August 2007 - dovecot

[Dovecot] Authentication using only TLS client certificates
by Martin Lambers 26 Aug '07

26 Aug '07

Hi! I'd like to configure dovecot to use only TLS client certificates for authentication. After the user presented a client certificate and that certificate was verified, no password-based authentication should be necessary anymore. Is this currently possible? Or would this require support for the SASL EXTERNAL mechanism? Regards, Martin

2 1

[Dovecot] Log format question...
by Mike Cisar 26 Aug '07

26 Aug '07

Trying to do a little (cosmetic) tweak to my configuration and just don't seem to be able to come up with a set of options that works. My POP/IMAP configuration is working just fine in terms of mail retrieval, etc. What I'm seeing in the logs now is... Aug 13 18:15:17 test2 dovecot: pop3-login: Login: user=<support>, method=PLAIN, rip=10.11.12.12, lip=10.11.12.13 I would prefer (for ease of troubleshooting) to have "user=<support(a)realm.com>" appear in the logs instead, to save having to figure the realm from the IP value. Have played around with various combinations of %u, %n and %d and all I seem to be able to accomplish is break the working part of the config. I'm sure the answer is probably something simple, or some combination I haven't tried... but it's certainly escaping me at the moment. The relevant (I think) part of my config follows. The usernames in the mentioned passwd and shadow files are in the 'user' format (ie. not 'user@realm'). --snip-- mail_location = mbox:/vhome/%l/home/%n/mail:INBOX=/var/spool/vmail/%l/%n auth_username_format = %n passdb passwd-file { args = /etc/vmail/shadow.%l } userdb passwd-file { args = /etc/vmail/passwd.%l } login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c --snip-- Hints and suggestions appreciated! Cheers, >>>>> Mike <<<<<

2 3

[Dovecot] removing IMAP keywords?
by martin f krafft 25 Aug '07

25 Aug '07

Hi there, I found that with an IMAP command like <unique-leader> STORE 1 +FLAGS (testflag) I can set arbitrary flags on mails through the dovecot IMAP daemon. This rules. Now I wonder, however, how I can remove those flags, which become properties of the folder, really. For instance, after the above, SELECT on the containing folder gives: * FLAGS (\Answered \Flagged \Deleted \Seen \Draft testflag) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft testflag \*)] Flags permitted. Even if I remove the flag from all messages or even delete all messages in the folder, the flag stays on the folder. Is there an IMAP way of removing flags from a folder? Also, does someone know where I can find specification on what characters are allowed for keywords? RFC 3501 is strangely quiet on this, or I am blind. Thanks, -- martin; (greetings from the heart of the sun.) \____ echo mailto: !#^."<*>"|tr "<*> mailto:" net@madduck "gilmour's guitar sounds good whether you've got a bottle of cider in your hand or a keyboard and a mouse." -- prof. bruce maxwell spamtraps: madduck.bogus(a)madduck.net

4 6

[Dovecot] Dovecot IMAP/POP3 Proxy with LDAP
by Raphael Bittencourt S. Costa 24 Aug '07

24 Aug '07

Hello all, I'm having problems to make Dovecot proxy work, I configured it following dovecot's site. See my test below: It accepts login and password and then closes the connection. bastion01:~/build# telnet localhost 110 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user raphael.costa(a)xxxx.com.br +OK pass xxxxxx +OK Logged in. Connection closed by foreign host. See that it get the host information but still try to access the mbox locally. Aug 16 16:22:36 bastion01 dovecot: auth(default): ldap(raphael.costa(a)xxxx.com.br,127.0.0.1): bind: dn=cn=raphael.costa,ou=xxxx.com.br,ou=accounts,o=comMail Aug 16 16:22:36 bastion01 dovecot: auth(default): client out: OK 2 user=raphael.costa(a)xxxx.com.br host=mailserver-01.xxxx.com.br Aug 16 16:22:36 bastion01 dovecot: auth(default): master in: REQUEST 1 3894 2 Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): maildir: access(/dev/null/Maildir, rwx): failed: Not a directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): maildir: couldn't find root dir Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox: root: access(/dev/null/mail, rwx) failed: Not a directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox: root: access(/dev/null/Mail, rwx) failed: Not a directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox: checking if we are chrooted: Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox autodetect: data= Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox autodetect: has .imap/: stat(/.imap) failed: No such file or directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox autodetect: has inbox: stat(/inbox) failed: No such file or directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox autodetect: has mbox: stat(/mbox) failed: No such file or directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox: root mail directory not found My dovecot-ldap.conf: pass_attrs = uid=user,userPassword=password,mailMessageStore=userdb_home,qmailUID=userdb_uid,qmailGID=userdb_gid,proxy,mailHost=host What am I doing wrong? Raphael Costa

3 4

[Dovecot] [PATCH] Deliver doesn't enforce userdb quotas
by Sergio Lopez 24 Aug '07

24 Aug '07

Hello all, While configuring the latest stable version of Dovecot (1.0.3), I've noticed that "deliver" always uses the quota arguments found in the configuration file, completely ignoring what userdb sends to it through the authentication service. This doesn't happen in the previous version I was used (1.0.rc15, comes with Debian "etch"). After digging a little into the code, I've found that "expand_envs" is being called after "auth_client_put_user_env", thus clobbering the "QUOTA" environment variable. The attached patch changes "expand_envs" to avoid setting "QUOTA" if it has been exported before. Thanks! -- Sergio López - <sergio.lopez(a)nologin.es> Nologin Consulting S.L. - http://nologin.es

2 1

[Dovecot] max_mail_processes
by Tony Tsang 24 Aug '07

24 Aug '07

Hello, I have some doubts about max_mail_process option on dovecot.conf. When I set to 3, only 2 clients can be logged in at the same time. when I set it to 2, only 1 clients can be logged in. Why is the maximum number of concurrent clients is always 1 less than max_mail_process? Is any other process is also counted as mail_process other than imap and pop3? Tony

2 1

[Dovecot] Dovecot on different server than MTA
by FORMER 03 | Baltasar Cevc 24 Aug '07

24 Aug '07

Hi, I'm setting up our new mail system using dovecot as mailbox server. As our goal is to have many many small redundant (virtual) servers as components, for example a mailhub (just relaying mail) and a frontend smtp server (just accepting or denying mail in the first place and then forwarding it to the mailhub), etc. I want to run Dovecot on a different server than the main MTAs. The mailbox server is the only service that cannot be made redundant in an easy way (the servers don't have common storage and we can't add that easily), thus I prefer not to have it on the same server as the relay. Is there a best practice to do that? My current ideas are either to implement a stripped-down Postfix in the Dovecot server or to use some qpsmtpd setup there, both just to call the Dovecot delivery program. SMTP will be the communication protocol for the components except dovecot. (e.g. the virus scanner will be implemented as SMTP proxy). I'm quite bad at ASCII art, but I'll try anyways to illustrate the setup: I <--> [public incoming MX] -------------\ N | T \|/ E <--> [customer mailrelay] -----> [Postfix Mailhub] <====> virusscanner R | | N <-------outgoing mails-------------/ | E | T <--> [dovecot mailstore] <-mail delivery Each of the subsystems will be on a different virtual server in order to have small systems with distinct functions and to improve scalability. Everything except the dovecot server is planned to be duplicated on two different hardware machines (e.g. mx-in1 on server1, mx-in2 on server 2, mailhub1 on server1, mailhub2 on server2, virusscanner on server 2 and 3, etc. or something similar). Thanx, Baltasar -- _____ FORMER 03 GmbH _____ infanteriestra§e 19 haus 6 eg _____ 80797 muenchen _____ www.former03.de _____ phone +49 - 176 - 23 22 08 22

3 2

[Dovecot] Couldn't init INBOX: BUG: Unknown internal error
by Philipp Schmid 24 Aug '07

24 Aug '07

hi, I'm getting quite a few of these in the logs of our new dovecot mail server: Aug 20 09:50:03 mail2 dovecot: POP3(vwc406): Couldn't init INBOX: BUG: Unknown internal error Aug 20 09:50:03 mail2 dovecot: POP3(vwc406): Mailbox init failed top=0/0, retr=0/0, del=0/0, size=0 we migrated from courier and other mailboxes work. any idea what the cause might be or how I can fix it? greets philipp mail1:/home/vwc406# ls -la total 168 drwx------ 14 vmail vmail 4096 Aug 20 01:48 . drwxrwxrwx 2297 vmail vmail 69632 Aug 20 02:08 .. drwx------ 6 vmail vmail 4096 Aug 19 21:09 .Drafts drwx------ 6 vmail vmail 4096 Aug 19 21:09 .Junk drwx------ 6 vmail vmail 4096 Aug 19 21:09 .Sent drwx------ 6 vmail vmail 4096 Aug 19 21:09 .Trash drwx------ 10 vmail vmail 4096 Apr 28 2006 .openwebmail drwx------ 5 vmail vmail 4096 Apr 28 2006 .saved-drafts drwx------ 5 vmail vmail 4096 Apr 28 2006 .saved-messages drwx------ 5 vmail vmail 4096 Apr 28 2006 .sent-mail drwx------ 2 vmail vmail 4096 Jun 10 19:01 courierimapkeywords -rw-r--r-- 1 vmail vmail 47 May 13 15:44 courierimapsubscribed -rw-r--r-- 1 vmail vmail 621 Jun 10 19:01 courierimapuiddb -rw-r--r-- 1 vmail vmail 1582 Aug 7 15:56 courierpop3dsizelist drwx------ 2 vmail vmail 4096 Aug 7 15:56 cur -rw------- 1 vmail vmail 1157 Aug 19 23:55 dovecot-uidlist -rw------- 1 vmail vmail 396 Aug 19 23:27 dovecot.index -rw------- 1 vmail vmail 16384 Aug 19 23:29 dovecot.index.cache -rw------- 1 vmail vmail 528 Aug 19 23:27 dovecot.index.log drwx------ 2 vmail vmail 4096 Aug 7 15:56 new -rw-r--r-- 1 vmail vmail 23 Aug 19 23:55 subscriptions drwx------ 2 vmail vmail 4096 Aug 7 15:56 tmp mail1:~# dovecot --version 1.0.3 mail1:~# dovecot -n # 1.0.3: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_ca_file: /infrastructure/certs/gd_intermediate_bundle.crt ssl_cert_file: /infrastructure/certs/_.netmonic.com.crt ssl_key_file: /infrastructure/certs/_.netmonic.com.key disable_plaintext_auth: no shutdown_clients: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_greeting: Ready. login_processes_count: 10 login_max_processes_count: 256 mail_extra_groups: mail mail_location: maildir:/home/%h mmap_disable: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape- eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %f pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private prefix: INBOX. inbox: yes auth default: mechanisms: plain login digest-md5 cram-md5 ntlm apop username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@# username_translation: @# passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail

2 1

[Dovecot] Log Message Disconnected: Disconnected
by Jackie Hunt 24 Aug '07

24 Aug '07

We just started running Dovecot this summer at our campus. Overall things have gone very well, and performance have improved since moving off of U of Wash. We have run into an issue with a user running Thunderbird 2.0.0.6 on Solaris. He is seeing a very long response time (20mins+) on his first mailbox selection each morning when he comes into work. I looked at the Dovecot log, and the only think I can see that might be a bit out of the ordinary is two Disconnected messages that happen about 30 minutes apart each morning: Aug 17 04:54:08 host dovecot: IMAP(uname): Disconnected: Disconnected Aug 17 05:24:09 host dovecot: IMAP(uname): Disconnected: Disconnected The disconnected messages for other users say "Disconnected: Logged Out". I don't know for sure if these messages are related to his problem. Can anyone can shed some light on why Dovecot might indicate a "double disconnect"? Thanks, Jackie --- Jackie Hunt ACNS Voice: (970) 663-3789 Colorado State University FAX: (970) 491-1958 Fort Collins, CO 80523 Email: jackie.hunt(a)colostate.edu

2 2

[Dovecot] Enabling IMAP namespaces for existing folders
by Phil Edwards 24 Aug '07

24 Aug '07

Hi. We're using dovecot 1.0.3 with a very very simple setup; specifically, there are no namespaces defined. Users have been puttering away happily for many months, creating subfolders and whatnot with (almost) zero problems. We'd like to start taking advantage of shared IMAP folders. I've been reading over the dovecot wiki and have only one question that I don't see documented. The docs point out that if we define any namespaces, we must also explicitly define the private previously-default one. My question is: are there any migration or transition steps that must be taken there? Will clients' configuration need to be modified in any way when, e.g., their existing IMAP folders suddenly become part of a private namespace? Thanks for the newbie help. -- Phil Edwards

2 1