February 2009 - dovecot

[Dovecot] Mapping usernames
by Henry 12 Feb '09

12 Feb '09

Greets, We're using Dovecot 1.0.7 (which comes with CentOS 5.x). I have successfully configured dovecot to change a username from abc(a)123.com to realname1_abc for a machine which only has a single domain (using auth_username_format=realname1_%Ln). However, I'm pulling my hair out trying to get dovecot to handle multiple domains (the machine has existing /etc/passwd /etc/shadow and /etc/mail/virtusertable users). On an older machine, I simply hacked the source code to perform a berkeley DB lookup in /etc/mail/virtusertable.db for the realname[a-z0-9]_xx. This time round, though, I'm trying to do this cleanly. I've been reading the docs/wiki/etc but I now can't see the forest for the trees. This is what I've got so far: In /etc/dovecot.conf: ... auth default { userdb passwd-file { args = /etc/dovecot.passwd } passdb passwd-file { args = /etc/shadow #args = /etc/dovecot.passwd } } /etc/dovecot.passwd contains: realnamea_abc:{PLAIN-MD5}$1$Vjkfhaa....::::::userdb_user=abc@123.com I've been fiddling around blindly with all kinds of settings in userdb {} above, but I always get the error: "passwd-file(abc@123.com,::ffff:127.0.0.1): unknown user", amongst others. In a nutshell, I want to allow a user to login with abc(a)123.com, this name must be mapped to a real system user (eg, using /etc/dovecot.passwd), then authenticated against /etc/shadow or the MD5 password in /etc/dovecot.passwd I would appreciate any kind of pointers or advise here. It would have been nice if vpopmail allowed me to call an external perl script where I could perform the username mapping, but alas, this is not possible. Thanks Henry -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.5 (GNU/Linux) mOIESXlwDRECAOycneJPOwSkETRkjJZdArag8V2rKOR2IUwlDOydIZXv/ITDlWDU dookzEdWh7Ektf1Jlh+YbPNEGoPpQunL8O8AoJbWmNkpoX7jP0Sw/5rDN2eKGHR7 Af9mxTqQ/j3C5LkrTRo9iCTt1TxoqPi6R/w0KkIAuTXBq6j+vIFJcOFgABlMQoXs V2crh1BUCmXVsV1puRJsLWKbAf4uL0V+N8WF4rvWHmJiYjgDn6exv3XHS0F6NhRz n1KVnV0XDWMDq/B/tmj4L2JYxEzWzeNulC5yQBOdx/dLU12XtCNIZW5yeSAoemVu LmNvLnphKSA8aGVucnlAemVuLmNvLnphPohgBBMRAgAgBQJJeXANAhsjBgsJCAcD AgQVAggDBBYCAwECHgECF4AACgkQCHhhdg2iQafVGACdEMtEuUGIW2XJyn9Fig7n sX4qzb4An0PGStBZvAP2qtzYP3SGlzsllzLjuI0ESXlwDRACAMsi4nl8/Yar2m9F ex4dFDgWylLgScQrEhhb2xN0Upcglm60nHQD7c1rP+63Iu+lU0eWvyr8o3JTCN4y PpoGMOMAAwUCAIUnLDMW/tz+qsYaOPyoh7HdAYqcrvVar7t+eKpihNBqfP4CT2Py aRVMN6cSJj9NKZDW6b0QQSCGgN7PpzrLqf6ISQQYEQIACQUCSXlwDQIbDAAKCRAI eGF2DaJBpxeiAJ9cNiuaftSoWke75RT1pn7qoibFfgCdHl6BgP9f450/oziDwaMM w49UeHQ= =qgmL -----END PGP PUBLIC KEY BLOCK-----

2 1

[Dovecot] v1.2: Can't subscribe to shared user folder
by Sascha Wilde 12 Feb '09

12 Feb '09

Hi *, I stumbled across a small bug (missing feature?) in the new shared name space stuff: a001 list "" "*" * LIST (\Noselect \HasChildren) "/" "user" * LIST (\Noselect \HasChildren) "/" "user/bob(a)example.com" * LIST (\HasChildren) "/" "INBOX" * LIST (\HasNoChildren) "/" "INBOX/bar" * LIST (\HasNoChildren) "/" "user/bob(a)example.com/brooklebookle" * LIST (\HasNoChildren) "/" "user/bob(a)example.com/foobar" a001 OK List completed. a002 lsub "" "*" a002 OK Lsub completed. a003 subscribe "user/bob(a)example.com/foobar" a003 NO Unknown subscription namespace. I'm quite sure this once worked in our original code (but of cause I could be mistaken). cheers sascha -- Sascha Wilde OpenPGP key: 4BB86568 http://www.intevation.de/~wilde/ http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück; AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

2 2

[Dovecot] (Somewhat urgent) Problem with maildir++ quota
by Santiago Romero 12 Feb '09

12 Feb '09

Hi. I have an strange problem with dovecot's maildir quota and postfix. I've tested quota and it works fine but sometimes there are users that having their Maildir/ empty, they trigger the "quota exceeded" message when someone sends email to them. Some config / version info: ### Versions: ii dovecot-common 1:1.0.10-1ubuntu5.1 ii dovecot-imapd 1:1.0.10-1ubuntu5.1 ii dovecot-pop3d 1:1.0.10-1ubuntu5.1 ### From dovecot.conf: (...) # SQL database <doc/wiki/AuthDatabase.SQL.txt> userdb sql { # Path for SQL configuration file args = /etc/dovecot/dovecot-mysql.conf } (...) dict { #quota = mysql:/etc/dovecot-dict-quota.conf } (...) plugin { quota = maildir:storage=51200 } ### dovecot-mysql.conf (splitted to be readable): user_query = SELECT maildir, 5000 AS uid, 5000 AS gid, concat('maildir:storage=', floor(quota/1024)) AS quota FROM mailbox WHERE username = '%u' AND active = '1' ### Database "mailbox" record example: | prueba(a)domain.com | Password | prueba | domain.com/prueba/ | 51200000 | domain.com | 2009-02-02 10:01:24 | 2009-02-02 10:07:46 | 1 | The symptons: users are working nicely, and quota works (If I create a new user and set it a quota of, say, 1MB, I can send him msgs until Maildir reachs 1MB, after that I get "quota exceeded" messages). But sometimes there are users with the Maildir empty that can't receive messages and trigger the "quota exceeded" warning. Users always download messages by POP. Removing "maildirsize" file in their folder fixes the problem. Also fixes it changing the quota to any value (maildirsize is then removed and recreated after a new message arrives for the user). Sometime that I don't know if it's strange is that I don't see "removing" messages in the maildirsize file after user downloads messages. I mean that I can't see "-1" lines in maildirsizes: # cat prueba/maildirsize 51200000S 0 0 615 1 1540 1 11446 1 46085 1 2623 1 21218 1 2815301 1 15110 1 21289 1 18330 1 (and so). Any idea of what's going on? Shouldn't appear "MSGSIZE -1" lines in maildirsize file to "restore" space in Maildir after POP RETRs? Currently I'm fixing the problem with a regular: # find /home/vmail/vhosts -name "maildirsize" -exec rm {} \; But there must exist a better solution (or maybe my config is wrong). Thanks a lot for any help. -- Santiago Romero

2 3

[Dovecot] dovecot 1.2.beta1: Fatal: io_loop_handle_add: epoll_ctl(1, 11): Bad file descriptor
by e-frog 11 Feb '09

11 Feb '09

I'm currently trying out 1.2.beta1 and get the following error in 'mail.err' log file as soon as I stop dovecot: Feb 11 20:28:30 server dovecot: Fatal: io_loop_handle_add: epoll_ctl(1, 11): Bad file descriptor Is that anything critical? Thanks, e-frog -------------------------------------------------------------------------------- >: dovecot -n # 1.2.beta1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27-11-server i686 Ubuntu 8.10 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap managesieve disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:~/.mail mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota expire fts fts_squat mail_plugins(imap): quota imap_quota expire fts fts_squat mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve auth default: passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: dovecot group: Debian-exim master: path: /var/run/dovecot/auth-master mode: 384 plugin: quota: maildir quota_rule: *:storage=1GB quota_rule2: Trash:storage=10%% expire: Trash 10 expire_dict: proxy::expiredict sieve: ~/.dovecot.sieve sieve_dir: ~/.sieve fts: squat fts_squat: partial=4 full=10 dict: expiredict: mysql:/etc/dovecot/dovecot-dict-sql.conf

1 0

[Dovecot] Panic in dovecot 1.2.beta1
by Mark Sapiro 11 Feb '09

11 Feb '09

I tried Dovecot 1.2.beta1 yesterday. I had been using 1.1.11. I started getting "Panic: POP3(xxx): Trying to allocate 0 bytes" There are two kinds of pop3 users. In the attached log.txt file, user u1 is using a pop3 MUA. For users u2, u3, u4 and u5 fetchmail is coming through an ssh tunnel and retrieving their mail. u1 is able to interact normally with dovecot, but the fetchmail users encountered the panics in the log. dovecot -n is attached as dovecot-n.txt. At first I thought it was a locking issue as .lock files were being left behind, so I changed pop3_lock_session to no, and restarted dovecot, but this didn't help so I reverted to 2.1.11. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

2 2

[Dovecot] Dovecot 1.1.11 imap namespaces .... access rights
by Harry Lachanas 11 Feb '09

11 Feb '09

Hi all, Is there a way to prohibit users of creating subfolder(s) under a Public Namespace ??? Here is my conf #------------------------------------------------------------------------------------------ log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps ssl_ca_file: /etc/postfix/sasl/cacert.pem ssl_cert_file: /etc/postfix/sasl/cert.pem ssl_key_file: /etc/postfix/sasl/key.pem login_dir: /var/run/dovecot//login login_executable: /usr/local/dovecot-1.1.11/libexec/dovecot/imap-login valid_chroot_dirs: /var/mail mail_privileged_group: mail mail_location: maildir:~/Maildir mail_debug: yes imap_client_workarounds: outlook-idle namespace: type: private separator: / location: maildir:~/Maildir inbox: yes list: yes subscriptions: yes namespace: type: public separator: / prefix: Public/ location: maildir:/home/Public:INBOX=~/Maildir:INDEX=~/Maildir/p-idx:CONTROL=~/Maildir/p-ctrl list: yes auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix #---------------------------------------------------------------------------------------------------------------- Cheers Harry.

4 6

[Dovecot] Adding new storage
by Romer Ventura 11 Feb '09

11 Feb '09

Hello, I am about to add more storage to the mail server and would like to know if it is as simple as it sounds..? I have: dovecot.conf mail_location: maildir:~/Maildir/ and /etc/dovecot/dovecot-ldap.conf with: user_attrs = sAMAccountName=mail=maildir:/home/vmail/%Ud/%Ln/Maildir/ So all the mail gets stored at /home/vmail/%Ud/%Ln/Maildir/ so if i add a new volume to the VM lets say /dev/disk3 and mount it to /srv/ vmail and then change the user_attrs = sAMAccountName=mail=maildir:/ home/vmail/%Ud/%Ln/Maildir/ to user_attrs = sAMAccountName=mail=maildir:/srv/vmail/%Ud/%Ln/Maildir/ would it work with no problem..? I would also need to move all the mailboxes already in the old location... I just want to make sure before i do anything.. Thanks

2 1

[Dovecot] Understanding dovecot ACLs
by Achim Hut 11 Feb '09

11 Feb '09

Hello List I am running a Cyrus IMAP that needs to be replaced. Geting a Dovecot IMAP up and running was surprisingly simple. My configuration is close to Johnny Chaddas Howto at http://johnny.chadda.se/2007/04/15/mail-server-howto-postfix-and-dovecot-wi… Its a Dovecot 1.1.10 on FreeBSD 6.4 Anyway, while basic setup was easy, i stuck in a couple of details like quota, managesieve, etc. Actual major problem and showstoper is understanding the ACLs the confuses me. So i need a hint to be guided in the right direction. What i need is a scenario, where user1 can get (for example) full access to the folders of user2, read-only access to user3 etc. A real world example: Secretary has full access to the mailfolders of her boss, boss has read-only acces to the sales-department folder. My questions: 1) is the possible? 2) can it be done with dovecot-acl files? 3) Namespaces: is it enough to have the private namespace for the job or do i need another namespace? 4) if yes, how should this namespace look like? Thanks for the help Achim

2 1

Re: [Dovecot] [Dovecot-news] v1.2.beta1 released
by Timo Sirainen 11 Feb '09

11 Feb '09

On Feb 10, 2009, at 10:45 PM, Reuben Farrelly wrote: > Feb 11 14:34:41 tornado dovecot: pop3-login: Login: user=<htperham>, > auth-method=PLAIN, remote=203.29.67.56 > Feb 11 14:34:41 tornado dovecot: Panic: POP3(htperham): Trying to > allocate 0 bytes .. > I can replicate this buy just telnetting to port 110, entering the > user and pass commands - as soon as I hit enter it dies :-( Fixed: http://hg.dovecot.org/dovecot-1.2/rev/22d70947597c

1 0

[Dovecot] dovecot logs to audit.log not to maillog
by Ralf Heidenreich 11 Feb '09

11 Feb '09

Hello, I have a curious phenomenon. Dovecot logs normally to /var/log/maillog. If I restart my server, dovecot loggs to /var/log/audit/audit.log. If I restart dovecot, dovecot loggs to /var/log/maillog again. And I think, wenn logrotate is restarting, dovecot logs to audit.log. But I don't know why. Any Ideas? greetings Ralf

2 3