December 2010 - dovecot

[Dovecot] Dovecot 1.2.12+Postfix+Active Directory: virtual domain name dropped.
by Ran Talbott 30 Dec '10

30 Dec '10

I have a Windoze-only client who wants to move their mail hosting from godaddy.com hosting to an in-house system. I'm pitching Linux as an alternative to Exchange, and trying to set up a demonstration system for them. While a long-time Linux user, my server admin experience has been in setting up front-ends (mostly Apache-based web interfaces) for the embedded systems I specialize in. The goal is to have an IMAP server where the users don't have Linux IDs, and only need to manually login to the Active Directory domain controller. The client has multiple Internet domains, but all users are in the same Active Directory realm internally. With the help of the how-tos at linuxmail.info, I got the system to the point of being able to authenticate logins for both IMAP and SMTP (usng dovecot-SASL). I tried using PAM first, but it didn't work: running kinit from the command line takes over 90 seconds to get a ticket, and Dovecot timed out after 60 on every login attempt. So I switched to LDAP. Note: I still don't understand why, but authentication through Active Directory didn't work until I changed the querying distinguished name from the "cn=,dc=,dc=" format to "user(a)xxxx.local" format. I have Postfix using dovecot-deliver as the LDA, but I hit a snag: deliver is not putting the domain name in the path to the maildir. I have the active directory query set as: user_filter = (&(objectClass=user)(samaccountname=%n)) user_attrs = =home=/var/mailstore/%d/%n. =uid=501, =gid=501, \ =mail=maildir:/var/mailstore/%d/%n/Maildir/ When I send mail to testing.testing(a)xxxx.xxx (real domain obscured), I see this in mail.log Dec 23 10:49:24 IBMUBUNTU1 dovecot: auth(default): master in: USER#0111#011testing.testing(a)xxxx.xxx#011service=deliver Dec 23 10:49:24 IBMUBUNTU1 dovecot: auth(default): ldap(testing.testing): user search: base=dc=lawley, dc=local scope=subtree filter=(&(objectClass=user) (samaccountname=testing.testing)) fields= Dec 23 10:49:24 IBMUBUNTU1 dovecot: auth(default): ldap(testing.testing): result: objectClass(?unknown?)= cn(?unknown?)= sn(?unknown?)= givenName(?unknown?)= distinguishedName(?unknown?)= instanceType(?unknown?)= whenCreated(?unknown?)= whenChanged(?unknown?)= displayName(?unknown?)= uSNCreated(?unknown?)= uSNChanged(?unknown?)= name(?unknown?)= objectGUID(?unknown?)= userAccountControl(?unknown?)= primaryGroupID(?unknown?)= objectSid(?unknown?)= sAMAccountName(?unknown?)= sAMAccountType(?unknown?)= userPrincipalName(?unknown?)= objectCategory(?unknown?)= Dec 23 10:49:24 IBMUBUNTU1 dovecot: auth(default): master out: USER#0111#011testing.testing#011home=/var/mailstore//testing.testing. =uid=501#011gid=501#011mail=maildir:/var/mailstore//testing.testing/Maildir/ i.e., the domain does not appear in the paths to the home directory or maildir. I found a bug report in the mailing list that looks like it might be the same problem (%d not supported in user_attrs), but the fix it references is for 2.0. Is this a known problem in 1.x? Is there a fix/workaround for it? E.g., could I have Postfix generate the maidir path and pass it to deliver as the "-m" parameter? Thanks, Ran

2 1

[Dovecot] 'Doveadm user' could use better error codes
by Thomas Leuxner 30 Dec '10

30 Dec '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The error codes for' doveadm user' should be improved to avoid error handling workarounds when scripting commands: $ doveadm user doveadm user [-a <userdb socket path>] [-x <auth info>] <user mask> […] $ echo $? 1 $ doveadm user foo userdb lookup: user foo doesn't exist $ echo $? 0 Please compare to ID output: $ id foo id: foo: No such user $ echo $? 1 Regards Thomas - -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) iEYEARECAAYFAk0Z6FkACgkQ+meF/S97aXgxnQCfWk1ECdMoCewbr1O6lAkdksoH 324AoLCTg0dFmFhumEkM936irpcG7YF5 =wuwz - -----END PGP SIGNATURE----- -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) iEYEARECAAYFAk0Z6HQACgkQ+meF/S97aXgGdACfawa02hZxk71CjIsj64sW0xXv CW8AoJRQZLFi4QwbvcDg6rzqzUv/3mE8 =Rt1O -----END PGP SIGNATURE-----

4 9

[Dovecot] doveadm quota get -u segmentation fault
by subscriber＠viliar.net.ru 30 Dec '10

30 Dec '10

Hello! I'm trying move to dovecot2 (centos 5.5, dovecot 2.0.8, dovecot compiled/packaged via edited dovecot2.spec from fedora git). Almost all fine, I can login via imap/pop3 and work with mail. I get segfault error with "doveadm quota get -u user" Here backtrace and other info: # gdb `which doveadm` core.5202 GNU gdb (GDB) Red Hat Enterprise Linux (7.0.1-23.el5_5.2) Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i386-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/bin/doveadm...Reading symbols from /usr/lib/debug/usr/bin/doveadm.debug...done. done. Reading symbols from /usr/lib/dovecot/libdovecot-storage.so.0...Reading symbols from /usr/lib/debug/usr/lib/dovecot/libdovecot-storage.so.0.0.0.debug...done. done. Loaded symbols for /usr/lib/dovecot/libdovecot-storage.so.0 Reading symbols from /lib/libcrypt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/libcrypt.so.1 Reading symbols from /lib/libpam.so.0...(no debugging symbols found)...done. Loaded symbols for /lib/libpam.so.0 Reading symbols from /usr/lib/dovecot/libdovecot.so.0...Reading symbols from /usr/lib/debug/usr/lib/dovecot/libdovecot.so.0.0.0.debug...done. done. Loaded symbols for /usr/lib/dovecot/libdovecot.so.0 Reading symbols from /lib/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/librt.so.1 Reading symbols from /lib/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/libaudit.so.0...(no debugging symbols found)...done. Loaded symbols for /lib/libaudit.so.0 Reading symbols from /lib/ld-linux.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /lib/libpthread.so.0...(no debugging symbols found)...done. Loaded symbols for /lib/libpthread.so.0 Reading symbols from /usr/lib/dovecot/lib10_quota_plugin.so...Reading symbols from /usr/lib/debug/usr/lib/dovecot/lib10_quota_plugin.so.debug...done. done. Loaded symbols for /usr/lib/dovecot/lib10_quota_plugin.so Reading symbols from /usr/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so...Reading symbols from /usr/lib/debug/usr/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so.debug...done. done. Loaded symbols for /usr/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so Core was generated by `doveadm quota get -u xxx@xxx'. Program terminated with signal 11, Segmentation fault. #0 0x00cc2b95 in cmd_quota_get_run (ctx=0x94dd3a8, user=0x94ee098) at doveadm-quota.c:52 52 array_foreach(&quser->quota->roots, root) (gdb) bt full #0 0x00cc2b95 in cmd_quota_get_run (ctx=0x94dd3a8, user=0x94ee098) at doveadm-quota.c:52 root__foreach_end = 0x94cd548 root = 0x94dec90 #1 0x0804f079 in doveadm_mail_next_user (ctx=0x94dd3a8, input=<value optimized out>, error_r=0xbffdf4e8) at doveadm-mail.c:220 service_user = 0x94debe0 error = <value optimized out> ret = 1 #2 0x0804f18c in doveadm_mail_single_user (ctx=0x94dd3a8, argv=0x94d51d4, username=0x94d51ed "xxx@xxx", service_flags=130) at doveadm-mail.c:246 input = {module = 0x0, service = 0x0, username = 0x94d51ed "xxx@xxx", local_ip = {family = 0, u = {ip6 = {in6_u = {u6_addr8 = '\000' <repeats 15 times>, u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, remote_ip = {family = 0, u = {ip6 = {in6_u = { u6_addr8 = '\000' <repeats 15 times>, u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, userdb_fields = 0x0, no_userdb_lookup = 0} error = <value optimized out> ret = <value optimized out> #3 0x0804f379 in doveadm_mail_cmd (cmd=0x94dc0d0, argc=3, argv=0x94d51d4) at doveadm-mail.c:418 service_flags = <value optimized out> ctx = 0x94dd3a8 getopt_args = 0x94cd2d0 "As:u:" username = 0x94d51ed "xxx@xxx" wildcard_user = 0x0 c = <value optimized out> #4 0x0804f6f8 in doveadm_mail_try_run_multi_word (cmd=0x94dc0d0, cmdname=0xcc2f18 "get", argc=4, argv=0x94d51c4) at doveadm-mail.c:453 No locals. #5 0x0804f7b7 in doveadm_mail_try_run (cmd_name=0x94d51e0 "quota", argc=4, argv=0x94d51c4) at doveadm-mail.c:476 cmd__foreach_end = 0x94dc0e8 cmd = 0x94dc0d0 cmd_name_len = 5 __FUNCTION__ = "doveadm_mail_try_run" #6 0x08053e11 in main (argc=Cannot access memory at address 0x14 ) at doveadm.c:344 cmd_name = 0x94d51e0 "quota" i = 134626935 quick_init = false c = <value optimized out> # 2.0.8: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.17.1.el5.028stab073.1 i686 CentOS release 5.5 (Final) simfs auth_mechanisms = plain login digest-md5 cram-md5 apop auth_socket_path = /var/run/dovecot/auth-userdb first_valid_gid = 5000 listen = * mail_location = maildir:/mail/%d/%n/maildir:INDEX=/mail/%d/%n/indexes mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { autocreate2 = virus autocreate3 = spam sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve sieve service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lmtp { mail_plugins = quota sieve } protocol lda { mail_plugins = quota sieve } protocol imap { mail_max_userip_connections = 10 mail_plugins = quota imap_quota autocreate } protocol sieve { mail_max_userip_connections = 3 } protocol pop3 { mail_max_userip_connections = 3 mail_plugins = quota } # grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-sql.conf.ext driver=sqlite connect = /etc/mailserver/mail.db default_pass_scheme = PLAIN user_query = SELECT '/mail/' || domain || '/' || mail || '/maildir' as home, uid, gid, '*:storage=' || quota || 'B' AS quota_rule FROM users WHERE mail || '@' || domain = '%u' password_query = SELECT mail || '@' || domain as user, password as password, '/mail/' || domain || '/' || mail || '/maildir' as userdb_home, uid as userdb_uid, gid as userdb_gid, 'maildir:storage=' || (quota/1024) as userdb_quota, nice as userdb_nice, hosts as allow_nets FROM users WHERE mail = '%n' and domain = '%d' and access = 'Y' and %Ls = 'Y';

2 1

[Dovecot] Is this really a user agent issue?
by Phil Howard 30 Dec '10

30 Dec '10

I suspect this is a user agent issue, given that Evolution is flaky in so many areas. When I deliver mail to a subfolder/subbox (e.g. the -m option in the deliver command), and Evolution doesn't know of it, yet, creating it fails, and Evolution still can't get to it. Doing things the other way around (create it in Evolution first, then deliver to it) works fine. Seems to be silliness to me. Just wondered if any Dovecot aspects might be involved ... such as the fact that the case is different (e.g. "INBOX" in the filesystem, but "Inbox" in Evolution). -- sHiFt HaPpEnS!

6 12

[Dovecot] How to get a working dovecot.conf?
by oddball56 29 Dec '10

29 Dec '10

Hi, I installed openSUSE 11.3 server version, and followed the guidelines from: http://www.howtoforge.com/perfect-server-opensuse-11.3-x86_64-ispconfig-3 Everything works, accept loggin into dovecot. For many days i tried to get logged into dovecot, from localhost, from other pc in the lan, from squirrelmail, not possible. I read manuals on http://wiki.dovecot.org/ and tried to set the passwd db like: auth default { .. passdb passwd-file { args = /etc/passwd.dovecot } .. The "args" were not accepted according to the output from dovecot -n As now i installed dovecot 20, with a fresh dovecot.conf. Ofcourse this was not working, so i 'updated' ISPConfig. Now my dovecot.conf is a mess, and i get errormessages like: Dec 20 21:00:02 AsusTT-sfn6 postfix/smtpd[7073]: fatal: no SASL authentication mechanisms And from dovecot: dovecot.pem missing from /etc/ssl/certs, so no ssl login possible also Now i am checking dovecot -n line by line and this message pops out: mail_plugin_dir: access(/usr/lib/dovecot/modules/imap) failed: No such file or directory passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } furtheron: ssl = no userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } it has 64 lines. first and last_valid_uid and gid are set to 5000. In this conf i did not change anything. I would realy appreciate some help, as my only goal was to set up an imap server so i can access my mail from all over the world, and have all mail in 'one' central place, instead of scattered all over many pc's and laptops. The irony is that evrything but this works ;-p tia, for an answer. Rob. -- View this message in context: http://old.nabble.com/How-to-get-a-working-dovecot.conf--tp30506797p3050679… Sent from the Dovecot mailing list archive at Nabble.com.

6 11

[Dovecot] panic with lmtp proxy (assertion failed)
by imaami＠netikka.fi 29 Dec '10

29 Dec '10

Hello! Got a panic&assertion failed with LMTP proxy. Target Dovecot LMTP server hanged and Dovecot LMTP proxy server started logging panics/assertions. Core dumps were disabled unfortunately, so I don't know if this is helpful at all: Dec 29 15:41:58 lmtp(8853): Panic: file lmtp-proxy.c: line 370 (lmtp_proxy_output_timeout): assertion failed: (proxy->data_input->eof) Dec 29 15:41:58 lmtp(8853): Error: Raw backtrace: /usr/local/dovecot20/lib/dovecot/libdovecot.so.0 [0xb76aa7c1] -> /usr/local/dovecot20/lib/dovecot/libdovecot.so.0 [0xb76aa83f] -> /usr/local/dovecot20/lib/dovecot/libdovecot.so.0(i_error+0) [0xb76aab14] -> dovecot/lmtp [0x804e3f4] -> /usr/local/dovecot20/lib/dovecot/libdovecot.so.0(io_loop_handle_timeouts+0xe0) [0xb76b7720] -> /usr/local/dovecot20/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x8b) [0xb76b843b] -> /usr/local/dovecot20/lib/dovecot/libdovecot.so.0(io_loop_run+0x40) [0xb76b7340] -> /usr/local/dovecot20/lib/dovecot/libdovecot.so.0(master_service_run+0x2a) [0xb76a31fa] -> dovecot/lmtp(main+0x170) [0x804b380] -> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe5) [0xb7516455] -> dovecot/lmtp [0x804b171] Dec 29 15:41:58 master: Error: service(lmtp): child 8853 killed with signal 6 (core dumps disabled) doveconf -n output: $ /usr/local/dovecot20/bin/doveconf -c /usr/local/dovecot20/etc/dovecot/dovecot-lmtpproxy.conf -n # 2.0.8: /usr/local/dovecot20/etc/dovecot/dovecot-lmtpproxy.conf # OS: Linux 2.6.31.5 i686 Debian 5.0.7 auth_cache_negative_ttl = 0 auth_mechanisms = plain login auth_socket_path = /usr/local/dovecot20/var/run/dovecot-lmtpproxy/auth-userdb auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@&: auth_verbose = yes base_dir = /usr/local/dovecot20/var/run/dovecot-lmtpproxy/ disable_plaintext_auth = no listen = * lmtp_proxy = yes log_path = /var/log/dovecot.lmtpproxy/dovecot.lmtpproxy.log login_log_format_elements = user=<%u> service=%s method=%m rip=%r lip=%l %c login_trusted_networks = 172.16.83.64/26 mail_fsync = never mail_gid = 1000 mail_location = maildir:~/Maildir mail_uid = 1000 maildir_very_dirty_syncs = yes passdb { args = /usr/local/dovecot20/etc/dovecot/dovecot-sql.lmtpproxy.alias.conf driver = sql } postmaster_address = postmaster(a)example.com protocols = lmtp service auth-worker { user = $default_internal_user } service auth { client_limit = 8192 unix_listener auth-userdb { mode = 0666 } } service imap-login { process_min_avail = 1 service_count = 0 vsz_limit = 1 G } service imap { process_limit = 2048 } service lmtp { inet_listener lmtp { address = * port = 24 } process_min_avail = 1 service_count = 0 user = mailuser vsz_limit = 512 M } service pop3-login { process_min_avail = 1 service_count = 0 vsz_limit = 1 G } service pop3 { process_limit = 2048 } ssl = no verbose_proctitle = yes protocol lda { info_log_path = log_path = mail_fsync = optimized } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 20 } protocol lmtp { mail_fsync = optimized } protocol pop3 { mail_max_userip_connections = 5 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh }

1 0

[Dovecot] search pattern -- which format?
by Ralf Hildebrandt 28 Dec '10

28 Dec '10

I had a look at the docs, but I could really see which kind of patterns the "search patterns" for doveadm must be. Regexp? PCRE? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

2 1

[Dovecot] Can dovecot+solr search on attachments?
by Antonio Perez-Aranda 28 Dec '10

28 Dec '10

I remember to read that dovecot+solr support search on mail attachment Is this true? Maybe, is needed to improve the basic solr schema to do this? -- Antonio Pérez-Aranda Alcaide aperezaranda(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

2 4

[Dovecot] Iphone all imap folders are visibles !
by Frank Bonnet 28 Dec '10

28 Dec '10

Hello When I use my iphone to read my emails through IMAP I can see ALL folders that are in my email home directory not only those are listed in the .subscriptions file ... This should be a real security problem Anyone have the same problem ? Thanks

2 1

[Dovecot] director in large(ish) environments
by Cor Bosman 28 Dec '10

28 Dec '10

Hey all, just wondering who here is running the director service in a larger environment. I just switched our whole production setup to the director and am quite pleased with the result. We're doing a peak of about 25000 tot 30000 concurrent sessions on 3 servers. But ive shut 1 server down a couple of days ago to see what would happen and 2 servers carried the load easily. (16 CPU, 24GB memory servers). If others are using the director on larger setups maybe we can all post when things do or dont work well. Now to see if the solution is better than the problem :) Cor

2 2