March 2008 - dovecot - dovecot.org

[Dovecot] 1.0.13: mail_extra_groups alternative syntax?
by Dâniel Fraga 11 Mar '08

11 Mar '08

"Warning: mail_extra_groups setting was often used insecurely so it is now deprecated, use mail_access_groups or mail_privileged_group instead" I use the following: mail_extra_groups = mail nogroup Because I have the real and virtual accounts. What's the correct way to replace the above line? It seems that mail_privileged_group only accepts one group, but I need two. Any suggestion? Thank you! -- Linux 2.6.24: Arr Matey! A Hairy Bilge Rat! http://u-br.net http://www.abusar.org/FELIZ_2008.html

2 2

[Dovecot] Cingular/ATT killing my IMAP/POP connections with bad TCP FIN packets?
by Peter Tripp 11 Mar '08

11 Mar '08

Hello all, I've got an issue I'm almost positive is not related to Dovecot, but was wondering whether anyone else has had similar problems or could duplicate my results. Please accept my apologies if this is considered off-topic or this issue is actually just a symptom of my own ignorance. Also, sorry for how long this email got, I knew I wouldn't be able to explain my issue in a paragraph. I'm having issues connecting to my dovecot mail server, running with SSL under Solaris while connected via Cingular/ATT wireless, specifically via the wap.cingular access point. This server is not firewall, either via software or hardware and sits on a fully routable internet IP address. A few days after we made the transition from UW-IMAP to Dovecot, I could no longer connect from my Nokia E61i to our server (IMAP w/ SSL, port 993). Until today, I just assumed I did something to anger the Nokia gods and just did without mobile email. Today, someone walked in with an iPhone and could only connect to our server via wifi connections, not over Cingular/ATT's EDGE network. When I looked into it, I saw the same behavior with my E61i which also has wifi. Here's where it gets weird. I can connect to other IMAP servers (imap.gmail.com, mail.columbia.edu) but not to our departmental mail server running dovcot (paradox.psych.columbia.edu) All three are on port 993 using IMAP with SSL. Ping, SSH and web traffic don't have any difficulty getting through, but IMAP/POP seems to be prematurely disconnected. So I did a little digging, by tethering my Macbook with Thunderbird through my phone I saw the following traffic in Wireshark between me and my server (Paradox): Me: SYN Paradox: SYN, ACK Me: ACK Me: Client Hello Paradox: ACK Paradox: FIN, ACK Me: ACK Paradox: FIN, ACK Me: ACK -dead- Maybe I'm misunderstanding something here, but it looks likely that ATT is sending a FIN which kills the connection before my mail client can even get out of the gate. I thought it might be related to SSL so I setup a inetd to launch a secondary dovecot process listening on port 997 without encryption. I see the same behavior, without the "Client Hello" above. I've also run it on other ports and seen the same behavior. Needless to say, both SSL/noSSL work without issue from local and a variety of remote networks, except ATT. Tomorrow I'll do some sniffing to confirm that Cingular is sending a fake TCP FIN packet, but I've got to wait till the network folks set me up a port in mirror mode. I did not paste the full Wireshark output as it has long lines which would look hella ugly in email, so here it is nicely formatted: http://duckies.org/~peter/damncingular.txt Has anyone else seen similar behavior or know what might be causing this? It looks like ATT/Cingular is killing the connection before it really ever even gets started, but I have no idea why. I've spent a couple hours on the phone with them and not been able to contact anyone who might know why this just started happening when it had been working before. Can anyone replicate the same behavior, you shouldn't need an un/pw as it doesn't get that far, just need an ATT customer with tethering setup to capture an attempt at connecting to the server (paradox.psych.columbia.edu) Ideas? I'm totally stumped, but it sounds a lot like the sort of thing Comcast was doing to Bittorrent for their users, except they were injecting RST instead of FIN. Thanks in advance for any help anyone might be able to offer me. --Peter

2 1

[Dovecot] Setting individual SSL/TLS settings with OpenLDAP
by Patrick Ben Koetter 10 Mar '08

10 Mar '08

I am using OpenLDAP to read Dovecot User settings and want to use TLS for user_attrs and pass_attrs queries. So I set "tls = yes" and it kept failing until I told the OpenLDAP ldap client in /etc/ldap/ldap.conf where the CA certificate can be found. So far so good. Now just in case... could I tell dovecot to read the OpenLDAP client settings from a non default configuration file e.g. /etc/dovecot/ldaprc. I know Cyrus SASL can do this with the ldapdb plugin and I'd be interested if this is possible with Dovecot too. TIA, p@rick -- state of mind Agentur für Kommunikation, Design und Softwareentwicklung Patrick Koetter Tel: 089 45227227 Echinger Strasse 3 Fax: 089 45227226 85386 Eching Web: http://www.state-of-mind.de Amtsgericht München Partnerschaftsregister PR 563

2 2

[Dovecot] Quota handling on NFS Maildir
by mikkel＠euro123.dk 10 Mar '08

10 Mar '08

Hi Throughout the v. 1.1 betas I have been receiving casual reports that quota isn't handled correctly (running Maildir). At the moment I'm running 1.1beta14 but this has been occurring in all other 1.1 betas as well (I don't know for sure whether this was also an issue in 1.0, but I think so). In some earlier betas the issue where worse than is is now (due to improved NFS locking I guess). Apparently this occurs when the user shifts between pop3 and IMAP. maildirsize gets updated whenever mails are coming in, no problems there. But mails removed aren't always counted as removed - as a result some users quota keep growing until they reach a limit and e-mails start getting rejected. I have been doing some testing and it appears that the updating of the file maildirsize is sometimes delayed. I figure this is because Dovecot collects theese changes in the transactions or index file and then once in a while writes them to maildirsize. Could there be a week spot in the code somewhere that allow for this kind of error when the use of POP3 and IMAP are mixed (I think this happens even when POP3 and IMAP access aren't concurrent)? Both my index files and mail storage are located on NFS. Regards, Mikkel This is the output of dovecot -n: # 1.1.beta14: /local/config/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full load (more than 768). Either grow the limit or change login_max_processes_count and max_mail_processes settings log_path: /local/log/dovecot.run info_log_path: /local/log/dovecot.run protocols: imap pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /opt/freeware/dovecot-1.1b14/var/run/dovecot/login login_executable(default): /opt/freeware/dovecot-1.1b14/libexec/dovecot/imap-login login_executable(imap): /opt/freeware/dovecot-1.1b14/libexec/dovecot/imap-login login_executable(pop3): /opt/freeware/dovecot-1.1b14/libexec/dovecot/pop3-login login_process_per_connection: no verbose_proctitle: yes first_valid_uid: 105 first_valid_gid: 105 mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /opt/freeware/dovecot-1.1b14/libexec/dovecot/imap mail_executable(imap): /opt/freeware/dovecot-1.1b14/libexec/dovecot/imap mail_executable(pop3): /opt/freeware/dovecot-1.1b14/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota trash mail_plugins(imap): quota imap_quota trash mail_plugins(pop3): quota mail_plugin_dir(default): /opt/freeware/dovecot-1.1b14/lib/dovecot/imap mail_plugin_dir(imap): /opt/freeware/dovecot-1.1b14/lib/dovecot/imap mail_plugin_dir(pop3): /opt/freeware/dovecot-1.1b14/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(imap): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login digest-md5 cram-md5 apop ntlm cache_size: 4096 cache_ttl: 120 passdb: driver: sql args: /local/config/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /local/config/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: quota: maildir quota_rule2: Trash:storage=10M:messages=100 trash: /local/config/dovecot-trash.conf

3 8

Re: [Dovecot] messages downloading repeatedly to mozilla/seamonkey pop3 client
by Ben Julian 10 Mar '08

10 Mar '08

Asheesh, Sorry about the long delay. I tried upgrading to version 1.0.12, which I understood to be the newest release for CentOS 5. I am still experiencing the problem. What should I try next? Thanks, Ben On Wed, Mar 5, 2008 at 5:51 PM, Ben Julian <ben.julian(a)gmail.com> wrote: > Just read "[Dovecot] Problem with Thunderbird hang, multiple retry to > .Sent/.Draft" thread, and I see that I have the same version and > really need to upgrade. I will try that first. > -Ben > > > > On Wed, Mar 5, 2008 at 4:48 PM, Ben Julian <ben.julian(a)gmail.com> wrote: > > output of dovecot -n: > > > > # /etc/dovecot.conf > > login_dir: /var/run/dovecot/login > > login_executable(default): /usr/libexec/dovecot/imap-login > > login_executable(imap): /usr/libexec/dovecot/imap-login > > login_executable(pop3): /usr/libexec/dovecot/pop3-login > > first_valid_uid: 100 > > mail_executable(default): /usr/libexec/dovecot/imap > > mail_executable(imap): /usr/libexec/dovecot/imap > > mail_executable(pop3): /usr/libexec/dovecot/pop3 > > mail_plugin_dir(default): /usr/lib/dovecot/imap > > mail_plugin_dir(imap): /usr/lib/dovecot/imap > > mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 > > pop3_client_workarounds(default): > > pop3_client_workarounds(imap): > > pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh > > auth default: > > passdb: > > driver: pam > > userdb: > > driver: passwd > > > > Version of dovecot: 1.0.rc15 > > Came as the bundled pop3/imap client with CentOS5, version 2.6.18-8.el5 > > > > Thanks Asheesh, > > Ben > > > > > > > > > > On Wed, Mar 5, 2008 at 3:27 PM, Asheesh Laroia <asheesh(a)asheesh.org> wrote: > > > On Wed, 5 Mar 2008, Ben Julian wrote: > > > > > > > All changes resulted in only a brief (1-2hr) cessation of the problem. > > > > > > > > I've subscribed for a month or so now and searched the archives, but > > > > if I missed a solution to this in there, I apologize. > > > > > > That sounds like a drag. Let's see if we can help you. > > > > > > Can you paste the results of dovecot -n into a message? That way we can > > > see your whole configuration. What version of Dovecot are you using, and > > > where did you get it from? > > > > > > (I'm expecting you to tell me you're running some really old version, and > > > I further expect that if you upgrade your woes will go away; but let's > > > see!) > > > > > > -- Asheesh. > > > > > > -- > > > A long-forgotten loved one will appear soon. > > > > > > Buy the negatives at any price. > > > > > >

1 0

[Dovecot] Multiple SSL certs
by Daniel L. Miller 10 Mar '08

10 Mar '08

Does 1.1 support multiple certs? -- Daniel

4 4

[Dovecot] Maildirsize automatically (re)build
by Jan van den Berg 10 Mar '08

10 Mar '08

Hi, Im testing with 1.1RC1. I read here: http://wiki.dovecot.org/Quota/Maildir "If you configure quota limits in Dovecot (e.g. quota=maildir:storage=102400(kilobytes)), Dovecot makes sure that this header is kept up to date. If the file does not exist, it's simply rebuilt." This is my query: password_query = SELECT username as user, username as userdb_user, passwd as password, 1001 as userdb_uid, 1001 as userdb_gid, concat('maildir:storage=', quota, 'M:ignore=Spam\ e\-mail') AS userdb_quotarule, 'Trash:storage=20M' as userdb_quota_rule2 FROM mailboxen WHERE username = '%n' Also in the main config I use: mail_plugins: quota imap_quota plugin: quota: maildir So I use maildir:storage in my config. However when I delete the maildirsize (for testing purposes) it doesn't get automatically recreated? According to the Wiki it should right? Cheers, Jan

3 8

[Dovecot] Sorting by Sender Name
by Daniel Watts 10 Mar '08

10 Mar '08

Dear Timo, Posted this originally to the squirrelmail list but they said that sorting is done server side so concluded I needed to talk to you: ============= I feel there is an error in the logic of the sort by From column. If you sort by this column, the messages are re-ordered in alphabetical order using the *email address* as the sorted word. However most people these days have their clients configured to include a sender's name. For example: Daniel Smith <daniel(a)hotmail.com>. In the message list the name 'Daniel Smith' is then shown, not the email. When sorting by From it should use the name as the sorted element and NOT the email address. If my email was zippydan(a)yahoo.com, my emails, showing as 'Daniel Watts' would come right near the bottom of the list rather than with the other 'D's near the top. I know my email clients (Thunderbird and Outlook) both act like this - using the name if available and if not THEN using (and displaying) the email address. This seems to make the most sense to me. Thanks as always for your attention. Daniel

2 2

[Dovecot] invoking LDA in .forward
by Jeremie Bouttier 10 Mar '08

10 Mar '08

Hi, We're running a Debian server with system users where the mail is by default delivered by postfix and procmail, before being served by Dovecot (mail_location = mbox:~/Mail:INBOX=/var/mail/%u) or read by local MUAs, depending on users' preferences. For people using mostly remote MUAs, it might be interesting to use Dovecot's LDA. I read on http://wiki.dovecot.org/LDA that this is possible using .forward files, however this fails on our system with : file_lock_dotlock() failed with mbox file /var/mail/user: Permission denied (/var/mail is 2775 for root:mail as recently discussed). Is there a possible fix ? I also read that deliver is not designed to be run setuid root, I guess this also applies to being run setgid mail... Regards, Jeremie

2 3

Re: [Dovecot] Wrong message information reported shortly after delivery
by Ron Avriel 10 Mar '08

10 Mar '08

> Thanks, in my previous tests I didn't use quota plugin with deliver > which was needed to notice this. The problem is: > > 1. deliver adds "message appended" to index file > 2. quota plugin runs for a while > 3. deliver updates filename<->uid mapping in dovecot-uidlist > Thanks for the quick answer. Why does it take four seconds (!) from the time dovecot first reports an invalid message information until the correct information is reported? The time is measured for the delivery of a 1KB message to an empty mailbox on a completely idle system. 2008-03-09 17:00:41.449833 Sent 1011 bytes to test1(a)imap4test.com 2008-03-09 17:00:41.472034 No messages in INBOX. Waiting... 2008-03-09 17:00:42.480654 No messages in INBOX. Waiting... 2008-03-09 17:00:43.487617 **** ERROR: Got invalid RFC822.SIZE 0: 1 (FLAGS (\Recent) INTERNALDATE "01-Jan-1970 00:00:00 +0000" RFC822.SIZE 0 UID 63) 2008-03-09 17:00:44.494382 **** ERROR: Got invalid RFC822.SIZE 0: 1 (FLAGS (\Recent) INTERNALDATE "01-Jan-1970 00:00:00 +0000" RFC822.SIZE 0 UID 63) 2008-03-09 17:00:45.501444 **** ERROR: Got invalid RFC822.SIZE 0: 1 (FLAGS (\Recent) INTERNALDATE "01-Jan-1970 00:00:00 +0000" RFC822.SIZE 0 UID 63) 2008-03-09 17:00:46.550623 **** ERROR: Got invalid RFC822.SIZE 0: 1 (FLAGS (\Recent) INTERNALDATE "01-Jan-1970 00:00:00 +0000" RFC822.SIZE 0 UID 63) 2008-03-09 17:00:47.593704 Got valid RFC822.SIZE 1509: 1 (FLAGS (\Recent) INTERNALDATE "09-Mar-2008 17:00:41 +0200" RFC822.SIZE 1509 UID 63) Thanks again, Ron ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs

1 0