January 2011 - dovecot

[Dovecot] How do folk . . . Aggregate system mail from LAN machines?
by Ron Leach 12 Jan '11

12 Jan '11

List, good evening, Running Dovecot for external email, but not yet worked out how (best) to aggregate 'system' mail from other machines on the LAN. By system mail, I mean mails generated by the OS or by applications, and addressed to root, or 'some admin user', etc. Ideally, these would be seen by 'root' or 'some admin user' or whoever on our existing Dovecot/IMAP system. Our scale is not large, we only have 5 servers on the LAN doing various things. I wondered how other Dovecot users do this. I've thought of 3 possibilities: 1. Install Dovecot on each LAN machine, and use Fetchmail to retrieve the messages using POP so that local mail stores were emptied. 2. Perhaps, use a 'forwarding' mechanism of some sort on each LAN machine, but that would require an MTA on each LAN machine, would it not? 3. I wondered whether /etc/alias, mentioned in a recent post by Simone Caruso, might help though again, presumably, requiring an MTA on each LAN machine. What do you do? regards, Ron

3 2

[Dovecot] Question about lda & auth_socket_path
by Jahnke-Zumbusch, Dirk 12 Jan '11

12 Jan '11

Hi all, storing e-mails (using postfix) via dovecot-lda fails and I assume this is related with a auth_socket configuration problem. But I am at a dead end, so perhaps anybody has got a hint for me: This is dovecot-2.0.8 on Solaris 10: 10-auth.conf and its include: ----------------------------- ... userdb { driver = static args = uid=104 gid=104 home=/some/path/%u } Relevant parts of 10-mail.conf: --------------------------------- ... auth_socket_path = /var/run/dovecot/auth-userdb Relevant parts of 10-master.conf: --------------------------------- ...service auth { unix_listener auth-userdb { mode = 0644 user = vmail #group = } } service auth-worker { user = root } Relevant parts of 15-lda.conf: --------------------------------- ... protocol lda { # Space separated list of plugins to load (default is global mail_plugins). #mail_plugins = $mail_plugins } # ls -l /var/run/dovecot/auth-userdb srw-r--r-- 1 vmail root 0 Jan 12 15:49 /var/run/dovecot/auth-userdb Using dovecot-lda for mail delivery or doveadm for user inquirement fails: via debug_log_path: ------------------- Jan 12 16:04:14 auth: Debug: Loading modules from directory: /dovecot/code/dovecot-2.0.8/lib/dovecot/auth Jan 12 16:04:14 auth: Debug: passwd-file /store1/db/masterusers.passwd: Read 1 users Jan 12 16:04:14 auth: Debug: master in: USER 1 djahnke service=lda Jan 12 16:04:14 auth: Debug: password(djahnke): passdb doesn't support credential lookups Jan 12 16:04:14 auth: Debug: master out: FAIL 1 Jan 12 16:04:14 lda: Debug: auth input: via syslog: ----------- Jan 12 16:04:14 deliver1 dovecot: [ID 583609 local0.error] auth: Error: static(djahnke): passdb doesn't support lookups, can't verify user's existence Jan 12 16:04:14 deliver1 dovecot: [ID 583609 local0.error] lda: Error: user djahnke: Auth USER lookup failed Jan 12 16:04:14 deliver1 dovecot: [ID 583609 local0.crit] lda: Fatal: Internal error occurred. Refer to server log for more information. When I use "allow_all_users=yes" everything works fine, so I think somehow the communication with the socket fails. I cannot see what I have missed :-( Any suggestions what I should look for / configure ? Any help appreciated, cheers, Drik -- Dirk Jahnke-Zumbusch Deutsches Elektronen-Synchrotron DESY IT Information Fabrics Member of the Helmholtz Association D-22603 Hamburg Notkestrasse 85 / 22607 Hamburg T: +49-40-899.81760 F: +49-40-899.41760 dirk.jahnke-zumbusch(a)desy.de

2 1

[Dovecot] Dovecot fails after updating MySQL
by Jerry 12 Jan '11

12 Jan '11

I just updated MySQL to Server version: 5.5.8 on my FreeBSD-8.2 system. Now Dovecot refuses to run. Prior to this, dovecot had been running for several years without a problem. This is the output of "dovecot -n" # 1.2.16: /usr/local/etc/dovecot.conf # OS: FreeBSD 8.2-PRERELEASE amd64 ufs log_path: /var/log/dovecot.log login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: maildir:/var/mail/vhost/seibercom.net/gerard mail_plugins: expire imap_client_workarounds: delay-newmail netscape-eoh tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)seibercom.net mail_plugins: sieve sieve_global_path: /usr/local/etc/dovecot/sieve/gerard.sieve sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain login digest-md5 cram-md5 username_format: %Lu verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: expire: Trash 2 Spam/* 2 expire_dict: proxy::expire dict: expire: mysql:/usr/local/etc/dovecot-dict-expire.conf The /var/run/dovecot directory looks like this: drwxr-xr-x 3 root wheel 512B 2011-01-10 18:49:44 EST ./ drwxr-xr-x 15 root wheel 1.0K 2011-01-10 18:49:37 EST ../ srw-rw---- 1 root wheel 0B 2011-01-10 18:49:37 EST auth-client= srw------- 1 vmail vmail 0B 2011-01-10 18:49:37 EST auth-master= srw------- 1 root wheel 0B 2011-01-10 18:49:37 EST auth-worker.34781= srwxrwxrwx 1 root wheel 0B 2011-01-10 18:49:37 EST dict-server= lrwx------ 1 root wheel 27B 2011-01-10 18:49:37 EST dovecot.conf@ -> /usr/local/etc/dovecot.conf drwxr-x--- 2 root dovecot 512B 2011-01-10 18:49:37 EST login/ -rw------- 1 root wheel 6B 2011-01-10 18:49:37 EST master.pid This is the log file output, updated every second (snippet) Jan 10 18:42:11 dovecot: Info: Dovecot v1.2.16 starting up Jan 10 18:42:11 dovecot: Error: child 34517 (auth-worker) killed with signal 11 (core not dumped) Jan 10 18:42:11 dovecot: Error: child 34521 (auth-worker) killed with signal 11 (core not dumped) I have tried deleting and rebuilding dovecot without success. I am at a lose to figure out what the problem is. -- Jerry ✌ Dovecot.user(a)seibercom.net Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __________________________________________________________________ I would rather say that a desire to drive fast sports cars is what sets man apart from the animals.

6 16

[Dovecot] mail quota dovecot 1.2.15-3
by J4 12 Jan '11

12 Jan '11

Dear all, I am attempting to enforce quota with Dovecot 1.2.15-3 using LDA for deliver. I use smtp-source (postfix) to deliver large messages but the quota is never noticed. The webmail interface is Roundcube, and the admin is performed using Postfixadmin. I have not looked into the postfix portion for quota, yet. Is there something that I have missed from the configuration? (The contents of relevant the mysql tables are included) Best wishes, J. # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-cgmemcap-smack x86_64 Debian squeeze/sid ext4 log_timestamp: %Y-%m-%d %H:%M:%S ssl_listen: *:993 ssl: required ssl_cert_file: /etc/ssl/certs/smtpd.crt ssl_key_file: /etc/ssl/private/smtpd.key login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login first_valid_uid: 106 mail_privileged_group: mail mail_location: maildir:/var/vmail/%d/%u/ maildir_very_dirty_syncs: yes mbox_write_locks: fcntl dotlock mail_plugins: quota imap_quota lda: log_path: auth_socket_path: /var/run/dovecot/auth-master postmaster_address: postmaster(a)test.info mail_plugins: sieve quota auth default: mechanisms: plain login passdb: driver: pam passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: passwd userdb: driver: static args: uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: quota: dict:user::proxy::quotadict dict: quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf select * from mailbox; +--------------------------+------------------------------------+--------------+---------------------------+----------+------------+------------------+---------------------+---------------------+--------+ | username | password | name | maildir | quota | local_part | domain | created | modified | active | +--------------------------+------------------------------------+--------------+---------------------------+----------+------------+------------------+---------------------+---------------------+--------+ | 11(a)test.info | $1$abc111kdddjkfsdhfjksdhfj. | TEST | test.info/11/ | 1024000 | 11 | test.info | 2011-01-07 14:19:03 | 2011-01-12 11:34:32 | 1 | +--------------------------+------------------------------------+--------------+---------------------------+----------+------------+------------------+---------------------+---------------------+--------+ select * from quota; +-----------------------------+-----------+----------+ | username | bytes | messages | +-----------------------------+-----------+----------+ | 11(a)test.info | 173879747 | 5689 | quotadict = mysql:/etc/dovecot/dovecot-dict-quota.conf ## dovecot-dict-quota.conf connect = host=localhost dbname=mail user=mail password=fred map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages }

1 0

[Dovecot] Refilter Mailboxes via Sieve - Missing delivered-to header
by Dieter Knopf 12 Jan '11

12 Jan '11

Hello, i already read http://wiki.dovecot.org/HowTo/RefilterMail but it won't work here :( I have many old mails in my folders and need to refilter many of them. But there are many mails without a delivered-to-header. What can i do? Error: Configuration error: envelope_recipient specified header missing (delivered-to:1) Would be okay if getmail would just skip the mail, but it cancels. Not sure if there is any way around. This is the config: [retriever] type = MultidropIMAPSSLRetriever envelope_recipient = delivered-to:1 server = foo port = 993 username = foo password = foo mailboxes = ("INBOX.REFILTER",) move_on_delete = INBOX.trash [destination] type = MDA_external path = /usr/lib/dovecot/deliver arguments = ("-e", "-f", "%(sender)", "-d", "%(recipient)") user = vmail group = vmail [options] delete = true recieved = false delivered_to = false verbose = 2 I'm using virtual users, so i must use Multidrop. Thanks

1 0

[Dovecot] Connection queue full on my directors
by Jan-Frode Myklebust 11 Jan '11

11 Jan '11

I finally upgraded to v1.2.16 on my backend servers, with ldap instead of previously mysql, and put a couple of dovecot v2.0.8 directors in front of them (used haproxy previously). It seemed to work OK initially, but after a few hours we got bit by "Connection queue full" problems on the directors. So I now set default_process_limit=512 and also: service anvil { client_limit=1027 } since dovecot said that was now required. Things seems to be working, but I'm afraid default_process_limit=512 is too low: $ ps -ef|grep dovecot/pop3-login|wc -l 192 $ ps -ef|grep dovecot/imap-login|wc -l 472 so looks like I'm quite close to hitting this limit for my imap logins. We will eventually put up some webmail servers (using imapproxy to keep connections alive), that will be connecting over these directors. Then we will expect to have a lot more active imap sessions over these directors. Should we just keep increasing default_process_limit, or per service process_limit, and follow dovecots warnings about client_limits for auth/anvil.. or will we be getting into other problems like running out of file descriptors? Are there any max'es we should expect to run into ? Current director config: ################################################################### $ ../../sbin/dovecot -n # 2.0.8: /usr/local/dovecot-2.0.8/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.32.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.5 (Tikanga) default_process_limit = 256 director_mail_servers = 192.168.42.7 192.168.42.8 192.168.42.9 192.168.42.10 192.168.42.11 192.168.42.28 192.168.42.29 director_servers = 192.168.42.15 192.168.42.17 disable_plaintext_auth = no listen = * passdb { args = proxy=y nopassword=y driver = static } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 5515 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director } service pop3-login { executable = pop3-login director } ssl_cert = </etc/pki/tls/certs/mail.example.net.crt ssl_key = </etc/pki/tls/private/mail.example.net.key ################################################################### $ sudo /usr/local/dovecot/bin/doveadm director status mail server ip vhosts users 192.168.42.7 10 315 192.168.42.8 10 292 192.168.42.9 10 311 192.168.42.10 10 316 192.168.42.11 10 292 192.168.42.28 100 1790 192.168.42.29 100 1787 -jf

2 2

[Dovecot] Dovecot - AllowGroups option
by Jacob Neergaard Pedersen 11 Jan '11

11 Jan '11

Hi, I'm trying to control access to different services on an Debian server using /etc/group. So that a user I create for FTP usage doesn't fill up my server with IMAP folders or samba garbage. Services like proftpd have: "AllowGroup ftpgroup" sshd have "AllowGroups sshgroup" And samba have "valid users = @smbgroup" But I can't find the correct option in Dovecot (/etc/dovecot/dovecot.conf) Do anyone have the magic option or a workaround thats doesn't envolve maintaining seperate user databases and password? (I know its needed for samba but besides that) /Neergaard

2 3

[Dovecot] utility to copy/sync IMAP mailboxes
by Don Buchholz 11 Jan '11

11 Jan '11

Well, my Dovecot server (v2.0.8) is up and running, and now it's time to migrate mailboxes from the old mail server [Lotus Domino Release 5.0.8] running on Windows NT 4.0 [ancient -- been the mail server since Aug-2000]. I saw "dsync(1)" and thought my troubles were over. Only I can't figure out how to make it work with the NT/Domino server as a source for mailboxes. I guess dsync(1) works only in completely *nix environment. I've been trying the imapcopy.pl script from the IMAP Tools web page (http://www.athensfbc.com/imap_tools/) but it is having problems with Notes' choice of the backslash (\) character as a mailbox (namespace?) delimiter. Any suggestions for a stable, reliable (copy/duplicate/mirror/sync) tool that can do the job using only IMAP access? (No SSL support required.) Thanks in advance, - Don

5 4

[Dovecot] Max number of mail processes
by Patrick Nudo 11 Jan '11

11 Jan '11

Dovecot version 1.1.11. Error: Maximum number of mail processes exceeded (see max_mail_processes setting). I can't seem to get rid of these errors. I get batches of these errors about 4 or 5 times a day. I have a cron-job checking for the existence of this error and then I reboot dovecot when I see this error, but what is causing this error ? What I am reading on the Internet about this particular issue has not helped to resolve the issue. I would really like to know how many mail processes it thinks that it is using at any one instant in time. Is this possible ? Maybe then I can track the reason for the error.

2 1

[Dovecot] enforce STARTTLS on port 110 with POP3?
by Zhou, Yan 11 Jan '11

11 Jan '11

Hi there, We are using DoveCot 1.0.7. User will use POP3 or POP. We want to force user to securely send their credential and keep a secure connection between us and them. We can do TLS/SSL on port 995, or STARTTLS on port 110. The problem is that we have no way to enforce STARTTLS on 110, user can connect to DoveCot on port 110, sending user credential without STARTTLS (thus insecure). Reading DoveCot documentation does not sound it supports this. Here is what I got from documentation. Dovecot supports: * IMAP (including TLS/STARTTLS) * IMAP+SSL ("imaps") * POP3 (including TLS/STLS) * POP3+SSL ("pops") My only option to enforce securely sending user credential is to enable port 995 and disable port 110, sound right? Thanks, Yan Confidentiality Notice: The information contained in this electronic transmission is confidential and may be legally privileged. It is intended only for the addressee(s) named above. If you are not an intended recipient, be aware that any disclosure, copying, distribution or use of the information contained in this transmission is prohibited and may be unlawful. If you have received this transmission in error, please notify us by telephone (513) 229-5500 or by email (postmaster(a)MedPlus.com) After replying, please erase it from your computer system.

3 3