September 2009 - dovecot

[Dovecot] pam_authenticate() failed
by Martijn de Munnik 30 Sep '09

30 Sep '09

Hi List, I have a problem with auth for just one user: dovecot: Sep 30 09:56:16 Info: auth(default): new auth connection: pid=3809 dovecot: Sep 30 09:56:17 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=AGoucnVpc0BtZXJreC12ZXJrZXJrLm5sAGJsb2VtMDEh dovecot: Sep 30 09:56:17 Info: auth(default): pam(j.ruis(a)merkx-verkerk.nl,127.0.0.1): lookup service=dovecot dovecot: Sep 30 09:56:17 Info: auth(default): pam(j.ruis(a)merkx-verkerk.nl,127.0.0.1): pam_authenticate() failed: Authentication failed dovecot: Sep 30 09:56:18 Info: auth(default): client out: FAIL 1 user=j.ruis(a)merkx-verkerk.nl dovecot: Sep 30 09:56:18 Info: imap-login: Disconnected: user=<j.ruis(a)merkx-verkerk.nl>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured this login attempt is done via webmail but also connections with mail clients fail. other users can login successful: dovecot: Sep 30 09:58:36 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=AG1 hcnRpam5AeW91bmdndW5zLm5sADZtdW5zaG9l dovecot: Sep 30 09:58:36 Info: auth(default): pam(martijn(a)youngguns.nl,127.0.0.1): lookup service=dovecot dovecot: Sep 30 09:58:36 Info: auth(default): client out: OK 1 user=martijn(a)youngguns.nl dovecot: Sep 30 09:58:36 Info: auth(default): master in: REQUEST 72 4119 1 dovecot: Sep 30 09:58:36 Info: auth(default): passwd(martijn(a)youngguns.nl,127.0.0.1): lookup dovecot: Sep 30 09:58:36 Info: auth(default): master out: USER 72 martijn(a)youngguns.nl system_user=martijn(a)youngguns.nl uid=1063 gid=1062 home=/home/youngguns.nl/homes/martijn dovecot: Sep 30 09:58:36 Info: imap-login: Login: user=<martijn(a)youngguns.nl>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Sep 30 09:58:36 Info: IMAP(martijn(a)youngguns.nl): Loading modules from directory: /opt/csw/lib/dovecot/imap dovecot: Sep 30 09:58:36 Info: IMAP(martijn(a)youngguns.nl): Module loaded: /opt/csw/lib/dovecot/imap/lib90_antispam_plugin.so dovecot: Sep 30 09:58:36 Info: IMAP(martijn(a)youngguns.nl): Effective uid=1063, gid=1062, home=/home/youngguns.nl/homes/martijn dovecot: Sep 30 09:58:36 Info: IMAP(martijn(a)youngguns.nl): maildir: data=/home/youngguns.nl/homes/martijn/Maildir dovecot: Sep 30 09:58:36 Info: IMAP(martijn(a)youngguns.nl): maildir: root=/home/youngguns.nl/homes/martijn/Maildir, index=/home/youngguns.nl/home s/martijn/Maildir, control=, inbox= dovecot: Sep 30 09:58:36 Info: IMAP(martijn(a)youngguns.nl): Disconnected: Logged out How can I determine why pam_authenticate() failed? output of dovecot -n: # 1.0.13: /opt/csw/etc/dovecot.conf log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot.info.log protocols: imap pop3 imaps pop3s listen(default): * listen(imap): * listen(pop3): *:110 ssl_cert_file: /opt/csw/ssl/secure-youngguns-nl.crt ssl_key_file: /opt/csw/ssl/secure-youngguns-nl.key disable_plaintext_auth: no verbose_ssl: yes login_dir: /opt/csw/var/run/dovecot/login login_executable(default): /opt/csw/libexec/dovecot/imap-login login_executable(imap): /opt/csw/libexec/dovecot/imap-login login_executable(pop3): /opt/csw/libexec/dovecot/pop3-login login_greeting: Welkom bij de YoungGuns postbode. mail_location: maildir:~/Maildir mail_debug: yes mail_executable(default): /opt/csw/libexec/dovecot/imap mail_executable(imap): /opt/csw/libexec/dovecot/imap mail_executable(pop3): /opt/csw/libexec/dovecot/pop3 mail_plugins(default): antispam mail_plugins(imap): antispam mail_plugins(pop3): mail_plugin_dir(default): /opt/csw/lib/dovecot/imap mail_plugin_dir(imap): /opt/csw/lib/dovecot/imap mail_plugin_dir(pop3): /opt/csw/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %v.%u auth default: mechanisms: login plain verbose: yes debug: yes debug_passwords: yes passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /opt/csw/var/spool/postfix/private/auth mode: 432 user: postfix group: postfix plugin: antispam_trash: Trash;trash;TRASH antispam_spam: spam antispam_mail_tmpdir: /tmp antispam_mail_sendmail: /opt/csw/bin/sa-learn antispam_mail_sendmail_args: antispam_mail_spam: --spam antispam_mail_notspam: --ham -- thanks, Martijn

2 1

[Dovecot] deliver: Fatal: setgid(114) failed with euid=8, gid=8, egid=8: Operation not permitted
by Fredriksson Turbo 30 Sep '09

30 Sep '09

I'm calling 'deliver' from Postfix and in some cases from Procmail. I set this system up more than six months ago and it's been working flawlessly until yesterday (16:52:19 local time) when it, without any apparent reason, just stopped delivering mails! Lots of checking and googling (I've forgot how exacly I setup the system :), I made 'deliver' SUID and it worked again... But it seems that all mails that was received between 16:52:19 and 11:07:52 (which was the last mail that couldn't be delivered) is lost! Is there any way to avoid mails being lost for reasons such as this? Is this a Postfix, Procmail or Dovecot thing? This system runs on a Ubuntu Intrepid: Postfix v2.5.5-1 Procmail v3.22-16ubuntu3 Dovecot v1:1.1.4-0ubuntu1.3 Thinking it over again (when double checking this mail), it might have been a automatic "de-SUID thingie or other" in Ubuntu. If memory serves me right, there used to be something like that in Debian long ago... But for whatever reason it DID happen, I'd appreciate an idea on how to avoid loosing mails if something happens to the delivery process...

3 2

[Dovecot] sieve & vacation - ignores "days" parameter
by Jacek Osiecki 30 Sep '09

30 Sep '09

Hi, I am going further with dovecot configuration. Finally managed to configure roundcube 0.3 with managesieve plugin. And it works, although... not perfectly :( For some issues probably roundcube-managesieve is guilty, but simply the sieve plugins seems to work wrong. Here is my sieve file: require ["vacation","fileinto"]; # rule:[wakacje] if anyof (true) { vacation :days 7 text: I am on vacation . ; } # rule:[silver-save] elsif allof (header :is "From" "joshua(a)hybrid.pl") { fileinto "myown"; stop; } And it seems, that sieve ignores ":days 7" parameter. Every time I send the email to this account, I receive the automatic answer. Maybe I misconfigured something? Where does vacation plugin store the information on emails that have already received the automatic answer? Best regards, -- Jacek Osiecki joshua(a)ceti.pl GG:3828944 I don't want something I need. I want something I want.

2 4

[Dovecot] dbox: maildir migration
by Timo Sirainen 30 Sep '09

30 Sep '09

I'm trying to clean up the code for Dovecot v2.0 and I just keep coming back to the same thought: Is having the super-fast maildir -> single-dbox migration really actually a good idea? Some problems with it: 1. Makes the code more complex.. And I've already fixed many bugs related to that, maybe not all. 2. Having some mails in maildir format and others in dbox format isn't really good in long term. The super-fast migration was mainly meant to be used as a quick and easy way to start using dbox and then slowly convert maildir files to dbox files. 3. There's currently no way to actually convert the migrated maildir files to dbox format. And I'm not really sure how such a tool would even be used. "doveadm -u <username> dbox convert-old-maildir-files" run one user at a time?.. Maybe a better alternative would be to simply do a proper full migration to dbox format, a few users at a time so disk I/O wouldn't explode? dsync especially could be helpful here. convert plugin could be replaced with a dsync plugin and then a migration could be done with: 1. Run a "pre-migration" dsync for n users (not absolutely required, but a good idea to avoid login delays). 2. Enable dsync plugin for the users (or this could be enabled always). 3. Switch users to dbox format. 4. Run a "post-migration" dsync for the users. If any user logged in before the post-migration was finished, the dsync plugin would finish the migration for that user. 5. Goto 1 with another set of users, repeat until finished with all users.

1 0

[Dovecot] Problem with dict-quota, deliver killed by delivery attempt
by Jacek Osiecki 29 Sep '09

29 Sep '09

Hi, I can't get quota lda plugin working... When I enable quota plugin, the emails (delivered by exim + dovecot-lda) are instantly rejected: 2009-09-29 16:36:12 1MsdoI-0000aJ-2L ** jacek(a)my-domain.pl R=mysql_localuser T=dovecot_delivery: Child process of dovecot_delivery transport (running command "/usr/lib64/dovecot/deliver -d $local_part@$domain -f $sender_address -a $original_local_part@$original_domain") was terminated by signal 9 (Killed) I have checked, that neither restart of dovecot nor delivery attempt tries to read the quotadict file (/etc/dovecot/dovecot-dict-quota.conf) - the atime is unchanged. I even tried to strace deliver: strace deliver -d jacek(a)my-server.pl -f joshua(a)another-server.pl -a jacek(a)my-server.pl [...] and it dies like this: munmap(0x7f99011d7000, 4096) = 0 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2679, ...}) = 0 stat("/var/mail/sieve/my-server.pl/jacek(a)my-server.pl.sieve", 0x79c66dd61140) = -1 ENOENT (No such file or directory) stat("/var/mail/mail/my-server.pl/jacek", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/var/mail/mail/my-server.pl/jacek/tmp", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/var/mail/mail/my-server.pl/jacek", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/var/mail/mail/my-server.pl/jacek/dovecot-shared", 0x79c66dd61080) = -1 ENOENT (No such file or directory) stat("/var/mail/mail/my-server.pl/jacek", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/var/mail/mail/my-server.pl/jacek", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 time(NULL) = 1254235039 mmap(NULL, 200704, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f990119c000 access("/var/mail/mail/my-server.pl/jacek/cur", W_OK) = 0 open("/var/mail/mail/my-server.pl/jacek/dovecot.index.log", O_RDWR) = 8 fstat(8, {st_mode=S_IFREG|0600, st_size=420, ...}) = 0 pread(8, "\1\2(\0<\23\302J\2\0\0\0\1\0\0\0\0\0\0\0<\23\302J\0\0\0\0\0\0\0\0"..., 40, 0) = 40 stat("/var/mail/mail/my-server.pl/jacek/dovecot.index.log.2", 0x79c66dd61130) = -1 ENOENT (No such file or directory) open("/var/mail/mail/my-server.pl/jacek/dovecot.index", O_RDWR) = -1 ENOENT (No such file or directory) stat("/var/mail/mail/my-server.pl/jacek/dovecot.index.log", {st_mode=S_IFREG|0600, st_size=420, ...}) = 0 fstat(8, {st_mode=S_IFREG|0600, st_size=420, ...}) = 0 pread(8, "\200\200\200\211@\0\0\20\377\377\377\377\0\0\0\0$\0\0\0\0\0\0\0\1\0\7\0mail"..., 1024, 40) = 380 pread(8, "", 1024, 420) = 0 brk(0x731000) = 0x731000 fstat(0, {st_mode=S_IFREG|0644, st_size=4, ...}) = 0 +++ killed by SIGKILL +++ I have completely no idea what is wrong - could anybody help? Here is my dovecot -n output: # 1.2.5: /etc/dovecot/dovecot.conf Warning: fd limit 1024 is lower than what Dovecot can use under full load (more than 1408). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: Linux 2.6.30.5-grsec x86_64 ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot.info.log protocols: pop3 pop3s imap imaps managesieve listen(default): 127.0.0.1:143 listen(imap): 127.0.0.1:143 listen(pop3): *:110 listen(managesieve): 127.0.0.1:2000 ssl_listen: * ssl_cert_file: /etc/ssl/server.crt ssl_key_file: /etc/ssl/server.key disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/lib64/dovecot/imap-login login_executable(imap): /usr/lib64/dovecot/imap-login login_executable(pop3): /usr/lib64/dovecot/pop3-login login_executable(managesieve): /usr/lib64/dovecot/managesieve-login max_mail_processes: 1024 first_valid_uid: 79 last_valid_uid: 79 first_valid_gid: 79 last_valid_gid: 79 mail_location: maildir:/var/mail/mail/%d/%u maildir_copy_with_hardlinks: no mbox_lazy_writes: no mail_executable(default): /usr/lib64/dovecot/imap mail_executable(imap): /usr/lib64/dovecot/imap mail_executable(pop3): /usr/lib64/dovecot/pop3 mail_executable(managesieve): /usr/lib64/dovecot/managesieve mail_plugins(default): autocreate quota imap_quota mail_plugins(imap): autocreate quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib64/dovecot/plugins/imap mail_plugin_dir(imap): /usr/lib64/dovecot/plugins/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/plugins/pop3 mail_plugin_dir(managesieve): /usr/lib64/dovecot/managesieve imap_client_workarounds(default): outlook-idle imap_client_workarounds(imap): outlook-idle imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %v.%u pop3_uidl_format(managesieve): %08Xu%08Xv lda: postmaster_address: postmaster(a)my-server.pl hostname: my-server.pl mail_plugins: sieve quota mail_plugin_dir: /usr/lib64/dovecot/plugins/lda sendmail_path: /usr/lib/sendmail auth_socket_path: /var/run/dovecot/auth-master auth default: verbose: yes passdb: driver: sql args: /etc/dovecot/auth-mysql.conf userdb: driver: sql args: /etc/dovecot/auth-mysql.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: exim group: exim master: path: /var/run/dovecot/auth-master mode: 432 user: root group: exim plugin: quota: dict:user::proxy::quotadict sieve: /var/mail/sieve/%d/%u.sieve autocreate: Trash autocreate2: Spam autocreate3: Sent autocreate3: drafts autosubscribe: Trash autosubscribe2: Spam autosubscribe3: Sent autosubscribe3: drafts dict: quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf Best regards, -- Jacek Osiecki joshua(a)ceti.pl GG:3828944 I don't want something I need. I want something I want.

3 4

[Dovecot] getmail and Dovecot LDA deliver
by spacejam 29 Sep '09

29 Sep '09

Hello, my first post in this list. Hope it's the right place.:-) I'm having a problem running getmail together with Dovecot LDA for virtual users. To achive this I let getmail run under the user that owns the virtual email accounts-root. The problem is that getmail is running under the user vmail and therefore the emails received will be put into vmail's mailbox. But the emails getmail collected are actually for a virtual Dovecot user which has its maildir in a subdirectory of vmails home. The settings for the virtual users seem to be okay: I can login on Dovecot with virtual user account and I can send emails to Postfix for the virtual user. Postfix correctly uses devlier with the name of the virtual user and so the emails are going to the correct directory. For me it seems that getmail always uses the username under which getmail is currently running. As this must be a local user, getmails always announces this local user to deliver and deliver therefore puts the emails into the wrong account. My question is: How do I let deliver know that it should use a virtual user? I tried with the -d agrument in my getmail rc File, but deliver never accepts the parameter -d (always says unknown parameter -d). I tried as well to let getmail or deliver to be run as root, but then the emails will be delivered to roots home, which is not the goal too... Does anyone know a way how I can set getmail to handle emails for a virtual account properly? Any hint is appreciated as it already costed me hours of try-and-error Regards tobi -- View this message in context: http://www.nabble.com/getmail-and-Dovecot-LDA-deliver-tp24896318p24896318.h… Sent from the Dovecot mailing list archive at Nabble.com.

4 9

[Dovecot] Enabling security on POP3 and IMAP
by Richard Hobbs 29 Sep '09

29 Sep '09

Hello, Currently, on our new test server, I am offering IMAP on 143 and POP3 on 110. We would like to enable security on both of these protocols to attempt to eliminate the risk from an internal password-grabbing/content-grabbing attack. I presume this would mean enabling SSL, and a more securure authentication, right? Or are plain text passwords just sent over the SSL, and therefore perfectly secure? Also, what are the steps to enable security for these protocols on an already-configured server? Is it possible to offer encrypted and non-encrypted services simultaneously, so people have a choice of whether they want security or not? I know that's a bit weird, but for testing it would be useful. Finally, is there a way to monitor which users are connecting over the secure ports and which users are connecting over the non-secure ports? Thanks in advance! Richard. -- Richard Hobbs (IT Specialist) Toshiba Research Europe Ltd. - Cambridge Research Laboratory Email: richard.hobbs(a)crl.toshiba.co.uk Web: http://www.toshiba-europe.com/research/ Tel: +44 1223 436999 Mobile: +44 7811 803377

8 13

[Dovecot] Managesieve and Proxy
by Oliver Eales 29 Sep '09

29 Sep '09

Hello list, is it possible to use the dovecot proxy feature for the mangaesieve server also ? Regards, Oliver

3 2

[Dovecot] Root User to Access Mailboxes for Migration
by Faisal Jaffar 29 Sep '09

29 Sep '09

Dear All, Hi there. We're currently using Microsoft Transporter Suite to migrate emails from Dovecot to Exchange. One of the features available to migrate is using the IMAP server administrator account to access other users' mailboxes. How and what do I need to set this up? Any information is much appreciated. Faisal Jaffar

4 6

[Dovecot] compressed IMAP traffic
by Leonardo Rodrigues 29 Sep '09

29 Sep '09

Simply (and maybe stupid) question ...... is there anything that can be easily used to automatically compress IMAP traffic between client and server ? I was thinking if the SSL/TLS code enables some kind of compression as well. the idea is to reduce IMAP traffic between server and clients and not using VPN-like solutions, the idea is just some IMAP4 standard client (compatible with SSL/TLS if that's the case) and nothing else. can something like that be done ? -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

6 26