March 2007 - dovecot - dovecot.org

[Dovecot] dovecot authentication & exim in rc27
by Richard P. Welty 26 Mar '07

26 Mar '07

[introduction: new to the list, used dovecot w/exim as MTA in simple ways for 2 years, blah blah blah] i'm trying to get exim to use dovecot auth with a copy of rc27 and am missing something that's probably quite simple. specifically, how does one configure the authenticators in dovecot.conf for rc27? the auth section of the default config file installed in rc27 doesn't entirely look like what i'm seeing in other documentation; instead of auth default { } i'm seeing auth = default followed by lots of standard flags prefixed by auth_, but i don't see how to set up the socket. i have the following; dovecot starts and doesn't complain but it doesn't create the socket either: auth_socket listen { client { path = /var/run/dovecot/auth-client mode = 0660 user = exim group = exim } } any suggestions? thanks, richard

2 1

[Dovecot] anonymous mailing list archive configuration?
by Johannes Berg 25 Mar '07

25 Mar '07

Hi, I'd like to run a mailing list archive via IMAP like for this list but my mails are in maildir and not mbox. It's easy to add a new user that has access to the maildir that mails get stored in, and I can simply link that up to that user's inbox. It's also easy to prevent putting mail into that folder. However, one thing I'm not clear on is how to prevent that user from creating new folders. I don't think I can do that with permissions to the ~/Maildir since that user needs to be able to create files there for indizes etc. Is that possible? Should/can I write a plugin that prevents things? johannes

2 3

[Dovecot] Design docs in wiki
by Timo Sirainen 25 Mar '07

25 Mar '07

If you've ever wondered how Dovecot works internally, I've now written something about it to the wiki. It's probably a bit confusing and there are a lot of things missing, but it's better than nothing. :) http://wiki.dovecot.org/Design

2 1

[Dovecot] 1.0.rc28 / v1.0 plans
by Timo Sirainen 24 Mar '07

24 Mar '07

I'll probably release 1.0.rc28 in a few days. Would be nice to get some testing for it first. http://dovecot.org/nightly/dovecot-latest.tar.gz contains pretty much what it's supposed to be. I've now replied to all the mails I was planning on replying, excluding the few patches that are v1.1 material. If you think I forgot to reply to some mail, please resend it. I think the documentation in Wiki is finally beginning to look pretty good. All the important things are done. The only things in my "would be nice TODO" list are: - Add a new page about index files and their configuration. I'll probably do this before rc28. - PasswordSchemes and Authentication/Mechanisms are pretty heavy reading. Could be made easier to understand. Possibly also create some mechanism-specific pages describing how to configure them in Dovecot and in clients. - Design documents would also be nice, but not very useful for non-programmers and pretty big job to write them I'm planning on adding the Wiki pages to doc/wiki/ in the tarball and changing: - http://wiki.dovecot.org/* links to doc/wiki/*.txt in dovecot-example.conf - doc/variables.txt could be removed and links to it updated to doc/wiki/Variables.txt - doc/auth-protocol.txt is also already in wiki. Maybe create doc/design/ and put the AuthProtocol.txt there and other design wiki pages there as well. As for v1.0, it looks like there aren't many bug reports anymore about rc27. If there are as few for rc28, I'll release v1.0 in about a month. So unless something special happens, I'll fix only the simplest bugs after rc28 and leave the rest to v1.1/v1.0.1. Hmm. Looks like 13.4. is Friday. Perhaps that's a good day for a release. :) Looks like I ended up adding a few more new features to rc28: * deliver + userdb static: Verify the user's existence from passdb, unless allow_all_users=yes * dovecot --exec-mail: Log to configured log files instead of stderr + When copying/syncing a lot of mails, send "* OK Hang in there" replies to client every 15 seconds so it doesn't just timeout the connection. + Added idxview and logview utilities to examine Dovecot's index files + passdb passwd and shadow support blocking=yes setting now also + mbox: If mbox file changes unexpectedly while we're writing to it, log an error. + deliver: Ignore -m "" parameter to make calling it easier. + deliver: Added new -n parameter to disable autocreating mailboxes. It affects both -m parameter and Sieve plugin's fileinto action - auth cache: If unknown user was found from cache, we didn't properly return "unknown user" status, which could have caused problems in deliver. - Index view syncing fixes - rc27 didn't compile with some non-GCC compilers - vpopmail support didn't compile in rc27 - NFS check with chrooting broke home direcotry for the first login - deliver: If user lookup returned "unknown user", it logged "BUG: Unexpected input" - convert plugin didn't convert INBOX

5 11

[Dovecot] idxview: Fatal: file hdr read() 41984 != 1170103198
by Troy Engel 24 Mar '07

24 Mar '07

Playing with the new idxview I got this error running against my INBOX dovecot.index.cache file. What exactly does it mean? Full output: # /usr/libexec/dovecot/idxview dovecot.index.cache -- INDEX: dovecot.index.cache version = 1.8 base header size = 0 header size = 1170103198 record size = 1170103283 compat flags = 7 index id = 0 flags = 26512 uid validity = 0 next uid = 2460778624 messages count = 0 recent messages count = 632 seen messages count = 1 deleted messages count = 1140057508 first recent uid lowwater = 4294966816 first unseen uid lowwater = 3 first deleted uid lowwater = 1836 log file seq = 0 log file int offset = 2 log file ext offset = 1140057513 sync size = 266287972361 sync stamp = 21 day stamp = 0 day first uid[0] = 1378709065 day first uid[1] = 2037149797 day first uid[2] = 980374573 day first uid[3] = 826620960 day first uid[4] = 2019113286 day first uid[5] = 808463731 day first uid[6] = 1279801136 day first uid[7] = 1078085165 Fatal: file hdr read() 41984 != 1170103198 ('idxview dovecot.index' and 'logview dovecot.index.log' come back without any Fatal type errors, just gobs of information) -te -- Troy Engel | Systems Engineer Fluid, Inc | http://www.fluid.com

2 2

[Dovecot] Dovecot LDA Logging
by Jonathan Stewart 23 Mar '07

23 Mar '07

I have Dovecot LDA logging fine right now but I really don't like having my log files world writable because I have users with shell access. Is there a way to have Dovecot LDA log to syslog or would it be possible to write a mini-daemon that could log to syslog on behalf of Deliver or something else altogether? Jonathan

2 2

[Dovecot] Stalled imaptest10 process
by Steffen Kaiser 23 Mar '07

23 Mar '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, in order to stress my Dovecot test installation a bit, I compiled imaptest10.c. Now and then I see: Logi List Stat Sele Fetc Fet2 Copy Stor Dele Expu Appe Logo 100% 50% 50% 100% 100% 100% 33% 50% 100% 100% 100% 100% 30% 5% 5% 0 0 0 0 0 0 0 0 0 0 0 0 1/ 1 0 0 0 0 0 0 0 0 0 0 0 0 1/ 1 0 0 0 0 0 0 0 0 0 0 0 0 1/ 1 0 0 0 0 0 0 0 0 0 0 0 0 1/ 1 - 46. stalled for 1784 secs in APPEND - 46. stalled for 1785 secs in APPEND - 46. stalled for 1786 secs in APPEND - 46. stalled for 1787 secs in APPEND - 46. stalled for 1788 secs in APPEND - 46. stalled for 1789 secs in APPEND - 46. stalled for 1790 secs in APPEND (Sometimes SELECT or COPY) The maximum stalled time in APPEND is 1790s; in SELECT and COPY the maximum time is less than 20s until now. The only IMAP process loops around a poll(): poll([{fd=4, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=2, events=POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 3, 0) = 0 gettimeofday({1174389105, 882286}, {4294967236, 0}) = 0 gettimeofday({1174389105, 882339}, NULL) = 0 poll([{fd=4, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=2, events=POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 3, 999) = 0 gettimeofday({1174389106, 882011}, {4294967236, 0}) = 0 gettimeofday({1174389106, 882123}, NULL) = 0 poll([{fd=4, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=2, events=POLLERR|POLLHUP|POLLNVAL}, {fd=0, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 3, 0) = 0 So does imaptest itself: poll([{fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=52, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 2, 0) = 0 gettimeofday({1174389079, 93585}, {4294967236, 0}) = 0 write(1, " 0 0 0 0 0 0 "..., 68) = 68 write(2, " - 46. stalled for 1698 secs in "..., 39) = 39 gettimeofday({1174389079, 93814}, NULL) = 0 poll([{fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=52, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 2, 999) = 0 gettimeofday({1174389080, 93445}, {4294967236, 0}) = 0 gettimeofday({1174389080, 93497}, NULL) = 0 poll([{fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=52, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 2, 0) = 0 gettimeofday({1174389080, 93607}, {4294967236, 0}) = 0 There are no crashes, nothing. The server is idle then. I first assumed that it is related to an out-of-quota condition, but this time there is no fs quota set for the user. When I played with the quota, I ran imaptest with standard settings and without copybox=. I used this command: /usr/local/src/imaptest user=dvtest pass=pass clients=115 mbox=test.mbox box=box0 copybox=box1 msgs=200 ./configure summary: Install prefix ...................... : /usr/local/dovecot.rc27 File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : dnotify Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with mail delivery agent .. : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword ldap sql (modules) Building with password lookup modules : passwd passwd-file shadow pam checkpassword ldap sql (modules) Building with SQL drivers ............: pgsql # /usr/local/dovecot.rc27/sbin/dovecot -n # /usr/local/dovecot.rc27/etc/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log protocols: imap imaps pop3 pop3s ssl_ca_file: /etc/ssl/certs/ca.crt ssl_cert_file(default): /etc/ssl/certs/imap.pem ssl_cert_file(imap): /etc/ssl/certs/imap.pem ssl_cert_file(pop3): /etc/ssl/certs/pop3.pem ssl_key_file(default): /etc/ssl/private/imap.key ssl_key_file(imap): /etc/ssl/private/imap.key ssl_key_file(pop3): /etc/ssl/private/pop3.key disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable(default): /usr/local/dovecot.rc27/libexec/dovecot/imap-login login_executable(imap): /usr/local/dovecot.rc27/libexec/dovecot/imap-login login_executable(pop3): /usr/local/dovecot.rc27/libexec/dovecot/pop3-login login_log_format_elements: %p: user=<%u> method=%m rip=%r lip=%l %c verbose_proctitle: yes first_valid_uid: 1000 mail_location: maildir:%h/MailDir:CONTROL=/var/cache/dovecot/%i/control:INDEX=/var/cache/dovecot/%i/index mail_debug: yes dotlock_use_excl: yes maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_drop_priv_before_exec: yes mail_executable(default): /usr/local/dovecot.rc27/libexec/dovecot/imap mail_executable(imap): /usr/local/dovecot.rc27/libexec/dovecot/imap mail_executable(pop3): /usr/local/dovecot.rc27/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_log zlib mail_plugins(imap): quota imap_quota mail_log zlib mail_plugins(pop3): quota mail_log mail_plugin_dir(default): /usr/local/dovecot.rc27/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/dovecot.rc27/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/dovecot.rc27/lib/dovecot/pop3 mail_log_prefix: %Us(%u) [%p]: mail_log_max_lines_per_sec: 30 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %u pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): oe-ns-eoh namespace: type: private separator: . inbox: yes hidden: yes auth default: mechanisms: plain login cache_size: 10 username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890 verbose: yes debug: yes passdb: driver: ldap args: /usr/local/dovecot.rc26/etc/dovecot-ldap.conf passdb: driver: shadow userdb: driver: prefetch userdb: driver: ldap args: /usr/local/dovecot.rc26/etc/dovecot-ldap.conf userdb: driver: passwd-file args: /etc/passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 432 group: mail plugin: quota: fs Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBRf/E3i9SORjhbDpvAQI5oQgAhOYKF9Rw0Ezz8Fn22xLjm/EtXdsRgpPx 6kcBkT+v4gLc15ORtcCrWLmU0bG+an//2wQ33cAiH2X/veZXEdXtwNultq+HPM3/ MYnjvNhL+OkkN9wAGOLTaRFJUDofEiXQzeNiVhYelmUsT4NaLzVQT4tRiYrbIAvK sHlkZJayE3gTIc5SzAviWxPPEkcJO+0HpMrym9USYbFtWNMVEMSYl9pGTVp9YTa0 oMUGpge1H8Qw75VMuf9jHC2SU8Xe889pv9CiButE0cpkQSsQj7Gf4+rX5V3ts3xv vw8oAZdsc3Rzms3JrWRiAsQHomXeAW0VPZSi/DjIOXT/AshXvnLDQw== =FLRG -----END PGP SIGNATURE-----

2 9

[Dovecot] ssl on embedded device
by burolib 23 Mar '07

23 Mar '07

Hi. I'm still facing troubles on my way. This time concerning ssl encryption. only dovecot-auth starts... imap and pop3 go down with this log dovecot: Mar 23 18:34:19 Info: Dovecot v1.0.rc27 starting up dovecot: Mar 23 18:34:20 Error: Temporary failure in creating login processes, slowing down for now dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: child 849 (login) returned error 89 dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: imap-login: Can't load certificate file /etc/ssl/certs/server.pem: error:2507006C:lib(37):func(112):reason(108) dovecot: Mar 23 18:34:20 Error: child 847 (login) returned error 89 dovecot: Mar 23 18:34:20 Error: child 848 (login) returned error 89 I attemped with makecert.sh, myown certificate which works with qmail-pop3d/stunnel, and cacert.org. All the times i get the same error. my dovecot.conf says: ## ## SSL settings ## #ssl_listen = #ssl_disable = no ssl_cert_file = /etc/ssl/certs/server.pem ssl_key_file = /etc/ssl/private/private.key #ssl_key_password = #ssl_ca_file = #ssl_verify_client_cert = no ssl_parameters_regenerate = 128 ssl_cipher_list = ALL:!LOW verbose_ssl = yes I spent a week trying to solve this out. Any ideas? ------------------------------------------------------ Leggi GRATIS le tue mail con il telefonino i-mode di Wind http://click.libero.it/imode

1 0

[Dovecot] lock file on embedded device
by burolib 23 Mar '07

23 Mar '07

thanks for the suggest. That's just an attempt.I will install everything on a device with usb support, therefore i will be able to use an hard disk or something like that. ------------------------------------------------------ Leggi GRATIS le tue mail con il telefonino i-mode di Wind http://click.libero.it/imode

1 0

[Dovecot] multiple instances of dovecot on one machine
by Marshal Newrock 23 Mar '07

23 Mar '07

I was trying to run two instances of dovecot on the same machine, each listening on a single IP. The problem I ran into was that each time one was started or restarted, the other stopped responding. I saw the following in the logs: Mar 23 00:02:27 sentinel dovecot: Dovecot v1.0.rc27 starting up Mar 23 00:02:27 sentinel dovecot: Socket already exists: /var/run/dovecot/dict-server After I saw that, I commented out the dict section and quota from the plugins. The second line disappeared, but I could still only get one dovecot listening at a time. In the end, I went back to a single dovecot listening on all IP's, and found another way to do what I was trying to do, so all is still working for me. I'm guessing I'm the first person to try to run two dovecots on one machine. Actually, I should clarify: there was also a third, listening to none on localhost, but there only for the lda process. The auth socket was set to /var/run/dovecot/auth-master. And this also was not accepting connections while the others were running. -- Marshal Newrock Ideal Solution, LLC - http://www.idealso.com

2 2