0, status=bounced (user unknown) thanks -- Luca Corti PGP Key ID 1F38C091 BOFH excuse of the moment: user to computer ration too low.

2 1

[Dovecot] dovecot-lda and sieve filtering (SMTP is Postfix)
by Der Olli 12 May '06

12 May '06

Hello list. I've got a working Dovecot with Postfix and MySQL-support but everything from the capabilities of sieve isn't working except one thing: Sorting emails to folders works fine. But no vacation, no reject, no redirect. I don't get any errors in the logs. Verbose logging is enabled. I compiled both from newest cvs-sources but also tried older combinations (nightly snapshots). Always the same result and there's no .dovecot.sieve.err so script is okay. If it is not, .dovecot.sieve.err will be generated. I've tested this :) Anyone here who has a working sieve implementation with dovecot-lda? Where do I have to search? Is it a configuration problem? Where can I configure which sending mechanism dovecot-lda should use? Is it a local sendmail binary? Where does dovecot-lda search for it. Is it a SMTP-server? So there's one on port 25 at the local machine. Greetz, Olli

2 2

[Dovecot] comment on dovecot documentation on PAM
by president＠irithm.com 12 May '06

12 May '06

Dear Dovecote devotees, I have been going through dovecot configuration for the first time. I am not an experienced systems administrator so I had to do a left turn to read up about PAM while doing all the configuration for my new webmail service. I found that the writing in the dovecot documentation about PAM to be rather misleading in at least one aspect. The documentation I am specifically referring to is at http://wiki.dovecot.org/Authentication?highlight=%28authentication%29 and in the comments found in the dovecot.conf file. In this documentation PAM is referred to as a password database. It appears that is not correct, rather PAM is something that uses a password database. Since the default for "auth_passdb" given in dovecot.conf was "pam" I spent sometime trying to find a pam password database. I eventually found out at an independent website that what pam uses is either /etc/passwd or /etc/shadow or /etc/samba/smbpasswd. It was a relief to find out pam uses one of these, since my system has one of them (/etc/shadow), but I was looking to find something quite different for pam since /etc/shadow is one of the listed alternative values for "auth_passdb". I would have been spared a somewhat lengthy search to find out this information if the documentation was written rather more clearly. So, to help others, I suggest changing the following lines in dovecot.conf # Where password database is kept: # passwd: /etc/passwd or similiar, using getpwnam() # shadow: /etc/shadow or similiar, using getspnam() # pam [<service> | *]: PAM authentication to: # Where password database is kept: # passwd: /etc/passwd or similiar, using getpwnam() # shadow: /etc/shadow or similiar, using getspnam() # pam [<service> | *]: /etc/shadow or similiar, using PAM authentication Updating the documentation in http://wiki.dovecot.org/Authentication?highlight=%28authentication%29 to include a phrase that mentions that PAM authentication works from one of the standard password databases (i.e. /etc/passwd, /etc/shadow or /etc/samba/smbpasswd) would also be helpful. yours sincerely, Rolf

3 2

[Dovecot] Pocket Outlook
by Josh Burley 11 May '06

11 May '06

Hi all, Another user posted the same thing a few months back... after contacting them, they said they never got it working. I'm unable to get Pocket Outlook, or FlexMail 2006 working on Dovecot 0.99.13. According to the logs it connects just fine. With Pocket Outlook I'll see the headers for a few seconds, and then it clears and shows nothing. With FlexMail, which is supposed to have fantastic IMAP support (and has tons of options), I just see an empty inbox. Any ideas?? .josh

2 4

Re: [Dovecot] LDA not being called by postfix?
by Andreas Martin 11 May '06

11 May '06

Hi Luca. Luca Corti schrieb: > On Thu, 2006-05-11 at 15:16 +0200, Andreas Martin wrote: >>> and in the db: >>> >>> +----+-------------+-------------+---------+-----------+----------+-----------+----------+---------------------+---------------------+--------+ >>> | id | domain | description | aliases | mailboxes | maxquota | >>> transport | backupmx | created | modified | >>> active | >>> +----+-------------+-------------+---------+-----------+----------+-----------+----------+---------------------+---------------------+--------+ >>> | 2 | example.com | example.com | 5 | 10 | 20 | >>> virtual | 0 | 2006-05-08 01:30:58 | 2006-05-08 11:42:55 | >> ^^^^^^^ >>> 1 | >>> +----+-------------+-------------+---------+-----------+----------+-----------+----------+---------------------+---------------------+--------+ >> This should be "dovecot" - corresponding to your master.cf: > >>> The transport gets correctly selected upon mail delivery: >> Nope... >> >>> May 11 13:09:47 ns1 postfix/virtual[9797]: 7C4D4847BC: >> ^^^^^^^ >>> to=<luca(a)example.com>, relay=virtual, delay=0, status=sent >> ^^^^^^^ >> >> This should be something like: >> >> May 11 13:09:47 ns1 postfix/pipe[9797]: 7C4D4847BC: >> ^^^^ >> to=<luca(a)example.com>, relay=dovecot, delay=0, status=sent >> ^^^^^^^ > > Now it works... I thought > > virtual_transport = dovecot > > handled this. What is it doing then? Maybe it would work if I didn't > specify the virtual_transport_maps? virtual_transport is the general transport for virtual mailboxes. virtual_transport_maps overrides this to allow you to specify exceptions. Have fun! Andreas

2 1

[Dovecot] mandatory client certificates and crl check in ssl-proxy-openssl.c
by HenkJan Wolthuis 11 May '06

11 May '06

hello, I made a modification to ssl-proxy-openssl.c (patch attached) zo that it a) disconnects when no client certificate is presented b) checks the client certificate against the crl for our root cert. (so you can't use a revoked client cert.) c) returns the CommonName from the client cert. in ssl_proxy_get_peer_name (this way it's easier to use dovecot as imap-proxy with a passwd-like userdb, ssl_require_client_cert and ssl_username_from_cert, it "binds" the emailuser to the clientcertificate, a clientcert. can access only the account from the userdb) in order to use it, the CAfile must be a file which contains the CAcertificate (pem format) followed by the CRL (also in pem format). (servercert and the clientcerts are signed with a self-signed rootcert) there are some issues with the patch: a) it needs openssl > 0.9.7 for the CRL checking b) ssl_verify_client_cert now returns 0 in case of an invalid cert. was there a reason why it always returned 1? c) i'm not too happy with the commonname extraction code, is it secure?? d) i've no experience with programming openssl or dovecot e) i haven't programmed in C for at least 8 years...... does anyone here have more issues, corrections, comments on the patch? can/should this functionality be implemented in dovecot? (conf-file option?) -- groeten, HenkJan Wolthuis --- ssl-proxy-openssl.c.orig 2006-04-04 10:32:58.000000000 +0200 +++ ssl-proxy-openssl.c 2006-05-11 14:08:02.000000000 +0200 @@ -11,6 +11,7 @@ #include <fcntl.h> #include <unistd.h> #include <sys/stat.h> +#include <string.h> #ifdef HAVE_OPENSSL @@ -508,9 +509,42 @@ if (x509 == NULL) return NULL; /* we should have had it.. */ + + // ORIG: X509_NAME_oneline(X509_get_subject_name(x509), buf, sizeof(buf)); + // ORIG: name = t_strndup(buf, sizeof(buf)); + // ORIG: X509_free(x509); + + /* HJHJ get CommonName from peer-certificate */ X509_NAME_oneline(X509_get_subject_name(x509), buf, sizeof(buf)); - name = t_strndup(buf, sizeof(buf)); + + char *tmp; + char *start; + start = buf; + tmp = strstr( buf, "CN=" ); + if( NULL != tmp ) + { + if( strlen(tmp) > 3 ) /* CN= + something */ + { + start = tmp + 3; + tmp = strstr( start, "/" ); + if( NULL != tmp ) /* tmp == NULL: CN is last element in buf */ + { *tmp = '\0'; } + } + else /* empty CN= */ + { + *start = '\0'; + i_warning("get_peer_name empty CN="); + } + } + else + { + *start = '\0'; + i_warning("get_peer_name NO CN="); + } /* CN= not found (no certificate or certificate without commonname??) */ + + name = t_strndup(start, strlen(start) ); X509_free(x509); + /* HJHJ */ return *name == '\0' ? NULL : name; } @@ -582,10 +616,26 @@ proxy = SSL_get_ex_data(ssl, extdata_index); proxy->cert_received = TRUE; + // ORIG: if (!preverify_ok) + // ORIG: proxy->cert_broken = TRUE; + + // ORIG: return 1; + + /* HJHJ */ + char buf[1024]; + X509_NAME_oneline( X509_get_subject_name(ctx->current_cert),buf,sizeof(buf)); + if (!preverify_ok) + { proxy->cert_broken = TRUE; + i_warning("BAD CERT %s: %s",X509_verify_cert_error_string(ctx->error),buf); + } + else + { i_warning("CERT: %s",buf); } - return 1; + return preverify_ok; + /* HJHJ */ + } static int @@ -666,10 +716,20 @@ if (getenv("SSL_VERIFY_CLIENT_CERT") != NULL) { SSL_CTX_set_verify(ssl_ctx, SSL_VERIFY_PEER | - SSL_VERIFY_CLIENT_ONCE, + SSL_VERIFY_FAIL_IF_NO_PEER_CERT, ssl_verify_client_cert); } + /* HJHJ */ +#if OPENSSL_VERSION_NUMBER >= 0x00907000L + X509_STORE *store; + if( (store=SSL_CTX_get_cert_store(ssl_ctx)) != NULL ) + { X509_STORE_set_flags( store, X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL); } + else + { i_warning("X509 get cert store failed..."); } +#endif + /* HJHJ */ + /* PRNG initialization might want to use /dev/urandom, make sure it does it before chrooting. We might not have enough entropy at the first try, so this function may fail. It's still been

1 0

[Dovecot] "QUOTA" CAPABILITY keyword advertised incorrectly?
by Mike Brudenell 11 May '06

11 May '06

Greetings - I'm having a frustrating time with mail clients not picking up Dovecot's QUOTA extension to IMAP. The problem is that the QUOTA keyword isn't advertised in Dovecot's response to a CAPABILITY enquiry until *after* the user has authenticated. Unfortunately I've yet to find a mail client that issues a CAPABILITY request after authenticating. Instead all do so upon initial connection to the IMAP server (and, correctly, again after subsequently initiating a STARTTLS session but before authentication). Not re-querying the CAPABILITY after authentication is correct according to the IMAP spec in RFC2060, which says: 6.1.1. CAPABILITY Command Arguments: none Responses: REQUIRED untagged response: CAPABILITY Result: OK - capability completed BAD - command unknown or arguments invalid The CAPABILITY command requests a listing of capabilities that the server supports. The server MUST send a single untagged CAPABILITY response with "IMAP4rev1" as one of the listed capabilities before the (tagged) OK response. This listing of capabilities is not dependent upon connection state or user. It is therefore not necessary to issue a CAPABILITY command more than once in a connection. In particular the last two sentences are relevant. (At present Dovecot is only advertising availability of the QUOTA extension *after* authentication, and hence *is* dependent on the user.) Ths means that at present Dovecot's provision of the QUOTA extension isn't actually getting used by popular mail clients such as Thunderbird. Cheers, Mike Brudenell -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

3 3

[Dovecot] LDA not being called by postfix?
by Luca Corti 11 May '06

11 May '06

Hello, I'm using Postfix with virtual domains (MySQL), Dovecot 1.0beta7 and CVS LDA. I've set up postfix to use the LDA for maildir delivery and defined a global sieve script. -- master.cf -- ... dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/local/libexec/dovecot/deliver -d ${recipient} ... -- main.cf -- smtpd_banner = $myhostname ESMTP append_dot_mydomain = no relayhost = mailbox_size_limit = 0 recipient_delimiter = + inet_interfaces = all program_directory = /usr/lib/postfix command_directory = /usr/sbin daemon_directory = /usr/lib/postfix mail_owner = postfix soft_bounce = yes message_size_limit = 15728640 biff = no myhostname = mail.example.com mydomain = example.com myorigin = /etc/mailname mynetworks = 127.0.0.0/8 1.2.3.8/29 192.168.0.0/24 mydestination = $myhostname localhost localhost.localdomain alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases local_recipient_maps = proxy:unix:passwd.byname $alias_maps local_transport = local virtual_mailbox_base = /var/vmail virtual_mailbox_domains = proxy:mysql:/etc/postfix/maps/mysql_virtual_domains_maps.cf virtual_mailbox_maps = mysql:/etc/postfix/maps/mysql_virtual_mailbox_maps.cf virtual_alias_maps = proxy:mysql:/etc/postfix/maps/mysql_virtual_alias_maps.cf proxy:mysql:/etc/postfix/maps/mysql_virtual_mailbox_maps.cf virtual_uid_maps = static:1234 virtual_gid_maps = static:1234 virtual_minimum_uid = 1001 dovecot_destination_recipient_limit = 1 virtual_transport = dovecot relay_domains = proxy:mysql:/etc/postfix/maps/mysql_relay_domains_maps.cf relay_transport = relay transport_maps = proxy:mysql:/etc/postfix/maps/mysql_transport_maps.cf relocated_maps = proxy:mysql:/etc/postfix/maps/mysql_virtual_relocated_maps.cf smtpd_helo_required = yes disable_vrfy_command = yes strict_rfc821_envelopes = yes smtpd_recipient_restrictions = reject_unknown_sender_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_rbl_client sbl.spamhaus.org, reject_rbl_client cbl.abuseat.org, reject_rbl_client dul.dnsbl.sorbs.net smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes smtpd_use_tls = yes smtpd_tls_cert_file = /etc/postfix/smtpd.cert smtpd_tls_key_file = /etc/postfix/smtpd.key content_filter = smtp-amavis:[127.0.0.1]:10024 -- dovecot.conf -- protocols = imap imaps pop3 pop3s ssl_cert_file = /etc/postfix/smtpd.cert ssl_key_file = /etc/postfix/smtpd.key disable_plaintext_auth = no syslog_facility = mail login_greeting = Server ready. default_mail_env = maildir:/var/vmail/%d/%n/Maildir protocol lda { module_dir = /usr/local/lib/dovecot/lda postmaster_address = postmaster(a)example.com global_script_path = /var/vmail/sieve.script auth_socket_path = /var/run/dovecot-auth-master } protocol imap { login_executable = /usr/local/libexec/dovecot/imap-login mail_executable = /usr/local/libexec/dovecot/imap login_greeting_capability = yes imap_client_workarounds = outlook-idle delay-newmail } protocol pop3 { login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_uidl_format = %08Xu%08Xv pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } auth_executable = /usr/local/libexec/dovecot/dovecot-auth auth_default_realm = example.com auth default { mechanisms = plain digest-md5 cram-md5 socket listen { master { path = /var/run/dovecot-auth-master mode = 0660 user = vmail group = vmail } } passdb sql { args = /usr/local/etc/dovecot-sql.conf } userdb static { args = uid=1234 gid=1234 home=/var/vmail/%d/%n/Maildir } } -- sieve.script -- require [ "fileinto" ]; if headers :contains "To" "luca(a)example.com" { fileinto "Spam"; } In my postfix logs I get May 11 00:59:50 ns1 postfix/virtual[9675]: 5E114847BC: to=<luca(a)example.com>, relay=virtual, delay=0, status=sent (delivered to maildir) and the message is there but no filtering is done and the sieve script is not compiled. -- Luca Corti PGP Key ID 1F38C091 Adesso dico: "Amore."

3 11

[Dovecot] Fix for the kevent "Unrecognized event" problem.
by Václav Haisman 11 May '06

11 May '06

The attached patch should fix the problem with dying imap on "Unrecognized event". The problem is that when we register a handle for IO_ERROR only, we still can get readable/writable event without EV_EOF being set. This case was not handled. -- Vaclav Haisman *** ioloop-kqueue.c.~1.4.~ Tue May 2 14:36:56 2006 --- ioloop-kqueue.c Tue May 9 21:29:33 2006 *************** *** 74,80 **** { struct ioloop_handler_context *ctx = ioloop->handler_context; const int fd = io->fd; ! struct kevent ev = { fd, 0, EV_ADD | EV_EOF, 0, 0, NULL }; enum io_condition condition = io->condition & MASK; i_assert(io->callback != NULL); --- 74,80 ---- { struct ioloop_handler_context *ctx = ioloop->handler_context; const int fd = io->fd; ! struct kevent ev = { fd, 0, EV_ADD, 0, 0, NULL }; enum io_condition condition = io->condition & MASK; i_assert(io->callback != NULL); *************** *** 184,190 **** i_assert(ctx->evbuf[i].ident < ctx->fds_size); if ((ctx->fds[ctx->evbuf[i].ident].mode & IO_ERROR) && ! (ctx->evbuf[i].flags & EV_EOF)) { struct io *errio = ctx->fds[ctx->evbuf[i].ident].errio; t_id = t_push(); --- 184,190 ---- i_assert(ctx->evbuf[i].ident < ctx->fds_size); if ((ctx->fds[ctx->evbuf[i].ident].mode & IO_ERROR) && ! (ctx->evbuf[i].flags & (EV_EOF | EV_ERROR))) { struct io *errio = ctx->fds[ctx->evbuf[i].ident].errio; t_id = t_push(); *************** *** 203,216 **** " in I/O handler %p", (void *)io->callback); } } else i_panic("Unrecognized event: kevent {.ident = %u," " .filter = 0x%04x," " .flags = 0x%04x," " .fflags = 0x%08x," ! " .data = 0x%08x}", ctx->evbuf[i].ident, ctx->evbuf[i].filter, ctx->evbuf[i].flags, ! ctx->evbuf[i].fflags, ctx->evbuf[i].data); } } --- 203,224 ---- " in I/O handler %p", (void *)io->callback); } + } else if (ctx->fds[ctx->evbuf[i].ident].mode & IO_ERROR) { + /* + NO-OP. If the handle is registered only for + IO_ERROR, then we can get readable/writable event + but no IO_READ | IO_WRITE set. + */ } else i_panic("Unrecognized event: kevent {.ident = %u," " .filter = 0x%04x," " .flags = 0x%04x," " .fflags = 0x%08x," ! " .data = 0x%08x}\n" ! "mode: 0x%x04x", ctx->evbuf[i].ident, ctx->evbuf[i].filter, ctx->evbuf[i].flags, ! ctx->evbuf[i].fflags, ctx->evbuf[i].data, ! ctx->fds[ctx->evbuf[i].ident].mode); } }

3 6

[Dovecot] IMAP threading - the THREAD command
by Jan Kundrát 11 May '06

11 May '06

Hi folks, there's an extension [1] to IMAP specifying the THREAD command to return list of message sequence numbers grouped to indicate the threading of them. That draft currently defines two algorithms, one of them based solely on Subjects (which is rather dumb) and the second one, combining Subjects with In-Reply-To (etc) headers. The second method is actually advertised and supported by Dovecot. However, I've got quite a lot of friends that lack the knowledge of what the "Subject" field is for, so they just leave it empty. The problem comes when I want Dovecot to return the threads - it follows the ietf draft, so it doesn't check only for references from message headers, but also the subjects. The result is that especially those mails with empty subjects are incorrectly grouped together. So, I'd like to see a feature that would eliminate this problem. It seems to me that there are currently two methods: a) Don't look at the Subject field at all - altough it might increase the speead a bit, it has some disadvantages as well, namely that you'll lose threading if someone uses broken mail client (but broken only in such a way that it preserves subjects) b) Ignore the Subject field if it is empty (after stripping stuff like "re:" etc - just as that draft specifies). Seems reasonable, IMHO. Of course we can't modify the result of a THREAD command (that would break the standard and it generally isn't a proper way to go), so we'd have to introduce another one. I'm pretty sure that especially method a) is very simple (and even simpler if I decided to break the standard by "fixing" the THREAD command), but I really don't like <rant>portable assembler :)</rant> <politely>C</politely>, so are there any chances for this "new and fixed" command to be included into Dovecot? I mean, I might do that in a flawed and ugly way just for me and post a patch so that possible interested persons can pick it, or I migth persuade someone to do it, actually :). Do you think that it's worth the issue? Does anyone have any experiences with talking to the IETF about possible extension of their draft? Ideas? [1] http://www.ietf.org/internet-drafts/draft-ietf-imapext-sort-17.txt Cheers, -jkt -- cd /local/pub && more beer > /dev/mouth

3 4

[Dovecot] Large folders and timeouts
by Fran Fabrizio 11 May '06

11 May '06

I have been having persistent issues with server timeouts on operations on large folders on our Dovecot install (1.0beta2 RPM that came with Fedora Core 5). Some observations from today... I have a Maildir folder with 38,000 messages (it is my Spam folder, naturally :-). In Thunderbird 1.5.0.2, if I click on that folder, it slowly but steadily downloads the headers and after 3-4 minutes, shows me the contents. So far, so good. If I then select all the messages and click Delete to delete them, that operation times out after about 1 minute. If I then click on my Trash folder after some number of minutes has passed, I see that those messages are now both in my Trash and in the original folder - I believe this is because Thunderbird first asks for a COPY over to Trash, and then asks for a STORE +FLAG \\Deleted on the copy that is still in the original folder. It appears that the COPY commands are working but the STORE commands are not since the connection is timing out before they run. I thought I'd try on another mail client, so I tried Squirrelmail. I set it to show 1000 messages per page. It does this just fine. Then I set it to 4,000 messages per page. Then I click on a folder with 12,000 messages, and I get this: ERROR: Connection dropped by IMAP server. Query: SORT (ARRIVAL) ISO-8859-1 ALL My questions are 1. what is the likely cause? and 2. will upgrading to a newer beta address any of this? I'd prefer to wait until FC5 has an updated RPM if possible. Our mail is stored on an NFS store. (I know NFS is slow and that this might be part of the cause.) However, it seems that the timeouts I am having are more related to times when there is no data flowing between the server and client. Note that the timeouts happened when the server was doing a COPY and when the server was doing a SORT but not when the client was downloading 38,000 headers. I'm just at a loss for what to look into next. I don't want to just say "NFS is slow" and live with it if this really has some other cause. :-) So, anyone have any thoughts as to other possible causes? Thunderbird has no option for setting the length of timeout from the client side, so there's nothing I can do from that end. Thanks, Fran -- Fran Fabrizio Senior Systems Analyst Department of Computer and Information Sciences University of Alabama at Birmingham http://www.cis.uab.edu/ 205.934.0653

4 4

[Dovecot] dovecot 1.0beta7 dying on me
by Dave Alden 11 May '06

11 May '06

Hi, Dovecot 1.0 beta7 is dying on me. My logfile shows: May 10 15:54:28 hermes dovecot: IMAP(alden): UIDs broken with partial sync in mbox file /var/mail/alden May 10 15:54:28 hermes dovecot: IMAP(alden): file mbox-sync-rewrite.c: line 106 (mbox_sync_headers_add_space): assertion failed: (start_pos < data_size) May 10 15:54:28 hermes dovecot: child 14185 (imap) killed with signal 6 I'm running this on a RHEL 3U7 system. I created a core file, but it doesn't look like it's too helpful (I've attached the gdb output to this message). I tried recompiling with "--enable-debug", but I got: /usr/lib/mysql/libmysqlclient.a(sha1.o)(.text+0x60): In function `sha1_result': : multiple definition of `sha1_result' ../lib/liblib.a(sha1.o)(.text+0x7f4):/scratch/dovecot-1.0.beta7/src/lib/sha1.c:233: first defined here /usr/bin/ld: Warning: size of symbol `sha1_result' changed from 158 in ../lib/liblib.a(sha1.o) to 126 in ../lib/liblib.a(sha1.o) collect2: ld returned 1 exit status Help? ...dave -- Dave Alden The Ohio State University Department of Mathematics

3 3

[Dovecot] Sieve-Editor
by Andreas Martin 11 May '06

11 May '06

Hi all. I'm looking for an editor for sieve-scripts. I tried the Squirrelmail plugin "avelsieve", but it requires "timsieved", wich Dovecot doesn't use. I don't want my users to write sieve-scripts on the console and server-side-filtering is absolutely required. I know that there are some frontends available, but I can't figure out, which one really works with libsieve and is usable for non-geeks... Do you have any suggestions? Thanks, Andreas

4 5

[Dovecot] pop3 problem with small messages with no Subject: and no To: headers
by Ken A 11 May '06

11 May '06

Hello, Seeing a strange thing with dovecot 1.0 b7 pop3. If a user gets a particular _very_ short spam message (not sure what virus makes these..), with NO Subject and NO To: headers and NO body, (example available upon request), the user is unable to download the mail. The log entry is: May 10 10:51:35 mail dovecot: POP3(user): Disconnected top=0/0, retr=1/1344, del=0/75, size=16383381 There's no QUIT, so no "Logged out" disconnect reason. I did a tcpdump to see what was happening. I have not been able to duplicate this myself yet, even with an exact copy of the message that seems to be causing it, so it could be a client issue, but I've never seen this before, and we just switched to Dovecot, so I thought I'd check with the list.. ideas? Message #9 is requested (it's the one in the user's box with missing headers). Dovecot begins returning it, but then disconnects, or so it seems. 10:51:35.171916 IP customer.60181 > mailserver.pop3: P 40:48(8) ack 1633 win 65535 0x0000: 4500 0030 d326 4000 7106 fc20 4624 16a1 E..0.&@.q...F$.. 0x0010: ceaa 0f11 eb15 006e 7ee7 2a93 d845 fe0c .......n~.*..E.. 0x0020: 5018 ffff 3618 0000 5245 5452 2039 0d0a P...6...RETR.9.. 10:51:35.172177 IP mailserver.pop3 > customer.60181: P 1633:2980(1347) ack 48 win 5840 0x0000: 4500 056b ca0b 4000 4006 3101 ceaa 0f11 E..k..@.@.1..... 0x0010: 4624 16a1 006e eb15 d845 fe0c 7ee7 2a9b F$...n...E..~.*. 0x0020: 5018 16d0 3fde 0000 2b4f 4b20 3133 3237 P...?...+OK.1327 0x0030: 206f 6374 6574 730d 0a52 6574 7572 6e2d .octets..Return- 0x0040: 5061 7468 3a20 3c68 7469 3935 6b67 6576 Path:.<hti95kgev 0x0050: 4072 @r 10:51:35.416549 IP mailserver.pop3 > customer.60181: P 1633:2980(1347) ack 48 win 5840 0x0000: 4500 056b ca0d 4000 4006 30ff ceaa 0f11 E..k..@.@.0..... 0x0010: 4624 16a1 006e eb15 d845 fe0c 7ee7 2a9b F$...n...E..~.*. 0x0020: 5018 16d0 3fde 0000 2b4f 4b20 3133 3237 P...?...+OK.1327 0x0030: 206f 6374 6574 730d 0a52 6574 7572 6e2d .octets..Return- 0x0040: 5061 7468 3a20 3c68 7469 3935 6b67 6576 Path:.<hti95kgev 0x0050: 4072 @r 10:51:35.470688 IP customer.60181 > mailserver.pop3: F 48:48(0) ack 2980 win 64188 0x0000: 4500 0028 d329 4000 7106 fc25 4624 16a1 E..(.)@.q..%F$.. 0x0010: ceaa 0f11 eb15 006e 7ee7 2a9b d846 034f .......n~.*..F.O 0x0020: 5011 fabc 09fa 0000 0000 0000 0000 P............. 10:51:35.470997 IP mailserver.pop3 > customer.60181: F 2980:2980(0) ack 49 win 5840 0x0000: 4500 0028 ca0f 4000 4006 3640 ceaa 0f11 E..(..@.@.6@.... 0x0010: 4624 16a1 006e eb15 d846 034f 7ee7 2a9c F$...n...F.O~.*. 0x0020: 5011 16d0 ede5 0000 P....... 10:51:35.515279 IP customer.60181 > mailserver.pop3: . ack 2981 win 64188 0x0000: 4500 0028 d32e 4000 7106 fc20 4624 16a1 E..(..@.q...F$.. 0x0010: ceaa 0f11 eb15 006e 7ee7 2a9c d846 0350 .......n~.*..F.P 0x0020: 5010 fabc 09f9 0000 0000 0000 0000 P............. That's all, the connection is closed. Ken A Pacific.Net

1 1

[Dovecot] Recommended FS for Dovecot Maildir
by Daniel Watts 10 May '06

10 May '06

Hi, I've heard that for Dovecot/Mailir systems there are filesystems that are optimised for the situation of many small files in one folder. Could I possibly have some feedback on what the recommended filesystems are? I've heard of ReiserFS but was wondering what other options there are and how they compare. If I get a good comprehensive response I'll build a wiki summary page out of the data gathered. Best wishes, Daniel

17 28

[Dovecot] Re: Recommended FS for Dovecot Maildir
by Roger Weeks 10 May '06

10 May '06

> Date: Wed, 10 May 2006 00:24:23 +0100 > From: Daniel Watts <d(a)nielwatts.com> > Subject: Re: [Dovecot] Recommended FS for Dovecot Maildir > To: Les Mikesell <lesmikesell(a)gmail.com> > > Can you remember any general findings? > > Thanks to all for responding in this thread - I am reading them all > and > making notes. All very useful information. > > Can I phrase the question in a different way? Of those of you who are > running 10,000+ user system - what FS do you use? > Or do you all use special file servers (netapps, emc etc?) with > proprietary filesystems? > > Daniel We're probably right at your 10000 user threshold, but we're an ISP so we get a LOT of mail traffic. Our mail system consists of dual exim servers processing incoming mail, writing to maildirs on a home- built NFS system. The home-built system is a dual-xeon machine with lots of SATA disks in a RAID5. We then have two client-facing machines running dovecot and squirrelmail. These are all SuperMicro servers running RedHat ES 4. They all use SATA disks. We are using EXT3 for the RAID5 filesystem, and I have had no performance issues to speak of. I had considered Reiser or xfs, but as I have limited experience with either filesystem I didn't feel comfortable using them in production. -- Roger J. Weeks Systems & Network Administrator Mendocino Community Network

1 0

[Dovecot] Debugging with strace
by Fran Fabrizio 10 May '06

10 May '06

We have a dovecot install that is working fine for everyone except one user, who complains that it takes a minute or longer to delete a single message from the INBOX to Trash. This is happening for him from multiple IMAP clients so it appears to be server-side. I wanted to start up a test instance of dovecot alongside the production one and test there. So I copied dovecot.conf, put imap on port 10143, and started up the test server like this: # strace -tt dovecot -F -c /etc/dovecottest.conf (I could not find the docs for -F but without it dovecot would quickly detatch into a daemon and I could no longer strace it... so is -F for putting dovecot in the foreground like I think? :-) I noticed two things when I did this: 1. My screen just scrolled continuously with poll calls - does dovecot poll something every second even when it has no clients connected? 2. It appeared to interfere with the production install running alongside of it - as I could no longer authenticate to it or copy messages to my Sent folder when I sent something out through the production dovecot. I had to restart the production instance to get it to behave. So my questions are whether all that polling output is normal and also, is my testing method really interfering with the production server, and if so, how to avoid that? Thanks, Fran -- Fran Fabrizio Senior Systems Analyst Department of Computer and Information Sciences University of Alabama at Birmingham http://www.cis.uab.edu/ 205.934.0653

2 2

[Dovecot] moving from postfix+dovecot to postfix+dovecot+postfixadmin+mysql
by albi 10 May '06

10 May '06

hi, i know this is not really a dovecot-question, but (after searching for hours and hours) here goes : last week i've tested a setup with postfixadmin and dovecot, and i'm very happy with the result! it's running on a FreeBSD-server but i've used this howto (which describes the setup for debian) : http://bliki.rimuhosting.com/space/knowledgebase/linux/mail/postfixadmin+on… big question is : how can i convert the already existing passwords from the mail-users to the mysql-based auth in postfixadmin/dovecot ------------------------------------------ thanks for having dovecot available, it's great to work with ! :) -- grtjs, albi gpg-key: lynx -dump http://scii.nl/~albi/gpg.asc | gpg --import

1 0

[Dovecot] managesieve daemon
by Gerald Dachs 10 May '06

10 May '06

Hi, I am currently working on a managesieve daemon, so that I can use the squirrelmail plugin avelsieve together with dovecot-lda. Without this I can't migrate from cyrus to dovecot. For several reasons I don't use the timsieved from cyrus and build it from scratch. Is this interesting for somebody else? Gerald

9 11

[Dovecot] Imap folders missing after updating
by Fred Harris 10 May '06

10 May '06

I just updated from 0.99.14 to 1.0beta2 on FC5 and my my IMAP folders have mainly disappeared in my Thunderbird client. All that's left is Inbox and Trash. Is there some configuration setting that's now necessary to make the server think an account uses IMAP folders? The way it seemed to work before was that the presense of a Maildir directory in a user's home indicated IMAP. The new server seems to read the Maildir directory but it doesn't recognize all the folders. Thanks. --------------------------------- Talk is cheap. Use Yahoo! Messenger to make PC-to-Phone calls. Great rates starting at 1¢/min.

14 39

[Dovecot] SIEVE: Any information at all?
by Leah Cunningham 09 May '06

09 May '06

Hi, I am quickly losing the will to live over the lack of any kind of information at all about the SIEVE support that is listed in the dovecot features list. Does anyone have any information at all? I've grepped through the source, looked through all the configuration files, and googled a fair bit and come up with nothing at all. How would a user with maildir enable a sieve script? Does it run on port 2000? How can I test functionality? Thanks, Leah

5 7

[Dovecot] auth: pam_setcred() failed: Error in service module
by Martin Stockinger 09 May '06

09 May '06

Hi, I have a strange problem with authentication. Some users can successfully authenticate and some users can not authenticate. All users use the same client (thunderbird-1.5.0.2-win32-de). At the problematic users i get the following error message: ============ snip =================== auth(default): client in: AUTH 8 PLAIN service=IMAP secured lip=10.24.1.6 rip=10.211.11.1 auth(default): client out: CONT 8 auth(default): client in: CONT<hidden> auth(default): pam(pgerlesb,10.211.11.1): pam_setcred() failed: Error in service module auth(default): client out: FAIL 8 user=pgerlesb auth(default): client in: AUTH 9 PLAIN service=IMAP secured lip=10.24.1.6 rip=10.211.11.1 resp=<hidden> auth(default): pam(pgerlesb,10.211.11.1): pam_setcred() failed: Error in service module auth(default): client out: FAIL 9 user=pgerlesb imap-login: Aborted login: user=<pgerlesb>, method=PLAIN, rip=10.211.11.1, lip=10.24.1.6, TLS ============ snap =================== The username and password is right. I can "su - <username>" at the dovecot host with the same password. Some other users can authenticate without any problems. I have set in dovecot.conf: auth default { mechanisms = plain passdb pam { args = "*" } userdb passwd { } } I have configured PAM to do the authentication against Kerberos5. The user data come from an LDAP directory. What could be the problem? Thanks Martin Stockinger

1 0

[Dovecot] Encrypted IMAP only from Internet, unencrypted POP3 from internal network
by Rainer Frey 09 May '06

09 May '06

Hi, we have following situation: I migrated our company mailserver from POP3 only to dovecot with IMAP and POP. We need to have unencrypted POP3 from our internal network, and the subnet our mailserver is in. Additionally, we now want to allow encrypted IMAP from the internet (for some defined accounts), preferably with TLS (which means I open Port 143 in our firewall). Now, how can I achieve that they can't use unencrypted plaintext authentication from Internet, while I allow unencrypted POP3 from the mailserver and private network? (I can require using encryption for IMAP from our internal net, but I must have unencrypted POP3 as we use software that retrieves mail via POP3 that doesn't support encryption). My idea was: - use disable_plaintext_auth for IMAP only - use disable_plaintext_auth for internet, but not our networks - allow connection from the internet only for certain accounts, and limit them to use encryption Internet access for POP3 is not necessary. Is any of this possible with dovecot? Or another way to achieve my goal? Non-plaintext authentication is not possible, as we use linux system accounts with shadow passwords. TIA Rainer Frey -- Software Development ------------------------------------------------------ Inxmail GmbH

8 11

Re: [Dovecot] Imap folders missing after updating
by Mark E. Mallett 09 May '06

09 May '06

> LOL, there are only about a billion web pages that are "2 clicks" from > the front page of any site. True if you are just wandering around willy-nilly. It's not like it's tacked up on a pole on Alpha Centauri. I was opining that "Documentation" -> "Upgrading" is pretty easy to find, and not at all in line with "undocumented configuration changes." Come to think of it, it's only one click away from where the README tells you to look. But you do have to look, and care to look. Me, I was grateful that it was there; it didn't have to be. > This is why people still stay in the MS heard. Any number of problems > like this would cost most companies thousands of dollars to resolve. > It's much cheaper just to pay a company like MS who take upgrade > transitions seriously. Not gonna touch that. And true transition starts from within :) People won't bite too hard if you ask, either. Nip, maybe. mm (who obviously should be working)

1 0

[Dovecot] ssl-build-param
by Jackie Hunt 08 May '06

08 May '06

Hi all, I'm trying to get dovecot up and running on an AIX 5.2 system with openssl 0.9.8a. Everything compiles fine, but when I start dovecot I find in the log: dovecot: May 08 13:39:14 Info: Dovecot v1.0.beta7 starting up dovecot: May 08 13:39:14 Info: Generating Diffie-Hellman parameters for the first time. This may take a while.. dovecot: May 08 13:39:14 Error: ssl-build-param: Trying to allocate 0 bytes dovecot: May 08 13:39:14 Error: child 18998 (ssl-build-param) killed with signal 6 I searched the archives of the mailing list and didn't have any luck. Any help would be created appreciated. Please reply directly to me as well as the list. Thanks much! Jackie --- Jackie Hunt ACNS Voice: (970) 663-3789 Colorado State University FAX: (970) 491-1958 Fort Collins, CO 80523 Email: jackie.hunt(a)colostate.edu

1 0