September 2008 - dovecot

[Dovecot] zlib plugin nad moving mails, bug?
by Mateusz Kijowski 08 Sep '08

08 Sep '08

Hi, Recently I gzipped mails older than 30 days in our users' maildirs. I used find and gzip. Gzip added 'Z' at the end of the filename and everything seemed to work fine, users did not notice any difference in performance (yet :-), and I saved about 30% of our mail storage space. There seems to be a problem when moving gzipped messages from one folder to another though. Dovecot drops the Z flag, moved messages are not processed by the zlib plugin and email clients end up showing garbage. Is there something wrong with my config, or did I encounter a bug? dovecot -n follows: # 1.0.13: /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log protocols: imap imaps pop3s ssl_ca_file: /etc/certs/certum-chain.crt ssl_cert_file: /etc/certs/wild.dfqs.pl.crt ssl_key_file: /etc/certs/wild.dfqs.pl.key ssl_cipher_list: ALL:!LOW:!MEDIUM login_dir: /var/run/dovecot/login login_executable(default): /usr/lib64/dovecot/imap-login login_executable(imap): /usr/lib64/dovecot/imap-login login_executable(pop3): /usr/lib64/dovecot/pop3-login login_greeting: imap.dfqs.pl ready. login_process_per_connection: no login_processes_count: 5 login_max_processes_count: 32 max_mail_processes: 4096 verbose_proctitle: yes mail_location: maildir:~/mail:INDEX=/var/lib/dovecot/indexes/%Ln mail_debug: yes maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/local/lib64/dovecot-post-login-imap.sh mail_executable(imap): /usr/local/lib64/dovecot-post-login-imap.sh mail_executable(pop3): /usr/local/lib64/dovecot-post-login-pop3.sh mail_plugins(default): imap_quota trash quota acl zlib mail_plugins(imap): imap_quota trash quota acl zlib mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib64/dovecot/plugins/imap mail_plugin_dir(imap): /usr/lib64/dovecot/plugins/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/plugins/pop3 mail_log_max_lines_per_sec: 0 imap_client_workarounds(default): outlook-idle tb-extra-mailbox-sep imap_client_workarounds(imap): outlook-idle tb-extra-mailbox-sep imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / inbox: yes namespace: type: public separator: / prefix: Public/ location: maildir:/var/vmail/Public:CONTROL=~/Public/control:INDEX=~/Public/index namespace: type: shared separator: / prefix: Shared/ location: maildir:/var/vmail/Shared:CONTROL=~/Shared/control:INDEX=~/Shared/index auth default: verbose: yes debug: yes worker_max_count: 512 passdb: driver: pam args: dovecot userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: root group: vmail master: path: /var/run/dovecot/auth-master mode: 432 user: root group: vmail plugin: quota: maildir:storage=12582912:ignore=Trash acl: vfile: trash: /etc/dovecot/dovecot-trash.conf

5 5

Re: [Dovecot] LDAP filters
by Tomasz K Jarzynka 08 Sep '08

08 Sep '08

Quoting dovecot-request(a)dovecot.org: > Message: 9 > Date: Mon, 08 Sep 2008 12:33:29 +0400 > From: Proskurin Kirill <k.proskurin(a)fxclub.org> > Subject: [Dovecot] LDAP filters > To: Dovecot Mailing List <dovecot(a)dovecot.org> > Message-ID: <48C4E359.7090602(a)fxclub.org> > Content-Type: text/plain; charset=UTF-8; format=flowed > > Hello all. > > I'm have this problem: > > I'm want auth users by "uid" filed but this filed uniq only in one LDAP > container. So im what to tell dovecot were to look some "uid" by "mail" > filed of this user. > > Can im do this: > > pass_filter = (&(objectClass=mailUser)(mail=*@%d)(uid=%n)) > > Will this construction work? Why not (&(objectClass=mailUser)(mail=%u)(uid=%n)) ? PS. You really should consider solving this is a more elegant way ;) -- Tomasz Krzysztof Jarzynka / mob. +48 601 706 601 / HANDLE: TJ950-RIPE Network Information Systems Administrator / tomee(at)genesilico(d-o-t)pl Laboratory of Bioinformatics and Protein Engineering | www.genesilico.pl International Institute of Molecular and Cell Biology | www.iimcb.gov.pl

2 1

[Dovecot] v1.1.3 release candidate
by Timo Sirainen 08 Sep '08

08 Sep '08

I thought about making a release now, but I'll probably do some more fixes tomorrow, so here's a prerelease for everyone to test. :) If you see any bugs with this (old or new), please report. http://dovecot.org/tmp/dovecot-1.1.3-rc.tar.gz Important changes are: * mail_max_userip_connections limit no longer applies to master user logins. + login_log_format_elements: Added %k to show SSL protocol/cipher information. Not included by default. + imap/pop3-proxy: If auth_verbose=yes, log proxy login failures. + deliver: Added -s parameter to autosubscribe to autocreated mailboxes. - message parser fixes - hopefully fixes an infinite looping problem - SORT: One more assert-crashfix when renumbering index sort IDs. - mbox: Saving may have truncated the mail being saved - mbox: Several other bugfixes - mail_full_filesystem_access=yes was broken when listing mailboxes (it still is with maildir++ layout). - maildirlock utility was somewhat broken - zlib plugin: bzip2 support was somewhat broken - NFS: Make sure writing to files via output streams don't assert-crash when write() returns only partial success.

4 8

[Dovecot] LDAP filters
by Proskurin Kirill 08 Sep '08

08 Sep '08

Hello all. I'm have this problem: I'm want auth users by "uid" filed but this filed uniq only in one LDAP container. So im what to tell dovecot were to look some "uid" by "mail" filed of this user. Can im do this: pass_filter = (&(objectClass=mailUser)(mail=*@%d)(uid=%n)) Will this construction work? -- Best regards, Proskurin Kirill

2 1

[Dovecot] Error starting dovecot
by Diego Ledesma 08 Sep '08

08 Sep '08

Hello, I have a linux system (Ubuntu 7.04 server edition) running Postfix 2.3.8 Today i installed Dovecot through apt-get (got version 1.0.rc17 installed) and configured it to do sasl auth only, (i already have other pop3,smtp and imap servers running) following the howto's at dovecot.org The thing is that if i try to start dovecot or run dovecot -n i get this message: Error: Can't use mail executable /usr/lib/dovecot/imap: No such file or directory That directory does not exist but why should it if i don't want to run dovecot as imap? I only installed dovecot-common package. Also, i setted protocols to "none". Does anyone know why i get that error message? One last comment. Before installing dovecot on the production mail server i installed it on my laptop's linux (Ubuntu 8.04 LTS) for testing purposes. The testing mail server runs Postfix 2.5.1 and Dovecot 1.0.10 and in this case Dovecot runs fine (the /usr/lib/dovecot/imap directory does also not exist and dovecot.conf is configured exactly on both servers). This are the uncommented parts of dovecot.conf #Only use dovecot-auth protocols = none disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:~/Maildir mail_privileged_group = mail protocol imap { } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } auth default { mechanisms = plain login passdb passwd-file { args = /etc/passwd.dovecot } passdb pam { } userdb passwd { } user = root socket listen { client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } dict { } plugin { } ---- Any help is greatly appreciated. Thanks. Diego.

6 11

Re: [Dovecot] iphone connection problem]
by dovecot＠feb17.org 08 Sep '08

08 Sep '08

Sorry, bounced this the first time ;( Darren I'd happily switched to a real cert if I knew that this was the problem. Are you using the cert actually on the phone to validate its identity? I have the org unit set slightly differently on my fake CA and the phone to make netscape derived browsers happy. The trouble is that I'm not getting a useful enough error message from anyone to diagnose problem. I have also considered putting my fake CA cert on the phone to see if that would make it happier, Darren >Charles Marcus wrote: >>You're not using self-signed certs by any chance? >> >> > >I have had good success using the cheapo certs from GoDaddy - they >offer a cert with multiple Alt names so you can connect using a >variety of server names. Quite inexpensive and the whole setup was >very smooth (they are just a cheapo registrar who verify you based on >the WHOIS info only) > >Ed W

1 0

Re: [Dovecot] iphone connection problem
by Ed W 07 Sep '08

07 Sep '08

Darren Platt wrote: > I'd happily switched to a real cert if I knew that this was the > problem. Are you using the cert actually on the phone to validate > its identity? I have the org unit set slightly differently on my fake > CA and the phone to make netscape derived browsers happy. The trouble > is that I'm not getting a useful enough error message from anyone to > diagnose problem. I have also considered putting my fake CA cert on > the phone to see if that would make it happier, Sorry - I don't have an iPhone - however, some of the super cheap providers are like near single digit dollars a year for a cert so it's not too expensive to run a test Ed W

1 0

[Dovecot] Cosmetic issue with dots in Maildir folder names
by Holger Weiss 07 Sep '08

07 Sep '08

Just a minor cosmetic issue: We use the listescape plugin in order to support "." characters in Maildir++ folder names, and in at least the following case, the escaped representation of the dot character ("\2e") won't be translated back to a "." in messages for the IMAP client: | 1 SELECT non.existent | 1 NO Mailbox doesn't exist: non\2eexistent However, SELECTing an existing folder whose name includes a dot works fine, and it also works in other cases, e.g.: | 2 CREATE does.exist | 2 OK Create completed. | 3 LIST "" does.exist | * LIST (\HasNoChildren) "/" does.exist | 3 OK List completed. This is with Dovecot 1.1.3; we use "separator = /" and we've defined REAL_SEP to '.' and VIRTUAL_SEP to '/' in the plugin. Holger

2 1

[Dovecot] ACL plugin: k permission and sub-subfolders
by Heiko Schlichting 07 Sep '08

07 Sep '08

Hi, I'm trying to disallow the creating of subfolders for some special folder for all users. Using ACL plugin for this seems to work at first glance but is not a full solution or is buggy as it allows the creation of sub-subfolders. I'm using the following ACL and namespace separator is "/": $ cat folder owner lrwstie Note: no "k" permission ("k" = create = Mailboxes can be created under this mailbox) Seems to work: a001 create "folder/subfolder" a001 NO Permission denied But: a002 create "folder/subfolder/subsubfolder" a002 OK Create completed. This is unexpected. Creating a subfolder is not allowed but a sub-subfolder is permitted? If this is intentional, the description in the wiki should mention this. And: How to disallow the creation of any subfolders and any sub-subfolders? Using "folder/.DEFAULT" instead of "folder" to define the ACL does not make any difference for the behavior. My configuration of dovecot is below the signature. Thanks, Heiko. Heiko Schlichting Freie Universität Berlin heiko(a)FU-Berlin.DE Zentraleinrichtung für Datenverarbeitung (ZEDAT) Telefon +49 30 838-54327 Fabeckstraße 32 Telefax +49 30 838454327 14195 Berlin # 1.1.3: /server/dovecot/server/etc/dovecot.conf base_dir: /server/dovecot/server/var/run/ syslog_facility: local6 protocols: imap pop3 listen(default): 130.133.4.84:8143 listen(imap): 130.133.4.84:8143 listen(pop3): 130.133.4.84:8110 ssl_disable: yes disable_plaintext_auth: no shutdown_clients: no nfs_check: no login_dir: /server/dovecot/server/var/logindir login_executable(default): /server/dovecot/server/libexec/dovecot/imap-login login_executable(imap): /server/dovecot/server/libexec/dovecot/imap-login login_executable(pop3): /server/dovecot/server/libexec/dovecot/pop3-login login_greeting: mail.zedat.fu-berlin.de ready. login_chroot: no login_processes_count: 16 login_max_processes_count: 512 max_mail_processes: 1500 verbose_proctitle: yes mail_uid: 865 mail_gid: 865 mail_location: maildir:/server/dovecot/spool/%2Ln/%Ln/maildir maildir_copy_preserve_filename: yes mail_executable(default): /server/dovecot/bin/wrapper imap mail_executable(imap): /server/dovecot/bin/wrapper imap mail_executable(pop3): /server/dovecot/bin/wrapper pop3 mail_plugins(default): acl quota imap_quota listescape mail_plugins(imap): acl quota imap_quota listescape mail_plugins(pop3): quota mail_plugin_dir(default): /server/dovecot/server/lib/dovecot/imap mail_plugin_dir(imap): /server/dovecot/server/lib/dovecot/imap mail_plugin_dir(pop3): /server/dovecot/server/lib/dovecot/pop3 mail_log_prefix: %Ls[%p]: user=<%u>, mail_log_max_lines_per_sec: 50 imap_client_workarounds(default): delay-newmail netscape-eoh imap_client_workarounds(imap): delay-newmail netscape-eoh imap_client_workarounds(pop3): pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %u pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / inbox: yes list: yes subscriptions: yes auth default: mechanisms: plain login user: dovecot username_format: %Lu failure_delay: 1 passdb: driver: checkpassword args: /server/dovecot/bin/checkpassword-zedat userdb: driver: prefetch plugin: quota: maildir quota_rule: *:bytes=2G acl: vfile:/server/dovecot/server/etc/acls

2 1

Re: [Dovecot] Error starting dovecot
by Frank Elsner 06 Sep '08

06 Sep '08

On Sat, 6 Sep 2008 13:23:54 -0200 Diego Ledesma wrote: > On Sat, Sep 6, 2008 at 10:57 AM, Frank Elsner > <frank(a)moltke28.b.shuttle.de> wrote: > > On Fri, 5 Sep 2008 20:09:07 -0300 Diego Ledesma wrote: > > > > [ ... ] > > > >> I only installed dovecot-common package. > >> Also, i setted protocols to "none". > >> > >> Does anyone know why i get that error message? > > > > Protocols "none" also means no "imap". > > > > BTW ... imap is a protocol :-) > > > > > > --Frank Elsner > > > > Oh. According to the comments in my dovecot.conf setting protocols to > "none" means that only dovecot-auth is enabled... > What should i write under Protocols to just enable that? My dovecot.conf contains protocols = imap imaps BTW, Please keep the thread on the mailing list, "Cc"ed here. --Frank Elsner

3 2