June 2010 - dovecot - dovecot.org

[Dovecot] "failed to store into mailbox 'INBOX': Not enough disk space." with large mail
by Johannes Dröge 11 Jun '10

11 Jun '10

Hello, I am having this error message on some rare emails with more than 6 mb or so. Neither the dovecot server nor the filesystem where the maildir resides have any quota or are full at the time of delivering. The mails goes getmail->postfix->dovecot delivery agent Is the mail written to any other place than the maildir folder? Even though all my temp folders should also be able to hold some megabytes... Thanks for any help, Johannes message: *sieve: info: started log at ... error: msgid=<XXX>: failed to store into mailbox 'INBOX': Not enough disk space. * dovecot --version 1.2.10 dovecot -n # 1.2.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-686 i686 Debian 5.0.4 xfs log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps ssl_cert_file: /etc/certificates/XXX ssl_key_file: /etc/certificates/XXX login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_greeting: XXX mail_access_groups: mail mail_location: maildir:/services/mail/%u mbox_write_locks: fcntl dotlock lda: postmaster_address: root mail_plugins: sieve auth default: verbose: yes passdb: driver: pam userdb: driver: passwd plugin: sieve: /var/sieve-scripts/%u/filter.sieve

8 20

[Dovecot] question about rpc quota reporting 1.2.11
by Tom Lieuallen 11 Jun '10

11 Jun '10

Timo, thank you for the reply to my question about shared folders yesterday. I'm now trying to get quota reporting working consistently. This is with dovecot 1.2.11 in solaris 10 sparc. We have local quotas for the mail spool (/a1) and quotas for home directories. All are UFS and have rpc (rquota) working fine. With just this: protocol imap { mail_plugins = quota imap_quota } My mail client (thunderbird 3.0.4) reported the home directory quota. So then I added this: plugin { quota = fs:INBOX:mount=/a1 quota2 = fs:Home:mount=%h } First, I had to make /a1/quotas world readable, otherwise I'd get this error: open(/a1/quotas) failed: Permission denied I'm getting the same type of error with the quota2 line now: open(/nfs/rack/u4/quotas) failed: Permission denied Since the home directory quota worked without the plugin configuration, my guess is that the plugin config is not using rpc. I can't find any way to force it to use rpc. Again, if I make that 'quotas' file world readable (which I believe isn't good practice), dovecot stops complaining. Also, what should I expect to see on the client? Will dovecot report only one quota (the one that's closer to the limit), or will it report both? I've only seen the first quota in thunderbird, but that could easily be a client issue. thank you Tom Lieuallen Oregon State University

2 4

[Dovecot] null errors from 2.0.beta5
by Mike Abbott 11 Jun '10

11 Jun '10

When my dovecot-2.0.beta5 auth module logs a 552-byte debug message, the message is split into two lines and also a null error message: Wed Jun 9 23:44:29 gromit dovecot[58892]: auth: Error: I think this has to do with the use of PIPE_BUF (512) sized buffers in the logging code, and the !line_is_ok() case in i_failure_parse_line(). Could you please remove the null error message? Just a nuisance, nothing serious. Thanks.

2 2

[Dovecot] lazy-expunge acl bug?
by Martin Ott 11 Jun '10

11 Jun '10

Hi, we've defined a public namespace "shared" and use the acl and lazy-expunge plugins among others. The problem is, that a mailbox is deleted by the DELETE-command without the x-flag to be set (# 1.2.9): a myrights shared/aclDeleteTest * MYRIGHTS "shared/aclDeleteTest" lrsed a OK Myrights completed. b delete shared/aclDeleteTest b OK Delete completed. c myrights shared/aclDeleteTest c NO Mailbox doesn't exist: aclDeleteTest This behavior should be different and the mailbox should not be deleted, should it? Is there a fast workaround? Without the e-flag, mailboxes can't be deleted. But as some users should be allowed to use the expunge operation, it's no option to remove the e-flag... thx Martin

2 7

[Dovecot] problems with shared mailboxes and other general issues
by Tom Lieuallen 11 Jun '10

11 Jun '10

I'm also having beginner's troubles with shared mailboxes with dovecot 1.2.11. I've used the TestInstallation instructions for connecting to the imap port via openssl and issuing the setacl/getacl commands. Those appear to be fine. I'm having real difficulty with the acl_shared_dict configuration. I'd prefer to just use a flat file, as I don't anticipate using shared folders very frequently. I don't need a database and would greatly prefer not to have a dependency on our database service. So, with this setting: acl_shared_dict = file:/private/dovecot/var/etc/shared-mailboxes The '../var/etc' directory is something like 755. I have to create the file first and make it 666. When it is updated, ownership & permissions are changed such that the user giving acl permissions then owns the file and it's 600. I tried setting it back to 644 afterward, so other users could read it, but they tried setting a lock in that dir as well. I tried this: acl_shared_dict = file:/private/dovecot/var/etc/shared-list/shared-mailboxes-%u Then I made shared-list have '1777' permissions. Permissions-wise, this will now work, including locks, but I'm guessing this is just plain wrong and I still can't verify access. My second choice was to use sqlite for this acl_shared_dict, but, even though I compiled dovecot with sqlite support and 'ldd' shows that '../libexec/dict' is linked against sqlite libraries, when I tried this config: acl_shared_dict = sqlite:/private/dovecot/etc/acl-shared-dict.conf I get this, and dovecot fails to start up. EUnknown dict module: sqlite I question whether I can use sqlite for acl_shared_dict. Furthermore, in this vein, I don't really know what the shared namespace should even look like. I've been trying the imap commands LIST and MYRIGHTS to verify access, but there are simply no examples. I'd rather expect this to work: x myrights shared/fromuser/folder but all I get is mailbox doesn't exist. I know 'shared' is the namespace, but I just don't know how it should really be referred to. Personally, I can live without the acl_shared_dict (from what I understand). I don't need to see the shared path for subscription, I'd just manually add the folder path to the .subscriptions file for the handful of users that need it. I just don't think it's working, though. On a related note, I thought I'd increase debugging to see if that helped out any. When I change 'mail_debug' to 'yes', as soon as I issue the imap login command, it logs some stuff, then kicks me out. Jun 09 15:57:53 IMAP(tom2): Info: acl: initializing backend with data: vfile Jun 09 15:57:53 IMAP(tom2): Info: acl: acl username = tom2 Jun 09 15:57:53 IMAP(tom2): Info: acl: owner = 1 Jun 09 15:57:53 dovecot: Error: child 6000 (imap) killed with signal 11 (core dumps disabled) I would assume this error is causing my problems, but for all I know, it could be a side-effect of verbose debugging -- to just terminate. I see nothing about that in the docs, though. imap works fine without verbose logging, so I'm baffled. I have been frustrated by the shared namespace documentation. I've been through it again and again, but haven't found the answers I've been looking for. Here is the relevant configuration: namespace shared { location = mbox:%%h/mail/shared:INDEX=%%h/mail/shared/.imap # everything else defaults } protocol imap { mail_plugins = quota imap_quota acl imap_acl } protocol lda { mail_plugins = acl } plugin { acl = vfile acl_shared_dict = file:/private/dovecot/var/etc/shared-list/shared-mailboxes-%u }

2 3

[Dovecot] R: Re: Dovecot 2.0 shared mailbox using ACLs problem
by p.quidacciolu＠libero.it 11 Jun '10

11 Jun '10

Hi, now I'm able to share/access to the shared mailbox, but when try to write (as owner) in each mailbox, I catch a segfault of the imap process. In the next the trace. I'm using "dovecot-2-0-2d6cf78982dc". -------% <----------------------------------------------------------------------------------------------- Process 3504 attached - interrupt to quit gettimeofday({1276190723, 456087}, NULL) = 0 gettimeofday({1276190723, 456268}, NULL) = 0 epoll_wait(8, {{EPOLLIN, {u32=21055056, u64=21055056}}}, 6, 1561185) = 1 gettimeofday({1276190728, 692157}, NULL) = 0 gettimeofday({1276190728, 692268}, NULL) = 0 read(10, "8 append \"myshare\" (\\Seen Junk) \"08"..., 7928) = 2472 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot-acl", {st_mode=S_IFREG|0600, st_size=40, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/tmp", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot- shared", 0x7fff8358bdc0) = -1 ENOENT (No such file or directory) access("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/cur", W_OK) = 0 open("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot.index. log", O_RDWR) = 9 fstat(9, {st_mode=S_IFREG|0600, st_size=640, ...}) = 0 pread(9, "\1\2 (\0\331\32\21L\2\0\0\0\1\0\0\0\0\0\0\0\331\32\21L\0\0\0\0\0\0\0\0"..., 40, 0) = 40 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot.index. log.2", 0x7fff8358bcb0) = -1 ENOENT (No such file or directory) open("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot. index", O_RDWR) = -1 ENOENT (No such file or directory) stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot.index. log", {st_mode=S_IFREG|0600, st_size=640, ...}) = 0 fstat(9, {st_mode=S_IFREG|0600, st_size=640, ...}) = 0 pread(9, "\200\200\200\211@\0\0\20\377\377\377\377\0\0\0\0$\0\0\0\0\0\0\0\1\0\7\0mail"..., 8192, 40) = 600 pread(9, "", 8192, 640) = 0 epoll_ctl(8, EPOLL_CTL_DEL, 10, {0, {u32=21055056, u64=21055056}}) = 0 epoll_ctl(8, EPOLL_CTL_ADD, 10, {EPOLLIN|EPOLLPRI|EPOLLERR|EPOLLHUP, {u32=21055056, u64=21055056}}) = 0 open("/etc/localtime", O_RDONLY) = 11 fstat(11, {st_mode=S_IFREG|0644, st_size=2652, ...}) = 0 fstat(11, {st_mode=S_IFREG|0644, st_size=2652, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ab70eac0000 read(11, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\6\0\0\0\6\0\0\0\0"..., 4096) = 2652 lseek(11, -1701, SEEK_CUR) = 951 read(11, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\10\0\0\0\0"..., 4096) = 1701 close(11) = 0 munmap(0x2ab70eac0000, 4096) = 0 --- SIGSEGV (Segmentation fault) @ 0 (0) --- Process 3504 detached -------% <----------------------------------------------------------------------------------------------- >----Messaggio originale---- >Da: tss(a)iki.fi >Data: 07/06/2010 21.12 >A: "p.quidacciolu(a)libero.it"<p.quidacciolu(a)libero.it> >Cc: <dovecot(a)dovecot.org> >Ogg: Re: [Dovecot] Dovecot 2.0 shared mailbox using ACLs problem > >On pe, 2010-04-02 at 11:07 +0200, p.quidacciolu(a)libero.it wrote: > >> I'm trying to configure shared mailboxes using ACLs. >> On dovecot 1.2.10 it works fine, but the same configuration on dovecot 2.0. >> beta4 doesn't work. >> When I try to access to the shared mailbox I get the following message: >> Query: SELECT "users/user2/INBOX" >> Reason Given: Mailbox doesn't exist: users/user2/INBOX > >Have you tried this with recent nightly snapshots? > > >

2 2

Re: [Dovecot] Thunderbird namespace handling
by xueron＠xueron.com 11 Jun '10

11 Jun '10

>---- Original Message ---- >From: Timo Sirainen <tss(a)iki.fi> >To: "Thomas Hummel" <hummel(a)pasteur.fr> >Cc: "Dovecot Mailing List" <dovecot(a)dovecot.org> >Sent: Fri, Jun 11, 2010, 21:49 PM >Subject: Re: [Dovecot] Thunderbird namespace handling > >On to, 2010-06-10 at 18:18 +0200, Thomas Hummel wrote: >> > See this thread: >> > http://mailman2.u.washington.edu/pipermail/imap-protocol/2010-May/001076.ht… >> >> I've read it but I still don't get the point : >> >> I thought "hidden = no" would advertise this namespace for clients >> which support NAMESPACE and that "list = yes" would allow clients which >> don't support NAMESPACE to access this namespace ? >> >> What's wrong with that ? > >The point of that thread was: With list=yes the client already can >access the mailboxes in it without knowing anything about namespaces, so >listing it also in namespaces is pointless.

1 0

[Dovecot] Question about directory hashing
by Javier de Miguel Rodríguez 11 Jun '10

11 Jun '10

Hello I have been reading http://wiki.dovecot.org/MailLocation and http://wiki.dovecot.org/Variables and I do not fully understand the directory hashing feature. I want to migrate > 70.000 users from Sun Messaging to Dovecot using imapsync. I have tested with mail_location=maildir:/buzones/us.es/%1Hu/%2.1u/%n but I get the following directory tree: `-- 0 |-- - |-- 1 |-- 2 |-- 3 |-- 8 |-- _ |-- a |-- ab |-- b |-- c |-- d |-- e |-- ev |-- f |-- g |-- h |-- i |-- ie |-- is |-- j |-- jb |-- jj |-- jp |-- js |-- k |-- l |-- m |-- mb |-- n |-- o |-- p |-- pp |-- q |-- r |-- rm |-- s |-- t |-- u |-- v |-- w |-- x |-- y `-- z The ideal directory layout should be the following: First directory level: Letters from a to z Second directory level: Numbers from 0 to 200 Third directory level: %n (username without @domain) How can I achive this directory layout (or other optimized for 70.000 users) . I use ext3 on Red Hat Enterprise Linux 5 with directory indexes on. Regards Javier de Miguel

2 1

[Dovecot] Fail2ban
by Jerrale Gayle 11 Jun '10

11 Jun '10

I have fail2ban working for EVERYTHING else except dovecot. I have tried using my own custom regex in conjunction with the regex on the dovecot.org site. Neither are picked up by fail2ban and I'm trying to use an imminent attack agaist dovecot, going on now, to my advantage to see when I get the right regexp. Here are my current ones: failregex = .*dovecot: (?:pop3-login|imap-login): (?:Disconnected|Aborted login) $(?:auth failed, .* attempts|no auth attempts)$:.*rip=<HOST>,.* <<< this is my custom (?: pop3-login|imap-login): (?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.* <<< from dovecot.org .*warning:.\S*\[(?P<host>)\]: SASL.(?:PLAIN|LOGIN).authentication failed:.* Here is the current attack: Jun 10 17:18:10 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<rahul>, method=PLAIN, rip=113.12.82.71, lip=173.50.101.12 Can someone help me out a little? Thanks, Jerrale G

6 6

[Dovecot] Evolution and Thunderbird do different things?
by Phil Howard 10 Jun '10

10 Jun '10

I'm trying both Evolution and Thunderbird on my IMAP server, and find that there are differences in how some things are done, between clients. Shouldn't there have been a standard way to do these things in the IMAP protocol? The first thing I noticed is that when deleting email from one client, it puts a "T" on the file name, leaving it where it is, and from the other client, it moves the mail to a ".Trash" directory on the server (and created a 2nd "Trash" folder ... so now I have 2 "Trash" folders, one with some deleted mail in it, and the other with some deleted mail in it). I'm not saying Dovecot has a problem here. But maybe IMAP the protocol does for not having a standard way to do things, and these clients, for not doing it the same way (if there is some standard somewhere). Any IMAP experts here know what the story is with this?

5 8