December 2010 - dovecot

[Dovecot] Per user quota on MySQL
by M. Rodrigo Monteiro 22 Dec '10

22 Dec '10

Hi! I'm new on Dovecot. I'm using: - CentOS 5.5 - Kernel 2.6.18-194.26.1.el5 x86_64 - Dovecot 2.0.8 (from source) - Postfix 2.7.2 (from source) - MySQL 5.0.77 (CentOS binary) - Postfixadmin 2.3.2 (from source) - Horde Webmail 1.2.9 - Thunderbird 3.1.7 (from CentOS) I follow this how to: http://wiki2.dovecot.org/HowTo/DovecotLDAPostfixAdminMySQL I was able to send and recieve e-mail via Postfix/Dovecot. I'm having troubles in the quota. As I said, I use Postfixadmin to manage users. When I log in Horde, it says that the quota is unlimited. Thunderbird too. I think it's because of the configuration on Dovecot. Here it's my confs files: ===== dovecot.conf ===== #ssl_cert_file = /etc/pki/dovecot/certs/myserver.example.com.crt #ssl_key_file = /etc/pki/dovecot/private/myserver.example.com.key #ssl_ca_file = /etc/pki/dovecot/certs/ca-bundle.crt #default_login_user = nobody disable_plaintext_auth = no log_path = /var/log/dovecot.log auth_mechanisms = plain login first_valid_uid = 200 last_valid_uid = 200 mail_location = maildir:/var/vmail/%d/%u ssl = no passdb { args = /usr/local/dovecot/etc/dovecot/sql.conf driver = sql } plugin { #acl = vfile:/usr/local/dovecot/etc/dovecot/acls quota = maildir:storage=10240:messages=1000 trash = /usr/local/dovecot/etc/dovecot/trash.conf } service auth { unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener /var/spool/postfix/private/auth { group = vmail mode = 0660 user = postfix } user = dovecot } userdb { args = /usr/local/dovecot/etc/dovecot/sql.conf driver = sql } userdb { driver = prefetch } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { mail_plugins = quota postmaster_address = postmaster(a)mydomain.com #log_path = /var/log/dovecot.log #info_log_path = /var/log/dovecot.log } ===== ===== sql.conf ===== driver = mysql connect = host=localhost dbname=postfix user=dovecot password=password user_query = SELECT concat('/var/vmail/', maildir) as home, concat('maildir:/var/vmail/', maildir) as mail, 200 AS uid, 200 AS gid, concat('maildir:storage=', floor(quota/1024)) AS quota FROM mailbox WHERE username = '%u' AND active = '1' ===== ===== mysql ===== mysql> select * from mailbox; +----------------------+------------------------------------+--------------+-----------------------+---------+------------+----------------+---------------------+---------------------+--------+ | username | password | name | maildir | quota | local_part | domain | created | modified | active | +----------------------+------------------------------------+--------------+-----------------------+---------+------------+----------------+---------------------+---------------------+--------+ | teste(a)mydomain.com | $1$bb3d6a71$IF/FORTbdoIqdzBLuSciJ0 | E-mail Teste | mydomain.com/teste/ | 1024000 | teste | mydomain.com | 2010-12-17 10:32:16 | 2010-12-17 11:46:24 | 1 | +----------------------+------------------------------------+--------------+-----------------------+---------+------------+----------------+---------------------+---------------------+--------+ ===== ===== mysql_virtual_mailbox_limit_maps.cf ===== user = postfix password = password hosts = localhost dbname = postfix query = SELECT quota FROM mailbox WHERE username='%s' AND active = '1' ===== I think it's it. If I forgot something, please let me know. Regards, Rodrigo. -- M. Rodrigo Monteiro "Free as in Freedom, not free as in free beer" "As we are liberated from our own fear, our presence automatically liberates others" Linux User # 403730 Pense antes de imprimir. Think before printing. AVISO LEGAL Esta mensagem é destinada exclusivamente para a(s) pessoa(s) a quem é dirigida, podendo conter informação confidencial e/ou legalmente privilegiada. Se você não for destinatário desta mensagem, desde já fica notificado de abster-se a divulgar, copiar, distribuir, examinar ou, de qualquer forma, utilizar a informação contida nesta mensagem, por ser ilegal. Caso você tenha recebido esta mensagem por engano, pedimos que nos retorne este E-Mail, promovendo, desde logo, a eliminação do seu conteúdo em sua base de dados, registros ou sistema de controle. Fica desprovida de eficácia e validade a mensagem que contiver vínculos obrigacionais, expedida por quem não detenha poderes de representação. LEGAL ADVICE This message is exclusively destined for the people to whom it is directed, and it can bear private and/or legally exceptional information. If you are not addressee of this message, since now you are advised to not release, copy, distribute, check or, otherwise, use the information contained in this message, because it is illegal. If you received this message by mistake, we ask you to return this email, making possible, as soon as possible, the elimination of its contents of your database, registrations or controls system. The message that bears any mandatory links, issued by someone who has no representation powers, shall be null or void.

7 14

Re: [Dovecot] Managesieve + Timeout
by Stephan Bosch 22 Dec '10

22 Dec '10

Please reply to the mailinglist as well. I am not the only one who can help you out. Op 21-12-2010 20:19, spamvoll(a)googlemail.com schreef: > Thunderbird 3.1.6 (Linux) with Sieve addon > > TLS auth happens and then a timeout is displayed > Does the TLS auth succeed, or is that where it hangs? The Tbird add-on as protocol logging facility, so you could check that to find out where it hangs exactly. Unfortunately, such issues are notoriously hard to debug when the problems don't occur consistently. I'm hoping Timo can provide some additional insight on this. Regards, Stephan. > here is my donvecot -n > > # 2.0.7: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.18-194.8.1.el5 i686 CentOS release 5.5 (Final) > default_process_limit = 250 > first_valid_gid = 10000 > first_valid_uid = 10000 > last_valid_gid = 10000 > last_valid_uid = 10000 > listen = 194.94.127.57 > mail_gid = 10000 > mail_location = maildir:~/mail > mail_plugins = " quota acl" > mail_uid = 10000 > managesieve_notify_capability = mailto > managesieve_sieve_capability = fileinto reject envelope > encoded-character vacation subaddress comparator-i;ascii-numeric > relational regex imap4flags copy include variables body enotify > environment mailbox date > mbox_write_locks = fcntl > namespace { > inbox = yes > location = > prefix = > separator = / > type = private > } > namespace { > list = children > location = maildir:%%h/mail:INDEX=~/mail/shared/%%u > prefix = shared/%%u/ > separator = / > subscriptions = no > type = shared > } > namespace { > list = children > location = maildir:/home/MAILBOXES/public:INDEX=~/mail/public > prefix = public/ > separator = / > subscriptions = no > type = public > } > passdb { > args = /etc/dovecot/dovecot-ldap.conf.ext > driver = ldap > } > plugin { > acl = vfile > acl_shared_dict = file:/home/MAILBOXES/shared-mailboxes.db > autocreate = Trash > autocreate2 = INBOX.SPAM > autosubscribe = Trash > autosubscribe2 = INBOX.SPAM > quota = maildir:iMAP Storage > quota_rule = *:storage=15G > quota_warning = storage=95%% quota-warning 95 %u > sieve = ~/.dovecot.sieve > sieve_before = /home/MAILBOXES/sieve.global > sieve_dir = ~/sieve > } > postmaster_address = postmaster(a)**example.org** > protocols = imap sieve > service auth { > unix_listener auth-userdb { > group = vmail > mode = 0600 > user = vmail > } > } > service imap-login { > inet_listener imap { > port = 0 > } > } > service managesieve-login { > inet_listener sieve { > port = 4190 > } > service_count = 0 > } > ssl = required > ssl_cert =</etc/pki/tls/certs/imap.cert.pem > ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!eNULL:!ADH:!MEDIUM:HIGH > ssl_key =</etc/pki/tls/private/imap.key.pem > userdb { > args = /etc/dovecot/dovecot-ldap.conf.ext > driver = ldap > } > protocol lda { > mail_plugins = " quota acl sieve" > } > protocol imap { > mail_plugins = " quota acl autocreate imap_quota imap_acl" > } > protocol sieve { > managesieve_implementation_string = Dovecot Pigeonhole > } > > > 2010/12/21 Stephan Bosch<stephan(a)rename-it.nl>: >> On 12/21/2010 08:03 PM, spamvoll(a)googlemail.com wrote: >>> hi.. >>> >>> im using dovecot 2.0.7 on centos with Managesieve 0.2.1-12.1 >>> >>> from time to time my users get a timeout >>> im using default values and i dont see any errors in my logfiles.. >>> >>> any ideas what can caus the timeout ? >> What client are those users using? How exactly does the timeout >> manifest, i.e. at what activity does it typically occur? >> >> What is your config ( dovecot -n ) ? >> >> Regards, >> >> Stephan. >> >>

3 2

[Dovecot] doveadm mirror in dovecot 2 FREEBSD 8.1 ?
by bonnetf 22 Dec '10

22 Dec '10

hELLO AGAIN doveadm mirror -does not seems to be installed in dovecot 2 freebsd 8.1 ports mail# doveadm usage: doveadm [-Dv] [-f <formatter>] <command> [<args>] altmove [-u <user>|-A] <search query> auth [-a <auth socket path>] [-x <auth info>] <user> [<password>] config [doveconf parameters] director add|flush|map|remove|status dump [-t <type>] <path> expunge [-u <user>|-A] <search query> fetch [-u <user>|-A] <fields> <search query> force-resync [-u <user>|-A] <mailbox> help <cmd> import [-u <user>|-A] <source mail location> <dest parent mailbox> <search query> kick [-a <anvil socket path>] [-f] <user mask>[|]<ip/bits> log find|reopen|test mailbox create|delete|list|mutf7|rename|status|subscribe|unsubscribe penalty [-a <anvil socket path>] [<ip/bits>] purge [-u <user>|-A] pw [-l] [-p plaintext] [-r rounds] [-s scheme] [-u user] [-V] reload search [-u <user>|-A] <search query> sis deduplicate|find stop user [-a <userdb socket path>] [-x <auth info>] <user mask> [...] who [-a <anvil socket path>] [-1] [<user mask>] [<ip/bits>]

2 1

[Dovecot] Managesieve with multiple uid's
by Joseba Torre 22 Dec '10

22 Dec '10

Hi, I'm trying to setup a system with dovecot to remove the old courier one, and everything (pop3, imap, lmtp, quotas) but managesieve is working fine. It seems like it's a problem with each user having a separate uid, because I have a working similar setup with a single uid working without problems. In this system when I try to connect to the managesieve port using telnet I get no response: $ telnet localhost 4190 Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. ^] telnet> quit In the logs I see: Dec 21 14:16:30 v000148 dovecot: managesieve-login: Disconnected: Inactivity (no auth attempts): rip=10.0.4.25, lip=10.0.82.8 Dec 21 14:16:30 v000148 dovecot: managesieve-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=102(<unknown>) egid=103(<unknown>) missing +x perm: /, euid is not dir owner) Dec 21 14:16:30 v000148 dovecot: managesieve-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=102(<unknown>) egid=103(<unknown>) missing +x perm: /, euid is not dir owner) Dec 21 14:19:30 v000148 dovecot: managesieve-login: Disconnected: Inactivity (no auth attempts): rip=10.0.4.25, lip=10.0.82. (102 is the uid of the dovecot user, and 103 is the gid of the dovenull group) My current setup is (I changed the mode of the service auth to 666 thinking the problem was there, but I got no change): # 2.0.8: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.26.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.5 (Tikanga) nfs auth_cache_size = 10 M auth_verbose = yes lock_method = dotlock mail_location = maildir:/docencia/cuentas/%1n/%n/Maildir/ mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = dict:User quota::file:%h/dovecot-quota quota_rule = *:storage=100M quota_warning = storage=85%% quota-warning 85 %u quota_warning2 = storage=82%% quota-warning 82 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve lmtp service auth-worker { user = dovecot } service auth { unix_listener auth-userdb { mode = 0666 } } service imap-login { chroot = login service_count = 1 user = dovecot } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service pop3-login { chroot = login service_count = 1 user = dovecot } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_cert = </usr/share/ssl/certs/imapd.pem ssl_key = </usr/share/ssl/certs/imapd.pem syslog_facility = local1 userdb { driver = prefetch } userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { mail_plugins = quota imap_quota } protocol lmtp { mail_plugins = quota sieve syslog_facility = local2 } -- Joseba Torre. Vicegerencia de TICs, área de Explotación

2 2

[Dovecot] Restarting dovecot-auth stops authentication
by Attila Nagy 22 Dec '10

22 Dec '10

Hi, The Dovecot wiki states that Dovecot's master restarts all died processes, which is good for availability. But when I kill dovecot/auth (to simulate an error condition which happened on a machine), the authentication fails with: Nov 16 14:32:40 be dovecot: imap: Error: net_connect_unix(auth-master) failed: No such file or directory It seems -albeit it gets restarted- dovecot/auth doesn't re-create its socket file. Before: # ls /var/run/dovecot/ anvil auth-worker doveadm-server anvil-auth-penalty config dovecot.conf auth-client dict empty auth-login director-admin lmtp auth-master director-userdb login auth-userdb dns-client master.pid # ps auwx | grep dovecot/auth dovecot 87455 0.0 0.0 20024 3832 ?? S 2:34PM 0:00.01 dovecot/auth # rm /var/run/dovecot/auth-master; kill 87455 # ps auwx | grep dovecot/auth dovecot 88815 0.0 0.0 20024 3776 ?? S 2:36PM 0:00.01 dovecot/auth # ls /var/run/dovecot/ anvil config dovecot.conf anvil-auth-penalty dict empty auth-client director-admin lmtp auth-login director-userdb login auth-userdb dns-client master.pid auth-worker doveadm-server I've deleted the auth-master socket because if I don't, you can't see that it's not re-created. :) Is this a normal behaviour? I understand that killing dovecot/auth is not, but Dovecot could survive this easily, if recreating and re-using the new socket file would work. And loosing dovecot/auth happens sometimes (I don't yet now why). Thanks,

2 12

[Dovecot] Moving email between folders outside of IMAP context
by Phil Howard 22 Dec '10

22 Dec '10

I'd like to run a script from cron that will scan certain mailboxes and move selected mail from one folder (usually INBOX) to another folder. The basic idea is to move previously detected spam based on headers prepended to the mail. Since I am not able to figure out how to get Postfix to invoke deliver with the -m option in these cases, and not in others, this is one idea I have come up with to deal with it. The big (hopefully obvious) complication seems to be getting the indexes updated. Is there a way to move mail this way AND then have the indexes updated to reflect that move (maybe even if regenerating the entire index all over again)? -- sHiFt HaPpEnS!

3 7

[Dovecot] shared boxes
by Tobias Daucher 22 Dec '10

22 Dec '10

Hi there, is it possible in any way to have private seen flags for users in a shared mailbox? http://wiki2.dovecot.org/SharedMailboxes/Shared says no, but i'm not sure, if newer mailbox formats can do this... like mdbox oder something like that. thanks for your help Tobi --

2 1

Re: [Dovecot] doveadm "-S <socket_path>" option enabled in 2.0.8?
by David Warden 21 Dec '10

21 Dec '10

On Dec 21, 2010, at 3:13 PM, Alex Baule wrote: > Its a UNIX Socket , not a TCP socket. > > So, it's be a local unix socket, like postgres do. > > Ah, in that case it looks like the docs need to be updated because the man pages and the wiki contain documentation that indicates TCP sockets should work: (from man doveadm-quota) -S socket_path The option's argument is either an absolute path to a local UNIX domain socket, or a hostname and port (hostname:port), in order to connect a remote host via a TCP socket. This allows an administrator to execute doveadm(1) mail commands through the given socket. > > 2010/12/21 David Warden <warden(a)geneseo.edu> > I apologize if this is a stupid question but I just compiled 2.0.8 and am trying to use doveadm to get the quota for a user using the -S <socket_path> option because I have different options for the various local IPs that dovecot listens on. > > For example, my default quota is filesystem (NFS rquota) and I can get that by doing: > > doveadm quota get -u warden > > which tells me: > > Quota name Type Value Limit % > User quota STORAGE 1313476 1766400 74 > > But when I try to get my quota on a different local IP using the -S flag to doveadm: > > doveadm quota get -u warden -S 137.238.2.244:143 > > I am told: > > get: invalid option -- S > > The strange thing is doveadm's usage says that the -S option is valid for quite a few commands and in the man pages for those commands it looks like they should work for the way I'm calling doveadm. In the 2.0.8 source I also see code that looks like it should be parsing the -S flag. > > I can telnet to 127.0.0.1:143 and do ". getquotaroot inbox" which gives me the same information as "doveadm quota get -u warden" and I can telnet to 137.238.2.244:143 and ". getquotaroot inbox" also tells me my quota, but I'm hoping to use doveadm to periodically recalc my Maildir++ quota and update the squat FTS indexes and for that to happen doveadm needs to be able to be told what local IP address/port to connect to (I think). > > Here's my doveconf -n: > > # 2.0.8: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.18-194.26.1.0.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.5 (Tikanga) nfs > auth_cache_size = 10 M > auth_master_user_separator = * > auth_mechanisms = plain login > auth_username_format = %Ln > deliver_log_format = msgid="%m" subject="%s" from="%f" size=%p result="%$" > first_valid_uid = 0 > lda_mailbox_autocreate = yes > lda_mailbox_autosubscribe = yes > login_log_format_elements = user=%u method=%m rip=%r lip=%l lport=%a mpid=%e encryption=%c > mail_location = maildir:/home/%Lu/Maildir:CONTROL=/Mail/mailhome/%Lu/.dovecot:INDEX=/Mail/mailhome/%Lu/.dovecot > mail_log_prefix = "service=%s user=%u rip=%r lip=%l " > mail_nfs_storage = yes > mail_plugins = zlib quota mail_log notify fts fts_squat > managesieve_notify_capability = mailto > managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date > mbox_write_locks = fcntl > namespace { > inbox = yes > location = > prefix = INBOX. > separator = . > type = private > } > passdb { > args = /etc/dovecot/passwd.masterusers > driver = passwd-file > master = yes > } > passdb { > args = cache_key=%u dovecot > driver = pam > } > plugin { > autocreate = Trash > autocreate2 = Drafts > autocreate3 = Sent > autosubscribe = Trash > autosubscribe2 = Drafts > autosubscribe3 = Sent > fts = squat > mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append > mail_log_fields = uid box msgid size from subject flags > mail_log_group_events = yes > quota = fs:User quota > quota_exceeded_message = Quota exceeded (mailbox for user is full). Please see http://go.geneseo.edu/emailoverquota for help deleting messages while over quota. > sieve = /Mail/mailhome/%Lu/.filter.sieve > sieve_dir = /Mail/mailhome/%Lu/.sievedir > } > postmaster_address = postmaster(a)geneseo.edu > protocols = imap pop3 sieve > quota_full_tempfail = yes > service managesieve-login { > inet_listener sieve { > port = 4190 > } > } > ssl_cert = </etc/pki/dovecot/certs/dovecot.pem > ssl_key = </etc/pki/dovecot/private/dovecot.pem > userdb { > driver = passwd > } > verbose_proctitle = yes > protocol lmtp { > mail_plugins = zlib quota mail_log notify fts fts_squat sieve > } > protocol lda { > mail_plugins = zlib quota mail_log notify fts fts_squat sieve zlib > } > protocol imap { > imap_logout_format = bytes(in/out)=%i/%o > mail_max_userip_connections = 50 > mail_plugins = zlib quota mail_log notify fts fts_squat quota imap_quota autocreate imap_zlib fts fts_squat > } > protocol sieve { > managesieve_logout_format = bytes(in/out)=%i/%o > } > protocol pop3 { > pop3_client_workarounds = outlook-no-nuls oe-ns-eoh > pop3_logout_format = bytes(in/out)=%i/%o, top=%t/%p, retr=%r/%b, del=%d/%m, mailbox-size=%s > pop3_uidl_format = UID%u-%v > } > local 137.238.2.244 { > mail_location = maildir:/Mail/mailhome/$Lu/mailtest/Maildir:CONTROL=/Mail/mailhome/%Lu/mailtest/.dovecot2-control:INDEX=/Mail/mailhome/%Lu/mailtest/.dovecot2-index > namespace { > location = > prefix = > } > plugin { > quota = maildir:User quota > quota_rule = *:storage=200M > quota_rule2 = Trash:storage=+50M > zlib_save = gz > zlib_save_level = 6 > } > } > local 137.238.1.1 { > protocol imap { > ssl_cert = </etc/pki/tls/certs/imaps.geneseo.edu.crt > ssl_key = </etc/pki/tls/private/imaps.geneseo.edu.key > } > } > local 137.238.2.244 { > protocol imap { > ssl_cert = </etc/pki/tls/certs/mailtest.geneseo.edu.crt > ssl_key = </etc/pki/tls/private/mailtest.geneseo.edu.key > } > } > local 137.238.1.1 { > protocol pop3 { > ssl_cert = </etc/pki/tls/certs/imaps.geneseo.edu.crt > ssl_key = </etc/pki/tls/private/imaps.geneseo.edu.key > } > } > local 137.238.2.244 { > protocol pop3 { > ssl_cert = </etc/pki/tls/certs/mailtest.geneseo.edu.crt > ssl_key = </etc/pki/tls/private/mailtest.geneseo.edu.key > } > } > >

1 0

[Dovecot] Managesieve + Timeout
by spamvoll＠googlemail.com 21 Dec '10

21 Dec '10

hi.. im using dovecot 2.0.7 on centos with Managesieve 0.2.1-12.1 from time to time my users get a timeout im using default values and i dont see any errors in my logfiles.. any ideas what can caus the timeout ?

2 1

[Dovecot] dovecot 2.08 start script
by Carsten Laun-De Lellis 21 Dec '10

21 Dec '10

Hi Could anyone provide me with a start script for dovecot 2.08 that could be placed in /etc/init.d ? I did an installation from the sources and followed the documentation at dovecot.org. Thankx in advance. Mit freundlichem Gruß Carsten Laun-De Lellis Dipl.-Ing. Elektrotechnik Certified Information Systems Auditor (CISA) Hauptstrasse 13 D-67705 Trippstadt Phone: +49 (6306) 992140 Mobile: +49 (151) 27530865 email: <mailto:carsten.laun-delellis@delellis.net> carsten.laun-delellis(a)delellis.net

2 2