February 2008 - dovecot

[Dovecot] Quota + MySQL
by Matt Rude 05 Feb '08

05 Feb '08

Hello, Im having problems getting Dovecot to read the quota info from MySQL. My current dovecot.conf file is below. If I run the user_query of: user_query = SELECT 1000 AS uid, 1000 AS gid, maildir AS home FROM mailbox WHERE username = '%u' AND active = '1' Everything works fine but if I run the user_query of: user_query = SELECT 1000 AS uid, 1000 AS gid, maildir AS home, concat('quota=maildir:storage=', floor( mailbox.quota / 1024 )) AS quota FROM mailbox WHERE username = '$u' AND active = '1' if I were to run the query from MySQL the I get: +------+------+----------------------------------+------------------------------+ | uid | gid | home | quota | +------+------+----------------------------------+------------------------------+ | 1000 | 1000 | mattrude.com/lists@mattrude.com/ | quota=maildir:storage=512000 | +------+------+----------------------------------+------------------------------+ If I run the above query I am unable to log into the server: Feb 4 20:06:11 dovecot: imap-login: Internal login failure: user=<lists(a)mattrude.com mythtv(a)mattrude.com From=akstcaloprestimnsdgs(a)alopresti.com File=/tmp/clamav/virus.7Q >, method=PLAIN, rip=192.168.1.10, lip=192.168.1.1, TLS ## Dovecot configuration file #protocols = imap imaps pop3 pop3s protocols = imap imaps login_user = postfix listen = ssl_listen = ssl_disable = no ssl_cert_file = /etc/pki/dovecot/certs/dovecot.pem ssl_key_file = /etc/pki/dovecot/private/dovecot.pem auth_cache_size = 128 auth_cache_ttl = 600 mail_location = maildir:/var/spool/virtualmailboxes/%d/%u/imap/:INBOX=/var/spool/virtualmailboxes/%d/%u/:INDEX=/var/spool/virtualmailboxes/%d/%u/imap/index/ protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } protocol lda { postmaster_address = postmaster(a)mattrude.com hostname = samantha.mattrude.com mail_plugins = cmusieve mail_plugins = quota sieve_global_path = /var/spool/sieve/dovecot.sieve mail_plugin_dir = /usr/lib/dovecot/lda auth_socket_path = /var/run/dovecot/auth-master } auth default { mechanisms = plain digest-md5 cram-md5 userdb sql { args = /etc/dovecot-mysql.conf } passdb sql { args = /etc/dovecot-mysql.conf } user = root count = 2 } dict { } plugin sql { quota = maildir:storage=1048576 quota = maildir:ignore=Trash } If anyone sees what im missing please let me know Thanks -Matt

1 1

[Dovecot] NULL for password and proxy fields
by bill-dovecot＠carpenter.ORG 04 Feb '08

04 Feb '08

In the course of experimenting with getting dovecot proxying to work, I took a guess at two things. These work fine for me, but now I'm wondering if they are "as designed" or just a lucky accident that might stop working in the future. (I'm using dovecot 1.0.rc17, which is the included version in Ubuntu Feisty. (I am aware that some details change in v1.1, and I'm not worried about that right now.) http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy 1. The wiki page says about password forwarding, "Make sure that the authentication succeeds with any given password. You can do this by using empty passwords." I didn't know exactly now to interpret that last part, so I tried returning NULL as the value of the "password" field for proxy cases. That seems to make dovecot skip the password check will forwarding the user-submitted password to the proxy target host. Is that the intent of that part of that wiki page? 2. It looks like any value at all for the "proxy" field in the passdb lookup turns proxying on. The one exception is a value of NULL for "proxy", in which case proxying is not turned on and proxy-related other fields are ignored. Is that how it's intended to work? If someone can give and informend confirmation that this is as-designed, I can add some clarifying remarks on those points on the wiki page. Thanks. -- bill-dovecot(a)carpenter.ORG (WJCarpenter) PGP 0x91865119 38 95 1B 69 C9 C6 3D 25 73 46 32 04 69 D6 ED F3

4 5

[Dovecot] appending domain based on port
by Eric Hester 04 Feb '08

04 Feb '08

I am looking for a way to append a domain to unqualified user names based on the port that the client connected to. Like this: port 9110 - @test.com port 9111 - @other.com port 9112 - @third.com it looks like auth-default-realm does this, but you can only specify it once for the whole process. I know I could do this by running a separate copy of dovecot attached to each port in question, but I would like to do it all in one process if possible. Other questions I have, if I use the auth-default-realm: 1) does it happen before auth lookup I assume? 2) do I have to define the domain i use here as an auth-realm in addition to default?

2 9

[Dovecot] Quota Override
by Michel Bulgado 03 Feb '08

03 Feb '08

Hi People I use the dovecot version 1.0.10 , in my config I have set a global quota value = 10 MB but I want to override for some users this value , getting from my ldap other value like = 30 MB. Dovecot obtain this value from ldap: (((((Feb 1 12:12:26 gandalf dovecot: auth(default): client out: OK 1 user=michel(a)home.com quota= maildir:storage=30240))))) Feb 1 12:12:26 gandalf dovecot: auth(default): ldap(michel(a)home.com,127.0.0.1): result: mail(user)=michel(a)home.com quota(quota= maildir:storage)=30240 Feb 1 12:12:26 gandalf dovecot: auth(default): ldap(michel(a)home.com,127.0.0.1): bind: dn=CN=Usuario Michel,OU=Computacion,OU=Home,DC=home,DC=com Feb 1 12:12:26 gandalf dovecot: auth(default): client out: OK 1 user=michel(a)home.com quota= maildir:storage=30240 Feb 1 12:12:26 gandalf dovecot: auth(default): master in: REQUEST 1 27697 1 Feb 1 12:12:26 gandalf dovecot: pop3-login: Login: user=<michel(a)home.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Feb 1 12:12:26 gandalf dovecot: auth(default): master out: USER 1 michel(a)home.com uid=503 gid=503 home=/var/storage/virtualmail/home.com/ Feb 1 12:12:26 gandalf dovecot: POP3(michel(a)home.com): Loading modules from directory: /usr/lib64/dovecot/pop3 Feb 1 12:12:26 gandalf dovecot: POP3(michel(a)home.com): Module loaded: /usr/lib64/dovecot/pop3/lib10_quota_plugin.so Feb 1 12:12:26 gandalf dovecot: POP3(michel(a)home.com): Effective uid=503, gid=503 Feb 1 12:12:26 gandalf dovecot: POP3(michel(a)home.com): maildir: data=/var/storage/virtualmail/home.com/michel Feb 1 12:12:26 gandalf dovecot: POP3(michel(a)home.com): maildir: root=/var/storage/virtualmail/home.com/michel, index=/var/storage/virtualmail/home.com/michel, control=, inbox= but not override the global quota set in dovecot.conf = 10 MB my dovecot.conf # 1.0.10: /etc/dovecot.conf listen: * login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:/var/storage/virtualmail/%d/%n mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: verbose: yes debug: yes passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: static args: uid=virtualmail gid=virtualmail home=/var/storage/virtualmail/%d/ userdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: prefetch socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: virtualmail plugin: quota: maildir:storage=10240 dovecot-ldap.conf user_attrs = mail=user,MailQuota=quota= maildir:storage Suggestions? Thanks

2 3

[Dovecot] auth default : passwd-file Can't open file: Permission denied
by Freese Notis 02 Feb '08

02 Feb '08

Hello, I'm attempting to migrate from an existing dovecot .99 install to dovecot 1.0.rc15 on a fresh up to date CentOs 5.1. I'm not sure what's causing this permissions error on startup - I've tried 777,644, and 600 chmods but it's always this same error: Feb 1 12:43:05 ns2 dovecot: Dovecot v1.0.rc15 starting up Feb 1 12:43:06 ns2 dovecot: Auth process died too early - shutting down Feb 1 12:43:06 ns2 dovecot: auth(default): passwd-file /var/spool/virtual/passwd: Can't open file: Permission denied Feb 1 12:43:06 ns2 dovecot: child 16411 (auth) returned error 89 Feb 1 12:43:06 ns2 dovecot: Temporary failure in creating login processes, slowing down for now Here's some more information from the shell: # dovecot -n # /etc/dovecot.conf login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_user: vmail mail_location: maildir:/var/spool/virtual/%d/%n mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: passwd-file args: /var/spool/virtual/passwd userdb: driver: static args: uid=vmail gid=vmail home=/var/spool/virtual/%d/%n # ls -l /var/spool/virtual/passwd -rw------- 1 vmail vmail 37639 Jan 31 14:27 /var/spool/virtual/passwd #and the ls -l of /var/spool and /virtual: drwxr-xr-x 23 root root 4096 Jan 31 17:26 var drwxr-xr-x 16 root root 4096 Jan 31 18:56 spool drwxrwxr-x 109 vmail vmail 4096 Feb 1 00:33 virtual the format of the file is similar to this: fake@example.com:{PLAIN}pass adam@example.com:{PLAIN}text I tried searching first but couldn't find anything other than similar config examples that seemed to confirm my config was setup right. Any suggestions? -- Adam

3 4

[Dovecot] Postfix, mailbox_command, Dovecot deliver, LDAP and mail_location
by Patrick Ben Koetter 02 Feb '08

02 Feb '08

I am trying to tell Dovecot deliver to use $mail_location as the location to store mail for system users. From the docs I've read <http://wiki.dovecot.org/MailLocation> I believe this is possible, but mail to my system users always gets delivered to their /home/<USERNAME> homedirectory. Here's what I've done so far: # Postfix main.cf mailbox_command = /usr/lib/dovecot/deliver # Dovecot # dovecot-ldap.conf user_attrs = mailHomeDirectory=home,mailUidNumber=uid,mailGidNumber=gid,mailQuota=quota=maildir:storage,mail=mailHomeDirectory Above you can see, I query for $mail as documented in <http://wiki.dovecot.org/UserDatabase>. # dovecot.conf # dovecot -n # 1.0.5: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/mail.state-of-mind.de.crt ssl_key_file: /etc/ssl/private/mail.state-of-mind.de.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no mail_extra_groups: mail mail_location: maildir:~ mail_debug: yes maildir_copy_with_hardlinks: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): outlook-idle netscape-eoh delay-newmail imap_client_workarounds(imap): outlook-idle netscape-eoh delay-newmail imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login digest-md5 cram-md5 ntlm passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: virtual group: virtual What am I missing? TIA, p@rick -- state of mind Agentur für Kommunikation, Design und Softwareentwicklung Patrick Koetter Tel: 089 45227227 Echinger Strasse 3 Fax: 089 45227226 85386 Eching Web: http://www.state-of-mind.de Amtsgericht München Partnerschaftsregister PR 563

3 11

[Dovecot] Bug handling zero-byte files in maildirs
by Aria Stewart 02 Feb '08

02 Feb '08

I managed to get a bunch of zero-byte files in my maildirs today, and Dovecot choked completely (at least for pop3 users); It wouldn't download any messages at all, and the mailbox would often say "-ERR [IN-USE]" when doing a STAT Aria

2 1

[Dovecot] Dovecot, LDAP and something akin to Postfix' "table search order" from virtual deliver.
by Pawel Sawicki 01 Feb '08

01 Feb '08

Hi. /* The short version. */ Is there a way to mimic Postfix' "table search order" in Dovecot's LDAP configuration of pass_filter/user_filter? /* Here goes the detailed description :) */ Just to quote the http://www.postfix.org/virtual.8.html: --- TABLE SEARCH ORDER (...) The search order is as follows. The search stops upon the first successful lookup. (...) o The user(a)domain.tld address, without address exten- sion, is looked up next. o Finally, the recipient @domain is looked up. --- Basicaly this allows to have separate users assigned addresses like j.doe(a)example.com (first account), j.smith(a)example.com (second account) and at the same time to have a "catch all" anything(a)example.com mailbox (for the administrator e.g.). What do I need it for? To have dovecot-lda working. Why? I want Sieve :) The test data may look as follows: account #1: + mail: j.doe(a)example.com + mailAlternateAddress: j.c.doe(a)example.com account #2: + mail: j.smith(a)example.com + mailAlternateAddress: j.t.smith(a)example.com account #3 (administrator): + mail: bofh(a)example.com + mailAlternateAddress: @example.com (means - anything possible) The filter I used is (more or less - for both pass_filter and user_filter): (|(mail=%u)(mailAlternateAddress=%u)(mailAlternateAddress=@%d)) Just for testing purposes I've stripped off some irrelevant data (like checking if the account is active), since that made the filter about 140 characters long ;) The trouble is when there're both a "catch all" and a true account that are linked to different accounts. As an example, if I try to send mail to "j.doe(a)example.com" I receive: dovecot: auth(default): ldap(j.doe(a)example.com): Multiple replies found for user Which is of course true, since the filter returns "account #2" and "account #3". What I'd like to get? I'd like to set the filter to: (|(mail=%u)(mailAlternateAddress=%u)) Where "%u" is expanded to "j.doe(a)example.com" during the first run Then, if dovecot can't find any user that would match this literaly it should retry the search operation, but now with "@example.com" as the "%u". I've tried to fiddle with the filter itself, but I see any reasonable way of doing it. I don't even know if it is possible at all. Could anyone give me a hint? Or maybe it's already on someone's whish list? Some final info. * I've followed the examples on dovecot.org website: http://wiki.dovecot.org/LDA#head-dacb9b9a1f19c3ea86bb6f8caa3d64e3ddad9ef8 * Here's the dovecot's master.conf entry: dovecot unix - n n - - pipe flags=DRhu user=mail:mail argv=/usr/libexec/dovecot/deliver -d ${recipient} Best regards! Pawel Sawicki

2 2