December 2008 - dovecot

[Dovecot] Panic 1.1.x
by Andre Hübner 09 Dec '08

09 Dec '08

Hi, its me again. I still cant use any 1.1 edition because of recurrent panics... At the moment i try 1.1.7, i have again panics and problems with Next message unexpectedly lost dovecot -n # 1.1.7: /etc/dovecot.conf # OS: Linux 2.6.24.4 i686 SUSE LINUX 10.1 (i586) protocols: imap imaps pop3 pop3s ssl_ca_file: /path/path/*.servername.com.bundle.crt ssl_cert_file: /path/path/*.servername.com.crt ssl_key_file: /path/path/*.servername.com.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: servername.com mailserver ready. login_process_per_connection: no login_processes_count: 1 max_mail_processes: 100 verbose_proctitle: yes mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u mail_cache_min_mail_count: 30 mail_debug: yes lock_method: flock mbox_read_locks: dotlock mbox_very_dirty_syncs: yes mail_drop_priv_before_exec: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): mail_log mail_plugins(imap): mail_log mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle netscape-eoh tb-extra-mailbox-sep delay-newmail imap_client_workarounds(imap): outlook-idle netscape-eoh tb-extra-mailbox-sep delay-newmail imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): oe-ns-eoh outlook-no-nuls auth default: verbose: yes passdb: driver: shadow userdb: driver: passwd i got some coredumps. first is pop3-panic 2nd imap-panic: gdb /usr/libexec/dovecot/pop3 /home/popuser/username/core GNU gdb 6.4 Copyright 2005 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i586-suse-linux"...Using host libthread_db library "/lib/libthread_db.so.1". Core was generated by `pop3 [username 217.229.109.202]'. Program terminated with signal 6, Aborted. warning: Can't read pathname for load map: Eingabe-/Ausgabefehler. Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /lib/libgcc_s.so.1...done. Loaded symbols for /lib/libgcc_s.so.1 #0 0xffffe410 in __kernel_vsyscall () (gdb) bt full #0 0xffffe410 in __kernel_vsyscall () No symbol table info available. #1 0xb7edb7d0 in raise () from /lib/libc.so.6 No symbol table info available. #2 0xb7edcea3 in abort () from /lib/libc.so.6 No symbol table info available. #3 0x080b71cd in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:150 backtrace = 0x80e3520 "pop3 [0x80b71c0] -> pop3 [0x80b721a] -> pop3 [0x80b6b1c] -> pop3(i_stream_read+0xda) [0x80bb69a] -> pop3 [0x80bd57b] -> pop3(i_stream_read+0x2d) [0x80bb5ed] -> pop3 [0x80ad32e] -> pop3(i_stream_read+0"... #4 0x080b721a in i_internal_fatal_handler (type=LOG_TYPE_PANIC, status=0, fmt=0x80cac30 "file %s: line %d (%s): assertion failed: (%s)", args=0xbfab4104 "\"\204\r\bQ") at failures.c:430 No locals. #5 0x080b6b1c in i_panic (format=0x80cac30 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:197 args = 0xbfab4104 "\"\204\r\bQ" #6 0x080bb69a in i_stream_read (stream=0x80f4590) at istream.c:81 _stream = (struct istream_private *) 0x80f4568 ret = 6 __PRETTY_FUNCTION__ = "i_stream_read" #7 0x080bd57b in i_stream_limit_read (stream=0x80f1c50) at istream-limit.c:59 left = <value optimized out> ret = 0 pos = 0 __PRETTY_FUNCTION__ = "i_stream_limit_read" #8 0x080bb5ed in i_stream_read (stream=0x80f1c78) at istream.c:78 _stream = (struct istream_private *) 0x80f1c50 ret = <value optimized out> __PRETTY_FUNCTION__ = "i_stream_read" #9 0x080ad32e in i_stream_header_filter_read (stream=0x80f1d30) at istream-header-filter.c:313 mstream = <value optimized out> ret = 135208240 pos = 0 __PRETTY_FUNCTION__ = "i_stream_header_filter_read" #10 0x080bb5ed in i_stream_read (stream=0x80f1d58) at istream.c:78 _stream = (struct istream_private *) 0x80f1d30 ret = <value optimized out> __PRETTY_FUNCTION__ = "i_stream_read" #11 0x080bb6fd in i_stream_read_data (stream=0x80f1d58, data_r=0xbfab4268, size_r=0xbfab4264, threshold=0) at istream.c:322 ret = 135205628 read_more = false __PRETTY_FUNCTION__ = "i_stream_read_data" #12 0x080b20fc in message_get_body_size (input=0x80f1d58, body=0x80f1380, has_nuls=0x0) at message-size.c:76 msg = (const unsigned char *) 0x0 i = <value optimized out> size = <value optimized out> missing_cr_count = <value optimized out> __PRETTY_FUNCTION__ = "message_get_body_size" #13 0x0807cc81 in index_mail_init_stream (mail=0x80f1280, hdr_size=0xbfab4340, body_size=0xbfab432c, stream_r=0xbfab4354) at index-mail.c:818 data = (struct index_mail_data *) 0x80f12fc #14 0x08064c82 in mbox_mail_get_stream (_mail=0x80f1280, hdr_size=0xbfab4340, body_size=0xbfab432c, stream_r=0xbfab4354) at mbox-mail.c:312 mail = <value optimized out> #15 0x0807b9c6 in index_mail_get_virtual_size (_mail=0x80f1280, size_r=0xbfab43f0) at index-mail.c:365 data = (struct index_mail_data *) 0x80f12fc hdr_size = {physical_size = 0, virtual_size = 0, lines = 0} body_size = {physical_size = 580703221134869339, virtual_size = 13811206796352623048, lines = 134770482} input = (struct istream *) 0xbfab43f0 old_offset = 0 __PRETTY_FUNCTION__ = "index_mail_get_virtual_size" #16 0x08058cf2 in client_create (fd_in=0, fd_out=1, namespaces=0x80ec478) at client.c:85 storage = <value optimized out> ---Type <return> to continue, or q <return> to quit--- inbox = 0x80cab79 "INBOX" client = (struct client *) 0x80ecf68 flags = <value optimized out> errmsg = <value optimized out> error = MAIL_ERROR_NONE __PRETTY_FUNCTION__ = "client_create" #17 0x0805aaf3 in main (argc=Cannot access memory at address 0x69fc ) at main.c:235 No locals. imap-core: gdb /usr/libexec/dovecot/imap /home/popuser/username1/core GNU gdb 6.4 Copyright 2005 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i586-suse-linux"...Using host libthread_db library "/lib/libthread_db.so.1". Core was generated by `imap [username1 80.243.53.138]'. Program terminated with signal 6, Aborted. warning: Can't read pathname for load map: Eingabe-/Ausgabefehler. Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/lib/dovecot/imap/lib20_mail_log_plugin.so...done. Loaded symbols for /usr/lib/dovecot/imap/lib20_mail_log_plugin.so Reading symbols from /lib/libnss_files.so.2...done. Loaded symbols for /lib/libnss_files.so.2 Reading symbols from /lib/libgcc_s.so.1...done. Loaded symbols for /lib/libgcc_s.so.1 #0 0xffffe410 in __kernel_vsyscall () (gdb) bt full #0 0xffffe410 in __kernel_vsyscall () No symbol table info available. #1 0xb7e807d0 in raise () from /lib/libc.so.6 No symbol table info available. #2 0xb7e81ea3 in abort () from /lib/libc.so.6 No symbol table info available. #3 0x080c451d in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:150 backtrace = 0x80f28b0 "imap [0x80c4510] -> imap [0x80c456a] -> imap [0x80c3e6c] -> imap [0x80ca8a4] -> imap(i_stream_read+0x2d) [0x80c893d] -> imap(i_stream_read_data+0x1d) [0x80c8a4d] -> imap(message_parse_header_next+0x7c"... #4 0x080c456a in i_internal_fatal_handler (type=LOG_TYPE_PANIC, status=0, fmt=0x80d7dcc "file %s: line %d (%s): assertion failed: (%s)", args=0xbfa4e634 "Cw\016\bT") at failures.c:430 No locals. #5 0x080c3e6c in i_panic (format=0x80d7dcc "file %s: line %d (%s): assertion failed: (%s)") at failures.c:197 args = 0xbfa4e634 "Cw\016\bT" #6 0x080ca8a4 in i_stream_limit_read (stream=0x810c4f0) at istream-limit.c:83 left = <value optimized out> ret = -1 pos = 30 __PRETTY_FUNCTION__ = "i_stream_limit_read" #7 0x080c893d in i_stream_read (stream=0x810c518) at istream.c:78 _stream = (struct istream_private *) 0x810c4f0 ret = <value optimized out> __PRETTY_FUNCTION__ = "i_stream_read" #8 0x080c8a4d in i_stream_read_data (stream=0x810c518, data_r=0xbfa4e708, size_r=0xbfa4e704, threshold=30) at istream.c:322 ret = -1079711992 read_more = false __PRETTY_FUNCTION__ = "i_stream_read_data" #9 0x080bc75c in message_parse_header_next (ctx=0x811cc58, hdr_r=0xbfa4e760) at message-header-parser.c:89 msg = ( const unsigned char *) 0x8111564 "\t\t\t\t\t\t\tGefahrenquelle vermeiden/beseitigen/reduzieren\n\t\t\t\t\t\t\tD D \n\t\t\t\t\t\t\t \n\t\t\t\t\t\t\tSicherheitstechnische Maßnahmen\n\t\t\t\t\t\t\tB B \n\t\t\t\t\t"... i = 6 size = 30 startpos = 29 colon_pos = 0 parse_size = 29 value_pos = <value optimized out> ret = 6 continued = true continues = <value optimized out> crlf_newline = false __PRETTY_FUNCTION__ = "message_parse_header_next" #10 0x080b9de5 in read_header (mstream=0x8112318) at istream-header-filter.c:163 hdr = (struct message_header_line *) 0x0 highwater_offset = <value optimized out> pos = <value optimized out> ret = <value optimized out> matched = false hdr_ret = 1 __PRETTY_FUNCTION__ = "read_header" #11 0x080ba4e7 in i_stream_header_filter_read (stream=0x8112318) at istream-header-filter.c:293 mstream = (struct header_filter_istream *) 0x0 ret = <value optimized out> pos = <value optimized out> __PRETTY_FUNCTION__ = "i_stream_header_filter_read" #12 0x080ba634 in parse_header (mstream=0x8112318) at istream-header-filter.c:335 pos = 159 #13 0x080ba715 in i_stream_header_filter_seek (stream=0x8112318, v_offset=554, mark=false) at istream-header-filter.c:349 mstream = (struct header_filter_istream *) 0x0 ---Type <return> to continue, or q <return> to quit--- #14 0x080c88c9 in i_stream_seek (stream=0x8112340, v_offset=554) at istream.c:155 _stream = (struct istream_private *) 0x8112318 #15 0x080718e3 in mbox_mail_get_physical_size (_mail=0x810cb28, size_r=0xbfa4e908) at mbox-mail.c:255 mail = <value optimized out> data = (struct index_mail_data *) 0x810cba4 input = (struct istream *) 0x8112340 hdr_size = {physical_size = 552, virtual_size = 566, lines = 14} old_offset = 554 body_offset = 162775 body_size = <value optimized out> next_offset = 10982 #16 0xb7f83aec in mail_log_action (dest_trans=<value optimized out>, mail=0x810cb28, event=<value optimized out>, data=0x8108930 "Gel&APY-schte Elemente") at mail-log-plugin.c:305 lt = (struct mail_log_transaction_context *) 0x8115e50 msgid = 0x810d510 "<20081202003003.E428C68341EB4(a)servername.com>" size = <value optimized out> str = (string_t *) 0x80f2620 pool = <value optimized out> #17 0xb7f83d56 in mail_log_copy (t=0x810b0f8, mail=0x810cb28, flags=0, keywords=0x0, dest_mail=0x0) at mail-log-plugin.c:400 _data_stack_cur_id = 4 name = <value optimized out> #18 0x0805a202 in cmd_copy (cmd=0x80fc9d0) at cmd-copy.c:66 client = (struct client *) 0x80fb548 storage = (struct mail_storage *) 0x80fc108 destbox = (struct mailbox *) 0x8108780 t = (struct mailbox_transaction_context *) 0x810b0f8 search_arg = <value optimized out> messageset = 0x8100ad0 "10359" mailbox = 0x8100ad8 "Gel&APY-schte Elemente" src_uidset = <value optimized out> msg = <value optimized out> sync_flags = <value optimized out> imap_flags = <value optimized out> copy_count = 1 uid_validity = <value optimized out> uid1 = <value optimized out> uid2 = <value optimized out> ret = 1 __PRETTY_FUNCTION__ = "cmd_copy" #19 0x0805e529 in cmd_uid (cmd=0x80fc9d0) at cmd-uid.c:26 command = (struct command *) 0x6 cmd_name = 0x8100ac8 "COPY" #20 0x0805eecc in client_command_input (cmd=0x80fc9d0) at client.c:580 client = (struct client *) 0x80fb548 command = <value optimized out> __PRETTY_FUNCTION__ = "client_command_input" #21 0x0805ef75 in client_command_input (cmd=0x80fc9d0) at client.c:629 client = (struct client *) 0x80fb548 command = (struct command *) 0x4c54 __PRETTY_FUNCTION__ = "client_command_input" #22 0x0805f735 in client_handle_input (client=0x80fb548) at client.c:670 _data_stack_cur_id = 3 ret = <value optimized out> remove_io = <value optimized out> handled_commands = false #23 0x0805f94e in client_input (client=0x80fb548) at client.c:725 cmd = <value optimized out> output = (struct ostream *) 0x80fc90c bytes = 46 ---Type <return> to continue, or q <return> to quit--- __PRETTY_FUNCTION__ = "client_input" #24 0x080cc130 in io_loop_handler_run (ioloop=0x80fa9b0) at ioloop-epoll.c:203 ctx = <value optimized out> event = (const struct epoll_event *) 0x80faae8 list = (struct io_list *) 0x80fb5b8 io = (struct io_file *) 0x810caa0 tv = {tv_sec = 1799, tv_usec = 999911} t_id = 2 msecs = <value optimized out> ret = 1 i = 0 j = 0 call = <value optimized out> #25 0x080cb248 in io_loop_run (ioloop=0x80fa9b0) at ioloop.c:320 No locals. #26 0x0806748c in main (argc=Cannot access memory at address 0x4c54 ) at main.c:293 No locals. I did some bugreports in last time and also compiled dovecot with some changes in guidance from timo to let the bug be more understandable but so far nothing helped. i like dovecot but if these bugs not get solved i cannot upgrade my maschines to > 1.0.15 :( Thanks, Andre

1 0

[Dovecot] Mixing MBOX and MAILDIR
by Romer Ventura 09 Dec '08

09 Dec '08

Hello, I have about 100 mboxes, a few with a lot of mails and others with a few mails. I have configured dovecot to use maildir as mail format, but I would like to give users the ability to access their old email located in their old mbox. So all the new mail would be in the ~/Maildir/ and their old or archived email in /home/vmail/mboxmail/%Ln How can I add a namespace to achieve my goal...? namespace private { separator = / hidden = yes prefix = "#mbox/" location = mbox:/home/vmail/mboxmail/%Ln/ } Like that...? Thanks for any inputs...

2 2

[Dovecot] LDA questions
by Romer Ventura 08 Dec '08

08 Dec '08

Hello, I am looking at the docs and I see this: Problems with deliver Namespaces are supported with v1.1 and later. With v1.0 and older versions mails can be delivered only to mailboxes specified by the mail_location setting. But in the dovecot.conf I see: # NOTE: Namespaces currently work ONLY with IMAP! POP3 and LDA currently ignore # namespaces completely, they use only the mail_location setting. I am running 1.1.7 so is that a typo in the dovecot.conf or the wiki page..? Also, I got postfix+dovecot configure to authenticate to Active Directory using pam_krb5 and I am able to login and send emails with pop3 or imap, but unable to receive emails since postfix complaints about the user not being found in the local recipient table. Now I have made a few changes, but I cant get to see deliver complaint, all I see is: postfix/smtpd[19924]: NOQUEUE: reject: RCPT from ............: 550 5.1.1 <test1(a)domain.com>: Recipient address rejected: User unknown in local recipient table; So I think that it is not being passed to deliver... Master.cf has: dovecot unix - n n - - pipe flags=DR user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${recipient} Main.cf has: virtual_mailbox_domains = your.domain.here virtual_transport = dovecot Any ideas..? Thanks Dovecot n # 1.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.16.60-0.21-xenpae i686 SUSE Linux Enterprise Server 10 (i586) protocols: imap imaps pop3 pop3s login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_location: maildir:~/Maildir/ mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): acl mail_plugins(imap): acl mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login username_format: %Ln@%Ud passdb: driver: pam userdb: driver: static args: uid=1001 gid=1000 home=/home/vmail/%Ud/%Ln socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix

6 7

[Dovecot] Just some user input
by Brandon Lamb 08 Dec '08

08 Dec '08

Hi Timo, You may remember some of my mails, I was having unusual high load issues using pop3 with dovecot over nfs, and unusual being the load on anywhere from 1 to 4 servers would run at 2 to 4 for a week then all of a sudden would spike to 60 and higher (saw 150 once). I have been banging my head on the wall for the last 1.5 to 2 months since switching from courier to dovecot, the imap has worked great but the pop3 was a problem out the door. Anyway, I finally tried loading dovecot directly on our raid, all loads across the board dropped to the floor. The single P4 3ghz purrs along at an easy 0.30 load where the 1 to 4 quad core boxes with brand new hardware were loading up to 60 when using nfs. So, my experience has been that maildir, nfs and dovecot as the pop3 server was unusable. I wasnt really sure this whole time, it seemed odd that a single P4 box using nfs and courier pop3 could handle the entire system load but dovecot with the same and more quad cores fell over was weird. Anyway, this is totally not meant as a bashing or anything, just information. Im not a C programmer so I really cant offer anything but my input/observations. Maybe the pop3 part of dovecot isnt really given much love or people are mostly just interested in the imap server? Or maybe most people dont use nfs? Totally just assumptions here. A definite positive here though, after moving dovecot directly to the raid server, wow, our mail TOTALLY hauls ass now. Two of our managers both noticed the huge speed increase. One of them uses pop3 and leave messages on server and has almost 4,000 messages in the inbox on the server, his webmail now loads literally instantly, i click login and count 1 second. That is amazingly fast. I dont have any hard numbers, but before our upgrades his "feeling" was that he seems to remember it taking up to 30 seconds for webmail to load his mailbox. that is an incredible difference. Our webmail uses imap by the way, so this is probably a combination of moving from nfs and switching from courier to dovecot. Ok thanks for your great hard work and sorry for the novel size post.

1 0

[Dovecot] catching authentication failures with LDAP backend
by Udo Rader 06 Dec '08

06 Dec '08

Hi, we have recently been hit by a couple of brute force password attacks against dovecot. So what I want to do now is to add dovecot to fail2ban in order to block further attacks. However, I don't seem to be able to find out password verifification failures for our LDAP based user data. The only thing I see are loads of lines like these in the logfiles: -------CUT------- dovecot: Nov 30 09:09:51 Info: pop3-login: Disconnected: user=<ludovic>, method=PLAIN, rip=217.147.235.52, lip=81.16.98.99 dovecot: Nov 30 09:09:51 Info: pop3-login: Disconnected: user=<luna>, method=PLAIN, rip=217.147.235.52, lip=81.16.98.99 dovecot: Nov 30 09:09:51 Info: pop3-login: Disconnected: user=<luke>, method=PLAIN, rip=217.147.235.52, lip=81.16.98.99 -------CUT------- Googling the web I found that PAM based authentication obviously gives a matchable error message, but for some reasons the ldap backend does not - or does it? Any pointers highly appreciated :-) dovecot -n says this: -------CUT------- # 1.0.15: /etc/dovecot/dovecot.conf log_path: /var/log/dovecot.log protocols: imaps imap pop3 listen: 81.16.98.99 ssl_listen(default): 81.16.98.99 ssl_listen(imap): 81.16.98.99 ssl_listen(pop3): ssl_cert_file: /etc/bestsolution/ssl/mail.bestsolution.at-cert.pem ssl_key_file: /etc/bestsolution/ssl/mail.bestsolution.at-key.pem ssl_parameters_regenerate: 24 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login first_valid_uid: 9 mail_access_groups: mail mail_privileged_group: mail default_mail_env: mbox:~/mail/:INBOX=/var/mail/%u mail_location: mbox:~/mail/:INBOX=/var/mail/%u mmap_disable: yes lock_method: dotlock maildir_copy_with_hardlinks: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %v.%u auth default: mechanisms: plain digest-md5 cram-md5 login passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix -------CUT------- -- Udo Rader, CTO http://www.bestsolution.at

2 6

Re: [Dovecot] Max OS X 10.5 Mail + Dovecot
by Peter Giessel 05 Dec '08

05 Dec '08

On Friday, December 05, 2008, at 10:45AM, "Chris Cappuccio" <chris(a)nmedia.net> wrote: >People using the new OS X mail client are unable to connect to the unsigned dovecot-mkcert.sh certificate on my Dovecot installations. Turning off SSL fixes the problem. Is there any way to make it work automatically, or do I just have to get the certificates signed? Has anyone figured this one out before? I have an unsigned SSL certificate with Dovecot and connect fine using OSX.5's Mail.app. What do you mean, "unable to connect"? Do you really mean "unable to connect", or do you mean, "an error message comes up every time they try to connect"? If its the latter complaint, please see this document: http://support.apple.com/kb/TA22383 I know it says 10.3 Mail, but the steps to follow are essentially unchanged between 10.3 and 10.5.

2 1

[Dovecot] Max OS X 10.5 Mail + Dovecot
by Chris Cappuccio 05 Dec '08

05 Dec '08

Hi, People using the new OS X mail client are unable to connect to the unsigned dovecot-mkcert.sh certificate on my Dovecot installations. Turning off SSL fixes the problem. Is there any way to make it work automatically, or do I just have to get the certificates signed? Has anyone figured this one out before? Thanks, Chris

1 0

[Dovecot] quota warning for fs quota
by Florian Effenberger 05 Dec '08

05 Dec '08

Hello, I configured my Dovecot to use filesystem (fs) quota. It works fine, the correct free/used space and percentage is being shown to the client. However, the warning feature doesn't seem to work, no mail is being sent, although executing the script standalone works fine. Is quota warning for fs quota supported? I use Dovecot 1.0.10 (Ubuntu package). Thanks, Florian

2 2

[Dovecot] Username changed by dovecot..?
by Romer Ventura 05 Dec '08

05 Dec '08

Hello, I have postfix+dovecot authenticating via LDAP to Active directory and everything is working fine except that some user names get changed by dovecot. # cat dovecot/dovecot-ldap.conf hosts = 192.168.50.30 192.168.50.31 base = ou=HST-Users,dc=h-st,dc=com ldap_version = 3 auth_bind = yes dn = cn=<account>,cn=Users,dc=h-st,dc=com dnpass = <password> user_attrs = sAMAccountName=mail=maildir:/home/vmail/%Ud/%Ln,=gid=1000,=uid=1001 user_filter = (&(objectClass=person)(mail=%u)) pass_filter = (&(objectClass=person)(mail=%u)) I am using the value of ³mail² field from active directory as user name. So here are test users: test1: mail=test1(a)h-st.com test3: mail=test3(a)housigma20.h-st.com test5: mail=test5(a)yomama.com USER TEST1: # telnet localhost pop3 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user test1(a)h-st.com +OK pass houston +OK Logged in. Logs show: dovecot: auth(default): client in: AUTH 1 PLAIN service=pop3 secured lip=127.0.0.1 rip=127.0.0.1 lport=110 rport=43073 resp=<hidden> dovecot: auth(default): ldap(test1(a)h-st.com,127.0.0.1): bind search: base=ou=HST-Users,dc=h-st,dc=com filter=(&(objectClass=person)(mail=test1(a)h-st.com)) dovecot: auth(default): ldap(test1(a)h-st.com,127.0.0.1): no fields returned by the server dovecot: auth(default): client out: OK 1 user=test1(a)h-st.com dovecot: auth(default): master in: REQUEST 7 3526 1 dovecot: auth(default): ldap(test1(a)h-st.com,127.0.0.1): user search: base=ou=HST-Users,dc=h-st,dc=com scope=subtree filter=(&(objectClass=person)(mail=test1(a)h-st.com)) fields=sAMAccountName dovecot: auth(default): ldap(test1(a)h-st.com,127.0.0.1): result: sAMAccountName(mail=maildir:/home/vmail/%Ud/%Ln)=maildir:/home/vmail/H-ST.CO M/test1 dovecot: auth(default): master out: USER 7 test1(a)h-st.com mail=maildir:/home/vmail/H-ST.COM/test1 gid=1000 uid=1001 dovecot: pop3-login: Login: user=<test1(a)h-st.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured The directory was created and everything is fine. USER TEST3: # telnet localhost pop3 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user test3(a)housigma20.h-st.com +OK pass houston -ERR [IN-USE] Internal login failure. Refer to server log for more information. Connection closed by foreign host. Logs show: dovecot: auth(default): client in: AUTH 1 PLAIN service=pop3 secured lip=127.0.0.1 rip=127.0.0.1 lport=110 rport=34057 resp=<hidden> dovecot: auth(default): ldap(test3(a)housigma20.h-st.com,127.0.0.1): bind search: base=ou=HST-Users,dc=h-st,dc=com filter=(&(objectClass=person)(mail=test3(a)housigma20.h-st.com)) dovecot: auth(default): auth(test3(a)housigma20.h-st.com,127.0.0.1): username changed test3(a)housigma20.h-st.com -> test3 dovecot: auth(default): ldap(test3,127.0.0.1): result: uid(user)=test3 dovecot: auth(default): client out: OK 1 user=test3 dovecot: auth(default): master in: REQUEST 8 3859 1 dovecot: auth(default): ldap(test3,127.0.0.1): user search: base=ou=HST-Users,dc=h-st,dc=com scope=subtree filter=(&(objectClass=person)(mail=test3)) fields=sAMAccountName dovecot: auth(default): ldap(test3,127.0.0.1): Unknown user dovecot: auth(default): userdb(test3,127.0.0.1): user not found from userdb ldap dovecot: auth(default): master out: NOTFOUND 8 dovecot: pop3-login: Internal login failure (auth failed, 1 attempts): user=<test3>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured It obvously fails because the username was changed to only %u. Why does it get changed...? Any ideas...? Thanks.. # dovecot -n # 1.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.16.60-0.21-xenpae i686 SUSE Linux Enterprise Server 10 (i586) protocols: imap imaps pop3 pop3s login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_uid: vmail mail_gid: vmail mail_location: maildir:~/Maildir/ mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): acl mail_plugins(imap): acl mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail

2 1

[Dovecot] UID/GID changed
by Albert E. Whale 05 Dec '08

05 Dec '08

I have a problem with Dovecot 1.1.6 after having reset the UID/GID information for a few email accounts. I get the following error: Dec 5 12:26:03 ns6 dovecot: POP3(mike): stat(/home/popuser_mike/Maildir/tmp) failed: Permission denied (euid=1366 egid=1366 missing +x perm: /home/popuser_mike/Maildir) Dec 5 12:26:03 ns6 dovecot: POP3(mike): Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2008-12-05 12:26:03] Dec 5 12:27:40 ns6 dovecot: POP3(mike): stat(/home/popuser_mike/Maildir/tmp) failed: Permission denied (euid=1366 egid=1366 missing +x perm: /home/popuser_mike/Maildir) Dec 5 12:27:40 ns6 dovecot: POP3(mike): Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2008-12-05 12:27:40] Permissions are: [/home/popuser_mike/Maildir] ls -la total 40 drwxrws--- 5 mike mail 4096 Dec 5 12:23 ./ drwxr-xr-x 6 mike mike 4096 Nov 5 14:34 ../ drwx--S--- 2 mike mail 4096 Dec 3 21:20 cur/ -rw-rw---- 1 mike mail 7560 Dec 4 08:02 dovecot.index.log.save -rw-rw---- 1 mike mail 184 Dec 4 08:02 dovecot.index.save -rw-rw---- 1 660 mail 18 Dec 4 08:02 dovecot-uidlist.save -rw-rw---- 1 mike mail 8 Nov 5 19:00 dovecot-uidvalidity -rw-rw---- 1 mike mail 0 Nov 5 19:00 dovecot-uidvalidity.4912338c drwx--S--- 2 mike mail 4096 Dec 5 11:46 new/ drwx--S--- 2 mike mail 4096 Dec 5 11:46 tmp/ What am I missing? -- Albert E. Whale, CHS CISA CISSP Sr. Security, Network and Systems Consultant ------------------------------------------------------------------------ ABS Computer Technology, Inc. <http://www.ABS-CompTech.com> - Email, Internet and Security Consultants

2 1