June 2008 - dovecot - dovecot.org

[Dovecot] v1.1.1: Some files not created with dovecot-shared permissions
by Eduardo M KALINOWSKI 21 Jul '08

21 Jul '08

Hi, I use dovecot-shared to add read permissions to the group in my mail server, which uses virtual users. This is only to ease backups. However, a few files are not created with the permissions in dovecot-shared. I've seen this happen to 'subscriptions', 'maildirfolder' (when dovecot-shared exists; the change to correctly create maildirfolder in this case is very recent), and possibly 'maildirsize' (I'm not sure about this one, it might be exim that is creating it with wrong permissions.) This has been tested in recent snapshot package, from the Debian repository listed at http://wiki.dovecot.org/PrebuiltBinaries. Here's dovecot -n for reference: # 1.1.1: /etc/dovecot/dovecot.conf log_path: /var/log/dovecot/main.log info_log_path: /var/log/dovecot/info.log log_timestamp: %Y-%m-%d %H:%M:%S login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_processes_count: 1 first_valid_uid: 100 mail_privileged_group: mail mail_location: maildir:/home/vmail/%d/%n/INBOX:INDEX=/home/vmail/%d/%n/dovecotidx mail_plugins: quota imap_quota auth default: mechanisms: plain login cram-md5 passdb: driver: passwd-file args: username_format=%n /home/vmail/%d/db/passwd passdb: driver: pam userdb: driver: static args: uid=104 gid=8 home=/home/vmail/%d/%n userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 438 plugin: quota: maildir

2 3

[Dovecot] Upgrade to 1.1 maildir & shared folders problems
by sami＠medusa.tutka.fi 21 Jul '08

21 Jul '08

Hello, We recently upgraded to Dovecot 1.1 from 1.0.5 and we are having few issues: 1) Maildir's are not created anymore for new users if they dont excits, the directories where created before, is this a configuration issue? 2) Cannot subscribe to shared folders, if currently subscribed they work fine but cannot re-subscribe, also i noticed that the control directory for the namespace is not created anymore, before it was, any ideas? //sami conf: 1.1.1: /usr/local/etc/dovecot.conf base_dir: /var/run/dovecot/ protocols: imap pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: ready. login_processes_count: 5 verbose_proctitle: yes first_valid_uid: 1000 mail_location: maildir:~/:INDEX=/var/dovecot/index/%u:CONTROL=/var/dovecot/control/%u mail_nfs_storage: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_process_size: 1024 mail_plugins(default): acl quota imap_quota mail_plugins(imap): acl quota imap_quota mail_plugins(pop3): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle, delay-newmail imap_client_workarounds(imap): outlook-idle, delay-newmail imap_client_workarounds(pop3): namespace: type: private separator: / location: maildir:~/:INDEX=/var/dovecot/index/%u:CONTROL=/var/dovecot/control/%u inbox: yes list: yes subscriptions: yes namespace: type: public separator: / prefix: shared/ location: maildir:/var/mail/jaetut:INDEX=/var/dovecot/jaetut/index/%u:CONTROL=/var/dovecot/jaetut/control/%u list: yes subscriptions: yes auth default: passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: prefetch plugin: quota: fs acl: vfile:/usr/local/etc/dovecot-acls

2 8

[Dovecot] v1.1.rc13 released
by Timo Sirainen 20 Jul '08

20 Jul '08

http://dovecot.org/releases/1.1/rc/dovecot-1.1.rc13.tar.gz http://dovecot.org/releases/1.1/rc/dovecot-1.1.rc13.tar.gz.sig There's always time for one more release candidate. :) I was planning on releasing v1.1.0 a couple of minutes before summer solstice (23:59 UTC according to Wikipedia). Maybe it'll bring luck to the release. :) - mbox: Fixed a crash when adding a new X-IMAPbase: header with keywords. - Message parser: Fixed assert-crash if cached MIME structure was broken. - Squat: Potential crashfix with mmap_disable=yes.

4 5

[Dovecot] exim, LDA, quota
by Marcin Gryszkalis 20 Jul '08

20 Jul '08

Hi I configured Exim with dovecot LDA and added quota (dict/mysql). It works but it seems that dovecot is not reporting situation back to exim process - it looks like Exim returns OK(accepted) to smtp sender before the message is actually delivered - if the quota is exceeded then LDA drops the mail and sends DSN. Is it possible to change that behavior to report problem immediately (within SMTP session)? regards -- Marcin Gryszkalis, PGP 0x9F183FA3 jabber jid:mg@fork.pl, gg:2532994 http://the.fork.pl

2 2

[Dovecot] group ownership of new shared folders
by Simon Michelson 20 Jul '08

20 Jul '08

Between versions 1.0.4 and 1.0.5 there were some changes to the way dovecot-shared group ownership is propogated into new maildirs. Changing the group of new_dir/{tmp,new,cur} was added, but changing the group of new_dir itself was removed. As far as I can tell, this latter change may have been accidental. This patch puts the functionality back, in the 1.1 tree. ---------------------------------- # HG changeset patch # User Simon Michelson <simon(a)inpher.com> # Date 1214444574 -3600 # Branch HEAD # Node ID 1dae5712e81daacb6923f500c0997aca6853ec3a # Parent 3c06e14c4731ee1ffe6d8c36bbdc711e3190cb2c reinstate code to apply gid of dovecot-shared to new maildir directory diff -r 3c06e14c4731 -r 1dae5712e81d src/lib-storage/index/maildir/maildir-storage.c --- a/src/lib-storage/index/maildir/maildir-storage.c Tue Jun 24 13:37:55 2008 +0300 +++ b/src/lib-storage/index/maildir/maildir-storage.c Thu Jun 26 02:42:54 2008 +0100 @@ -539,6 +539,10 @@ static int maildir_create_shared(struct umask(old_mask); return -1; } + if (chown(dir, (uid_t)-1, gid) < 0) { + mail_storage_set_critical(storage, + "chown(%s) failed: %m", dir); + } for (i = 0; i < N_ELEMENTS(maildir_subdirs); i++) { path = t_strconcat(dir, "/", maildir_subdirs[i], NULL); if (chown(path, (uid_t)-1, gid) < 0) {

2 1

[Dovecot] No log for hitting login_max_processes_count?
by Adam McDougall 20 Jul '08

20 Jul '08

I think today just due to increased use, my mail servers hit login_max_processes_count. It wasn't obvious what was happening, logins just weren't acting like they should and sometimes would get disconnected before given a prompt from the server. Something made me think to check if I had too many of certain dovecot processes and I found I had 128 imap-login processes on both servers, but nothing in the logs seemed to point that out for me. Should there be? It would have been alot easier to debug. Also, this seems to be from general use, doesn't seem like a DoS, so is this just a setting I should keep an eye on and increase it by reasonable amounts as needed? Thanks.

3 2

[Dovecot] dovecot-auth assertion failed
by Eric 20 Jul '08

20 Jul '08

Hello, I have been running some tests on a new Dovecot v1.0.13 server and have seen the following message appear in the logs a few times. It appears to occur when there are a lot of requests being sent to the LDAP servers from both Dovecot and Sendmail (I am guessing about this, since I have also seen "Server busy" messages regarding LDAP auth). dovecot: auth(default): file db-ldap.c: line 310 (ldap_conn_retry_requests): assertion failed: (conn->connected) dovecot: auth(default): Raw backtrace: dovecot-auth [0x806daf1] -> dovecot-auth [0x806da0c] -> dovecot-auth [0x8059607] -> dovecot-auth [0x8059b1d] -> dovecot-auth [0x8059b7b] -> dovecot-auth(io_loop_handler_run+0x110) [0x8070c90] -> dovecot-auth(io_loop_run+0x1c) [0x80701cc] -> dovecot-auth(main+0x2fe) [0x805b01e] -> /lib/libc.so.6(__libc_start_main+0xdc) [0x3efdec] -> dovecot-auth [0x8051161] dovecot: child 23178 (auth) killed with signal 6 Dovecot seems to recover from this error and continues to handle auth requests properly. Thanks, Eric

2 1

[Dovecot] Problems with dovecot deliver.
by Dpoke 20 Jul '08

20 Jul '08

Hello all. I am using dovecot 1.1.rc4. Some of my mail deliver without errors. Other mail during its deliver give next errors in logs: Postfix log Jun 16 18:34:17 postfix/local[2730]: A394E292002: to=<dpoke(a)localhost.mail.com>, orig_to=<dpoke@localhost>, relay=local, delay=3013, delays=3008/1.3/0/2.9, dsn=4.3.0, status=deferred (temporary failure) Jun 16 18:34:17 postfix/local[2731]: B5FE7292004: to=<dpoke(a)localhost.mail.com>, orig_to=<dpoke@localhost>, relay=local, delay=2998, delays=2994/0.98/0/2.6, dsn=4.3.0, status=deferred (temporary failure) Jun 16 18:34:18 postfix/local[2731]: 28723292003: to=<dpoke(a)localhost.mail.com>, orig_to=<dpoke@localhost>, relay=local, delay=2993, delays=2989/3.5/0/0.72, dsn=4.3.0, status=deferred (temporary failure) ................................................ Deliver log. (Also I found no other useful information relaying this problem in other dovecot logs.) deliver(dpoke): Jun 16 18:34:15 Info: maildir: data=/opt/home/dpoke//Maildir deliver(dpoke): Jun 16 18:34:15 Info: maildir++: root=/opt/home/dpoke//Maildir, index=, control=, inbox=/opt/home/dpoke//Maildir deliver(dpoke): Jun 16 18:34:15 Info: maildir: data=/opt/home/dpoke//Maildir deliver(dpoke): Jun 16 18:34:15 Info: maildir++: root=/opt/home/dpoke//Maildir, index=, control=, inbox=/opt/home/dpoke//Maildir deliver(dpoke): Jun 16 18:34:16 Error: open(/tmp/dovecot.deliver..1213626856.2732.ad657cfa5dccbc61) failed: Permission denied deliver(dpoke): Jun 16 18:34:16 Error: copy: i_stream_read() failed: Permission denied deliver(dpoke): Jun 16 18:34:16 Info: msgid=: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2008-06-16 18:34:14] deliver(dpoke): Jun 16 18:34:16 Error: open(/tmp/dovecot.deliver..1213626856.2733.ad657cfa5dccbc61) failed: Permission denied deliver(dpoke): Jun 16 18:34:16 Error: copy: i_stream_read() failed: Permission denied deliver(dpoke): Jun 16 18:34:16 Info: msgid=: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2008-06-16 18:34:14] deliver(dpoke): Jun 16 18:34:17 Info: maildir: data=/opt/home/dpoke//Maildir deliver(dpoke): Jun 16 18:34:17 Info: maildir++: root=/opt/home/dpoke//Maildir, index=, control=, inbox=/opt/home/dpoke//Maildir deliver(dpoke): Jun 16 18:34:17 Info: maildir: data=/opt/home/dpoke//Maildir deliver(dpoke): Jun 16 18:34:17 Info: maildir++: root=/opt/home/dpoke//Maildir, index=, control=, inbox=/opt/home/dpoke//Maildir deliver(dpoke): Jun 16 18:34:17 Error: open(/tmp/dovecot.deliver..1213626857.2737.712b51aaca368d64) failed: Permission denied deliver(dpoke): Jun 16 18:34:17 Error: copy: i_stream_read() failed: Permission denied deliver(dpoke): Jun 16 18:34:17 Info: msgid=: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2008-06-16 18:34:17] deliver(dpoke): Jun 16 18:34:17 Error: open(/tmp/dovecot.deliver..1213626857.2736.712b51aaca368d64) failed: Permission denied deliver(dpoke): Jun 16 18:34:18 Error: copy: i_stream_read() failed: Permission denied deliver(dpoke): Jun 16 18:34:18 Info: msgid=: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2008-06-16 18:34:17] ..................................................... This is my dovecot configuration: # 1.0.3: /opt/etc/dovecot.conf protocols: imap listen: 192.168.1.1 ssl_disable: yes disable_plaintext_auth: no login_dir: /opt/var/run/dovecot/login login_executable: /opt/libexec/dovecot/imap-login login_user: nobody login_processes_count: 1 auth default: verbose: yes debug: yes passdb: driver: passwd-file args: /opt/etc/passwd.imap userdb: driver: passwd-file args: /etc/passwd How can I fix this mail delivering problem? Thanks in advance for any ideas/suggestions/answers. And sorry for my bad English ;) -- Ilya Galanin

3 2

[Dovecot] Multiple auth client sockets
by Ulrich Zehl 20 Jul '08

20 Jul '08

I use two seperate Postfix instances as MSAs (so that different policies are simpler to configure), and both of them require Dovecot SASL support. Since Postfix' smtpd is chrooted (at least in the Debian package), the client socket needs to be somewhere under the instance's queue_directory. This means I need two different auth client socket paths. When I simply specify two "client { ... }" in dovecot.conf, the second takes precedence over the first. Besides using a second dovecot instance, which I'd like to avoid, what ways are there to run a second client socket? Ulrich

2 1

[Dovecot] BUG: messages created with permissions not respecting umask
by Thomas Vander Stichele 20 Jul '08

20 Jul '08

Using dovecot 1.0rc15, together with postfix and dovecot-lda. umask is set to 0007. This should ensure directories and files get created with read/write permissions for both user and group. However, dovecot-lda writes files with 600 permissions, instead of 660. So dovecot does not seem to respect the umask configuration property for local mail delivery. In my particular case, I have vmail:vmail own the mail directories, and a backup user part of the vmail group. However the backup user cannot read the mails and thus back them up properly. Suggestions: - respect the umask for file delivery as well - alternatively, take the parent directory's permissions, strip executable bits, and apply to file Thanks Thomas

3 3