January 2005 - dovecot

[Dovecot] dovecot-auth zombie procs
by jpollara＠lawnchair.net 12 Jan '05

12 Jan '05

Hi, every now and then it seems as if dovecot-auth zombie's out. When this happens nobody can log in. If I kill all the dovecot-auth processes and then restart dovecot everything seems to work again. I'm authenticating against an openldap server on a debian sarge box so I wonder if this has anything to do with it. All my clients are using Outlook. Any help would be greatly appreciated. Thanks. Josh

2 5

[Dovecot] Re: maildir and /var/spool/mail
by C.Lee Taylor 12 Jan '05

12 Jan '05

Greetings ... > Not sure what to do next. Have imap working in that I can see messages > in inbox. When I create a folder it won't create one. Looking at maillog > shows that I don't have rights to folder /var/spool/mail/.sent or > whatever folder I am trying to create. I have procmailrc and > dovecot.conf point to /home/Maildir but for some reason something is > tied to /var/spool/mail. Of course I am running FC3 and sendmail. > Someone have any ideas as to what to try next? I'm not sure of the rest of the history with this, but my FC3 installation has [root@nasrec etc]# cat /etc/procmailrc PATH=/bin:/usr/bin:/usr/bin MAILDIR=$HOME/mail DEFAULT=$HOME/Maildir/ #VERBOSE=on #LOGFILE=/var/log/procmail [root@nasrec etc]# ll /etc/procmailrc -rw-r--r-- 1 root root 109 May 2 2004 procmailrc I do remember having to delete the old mail box of one of my installs, where I had started using dovecot before putting in my procmailrc file ... I stop dovecot, imap* and pop3* ... Removed all the wrong mailboxs both in user folder and in /var/spool/mail ... Ran mail -s Test user Type a message here < Press Control-D here > Message gets delieverd in maildir format, start dovecot and all seemed well. I hope this helps. Mailed Lee

1 0

[Dovecot] Howto host multiple domains
by Mesut Bayrak 11 Jan '05

11 Jan '05

i dont know howto host multiple domains with dovecot are there any way to make it ?

2 1

[Dovecot] can not connect to dovecot using ssl
by Jay Gustafson 11 Jan '05

11 Jan '05

I can connect using imap, but when I try using ssl (imaps) I get a can not connect to server error. I have in my dovecot.conf protocols = imaps imap imap_listen = * imaps_listen = * I DO get a connection when I telnet to port 993 of my server (both localhost and remote work). Any help much appreciated.. Jay

2 1

[Dovecot] Re: delivery agent in 1.0?
by Apostolos Papayanakis 11 Jan '05

11 Jan '05

On Thu, 23 Dec 2004 Geo Carncross wrote: > How about a dovecot-inject tool that writes a message to whatever is > considered the $LOCAL user? It wouldn't have to do much but write the > message (safely) and update indexes -- something dovecot already has to > do. I hope there will soon be a plain delivering tool for dovecot 1.x. I could use it right away as the delivering step with procmail, which would run it under recipient's uid and context (all recipients are real unix users in my case). Without a local delivery agent, dovecot will always seem slower than its rivals when opening INBOXes with new mails, especially large ones, because of index creation delays. A good LMTP implementation has its benefits, but many people have to do without it. -- Apostolis Papayanakis apap(a)ccf.auth.gr, 2310-998416 On Thu, 23 Dec 2004 dovecot-request(a)dovecot.org wrote: > Date: Thu, 23 Dec 2004 11:44:15 -0500 > From: Geo Carncross <geocar-dovecot(a)internetconnection.net> > Subject: Re: [Dovecot] delivery agent in 1.0? > To: Timo Sirainen <tss(a)iki.fi> > Cc: " Branko F. Gra?nar " <bfg(a)noviforum.si>, dovecot(a)dovecot.org > Message-ID: <1103820255.3898.126.camel(a)midget.intranet> > Content-Type: text/plain; charset=iso-8859-2 > > On Thu, 2004-12-23 at 17:52 +0200, Timo Sirainen wrote: > > On 23.12.2004, at 16:06, Branko F. Graθnar wrote: > > > > > Is there any plan to include delivery agent in 1.x? > > > > I'll need to implement one in next few months, so yes. > > > > Hmm. This brings to my mind again that it would need Sieve, and mvmf > > might be a good base for it, but it's still not open source (Mark? :) > > It may be difficult to please everyone. I could have use for [some > elements of] a dovecot-lda but zero use for sieve... > > > > > I would be very happy, if there would be lmtp delivery agent included > > > with dovecot 1.x... This would make creating large mailsystem cluster > > > creation very simple + indexes would be always up2date. > > > > I'm not sure when I'll get around to implementing LMTP server. It's > > actually a bit annoying to implement because it needs to be able to > > deliver mail into multiple accounts, and if each one stores mails with > > different UID, it needs to either run as root (bad) or launch multiple > > processes and do IPC with them. > > How about a dovecot-inject tool that writes a message to whatever is > considered the $LOCAL user? It wouldn't have to do much but write the > message (safely) and update indexes -- something dovecot already has to > do. > > That way: > > * People who do delivery without LMTP baggage aren't treated as second- > class citizens. > > * Sieve implementations merely have to treat "keep" and "fileinto" as > subprocesses. > > * LMTP implementations can do the work they've already have to do > (regarding mapping email addresses to local users) and simply hook into > the sieve processor or the dovecot-inject, or anything else the > administrator/user likes. > > Formally, dovecot-inject would need the following information: > > 1. the envelope recipient ($RECIPIENT) > 2. the envelope sender/return-path/errors-to-address ($SENDER) > 3. the IMAP folder to write the message to (argv[1]) > > On systems with shared-uids, dovecot-inject would also need the concept > of the "localpart" of the address thats applicable. dovecot already > needs to know this in order to ACCESS the maildrop. ($LOCAL) > > This would keep things very easy to integrate without resorting to > shared libraries, "plugin system" nonsense, or forcing people to make > extra levels of indirection (lmtpclient) in order to benefit from pre- > login indexing... > > > > I suppose I'd implement it so that the actual LMTP talking would be > > done in a process very similar to imap/pop3-login processes, ie. > > completely unprivileged. Then it would tell master process to launch > > delivery agent processes to specific users, and those delivery agents > > then would get the mail from lmtp process via .. um. read-only shared > > memory + semaphores might be better than just copying the data over > > pipes/sockets? > > blah blah blah... > >

2 2

[Dovecot] 1.0-test60
by Timo Sirainen 11 Jan '05

11 Jan '05

http://dovecot.org/test/ I've been running this for two hours now without problems. I guess it's pretty stable. - Keyword support finally included. Not too well tested, but I couldn't get it to break. Doesn't store the keywords into maildir/mbox yet. Hopefully soon. - Major reorganization of code in dovecot-auth, and not yet finished. Load balancing between multiple auth procsses (ie. auth_count > 1) was before done by connecting to each one's socket separately. Now there's a single socket which a balancer process listens to and distributes the requests to worker processes. What's left to do is make a single auth process support handling multiple auth sections in config file. This makes it possible to: - have ordering-sensitive fallbacking for multiple passdbs - have fallbacking work with non-plaintext authentication - allow for all kinds of new great features more easily. For example we could add PAM-like "required" vs. "sufficient" selection for auth sections, or some rules when each passdb is used (eg. based on username, domain or IP range). After that it should also be easy to run dovecot-auth standalone because it would read its own config file. I'm also planning on making it compatible with Postfix's master process, so you could directly add it to master.cf (actually I think I only have to move one fd from 3 to 6 and it'd work). - Added "passdb" userdb. Basically means that the passdb already returned all the information needed for userdb. With SQL this means you could do: SELECT password, uid AS userdb_uid, gid AS userdb_gid, home AS userdb_home FROM ... - If authentication failed because of some internal error, tell it to client instead of showing a generic "Authentication failed." error. - MySQL driver supports load balancing between multiple servers. Just add a new host=xx to connect string. It's not currently supported to have different usernames/passwords. Probably not worth it? - rawlog code rewritten. Should work better. - If userdb returns non-numeric UID or GID, look it up from passwd/group. - Rewritten message address parser. The old code could have lost some spaces and might have even returned invalid MIME string because of it. This affected only clients which use FETCH ENVELOPE command. - mbox: If lines began with NUL characters, things broke. Also fixed another potential problem with parsing mboxes. As a result hopefully these fix a problem with expunge sometimes leaving a few extra characters to beginning of mbox. - Added mail_debug setting which logs where and how Dovecot is trying to locate mails. Helpful when initially figuring out why Dovecot isn't working right. auth_debug=yes now also logs all SQL queries and LDAP lookups and some other things. - etc.

3 2

[Dovecot] IMAP crashes with signal 10 (SIGBUS)
by Joseph Tam 11 Jan '05

11 Jan '05

I wrote: > Any idea on what's causing this? > > Description: > imap process crashed with SIGBUS. > > Versions: > OS: Solaris 8, 9 > Dovecot: 1.0-test57 > Gcc: 3.2 same with 3.4.3 > > Backtrace: > #0 mbox_file_seek (ibox=0x8d9b0, view=0x8dc38, seq=2, deleted_r=0xffbef40c) at mbox-file.c:119 > ... Subsequent versions still crashed and I looked into the problem further. Specifically it crashes at this line offset = *((const uint64_t *)data); when "data" assumes a non-64 bit aligned value. At first I thought that 64-bit ints should always be aligned on 64-bit boundaries, but when I isolated this code into a standalone executable to demonstrate it (no arguments to cause a crash, one argument is OK): int main (int argc, char *argv[]) { int a[]={1,2,3,4}; long long int i64; void *p=(void *) (&a[argc]);; printf("Pointer to 32-bit int = %x\n",p); i64 = *((long long int *)p); printf("Successful casting to 64-bit int: value=%016llx\n",i64); } I found out that the presence of any optimisation (-O, -O2, -O3) will cause this to crash, yet it will work if no optimisation is present even though a pointer being cast is still not aligned on a 64-bit boundary (but aligned on a 32-bit boundary). I check the gcc bug web page page came up with this reference which may explain this behaviour. http://gcc.gnu.org/bugs.html#known - see section "Casting does not work as expected when optimization is turned on" http://mail-index.netbsd.org/tech-kern/2003/08/11/0001.html They claim that this casting violates ISO aliasing rules and the results like crashing are to be expected. Maybe this statement ought to be rewritten memcpy(&offset,data,sizeof(uint64_t)); There is one other statement at mbox-synbc.c:319 (1.0-test59) that may need this consideration. Joseph Tam <tam(a)math.ubc.ca>

2 2

[Dovecot] ldap auth (with user and domain a different places)
by Timo Boettcher 11 Jan '05

11 Jan '05

Hi, I am trying to use dovecot with my virtual-hosting setup. I have all users in LDAP like uid=user,dc=domain.tld,o=myorganization for the user with the mail-address user(a)domain.tld. This is also the username that user should use for login, but it is nowhere in the ldap-db in this form together, just user and domain at their own places. Is it possible to authenticate with dovecot against such an ldap-directory? After reading docs and comments in the config-file, I think no, but I am not sure. As I read the source, it is not possible just now, but would be, if I could use %d in the searchbase. Or did I understand something wrong? TIA Timo Boettcher

3 9

[Dovecot] dovecot + vpopmail
by Chris L. Franklin 10 Jan '05

10 Jan '05

I was just wondering how dovecot interacts with vpopmail. Does it just call the vchkpw and pass the username and password to it then wait for a it to tell dovecot weather the user is vaild or not ? Does vchkpw pass back the users homedir ? PS. My plan is to just replace vchkpw with a script/program of own. that dovecot can call to auth a user again xmail passwd file. And using "auth_passdb = static uid=<uid> gid=<gid> home=<dir template> mail=<dir template>" to fill in all the holes. -- Chris L. Franklin --

2 1

[Dovecot] imap catches sig 11 on EXPUNGE
by Thomas Lofgren 10 Jan '05

10 Jan '05

Debian unstable, x86 # dovecot --version 0.99.12 # tail /var/log/mail.log ... Jan 6 16:56:55 gecko dovecot: child 16505 (imap) killed with signal 11 ... When I use squirrelmail, the imap process always segfaults when I try to enter my INBOX group. Squirrelmail produces the following error message: ERROR : Connection dropped by imap-server. Query: EXPUNGE When I use gnus, I can enter the group just fine, but gnus/emacs hangs on exit (100% reproducible, as is the squirrelmail case). Turning on debug info I catch this in the imap log: 37 UID SEARCH UID 1098 NOT SINCE 30 DEC 2004 * SEARCH 37 OK Search completed. 38 EXPUNGE read:errno=0 (hangs until emacs is killed) So in each case, it seems to happen on EXPUNGE. I got it to produce a core file, and this is the backtrace: (gdb) where #0 0x08071a58 in mail_index_lookup_field_raw () #1 0x080666b6 in mbox_mail_get_location () #2 0x08063111 in mbox_is_valid_mask () #3 0x08063553 in mbox_expunge_locked () #4 0x0806a9c3 in index_storage_expunge () #5 0x08051cc6 in cmd_expunge () #6 0x08054ae9 in _client_reset_command () #7 0x08054b78 in _client_input () #8 0x0808b108 in io_loop_handler_run () #9 0x0808aa98 in io_loop_run () #10 0x0805ac29 in main () Please let me know if I can provide any further information. I don't subscribe to the mailing list, but I'll try to keep up on the archive in the next few days. Thanks, Tom

2 2