May 2010 - dovecot - dovecot.org

[Dovecot] v2.0.beta5 released
by Timo Sirainen 25 May '10

25 May '10

http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta5.tar.gz http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta5.tar.gz.sig Sorry for being so quiet recently. Unfortunately I think it's still going to last a while longer. I'll be in Italy for next two weeks and immediately after that I'll move to Portugal. I'll probably write something about that later to blog. I had hoped that this beta5 would be almost the same as RC1, but I didn't have time to put everything there yet, and thought beta4 is way too old already. The few things that should still be done: - Change expire-tool to be a plugin for doveadm expunge command - doveadm mailbox * commands should use UTF-8 for mailbox names, not mUTF-7 (and add -7, -8 parameters to switch between them) - THREAD command seems to be crashing - some other bugfixes Some of the changes since beta4: - default_login_user is now "dovenull". You should create this user. - imap, pop3 -u <user> now does userdb lookup + changes privileges if necessary, so it's much easier to start imap/pop3 session for a specific user from command line - doveadm has all kinds of new commands and changes - PostgreSQL supports now multiple connections to backend. Also supports load-balancing / HA by specifying multiple host parameters. MySQL and PostgreSQL now share the same code for that. - probably lots of other things I can't think of right now. h

4 5

[Dovecot] about acl
by Yavuz Maşlak 25 May '10

25 May '10

I use dovecot, vpopmail. I wish to restrict a mail user's login to its mailbox according to its ip address. I don't wish other users to be affected . Namely, for instance, abc(a)domain.com can login to its mailbox from a few specific ip addresses but the same user will not able to login from anywhere. Meanwhile normally other mail users can login to their mailboxes from all ip addresses. How can I do that with dovecot acl ? any advice.

2 1

[Dovecot] suggestion
by Andreas Schulze 25 May '10

25 May '10

hello, dovecot2 implements "!include conf.d/*.conf" to build the configuration from multiple configfiles. So the settings for pop3, imap or lmtp may stay in different files. unfortunately the "protocol = " does not allow a += logic to enables or disable inet listeners. It would be nice to have protocols += imap in conf.d/imap.conf and protocols += managesieve in conf.d/managesieve.conf This would make the include feature more consistent... or is it already possible ? -- Andreas Schulze Internetdienste | P532 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

3 2

[Dovecot] Sieve problem. Timo, is this mbox file size limitation hard coded? If so, why?
by Stan Hoeppner 25 May '10

25 May '10

I would not have expected this upon implementing sieve. And I really need to get around this limitation. LDA has no problem writing to these large mbox files. Why does sieve have a problem with them? This is very odd. May 10 17:45:04 greer dovecot: deliver(stan): write() failed with mbox file /home/stan/mail/1-Debian-Users: File too large May 10 17:45:04 greer dovecot: deliver(stan): write() failed with mbox file /home/stan/mail/1-Debian-Users: File too large May 10 17:45:04 greer dovecot: deliver(stan): sieve: msgid=<20100510224422.GA4293(a)heima.gjk.dk>: failed to store into mailbox '1-Debian-Users': Internal error occurred. Refer to server log for more information. [2010-05-10 17:45:04] May 10 17:45:04 greer dovecot: deliver(stan): sieve: msgid=<20100510224422.GA4293(a)heima.gjk.dk>: stored mail into mailbox 'INBOX' May 10 17:45:04 greer dovecot: deliver(stan): sieve: execution of script /home/stan/.dovecot.sieve failed, but implicit keep was successful May 10 17:47:41 greer dovecot: deliver(stan): write() failed with mbox file /home/stan/mail/1-Spam-l: File too large May 10 17:47:41 greer dovecot: deliver(stan): sieve: msgid=<AANLkTinOywSh2KzgJhfHEihRSqKQn_Tg9KWnOwazmVmp(a)mail.gmail.com>: failed store into mailbox '1-Spam-l': Internal error occurred. Refer to server log for more information. [2010-05-10 17:47:41] May 10 17:47:41 greer dovecot: deliver(stan): sieve: msgid=<AANLkTinOywSh2KzgJhfHEihRSqKQn_Tg9KWnOwazmVmp(a)mail.gmail.com>: stored il into mailbox 'INBOX' May 10 17:47:41 greer dovecot: deliver(stan): sieve: execution of script /home/stan/.dovecot.sieve failed, but implicit keep was scessful [05:52:24][root@greer]/usr/bin$ la /home/stan/mail/ total 301M drwx------ 5 stan stan 4.0K May 7 04:33 . drwxr-xr-x 10 stan stan 4.0K May 10 16:18 .. drwx------ 37 stan stan 4.0K May 7 04:33 .imap -rw------- 1 stan stan 463 May 7 04:33 .subscriptions -rw------- 1 stan stan 66M May 10 17:45 1-Debian-Users -rw------- 1 stan stan 14M May 10 17:16 1-Dovecot -rw------- 1 stan stan 3.6M May 10 16:05 1-Linux-IDE -rw------- 1 stan stan 30M May 10 17:48 1-Postfix-Users -rw------- 1 stan stan 1.4M May 10 12:33 1-Roundcube -rw------- 1 stan stan 17M May 10 15:55 1-Samba -rw------- 1 stan stan 56M May 10 17:47 1-Spam-l -rw------- 1 stan stan 6.7M May 10 17:45 1-XFS -rw------- 1 stan stan 18M May 10 16:32 SpamTrap Is there any reason we have a fixed ceiling on the size of an mbox sieve will write to? Man this is disappointing. What is the ceiling? It appears to be somewhere between 30MB and 56MB as writes to 1-Postfix-Users are successful but writes to 1-Spam-l fail. Is there a fix/patch for this? Thanks. -- Stan

5 8

[Dovecot] List shared folders
by Marcio Merlone 25 May '10

25 May '10

Good morning! I run an imap-only Ubuntu 8.04 mail server with dovecot 1.2 and pam_ldap, so all my users are posix users. No virtual user or domain, no sql so far. I am setting up shared folders with "namespace shared". I got no errors upon restarting the service, but I get no shared folders listing. As per the wiki http://wiki.dovecot.org/SharedMailboxes/Shared I can use a bdb file or sql connection to keep the listing. But when I use a single bdb file like: plugin { acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes.db } everytime a user logs in, this file get its ownership to the user with 0600 mode. I could use an sql dictionary, but since I dont have any sql params on my configs I am not sure where to store connection params like user, password and host for database. Can anybody help me with that? My goal is to allow my users to shared selected folders with other users, hope to be in the right path. Thanks and regards. -- Marcio Merlone

2 1

[Dovecot] Setting up ACL for IMAP
by Andrés Gattinoni 25 May '10

25 May '10

Hi guys, I just suscribed cause I'm trying to do something which I'm not sure how. I need to prevent some accounts from deleting there emails. >From what I've seen [0] this could be achieved by using ACL. My first question is, is this right? Is there a way to achieve the same using POP3? I tried setting up ACL using the info at the Wiki [1], but it's not working. What I've seen is that when I put: protocol imap { mail_plugins = acl imap_acl } I get the following error: May 14 14:54:52 mail dovecot: SIGHUP received - reloading configuration May 14 14:54:52 mail dovecot: imap dump-capability: Couldn't read capability (got 0 bytes) May 14 14:54:52 mail dovecot: Invalid configuration, keeping old one May 14 14:54:52 mail dovecot: child 32301 (unknown) returned error 82 (Internal logging error) Looking on the internet I found out that I don't have the imap_acl lib shared object. This is what I have on /usr/lib/dovecot/lib/imap: total 48 lrwxrwxrwx 1 root root 22 May 6 22:07 lib01_acl_plugin.so -> ../lib01_acl_plugin.so lrwxrwxrwx 1 root root 31 May 6 22:07 lib02_lazy_expunge_plugin.so -> ../lib02_lazy_expunge_plugin.so lrwxrwxrwx 1 root root 24 May 6 22:07 lib10_quota_plugin.so -> ../lib10_quota_plugin.so -rw-r--r-- 1 root root 5552 Jan 21 2009 lib11_imap_quota_plugin.a -rwxr-xr-x 1 root root 902 Jan 21 2009 lib11_imap_quota_plugin.la -rwxr-xr-x 1 root root 7380 Jan 21 2009 lib11_imap_quota_plugin.so lrwxrwxrwx 1 root root 24 May 6 22:07 lib11_trash_plugin.so -> ../lib11_trash_plugin.so lrwxrwxrwx 1 root root 26 May 6 22:07 lib20_convert_plugin.so -> ../lib20_convert_plugin.so lrwxrwxrwx 1 root root 27 May 6 22:07 lib20_mail_log_plugin.so -> ../lib20_mail_log_plugin.so -rw-r--r-- 1 root root 9582 Jan 21 2009 lib20_zlib_plugin.a -rwxr-xr-x 1 root root 864 Jan 21 2009 lib20_zlib_plugin.la -rwxr-xr-x 1 root root 9884 Jan 21 2009 lib20_zlib_plugin.so I'm running Dovecot 1.0.7 installed using yum on CentOS 5.4. How can I get the necessary plugin? Thanks, Andrés [0] http://www.dovecot.org/list/dovecot/2010-March/047822.html [1] http://wiki.dovecot.org/ACL

2 1

[Dovecot] SSL Bug
by Matthew Sackman 25 May '10

25 May '10

Hi, After many hours of testing, I've finally tracked down the issue I have been having with dovecot's SSL support. The problem is that the SSL certs result in "TLS handshaking: SSL_accept() syscall failed: Connection reset by peer" errors *if the certificate granted is not granted for client use*. For servers, I normally generate SSL certificates specifically for servers: [ server_ca_extensions ] basicConstraints = CA:false keyUsage = keyEncipherment extendedKeyUsage = 1.3.6.1.5.5.7.3.1 If you just do that, then the SSL certificate doesn't work in dovecot (it will work fine in Apache, or Postfix etc etc). You also need the certificate to be valide for client side work: [ client_and_server_ca_extensions ] basicConstraints = CA:false keyUsage = digitalSignature, keyEncipherment extendedKeyUsage = 1.3.6.1.5.5.7.3.2, 1.3.6.1.5.5.7.3.1 I believe this is a fault with Dovecot. This is with the Debian package for Dovecot 1.2.11 (Version: 1:1.2.11-1). The default self-signed certificate the Debian post-install script generates pops out a certificate that is valid for everything, which is why it works by default out of the box. Matthew

2 1

[Dovecot] Plugin to encrypt mailboxes ?
by Frank Bonnet 25 May '10

25 May '10

Hello Is there a possibility for my users to encrypt their mailboxes through Dovecot ? They haven't direct access to the server, IMAP & IMAPS only. We use Thunderbird as client and mailboxes are in MBOX format Dovecot is running on a FreeBSD 7.2 server. Thanks a lot

2 1

[Dovecot] save failed to INBOX: Internal error occurred.
by Jarrod Neven 25 May '10

25 May '10

OS: CentOS release 5.4 (Final) Postfix: postfix-2.5.1-1.mysql.sasl2.vda.rhel5 Postfixadmin: 2.3 Dovecot: 1.2.11 Squirrelmai: 1.4.20 Configuration based on http://wiki.dovecot.org/HowTo/DovecotLDAPostfixAdminMySQL which I have updated a few time ;) Using postfixadmin I have create a virtual domain and created testing users (test1 test6). With Squirrelmail these users can login but issues arise when composing an email to any destination every time. Squirrlemail responds with: ERROR: Bad or malformed request. Server responded: Error in IMAP command FROM: Unknown command. Log file shows: 2010-05-25 17:42:20 ²imap-login: Info: Login: user=<test3(a)corp.letsengage.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured ³2010-05-25 17:42:20 ²IMAP(test3(a)corp.letsengage.com): Info: Namespace : Using permissions from /var/vmail/corp.letsengage.com/test3: mode=0700 gid=-1 ³2010-05-25 17:42:20 ²IMAP(test3(a)corp.letsengage.com): Info: Disconnected: Logged out bytes=79/681 ³2010-05-25 17:42:34 ²IMAP(test3(a)corp.letsengage.com): Info: Effective uid=101, gid=12, home=/var/vmail/corp.letsengage.com/test3 ³2010-05-25 17:42:34 ²IMAP(test3(a)corp.letsengage.com): Info: maildir: data=/var/vmail/corp.letsengage.com/test3 ³2010-05-25 17:42:34 ²IMAP(test3(a)corp.letsengage.com): Info: maildir++: root=/var/vmail/corp.letsengage.com/test3, index=, control=, inbox=/var/vmail/corp.letsengage.com/test3 ³2010-05-25 17:42:34 ²imap-login: Info: Login: user=<test3(a)corp.letsengage.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured ³2010-05-25 17:42:34 ²IMAP(test3(a)corp.letsengage.com): Info: Namespace : Using permissions from /var/vmail/corp.letsengage.com/test3: mode=0700 gid=-1 ³2010-05-25 17:42:34 ²IMAP(test3(a)corp.letsengage.com): Info: Disconnected: Logged out bytes=79/681 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: auth input: uid=101 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: auth input: gid=12 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: auth input: home=/var/vmail/corp.letsengage.com/test3 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: maildir: data=/var/vmail/corp.letsengage.com/test3 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: maildir++: root=/var/vmail/corp.letsengage.com/test3, index=, control=, inbox=/var/vmail/corp.letsengage.com/test3 ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: auth input: uid=101 ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: auth input: gid=12 ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: auth input: home=/var/vmail/corp.letsengage.com/test2 ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: maildir: data=/var/vmail/corp.letsengage.com/test2 ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: maildir++: root=/var/vmail/corp.letsengage.com/test2, index=, control=, inbox=/var/vmail/corp.letsengage.com/test2 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: Namespace : Using permissions from /var/vmail/corp.letsengage.com/test3: mode=0700 gid=-1 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Error: open(/var/vmail/corp.letsengage.com/test3/tmp/1274773412.M416972P6942./root) failed: No such file or directory ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: msgid=<20100525062437.BA0EC5D806B(a)CORP.LETSENGAGE.COM>: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2010-05-25 17:43:32] ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: Namespace : Using permissions from /var/vmail/corp.letsengage.com/test2: mode=0766 gid=-1 ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Error: open(/var/vmail/corp.letsengage.com/test2/tmp/1274773412.M420197P6943./root) failed: No such file or directory ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: msgid=<d6669a63009a904eaf4d268b3a1c9598.squirrel(a)dkpadmmail1.corp.letsengage .com>: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2010-05-25 17:43:32] # dovecot -n # 1.2.11: /etc/dovecot.conf # OS: Linux 2.6.18-164.15.1.el5 x86_64 CentOS release 5.4 (Final) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log log_timestamp: ³%Y-%m-%d %H:%M:%S ² protocols: imap pop3 listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login verbose_proctitle: yes first_valid_uid: 101 last_valid_uid: 101 mail_location: maildir:/var/vmail/%d/%n mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 mail_log_max_lines_per_sec: 900 lda: postmaster_address: postmaster(a)corp.letsengage.com sendmail_path: /usr/lib/sendmail auth_socket_path: /var/run/dovecot/auth-master auth default: user: nobody passdb: driver: sql args: /etc/dovecot-mysql.conf userdb: driver: static args: uid=101 gid=12 home=/var/vmail/%d/%n socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: quota: maildir:storage=10240:messages=1000 acl: vfile:/etc/dovecot/acls trash: /etc/dovecot/trash.conf #grep -v '^ *$#.*$\?$' /etc/dovecot-mysql.conf driver = mysql connect = host=localhost dbname=postfix user=postfix password=##REMOVED## default_pass_scheme = PLAIN password_query = SELECT password FROM mailbox WHERE username = '%u'

2 1

[Dovecot] Panic: file mail-index-sync-ext.c: line 212 (sync_ext_reorder): assertion failed: (offset < (uint16_t)-1)
by Sandro Tosi 25 May '10

25 May '10

Hello, we are using dovecot v1.2.10 on debian stable (lenny) systems with mailboxes on NFS, and we are facing this quite ugly crash: 2010-04-27 10:59:06 IMAP(<mailbox>): Panic: file mail-index-sync-ext.c: line 212 (sync_ext_reorder): assertion failed: (offset < (uint16_t)-1) 2010-04-27 10:59:06 dovecot: Error: child 2429 (imap) killed with signal 6 (core dumps disabled) 2010-04-27 10:59:06 IMAP(<mailbox>): Error: Raw backtrace: imap [0x80f2ea1] -> imap [0x80f2f22] -> imap [0x80f2879] -> imap [0x80df6ad] -> imap(mail_index_sync_ext_intro+0x25b) [0x80e043b] -> imap(mail_index_sync_record+0x164) [0x80ce8e4] -> imap(mail_index_sync_map+0x2c3) [0x80cf6d3] -> imap(mail_index_map+0x465) [0x80c47f5] -> imap [0x80c1053] -> imap(mail_index_open+0x24f) [0x80c150f] -> imap(index_storage_mailbox_open+0x72) [0x80acbb2] -> imap(index_storage_mailbox_init+0x132) [0x80acf72] -> imap [0x80847f8] -> imap [0x8084a9d] -> imap(mailbox_open+0x69) [0x80b71b9] -> imap(cmd_select_full+0x1dd) [0x806503d] -> imap(cmd_select+0x19) [0x8065999] -> imap [0x8067c7c] -> imap [0x8067d19] -> imap(client_handle_input+0x2d) [0x8067e8d] -> imap(client_input+0x5f) [0x80687ef] -> imap(io_loop_handler_run+0xe0) [0x80fbc50] -> imap(io_loop_run+0x20) [0x80fb0c0] -> imap(main+0x5ea) [0x80712fa] -> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe5) [0xb7dbf455] -> imap [0x8060361] the only solution we have found is to delete the dovecot.index* files, and let dovecot regenerate them at the next access. could you please give it a look? Thanks in advance, Sandro

4 11