February 2011 - dovecot

[Dovecot] Can't connect to auth server
by Phill Edwards 13 Feb '11

13 Feb '11

I'm trying to phase out procmail and move to dovecot-sieve instead. It ain't proving easy. I'll describe my setup: - Centos 5.2 box with dovecot 1.1.4 and dovecot-sieve 1.1.6 from ATrpms. - A single user account is used to store all our email (the account is called maildb). - Getmail is being used to fetch the email from various ISP mailboxes. I want to deliver mail to different folders in maildb's Maildir/ depending on who the email is addressed to (the procmail recipes currently do that). - Getmail destination section looks like this: [destination] type = MDA_external path = /usr/libexec/dovecot/deliver arguments = ("-d", "maildb") allow_root_commands = true - When I run getmail I get this error in dovecot.log: deliver(maildb): May 04 22:15:26 Error: Can't connect to auth server at /var/run/dovecot/auth-master: No such file or directory It's true that I don't have a file called auth-master. I guess I should have but until I started this dovecot-sieve work it was never a problem. I have no idea what that file should look like. As I installed from binary RPMs I would have thought one would have come with the install. Can anyone help? Regards, Phill

4 6

[Dovecot] lmtp logging to separate file
by Nikita Koshikov 12 Feb '11

12 Feb '11

Hello list, Testing lmtp deliver I can't constrain it to log all activity to separate file, like dovecot-lda does. Here is config: protocol lmtp { info_log_path = /var/log/dovecot/dovecot-deliver.log log_path = /var/log/dovecot/dovecot-deliver.log mail_plugins = acl quota trash virtual zlib expire sieve } protocol lda { info_log_path = /var/log/dovecot/dovecot-deliver.log log_path = /var/log/dovecot/dovecot-deliver.log mail_plugins = acl quota trash virtual zlib expire sieve } When message is proceed via protocol lda - record appear in /var/log/dovecot/dovecot-deliver.log, but when message arrives by protocol lmtp - logs got to /var/log/dovecot.log file. Is this settings suppose to be overwritten ?

2 4

[Dovecot] dsync parallel conversions ?
by Frank Bonnet 12 Feb '11

12 Feb '11

Hello Would it be possible to run multiple dsync command in parallel ? I have 4000 mailboxes to convert nad it takes a LOT of time to do so when running dsync one by one ... Thanks

2 2

[Dovecot] preserving \Recent when moving messages
by Mark Hedges 12 Feb '11

12 Feb '11

Is there any way to preserve \Recent, or am I out of luck? Some people have reported that my script which shuffles around expired or oversized mail also causes their clients to report it as already read. I guess those clients check \Recent instead of \Seen when they download. I wish I knew which clients. With Mail::IMAPClient I tried using move(), copy(), and migrate() but the result is the same-- once it looks at the source message, \Recent is gone. (I tried patching it where it greps out the \Recent flag before appending the messages, but that causes a silent error.) Directly appending to the destination folder does not help either, since I would lose any flags set by the user, and if I tried to preserve those, then I would lose the \Recent flag when I read through the destination folder to figure out which messages were which. RFC5301 says \Recent can never be set... but does its prohibition include the case of migrating mail, where the intent is to retain them intact? It would be nice if Dovecot offered a migration feature which would move a message from folder to folder without unsetting \Recent. Mark

2 1

[Dovecot] Connection refused. Mail Client Error: 800ccccd9. Please help :-))))
by michael＠lattari.eu 12 Feb '11

12 Feb '11

Hi! I cannot connect to the dovecot server :-( I get Windows Mail Client Error: 800ccccd9. Please help :-)))) # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.el6.x86_64 x86_64 Scientific Linux release 6.0 (Carbon) auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot.log disable_plaintext_auth = no info_log_path = /var/log/dovecot.log listen = * log_path = /var/log/dovecot.log login_trusted_networks = 192.168.0./24 mail_debug = yes mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap service imap-login { inet_listener imap { port = 143 } } ssl = no syslog_facility = local6 userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes verbose_ssl = yes dovecot.log (very poor info on what happened - connections are not logged.... ): Feb 10 09:50:25 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:07:07 master: Warning: Killed with signal 15 (by pid=7048 uid=0 code=kill) Feb 10 10:07:08 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:08:04 doveadm: Debug: This is Dovecot's debug log (1297328884) Feb 10 10:08:04 doveadm: Info: This is Dovecot's info log (1297328884) Feb 10 10:08:04 doveadm: Warning: This is Dovecot's warning log (1297328884) Feb 10 10:08:04 doveadm: Error: This is Dovecot's error log (1297328884) Feb 10 10:08:04 doveadm: Fatal: This is Dovecot's fatal log (1297328884) Feb 10 10:47:24 master: Warning: Killed with signal 15 (by pid=7160 uid=0 code=kill) Feb 10 10:47:56 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:47:57 master: Warning: Killed with signal 15 (by pid=7194 uid=0 code=kill) Feb 10 10:47:58 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:50:45 master: Warning: Killed with signal 15 (by pid=7218 uid=0 code=kill) Feb 10 10:50:46 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:56:38 master: Warning: Killed with signal 15 (by pid=7254 uid=0 code=kill) Feb 10 10:56:39 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) [root@filemon conf.d]# ls -al /var/run/dovecot total 20 drwxr-xr-x 4 dovecot dovecot 4096 Feb 10 10:56 . drwxr-xr-x 15 root root 4096 Feb 10 10:02 .. srw------- 1 root root 0 Feb 10 10:56 anvil srw------- 1 root root 0 Feb 10 10:56 anvil-auth-penalty srw------- 1 root root 0 Feb 10 10:56 auth-client srw------- 1 dovecot root 0 Feb 10 10:56 auth-login srw------- 1 root root 0 Feb 10 10:56 auth-master srw------- 1 root root 0 Feb 10 10:56 auth-userdb srw------- 1 dovecot root 0 Feb 10 10:56 auth-worker srw------- 1 root root 0 Feb 10 10:56 config srw------- 1 root root 0 Feb 10 10:56 dict srw------- 1 root root 0 Feb 10 10:56 director-admin srw-rw-rw- 1 root root 0 Feb 10 10:56 dns-client lrwxrwxrwx 1 root root 25 Feb 10 10:56 dovecot.conf -> /etc/dovecot/dovecot.conf drwxr-xr-x 2 root root 4096 Nov 23 03:34 empty drwxr-x--- 2 root dovenull 4096 Feb 10 10:56 login -rw------- 1 root root 5 Feb 10 10:56 master.pid -rw------- 1 root root 0 Feb 9 23:57 rsyslog auth-sql.conf.ext: passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } /dovecot/dovecot-sql.conf.ext: driver = mysql connect = host=localhost dbname=dovecot user=dovecot password=123test default_pass_scheme = MD5 password_query = \ SELECT username AS user, password, \ home AS userdb_home, uid AS userdb_uid, gid AS userdb_gid \ FROM users WHERE username = '%u' and domain='%n' Thanks for the HELP !!!

4 3

[Dovecot] problem configuring deliver in LDAP environment.
by Andrea Borghi 12 Feb '11

12 Feb '11

hello I am using dovecot-1.2.15 in debian squeeze (packaged) and i have some difficulties migrating from an older installation tha is working perfectly. i have a transport defined in postfix to call deliver as follows: dovecotlda unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -s -e -f ${sender} -d ${recipient} with the auth-socket in dovecot.conf all ok and this in ldap-userdb.conf: user_attrs = vdHome=chroot,mailbox=mail=maildir:%$,quota=quota_rule=*:bytes=%$,otherPath=sieve you see, i have the base directory for the chroot for the entire mail system in ldap:vdHome as /home/vmail/domains and the actual location of the mailbox in maildir format in ldap:mailbox so i can have the actual complete path as /(vdHome)/(mailbox) This is running smoolthly, BUT the chroot environment with all the library dependencies is REALLY REALLY limiting because the huge number of files from the system i must put on the mail storeage (which is networked and used by more systems so i cannot put libraries and binaries there) What i am trying to do is leaving all the dovecot services running in chroot mode (as they do) but let deliver running in NORMAL (non-chroot mode) so i need to remove the chroot variable in userattr reply, and parametrize the mail location with the two ldap values. i am conscious that i can set up this as user_attrs = mailbox=mail=maildir:/home/vmail/domains/%$,quota=quota_rule=*:bytes=%$,otherPath=sieve but I WANT TO KEEP THE BASE DIR PARAMETRIZED to leave me the possibility to set the base dir in LDAP to goup the accounts on different mail storage system. So you know a method to substitute TWO ldap values in the mail parameter definition? Thank you Andrea

2 5

[Dovecot] Questions about dovecot-shared in 1.2 and inherit group membership from parent mailbox
by Lukas Haase 11 Feb '11

11 Feb '11

Hi, I read the Wiki about dovecot-shared a few times but it is not 100% clear to me (at least for 1.2). First, if I want shared keywords I *must* have a dovecot-shared. In this case, the permissions are not taken any longer from the parent folder (what is exactly this parent folder?) but from the dovecot-shared file. So in some sense dovecot-shared is always required (since everyone would like to share keywords). True? Second, is there only *one* dovecot-shared per namespace or per mailbox *under* a specific namespace? Or an arbitrary number (where the "last" is taken)? Where does dovecot-shared need to be placed? For example, if the location of the namespace points to /var/mail/shared and I have two mailboxes "group1" and "group2" inside. Does the dovecot-shared need to reside in /var/mail/shared or /var/mail/shared/group1 and /var/mail/shared/group2 (with LAYOUT=fs)? Is it possible? Third (and main) question: In /var/mail/shared I want to have a mailbox for each group. Each user is member of his respective groups (in terms of UNIX permissions *and* ACLs). The mailboxes are owned by their respective groups and if a user creates a subfolder inside it should surely have the same group assigned as the parent mailbox (not the namespace!). namespace public { separator = . prefix = Shared. location = maildir:/var/mail/shared:INDEX=~/Maildir/shared:LAYOUT=fs subscriptions = no } mail:~# ls -l -R /var/mail/shared/ /var/mail/shared/: total 12 drwxrwx--- 5 root group1 4096 Feb 9 11:53 Group1 drwxrwx--- 5 root group2 4096 Feb 9 12:27 Group2 -rw-r--r-- 1 root root 23 Feb 9 11:52 dovecot-acl -rw-rw-r-- 1 root root 0 Dec 15 2009 dovecot-shared /var/mail/shared/Group1: total 16 drwxrwx--- 2 root group1 4096 Feb 8 10:35 cur -rw-r--r-- 1 root group1 28 Feb 9 11:52 dovecot-acl -rw-rw-r-- 1 root group1 0 Dec 15 2009 dovecot-shared drwxrwx--- 2 root group1 4096 Dec 15 2009 new drwxrwx--- 2 root group1 4096 Feb 8 10:34 tmp /var/mail/shared/Group1/cur: total 0 /var/mail/shared/Group1/new: total 0 /var/mail/shared/Group1/tmp: total 0 /var/mail/shared/Group2: total 16 drwxrwx--- 2 root group2 4096 Feb 8 10:35 cur -rw-r--r-- 1 root group2 27 Feb 9 11:52 dovecot-acl -rw-rwS--- 1 root group2 0 Dec 15 2009 dovecot-shared drwxrwx--- 2 root group2 4096 Dec 15 2009 new drwxrwx--- 2 root group2 4096 Feb 8 10:34 tmp /var/mail/shared/Group2/cur: total 0 /var/mail/shared/Group2/new: total 0 /var/mail/shared/Group2/tmp: total 0 Again: *Inside* /var/mail/shared I want to create mailboxes for each group (Group1, Group2, ...). This is done only by the administrator. Therefore /var/mail/shared is owned by root. Each Group1, Group2, ... in turn is owned by group1, group2, ... I tried all combinations using dovecot-shared which came into my mind such that a subfolder of Group1 is owned by group1. However, either 1.) the subfolder is owned by the primary group of the creating user (group "users") or 2.) the group of /var/mail/shared/dovecot-shared or 3.) creation of the subfolder fails with dovecot: IMAP(user1): chown(/var/mail/shared/Group2/Test1, -1, 0(root)) failed: Operation not permitted (egid=100(users), group based on /var/mail/shared/dovecot-shared) dovecot: IMAP(user1): mkdir(/var/mail/shared/Group2/Test1/cur) failed: Operation not permitted Is this just not possible or do I get something wrong here? Regards, Luke

2 4

[Dovecot] PAM auth and userdb
by Matthias Lohmann 11 Feb '11

11 Feb '11

Hi all, I've just setup dovecot 2.0.9 on Solaris 10 - everything works fine so far. I'm authentication my users with PAM (against /etc/passwd) -> works The users get the default quota setting from dovecots config. Now I like to override the quota settings for some users. So I created a userdb - but it seems, that its not used ... What might be wrong? # 2.0.9: /opt/dovecot2.0.9/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4v auth_debug = yes auth_username_chars = abcdefghijklmnopqrstuvwxyz01234567890.- auth_verbose = yes default_login_user = nobody disable_plaintext_auth = no first_valid_gid = 215 first_valid_uid = 300 log_path = /var/log/dovecot.log login_access_sockets = tcpwrap mail_location = mbox:~/IMAP:INBOX=/var/mail/%u:INDEX=/var/dovecotindexes/%u mail_plugins = quota passdb { driver = pam } plugin { quota = dict:User quota::file:/var/dovecotindexes/%u/dovecot-quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } [...] userdb { driver = passwd } userdb { args = username_format=%u /opt/dovecot/etc/users driver = passwd-file } My userdb contains lines like this user301::301:220::/usr/users/user301::userdb_quota_rule=*:storage=200M And here we have some debug output Feb 11 16:55:24 auth: Debug: passwd-file /opt/dovecot/etc/users: Read 1 users Feb 11 16:55:24 auth: Debug: pam(user301,2.1.1.2): lookup service=dovecot Feb 11 16:55:24 auth: Debug: pam(user301,2.1.1.2): #1/1 style=1 msg=Password: Feb 11 16:55:24 auth: Debug: client out: OK 1 user=user301 Feb 11 16:55:24 auth: Debug: master in: REQUEST 1627258881 20594 1 90f9d76fc9ac35bcb78212825868522a Feb 11 16:55:24 auth: Debug: passwd(user301,2.1.1.2): lookup Feb 11 16:55:24 auth: Debug: master out: USER 1627258881 user301 system_groups_user=user301 uid=301 gid=220 home=/usr/users/user301 Feb 11 16:55:24 pop3-login: Info: Login: user=<user301>, method=PLAIN, rip=2.1.1.2, lip=2.1.1.22, mpid=20607 Feb 11 16:55:25 pop3(user301): Info: Disconnected: Logged out top=0/0, retr=0/0, del=0/9, size=71445 Even doveadm gives the wrong quota root@> /opt/dovecot/bin/doveadm quota get -u user301 Quota name Type Value Limit % User quota STORAGE 72288 1048576 6 User quota MESSAGE 1258 - 0 Any hints for me? Thanks in advance. Kind regards Matt

2 1

[Dovecot] [Q] auth(default): plain(?, 11.111.206.99): Username contains disallowed character: 0x20
by JKL 11 Feb '11

11 Feb '11

Dear all, A new user with Microsoft Express is trying to use IMAP SSL port 993. However they cannot log in. Its only with them. The logs details the following: Feb 11 18:56:03 logout dovecot: auth(default): plain(?,11.111.206.99): Username contains disallowed character: 0x20 Feb 11 18:58:07 logout dovecot: imap-login: Disconnected (auth failed, 1 attempts): method=PLAIN, rip=11.111.206.99, lip=62.58.61.184, TLS: Disconnected I think that the 0x20 is a space. However the user states that they are using this format and that there is no space: user.name(a)test.com Does anyone know where I could start to look for this? Regards,S

2 2

[Dovecot] Domain blacklisting
by Thomas Hummel 11 Feb '11

11 Feb '11

Hello, I run dovecot-2/Maildir/LDAP user/passdb and would like to be able to deny acess to users who connect from certain domains/IP (google.com for instance since in that case they gave their credentials to a third party). My understanding is that I cannot use some negative form of "allow_nets". The only mechanism I can think of is tcp_wrappers. However, dovecot documentation mention it only in the dovecot-1 section. Does it work the same way with dovecot-2 ? Is it a bad idea (I'm thinking of the induced overhead) ? Can you see another way to blacklist (at dovecot application level) some sources ? Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

3 6