July 2009 - dovecot - dovecot.org

[Dovecot] problem with disable_plaintext_auth
by Olivier Nicole 30 Jul '09

30 Jul '09

Hi, I am using dovecot with postfix for authentication. Everything (TLS/SSL, authentication) is working fine, except that when I set: disable_plaintext_auth = yes I still can authenticate with plain text on a no TLS/SSL session: 20 mail2.cs.ait.ac.th ESMTP Postfix (2.6.2) EHLO [192.41.170.57] 250-mail2.cs.ait.ac.th 250-PIPELINING 250-SIZE 10240000 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN AUTH PLAIN XXXX 235 2.7.0 Authentication successful My dovecot configuration is: # 1.1.16: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.2-RELEASE-p2 amd64 base_dir: /var/run/dovecot/ protocols: none ssl_listen: * ssl_ca_file: /usr/local/ssl/ca/ait-itserv.crt ssl_cert_file: /usr/local/ssl/crt/mail2.cs.ait.ac.th.crt ssl_key_file: /usr/local/ssl/key/mail2.cs.ait.ac.th.key ssl_cipher_list: ALL:!LOW:!SSLv2 login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login login_chroot: no login_greeting_capability: yes verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: mbox:~/mail/:INBOX=/var/mail/%u imap_client_workarounds: delay-newmail netscape-eoh tb-extra-mailbox-sep auth default: mechanisms: plain login username_format: %Ln verbose: yes debug: yes passdb: driver: ldap args: /usr/local/etc/dovecot-ldap.conf passdb: driver: passwd args: blocking=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 Any help is welcome. Best regards, Olivier

2 3

[Dovecot] sieve 0.1.8 raw backtrace
by jsechser＠gmx.ch 30 Jul '09

30 Jul '09

hi, I had two problems with deliver / sieve. First one is not reproducible anymore. Im using debian unstable (amd64), often dist-upgraded, with some experimental stuff too (wine i think). The first basically triggered a backtrace when confronted an email with spammassassins report headers prepended. (user_prefs: report_safe 0) However i dont have that backtrace anymore, sorry. The second poped up only later as i began to investigate more the first, a few days later. Now my entire sieve script seemed broken suddenly. After some time i narrowed it down to one offending line: >require ["fileinto","regex"]; > >if address :regex "to" ["m-a-test(a)test\\.ch","m-a-members(a)test\\.ch", \ >"m-a-region(a)test\\.ch","m-a-sig(a)test\\.ch"] { > fileinto "Test"; > stop; >} if i remove even one of the regex tests, then this script will not make deliver or sieve_test go panic. here the backtrace: 2009-07-29 18:15:37 deliver(xxx): Panic: pool_data_stack_realloc(): stack frame changed 2009-07-29 18:15:37 deliver(xxx): Error: Raw backtrace: /usr/lib/dovecot/deliver [0x496bc2] -> /usr/lib/dovecot/deliver(default_fatal_handler+0x34) [0x496cc4] -> /usr/lib/dovecot/deliver [0x496346] -> /usr/lib/dovecot/deliver [0x4a18fb] -> /usr/lib/dovecot/deliver [0x494185] -> /usr/lib/dovecot/deliver(buffer_write_zero+0xe5) [0x494a55] -> /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so [0x7f444ca98ff2] -> /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so(sieve_match_value+0xb0) [0x7f444ca8ea10] -> /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so(sieve_address_match+0xe3) [0x7f444ca8e5f3] -> /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so [0x7f444ca9291b] -> /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so(sieve_interpreter_continue+0x97) [0x7f444ca89307] -> /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so(sieve_interpreter_run+0x48) [0x7f444ca894f8] -> /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so [0x7f444ca96716] -> /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so(sieve_execute+0x3d) [0x7f444ca9698d] -> /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so [0x7f444ca7dc8a] -> /usr/lib/dovecot/deliver(main+0xf5e) [0x41d0fe] -> /lib/libc.so.6(__libc_start_main+0xe6) [0x7f444ceea5c6] -> /usr/lib/dovecot/deliver [0x41b029] I hope this helps cheers

2 2

[Dovecot] problems compiling dovecot-1.2.2 on solaris 10
by Jason Welsh 30 Jul '09

30 Jul '09

if test "$dot_seen" = "no"; then \ make "$target-am" || exit 1; \ fi; test -z "$fail" make: Fatal error: Command failed for target `all-recursive' Current working directory /scratch/jawelsh/src/dovecot-1.2.2/src *** Error code 1 The following command caused the error: failcom='exit 1'; \ for f in x $MAKEFLAGS; do \ case $f in \ *=* | --[!k]*);; \ *k*) failcom='fail=yes';; \ esac; \ done; \ dot_seen=no; \ target=`echo all-recursive | sed s/-recursive//`; \ list='src doc'; for subdir in $list; do \ echo "Making $target in $subdir"; \ if test "$subdir" = "."; then \ dot_seen=yes; \ local_target="$target-am"; \ else \ local_target="$target"; \ fi; \ (cd $subdir && make $local_target) \ || eval $failcom; \ done; \ if test "$dot_seen" = "no"; then \ make "$target-am" || exit 1; \ fi; test -z "$fail" make: Fatal error: Command failed for target `all-recursive' Current working directory /scratch/jawelsh/src/dovecot-1.2.2 *** Error code 1 make: Fatal error: Command failed for target `all' [house-7]$ this is with gcc-4.1.1 any ideas? Jason

2 2

[Dovecot] Unable to (un)subscribe mbox with AIX, NFS and netapp filer
by Ralf Becker 29 Jul '09

29 Jul '09

Hi Timo, dovecot 1.2.0 is great! Faster and more stable on mboxes that 1.1.x by far... good job :-) Today I stumbled over a strange problem when I tried to subscribe an existing Mailbox (mbox), which doesn't work. Thunderbird IMAP log -------------------- 9932[4124558]: 40f3498:imap.fh-trier.de:A:SendData: 11 subscribe "Mail/Archiv/1998" 9932[4124558]: ReadNextLine [stream=403f280 nb=108 needmore=0] 9932[4124558]: 40f3498:imap.fh-trier.de:A:CreateNewLineFromSocket: 11 NO [SERVERBUG] Internal error occurred. Refer to server log for more information. [2009-07-06 08:14:32] Server log ---------- Jul 6 08:14:32 trevi mail:info dovecot: IMAP(beckerr): Namespace Mail/: Using permissions from /u/f0/rzuser/beckerr/Mail: mode=0700 gid=-1 Jul 6 08:14:32 trevi mail:err|error dovecot: IMAP(beckerr): fchown(/u/f0/rzuser/beckerr/Mail/.subscriptions.lock, -1, -1) failed: Invalid argument Jul 6 08:14:32 trevi mail:err|error dovecot: IMAP(beckerr): file_dotlock_open() failed with subscription file /u/f0/rzuser/beckerr/Mail/.subscriptions: Invalid argument The error just appears on NFS mounted shared and I'm not sure if AIX or netapp is the cause. So to determine the real problem is not easy, but to fix it is: While uid and gid are both -1 the call could be suppressed, because nothing is really changed: --- ./lib/file-dotlock.c.org 2009-07-06 09:25:14.000000000 +0200 +++ ./lib/file-dotlock.c 2009-07-06 09:24:48.000000000 +0200 @@ -780,7 +780,7 @@ fd = file_dotlock_open(set, path, flags, &dotlock); umask(old_mask); - if (fd != -1) { + if (fd != -1 && (uid != -1 || gid != -1)) { if (fchown(fd, uid, gid) < 0) { if (errno == EPERM && uid == (uid_t)-1) { i_error("%s", eperm_error_get_chgrp("fchown", Ralf -- ______________________________________________________________________ Dipl.-Inform. (FH) Ralf Becker Rechenzentrum (r/ft) der FH Trier (Network|Mail|Web|Firewall) University of applied sciences Administrator Schneidershof, D-54293 Trier Mail: beckerr(a)fh-trier.de Fon: +49 651 8103 499 Web: http://www.fh-trier.de/~beckerr Fax: +49 651 8103 214 PubKey: http://www.fh-trier.de/~beckerr Crypto: GnuPG, S/MIME ______________________________________________________________________ Wenn Gott gewollt haette, dass E-Mail in HTML geschrieben wuerden, endeten Gebete traditionell mit </amen>. (Tom Listen)

4 11

[Dovecot] v1.2.2 released
by Timo Sirainen 29 Jul '09

29 Jul '09

http://dovecot.org/releases/1.2/dovecot-1.2.2.tar.gz http://dovecot.org/releases/1.2/dovecot-1.2.2.tar.gz.sig Found and fixes several v1.2-specific bugs. Hopefully it's now stable for most people's usage. * GSSAPI: More changes to authentication. Hopefully good now. * lazy_expunge plugin: Drop \Deleted flag when moving message. + dovecot -n/-a now outputs also lda settings. + dovecot.conf !include now supports globs (e.g. !include /etc/dovecot/*.conf). Based on patch by Thomas Guthmann. + acl: Support spaces in user/group identifiers. + shared mailboxes: If only %%n is specified in prefix, default to current user's domain. - Dovecot master process could hang if it received signals too rapidly. - Fixed "corrupted index cache file" errors (and perhaps others) caused by e.g. IMAP's FETCH BODY[] command. - IMAP: When QRESYNC is enabled, don't crash when a new mail is received while IDLEing. - IMAP: FETCH X-* parameters weren't working. - Maildir++ quota: Quota was sometimes updated wrong when it was being recalculated. - Searching quoted-printable message body internally converted "_" characters to spaces and didn't match search keys with "_". - Messages in year's first/last day may have had broken timezones with OSes not having struct tm->tm_gmtoff (e.g. Solaris). - virtual plugin: If another session adds a new mailbox to index, don't crash.

7 12

[Dovecot] dovecot-1.2.2+sieve 0.1.9: sieve issues with (global?) includes
by Tom Hendrikx 29 Jul '09

29 Jul '09

Hi, After upgrading from dovecot 1.1 to dovecot 1.2.2 and the new sieve implementation (0.1.9), I'm having some strange problems. I'm including some general purpose scripts into my user script from sieve_global_dir. After some tests it seems that ths scripts get executed at random: sometimes the mail gets stored in the correct dir, and sometimes it goes to inbox. This also happens while using the same compiled .svbin file. Another indication that something is wrong with the compiled .svbin is output of sieved (see below). Running sieved on the compiled test{1,2,3}.svbin files gives regular output. Any ideas what could be causing this? user script: =============================== require ["include"]; include :global "test1.sieve"; include :global "test2.sieve"; include :global "test3.sieve"; keep; =============================== /etc/dovecot/sieve/test1.sieve: =============================== require ["fileinto"]; if header :contains "Subject" "test1" { fileinto "sieve_test"; stop; } =============================== /etc/dovecot/sieve/test2.sieve: =============================== require ["fileinto"]; if header :contains "Subject" "test2" { fileinto "sieve_test"; stop; } =============================== /etc/dovecot/sieve/test3.sieve: =============================== require ["fileinto"]; if header :contains "Subject" "test3" { fileinto "sieve_test"; stop; } =============================== Log output with mail_debug=yes: =============================== # test mail for test1.sieve Jul 28 23:20:27 meredith-mail dovecot: deliver(tomhendr): Loading modules from directory: /usr/lib/dovecot/lda Jul 28 23:20:27 meredith-mail dovecot: deliver(tomhendr): Module loaded: /usr/lib/dovecot/lda/lib90_sieve_plugin.so Jul 28 23:20:27 meredith-mail dovecot: deliver(tomhendr): maildir: data=/var/spool/mail/tomhendr/Maildir Jul 28 23:20:27 meredith-mail dovecot: deliver(tomhendr): maildir++: root=/var/spool/mail/tomhendr/Maildir, index=, control=, inbox=/var/spool/mail/tomhendr/Maildir Jul 28 23:20:27 meredith-mail dovecot: deliver(tomhendr): sieve: using sieve path for user's script: /home/tomhendr/.default.sieve Jul 28 23:20:27 meredith-mail dovecot: deliver(tomhendr): sieve: opening script /home/tomhendr/.default.sieve Jul 28 23:20:27 meredith-mail dovecot: deliver(tomhendr): sieve: executing compiled script /home/tomhendr/.default.sieve Jul 28 23:20:27 meredith-mail dovecot: deliver(tomhendr): sieve: msgid=<20090728212027.02EEBD002(a)smtp.whyscream.net>: stored mail into mailbox 'sieve_test' # test mail for test2.sieve Jul 28 23:20:35 meredith-mail dovecot: deliver(tomhendr): Loading modules from directory: /usr/lib/dovecot/lda Jul 28 23:20:35 meredith-mail dovecot: deliver(tomhendr): Module loaded: /usr/lib/dovecot/lda/lib90_sieve_plugin.so Jul 28 23:20:35 meredith-mail dovecot: deliver(tomhendr): maildir: data=/var/spool/mail/tomhendr/Maildir Jul 28 23:20:35 meredith-mail dovecot: deliver(tomhendr): maildir++: root=/var/spool/mail/tomhendr/Maildir, index=, control=, inbox=/var/spool/mail/tomhendr/Maildir Jul 28 23:20:35 meredith-mail dovecot: deliver(tomhendr): sieve: using sieve path for user's script: /home/tomhendr/.default.sieve Jul 28 23:20:35 meredith-mail dovecot: deliver(tomhendr): sieve: opening script /home/tomhendr/.default.sieve Jul 28 23:20:35 meredith-mail dovecot: deliver(tomhendr): sieve: executing compiled script /home/tomhendr/.default.sieve Jul 28 23:20:35 meredith-mail dovecot: deliver(tomhendr): Namespace : Using permissions from /var/spool/mail/tomhendr/Maildir: mode=0700 gid=-1 Jul 28 23:20:35 meredith-mail dovecot: deliver(tomhendr): sieve: msgid=<20090728212035.5F2F8D003(a)smtp.whyscream.net>: stored mail into mailbox 'INBOX' # test with 2 mails for test2 in a row Jul 28 23:40:50 meredith-mail dovecot: deliver(tomhendr): Loading modules from directory: /usr/lib/dovecot/lda Jul 28 23:40:50 meredith-mail dovecot: deliver(tomhendr): Module loaded: /usr/lib/dovecot/lda/lib90_sieve_plugin.so Jul 28 23:40:50 meredith-mail dovecot: deliver(tomhendr): maildir: data=/var/spool/mail/tomhendr/Maildir Jul 28 23:40:50 meredith-mail dovecot: deliver(tomhendr): maildir++: root=/var/spool/mail/tomhendr/Maildir, index=, control=, inbox=/var/spool/mail/tomhendr/Maildir Jul 28 23:40:50 meredith-mail dovecot: deliver(tomhendr): sieve: using sieve path for user's script: /home/tomhendr/.default.sieve Jul 28 23:40:50 meredith-mail dovecot: deliver(tomhendr): sieve: opening script /home/tomhendr/.default.sieve Jul 28 23:40:50 meredith-mail dovecot: deliver(tomhendr): sieve: executing compiled script /home/tomhendr/.default.sieve Jul 28 23:40:51 meredith-mail dovecot: deliver(tomhendr): sieve: msgid=<20090728214050.C2983D002(a)smtp.whyscream.net>: stored mail into mailbox 'sieve_test' Jul 28 23:40:57 meredith-mail dovecot: deliver(tomhendr): Loading modules from directory: /usr/lib/dovecot/lda Jul 28 23:40:57 meredith-mail dovecot: deliver(tomhendr): Module loaded: /usr/lib/dovecot/lda/lib90_sieve_plugin.so Jul 28 23:40:57 meredith-mail dovecot: deliver(tomhendr): maildir: data=/var/spool/mail/tomhendr/Maildir Jul 28 23:40:57 meredith-mail dovecot: deliver(tomhendr): maildir++: root=/var/spool/mail/tomhendr/Maildir, index=, control=, inbox=/var/spool/mail/tomhendr/Maildir Jul 28 23:40:57 meredith-mail dovecot: deliver(tomhendr): sieve: using sieve path for user's script: /home/tomhendr/.default.sieve Jul 28 23:40:57 meredith-mail dovecot: deliver(tomhendr): sieve: opening script /home/tomhendr/.default.sieve Jul 28 23:40:57 meredith-mail dovecot: deliver(tomhendr): sieve: executing compiled script /home/tomhendr/.default.sieve Jul 28 23:40:57 meredith-mail dovecot: deliver(tomhendr): Namespace : Using permissions from /var/spool/mail/tomhendr/Maildir: mode=0700 gid=-1 Jul 28 23:40:57 meredith-mail dovecot: deliver(tomhendr): sieve: msgid=<20090728214057.43048D002(a)smtp.whyscream.net>: stored mail into mailbox 'INBOX' =============================== Output of 'sieved /home/tomhendr/.default.svbin =============================== * Required extensions: 0: include (16) 1: fileinto (5) Panic: file ext-include-variables.c: line 133 (ext_include_variables_dump): assertion failed: (global_vars != NULL) Error: Raw backtrace: sieved [0xa7fbfe10] -> sieved(default_fatal_handler+0x57) [0xa7fbfe97] -> sieved [0xa7fc006e] -> sieved [0xa7f7384c] -> sieved(ext_include_binary_dump+0x48) [0xa7f531c8] -> sieved(sieve_binary_dumper_run+0x119) [0xa7f671a9] -> sieved(sieve_dump+0x42) [0xa7f4bf82] -> sieved(sieve_tool_dump_binary_to+0x6f) [0xa7f7b77f] -> sieved(main+0x174) [0xa7f42564] -> /lib/libc.so.6(__libc_start_main+0xe2) [0xa7dce712] -> sieved [0xa7f422b1] Aborted =============================== -- Regards, Tom

2 4

[Dovecot] Random flags appearing on messages
by Michael M. Slusarz 29 Jul '09

29 Jul '09

Not reproducible every time, but every so often, after viewing an unseen message, I am seeing the first non-system flag set on the message without an intervening STORE call. Here's an example: 2 EXAMINE "XXX" (QRESYNC (1165391112 78 12160:12162,12168:12171,12173,12178,12183,12191,12360,12431,12560,12762,12765,13037,13089,13094,13196,13457,13460,13495,13548,13549,13561,13590,13597,13598)) * FLAGS (\Answered \Flagged \Deleted \Seen \Draft impflag0 impflag1) * OK [PERMANENTFLAGS ()] Read-only mailbox. ... 7 UID FETCH 13608 (ENVELOPE FLAGS RFC822.SIZE BODY.PEEK[HEADER.FIELDS (LIST-POST X-PRIORITY)]) * 30 FETCH (UID 13608 FLAGS (\Recent) ... On the next access: 2 SELECT "XXX" (QRESYNC (1165391112 79 12160:12162,12168:12171,12173,12178,12183,12191,12360,12431,12560,12762,12765,13037,13089,13094,13196,13457,13460,13495,13548,13549,13561,13590,13597,13598,13608)) * FLAGS (\Answered \Flagged \Deleted \Seen \Draft impflag0 impflag1) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft impflag0 impflag1 \*)] Flags permitted. ... 3 UID FETCH 13608 (BODY[HEADER]) * 30 FETCH (UID 13608 FLAGS (\Seen \Recent impflag0) BODY[HEADER] {2529} ... As can be seen, impflag0 has been magically set somehow. Stranger still, dovecot won't let you unset the flag (this might have something to do with QRESYNC since, if I run this command without the UNCHANGEDSINCE parameter, it will unset the flag): 4 UID STORE 13608 (UNCHANGEDSINCE 82) -FLAGS (impflag0) 4 OK Store completed. FYI, I am using dovecot 1.2.1 on archlinux (they haven't upgraded the package to 1.2.2 yet, but I didn't see anything in the 1.2.2 release notes that leads me to believe this has been fixed). michael

2 4

[Dovecot] authn_name and authz_name differ: not supported
by Nikolay Shopik 29 Jul '09

29 Jul '09

Hello, I'm trying to authenticate using GSSAPI, but getting this in dovecot.log "authn_name and authz_name differ: not supported". What is actually trying to say me? I've remeber once encounter this problem but it get away silently. I'm using Mozilla Thunderbird 3 beta 3 and Dovecot 1.0.15

1 1

[Dovecot] High Availability strategies
by Joseba Torre 29 Jul '09

29 Jul '09

Hi, we have a medium setup (8000 pop and imap users using almost every available client, 800GB of stored mails using maildir on a Celerra NFS server, with index files on local disks, and procmail for local delivery), being served by a Dell PowerEdge 2850 (2GB RAM and dual P4 Xeon 3,2GHz). Our current not-so-high availability setup is based on a similar server with the same setup and a easy but manual process to switch from one server to another. We are thinking about setting up some kind of serious high availability, but for every strategy we think about some problems appear, and I'd like to hear your opinions about them: - The recommended setup, with each user being sent always to the same server, is not possible because our load balancers (Cisco Catalyst 6000) can't do that. - We could put both servers behind the load balancer, and keep local index files on each server. Usually the same ip we'll be redirected to the same server, so few problems will arise. When a user is sent to a new server, index will be rebuilt so performance will be bad but we should not expect other problems, right? - We could also put the index files on a nfs share. No problems, but pretty bad performance. - We could also get more ram for the servers and keep indices in memory. How can we compare these solutions? Apart from performance, are other problems expected? Using deliver instead of procmail could improve performance? - We've also thought about some more or less weird setups, like setting up a GFS filesystem for the index files, or setting up a proxy on every server which redirect users to their fixed server, but they seem too complex for few advantages. Any recommendations? How are you doing this? -- Joseba Torre. Vicegerencia de TICs, área de Explotación

6 10

[Dovecot] Stuck with dovecot-sieve and horde-ingo ...
by Stefan G. Weichinger 29 Jul '09

29 Jul '09

Hello, dovecot-users ... as you may read at http://lists.horde.org/archives/horde/Week-of-Mon-20090706/037786.html I am stuck getting dovecot-sieve working with the ingo-application of the horde-framework. To me it seems as if ingo doesn't even trigger any request/command to managesieve ... I set "mail_debug=yes" in the managesieve-section of dovecot.conf but don't see any errors there, in fact not even loglines in /var/log/mail ... Any way to increase the loglevel here? Apache also doesn't log any errors. I am able to contact managesieve via telnet or even thunderbird's sieve-plugin. I edited the relevant backends.php over and over again, substituting, starting from scratch etc ... Could someone maybe give me some hint on how to proceed? I don't know if the problem is with dovecot or ingo or the underlying php/perl/something-stuff ... I currently use these releases: dovecot-1.2-sieve-0.1.8 dovecot-1.2-managesieve-0.11.7 dovecot-1.2.1 The server is some older Suse 10.1 ... php5-5.1.2-29.45, apache2-2.2.0-21.7, Horde Groupware Webmail Edition 1.2 # pear5 list Installed packages, channel pear.php.net: ========================================= Package Version State Archive_Tar 1.3.1 stable Console_Getopt 1.2 stable DB 1.7.12 stable Date 1.4.7 stable Log 1.9.11 stable Mail 1.1.14 stable Net_Sieve 1.1.6 stable Net_Socket 1.0.9 stable PEAR 1.4.6 stable XML_RPC 1.5.1 stable I would appreciate any input on this as this issue now already is unsolved for weeks now. And as always that is one of the features the customer wants first ;-) Aside from this dovecot is working great here, thanks ! Stefan

2 4