January 2009 - dovecot

[Dovecot] Questions regarding Dovecot's POP3 implementation
by Dale Gallagher 21 Jan '09

21 Jan '09

Hi all I'm considering moving over my POP3 service from qmail-pop3d to Dovecot for the following reasons: - Support for Maildir++ which I have yet to implement - Already using Dovecot for IMAP, so makes sense i.t.o Maildir++ - Support for SQL based user authentication My primary concerns are performance and security. Before I go down that route of migrating away from qmail-pop3d, I'd appreciate some answers and feedback on the following. There is mention of the Maildir filename extension W= for virtual file size here: http://wiki.dovecot.org/POP3Server However, I can't find any MDAs which support writing the filename in this format. Maildrop seems to support S= only? If Dovecot is only able to read W= in the filename, I would imagine that it might make sense to have an MDA like Maildrop write the message to disk, replacing all LF with CR+LF and finally write the filename with identical S= and W= filename extensions included? Example: Maildrop replaces all LFs with CR+LF in incoming message. Maildrop writes message as: 1035478339.27041_118.foo.org,S=1000,W=1000 (where 1000 is the file's RFC822.SIZE) Then Dovecot doesn't have to calculate virtual message sizes. I've also found this thread: http://markmail.org/message/oznf2f7m7hvsxqn6 ... which suggests changing mail_get_virtual_size to mail_get_physical_size in src/pop3/client.c Would this read the size from S=, or do a stat()? 5. Does anyone use Dovecot pop3 service on thousands of mailboxes and if so, what specific tweaks / setup do you use? Thanks Dale

1 0

[Dovecot] deliver rejection bounces
by Timo Sirainen 21 Jan '09

21 Jan '09

Is there any reason not to make (for v1.2) 1) deliver -e behavior the defaut? 2) not even provide the option for the current default (have deliver send bounces itself)? The only reason it even works like it does currently is because I just mostly copied what Cyrus did.

7 13

[Dovecot] Active Directory authentication
by Dimitrios Karapiperis 21 Jan '09

21 Jan '09

Hello all I would like to ask if there is adequate mechanism to authenticate users through POP3 against Active Directory by Outlook Express so that users will authenticate seamlessly using logon credentials. I have implemented LDAP authentication but users must supply their credentials to Outlook Express although they have logged on to Windows (AD). the ntlm auth in Dovecot 1.1 (windind) satisies this requirement (no credentials in Outlook)? thanks Dimitrios

2 1

[Dovecot] Imap auth problems
by Noah Silverman 20 Jan '09

20 Jan '09

Hi, We're having some really weird auth problems trying to setup a very basic dovecot imap server. Even stranger is that we don't see any of the debug information in the logs even though we've set all the debug options to true. Can anybody provide some suggestions. Thanks, -Noah ------------------------------------------------------------------------------------------------------------------ Our log files just show this: dovecot: Jan 20 14:09:20 Info: imap-login: Disconnected (no auth attempts): rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx dovecot: Jan 20 14:09:20 Info: imap-login: Disconnected (no auth attempts): rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx dovecot: Jan 20 14:09:21 Info: auth(default): new auth connection: pid=14706 dovecot: Jan 20 14:09:21 Info: auth(default): new auth connection: pid=14707 ---------------------------------------------------------------------------- Our dovecot -n is: # 1.1.8: /usr/local/etc/dovecot.conf # OS: FreeBSD 6.2-RC2 i386 log_path: /var/log/dovecot info_log_path: /var/log/dovecot protocols: imap pop3 ssl_disable: yes verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login first_valid_gid: 0 mail_location: maildir:~/Maildir mail_debug: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape- eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /usr/local/etc/dovecot.passwd userdb: driver: passwd-file args: username_format=%n /usr/local/etc/dovecot.passwd

2 2

[Dovecot] Move from 1.0.rc29 to 1.1.7?
by Peter Lindgren 20 Jan '09

20 Jan '09

Hello! I am moving my mail from the old server with 1.0.rc29 to a brand new server with 1.1.7. I use Maildir in both servers. A few questions: 1) The new server has another name, can I just copy the mail files as-is, will the server name in the file names matter? 2) The new server has a different architecture and different endian, so I plan not to copy the index and cache files; they seem to have become broken from time to time in the old server anyway. Dovecot will also re-create them when needed. Ok? 3) 1.0.rc29 did not store the message size in the file name as later versions. When will Dovecot do the check and rename the files to include the message size? There are some folders with quite large number of messages, the largest is some 45,000 messages. TIA, /Peter -- Peter Lindgren http://www.norrskenkonsult.com

2 5

[Dovecot] multiple passwords in different schemes
by Maciej Uhlig 20 Jan '09

20 Jan '09

Timo wrote : "In future it's possible that Dovecot could support multiple passwords in different schemes for a single user.". Is it planned in the nearest future? :-) Best regards, MU

2 6

[Dovecot] Dovecot optimisation
by Proskurin Kirill 20 Jan '09

20 Jan '09

Hello all. We start to use Dovecot at our email production but it runs not such fast as we expect. We use Dell 2950 with 4GbRAM at FreeBSD-7.0-p9 - load avarage never upper a 0.5 We have about 500 clients most of it use Outlook 2007 via IMAP. We run in this problems: 1) Sync of imap folder is really slow(I think it is Outlook problem) 2) Time after time we got Sync error from outlook 3) Time after time our monitoring system says what IMAP port not answer in 10 sec. In real life it start to answer in 15-20 sec what is not really good - client thinks what server don`t work. If I restart dovecot - it start to answer in 1-3 sec. I think problem in my conf, may be I need tune it? *dovecot -n don`t give full conf so i use this:* mail# grep -v '#' /usr/local/etc/dovecot.conf | egrep -v '^$' base_dir = /var/run/dovecot/ protocols = imap imaps pop3 pop3s managesieve listen = * disable_plaintext_auth = yes shutdown_clients = yes log_path = /var/log/dovecot/dovecot.log info_log_path = /var/log/dovecot/dovecot.log log_timestamp = "%b %d %H:%M:%S " syslog_facility = mail ssl_disable = no ssl_cert_file = /usr/local/etc/certs/fxclub_org.crt ssl_key_file = /usr/local/etc/certs/fxclub_org.key ssl_ca_file = /usr/local/etc/certs/GlobalSignCA.crt ssl_verify_client_cert = no ssl_parameters_regenerate = 168 ssl_cipher_list = ALL:!LOW:!SSLv2 verbose_ssl = no login_dir = /var/run/dovecot/login login_user = dovecot login_process_size = 64 login_process_per_connection = yes login_processes_count = 10 login_max_processes_count = 128 login_greeting = Dovecot ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c login_log_format = %$: %s mail_location = maildir:/var/spool/dovecot/domains/%d/%n/ mail_uid = dmail mail_gid = dmail mail_privileged_group = mail mail_full_filesystem_access = no mail_debug = no mail_log_prefix = "%Us(%u): " mail_log_max_lines_per_sec = 10 mmap_disable = no dotlock_use_excl = yes fsync_disable = no mail_nfs_storage = no mail_nfs_index = no lock_method = fcntl mail_drop_priv_before_exec = no verbose_proctitle = yes first_valid_uid = 500 first_valid_gid = 0 max_mail_processes = 512 mail_process_size = 256 mail_max_keyword_length = 50 mail_cache_min_mail_count = 0 mailbox_idle_check_interval = 30 mail_save_crlf = no maildir_stat_dirs = no maildir_copy_with_hardlinks = yes maildir_copy_preserve_filename = no mbox_read_locks = fcntl mbox_write_locks = dotlock fcntl mbox_lock_timeout = 300 mbox_dotlock_change_timeout = 120 mbox_min_index_size = 0 protocol imap { login_executable = /usr/local/libexec/dovecot/imap-login mail_executable = /usr/local/libexec/dovecot/imap imap_max_line_length = 65536 mail_max_userip_connections = 10 mail_plugins = quota imap_quota autocreate mail_plugin_dir = /usr/local/lib/dovecot/imap login_greeting_capability = yes imap_logout_format = bytes=%i/%o imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } protocol pop3 { login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_enable_last = no pop3_lock_session = no pop3_uidl_format = %08Xu%08Xv pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s mail_max_userip_connections = 3 mail_plugins = quota mail_plugin_dir = /usr/local/lib/dovecot/pop3 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { postmaster_address = postmaster(a)fxclub.org hostname = mail.fxclub.org mail_plugins = cmusieve quota mail_plugin_dir = /usr/local/lib/dovecot/lda quota_full_tempfail = yes deliver_log_format = msgid=%m: %$ log_path = /var/log/dovecot/deliver.log info_log_path = /var/log/dovecot/deliver.log sendmail_path = /usr/sbin/sendmail rejection_reason = Your message to <%t> was automatically rejected:%n%r auth_socket_path = /var/run/dovecot/auth-master sieve_global_path = /var/spool/dovecot/global.sieve } protocol managesieve { listen = *:2000 login_executable = /usr/local/libexec/dovecot/managesieve-login mail_executable = /usr/local/libexec/dovecot/managesieve managesieve_max_line_length = 65536 sieve_storage = % sieve = ~/.dovecot.sieve mail_location = managesieve_implementation_string = dovecot } auth_executable = /usr/local/libexec/dovecot/dovecot-auth auth_process_size = 256 auth_cache_size = 0 auth_cache_ttl = 3600 auth_cache_negative_ttl = 3600 auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_verbose = yes auth_debug = no auth_debug_passwords = no auth_worker_max_count = 100 auth_failure_delay = 2 auth default { mechanisms = plain login passdb ldap { args = /usr/local/etc/dovecot-ldap.conf } userdb ldap { args = /usr/local/etc/dovecot-ldap.conf } user = dovecot-auth count = 1 ssl_require_client_cert = no socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = dmail } client { path = /var/run/dovecot/auth-client mode = 0660 user = exim } } } dict { } plugin { quota = maildir quota_rule = *:storage=1024M quota_rule2 = Trash:storage=1256M quota_rule3 = SPAM:ignore quota_warning = storage=95%% /usr/local/bin/quota-warning.sh 95 quota_warning2 = storage=80%% /usr/local/bin/quota-warning.sh 80 autocreate = Trash autocreate2 = Sent autocreate3 = Spam autosubscribe = Trash autosubscribe2 = Sent autosubscribe3 = Spam } -- Best regards, Proskurin Kirill

6 15

[Dovecot] redirecting temp email files to another directory
by JANE CUA 20 Jan '09

20 Jan '09

Hi, Is is possible to redirect temp email files to another folder like /tmp or somewhere else, instead of having it in the same /var/spool where the mbox is?

2 9

[Dovecot] Errmsgs b4 and after migration DC V1.0.15 to V1.1.8
by Stewart Dean 20 Jan '09

20 Jan '09

Last Wednesday at 12:21 I made this switch, which seemed to be uneventful. In any case, no user has reported problems since the migration. Not content to leave well enough alone, this morning I scanned the syslog and maillog for dovecot related errors. What I found was that: Before the Migration=========================== I saw a lot of SSL errors that look like this: > Jan 14 11:49:23 mercury mail:warn|warning dovecot: imap-login: SSL_read() syscall failed: Connection reset by peer [69.180.200.184] > Jan 14 11:52:28 mercury mail:warn|warning dovecot: imap-login: SSL_read() syscall failed: Connection reset by peer [68.6.82.45] Which l took to be breakin attempts of some sort, except that I haven't seen any since the migration! After the migration==================================== I see errors like this: > Jan 14 12:21:45 mercury mail:err|error dovecot: IMAP(eg115): Corrupted index cache file /var/dcindx/eg115/.imap/INBOX/dovecot.index.cache: Broken MIME parts for mail UID 1934 > Jan 14 12:21:46 mercury mail:err|error dovecot: IMAP(alexande): Corrupted index cache file /var/dcindx/alexande/.imap/INBOX/dovecot.index.cache: Broken MIME parts for mail UID 132641 > Jan 14 12:21:46 mercury mail:err|error dovecot: IMAP(ls454): Corrupted index cache file /var/dcindx/ls454/.imap/INBOX/dovecot.index.cache: Broken MIME parts for mail UID 47 > Jan 14 12:21:46 mercury mail:err|error dovecot: IMAP(tr489): Corrupted index cache file /var/dcindx/tr489/.imap/INBOX/dovecot.index.cache: Broken MIME parts for mail UID 1 > Jan 14 12:21:54 mercury mail:err|error dovecot: IMAP(bh265): Corrupted index cache file /var/dcindx/bh265/.imap/INBOX/dovecot.index.cache: Broken MIME parts for mail UID 2 > Jan 14 12:22:01 mercury mail:err|error dovecot: IMAP(crouch): Corrupted index cache file /var/dcindx/crouch/.imap/INBOX/dovecot.index.cache: Broken MIME parts for mail UID 4863 > It appears that this error appears the first time a folder is referenced, then not again (I think but am not absolutely positive). Did the indexing method/format change in some way that would cause this (and Dovecot heals itself!) ? Is there any continuing problem inherent in this that needs to be dealt with? Thanks! -- "Eppur si muove." (But Still it moves) Galileo, leaving the Inquisition, after buckling under the threat of torture and excommunication and recanting from his proof that the heavens do not revolve around the earth -- Stewart Dean, Unix System Admin, Henderson Computer Center, Bard College, Annandale, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

2 1

[Dovecot] Coding question again...
by Stefan Jurisch 20 Jan '09

20 Jan '09

Hello again, I have a coding question again: I can obtain the path of the current user's mailbox with the function mail_storage_get_mailbox_path(...) - so far so good. But is it possible to get this mailbox path for another user than the logged in one? Thanks in advance. Best regards. Stefan -- SIEGNETZ.IT GmbH { w3o-services } Schneppenkauten 1a D-57076 Siegen Tel.: 0271 68193-0 Fax: 0271 68193-29 Geschäftsführer: Oliver Seitz Handelsregister-Nummer: HRB4838 Registergericht: Amtsgericht Siegen -------------------------------- Das Wort “WINDOWS” stammt aus einem alten Sioux-Dialekt und bedeutet: “Weißer Mann starrt durch Glasscheibe auf Sanduhr.” -------------------------------- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 7