January 2008 - dovecot

[Dovecot] I/O leak: 0x804d580
by Frank Elsner 31 Jan '08

31 Jan '08

Hello *, I'm running dovecot 1.0.10 on a Fedora 6 with this configuration # 1.0.10: /usr/local/dovecot/etc/dovecot.conf base_dir: /var/run/dovecot/ protocols: imap imaps pop3 pop3s ssl_cert_file: /usr/local/dovecot/etc/mailbox.pem ssl_key_file: /usr/local/dovecot/etc/mailbox.key disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/local/dovecot/libexec/dovecot/imap-login login_executable(imap): /usr/local/dovecot/libexec/dovecot/imap-login login_executable(pop3): /usr/local/dovecot/libexec/dovecot/pop3-login login_greeting: TU-Berlin.DE POP3-/IMAP Service ready login_log_format_elements: %u %r %c login_processes_count: 16 login_max_processes_count: 256 verbose_proctitle: yes mail_location: maildir:/var/Mail/Boxes/%1u/%u mailbox_idle_check_interval: 15 maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/local/dovecot/libexec/dovecot/imap mail_executable(imap): /usr/local/dovecot/libexec/dovecot/imap mail_executable(pop3): /usr/local/dovecot/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/dovecot/lib/dovecot/pop3 mail_log_prefix: %Ls(%u): imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-ext ra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra- mailbox-sep imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login anonymous count: 16 passdb: driver: ldap args: /usr/local/dovecot/etc/dovecot-ldap.conf userdb: driver: static args: uid=777 gid=12 plugin: quota: maildir:ignore=Trash This workes fine but today these messages came up Jan 21 14:54:27 mailbox dovecot: imap(mich0731): Connection closed Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1455) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1255) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1300) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1295) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1292) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1290) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1218) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1214) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1212) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1210) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1208) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1206) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1198) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1196) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1194) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1168) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1166) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (1146) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (970) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (940) Jan 21 14:54:27 mailbox dovecot: I/O leak: 0x804d580 (926) What has happened? Regards ______________________________________________________________ Frank Elsner / c/o Technische Universitaet Berlin | ____________/ tubIT [BD], Sekr. E-N 50 | | Einsteinufer 17 | | Phone: +49 30 314 23897 D-10587 Berlin | | eMail: Frank.Elsner(a)TU-Berlin.DE Germany __________________| |_________________________________________________________| in dubio pro exim

2 2

[Dovecot] Gnus and dovecot time out
by Richard G Riley 31 Jan '08

31 Jan '08

Could someone suggest what the solution here is? Dovecot is terminating the connection to Gnus after a certain period of activity. It's my own mail server so no need to worry about "hogging resources". Should/could Dovecot be configured to keep the connection alive, or should Gnus be programmed to automatically reopen the conneection? The current problem that one can not leave an IMAP group if the connection is cut by the server. Here is the text posted and replied to on the gnus usenet: ,---- | I have the same problem as the article I link and reproduce below. Is | there a way to get Gnus to keep an IMAP session open without using a | daemon to check for all new messages regularly? | | http://osdir.com/ml/emacs.gnus.user/2006-02/msg00133.html | | ,---- | | Subject: Gnus closing imap connection | | List-id: "Announcements and discussions for GNUS, the GNU Emacs Usenet newsreader $in English$" <info-gnus-english.gnu.org> | | | | My IMAP connection closes and Gnus does not reopen it. I have to go to | | the "servers buffer" and do "O" to reopen. Then in a while it closes | | again. | | | | In the " *nnimap* localhost" buffer I see this: | | | | === | | * BYE Disconnected for inactivity.^M | | - Peer has closed the GNUTLS connection | | | | Process imap finished | | === | | | | Any idea how to fix it? | | | | | | -- | | vedm | | | | | | | `---- `---- ,---- | Same here...there is only line like: | | "dovecot: 2008-01-31 08:50:38Info: IMAP(gour): Disconnected for | inactivity" | | in dovecot's log. | | Any workaround is appreciated... | | Sincerely, | Gour `----

2 1

[Dovecot] Multiple copies of a message
by Anne Wilson 31 Jan '08

31 Jan '08

I have a problem and I don't know which part of the mail chain could be causing it, although dovecot does seem to be the most logical source. I get multiple copies of messages to my Inbox. I have just deleted 24 copies of a newsletter from Computer Shopper. The worst example I have seen of this had more than 90 copies. This doesn't happen to any subfolder of Inbox, just Inbox itself. The problem started about 10-14 days ago, on the old mail server (running Mandriva 2007.1). The new server runs CentOS and exhibits the same problem. I'd be interested in any comments, as my efforts to track it down have got nowhere. Anne

5 9

[Dovecot] Plugin Trash don't work ?
by Sebastien Andreatta 31 Jan '08

31 Jan '08

Hello, I have a problem with the trash plugin. i'm not English, but if i ave understand this http://wiki.dovecot.org/Plugins/Trash , if a mailbox is full (90% for example) and i want to delete a mail, the plugin Tras, delete a mail in mailbox specified in a file ... I have this : dovecot.conf : protocol imap { [.....] mail_plugins = quota imap_quota trash } plugin { trash = /etc/dovecot-trash.conf } And in dovecot-trash.conf : # Spam mailbox is emptied before Trash 1 Spam # Trash mailbox is emptied before Sent 2 Trash # If both Sent and "Sent Messages" mailboxes exist, the next oldest message # to be deleted is looked up from both of the mailboxes. 3 Sent 3 Sent Messages I have 3 mail in a 20Mb quota mailbox : 2 in Mailbox (5.1mb both) 1 in Trash (6.2Mb) When i try to delete a mail from my mailbox i have a error and i only see this in maillog : Jan 28 15:49:37 soez dovecot: child 28398 (imap) killed with signal 11 I can't receive mail and i can't delete because i exceed quota Thanks for your help !! Number :-) _________________________________________________________________ Changez votre Live en un clic ! http://get.live.com

2 3

[Dovecot] Rename file opened for read-write -- cannot edit subscriptions
by Jack Schmidt 31 Jan '08

31 Jan '08

Howdy, Here is a problem with fix affecting dovecot-1.0.10 (and 1.1rc13). On a linux system's CIFS mounted filesystem, it is not possible to rename a file opened read-write: $ sleep 5 >> .subscriptions.lock & mv .subscriptions.lock .subscriptions mv: cannot move `.subscriptions.lock' to `.subscriptions': Text file busy This causes problems in editing subscriptions, as the new subscription list is still open for writing before it is renamed in: lib-storage/subscription-file/subscription-file.c line 169 in dovecot version 1.0.10 (and 1.1rc13) This is an unpatched linux 2.6.21-5, CIFS mounted filesystem from a windows 2003 sp2 server. The documentation for rename(2) indicates that it is allowed to return an error when the file is already opened, so perhaps the file should be closed before the replace. Should this be done in file_dotlock_replace (before line 672) generally? Here is a patch that does so: diff -rw -U3 dovecot-1.0.10/src/lib/file-dotlock.c dovecot-1.0.10-patch/src/lib/file-dotlock.c --- dovecot-1.0.10/src/lib/file-dotlock.c 2007-12-11 13:52:08.000000000 -0500 +++ dovecot-1.0.10/src/lib/file-dotlock.c 2008-01-23 08:53:33.000000000 -0500 @@ -635,7 +635,7 @@ struct dotlock *dotlock; struct stat st, st2; const char *lock_path; - int fd; + int fd, old_errno; dotlock = *dotlock_p; *dotlock_p = NULL; @@ -669,6 +669,14 @@ } } + if (dotlock->fd != -1) { + old_errno = errno; + if (close(dotlock->fd) < 0) + i_error("close(%s) failed: %m", dotlock->path); + dotlock->fd = -1; + errno = old_errno; + } + if (rename(lock_path, dotlock->path) < 0) { i_error("rename(%s, %s) failed: %m", lock_path, dotlock->path); file_dotlock_free(dotlock);

2 1

Re: [Dovecot] dovecot Digest, Vol 57, Issue 55
by Sean Smitz 31 Jan '08

31 Jan '08

I'm trying to configure PAM authentication and I'm having some issues. I'm using RHEL 5 and included below are excerpts from my relevant configuration and log files: */var/log/maillog* Jan 19 10:55:39 flacpmail dovecot: imap-login: Aborted login: user=<test>, method=PLAIN, rip=::ffff:128.8.244.15, lip=::ffff:128.8.244.161, TLS */etc/dovecot.conf* passdb pam { args = session=yes dovecot # also tried args = session=yes * } */etc/pam.d/dovecot* #%PAM-1.0 auth required pam_unix.so nullok auth include system-auth account include pam_unix.so session include system-auth Thanks in advnaced, ------------------------------------------------------------------------ Sean Smitz System Administrator Fujitsu Laboratories of America 8400 Baltimore Ave, Suite 302 College Park, MD 20740 (301) 486-0298 (Desk)

2 3

[Dovecot] login_processes_count & login_max_processes_count question
by Ken A 31 Jan '08

31 Jan '08

re: > # Maximum number of login processes to create. The listening process count > # usually stays at login_processes_count, but when multiple users start logging > # in at the same time more extra processes are created. To prevent fork-bombing > # we check only once in a second if new processes should be created - if all > # of them are used at the time, we double their amount until the limit set by > # this setting is reached. > #login_max_processes_count = 128 If the server is attacked by a password guessing routine, or just gets very busy, and login process count reaches 128, will the created processes ever get killed, or will dovecot continue to run 128 processes until it's restarted? Thanks, Ken -- Ken Anderson Pacific.Net

2 1

[Dovecot] Using Dovecot with nsswitch for LDAP on Solaris
by Laurent Blume 31 Jan '08

31 Jan '08

Hello all, I'm having some issues configuring dovecot 1.0.10 on a Solaris 10 box, that uses LDAP¨for its accounts. The local accounts (in /etc/passwd) are authenticated properly and work as expected, but all accounts from the LDAP fail authentication. Those are declared for the system using PAM and NSS (/etc/pam.conf and /etc/nsswitch.conf are configured accordingly). Currently, there are WU-IMAP and Qpopper installed and working, and neither of them needed any special configuration to use the login, they're just using Unix auth. I tried various configurations, based on what I read in the wiki documentation, but nothing works, even the passwd userdb/passdb, which *should* if I understand correctly. Trying to use PAM in dovecot fails, too. Any idea what I'm doing wrong, or pointers to hints? Google returned little information about configuring Dovecot on Solaris, and none that was useful. TIA, Laurent # /opt/csw/sbin/dovecot --version 1.0.10 Sample of failure in the dovecot logs: Jan 30 18:11:00 balif dovecot: [ID 107833 local1.info] auth(default): new auth connection: pid=13210 Jan 30 18:11:09 balif dovecot: [ID 107833 local1.info] auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=xxxxx Jan 30 18:11:09 balif dovecot: [ID 107833 local1.info] auth-worker(default): pam(lblume,127.0.0.1): lookup service=dovecot Jan 30 18:11:10 balif dovecot: [ID 107833 local1.info] auth(default): client out: FAIL 1 user=lblume Jan 30 18:11:17 balif dovecot: [ID 107833 local1.info] imap-login: Aborted login (1 authentication attempts): user=<lblume>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured My latest config try: # /opt/csw/sbin/dovecot -n # 1.0.10: /opt/csw/etc/dovecot.conf base_dir: /var/run/dovecot/ syslog_facility: local1 protocols: imap pop3 listen(default): *:60143 listen(imap): *:60143 listen(pop3): *:60110 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /opt/csw/libexec/dovecot/imap-login login_executable(imap): /opt/csw/libexec/dovecot/imap-login login_executable(pop3): /opt/csw/libexec/dovecot/pop3-login mail_location: mbox:~/:INBOX=/var/mail/%u mail_executable(default): /opt/csw/libexec/dovecot/imap mail_executable(imap): /opt/csw/libexec/dovecot/imap mail_executable(pop3): /opt/csw/libexec/dovecot/pop3 mail_plugin_dir(default): /opt/csw/lib/dovecot/imap mail_plugin_dir(imap): /opt/csw/lib/dovecot/imap mail_plugin_dir(pop3): /opt/csw/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: pam args: blocking=yes setcred=yes dovecot userdb: driver: passwd args: blocking=yes -- / Leader de Projet & Communauté | I'm working, but not speaking for \ G11N http://fr.opensolaris.org | Bull Services http://www.bull.com / FOSUG http://guses.org |

2 2

[Dovecot] Using dovecot proxy as multi-account aggregator?
by Mika Boström 31 Jan '08

31 Jan '08

Good day. I am trying to build a rather weird setup. The basic idea is to have a relatively simple IMAP client and let dovecot do the actual connections. So far both the documentation and my trials on this front have been rather fruitless. The desired components: - 1 dovecot server, acting as a proxy - 1 master account - 1 client connection - 0 "real" user accounts, so no local mail storage at all - N real accounts, spread over different domains - mails from different remote accounts combined to the single client connection - outgoing server for mails selected by the address of the remote account Since the proxy setup can use name(a)domain.tld as destination user, it would appear that the setup is not impossible. Hence my two questions: 1) Is it possible? 2) If yes, how in the name of all that is good and holy do I configure that? And believe me, I am fully aware that for most setups a full-featured client or fetchmail would be the easier path. Thank you for any and all help in advance, -- Mika Boström / mika.bostrom(a)nomovok.com

2 1

[Dovecot] Dovecot + Windows AD + Postfix + quota
by Maciej Paczesny 31 Jan '08

31 Jan '08

Hello, I'm almost sure that all topics and problems mentioned below were separately posted to this list already. But after spending 4 days on searching, I did'n find a compilation similar to my case. So maybe some of you guys, are able to answer to help me solve this: 1. I'd like to use userdb and passdb of Dovetcot to work with Windows AD. 2. I have to use them both because I'd like to use LDA to serve for my Postfix. 3. I DO NOT want tou use any external programs (ie PAM) to talk to AD server. 4. I was able to make my system partially running - I CAN bind to AD database, and confirm user/password. 5. I want to get follownig attributes: home directory (OK, I could put it statically), uid/gid (OK, it could be static too) and MAIL QUOTA (my users have different values - no 'statics'). To help you on this subject, here are my configs/data: OS => Gentoo Linux uname -a => 2.6.15-gentoo-r7 #1 SMP PREEMPT Tue Mar 21 18:08:57 CET 2006 i686 Intel(R) Xeon(TM) CPU 2.40GHz GenuineIntel GNU/Linux dovecot --version => 1.1.beta14 dovecot -n => protocols: imaps ssl_listen: *:993 ssl_cert_file: /etc/ssl/dovecot/newcert.pem ssl_key_file: /etc/ssl/dovecot/newkey.pem ssl_parameters_regenerate: 0 ssl_cipher_list: ALL:!LOW:!SSLv2 disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login verbose_proctitle: yes mail_uid: 5000 mail_gid: 5000 mail_location: maildir:~/.Maildir/ mail_debug: yes mail_executable: /usr/libexec/dovecot/var mail_plugins: quota imap_quota auth default: mechanisms: login plain username_format: %Lu verbose: yes debug: yes debug_passwords: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 438 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: quota: maildir:storage=10240000000:ignore=Trash sieve: /var/vmail/lpr/%u/.Maildir/.dovecot.sieve grep -v '^ *$#.*$\?$' dovecot-ldap.conf hosts = 10.10.10.8:3268 uris = ldap://10.10.10.8:3268 dn = lpr\Administrator dnpass = *** auth_bind = yes auth_bind_userdn = lpr\%u base = dc=lpr,dc=com,dc=pl ldap_version = 3 user_attrs = uidNumber=uid,gidNumber=gid,postOfficeBox=home,carLicense=quota user_filter = (&(cn=%u)) pass_attrs = cn=user,userPasword=password pass_filter = (&(cn=%u)) Windows AD => Windows 2003 R2 PL ----------------------- Logs: Jan 28 00:37:40 gentoo dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=10.10.10.2 rip=10.10.10.29 Jan 28 00:37:40 gentoo dovecot: auth(default): client out: CONT 1 Jan 28 00:37:40 gentoo dovecot: auth(default): client in: CONT 1 AG1wYWN6ZXNueQBOZGYxNjEzODI= Jan 28 00:37:40 gentoo dovecot: auth(default): client out: OK 1 user=xxx Jan 28 00:37:40 gentoo dovecot: auth(default): master in: REQUEST 1 16026 1 Jan 28 00:37:40 gentoo dovecot: auth(default): ldap(xxx,10.10.10.29): user search: base=dc=lpr,dc=com,dc=pl scope=subtree filter=(&(cn=xxx)) fields=uidNumber,gidNumber,postOfficeBox,carLicense Jan 28 00:37:40 gentoo dovecot: auth(default): master out: USER 1 xxx Jan 28 00:37:40 gentoo dovecot: imap-login: Login: user=<xxx>, method=PLAIN, rip=10.10.10.29, lip=10.10.10.2, TLS Jan 28 00:37:40 gentoo dovecot: IMAP(xxx): Loading modules from directory: /usr/lib/dovecot/imap Jan 28 00:37:40 gentoo dovecot: IMAP(xxx): Module loaded: /usr/lib/dovecot/imap/lib10_quota_plugin.so Jan 28 00:37:40 gentoo dovecot: IMAP(xxx): Module loaded: /usr/lib/dovecot/imap/lib11_imap_quota_plugin.so Jan 28 00:37:40 gentoo dovecot: IMAP(xxx): Effective uid=5000, gid=5000, home= Jan 28 00:37:40 gentoo dovecot: IMAP(xxx): Quota root: name=storage=10240000000 backend=maildir args=ignore=Trash Jan 28 00:37:41 gentoo dovecot: IMAP(xxx): Namespace: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes Jan 28 00:37:41 gentoo dovecot: IMAP(xxx): maildir: data=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.Maildir/ Jan 28 00:37:41 gentoo dovecot: IMAP(xxx): maildir++: root=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.Maildir, index=, control=, inbox=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.Maildir Jan 28 00:37:41 gentoo dovecot: IMAP(xxx): mkdir(/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.Maildir/cur) failed: Permission denied the second case is that i receive following errors in log file: Jan 28 00:47:31 gentoo dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=10.10.10.2 rip=10.10.10.29 Jan 28 00:47:31 gentoo dovecot: auth(default): client out: CONT 1 Jan 28 00:47:31 gentoo dovecot: auth(default): client in: CONT 1 AG1wYCN6ZXNuew9OZGYxxAEzODIe= Jan 28 00:47:31 gentoo dovecot: auth(default): client out: OK 1 user=xxx Jan 28 00:47:31 gentoo dovecot: auth(default): master in: REQUEST 1 16170 1 Jan 28 00:47:31 gentoo dovecot: auth(default): prefetch(xxx,10.10.10.29): passdb didn't return userdb entries Jan 28 00:47:31 gentoo dovecot: auth(default): userdb(xxx,10.10.10.29): user not found from userdb Jan 28 00:47:31 gentoo dovecot: auth(default): master out: NOTFOUND 1 when i use prefetch driver and with change like this one below to ldap.conf file: pass_attrs = uid=user, userPassword=password, postOfficeBox=userdb_home, uidNumber=userdb_uid, gidNumber=userdb_gid, carLicense=userdb_quota (and, yes, i know about the home directory path. it is easy to make it real and working (change mail_location) - it is not a problem.) the case and question is: how can i get a QUOTA (in my case - carLicense) attribute from AD/LDAP? is it shown somewhere? how can it be verified? the value "storage=10240000000 " is a static one written in config and the same for all users. is there any kind of manual on how to make AD and Dovecot running and returning uid, gid, home, quota etc attributes without PAM? Regards, -- Maciej Paczesny maciunio2(a)gmail.com ***Gdyby nie wymyślono elektryczności, siedziałbym przed kompem przy świeczkach***

2 2