March 2007 - dovecot - dovecot.org

[Dovecot] changing the separator
by Marten Lehmann 23 Mar '07

23 Mar '07

Hello, is it possible the change the folder separator from "." to "/"? Users shall be able to have folders like "Junk/aol.com/*". Regards Marten

5 7

[Dovecot] maildirsize problem?
by Alan Mosca [Aluminati] 23 Mar '07

23 Mar '07

Hello all, Recently I have received a few complaints from users that their quota was being reported wrong. This seems to have started when I switched to quota=maildir and ignore=Trash (did both at the same time). The main reported problem is that maildirsize is not correctly updated when they delete messages. My personal hypothesis is something like this: - User moves to Trash - Trash is ignored so it is not marked on the maildirsize (?) - User purges trash - Trash is still ignored so it is still not marked (?) Resulting in a buildup of errors in the maildirsize file. Would it be a good idea to mark the maildirsize file when a file is moved to an ignored folder? That could though potentially lead to people just moving to trash instead of deleting. Thank you guys and keep up the good work! -- Alan Mosca Systems Administrator Aluminati Network Group

2 1

[Dovecot] Timeout while logging in
by Kevin Richter 23 Mar '07

23 Mar '07

Hi, sometimes there is a timeout, while logging in. Dovecot-rc24 Dovecot uses PAM, PAM uses a LDAP server. Solaris 10 The log, if everything is ok: auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=x.x.x.x rip=x.x.x.x resp= auth(default): client out: CONT 1 auth(default): client in: CONT<hidden> auth(default): client out: OK 1 user=ssal0041 auth(default): master in: REQUEST 453 4779 1 auth(default): master out: USER 453 ssal0041 system_user=ssal0041 uid=3092 gid=1100 home=/home/ss pop3-login: Login: user=<ssal0041>, method=PLAIN, rip=x.x.x.x, lip=x.x.x.x, TLS POP3(ssal0041): Effective uid=3092, gid=1100 POP3(ssal0041): mbox: data=/home/ssal0041/mail/:INBOX=/var/mail/ssal0041 POP3(ssal0041): mbox: root=/home/ssal0041/mail, index=/home/ssal0041/mail, inbox=/var/mail/ssal0041 POP3(ssal0041): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 The log, if a timeout occures: auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=x.x.x.x rip=x.x.x.x resp= auth(default): client out: CONT 1 auth(default): client in: CONT<hidden> auth(default): client out: OK 1 user=ssal0041 auth(default): master in: REQUEST 454 4770 1 auth(default): master out: USER 454 ssal0041 system_user=ssal0041 uid=3092 gid=1100 home=/home/ss pop3-login: Login: user=<ssal0041>, method=PLAIN, rip=x.x.x.x, lip=x.x.x.x, TLS The rest is missing. Any ideas, how I can debug this issue? Regards, Kevin

2 8

Re: [Dovecot] deliver to subfolder with dovecot's LDA
by Bill Boebel 23 Mar '07

23 Mar '07

On Fri, March 16, 2007 8:12 pm, Tom Bombadil <grlists(a)gmail.com> said: > How can deliver messages to a subfolder using the LDA? > For example, I want a message to joe+spam(a)abc.com to be placed inside > the 'spam' subfolder. $ deliver --help Usage: deliver [-c <config file>] [-d <destination user>] [-m <mailbox>] [-f <envelope sender>] So for the example above, you can call it like this: $ deliver -d joe(a)abc.com -m spam To do this from Postfix, /etc/postfix/master.cf: dovecot unix - n n - - pipe flags=DRhu user=virtual argv=/usr/libexec/dovecot/deliver -d ${recipient} -f ${sender} -m ${extension} However, I think LDA freaks out if you pass -m "". So this might not work when there is no "+folder". Timo: Should -m treat empty string as if -m was not passed at all? Bill

4 14

[Dovecot] I wrote a managesieve server for Dovecot
by Neale Pickett 22 Mar '07

22 Mar '07

I have written a managesieve server from scratch in Python. I did just enough work to get it working with avelsieve (the squirrelmail plugin), smartsieve, and KDE's sieve kioplugin. It supports the entire Internet draft. Since I didn't have a working sieve server to compare against, I'm not sure if it's 100% compatible with timsieved. Client applications seem to work okay anyway. I wrote it in such a way as to decouple how authentication is carried out and how sieve scripts are actually stored, so you could for instance modify this to work with SASL and Exim. Currently it only has code for PAM and Dovecot's LDA, because I run Postfix :). TLS support is in the code but disabled because I had problems writing a unit test for it. All my connections are from localhost anyway. http://woozle.org/~neale/repos/pysieved if anyone is interested. I haven't looked closely at Stephan Bosch's managesieve server in C but I do want to acknowledge that he has written a C managesieve server that currently exists as a patch to the Dovecot source code. People looking for a managesieve implementation in C are encouraged to try his patch out: http://sinas.rename-it.nl/~sirius/ Neale

3 5

[Dovecot] tilde in mbox:, when used in non-system user db
by Michal Soltys 22 Mar '07

22 Mar '07

Originally I've thought that this is related to INBOX field, but it turned out it happens only when you specify mbox. Consider following passwd-file: testms::10000:10000:imap,,,:/home/vmail/ppgk.com.pl/testms/./::userdb_mail=mbox:~/Mail:INBOX=/home/vmail/ppgk.com.pl/%u/inbox or following line from userdb static: args = uid=10000 gid=10000 home=/home/vmail/ppgk.com.pl/%u/./ mail=mbox:~/Mail:INBOX=/home/vmail/ppgk.com.pl/%u/inbox In both cases, in user's directory, there will be an empty ~/Mail directory created, in addition to Mail and inbox. No idea about how sql or ldap would behave here, but global mail_location from dovecot.conf doesn't suffer from this issue (~ was expanded properly in ktrace dump). Chroot specification (/./) doesn't matter here. If I change mbox:~/Mail:INBOX=..... to mbox:/home/vmail/ppgk.com.pl/%u/Mail:INBOX=~/inbox then everything will be fine - no extra '~' dir. Thus my assumption it's not INBOX field related. Looking at ktrace, it seems that imap process is checking for the existence of ~/Mail, without expanding tilde. Then quite a bit later, it creates Mail as a "side effect" of creating Trash subdirectory. Relevant fragments: 1853 imap CALL mkdir(0x8a79b100,0x1f8) 1853 imap NAMI "~/Mail" 1853 imap RET mkdir -1 errno 2 No such file or directory 1853 imap CALL sigprocmask(0x1,0xffffffff) 1853 imap RET sigprocmask 0 1853 imap CALL mprotect(0x3c0ec000,0x1000,0x3) 1853 imap RET mprotect 0 1853 imap CALL mprotect(0x3c0ec000,0x1000,0x1) 1853 imap RET mprotect 0 1853 imap CALL sigprocmask(0x3,0) 1853 imap RET sigprocmask -65793/0xfffefeff 1853 imap CALL mkdir(0x8a79b108,0x1f8) 1853 imap NAMI "~" 1853 imap RET mkdir 0 1853 imap CALL mkdir(0x8a79b100,0x1f8) 1853 imap NAMI "~/Mail" 1853 imap RET mkdir 0 and 1853 imap CALL stat(0x8a79b180,0xcfbeb5c0) 1853 imap NAMI "/home/vmail/ppgk.com.pl/testms/Mail/Trash" 1853 imap RET stat -1 errno 2 No such file or directory 1853 imap CALL stat(0x8a79b1b0,0xcfbeb600) 1853 imap NAMI "/home/vmail/ppgk.com.pl/testms/Mail/Trash" 1853 imap RET stat -1 errno 2 No such file or directory 1853 imap CALL mkdir(0x8a79b1e0,0x1f8) 1853 imap NAMI "/home/vmail/ppgk.com.pl/testms/Mail" 1853 imap RET mkdir 0 1853 imap CALL open(0x8a79b1b0,0xa02,0x1b0) 1853 imap NAMI "/home/vmail/ppgk.com.pl/testms/Mail/Trash" 1853 imap RET open 7 My configuration is prtty much the same as previously: openbsd 3.9, i386, dovecot 1.0-rc27 (latest nightly, but the same happened in stock 1.0rc27) dovecot.userdb: testms::10000:10000:imap,,,:/home/vmail/ppgk.com.pl/testms/./::userdb_mail=mbox:~/Mail:INBOX=/home/vmail/ppgk.com.pl/%u/inbox dovecot.passdb: testms:{PLAIN}test: base_dir: /var/dovecot/ protocols: imap imaps pop3 pop3s ssl_listen: * ssl_ca_file: /etc/ssl/cert_bundle.pem ssl_cert_file: /etc/ssl/ca_ppgk/certs/fetch_crt.pem ssl_key_file: /etc/ssl/ca_ppgk/private/fetch_key.pem verbose_ssl: yes login_dir: /var/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Dovecot IMAP server ready. login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no valid_chroot_dirs: /var/mail:/home/regular:/home/vmail verbose_proctitle: yes first_valid_uid: 1999 first_valid_gid: 10 mail_location: mbox:~/Mail:INBOX=/var/mail/%u mail_debug: yes fsync_disable: yes lock_method: fcntl maildir_copy_with_hardlinks: yes mbox_read_locks: fcntl mbox_write_locks: fcntl mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: passwd-file args: /etc/dovecot.passdb passdb: driver: bsdauth userdb: driver: passwd-file args: /etc/dovecot.userdb userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master:

2 1

[Dovecot] Getting more spam
by postmaster＠webisp.co.uk 22 Mar '07

22 Mar '07

Hi I am taking part in writing an anti spam filter for my uni project. However at the moment I am not getting much spam to my mail server - running dovecot and postfix :) Do you have any suggestions for getting more? Thanks Tom

5 7

Re: [Dovecot] Replacing qmail + vpopmail with: sendmail + dovecot.
by David Robillard 22 Mar '07

22 Mar '07

> Hi, > I wonder if it posible to replace qmail + vpopmail with sendmail + dovecot? > > The idea is like this: > - use sendmail + milter API to filter spam/virus and deliver the email to > the dovevot MDA (LDA) > - dovecot should save the email to the directory as specified in the > vpopmail DB > - maintain the vpopmail BD (users + passwd) > - use dovecot pop3/imap for the clients > - use sendmail again to receive the email from the pop3/imap users and > deliver the email to the internet as usual. > > Anyone has done this? It is posible in the paper, in the real world? Hi Oliver, We run sendmail + dovecot on FreeBSD for around 3500 users. It runs smooth. We also run two other FreeBSD machines with Sophos PureMessage for Anti-SPAM and Anti-Virus cleanup which is linked via sendmail's milter. You're going to need Procmail to link sendmail and dovecot for local mail delivery to the user's mbox or Maildir, which ever you prefer. We're using Maildir here to serve both IMAP over SSL and POP3 over SSL. If you need any help in the setup of sendmail + procmail + dovecot, just tell me. Of course, if you're more experienced with Postfix, then use it. IMHO it's not as flexible as sendmail. But YMMV. Have fun, David -- David Robillard UNIX systems administrator & Oracle DBA CISSP, RHCE & Sun Certified Security Administrator Montreal: +1 514 966 0122

2 2

[Dovecot] GSSAPI authentication behind HA servers
by Mustafa A. Hashmi 22 Mar '07

22 Mar '07

Hi all, We have 2 mail servers sitting behind linux-HA machines.The mail servers are currently running dovecot 1.0rc2. Looking to enable GSSAPI authentication, I exported krb keytabs for imap/node01.domain@REALM and imap/node02.domain@REALM for both mail servers. However, clients are connecting to mail.domain.com, which results in a mismatch as far as the keytab is concerned (and rightly so). Connections directly to node01 and node02 work fine for gssapi auth. I proceeded to export a key for mail.domain.com into the same keytab for both the nodes, however, I don't think more than a single key is checked for the imap service, and authentication errors continued. Is anybody running something similar? Could you please explain how you have this working on your end? Appreciate any help. Regards, -- Mustafa A. Hashmi mahashmi(a)gmail.com

1 1

[Dovecot] Preparing for sharing with ACLs
by Mike Brudenell 22 Mar '07

22 Mar '07

Greetings - I'm finalising the layout of our new mailstore ready for a trial service using Dovecot (switching from the UW IMAP server). This is using Maildir mailboxes, changing from our current mix of MBX and traditional Berkeley. One of the things we are often asked for is how someone can grant another access to their mailbox: eg, a Head of Department wants the Departmental Secretary to review and reply to e-mails, but not tell her the password. I understand that Dovecot doesn't provide a user-interface for setting up or manipulating these, nor the IMAP ACL extension at this time, so... Q1. Are there plans to add support for ACLs in the future, along with an end-user accessible means of setting these up and manipulating them? I also understand that it is currently possible for the Mail Admin to set up ACLs (globally and/or per-mailbox) and shared folders (I admit I'm having trouble getting my head around the latter in the Wiki a bit). I' hoping to avoid using the current "has to be done by the Administrator" setup, and instead want to plan for any future end- user interface. We are using filestore quotas for the Maildirs, so at present a user's Maildir directories and files are owned by their username (UNIX uid) and group (UNIX gid). * Naturally for filestore quotas to continue to work items need to continue to be owned by the person's username (UNIX uid). When end-user support for shared mailboxes and ACLs comes along one day (hopefully!) I assume two levels of access control are needed: 1. At the filestore level the other authorised users will need read and/or write access to the directories and files comprising the Maildir, and 2. Suitable ACLs will be needed to grant access via Dovecot to authorised persons, but not to other random people. So looking to the future, I'm therefore thinking that instead of having each user's Maildir directories and files owned by their UNIX uid and gid I should instead have them owned by their UNIX uid and a common-to-everyone UNIX gid. Eg, drwxrwx--- user1:mail directoryname -rw-rw---- user1:mail filename I realise there is an element of risk here, as we would be relying on Dovecot's security to limit access so that only authorised users can access a given person's mailbox. Is this the right approach to adopt? Or is there a better way of (one day) enabling Person A to share their mailbox to Person B but not Person C? (We need a solution that is general and based on ACLs, not one that relies on our creating custom UNIX groups and assigning people's usernames to these.) I've read the Wiki pages on ACLs and Shared Folders, but am having trouble putting the information together in my mind to (one day) solve this particular requirement. Can anyone shed any light, please? Cheers, Mike B-) -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

2 1