November 2009 - dovecot

[Dovecot] vacation
by selaci selaci 13 Nov '09

13 Nov '09

3 2

[Dovecot] read/connect anvil-auth-penalty failed: EOF/Connection refused
by Pascal Volk 13 Nov '09

13 Nov '09

Since the changesets: http://hg.dovecot.org/dovecot-2.0/rev/9bec70f26637 http://hg.dovecot.org/dovecot-2.0/rev/75b48fa3aec4 there is another problem. A `dovecot stop`, while auth and auth -w are still running, logs: Nov 12 03:17:00 master: Warning: Killed with signal 15 (by pid=31656 uid=0 code=kill) Nov 12 03:17:00 auth: Error: read(anvil-auth-penalty) failed: EOF Nov 12 03:17:00 auth: Error: net_connect_unix(anvil-auth-penalty) failed: Connection refused Nov 12 03:17:00 auth: Error: read(anvil-auth-penalty) failed: EOF Nov 12 03:17:00 auth: Error: net_connect_unix(anvil-auth-penalty) failed: Connection refused This problem doesn't occur with changeset 49d92c3fa17a. Regards, Pascal -- The trapper recommends today: face1e55.0931603(a)localdomain.org

2 2

[Dovecot] Rewriting username at login
by Gerry Demaret 13 Nov '09

13 Nov '09

I am trying to make a switch from Cyrus to Dovecot which has some "historical accidents" to it that I have to deal with and ideally would like to get rid of. One of them is that about half of the existing accounts have a different format for their login. All the newer accounts have their email address as login, the old ones use a dot instead of an at: - new: user1(a)domain.tld - old: user2.domain.tld I would like to migrate away from the all-dots notation since it leads to a lot of support questions, and for that I'd like to run in a compatibility-mode for a few months. Effectively, I want to get rid of all the old users and convert them all to the new scheme, and have the username rewritten at login, so every second to last dot gets rewritten to an at. This would ensure that we have no complaints and allow our users to migrate slowly. All users are currently stored in a MySQL database for Cyrus, but this will be changed to a Dovecot-LDAP combination. Is this possible? How could I achieve this? Kind regards, Gerry.

2 1

[Dovecot] Dovecot setuid, setgid, permission denied Problem!
by "Яцко Эллад Геннадьевич (ngs)" 13 Nov '09

13 Nov '09

Hello! Please, help! I have trouble with Dovecot's Deliver utility. I don't know how to avoid errors. Let me know what additional related information do you need? 1) Its call in Exim's configure: ========================================== local_delivery_spam_transport: driver = pipe command = /usr/local/libexec/dovecot/deliver -c /usr/local/etc/dovecot/dovecot.conf -d $local_part@$domain -m Junk message_prefix = message_suffix = log_output = true delivery_date_add envelope_to_add return_path_add user = mailnull group = mail ========================================== 2) maillog output: ========================================== Nov 13 11:16:50 srvgate-msk exim[47586]: 1N8rKs-000CNW-Qu <= eyatsko(a)runoguy.ru H=main.domain.runoguy.ru [172.16.77.11] P=esmtpa A=auth_plain:eyatsko@runoguy.ru S=42548 from <eyatsko(a)runoguy.ru> for eyatsko(a)runoguy.ru Nov 13 11:16:51 srvgate-msk exim[47593]: 1N8rKt-000CNd-D2 <= eyatsko(a)runoguy.ru U=mailnull P=spam-scanned S=43507 id=E1N8rKs-000CNW-Qu(a)srvgate-msk.runoguy.ru from <mailnull(a)runoguy.ru> for eyatsko(a)runoguy.ru Nov 13 11:16:51 srvgate-msk exim[47587]: 1N8rKs-000CNW-Qu => eyatsko <eyatsko(a)runoguy.ru> R=dspam_spamscan_router T=dspam_spamscan_transport Nov 13 11:16:51 srvgate-msk exim[47587]: 1N8rKs-000CNW-Qu Completed Nov 13 11:16:51 srvgate-msk deliver(eyatsko(a)runoguy.ru): auth input: home=/var/mail/exim Nov 13 11:16:51 srvgate-msk deliver(eyatsko(a)runoguy.ru): auth input: uid=26 Nov 13 11:16:51 srvgate-msk deliver(eyatsko(a)runoguy.ru): auth input: gid=26 Nov 13 11:16:51 srvgate-msk deliver(eyatsko(a)runoguy.ru): Fatal: setgid(26(mailnull)) failed with euid=26(mailnull), gid=6(mail), egid=6(mail): Operation not permitted Nov 13 11:16:51 srvgate-msk exim[47594]: 1N8rKt-000CNd-D2 == eyatsko(a)runoguy.ru R=local_delivery_spam_router T=local_delivery_spam_transport defer (0): Child process of local_delivery_spam_transport transport returned 75 (could mean temporary error) from command: /usr/local/libexec/dovecot/deliver ========================================== 3) dovecot-mysql.conf ========================================== driver = mysql connect = host=localhost dbname=exim user=exim password=***** default_pass_scheme = PLAIN password_query = SELECT `username` as `user`, `password` FROM `users` WHERE `username` = '%n@%d' AND `active`='Y' user_query = SELECT `home`, 26 AS `uid`, 26 AS `gid` FROM `users` WHERE `username` = '%n@%d' AND `active`='Y' ========================================== 4) Owner and permissions on mailbox-directory: ========================================== /usr/local/etc/exim> ll /var/mail/exim/runoguy.ru/ total 6 drwxrwx--- 10 mailnull mail 512 Nov 13 10:40 eyatsko drwxrwx--- 5 mailnull mail 512 Nov 12 22:17 nkolobovnikova drwxrwx--- 5 mailnull mail 512 Nov 12 22:30 oyatsko /usr/local/etc/exim> ========================================== 5) Junk folder: ========================================== /usr/local/etc/exim> ll /var/mail/exim/runoguy.ru/eyatsko/ total 46 drwxrwx--- 5 mailnull mail 512 Nov 10 21:29 .Drafts drwxrwx--- 5 mailnull mail 512 Nov 10 21:34 .Junk drwxrwx--- 5 mailnull mail 512 Nov 12 17:24 .Outgoing drwxrwx--- 5 mailnull mail 512 Nov 12 14:01 .Sent drwxrwx--- 5 mailnull mail 512 Nov 12 17:24 .Trash drwxrwx--- 2 mailnull mail 1024 Nov 13 10:40 cur -rwxrwx--- 1 mailnull mail 17 Nov 10 18:47 dovecot-keywords -rw------- 1 mailnull mail 19 Nov 13 10:40 dovecot-uidlist -rwxrwx--- 1 mailnull mail 8 Nov 10 21:24 dovecot-uidvalidity -rwxrwx--- 1 mailnull mail 0 Nov 10 17:17 dovecot-uidvalidity.4af975ff -rw------- 1 mailnull mail 384 Nov 13 10:40 dovecot.index -rwxrwx--- 1 mailnull mail 16916 Nov 13 10:40 dovecot.index.cache -rw------- 1 mailnull mail 116 Nov 13 10:40 dovecot.index.log drwxrwx--- 2 mailnull mail 512 Nov 13 10:33 new -rwxrwx--- 1 mailnull mail 38 Nov 10 21:28 subscriptions drwxrwx--- 2 mailnull mail 512 Nov 13 10:33 tmp /usr/local/etc/exim> ========================================== mailnull has system uid=26, mail has system gid=26. Kind regards. Ellad G. Yatsko.

1 0

[Dovecot] Turning off "Fixed Duplicates" feature
by Jordan Tardif 13 Nov '09

13 Nov '09

Is there a way to disable this feature? Seems to be causing more harm then good right now. Without getting into too much details it is fixing the duplcates but it does not remove the old file, and the new file it creates is not marked as read like the old one was. I understand that this problem can be created by multiple rsyncs and files changing in between, but is there any way that I can just turn this feature off all together? I do not see anything in the wiki regrading settings to disable. -- Jordan Tardif DreamHost

2 8

[Dovecot] Sieve and ACL problem
by Gregory Finch 13 Nov '09

13 Nov '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I've come across a problem that I can't figure out. I'm using Dovecot 1.2.6 and Sieve 0.1.13. I'm using the following sieve script to sort my incoming mail. require ["fileinto", "envelope"]; if envelope :all :is "from" "sopprde(a)newport.th.gov.bc.ca" { fileinto "Public/Weather"; } elsif envelope :all :is "from" "apache(a)ldmltd.ca" { fileinto "hwcr"; } elsif envelope :all :is "from" "weatherdirect(a)pelmorex.ca" { fileinto "Public/Weather"; } elsif envelope :all :is "from" "Drive.BC(a)gems2.gov.bc.ca" { fileinto "Public/Weather"; } elsif header :contains "List-Id" "Dovecot Mailing List" { fileinto "Dovecot"; } else { keep; } It works for saving to my private email folders, but I get a permission denied error when trying to save to a public folder. maillog - showing error Nov 12 12:26:57 app postfix/qmgr[19314]: B36E77800088: from=<weatherdirect(a)pelmorex.ca>, size=35572, nrcpt=1 (queue active) Nov 12 12:26:57 app dovecot: deliver(gfinch(a)app.ldmltd.ca): sieve: msgid=<3708845-2200911412202651769(a)pelmorex.ca>: failed to store into mailbox 'Public/Weather': Permission denied Nov 12 12:26:57 app dovecot: deliver(gfinch(a)app.ldmltd.ca): sieve: msgid=<3708845-2200911412202651769(a)pelmorex.ca>: stored mail into mailbox 'INBOX' Nov 12 12:26:57 app dovecot: deliver(gfinch(a)app.ldmltd.ca): sieve: execution of script /srv/dovecot/gfinch/.dovecot.sieve failed, but implicit keep was successful Nov 12 12:26:57 app postfix/pipe[15363]: B36E77800088: to=<gfinch(a)app.ldmltd.ca>, relay=dovecot, delay=0.66, delays=0.62/0/0/0.05, dsn=2.0.0, status=sent (delivered via dovecot service) Nov 12 12:26:57 app postfix/qmgr[19314]: B36E77800088: removed Nov 12 12:26:57 app postfix/smtpd[15365]: disconnect from mail127c0.megamailservers.com[69.49.121.237] maillog - showing working Nov 12 09:44:42 app postfix/smtpd[13094]: connect from dovecot.org[82.118.211.50] Nov 12 09:44:42 app postfix/smtpd[13094]: E08BC7800085: client=dovecot.org[82.118.211.50] Nov 12 09:44:43 app postfix/cleanup[13097]: E08BC7800085: message-id=<1258047854.3022.401.camel@timo-desktop> Nov 12 09:44:43 app postfix/qmgr[19314]: E08BC7800085: from=<dovecot-bounces+gfinch=app.ldmltd.ca(a)dovecot.org>, size=2518, nrcpt=1 (queue active) Nov 12 09:44:43 app postfix/smtpd[13094]: disconnect from dovecot.org[82.118.211.50] Nov 12 09:44:43 app dovecot: deliver(gfinch(a)app.ldmltd.ca): sieve: msgid=<1258047854.3022.401.camel@timo-desktop>: stored mail into mailbox 'Dovecot' Nov 12 09:44:43 app postfix/pipe[13099]: E08BC7800085: to=<gfinch(a)app.ldmltd.ca>, relay=dovecot, delay=0.32, delays=0.27/0.01/0/0.05, dsn=2.0.0, status=sent (delivered via dovecot service) Nov 12 09:44:43 app postfix/qmgr[19314]: E08BC7800085: removed As for the permissions, I can save messages to the public folder with no problems from my email client over IMAP, so I'm assuming the acl file is correct. dovecot-acl for Public/Weather authenticated lrs user=gfinch lrwstipekxa # 1.2.6: /etc/dovecot/dovecot.conf # OS: Linux 2.6.23.1-smp-LDM i686 Slackware 12.0.0 base_dir: /var/run/dovecot/ protocols: imap imaps managesieve ssl_ca_file: /etc/dovecot/ca.pem ssl_cert_file: /etc/dovecot/dovecot1.crt ssl_key_file: /etc/dovecot/dovecot1.key login_dir: /var/run/dovecot//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login verbose_proctitle: yes first_valid_gid: 500 mail_uid: 500 mail_gid: 500 mail_location: maildir:~/Maildir:LAYOUT=fs fsync_disable: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugins(default): acl imap_acl mail_plugins(imap): acl imap_acl mail_plugins(managesieve): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_idle_notify_interval(default): 1200 imap_idle_notify_interval(imap): 1200 imap_idle_notify_interval(managesieve): 120 namespace: type: private inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: Shared/%%u/ location: maildir:%%h/Maildir:LAYOUT=fs:INDEX=~/shared/%%u list: children namespace: type: public separator: / prefix: Public/ location: maildir:/srv/dovecot/public:LAYOUT=fs:INDEX=~/public list: children lda: postmaster_address: postmaster(a)ldmltd.ca mail_plugins: acl sieve fsync_disable: no auth default: mechanisms: plain login digest-md5 cram-md5 passdb: driver: passwd-file args: username_format=%Ln /etc/dovecot/passwd userdb: driver: static args: uid=500 gid=500 home=/srv/dovecot/%Ln socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: acl: vfile:/etc/dovecot/acls:cache_secs=300 acl_shared_dict: file:/etc/dovecot/shared/mailboxes sieve: ~/.dovecot.sieve sieve_dir: ~/sieve I don't know what I missed in the config, as everything else works perfectly. Thank you, - -Greg -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkr8jEwACgkQeflWWP27iA+UQgCgni3jztUw6PRCH9Z1tljVbv09 dQ8AnjBx+cYEmSfiZzTItbR/ZsmGcQQi =WzVp -----END PGP SIGNATURE-----

2 2

[Dovecot] Deliver and file system quota
by Rainer Frey 13 Nov '09

13 Nov '09

Hi, what is the quota plugin for deliver supposed to do when using fs quota? With IMAP, and not using noenforcing, a user that is over Soft limit can't copy mails. With deliver, the mail is delivered normally. When hard limit is exceeded, there is an error "rejected: Not enough disk space", just like when I don't use the plugin in lda. Even the lda setting "quota_full_tempfail = yes" works without the plugin configured in lda section. So is there any effect of the quota plugin in lda with file system quota? Thanks Rainer

2 1

[Dovecot] sieve files wont get parsed/compiled using cmusieve
by Moritz Krinke 13 Nov '09

13 Nov '09

Hello, im trying to get sieve up and running, but apparently my sieve rules file doesnt get parsed / compiled and i cant see any errors in my logfile which would point me to the problem. im using ubuntu 9.10 (and the dovecot packages from it), dovecot version is 1.1.11. in the protocol lda section of the config file i have added: mail_plugins = cmusieve mail_plugin_dir = /usr/lib/dovecot/modules/lda and in the plugins section: sieve = /var/vmail/%d/%n/.dovecot.sieve sieve_dir = /var/vmail/%d/%n/sieve root@mail:/# l /usr/lib/dovecot/modules/lda/lib90_cmusieve_plugin.* -rw-r--r-- 1 root root 247470 2009-10-15 06:38 /usr/lib/dovecot/modules/lda/lib90_cmusieve_plugin.a -rw-r--r-- 1 root root 1038 2009-10-15 06:37 /usr/lib/dovecot/modules/lda/lib90_cmusieve_plugin.la -rw-r--r-- 1 root root 141384 2009-10-15 06:38 /usr/lib/dovecot/modules/lda/lib90_cmusieve_plugin.so in /var/vmail/%d/%n/ i have a dir "sieve", containing a sieve rule file and a symlink to it: ls -la .dovecot.sieve lrwxrwxrwx 1 root root 21 2009-11-07 17:14 .dovecot.sieve -> sieve/roundcube.sieve ls -la sieve/ total 16 drwxrw-rw- 3 vmail mail 4096 2009-11-07 17:02 . drwxrw---- 20 vmail mail 4096 2009-11-07 17:20 .. -rwxrw-rw- 1 vmail mail 359 2009-11-07 17:02 roundcube.sieve as i understand the documentation there should be a ".dovecot.sievec" file after the first mail arrived. But there isnt. There also is nor err file . Since the dovecot user is in the group "mail", deliver should have rw-access to the sieve file/directory. The Upload of the sieve rule via dovecots managesieve did work as expected. Would be great if anyone had an idea what/where to check next...? ;-) Thanks, Moritz

4 6

[Dovecot] UTF-8 mailbox names in filesystem
by Timo Sirainen 13 Nov '09

13 Nov '09

Currently mailbox names are stored in IMAP's modified-UTF-7 format in filesystem. I was wondering about changing this in v2.0. The default would still be to use mUTF-7 in filesystem, but just adding :UTF8 or something to mail_location could enable UTF-8. Any thoughts? Could this be dangerous somehow? UTF-8 enables a lot of weird characters, perhaps no one really wants to see them on filesystem since there's no way to type the characters? But for small systems this probably isn't a problem.

7 9

[Dovecot] Postfix and Dovecot SASL
by Rene Bakkum 12 Nov '09

12 Nov '09

Hello all, I am struggeling to get my Dovecot SASL to work within postfix. I have used the configuration example listed on the main-site of dovecot and it basically isn't giving me any success at all. I am probably missing something easy, but after spending a few days testing and walking through everything I could think about I thought figured it was better to ask :) Hope someone can point me to the right direction. My setup is that I have installed Ubuntu 9.04 (64bit), postfix and dovecot linked to a MySQL database. The services are using maildirs which are stored locally (no NFS). Postfix is using the LDA from dovecot to deliver the mail and dovecot is used for IMAP and POP3. This is working and no problems at all so far. The problem starts when I just want to enable the SASL authentication from Dovecot. I used the 'guide' posted on http://wiki.dovecot.org/HowTo/PostfixAndDovecotSASL When I try to telnet to port 25 (smtp) than I doesn't looks like the SASL is working... 220 mail003 ESMTP Postfix (Ubuntu) ehlo localhost 250-mail003 250-PIPELINING 250-SIZE 10240000 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN Anything I missed in my configuration from either postfix/dovecot? root@mail003:/etc/postfix# dovecot --version 1.1.11 root@mail003:~# dpkg-query -l postfix +++-==============-==============-============================================ ii postfix 2.5.5-1.1 High-performance mail transport agent Here are my configurations of both: root@mail003:/etc/postfix# dovecot -n # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.28-16-server x86_64 Ubuntu 9.04 ext4 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 imaps pop3s managesieve ssl_cert_file: /etc/ssl/certs/ssl-mail.pem ssl_key_file: /etc/ssl/private/ssl-mail.key ssl_cipher_list: ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no login_greeting_capability(managesieve): no mail_max_userip_connections(default): 10 mail_max_userip_connections(imap): 10 mail_max_userip_connections(pop3): 3 mail_max_userip_connections(managesieve): 10 mail_privileged_group: mail mail_uid: 5000 mail_gid: 5000 mail_location: maildir:/home/vmail/%d/%n/.Maildir mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): ~/sieve sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): ~/.dovecot.sieve auth default: mechanisms: plain login passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/dovecot-auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail root@mail003:/etc/postfix# postconf | grep sasl broken_sasl_auth_clients = yes cyrus_sasl_config_path = lmtp_sasl_auth_cache_name = lmtp_sasl_auth_cache_time = 90d lmtp_sasl_auth_enable = no lmtp_sasl_auth_soft_bounce = yes lmtp_sasl_mechanism_filter = lmtp_sasl_password_maps = lmtp_sasl_path = lmtp_sasl_security_options = noplaintext, noanonymous lmtp_sasl_tls_security_options = $lmtp_sasl_security_options lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options lmtp_sasl_type = cyrus proxy_write_maps = $smtp_sasl_auth_cache_name $lmtp_sasl_auth_cache_name send_cyrus_sasl_authzid = no smtp_sasl_auth_cache_name = smtp_sasl_auth_cache_time = 90d smtp_sasl_auth_enable = no smtp_sasl_auth_soft_bounce = yes smtp_sasl_mechanism_filter = smtp_sasl_password_maps = smtp_sasl_path = smtp_sasl_security_options = noplaintext, noanonymous smtp_sasl_tls_security_options = $smtp_sasl_security_options smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options smtp_sasl_type = cyrus smtpd_recipient_restrictions = reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_exceptions_networks = smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/dovecot-auth smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = dovecot Any ideas? Thanks for the response. - Rene

2 4