February 2009 - dovecot

[Dovecot] Changing level an error logs at
by Thomas M Goerger 17 Feb '09

17 Feb '09

Hi, I'd like to change the log levels of a few of the errors that Dovecot throws. Our servers throw errors at the console above the 'Error' level, and there are a few that I'd like to change to 'Warn' so that they don't do so. Has anyone out there attempted this and can give me a few pointers? Or is there a doc somewhere about how to do this? Thanks, ************************************************************************* * Tom Goerger - Email/Unix System Administrator * * * * University of Minnesota Email: tmg(a)umn.edu * * Operations, Infrastructure and Architecture Phone: 4-5804 * * Internet Services Office: 626J WBOB * * * *************************************************************************

3 3

[Dovecot] Replication status
by Asheesh Laroia 16 Feb '09

16 Feb '09

I remember last year we discussed Dovecot replication a bit on this list, e.g. http://www.dovecot.org/list/dovecot/2008-May/030446.html . Has there been any development related to this, and can I help at all? The more I think about the hacks I'm employing to synchronize mail, the more I realize I want this. So hopefully I can put either some money or some time where my mouth is. -- Asheesh. -- Its name is Public Opinion. It is held in reverence. It settles everything. Some think it is the voice of God. -- Mark Twain

7 10

[Dovecot] Access denied when client is connecting
by Florian Wörter 16 Feb '09

16 Feb '09

Hello! I'm having a problem with dovecot on my gentoo linux box. it would be great if you could help me. i'm planing to use dovecot as imap server. the incoming mails for the different useres are fetched by getmail. for every user a script should be called, which fetches the e-mails of this user from a pop3 server and puts them in ~/mailbox/new. this allready works. now i installed dovecot but everytime a client connects, i find these lines in my dovecot logfile (/var/log/dovecot.log) dovecot: Feb 16 09:08:09 Fatal: chdir(/home/woefl81) failed with uid 1001: Permission denied dovecot: Feb 16 09:08:09 Error: child 16211 (imap) returned error 89 (Fatal failure) the username of the connected user is woefl81, his user id is 1001 and his home directory is /home/woefl81/. i can't figure out why this user has no permission for his own files. well, for testing i now adjusted the directory permissions: in /: drwxr-xr-x 5 root root 152 Feb 10 09:19 home in /home: drwxr-xr-x 6 woefl81 users 296 Feb 11 08:27 woefl81 in /home/woefl81: drwxrwxrwx 5 woefl81 users 120 Feb 9 13:09 mailbox in /home/woefl81/mailbox: drwxrwxrwx 5 woefl81 users 120 Feb 9 13:09 . drwxr-xr-x 6 woefl81 users 296 Feb 11 08:27 .. drwxrwxrwx 2 woefl81 users 48 Feb 9 13:09 cur drwxrwxrwx 2 woefl81 users 120 Feb 9 13:13 new drwxrwxrwx 2 woefl81 users 48 Feb 9 13:13 tmp and finally in /home/woefl81/mailbox/new i find the email which was retrieved by getmail: drwxrwxrwx 2 woefl81 users 120 Feb 9 13:13 . drwxrwxrwx 5 woefl81 users 120 Feb 9 13:09 .. -rwxrwxrwx 1 woefl81 users 4.6K Feb 9 13:13 1234181629.M605602P32438Q0R5b6a645fa35278a9.proxystu as i said before i adjusted the rights for the mailbox subdir for testing to 0777, so everyone really should be able to do everything... my dovecot version is 1.1.11 my config: # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27-gentoo-r7 i686 Gentoo Base System release 1.12.11.1 log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot_info.log protocols: imap ssl_cert_file: /etc/ssl/dovecot/server.pem ssl_key_file: /etc/ssl/dovecot/server.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_chroot: no verbose_proctitle: yes mail_location: maildir:~/mailbox auth default: passdb: driver: pam args: * userdb: driver: passwd the user woefl81 is a "normal" system user (from /etc/passwd): woefl81:x:1001:100::/home/woefl81:/bin/bash his main group is users. on the client i installed mozilla tunderbird.. the user connects to the ip of the linux box with his username (woefl81) and the same password as his account pwd on the linux box. it would be great if somebody had an idea what else i should try to get dovecot to work as imap server. thank you very much in advance! best regards, Florian

2 1

[Dovecot] LDAP, MD5-CRYPT, invalid credentials, BUG or config issue?
by Guenther Falk 16 Feb '09

16 Feb '09

Hi, I read a lot of howto's and I got problems with LDAP and Dovecot to work together. I'm using: Gentoo Linux 2008.0 hardened Dovecot 1.1.7 Kernel 2.6.26 OpenLDAP 2.3.43 My dovecot-ldap.conf is: uris = ldaps://auth.mydomain.com:636 auth_bind = yes auth_bind_userdn = uid=%u,ou=People,dc=mydomain,dc=com ldap_version = 3 base = ou=People,dc=mydomain,dc=com deref = never scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%u)) default_pass_scheme = CRYPT I also tried default_pass_scheme = MD5-CRYPT In the logs I find smething like this: Feb 16 12:20:49 mail dovecot: Dovecot v1.1.7 starting up Feb 16 12:20:50 mail dovecot: auth(default): new auth connection: pid=30582 Feb 16 12:20:50 mail dovecot: auth(default): new auth connection: pid=30583 Feb 16 12:20:50 mail dovecot: auth(default): new auth connection: pid=30584 Feb 16 12:20:53 mail dovecot: auth(default): new auth connection: pid=30585 Feb 16 12:20:58 mail dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=172.30.0.10 rip=172.30.0.254 lport=993 rport=51269 Feb 16 12:20:58 mail dovecot: auth(default): client out: CONT 1 Feb 16 12:20:58 mail dovecot: auth(default): client in: CONT 1 AGd1ZW50aGVyADE*********= Feb 16 12:20:58 mail dovecot: auth(default): ldap(guenther,172.30.0.254): invalid credentials Feb 16 12:21:00 mail dovecot: auth(default): client out: FAIL 1 user=guenther Feb 16 12:21:00 mail dovecot: auth(default): client in: AUTH 2 PLAIN service=imap secured lip=172.30.0.10 rip=172.30.0.254 lport=993 rport=51269 resp=AGd1ZW50aGVyADE*********= Feb 16 12:21:00 mail dovecot: auth(default): ldap(guenther,172.30.0.254): invalid credentials Feb 16 12:21:02 mail dovecot: auth(default): client out: FAIL 2 user=guenther It seems dovecot ignores the CRYPT password scheme. The password seems to be encrypted in SSHA. What am I doing wrong please?? I am sure, the password is correct as I can login into the machine via nss_ldap and pam_ldap. Regards Günther

2 1

[Dovecot] LDAP, MD5-CRYPT, invalid credentials, BUG or config issue?
by guenther 16 Feb '09

16 Feb '09

Hi, I read a lot of howto's and I got problems with LDAP and Dovecot to work together. I'm using: Gentoo Linux 2008.0 hardened Dovecot 1.1.7 Kernel 2.6.26 OpenLDAP 2.3.43 My dovecot-ldap.conf is: uris = ldaps://auth.mydomain.com:636 auth_bind = yes auth_bind_userdn = uid=%u,ou=People,dc=mydomain,dc=com ldap_version = 3 base = ou=People,dc=mydomain,dc=com deref = never scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%u)) default_pass_scheme = CRYPT I also tried default_pass_scheme = MD5-CRYPT In the logs I find smething like this: Feb 16 12:20:49 mail dovecot: Dovecot v1.1.7 starting up Feb 16 12:20:50 mail dovecot: auth(default): new auth connection: pid=30582 Feb 16 12:20:50 mail dovecot: auth(default): new auth connection: pid=30583 Feb 16 12:20:50 mail dovecot: auth(default): new auth connection: pid=30584 Feb 16 12:20:53 mail dovecot: auth(default): new auth connection: pid=30585 Feb 16 12:20:58 mail dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=172.30.0.10 rip=172.30.0.254 lport=993 rport=51269 Feb 16 12:20:58 mail dovecot: auth(default): client out: CONT 1 Feb 16 12:20:58 mail dovecot: auth(default): client in: CONT 1 AGd1ZW50aGVyADE*********= Feb 16 12:20:58 mail dovecot: auth(default): ldap(guenther,172.30.0.254): invalid credentials Feb 16 12:21:00 mail dovecot: auth(default): client out: FAIL 1 user=guenther Feb 16 12:21:00 mail dovecot: auth(default): client in: AUTH 2 PLAIN service=imap secured lip=172.30.0.10 rip=172.30.0.254 lport=993 rport=51269 resp=AGd1ZW50aGVyADE*********= Feb 16 12:21:00 mail dovecot: auth(default): ldap(guenther,172.30.0.254): invalid credentials Feb 16 12:21:02 mail dovecot: auth(default): client out: FAIL 2 user=guenther It seems dovecot ignores the CRYPT password scheme. The password seems to be encrypted in SSHA. What am I doing wrong please?? I am sure, the password is correct as I can login into the machine via nss_ldap and pam_ldap. Regards Günther

1 0

[Dovecot] quota warning issue
by Alex 16 Feb '09

16 Feb '09

Hello to all, I'm using version 1.1.11 of dovecot. I set the quota using the following configuration: in /etc/dovecot/dovecot.conf quota = maildir:%u quota_warning = storage=75%% /root/quota-warning.sh 75 %u in /etc/dovecot/dovecot-sql.conf user_query = SELECT concat('/var/vmail/', maildir) as home, concat('maildir:/var/vmail/', maildir) as mail, 1000 AS uid, 12 AS gid, concat('*:storage=', ROUND(quota/1000)) AS quota_rule FROM mailbox WHERE username = '%u' AND active = '1' ## password_query = SELECT username as user, password, concat('/var/vmail/', maildir) as home, concat('maildir:/var/vmail/', maildir) as mail, 1000 AS uid, 12 AS gid, concat('*:storage=', ROUND(quota/1000)) AS quota_rule FROM mailbox WHERE username = '%u' AND active = '1' # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.25-hardened-r11 x86_64 Gentoo base_dir: /var/run/dovecot/ log_path: /var/log/mail.log info_log_path: /var/log/mail.log protocols: imap imaps pop3 pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login first_valid_uid: 1000 last_valid_uid: 1000 mail_location: maildir:/var/vmail/%d/%u mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %v.%u pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: user: nobody verbose: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: mail plugin: quota: maildir:%u quota_warning: storage=75%% /root/quota-warning.sh 75 %u sieve: /var/vmail/%d/%n/.dovecot.sieve The warning is not delivered to users. In my logs the user quota's percentage is calculated right dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Loading modules from directory: /usr/lib64/dovecot/imap dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Module loaded: /usr/lib64/dovecot/imap/lib10_quota_plugin.so dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Module loaded: /usr/lib64/dovecot/imap/lib11_imap_quota_plugin.so dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Effective uid=1000, gid=12, home=/var/vmail/foo.org/alex/ dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Quota root: name=alex(a)foo.org backend=maildir args= dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Quota rule: root=alex(a)foo.org mailbox=* bytes=52428800 messages=0 dovecot: Feb 15 23:42:33 Info: imap-login: Login: user=<alex(a)foo.org>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Quota warning: bytes=39321600 (75%) messages=0 command=/root/quota-warning.sh 75 alex(a)foo.org but also overcoming the space defined on quota warning, the command is not performed. The command does not contain errors because if performed by cli correctly sends the alert. Any ideas? Regards. Alex

3 7

[Dovecot] unkillable imap process(es) with high CPU-usage
by Arno Wald 15 Feb '09

15 Feb '09

Hello, I am having a problem with my dovecot-daemon. It is forking one or more (I saw up to perhaps 8 of them) imap processes under my user name. These processes are consuming a lot of CPU time and are not killable: > PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND > 8616 arno 20 0 2900 1600 1204 R 98 0.2 1196:38 imap Stopping dovecot does not quit these processes. Killing them (even "kill -9" as root) is not possible. The only solution to get rid of them is to reboot. I have found a mailing list post of one who seemed to have the same problem. He solved it by upgrading to version 1.1. But in my case this did not help. Is this a known problem? What could I check or do? My system: very up to date debian/sid (sidux) kernel 2.6.27-8.slh.1-sidux-686 CPU: Intel(R) Core(TM)2 CPU 4300 @ 1.80GHz Filesystem: ext3fs tried dovecot from sid: 1:1.0.15-2.3 tried dovecot from experimental: 1:1.1.2-3 My dovecot.conf is the original debian configuration with only one line changed into: protocols = imaps # dovecot -n # 1.1.2: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail auth default: passdb: driver: pam userdb: driver: passwd I am using dovecot locally on my system with me as the only user. As client I am using thunderbird alias icedove 2.0.0.17-1. Icedove retrieves the Mails from another imap server and sorts them into Maildir-folders in dovecot. I do not know when the imap-process are going mad. It happens after the system (and the mail-client) is up for a while. Do you need more information? Thanks, Arno

10 35

Re: [Dovecot] unkillable imap process(es) with high CPU-usage
by Robert Schetterer 15 Feb '09

15 Feb '09

just again to the list wasnt in reply Robert Schetterer schrieb: > Hi Gene , small tips depending suse > > Gene Steinberg schrieb: >> On Feb 14, 2009, at 9:57 AM, agent59624285 wrote: >> >>> I have this EXACT same problem after upgrading to SuSE 11.1, which >>> uses this >>> exact kernel version!! >>> >>> After reading this, I was excited to think that if I killed the nfsserver >>> daemon (which I had running for no good reason), that it would sort my >>> problem.... >>> >>> Sure enough, my computer - which up to now had been going unresponsive >>> every >>> 24 hours - was running fine for 72 hours and then BOOM... it happened >>> again. >>> >>> Just wanted to let people know that it seems that at the minute, the >>> dovecot >>> that ships with SuSE and the kernel they are using in 11.1 exhibit this >>> problem. ---my reply > > Suse kernels are not like vanilla kernels, > they are deeply patched an mostly have stuff from the next kernel > version allready in > you might use yast for upgrading latest suse kernel it might fixed allready > a short look gives > http://download.opensuse.org/repositories/home:/tristanhoffmann/openSUSE_11… > gives dovecot 1.1.11 which is latest > also loadable by yast or just download rpm and upgrade wtih rpm -u > > standart rep for mail stuff is > http://download.opensuse.org/repositories/server:/mail/openSUSE_11.1/ > but here dovecot is not at latest > but it shouldnt be any big problem downloading src and > prepare the spec with latest src dovecot > and compile by yourself > which is the best way and gives you the suse splitted packs > too and the advantage to see compile stuff > for sure you need some others libs etc cause of dependencies > befor but they are mostly downloadable also by yast > > be aware that suse sometimes splits up funktions > in own packs like > dovecot-autocreate11, dovecot-antispam11 > etc this musnt be the same by versions compile from home suse users > > also help full send a mail to the build service, > normally it takes only days and the newest version gets compiled > > > use http://software.opensuse.org/search > if looking for newer versions of software ----- > >>> Gino >>> >> This is sounding similar to the problem I have with my setup: >> >> 1. High CPU usage. >> >> 2. Can't kill IMAP. >> >> 3. Server becomes unresponsive. >> >> I'm using CentOS 5.2 64-bit version with the latest cPanel. >> >> So what am I missing, other than the problem nobody else is having is >> clearly something they ARE having? >> >> Peace, >> Gene > > -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

1 0

[Dovecot] digest-md5 problem
by Nigel Kukard 15 Feb '09

15 Feb '09

Info: v1.1.11 OS = Linux 32bit, custom build CPU Arch = i686 Filesystem = NFSv4 Problem: Digest-md5 not working. Tested plain, login and cram-md5 with pop3, imap and smtp/sasl fine. Using digest-md5 doesn't authenticate with the below error.... *** Feb 15 12:46:45 s03-400-134 dovecot: auth(default): client in: AUTH^I1^IDIGEST-MD5^Iservice=pop3^Ilip=10.0.2.134^Irip=10.0.2.1^Ilport=110^Irport=41579^Iresp=<hidden> Feb 15 12:46:45 s03-400-134 dovecot: auth(default): client out: CONT^I1^IcmVhbG09IiIsbm9uY2U9IktvMkFoK0lyeVhHRWtmY1k5TjM1TXc9PSIscW9wPSJhdXRoIixjaGFyc2V0PSJ1dGYtOCIsYWxnb3JpdGhtPSJtZDUtc2VzcyI= Feb 15 12:46:45 s03-400-134 dovecot: auth(default): client in: CONT<hidden> Feb 15 12:46:47 s03-400-134 dovecot: auth(default): client out: FAIL^I1 Feb 15 12:46:47 s03-400-134 dovecot: pop3-login: Disconnected (auth failed, 1 attempts): method=DIGEST-MD5, rip=10.0.2.1, lip=10.0.2.134 *** The decoded reply is ... authzid="USERNAME_HERE",charset=utf-8,cnonce="32d669a1334164b3362bff5f809acf12",digest-uri="pop/SERVER_URL_HERE",nc=00000001,nonce="rDWjRuMzuvbr5TLsinsE0A==",qop=auth,realm="",response=5c7c2ff3284f350fc62c5a2a80d2be64,username="USERNAME_HERE" On the same database cyrus imap & sasl is working 100%. All passwords are in plaintext format. Maybe I"m doing something wrong? Below my dovecot config... # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27.10 i686 none protocols: imap imaps pop3 pop3s listen: 10.0.2.134 shutdown_clients: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: s03-400-134 Secure server ready. max_mail_processes: 100 verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_location: maildir:/var/vmail/%h mail_debug: yes mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota trash mail_plugins(imap): quota imap_quota trash mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): pop3_enable_last(default): no pop3_enable_last(imap): no pop3_enable_last(pop3): yes pop3_lock_session(default): no pop3_lock_session(imap): no pop3_lock_session(pop3): yes pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes auth default: mechanisms: digest-md5 cram-md5 login plain cache_size: 256 user: nobody master_user_separator: * verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/sql.conf userdb: driver: sql args: /etc/dovecot/sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: dovecot group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: dovecot group: vmail plugin: quota: maildir trash: /etc/dovecot/trash.conf

1 0

[Dovecot] great disappearing email mystery
by dhottinger＠harrisonburg.k12.va.us 14 Feb '09

14 Feb '09

Have there been any issues with dovecot and using outlook express (imap) as an email client? I have had a couple of users come up with random missing emails. Im trying to figure out if it is user error, or something wacky in my mailserver. I cant find anything telling in maillog files or my messages. Dovecot version is 1.0.3. Its ok to reply to me, I get list messages digest. thanks, ddh -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools "Everything should be made as simple as possible, but not simpler." -- Albert Einstein "The hottest places in Hell are reserved for those who, in times of moral crisis, preserved their neutrality." -- Dante

10 25