March 2011 - dovecot - dovecot.org

[Dovecot] dovecot proxy, imapproxy, perdition . . . or?
by Lorens Kockum 21 Mar '11

21 Mar '11

Hi, I have two load-balanced dovecot servers using a single NFS mount. The version is 1.2.11. I chose this so that if one server goes down the other will take up the load, and if my load is too much for one server I just have to add more identical servers. It works, but I wish to move to SAN storage because the NFS server is exhibiting irregular performance. (I spent a lot of time with tcpdump to check that it wasn't NFS locking problems). Performance is very important to me, not in the sense of many users but in the sense of quick response time, since the main use is as a webmail backend. That means that instead of load-balancing connections between servers I will have to partition users between servers (all on one to begin with) and direct users to the corresponding server. I expected to use perdition, but when reading up on that I found imapproxy, which could be interesting for performance reasons, and also that dovecot has an included proxy, and that its performance is better than perdition. However on http://wiki.dovecot.org/HowTo/ImapProxy the feature "IMAP/POP3 server with proxy feature" is noted as "This model is still a bit unfinished in current code." Is this still true? There's also a general note that "This page was written quite a long time ago and may not match reality anymore" . . .

3 2

[Dovecot] questions/problems virtual plugin pop3 leave copies on the server for x days then delete
by Robert Schetterer 21 Mar '11

21 Mar '11

Hi Timo, i allready asked about this , and did some fixes , but it isnt working yet ,as far i have a setup like namespace default { # type = private separator = / prefix = "" list = yes # hidden = no subscriptions = yes } namespace virtual { # type = private prefix = "virtual/" separator = / location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++:INDEX=~/virtual hidden = yes list = no subscriptions= no } namespace real { # type = private prefix = "RealMails/" separator = / list = no hidden = yes } pop3_enable_last = yes pop3_reuse_xuidl = no pop3_uidl_format = %g pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s mail_max_userip_connections = 100 mail_plugins = expire virtual quota mail_log fts fts_squat notify pop3_client_workarounds = outlook-no-nuls oe-ns-eoh RealMails/ RealMails/* -RealMails/Trash -RealMails/Trash/* -RealMails/Sent -RealMails/Sent/* -RealMails/Templates -RealMails/Templates/* -RealMails/Drafts -RealMails/Drafts/* -RealMails/Archives -RealMails/Archives/* unseen normally this works as expected some users want to use leave copies messages on the server for x days then delete via pop3 i tested this with thunderbird and looked into the maildir, it seems that the mails stay in "new" folder of the maildir after i downloaded via pop3 ( i am not sure is this expected ? , i would thought they get to cur ) thunderbird does not download this mails again ( good ), but it doesnt delete them from maildir new ever( bad ) , so the whole leave copy and delete after x days function pop3 is not working i am not quite sure if there is relation to virtual namespaces ( which i like to use in future too ) , but have to renable this feature working any idea? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 14

[Dovecot] Virtual and system users with public mailboxes
by kshaw＠kendallshaw.com 21 Mar '11

21 Mar '11

Hi, I am running dovecot 1.2.9 and postfix, and I am trying to setup a public mailbox. My thought is that there would be one system user with a sieve script to deliver messages to the public mailbox. And, I would like to give virtual users access to the mailbox. On this list, I read how you can have both system and virtual users by using passdb and static userdbs. But, I don't understand how this can be combined with namespaces, where I specify the location. For all virtual users I had: mail_location = maildir:/var/somewhere/%u/maildir/ I think I need that for virtual users and: maildir:~/Maildir for the system users. namespace private { location = ? # how do I have the location be different for system and virtual users? } namespace public { location = ? # ditto (for the index)? } Kendall

3 3

[Dovecot] maildir location
by upen 21 Mar '11

21 Mar '11

Hello, I am trying to use dovecot (v. 2.0.11) and postfix (v. 2.7.3) together. The email server is an ldap client and user's home directories on NFS server are mounted using autofs. As I understand, Maildir performance is better than mbox type, so I'd like to use Maildir instead of mbox. However, when I checked conf.d/10-mail.conf file, there is mail_location = maildir:~/.maildir already configured in it which means user's email will reside in their home directories on the NFS server rather than being on Email server's local storage where plenty of space is available. I anticipate due to NFS there will again be a performance hit . Question : Can I change mail_location for maildir to be somewhere other than ~/.maildir. ( like /var/mail/%u/Maildir, where /var/mail is local storage). There are about 200 ldap users who will be using this email server through squirrel-mail or access them through email clients. By the way, I am confused about one setting in postfix : home_mailbox = .maildir/ in main.cf . Does this really play any role? If so, which parameter should be changed and to what and with what permissions to the new directory. Hope I was able to explain, if not please let me know for more details.. Thanks, U

4 9

[Dovecot] Can't disable chroot to 'empty' dir, but need to... how to do it?
by Tim Bessie 21 Mar '11

21 Mar '11

Hello all... I've installed dovecot on my ISP's shell server, and am using SSH tunnelling so that I can retrieve my mbox-format mail from procmail-processed mailboxes on that server (normally I just ssh there and read them locally with pine, but now that I have a phone with an IMAP client, I wanted to be able to read it more easily there). The problem I'm having is, although it's working, whenever dovecot starts up, or I try to log in, it attempts to chroot to /home/mydir/dovecot/var/run/dovecot/empty (where /home/mydir/dovecot is the path to my dovecot installation). I've turned off all chroot'ing in all the config files, but it still seems to want to chroot to that one directory. The message I see in the log is: Mar 19 02:09:43 master: Info: Dovecot v2.0.11 starting up (core dumps disabled) Mar 19 02:09:44 anvil: Fatal: chroot(/home/mydir/dovecot/var/run/dovecot/empty) failed: Operation not permitted Mar 19 02:09:44 master: Error: service(anvil): command startup failed, throttling This doesn't cause a problem accessing my mail, but it DOES seem to wait 60 seconds between attempts at chroot'ing, so logins to the server take that long (until the chroot fails). Is there any way I can disable this? Again, I've followed the instructions and set 'chroot=' (empty) for all services, but that hasn't helped. - Tim

2 1

[Dovecot] Problem with pam-auth and winbind
by pk10＠ksiaznica.torun.pl 21 Mar '11

21 Mar '11

Hi I try to use windbind rule to authenticate users in dovecot login procedure. /etc/nsswitch.conf file: passwd: files winbind shadow: files winbind group: files winbind Configuration of the dovecot is follows: log_path: /var/log/dovecot/error.log info_log_path: /var/log/dovecot/info.log protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/pki/tls/certs/dovecot.pem ssl_key_file: /etc/pki/tls/private/dovecot.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/lib64/dovecot/imap-login login_executable(imap): /usr/lib64/dovecot/imap-login login_executable(pop3): /usr/lib64/dovecot/pop3-login mail_executable(default): /usr/lib64/dovecot/imap mail_executable(imap): /usr/lib64/dovecot/imap mail_executable(pop3): /usr/lib64/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib64/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/modules/pop3 auth default: mechanisms: plain login use_winbind: yes passdb: driver: pam args: dovecot userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix and configuration of the /etc/pam.d/dovecot is follows: #%PAM-1.0 auth required pam_env.so debug auth sufficient pam_winbind.so #auth sufficient pam_unix.so likeauth nullok use_first_pass auth required pam_deny.so # when I try logon from my console: # telnet komp14 110 Trying 10.10.10.38... Connected to komp.xxx.xxx (10.10.10.38). Escape character is '^]'. +OK Dovecot ready. user tt1 +OK pass xxxxxxxxx -ERR Authentication failed. quit +OK Logging out Connection closed by foreign host. Of course password is corret becouse #wbinfo -K tt1 Enter tt1's password: plaintext kerberos password authentication for [tt1] succeeded (requesting cctype: FILE) credentials were put in: FILE:/tmp/krb5cc_0 In the logs files I can find coresponding to the telnet command to dovecot: /var/log/auth.log Mar 14 09:43:22 komp14 dovecot-auth: pam_winbind(dovecot:auth): getting password (0x00000000) Mar 14 09:43:22 komp14 dovecot-auth: pam_winbind(dovecot:auth): user 'tt1' granted access /var/log/dovecot/info.log Mar 14 09:43:29 pop3-login: Info: Aborted login (auth failed, 1 attempts): user=<tt1>, method=PLAIN, rip=10.10.10.38, lip=10.10.10.38, secured I'll be apreciate for any hints. but in /var/log/dovecot/error.log we have information: Mar 14 09:43:29 auth-worker(default): Error: pam(tt1,10.10.10.38): pam_acct_mgmt() failed: Authentication failure This test was done with windbindd Version 3.5.3. When I test it on another machine with windbind Version 3.0.24 (config file are the same) authentication prosess is done properly. Any HINTS????

2 1

[Dovecot] DOVECOT TO HAVE MULTIPLE AUTHENTICATION MECHANISM FOR A PARTICULAR USER
by PARTH MONGA 21 Mar '11

21 Mar '11

Hi Friends IS IT POSSIBLE IN DOVECOT TO HAVE MULTIPLE AUTHENTICATION MECHANISM FOR A PARTICULAR USER as u provided me in the link http://wiki2.dovecot.org/Authentication/MultipleDatabases <http://wiki2.dovecot.org/Authentication/MultipleDatabases>The link is applied to all the users( system + virtual) , which increased my overhead of fetching data can i have the same for a particular user ( local + database ) auth mecahnism Thanks and Regards Parth Monga

2 1

[Dovecot] 2.0.11 segfault while can't access submission_host
by Maciej Uhlig 21 Mar '11

21 Mar '11

15-lda.conf: submission_host = 192.168.m.n:587 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.debug] lmtp(12354, user(a)us.edu.pl) Debug: mcQ1NitVh01CMAAAuqlTtQ: sieve: executing script from /mails/sieve/user(a)us.edu.pl.svbin 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.error] lmtp(12354, user(a)us.edu.pl) Error: smtp(192.168.m.n:587): RCPT TO failed: 554 5.7.1 <prac[192.168.x.y]>: Client host rejected: Access denied 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.error] master: Error: service(lmtp): child 12354 killed with signal 11 (core not dumped) in case submission_host grants access there is no segfault; mail sent ok. Regards, MU

2 1

[Dovecot] Sieve problems (not matching emails expected to match)
by Michael Welsh Duggan 21 Mar '11

21 Mar '11

I have a sieve file that reads like this: require "fileinto"; # Emacs if header :contains "List-Id" "emacs-devel.gnu.org" { fileinto "mail.emacs-devel"; } elsif header :contains "List-Id" "emacs-bidi.gnu.org" { fileinto "mail.emacs-bidi"; } ... Unfortunately the List-Id based lines don't appear to be working, although some other ones do. The attached test message does not get delivered to the mail.emacs-devel list. Why? -- Michael Welsh Duggan (md5i(a)md5i.com)

3 7

[Dovecot] dovecot authentication Local + MySQL
by PARTH MONGA 20 Mar '11

20 Mar '11

Hi Friends I am facing an issue with dovecot configuration and i am describing it in a nutshell. We have a dovecot setup under ultramonkey load balancer and in loadbalancer we have a check defined for pop service which queries mysqldatabase for a particular user name/password after every 2 minutes to check if service is live or not.. Things are fine till here . Now The catch is if somehow that particular user info(either password or username) is mistakenly changed in mysql database whole of my pop gets down beacuse load balancer cant login and that is a single point of failure in my setup . Now what i want is I want to know if there is any method that i can setup in dovecot to lookup for a user locally first and then go for a remote search for the user( ie in mysql database) So that we get the user searched locally before querying the mysql database Local + mysql database authetication i want to be in parallel with each other. Please show some light on this . Thanks and Regards Parth Monga

2 1