May 2006 - dovecot - dovecot.org

[Dovecot] Public Namespace & ACL & Virtual Users
by Fintec 01 Aug '06

01 Aug '06

Background: I am wanting to create shared folders (public namespace) with access control lists on the sub directories. Our implementation of dovecot (v1.0b7) uses many virtual users and domains and 1 actual user (vmail), all using maildir. So far I have successfully created the public namespace (Public_Folders) which every user can access but I'm having difficulty restricting access using ACls. When trying to implement the dovecot ACL plug-in I followed the wiki instructions and created a "dovecot-acl" file within Public_Folders containing: owner lrwstiekxa user=user1(a)domain.com lrwstiek However this doesn't appear to do anything. All users can still access Public_Folders so I have a couple of questions that hopefully someone can help me with... 1) Is it possible to use the dovecot's ACL plug-in on a Public name space? 2) Is it possible to create dovecot-acl files with virtual usernames, i.e. user1(a)domain.com or does it have to be actual users, i.e. vmail? 3) Is it possible to restrict access within the namespace definition, i.e. set up another public namespace restricted to manager(a)domain.com? 4) Is ACL accepts & denies logged somewhere other than /var/log/maillog (my default)? 4) Is anyone successfully set-up an environment with a public namespace and ACLs? Any help would be greatly appreciated. Gavin

3 7

[Dovecot] making Dovecot match Courier POP3 UID's
by Jeff Tucker 20 Jul '06

20 Jul '06

Hi, guys. I've read the information in the Wiki about making dovecot's UID's match Courier's UID's in the POP3 server, so that a UIDL command on either server will return the same UID's for the same group of messages. However, what I've read doesn't match what I'm seeing in Courier. Courier appears to keep the UID numbers for messages that it uses for the POP3 server separate from the UID numbers for the IMAP server. Courier has a file: courierpop3dsizelist which has a line for every message, like: 1129610881.6075832619.blade4:2,S 2361 1478:1065670602 1129727025.1168007000.blade1:2,S 14718 1479:1065670602 1130005953.3295720403.blade5:2,S 1554 1481:1065670602 1130108068.0849623942.blade5:2,S 8246 1482:1065670602 The first column is the maildir filename, the last column is the UID that the POP3 server uses and the UID validity. Both are used to create the UID number returned by UIDL. The IMAP server uses a completely different UID number that's stored in courierimapuiddb. So, it seems to me that dovecot can't ever match Courier's UID numbers for the POP3 server unless it reads and interprets this courierpop3dsizelist file. My Courier-IMAP installation is Courier-IMAP 4.0.6. Any ideas? This is a real hassle because it means I can't switch the POP3 server from Courier to Dovecot or, if I do, lots of my users will download every message again which is just unacceptable. Thanks Jeff

4 3

[Dovecot] Getting maildir++ quotas working
by Bill Boebel 18 Jul '06

18 Jul '06

Can somebody post details for how to get maildir++ quotas working in the latest CVS? I have tried but can't get the CAPABILITY string to show "QUOTA"; and the GETQUOTAROOT command is recognized, but returns nothing... 2 GETQUOTAROOT INBOX * QUOTAROOT "INBOX" "" * QUOTA "" () 2 OK Getquotaroot completed. These are the settings I have... am I missing something? protocol imap { mail_plugins = imap_quota quota mail_plugin_dir = /usr/lib/dovecot/imap } plugin { quota = maildir imap_quota = maildir } Here are some more details: Dovecot is creating the maildirsize file in my maidir, and it seems to show correct storage used calculations, but the first line which should contain my storage limits is blank. So I suspect that I am not returning a valid quota value from the user database. I am returning what my old Courier-IMAP wants to see "1073741824S,4000C"... if the format for Dovecot is different, what should the format be? So there are two problems that I am trying to resolve, but I'm not sure how to go about fixing it. Any help would be greatly appreciated: (1) Dovecot isn't announcing QUOTA support in the capability string. (2) Dovecot isn't getting a valid quota limit, which I assume is breaking the GETQUOTAROOT command. Thanks, Bill

3 2

[Dovecot] dovecot and thunderbird
by Mark Davies 24 Jun '06

24 Jun '06

We've been using dovecot for a while now (currently 1.0beta7) and it works nicely. We have just one reoccuring problem: When using thunderbird as the imap client sometimes when messages are moved from the inbox to other folders (including Trash) they shortly thereafter reappear in the inbox - this can happen multiple times to the same message. We have multiple namespaces set up so that inbox is mbox format in ~/.poffice/username and other folders are maildir in ~/Maildir - both of these are on NFS. Indexes are on local storage. The problem only seems to happen with thunderbird. kmail, mac mail, outlook, pine all work fine. If we effectively move a user so that their inbox is also maildir then the problem doesn't happen. The inbox being mbox format is for historic reasons and medium to long term this should change to maildir but in the interim can anyone see anything different that thunderbird does to other imap clients that might be tickling an underlying bug? cheers mark

3 3

[Dovecot] About RH patches and 1.0beta8
by Oliver Schulze L. 20 Jun '06

20 Jun '06

Hi, I just started building dovecot 1.0beta8 on RHEL4.3 based on atrpm.net .spec file. I noted that 3 patches are included in the .src.rpm and wanted to discuss them. I'm interested in knowing if those patches are relevant to all dovecot users and if they can be applied to dovecot. From: http://dl.atrpms.net/all/dovecot-1.0-0_10.99.beta7.el4.at.src.rpm patch: dovecot-1.0.beta2-mkcert-permissions.patch calls 'chown root.root', is good to have the certs owned by root? patch: dovecot-1.0.beta2-pam-setcred.patch is dissables the call to pam_setcred() because there is no other call to pam_setcred() in order to release the resources patch: dovecot-1.0.beta2-pam-tty.patch it add a call to pam_set_item() I don't to attach the patches to the list, but I can if anyone could not extract them from the .src.rpm Many thanks Oliver -- Oliver Schulze L. <oliver(a)samera.com.py>

5 5

[Dovecot] Dovecot randomly stops responding
by Miguel Saturnino 18 Jun '06

18 Jun '06

Hi! I'm running Dovecot 1.0beta7 on FreeBSD 6.0 (i386) and it randomly stops responding. To mitigate the problem I made a little ruby scripts which logs in to the POP3 server every 3 minutes and, in case of error (the errors are usually timeout or end of file errors), restarts Dovecot. Although this keeps this keeps things working, I'd like to figure out what is causing Dovecot to stop responding. Looking at the logs, nothing stands out except that there is always one or more of these messages just before Dovecot stops responding: Apr 20 19:25:00 zeus dovecot[62881]: pop3-login: Disconnected: Inactivity: rip=209.123.xxx.xxx, lip=64.21.xxx.xxx Any help debugging this would be greatly appreciated. Thanks, -- Miguel Saturnino <miguel.saturnino(a)teiadigital.pt>

2 3

[Dovecot] asserts and cores in beta3
by Jeff A. Earickson 18 Jun '06

18 Jun '06

My setup: Solaris 9, built with gcc 4.0.2 (I now have gcc 4.1 installed on my system, but have not rebuilt dovecot). A couple of asserts and cores in the last few days: Mar 1 09:25:13 emerald dovecot: [ID 107833 mail.error] imap(tmwillia): file mbox-sync.c: line 1471 (mbox_sync_do): assertion failed: (!sync_ctx->mbox->mbox_sync_dirty || (flags & MBOX_SYNC_UNDIRTY) == 0) Mar 1 09:58:44 emerald dovecot: [ID 107833 mail.error] imap(eewilson): file mbox-sync.c: line 1471 (mbox_sync_do): assertion failed: (!sync_ctx->mbox->mbox_sync_dirty || (flags & MBOX_SYNC_UNDIRTY) == 0) Mar 3 16:18:54 emerald dovecot: [ID 107833 mail.error] imap(tmwillia): file mbox-sync.c: line 1471 (mbox_sync_do): assertion failed: (!sync_ctx->mbox->mbox_sync_dirty || (flags & MBOX_SYNC_UNDIRTY) == 0) Backtraces from the two cores in hand are attached. I can do further poking at the cores if that would help. Jeff Earickson Colby College

2 2

[Dovecot] 1.0 beta3 not preserving X-Keyword header?
by Gregory K. Ruiz-Ade 18 Jun '06

18 Jun '06

We've been putting 1.0 Beta 3 through the paces on our test system, and one of our users pointed out to me that Thunderbird's "labels" behave strangely on the new server. In fact, there used to be a header added to the message via IMAP when Thunderbird placed a label on a message, but as of the switch from 0.99.11 to 1.0beta3, this label header is no longer placed in the message. Specifically, Thunderbird adds the "X-Keyword: $LabelN" header when you add a label to the message in tbird, where "N" is [1-9]. This works on dovecot 0.99.11 (RHEL4), but not on 1.0beta3. 1.0b3 doesn't seem to add this header at all, but rather seems to keep this information somewhere else. Perhaps in the .imap indexes? We're using mbox stores on the server. This was tested with both Thunderbird 1.0.7 (most widely deployed) and Thunderbird 1.5. Aditionally, we've found that if the .imap index directories are removed, all the Thunderbird labels on messages seem to get "confused", too. I.e., if the user uses multiple machines throughout the day, changes in one client may not be reflected in another, when the user moves to a different system. I'm still trying to get more details from the users, but have been doing preliminary testing that verifies this. One of the users complaining about this is my manager, who makes extensive use of Thunderbird's "Label" feature, so he's a bit nervous. :\ Another thing we've noticed is the potential for bad behavior if a use switches from the old dovecot to the new dovecot, which seems to be resolved if the .imap indexes are removed... Let me know what other information is needed, and I'll do my best to collect it. Gregory -- Gregory K. Ruiz-Ade Sr. Systems Administrator Computer Science and Engineering University of California, San Diego Office: EBU3b 1216 Phone: (858) 822-2625 E-mail: gkra(a)ucsd.edu

4 10

[Dovecot] APPEND command truncates message
by Chris Rodgers 18 Jun '06

18 Jun '06

Hi, I have been debugging a small perl script (see ShowBug2) that I use. In doing so, I think that I may have uncovered a problem with the dovecot IMAP server. Attached are two packet traces for connections to two different IMAP servers. On both servers I run the script: i.e. I login, select a folder, search for messages and append a message. On the fvs5 server (Courier IMAP?), everything works as expected. However, on the dovecot server, the message that is saved into my mailbox has been truncated at the end of the line containing "26". I attach a copy of the saved message in MessageAsOnIMAPServer.txt. I hope that this report might be useful. Please let me know if you require any further information. Chris. * OK [CAPABILITY IMAP4REV1 LOGIN-REFERRALS AUTH=LOGIN] fvs5 IMAP4rev1 2003.339p-cpanel at Tue, 18 Apr 2006 21:50:06 +0000 (GMT) 1 Login "*******" {7} + Ready for argument ******* 1 OK [CAPABILITY IMAP4REV1 IDLE NAMESPACE MAILBOX-REFERRALS BINARY UNSELECT SCAN SORT THREAD=REFERENCES THREAD=ORDEREDSUBJECT MULTIAPPEND] User Rodgers authenticated 2 SELECT IT-Lilac * 0 EXISTS * NO Trying to get mailbox lock from process 32317 * 0 RECENT * OK [UIDVALIDITY 1145396966] UID validity status * OK [UIDNEXT 1] Predicted next UID * FLAGS (\Answered \Flagged \Deleted \Draft \Seen) * OK [PERMANENTFLAGS (\* \Answered \Flagged \Deleted \Draft \Seen)] Permanent flags 2 OK [READ-WRITE] SELECT completed 3 UID SEARCH HEADER Subject "lilac gpg message" * SEARCH 3 OK UID SEARCH completed 4 APPEND IT-Lilac {717} + Ready for argument >From chris(a)rodgers.org.uk Tue Apr 18 21:49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 * 1 EXISTS * 1 RECENT 4 OK APPEND completed 5 LOGOUT * BYE fvs5.freevirtualservers.com IMAP4rev1 server terminating connection 5 OK LOGOUT completed * OK dovecot ready. 1 Login "*******" {8} + OK ******** 1 OK Logged in. 2 SELECT IT-Lilac * FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk Junk) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk Junk \*)] Flags permitted. * 117 EXISTS * 1 RECENT * OK [UNSEEN 116] First unseen. * OK [UIDVALIDITY 1136428693] UIDs valid * OK [UIDNEXT 344] Predicted next UID 2 OK [READ-WRITE] Select completed. 3 UID SEARCH HEADER Subject "lilac gpg message" * SEARCH 3 OK Search completed. 4 APPEND IT-Lilac {717} + OK >From chris(a)rodgers.org.uk Tue Apr 18 21:49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 * 118 EXISTS * 2 RECENT 4 OK Append completed. 5 LOGOUT * BYE Logging out 5 OK Logout completed. >From chris(a)rodgers.org.uk Tue Apr 18 21: 49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test Content-Length: 113 Status: O X-UID: 344 X-Keywords: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 #! /usr/bin/perl use strict; use Mail::IMAPClient; use Term::ReadPassword; # Check that username, password and server have been provided my $Server = "imap.pcl.ox.ac.uk"; my $User = `whoami`; chomp $User; my $Password = read_password('Mail password: '); my $INBOX = "IT-Lilac"; unless ($Server) { die "You must provide a server!"; } unless ($User) { die "You must provide a user!"; } unless ($Password) { die "You must provide a password!"; } print "Connecting to $User\@$Server\n\n"; my $IMAP = Mail::IMAPClient -> new (Server => $Server, User => $User, Password => $Password, Debug => 1) or die "Could not connect to your IMAP server, stopping"; if (!$IMAP->IsAuthenticated()) { die "Could not log in to your IMAP server, stopping"; } $IMAP -> Uid(1); # Use UID's for messages. $IMAP -> select($INBOX); my @msgs = $IMAP -> search("HEADER","Subject","lilac gpg message"); my $MessageBody = <<'EOM'; >From chris(a)rodgers.org.uk Tue Apr 18 21:49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 EOM print "Length is: {" . length($MessageBody) . "}"; $IMAP -> append("IT-Lilac",$MessageBody); # BUG: For some reason, we lose a bit of the message! print "\n"; $IMAP = $IMAP -> disconnect(); exit;

2 1

[Dovecot] Dovecot's as ip/user based login filter?
by Sysadmin 18 Jun '06

18 Jun '06

Hello. I'm facing a problem, I need to give access to internal mailserer for some people only, but can't figure out how to do it. Opening the 993 port for whole word gives access to everyone who have account. Can Dovecot act as login filter or etc for that purpose. Or does anybody have idea how to do it? -- Sysadmin

4 9