October 2009 - dovecot

[Dovecot] Dovecot lock problem
by Simon Gao 16 Oct '09

16 Oct '09

On Tue, 2009-10-13 at 11:37 -0700, Simon Gao wrote: > We have a few users experiencing locking problem. When starting > Thunderbird, there is no new emails in Inbox. Dovecot createa a lock file > /var/spool/mail/<user>.lock. It never completes openning Inbox. If closing > the mail client, the open imap session does not get closed, nor the lock > file get deleted. >What is the process doing? Check with "strace -p <imap process pid>"? >How large is the user's mailbox? The size of inbox varies. Some is large, some are only a few hundred KB. If the mailbox is large, it may take time to re-generate index and put lock on inbox file until it's done. However, it should not for smaller mailbox file. Deleting index files did not help. The workaround is rename the mailbox file and copy it to ~/mail folder and let MTA re-create the mailbox. Then let mail client subscribes to the new temp mailbox. I will try strace next time. > Here are the errors in log: > > dovecot: Oct 13 11:18:35 Warning: IMAP(user1): Our dotlock file > /var/mail/user1.lock was deleted (kept it 88 secs) > dovecot: Oct 13 11:18:35 Error: IMAP(user1): file_dotlock_delete() > failed with mbox file /var/mail/user1: No such file or directory >I'd guess this is a huge mbox (or your disk I/O is very slow) and >Dovecot takes a long time trying to read it. mbox_very_dirty_syncs=yes >may be helpful. It occurred to mailbox large and small. It should not take very long to read a few hundred KB file.

2 2

[Dovecot] New backend
by Aspra Flavius Adrian 16 Oct '09

16 Oct '09

Hi I intend to write a new virtual backend for dovecot. Are there any hacking docs describing how the code is organized, eventually also important structs and how to hook myself into the system, or do I have to go the classical way? Thanks --Flavius

2 3

[Dovecot] Dovecot can't find users' sieve files
by Bartosz Fenski aka fEnIo 16 Oct '09

16 Oct '09

Hello. I asked for help on #dovecot but one suggestion I got was setting sieve variable explicitly but unfortunatelly that didn't help. I'm trying to set up sieve to be able to use vacation module. So in the lda section I put: mail_plugins = sieve And in plugins section: sieve = ~/.dovecot.sieve Then I put .dovecot.sieve file in the user's directory. This is what I get in Dovecot's log when trying to deliver to that mailbox: 2009-10-16 18:37:52 deliver(test(a)domain.pl): Error: sieve: stat((null)) failed: Bad address (using global script path in stead) 2009-10-16 18:37:52 deliver(test(a)domain.pl): Info: msgid=<20091016163757.GK19565(a)asdy.pl>: saved mail to INBOX Some infos about system: Dovecot 1.2.5 Debian squeeze/testing x86_64 ext3 (root)~#dovecot -n # 1.2.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.30-1-amd64 x86_64 Debian squeeze/sid ext3 log_path: /var/log/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_location: maildir:/home/vmail/%u mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: postmaster_address: postmaster(a)domain.pl mail_plugins: sieve log_path: /var/log/dovecot-deliver.log auth_socket_path: /var/run/dovecot/auth-master auth default: passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: sieve: ~/.dovecot.sieve (root)~# And dovecot-sql.conf: driver = pgsql connect = host=localhost dbname=postfix user=postfix password = xxxxxxxx password_query = \ SELECT local_part, password \ FROM mailbox WHERE local_part = '%n' AND active = 't' user_query = \ SELECT maildir, 5000 AS uid, 5000 gid \ FROM mailbox WHERE local_part = '%n' AND active = 't' Delivering works perfectly but I can't figure out why it's not able to find that .dovecot.sieve file: (root@germany)~#ls -al /home/vmail/test(a)domain.pl/.dovecot.sieve -rw-r--r-- 1 vmail vmail 314 2009-10-16 13:09 /home/vmail/test(a)domain.pl/.dovecot.sieve (root@germany)~# Any help would be very appreciated. regards fEnIo -- ,''`. Bartosz Fenski | mailto:fenio@debian.org | pgp:0x13fefc40 | irc:fEnIo : :' : 32-050 Skawina - Glowackiego 3/15 - malopolskie v. - Poland `. `' phone:+48602383548 | proud Debian maintainer and user `- http://fenski.pl | xmpp:fenio@jabber.org | rlu:172001

1 1

[Dovecot] Better APPEND performance
by Mike Abbott 16 Oct '09

16 Oct '09

Moving a large number of messages into an IMAP folder on a dovecot server takes quite a long time. This is a popular operation for users migrating their stored messages from their old mail servers through a mail user agent, and it causes a poor first impression of dovecot. I'd like your help to speed this up. I have studied this problem in recent versions, including 1.1.[17-19] and 1.2.[4-6] but I'll focus on 1.2.6, using Maildir++. It seems to be caused by O(n^2) behavior in maintaining the UID list, where n is the number of messages. The client selects a folder then sends thousands of individual APPEND commands (no use of multiappend unfortunately). These cause dovecot to behave as follows: 1. For every other APPENDed message, dovecot appends the new UID to the list quickly. No problem here, this is fast. 2. For every other other APPENDed message, dovecot scans the entire UID list. This is an O(n) algorithm. Since it happens every n/2 times it causes O(n^2) behavior across n consecutive APPENDs. More specifically, 1. APPEND a message to a folder that already contains 30,000 messages. maildir_uidlist_refresh_fast_init() takes the fast path. 2. APPEND a second message to the same folder. maildir_uidlist_refresh_fast_init() takes the slow path: it populates the uidlist->files hash table with all the UIDs, checking for duplicates. At the end of the command maildir_uidlist_deinit() destroys the hash table. Note how this APPEND takes much longer than #1. 3. APPEND a third message to the same folder. Just like #1. 4. APPEND a fourth message to the same folder. Just like #2, and since #2 destroyed the hash, it has to do all that work over again. 5. And so on. What can be done to make maildir_uidlist_refresh_fast_init() choose the fast path more often?

3 6

[Dovecot] v2.0.alpha1 released
by Timo Sirainen 16 Oct '09

16 Oct '09

http://dovecot.org/releases/2.0/alpha/dovecot-2.0.alpha1.tar.gz http://dovecot.org/releases/2.0/alpha/dovecot-2.0.alpha1.tar.gz.sig So here's the first alpha version of Dovecot v2.0. There are still a couple of things left to do, but in general it should work for most people. I started using it for my own mails a few days ago and it seems to work without errors. Largest changes since v1.2: * Global ACLs are now looked up using namespace prefixes. For example if you previously had INBOX. namespace prefix and a global ACL for "INBOX.Sent", it's now looked up from "INBOX.Sent" file instead of "Sent" as before. + Redesigned master process. It's now more modular and there is less code running as root. + Configuration supports now per-local/remote ip/network settings. + dsync utility does a two-way mailbox synchronization. + LMTP server and proxying. + Added mdbox (multi-dbox) mail storage backend. + doveadm utility can be used to do all kinds of administration functions. Old dovecotpw and *view utilities now exist in its subcommands. Some things left to do: - Do something about backwards compatibility with v1.x. Either make it read v1.x config files or provide some config conversion utility. - dsync still has some bugs - config process is a bit too slow. config handling in general could use some caching all around. no need to ask configuration for each login unless there are per-remote-ip settings. - some kind of an optional connection policy server could be useful. mainly to finally implement tcp-wrappers support. - mail_uid, mail_gid, mail_chroot settings don't really work now. I think this actually needs a bit larger change, which is probably a good idea in any case: After successfully authenticating, login process needs to get imap/pop3 process executed. Currently this is done by transferring the connection fd to master process, doing userdb lookup and then forking and execing the imap/pop3 process. The new behavior I'm thinking is that after auth, login process would connect to imap/pop3 unix socket in the login/ directory. That would cause master process to fork a new imap/pop3 process (running as root). Login process would send the necessary auth information via the unix socket, possibly transfer also the fd, and imap/pop3 would do the userdb lookup and then drop privileges. This change has some pros: - Master process will no longer temporarily hold some extra fds and use extra memory during auth lookups. If auth process is hanging these could cause problems. - Master process will no longer have any special auth handling code and I can remove type=auth-source and type=auth services. - Of course fixes the mail_* setting issue, because all of this is now done by imap/pop3 process, which knows about these settings. - Creating support for "multiple imap/pop3 post-login connections in a single process" should be pretty easy to implement with this. The imap/pop3 unix socket just needs to be listened by a new process in the middle that keeps track of what imap/pop3 processes exist and can redirect the new connections to those. But also some cons: - drop_priv_before_exec=yes no longer works, unless the uid/gid is hardcoded to the service {} block. - Each imap/pop3 process needs to do a connect() to auth server at startup, adding a bit to the latency.

7 21

[Dovecot] Expire issue
by Emmanuel Gonzalez 16 Oct '09

16 Oct '09

Hello guys, I'm trying to configure de expire plug in, all the configuration seems to be right but when I launch # /opt/dovecot/sbin/dovecot --exec-mail ext /opt/dovecot/libexec/dovecot/expire-tool --test Error: userdb(user(a)mydomain.it) didn't return uid Info: User lookup failed: user(a)mydomain.it even if I see in the logs that the authentication process worked fine (ldap): dovecot: 2009-10-16 15:33:03 Info: auth(default): master in: USER 1 user(a)mydomain.it service=expire dovecot: 2009-10-16 15:33:03 Info: auth(default): ldap(user(a)mydomain.it): user search: base=dc=mydomain,dc=it scope=subtree filter=(&(objectClass=inetOrgPerson)(mail=user(a)mydomain.it)) fields=mailMessageStore,mailquota dovecot: 2009-10-16 15:33:03 Info: auth(default): ldap(user(a)mydomain.it): result: mailMessageStore(home)=/var/vmail/0/0/0/4/0 mailquota(quota_rule=*:backend)=104857600S dovecot: 2009-10-16 15:33:03 Info: auth(default): master out: USER 1 user(a)mydomain.it home=/var/vmail/0/0/0/4/0 quota_rule=*:backend=104857600S here my conf: # OS: SunOS 5.9 sun4v log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-info.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 listen(default): *:143 listen(imap): *:143 listen(pop3): *:10100 ssl_disable: yes ssl_cert_file: /opt/csw/etc/dovecot.pem ssl_key_file: /opt/csw/etc/dovecot.pem disable_plaintext_auth: no login_dir: /opt/dovecot/var/run/dovecot/login login_executable(default): /opt/dovecot/libexec/dovecot/imap-login login_executable(imap): /opt/dovecot/libexec/dovecot/imap-login login_executable(pop3): /opt/dovecot/libexec/dovecot/pop3-login first_valid_uid: 1 first_valid_gid: 12 mail_privileged_group: daemon mail_uid: 1 mail_gid: 12 mail_location: maildir:%h mail_debug: yes mail_executable(default): /opt/dovecot/libexec/dovecot/imap mail_executable(imap): /opt/dovecot/libexec/dovecot/imap mail_executable(pop3): /opt/dovecot/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota expire mail_plugins(imap): quota imap_quota expire mail_plugins(pop3): quota expire mail_plugin_dir(default): /opt/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /opt/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /opt/dovecot/lib/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): UID%u-%v pop3_logout_format(default): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_logout_format(imap): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_logout_format(pop3): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o auth default: master_user_separator: * verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /opt/dovecot/etc/passwd.masterusers master: yes passdb: driver: ldap args: /opt/dovecot/etc/dovecot-ldap.conf userdb: driver: ldap args: /opt/dovecot/etc/dovecot-ldap-userdb.conf socket: type: listen master: path: /opt/dovecot/var/run/dovecot/auth-master mode: 384 user: dovecot group: dovecot plugin: quota: maildir expire: Trash 1 Trash/* 1 Spam 30 expire_dict: proxy::expire dict: expire: db:/opt/dovecot/var/lib/dovecot/expire.db and ldap one: # cat /opt/dovecot/etc/dovecot-ldap.conf |grep -v "#"|grep -v ^$ hosts = localhost sasl_bind = no auth_bind = yes ldap_version = 3 base = dc=mydomain,dc=it scope = subtree user_attrs = mailMessageStore=home,mailquota=quota_rule=*:backend user_filter = (&(objectClass=inetOrgPerson)(mail=%u)) pass_attrs = mail=user,userPassword=password,mailMessageStore=userdb_home pass_filter = (&(objectClass=inetOrgPerson)(mail=%u)) I also tried to set user_attrs = *uid=uid,*mailMessageStore=home,mailquota=quota_rule=*:backend but i didn't solve the problem. Any ideas? thanx in advance! -- Emmanuel Gonzalez

2 3

[Dovecot] "From" address in vacation response on hosted domains with dovecot/postfix/sieve
by Peter Borg 16 Oct '09

16 Oct '09

Hi, I have a working dovecot/postfix/sieve configuration: Ubuntu 8.04 LTS Dovecot 1.2.6 Sieve 0.1.12 Postfix 2.5.1 The server is configured to host multiple domains. All mail delivery, logins and aliases work absolutely perfectly. There's only one weirdness: the 'From' address in vacation responses. If a message is sent to user(a)hosteddomain.com the response comes from user-hosteddomain.com(a)hostingservername.com Obviously it's doing what one would expect in that it's taking the username (user-hosteddomain.com) and appending the local host name (hostingservername.com) This isn't great from the perspective of the hosted user, however, who'd much rather their vacation message was sent from their actual email address. Clearly I can modify this by using a ':from' statement in each relevant sieve file, but I can't rely on users' mail clients to set this (as not all do) and the webmail client in use on the server doesn't set this. I can almost certainly implement some kind of hack using this, but I'd rather not. So how does sieve determine the from address to use if it's not explicitly set in the sieve script for the user, and how can I direct sieve to determine the address differently, preferably with a central configuration option that will apply to all users regardless of domain.....? Regards, Peter.

1 0

[Dovecot] Internal server
by Guy 16 Oct '09

16 Oct '09

Hi, I'm looking at doing some testing for a little internal IMAP server. Basically use fetchmail (or some such thing to bring in mail) so users have a local IMAP server to connect to. I'm interested in trying out mdbox, but since I'd have to use dovecot 2.0 with it I thought I'd just check what peoples' experience with 2.0 is like so far? Is it reasonably stable already? Is there also a page showing the differences in config for dbox over maildir? Or is it simply just the change in mail_location and nothing else? Thanks Guy -- Don't just do something...sit there!

2 1

[Dovecot] FS Quota broken for delivering BIG message
by Kostik 16 Oct '09

16 Oct '09

Hi everybody. I have Linux file system quota for users and enabled "fs quota" and quota plugin for LDA. My test user is already deep over quoted: --- Filesystem blocks quota limit nfse:/export 23768* 10240 10240 --- 1. If I tries to deliver _short_ message to user mbox - quota works: $ echo "123123123123" | /usr/local/libexec/dovecot/deliver -d koc --- Quota root: name=Quota backend=fs args=group:mount=/var/virtual/home/I/I/koc Quota rule: root=Quota mailbox=* bytes=10383360 messages=0 mbox: data=~/:INBOX=/var/virtual/mail/I/I/koc:INDEX=MEMORY fs: root=/var/virtual/home/I/I/koc, index=, control=, inbox=/var/virtual/mail/I/I/koc fs quota add storage dir = /var/virtual/home/I/I/koc fs quota block device = nfse:/export fs quota mount point = /mount/m5 quota-fs: host=nfse, path=/export, gid=5751796, bytes quota-fs: gid=5751796, value=24338432, limit=10485760, active=1 from=<>, msgid=: save failed to INBOX: Quota exceeded (mailbox for user is full) from=<>, msgid=: rejected: Quota exceeded (mailbox for user is full) msgid=: Return-Path missing, rejection reason: Quota exceeded (mailbox for user is full) --- 2. But if I tries to deliver _BIG_ message to user mbox - quota broken: $ cat big.msg | /usr/local/libexec/dovecot/deliver -d koc --- Quota root: name=Quota backend=fs args=group:mount=/var/virtual/home/I/I/koc Quota rule: root=Quota mailbox=* bytes=10383360 messages=0 mbox: data=~/:INBOX=/var/virtual/mail/I/I/koc:INDEX=MEMORY fs: root=/var/virtual/home/I/I/koc, index=, control=, inbox=/var/virtual/mail/I/I/koc fs quota add storage dir = /var/virtual/home/I/I/koc fs quota block device = nfse:/export fs quota mount point = /mount/m5 quota-fs: host=nfse, path=/export, gid=5751796, bytes quota-fs: gid=5751796, value=24338432, limit=10485760, active=1 write_full(/var/virtual/home/I/I/koc/.temp.pigeon01.8822.64dfacc7e57d71b4) failed: Disk quota exceeded stat(/tmp/Dovecot Delivery Mail) failed: Disk quota exceeded from=<>, msgid=: save failed to INBOX: BUG: Unknown internal error --- This "write_full() failed" from: src/lib/istream-seekable.c --- static ssize_t i_stream_seekable_read(struct istream_private *stream) { ... /* save to our file */ data = i_stream_get_data(sstream->cur_input, &size); if (write_full(sstream->fd, data, size) < 0) { i_assert(errno != 0); stream->istream.stream_errno = errno; i_error("write_full(%s) failed: %m", sstream->temp_path); i_stream_close(&stream->istream); return -1; } ... } --- =kostik

2 2

[Dovecot] Dovecot inactive after an intermittent connection with LDAP
by Thu Nguyen 16 Oct '09

16 Oct '09

Hello all, I'm facing the problem below: 1. Firstly, the connection between dovecot and ldap was down. dovecot: Oct 10 09:11:12 Info: auth(default): ldap(user1,x.x.x.x): Aborting (timeout), we're not connected to LDAP server dovecot: Oct 10 09:11:12 Info: auth(default): master out: USER 265490 user1 2. There is many new connection from user created.... dovecot: Oct 10 09:11:12 Info: auth(default): new auth connection: pid=21114 dovecot: Oct 10 09:11:12 Info: auth(default): new auth connection: pid=21113 3. ....but it obviously failed. dovecot: Oct 10 09:11:12 Info: pop3-login: Internal login failure (auth failed,1 attempts): user=<user1>, method=PLAIN, rip=x.x.x.x, lip= x.x.x.x dovecot: Oct 10 09:11:12 Info: pop3-login: Internal login failure (auth failed,1 attempts): user=<user2>, method=PLAIN, rip= x.x.x.x,lip= x.x.x.x ................. dovecot: Oct 10 09:11:15 Info: auth(default): new auth connection: pid=21125 dovecot: Oct 10 09:11:15 Info: auth(default): new auth connection: pid=21126 dovecot: Oct 10 09:11:22 Info: auth(default): client in: AUTH 1 PLAIN service=pop3 lip= x.x.x.x rip= x.x.x.x lport=110 rport=4504 resp=<hidden> dovecot: Oct 10 09:11:22 Info: auth(default): client in: AUTH 1 PLAIN service=pop3 lip= x.x.x.x rip= x.x.x.x lport=110 rport=6316 resp=<hidden> dovecot: Oct 10 09:11:22 Info: auth(default): new auth connection: pid=21132 dovecot: Oct 10 09:11:24 Info: auth(default): client in: AUTH 1 PLAIN service=pop3 lip= x.x.x.x rip= x.x.x.x lport=110 4. LDAP connection is back to normal, however, it still failed. dovecot: Oct 10 09:14:14 Info: auth(default): new auth connection: pid=21250 dovecot: Oct 10 09:14:14 Info: auth(default): new auth connection: pid=21251 dovecot: Oct 10 09:14:14 Info: auth(default): client in: AUTH 1 PLAIN service=pop3 lip= x.x.x.x rip= x.x.x.x lport=110 rport=2959 resp=<hidden> dovecot: Oct 10 09:14:14 Info: pop3-login: Disconnected: Inactivity (auth failed, 1 attempts): method=PLAIN, lip= x.x.x.x rip= x.x.x.x dovecot: Oct 10 09:14:15 Info: pop3-login: Disconnected: Inactivity (auth failed, 1 attempts): method=PLAIN, lip= x.x.x.x rip= x.x.x.x dovecot: Oct 10 09:14:15 Info: pop3-login: Disconnected: Inactivity (auth failed, 1 attempts): method=PLAIN, lip= x.x.x.x rip= x.x.x.x dovecot: Oct 10 09:14:15 Info: auth(default): client in: AUTH 1 PLAIN service=pop3 lip= x.x.x.x rip= x.x.x.x lport=110 rport=3765 resp=<hidden> dovecot: Oct 10 09:14:15 Info: auth(default): client in: AUTH 1 PLAIN service=pop3 lip= x.x.x.x rip= x.x.x.x lport=110 rport=48 08 resp=<hidden> dovecot: Oct 10 09:14:15 Info: pop3-login: Disconnected: Inactivity (auth failed, 1 attempts): method=PLAIN, rip=199.30.31.48, lip=199.30.26.18 5. Then the request queue is full ... Dovecot is completely inactive. Of course it try to fail back to pam but as the password is not the same so it's failed also. dovecot: Oct 10 09:38:53 Error: auth(default): ldap(user1,10.0.0.7): Request queue is full (oldest added 1660 secs ago) dovecot: Oct 10 09:38:53 Info: auth-worker(default): pam(user1,10.0.0.7): lookup service=dovecot dovecot: Oct 10 09:38:53 Info: auth-worker(default): pam(user1.vn,10.0.0.7): #1/1 style=1 msg=Password: dovecot: Oct 10 09:38:53 Info: auth(default): new auth connection: pid=22405 dovecot: Oct 10 09:38:54 Info: auth(default): client in: AUTH 1 PLAIN service=pop3 lip= x.x.x.x rip= x.x.x.x lport=110 rport=2789 resp=<hidden> dovecot: Oct 10 09:38:56 Info: auth-worker(default): pam(user1,x.x.x.x): pam_authenticate() failed: Authentication failure (password mismatch?) ---------------------------------------------------------------- Bref, I suggest that when the connection between LDAP and dovecot is dropped, the connection from user is still there and as they don't receive a result from dovecot [Fail or Success]... And it still "pending" somehow to wait a response from dovecot. But when ldap is connected to the system, these pending connection (from user) is still pending .... so it makes the "request queue is full". Isn't it? Should I do something to work-through or work-around this problem? May I did something wrong in my configuration. Below is usual information may it helps us analyze the problem! Thanks many much for your help! ----------------------------------------------------------------- [root ~]# dovecot -n # 1.1.14: /etc/dovecot.conf # OS: Linux 2.6.18-92.el5PAE i686 CentOS release 5.2 (Final) ext3 log_path: /var/log/dovecot.log protocols: imap pop3 ssl_disable: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login verbose_proctitle: yes mail_gid: 100 mail_location: maildir:/home/%u/Maildir mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: verbose: yes debug: yes passdb: driver: ldap args: /etc/dovecot-ldap.conf passdb: driver: pam userdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: static socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: dovecot group: dovecot plugin: sieve: /home/%u/.dovecot.sieve -------------------------------------------------------------------- [root ~]# grep -v '^ *$#.*$\?$' /etc/dovecot-ldap.conf hosts = ldap.tma.com.vn dn = ##### dnpass = ###### auth_bind = yes auth_bind_userdn = uid=%u,ou=Users,dc=tma,dc=com,dc=vn ldap_version = 3 base = ou=Users,dc=,dc=com,dc=vn scope = subtree user_attrs = uid=uid,mailQuota=quota_rule=*:storage=%$M user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%u)) default_pass_scheme = CRYPT -------------------------------------------------------------------- Regards, Thu NGUYEN.

2 2